@a53bdb@mastodon.social

· 3mo ago

Replying to

@tinker@infosec.exchange HTTPS can’t protect metadata like Client Hello and IP. (Encrypted Client Hello isn’t widely available)

1

2

0

Scanner @a53bdb@mastodon.social

· 4mo ago

Replying to

@circus_maximus@social.anoxinon.de @ilumium@eupolicy.social @Fairphone@social.weho.st This does not prevent ISPs from tracking you, it only increases the location margin of error by a few meters.

1

0

Scanner @a53bdb@mastodon.social

· 6mo ago

Replying to

@Nagaram Why not sandboxed Google Mark Up from GrapheneOS App Store.

1

0

Scanner @a53bdb@mastodon.social

· 6mo ago

@GrapheneOS@grapheneos.social Are you using LLM to scan exploits, like Project Glasswing? Now they are gifting maintainers and scanning important projects.

0

Scanner @a53bdb@mastodon.social

· 3mo ago

Replying to

@servo@floss.social Fully rusty JavaScript engine!

0

Scanner @a53bdb@mastodon.social

· 3mo ago

Replying to

@protonprivacy@mastodon.social No 3rd-party audit, give us remote attestation like how Apple give us Private Cloud Compute.

0

Scanner @a53bdb@mastodon.social

· 6mo ago

Replying to

@projetslibres_podcast@piaille.fr @fla@mastodon.social @Framasoft@framapiaf.org Every product mentioned here but GrapheneOS is highly insecure, Postmarket and Ubuntu Touch are based on GNU/Linux, which lacks of many modern hardens, such as memory safety, application sandbox and verified boot. Btw Android is a Linux distro. CalyxOS, /e/OS and iodeOS are outdated in security patches and major AOSP releases. They also contain non-free privileged Google binaries. https://privsec.dev/posts/linux/linux-insecurities/ https://xcancel.com/search?f=tweets&q=from%3AGrapheneOS+Linux

privsec.dev

Linux Insecurities

There is a common misconception among privacy communities that Linux is one of the more secure operating systems, either because it is open-source or because it is widely used in the cloud. However, this is a far cry from reality. There is already a very in-depth technical blog explaining the various security weaknesses of Linux by Madaidan, Whonix’s Security Researcher. This page will attempt to address some of the questions commonly raised in reaction to his blog post.

0

2

0