• 5 Posts
  • 45 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle


  • ChromeOS though isn’t actually suitable for running servers like Windows and Linux are. It can’t do nearly the same number of things

    ChromeOS literally is Linux so obviously it can do everything that Linux can. It is effectively a SUPERSET of Linux

    Second all kernel mode code lives on the filesystem.

    Now you are being ridiculous. We are talking about code than runs in the kernel but is not part of any official kernel module including device drivers.

    How did you think it worked?

    What I thought is that you had common sense.

    You keep showing me again and again that you don’t understand the world of computers and modern IT infrastructure. Do you even have any qualifications or work experience in IT?

    Dude you are the person who thinks that the cloudstrike code running in the kernel that is neither part of the kernel nor part of any official kernel device driver code is somehow equivelent to the actual kernel. You are also the person who made the completely nonsensical claim that ChromeOS Linux “can’t do nearly the same things” of Linux. So GTFO with the snarky shit, because I’m the one wondering how you can be so confused about basic stuff.

    Do you even have any qualifications or work experience in IT?

    I’ve been using the internet since 1983. How bout you? LMFAO.

    There is also none of this VMs inside VMs stuff you were talking about.

    Because you didn’t do enough research. My Chrome OS comes with an outer VM, an inner VM, the heavily locked down user mode, and the kernel mode. My Linux programs run in the outer VM by default. I would have to turn on developer mode just to get to the actual user mode.


  • Sure I’ve got lots of evidence.

    https://www.security.org/antivirus/chromebooks/

    [There’s no question that, when it comes to viruses and other forms of malware, Chromebooks are safe. How safe? Well, the website CVE Details1 lists just 55 vulnerabilities for Chrome OS. Compare that to 1,111 vulnerabilities for Windows 10, and a whopping 2,212 for Mac’s OS X; with five percent as many vulnerabilities as its closest competitor, it’s a pretty simple matter to declare Chromebook the safest option…there’s no question that Chromebooks are among the most secure computers you can buy]

    55 vulnerabiilites for Chrome OS vs 1111 vulnerabilities for Windows. Huge difference.

    Rather the file the module reads was updated and replaced with a corrupted version that causes the module to crash when it tries to read it.

    Yes it was a ridiculous system to have kernel mode code on the filesystem. Even if a bad pointer didn’t crash the system a hacker could have put in their own code. And yes such a terrible security system would have affected Linux too. But with ChromeOS, the system is already secure. No need to use a terrible security system like Cloudstrike in the first place.





  • blaming Microsoft

    I’m not blaming Microsoft. I am blaming companies for using Microsoft for critical systems.

    Also, recommending an overglorified web browser baked into an OS which can only run web and Android applications to run critical infrastructure is downright laughable,

    You not understanding that ChromeOS is a highly secure Linux computer is that can run any Linux program is downright laughable ignorance.

    ESPECIALLY when Google are known for their downright nonexistent customer support.

    Their software is way too widely used to provide you with free customer support. Microsoft is no different.


  • This isn’t a hacking attempt.

    No but it is the result of trying to stop hacking attempts.

    They don’t use VMs for system security.

    They do. A major reason they use them is to make ChromeOS way more secure than windows.

    Linux isn’t actually niche in the slightest

    It’s fragmented. There is no single version

    Stop talking about shit you don’t understand and learn about it instead.

    Stop being a jackass and learn to communicate in civilized fashion.

    with group policy or things like S mode you can restrict who can run what executables.

    Companies don’t run windows in S mode and every OS has group security.

    None of the “Windows is more common” stuff is actually valid in this case.

    When I learned that companies are actually letting Cloudstrike download the equivalent of KERNAL MODE code into their critical systems I was dumbfounded. Who could have possibly thought that was a good idea? This was absolutely a disaster that was just waiting to happen.

    However, if it happened on Linux, it could have been immediately bypassed.

    https://www.phoronix.com/news/systemd-Auto-Boot-Assessment


  • It’s not that Linux can’t have security problems. I still remember the very first internet virus in 1987 that traveled thru Unix machines. But Windows is the worst OS for critical systems precisely because it is the most common OS. Anything is better than windows. Linux, MacOS, or even an old IBM mainframe OS and those awful tn3270 terminals. Also, Chrome OS in particular has VMs instead of other VMs. It really is designed to be much more secure than Windows.

    It’s more like a bug in critical software that just happens to be security related.

    And so the cure is the same as the disease. Or actually worse in this case. The very fact that systems were constantly updated was itself the problem rather than the solution to the problem. How did nobody realize this was going to happen sooner or later?

    Linux had also been affected by Crowdstrike before.

    I’m guessing Crowdstrike issues a lot more Windows updates than Linux updates?


  • I got a new HVAC and smart thermostat about a week ago. After researching, I decided to hook thermostat to wifi and download app. Mostly all the app does is duplicate the same functionality that the thermostat controls have. I find it handy to have a remote control for the thermostat.

    OTOH I decided not to hook up a new washing machine to wifi and use app. It duplicated the functionality of the appliance controls also, but there was no point in having remove controls for a washing machine.

    The critical thing is that an appliance needs to be fully functional without needing to use wifi and certainly not a phone app.