3 ms·
Some OS mitigations: All: patch, encrypt, backup, track power, isolate workflow by device/VM Network: router with OSS firmware, workflow segmentation, redu
by transpute 4y ago
Some OS mitigations:
All: patch, encrypt, backup, track power, isolate workflow by device/VM
Network: router with OSS firmware, workflow segmentation, reduce wireless
iOS: (>A12 SoC) Lockdown mode, Brave w/o JS, daily reboot
iOS: periodic reinstall from DFU mode, Apple Configurator / MDM policy
macOS: hardening script based on workflow, outbound firewall
Windows: Secured Core device + SystemGuard + App Guard VM isolation
Windows: HP device + SureStart (f/w check) + SureClick (browser VMs)
Linux: vPro device + QubesOS with Anti-Evil-Maid
Linux: generic device + non-persistent LiveCD OS image
- landemva 4y agoFor MS Windows, may also want to enable core isolation / memory integrity. Sadly, vendors typically don't enable it from the factory. https://www.infotechnotes.com/2021/07/microsoft-windows-core-memory-integrity.html https://www.infotechnotes.com/2021/07/microsoft-windows-core...