Community knowledge: Best reads on security and privacy

Ganipote

I'm starting this discussion to share the best sources of quality information to learn about privacy and security.
I think it's important to do this to offer better community advice.

I'll edit this thread over time: I'll add the best suggestions, remove misleading and poor quality sources. I want it to be community knowledge, so share yours.
For now, I will based it on BeerIsGood guides.

-Get to know GrapheneOS better : Features, Usage, Security and Privacy questions, Attestation and the unofficial wiki of GrapheneOS

-Security of Android : Android official blog, Blog of Madaidan about Security of Android, the unofficial wiki of Android, How Secure is your Android Keystore Authentication by WithSecure a business based on cyber security, Gyroscope can be used to recognize speech by Stanford Security Research, About android in Google Security Blog , PrivSec collection of post about Android

-Information given directly by Daniel Micay, the founder of GrapheneOS : Why Root/Magisk is a security nightmare, Wipping the data, Unique identifier, Cellebrite vs GrapheneOS, Why F-Droid is not recommended, how encryption works, storage permission

-Hardening OS : Hardening for Windows 11 by Beerisgood, hardening for MacOS by Beerisgood, hardening of Linux by Madaidan

-Great security and privacy resources : Blog of Madaidan by a security researcher who works on Whonix, PrivSec wich is made by a group of enthusiastic individuals looking to provide practical privacy and security advice for the end user. They are people with technical knowledge and work in the field, Google security blog (Google have bad privacy, but great security), Privacy Guides a non-profit collective operated entirely by volunteer team members and contributors.

[deleted]

Ganipote I'll edit this thread over time

You can't edit your posts after a few minutes on this forum

Ganipote

https://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/

“Linus doesn’t take security seriously; it’s yet another concern in his mind, and he’s surrounded himself with people who share those views. There are a lot of kernel developers who do really care about security, but they’re not the ones making the calls.” - by Daniel Micay, the founder of GrapheneOS

Ganipote

Two interesting YouTube video by the channel Google Open Source :

How Protected KVM provides isolation primitive for guest VMs

At the heart of the Android Virtualization Framework introduced in Android 13 is an extension to the Linux kernel's KVM hypervisor known as Protected KVM (pKVM). This extension provides a robust isolation primitive for guest virtual machines. The extension is built entirely from open source software, working with the upstream communities to enable hardware-accelerated virtualization at scale. Watch along as Will discusses the design of pKVM and how the hypervisor benefits from its tight integration with the Linux kernel, along with an update on the upstreaming status, and remaining challenges for complete integration with mainline.

The Linux Kernel in AOSP

At the foundation of every Android device is the Android (Linux) Kernel. Watch along as Matthias discusses the development process that allows his team to assure stability, flexibility, and compatibility for the Generic Kernel Image (GKI) based on the Android Common Kernel (ACK), a single kernel suitable for all devices.

Ganipote

By GrapheneOS :

Our recommend for most people tends to be a random 6 digit PIN for regular use and then put particularly sensitive things in a secondary user with a 7-8 random diceware word passphrase.

An attacker can keep the device for years and eventually exploit a vulnerability found in the future to bypass secure element throttling.