itpol VS madaidans-insecurities.github.io

Not long before malware becomes more prevalent on Linux now that more people are using it. But Linux is not some magic bullet that stops all malware, you have to practice good opsec and harden your environment too. How to do this is outside the scope of my comment. If you are concerned though there are these resources:

󠁃󠁯󠁮󠁶󠁥󠁲󠁴󠀠󠁁󠁓󠁃󠁉󠁉󠀠󠁴󠁥󠁸󠁴󠀠󠁴󠁯󠀠󠁕󠁮󠁩󠁣󠁯󠁤󠁥󠀠󠁔󠁡󠁧󠁳󠀠󠁷󠁨󠁩󠁣󠁨󠀠󠁡󠁲󠁥󠀠󠁩󠁮󠁶󠁩󠁳󠁩󠁢󠁬󠁥󠀠󠁩󠁮󠀠󠁭󠁯󠁳󠁴󠀠󠁕󠁉󠀠󠁥󠁬󠁥󠁭󠁥󠁮󠁴󠁳󠀮󠁃󠁨󠁥󠁣󠁫󠀠󠁩󠁦󠀠󠁡󠀠󠁴󠁥󠁸󠁴󠀠󠁨󠁡󠁳󠀠󠁨󠁩󠁤󠁤󠁥󠁮󠀠󠁕󠁮󠁩󠁣󠁯󠁤󠁥󠀠󠁔󠁡󠁧󠁳󠀠󠁥󠁭󠁢󠁥󠁤󠁤󠁥󠁤󠀠󠁷󠁩󠁴󠁨󠀠󠁄󠁥󠁣󠁯󠁤󠁥󠀮󠀠https://github.com/lfit/itpol/blob/master/linux-workstation-...

https://madaidans-insecurities.github.io/linux.html

Between the Arch wiki on Security and this link alone, there's enough inspiration to harden some stuff.

Linux hardening checklist Workstation security checklist

for workstation hardening, check out -- https://github.com/lfit/itpol/blob/master/linux-workstation-security.md

now, if you want a hardened workstation you should check out this -- https://github.com/lfit/itpol/blob/master/linux-workstation-security.md -- mind you, some of the data on here, like browsers and extensions/etc are out-dated but the general premise is pretty solid.

The Linux workstation security checklist would be a better recommendation. While also not targeted at home users, it gives at least some priority levels.

They make detailed arguments for their position, for example, https://madaidans-insecurities.github.io/

The people who maintain the Linux security is fine also make arguments, but those arguments are much less convincing, such as the frequently-made argument that the fact that Linux's source code is readily available at no cost to anyone who wants to search it for security holes means that Linux's security will tend to be better than the security of systems whose source code is held secret.

Recommend reading the Linux sections on https://madaidans-insecurities.github.io/

That's somewhat telling and can be used to "track" you, consider reading on non-Reddit privsec learning resources like Privacy Guides itself which you already know, PrivSec.Dev, madaidan's Insecurities and the like.

Considering the offer is legitimate (something I won't comment on), you shouldn't do most of these things, in my opinion. Don't mess with what'll be other people's phones. Sell them Pixels pre-installed with GrapheneOS and print papers with Auditor attestation instructions and maybe a few QR codes directing them to relevant documentation and privsec learning resources, such as the GrapheneOS documentation first and foremost, Privacy Guides, madaidan's Insecurities, PrivSec.dev, Seirdy's Home, Wonderfall's Lab, etc...

i never used it myself. only learned about it from security experts like madaidan or hardening guides like this one.

For some excellent advice on security and privacy based on thoroughly researched technical concerns rather than speculation or blind trust in your corporation of choice, see here: https://madaidans-insecurities.github.io/