Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

For a hardened linux distro, take a look at kicksecure [0], which uses debian as base image

[0] - https://www.kicksecure.com/



The list of disclaimers does impute confidence in their claims:

  most of the topics.. are still in development and are not yet used by default
  .. Kicksecure has adopted a best-effort, but admittedly quite weak approach
  CFI, SafeStack, automatic stack variable init..unlikely..due to.. resourcing
  kernel security issues.. are rooted deep within its design
  upstream developers are not very focused on serious security enhancements


Let’s appreciate the transparency and follow the project for progress rather than dismiss them for it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: