|
rhysnewman (June 29, 2008 at 9:00 pm)
Indeed there are many similar projects, many more recent than 2002 (when it seems activity on the Bayanihan project stopped). However there are critical differences which make Nereus+JPC unique and substantially more powerful; just that with the time allowed in this talk I could not devote time to contrasting directly with/to background/previous work. The manifest absence today of a global MPC grid demonstrates that previous work is lacking; Nereus+JPC addresses these gaps like nothing before it
kagemane10 (June 26, 2008 at 5:12 pm)
This is an old topic...
You should explore the BAYANIHAN PROJECT...
With both Java and C# implementations...
Nereus is just a big rip off version of the Philippines' BAYANIHAN Project.
debeastie (June 2, 2008 at 1:46 pm)
Security to one side a moment. As nothing is ever perfect. Would be good to get it Pen tested though!
I'm really impressed with the potential for this application. It's a bit like SETI DCN on amphetamines.
thanks
/debeastie
rhysnewman (May 28, 2008 at 2:20 pm)
Our experience is that there is almost *no* amount of money which we could pay for someone to download and execute an arbitary executable. If I paid you $10 would you run a binary from me? Remember it could be a tojan, keylogger, virus.....would you do it for $100, $1000?
However it is also true that many users care a lot about data privacy, and so they would not use Nereus for that reason. Its a balance of this privacy concern vs the *huge* processing power of the grid.
natlang1 (May 28, 2008 at 12:25 am)
Privacy is a subset of security. The public would be happy to run code with *no* sandbox if they get paid for it. However, the industries that can/would pay for such a service (medicine, finance, government, Hollywood, transportation, energy) do have security concerns. Without data security, the vast majority of problems can't be delegated to a public grid. Those are the profitable problems, and with out them, all grids will remain at least three orders of magnitude smaller than the potential.
rhysnewman (May 26, 2008 at 6:32 pm)
We use "Security" in terms of the possibility guest code steals data from the host machine (or otherwise interferes with it). Your concern we label "Privacy"; and no, JPC does not provide a cast-iron guarantee on privacy (although it would be pretty difficult to pick apart the JVM, then JPC and then the x86 guest OS and then the memory of the guest application). Nevertheless we make no sweeping claims about Privacy - just that JPC and the JVM as a "Security" solution is really bullet-proof
rhysnewman (May 26, 2008 at 6:26 pm)
JPC peaks currently at 20% of the speed of the underlying hardware. We know, from initial tests and some very helpful discussions with Sun engineers, that we can double this to over 40%. So your concern, while valid for most emulators, is not a major issue for JPC. In fact some code can actually run *faster* inside JPC as older x86 code is automatically re-compiled by JPC and Sun's Hotspot JVM
djdaedulus (May 26, 2008 at 1:59 am)
Screw that, that leaves people in the higher hierarchy of the IT departments who happen to be in the pockets of government agencies . The opportunity to seize control of PC's for the use of whatever they decide.
The same goes along with having to put in your email address everywhere to register on the web and then they sell that info. But they always say yeah trust us. It will be ok. Also in most web contracts they leave open we can modify any part of the contract we want.
natlang1 (May 22, 2008 at 12:32 pm)
If Java isn't secure enough, running an emulator written in Java will not be more secure. The real security problem is not to hide the hardware; it is to hide the data. For an anonymous grid, we need algorithms that can run in parallel without revealing any decipherable portions of data to the clients and without the clients being able to inject false results. The "sandbox" is mostly a side effect of the solution to those problems. We certainly don't need sandboxes within sandboxes within...
MiniBenoit (May 19, 2008 at 9:35 pm)
I'm really skeptical about the jPC part.
Even though it is certainly a nice way to learn things about JIT and x86, to me it really looks like another way to divide your processing power by 10... |