Hacker News new | ask | show | jobs
Subgraph OS: Adversary resistant computing platform (subgraph.com)
23 points by robfig 1735 days ago
7 comments

Big fan of Subgraph. Haven't seen any activity in the last few years, aligning with grsecurity going private after 4.4. Would love to know what happened?
I am always getting very excited when I see a new "OS" announcement. But disappointment sets in when I then learn that it is either a Linux kernel with a new package manager or a (slightly) patched Linux kernel.

It would be nice to distinguish in the title between such efforts and true new OSes like Haiku, Serenity.

Haiku is a single user system and Serenity is really new.

I would say that something like seL4 muslc and Gnu/BSD/Toybox user-land would make a good base for security to start with...bit like Genode

I'm pretty new to using Linux. Anyone know how I can get a firewall like the one being used by SubgraphOS? Meaning a GUI way to give each app permission to connect to the internet, even a one-time permission?
Nice documentation and diagrams, this looks like a hardened Linux with sandboxed apps and a really tremendous level of trust in Tor services.

"Downloads disabled as we are still developing Citadel and the new Subgraph OS. Check back soon for a new release."

The first question that immediately comes up is: has this project received any independent third-party security audits? Has it been otherwise peer reviewed by the security community?
Probably not because that tends to cost tons of money, something open source just doesn't have access to.

Please correct me if I'm wrong, I'd love to know.

It would be useful to dostinguish how this different or improves on other oses using isolation.
ALSO... Urbit!