Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
The Devil And The Deep Blue Sea
Jon Lasser, 2002-07-17

Why Microsoft's Palladium project threatens to send Linux and open-source into exile.

Comments Mode:
The Devil And The Deep Blue Sea 2002-07-18
Anonymous (6 replies)
The Devil And The Deep Blue Sea 2002-07-18
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous (1 replies)
The Devil And The Deep Blue Sea 2002-07-23
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous
The Devil And The Deep Blue Sea 2002-07-22
Anonymous
The Devil And The Deep Blue Sea 2002-07-18
Anonymous
Unbelieveable 2002-07-18
Anonymous (5 replies)
Unbelieveable 2002-07-19
Anonymous (2 replies)
Unbelieveable 2002-07-20
Anonymous
Unbelieveable 2002-07-21
Anonymous
Unbelieveable 2002-07-19
Anonymous
Unbelieveable 2002-07-19
Martin Schoch
Unbelieveable 2002-07-20
Anonymous
Unbelieveable 2002-07-20
Anonymous
The Devil And The Deep Blue Sea 2002-07-18
blacklight (1 replies)
The Devil And The Deep Blue Sea 2002-07-23
Anonymous
Take a chill pill 2002-07-18
Anonymous Bastard (3 replies)
take your own advice 2002-07-19
rsullivan@art-line.com (1 replies)
Re: take your own advice 2002-07-19
Anonymous Bastard (2 replies)
Re: take your own advice 2002-07-19
Anonymous (2 replies)
happy x86 processor world? riiiiight... 2002-07-19
Anonymous (1 replies)
Re: take your own advice 2002-07-21
Anonymous
Re: take your own advice 2002-07-19
Anonymous
Re: Take a chill pill 2002-07-19
Jm4n
Take a chill pill 2002-07-21
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous (1 replies)
OSS version of Palladium 2002-07-20
Abri
The Devil And The Deep Blue Sea 2002-07-19
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
SkyLeach
Palladium and buffer overflows 2002-07-19
Anonymous (6 replies)
Palladium and buffer overflows 2002-07-19
Anonymous
Palladium and buffer overflows 2002-07-19
Anonymous
Palladium and buffer overflows 2002-07-20
bufferoverwhelmed
Palladium and buffer overflows 2002-07-20
Anonymous
Palladium and buffer overflows 2002-07-21
Anonymous
Pride goeth before a Fall 2002-07-19
Anonymous
No evidence for these claims 2002-07-19
Tamperbell (2 replies)
There is no evidence for claims such as Palladium systems not letting Linux or other OS's run, or allowing only signed software to load. In fact the technical information which has come out so far indicates just the opposite.

http://www.neowin.net/comments.php?id=5530 is a Palladium white paper that makes a number of points. Among them, Palladium is intended to be fully backwards compatible with Windows software. It will NOT allow only signed applications to run. Doing so would be foolish as it would ruin interoperability with the vast body of existing software. The reason people choose Windows is because it runs everything they want. Creating an artificial break with the past would be the last thing Microsoft would want to do. And it is completely unnecessary given Palladium's security goals.

Furthermore, the Palladium white paper indicates that the Palladium hardware can run any TOR (the OS component that interfaces to the secure hardware). Indeed, the hardware part of Palladium is inherently OS-agnostic. All it does is reliably report what OS has booted, manage crypto keys, and provide some secure memory. Any OS can take advantage of such functionality. In fact HP is reported to be working on a "secure Linux" which can use features from the TCPA initiative which is closely related to Palladium.

Besides, for Microsoft to create a hardware platform which can't run Linux would be completely stupid given its problems with antitrust law.

Rabble-rousing is fun, but paying attention to reality can be a worthwhile endeavor, too. You might give it a try sometime.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/96/15730#15730
No evidence for these claims 2002-07-22
Anonymous
No evidence for these claims 2002-07-23
Anonymous
The Devil And The Deep Blue Sea 2002-07-19
Anonymous
Alternate hardware 2002-07-20
Anonymous
The Devil And The Deep Blue Sea 2002-07-20
Anonymous
THE DEVIL AND THE DEEP BLUE SEE 2002-07-20
NSS ( Network Ssecurity Systems)
It's all about trust 2002-07-20
Anonymous
The Devil And The Deep Blue Sea 2002-07-21
Anonymous
The Devil And The Deep Blue Sea 2002-07-22
Anonymous
The Devil And The Deep Blue Sea 2002-07-22
Anonymous (1 replies)
The Devil And The Deep Blue Sea 2002-07-23
Anonymous
The Devil And The Deep Blue Sea 2002-07-22
Anonymous
The Devil And The Deep Blue Sea 2002-07-23
Anonymous (1 replies)
The Devil And The Deep Blue Sea 2002-07-23
Anonymous
Copyright and Anti-piracy laws 2002-07-29
Anonymous
It is time for "security enhanced linux" to be put on the front burner NOW! 2002-07-29
100% of distros should be 100% SE Linux







 

Privacy Statement
Copyright 2008, SecurityFocus