https://www.kicksecure.com/wiki/Hardened_Malloc

I've had it working for Debian, the only caveat is that sysvinit does not support drop-in configuration snippets so the relevant scripts under /etc/init.d/ would have to be edited manually to add the LD_PRELOAD environmental variable. The changes would probably be over-written during package upgrades, or perhaps APT will ask if the file should be kept or replaced with the new version, not sure which.

EDIT: https://www.kicksecure.com/wiki/Debian ← that shows how to add the Kicksecure repositories, use with care and backup beforehand.

https://wiki.archlinux.org/title/security

Ive never (touch wood) had security issues using Linux based distros. Windows years ago i did with all sorts of viruses when i visited certain websites out of curiosity.

madaidan has some legit insights. Whonix is an interesting distro. Used it for research awhile back.

Further reading: https://www.reddit.com/r/linux/comments … about_the/

It is upsetting that businesses treat privacy as a commodity, not a right in and of itself. The early web had so much promise...

https://madaidans-insecurities.github.io/

The author is a security researcher and a Whonix developer so I think they actually know what they're talking about. Some good advice there.

The sad truth is that Windows is probably the most secure desktop operating system at the moment and Chrome is the most secure browser. Both are exceptionally poor in respect of privacy so I suppose that's the price to be paid.

The tl;dr is that I recently eavesdropped a long conversation/FUD about "linux is the most secure OS blah blah..." Their claims were without support. It makes me cringe when people peddle misinformation about Linux-based operating systems (and when they call Linux an operating system...).

Still, it got the gears turning, and I realized, it's been a hot minute since I did anything in Linux that wasn't for professional end.

So, I wanted to open a topic for people to share facts, thoughts, or other info about Linux or Devuan security. The topic is open-ended. My interest is more to have a conversation about things we would not expect from Linux security. I know for a fact that our "frequent flyers" here bring a wealth of experience from a variety of backgrounds.

P.S.: It's been a minute since I posted here. I write software now and am working in the CyS field. I'll actually be working with an IoT/mobile security research team over the summer. Life is good.