Antivirus Firm Kaspersky Launches Its Own Hackproof OS, Based On Microkernel (fossbytes.com) 108
An anonymous reader quotes a report from Fossbytes: Kaspersky Lab, a Russian cybersecurity and antivirus company, has announced their new operating system which was in development for the last 14 years. Dubbed as Kaspersky OS, it has made its debut on a Kraftway Layer 3 Switch. Not many details have been revealed by the CEO Eugene Kaspersky in his blog post. The GUI-less OS -- as it appears in the image -- has been designed from scratch and Eugene said it doesn't have "even the slightest smell of Linux." He actually tagged "Kaspersky OS being non-Linux" as one of the three main distinctive features he mentioned. The other two features he briefly described are rather fascinating. The first feature is that the Kaspersky OS is based on microkernel architecture, which basically means using the minimum amount of ingredients to bake your own operating system. The OS can be custom-designed as per requirements by using different modification blocks. The second distinctive feature is the inbuilt security system which can control application behavior and OS modules. It touts Kaspersky OS as practically unhackable, unless a cyber-baddie has a quantum computer -- which will be required to crack the digital signature of the platform -- at his disposal.
Reports of it being hacked in 5...4...3... (Score:4, Insightful)
Re: (Score:1)
"Reports of it being hacked in 5...4...3..." (Score:2), 1st post.
Well played sir
Re: (Score:2)
My money is on no cryptographic side-channel protection.
Re: (Score:2, Insightful)
Reports of MS claiming patent infringement of the kernel in 5....4...3...
Re: (Score:2)
I used to write ASPs and BSPs for new CPUs coming out. This was almost twenty years ago and fairly easy do do once you've done a few. If it's afairly standard processor, I could have something up in running usually in a day or so.
Re: (Score:2)
Re: (Score:2)
BSP is a board support package.
Re: Reports of it being hacked in 5...4...3... (Score:1)
No, no one would hack an userless internet connected device. Or lots of them. Or use them to stage the largest DDoS attack yet on an internet performance management company.
Re: (Score:2)
Granted, but I think that Kaspersky knows what to look for in designing a secure OS.
I'd like to give them the benefit of the doubt that they've done a solid job building an embedded OS.
That said, source would be nice to see...
-nB
Re: (Score:2)
Reminds me of this one:
Beware of bugs in the above code; I have only proved it correct, not tried it. -- Donald Knuth
Re: (Score:2)
Take Denuvo for example, when the first videogame using this technology was hacked most people thought "game over", but aside from some exceptions, Denuvo is still winning the crack battle.
Hacking an OS is "easier" in the sense that there are lots of more entries for a hacker to jump into, so let's see what happens. Of course if no one uses the OS, it will be harder as there is no interest.
Re: (Score:2)
The original post from Kapersky doensn't make the unhackable claim.
Then again, it doesn't miss the mark by much...
. I also hope itâ(TM)s clear that itâ(TM)s better â" no matter how difficult â" to build IoT/infrastructure devices from the very beginning in such a way that hacking them is practically impossible
How is it licensed? (Score:5, Insightful)
Re: (Score:3)
Re: (Score:1)
People say that, but I wonder, have you actually pored over every line of code in Linux/BSD/Whatever and their application ecosystems, and do you actually have the competency to determine how secure it is? Shellshock was in the Bash source code for 25 years, can you trust open source to be secure?
Re: (Score:3)
Maybe no one has poured over every line of code in the Linux kernel but then you don't know that either. For sure it can be looked at. This new OS can't be looked at. I guess it depends on your level of trust. I'd bet any amount of money that it'll be backdoored. You know it'll have bugs.
In Soviet Russia, OS hacks you! (Score:1, Troll)
Re: (Score:2)
apk's diatribe is funnier
OK, let me bootstrap this by noting that this new OS probably doesn't feature any antiquated hosts file mechanism.
OpenBSD (Score:1)
OpenBSD is secure, correct, microkernel-based and doesn't contain any parts of Linux. What is essentially different?
Re: (Score:2, Informative)
OpenBSD is secure, correct, microkernel-based and doesn't contain any parts of Linux. What is essentially different?
Uhh, no. OpenBSD is monolithic instead of microkernel, and may contain Linux parts, at least in the userland.
Re: (Score:2, Funny)
Same shit. Different asshole.
Re: (Score:2)
OpenBSD is secure, correct, microkernel-based
OpenBSD is not microkernel based.
Microkernel based: Mach, Hurd, QNX
NOT microkernel based: Windows, Linux, FreeBSD, OpenBSD, NetBSD
Sort of microkernelish in some ways, but not really: Mac OS
Re: (Score:2)
Windows is Microkernel based as well.
the WIndows NT kernel is about as much of a microkernel as Linux is.
Re: (Score:1)
OpenBSD is not microkernel based.
I stand corrected.
Minix (Score:2)
Minix is microkernel based, and still in constant development. It would also be pretty much free of Linux code. Although, I admit, I haven't played with it since the early days of Linux....
Microkernel means something else (Score:1)
The first feature is that the Kaspersky OS is based on microkernel architecture, which basically means using the minimum amount of ingredients to bake your own operating system.
The rest of the operating system outside the microkernel will still need to include all the other desired operating system features missing from the microkernel. There are the same "amount of ingredients", they're just mostly implemented outside the kernel.
Re: (Score:2)
Re: (Score:2)
Guys! (Score:5, Funny)
I was a skeptic until I read this:
First, it’s based on microkernel architecture
Ok... say no more... I am convinced!
Second, there’s its built-in security system
Woah.... slow down! Here's my money! TAKE IT!
Third, everything has been built from scratch
I am not sure how I continue to type this with and exploded head....
QNX just called. (Score:5, Informative)
There is already an OS which is all of those things. Nothing is completely "unhackable" but I'd trust something which is as mature as QNX way way more than this new experimental crap.
Re:QNX just called. (Score:5, Funny)
But this comes with a free trial of their anti-virus software.
Re: (Score:3)
[...] awful design choices (synchronous messaging).
QNX has asynchronous messaging now, but of course, the point was always that the kernel's synchronous messages were just building blocks. QNX has supported POSIX message queues for as long as I can remember, and it has also told you (though, yes, the documentation was crap) how to roll your own if that didn't suit your needs.
Re: (Score:3)
There is already an OS which is all of those things.
Sounds good! I have a shiny new 64-bit CPU and I would like to run this QNX on it please!
Oh, really? Never mind, then.
Re: (Score:2)
Sounds like this QNX thing has a built in security system...
Re: (Score:1)
(Disclaimer: I had my fingers in that pie.)
And Qubes, using 1MB Xen like a microkernel... (Score:2)
Maybe the increase in competition will be a good thing.
On the negative side, hardware (esp. DRAM) is becoming a security nightmare, and I don't think Kaspersky OS is going to mitigate that any better than the others.
Re: (Score:2)
Hell, Minix is open source.
Does this guy know what a microkernel is? (Score:5, Insightful)
If you read TFA this guys says:
"The first feature is that the Kaspersky OS is based on microkernel architecture, which basically means using the minimum amount of ingredients to bake your own operating system. The OS can be custom-designed as per requirements by using different modification blocks. This is similar to what Cyanogen Inc. has implemented in the module-based form of Cyanogen Modular OS for smartphones."
Unless I have missed something Cyanogen's OS is still using a normal monolithic kernel. Actually this guys description would pretty well include normal module loading and unloading in the linux OS. Why do people who don't understand things try to explain them by comparing them to other things they probably also don't understand?
But then I read Fossbytes 'about us' page and realized that they are just another aggregator running out of Delhi, and their biggest claim to fame is 300,000 followers on social media. Can't we at least get a link to the horse's mouth like
https://eugene.kaspersky.com/2... [kaspersky.com]
instead of re-aggregating an poorly written per-aggregated mention of the news?
Re: (Score:2)
Re: (Score:2)
Software can track any app that wants to be persistently installed. When any new persistent component is added the user is alerted.
Other ways are to look at a tasks signature, dylibs, signing, network use and file access in OS X for example.
A more traditional OS might trust the user more and have much less feedba
Re: (Score:1)
I know, my first thought on reading that sentence was "that's not even SLIGHTLY what microkernel architecture means!"
White Star Lines (Score:2)
Re: (Score:2)
Nowadays the kids just say, "CHALLENGE ACCEPTED".
Re: (Score:2)
Consultant 1: Yeah... but what about the highway we built which leads directly to the port? Ever think about that?
Consultant 2: I thought of that, smart guy... we simply build lots of turrets...
Consultant 1: Automated turrets?
Consultant 2: Oh, hell no! You really think the Empire will spring for that kind of cost? I mean... they didn't even go for a basic security system on the trash compactor, a galactic code requirement on death stars I needn't remind you!.... someone is going to get hurt in that thing, m
Plot Twist (Score:2)
It's really just Mac OS 8.6 [wikipedia.org] and some abstraction layers...
Cookies (Score:1)
MAC is cool, covert channels are evil (Score:2)
burni2 launches his own hackproof os based .. (Score:2)
.. it's so secure it can only run a very stripped down version of hello world.
Among the popular security features are the TKA and M.A.M.
Trump Kernel Api - the only API that strips down logic expression to just "false"
McAffee-Mode - deletes every trace
@Eugene
If you're really serious. Relase the binary to public and bet your whole money on the "not hackable" challenge.
Yet Another Minix (Score:1)
So have they spent 14 years reinvented the wheel and made yet another Minix 3.3? '
Or given the vagueness of the press release, have they just taken Minix 3.3 under the BSD licence and called it Kaspersky OS?
Any OS is safe, as long as few use it (Score:2)
Hackers only go after popular OSes. What motivation would any hacker have to try to hack into, say, Beos? Based on this reasoning, I'd say the new Kaspersky OS will indeed be pretty safe. :-)
it doesn't have (Score:2)
Re: (Score:2)
Because Linux invented text boot screens? lolwut?
Hacked... (Score:1)
in 3-2-1...
Re: (Score:1)