[Lancaster] Super-Secure Computer
Adam Stirland
ratbert at f2s.com
Sun Sep 4 21:32:42 BST 2005
Hi everyone,
I'm starting a project and I would like people's opinions, advice, ideas
etc. on the software and OS aspects (i.e. nothing 'physical').
I want to make an extremely secure computing environment using Linux.
The computer will be a laptop running an undecided flavour of Linux. I
want to use encrypted email, secure internet access, anonymous proxy
internet connections, encrypted hard drives, etc.
The computer will be configured to use dial-up for internet when
out-and-about and Wi-Fi for connecting to the internet/my work and home
networks.
It would also be good if it had some *extra* security features to help
anonymity/security (i.e. MAC spoofing, IP masking, etc.) so if you have
any ideas on stuff like that then that'd be greatly appreciated.
I want the whole thing to be *extremely* secure and to be as anonymous
on the internet (and network if possible) as possible. Protected from
crackers, viruses, snoopers, sniffers, wardrivers, etc.
I want to develop this to see how secure and anonymous you can make a
machine (maye for deployment on a network as a security station or for
auditing purposes). It is something I have been interested in doing for
a while but have only just got around to have the time and resources to do.
The machine I will be using for this is a Compaq Prosignia laptop with a
600mhz P3 and 128mb of Ram. It has 2 pcmcia slots (one is taken up by
an Enterasys-branded Orinoco card that has a 5dBi antenna attached) and
an onboard 56k Modem. It also has an infrared port and occasionally has
a 10m USB Bluetooth dongle plugged into the USB port (there are 3 extra
ones available). It has a pretty fast CD-Drive and a Floppy drive. The
battery doesn't work (I hope to get a new battery in a few months) so it
currently runs on AC.
Like I said I haven't made any firm decisions on software yet (except
that the OS will be Linux) so fire away.
Any ideas you have on software, scripts, etc or just thoughts or
opinions on implementation, do-and-dont's etc. then these are all welcome.
Sorry for being so long-winded and detailed but I find that helps when
you want to give people enough info to help you (or enough rope to hang
you with ;) ).
Many thanks,
Adam.
More information about the Lancaster
mailing list