Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Palladium holds Promise, and Peril
Tim Mullen, 2002-07-08

Whether Microsoft's ambitious project is a security solution or a Trojan horse depends much on the company's intentions.

Comments Mode:
....only the best of intentions ... 2002-07-08
Anonymous (1 replies)
Arms race did exist 2002-07-08
Anonymous
The Peril of the Hardware... 2002-07-08
Nicholas Weaver
The wrong problem addressed 2002-07-09
L0k1 (1 replies)
The wrong problem addressed 2002-07-10
Anonymous (1 replies)
> Any hardware will have a software interface that WILL be vulnerable

The chances of a buffer overflow effecting hardware is very small. The first reason is that it is a well known problem, and people who design/program the hardware know about this issue (unlike the average programmer).

The second reason is that hardware security typically has very limited functionality. This makes it much easier to design and test.

In my experience, with over 15 years in designing and programming hardware security firmware, the issues brought up in this post are just not that difficult to overcome. That does not mean you can ignore them, just that contrary to the title of your post, hardware can actually be effective at helping solve the problems you mention.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/93/13789#13789
The wrong problem addressed 2002-07-11
Anonymous
What about the others? 2002-07-09
MERLiiN
Palladium holds Promise, and Peril 2002-07-09
SaltyNetGuru
Wrong problem indeed,... 2002-07-10
Anonymous
Yea, best interest 2002-07-18
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus