Contacting jcm

May 5th, 2003

[ from the email-backlog-building-up dept. ]

For those people (hi Chris) who have mailed me recently and not received a full reply then I apologise and will be in touch soon.

I have begun sending suggestions to the Computer Science department for alterations to the courses for future students. I feel I can make a large number of positive comments before I graduate so that these issues are discussed at the relevent committee meetings.

Jon.

Blunkett Blunders Yet Again

May 5th, 2003

[ from the biometric-invasion-of-privacy dept. ]

The Home Secretary is to propose that this country become more of a prison state by introducing biometric and other invasive privacy measures at UK entry points. While I generally question the usefulness of biometrics I certainly do not propose to like the idea of providing these details to the government. I suppose I am not supposed to object given that it is probably in the interest of protecting us from Witches…sorry Terrorists who are obviously everywhere. Blunkett annoys me greatly.

Captain Cyborg

May 5th, 2003

[ from the oh-no-not-again dept. ]

We are watching the Discovery Channel. Captain Cyborg is on spouting about how his pet chip impant did blah blah blah blah. Someone get this guy off the air talking about this yet again! If we have to see that video of him controlling a robotic arm over the internet one more time…

Jon.

Memory Management

May 2nd, 2003

[ from the arrgh-they-will-get-you-arrrrrrggghhhh! dept. ]

Hmmmm…copy configuration in to Upper and Lower BAT registers, play with SDR1, page tables, blah blah blah blah. What do you get? Well about 3K lines of code which doesn’t do what I want. I really really need a hardware debugging kit of some kind or a lot more time – that’s not because I started writing code later but because the task is complex. I will get enough resolved for the deadline though there is some serious summer work ahead.

The report should have 5-7K words sorted by the end of the weekend and enough for a draft to be ready. Then I have a week to get it wrapped up.

There so now you all know you can stop asking me how it is going. :-)

Jon.

Boring Unisys Security Seminar

May 1st, 2003

[ from the what-are-they-taking? dept. ]

This is a rant.

So this Unisys guy gives yet another boring seminar on “Web Security”. Covers the basics with little extra adventure and uses the wrong terms, as usual, for the benefit of the Computer Scientists listening. All based upon Microsoft, IIS, and other horrible shit. Quite sickening.

Now this was not as bothering as the session afterwards where there was some live demonstration. He proceeds to login as “Administrator” on a “hardened laptop” (it had Zone Alarm software installed) and spout fantastical shite about Microsoft security. I offered to secure an Apache system in 5 minutes (and I meant it) which would compete with his IIS setup…apparently it took six months to define templates to prevent access to the filesystem. In any case when I asked why he could not simply use a chroot jail my question was brushed over. Microsoft Windows does not do that kind of thing properly, you see…

Either this guy had never heard of capability sets on Windows and sudo on UNIX or he did a great job of ignoring it. Extolling the virtues of ACLs in response to my questions was interesting – given that most modern UNIX systems also support ACLs and Extended ACLs, and even permissions affecting other system objects – Linux has Trusted Path Execution, NSA Linux does funky shit and then there’s always Trusted Solaris.

I did point out that his repeated mentioning of buffer overflows was a moot point on systems where adequate protections are in place – through stack guarding software combined with non-Intel stack frame layouts – and that he was ignoring the potential for vulnerabilities in third party software and libraries which he had no access to.

Apparently “nobody buys Linux stuff” or Solaris, or infact any non-Microsoft products – at least that was the view of one Unisys drone.

Vomit inducing.

Jon.

Yet another Unisys Presentation

April 28th, 2003

[ from the this-will-be-fun dept. ]

This week we are graced with another guest lecture from Unisys, a fantastic opportunity to once again ask about corporate sponsorship of Software Patents such as that used by the LZW compression algorithm. I enjoy these talks…

Jon.

Revolution OS

April 28th, 2003

[ from the RMS-really-does-rule dept. ]

Hi,

Revolution OS has arrived. We watched it over the weekend and there are plans to arrange a screening.

The Memory Managemend issues are still ongoing however I have now written the equilavent of an LED attached to the serial port and have some position independent hard coded assembly to flash the framebuffer so that I know where things are going stray. :-)

Jon.