🚀 go-pugleaf

Quadibloc <jsa...@ecn.ab.ca> writes:
> Of course security for cloud machines is different from that for a
> personal computer. But personal computers have security issues that
> new hardware features might give assistance with.

late 90s, EU had FINREAD standard which assumed insecure, compromised
and/or "public" PCs that couldn't be trusted and provided for end-to-end
trust. page/site ... gone 404 but lives on at wayback machine
https://web.archive.org/web/20021223205124/http://www.finread.com/pages/finread_initiatives/ec_funded_projects/02_embedded.html
some past posts
http://www.garlic.com/~lynn/subintegrity.html#finread

at the time, the payment card associations were working on two different
(secure) specifications ... one for point-of-sale, and different one for
home consumer ... for both they goofed on some things. recent discussion
in post about serial port devices for home consumer and "YES CARD"
period for point-of-sale
http://www.garlic.com/~lynn/2018.html#94 Predicting the future in five years as seen from 1983

it turns out that FINREAD was also one of the casualties of the serial
port fiasco (which has never recovered) ... and "YES CARD" did in a
large US point-of-sale pilot (and prediction that it would be a long
time before it was tried again in the US, waiting until the kinks were
worked out in other jurisdictions) ... "YES CARD" posts
http://www.garlic.com/~lynn/subintegrity.html#yescard

as mentioned, somewhat for having done electronic commerce, in mid-90s,
roped in to be part of the X9A10 financial standard working group which
had been given the requirement to "preserve the integrity of the
financial infrastructure" for *ALL* retail payments (i.e. standard for
*ALL*, i.e. point-of-sale, unattended, face-to-face, internet, home
consumer, etc). Besides standard for *ALL*, it didn't have the
vulnerabilities and exploits that were characteristic of the industry
specifications of the period. transaction standard reference
http://www.garlic.com/~lynn/x959.html#x959
hardware token reference
http://www.garlic.com/~lynn/x959.html#aads

lead technical director of the agency information assurance directorate
had assurance session in the trusted computing track at past IDF ...
where I presented on trust & assurance ... gone 404, but lives
on at wayback machine
http://web.archive.org/web/20011109072807/http://www.intel94.com/idf/spr2001/sessiondescription.asp?id=stp+s13

trivia: much earlier computer security reference ... also gone 404, but
also lives on at the wayback machine
http://web.archive.org/web/20090117083033/http://www.nsa.gov/research/selinux/list-archive/0409/8362.shtml

assurance related posts
http://www.garlic.com/~lynn/subintegrity.html#assurance

-- 
virtualization experience starting Jan1968, online at home since Mar1970