What is more secure: Securblue or MacOS?

Eumenia

de0u It takes Google multiple years to convince Android vendors to roll out major security infrastructure features. I don't think it's true that all Android phones have an independent hardware security processor, wrapped storage keys, etc. So far GrapheneOS runs only on Pixels exactly because Google does not have the sort of platform control that Apple does.

Apple can do with their Hardware what they want and Google can do the same.
Their is no difference in this aspect

Eumenia

rumblenek macOS is better

https://www.msn.com/en-us/technology/software/one-man-s-apple-account-got-locked-after-he-bought-a-compromised-gift-card-losing-him-20-years-of-digital-life/ar-AA1SoeOB

Linux

argante Applications are well isolated, which is still not well developed in Linux.

Flatpak and easy tooling for it like Flatseal is out since years so what do you mean with "its not well developed" ?

Bimmy I remember having heard some rumours about a google project for desktop/laptop with android.

Do you mean ChromeOS?

Eumenia https://www.msn.com/en-us/technology/software/one-man-s-apple-account-got-locked-after-he-bought-a-compromised-gift-card-losing-him-20-years-of-digital-life/ar-AA1SoeOB

"With software there are two possibilities, either the user controls the program or the program controls the users."
Richard Stallman

mar2112

What is more secure car make A or car make B? It doesn't matter if you leave the doors unlocked and the key in the ignition.

DeletedUser606

DeletedUser594 A burner account is not alternatively solution. This is also unrelated to the security between hardware and the operating system.

Elgoog

Linux Do you mean ChromeOS?

Or maybe Aluminium OS

Eumenia

Linux "With software there are two possibilities, either the user controls the program or the program controls the users."
Richard Stallman

RMS is based.
Is this quote from his Ted talk?
https://www.youtube.com/watch?v=Ag1AKIl_2GM

Linux

Eumenia RMS is based.
Is this quote from his Ted talk?
https://www.youtube.com/watch?v=Ag1AKIl_2GM

Yes

rootless

MacOS has better hardware security and you will actually get firmware updates. Software compatibility is also far better on MacOS as compared to Secureblue. NymVPN for example does not have an rpm package currently, which means you can't layer it on Secureblue.

I would recommend you read these and make your own descision:

This has also a lot of good information, but it's already kind of outdated. The Latitute laptops got replaced with "Dell", "Dell pro", etc. And most of them (vpro models) don't meet HSI-4.

Vpro Thinkpads meet HSI-4 more often, but they cost so much that it makes Macbook pricing look reasonable.

I'm currently waiting for the a18 budget macbook, which if it's priced as rumored, would be the cheapest secure device I can afford.

Eumenia

rootless MacOS has better hardware security and you will actually get firmware updates. Software compatibility is also far better on MacOS as compared to Secureblue. NymVPN for example does not have an rpm package currently, which means you can't layer it on Secureblue.

Never heard of this VPN.
But for basically everything you need, you can probably find a Flatpak

Psyonico

rootless NymVPN for example does not have an rpm package currently, which means you can't layer it on Secureblue

Since secureblue is immutable, you'd be better off using a flatpak than an rpm.

CGG

I wont say too much... i was using qubesOS all the time... when i changed to secureblue and saw all options and protections available and have achieve a military grade security even despite qubes and sblue having different security approached, forget about other systems... i have been hacked in all mac versions, hardware, macos you can imagine.. forget IT. Get secureblue, make it worth. You will need to have a lot of customizations for sure but you will create an almost grapheneOS like (without mte but close to it) system... not like graphene os but almost like... there is no such desktop system like secureblue if well configured. Its not out of box indeed... i dont know no other system that can achieve a so high level of security like secureblue. Secureblue just lack virtualization like qubesos. Period. Best system ever but this doesnt mean FRIENDLY.

NetRunner88

CGG
I am curious how you achieve that and on what hardware.. Cause there is no strong protection on secureblue (I use it as a console)

NoahRaketic

CGG "military-grade security" is not a meaningful term, and secureblue is considerably less secure than both Android and GrapheneOS. The devs themselves do not claim to be close to the security of Android.

There is virtualization on secureblue; you can get all the packages for using QEMU/KVM with a ujust command.

NetRunner88

Psyonico
Not layering is not mandatory
1)Flatpak
2)Toolbox/Podman
3)Layering

There is no problems with layering one or two apps

CGG

NetRunner88 Sure... i can provide you all things i did to reduce attack surface, prevent at maximum 0days and exploits, enforcing selinux policies, enabling hardened malloc for everything, using yubikeys to prevent run0 to run as root and many other tweaks in kernel, in bios, sysctl hardening, tweaks in total memory encryption, dns, firewall,etc that i did... but, i will need some time to complile everything because i took more than a week to finish it... if you don't mind let me prepare it and send to you. But be aware, there is no proccess in BUILDING strong protections but preventing and reducing risks and surface areas.

« Previous Page