SecuMiKern
While that’s true for mitigations, one system can be more secure than another by design
Things like an OS that’s designed with sandboxing, more clean codebase that’s auditable, permissions, … in mind is more secure than an OS that later adds them as an afterthought
Or at least if added later they should be done properly
iOS and Android are way more secure than Linux (And no Android isn’t just linux) cause they were designed in much later era with better security practices in mind
Even MacOS and Windows’s security are objectively better than linux’s even though they started with same security mindset, the problem is they are not open source
Secure from malicious app programmers (Unlike what other people think open source doesn’t equate safe, even reputable essential ones can be malicious like recent xz one)
Secure from remote attacks and botnets (Only reason this haven’t been a larger problem is because linux desktop users are too few to worth targeting, though that may change with rise of steam deck)
Physical integrity guarantee and protection against manufacturer while nice are very hard to get in current climate
proper sandboxing and permissions, auditable code and small attack surface as opposed to spaghetti code glued together that’s impossible to audit, regardless of threat model those things are needed, even linux is moving in that direction (Though very slowly and very half baked like with flatpaks)
No good solution but easiest thing to do is System monitor resource usage (CPU, GPU, Memory) check it when programs are closed and system is idle
Captcha is probably unrelated to botnet, it can be from your browser (most privacy focused browsers like LibreWolf, Brave, Hardened Firefox get this captcha problem) or your VPN/proxy if you use one
I am not native English speaker so sorry for misunderstandment
I didn’t say it’s overall better
I said even though on base level OpenBSD is much more clean and secure than Linux it lacks or lags behind Linux in adding mitigations for security vulnerabilities
And there are far less eyes on OpenBSD so many vulnerabilities don’t get discovered in first place
Any software can be malicious even essential ones just look at recent Xz vulnerability (And it was discovered by sheer chance), OS should have systems in place like proper sandboxing, permissions (Not half baked one like flatpak) …
Any threat model tbh, your linux computer can be remotely used for botnet and you may not even find out (unlikely as linux is not targeted as much as windows simply because too few desktop linux users) Linux desktop’s only advantage currently is obscurity but that may not remain the case with rise of popularity in Steam Deck
I meant Sony and Micorsoft were selling Playstation and Xbox at loss, profiting from games instead
Nintendo doesn’t seem to be selling their Hardware at loss so probably profits from hardware, actually considering their hardware (which is weaker than even midrange android phones) they probably sell at good profit margin
Server security is not completely same as desktop one, Linux kernel is spaghetti code with very large attack surface, only reason it’s not exploited more is Linux Desktop is not as lucrative target as Windows, Proper sandboxing doesn’t exist and is half assed, Qubes is the only one properly doing sandboxing on Linux
OpenBSD and Qubes seems best solution so far but neither are ideal
Qubes doesn’t address Linux’s security problems it just sandbox/virtualize them and it requires beefy hardware
Fedora Silver Blue doesn’t do anything special really it’s your normal linux distro just immutable and relies on flatpaks (On another note Flatpaks sandbox are easy to break and most programs don’t use it properly)
