topic Re: hpuseradvocacy - live issues in Operating System - OpenVMS

hpuseradvocacy - live issues

Ian Miller. — Tue, 21 Dec 2004 06:40:34 GMT

There are several issues on hpuseradvocacy web site of interest to people here. You login by supplying an email address then use these links to vote.

better protection against buffer overflow expolits
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1833

VAX migration assistance to Integrity (Itanium)
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1871

TCP/IP Services do not allow Automatic Login Facility to work on Telnet connections
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1868

Application Server Platform
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1778

BACKUP should display backup size summary
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1795

Re: hpuseradvocacy - live issues

Antoniov. — Tue, 21 Dec 2004 06:57:34 GMT

Ian,
I'm not convinced of protection against buffer overflow may be solved by compiler.
Some languages like C are simply inappropriate to do this.
I voted for other issues.

Antonio Vigliotti

Re: hpuseradvocacy - live issues

Garry Fruth — Tue, 21 Dec 2004 20:44:54 GMT

I looked through these and voted on what I thought worthy.

Re: hpuseradvocacy - live issues

Kris Clippeleyr — Wed, 22 Dec 2004 02:48:10 GMT

Ian,

I'm with Antonio regarding the "buffer overflow" issue.
The ALF over Telnet however is most interesting, as is the BACKUP "statistics" idea. So I voted for these two.

Greetz,

Kris (aka Qkcl)

Re: hpuseradvocacy - live issues

Jan van den Ende — Wed, 22 Dec 2004 04:17:50 GMT

Ian,

five "aye" 's

Proost.

Have one on me.

Seasonal greetings to all!

Jan

Re: hpuseradvocacy - live issues

David B Sneddon — Wed, 22 Dec 2004 05:28:46 GMT

Voted for the BACKUP statistics one (and added
a comment about having /SYMBOLS to save the info
somewhere for later)

Dave

Re: hpuseradvocacy - live issues

Ian Miller. — Thu, 23 Dec 2004 09:17:21 GMT

Thank you for your votes. I just wanted to bring these issues to a wider audiance. Some where raised by me and some by other people. You vote or not depending on if you agree - exactly as you have done.

Re: hpuseradvocacy - live issues

Ian Miller. — Fri, 04 Feb 2005 04:45:43 GMT

some responses from hp
http://www.hpuseradvocacy.org/Response/jan2005.htm
http://www.hpuseradvocacy.org/Response/dec2004.htm
http://www.hpuseradvocacy.org/Response/aug2004.htm

Re: hpuseradvocacy - live issues

David B Sneddon — Fri, 04 Feb 2005 04:57:56 GMT

Good responses for the BACKUP/STATISTICS and the
DCL "include file" items.

Dave

Re: hpuseradvocacy - live issues

Robert Gezelter — Fri, 04 Feb 2005 06:15:18 GMT

Ian,

A small technical note about buffer overflow.

In systems and security, it is often surprising what a difference a small change can make. In particular, with buffer overflows, removing executability from the stack and from the general memory pool (as opposed to the actual image, which is generally read-only anyway) makes buffer overflow a far smaller threat.

As I have pointed out in an upcomming book chapter, the systematic use of descriptors (with their implicit range and address checking) is perhaps one of the greatest reasons why OpenVMS has had a higher degree of integrity than other systems.

Just my US$ 0.02.

- Bob Gezelter, http://www.rlgsc.com