Our great sponsors
-
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
The reliance on Linux's kernel (rather than something more secure) and its networking stack (implemented in C without formal verification, like the rest of the kernel), also means that the odd exploitable network bug can remain exploitable forever because of the fucked up Android ecosystem which usually leads to manufacturers dropping updates fairly soon after the release of a phone.
Also there is an open source firmware for the Pinephone's modem: https://github.com/the-modem-distro/pinephone_modem_sdk I think there are a couple closed blob components still, but it's the closest I've seen to an open source modem, and the wiring on the phone helps deter other usual baseband shenanigans.
There is also a long-term idea with Qubes OS of supporting seL4 as a secure kernel (although there are issues to fix first, some of which also make it clear just why seL4 sees few mention as far as desktops go right now - these are the practical issues I was mentioning).
Nevermind that academia has come up with far safer ways to do a few things but social norms & inertia prevent their wider adoption (well okay, it also has a barrier to entry in the education required to use it but I don't think someone with the knowledge to meaningfully contribute to an OS kernel can be considered uneducated nor unable to learn).