Will ParanoidLinux Protect the Truly Paranoid?

ruphus13 writes "There are still places on the world where having anonymity might mean the difference between life and death. Covering one's tracks is considered to be of such paramount importance that we are now witnessing the rise of a Linux distro catering to the most paranoid. The 'alpha-alpha' version of ParanoidLinux is now out. But is this the best way to protect oneself? Couldn't it be easily circumvented? The article asks, 'Why is it necessary to put the applications and services designed to protect anonymity, to encrypt files, to make the user nameless and faceless, all together, in one distribution? Let's think in a truly paranoid manner. Wouldn't it be far easier for a nefarious government organization to target that distribution's repositories, mirror that singular distribution's disk images with files of its own design, and leave every last one of that distribution's users in the great wide open?' What should truly paranoid user do?"

Comments

Suggestion

[msuarezalvarez]

The truly paranoid user should get some help...

Hermit

[el_chupanegre]

A truly paranoid person would be suspicious of absolutely everyone and everything. That would mean writing your own OS on your own hardware etc etc.

Since this is impossible, go and live in hiding with no human contact or chance thereof.

Why would you download this 'super-safe' OS from some people you never met, through a public unencrypted network, if your life depended on it?

True open source question

[cdrguru]

If you do not examine the source, how can you trust any piece of software? You are in effect agreeing to trust the unknown people that have looked at the source. Except in the case of a smallish distribution nobody may have actually looked into that particular distribution in any detail at all.

Of course, there is a greater issue of trust. If you accept chips made by unknown fabricators, do you know what microcode has been implemented? If you cannot examine the "source code" of the chips being used how can you actually trust that these chips are not doing things behind your back to reveal your identity and files?

So without a truly "open" computer, you are trusting a whole raft of unknown individuals and companies with your identity, your data, your reputation.

Moreover, if you are not knowledgeable about programming languages, using any computer is an act of utter faith with plenty of reason to not be so trusting. It is like climbing a mountain with a guide that only lost "a few" parties last year.

Re:True open source question

[zxaos]

You implement your own compiler in assembly, on open chips, and then you compile a checked version of gcc with the compiler you built and go on from there.

Obviously. :p

Re:True open source question

[slimjim8094]

Great, and really cool, thought experiment. However, you can hand-assemble fairly easily (I wouldn't, though) and then you don't even need to trust so much as an assembler.

For the paranoid but lazy - check the C source for spies, compile to assembler, check the assembler and make sure it matches the C code, then hand-assemble.

Or write your own quick and dirty C compiler, use it to compile GCC, then compile it with itself so you get the nifty optimizations.

easy answer

[schnikies79]

"What should truly paranoid user do?"

Stay off the internet.