4 ms·
Somewhere in the depths of my brain I recall IBM developing a "secure" architecture from hardware up a long time ago, but the project was killed for some reason
by avn2109 11y ago
Somewhere in the depths of my brain I recall IBM developing a "secure" architecture from hardware up a long time ago, but the project was killed for some reason. Pretty sure HN user nickpsecurity originally posted about it.
- skissane 11y agoAre you thinking of https://news.ycombinator.com/item?id=10823434 https://news.ycombinator.com/item?id=10823434 The famed IBM "Future Systems" project (to replace the S/360-descended mainframe architecture) was a failure, but it survived by evolving into System/38, then AS/400, later renamed to i5/OS and now IBM i. Hardware-based capability security was part of the architecture.
- nickpsecurity 11y agoWho else? :) It was this one: https://domino.research.ibm.com/library/cyberdig.nsf/papers/B9D637F6D41FD7D78525788C00525519/$File/rc25155.pdf https://domino.research.ibm.com/library/cyberdig.nsf/papers/... One of the founders and best performers of INFOSEC, Paul Karger, was on that project. Later did their smartcard OS, Caernarvon, for an anticipated EAL7 evaluation. In the past, he did MULTICS security evaluation and VAX VMM Security kernel among other things. Far as HWMAC, they sort of just dropped it on us in 2011 and I haven't heard about it since. (shrugs) Meanwhile, Cambridge already has FreeBSD running on the CHERI processor with code available and a less-aggressive, legal team. :)