diff --git a/README.md b/README.md index 2eaaed6..c5d1e8c 100644 --- a/README.md +++ b/README.md @@ -19,11 +19,11 @@ secureblue applies hardening with the following goals in mind: - Increase defenses against the exploitation of both known and unknown vulnerabilities. - Avoid sacrificing usability for most use cases where possible -- Disabling metrics and data collection by default where they exist, so long as this has no security implications (for example, disabling vscode data collection by default on `dx` images) +- Disabling metrics and data collection by default where they exist, so long as this has no security implications The following are not in scope: - Anything that sacrifices security for "privacy". Fedora is already sufficiently private and "privacy" often serves as a euphemism for security theater. This is especially true when at odds with improving security. -- Anything related to "degoogling" chromium. For example, we will not be replacing hardened-chromium with Brave or ungoogled-chromium. Both of them make changes that sacrifice security for "privacy", such as enabling MV2. [why?](https://developer.chrome.com/docs/extensions/develop/migrate/improve-security) +- Anything related to "degoogling" chromium. For example, we will not be replacing [hardened-chromium](https://github.com/secureblue/hardened-chromium) with Brave or ungoogled-chromium. Both of them make changes that sacrifice security for "privacy", such as enabling MV2. [why?](https://developer.chrome.com/docs/extensions/develop/migrate/improve-security) # Hardening