4 ms·
Indeed the only secure OS nowadays is Linux. Everything else should be considered compromised by default a priori.
by atmosx 13y ago
Indeed the only secure OS nowadays is Linux. Everything else should be considered compromised by default a priori.
- lotsofmangos 13y agoLinux is only secure if you secure it.
- atmosx 13y agoSure, but at least you have a say there.
- abalone 13y agoIf you need to say something to make it secure then wouldn't it also be compromised by default? Security is not a Boolean. A better question is, which OS is more secure OOTB for a given user.
- lotsofmangos 13y agoFor some users, none of them. Some users, no matter what, demand password as their password.
- matznerd 13y agoDo you know of any good guides?
- eliasmacpherson 13y agoThis seems to be a reasonable starting point: https://www.gov.uk/government/publications/end-user-devices-security-guidance-ubuntu-1204/end-user-devices-security-guidance-ubuntu-1204#satisfy https://www.gov.uk/government/publications/end-user-devices-...
- acdha 13y ago> Indeed the only secure OS nowadays is Linux Tell that to the people who generated keys on Debian. Programmers are simply not good enough at writing secure code. Full stop. If you say anything else, you're just flaunting your own unreliability as a source of security advice.
- hueving 13y agoAt least that was public and fixed. I think the point is that keys could be completely deterministic on closed source systems and there is no way to know. It's very easy to have deterministic "random" sources that pass statistical tests for randomness.
- jey 13y agoNot true. IIRC, the way the Debian bug was found was by some parties noticing a bunch of collisions of SSH public keys. (For example, Github lets you push/pull via SSH as git@github.com, and they determine your identity by the SSH key used.)
- hueving 13y agoHow is what I said not true? If the same thing as the Deb prng bug happened in a closed source system, it could sit for a couple of years exposing thousands/millions of systems and then be patched quietly to avoid embarrassment, leaving everyone vulnerable.
- rst 13y agoDon't get too comfortable with linux --- Debian had its own openssl patch fiasco with consequences that were similarly nasty. http://research.swtch.com/openssl http://research.swtch.com/openssl
- ams6110 13y agoEvery OS is compromised a priori. It's just a matter of when the compromises will be discovered. Linux has certainly had its share of flaws.
- Sanddancer 13y agoI think the various BSD folks, especially those from the OpenBSD team, would like to have a word with you. There are many other unixes out there that put a strong, probably even stronger than linux, emphasis on security.
- rdl 13y agoChromeOS is by far the safest thing out of the box, IMO.
- lstamour 13y agoUm, sure, after it updates. Assuming a similar bug isn't found there and exploited when it connects to the Internet. Since, you know, it can't do anything without a network connection. Just playing devils advocate here, I like ChromeOS too.
- Turing_Machine 13y ago"Indeed the only secure OS nowadays is Linux." You're kidding, right? http://www.debian.org/security/ http://www.debian.org/security/ Edit: There were multiple security issues in OpenSSL as recently as January. http://www.debian.org/security/2014/dsa-2833 http://www.debian.org/security/2014/dsa-2833
- sitkack 13y agoWe need to stop using OpenSSL. A new crypto stack coded in a provably secure language is sorely needed.