[Info-vax] Some of what I'm reading...

[Stephen Hoffman]

On 2018-05-12 20:35:17 +0000, Stephen Hoffman said:

> FWIW...    Some interesting topics, and some topics related to recent 
> discussions here in the comp.os.vms newsgroup.   Some relevant to 
> OpenVMS.  Some not.

A database running within SGX enclave:
 
https://www.microsoft.com/en-us/research/publication/enclavedb-a-secure-database-using-sgx/ 


Spectre variant 3a & variant 4 flaws have been disclosed, affecting 
various Intel, AMD and Arm processors
	https://bugs.chromium.org/p/project-zero/issues/detail?id=1528
 
https://www.redhat.com/en/blog/speculative-store-bypass-explained-what-it-how-it-works 

	CVE-2018-3639, CVE-2018-3640

PGP alternative with Perfect Forward Security (PFS) support:
	https://github.com/stealth/opmsg

Fun with WireShark
	http://chrissanders.org/2018/05/large-captures1-colorizing-wireshark/

Per Jess Telford, some words that should be avoided using when writing 
documentation:
	obviously, basically, simply, of course, clearly, just, everyone 
knows, however, so, easy

Some Security Resources:
	https://www.it-sec-catalog.info/analysis_and_exploitation_unprivileged.html

C Programming Resources
	https://notabug.org/koz.ross/awesome-c

Second Factors...  Overview of Security Keys (U2F, 2FA, TOTP/HOTP, etc)
	https://www.imperialviolet.org/2018/03/27/webauthn.html

The UEFI bootstrap and security
	https://trmm.net/LinuxBoot_34c3

RISC-V:
	https://riscv.org/risc-v-foundation/

libtls SSL/TLS library application programming interface:
	http://www.openbsd.org/papers/libtls-fsec-2015/mgp00001.html
	https://www.openbsd.org/papers/linuxconfau2017-libtls

"GDPR Hysteria":
	https://jacquesmattheij.com/gdpr-hysteria

Some DEC History, for those folks unfamiliar with the DEC NOD:
 
http://archive.computerhistory.org/resources/text/DEC/dec.bell.no_output_division_C-I_TF;productivity_review.1982.102630376.pdf 




-- 
Pure Personal Opinion | HoffmanLabs LLC