4.7 with firewall, 2.6.29, iceweasel 3.0.9, printing and more

[Kai Hendry]

Hi guys,

http://webconverger.org/blog/entry/Webconverger_4.7_release_notes/

Normally I would do some public testing, though I am keen to make
another release soon-ish once the Debian Installer is working again
for us.

Otherwise please reply on this thread with constructive feedback. :-)

[zengrits]

Hello Kai,

I've downloaded the latest version of Webconverger and burned an
image. I plan to try it out today. The concept is very appealing -
running the computer with a live CD that retains no information.
That's fantastic if it would be a truly secure way to do online
banking.

Then the suspicious part of my psyche spoke up: "Suppose someone
provided a 'secure' OS that was built to transmit confidential
information?" I guess this could be done.

Seems to me that Webconverger will have to build a tremendous amount
of trust for it to succeed. I'm very comfortable with Windows and
Linux, but I certainly wouldn't know how to test it.

I guess if a major bank started handing out Webconverger CDs, that
would be the ultimate endorsement.

Best wishes,
Elliott

[Kai Hendry]

2009/4/27 zengrits <elliot...@gmail.com>:

> Seems to me that Webconverger will have to build a tremendous amount
> of trust for it to succeed. I'm very comfortable with Windows and
> Linux, but I certainly wouldn't know how to test it.

Unlike Windows, Webconverger is opensource and welcomes security
review. The sources are available on the download page.

To act as a small incentive, if you compromise a running Webconverger
and let me know how you did it, you will be entitled to a free T-shirt
and an acknowledgement.
http://363362.spreadshirt.net/
http://webconverger.org/acknowledgements/

> I guess if a major bank started handing out Webconverger CDs, that
> would be the ultimate endorsement.

Major banks around the world already use Webconverger, though I am not
liberty to say who they are.

Sometime ago a Canadian security researcher gave some endorsement too.
http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking

Kind regards,

[freak...@gmail.com]

Do I get a free tshirt (or 60 - assuming each tshirt costs you £10
this will make up for my standard day (mates) rate - which to be fair
is over charging you as it only took 5 minutes to compromise) :)

let me know when the new version is out and ill take a gander at that
too ;)

peace!


On Apr 27, 8:13 pm, Kai Hendry <hen...@webconverger.com> wrote:
> 2009/4/27 zengrits <elliott.mi...@gmail.com>:

>
> > Seems to me that Webconverger will have to build a tremendous amount
> > of trust for it to succeed. I'm very comfortable with Windows and
> > Linux, but I certainly wouldn't know how to test it.
>
> Unlike Windows, Webconverger is opensource and welcomes security
> review. The sources are available on the download page.
>
> To act as a small incentive, if you compromise a running Webconverger
> and let me know how you did it, you will be entitled to a free T-shirt

> and an acknowledgement.http://363362.spreadshirt.net/http://webconverger.org/acknowledgements/

>
> > I guess if a major bank started handing out Webconverger CDs, that
> > would be the ultimate endorsement.
>
> Major banks around the world already use Webconverger, though I am not
> liberty to say who they are.
>

> Sometime ago a Canadian security researcher gave some endorsement too.http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boo...
>
> Kind regards,

[Kai Hendry]

Please could you report security issues to security AT webconverger.com.

I hope reviewers will please practice 'responsible disclosure'.
http://www.google.com/corporate/security.html

With thanks,