this post was submitted on 10 Dec 2025
65 points (88.2% liked)

Linux

60366 readers
582 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS
 

TL;DR - About switching from Linux Mint to Qubes OS from among various other options that try to provide security out-of-the-box (also discussed: OpenBSD, SculptOS, Ghaf, GrapheneOS)

you are viewing a single comment's thread
view the rest of the comments
[–] non_burglar@lemmy.world 11 points 1 week ago (6 children)

OK, I'll bite... How exactly?

[–] sudoer777@lemmy.ml 2 points 1 week ago* (last edited 1 week ago) (2 children)

One example is on GrapheneOS, programs can't touch system files due to no root access, and they also can't access data files for other programs.

[–] non_burglar@lemmy.world 1 points 1 week ago (1 children)

Sure, but op chose to follow a link. You can be sandboxed to high heaven and still get pwned if you make choices like that. Discord is particularly rife with this.

[–] sudoer777@lemmy.ml 2 points 1 week ago* (last edited 1 week ago)

Yes, but I never said you won't get pwned. I said that it would limit how it could be done and what damage it could do.

For instance, if you click a link and download something shitty, it can't just steal your auth tokens on GrapheneOS because all of that is isolated to only the program that uses them. Meanwhile on Windows/Linux there are tons of Python scripts that do that. It would take extra steps on GrapheneOS for someone to use social engineering to hack someone's Discord/Bank/etc account, which could be enough to prevent it for some people.

load more comments (3 replies)