Category Archives: Security

Cloud API Query for Firewall Rules

The “Hello Cloud” walk-through for Project Kenai gives an example of how “examining the virtual data center” with the Sun Cloud API would show rules on a VM firewall

  "vms": [
    {
      "name" : "Firewall"
      "uri": "/vdc/m~FW01",
      "run_status" : "HALTED",
      "description" : "Firewall appliance; ports 80 and 22 open.",
      "hostname" : "FW01",
      "os" : "Solaris 10",
      "cpu" : 1800,
      "memory" : 2,
      "boot_disk" : 10,
      "data_disk" : 80,
      "temp_disk" : 10,
      "params" : { },
      "tags" : [ ],
      "back_up": "/vdc/m~FW01/ops/back-up",
      "attach": "/vdc/m~FW01/ops/attach",
      "detach": "/vdc/m~FW01/ops/detach",
      "backups" : [ ],
      "interfaces" : [
        {
          "mac_address": "00:16:3E:08:00:91",
          "ip_address": "144.34.100.199",
          "public_address": "/addresses/144.34.100.199",
          "nic": "eth0"
        },
        {
          "vnet": "/vnets/10.31.145.0",
          "mac_address": "00:16:3E:08:00:92",
          "ip_address": "10.31.145.254",
          "nic": "eth1"
        }
      ]
      "controllers": {
        "start": "/vdc/m~FW01/ops/start",
      }
    }
  ]

Replacing Access Controls for Large Sets

Binder is a logic-based security language by John DeTreville

We introduce the concept of a security language, used to express security statements in a distributed system. Most existing security languages encode security statements as schematized data structures, such as ACLs and X.509 certificates. In contrast, Binder is an open logic-based security language that encodes security statements as components of communicating distributed logic programs.

Soutei, a dialect of Binder, is a trust-management system by Andrew Pimlott and Oleg Kiselyov. It attempts to improve upon and replace simple data structures like access control lists in order to accommodate large and volatile sets of users and resources, complicated constraints, and distributed administration.

Soutei brings Binder from a research prototype into the real world. Supporting large, truly distributed policies required non-trivial changes to Binder, in particular mode-restriction and goal-directed top-down evaluation. To improve the robustness of our evaluator, we describe a fair and terminating backtracking algorithm.

NTSB Aircraft Accident Report

A new public report of recent aircraft accidents in America has been posted by the NTSB.

The Members of the National Transportation Safety Board meet in a public session, under the provisions of the Government in the Sunshine Act, generally held on Tuesdays to discuss and adopt accident reports, special investigation reports, safety studies, and other Board products.

One report focuses on the need for better medical examination procedures of pilots to anticipate the risk of brain haemorrhage, as well as how to reduce failure of flight recorders.

The other discusses the catastrophic impact of poor risk management and incident response:

Contributing to the accident were an organizational culture that prioritized mission execution over aviation safety and the pilot’s fatigue, self-imposed pressure to conduct the flight, and situational stress. Also contributing to the accident were deficiencies in the NMSP aviation section’s safety-related policies, including lack of a requirement for a risk assessment at any point during the mission; inadequate pilot staffing; lack of an effective fatigue management program for pilots; and inadequate procedures and equipment to ensure effective communication between airborne and ground personnel during search and rescue missions.

Bicycle Speed Limit on Golden Gate Bridge

An uninspired solution to bicycling risk has been proposed for San Francisco’s Golden Gate Bridge

  1. On a busy day: as many as 6,000 bicyclists and 10,000 pedestrians use the sidewalks
  2. Over the last 10 years, there have been 164 reported bicycle-involved accidents that produced 178 injuries, 119 of those injuries were serious enough to require transport by ambulance
  3. Most common type of accident on the Bridge sidewalks is the solo bike accident
  4. 5 times as many solo bicycle accidents as bicycle-pedestrian accidents
  5. Most common accident location is the west sidewalk, where pedestrians are prohibited
  6. Speed was identified as a contributing factor in 39% of all bike-related accidents.

I hope I’m not the first person to point this out but there are an average of 30 fatalities a year from the bridge — people who jump off. My guess is a consultant is already working on a Golden Gate Bridge jump speed limit. A fall at a slower rate would dramatically reduce fatalities. Other options have already been ruled out.

The original architect called for a higher rail, but the builder was a short man and insisted on lowering the bar so his view of the bay would not be obstructed.

To put this in perspective, the consultants set their speed limit recommendation at half of the measured current mean. 10 mph is very slow for even a beginner cyclist on smooth pavement with a natural decent, let alone a commuter cyclist who is fit from riding every day.

If the consultants had followed the California 85th percentile rule (the speed of 85% of those on the road) they would have set the limit above 20mph. A limit set so far below the natural flow and current conditions is destined for failure and controversy. Asking California Highway Patrol to expand their resources to handle this scenario while cutting back resources elsewhere, for example, seems entirely misguided.

The recommendation also begs the question of why such a giant drop in speed is justified when the report on Golden Gate Bridge shows less than one solo bicycle (bicycle to bicycle) accident per 80,000 miles ridden.

A more thorough analysis might have admitted that speed above 10 mph is not the problem. Difference in speed is the problem. The authorities could just as easily ticket bicyclists who are travelling too slow, causing a hazard, and require all cyclists to stay above 15 mph. After all, insurance companies who look at the statistics know that over 80% of accidents are caused by drivers going too slow, not fast — the more people travel at a similar speed, the less risk from changing lanes into a head-on collision.

Rural two-lane roadways are statistically the most dangerous because of a high incidence of deadly head-on collisions and the difficulty impatient drivers’ face while overtaking slower vehicles.

As long as I’m talking about creative interpretation of data, here’s an idea that I think many would find a lot more interesting: return a lane to the bridge’s original design for public transportation.

San Francisco was a city without much surplus land to use for roads and depended on its cablecars and its Key system, a system operating 230 electric trolleys and trains. Immediately after acquiring controlling interest in the parent company of the Key system, National City Lines announced its plans to replace the entire system with a fleet of—you guessed it—General Motor’s buses. The Key system owned rights of way across the Golden Gate Bridge; these rights of way were paved over to make way for cars and buses.

This approach will reduce the number of people who have to commute by car, increase the number of tourists, add revenue for the bridge to offset the cost of maintenance and…if bicyclists share the trolley lane then the bridge also achieves a high-speed non-distracted corridor for bicyclists to cross at a reasonable speed.

Photo from BikeCal: Bill Oetinger