Building Secure Computers?
maotx asks: "Growing into the job of a system administrator, I've been tasked with something I'm not quite prepared for: purchase or build a computer that meets DoD compliance for classified 'Secret' information. Several vendors, including Dell our primary supplier, offers computers that will work, but being new to the criteria I want to make sure the right computer is purchased. The computer will be used to create secure CAD drawings (Solidworks, OrCAD, etc) and must have, from what I can tell, a removable hard drive and security stickers to prevent tampering. What is you're experience in setting up a secure computer and is it better to have a vendor do it, or yourself?"
So sayeth the editors of Slashdot.
Buildings secure computers? Computers secure building? What?
Oh, you meant "building secure computers".
My other car is first.
I heard that the first step towards building secures computers is to be attentive to small details such as spelling and grammar.
The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
"Asking Slashdot about DoD guidelines is like asking an elementary school for details about the space shuttle."
True. But we ARE good with law, business, and economics.
How does this building secure the computers? Does it use laser cutty things like on Resident Evil?
Have you metaroderated recently?
First of all you'll need a server equipped with tiny C4 charges embedded in each of the hard drives. This is a handy way of deleting data on your hard drives very quickly. I hear HP can furnish these.
Second, you will need to hire a troupe of security guards to watch over the computer. Equip them with an M16's, and have them work in shifts, escorting users to and from the computers. If you can't afford a humans, several dozen trained monkeys will do the job. Just make sure and keep at least three extra monkeys on hand so you can replace the dead ones. You'll need at least two monkey handlers if you go the monkey route - one to watch over the monkeys and one to fill in when the first one gets shot.
For a bit of extra security, you can purchase an used electric chair from one of the states that have switched to lethal injection and use it as the chair for the workstation. One armed guard can stand holding the red button, ready to fry to operator in case (s)he mishandles any data, or looks at the guards funny, while another guard stands ready to kill the other in case they refuse to press the red button.
If you can't afford or find an electric chair on the retail market, submit an "ask slashdot" article and I'm sure you'll get plenty of tips on how to build one yourself.
Or if you want to save money you could just install the super secure Gentoo Linux operating system and set it to update itself via emerge automatically every hour.
It's your choice.
I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.
Not if it's an Apple computer! Apple computers are not made, they are birthed from the vagina of a mystical creature who has nice tits.
!?!
USB is still thrown up in the air. I'm very uncomfortable with it but our client uses it quite often to transfer data.
Lots of stuff WILL be thrown up in the air if someone connects a USB wireless adapter.
This is not a dream, not a dream...we are transmitting from the year 1-9-9-9.
Please send me a sample of the data that you are trying to keep secret - this will enable me to best work out how to keep it secure ....