This site may earn chapter commissions from the links on this page. Terms of use.

If you've ever had to configure an SELinux (Security Enhanced Linux) kernel security module without the guidance of an administrator, you'll understand why this contempo interview with David Mirza Ahmad in Motherboard is interesting. Ahmad is the President of a company named Subgraph, which is developing a security-focused version of Linux named Subgraph Bone. He states that its purpose is to provide an cease indicate that's "resistant confronting remote network exploitation," that will run on low-powered notebook computers, and can be used (and presumably installed) by people who are not security experts.

Subgraph OS offers more than kernel security. It includes features such as full-disk encryption and what appears to exist a technique to sandbox (isolate) exploits. It includes also several applications and components to reduce the user's attack surface.

Subgraph Mail integrates OpenPGP to let the user have access to signed encrypted email. An identity verification service is built into the mail client. Plus, there is no need to execute commands in a last window or the demand to install plug-ins. Spider web browser support is deliberately left out of the mail client to eliminate Web exploits from within mail.

Subgraph OS

Tor is used by exclusively by applications that perform communications. This is done by using Subgraph's Metaproxy software to intercept outgoing connections and relay them through the right proxy (SOCKS, HTTP, etc). Tor (The Onion Router) is the volunteer network of servers connected using a serial of virtual tunnels instead of direct connections to anonymize information near network connectivity. Subgraph's Orchid is a Java-based Tor implementation that can be besides be used outside of Subgraph OS.

Although it's not obvious from the documentation then far, I assume Subgraph's Vega vulnerability scanner is a component of the Os every bit well. Vega is an automated scanner, intercepting proxy, and proxy scanner (and it may be related to the Metaproxy application mentioned earlier). Vega itself is a standalone application written in Coffee that can run on Linux, Apple Os/X, and Microsoft Windows. Note, however, that on theVega download folio, the kickoff thing mentioned is that it is "however early on phase software."

The Motherboard study said Subgraph recently received funding from the Open Technology Fund (OTF) which is part of Radio Gratis Asia and is funded past the U.S. Congress to "empower world citizenry to support the Internet equally a safe and secure platform for free speech communication." While this funding is plainly new, Subgraph Os itself has been in development for at least a few years. Wired UK ran an commodity about its then reportedly imminent release in June 2014, only plain the current release is even so in pre-alpha stage.

If y'all would similar to larn more about Subgraph OS, cheque out its GitHub repository, which includes the ancestry of a Subgraph OS Handbook. Although Subgraph Bone does not look it like information technology will be in production form in the near time to come, it may be worth keeping an eye on this projection equally it percolates through its development phases.