Hello,
I’ve heard that Ubuntu may not fully prioritize user privacy and collects telemetry data. Could you please clarify:
Is this accurate? Are there Linux distributions that place a stronger emphasis on privacy?
Thank you 🙏🏼
Listen, anything is better than Windows. That being said, Ubuntu is about as close as Linux gets to Windows in data collection and robbing control from the user. It’s the only distro I recommend everyone to NOT use.
Ubuntu is about as close as Linux gets to Windows in data collection in data collection and robbing control from the user.
While Ubuntu does have a worse track record in both departments compared to any other distro, it’s worth noting that neither data collection nor the patronising of users are close to Windows levels. (Your comment might be understood like that.)
Imagine drinking a fancy cocktail - that’s most Linux distros.
Ubuntu is like that, but with a few sprinkles of piss mixed in.
Windows is mostly piss these days, but with a cherry and a little umbrella, and it’s what everyone’s having, so it can’t be that bad - right?If windows is 100% nightmare, Ubuntu is like 5 to 10% that. While other distros are 0 to 1 percent.
There is one caveat that worth mentioning, one can try (and probably achieve) disable many the privacy invasive treats in Ubuntu getting to the 0 or 1% that other distros provide out of the box where with Windows there isn’t much workaround.
Honestly, Ubuntu is not even close bad to how many framed here in terms of privacy and can be more secure than Mint that still pushes Cinnamon X11 to users.
Once you get Snap out and telemetry disabled Ubuntu is in the game.
I do like an explanation comparing the pissedy of things
Not exactly anything there is still redstaros and astra linux
Agreed, do not use Ubuntu.
But it’s still miles away from Window… and technically you can get closer with a Linux System… e.g. Google Android.
Gets hardened, privacy focussed distro.
Logs into Google on browser.
I do use Firefox for browser and for YouTube, I use an external client that manages a local account without Google (for favorites, and watched history in example). But… I can’t resist and want to comment on videos or reply to other comments. Therefore I log into my Google account in Firefox just to comment… The YouTube account has history disabled and some other stuff that Google would collect, and therefore cripple my options and features to use YouTube in the browser.
I am fully aware of the irony to log into Google, while trying to be privacy aware. But the comments… man the comments get me all the time. It’s part of the fun watching YouTube videos to me.
I’m not criticising you. Privacy should be an informed choice. Data exchange should be via consent and transparent.
You seem to know what you are trading and why, so more power to you!
Thanks. :-)
tbh you’ll likely find yourself better using anything else that isn’t Ubuntu. Debian is cool if you’re okay with your desktop environment being a bit behind (as for apps you can use flatpaks for the most up to the date, it also is good if you need most app support as it can install .deb) or arch if you want to learn a bit more about how your little penguin lives inside that metal box of yours! Fedora I am not sure as I think they implement or will implement telemetry.
One last thing is that not all telemetry is bad. if you take a look at KDE’s initial prompt for telemetry it is anonymous and is used to simply try and make the DE better
As a user added: Fedora does opt-in telemetry which is the same as Debian’s where if you want you can enable it but by default it’s disabled
Even Debian has popcon as an opt in. I can see why collecting data about hardware and package choices is useful to Ubuntu. I didn’t think they collected any personally identifying information.
I found a homemade Ubuntu 8.04 installer disk the other day, simpler times. It had it’s place.
I will never forgive the amazon partnership with the desktop search bar.
After user outrage Fedora settled on opt-in telemetry instead of opt-out. So unless you actively choose to send telemetry you’re not gonna do it with Fedora.
https://fedoraproject.org/wiki/Changes/Metrics
(old proposal, the opt-out one: https://fedoraproject.org/wiki/Changes/Telemetry )
Depends what your threat model is, if you absolutely want no data about you whatsoever possibly leaving the device because it endangers you then Tails OS is probably the most private distro out there as others have mentioned, but it’s use case is specifically to be used for very private stuff and working through a live USB stick so that nothing remains on the device.
For the average person any distro is a huge improvement privacy wise over Windows, though Ubuntu does have ties to Amazon since it’s owned by Canonical, so if there’s any Linux distro you should avoid for privacy reasons it’s Ubuntu. It’s still incomparably private relative to Windows, but you have nothing to lose and a lot to gain by choosing other alternatives, Mint is just as easy and user friendly as Ubuntu without most of the bloat and Amazon crap.
Privacy or Security? Security would be something like Fedora Atomic. Privacy (and security?) QubesOS , TailsOS But as Linux is FOSS, you can just take any distro and form it as you like.
Fedora Atomic is not more secure than traditional Fedora. That is a misconception.
Qubes, Kicksecure/Whonix, and Secureblue are basically the only major security focused Linux distros.
Tails is focused on anonymity, not simply privacy (same with Whonix). Tails is not really security hardened.
Why is Fedora atomic not more secure? It is literally immutable. Which kills the concept of persistent malware, unless they archive a complex exploit chain to gain root and install a malicious package and then reboot into the new iso, which is easier said then done.
You can just layer persistent malware (like a .rpm from the internet) using rpm-ostree, or rebase to a malicious image, because rpm-ostree doesnt require a password. Atomic doesnt mean basically anything other than you switch out images, it isnt a security feature. Or have persistent malware by creating a systemd user service that runs on login, or a system service which does the same, and does something malicious (exfiltrate data or keylog [yes that is possible on Wayland with LD_PRELOAD trick]). Or modify the use’rs ~/.bashrc and change the path to include something like /tmp or ~/.local/bin and pit a fake sudo binary which takes president over the real sudo and does something (like steal your user password). Or LD_PRELOAD a malicious binary to everything either by adding a line to the .bashrc, or get root and create /etc/ld.so.preload
The list goes on. It isn’t more secure than regular Fedora. It isn’t a (significant) security feature. It doesn’t protect against persistent malware which resides in the user home, etc, or goes unnoticed as a layered package. rpm-ostree can be used to install anything without needing a password. It isn’t secure.
If you use Debian, even the simple “package popularity contest” is a default “no” in the installer.
That said, your personal conception of privacy is gonna be different than lots of other people’s.
Debian will include new systemd age-verification. A way to avoid it is Devuan Linux, which is basically Debian but with sysvinit instead of sytemd.
Ahh, let me be clear: systemd is bad. Age verification is maybe bad.
The age verification added to systemd is a field in the userdb json that the administrator can set. It’s intended to comply with California law that requires the device attest when queried.
If that isn’t clear enough: it’s a plaintext field in a text document set by the administrator.
If that still isn’t clear enough: the California law lets you lie and the systemd implementation is designed to accommodate that allowance.
Op should use devuan to not have systemd though, that shit sucks.
Ubuntu has a history together with amazon, sending search queries in the application starter for example. There are better distros out there, like Mint.
it’s been over a decade since canonical ended that little ‘experiment’ with azn.
To answer your second question specifically:
Are there Linux distributions that place a stronger emphasis on privacy?
Yes, luckily most distros do.
If you just want decent privacy, then honestly most of the popular distros are better than Ubuntu.
There are dozens of articles about why Ubuntu has drawn criticism, here is an example: https://abh.ai/blog/why-ubuntu-and-canonical-drew-criticism-many-members-foss-community
I would recommend you read some of them to make up your own mind, and don’t rely too much on opinions here. Privacy is a broad term, only you know what is important to you and where you would draw the line.
Hannah Montana Linux
As others said Ubuntu got kinda scummy. I always send people that are new or have decision paralysis here
I’d like to suggest Linux Mint: It allows you to use guides and software written for Ubuntu but disables all the scummy stuff.
Yes, it’s accurate. Although I enjoyed using Ubuntu (iirc started with 5.10 or 6.10) due to it’s friendliness to newcomers, Canonical is on the business side of Linux distributions (think Redhat).
Debian (which Ubuntu is derived from), is privacy friendly and leans heavily towards the open source ethos imo.
With that being said there’s tons of options out there. Distrowatch is a great place to window shop before grabbing a live .iso :)
It’s important to understand that many distro’s are usually based off of another.
We got Debian based distros such as Debian, Ubuntu, PopOS, KaliLinux, LinuxMint and so on, Arch based distros such as CachyOS, SteamOS, Arch and so on and Fedora based distros such as Fedora, Nobara, Bazzite.
Once you learn one of these base distros switching to another within its field is easy as majority of shell commands will be identical.
Cachy is Arch, Bazzite is Fedora.
My bad, thought I could do it by memory.
Minor error here, Cachy is arch BTW 😂
It has been corrected. Apologies.
Where the nix btw bros at.
Linux distributions are miles ahead in terms of privacy compared to other commercial operating systems, so just use one, if you want even more privacy, I guess there are distributions that route all your internet through tor.
What about RedStarOS ;-)
