Re: Crypto and UI issues

2005-12-19 Thread James A. Donald
-- James A. Donald: My two most recent logins were with First National Bank of Omaha and Your IBM Savings plan Is firstnational.com the same entity as First National Bank of Omaha? Is https://lb22.resources.hewitt.com; the same entity as Your IBM Savings plan From: Ben

It's almost enough to make you feel sorry for Diebold

2005-12-19 Thread Charlie Kaufman
Reportedly, some people demonstrated falsifying votes on Diebold voting machines using only resources and techniques available to thousands of election workers. It will be interesting to see the fallout. These weaknesses have apparently long been known, but denied by Diebold.

Re: crypto for the average programmer

2005-12-19 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Sun, 18 Dec 2005 21:56:11 -0600, Travis H. [EMAIL PROTECTED] said: solinym Anytime someone wants to rewrite a C library in a language solinym less prone to buffer overflows, I'm totally for it. Some say solinym that it's not the library, it's the programmer, but

Re: Crypto and UI issues

2005-12-19 Thread Travis H.
On 12/18/05, Ben Laurie [EMAIL PROTECTED] wrote: It would happen at least as much as it happens with https, and it happens enough with https that false negatives enormously outweigh true negatives. True, but I don't see false negatives very often with https at all. And I visit far more

Re: crypto for the average programmer

2005-12-19 Thread Travis H.
On 12/19/05, Richard Levitte - VMS Whacker [EMAIL PROTECTED] wrote: C has three really strong points: - portability. It's one of the most wide-spread and portable compiled languages that I know of. I beg your pardon? If I want to store 128 bits of information, and access the 8 most

Re: crypto for the average programmer

2005-12-19 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Mon, 19 Dec 2005 01:19:37 -0600, Travis H. [EMAIL PROTECTED] said: solinym On 12/19/05, Richard Levitte - VMS Whacker [EMAIL PROTECTED] wrote: solinym C has three really strong points: solinym solinym - portability. It's one of the most wide-spread and

Re: crypto for the average programmer

2005-12-19 Thread Travis H.
On 12/19/05, Richard Levitte - VMS Whacker [EMAIL PROTECTED] wrote: unsigned char foo[8]; (no, it isn't fool proof, but close enough after 1 second of thought). I think C guarantees that a char is a byte, but exactly how wide that is is processor-dependent. IIRC, some of the machines it was

Re: crypto for the average programmer

2005-12-19 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Mon, 19 Dec 2005 03:12:16 -0600, Travis H. [EMAIL PROTECTED] said: solinym On 12/19/05, Richard Levitte - VMS Whacker [EMAIL PROTECTED] wrote: solinym unsigned char foo[8]; solinym solinym (no, it isn't fool proof, but close enough after 1 second solinym of

whoops (residues in a finite field)

2005-12-19 Thread Travis H.
Schneier mentions whooping values (whoops? I don't know the precise term) in doing modular arithmetic. I was wondering what people thought of this. Basically if you've got a huge finite field, and do arithmetic on it, the whoop values are the residues in a much smaller field that is unknown to

NSA director on NSA domestic wiretaps (to Cong in Oct 2002)

2005-12-19 Thread John Gilmore
Paragraph 40, below, is about as bald a statement as an NSA director could make, saying he needs help to decide what he should be allowed to wiretap about US persons. We, the privacy community, did not respond. We were a bit surprised, but that was about the extent of the support we offered. Of