Reputation
617
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 4
Newest
 Yearling
Impact
~68k people reached

  • 0 posts edited
  • 0 helpful flags
  • 4 votes cast
Apr
13
awarded  Yearling
Sep
23
comment Java SE 8, Update 51 Added “Native Sandbox” Protection for Windows PCs. Wait, what?
Regardless, it's best to not worry about it that much and just sandbox the whole thing with physical/virtual separation. A container or tiny OS + JVM in a VM should be acceptable. Might also run one like Jaos or an embedded JVM that doesn't use x86 to reduce odds shell-code will work. Just assume Oracle will get it wrong. Again. And again. And again. ;)
Sep
22
answered Java SE 8, Update 51 Added “Native Sandbox” Protection for Windows PCs. Wait, what?
Sep
21
answered Is it fundamentally possible to develop a (provenly) transparent computing system?
Sep
13
comment Can Skype chat be protected from snooping? Are there safe alternatives?
blackhat.com/presentations/bh-europe-06/bh-eu-06-biondi/…
Sep
13
comment Can Skype chat be protected from snooping? Are there safe alternatives?
www1.cs.columbia.edu/~salman/publications/skype1_4.pdf
Sep
13
comment Can Skype chat be protected from snooping? Are there safe alternatives?
I think you meant eBay acquisition because it was weird, overly obfuscated, and insecure way before Microsoft acquisition. Anyone wanting to copy the better P2P architecture can use the document below. Anyone wanting to see why they shouldn't trust it can look at the document below that. It's only more true post-Microsoft.
Aug
19
comment Best method to sandbox X applications in ubuntu
Good point. I rarely run into that problem as I keep creating new ones. However, it was true for many of my old ones. This is why I tell people to use clustered filesystems with offsite backups for data retention. RAID was my old suggestion until I lost three disks before I could replace the first to go down (rolls eyes). Clustered FS w/ cheap, RAID nodes Works so long as you have a service constantly going through the files to find problems. I compared hashes for simplicity. The modern CFS's might make this unnecessary.
May
3
answered Does iPhone home button act as Secure Attention Key?
May
3
answered Biometric authentication in the real world
Apr
13
awarded  Yearling
Mar
13
comment Are there “secure” languages?
I agree it's still a covert channel: said as much about Freenet using Java. Developers of system software will often avoid it for reasons you mention. All true. Good news is exceptions are slowly increasing.
Jan
23
answered High level design for secure web application
Jan
22
comment Are there “secure” languages?
As I said, though, I discourage use of even real-time GC's if covert channels really matter. They usually only matter at interface, though, whose timing can be controlled even with RT GC. Can and has.
Jan
22
comment Are there “secure” languages?
Good point on memory safety. Wrong on realtime garbage collection. The whole point is, regardless of their technique, they leave execution predictable. Most are not tweaked for covert channel mitigation because most developers don't give a shit about that. You can tweak them to mitigate timing channels. I just made sure secret-driven operations always concluded in a fixed amount of time. If I wanted more, I could use priority-aware, asynchronous execution. Measurements show it works and an academic even recently built a processor to do same thing. Solution is there but not applied. Common.
Jan
11
comment Are there “secure” languages?
E is a safe by design against many things language joined with the object capability security model. That model can be used to implement many types of security policies and systems in a way that supports POLA. It also has support for distributed computing. Its backers, esp Combex, have thrown together secure chat in (100 lines?), made a secure browser, and made secure desktop prototype immune to many problems Windows has. So, I'd say it more than qualifies as a secure language. The implementation is where the dragons will be, esp reliance on Java.
Jan
11
comment Are there “secure” languages?
RobertHarvey says they turned off a safety-check, shit happened, and therefore the language's safety goals are BS. Lol. I think the Arianne failure says more about the importance of good requirements analysis and proper tool use than anything else. Meanwhile, Ada + SPARK are still rocking high integrity development plus showed it was a good investment for future-proofing software.
Jan
11
awarded  Supporter
Jan
11
comment Are there “secure” languages?
The garbage collector comment is unfair because GC languages prevent huge amounts of common vulnerabilities while side-channel attacks due to GC's are almost non-existent in real world. I've discouraged GC's for crypto or anonymity systems due to that weakness but they solve a lot of problems in regular apps. Not to mention you get plenty of solutions to problems you mention typing real-time garbage collection into Google incl commercial Java products.
Jan
11
comment Are there “secure” languages?
C is far from ideal: it's too complex, has undefined behavior, and has security issues in most common constructs (eg arrays, strings). Pascal and Modula-2 are much better for analysis due to simplicity, readability, consistency, and easy compilation.