litenhummer93 skrev:OpenVMS. Can't be hacked.

Maj, 9 - 2011
HP Security Bulletin HPSBOV02682 SSRT100495 - Potential vulnerabilities have been identified with HP OpenVMS running Kerberos. The vulnerabilities could be remotely exploited to create a Denial of Service (DoS) or execution of arbitrary code, or by a remote unauthorized user to modify data, prompts, or responses. Revision 1 of this advisory.
CVE-2008-0062, CVE-2008-0947, CVE-2008-0948, CVE-2009-0846, CVE-2009-4212, CVE-2010-1323

litenhummer93 skrev:Det enda du lyckas med är falsk säkerhet som jag ser det.

litenhummer93 skrev:Sorry, om detta mest är spekulationer...

Parvlon skrev:Ingen fara. Det är knappast särskilt många som gått genom all kod och/eller hårdvara helt själv.

litenhummer93 skrev:

Parvlon skrev:Ingen fara. Det är knappast särskilt många som gått genom all kod och/eller hårdvara helt själv.

OpenBSD har väl...? Inte hårdvaran men. Fast OpenBSD är väl första alternativet i den här genren. Jag vet fortfarande inte om jag litar på BSD/x86 dock. Men men.

INTEGRITY — the most secure and reliable software system ever developed — can provide nuclear power facilities with certified unbeatable cyber asset security. The National Information Assurance Partnership (NIAP) has awarded INTEGRITY a rating of EAL6+ High Robustness. No software system has ever come close to these ratings before INTEGRITY.

With INTEGRITY, control and command applications like SCADA systems, work without the possibility of intentional, hostile, well-funded, internal or external attack. And it's been certified — not once, but multiple times.

An inadvertent shut down like the one that occurred at the Hatch Nuclear Power Plant near Baxley, GA, when a single engineer installed a software upgrade on a computer operating on the plant's business network which triggered a reset of data which was diagnosed as a lack of water in the cooling system by a computer on the control network — is impossible with INTEGRITY. INTEGRITY creates a real "air gap" by truly separating data and applications unless communication is allowed based on very stringent pre-established policies.

*
o
Because INTEGRITY is designed to be secure first and foremost, the waterfall design cycle required by the IEEE standard is less challenging. Security is in place right from the start. Deploying INTEGRITY then becomes a matter of defining and establishing the policies and protocols of who gets what access to which data and where as well as what systems are allowed to communicate with other systems. Never will nuclear power plants have to worry about their business networks causing problems with their control networks.

Separation is the key and nothing separates better than INTEGRITY.

Certified security and reliability — no other operating system can offer this level of security and reliability and no other operating system has ever been certified to the levels of INTEGRITY

To learn more about how INTEGRITY Global Security can secure your nuclear facility, please call 888.882.0019 or 805.882.2500 or send email.

Fenren skrev:MER OST ÅT FOLKET!!!!

P.S.
Sheyen hälsar

Kimmelie skrev:Vad finns det för garantier att det inte slinker in nåt liknande även i Qubes, om de slarvar lite med vilka program de släpper igenom...?

The problem is in the X Window System architecture. X is the GUI terminal architecture for just about all UNIX and UNIX-like systems, including Linux.

Kimmelie skrev:Jag hittade artikeln jag tänkte på.
How to write a Linux virus in 5 easy steps.
Det stämmer som ca skrev, att shellscript måste göras körbara, men inte .desktopfiler.

I read your article with great interest.
I was almost disappointed to find out the issues you raised have now been addressed: desktop files now have #!/usr/bin/env xdg-open at the first line, as was suggested, and need to be set as executable to act as launchers. Otherwise, the .desktop suffix becomes visible and the system refuses to launch it, saying it is untrusted.