1st hard problem to solve -- secure upload: Experience shows that large measurement projects frequently need to update measurement tools ("user" code). Supporting diverse measurements also needs this. Problem: how can you trust the code? Threats: subverting the platform (use it as stepping stone) using NIMI for attacks (e.g., distributed DoS) affecting integrity of other measurements