Re: Reviving the hardware census

2017-11-09 Thread Nathaniel McCallum
On Thu, Nov 9, 2017 at 3:26 PM, Chris Murphy wrote: > On Thu, Nov 9, 2017 at 1:11 PM, Nathaniel McCallum > wrote: >> Turning it into a hash doesn't solve the tracking problem. It only >> prevents the attacker from knowing a list of serial numbers.

Re: Reviving the hardware census

2017-11-09 Thread Chris Murphy
On Thu, Nov 9, 2017 at 1:11 PM, Nathaniel McCallum wrote: > Turning it into a hash doesn't solve the tracking problem. It only > prevents the attacker from knowing a list of serial numbers. I suspect > keeping hashes of identifying information will likely cause >

Re: Reviving the hardware census

2017-11-09 Thread Nathaniel McCallum
Turning it into a hash doesn't solve the tracking problem. It only prevents the attacker from knowing a list of serial numbers. I suspect keeping hashes of identifying information will likely cause controversy. On Thu, Nov 9, 2017 at 2:12 PM, Chris Murphy wrote: > On

Re: Reviving the hardware census

2017-11-09 Thread Chris Murphy
On Thu, Nov 9, 2017 at 7:27 AM, Don Zickus wrote: > On Thu, Nov 09, 2017 at 09:19:04AM -0500, Nathaniel McCallum wrote: >> Agreed completely. But I still need someone with experience using lshw >> to write a data processor (json => SQL) for that data. Also, we will >> need to

Re: Reviving the hardware census

2017-11-09 Thread Nathaniel McCallum
Wow! You're fast at getting stuff upstream! ;) We still need a volunteer for the census side of things. On Thu, Nov 9, 2017 at 9:27 AM, Don Zickus wrote: > On Thu, Nov 09, 2017 at 09:19:04AM -0500, Nathaniel McCallum wrote: >> Agreed completely. But I still need someone with

Re: Reviving the hardware census

2017-11-09 Thread Don Zickus
On Thu, Nov 09, 2017 at 09:19:04AM -0500, Nathaniel McCallum wrote: > Agreed completely. But I still need someone with experience using lshw > to write a data processor (json => SQL) for that data. Also, we will > need to sanitize the lshw output to ensure we omit identifying > information. For

Re: Reviving the hardware census

2017-11-09 Thread Nathaniel McCallum
Agreed completely. But I still need someone with experience using lshw to write a data processor (json => SQL) for that data. Also, we will need to sanitize the lshw output to ensure we omit identifying information. For example, ip addresses on the network interfaces need to be filtered out. It

Re: Reviving the hardware census

2017-11-09 Thread Don Zickus
On Wed, Nov 08, 2017 at 05:02:05PM -0500, Nathaniel McCallum wrote: > It isn't documented in F27, but it does work. However, we probably > want at least this patch: > https://github.com/lyonel/lshw/commit/135a853c60582b14c5b67e5cd988a8062d9896f4 And some beaker stuff looks interesting in