What about Tails?

bartenderstoneware

when is it a solid option?
Becouse Linux has big security flaws and debian is nown for bad practics software updates.

FireRat

bartenderstoneware Tails is security hardened, it's nothing like stock Debian and comparing it to it isn't a fair comparison, the vast majority of Linux distros are debian based as far as I understand it, Ubuntu is debian based
Debian is a popular base for popular distros like Kali Linux, and because linux has big security flaws? What flaws?
when a flaw is found, people work to patch it, I would be very surprised if there is any known major security flaws that are unpatched in Linux
if you use Tails as it was intended, it's a very secure OS

Uphill1945

The security issue, which isn't that big. Doesn't really matter because u use it on a portable USB stick.
So it's good, if ur on the move and need to use Tor. U can just use it in a library.

Also, try proofreading your message. This looks like a 8 year old wrote itm

bartenderstoneware

Uphill1945

Witch difference make it, that tails is portable for security?
And if you at home, what changes?

I give my best to do better. I am sorry

Shendai

bartenderstoneware Tails is a reasonable option as you can use it on the go on a variety of devices, booting it from a USB stick. If you're looking for a really good security solution to install on dedicated hardware, you might take a look at Qubes. It's a bit cumbersome to use sometimes, but not terribly so. The process isolation it offers is about the best I've seen while still being usable:

https://www.qubes-os.org/

Cheers!

bartenderstoneware

bereft_penguin

thanks. This is good to now. I think qubes-os Shendai is the best destop alternativ to gos. But you have to dep drive and understand how to use it. Gos is much easier.

bereft_penguin

FireRat Tails doesn't do a ton of extra kernel hardening, but they do some. It uses glibc instead of musl and the default memory allocator instead of hardened malloc which isn't ideal. It supports secure boot now which is great, but it was very slow to add support for it. If you use it without the additional software option, the system is essentially immutable which is great, but that makes the os significantly less user friendly. It also uses AppArmor instead of selinux, and Firefox based browsers which don't have proper site isolation. It's probably the best way to use the tor network/browser if that's what you're looking for, but it's not really comparable to GOS in terms of security.

GrapheneOS

bereft_penguin Note that the form of secure boot it supports is meaningless since it doesn't actually verify the OS, just the kernel, without any downgrade protection and with a massive amount of trusted parties. It is not real secure boot. The OS has the usual near complete lack of application security model. A traditional distribution like Fedora uses SELinux in a way that only slightly contains certain services and has little to do with how Android makes strong sandboxes with it.

bartenderstoneware

GrapheneOS

what is the near best desktop option?

seagulf

bartenderstoneware Hello have look on openBSD

bartenderstoneware

seagulf ok :)