News for hackers. Stuff that matters.

A comment on Harvey – An effort to provide a modern, distributed, 64-bit operating system. Parent comment

Re:Harvey – An effort to provide a modern, distributed, 64-b... by floren on Friday December 22, 2017 @02:32PM (#15990198)
You're absolutely correct, and like I said a lot of people run their Plan 9 systems with all the services on one box, which kills a lot of the security advantages.

However, if you compare setting up a Plan 9 auth server to setting up a Kerberos server... well, basically anything to do with Kerberos makes me long for death. The Plan 9 auth system is one of the best things they made and I highly recommend checking out the paper: https://css.csail.mit.edu/6.858/2013/readings/plan9auth.pdf

[ Parent | on HN ]
Re:Harvey – An effort to provide a modern, distributed, 64-b... by nine_k on Friday December 22, 2017 @05:06PM (#15991299)
Can the component machines be run as VMs on fewer / one physical machine? It would make for a better QubesOS then.
[ Parent | on HN ]
Re:Harvey – An effort to provide a modern, distributed, 64-b... by floren on Friday December 22, 2017 @07:59PM (#15992219)
Yes, I've used minimega to run a bunch of Harvey VMs for experimental use. https://github.com/Harvey-OS/harvey/wiki/Using-minimega-to-r...
[ Parent | on HN ]
Re:Harvey – An effort to provide a modern, distributed, 64-b... by nuntius on Friday December 22, 2017 @08:56PM (#15992465)
If you emulate a dozen machines on one physical machine, then a single exploit can traverse them all. If you pack a dozen "single board computers" in a case and give each a single function, then entire classes of attack are ruled out.
[ Parent | on HN ]