Conversation

This Tweet is from a suspended account. Learn more

Replying to

The Linux kernel and other fundamentally insecure software projects designed and implemented without robustness and security as core principles. The Linux kernel is likely getting less secure over time, not more secure, and there is no feasible way to fix a problem of this scale.

Replying to

and

It is not realistic to turn the Linux kernel into something with decent security. Best effort approaches of applying as many security fixes as possible and attempting to address whole bug classes and exploit techniques are useful, but ultimately aren't a solution to the problems.

Replying to

and

Every major release of the Linux kernel makes the problem worse. The complexity and attack surface keep growing at a ridiculously fast pace. The work on hardening moves at a far slower pace than other work making the Linux kernel less secure. Applies to a lot of other projects.

Replying to

and

can it be that nsa have infiltrated and backdoors inisde ?

Replying to

and

There's an enormous amount of complexity and attack surface. No one needs a backdoor in a project completely plagued by pervasive vulnerabilities. There are so many vulnerabilities that automated fuzzing is churning out discovered vulnerabilities far faster than they get fixed...

Replying to

and

I have heard about Encro phone which uses android and seems to be very robust in security thanks to locking out everything and no one have so far suceed to breake it, but they are very expensive for normals users. dont know how they did it so secure.

This Tweet is from a suspended account. Learn more

Replying to

and

Regression, not progress.

This Tweet is from a suspended account. Learn more

Replying to

and

It's a substantial regression for privacy and security and they're dishonest about many things. By design, they've also gone out of the way to prevent crucial firmware security updates as part of playing semantic games to receive a certification of having no proprietary software.

10:45 AM · Oct 4, 2019Twitter Web App

Replying to

and

It still has all the same proprietary firmware, but they've prevented updating it, specifically so they can claim that it's effectively hardware and doesn't quality as software. It's insecure by design. The hardware choices are based around that too, not having privacy/security.

Replying to

and

Separately from the hardware, PureOS is a massive regression for privacy and security compared to mainstream mobile OS design / implementation. I don't see how it's an improvement. I don't see how it's relevant as a 'solution' to a thread on Linux kernel insecurity at all either.