[kernel-hardening] Any artists around?

[kernel-hardening] Any artists around?

[Kees Cook]

Hi,

I've been asked if the Kernel Self-Protection Project has a logo. We
don't have one, but in a world with logos even for exploits, it seems
like we're missing something. :) Other defensive projects (like the
major LSMs) have logos:

SELinux:
http://selinuxproject.org/images/selinux-penguin-125.png

AppArmor:
http://archive.is/pm43d/0d9cb927561e325784f3e6d20c97f56361795918.png

Smack:
https://upload.wikimedia.org/wikipedia/commons/thumb/0/0c/Smack-tux.svg/237px-Smack-tux.svg.png

Does anyone have some suggestions or sketches for a logo we could use?

-Kees

-- 
Kees Cook
Nexus Security

RE: [kernel-hardening] Any artists around?

[Schaufler, Casey]

I have a nasty idea, but it may take a day or two.
Bwah Hah Hah,


> -----Original Message-----
> From: Kees Cook [mailto:keescook@google.com]
> Sent: Monday, October 03, 2016 12:16 PM
> To: kernel-hardening@lists.openwall.com
> Subject: [kernel-hardening] Any artists around?
> 
> Hi,
> 
> I've been asked if the Kernel Self-Protection Project has a logo. We
> don't have one, but in a world with logos even for exploits, it seems
> like we're missing something. :) Other defensive projects (like the
> major LSMs) have logos:
> 
> SELinux:
> http://selinuxproject.org/images/selinux-penguin-125.png
> 
> AppArmor:
> http://archive.is/pm43d/0d9cb927561e325784f3e6d20c97f56361795918.png
> 
> Smack:
> https://upload.wikimedia.org/wikipedia/commons/thumb/0/0c/Smack-
> tux.svg/237px-Smack-tux.svg.png
> 
> Does anyone have some suggestions or sketches for a logo we could use?
> 
> -Kees
> 
> --
> Kees Cook
> Nexus Security

Re: [kernel-hardening] Any artists around?

[Yves-Alexis Perez]

[-- Attachment #1: Type: text/plain, Size: 229 bytes --]

On Mon, 2016-10-03 at 12:16 -0700, Kees Cook wrote:
> Does anyone have some suggestions or sketches for a logo we could use?

What about http://kernsec.org/images/overlord59-tux-halo.png from kernsec
wiki?
-- 
Yves-Alexis

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 455 bytes --]

Re: [kernel-hardening] Any artists around?

[Kees Cook]

On Mon, Oct 3, 2016 at 12:27 PM, Yves-Alexis Perez <corsac@debian.org> wrote:
> On Mon, 2016-10-03 at 12:16 -0700, Kees Cook wrote:
>> Does anyone have some suggestions or sketches for a logo we could use?
>
> What about http://kernsec.org/images/overlord59-tux-halo.png from kernsec
> wiki?

What's the origin of that one, exactly? Maybe James knows?

-Kees

-- 
Kees Cook
Nexus Security

Re: [kernel-hardening] Any artists around?

[James Morris]

On Mon, 3 Oct 2016, Kees Cook wrote:

> On Mon, Oct 3, 2016 at 12:27 PM, Yves-Alexis Perez <corsac@debian.org> wrote:
> > On Mon, 2016-10-03 at 12:16 -0700, Kees Cook wrote:
> >> Does anyone have some suggestions or sketches for a logo we could use?
> >
> > What about http://kernsec.org/images/overlord59-tux-halo.png from kernsec
> > wiki?
> 
> What's the origin of that one, exactly? Maybe James knows?

As I recall, it's from this artist:

http://overlord59.deviantart.com/


-- 
James Morris
<jmorris@namei.org>

Re: [kernel-hardening] Any artists around?

[Kees Cook]

On Wed, Oct 5, 2016 at 12:08 AM, James Morris <jmorris@namei.org> wrote:
> On Mon, 3 Oct 2016, Kees Cook wrote:
>
>> On Mon, Oct 3, 2016 at 12:27 PM, Yves-Alexis Perez <corsac@debian.org> wrote:
>> > On Mon, 2016-10-03 at 12:16 -0700, Kees Cook wrote:
>> >> Does anyone have some suggestions or sketches for a logo we could use?
>> >
>> > What about http://kernsec.org/images/overlord59-tux-halo.png from kernsec
>> > wiki?
>>
>> What's the origin of that one, exactly? Maybe James knows?
>
> As I recall, it's from this artist:
>
> http://overlord59.deviantart.com/

Hilariously, it seems that at least Linux Foundation decided that it's
KSPP's logo already. I just noticed it at the bottom of
https://www.coreinfrastructure.org/grants

-Kees

-- 
Kees Cook
Nexus Security

Re: [kernel-hardening] Any artists around?

[Solar Designer]

On Mon, Oct 03, 2016 at 12:16:07PM -0700, Kees Cook wrote:
> Does anyone have some suggestions or sketches for a logo we could use?

How about a bikeshed?  It would convey how hardening is not "perfect
security", and ack the irony of spending time on discussing a logo.
I don't even have a preference as to which color the bikeshed should be.

Alexander

Re: [kernel-hardening] Any artists around?

[Kees Cook]

On Mon, Oct 3, 2016 at 12:34 PM, Solar Designer <solar@openwall.com> wrote:
> On Mon, Oct 03, 2016 at 12:16:07PM -0700, Kees Cook wrote:
>> Does anyone have some suggestions or sketches for a logo we could use?
>
> How about a bikeshed?  It would convey how hardening is not "perfect
> security", and ack the irony of spending time on discussing a logo.
> I don't even have a preference as to which color the bikeshed should be.

Haha, yes, exactly. This is the opening image I used in my slides
covering the uid-0/ring-0 lockdown series at LSS on 2014:

https://outflux.net/bikeshed.jpg

:)

-Kees

-- 
Kees Cook
Nexus Security

Re: [kernel-hardening] Any artists around?

[Solar Designer]

On Mon, Oct 03, 2016 at 12:59:31PM -0700, Kees Cook wrote:
> On Mon, Oct 3, 2016 at 12:34 PM, Solar Designer <solar@openwall.com> wrote:
> > On Mon, Oct 03, 2016 at 12:16:07PM -0700, Kees Cook wrote:
> >> Does anyone have some suggestions or sketches for a logo we could use?
> >
> > How about a bikeshed?  It would convey how hardening is not "perfect
> > security", and ack the irony of spending time on discussing a logo.
> > I don't even have a preference as to which color the bikeshed should be.
> 
> Haha, yes, exactly. This is the opening image I used in my slides
> covering the uid-0/ring-0 lockdown series at LSS on 2014:
> 
> https://outflux.net/bikeshed.jpg

Oh, cool.  Meanwhile, my Twitter poll ended in favor of bikeshed:

https://twitter.com/solardiz/status/783033528736940032

"What should (Linux) Kernel Self Protection Project's logo be?

32% A fancy penguin
42% A bikeshed
 7% Other (please tweet what)
19% No logo

116 votes"

A bikeshed would also ack the grsecurity project's opinion (as I
understand it) that trying to upstream hardening changes (through the
hoops) is sort of bikeshedding (in comparison with having made such
changes) or that the typical initial response (those hoops) is
bikeshedding, and that some of those changes (not in grsecurity) are a
bikeshed on their own.  This shouldn't stop us, but we can troll
ourselves a bit by ack'ing this dissenting opinion in the logo. ;-)

Alexander

Re: [kernel-hardening] Any artists around?

[Theodore Ts'o]

On Thu, Oct 06, 2016 at 12:32:20AM +0200, Solar Designer wrote:
> 
> Oh, cool.  Meanwhile, my Twitter poll ended in favor of bikeshed:
> 
> https://twitter.com/solardiz/status/783033528736940032
> 
> "What should (Linux) Kernel Self Protection Project's logo be?
> 
> 32% A fancy penguin
> 42% A bikeshed
>  7% Other (please tweet what)
> 19% No logo
> 
> 116 votes"

Ah, but what _color_ should the bikeshed be?  :-)

    	     	     	    		 - Ted

RE: [kernel-hardening] Any artists around?

[Schaufler, Casey]

> -----Original Message-----
> From: Theodore Ts'o [mailto:tytso@mit.edu]
> Sent: Wednesday, October 05, 2016 7:25 PM
> To: kernel-hardening@lists.openwall.com
> Subject: Re: [kernel-hardening] Any artists around?
> 
> On Thu, Oct 06, 2016 at 12:32:20AM +0200, Solar Designer wrote:
> >
> > Oh, cool.  Meanwhile, my Twitter poll ended in favor of bikeshed:
> >
> > https://twitter.com/solardiz/status/783033528736940032
> >
> > "What should (Linux) Kernel Self Protection Project's logo be?
> >
> > 32% A fancy penguin
> > 42% A bikeshed
> >  7% Other (please tweet what)
> > 19% No logo
> >
> > 116 votes"
> 
> Ah, but what _color_ should the bikeshed be?  :-)

Blue! No, Red! Ahhhhhhhhh!

> 
>     	     	     	    		 - Ted

Re: [kernel-hardening] Any artists around?

[Kees Cook]

On Wed, Oct 5, 2016 at 11:50 PM, Schaufler, Casey
<casey.schaufler@intel.com> wrote:
>> -----Original Message-----
>> From: Theodore Ts'o [mailto:tytso@mit.edu]
>> Sent: Wednesday, October 05, 2016 7:25 PM
>> To: kernel-hardening@lists.openwall.com
>> Subject: Re: [kernel-hardening] Any artists around?
>>
>> On Thu, Oct 06, 2016 at 12:32:20AM +0200, Solar Designer wrote:
>> >
>> > Oh, cool.  Meanwhile, my Twitter poll ended in favor of bikeshed:
>> >
>> > https://twitter.com/solardiz/status/783033528736940032
>> >
>> > "What should (Linux) Kernel Self Protection Project's logo be?
>> >
>> > 32% A fancy penguin
>> > 42% A bikeshed
>> >  7% Other (please tweet what)
>> > 19% No logo
>> >
>> > 116 votes"
>>
>> Ah, but what _color_ should the bikeshed be?  :-)
>
> Blue! No, Red! Ahhhhhhhhh!

New logo idea: the face of the Bridge Keeper of the Bridge of Death. ;)

http://villains.wikia.com/wiki/Bridge_Keeper

-Kees

-- 
Kees Cook
Nexus Security

Re: [kernel-hardening] Any artists around?

[Jann Horn]

[-- Attachment #1: Type: text/plain, Size: 1710 bytes --]

On Thu, Oct 06, 2016 at 12:32:20AM +0200, Solar Designer wrote:
> On Mon, Oct 03, 2016 at 12:59:31PM -0700, Kees Cook wrote:
> > On Mon, Oct 3, 2016 at 12:34 PM, Solar Designer <solar@openwall.com> wrote:
> > > On Mon, Oct 03, 2016 at 12:16:07PM -0700, Kees Cook wrote:
> > >> Does anyone have some suggestions or sketches for a logo we could use?
> > >
> > > How about a bikeshed?  It would convey how hardening is not "perfect
> > > security", and ack the irony of spending time on discussing a logo.
> > > I don't even have a preference as to which color the bikeshed should be.
> > 
> > Haha, yes, exactly. This is the opening image I used in my slides
> > covering the uid-0/ring-0 lockdown series at LSS on 2014:
> > 
> > https://outflux.net/bikeshed.jpg
> 
> Oh, cool.  Meanwhile, my Twitter poll ended in favor of bikeshed:
> 
> https://twitter.com/solardiz/status/783033528736940032
> 
> "What should (Linux) Kernel Self Protection Project's logo be?
> 
> 32% A fancy penguin
> 42% A bikeshed
>  7% Other (please tweet what)
> 19% No logo
> 
> 116 votes"
> 
> A bikeshed would also ack the grsecurity project's opinion (as I
> understand it) that trying to upstream hardening changes (through the
> hoops) is sort of bikeshedding (in comparison with having made such
> changes) or that the typical initial response (those hoops) is
> bikeshedding, and that some of those changes (not in grsecurity) are a
> bikeshed on their own.  This shouldn't stop us, but we can troll
> ourselves a bit by ack'ing this dissenting opinion in the logo. ;-)

A bikeshed sounds good, but maybe we can split the bikeshed image into
a few tiles and rearrange them? You know, kASLR?

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]