Page 1 of 4
Security OS.
Posted: Sat Dec 21, 2019 6:55 am
by TheDarrenS
Hey folks.
Here is a bit of a back story on what I was thinking.
In the late 90s early 2000nds, I was working at an MMORPG company and it was a sci-fi game, In the game, there was a hacking software / OS and I always wanted since then to make one.
But as anyone has read other posts I have made know I am not a coder, my job for 15 pls years is as a Community Manager. But now it is 2019 almost 2020 I want to try to do it. But, "hat in hand" I am going to need help to get it going.
Any out in MX / Antix world interested in working with me on creating a Security focused OS based on MX/AntiX
D,,,
Re: Security OS.
Posted: Sat Dec 21, 2019 8:43 am
by freemedia2018
i would be interested in hearing more about it, at least.
i understand mx or antix has a flash plugin. both google and apple have deprecated flash based on arguments about security, and its rare indeed that i support deprecating anything-- or agree with google or apple on something.
its a very mundane suggestion, but id start by removing flash. its one of the worst vectors on an mx/antix system imo, or any system that includes it. its also very very easy to do. it doesnt prevent reinstallation.
Re: Security OS.
Posted: Sat Dec 21, 2019 8:53 am
by anticapitalista
antiX-19 does not ship with flash.
Re: Security OS.
Posted: Sat Dec 21, 2019 8:59 am
by TheDarrenS
Well, I will give a quick tldr.
I speak with a lot of game devs who also like to do bug bounty and of course, back in the 90s it was more for other things. :)
There are many others out there. Blackbuntu, Kali, Parrot, etc etc. But, I personally would like to base it on the bug bounty area and as my partner CJ said. She think it could be ramped up from there for more indepth forensic and lab tools.
There are many bug bounty scripts out there that are not added to these other distros, so it would be worth adding them imho.
I wanted to talk about this tbh on the forum I was going to build soon but personally I like MX / Antix and thought I might be a really good base to go on.
D...
Re: Security OS.
Posted: Sat Dec 21, 2019 8:59 am
by richb
I would like to remove flash, but ironically need it for now for my security cameras. The manufacturer has committed to HTML5 however.
Re: Security OS.
Posted: Sat Dec 21, 2019 9:04 am
by freemedia2018
darren, i say go for it. its one of the most popular distros and youd be doing a lot of people a favour. if you need some convincing, let us know.
thanks to those who provided corrections/details regarding the latest/upcoming/eventual editions of mx/antix as well.
Re: Security OS.
Posted: Sat Dec 21, 2019 9:11 am
by TheDarrenS
Well, I have totally convinced myself no problem. Starting in the new year it will start. I just have to get the webserver redone and learn how to do things like repositories, etc etc.
But I am and will always be looking for anyone to add a bit of time either a tiny bit or more.
D... And thanks to the MX / Antix ppl for leaving this post up.
D.
Re: Security OS.
Posted: Sat Dec 21, 2019 9:16 am
by Head_on_a_Stick
General guide for hardening Debian-based systems here:
https://www.debian.org/doc/manuals/secu ... ian-howto/
It's a bit old but there's still some good stuff in there.
In respect of MX specifically, remove flash (as already noted) and VirtualBox (it's a security nightmare and the devs just don't care) and perhaps try some packages like
hardening-runtime (MX-19 only) and
tripwire (or
auditd).
Re: Security OS.
Posted: Sat Dec 21, 2019 9:38 am
by TheDarrenS
Thanks for all the info folks.
D..
And if anyone is interested I will need all kinds of ppl.
graphics, web, programmers etc.
Re: Security OS.
Posted: Sat Dec 21, 2019 10:53 am
by Head_on_a_Stick
Just remembered
lynis, which will scan a system for any vulnerabilities. You could run that and use the information when making the respin.