There's some comments being made in the Matrix room for privacytools.io development that I find very worrying.
> User Freedom is generally a bug when it comes to a very secure and private system.
https://matrix.to/#/!sXWVibplXtlVuHPaGh:aragon.sh/$Id-zKjHK3jU1JhMTwUlR1qBsitXyVi9SFp9rV6eJPUE
This was part of an argument for Android being more secure than mobile GNU/Linux. In the 'general' PTIO Matrix room, there were folks arguing that Windows is more secure than GNU/Linux!?! Either a) these folks are trolling, b) they're impressionable teenagers who've been sold a bridge, or c) I'm about to have 20 years worth of assumptions about OS security turned upside down. Hold me, I'm scared.
I guess the best you can draw from such comparisons is convergence - just "steal" the good ideas and migrate them into other platforms.
Android has strong app confinement? Cool, let's implement it on desktop/server Linux and BSD boxes too.
Windows has strong system integrity protection (this is actually much better than any other OS)? Cool, let's implement something like that on Android, Linux, BSD etc.
https://en.wikipedia.org/wiki/Mandatory_Integrity_Control
Yes, not many people know about it :)
@kravietz OK, this looks like a version of Object Capabilities :
https://librelounge.org/episodes/episode-13-object-capabilities-with-kate-sills.html
Since source code for this Windows implementation isn't available, do we just have to trust MS that it works as advertised, or is there independent confirmation?
There seems to have been a project for Linux called Capsicum but seems to have been abandoned in 2017 :( https://github.com/google/capsicum-linux
The more I read about Capsicum, the more I'm intrigued - it was kind of abandoned for Linux, but then reappeared in #freebsd 9!
@kravietz
> Windows has strong system integrity protection (this is actually much better than any other OS)
Huh?