I have some usb pen drives that I'm not using because I'm unsure of their content. This drives traveled among some university friends and photo copy shops (you know.. shops with win xp, no security updates, 99% chance to get some virus or malware on the usb drives).
What I'm searching for is a CD/DVD bootable linux distro seriously hardened with this features:
hardening must be high preventing possible viruses/malware inside the pen drives to run/install rootkits on internal computer HDD and it's firmware, internal computer uefi bootloader and it's firmware. TL;DR: if possible unless for 0-day exploits it would be nice if this distro could be immune to any USB tricks discovered so far to make mess.
tools for totally sanitize, deep level format of the usb drives cleaning both the header part (mbr, gpt, and so on) and the data part. My goal here is revert if possible this drives back as they was from factory giving back me the enough trust to have them used back in production environment.
- tools allowing an average Joe (not a super security pro) also to check if the drive effectively had viruses and recover possible interesting data before doing the deep format part.
My main goal is still just revert back the flash drives back to the factory status :)
PS: I would like to use this distro as burned iso CD/DVD without internet connection, so a possible antivirus shipped inside the distro should already be packed updated with all latest viral signatures on it.
Needless to say that the distro have to be updated frequently and i will burn the DVD with latest updates each time.
- do BSD use different drivers respect normal Linux ones?
- Kernel should be different no?
- Which could be considered more secure between the two?
- Or one could go for some plain unix variant?