Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CopperheadOS: A hardened open-source operating system based on Android

copperhead.co

Post reply on HN
Print view View original

41–50 of 105 posts

Re: CopperheadOS: A hardened open-source operating system based on Android

#41

Post by throw_away_dead »

mmanfrin wrote: post #13

"Protection from zero-days" -- how can you make a claim like this?

markcerqueira, your account is dead and has been dead for quite a while now. Since I'm on the subject, dang, you are a low-down piece of shit scumbag. This person markcerqueira has posted several times since you killed his account without the slightest clue he is just typing into the wind. If you are going to fuck somebody's account off, at least be a fucking man and tell them about it.

Re: CopperheadOS: A hardened open-source operating system based on Android

#45

Post by brianmwaters_hn »

mmanfrin wrote: post #13

"Protection from zero-days" -- how can you make a claim like this?

"Zero-day protection" is marketing-speak for what security engineers call "exploit mitigations." Of course they don't prevent exploits; they mitigate them. Pretty typical that the marketing term is an exaggeration of the more accurate engineering one.

Re: CopperheadOS: A hardened open-source operating system based on Android

#46

Post by dogma1138 »

dublinben wrote: post #33
tkinom wrote: post #14

I like to see it enable the user to logs and optionally block connections attempt base on IP/dns names with both whitelist and blacklist. And track/logs all of them per Apk.

>And track/logs all of them per Apk. Don't run programs you can't trust.

You can't trust any program. And say you do trust but verify is a much better strategy.

Re: CopperheadOS: A hardened open-source operating system based on Android

#47

Post by mtgx »

neerdowell wrote: post #27
vox_mollis wrote: post #20

Earlier quoted context omitted.

ASLR is already a part of pretty much every current operating system ( save FreeBSD-RELEASE )

Not all ASLR implementations are equal, eg. PaX's ASLR vs standard Linux KASLR.

Or Android's almost useless 32-bit ASLR (even on 64-bit platforms) for that matter:

https://googleprojectzero.blogspot.com/2015/09/stagefrighten...

https://copperhead.co/blog/2015/05/11/aslr-android-zygote

Re: CopperheadOS: A hardened open-source operating system based on Android

#49

Post by mtgx »

rinon wrote: post #15
mmanfrin wrote: post #13

"Protection from zero-days" -- how can you make a claim like this?

I'm not affiliated with Copperhead at all, but I am familiar with the sorts of techniques they are using. Exploit mitigations, such as Address Space Layout Randomization, Control-Flow Integrity, Fine-grained Randomization, etc. provide a layer of hardening to make exploitation of a source code vulnerability harder, or even not possible on the protected device. The bug (zero-day) still exists, it's just not as exploit…

They talk a bit about them in these posts:

https://copperhead.co/blog/2015/06/11/android-pax

https://copperhead.co/blog/2015/07/27/hardening-bionic

https://copperhead.co/blog/2015/05/11/aslr-android-zygote

Post reply on HN