 |
Virtualization and Grid Computing |
On distributed computing, HPC, VMs, Web Services, Globus, Xen, and more.
- Recent
- Popular
- Tags (0)
- Subscribers (4)
- Rogue Root CAs because of MD5 collisionsDecember 30 2008
-
Quoting from http://www.phreedom.org/research/rogue-ca/
“As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers. This certificate allows us to impersonate any website on the Internet, including banking and e-commerce sites secured using the HTTPS protocol.”
I wrote a program to look through the trusted certs that came with Firefox 3.0.4 for any CAs with MD5 signature algorithms.
[snip]
UPDATE: the list was not relevant because of a feature of the attack (thanks Thomas). Apparently “only RapidSSL and FreeSSL are practically vulnerable”
UPDATE 2: VeriSign responds, no longer possible with RapidSSL. And they’ve been phasing MD5 out across the board.
Feed for non-commercial use only. - Call for papers: VTDC-09December 30 2008
-
Call for Papers
3rd International Workshop on Virtualization Technologies in
Distributed Computing (VTDC-09)
http://grid-appliance.org/vtdc09
In conjunction with ICAC 2009
Barcelona, Spain, June 15 2009
Workshop scope:
Virtualization has proven to be a powerful enabler in the field of distributed computing and has led to the emergence of the cloud computing paradigm and the provisioning of Infrastructure-as-a-Service (IaaS). This new paradigm raises challenges ranging from performance evaluation of IaaS platforms, through new methods of resource management including providing Service Level Agreements (SLAs) and energy- and cost-efficient schedules, to the emergence of supporting technologies such as virtual appliance management.
For the last three years, the VTDC workshop has served as a forum for the exchange of ideas and experiences studying the challenges and opportunities created by IaaS/cloud computing and virtualization technologies. VTDC brings together researchers in academia and industry who are involved in research, development and planning activities involving the use of virtualization in the context of distributed systems, where the opportunities and challenges with respect to the management of such virtualized systems is of interest to the ICAC community at large.
Important dates:
- Submission deadline: February 20th
- Nimbus user quotesNovember 20 2008
-
It was a good feeling to pause for a moment and put a user quotes page together for Nimbus. We’ve worked hard to make Nimbus usable and useful — but the best is yet to come!
Feed for non-commercial use only. - New Xen RoadMapOctober 30 2008
-
Some interesting things in the new Xen road map.
[via Stephen Spector]
Feed for non-commercial use only. - Nimbus TP2.1October 16 2008
-
Besides the good stuff added to Nimbus, this release also introduces something called the AutoContainer which allows you to set up a Globus Java web services environment, from scratch and with security working, within about a minute (requires Linux/OSX and Java 1.5+).
The main new features provided in this release are tools facilitating the deployment, configuration and management of clouds. We also updated our implementation to match the current Amazon EC2 deployment. In addition, the release contains new documentation and bug fixes.
You can download the new release from:
http://workspace.globus.org/downloads/index.htmlThe full changelog can be found here:
http://workspace.globus.org/vm/changelog.html#TP2.1
Feed for non-commercial use only.