← Back to context

Comment by mittensc

12 hours ago

> Also, running a program is the most basic functionality of an OS and you suggest that I need to write my own sandbox to do this because it is not included with Linux. Maybe that is why this year still is not the year of Linux on desktop.

I'm saying other OSs are worse for sandboxing.

How would you achieve what you want on MacOS or Windows? (or others?), what do you think goes on behind the scenes?

I would set up a VM if i were that paranoid btw. Qemu, docker, deploy the container to it, vnc or gpu access.

Also, one question for you, since you brought up microphone, how do you defend from Microsoft/Google/Apple deciding to spy on you and access the microphone? (secret court order or who knows why in the future)

It doesn't matter how bad is Windows or Mac because I do not use them.

Apple might have something made for the government. They are very cooperative and routinely remove VPN apps from the repository at the request of Russian government, probably they will happily cooperate with US government as well.

> how do you defend from Microsoft/Google/Apple deciding to spy on you

My smartphone is in airplane mode since purchase and doesn't have a SIM card. I am considering options to port an open-souce firmware like Lineage OS, patch proprietary firmware or make mix of both. However to do this I need a realistic emulator that cannot be easily detected and that emulates at least some of phone hardware so that I can see what the programs try to do and where they try to connect to. Obviously there will be no Google services and similar software, mostly open-source apps from F-Droid.

As for computer, I use Linux so I guess I am relatively safe.

  • Allright, so since you're using Linux and alternatives are worse... what's there to complain about?

    why not put that effort into improving stuff / finding solutions?