<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Trusted what?</title>
	<atom:link href="http://securityblog.org/brindle/2006/05/23/trusted-what/feed/" rel="self" type="application/rss+xml" />
	<link>http://securityblog.org/brindle/2006/05/23/trusted-what/</link>
	<description>The ramblings of security neophyte Joshua Brindle</description>
	<lastBuildDate>Fri, 05 Mar 2010 16:01:53 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Jeffrey Iannazzo</title>
		<link>http://securityblog.org/brindle/2006/05/23/trusted-what/comment-page-1/#comment-13134</link>
		<dc:creator>Jeffrey Iannazzo</dc:creator>
		<pubDate>Mon, 11 Jun 2007 03:29:17 +0000</pubDate>
		<guid isPermaLink="false">http://securityblog.org/brindle/2006/05/23/trusted-what/#comment-13134</guid>
		<description>In 1999, I was introduced to MLS and had a stake in leading the modernization of a Trusted Solaris 8 and General Dynamics Trusted Network Environment (TNE) environment serving a niche military sector.  From that point forward, we tried to begin promoting an MLS solution to the predominately system high government environment.  

What a few of us discovered was the parallel universes we live in as it pertains to the niche dog-eat-dog MLS world and everything else...system high, MSL.  Despite a noble effort in 2004 to rally proven MLS players to come together and propose an MLS consortium to demonstrate how multiple MLS providers could drop their intellectual barriers to some degree and prove how their systems could interoperate, the high-spirited system-high and MLS marketeers with their overglamorized improvements for cross-domain info sharing deafened the scene and prevented the MLS consortium from being heard by key CIOs.

Now three years later and we still find it interesting that MLS competitors don&#039;t get it, as presented by the few internet returns on MLS keyword search tonight.  While the few MLS competitors continue to compare goods in the small MLS market, they&#039;re seemingly not seeing the opportunity before to join forces and take rightful claim of the shared information space screaming for MLS-enabled functionality and interoperability.  While the system high providers will always have a lions share of government and commercial information space, their turf should be constrained to the non-shared workspaces and workspaces that don&#039;t have to manage and exchange disparate levels of information controls.  

As we had hoped to kick-off the MLS consortium in 2004, perhaps MLS players can regroup and form a team to demonstrate their potential as a force multiplier and take a stake in enabling government and others via a non-system-high shared information space.  At the same time, this multi-provider MLS capability could also prove how it can interoperate with system-high information spaces.  

Until this potential can be realized, MLS providers will have to settle for competing among themselves for a market that pales in comparison to the broader market that has no other choice than to accept system-high MSL solutions, as so-called information sharing revelations...due to no MLS consortium stepping up to the plate.

So for everyone interested in trusted solutions, please consider the prospects of joining forces to truly revolutionize information sharing capabilities for the government and commercial sectors.  We know it&#039;s not happening because we have to continually send information to ourselves on three different systems everyday to share information with others in system-high vacuums.  And no matter how any one MLS provider is, no CIO will accept and employ a single solution.

If anyone is interested in understanding the MLS consortium momentum we had achieved in 2004, or is aware of any similar activity going on today, please consider dropping me a line at jeffreyi1@cox.net

Sincerely,
Jeff</description>
		<content:encoded><![CDATA[<p>In 1999, I was introduced to MLS and had a stake in leading the modernization of a Trusted Solaris 8 and General Dynamics Trusted Network Environment (TNE) environment serving a niche military sector.  From that point forward, we tried to begin promoting an MLS solution to the predominately system high government environment.  </p>
<p>What a few of us discovered was the parallel universes we live in as it pertains to the niche dog-eat-dog MLS world and everything else&#8230;system high, MSL.  Despite a noble effort in 2004 to rally proven MLS players to come together and propose an MLS consortium to demonstrate how multiple MLS providers could drop their intellectual barriers to some degree and prove how their systems could interoperate, the high-spirited system-high and MLS marketeers with their overglamorized improvements for cross-domain info sharing deafened the scene and prevented the MLS consortium from being heard by key CIOs.</p>
<p>Now three years later and we still find it interesting that MLS competitors don&#8217;t get it, as presented by the few internet returns on MLS keyword search tonight.  While the few MLS competitors continue to compare goods in the small MLS market, they&#8217;re seemingly not seeing the opportunity before to join forces and take rightful claim of the shared information space screaming for MLS-enabled functionality and interoperability.  While the system high providers will always have a lions share of government and commercial information space, their turf should be constrained to the non-shared workspaces and workspaces that don&#8217;t have to manage and exchange disparate levels of information controls.  </p>
<p>As we had hoped to kick-off the MLS consortium in 2004, perhaps MLS players can regroup and form a team to demonstrate their potential as a force multiplier and take a stake in enabling government and others via a non-system-high shared information space.  At the same time, this multi-provider MLS capability could also prove how it can interoperate with system-high information spaces.  </p>
<p>Until this potential can be realized, MLS providers will have to settle for competing among themselves for a market that pales in comparison to the broader market that has no other choice than to accept system-high MSL solutions, as so-called information sharing revelations&#8230;due to no MLS consortium stepping up to the plate.</p>
<p>So for everyone interested in trusted solutions, please consider the prospects of joining forces to truly revolutionize information sharing capabilities for the government and commercial sectors.  We know it&#8217;s not happening because we have to continually send information to ourselves on three different systems everyday to share information with others in system-high vacuums.  And no matter how any one MLS provider is, no CIO will accept and employ a single solution.</p>
<p>If anyone is interested in understanding the MLS consortium momentum we had achieved in 2004, or is aware of any similar activity going on today, please consider dropping me a line at <a href="mailto:jeffreyi1@cox.net">jeffreyi1@cox.net</a></p>
<p>Sincerely,<br />
Jeff</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Larry Wake</title>
		<link>http://securityblog.org/brindle/2006/05/23/trusted-what/comment-page-1/#comment-329</link>
		<dc:creator>Larry Wake</dc:creator>
		<pubDate>Thu, 26 Oct 2006 13:30:50 +0000</pubDate>
		<guid isPermaLink="false">http://securityblog.org/brindle/2006/05/23/trusted-what/#comment-329</guid>
		<description>A clarification: although the way forward for Sun is definitely Solaris Trusted Extensions, Trusted Solaris is still a shipping product and Sun has not announced end-of-life plans for it.  You may be confusing this with the recent end-of-ship announcement for Solaris 8, which follows a separate product life cycle from Trusted Solaris.</description>
		<content:encoded><![CDATA[<p>A clarification: although the way forward for Sun is definitely Solaris Trusted Extensions, Trusted Solaris is still a shipping product and Sun has not announced end-of-life plans for it.  You may be confusing this with the recent end-of-ship announcement for Solaris 8, which follows a separate product life cycle from Trusted Solaris.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joshua Brindle</title>
		<link>http://securityblog.org/brindle/2006/05/23/trusted-what/comment-page-1/#comment-142</link>
		<dc:creator>Joshua Brindle</dc:creator>
		<pubDate>Wed, 11 Oct 2006 23:29:38 +0000</pubDate>
		<guid isPermaLink="false">http://securityblog.org/brindle/2006/05/23/trusted-what/#comment-142</guid>
		<description></description>
		<content:encoded><![CDATA[<p>@Martin Horace</p>
<p>Thanks for commenting on my blog. I will note, however, that you never said what wasn&#8217;t fair or accurate and what was misinformation. If you want to talk about diatribe perhaps you should look at what you write, how emotional and lacking in technical content and then ask yourself who is going to seem more credible. I have been a well respected open source developer for many years, what have you done?</p>
<p>I will also note that I explicitly said that &#8220;(This is my understanding of Trusted Extensions, please correct me if I’m wrong)&#8221;, there is no maliciousness here, like you seem to believe (or want others to believe for that matter..).</p>
<p>And one last thing, it would be much easier to give a &#8220;fair and accurate&#8221; analysis of Trusted Extensions if it was actually available. Alas, it is not and so I wrote the blog to the best of my understanding (as far as I could tell I have a far better understanding than either you or the author of the &#8220;open letter&#8221; I was responding to).</p>
<p>I&#8217;ll suggest that in the future if you are truly interested in helping the open source community that you will be more constructive and less abrasive, emotional, trite and rude.</p>
<p>Thank you once again. </p>
<p>As far as Glenn&#8217;s response. I am not going to counter-respond, I will let my readers (and his for that matter..) read the articles and decide on their own. I will note that none of what I said was technically inaccurate, Glenn just doesn&#8217;t believe that the inadequacies are as serious as I do.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Glenn Faden</title>
		<link>http://securityblog.org/brindle/2006/05/23/trusted-what/comment-page-1/#comment-139</link>
		<dc:creator>Glenn Faden</dc:creator>
		<pubDate>Wed, 11 Oct 2006 05:39:17 +0000</pubDate>
		<guid isPermaLink="false">http://securityblog.org/brindle/2006/05/23/trusted-what/#comment-139</guid>
		<description>This posting makes a number of assumptions about Solaris Trusted Extensions that indicate a misunderstanding on your part. You asked to be corrected if you were mistaken, so I am taking the opportuntiy to do so. However, I find this comment box too constraining, so I have take the liberty to post a more complete reply on my own blog &lt;a href=&quot;http://blogs.sun.com/gfaden/date/20061010&quot; rel=&quot;nofollow&quot;&gt;Clarifying  Some Misconceptions about Trusted Extensions&lt;/a&gt;.</description>
		<content:encoded><![CDATA[<p>This posting makes a number of assumptions about Solaris Trusted Extensions that indicate a misunderstanding on your part. You asked to be corrected if you were mistaken, so I am taking the opportuntiy to do so. However, I find this comment box too constraining, so I have take the liberty to post a more complete reply on my own blog <a href="http://blogs.sun.com/gfaden/date/20061010" rel="nofollow">Clarifying  Some Misconceptions about Trusted Extensions</a>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Martin Horace</title>
		<link>http://securityblog.org/brindle/2006/05/23/trusted-what/comment-page-1/#comment-138</link>
		<dc:creator>Martin Horace</dc:creator>
		<pubDate>Wed, 11 Oct 2006 04:19:20 +0000</pubDate>
		<guid isPermaLink="false">http://securityblog.org/brindle/2006/05/23/trusted-what/#comment-138</guid>
		<description>I don&#039;t think your analysis of Trusted Extensions in Solaris 10 is either fair or accurate - and all you&#039;re doing by spreading the misinformation is limiting the credibility of the whole Linux community. The whole open source community relies on honest data and impartial analysis, not this kind of diatribe.</description>
		<content:encoded><![CDATA[<p>I don&#8217;t think your analysis of Trusted Extensions in Solaris 10 is either fair or accurate &#8211; and all you&#8217;re doing by spreading the misinformation is limiting the credibility of the whole Linux community. The whole open source community relies on honest data and impartial analysis, not this kind of diatribe.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
