From c35691a09196f0ff6983b55b31d8eff1fdb53bb6 Mon Sep 17 00:00:00 2001 From: qoijjj <129108030+qoijjj@users.noreply.github.com> Date: Sun, 14 Jul 2024 23:27:18 -0700 Subject: [PATCH] docs: clarify scope (#319) --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 7b1cc12..a15a0e6 100644 --- a/README.md +++ b/README.md @@ -15,10 +15,11 @@ This repo uses [BlueBuild](https://blue-build.org/) to generate hardened operati - Increase defenses against the exploitation of both known and unknown vulnerabilities. - Avoid sacrificing usability for most use cases where possible +- Disabling metrics and data collection where they exist, so long as this has no security implications (for example, making vscode data collection opt-in instead of opt-out on `dx` images) -The following are not in scope for this project: -- Anything related to "privacy", since Fedora is already sufficiently private and "privacy" often serves as a euphemism for security theater. This is especially true when at odds with improving security. -- Anything related to "degoogling" chromium. For example, we will not be replacing chromium with Brave or ungoogled-chromium. +The following are not in scope: +- Anything that sacrifices security for "privacy". Fedora is already sufficiently private and "privacy" often serves as a euphemism for security theater. This is especially true when at odds with improving security. +- Anything related to "degoogling" chromium. For example, we will not be replacing chromium with Brave or ungoogled-chromium. Both of them make changes that sacrifice security for "privacy", such as enabling MV2. ## What