mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-03-21 02:10:11 +08:00
翻译完成 (#4570)
* 翻译中 * 翻译中 * 翻译中 * Update 20161011 THIS OPEN SOURCE MINI COMPUTER WILL DELETE DATA IF TEMPERED WITH.md * Update 20161011 THIS OPEN SOURCE MINI COMPUTER WILL DELETE DATA IF TEMPERED WITH.md * 翻译完成 * Delete 20161011 THIS OPEN SOURCE MINI COMPUTER WILL DELETE DATA IF TEMPERED WITH.md
This commit is contained in:
Lv Feng
Ezio
parent
9363466cc1
commit
d1e7e539ca
@ -1,62 +0,0 @@
|
||||
ucasFL translating
|
||||
THIS OPEN SOURCE MINI COMPUTER WILL DELETE DATA IF TEMPERED WITH
|
||||
===========
|
||||
|
||||
[](https://twitter.com/share?original_referer=https%3A%2F%2Fitsfoss.com%2F&source=tweetbutton&text=This+Open+Source+Mini+Computer+Will+Delete+Data+If+Tempered+With&url=https%3A%2F%2Fitsfoss.com%2Forwl-physically-secure-computer%2F&via=%40itsfoss)[](https://www.linkedin.com/cws/share?url=https://itsfoss.com/orwl-physically-secure-computer/)[](http://pinterest.com/pin/create/button/?url=https://itsfoss.com/orwl-physically-secure-computer/&description=This+Open+Source+Mini+Computer+Will+Delete+Data+If+Tempered+With&media=https://itsfoss.com/wp-content/uploads/2016/10/ORWL-ultimate-physically-secured-computer.jpg)
|
||||
|
||||
[](https://itsfoss.com/wp-content/uploads/2016/10/ORWL-ultimate-physically-secured-computer.jpg)
|
||||
|
||||
In this era of information, the security is paramount. Nobody would possibly want their important data to fall into wrong hands. But even though unsecured hardware possesses no lesser threat, most of the time people take security measures only on the software end. ORWL is here to change that.
|
||||
|
||||
### [WHAT IS ORWL?](http://www.design-shift.com/orwl/)
|
||||
|
||||
Well, ORWL is the computer which claims to be “the most secure home computer ever built”, around the community. It is a small saucer shaped computer designed with complete physical security in mind. And physical security matters because it’s a truism among the information security professionals that once someone gains physical access to your machine, it’s game over.
|
||||
|
||||
|
||||
>ORWL and the Secure Key Fob</figcaption
|
||||
|
||||
ORWL basic specs include Intel Skylake M3 processor, USB-C & micro HDMI ports, 8GB memory, 120GB Solid State Drive, Bluetooth, Wifi and NFC technology. Currently it supports Ubuntu 16.04, Qubes OS and Windows 10 out-of-the-box. All you need is a monitor, keyboard and mouse to get started.
|
||||
|
||||
### ORWL IS OPEN SOURCE
|
||||
|
||||
ORWL is totally open source. It means that the schematic and layout files, software, firmware, everything is up for grab if anyone wants to make one themselves or make improvements.
|
||||
|
||||
|
||||
>ORWL Teardown
|
||||
|
||||
### HOW DOES ORWL WORK?
|
||||
|
||||
ORWL uses a self encrypting SSD. A secure microcontroller integrated into its motherboard to generate and store the cryptographic encryption key. Once it verifies the integrity of the system and authenticated user, it uses the key to decrypt the SSD. In case of any type of tampering with ORWL the key is instantly erased rendering the SSD data useless.
|
||||
|
||||
For authentication purpose, ORWL has a key fob using the technology similar to smart-cards. It uses NFC technology to authenticate user, while using Bluetooth to check whether the user is within the range. The ORWL will be automatically locked if the user is not nearby.
|
||||
|
||||
|
||||
>ORWL Block Diagram
|
||||
|
||||
The whole ORWL system is encased within an active clamshell mesh with pressure switches all over. The secure micro-controller constantly monitors a dedicated inertial measurement unit, the active mesh, the internal temperature and input power voltage for detecting tampering. This prevents access to the internal components as trying to breach the clamshell will trigger the secure microcontroller to erase the encryption key. Moreover, the DRAM is soldered with the shell for security reason.
|
||||
|
||||
That’s not all. There is much more detailed measurement to ensure complete physical security of the device, including protection from Cold Boot, DMA attacks etc.
|
||||
|
||||
More information can be found on the [ORWL landing page](https://www.orwl.org/). Here is a quick video about it’s working:
|
||||
|
||||
### IS ORWL THE ULTIMATE ANSWER TO INFORMATION SECURITY?
|
||||
|
||||
Sadly, no. Of course not. ORWL only provides physical security to the computer. And though that is robust and totally ninja, there are a lot of other vectors an attack on your system may come from. Nevertheless, it does provide a boost in the overall security.
|
||||
|
||||
[](https://itsfoss.com/maru-os-linux/)
|
||||
|
||||
What do you think about it? Let us know by commenting your thoughts.
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://itsfoss.com/orwl-physically-secure-computer/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+ItsFoss+%28Its+FOSS%21+An+Open+Source+Blog%29
|
||||
|
||||
作者：[ Munif Tanjim][a]
|
||||
|
||||
译者：[译者ID](https://github.com/译者ID)
|
||||
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://itsfoss.com/author/munif/
|
||||
@ -0,0 +1,58 @@
|
||||
ORWL：能够删除被篡改数据的小型开源计算机
|
||||
===========
|
||||
|
||||
[](https://twitter.com/share?original_referer=https%3A%2F%2Fitsfoss.com%2F&source=tweetbutton&text=This+Open+Source+Mini+Computer+Will+Delete+Data+If+Tempered+With&url=https%3A%2F%2Fitsfoss.com%2Forwl-physically-secure-computer%2F&via=%40itsfoss)[](https://www.linkedin.com/cws/share?url=https://itsfoss.com/orwl-physically-secure-computer/)[](http://pinterest.com/pin/create/button/?url=https://itsfoss.com/orwl-physically-secure-computer/&description=This+Open+Source+Mini+Computer+Will+Delete+Data+If+Tempered+With&media=https://itsfoss.com/wp-content/uploads/2016/10/ORWL-ultimate-physically-secured-computer.jpg)
|
||||
|
||||
[](https://itsfoss.com/wp-content/uploads/2016/10/ORWL-ultimate-physically-secured-computer.jpg)
|
||||
|
||||
在当今这个信息时代，安全是最重要的。恐怕没有人会希望自己的重要数据落入到坏人的手里。但是即使无安全防护的硬件同样拥有不少的威胁，大多数时候人们只对软件采取安全防护措施。ORWL 就是来改变这件事的。
|
||||
|
||||
### 【ORWL 是什么？】(http://www.design-shift.com/orwl/)
|
||||
|
||||
ORWL 宣称是社区里“造得最安全的家用电脑”。 它是一台小型的碟形计算机，在设计上考虑到了绝对的物理安全性。物理安全很重要，因为一旦有人获得从物理上访问你的计算机的途径，那么游戏就结束了，这是信息安全专业人员中的一个老生常谈。
|
||||
|
||||
|
||||
>ORWL 和安全密匙卡</figcaption
|
||||
|
||||
ORWL 的基本规格包括英特尔 Skylake M3 处理器，USB-C 和微型 HDMI 接口，8GB 内存，120G 固态硬盘，蓝牙，Wifi 和 NFC 技术。目前它支持的操作系统有 Ubuntu 16.04，Qubes OS，以及 Windows 10 开箱。你只需要有一个显示器，键盘和鼠标就可以开始使用它了。
|
||||
### ORWL 是开源的
|
||||
|
||||
ORWL 是完全开源的。这意味着，如果有人想设计一台自己的计算机或者对 ORWL 作出改进的话，原理图和设计文件，软件，固件，所有东西都是可以获取的。
|
||||
|
||||
|
||||
>ORWL 拆卸
|
||||
|
||||
### ORWL 是如何工作的？
|
||||
|
||||
ORWL 使用自加密固态硬盘（SSD）。一个安全微控制器集成到其主板上来产生和存储加密密匙。一旦核实了系统的完整性和已验证用户，它就使用密匙来解密固态硬盘（SSD）。无论对 ORWL 进行任何类型的篡改，密匙都会立即删除固态硬盘（SSD）上的无用数据
|
||||
|
||||
为了实现验证目的，ORWL 有一个使用和智能卡类似技术的密匙卡。它使用 NFC 技术来验证用户，同时使用蓝牙来检测用户是否在当前使用范围内。如果用户不在附近（不在使用范围内），ORWL 将会自动锁定。
|
||||
|
||||
>ORWL 锁定图解
|
||||
|
||||
整个 ORWL 系统被包裹在一个到处伴有压力开关的翻盖网里。安全微控制器持续监控专用惯性测量单元，主动网，以及用于检测篡改的内部温度和电源输入电压。这将防止访问内部组件，比如试图破坏翻盖将会触发安全微控制器从而删除加密密匙。此外，出于安全考虑，动态随机存储器（DRAM）也焊有外壳。
|
||||
|
||||
这并不是全部安全防护措施，ORWL 还有更多详细的措施来确保设备绝对的物理安全性，包括冷启动防护，直接存储器访问（DMA）攻击等。
|
||||
|
||||
更多信息可以在【ORWL 登录界面】(https://www.orwl.org/)找到。这儿是一个关于它如何工作的快速视频。
|
||||
### ORWL 是信息安全的最终答案吗？
|
||||
|
||||
令人沮丧的是，ORWL 并不是信息安全的最终答案。ORWL 只能为计算机提供物理安全，尽管这很强大并且是一个完全地忍者（ninja），还有许多可能来自其他载体的攻击会损坏你的系统。然而，ORWL 确实从整体上提高了计算机的安全性。
|
||||
|
||||
[](https://itsfoss.com/maru-os-linux/)
|
||||
|
||||
你认为 ORWL 怎么样？通过评论让我们知道你的想法。
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://itsfoss.com/orwl-physically-secure-computer/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+ItsFoss+%28Its+FOSS%21+An+Open+Source+Blog%29
|
||||
|
||||
作者：[ Munif Tanjim][a]
|
||||
|
||||
译者：[ucasFL](https://github.com/ucasFL)
|
||||
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://itsfoss.com/author/munif/
|
||||
Loading…
Reference in New Issue
Block a user