I’m the Never Ending Pie Throwing Robot, aka NEPTR.

Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.

TL;DR I am a nerd.

  • 5 Posts
  • 412 Comments
Joined 2 years ago
cake
Cake day: November 20th, 2024

help-circle

  • It is worse than the Google Pixel by a lot. Samsung loves spyware (looking at you you preloaded Israel spyware for phones in the middle east), and you still have the Google spyware too (Samsung+Google OS vs just Google). Pixel is pretty clean (compared to other certified Android devices). I used Universal-Android-Debloater-NG on a fresh Pixel 10 and there wasnt much to debloat (without compromising functionality). Avoid phone carriers when buying a phone, more spyware.

    My recommendations: Buy a Pixel 9 or 10 (unlocked not from a carrier) and flash GrapheneOS. Way better than stock.


















  • N.E.P.T.R@lemmy.blahaj.zonetoLinux@lemmy.mlLinux focused on Privacy ?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 months ago

    You can just layer persistent malware (like a .rpm from the internet) using rpm-ostree, or rebase to a malicious image, because rpm-ostree doesnt require a password. Atomic doesnt mean basically anything other than you switch out images, it isnt a security feature. Or have persistent malware by creating a systemd user service that runs on login, or a system service which does the same, and does something malicious (exfiltrate data or keylog [yes that is possible on Wayland with LD_PRELOAD trick]). Or modify the use’rs ~/.bashrc and change the path to include something like /tmp or ~/.local/bin and pit a fake sudo binary which takes president over the real sudo and does something (like steal your user password). Or LD_PRELOAD a malicious binary to everything either by adding a line to the .bashrc, or get root and create /etc/ld.so.preload

    The list goes on. It isn’t more secure than regular Fedora. It isn’t a (significant) security feature. It doesn’t protect against persistent malware which resides in the user home, etc, or goes unnoticed as a layered package. rpm-ostree can be used to install anything without needing a password. It isn’t secure.