Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
    Nathaniel McCallum
    @npmccallum
    @m-dombrowski Also, be sure to fill out a Mentorship Request -- https://github.com/enarx/enarx/issues/new/choose
    Mike Dombrowski
    @m-dombrowski
    @npmccallum Thanks! I've completed those tasks.
    Mike Dombrowski
    @m-dombrowski
    @lkatalin Thanks, that is helpful. I'm typically available so I'll attend another meeting soon.
    Lily Sturmann
    @lkatalin
    Excellent!
    axel simon
    @axelsimon
    added a few videos to our Library: https://github.com/enarx/enarx/wiki/Library-%E2%80%93-Press :)
    matrixbot
    @matrixbot
    bmeneg on Freenode axel simon (Gitter), nice! thx
    axel simon
    @axelsimon
    i was muted, so it didn't go through at the end of the meeting, but just wanted to say congratulations to everyone for what was achieved this week, with summit and all :)
    Nathaniel McCallum
    @npmccallum
    Indeed. Thanks to everyone!
    Mike Dombrowski
    @m-dombrowski
    Thanks for including me in the meeting. It was refreshingly efficient and I appreciate it moving along with a sense of purpose.
    Nathaniel McCallum
    @npmccallum
    @m-dombrowski Glad to have you there!
    Nathaniel McCallum
    @npmccallum
    @connorkuehl I took a pass at cargo make. I like where this is headed!
    Mike Bursell
    @MikeCamel
    I won't make today's stand-up. Have fun.
    Connor Kuehl
    @connorkuehl
    100 stars!! https://github.com/enarx/enarx/stargazers
    Nathaniel McCallum
    @npmccallum
    :tada: :tada: :tada:
    Mike Bursell
    @MikeCamel
    https://aliceevebob.com/2020/05/05/5-rust-reflections-from-java/
    axel simon
    @axelsimon

    100 stars!! https://github.com/enarx/enarx/stargazers

    noice!

    won't be able to make the daily meeting, will be joining the Red Hat internal community central event on licences, a refresher will be useful…
    axel simon
    @axelsimon
    A quick report:
    • The TEE vuln/attack page meeting we were supposed to have today had to be postponed to later this week, however @m-dombrowski has already started offering useful suggestions for that page and beyond that the documentation as a whole, so that's very cool.
    • moving enarx.io to the LF (CCC): trying to figure out how to fit our requests with LF's model. A few questions there, i'll ask them in the correct issue (enarx/enarx#437)
    Mike Bursell
    @MikeCamel
    I tweeted the 100 stars news from the @enarxproject account.
    Please retweet if you have a social media presence.
    axel simon
    @axelsimon
    @mbestavros @npmccallum If any of you could have a look at https://github.com/enarx/enarx/issues/291#issuecomment-624076546 it would be very helpful!
    Lily Sturmann
    @lkatalin
    @npmccallum Re: enarx/enarx#501, are we wanting to update the Layout struct with the xsavesize somewhere in this function? https://github.com/enarx/enarx/blob/master/enarx-keep-sgx/src/main.rs#L39 And should the Layout struct (or structs, since there are two) get a new field for xsave size?
    Nathaniel McCallum
    @npmccallum
    @lkatalin Exactly, though I 'd probably do the calculation work in Layout::calculate().
    Nathaniel McCallum
    @npmccallum
    @connorkuehl We need a kernel rebase.
    Connor Kuehl
    @connorkuehl
    @npmccallum Uploading now
    Nathaniel McCallum
    @npmccallum
    @connorkuehl It seems the cargo make default rule is test, not build.
    That's counter-intuitive...
    Connor Kuehl
    @connorkuehl
    Weird, I'm sure there is a way to set that. I can file an issue and look at it later
    I've always invoked with cargo make <task>
    Nathaniel McCallum
    @npmccallum
    @connorkuehl If that's the upstream default, let's keep it.
    But if we changed it somehow, let's fix it.
    Mike Dombrowski
    @m-dombrowski
    @npmccallum @MikeCamel @axelsimon Possible use case - Has anyone investigated how Enarx might be utilized to help secure SCADA systems for critical infrastructure?
    Nathaniel McCallum
    @npmccallum
    @m-dombrowski It has come up in conversations regarding oil rigs, but I don't think we've done anything explicitly to develop it.
    Connor Kuehl
    @connorkuehl
    Ack!
    Mike Bursell
    @MikeCamel
    It is indeed a nice use case. Writing some use cases up would be a very useful task, if you're interested. We have some unpublished ones which need a bit of a tidy, but which I could also share if you're interested and would like to polish them up into something public.
    Mike Dombrowski
    @m-dombrowski

    Sure thing. I'll give it a review and see if I can help.

    SCADA is a big deal for national security and critical infrastructure making it a high value target. If Enarx can help increase security in that arena, it would likely boost project visibility. Having said that, SCADA has somewhat unique vulnerability challenges.

    Mike Bursell
    @MikeCamel
    Excellent. I'll work with axel on getting the unpublished stuff out to you.
    @axelsimon - see above! Let's talk tomorrow.
    Nathaniel McCallum
    @npmccallum
    @m-dombrowski One of the hard parts about SCADA is the trusted IO problem.
    @m-dombrowski Enarx can help solve the trusted decision making problem. But if IO lies, there's not much we can do.
    @m-dombrowski Fingerprint readers are a great example. We can put the logic for validating the fingerprint inside a Keep. But how do we know the drivers for the hardware aren't providing fake images?
    That being said it isn't an unsolvable problem. Just one for which we don't have a solution today.
    axel simon
    @axelsimon
    @MikeCamel Good to see this ball rolling! @m-dombrowski had a quick chat where we discussed this, as well as trying to improve "ingress paths" for newcomers looking to contribute, and came out of that with several useful ideas, which i'm working on putting into action in the documentation
    (step 1: don't use language like "ingress paths", probably)
    talking of potential contributors to the project, i'm wondering if it would be useful to have a list of skills that are or have been used on the project, to illustrate that indeed, a wide array of things are needed and yes, you potential contributor have a role to play and our welcome… thoughts?
    Mike Dombrowski
    @m-dombrowski
    @npmccallum Ah, a challenge! Good stuff. I'll be the first to admit that most of Enarx is still well beyond my understanding so I appreciate you breaking it down Barney style for me. I'm curious, is the vision for Enarx practical application broad or somewhat narrow given limitations such as the before mentioned I/O issue?
    Nathaniel McCallum
    @npmccallum
    @m-dombrowski Our visions are much larger than our code base. :)
    Mike Dombrowski
    @m-dombrowski

    @axelsimon I am going to plead ignorance (day 7, I can still do that, right?). At a minimum, perhaps consider embedding the Red Hat Summit Enarx recruitment video or a snippet of it that discusses contribution opportunities. From a marketing and recruitment perspective, people respond very well to video content. The consumption rate on video content is often much higher than other forms of media. Recruitment video + written supplement is a great combo if that functionality is permitted by GitHub. The Wiki page (+video) could also pull double duty for quality social media outreach.

    The project already has a great start to video content based on what I saw at Summit. If it hasn't already been distributed via social media, it should be considered.

    axel simon
    @axelsimon
    it is being considered, but not done yet
    but clearly, you're right, we should have the Introduction to Enarx video on the README and on the main wiki page