<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Networking, Games, and Virtual Environments : Security</title><link>http://blogs.msdn.com/johnmil/archive/tags/Security/default.aspx</link><description>Tags: Security</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>Second Life Slashdot stream</title><link>http://blogs.msdn.com/johnmil/archive/2007/04/20/second-life-slashdot-stream.aspx</link><pubDate>Fri, 20 Apr 2007 12:00:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2204690</guid><dc:creator>John L. Miller</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/johnmil/comments/2204690.aspx</comments><wfw:commentRss>http://blogs.msdn.com/johnmil/commentrss.aspx?PostID=2204690</wfw:commentRss><wfw:comment>http://blogs.msdn.com/johnmil/rsscomments.aspx?PostID=2204690</wfw:comment><description>&lt;P&gt;I stumbled across a recent &lt;A class="" href="http://developers.slashdot.org/developers/07/04/19/1611252.shtml" mce_href="http://developers.slashdot.org/developers/07/04/19/1611252.shtml"&gt;Slashdot posting about Second Life&lt;/A&gt;. There are&amp;nbsp;some interesting comments amidst the dross, worth a read if you're interested in virtual worlds or Second Life in particular. &lt;/P&gt;
&lt;P&gt;The gist is, Second Life has &lt;A class="" href="http://lindenlab.com/press/releases/01_08_07" mce_href="http://lindenlab.com/press/releases/01_08_07"&gt;made its client side open-source&lt;/A&gt;, and the article claims it'll be doing the same for the server side. Very interesting for someone who wants to research distributed systems and distributed system&amp;nbsp;security. Getting the servers correctly federated and working well together is an interesting enough problem. &lt;/P&gt;
&lt;P&gt;If the client code and the server code are both really open sourced, it may be worth a peek to see what would be required to make a P2P implementation. No doubt there are a plethora of legal and logistical requirements for servers to support monetization and integrity of the world, but heck, that just makes the problem that much more interesting!&lt;/P&gt;
&lt;P&gt;While looking up pointers, I stumbled across a&lt;A class="" href="http://www.businessweek.com/technology/special_reports/20070416virtuallife.htm?campaign_id=rss_daily" mce_href="http://www.businessweek.com/technology/special_reports/20070416virtuallife.htm?campaign_id=rss_daily"&gt; tech special report&lt;/A&gt; from business week online which is centered around 'Virtual Life,' with lots of Second Life articles. Looks like time for more reading...&lt;/P&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=2204690" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/johnmil/archive/tags/P2P/default.aspx">P2P</category><category domain="http://blogs.msdn.com/johnmil/archive/tags/Security/default.aspx">Security</category><category domain="http://blogs.msdn.com/johnmil/archive/tags/Virtual+Environments/default.aspx">Virtual Environments</category><category domain="http://blogs.msdn.com/johnmil/archive/tags/Cyberspace/default.aspx">Cyberspace</category><category domain="http://blogs.msdn.com/johnmil/archive/tags/Second+Life/default.aspx">Second Life</category></item><item><title>Using SCHANNEL and TLS</title><link>http://blogs.msdn.com/johnmil/archive/2006/05/16/using-schannel-and-tls.aspx</link><pubDate>Tue, 16 May 2006 16:00:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:598856</guid><dc:creator>John L. Miller</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/johnmil/comments/598856.aspx</comments><wfw:commentRss>http://blogs.msdn.com/johnmil/commentrss.aspx?PostID=598856</wfw:commentRss><wfw:comment>http://blogs.msdn.com/johnmil/rsscomments.aspx?PostID=598856</wfw:comment><description>&lt;P&gt;&lt;FONT face=Arial&gt;A few areas of computer science are especially intimidating. The two worst for my money are networking and security. Networking because it involves LAL of TLA's, and security because, well, it's security.&lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT face=Arial&gt;Just because these areas are intimidating doesn't mean they're difficult. Especially if you follow the golden rule: don't invent it yourself. &lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT face=Arial&gt;What does this mean? Security protocols and models have been around for ages. There's a few very solid implementations of authentication protocols built into every copy of Windows. Don't write your own when you can use one that has already been tested, and deployed by millions of people!&lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT face=Arial&gt;How hard is it to use these? Not hard at all, as long as you skip becoming intimidated. If you know what a public key is in the abstract (not necessarily how to use it), then in the space of three days I think you can learn to write an authentication engine that uses TLS for authentication. Neat!&lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT face=Arial&gt;I enjoyed learning more about security, and would be happy to share what I learned here, if anyone is interested. If so, then drop me a line or leave a comment, and I'll happily write a few 'how to learn it' blog entries, which will no doubt reference many of the other 'how to do it's out there.&lt;/FONT&gt;&lt;/P&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=598856" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/johnmil/archive/tags/Networking/default.aspx">Networking</category><category domain="http://blogs.msdn.com/johnmil/archive/tags/Security/default.aspx">Security</category></item></channel></rss>