beachdog's Journal: What is a secure and hack resistant Linux setup?

What is a secure and hack resistant Linux setup?

The recent story about the Dali Lama and 106 embassies being penetrated by snooping malware show there is a real need for a reasonable and secure desktop computer setup.

What is available that I could offer as a consultant to a user who was ready to be relatively secure, using available hardware and software?

The four problems I see are:

- Prevent Internet intrusion through any port.
- Ensuring the browser doesn't run any kind of JavaScript or Java spyware.
- Having a secure password scheme. No passwords in plaintext.
- Get a reasonable approach to physical hardware security.

Here is my draft setup:

1. Battery UPS.
2. A LinkSys WRT54G to block most port scans. Large password.
3. The computer will be a PC running either:
        A. Centos 5.2 with security on.
        B. Ubuntu
4. The browser will pose an intrusion risk due to JavaScript or Java programs.
        A. How to secure the browser?
5. Evolution mail only.
6. Encrypted file for all user passwords and login urls.
7. User training for secure passwords and spotting Javascript problems.
8. Intrusion discovery solution. What kind?