▲ 173 ▼ I ditched Linux for Windows 11 for one week - and found 9 big problems (www.zdnet.com) submitted 1 year ago by tomenzgg@midwest.social to c/linux@programming.dev 128 comments fedilink hide all child comments
[–] quick_snail@feddit.nl 2 points 1 year ago (5 children) AV is a joke. Best thing is ephemerality. No persistence permalink fedilink source parent hideshow 5 child comments replies: [–] fruitycoder@sh.itjust.works 6 points 1 year ago (4 children) Immutable, ephemerable, granularly permissioned, and encrypt EVERYTHING to enforce said permissions. 1000x better than software signature hunting permalink fedilink source parent hideshow 4 child comments replies: [–] rumba@lemmy.zip 2 points 1 year ago (1 child) It's all fun and games until some asshole slips something into your trusted package manager. Exploits are the deal pain permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 1 point 1 year ago Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more! permalink fedilink source parent [–] quick_snail@feddit.nl 3 points 1 year ago (1 child) You lost me at the encryption part. How does encrypting enforce permissions? permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 2 points 1 year ago Enforces confidentiality and integrity. Encryption on transports protects from man in the middle and sniffing. At rest protects evil maid exploits, which for these systems is more about preventing malicious software being swapped in place of trusted software. The same applies to encryption of links like pcie and memory with the time of transport and rest changing. permalink fedilink source parent
[–] fruitycoder@sh.itjust.works 6 points 1 year ago (4 children) Immutable, ephemerable, granularly permissioned, and encrypt EVERYTHING to enforce said permissions. 1000x better than software signature hunting permalink fedilink source parent hideshow 4 child comments replies: [–] rumba@lemmy.zip 2 points 1 year ago (1 child) It's all fun and games until some asshole slips something into your trusted package manager. Exploits are the deal pain permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 1 point 1 year ago Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more! permalink fedilink source parent [–] quick_snail@feddit.nl 3 points 1 year ago (1 child) You lost me at the encryption part. How does encrypting enforce permissions? permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 2 points 1 year ago Enforces confidentiality and integrity. Encryption on transports protects from man in the middle and sniffing. At rest protects evil maid exploits, which for these systems is more about preventing malicious software being swapped in place of trusted software. The same applies to encryption of links like pcie and memory with the time of transport and rest changing. permalink fedilink source parent
[–] rumba@lemmy.zip 2 points 1 year ago (1 child) It's all fun and games until some asshole slips something into your trusted package manager. Exploits are the deal pain permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 1 point 1 year ago Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more! permalink fedilink source parent
[–] fruitycoder@sh.itjust.works 1 point 1 year ago Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more! permalink fedilink source parent
[–] quick_snail@feddit.nl 3 points 1 year ago (1 child) You lost me at the encryption part. How does encrypting enforce permissions? permalink fedilink source parent hideshow 1 child comment replies: [–] fruitycoder@sh.itjust.works 2 points 1 year ago Enforces confidentiality and integrity. Encryption on transports protects from man in the middle and sniffing. At rest protects evil maid exploits, which for these systems is more about preventing malicious software being swapped in place of trusted software. The same applies to encryption of links like pcie and memory with the time of transport and rest changing. permalink fedilink source parent
[–] fruitycoder@sh.itjust.works 2 points 1 year ago Enforces confidentiality and integrity. Encryption on transports protects from man in the middle and sniffing. At rest protects evil maid exploits, which for these systems is more about preventing malicious software being swapped in place of trusted software. The same applies to encryption of links like pcie and memory with the time of transport and rest changing. permalink fedilink source parent