comp527

Hi, I’m looking for a partner in the coming project.

I’ve done lots of systems programming before and am really interested in the challenge of the project.

Write to me if you’re interested (xzl AT rice ). Thanks!

-Felix

All of you read about security issues every day, whether it’s in your newspaper, on Slashdot, or on more security-focused blogs like Freedom to Tinker or Bruce Schneier’s blog. Now’s your chance. As a participant in this class, I’m expecting you to be a part of the blogosphere. As the semester winds on, you may see some piece of news. Write a paragraph or two here about it. When somebody else posts here, feel free to comment on it.

What we’re really trying to get at is the security mindset; if you learn to look at the world through skeptical eyes, you’ll see problems everywhere. As an example: how good is the physical security of your dormitory? How long could somebody pretend to be a Rice student and get away with it? (Answer: longer than you’d think.) Or maybe you start using the latest new web service. Use a JavaScript debugger in your web browser, or maybe a packet sniffer, and have a look at how it works. Maybe you find a security vulnerability. Let us know. Over the course of the semester, each of you should make at least two posts here, and contribute in the comments of other posts as well. You can see what people posted last year to get a sense of how this works.

Of course, this is a public blog, and search engines will pick up what you write. Be polite and mature. Also, if you’ve discovered something where public disclosure might cause some heartburn, then make sure you talk to me first and we’ll make sure we handle things properly, hopefully avoiding any nasty lawsuits.

(Note, as an anti-spam measure, I need to bump you up from a newly registered “subscriber” to an “editor” before you’ll be allowed to post anything. You won’t be able to post immediately after you register.)

The paper for the ADJECTIVE Filesystem, written by Kevin Montrose, Corey Shaw, and Derek Sessions, has been completed.

[Website Link] — [Paper (pdf)]