How To Build Secure and Portable Linux Based System
Interesting idea that explains how to build awesome secure and portable system using Linux. From the article:
I designed this system with both security and portability in mind. My system uses a Linux kernel and the entire thing, applications, personal data, etc, takes up 1GB of space. It is split up into two parts, the operating system, and my personal data. The operating system is a 700MB live-CD, GRML, that generates a completely fresh install every single time I boot up the computer. Doing this means that if my system is ever hacked into, a simple restart of my computer fixes the problem. This also means that any configuration changes made or private information stored by any application, restarting reverts everything to a clean slate.
The personal data is encrypted using an AES-256 algorithm. The password I type in actually unlocks a special encrypted file which unlocks the real encryption information, meaning that my actual password is never stored in RAM (more specifically, DRAM). To prevent highly sensitive information from being discovered by remote hackers, which this layer of encryption would not protect against, an extra layer of encryption using either GPG or AES-256 provides two layers of encryption for highly sensitive data.
=> My Awesome Secure and Portable System
Want to stay up to date with the latest Linux tips, news and announcements? Subscribe to our free e-mail newsletter or full RSS feed to get all updates.
You can Email this page to a friend.
You may also be interested in...
- OpenBSD - quick and dirty introduction
- Is Linux server more secure than Windows server?
- Setup OpenLDAP authentication on Linux for OSX Client and sync / share home directory
- Download of the day: EnGarde Secure Linux
- How do I secure and audit shell access with Enterprise Audit Shell?
Discussion on This Article:
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: aes, algorithm, clean slate, computer fixes, dram, encryption, gpg, grml, hackers, Linux, linux kernel, operating system, personal data, portability, sensitive data, using linux ~ Last updated on: March 18, 2008



Cool article, thanks!
sweed. now i can do pen testing + also somehow keep my level of encrypted usb stick. sweed sweed sweed.
really sweed. gpg vs aes-256 = which is better, because both are good/best. i use aes-256 as i find it easy to use. i need to more RTFM gpg & gpgv2