#4443 NORM Update.: XO activation lease replay protection

[Zarro Boogs per Child]

#4443: XO activation lease replay protection
--------------------------+-------------------------------------------------
  Reporter:  mstone       |       Owner:  cscott              
      Type:  enhancement  |      Status:  new                 
  Priority:  normal       |   Milestone:  Update.2 (8.2.0)    
 Component:  security     |     Version:                      
Resolution:               |    Keywords:  security, activation
  Verified:  0            |    Blocking:                      
 Blockedby:               |  
--------------------------+-------------------------------------------------

Comment(by cscott):

 In particular, once a machine is marked 'stolen', it can be reactivated
 with a new activation lease.  But it can *not* be reactivated with an
 'old' activation lease.

 I don't think this feature is relevant for passive kill, because once the
 lease expires it's not useful anyway. We don't have to keep track of
 expired leases, except to try to detect clock-reset attacks -- and the
 clock reset attacks could just as easily be mounted *before* the lease
 expires, so trying to be clever here doesn't buy us much actual security.

 Does this match your recollection, Michael?

-- 
Ticket URL: <http://dev.laptop.org/ticket/4443#comment:3>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system