<story><title>Frustrated dev drops three zero-day vulns affecting Apple iOS 15</title><url>https://www.theregister.com/2021/09/24/apple_zeroday/</url></story><parent_chain><item><author>JonathanBeuys</author><text>I am always shocked when I find out how lax security is handled even by parties of whom I thought they would take security very serious.&lt;p&gt;Did you know that you can bypass the lockscreen on Linux Mint by plugging in an external monitor?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;linuxmint&amp;#x2F;cinnamon&amp;#x2F;issues&amp;#x2F;9123&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;linuxmint&amp;#x2F;cinnamon&amp;#x2F;issues&amp;#x2F;9123&lt;/a&gt;&lt;p&gt;Did you know that when you use Chromium on an up-to-date Debian stable, it has over 100 unpatched security holes?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;security-tracker.debian.org&amp;#x2F;tracker&amp;#x2F;status&amp;#x2F;release&amp;#x2F;stable&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;security-tracker.debian.org&amp;#x2F;tracker&amp;#x2F;status&amp;#x2F;release&amp;#x2F;s...&lt;/a&gt;&lt;p&gt;If you cannot trust Debian - whom can you trust? Any suggestions which distro takes security serious?</text></item></parent_chain><comment><author>WastingMyTime89</author><text>&amp;gt; If you cannot trust Debian - whom can you trust?&lt;p&gt;When did Debian become a model of trustworthiness regarding software security?&lt;p&gt;We are talking about one of the distributions applying the most patches to its repository for reasons which are often dubious and with little general oversight.&lt;p&gt;Debian is famous for being run by volunteers but it has always been kind of dodgy. We are talking about the distribution which made it&amp;#x27;s version of openssl vulnerable by breaking its random generator in order to silence a Valgrind warning.</text></comment>
<story><title>Frustrated dev drops three zero-day vulns affecting Apple iOS 15</title><url>https://www.theregister.com/2021/09/24/apple_zeroday/</url></story><parent_chain><item><author>JonathanBeuys</author><text>I am always shocked when I find out how lax security is handled even by parties of whom I thought they would take security very serious.&lt;p&gt;Did you know that you can bypass the lockscreen on Linux Mint by plugging in an external monitor?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;linuxmint&amp;#x2F;cinnamon&amp;#x2F;issues&amp;#x2F;9123&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;linuxmint&amp;#x2F;cinnamon&amp;#x2F;issues&amp;#x2F;9123&lt;/a&gt;&lt;p&gt;Did you know that when you use Chromium on an up-to-date Debian stable, it has over 100 unpatched security holes?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;security-tracker.debian.org&amp;#x2F;tracker&amp;#x2F;status&amp;#x2F;release&amp;#x2F;stable&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;security-tracker.debian.org&amp;#x2F;tracker&amp;#x2F;status&amp;#x2F;release&amp;#x2F;s...&lt;/a&gt;&lt;p&gt;If you cannot trust Debian - whom can you trust? Any suggestions which distro takes security serious?</text></item></parent_chain><comment><author>dharmab</author><text>Foxboron on the Arch team is very serious about security. Check out the Security page on the archwiki for guidance on building your own hardened Arch system.</text></comment>