[plug] Linux security idea - maybe

[Craig Ringer]

> To quote Andrew Bartlett on the Samba list a while
> back (requoted without permission, hope he doesn't
> mind):
> 
> "The only _secure_ computer is turned off,
> disconnected from the world, under five feet of
> concrete with an armed guard standing on top. And then
> someone will probably just bribe the guard..."

Very true. OTOH, it's then a royal PITA to actually crack, and 99% of 
the nasties will wander on looking for easier targets. If someone is 
really determined to get in, and targeting you specifically, they'll 
usually find a way. The idea is to be much too hard a target for casual 
crackers to bother with.

That said, hardening it against a more determined attacker isn't a bad 
idea, but you have to draw a line where it's a "security box" that can't 
be used to do anything because its so crippled.

Craig Ringer