madaidans-insecurities.github.io VS genode

Compare madaidans-insecurities.github.io vs genode and see what are their differences.

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
madaidans-insecurities.github.io genode
29 13
132 8
- -
0.0 0.0
3 months ago 2 days ago
HTML C
- GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

madaidans-insecurities.github.io

Posts with mentions or reviews of madaidans-insecurities.github.io. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-02.

genode

Posts with mentions or reviews of genode. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-03-10.
  • eBPF Documentary
    7 projects | news.ycombinator.com | 10 Mar 2024
    > While this is true from a certain perspective, machine code creates a system which must grand access to many things to become usable. A shared file system is a good example of this. Some software could easily echo a line into you .profile that tries to launch a key-logger, and this works in many cases.

    That's common, but it's certainly not a requirement to run native code. For example, we've done a pretty good job at retroactively fixing that while preserving backwards compatibility with containers (I can, and have run normal official Firefox binaries inside a docker container with zero access to my real home directory) or sandboxes like flatpak (bubblewrap). If you want to run real native binaries but don't have to preserve backwards compatibility, then it gets easy; genode ( https://genode.org/ ) does a lovely job of truly practicing only giving programs what access you want to give them.

    > The expectation of software existing as opaque files creates a huge amount of work for the OS in verifying the exact behaviour of the software as it runs (and in ways which can often be circumvented), rather than a source-based approach in which malware is never allowed to touch the processor.

    I think you're overoptimistic regarding what you can do with the source code short of manual (human) auditing. I mean, sure there are things you can scan for to try and catch bad behavior, but in the case of actual malice I wouldn't trust automatic code analysis to protect me.

    >> I'm typing this on a nice comfy GNU/Linux box where the only blobs are some firmware

    > So you suffer the worst of both worlds then. You've had to download and compile the source yourself, but as the software is designed around being distributed as blobs, so you enjoy none of the benefits that might come from source distribution.

    I have no idea why you think either of those things? Depending on the distro I certainly can compile from source on my own box (ex. Gentoo, NixOS), but I can also use precompiled binaries (ex. Debian, NixOS) while still having it be trivial to go find the exact source that went in to the binary package I downloaded (this has gotten even stronger with Reproducibility efforts meaning that I can even verify the exact source and build config that created a specific binary). The actual application software and OS are available as Open Source code that can be audited, with binaries available as a convenience, and the only remaining blobs (unwelcome but impractical to fix so far) are firmware blobs with relatively constrained roles (and on machines with an IOMMU we can even enforce what access they have, which is a nice mitigation).

  • GNU/Hurd strikes back: How to use the legendary OS in a (somewhat) practical way
    4 projects | news.ycombinator.com | 7 Aug 2023
  • Ask HN: How to get into OS/systems programming in 2023?
    2 projects | news.ycombinator.com | 18 Apr 2023
    I'd dig into genode[1], which is a capability based operating system. You'll likely see an upsurge in interest in capability based systems in the next decade.

    [1] https://genode.org/

  • Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability
    2 projects | news.ycombinator.com | 22 Dec 2022
    Yet another exploit that just wouldn't work on a well-designed system, such as Genode[0].

    0. https://genode.org/

  • the maddening truth of using Qubes
    10 projects | /r/linux | 30 Nov 2022
    Have you looked at Genode? I don't think it's usable day-to-day yet but the concepts seem interesting.
  • The Helios Microkernel: Written in Hare
    4 projects | news.ycombinator.com | 15 Jun 2022
  • We've started a RISC-V64 Microkernel OS Project called "Generisc". We're gonna redo eveything an OS is with the "end" goal of a fully fledged running web-browser. Anybody wanna come aboard. Support and ideas is enough. No need for coding if you don't have time, just interest and feedback is good
    2 projects | /r/microkernel | 10 Jun 2022
  • I was thinking about more "exotic" OS's
    2 projects | /r/unix | 14 Feb 2022
  • Why we're migrating (many of) our servers from Linux to FreeBSD
    5 projects | news.ycombinator.com | 24 Jan 2022
    I said built-in, you seem to have missed that part. SELinux is not built-in(though it is for certain distributions of Linux).

    Security is hard to define, let alone prove. Everyone has a very different definition of security. So first one has to ask, secure from what?

    I imagine most of the reason around BSD not on the official list(s) is because it's not as popular. I mean GenodeOS[0] is arguably one of the most secure OS's around these days, but I doubt you can find any public Govt support(by any govt) for running it in production today.

    Going back to my original comment, security is complicated, and there is no "secure", but hopefully for a given set of security threats, there is a "secure enough".

    The same exists in physical security. Our home door locks are notoriously not secure, but they are generally secure enough for most home needs. But your average home door lock would obviously be idiotic as protection for Fort Knox's gold deposit door.

    Comparing BSD to Linux security is complicated, but for most high value targets, the answer probably is, run more than one OS. Root DNS servers and other highly critical internet infrastructure all do this as a matter of common practice.

    0: formal proof secure(sel4), for some definitions of provable even: https://genode.org/

  • A more fulfilling future
    2 projects | /r/Schizoid | 14 Jan 2022
    An operating system that's more secure by design than Linux / BSD / Windows / MacOS / Android / iOS (with a small enough codebase that can be studied more easily): https://genode.org/

What are some alternatives?

When comparing madaidans-insecurities.github.io and genode you can also consider the following projects:

ansible-collection-hardening - This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

iceraven-browser - Iceraven Browser

Win32-OpenSSH - Win32 port of OpenSSH

qubes-app-split-browser - Tor Browser (or Firefox) in a Qubes OS disposable, with persistent bookmarks and login credentials

magic-wormhole - get things from one computer to another, safely [Moved to: https://github.com/magic-wormhole/magic-wormhole]

rustls - A modern TLS library in Rust

itpol - Useful IT policies

systemd - The systemd System and Service Manager

panzerlop - Configuration Guides for fixing things in Linux, Proton & KDE

TextSecure - A private messenger for Android.

armada - A multi-cluster batch queuing system for high-throughput workloads on Kubernetes.

Windows11_Privacy - a collection about Windows 11 privacy