5 ms·
The federal government should not create its own operating system, or log system, but it should pour all of its resources into properly securing the systems it
by dannyw 6y ago
The federal government should not create its own operating system, or log system, but it should pour all of its resources into properly securing the systems it uses; weighted by its security risk. Systems running in root or hypervisor space deserve the most scrutiny and sandboxing. A JS app, less so, assuming its run in a secure sandboxed browser in a secure sandboxed operating system.
Attack vectors like Intel ME must die. (There are already DoD- mandated high-assurance flags to disable parts of ME; but megabyte blobs running on ring -1 must go completely so we can secure ring 0).
- brobdingnagians 6y agoIsn't that what the NSA is supposed to do? They failed. They seem to have a big enough budget. I don't think they are incompetent. If they stopped stockpiling vulnerabilities and instead actually tried to defend the country, we might get somewhere. I don't think it is for lack of resources, but lack of principle that we are in this problem.
- ficklepickle 6y agoThe NSA has conflicting mandates. Better to think of them as two agencies, red team and blue team. Unfortunately too much red, not enough blue.
- fma 6y agoThey don't need to create it...just have a variant of Linux. It's what the Chinese government does, and there's probably a good reason for it. However, as long as some Microsoft lobbyist can line the pockets of politicians, or politicians say it's "creating jobs" and government should not interfere w/ private sector business...it won't happen. https://en.wikipedia.org/wiki/Kylin_(operating_system) https://en.wikipedia.org/wiki/Kylin_(operating_system)