overview for SecuMiKern

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 5 points 7 months ago* (last edited 7 months ago) (3 children)

While that's true for mitigations, one system can be more secure than another by design

Things like an OS that's designed with sandboxing, more clean codebase that's auditable, permissions, ... in mind is more secure than an OS that later adds them as an afterthought

Or at least if added later they should be done properly

iOS and Android are way more secure than Linux (And no Android isn't just linux) cause they were designed in much later era with better security practices in mind

Even MacOS and Windows's security are objectively better than linux's even though they started with same security mindset, the problem is they are not open source

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago* (last edited 7 months ago)

I am not native English speaker so sorry for misunderstandment

I didn't say it's overall better

I said even though on base level OpenBSD is much more clean and secure than Linux it lacks or lags behind Linux in adding mitigations for security vulnerabilities

And there are far less eyes on OpenBSD so many vulnerabilities don't get discovered in first place

Any software can be malicious even essential ones just look at recent Xz vulnerability (And it was discovered by sheer chance), OS should have systems in place like proper sandboxing, permissions (Not half baked one like flatpak) ...

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago

MacOS's security is great but unfortunately not open source

QubesOS's sandboxing/virtualization is way above whatever you can do on Debian

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago

I meant Sony and Micorsoft were selling Playstation and Xbox at loss, profiting from games instead

Nintendo doesn't seem to be selling their Hardware at loss so probably profits from hardware, actually considering their hardware (which is weaker than even midrange android phones) they probably sell at good profit margin

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] -4 points 7 months ago

Linux servers exploit is different than Linux desktop exploit and 1000% different than exploiting Android

It's general misconception that Android is just Linux but it's not, it's like saying Linux is just GCC compiler

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 1 points 7 months ago (3 children)

It's not, GrapheneOS is hardened Android check their site for more information

And android is not just linux + SELinux there is much more to it

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago (2 children)

Both Kernel and userland

Android runs a linux kernel yes but is very far from normal linux distros, it almost alleviate all of problems with linux

Hurd kernel's concept seems solid but it doesn't look like actively developed?

OpenBSD might be best choice as you say at least until Genode or something similar become useable

As I mentioned in post Kicksecure plans to harden Linux but is not there yet, For virtualization and containerization there is QubesOS but still that doesn't seem ideal and it requires some beefy hardware

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago

Their basic premise seems solid, but is it actively developed? it seems to go through long periods of inactivity

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] 2 points 7 months ago (2 children)

I didn't know Nintendo subsidize their hardware like Sony and Microsoft, as their hardware seemed overpriced to me for what they offer

And small percentage of gamers are on PC and even smaller percentage would emulate games, even without exclusives most casual gamers seem to prefer consoles so I think Nintendo is overreacting in that aspect though for pirating/jailbreaking switch devices themselves yeah maybe that's why Nintedo care

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] -3 points 7 months ago (1 children)

Some vulnerabilities are not specific to linux like Heartbleed, Spectre, Meltdown

And even though OpenBSD fix most famous/severe ones, others are not tested or their fix may lag behind

1

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

0 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

Secure Operating Systems (Microkernels seems to be the future) in c/[email protected]

[–] [email protected] -5 points 7 months ago (7 children)

Qubes OS is wrapper around underlying operating systems, so it doesn't really fix for example Linux's security holes it just kinda sandbox/virtualize them

Fedora Silverblue seems to be Fedora but immutable so many of linux's problems still apply

-1

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

6 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

43

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

14 comments fedilink

cross-posted from: https://sh.itjust.works/post/17506000

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here

22

Secure Operating Systems (Microkernels seems to be the future) (sh.itjust.works)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

44 comments fedilink

I am not satisfied with Linux's security and have been researching alternative open source OS for privacy and security So far only thing that's ready to use is GrapheneOS (Based on Android) but that's not available on desktop (Though when Android release Desktop mode it may become viable)

Qubes OS is wrapper around underlying operating systems, so it doesn’t really fix for example Linux’s security holes it just kinda sandbox/virtualize them

OpenBSD is more secure than Linux on a base level but lack mitigations and patches that are added to linux overtime and it's security practices while good for it's time is outdated now

RedoxOS (Written in Rust) got some nice ideas but sticks to same outdated practices and doesn't break the wheel too much, and security doesn't seems to be main focus of OS

Haiku and Serenity are outright worse than Linux, especially Haiku as it's single user only

Serenity adopted Pledge and Unveil from OpenBSD but otherwise lacks basic security features

All new security paradigms seems to be happening in microkernels and these are the ones that caught my eyes

None of these are ready to be used as daily driver OS but in future (hopefully) it may change

Genode seems to be far ahead of game than everything else

Ironclad Written in ADA

Atmosphere And Mesosphere Open Source Re-implementation of Nintendo Switch's Horizon OS, I didn't expected this to be security-oriented but seems like Nintendo has done a very solid job

Then there are Managarm, HelenOS, Theseus but I couldn't figure out how secure they are

Finally there is Kicksecure from creators of Whonix, Kicksecure is a linux distro that plans to fix Linux's security problems

if you know of any other OS please share it here