Way to tell if it is an XO

Marcel Renaud marcelr01 at gmail.com
Wed Dec 10 06:56:39 EST 2008


Thanks a lot for your answers.

Yes, I think a shared credentials are the best way.

Basically we want to offer a service just for the Xos and are working now on
the authentication model.
We are going to use webservices with
WSS<http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss>
and place a signed key on each XO that is going to use the service, to
authenticate with the webservice provider.

Regards,

Marcel

On Tue, Dec 9, 2008 at 8:14 PM, Carl-Daniel Hailfinger <
c-d.hailfinger.devel.2006 at gmx.net> wrote:

> Hi,
>
> On 09.12.2008 22:37, Chris Ball wrote:
> >    > Hello, I need to know what is a good way to find out if the local
> >    > machine running a python script is a XO.
> >
> > One way might be to "cat /ofw/model".  If the file doesn't exist, or
> > doesn't return a letter and number, you probably aren't running on an
> > XO.
> >
> >    > The goal is to check it the machine running the program is in fact
> >    > an XO or some other machine, and to do it in a way that is very
> >    > hard to fake from some other computer.
> >
> > I don't think making this hard to fake is possible, because any computer
> > with root access can reply to your test in whatever way is necessary.
> > I think you probably shouldn't try to accomplish this, or should try to
> > use a different method such as a pre-shared credential.
> >
>
> Yes, regardless of which test Marcel implements, it should be easy to
> fool the test in a few minutes.
>
>
> Regards,
> Carl-Daniel
>
> --
> http://www.hailfinger.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.laptop.org/pipermail/devel/attachments/20081210/447c048e/attachment.html>


More information about the Devel mailing list