Hi,

Unfortunately I don't know of any USB devices of the kind you mentioned, in fact the 
USB suggestion was just something the occoured to me while reading your question. I 
think you need to outline more regarding the type of attacks you are trying to protect 
yourself from.

HTH,
Dotan

-----Original Message-----
From: Wullschleger, Donat [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 23, 2002 2:13 PM
To: 'Log4J Users List'
Subject: RE: Logging to CDRW


Hello,

(1)The file should be tamper proof which we will achieve by either
encrypting or adding a checksum to the file/log entry (exactly what you
mentioned below).

(2)The user should not be able to delete the file which we wanted to achieve
with logging to a CD-ROM.

Your idea with the USB memory card sounds interesting. Do you know any
lockable (and maybe even encrypting) USB memory cards which can be used on
linux? I could only find some that run on a Windows Box...

Thanks for your help

Donat

-----Original Message-----
From: Dotan Dvir [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 23, 2002 11:18 AM
To: Log4J Users List
Subject: RE: Logging to CDRW


Hi,

I think a CDRW is not RW in the manner which you describe. You can write to
it the same way you would write to an HD. If you  want to make the file
tamper proof either act through obscurity or (better yet) use some encrypted
file system. The prefered device would be a USB memory card that can be
locked for safe keeping.

You can also digitally sign the entries assuming the machine's security
measures don't make the key pair too easy to retrieve.

HTH,
Dotan

-----Original Message-----
From: Wullschleger, Donat [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 23, 2002 11:05 AM
To: '[EMAIL PROTECTED]'
Subject: Logging to CDRW


Hello,

I currently work for a project that involves a linux box without harddrive
running a single JAVA application. 

As for the application, it is very important that the log cannot be modified
by anyone (!) after it has been written. Therefore everything that involves
either a harddrive or a floppy is out of question - I wonder if anyone has
an idea how to log to a CDRW?

Any help is appreciated.

Donat


This communication contains information which is confidential and may be
legally privileged and is for the exclusive use of the addressee(s). If you
are not a named addressee please contact the sender immediately, and delete
the communication from your system. You are hereby notified that any
disclosure, distribution or copying of this communication, in whole or in
part, is strictly prohibited.  Any views or opinions presented are solely
those of the author and do not necessarily represent those of the Company,
its directors or officers unless otherwise specifically stated. The Company
is not responsible for any reliance placed on the information contained
herein and excludes all liability. Any information / data received by the
Company in this communication may be retained and used for business purposes
in accordance with the Data Protection Act 1998 and consent for the same
shall be deemed given, unless specifically stated otherwise. 

(c)Copyright 2002 Siemens Metering Limited All Rights Reserved. 

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>


This communication contains information which is confidential and may be
legally privileged and is for the exclusive use of the addressee(s). If you
are not a named addressee please contact the sender immediately, and delete
the communication from your system. You are hereby notified that any
disclosure, distribution or copying of this communication, in whole or in
part, is strictly prohibited.  Any views or opinions presented are solely
those of the author and do not necessarily represent those of the Company,
its directors or officers unless otherwise specifically stated. The Company
is not responsible for any reliance placed on the information contained
herein and excludes all liability. Any information / data received by the
Company in this communication may be retained and used for business purposes
in accordance with the Data Protection Act 1998 and consent for the same
shall be deemed given, unless specifically stated otherwise. 

(c)Copyright 2002 Siemens Metering Limited All Rights Reserved. 

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to