Slashdot Mirror


Security and the $100 Laptop

gondaba writes "The One Laptop Per Child project is actively recruiting hackers to help crack the security model of the $100 laptop to avoid the obvious risks associated with what will effectively be the largest computing monoculture in history. From the article: 'The key design goal, Krstic explained, is to avoid irreversible damage to the machines. The laptops will force applications to run in a "walled garden" that isolates files from certain sensitive locations like the kernel. "If we discover vulnerabilities, the security model must hold up enough that even a machine that is unpatched won't be easily exploitable. This gives us a bit of diversity to avoid the monoculture trap," he added.'"

12 of 144 comments (clear)

  1. Re:Pull my cracker by geekoid · · Score: 3, Insightful

    If I know kids, there revenge on said hacker will be scary.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  2. Biggest Monoculture by Doc+Ruby · · Score: 3, Informative

    The many millions of SymbianOS mobile "phones" is the largest computing monoculture in the world. Much more essential for the world's daily operation than these cool kids' PCs, and tied directly to the wallets, by the minute, of most people with any money.

    --

    --
    make install -not war

  3. Re:Why hack a machine that will have no data on it by Red+Flayer · · Score: 3, Insightful

    Plenty of people do malicious things for fun. There doesn't always have to be a pecuniary motive.

    --
    "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
  4. Re:Why hack a machine that will have no data on it by Richard_at_work · · Score: 3, Insightful

    You think the majority of worms and viruses that crack Microsoft Windows systems today are after the data contained in said system? You giv the answer yourself, its a readymade zombie network saleable to the highest bidder.

  5. Could actually be a problem by Sycraft-fu · · Score: 4, Interesting

    Not for MS but for MS's competitors. Can't really claim MS is a monopoly anymore if there's 100 million systems running a non-MS OS. That means that they are free to do as they please, for the most part, when it comes to locking people out of their OS. Most anti-competitiveness statues only affect monopolies. Companies that face competition are generally allowed to be as anti-competitive as they like.

  6. No data, but quite a processing network by Inhibit · · Score: 5, Insightful

    That's true. The fact that the machines don't have appreciably large hard drives, heavy processing power, and won't have constant high-bandwith internet connections might do a lot for them.

    On the other hand, there are going to be a *lot* of these machines. So I suppose they might make a tempting target "just because" or simply for bulk processing.

    --
    You're reading Slashdot. Of course you like Linux and pc hardware
  7. virtualize the applications by xzvf · · Score: 3, Interesting

    Run each application in it's own virtual machine. Xen has a low enough overhead and is clean code. Browser compromised - reload from know good source.

    1. Re:virtualize the applications by RAMMS+EIN · · Score: 4, Insightful

      How are virtual machines going to help here? What protection do virtual machines grant that the operating itself doesn't grant? What undesireable restrictions do virtual machines impose? If you work around these restrictions, will the system be more or less secure than without virtual machines? If you don't work around these restrictions, will the system be usable?

      As far as I'm concerned, running applications should already be separated from one another. This leaves interaction through the file system and IPC (inter-process communication).

      Virtual machines take away the interaction through the filesystem, as well as local IPC. The latter doesn't actually necessarily make the system more secure, as it makes it more difficult to tell if IPC is safe (on the virtual network) or open to attacks (on the real network). At any rate, IPC will be less efficient, because you lose shared memory IPC.

      By taking away common filesystem access and complicating IPC, applications become less usable. How do you get the file Alice sent you by email to your word processor? How do you copy-paste from one application to another? How do you do process management, when the process management tools are made for a single machine, but you have everything runnig under virtual machines?

      Once you work around these restrictions, what will you be left with? Are you going to re-introduce common filesystem access and create a drag-and-drop interface that works accross virtual machines? When you've done so, won't you have a system that has pretty much the same capabilities as one that isn't based on loads of virtual machines, except that your system is much more complex? Won't that complexity introduce new bugs and vulnerabilities? Will the system not be too slow to be usable?

      --
      Please correct me if I got my facts wrong.
  8. Coming up next... by Funkcikle · · Score: 3, Funny

    After they solve this dimension of the security issue, they can deal with a slightly more important one - securing the laptops against theft.

    DEAREST SIR MY NAME IS BARRISTER MUMBAGWE SMYTHE AND I WRITE TO YOU IN GRAVE NEED FOR ASSIST. RECENTLY MY GOVERNMENT UNCLE DIED AND LEFT ME MANY MILLION LAPTOP WHICH MUST BE EXITED FROM COUNTRY.

    I predict more dead third world children! Oh yes. Still, it makes a nice change from diamonds/oil/etc....instead there shall be many a colourful laptop for sale on eBay, due to demand created by Linux fetishists.

    If only they had used OS X - then there would be no desire for such hideous laptops by those OS fans. Sniffle.

  9. Your overconfidence is your weakness by Rogerborg · · Score: 3, Funny
    > "The machine, he said, will feature a completely secure BIOS solution that allows fully automatic upgrades without user intervention and fully protects against phishing and automated worm attacks."

    Also, it whitens your teeth while you sleep, and autodials Alyson Hannigan whenever she's feeling lonely and horny. All for $100!

    --
    If you were blocking sigs, you wouldn't have to read this.
  10. Re:Step in the Wrong Direction? by 99BottlesOfBeerInMyF · · Score: 3, Insightful

    I don't mean to be a Johnny-Come-Lately, but isn't there other ways to improve a civilization/country/etc without computers?

    Sure there are. But just because there are other ways does not make this method any less beneficial.

    Why is that when Linux is mentioned, it's like being touched by the Hand of God (or Allah for that matter) ?

    Most things we can give or subsidize the cost of for developing nations have negative consequences. Giving them food, destroys the local market and kills their agricultural sector. Giving them GM crops that grow faster and better makes them dependent upon the companies who own the patent on that crop and who can later demand fees for its use. Giving them cheap Windows based PCs, may help in the short term, but it makes them dependent upon IP from an abusive foreign monopoly in the long term.

    Linux is a win-win situation because by nature it ships with all the blueprints and tools needed with the only strings being used to stop it from being exploited in ways that hurt the end user. It gives them access to technology and information and provides a secure foundation for them to build upon without undercutting any local development. Rather, it encourages local development.

    Imagine if instead of shipping food to African nations at below the market value, we shipped them a complete chain of tools and machinery needed to build from the ground up the entire industrial foundation for agricultural equipment and fertilizers. Basically, we gave them the whole setup of factories and education and patents we have. Then they would not be dependent upon us and could grow their own food the same way we do.

    To do that would be prohibitively expensive for agriculture, but for software development, Linux is that complete chain, with no strings attached. That is why it is so well regarded by those interested in helping developing nations.

  11. Re:please... by Monsuco · · Score: 3, Informative
    When the parts for laptops get cheap enough that someone could manufacture a $100 laptop, *then the market will be flooded with $100 laptops*. There are a dearth of hardware manufacturers out there already competing to make the cheapest laptop they can.
    It is cheap by leaving out stuff like a hard drive, and instead has 512 MB of flash (though I think some models might have 1GB). It will lack a CD drive. It will have a very slow 366 Mhz AMD Geode processor, so that it can run without fans and wont use much power. It has a tiny display, that might work for writting documents, but giving presentations or watching movies would probably not work. It doesn't have a particularly powerful battery, though because it has a small display, no HDD to spin, and a slow processor, it will stay up a long time on one charge. It has 128 MB of RAM. It lacks a PCI slot. It does have an SD slot, a special "mesh networking" wifi card, 3 USB 2.0 ports, an SD slot, speakers, a microphone, and of course, it is very durable because it has been ruggedized and because it has no moving parts. It is perfect for schools were students will probably do little more than type on a word processor (probably something like Abiword), research, maybe art, and simple stuff like that. You or I would probably not want it.

    I do think they should sell the laptops commercially for $200-$300 though so that people who might want to help the project could purchase one for that price and in doing so pay for 2 free laptops for poor children. I also think that if they ever start mass producing them, they shouldn't be limited to just the poor nations. I think schools in the US might like the idea of being able to check out these to students to help with school work and stuff, especially in inner city areas.

    My only question is why is Gnome used as the desktop? Gnome is a great desktop environment, but it seems like these machines, having only 128 MB of ram and no way to do swap partions (it would ruin a flash drive to use it for swap) it seems like fluxbox, XFce, or blackbox might be better. I realize the gnome is modified, but still.