[ / / / / / / / / / / / / / ] [ dir / animu / arepa / asmr / ausneets / pawsru / sonyeon / vg / wx ][Options][ watchlist ]

/tech/ - Technology

You can now write text to your AI-generated image at https://aiproto.com It is currently free to use for Proto members.
Email
Comment *
File
Select/drop/paste files here
Password (Randomized for file and post deletion; you may also set your own.)
* = required field[▶ Show post options & limits]
Confused? See the FAQ.
Expand all images

File (hide): 5b5ae9adb23f016⋯.png (381 B, 250x167, 250:167, 250px-Flag_of_France.svg.png) (h) (u)

[–]

 No.974312>>974418 >>974514 [Watch Thread][Show All Posts]

https://www.zdnet.com/article/french-cyber-security-agency-open-sources-clip-os-a-security-hardened-os/

>The National Cybersecurity Agency of France, also known as ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information), has open-sourced CLIP OS

>NSSI described CLIP OS as a "Linux-based operating system [that] incorporates a set of security mechanisms that give it a very high level of resistance to malicious code and allow it to protect sensitive information."

>The agency says CLIP OS uses a "partitioning mechanisms" that allows the OS to separate public and sensitive data into two "totally isolated" software environments.

From that description it sounds similar to Qubes, considering this is what French spooks (supposedly) use internally it could be nteresting.

Probably just a coincidence this happened in the midst of all the drama over the Linux CoC(k) being shoved down everyone's throat.

 No.974313>>974318 >>974355

File (hide): 79e0696f994748d⋯.jpg (48.66 KB, 495x480, 33:32, 1438365305439.jpg) (h) (u)

>It's just linux hardened


 No.974314>>974328 >>974423 >>975126

french back doors are better then American back doors. right guys?


 No.974318>>974325 >>974331

kikehub links:

https://github.com/CLIPOS-Archive (old v4)

https://github.com/CLIPOS (v5, currently in alpha)

>CLIP OS is based on Gentoo Hardened

However:

>>974313

<also has systemdick


 No.974325

>>974318

>gentoo hardened

>with systemd

Absolute trash


 No.974328

>>974314

probably just fancier


 No.974331

>>974318

>CLIT OS

>mfw


 No.974355>>974405

>>974313

wtf i am going to use to compute?? A fucking abacus?!??!?!


 No.974405

>>974355

yer fingers


 No.974418

File (hide): 40c7d9d2f175eb8⋯.jpg (123.13 KB, 600x703, 600:703, 0ef70a5adf7185fb0afbd21932….jpg) (h) (u)

>>974312 (OP)

>France ?

>you mean French (((Republic)))

no thanks


 No.974423

>>974314

It's got kebabs instead of burgers


 No.974436>>975124

>Secure Boot

>Chosen cryptographic primitives are assumed robust.

Nothing on hardware backdoor (HDD firmware, Intel ME etc...). Nothing on the RNG.

Like, I don't understand. Anyone here, or anywhere close to the system security subject would say that there is an incredible problem with hardware.

Do you think they have some special agreement with these companies to make them able to control the content of intel ME, or the content of the HDD firmwares?

I think though, that I'll copy some of the config for the linux kernel. I'm already applying libreboot. Using gentoo hardened, obviously. It's not like gentoo is the only good linux distro left.


 No.974496>>974501 >>974561

What sucks is that this "internal OS" is just a fork of Gentoo with all the same bullshit from Gentoo and Debian. "Cages" are just the weenie reinvention of 70s virtual machines and paravirtualization. Computer companies used to design their own hardware and OS from scratch and had the OS finished and suitable for running serious business and government software 24/7 in time to be released together with the hardware. None of these companies used C or "borrowed" free software and they could accomplish this, even when everything was written in assembly. Even with those tens of millions of lines of code and hundreds of system calls written by thousands of people, UNIX-like OSes still can't do what real computers did with 64 KB of memory. What really sucks is that none of them know how to design anything from scratch. Even Google's Fuchsia is just a hack of some existing code called "Little Kernel".

> There's nothing wrong with C as it was originally 
> designed,
> ...

bullshite.

Since when is it acceptable for a language to incorporate
two entirely diverse concepts such as setf and cadr into the
same operator (=), the sole semantic distinction being that
if you mean cadr and not setf, you have to bracket your
variable with the characters that are used to represent
swearing in cartoons? Or do you have to do that if you mean
setf, not cadr? Sigh.

Wouldn't hurt to have an error handling hook, real memory
allocation (and garbage collection) routines, real data
types with machine independent sizes (and string data types
that don't barf if you have a NUL in them), reasonable
equality testing for all types of variables without having
to call some heinous library routine like strncmp,
and... and... and... Sheesh.

I've always loved the "elevator controller" paradigm,
because C is well suited to programming embedded controllers
and not much else. Not that I'd knowingly risk my life in
an elevator that was controlled by a program written in C,
mind you...


 No.974501

>>974496

>such as setf and cadr into the same operator (=)

How is cadr like =?


 No.974514>>975314 >>975376

>>974312 (OP)

>France Open Sources their internal OS

>Linux

Linux is GPL so if they plan on distributing it to the outside in any form which it looks like they might then they kind of have to open source it. Stupid clickb8 title tbh


 No.974561

>>974496

>person complainging lack garbage collection

your green text is shit. also

>real memory allocation

it does have real memory allocation.


 No.975053>>975118 >>975178

File (hide): e6f4d002a8207bf⋯.png (15.01 KB, 300x300, 1:1, 1533443151124.png) (h) (u)

If national cybersecurity agency uses it, that would mean gentoo hardened is probably one of the best distros regarding security and privacy. Interesting.


 No.975118

File (hide): 987236baa93820b⋯.webm (6.24 MB, 300x300, 1:1, In The Air Tonight.webm) (h) (u) [play once] [loop]

>>975053

At least post one of the webms.


 No.975124

>>974436

>Do you think they have some special agreement with these companies to make them able to control the content of intel ME, or the content of the HDD firmwares?

it's called the high assurance bit, intel enables it, which is supposed to disable the botnet, on government hardware


 No.975126>>975132 >>975134

>>974314

Backdoors of a country you aren't living in and that isn't allied to the country you're living in are preferable.

I would like to get my hands on ChinkOS, NorkOS, IvanOS or PersiaOS.


 No.975132>>975144

>>975126

The NorkOS is called Red Star OS and is available.

https://archiveos.org/redstar/


 No.975134

>>975126

NorkOS is windows 98


 No.975144>>975161

>>975132

I don't speak bug.


 No.975161

>>975144

The entire point of NorkOS is to be entirely Bugspeak so that nobody who has to use a computer has to learn another language, which would allow them to communicate with the outside world more easily.


 No.975178

>>975053

>national agencies aren't incompetent

Nah. But you are right that gentoo hardened is one of the few security oriented operating systems.


 No.975314>>975337

>>974514

>thinking that nation states give a fuck about the GPL and other software licenses

You are a fucking retard.


 No.975337

>>975314

Wow so edgy I cringed. Look at that, school is out on the west coast too, must be a coincidence


 No.975376

>>974514

>The GPL permits anyone to make a modified version and use it without ever distributing it to others.

>As a consequence, a company or other organization can develop a modified version and install that version through its own facilities, without giving the staff permission to release that modified version to outsiders.

From the GPL FAQ.




[Return][Go to top][Catalog][Screencap][Nerve Center][Cancer][Update] ( Scroll to new posts) ( Auto) 5
27 replies | 5 images | Page ???
[Post a Reply]
[ / / / / / / / / / / / / / ] [ dir / animu / arepa / asmr / ausneets / pawsru / sonyeon / vg / wx ][ watchlist ]