CopperheadOS is a proprietary fork of legacy GrapheneOS code with most of the legacy hardening dropped due to lack of proper maintenance and it includes no substantial hardening. It also includes tracking in the updater to enforce their subscription fees (which is an exorbitant amount of money by the way, $150 for 3 months).
It's now a scam project focused on attacking GrapheneOS and harassing developers, as evident throughout this very thread with their usage of sockpuppet accounts.
> Daniel saying Mozilla is using 4chan posts to attack him.
And of course you don't show any context at all.
> Daniel stating he feels Brave has nefarious intentions.
The DRM is a valid issue. Brave is not impervious to all criticism.
> Daniel Micay attacking the Tor Project for considering use of his hardened allocator
That's not what happened at all. He never attacked them for that. He debunked the nonsense that Tom Ritter was posting. The Tor Project never even considered using hardened_malloc either. I suggested that Whonix use hardened_malloc and so HulaHoop (another Whonix developer) asked if this could affect web browser fingerprinting on the mailing list. No Tor Project developer made any indication that they wanted to include hardened_malloc - quite the opposite.
The post does mention X's security issues. We are discussing switching to wayland but XFCE doesn't support it yet.
If we don't switch to wayland, I might add X sandboxing via a nested X server such as Xpra to sandbox-app-launcher. It's already on the TODO list.
> flatpak for sandoxing
Flatpak is not a good sandbox. It fully trusts the applications and the permissions are far too vague to be meaningful. For example, many applications come with "filesystem=home" which means read-write access to the entire home directory so to escape, they just need to write to .bashrc.
We're using sandbox-app-launcher instead.
> The way it's written looks more like marketing than anything else
https://twitter.com/realmadaidan/status/1322225614636593158