Apple hires One Laptop Per Child security expert and noted critic

Posted:
in General Discussion edited January 2014
Apple has hired Ivan Krstic, the developer of the security architecture for the One Laptop Per Child project's XO system and subsequently a vocal critic of the failed OLPC program. Krstic is a prodigy security guru with anti-malware credentials.



MIT's Technology Review cited Krstić as a Young Innovator in 2007 for his work in developing Bitfrost, the innovative new security model used by the XO, at the age of 21. He joined the OLPC project with the task of developing a security system that would be easy enough for children to use and wouldn't require an army of support personnel to manage.



One element of the Bitfrost system is that all applications are sequestered into their own virtual operating system, with rule-based limitations placed on what permissions they can access and change on the system, according to the Technology Review. This effectively prevents a virus from doing anything dangerous on the system, or as Krstić told the publication, "This defeats the entire purpose of writing a virus."



Thinking differently



After serving as the OLPC's Director of Security Architecture, Krstić was involved in an effort to adapt the system from the specialized Sugar/Linux environment running on the XO to the mainstream Linux desktop. For Bitfrost to be effective, all applications on the machine must be aware of it, making it incompatible with preexisting apps. This calls for some way to adapt existing programs to the new architecture.



There may be some common ground shared between Bitfrost and Apple's iPhone security model, which segregates third party apps into sandboxes that prevent them accessing a communal PC-style file system or accessing hardware features such as GPS without the user's approval.



Apple's propensity for examining new and better ways to deliver functionality rather than just expected features have confounded pundits who can't understand why the company didn't make the iPhone work like every other phone, with a user accessible, shared file system; a security-free copy and paste mechanism; unfettered application installation rather than mandatory code signing; and unrestricted background apps that require users to handle process management themselves. Krstić's original security development for the XO indicates a similar interest in discovering the new rather than pushing ahead old ideas out of convention.



In addition to the security model deployed for distributing iPhone software, Apple may soon reveal a similar effort to deliver secured software for Mac users; like the XO's Bitfrost and iPhone apps, this would require all software to be security savvy.



Apple has already pushed developers toward supporting application signing to enable Parental Controls, Managed Preferences, the Application Firewall included with Mac OS X Leopard, Keychain, Software Update, and other features that need to know that the applications they are working with are legitimate and not corrupted by malware. The next step may eventually include opening a software store for Mac users that enables secured software downloads at lower prices, just like the iPhone.



Krstić said in a blog posting that he "couldn?t be more thrilled" with his new position at Apple. His future with the company will likely be a stark contrast with his past in working with the politicized OLPC project.



Apple, Open, and OLPC



Nicholas Negroponte, who leads the OLPC effort, told his TED audience in 2006 that Steve Jobs had supported his early efforts building toward what would become OLPC with free Apple computer hardware back in the early 80s. However, when Jobs offered the OLPC project free use of Mac OS X software and engineering help, it rejected Apple's technology in favor of Linux, a decision supposedly based on the group's dedication to free and open source software.



Writing in defense of open software in the OLPC project, Copyrighteous blogger Mako Hill wrote that XO "laptop recipients will benefit from being able to fix, improve, and translate the software on their laptops into their own languages and contexts."



Negroponte's dedication to open source didn't last long however. As its fortunes began to wane, the OLPC rolled out plans with Microsoft to deliver new XO machines capable of dual booting Windows XP, shortly after Microsoft and Intel unveiled their own plan to compete against the XO with a low-end netbook offering called Classmate, designed entirely to ensure that third world children wouldn't be exposed to computers running anything other than an Intel CPU and a Microsoft operating system.



Microsoft didn't even offer XP to the OLPC for free; the company's software licensing demands, plus the extra hardware required to run Windows XP, added another 10% to the target price of the XO system.



Krstić's scathing exposé on OLPC



As the OLPC project became consumed by Free Software politics and proprietary assimilation by Microsoft at the same time, Krstić left the group. A year ago, he penned an inside look at Negroponte's OLPC and its strange tango with FOSS and Microsoft.



Krstić took issue with Hill's Free Software advocacy which claimed that "OLPC needs to be uncompromising about software freedom," calling it "bright-eyed idealism [...] appealing, but alas, just not backed by fact."



"No, we don't know that laptop recipients will benefit from fixing software on their laptops. Indeed, I bet they'd largely prefer the damn software works and doesn't need fixing," Krstić wrote.



I switched to Mac OS X



Krstić added, "One of the favorite arguments of the free software and open source community for the obvious superiority of such software over proprietary alternatives is the users' supposed ability to take control and modify inadequate software to suit their wishes. Expectedly, the argument has been often repeated in relation to OLPC. I can't possibly be the only one seeing that the emperor has no clothes."



"After 12 years of almost exclusive use of free software, I switched to Mac OS X," Krstić wrote.



After describing problems with "vendors not releasing documentation that would make it possible for Linux to play well with their hardware," he added, "Until the day comes when hardware vendors and free software developers find themselves holding hands and spontaneously bursting into one giant orgiastic Kumbaya, that's the world we live in. So in the meantime, I switched to OS X and find it to be an overwhelmingly more enjoyable computing experience."



"My theory is that technical people, especially when younger, get a particular thrill out of dicking around with their software," Krstić said. "Much like case modders, these folks see it as a badge of honor that they spent countless hours compiling and configuring their software to oblivion. Hey, I was there too. And the older I get, the more I want things to work out of the box. Ubuntu is getting better at delivering that experience for novice users. Serious power users seem to find that OS X is unrivaled at it."



The OLPC mess



"OLPC was supposed to be about learning, not free software," Krstić wrote. "And the most upsetting part of the Windows announcement is not that it exposed the actual agendas of a number of project participants which had nothing to do with learning, but that Nicholas' misdirection and sleight of hand were allowed to stand."



"The whole 'we're investing into Sugar, it'll just run on Windows' gambit is sheer nonsense. Nicholas knows quite well that Sugar won't magically become better simply by virtue of running on Windows rather than Linux. In reality, Nicholas wants to ship plain XP desktops. He's told me so. That he might possibly fund a Sugar effort to the side and pay lip service to the notion of its 'availability' as an option to purchasing countries is at best a tepid effort to avert a PR disaster."



"In fact, I quit when Nicholas told me ? and not just me ? that learning was never part of the mission. The mission was, in his mind, always getting as many laptops as possible out there; to say anything about learning would be presumptuous, and so he doesn't want OLPC to have a software team, a hardware team, or a deployment team going forward."



Krstić later added, "That OLPC was never serious about solving deployment, and that it seems to no longer be interested in even trying, is criminal. Left uncorrected, it will turn the project into a historical information technology ["failure" Krstić used another word] unparalleled in scale."



Shortly after resigning from OLPC, Krstić wrote Negroponte, saying, "I continue to think it?s a crying shame you?re not taking advantage of how OLPC is positioned. Now that it?s goaded the industry into working on low-cost laptops, OLPC could become a focus point for advocating constructionism, making educational content available, providing learning software, and keeping track of worldwide [one-to-one] deployments and the lessons arising from them. When a country chooses to do [a one-to-one computer program], OLPC could be the one-stop shop that actually works with them to make it happen, regardless of which laptop manufacturer is chosen, banking on the deployment plans it?s cultivated from experience and the readily available base of software and content it keeps. In other words, OLPC could be the IBM Global Services of one-to-one laptop programs. This, I maintain, is the right way to go forward."



What's next



With his newfound interest in using technologies that just work, Krstić might seem a natural for joining Apple, which is all about making technology accessible to individuals.



Krstić may likely contribute his expertise in developing security software. Over the last year, he reported having joined the advisory board for the Anti-Malware Testing Standards Organization, the technical working group of StopBadware, and the security response team of the Python project.



This week, Krstić posted on his blog, "After a great deal of deliberation, I moved to California and joined the local fruit vendor. Today was my first day on the job, and I couldn?t be more thrilled."
«13

Comments

  • Reply 1 of 58
    futurepastnowfuturepastnow Posts: 1,772member
    Quote:
    Originally Posted by AppleInsider View Post


    Apple has hired Ivan Krstić, the developer of the security architecture for the One Laptop Per Child project's XO system and subsequently a vocal critic of the failed OLPC program. Krstić is a prodigy security guru with anti-malware credentials.



    The "failed" OLPC program? They just signed a deal with India for a quarter million laptops. Though not as successful as its founders hoped, OLPC is doing reasonably well.
  • Reply 2 of 58
    inklinginkling Posts: 745member
    Judging by the details in this story, this is a marvelous move for Apple and for Mac users. As the Mac market share grows, we can't depend on security through obscurity any more. He may be able to give both Macs and iPhones a security so innovative and state-of-the-art, hackers don't even try to crack it.
  • Reply 3 of 58
    wizard69wizard69 Posts: 13,377member
    It will be a year or two before we see anything in any Apple OS. I'd really like to see his effort go to mobile devices. It would be neat to have the Touch OS secure enough to support mesh networking and other things that OLPC did well. Not that they couldn't do mesh now but better security would make me feel much better.







    Dave
  • Reply 4 of 58
    solipsismsolipsism Posts: 25,726member
    Quote:
    Originally Posted by FuturePastNow View Post


    The "failed" OLPC program? They just signed a deal with India for a quarter million laptops. Though not as successful as its founders hoped, OLPC is doing reasonably well.



    According to the CIA World Factbook India has 1,166,079,217 people as of July 2009*. Of those, 31.1% are under 14 years old. That leaves 362,650,637 that are children who could presumably use the PC (I traded the 15-18yos for the babies and toddlers too young to use the device). If India gets 250,000 OLPCs that is actually OLPEOTFHFC or One Laptop Per Every One-Thousand Four-Hundred Fifty Chidlren.





    * The CIA has a time machine
  • Reply 5 of 58
    SpamSandwichSpamSandwich Posts: 33,407member
    I suppose his efforts on the OLPC could transfer quite nicely to a newspaper/magazine-styled minimalist Apple computer... all-righty then!
  • Reply 6 of 58
    I'm thinking the "failed" part of OLPC is referring to the failure to understand and follow the original mission. It wasn't about the Borg like assimilation via XP laptop, or PR... but that's what 'Nicolas' turned it into (according to the article).



    It's good to see Krstic on board with the "local fruit vendor," and that he's kept his standard realist mindset & flavorful vocabulary.
  • Reply 7 of 58
    cubertcubert Posts: 728member
    "As its fortunes began to wane, the OLPC rolled out plans with Microsoft to deliver new XO machines capable of dual booting Windows XP, shortly after Microsoft and Intel unveiled their own plan to compete against the XO with a low-end netbook offering called Classmate, designed entirely to ensure that third world children wouldn't be exposed to computers running anything other than an Intel CPU and a Microsoft operating system."



    Wow. Just.....wow.
  • Reply 8 of 58
    macshackmacshack Posts: 103member
    What an interesting article! Thanks AI! It sounds like this guy has some good and Apple-like ideas about integrated security. I can't wait this bearing fruit and leave the critics left with nothing to say. Sure Apple will gain greater marketshare but their security wont suffer from it. Whilst m$ is trying to solve their security and driver problems Apple is well on it's way to innovate more and more, leaving competition far behind.
  • Reply 9 of 58
    ksecksec Posts: 1,569member
    With 30 Billion Cash, many world known expertise joining Apple. I think apple is in a very good position to make technology, finally... easy to use.
  • Reply 10 of 58
    cubertcubert Posts: 728member
    solipsism,

    I'm catching you on the total posts, dude!

  • Reply 11 of 58
    sandausandau Posts: 1,230member
    Dammit, this is a cool article and I'm not smart enough to know why or what the future implications mean....argh!!! I just like it.
  • Reply 12 of 58
    zeromeuszeromeus Posts: 182member
    I guess Apple's well on its way to creating the tech dream team... Can't wait to see it all come together!
  • Reply 13 of 58
    solipsismsolipsism Posts: 25,726member
    Quote:
    Originally Posted by Cubert View Post


    solipsism,

    I'm catching you on the total posts, dude!





    Almost...



    You get the Bronze Melgross award at 1,000 posts. Silver Melgross 5,000, Gold Melgross at 10,000 and Platnium Melgross at 15,000 posts. I think that means that the Adamantium Melgross award arrives at 20,000 posts.
  • Reply 14 of 58
    mdriftmeyermdriftmeyer Posts: 7,503member
    Quote:
    Originally Posted by FuturePastNow View Post


    The "failed" OLPC program? They just signed a deal with India for a quarter million laptops. Though not as successful as its founders hoped, OLPC is doing reasonably well.



    In a country of over 1 Billion that is indeed a failure.
  • Reply 15 of 58
    greglogreglo Posts: 63member
    Statistically, yes, it is. But why don't we see if those kids think the same thing?



    If it helps them get a good education, a good job, etc, I'd be quite reluctant to call it a 'failure'. I'd call it 'worthwhile'.



    *Note: Might still fail. :P
  • Reply 16 of 58
    Krstic is my new hero:

    - Slamming the pollyanna-ish notion of free open-source software ever being more than a niche market.

    - Slamming OLPC for having a [dumb] business model.

    - Slamming OLPC's founder (Negroponte) as not being primarily interested in education or the large-scale deployment of OLPC laptops.



    And my favorite, the whole part where he talks about it being fun to mess with computers as a kid, but that as grownups people want computers that just work.



    Is "Ivan Krstic" croatian for "Steve Jobs Jr"?
  • Reply 17 of 58
    quadra 610quadra 610 Posts: 6,757member
    Quote:
    Originally Posted by MyopiaRocks View Post


    Krstic is my new hero:

    - Slamming the pollyanna-ish notion of free open-source software ever being more than a niche market.

    - Slamming OLPC for having a [dumb] business model.

    - Slamming OLPC's founder (Negroponte) as not being primarily interested in education or the large-scale deployment of OLPC laptops.



    And my favorite, the whole part where he talks about it being fun to mess with computers as a kid, but that as grownups people want computers that just work.



    Is "Ivan Krstic" croatian for "Steve Jobs Jr"?



    Agreed. Wholeheartedly.
  • Reply 18 of 58
    maestro64maestro64 Posts: 5,042member
    Quote:
    Originally Posted by solipsism View Post


    According to the CIA World Factbook India has 1,166,079,217 people as of July 2009*. Of those, 31.1% are under 14 years old. That leaves 362,650,637 that are children who could presumably use the PC (I traded the 15-18yos for the babies and toddlers too young to use the device). If India gets 250,000 OLPCs that is actually OLPEOTFHFC or One Laptop Per Every One-Thousand Four-Hundred Fifty Chidlren.





    * The CIA has a time machine



    Have you been to india, it is a society base on the Cast System, simple put it is about the haves and have nots. I not sure how many of the 1.1B people there fit into the haves, however, based on my limited exposure the haves are a very small majority and they spend lots of time and money making sure the have nots stay that way.



    A very large % of their population have no idea what technology exist and they live right along side people who do. Those who have the knowledge, power and money do not allow those who are below them in the case system to raise above. As they always say knowledge and information is power and you can be assured they they make sure those below them will never gain this.
  • Reply 19 of 58
    bloggerblogbloggerblog Posts: 2,432member
    Quote:
    Originally Posted by AppleInsider View Post


    ... Left uncorrected, it will turn the project into a historical information technology ["failure" Krstić used another word] unparalleled in scale.



    LMAO what other word would that be?
  • Reply 20 of 58
    dstranathandstranathan Posts: 1,717member
    Quote:
    Originally Posted by bloggerblog View Post


    LMAO what other word would that be?



    cluster-nugget
Sign In or Register to comment.