Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. I Built Non-Autoregressive Decision Models with RL a Year Ago(convaiinnovations.com ↗)
    159comments
  2. AI-generated posters don’t have to be horrible(john.hartnup.uk ↗)
    524comments
  3. Human brain is two separate organs, Stanford Medicine-led research finds(stanford.edu ↗)
    194comments
  4. Tin: full-text search for Postgres(planetscale.com ↗)
    52comments
  5. A graphical desktop for the ZX Spectrum(github.com/mindbox77 ↗)
    80comments
  6. “The Secret Life of Circuits” is here(coredump.cx ↗)
    58comments
  7. Android 17 is the first since 3.x to add new APIs without releasing to the AOSP(grapheneos.social ↗)
    573comments
  8. Supabase (YC S20) Is Hiring for OrioleDB(supabase.link ↗)
    discuss
  9. Black Holes or Black Hole Stars? Astronomers Spar over 'Little Red Dots'(quantamagazine.org ↗)
    20comments
  10. New evidence for hidden chambers beyond Tutankhamun's tomb(nature.com ↗)
    9comments
  11. GPT-6 Astra Solves a WWI German Radio Cipher(prinzai.com ↗)
    141comments
  12. San Francisco Onion Futures Company(onionfutures.com ↗)
    126comments
  13. Almost Never Use AI to Write Anything Substantive(erichgrunewald.substack.com ↗)
    21comments
  14. What Zig felt like, coming from Rust(besok.github.io ↗)
    135comments
  15. Cloudflare Quick Tunnels(cloudflare.com ↗)
    301comments
  16. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    203comments
  17. How to Write with an LLM(sockpuppet.org ↗)
    364comments
  18. People who know the most often sound the least certain(vrash.substack.com ↗)
    4comments
  19. Asking Authors About Their Own Papers(medium.com/tmlrorg ↗)
    47comments
  20. Adventures in Microcontroller Circuit Debugging(bigmessowires.com ↗)
    1comments
  21. Saving another 100TB of RAM(cloudflare.com ↗)
    93comments
  22. You can run Git on object storage if you re-make packfiles(tigrisdata.com ↗)
    28comments
  23. Communication by means of modulated Johnson noise(pnas.org ↗)
    21comments
  24. SDCC – Small Device C Compiler(sourceforge.net ↗)
    25comments
  25. Science Is Open Software(jepedersen.dk ↗)
    51comments
  26. OpenJev(openjev.com ↗)
    283comments
  27. Why building a Rust LSP is hard(rust-glancer.github.io ↗)
    50comments
  28. The first new cat species discovered in 100 years(nationalgeographic.com ↗)
    128comments
  29. Ray Ozzie and the Optimism of Being Early(reproof.app ↗)
    17comments
  30. How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip(ieee.org ↗)
    123comments

Thirty Years Later: Lessons from the Multics Security Evaluation (2002) [pdf]

52 pointsby 8y agoacsac.org
3 comments
8y agoHN ↗

Written by two of the people who helped develop INFOSEC field and early secure systems. Schell was an acquisitions guy who worked with Paul in early pentests, pushed "COMPUSEC" when few believed in it, pushed for security certifications, was sneaking funding into secure systems like SCOMP, and spent rest of his career pushing solutions based on GEMSOS security kernel.

Paul Karger who was an engineer that worked with him early on doing pentests that were quite embarrassing to military and commercial sector. Paul designed and built a number of highly-secure systems at a time when it was little understood. Here's his publication list and an obituary summarizing some of his work.

https://dblp.uni-trier.de/pers/hd/k/Karger:Paul_A=

https://www.ieee-security.org/Cipher/Newsbriefs/2010/karger....

My favorite was VAX Security Kernel whose design is still stronger than most modern VMM's. It was also the project where the application of covert-channel analysis discovered cache-based, timing channels in processors. The high-assurance, security field started freaking out about how insecure CPU hardware was around that point. Both problems ignored by other groups in security much like results and advice from MULTICS evaluation. His last project was a secure, smartcard OS for IBM designed for EAL7 evaluation. He and/or his team wisely split it up into intermediate deliverables that had independent value and potential sales to keep the long-term project funded despite effects of management impatience or changes.