For my phone, I use Graphene OS. What would be the best desktop Linux option to match the level of security and privacy that GOS provides?
Tails in proxmox in tails running on pure ramdrive system with no longterm storage, cpu, bios, mac serials overwritten with FFFFFFF, TPM chip desoldered or lasered off CPU, connected to TOR viato mullvad paid with crypto, through VPN running left behind sanitized device hidden in a library, through second sanitized vpn device connected to private insecure wifi in poor residential area with no cameras, after abolishing the state
deleted by creator
deleted by creator
Tails, Qubes, or Whonix
Nix OS, Guix or Vanilla OS for sandboxing I guess. But basically everything but Ubuntu is pretty good for privacy, it’s a big part of free software philosophy.
deleted by creator
I mean, neither Microsoft nor Apple were stupid enough to sell user data to Amazon. I’d love to see how the Linux community would’ve responded to that, because I doubt they’d have the same “oh but it’s opt in now, so it’s ok” reaction.
Qubes on Whonix
Depends on what you mean for security/privacy. You can use Tails or whatever and have everything encrypted and then just be logging into your Facebook account on Chrome without an ad blocker.
Most Linux distros are secure enough for the average person who isn’t being targeted by some crazy state level actor. If you’re particularly concerned stick with a distro that has a security team like Debian. As for privacy that has more to do with the sites you browse and have accounts with but obviously avoid Google (I just use Firefox instead of Chrome) use an adblocker like ublock origin, along with maybe something like decentraleyes.
Chrome phones home a lot. It’s not a good idea to use it if you care about privacy. Firefox even has metrics enabled by default, although you can turn them off.
Pretty much any distro that isn’t Ubuntu. Are you asking for privacy or security? Those are very different.
For security, I’d stick to more complete distros like Fedora instead of more diy distros like NixOS or Arch. They’re great to learn and tinker with, but distros like Fedora have security experts adding mitigations and security stuff in the distro by default, whereas most users of Arch or something would have to manually look up those things and keep up to date on the latest security. So basically, none of them lol.
Using more hardcore security distros like QubesOS is not very realistic as a daily driver. You’ll see Linux nerds name drop it and claim they know what they’re talking about, but none of them will actually dailt drive it because it’s a very painful experience. Just stick with flatpaks as much as you can for pretty solid security.
What security stuff/mitigations are added on Fedora that are not on Ubuntu?
Looks like they do add quite a bit security features. Having SELinux installed and working out of the box being the biggest. https://fedoraproject.org/wiki/Security_Features
My question is simple: Which of these security features are not enabled/present in Ubuntu that give Fedora an advantage?
SELinux has a functional equivalent called Apparmor that is also enabled out of the box in most distros.
Selinux is more secure then app armor, but more difficult to use. Ubuntu is also pretty secure, I’m just not as familiar with it. I mentioned it for the privacy but, since it used to have some Amazon bloat crapped bundled and telemetry built in.
I have nothing against your personal preferences. But maybe compare today’s Ubuntu vs Fedora. It would be a much more fair comparison.
I see zero reason to use Ubuntu over Fedora
deleted by creator
I think they meant privacy. Windonical doesn’t have a good track record on that front…
Nope. GP explicitly mentioned security experts that Fedora employs and other security stuff that Fedora apparently has an advantage on over other distros. I wonder if they knew in particular what these advantages are because that got me curious.
Read their comment again. The first paragraph is about privacy and Ubuntu is only mentioned at that point. Fedora’s default security is only compared to nix and arch.
I used Ubuntu as an example for argument’s sake not as a defence for Ubuntu’s privacy/security features.