logoalt Hacker News

burnt-resistoryesterday at 5:14 AM1 replyview on HN

We need blockchain-esque, WORM-/log-structured filesystems for logs and formal validation of compilers, kernels, and critical bits of userspace. I think a case could be made for a proprietary Flash EEPROM log device "HSM"-like gizmo on a centralized "syslog" box/es that only does one-way writes and authenticated queries.


Replies

dspillettyesterday at 9:54 PM

Log structured data and/or hash based ledgers are already sometimes used¹, both locally and in off-server & off-site backups, to prove that data and logs have not been tempered with. If they have then it is much harder (though far from impossible if the ledger is local-only) to hoover the fact. Of course the ledger doesn't say how the data/logs where populated nor what with, it just indicates if tampering definitely hasn't taken place (they can't say that deliberate tampering definitely has taken place, just that it might be likely, as corruption from other sources (hardware failure, etc) could also break the chain).

--------

[1] such schemes existed much prior to bitcoin & friends, though they were not used a lot back than.