Hacker News new | ask | show | jobs
by fsflover 754 days ago
Security doesn’t equal to giving away the full control to a third party. By this logic, Linux servers are insecure.

Also you can’t install Linux on Android due to the closed specs and proprietary derivers. Not even on Google Pixels advertized by the GrapheneOS crowd.
1 comments
sshine 754 days ago
> Security doesn’t equal to giving away the full control to a third party.

Allowing the user to install and run any software does result in a less secure system.

Also if that software is run in a sandboxed way (but allowing installation from anywhere).

Because software could impersonate and trick the user into giving away sensitive information, such as credit card data, or authentication to act on behalf of the user.

> By this logic, Linux servers are insecure.

Yes, if we go with there being one single thing called "Linux servers", they are insecure by the same measurement.

I would differentiate between mobile software that targets end users and server software that targets professionals.

With server operating systems, you provide secure/convenient defaults (with Linux distros often leaning towards convenient), but you always provide the systems administrator the ability to `curl ... | sudo sh`. You also say it is the system administrator's fault if they ever do that and something goes bad. If you are a platform owner with millions of users, you cannot claim security when you allow for any code to be run, sandboxed or not.

link
curt15 753 days ago
>Because software could impersonate and trick the user into giving away sensitive information, such as credit card data, or authentication to act on behalf of the user.

Emails and phishing websites are much more widely used than standalone software for tricking users into giving away personal information because 1) compared to building an application in Java or Objective C it's much easier to craft emails and fake websites and 2) everyone is already browsing the web.

link
fsflover 754 days ago
> Allowing the user to install and run any software does result in a less secure system.

> Because software could impersonate and trick the user into giving away sensitive information

“Allowing direct democracy makes a country unsafe, because the citizens could be tricked by propaganda”

link
sshine 753 days ago
That quote would apply perfectly if Apple were a country.
link