Windows Vista had lot of changes to the kernel. Windows 7 relaxed security features introduced in Vista. But nothing changed after that. They have been slapping ugly UI on top of existing kernel.
PullPantsUnsworn
This is on my todo list. I use Docker-compose for it's simplicity, but Docker is a security nightmare. If you are not careful, it would expose your Nextcloud instance to the whole world. Podman integrates nicely with firewalld which gives me zone based rules. Can't wait to do this. But I will give sometime to let Quadlet get stabilized and popular.
Is no one aware of Fedora Media Writer? It's FOSS and the most trustworthy ISO burning software in existence. It's only issue is that its named as if it is written only for producing Fedora bootable media. It works for everything.
GrapheneOS is both secure and private. It also supports hardware based attestation (No need for SafetyNet). It's just that mediocre people who develop these apps do not wish to support freedom respecting platforms.
How would Signal help with zero days?
They block 3rd party tools like yt-dlp, NewPipe etc from residential IP addresses. Probably they deployed solutions to differentiate normal YouTube session on their website and automated tools.
This time they started blocking both residential IP addresses and VPNs to discourage yt-dlp, NewPipe etc. From what I noticed, you need to use official website to load cookies and maintain that session to continue watching videos. It's irritating. I hope they fuck themselves and go out of business.
Don't bother videos against GrapheneOS. The lead of GrapheneOS has autism and he lacks social skills. This creates endless loop of hate talk between some YouTubers and GrapheneOS.
As a technical project, GOS is far superior and it is the most secure OS on the planet right now. The lead of the GOS has developed hardened malloc and various other security solutions that is now baked into GrapheneOS. So I would ask people to enjoy the project rather than stimulating more fuss against the project.
I agree SimpleX is superior protocol. I use it to share text between my devices. But I'm little bit hesitant to recommend it to friends and family because it is VC funded. Until SimpleX becomes non-profit or alternative implementation of SimpleX protocol starts showing up, I won't use it as my main IM.
This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.
I think it depends on maintainer of the device. For me personally, LineageOS has broken a basic workflow like having Signal voice/video call. None of the IM apps are able to pick audio from microphone on my device (and various other models as well) due to a bug in LineageOS for almost 6 months. I regret installing it.
I think Tor Project is implementing a better version of Linux package. The current Flatpak one is more of a Python wrapper to download the browser rather than an actual browser. It was developed by an independent open source developer later took over by Tor Project since it was very popular. Hopefully it will be fixed in future.