Re: Is finding security holes a good idea?

2004-06-17 Thread Birger Tödtmann
Am Do, den 10.06.2004 schrieb Eric Rescorla um 20:37: Cryptography readers who are also interested in systems security may be interested in reading my paper from the Workshop on Economics and Information Security '04: Is finding security holes a good idea? [...] The economic reasoning

Re: Is finding security holes a good idea?

2004-06-17 Thread Eric Rescorla
Birger Toedtmann [EMAIL PROTECTED] writes: Am Do, den 10.06.2004 schrieb Eric Rescorla um 20:37: Cryptography readers who are also interested in systems security may be interested in reading my paper from the Workshop on Economics and Information Security '04: Is finding security holes

Re: A National ID: AAMVA's Unique ID

2004-06-17 Thread John Gilmore
The solution then is obvious, don't have a big central database. Instead use a distributed database. Our favorite civil servants, the Departments of Motor Vehicles, are about to do exactly this to us. They call it Unique ID and their credo is: One person, one license, one record. They swear

Re: Is finding security holes a good idea?

2004-06-17 Thread Rick Wash
On Wed, 16 Jun 2004 17:35:18 -0400, Thor Lancelot Simon [EMAIL PROTECTED] wrote: On Wed, Jun 16, 2004 at 02:12:18PM -0700, Eric Rescorla wrote: Let's assume for the sake of argument that two people auditing the same code section will find the same set of bugs. Actually, I think that in this