81·
7 days agoI wouldn’t stress much. It would take a targeted attack to have actually compromised your phone. It is alright.
N.E.P.T.R
I’m the Never Ending Pie Throwing Robot, aka NEPTR.
Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.
TL;DR I am a nerd.
- 0 Posts
- 6 Comments
Joined 1 month ago
Cake day: November 20th, 2024
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Docker is good when combined with gVisor runtime for better isolation.
What is gVisor?
gVisor is an application kernel, written in memory safe Golang, that emulates most system calls and massively reduces the attack surface of the kernel. This is important since the host and guest share the same kernel, and Docker runs rootful. Root inside a Docker container is the same as root on the host, as long as a sandbox escape is used. This could arise if a container image requires unsafe permissions like Docker socket access. gVisor protects against privilege escalation by only using root at the start and never handing root over to the guest.
Sydbox OCI runtime is also cool and faster than gVisor (both are quick)
It removes more proprietary binary blobs and I dont care about gapps.
I heard that he was a scammer or pseudo privacy expert from other comments. I wouldn’t recommend that phone. If you care about the privacy or security of your device, use DivestOS with a supported Pixel/OnePlus, or GrapheneOS with a Pixel. Only buy the phone new if you are super paranoid of some zero-day vulnerability being used on you. I recommend swappa.com because they have quality control, returns, and good prices for used devices (you can even get mint quality devices).
Comparison of Android ROMs: https://eylenburg.github.io/android_comparison.htm
iodeOS has been behind on security updates often (still better security against unsophisticated attacks than Ubuntu but not a good ROM): https://divestos.org/pages/patch_history
My recommendation is GOS if you care about out of box experience and using gapps, DivestOS if you care about degoogling and removal of proprietary code. Both are hardened.
No, it is not a proxy for another search index/engine.
Yes, you can add Brave search to your other browsers.