JANOS

As you know we have been supporting ZIP and JAR files (they are the same as far as JANOS is concerned) for a while. JAR files being predominantly for application programs and Java support. More recent OS versions allow the WebServer to serve files directly out of a ZIP library. The DCP is an example where you need only add the www.zip file to the /flash folder to install the set of files that are the DCP. There is no need to expand the library.

To do this JANOS is able to understand the ZIP/JAR file structure and extract data stored within it with either the STORE or DEFLATE methods. Presently JANOS cannot handle the LZW compression or many other ZIP options such as encryption.

I had once developed a program called “Curator” which was a backup utility that worked much like SVN and stored all of its data using LZW compression. We were always amazed at the compression ratios. I had even worried at times that there might have been a problem in figuring that ratio because sometimes it seemed way off. But the program worked and accurately recovered data.

So I do have code that I have written (although in C++ in that case) that can be used in JANOS to handle LZW. We just haven’t encountered it. Apparently DEFLATE is the compression method of choice.

So I expect that we will encounter externally zipped libraries that JANOS will not be able to process. In those cases depending on the reasons for the incompatibility I am prepared to implement the fix.

But the question now is whether or not there would be any use in the JAR command being able to compress files and create libraries? I realize it has been suggested and even entered in our Redmine system. Would this be something worth doing?

Would you trust your controller directly connected to the Internet?

We’ve been testing a JNIOR 410 on the network with only the following safeguards:

  1. Disable all accounts except the administrator ‘jnior’ account.
  2. Changed the ‘jnior’ account password.

There has been enough malicious activity attempting to login into the Telnet port that we have an application processing the access/log failed login reports and mapping the host locations. Try http://honeypot.integpg.com or https://honeypot.integpg.com if you prefer a secure connection.

Note that this unit is running the current Release Candidate for JANOS v1.6.2 as we have continued to enhance the unit’s ability to withstand life on the open network.

By the way there are a couple of publicly accessible web pages on this unit:

http://honeypot.integpg.com/RegistryDoc.html
http://honeypot.integpg.com/map.php