🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.folklore.computers
Article #619958

Re: Making Computers Secure

#619958
From: Melzzzzz
Date: Sat, 03 Feb 2018 03:41
58 lines
4740 bytes
On 2018-02-03, J  Clarke <jclarke...@gmail.com> wrote:
> On 2 Feb 2018 14:19:17 GMT, jmfbahciv <See....@aol.com> wrote:
>
>>Quadibloc wrote:
>>> On Wednesday, January 31, 2018 at 6:32:06 AM UTC-7, jmfbahciv wrote:
>>>
>>>> that doesn't prevent "bad bits" from occupying the machine.  I would
>>>> think that a goal should be to prevent this; so the slow machine or
>>>> slow core would be in the box which passes bits to the real machine.
>>>
>>> Ah, so you're saying that the router is the best place for a security
>>measure.
>>
>>To keep the kids from tracking in filth, you have them take their boots
>>off before they get into the house.  Same principle is true with
>>computer bits and bytes.
>>>
>>> It certainly does make sense to stop threats at a level that is as high
>>> upstream as possible.
>>
>>This isn't necessarily upstream; it could be a hub.
>>>
>>> However, what I'm talking about is bits that... we don't know whether or not
>>> they're bad.
>>
>>That's defined by usage and the intent of the user.  My bad bits are your
>>good bits and visa versa.  Scott's usage of his bits is going to be
>>"scarier" than a mundane user like me because his usage is stuff
>>which has "never been before".  I used to do the same kind of work; everyone
>>in my group had POKE privs which allowed patching the running monitor if
>>we wished to do so.
>>
>>>
>>> A lot of web pages have JavaScript. That lets the web page include a little
>>> program that runs on your computer. Normally, this is for legitimate
>>purposes,
>>> like letting web forms be a little fancier without overloading the server.
>>
>>This is an abmonination.  If code has to be run in order to display
>>a web page which a user has requested, that web page should be built
>>on the "dirty" computer and then pushed to the user's system.
>>
>>The problem we're having is that noone, especially the operating
>>systems, keeps the user actions separated from system actions.  There
>>should have been a strict wall between the two functionalities.
>>TOPS-10 and TOPS-20 got this right via the UUO interface.  Unix and
>>MSoft's developers, over the years, got lazy while writing new code
>>and didn't keep a strict wall between the two. 
>
> I think you will find that the opposite has occurred.  Early PCs
> didn't even have the means to enforce such a wall.  Now modern
> operating systems run just about everything in userspace at some level
> of virtualization.

Correct. 286 had protected mode, but almost no OS used it...

-- 
press any key to continue or any other to quit...
Technical Details
Message-ID: <p53b0n$r5b$2@news.albasani.net>
Path: mbox-mo1.pugleaf.net!e39ni2031qtk.1!nntp.google.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!feeder-out2.eu1.usenetexpress.com!feeder.usenetexpress.com!feeder-in1.eu1.usenetexpress.com!ecngs!feeder2.ecngs.de!feeder.erje.net!1.eu.feeder.erje.net!news.albasani.net!.POSTED!not-for-mail
References: <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <2V%bC.222517$%a1.58398@fx35.iad> <PM000564128FA48D01@aca40a86.ipt.aol.com> <43aeaf25-249f-42c6-b590-4dc9890d1c1c@googlegroups.com> <PM0005643BABCD6267@aca42e3d.ipt.aol.com> <hfba7dtavskr85ssg6crut8hosus6ec3fd@4ax.com>

Show Full Headers
Complete Article Headers
X-Received: by 10.200.44.112 with SMTP id e45mr29143179qta.59.1517629272218;        Fri, 02 Feb 2018 19:41:12 -0800 (PST)
X-BeenThere: alt.folklore.computers@googlegroups.com
Received: by 10.55.9.8 with SMTP id 8ls1997369qkj.1.gmail; Fri, 02 Feb 2018 19:41:11 -0800 (PST)
X-Received: by 10.55.163.207 with SMTP id m198mr27369611qke.45.1517629271597;        Fri, 02 Feb 2018 19:41:11 -0800 (PST)
MIME-Version: 1.0
Path: mbox-mo1.pugleaf.net!e39ni2031qtk.1!nntp.google.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!feeder-out2.eu1.usenetexpress.com!feeder.usenetexpress.com!feeder-in1.eu1.usenetexpress.com!ecngs!feeder2.ecngs.de!feeder.erje.net!1.eu.feeder.erje.net!news.albasani.net!.POSTED!not-for-mail
From: Melzzzzz <Melz...@zzzzz.com>
Newsgroups: alt.folklore.computers
Subject: Re: Making Computers Secure
Date: Sat, 3 Feb 2018 03:41:11 +0000 (UTC)
Organization: albasani.net
Lines: 58
Message-ID: <p53b0n$r5b$2@news.albasani.net>
References: <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <3b1840a6-2ad7-4360-9c87-e3e8ad601ee2@googlegroups.com> <PM000563FF4B2EF298@aca401e3.ipt.aol.com> <2V%bC.222517$%a1.58398@fx35.iad> <PM000564128FA48D01@aca40a86.ipt.aol.com> <43aeaf25-249f-42c6-b590-4dc9890d1c1c@googlegroups.com> <PM0005643BABCD6267@aca42e3d.ipt.aol.com> <hfba7dtavskr85ssg6crut8hosus6ec3fd@4ax.com>
X-Trace: news.albasani.net WFn6oyGQKwmQQw+vkr6ieB0IKvIsr9s+pxQVNjID5qh2xzsikkb4x8YrmKa693hOllGQ2OOiIJQRqLXugFfrGZOWuv5vPwwbK5b4C+SivBzsDi1ARdtku7yPg4C4sVcd
NNTP-Posting-Date: Sat, 3 Feb 2018 03:41:11 +0000 (UTC)
Injection-Info: news.albasani.net; logging-data="HWHwg2p+ccDirb2limxOV/msw6xv+jo/v6nIfRfIIlYeIYP5diFcmOZGkSsejgKicy1Xc+3WPlLi6K92/A4qy03X1fYLt3/TG4IEeLIdL+uiJ55Tg/Y61P9TLvuUebhJ"; mail-complaints-to="ab...@albasani.net"
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:hdF3pZtyj/tNRtj1Z0DZeF/jsmw=
X-Received-Bytes: 4124
X-Received-Body-CRC: 1960587016
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit