141 reputation
3
bio website
location United States
age
visits member for 3 years, 2 months
seen Sep 3 at 4:12

Aug
31
comment How to collect, process, and transmit data securely?
Public data and results.
Aug
30
comment Authenticating data generated by a particular build of an open source program
I must be missing it in MS's Base TPM Services API, but I don't see a way I can submit my program's running state to get "remote attestation".
Aug
28
comment How to collect, process, and transmit data securely?
Yes, it a purely theoretical sense, it is unsolvable. Any determined cheater can probably spoof the server. I hope that there is some protocol that has enough deterrents built into it to at least make it more worthwhile for an attacker to use the time practicing for the competition, rather than hacking.
Aug
26
comment Authenticating data generated by a particular build of an open source program
The results are just plain old XML. Nothing to be localized. It's the server's job to do the final presentation.
Aug
26
comment Authenticating data generated by a particular build of an open source program
LOL! I'll have to remember that quote "You're going to have to be clever, there is no straightforward way to be obscure."
Aug
26
comment Authenticating data generated by a particular build of an open source program
Subtly adjusting the output isn't going to stand up because if somebody writes a unit test to inspect the output, the unit test will fail. I can't waive my hand and just say "There are not the results you are looking for."
Aug
26
comment Authenticating data generated by a particular build of an open source program
Tweaking a global variable is very likely a no-go because any code reviewer worth their salt will say msg1 and msg2 are constants, declare them as such. If I balk at accepting the change, then the game is up that voodoo happens with these.
Aug
26
comment Authenticating data generated by a particular build of an open source program
I care about the authenticity of the reports, because the data sent back is the result of a competition where prizes and money can be at stake. Imagine a bowling league scoring program, whoso results are combined for a nationwide postal match. Local clubs are free to use either the official build or their local build. If they want to participate in nationwide match, they have to use the official build.