Earlier quoted context omitted.
May I present you with exhibit a) https://en.wikipedia.org/wiki/Poisoning_of_Alexander_Litvine...
How does it relate to my porn collection?
Blackmail?
Kaspersky OS
271–280 of 290 posts
Re: Kaspersky OS
#272[deleted]
Re: Kaspersky OS
#273Anybody know which microkernel they are using? I was not able to find it
Re: Kaspersky OS
#274Earlier quoted context omitted.
For the most part, they are not kernel security issues. Those get fixed. There are places where the kernel could be further hardened, but would break software. Most of the security issues that we talk about have to do with process permissions and runlevel. The runlevel of systemd and it's various components is actually my #1 security concern. Has nothing to do with the kernel.
> Those get fixed. This has been done, but poorly and only for an extremely select few things. KASLR is just one example of a poorly implemented feature that pales in comparison to alternatives (completely subsumed by features in the grsec implementation, for example, since it only randomizes things like .text addresses. Maybe some of that got fixed.) Features like kptr_restrict can easily be subverted by a number of…
Re: Kaspersky OS
#275Happy Pocky Day! (11-11)
Alas, the allusion was lost on some.
Re: Kaspersky OS
#276Earlier quoted context omitted.
Right. I'm saying give up on expecting the project to change. The project isn't for what you want it to be for and never will be. You should be shouting at companies who use it for applications where security is a must. That's where the madness lies. I use OpenBSD and so should you :)
Well that's mostly true. I guess we have to shout at the cloud companies then. ;)
http://arpnetworks.com/ offers OpenBSD VPS, and has a great service record! I strongly recommend them.
Re: Kaspersky OS
#277Earlier quoted context omitted.
Let's cautiously assume that China also does this. Open-source hardware would be great at counteracting this (and for other reasons), but it's harder than open-source software.
> Open-source hardware would be great at counteracting this (and for other reasons) This is actually the crux and to my knowledge is non-existent.
Not just open hardware, you need trustworthy fabs:
https://lwn.net/Articles/688751/
Some folks trying to do open hardware:
Re: Kaspersky OS
#278Earlier quoted context omitted.
Linux is very insecure. Maybe you have not been following the news lately.
Yes, you are right: http://theinvisiblethings.blogspot.com/2011/04/linux-securit... via https://news.ycombinator.com/item?id=11229517
That is about the X server, which is not some Linux specific component as it is also used by all the other *nixes as well.
There is Wayland which aims to solve these security aspects mentioned in the blog post, it will be shipping by default in the next Fedora release IIRC.
Re: Kaspersky OS
#279It sounds very interesting, for sure, but the announcement is a little thin on details. The OS is apparently based around a microkernel. Which sounds good, but AFAIK, microkernels are comparatively popular in the embedded space (think QNX, L4) - so that choice is not in itself revolutionary. They mention signatures, and it kind of sounds as if the OS will refuse to execute any non-signed code. Again, sounds like a go…
its thin on details but if you read it to the end he says there are more details about the os coming in a future post.
Re: Kaspersky OS
#280Earlier quoted context omitted.
Following that logic, iOS is also popular in the embedded space.
That's not the embedded space; an iPhone is a full (small) computer. iOS is quite popular, but embedded ≠ “runs on ARM”.
Things like a cash register or a media player are also considered "embedded systems", even if they use x86 CPUs. Embedded ≠ incomplete computer.