Victor Duchovni [EMAIL PROTECTED] writes:
It took reading the code to determine the following:
- ASN.1 Strings extracted from X.509v3 certs are not validated for
conformance with the declared character syntax. Strings of type
PrintableString or IA5String may hold non-printable or
On Fri, 19 Jan 2007, Bill Stewart wrote:
Obviously if you're trying to protect against KGB-skilled attacks
on stolen/confiscated hardware, you'd like to have the swap partition
encrypted as well as any user data partitions, though you may not care
whether your read-only utility software was
On Sat, Jan 20, 2007 at 10:10:47PM +1300, Peter Gutmann wrote:
Victor Duchovni [EMAIL PROTECTED] writes:
It took reading the code to determine the following:
- ASN.1 Strings extracted from X.509v3 certs are not validated for
conformance with the declared character syntax. Strings
On Fri, Jan 19, 2007 at 12:11:40AM -0800, Bill Stewart wrote:
One of the roots of the problem is that for many applications,
i is a well-defined event and P(i) is a fixed value (for i) ,
but for many other applications,
i might not be a well-defined event, and/or
P(i) is really a conditional
Aside from admitting to increased CPU utilization, which seemed pretty
incontestable anyway, they're disputing [0] many of the points made in
the original paper [1]. Ignoring the hand-wavy arguments, I find most
interesting their claims that a) there will be no move away from unified
drivers, b)
[Perry -- had a clause in there that made no sense; I shouldn't send
mail minutes after waking up. Please discard previous mail and send
along this one.]
[Moderator's note: Too late, sorry. --Perry]
Aside from admitting to increased CPU utilization, which seemed pretty
incontestable anyway,