The Crunch Box

http://www.shopip.com/

A few months ago, we featured the site of John Draper, the infamous “Cap’n Crunch.” Call today’s click a follow-up, if you will. It’s the site of the Cap’n’s latest doings - The Crunch Box, a fully self-contained Internet security system based on BSD. No less than Steve Wozniak calls it “uncrackable.” But here’s what the site has to say:

“The CrunchBox relies on the security of OpenBSD 2.9 and SSH, which rely on the strength of the shell passwords and of the 3DES and blowfish algorithms. Compromise of administrative interface security would only result in the possible deletion of web logs and shutdown of the network. No CrunchBox damage is possible. Compromise of root security exposes the CrunchBox to complete erasure, but does not automatically compromise upstream services. Security for upstream services is accomplished by the IDS feedback to the packet filter.”