[CentOS] Security advice, please

[Robert Moskowitz]

John R Pierce wrote:
> Lanny Marcus wrote:
>   
>> On Wed, Dec 24, 2008 at 12:43 PM, Bill Campbell <centos at celestial.com> wrote:
>> <snip>
>>   
>>     
>>>> Hi Warren, Nice explanation.  I would like to ask what you
>>>> recommend people do if they want to be able to ssh in from
>>>> anywhere on the internet. Say they are going to be traveling and
>>>> they know they will have to login from machines they have no
>>>> control over, like an internet cafe or a Hotel's business
>>>> services suite?
>>>>       
>>>>         
>> <snip>
>> I again offer you my "solution", which is to take with me "Live CDs"
>> for CentOS 5.2 and Knoppix. I reboot the box in an Internet cafe, from
>> a Live CD, do what I need/want to do, and when I am done, I remove the
>> Live CD and reboot the public box again. I have not installed anything
>> on their box and I am much safer, surfing, etc., on a public box.
>>   
>>     
>
>
> i'm quite surprised many such internet cafes would let you run your own 
> software on their hardware.  many of the 'cafe' systems I've seen are 
> booted off the network, or don't have CD drives, or could even be 
> running Linux already, such as these 
> http://www.dnalounge.com/backstage/src/kiosk/

Typically the case. The systems are 'locked' down boot wise, you might 
be able to do something they cannot charge for.

Bring your own computer. For $300 you can have an ASUS computer for 
these basic tasks. If they have not implemented NAC, you can unplug the 
cafe system if need be (done that enough times).