Ken, Urs, et al.,

Thanks for the comments!

Re: the CERN Howto, one can get to it via the scientificlinux.org
home page by clicking on "Scientific Linux Live CD/DVD 4.8" in the
far left column, under "news".

On that page, scroll down to the very end and you'll see a link to
More information can be found at http://www.livecd.ethz.ch

On that page, you will see a link to "Read how to build your own
LiveCD.", which will take you here in case you don't want to go
thru all that.  :-)

http://www.livecd.ethz.ch/build.html

Ken Teh wrote:
Hi Larry,

I would also be interested in the CERN Howto on building a Live CD. I have my own script for building my own SL Live CD. The live CD is not as full fledged as Urs'; I use the live image only for embedded purposes, but one can always learn new tricks. Please post the URL when you get a chance.

I share Urs' opinion that an up-to-date Linux box is secure enough for online banking.

Ken


Urs Beyerle wrote:
Hi Larry,

some comments from my side ...

First, good to hear that you like the SL LiveCD.

The LiveCD is just build after SL releases a new version. Normally the
LiveCD is not updated afterwards. You have to wait for the next SL
release to get an updated LiveCD.

The LiveCD comes with a write/read file system. All changes are written
to RAM. Just run "yum update" and the software on the LiveCD will be
updated. This can take some time depending on your internet connection
and age of your LiveCD and maybe fill up your memory or maybe not. Or
you can just run "yum update firefox" to get the latest firefox. Because
all changes are stored in memory, after a reboot they are lost again.

However, you can save the changes on an USB stick, see
http://www.livecd.ethz.ch/save.html

This should lead to an uptodate LiveCD. One thing you cannot do: You
cannot update the kernel of a LiveCD.

Editing the LiveCD iso image would be theoretically possible, but I
would not do it, because the data is stored in a special way
(compressed, etc.)


Hope this helps,

     Urs


PS. I would be interested in the CERN excellent Howto of building an own
live CD.
PS. I use for internet banking an uptodate Linux installation. In my
option this is enough secure.





P. Larry Nelson wrote:
Hi all, the following article has convinced me to go the Live CD route
when doing online banking.  I had been using a squeaky-clean and
bare-bones
Windows XP installation (and the latest Firefox) as a guest OS in VMware,
but even that method, I've read, has potential security issues.
http://voices.washingtonpost.com/securityfix/2009/10/avoid_windows_malware_bank_on.html


To that end, I've downloaded and burned my first LiveCD (SL 4.8)
and have been playing around with it - quite slick, I must say!

However, it has raised some questions, particularly in regards to what
I'm using it for.  First (probably a Troy/Connie question), how often
do security updates get incorporated into the ISO image?  For example,
there was just a security fix for xpdf/gpdf and the firefox in the
SL4.8 LiveCD certainly does not have the latest bug fixes.

And if the ISO image doesn't get updated then what's the best course
for maintaining a patched LiveCD?  I know that one can build one's own
LiveCD, and the CERN site has an excellent Howto, so conceivably I could
build one and keep it up to date with the latest bug/security fixes,
but I'm also aware that there seems to be software out there that will
let one edit ISO images to extract or add files (ISO Master for Linux
is one I found, but not tried).

Any thoughts on this and/or does anyone have experience editing an ISO
image?

Thanks!
- Larry



--
P. Larry Nelson (217-244-9855) | Systems/Network Administrator
461 Loomis Lab                 | High Energy Physics Group
1110 W. Green St., Urbana, IL  | Physics Dept., Univ. of Ill.
MailTo:[email protected]        | http://www.roadkill.com/lnelson/
-------------------------------------------------------------------
 "Information without accountability is just noise."  - P.L. Nelson

Reply via email to