Live data from Hacker News

Kaspersky OS

eugene.kaspersky.com

81–90 of 290 posts

Re: Kaspersky OS

#82
post #37
post #6

No mention of verification like seL4 or CertiKOS?

^ i'm interested in this as well. Would it be faster to build a secure OS using similar tech from seL4/CertiKOS now than their 14 yrs?

Gernot Heiser, the leader behind seL4, thinks so: https://microkerneldude.wordpress.com/2016/06/16/verified-so...

They built infrastructure to build verified OS stuff faster/cheaper. For example, they reimplemented ext2fs for Linux.

Re: Kaspersky OS

#83

Security through obscurity. I thought we all have learned that it doesn't work. Well, good riddance, KasperskyOS! "And then there are some details that will remain for certain customers’ eyes only forever, to ward off cyber-terrorist abuses." https://eugene.kaspersky.com/2012/10/16/kl-developing-its-ow...

>Security through obscurity. I thought we all have learned that it doesn't work

We've all learned that it can't be relied upon as a sole defence.

Re: Kaspersky OS

#85

Earlier quoted context omitted.

Yet it's not widely used as embedded OS. I never saw any router with OpenBSD or web camera. The underlying problem, IMO, is people. They just don't care about security, they want to deliver working device. Also it's not clear how many vulnerabilities, used in real life attacks (like DDOS from IoT devices) are in latest Linux kernel? May be problem not with Linux, but with custom software or lack of updates.

These two statements contradict each other: > The underlying problem, IMO, is people. They just don't care about security, they want to deliver working device. > This unassuming black box is [...] designed for networks with extreme requirements for data security. You can claim that nobody will buy Kaspersky's device, or that they did poor market research. But you can't claim that they don't care about security.

You can care about security and still make totally wrong decisions.

Re: Kaspersky OS

#86

Given that there's not only software bugs, but the hardware ones, I wonder how secure it would be. I personally hate their software, but still, it would be nice to know. P.S. Security without open-sourcing is impossible. Although, dunno how for other countries, but here in Russia some people have a different point of view. Some people believe that “opensource is insecure by design, because everyone can see the code”.…

> Security without open-sourcing is impossible

is just as documented an assertion as

> opensource is insecure by design

The two are completely orthogonal.

Re: Kaspersky OS

#87
post #40
post #22

Earlier quoted context omitted.

L4 is popular in embedded space? Can you provide some examples?

https://en.wikipedia.org/wiki/L4_microkernel_family#Commerci... > OKL4 shipments exceeded 1.5 billion in early 2012, mostly on Qualcomm wireless modem chips. Other deployments include automotive infotainment systems. > Apple mobile application processors beginning with the A7 contain a Secure Enclave coprocessor running an L4 operating system. This implies that L4 is now shipping on all iOS devices, the total shipmen…

So we have 2-3 very niche deployments. Does it really make L4 popular in embedded systems?

Also, OKL4, specially the version claimed to run on qualcomm is very different from the original L4 (I say claimed since multiple attempts to reverse engineer qualcomm baseband firmware showed no traces of OKL4)

edit: if you think this is incorrect please provide a valid counterpoint. downvoting a post this way to hide its presence is not a valid response.

Re: Kaspersky OS

#88
Only use it if you want to send all of your information to FSB (modern KGB). Evgeniy Kasperskiy has friends in government, police and FSB. He also is apologet of state surveillance.

Re: Kaspersky OS

#89

Only use it if you want to send all of your information to FSB (modern KGB). Evgeniy Kasperskiy has friends in government, police and FSB. He also is apologet of state surveillance.

Iran and other SCO countries will be customers since they are friendly with Russia. I wonder if they are running it on Elbrus chips. That would make it extra super secure and Russian.

Re: Kaspersky OS

#90

Only use it if you want to send all of your information to FSB (modern KGB). Evgeniy Kasperskiy has friends in government, police and FSB. He also is apologet of state surveillance.

Any reliable source? This is quite the accusation
Post reply on HN