Re: [atlas] integrity checks for the Atlas software?

2016-01-12 Thread Stephane Bortzmeyer
On Tue, Jan 12, 2016 at 06:54:09AM -0500, Tanner Ryan wrote a message of 52 lines which said: > I think that is completely possible. No, for the reasons explained by Micha and Dario. For a detailed survey (using the PC as an example), see this excellent review

Re: [atlas] integrity checks for the Atlas software?

2016-01-12 Thread Micha Bailey
No, this isn't possible. Or rather, it's not feasible with currently-existing software. The *only* way to have any kind of remote assurance of specific software running is through remote attestation, meaning that you have trusted hardware (e.g. a TPM) that can sign a statement that the machine m

Re: [atlas] integrity checks for the Atlas software?

2016-01-12 Thread Dario Ciccarone
What Micha said :) DISCLAIMER: I work for a vendor, but the following aren¹t in any way, shape or form my current employer views. It¹s my personal opinion, based, however, on many years of doing IRT. Micha is absolutely right ­ unless you start w/ a TPM-kind of hardware support, there¹s no way