#cybersecurity #BYOS #microsegmentation #hardware #FIPS140-2 #ZeroTrust
@cleantext depends.
I tend to use #UbuntuLTS because I don't want to reinstall every 6 months and abecause I want to have something that can easily tick all the boxes employers care, like #PCIDSS, #FIPS140 & Common Criteria becaise I won't touch #Windows even with a full-body hazmat suit and ambient-independent air supply.
I just made this, and my brain is telling me to inflict it on the world at large. It combines extremely boring FIPS 140-3 information and an ancient meme.
Is #FIPS140 still relevant nowadays? #PaleMoon via #UXP is planning to remove #FIPS from their #NSS, and apparently the last validation #Mozilla did for FIPS 140 is in 2009...
https://repo.palemoon.org/MoonchildProductions/UXP/issues/2505
FIPS is effectively dead. We should stop trying to cater to it. People genuinely interested in the FIPS mode ought to use a FIPS-validated version of the NSS libraries, but the last validated version is now more than 15 years old. Needless to say, we don't ship anything close to the validated ver...