overview for SecuMiKern

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 5 points 7 months ago* (last edited 7 months ago) (3 children)

While that's true for mitigations, one system can be more secure than another by design

Things like an OS that's designed with sandboxing, more clean codebase that's auditable, permissions, ... in mind is more secure than an OS that later adds them as an afterthought

Or at least if added later they should be done properly

iOS and Android are way more secure than Linux (And no Android isn't just linux) cause they were designed in much later era with better security practices in mind

Even MacOS and Windows's security are objectively better than linux's even though they started with same security mindset, the problem is they are not open source

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago

Secure from malicious app programmers (Unlike what other people think open source doesn't equate safe, even reputable essential ones can be malicious like recent xz one)

Secure from remote attacks and botnets (Only reason this haven't been a larger problem is because linux desktop users are too few to worth targeting, though that may change with rise of steam deck)

Physical integrity guarantee and protection against manufacturer while nice are very hard to get in current climate

proper sandboxing and permissions, auditable code and small attack surface as opposed to spaghetti code glued together that's impossible to audit, regardless of threat model those things are needed, even linux is moving in that direction (Though very slowly and very half baked like with flatpaks)

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 4 points 7 months ago* (last edited 7 months ago)

No good solution but easiest thing to do is System monitor resource usage (CPU, GPU, Memory) check it when programs are closed and system is idle

Captcha is probably unrelated to botnet, it can be from your browser (most privacy focused browsers like LibreWolf, Brave, Hardened Firefox get this captcha problem) or your VPN/proxy if you use one

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago* (last edited 7 months ago)

I am not native English speaker so sorry for misunderstandment

I didn't say it's overall better

I said even though on base level OpenBSD is much more clean and secure than Linux it lacks or lags behind Linux in adding mitigations for security vulnerabilities

And there are far less eyes on OpenBSD so many vulnerabilities don't get discovered in first place

Any software can be malicious even essential ones just look at recent Xz vulnerability (And it was discovered by sheer chance), OS should have systems in place like proper sandboxing, permissions (Not half baked one like flatpak) ...

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago (4 children)

Any threat model tbh, your linux computer can be remotely used for botnet and you may not even find out (unlikely as linux is not targeted as much as windows simply because too few desktop linux users) Linux desktop's only advantage currently is obscurity but that may not remain the case with rise of popularity in Steam Deck

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago

I meant Sony and Micorsoft were selling Playstation and Xbox at loss, profiting from games instead

Nintendo doesn't seem to be selling their Hardware at loss so probably profits from hardware, actually considering their hardware (which is weaker than even midrange android phones) they probably sell at good profit margin

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] -4 points 7 months ago

Linux servers exploit is different than Linux desktop exploit and 1000% different than exploiting Android

It's general misconception that Android is just Linux but it's not, it's like saying Linux is just GCC compiler

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago (3 children)

It's not, GrapheneOS is hardened Android check their site for more information

And android is not just linux + SELinux there is much more to it

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago

Both Kernel and userland

Android runs a linux kernel yes but is very far from normal linux distros, it almost alleviate all of problems with linux

Hurd kernel's concept seems solid but it doesn't look like actively developed?

OpenBSD might be best choice as you say at least until Genode or something similar become useable

As I mentioned in post Kicksecure plans to harden Linux but is not there yet, For virtualization and containerization there is QubesOS but still that doesn't seem ideal and it requires some beefy hardware

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago (1 children)

Their basic premise seems solid, but is it actively developed? it seems to go through long periods of inactivity

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago

Their basic premise seems solid, but is it actively developed? it seems to go through long periods of inactivity

13

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago by [email protected] to c/[email protected]

15 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

-6

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

3 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

1

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

2 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

43

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

14 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

22

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

44 comments fedilink

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here