• 0 Posts
  • 94 Comments
Joined 1 year ago
cake
Cake day: February 17th, 2025

help-circle
  • …without it you cant properly secure the phone.

    My understanding is that a locked bootloader helps protect against evil maid attacks and bootloader-level malware persistence. I find this a security risk that I would absolutely take for Google independence. “Properly secure” is subjective.

    GrapheneOS do decide what phones they support. It is exactly their choice to support only Google Pixels, rather than taking a security hit for hardware independence (whether you agree with the decision or not).











  • High memory usage isn’t a problem by itself.

    The issue is when it’s used inefficiently or for useless purposes. An unoptimized application takes 500MB of extra memory and that is 500MB that cannot be used for read/write caching nor another application, and 500MB closer to an OOM situation.

    In theory, an application can suffer from issues of underutilization of memory, just as one that over-utilizes memory. In practice, I find that lower-than-expected memory use is a much more positive indicator of an optimization-focused project than one that uses more memory than expected.

    In the meantime, it’s not sitting there, unused and useless.

    If your system uses caching, then “usused” memory may not be so. Memory used for caching is also cleanly “Available” for use if needed. This is not the case with the 500MB of extra memory a process might decide to capture. Of course this is complicated further with swap (I wouldn’t use it).






  • Do you lock your door at night? Why? Anyone could just use a fireman’s axe and open it. Or they could just drive through your living room and steal everything.

    For kernel-level anti-cheats its quite simple. Those in opposition to kernel-level anti-cheats likely view locking a door as a small task with minimal downsides, which could reasonably deter an opportunistic criminal, or buy you time to escape with your life or call the police.

    They also likely view kernel-level anti-cheats as, for the benefits they provide, having too large of downsides. (providing a third-party company kernel-level access via a closed-source program)

    If you’re concerned about privacy just dual boot windows in a separate SSD to play games and use Linux and Graphene OS.

    In another thread in this comment section I mention UEFI rootkits and firmware implants (kernel-level access is strong starting point for this). Your solutions do not address these issues, which could be important to someone. (Depending on their threat-model)