I'd say it's pretty much impossible to hack a bootable CD.
How secure is knoppix?
I'd say it's pretty much impossible to hack a bootable CD.
Well....since it is impossible to write to a closed cd I'd say it is the most secure it could possibly be.If you've installed it to your hard drive and set up a firewall you could always scan your ports to find out.
if someone gets root access to your knoppix system, he can then totally destroy your hard drive data or read whatever he wants.
So what's your point that's true with any OS.Originally Posted by neo
If you want TOTAL security you need to not let anyone near the system. If you can acces the machine- you can hack it PERIOD! You should also disable booting from floppy or cd. I really think Bd84 was asking a general security question. Of course we haven't heard back so who knows...
When knoppix is installed, it's just a little less secure than debian by default. ( due to many more programs installed )
But you can increase security by adding firewalls, kernel patches etc.
If you run from the cd on a standalone computer with no harddrive, i'd say that would be pretty damn secure. Just reboot, and you're back to a clean install.
It mainly depends what you mean by "Secure" and what you intend to do with it.
my points being is that the previous two posters seemed to be under the impression that Knoppix because it is on a closed CD is an inpenetrable system. I was merely stating that it is vulnerable as well.Originally Posted by Stephen
I am under no impression what so ever- I am am absolutely, positively, and unequivocally without a doubt certain that the Knoppix cd itself IS in fact VERY secure. As far as getting in from the outside goes- well are you behind a firewall? You can only be as secure as your firewall. Do you have ports open? There's an avenue and of course that applies to all OS's as well. As eadz mentioned if someone DID get into your machine while you had Knopix booted then just reboot and they're gone. That's the beauty of a ramdisk based Linux router- everything resides in RAM and there is no hard drive to penetrate.Originally Posted by neo
That's the beauty of a ramdisk based Linux router- everything resides in RAM and there is no hard drive to penetrate.[/quote]
Forgive my ignorance, but doesn't your security in this scenario stem partly from the faxt that if you have no read / write storage you don't have anything to steal?

SFP TO RJ45 TRANSCEIVER SFP MODULE COPPER SFP OPTICAL PORT TO RJ45 ETHERNET PORT
$7.99
NEW Sealed Cisco SFP-10G-LR 10GBASE-LR SFP+ 1310nm 10km *US Shipping*
$24.00
Cisco Acacia DP04QSDD-E25-840 400G QSFP-DD Coherent DCO Transceiver Module
$699.99
Dell Intel X710-DA2 5N7Y5 Dual-Port 10GbE SFP+ PCIe 3.0 x8 Network Adapter
$27.50
Genuine Cisco SFP-10G-SR 0-2415-03 10 Gigabit Transceiver
$5.40
HP 560SFP+ 10GB 2-port PCIe NIC Ethernet ADAPTER 669279-001 w/ (2) 10GB SFP+
$16.99
Intel X520-DA2 10Gb 10Gbe 10 Gigabit Network Adapter NIC Dual Port E10G42BTDA
$28.94
New Sealed Cisco GLC-LH-SMD 1000BASE-LX/LH SFP Transceiver Module *US
$17.00
Cisco QSFP-40G-SR-BD Module 10-2945-02 NEW CLAMSHELL
$45.50
Extreme Networks 10GE X440-G2-24P-10GE4 16533 24Plus-Ports POE+ Switch UP
$127.00