Subgraph OS: Adversary resistant computing platform
1–10 of 88 posts
Re: Subgraph OS: Adversary resistant computing platform
#2"Adversary-resistant" is an extremely bold claim. While the architecture does look promising, and (at least intuitively) reasonably-designed, I think it's a bit too soon to make a call about adversary resistance.
Re: Subgraph OS: Adversary resistant computing platform
#3They try to avoid saying it, but it's mostly a patched Linux.
Re: Subgraph OS: Adversary resistant computing platform
#4They try to avoid saying it, but it's mostly a patched Linux.
What else would you expect it to be?
Re: Subgraph OS: Adversary resistant computing platform
#5They try to avoid saying it, but it's mostly a patched Linux.
Hi, I'm an SGOS dev. I don't know what you mean by "mostly a patched Linux", but here's what Subgraph OS is so far -- and it's a young project: we have a kernel patched with grsec/PaX/RAP, but we have also developed our own application sandbox framework (namespaces + limited fs + seccomp bpf whitelisting), app firewall, event monitoring subsystem, usb disable on desktop lock (based on grsec), etc. Here's a walkthrough of our sandbox framework:
Re: Subgraph OS: Adversary resistant computing platform
#6Re: Subgraph OS: Adversary resistant computing platform
#7"Adversary-resistant" is an extremely bold claim. While the architecture does look promising, and (at least intuitively) reasonably-designed, I think it's a bit too soon to make a call about adversary resistance.
The word "resistant" is qualitative so they are not really making a bold claim.
Re: Subgraph OS: Adversary resistant computing platform
#8They try to avoid saying it, but it's mostly a patched Linux.
Hi, I'm an SGOS dev. I don't know what you mean by "mostly a patched Linux", but here's what Subgraph OS is so far -- and it's a young project: we have a kernel patched with grsec/PaX/RAP, but we have also developed our own application sandbox framework (namespaces + limited fs + seccomp bpf whitelisting), app firewall, event monitoring subsystem, usb disable on desktop lock (based on grsec), etc. Here's a walkthroug…
No updated iso since June. Any plans for an update soon?
Also, shouldn't you just use Wayland for the stable 1.0 release? Why even bother with X11 at this point?
Do you plan to support flatpaks as well?
Re: Subgraph OS: Adversary resistant computing platform
#9Re: Subgraph OS: Adversary resistant computing platform
#10They try to avoid saying it, but it's mostly a patched Linux.
Hi, I'm an SGOS dev. I don't know what you mean by "mostly a patched Linux", but here's what Subgraph OS is so far -- and it's a young project: we have a kernel patched with grsec/PaX/RAP, but we have also developed our own application sandbox framework (namespaces + limited fs + seccomp bpf whitelisting), app firewall, event monitoring subsystem, usb disable on desktop lock (based on grsec), etc. Here's a walkthroug…
Hi! Why did you choose the name Subgraph OS?