507 reputation
13
bio website
location
age
visits member for 1 year, 6 months
seen Sep 4 at 1:02

Generalist. Systems guy. Security Engineer. Frequent schneier.com contributor.


Sep
24
awarded  Autobiographer
Sep
4
answered How to autenticate properly in Java
May
28
answered Using a TPM with Linux
May
28
comment Best method to sandbox X applications in ubuntu
It's been a while since I used SELinux but I do recall it supported selective use of enforcement: use it on system, use it on just these apps/services, don't use it, etc. It's flexible like that. I'd recommend Googling online guides and tutorials on it. (Watch the date, though, as some will be outdated.)
May
27
comment Obstacle in Implementing a Time Limited/Number of Use Limited Software
On install, write install date/time, expire data & identifying system data into encrypted file. On load, you get current data/time, get info, compare each for sanity (has time gone backwards?), & check for expr date. If any fails, don't run. Anything more is obfuscation. Best obf. was Skype & it was cracked quick. Hardware dongles help but require you/users to buy them. Still potential bypasses. Copy protection on hostile user's vanilla OS & machine has never succeeded over time. A previous SE answer wisely said it's for keeping more honest users acting fair, not for stopping thieves.
May
27
answered Processor microcode manipulation to change opcodes?
May
19
answered Best method to sandbox X applications in ubuntu
May
19
answered Reducing asymmetric authorization token size
May
19
answered Obstacle in Implementing a Time Limited/Number of Use Limited Software
May
19
answered HIPAA compliant blob storage architecture
Apr
13
awarded  Yearling
Aug
11
answered Tor via Python - can the real IP address leak?
Jul
21
answered How does storing GPG/SSH private keys on smart cards compare to plain USB drives?
Jul
21
answered What would be the application-level equivalent of dynamic communication secrets?
Jul
14
comment How does formal verification guarantee secure, error-free code?
Actually, that's inside the scope. The scope is an isolation kernel with control of CPU, memory and IPC flows. Such a proof shows that, with certain restrictions on the code, anything it does won't render the system unsafe beyond that code's partition. Proving more than that requires more effort. Which is the point of isolation kernels: you only pay for what you use in the final system.
Jul
14
comment How does formal verification guarantee secure, error-free code?
I do agree with you, though, that sh4d0w is just extrapolating what happens with poorly assured software to software that used formal methods. I also haven't heard of any 0-days found in a product verified down to the code.
Jul
14
comment How does formal verification guarantee secure, error-free code?
CompCert was formally proven. It had errors in the front end and back end IIRC. One Orange Book A1 used DES for MLS enforcement. Many formally proven codes also assume hardware works correctly. It often has bugs that can affect security. That goes all the way back to MULTICS days and certain intel chips have MMU issues. Then there's the cases where the verifier/prover don't work right. Those issues have occurred in the past.
Jun
15
awarded  Commentator
Jun
15
comment Can a hard drive be destroyed by drowning?
For D3C4FF. You have to get the mixture right. Look up Skunkwork's thermite presentation for help in that regard. His was thorough and datacenter safe. ;)
Jun
4
comment How secret are secret forums?
It's of smaller use than the other suggestions. Many people don't like leaving all their private information on a server that might be used by another person. Anything stored on a regular filesystem is still there upon delete. This can be picked up by the next user, by a drive thief, etc. Encryption by default eliminates these and other worries. You're right that a person might screw up a backup. Yet, truecrypt is very reliable and using it means the entire forum (maybe software too) can be backed up by downloading one file: the volume. (Or a diff of it.) OP can leave crypto out if desired.