This is pretty cool: an Internet-accessible demo machine running
Gentoo Linux integrated with the NSA's
SELinux security enhancements. They actually give out the box's root password in an attempt to show that with capability-enhanced Linux, even having root doesn't mean the box is compromised.