Matasano Chargen - Latest Comments in Requirements for Injectable Virtual Machines

Re: Requirements for Injectable Virtual Machines

Ben S. Knowles — Mon, 24 Mar 2008 08:22:05 -0000

Inferno, eh? Interesting...

Well it's already been made into an IE plugin, is that vectorized enough to count? It may be a little big, but it's quite featureful.

Ref: http://www.vitanuova.com/inferno/plugin/index.html

The Mozilla plugin has long been under development, including some GSoC work: http://code.google.com/p/inferno-plugin/

It's morning here in Atlanta, which means I get to go home soon. Have a good week all !

Re: Requirements for Injectable Virtual Machines

John Waters — Sun, 16 Mar 2008 03:13:22 -0000

Good morning WB (It's morning in Riyadh, anyway)!
Have you played around or considered Inferno as a foundation for an enjection engine? I think that some of the more novel characteristics of the "new new jersy" style of distributed computing (private name spaces, everything as a file, styx, etc.) might be advantageous, or at least interesting.

Johnny of Arabia

Re: Requirements for Injectable Virtual Machines

Ryan Russell — Fri, 14 Mar 2008 20:00:54 -0000

Ah, an agent.

Re: Requirements for Injectable Virtual Machines

eris hacker — Fri, 14 Mar 2008 19:48:01 -0000

That's nothing. I heard about this guy, Wes Brown, who came up with a kickass injection engine. It would probably own yourz.

Good luck, pal.

Re: Requirements for Injectable Virtual Machines

wbrown — Fri, 14 Mar 2008 18:48:03 -0000

Here's some context.

I first spoke at Defcon 13 about a Lua-based approach to this problem. This implementation was 120K, and was available under the BSD license. I will need to dig some to put up the source code for this up.

http://www.defcon.org/html/defcon-13/dc13-speak...

I then spoke at Defcon 14 and HitB 2006 about a Lisp-based approach to this.

http://www.defcon.org/html/defcon-14/dc-14-spea...

Slides are available here:
http://conference.hitb.org/hitbsecconf2006kl/ma...

Video of the presentation is available here:
http://video.google.com/videoplay?docid=-468113...

Source code is available here:
http://sourceforge.net/project/showfiles.php?gr...

Scott Dunlop has since taken the virtual machine and taken it in another direction, WaspVM, which is more general purpose.

I am currently working on the next implementation, which will fulfill the requirements above better than the previous ones, and will write about it.

Re: Requirements for Injectable Virtual Machines

Nate — Fri, 14 Mar 2008 18:19:42 -0000

Context, please. Perhaps an intro and links to your three years of research papers would help.