Subgraph OS: Adversary resistant computing platform (opens in new tab)

Big fan of Subgraph. Haven't seen any activity in the last few years, aligning with grsecurity going private after 4.4. Would love to know what happened?

I am always getting very excited when I see a new "OS" announcement. But disappointment sets in when I then learn that it is either a Linux kernel with a new package manager or a (slightly) patched Linux kernel.

It would be nice to distinguish in the title between such efforts and true new OSes like Haiku, Serenity.

I'm pretty new to using Linux. Anyone know how I can get a firewall like the one being used by SubgraphOS? Meaning a GUI way to give each app permission to connect to the internet, even a one-time permission?

Nice documentation and diagrams, this looks like a hardened Linux with sandboxed apps and a really tremendous level of trust in Tor services.

"Downloads disabled as we are still developing Citadel and the new Subgraph OS. Check back soon for a new release."

The first question that immediately comes up is: has this project received any independent third-party security audits? Has it been otherwise peer reviewed by the security community?

It would be useful to dostinguish how this different or improves on other oses using isolation.

ALSO... Urbit!