Somebody finally did this. Good for them. Unbreakable boxes for DNS, BGP, and routers will be a good start. Those boxes don't need to do anything else, and contain no user data.
Looking forward to hearing more about their OS.
Looking forward to hearing more about their OS.
Did you miss HYDRA, Secure64, or the MILS/DO-178B groups building certified, partitioning middleware?
https://news.ycombinator.com/item?id=12988808
http://www.lynx.com/lcs-lynx-certifiable-protocol-stack/
It's been going on. The OEM's just aren't buying or cloning any of it outside a few. Many of those that do are going out of business because customers vote against security with their wallet. Even when the cost isn't much more. Outside of pure defense contractors, one of only ones making it is Genua selling OpenBSD-based solutions in Layer 2 and 3. Assuming they're still OpenBSD-based.
"Looking forward to hearing more about their OS."
I agree with this and your view on the need to develop more bare-bones, clean-slate solutions for these kinds of services. If we're lucky, Kaspersky's will both be more secure than Linux-based products and have convenient, affordable licensing than forerunners to get major adoption. However, as you probably know from high-assurance, a company with no history of making a system secure against strong attackers will probably fail to do so with its products. That's my default anyway. So, I also look forward to the details to compare and contrast against competing solutions in medium- and high-assurance spaces.
From a company based in Russia?
Really?
But we do have proof USA does that. See Snowden leaks.
http://arstechnica.com/tech-policy/2016/06/russias-new-spy-l...