fruitycoder comments on I ditched Linux for Windows 11 for one week - and found 9 big problems

I ditched Linux for Windows 11 for one week - and found 9 big problems (www.zdnet.com)

submitted 1 year ago by tomenzgg@midwest.social to c/linux@programming.dev

128 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] fruitycoder@sh.itjust.works 6 points 1 year ago (4 children)

Immutable, ephemerable, granularly permissioned, and encrypt EVERYTHING to enforce said permissions.

1000x better than software signature hunting

parent

hideshow 4 child comments

[–] rumba@lemmy.zip 2 points 1 year ago (1 child)

It's all fun and games until some asshole slips something into your trusted package manager.

Exploits are the deal pain

parent

hideshow 1 child comment

[–] fruitycoder@sh.itjust.works 1 point 1 year ago

Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more!

parent

[–] quick_snail@feddit.nl 3 points 1 year ago (1 child)

You lost me at the encryption part. How does encrypting enforce permissions?

parent

hideshow 1 child comment

[–] fruitycoder@sh.itjust.works 2 points 1 year ago

Enforces confidentiality and integrity.

Encryption on transports protects from man in the middle and sniffing. At rest protects evil maid exploits, which for these systems is more about preventing malicious software being swapped in place of trusted software.

The same applies to encryption of links like pcie and memory with the time of transport and rest changing.

parent