As a security advocate, I hope for a future where we can move away from systems that have been vulnerable by design such as Windows, Linux, iOS, and AWS. These

As a security advocate, I hope for a future where we can move away from systems that have been vulnerable by design such as Windows, Linux, iOS, and AWS. These systems were not initially designed with security in mind and have remained structurally vulnerable over time, despite attempts to bolt on security measures. To adequately address future security concerns, we need to design and verify a new computing stack that incorporates security principles specifically aimed at thwarting nation-state attackers like the NSA. Although some commercial systems are still being regularly targeted by nation-state or state-sponsored attackers, historical systems and certification processes such as the Orange Book Level A1, SCOMP, GEMSOS, and the Common Criteria SKPP have provided adequate validation against such attacks. Successful evaluations have included practical testing, formal specifications, and formal proofs of correctness as part of the validation process. Meaningful security against proven threats is only possible through the application of security principles that have demonstrated success against nation-state attackers, leading to a greenfield redesign of the entire computing stack. Attempting to bolt on security measures to existing systems is unlikely to provide meaningful security against current threats, given decades of failed attempts by large software companies via certification processes. It's important to note that while some systems, like Windows NT, were initially designed with security in mind, they still suffer from vulnerabilities. A potential solution to this issue may be to create specialized, limited-performance systems that complement lower-security systems instead of replacing them. Additionally, disconnecting servers from the internet remains a viable security measure as it is unlikely for hackers to physically infiltrate a network. Overall, our goal should be to develop a new computing stack with security designed, verified, and demonstrated to thwart nation-state attackers, rather than attempting to retrofit security measures onto existing vulnerable systems.