Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] Linux big bang theory.... |
|---|---|
| Date: | Mon, 28 May 2007 11:08:51 +0200 |
On Sun, 2007-05-27 at 14:22 +0200, Pavel Kankovsky wrote:
"All memory" involves any aspect of the system mutable by the software. If the microcode is mutable than the memory used to store it is a part of "all memory".
Yes. And for typical systems, that also includes all of the mass storage (i.e. the file systems) attached to it: your software needs to require every single byte of data storage. I think such a system would come close to have a self-provable integrity, but such a system must be extremely carefully designed for it, and notably is non-expandable. Any expansion breaks down the proved state by introducing external unvalidated states, and you're back to square one. Being able to validate the integrity of a system requires *at least* the entire potential system, which is why systems in general cannot self-prove: they require more than themselves. -- Vincent ARCHER varcher@denyall.com Tel : +33 (0)1 40 07 47 14 Fax : +33 (0)1 40 07 47 27 Deny All - 23, rue Notre Dame des Victoires - 75002 Paris - France _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| Previous by Date: | Re: [Full-disclosure] How to protect RFI ??, Andrew Farmer |
|---|---|
| Next by Date: | [Full-disclosure] [SECURITY] [DSA 1298-1] New otrs2 packages fix cross-site scripting, Moritz Muehlenhoff |
| Previous by Thread: | Re: [Full-disclosure] Linux big bang theory...., Pavel Kankovsky |
| Next by Thread: | Re: [Full-disclosure] Linux big bang theory...., scott |
| Indexes: | [Date] [Thread] [Top] [All Lists] |