|
Tor Connection Padding
|
|
19
|
604
|
August 7, 2020
|
|
Qubes sudo / su / root Hardening - Development Discussion
|
|
7
|
557
|
August 7, 2020
|
|
/etc/security Hardening? - Console Lockdown - pam_access - access.conf
|
|
32
|
571
|
August 3, 2020
|
|
kernel recompilation for better hardening
|
|
491
|
1758
|
July 29, 2020
|
|
use XFCE with Wayland
|
|
10
|
341
|
July 14, 2020
|
|
multiple boot modes for better security: persistent user | live user | persistent secureadmin | persistent superadmin | persistent recovery mode
|
|
51
|
1047
|
July 5, 2020
|
|
System-wide sandboxing framework
|
|
169
|
567
|
June 21, 2020
|
|
Installation of Antivirus Scanners by Default
|
|
7
|
106
|
June 17, 2020
|
|
rootkit detection system - AIDE
|
|
15
|
103
|
June 17, 2020
|
|
Disable SUID Binaries
|
|
63
|
959
|
June 16, 2020
|
|
Virtualization Based Hardening (VBH) - Intel / Bitdefender
|
|
4
|
112
|
June 15, 2020
|
|
Stackable Wrappers
|
|
12
|
277
|
May 30, 2020
|
|
Restrict root access
|
|
105
|
1148
|
April 23, 2020
|
|
disable newly (all) installed services by default
|
|
1
|
115
|
April 19, 2020
|
|
Selecting Secure Packages from packages.debian.org
|
|
24
|
252
|
April 6, 2020
|
|
enable Linux kernel gpg verification in grub and/or enable Secure Boot by default
|
|
52
|
847
|
March 22, 2020
|
|
(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?
|
|
51
|
1016
|
March 12, 2020
|
|
Printer yellow dots anonymization
|
|
2
|
120
|
March 9, 2020
|
|
run OpenSCAP security test
|
|
2
|
134
|
March 7, 2020
|
|
vanguards - Additional protections for Tor Onion Services
|
|
20
|
539
|
February 29, 2020
|
|
DISA STIG (Security Technical Implementation Guides) Audit Tool for Debian
|
|
7
|
213
|
February 26, 2020
|
|
Do NTP and TCP timestamps really leak your local time?
|
|
11
|
552
|
February 24, 2020
|
|
use kernel command line as a source of randomness
|
|
15
|
267
|
February 22, 2020
|
|
/proc/pid/sched spy on keystrokes - proof of concept spy-gksu
|
|
1
|
303
|
September 27, 2019
|
|
twuewand - a truerand algorithm for generating entropy - Whonix integration
|
|
24
|
317
|
February 19, 2020
|
|
early-rng-init-tools for better entropy?
|
|
4
|
258
|
February 16, 2020
|
|
kernel.deny_new_usb sysctl to deny new USB devices
|
|
10
|
170
|
February 15, 2020
|
|
SysRq (Magic SysRq key)
|
|
67
|
560
|
February 15, 2020
|
|
Moar Entropy Sources
|
|
17
|
345
|
February 3, 2020
|
|
enforce kernel module software signature verification [module signing] / disallow kernel module loading by default
|
|
56
|
982
|
January 21, 2020
|
