From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33)
	id 1CWbyd-0004wx-P8
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:49:08 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33)
	id 1CWbyc-0004wD-Am
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:49:06 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.33) id 1CWbyc-0004vx-3j
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:49:06 -0500
Received: from [213.80.72.10] (helo=kubrik.opensource.se)
	by monty-python.gnu.org with esmtp (Exim 4.34) id 1CWbpS-0006qO-4R
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:39:38 -0500
Subject: Re: [Qemu-devel] building a virus-proof PC with Qemu
From: Magnus Damm <damm@opensource.se>
In-Reply-To: <200411231441.34327.mailinglists@futureware.at>
References: <da63183704112304315e4f657@mail.gmail.com>
	<4a1d883204112304461e5bbb27@mail.gmail.com>
	<200411231441.34327.mailinglists@futureware.at>
Content-Type: text/plain; charset=UTF-8
Message-Id: <1101220692.8464.37.camel@localhost>
Mime-Version: 1.0
Date: Tue, 23 Nov 2004 15:38:12 +0100
Content-Transfer-Encoding: quoted-printable
Reply-To: qemu-devel@nongnu.org
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: pg@futureware.at, qemu-devel@nongnu.org

On Tue, 2004-11-23 at 14:41, Philipp G=C3=BChring wrote:
> Am Dienstag, 23. November 2004 13:46 schrieb Andreu Escudero:
> > Seems absurd to me...
> > Haw will you now if a byte comes from a "trusted source"?
>=20
> I can=C2=B4t say for sure, whether a byte comes from a trusted source.
> But I have a way so say for sure where an evil byte comes from.

So, you mean that each input device in the system emulator could be
marked as trusted or untrusted, and the data from untrusted input
sources is kept track of. Any calculations that use untrusted in-data
results in untrusted out-data. But then what do we do with the all the
untrusted data? Refuse to store it? Or just limit the network bandwidth
for untrusted data to cope with worms?

/ magnus