dwheeler

118 ms·

1171.
by dwheeler 10y ago
> I try to be clear in there that I'm not rebutting your work, which I respect, so much as the extreme amount of focus by all the IT forums on just a few problems that cause almost no failures in real-world vs the ones that cause al
1172.
by dwheeler 10y ago
We all agree that reproducible builds and DDC do not solve all problems. No one said they did. I encourage continued research work on solving steps 1-8 (and some related ones, too). As you noted, I've advocated for work in many of the
1173.
by dwheeler 10y ago
> Followup question: how do we find independent folk to help us check our work? I don't have a very good answer for proprietary software. If a company is serious, I think they should pay people to independently review it. There&#x
1174.
by dwheeler 10y ago
> I've been wondering if perhaps there's a "trusting trust" problem where we have 3d-printers that can print circuit-boards (eg CPUs)... and also print 3d-printers. I can answer that question easily: "Yes, there&
1175.
by dwheeler 10y ago
Awesome question, and there's a sneaky answer. DDC works if the trusted compiler has back doors and other nastiness - as long as the back doors won't affect the DDC results. This is noted in section 4.3: "... something is “t
1176.
by dwheeler 10y ago
I think at least part of the solution is convincing upstreams that the world has changed. There are now many people and organizations who are actively working to subvert software - and some of them have a lot of resources and incentive.
1177.
by dwheeler 10y ago
jacques_chester: You're absolutely right that recreating things bit-for-bit identical can require some real elbow grease. I had to overcome bugs in the Tiny C compiler (tcc) and gcc to make them work, as described in the paper. Date&
1178.
by dwheeler 10y ago
I'm the author. Ask me anything about it.
1179.
by dwheeler 10y ago
It's a slide deck, not a paper, but you might find this presentation from my class helpful: http://www.dwheeler.com/secure-class/presentations/Secure-So... A specific example of software developed using forma
1180.
by dwheeler 10y ago
The USA was not originally created with the notion of "manifest destiny"; that was a concept of the 1800s, not the 1700s when the United States of a America was born. Wikipedia reports that "Newspaper editor John O'Sull
1181.
Open source software projects can get a best practices badge(bestpractices.coreinfrastructure.org)
2 points by dwheeler 10y ago|1 comments
1182.
by dwheeler 13y ago
GUIs have these problems in spades. For example, all GUIs must display filenames (say in a file-picker), but how do you display the filenames if you don't know what the encoding is, or if the filename disobeys the encoding? What shoul
1183.
by dwheeler 13y ago
You can just check "is it UTF-8 encoded?". Then it doesn't matter when a new code point is added, it would still be correctly encoded. You could make this a configurable kernel option; when enabled, filenames can only be cr
1184.
by dwheeler 13y ago
I agree, I think having a CONFIGURABLE option in the kernel where admins can decide "what is allowed" would be a big step forward. (1) Enable requiring UTF-8 encoding, and (2) list what bytes are allowed/forbidden at the beg