[OLPC Security] Securing the laptop: DoS

John Moser john.r.moser at gmail.com
Sun Oct 8 17:06:23 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Ivan Krstić wrote:
> John Moser wrote:
>> Ivan Krstic wrote:
>>> The way I'm hoping to mitigate the NAND burn problem is by a combination
>>> of rate limiting and hard write quotas.
>> Both of which can lead to DoS
> 
> There are some details involved here that make me suspect DoS is less of
> a problem than it would be otherwise. Importantly, a misbehaving

DoS would be less of a problem than destroying the disk, for sure.

> application that triggers its rate limiting or write quota won't
> interfere with other applications' write ops, so a malicious application
> can only paint itself in a corner.
> 

fork() bomb defuser as well?


:(){ :|:;} :   # Standard CPU thrasher


:(){ :&:& echo 'bleep!' >> ~/..bleep.$$ ; sleep 2; rm ~/..bleep.$$}; :
    # Disk thrasher

(This is off the cuff and I don't know that it does what I think it
does; I *think* it spawns 2 :()'s in the background, writes "bleep!" to
~/..bleep.$$, waits 2 seconds, then removes ~/..bleep.$$)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=jS+Q
-----END PGP SIGNATURE-----


More information about the Security mailing list