Computer Chess Club Archives


Search

Terms

Messages

Subject: Re: Leiden depressions; Happy family on the LAN

Author: Robert Hyatt

Date: 20:28:26 11/09/01

Go up one level in this thread


On November 09, 2001 at 17:51:48, Theo van der Storm wrote:

>On November 08, 2001 at 08:59:42, Bas Hamstra wrote:
>
>>On November 07, 2001 at 12:29:30, Robert Hyatt wrote:
>>
>>>On November 07, 2001 at 04:19:00, Gian-Carlo Pascutto wrote:
>>>
>>>>There is a big difference between meeting your opponent
>>>>in real life, and being able to discuss (yes, that's possible
>>>>on a server too, but its not the same) what and how the
>>>>programs work and evaluate the position.
>>>>
>>>>A real event is much more exciting than an internet event,
>>>>just because of actually meeting the people behind the machines.
>>>>
>>>>This is also why I think it's very important the author is
>>>>present.
>>>>
>>>>--
>>>>GCP
>>>
>>>Note that I advocate an automatic interface to eliminate the human during
>>>the game...  but that I do _not_ advocate no programmers attending.  The
>>>tournament (IMHO) would be held exactly as it has been held, except the
>>>programs gathered together use an auto-interface to send moves and get clock
>>>updates, rather than depending on a human.  This leaves _more_ time for the
>>>humans to exchange ideas, discuss _all_ the active games, and enjoy the event
>>>more...
>>
>>It's a great idea, I would love it. And probably it wouldn't be too hard to make
>>it possible to follow the games LIVE at the internet, big improvement for the
>>public. And especially for programmers who cannot be at the tournament for some
>>reason (had that once, no fun at all seeing only 1-0).
>>
>>Hope they pick it up in Leiden or Paderborn.
>>
>>Bas.
>
>All this is very interesting, but it would be a "winboard/xboard"
>tournament, not a championship. In the championship exotic hardware
>and software should be allowed. Maybe OK for Paderborn or our May-tournament.



How would this eliminate "exotic hardware"??  remote connections from specific
hosts could easily be allowed while maintaining security.


>
>By the way: would you think the main competitors in the computer chess
>world with their most confidential stuff would like to be on the same LAN
>(also including some new wizzkids they don't know)?

That would be ridiculous paranoia.  Use reasonable security for your
source.  IE don't allow _incoming_ connections to your machine, of _any_
kind.  Encrypt  the source if you are paranoid.  Or dump it to a CD and
erase it until it is needed (if ever).

Too many solutions to that problem to name.  I'd bet _everybody_ has their
source on a machine that has a modem or permanent connection.  If your
system doesn't have any security, then this might be a problem.  In that
case, bring a laptop with two ethernet cards and have it set up running
Linux to make a firewall that will not allow connections _to_ your machine,
while allowing your machine to connect to the server just fine.






>I would only be providing an ethernet HUB and some server software,
>you know. Please don't tell me there are firewalls to deal with that.
>


Firewalls are not needed if you set up your system right to not allow
_incoming_ connections.  Or if you do allow them, use reasonable
authentication (password at least, RSA/DSA keys better).

I can even do this on the server machine.  Set it up as the 'gateway' so that
_all_ packets are delivered to it first.  Then some simple ipchains or iptables
rules can prevent inter-node communication of any kind and only allow the
various machines to talk to the server and vice-versa.

Use encrypted channels between the server and the nodes.  SSH is a choice
that works on all platforms.

This _can_ be handled easily, and it will be far better than the current
situation where everyone is more paranoid about operating their program and
what their opponent is typing into his.  This way _no_ humans would be
involved with the actual games.

If someone is _really_ worried, buy a top-layer switch and let it monitor
sessions and block any inter-node connections.  I think all of the above
are overkill as it is easy to block incoming connections and sharing of
files.  There is no problems without those.  Let someone hack away if
they want.  But notice that while my machine is connected and playing, _nobody_
will be doing any typing of _any_ kind.  And right after your game ends,
shut the network connection down until the next round starts...

I would much prefer to see ways to make this work, rather than excuses
why it can't...





>Ed&Jeroen, Frans&Mathias, Johan, post here or e-mail me, please.
>E-mail will be treated confidentially.
>
>Theo.



This page took 0 seconds to execute

Last modified: Thu, 15 Apr 21 08:11:13 -0700

Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.