Thanks a lot for your answers.

Yes, I think a shared credentials are the best way.

Basically we want to offer a service just for the Xos and are working now on
the authentication model.
We are going to use webservices with
WSS<http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss>
and place a signed key on each XO that is going to use the service, to
authenticate with the webservice provider.

Regards,

Marcel

On Tue, Dec 9, 2008 at 8:14 PM, Carl-Daniel Hailfinger <
[EMAIL PROTECTED]> wrote:

> Hi,
>
> On 09.12.2008 22:37, Chris Ball wrote:
> >    > Hello, I need to know what is a good way to find out if the local
> >    > machine running a python script is a XO.
> >
> > One way might be to "cat /ofw/model".  If the file doesn't exist, or
> > doesn't return a letter and number, you probably aren't running on an
> > XO.
> >
> >    > The goal is to check it the machine running the program is in fact
> >    > an XO or some other machine, and to do it in a way that is very
> >    > hard to fake from some other computer.
> >
> > I don't think making this hard to fake is possible, because any computer
> > with root access can reply to your test in whatever way is necessary.
> > I think you probably shouldn't try to accomplish this, or should try to
> > use a different method such as a pre-shared credential.
> >
>
> Yes, regardless of which test Marcel implements, it should be easy to
> fool the test in a few minutes.
>
>
> Regards,
> Carl-Daniel
>
> --
> http://www.hailfinger.org/
>
>
_______________________________________________
Devel mailing list
[email protected]
http://lists.laptop.org/listinfo/devel

Reply via email to