[OLPC-devel] OLPC "bootloader"

[Christopher Blizzard]

Ronald G Minnich wrote:
> The controller has complete control over the node. This is how I bring 
> up my OLPC nodes now to burn flash. It's a very fast boot, and the node 
> has zero autonomy. The flash image for this could be very small with 
> uclibc.
> 
> But I like the idea of a mode in which the node has zero autonomy, and 
> is basically remote-control for loading. I think we could help set this 
> up. Also, the additional part we can bring in (from existing projects, 
> nothing new!) is the authentication stuff which would get us the 
> security we need for the wild world.

Yeah, I think it's what makes it possible to explore different ways of 
doing an install over wireless.  And if we do it right it will be very 
forwards-compatible.

I'd love to examine the security issues.  I'm not sure how far we want 
to go with those.  The fact that you can depend on your friend sitting 
next to you affects the picture quite a bit.  The only thing we need to 
worry about at that point is man in the middle attacks and coming up 
with a way to identify which machine you're talking to.  The fact that 
they can be co-located helps a lot.  It might be enough to match a set 
of numbers or images on two screens.

We might be over-thinking this, though.  We're all computer experts in 
thinking about what _could_ happen.  But maybe it's fine to just trust 
your local wireless network.  The larger the set of people (think 1,000 
child schools) the more likely you are to have problems.  But in a 
30-person school?  Eh.

--Chris