DesktopLinux
Home  |  News  |  Articles  |  Forum  |  Polls  |  Blogs  |  Videos  |  Resource Library

Keywords: Match:
High-security, RAMdisk Linux rev'd
Mar. 12, 2009

An interesting physical security-focused Linux distribution was upgraded a couple of days ago. Tin Hat Linux reportedly takes a Vista-like five minutes to boot, because its whole filesystem is decrypted and loaded from an optical drive onto a RAMdisk (tmpfs). But after that, it's likely Puppy-fast!

Tin Hat appears to be a university project out D'Youville College in Buffalo, New York. At least, the release announcement came from the chair of the IT department there, Dr. Anthony G. Basile, who also leads the project. The project website is hosted among the College's open source projects.

According to the Tin Hat project page, Tin Hat "aims towards the ideal of guaranteeing zero information loss should the attacker physically acquire the box -- either the adversary is faced with no file system to even begin cracking, or if any non-ephemeral memory is found, the adversary should not be able to tell if he is looking at encrypted data or random noise."

The same project page humbly admits that current releases represent "baby steps" toward that ideal, going on to list a half-dozen possible exploitative approaches, including both technical and social engineering varieties.


Official Tin Hat Screenshots
(Source: Tin Hat)


The "fast" factor

Notwithstanding Dvorak's recent comment that Ubuntu 8.10 runs faster from a CD than Windows runs from a hard drive, most "Live CDs" are slow, especially when it comes to launching programs (which must be loaded from the CD). Tin Hat, by comparison, instantiates programs from RAM, which is much more tightly coupled to the processor than even a hard drive. So, it ought to be pretty fast.

Reportedly, boot time can be whittled to two minutes, by using a USB key as the boot medium for the hefty 2.3GB rfs image.

It ins't clear how user data is preserved between boots, other than saving to a separate (encrypted, obviously) partition somewhere. Another hurdle is likely a different package installation method than most PC users are accustomed to. (For a look at the creative ways Puppy Linux is addressing that challenge, check out this recent look at the "puplet" proliferation phenomenon.)

Availability

Hardened Gentoo-based Tin Hat 20090309 is available via http, ftp, or bittorrent in i686 and AMD64 builds. The download page is here.


-- Henry Kingman


Do you have comments on this story?


Talkback here

NOTE: Please post your comments regarding our articles using the above link. Be sure to use this article's title as the "Subject" in your posts. Before you create a new thread, please check to see if a discussion thread is already running on the article you plan to comment on. Thanks!



Related Stories:



(Click here for further information)


Approaching the Linux Desktop
The purpose of this paper is to help organizations evaluate the Linux desktop against their own enterprise needs and discover what benefits the Linux desktop might bring to their organizations.

Migrating To Linux: Application Challenges and Solutions
Several solutions exist to help organizations migrate in an orderly fashion from Windows to Linux desktops. This paper establishes the characteristics of an ideal cross-platform solution and reviews these alternatives in light of this ideal standard. The paper takes a closer look at the pros and cons of various solutions and outlines the business benefits that can be achieved.

Linux Advantages: Publicly Available Information on Linux Software
This paper offers a brief summary of readily-available Linux information to help businesses sort out this widely misunderstood operating system.

Top 5 Strategies for Managing Linux
Despite continuous evolution in the manageability of Linux, a 2006 survey cited manageability concerns as a top reason why organizations are hesitating to adopt Linux. Levanta believes Linux can be as manageable, if not more so, than other operating systems by following key strategies. These strategic recommendations were developed from experiences in numerous customer environments, both large and small.

Why Choose Novell for Linux?
This paper outlines the benefits of switching to the Linux platform and choosing Novell as a high-performance, enterprise solution.

Enterprise Linux Selection Guide
Considering moving your enterprise to the Linux operating system? Since there are so many similar versions, choosing the right one can be tough. This paper offers a clear process to help you make an informed decision and get the features, support, and cost that are right for your business and technical needs.

Overcoming Challenges in Managing Linux
Levanta has created a new administration model with innovative technology that breaks down the barriers to making the most of Linux systems. This paper will provide an in-depth look at the workings of Levanta’s product, the first Linux appliance of its kind.

SUSE Linux Enterprise 10 for Retail Businesses
Discover why major retailers have switched to SUSE Linux Enterprise Desktop in the back office. SUSE Linux Enterprise Desktop 10 is a low-cost desktop that offers a complete set of productivity applications and interoperates seamlessly with the other Windows, Macintosh and UNIX desktops in your store.

Moving to a Linux Desktop
Migrating from Windows to Linux on the desktop can be a substantial undertaking because it has the potential for touching -- and perhaps disrupting -- every user in your organization. Unlike a data center (server and infrastructure) migration that is largely transparent to users, the cultural and administrative transitions and environment readiness required to support a Linux desktop migration are extensive.

Seven Good Reasons to Exchange Exchange
This paper describes seven compelling reasons why you should switch from Exchange to Scalix.

 



Got a HOT tip?   please tell us!

ADVERTISEMENT
(Advertise here)

Resource Library


Popular recent stories:
• Linux an equal Flash player
• Linux, netbooks threaten Microsoft's fat profits
• gOS 3.0 goes gold
• Browser swallows OS
• Lenovo denies ditching Linux
• Lightweight, Linux-compatible browser evolves
• GNOME 2.24 gains "Empathy" IM
• Review: Pardus Linux
• Ubuntu to fund Linux development
• Ubuntu "Intrepid Ibex" available

All-time Classics:
• Choosing a desktop Linux distro
• Banshee -- the next best thing to Linux iTunes
• Running World of Warcraft on Ubuntu
• A simple Linux backup method
• The Best Free Desktop Linux . . . and how to make it better
• Linux-powered Asus Eee PC mini-laptop arrives
• The well-tempered Debian desktop
• Lenovo launches a netbook
• What's the best Linux for beginners?
• Getting to know Puppy Linux
• Xandros 4: The best desktop Linux for Windows users
• VirtualBox: The best virtualization program you've never heard of

Linux-Watch headlines:
• GPLv2 copyright suit targets 14 firms
• Amid controversy, Microsoft launches open source foundation
• As open source surges, Microsoft admits Linux threat
• Open source lobbying group emerges
• Open source Linux device drivers submitted by -- Microsoft?
• Google names Chrome OS partners
• Google's new OS marries Linux and Chrome
• Debian plans draw sharp warning from GNU guru
• OpenSource World announces keynote speakers
• Linux 2.6.30 gets new filesystems


Join our Desktop Linux discussion forums:
•  Moving to Linux
•  Linux/Windows debate!
•  Linux Q&A
. . . and more
Visit the...


BREAKING NEWS

• Cloud-oriented distro gets site-specific
• OpenSUSE 11.3 ships with Btrfs, LXDE
• Minimalist Linux distro rev'd to version 3.0
• Music sharing app sounds out Linux
• Mandriva fights through money woes, releases 2010 Spring
• Open source media player embraces HD
•  Fedora 13 praised for security and permissions enhancements
• GPL'd Linux driver released for MPEG-4 compression
• Netbooks still hot, but tablets starting to cut in, says study
•  Linux gaining on Windows among Eclipse developers
• Linux inches up on desktop, holds steady on servers
• More software firms line up behind MeeGo
• Chrome 5.0 ships for Linux, and MeeGo for Netbooks is released
• Puppy Linux turns to Ubuntu for version 5.0
•  Novell's SLE update adds full KVM support, improved clustering



Linux Netbooks


Linux smartphones!


news feed

Or, follow us on Twitter...


Home  |  News  |  Articles  |  Forum  |  Polls  |  About  |  Contact
 

Ziff Davis Enterprise Home | Contact Us | Advertise | Link to Us | Reprints | Magazine Subscriptions | Newsletters
Tech RSS Feeds | White Papers | ROI Calculators | Tech Podcasts | Tech Video | VARs | Channel News

Baseline | Careers | Channel Insider | CIO Insight | DesktopLinux | DeviceForge | DevSource | eSeminars |
eWEEK | Enterprise Network Security | LinuxDevices | Linux Watch | Microsoft Watch | Mid-market | Networking | PDF Zone |
Publish | Security IT Hub | Strategic Partner | Web Buyer's Guide | Windows for Devices

Developer Shed | Dev Shed | ASP Free | Dev Articles | Dev Hardware | SEO Chat | Tutorialized | Scripts |
Code Walkers | Web Hosters | Dev Mechanic | Dev Archives | igrep

Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2010 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.