> ownership doesn't mean anything at the venti level. it really
> is just a virtual disk drive with lba80 content addressing.
I think you mean lba160.
> if you are providing
> some extended (e.g.) math functionality to a program with a shared
> library, people are going to be upset with you if you argue that it
> can be done with RPC.
>
> I hope the reason is obvious :-)
Not obvious to me. In today's (well, tomorrow's) massively multicore
worl
2009/2/3 Eris Discordia :
> I don't know of any open source implementations of Flash Player. The
> software on each platform and for each browser seems to be (c) Adobe and
> closed source. Does an open source implementation, however incomplete,
> exist?
Well, there is"gnash", which aims to be an o
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Feb 3, 2009, at 5:11 AM, Eris Discordia wrote:
I don't know of any open source implementations of Flash Player. The
software on each platform and for each browser seems to be (c) Adobe
and closed source. Does an open source implementation, how
in the past i've pondered, in my crypto-naive way, if it
might be possible to make venti (or at least vac) somewhat
more secure by applying some kind of crypto to the
data structures containing scores.
to my mind, the biggest security vulnerability in venti
is the ability to unconditionally enumer
> to my mind, the biggest security vulnerability in venti
> is the ability to unconditionally enumerate an entire file tree given
> its root score. if the VtPointer data structures, or the
> scores within them, were encrypted somehow, maybe
> that vulnerability could be mitigated. scores would stil
I don't know of any open source implementations of Flash Player. The
software on each platform and for each browser seems to be (c) Adobe and
closed source. Does an open source implementation, however incomplete,
exist?
Videos embedded in SWF files are encoded in Sorenson's MPEG-4 profile.
On Tue, Feb 3, 2009 at 2:55 AM, Richard Miller <9f...@hamnavoe.com> wrote:
> Not obvious to me. In today's (well, tomorrow's) massively multicore
> world, I would expect a remote call to a process in another core, with
> its own instruction cache, could easily be more efficient than a local
> pro
> > Not obvious to me. In today's (well, tomorrow's) massively multicore
> > world, I would expect a remote call to a process in another core, with
> > its own instruction cache, could easily be more efficient than a local
> > procedure call.
> >
>
> well, there's remote calls and remote calls. R
erik wrote:
> i'm not sure i understand. either you have the key (score)
> and you can decrypt the whole cyphertext (read the file tree
> below), or you don't. assuming of course that scores are too
> hard to guess. so the solution is: don't give out the root score.
my read on the utility of ro
> my read on the utility of rog's proposal is that you could then
> pre-exchange the crypto key via secure channel (real live handoff or
> whatnot) and then send root scores around freely over things like
> email. unauthorized parties reading your email then don't get your
> venti data.
if you wan
2009/2/3 erik quanstrom :
>> to my mind, the biggest security vulnerability in venti
>> is the ability to unconditionally enumerate an entire file tree given
>> its root score. if the VtPointer data structures, or the
>> scores within them, were encrypted somehow, maybe
>> that vulnerability could
Here's the best answer I can give, check this out:
http://www.scipy.org/
But as for introducing parallelism to cover the latency, it's an old
trick and works well. But do you want to be the one to tell people,
"you're going to have to introduce parallelism and fingernail-pulling
bugs because I wan
> >> I'm not sure how you'd fix this. What if only a portion of the block
> >> belongs to me and the other happens to be the password file?
> >
> > venti just stores whole blocks.
>
> Yes, but the content isn't guaranteed to be from a single user. In
> fact, venti has no clue. Change that and
> information can't leak in principle, but root scores are dangerous, which
> is why open-access venti servers are problematic - if such a score
> *does* happen to leak, then unconditional access to all your data has
> also leaked.
what prevents using a non-root score in a similar fashion?
- erik
> venti really doesn't
> care what you store.
OK, enough agreement :-)
The issue is that to provide any level of privacy to venti is
impossible, it needs to be done at a higher layer. I think the
original request was for sources to be replicated at the venti block
level, something that could hav
> information can't leak in principle, but root scores are dangerous, which
> is why open-access venti servers are problematic - if such a score
> *does* happen to leak, then unconditional access to all your data has
> also leaked.
If I understand correctly, this line of discussion
is primarily mo
> but as i said, i'm naive when it comes to crypto; maybe
> there's no way of doing this with any decent degree
> of security or usefulness.
Encryption is always a two-way path: for every bit of piece of mind
encryption provides, there is a corresponding fear of losing access.
Also, encryption ten
> i'm not sure i understand. either you have the key (score)
> and you can decrypt the whole cyphertext (read the file tree
> below), or you don't. assuming of course that scores are too
> hard to guess. so the solution is: don't give out the root score.
fossil/last will find the most recent ro
> One thing I've learned: some people will take a hit of a factor of
> 1000 in performance to preserve their concept of what is easy to use.
> Hence things like scipy. It works well for many people.
thanks for the reference.
this is an interesting problem. most of the time a 1000x hit is
a great
> now getting rather jaded about the fact that my fresh fossil/venti
> server has taken five days, twice, to dump -a little over 1GB of data
> on two separate occasions, I'm not sure encryption is affordable.
i would imagine that cpu has nothing to do with it and encryption
would add no overhead a
> i would imagine that cpu has nothing to do with it and encryption
> would add no overhead at all. i would image that seeks dominate
> your performance numbers.
Well, there are numerous issues. The machine is a CPU server booting
off another fossil/venti host; it has its own rather pristine, mo
> I can't easily check before fossil is active, but venti takes a long
> time to start and by the time the machine is "ready", memory is full
> and half of swap is in use :-( During "snap -a" load, context
> switching and interrupts tend to swing wildly and swap is often being
> accessed (it's on I
hi,
page fails on freebsd.
# page venti.pdf
swapcontext failed: Invalid argument
Assertion failed: (0), function contextswitch, file thread.c, line 300.
874: signal: sys: abort
# gdb $PLAN9/bin/page page.core
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free softwa
the original question was about flash video.
many here seem to have interesting ideas, but obviously
not motivated enough to want to plan/research/read/understand.
two clues: mpeg4 and rtp
>> By the way, Gnash seems to be quite useful.
Very interesting. Thank you.
By the way, Gnash seems to be quite useful.
--On Tuesday, February 03, 2009 12:22 PM +0100 Christian Walther
wrote:
2009/2/3 Eris Discordia :
I don't know of any open source implementations of Flash Player. The
software on each platform and for each browser see
On Tue, Feb 3, 2009 at 10:44 PM, Eris Discordia
wrote:
> Very interesting. Thank you.
>
> By the way, Gnash seems to be quite useful.
Well, that depends on what you call useful...
2009/2/3 Skip Tavakkolian <9...@9netics.com>:
> the original question was about flash video.
>
> many here seem to have interesting ideas, but obviously
> not motivated enough to want to plan/research/read/understand.
>
> two clues: mpeg4 and rtp
Thanks, I see there are some RFCs related to RTP,
a
I just solderd a paralel printer cable and together to get an old
canon bjc250 to work, finding that printing on plan9 was
horribly slow compared to ghostscript on linux :-(. The printer
paused up to 5 seconds after each a row. It takes minutes to print
the first page of /sys/doc/lp.ps...
I compar
29 matches
Mail list logo