Urgent.News

600+ sources. One page. See who else covered it.

Editions

Tech

[Bug Smash] The Amnesiac ORAM: Fixing Oblivious RAM That Forgot Everything

This is a submission for DEV's Summer Bug Smash: Clear the Lineup powered by Sentry . Project Overview I've been working on Styx OS — a custom x86-64 microkernel I'm building completely from scratch. It handles everything from the bootloader up through a capability-based userspace. The whole philosophy behind Styx OS is that you shouldn't even trust your own hardware. So, it packs in features…

This is a story about a programmer who worked on Styx OS, a custom x86-64 microkernel. His latest experimental feature was adapting PathORAM, or Oblivious RAM, to physical USB storage. The core issue was that the ORAM tree was stored in RAM, making it vulnerable to attacks since an attacker could monitor the physical access pattern on the disk.

The programmer realized that the ORAM tree should be wired directly to the USB Mass Storage driver to map every read and write to physical Logical Block Addresses (LBAs). He made these changes, creating a more secure system.

However, writing the position map to the USB drive on every single access proved to be a significant I/O bottleneck. The programmer decided to prioritize security and crash-consistency over raw speed, noting that journaling or batching these writes could be a possible improvement in the future.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Daily Dose of DevOps — GitHub Actions basics for DevOps

GitHub Actions Basics for DevOps Introduction GitHub Actions is a powerful CI/CD platform that integrates seamlessly with GitHub repositories.

  • GitHub Actions automate software delivery with CI/CD workflows.
  • Workflows consist of jobs, steps, and are defined in YAML files.
  • Common issues include network failures, configuration errors, and timeouts.

Your pipeline deleted its own alarm (two greps to check)

Silent failures Your daily report stopped arriving two days ago. Nobody noticed, because a message that does not arrive looks exactly like a quiet day.

  • Guard initially appeared to work but failed on second day
  • Second daily probe detected problem immediately
  • Two greps and one command identify silent failures

More from Saturday 15 August →