OpenBSD Journal

LOCKSS ('Lots of Copies Keep Stuff Safe')

Contributed by phessler on from the so-1984-wont-be-like-1984 dept.

"LOCKSS ('Lots of Copies Keep Stuff Safe') is open source, peer-to-peer software that functions as a persistent access preservation system. Information is delivered via the web, and stored using a sophisticated but easy to use caching system. Simply put, LOCKSS provides for Jefferson's 'multiplication of copies,' but with an electronic twist. The LOCKSS software distribution includes everything you need, including a specially configured OpenBSD operating system and the LOCKSS daemon." "The hardest things for a system administrator to do correctly are to install, configure and upgrade software so that there are no vulnerabilities an attacker can exploit, and especially to recover a system that an attacker has penetrated. The LOCKSS CD includes not just the LOCKSS daemon but also a pre-configured, highly secure operating system. Because the operating system is on a non-writable CD, and the configuration is on a non-writable floppy, it returns to a known-good state after every reboot. The system includes an automatic software update system that is protected by digital signatures, so it is upgraded automatically and securely. About every six months the LOCKSS team releases a new, updated CD. All the operator has to do is to burn the new CD image, swap CDs and reboot."

(Comments are closed)


Comments
  1. By morf (68.104.57.241) on

    According to http://www.sun.com/smi/Press/sunflash/2002-08/sunflash.20020821.1.html LOCKSS was based on Linux at least until 2002:
    'The LOCKSS ("Lots of Copies Keep Stuff Safe") project was initiated in October 1998 and headed by Sun Distinguished Engineer David Rosenthal, who has been deeply involved with the conceptual and practical development of the LOCKSS system and its communication protocol, known as LCAP. Based on Java technology and Linux, ...'

    If this is the case it would be interesting to see why they switched.

    Comments
    1. By Venture37 (81.101.10.241) venture37 # hotmail on geeklan.co.uk

      just a guess but probably cause of the whole bad security practices thing that has been in the press the last year regarding linux?

      Comments
      1. By Anonymous Coward (207.215.252.136) on

        That doesn't stop most; think Windows.

        Comments
        1. By Venture37 (81.101.10.241) venture37 # hotmail on geeklan.co.uk

          True :)

      2. By tedu (67.127.59.81) on

        lockss has been on openbsd for more than a year; i'm not sure how far back, but i know it's been at least since before summer 2003.

    2. By tedu (67.127.59.81) on

      http://lockss.stanford.edu/david1.htm

  2. By Anonymous Coward (193.62.218.79) on

    Also covered on El Reg

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]