• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Most "securable" OS?

Stern

Senior member
Hi, so we've got a fun college assignment to build a machine to make it as uncompromisable as possible and then to have 24h to try and get the root password of the other machines while keeping our own password secret. We get to choose what OS, what tools, etc.

So my question is, what do you guys think would be a good OS for this? It will need to keep some basic functionality, I'm not sure which yet, I think we get to agree on that so that no one person will have a machine with absolutely no networking ability.

Also, what tools would you recommend? Our supervisor has said the 24h we have to 'hack' each other will be totally open, we can do what we want, we just won't have physical access.

Thanks for any replies, this will be interesting!

Stern

Oh, and the computers will be connected by a basic peer to peer network
 
Just to clarify in case there's any confusion. The final aim of this project will be to secure my own root password, while obtaining that at least one other machine.

Thanks!
 
I think this may turn into a flame war (hope not) but I think Vista would be a good choice. Although Linux isnt compromised as often, its mostly due to attacks not written for it...as its not as popular. In some testing Linux has been shown to be as venerable as Windows, but not so in others. I think people underestimate the security of Windows, personally.

I would choose something you are most comfortable with. If youre a big Linux user, that would be a good choice, if not for familiarity. But certainly Windows can be locked down as well.
 
Linux or bsd.
You can a lock down a linux pc without a doubt that it is really secure.

run something like kylie for the browser, that gives you web browsing without any java,activex , scripting security issues.

windows can be protected as well, but with windows there are so many ways to get into a system that its hard to be sure you got everything.
 
I hope your class covers the whole spectrum and that you come back and report back the results of the experiment.
 
OpenBSD. It's a PITA and a half to install and configure, but the OpenBSD guys pride themselves on security. If you don't need to install too much stuff, it's going to be a very tough nut to crack. Heck, their motto is "Only two remote holes in the default install, in more than 10 years!"
 
Erm. No physical access? Are there going to be any services running? I mean, if you're not running any services, you're not getting into any modern OS.
 
Originally posted by: ViRGE
OpenBSD. It's a PITA and a half to install and configure, but the OpenBSD guys pride themselves on security. If you don't need to install too much stuff, it's going to be a very tough nut to crack. Heck, their motto is "Only two remote holes in the default install, in more than 10 years!"

:music:
 
Try the old Digital (DEC) VMS.
Military (USN) is still using it.
It's impossible to hack it!

It also requires Alpha or VAX hardware so it wouldn't be a good choice for a college assignment.
 
Originally posted by: Nothinman
Try the old Digital (DEC) VMS.
Military (USN) is still using it.
It's impossible to hack it!

It also requires Alpha or VAX hardware so it wouldn't be a good choice for a college assignment.

Heh, thats a pity.

Originally posted by: videopho
Try the old Digital (DEC) VMS.
Military (USN) is still using it.
It's impossible to hack it!

I think I'll go for OpenBSD. Somebody mentioned using the Kylie browser for more security, are there any other suggestions I could use? I have about 2 months to do this by the way(as there is my thesis and other projects to do also) so it can take as long as it wants. 🙂

If anyone wants I can post the results here(although it will be quite a while), or I can send you emails/pms if you don't think you'll recheck the post (or both!).

Let me know. Thanks for all the help and advice so far.

Stern
 
Back
Top