Online Expert Day - HPE Data Storage - Live Now
April 24/25 - Online Expert Day - HPE Data Storage - Live Now
Read more
Operating System - OpenVMS
cancel
Showing results for 
Search instead for 
Did you mean: 

hpuseradvocacy - live issues

Ian Miller.
Honored Contributor

hpuseradvocacy - live issues

There are several issues on hpuseradvocacy web site of interest to people here. You login by supplying an email address then use these links to vote.

better protection against buffer overflow expolits
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1833

VAX migration assistance to Integrity (Itanium)
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1871

TCP/IP Services do not allow Automatic Login Facility to work on Telnet connections
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1868

Application Server Platform
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1778

BACKUP should display backup size summary
http://www.hpuseradvocacy.org/advocacy/metoo/metooissue.cfm?IssueID=1795

____________________
Purely Personal Opinion
9 REPLIES
Antoniov.
Honored Contributor

Re: hpuseradvocacy - live issues

Ian,
I'm not convinced of protection against buffer overflow may be solved by compiler.
Some languages like C are simply inappropriate to do this.
I voted for other issues.

Antonio Vigliotti
Antonio Maria Vigliotti
Garry Fruth
Trusted Contributor

Re: hpuseradvocacy - live issues

I looked through these and voted on what I thought worthy.
Kris Clippeleyr
Honored Contributor

Re: hpuseradvocacy - live issues

Ian,

I'm with Antonio regarding the "buffer overflow" issue.
The ALF over Telnet however is most interesting, as is the BACKUP "statistics" idea. So I voted for these two.

Greetz,

Kris (aka Qkcl)
I'm gonna hit the highway like a battering ram on a silver-black phantom bike...
Jan van den Ende
Honored Contributor

Re: hpuseradvocacy - live issues

Ian,

five "aye" 's

Proost.

Have one on me.

Seasonal greetings to all!

Jan
Don't rust yours pelled jacker to fine doll missed aches.
David B Sneddon
Honored Contributor

Re: hpuseradvocacy - live issues

Voted for the BACKUP statistics one (and added
a comment about having /SYMBOLS to save the info
somewhere for later)

Dave
Ian Miller.
Honored Contributor

Re: hpuseradvocacy - live issues

Thank you for your votes. I just wanted to bring these issues to a wider audiance. Some where raised by me and some by other people. You vote or not depending on if you agree - exactly as you have done.
____________________
Purely Personal Opinion
Ian Miller.
Honored Contributor

Re: hpuseradvocacy - live issues

David B Sneddon
Honored Contributor

Re: hpuseradvocacy - live issues

Good responses for the BACKUP/STATISTICS and the
DCL "include file" items.

Dave
Robert Gezelter
Honored Contributor

Re: hpuseradvocacy - live issues

Ian,

A small technical note about buffer overflow.

In systems and security, it is often surprising what a difference a small change can make. In particular, with buffer overflows, removing executability from the stack and from the general memory pool (as opposed to the actual image, which is generally read-only anyway) makes buffer overflow a far smaller threat.

As I have pointed out in an upcomming book chapter, the systematic use of descriptors (with their implicit range and address checking) is perhaps one of the greatest reasons why OpenVMS has had a higher degree of integrity than other systems.

Just my US$ 0.02.

- Bob Gezelter, http://www.rlgsc.com