For my phone, I use Graphene OS. What would be the best desktop Linux option to match the level of security and privacy that GOS provides?

  • interdimensionalmeme@lemmy.ml
    link
    fedilink
    arrow-up
    9
    ·
    1 year ago

    Tails in proxmox in tails running on pure ramdrive system with no longterm storage, cpu, bios, mac serials overwritten with FFFFFFF, TPM chip desoldered or lasered off CPU, connected to TOR viato mullvad paid with crypto, through VPN running left behind sanitized device hidden in a library, through second sanitized vpn device connected to private insecure wifi in poor residential area with no cameras, after abolishing the state

  • marmalade@sh.itjust.works
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    1 year ago

    Depends on what you mean for security/privacy. You can use Tails or whatever and have everything encrypted and then just be logging into your Facebook account on Chrome without an ad blocker.

    Most Linux distros are secure enough for the average person who isn’t being targeted by some crazy state level actor. If you’re particularly concerned stick with a distro that has a security team like Debian. As for privacy that has more to do with the sites you browse and have accounts with but obviously avoid Google (I just use Firefox instead of Chrome) use an adblocker like ublock origin, along with maybe something like decentraleyes.

    • Synthead@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      Chrome phones home a lot. It’s not a good idea to use it if you care about privacy. Firefox even has metrics enabled by default, although you can turn them off.

  • Radioactive Radio@lemm.ee
    link
    fedilink
    arrow-up
    3
    ·
    1 year ago

    Try Tails, you don’t even gotta install it. Keep it on a flash drive and just plug it into your computer whenever you wanna use it.

  • 👁️👄👁️@lemm.ee
    link
    fedilink
    arrow-up
    2
    ·
    1 year ago

    Pretty much any distro that isn’t Ubuntu. Are you asking for privacy or security? Those are very different.

    For security, I’d stick to more complete distros like Fedora instead of more diy distros like NixOS or Arch. They’re great to learn and tinker with, but distros like Fedora have security experts adding mitigations and security stuff in the distro by default, whereas most users of Arch or something would have to manually look up those things and keep up to date on the latest security. So basically, none of them lol.

    Using more hardcore security distros like QubesOS is not very realistic as a daily driver. You’ll see Linux nerds name drop it and claim they know what they’re talking about, but none of them will actually dailt drive it because it’s a very painful experience. Just stick with flatpaks as much as you can for pretty solid security.

        • gobbling871@lemmy.world
          link
          fedilink
          arrow-up
          0
          arrow-down
          1
          ·
          1 year ago

          My question is simple: Which of these security features are not enabled/present in Ubuntu that give Fedora an advantage?

          SELinux has a functional equivalent called Apparmor that is also enabled out of the box in most distros.

          • 👁️👄👁️@lemm.ee
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Selinux is more secure then app armor, but more difficult to use. Ubuntu is also pretty secure, I’m just not as familiar with it. I mentioned it for the privacy but, since it used to have some Amazon bloat crapped bundled and telemetry built in.

      • I_like_cats@lemmy.one
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Ubuntu is bad privacy-wise because it has opt-out telemetry. The telemetry is not very invasive though and I wouldn’t really call it a privacy risk. There are other reasons to prefer other distros over Ubuntu though

        • gobbling871@lemmy.world
          link
          fedilink
          arrow-up
          0
          arrow-down
          1
          ·
          1 year ago

          Nope. GP explicitly mentioned security experts that Fedora employs and other security stuff that Fedora apparently has an advantage on over other distros. I wonder if they knew in particular what these advantages are because that got me curious.

          • Shareni@programming.dev
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            Read their comment again. The first paragraph is about privacy and Ubuntu is only mentioned at that point. Fedora’s default security is only compared to nix and arch.

            • gobbling871@lemmy.world
              link
              fedilink
              arrow-up
              0
              arrow-down
              1
              ·
              1 year ago

              I used Ubuntu as an example for argument’s sake not as a defence for Ubuntu’s privacy/security features.

  • Hizeh@hizeh.com
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    How does Void Linux rate on the security and privacy front compared to the top recommendations in this thread?

  • StimulatedYorkie@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Nix OS, Guix or Vanilla OS for sandboxing I guess. But basically everything but Ubuntu is pretty good for privacy, it’s a big part of free software philosophy.

  • unceme@lemmy.one
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Everyone is recommending Tails but I feel like that’s a lot more intense security and privacy wise than GrapheneOS, since Tails runs in a live environment only.

  • milo128@lemm.ee
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    my impression is that grapheneos is only private and secure compared to regular android. likewise, any linux distro is going to be secure and private when compared to windows.

    • chockblock@lemmy.worldOP
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Sure, but graphene OS just has some really thoughtful privacy focused features, and I’m looking for a Linux distro that would have similar features if there is such a thing.

      One thing I love about graphene is by default, the MAC address is randomized for every single connection. Also, the Bluetooth can be set to time out and turn off after a certain period of not being used.

    • CjkOvPDwQW@lemmy.pt
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Anything thats not made in America.

      What kind of point is that ? Are there any problem with chinese distro ?

      • Shareni@programming.dev
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Chinese distros have backdoors for the Chinese government, intel and amd processors have backdoors for the US government

          • Shareni@programming.dev
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            Read up on the intel management engine. It’s an extra chip that was included in pretty much every intel CPU since 2008. It’s got pretty scary potential, but no alphabet agency has yet declassified their info on it (think CIA denying any involvement in shipping and selling heroin, but then declassifying documents that proved they shipped heroin in coffins and bodies of dead soldiers).

            • 👁️👄👁️@lemm.ee
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              You’re pretty deep in the tinfoil hat zone now. CPU proprietary black box does not mean the NSA are trying to infiltrate your broken arch setup so they can let their FBI lizard agents steal ur hentai.

          • Shareni@programming.dev
            link
            fedilink
            arrow-up
            0
            ·
            edit-2
            1 year ago

            I don’t know of any specific proof, but just look at Deepin’s EULA. You need to accept that pretty much all data that could be gathered will be gathered, even data like daily log in times. Stuff like that makes me believe stories that the CCP is forcing companies to add backdoors. Especially when you consider that Chinese hackers are analyzing and publishing findings on NSA Linux backdoors, and releasing new backdoor malware every few months.

          • Michael Rose@emacs.ch
            link
            fedilink
            arrow-up
            0
            arrow-down
            1
            ·
            1 year ago

            @CjkOvPDwQW China is a repressive surveillance state with a keen interest in spying on their own people who has conducted incredibly broad state sponsored industrial espionage.

            Draw your own conclusions on whether such products are safe.