hpuseradvocacy - live issues

[Ian Miller.]

There are several issues on hpuseradvocacy web site of interest to people here. You login by supplying an email address then use these links to vote.

better protection against buffer overflow expolits
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1833

VAX migration assistance to Integrity (Itanium)
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1871

TCP/IP Services do not allow Automatic Login Facility to work on Telnet connections
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1868

Application Server Platform
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1778

BACKUP should display backup size summary
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1795

[Antoniov.]

Ian,
I'm not convinced of protection against buffer overflow may be solved by compiler.
Some languages like C are simply inappropriate to do this.
I voted for other issues.

Antonio Vigliotti

[Garry Fruth]

I looked through these and voted on what I thought worthy.

[Kris Clippeleyr]

Ian,

I'm with Antonio regarding the "buffer overflow" issue.
The ALF over Telnet however is most interesting, as is the BACKUP "statistics" idea. So I voted for these two.

Greetz,

Kris (aka Qkcl)

[Jan van den Ende]

Ian,

five "aye" 's

Proost.

Have one on me.

Seasonal greetings to all!

Jan

[David B Sneddon]

Voted for the BACKUP statistics one (and added
a comment about having /SYMBOLS to save the info
somewhere for later)

Dave

[Ian Miller.]

Thank you for your votes. I just wanted to bring these issues to a wider audiance. Some where raised by me and some by other people. You vote or not depending on if you agree - exactly as you have done.

[Ian Miller.]

some responses from hp
http://www.hpuseradvocacy.org/Response/jan2005.htm
http://www.hpuseradvocacy.org/Response/dec2004.htm
http://www.hpuseradvocacy.org/Response/aug2004.htm

[David B Sneddon]

Good responses for the BACKUP/STATISTICS and the
DCL "include file" items.

Dave

[Robert Gezelter]

Ian,

A small technical note about buffer overflow.

In systems and security, it is often surprising what a difference a small change can make. In particular, with buffer overflows, removing executability from the stack and from the general memory pool (as opposed to the actual image, which is generally read-only anyway) makes buffer overflow a far smaller threat.

As I have pointed out in an upcomming book chapter, the systematic use of descriptors (with their implicit range and address checking) is perhaps one of the greatest reasons why OpenVMS has had a higher degree of integrity than other systems.

Just my US$ 0.02.

- Bob Gezelter, http://www.rlgsc.com