Title.

  • custard_swollower@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    2 days ago

    You don’t have classified documents, but you probably use bank in your browser running as your user. Maybe you use local mail program to send emails, also running as your user. A simple malware could add emails to be send asking your family to send you some money through online service.

    And that’s easily done because the only isolation layer is user and group.

    • nyan@sh.itjust.works
      link
      fedilink
      arrow-up
      2
      ·
      1 day ago

      Not everyone does online banking (I don’t), and it’s possible to warn your family about scams. If the information isn’t there, you don’t need to lock it down. Of course, that just moves both the security and the accompanying inconvenience off the computer and into the real world.

    • kureta@lemmy.ml
      link
      fedilink
      arrow-up
      2
      arrow-down
      4
      ·
      1 day ago

      I really don’t see how anyone can install malware on my computer. I know my way around computers enough to not do anything dumb. Of course if someone wanted, they would be able to hack my device, probably. But I am not a high value target and it would be a waste of their time and effort. In short, that’s a risk I am willing to take :)

        • kureta@lemmy.ml
          link
          fedilink
          arrow-up
          1
          arrow-down
          2
          ·
          1 day ago

          Yes. That’s fair. It’s an actual, realistic threat. But personally, I don’t provide any services to anyone and my data is periodically backed up to my NAS and cloud. But that’s me. I can imagine other scenarios that would definitely require SELinux.

          • atzanteol@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            3
            ·
            1 day ago

            Your data can be encrypted with a ransomware attack. Including your backups. Your memory searched for browser cached passwords and account names.

            You’re not with the effort? The effort is practically 0 these days. Bots written by AI don’t care. And your compute resources can be used to do more harm.

      • Yoddel_Hickory@piefed.ca
        link
        fedilink
        English
        arrow-up
        7
        ·
        1 day ago

        So you think NONE of the software you use will ever get an exploit? “Not do anything dumb” only covers some threats, not all.

        • kureta@lemmy.ml
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          1 day ago

          No. I mean why wouild anyone target me? I am behind my home router most of the time, without any exposed ports. I am not saying “SELinux is unnecessary”. The post asked for my reasons to dislike.