DESCHALL Classic Client Source Code Released

2007-02-09 Thread Matt Curtin
Hello everyone. It was at the RSA Conference ten years ago that the Secret Key Challenges were issued, including the original DES Challenge. Rocke Verser's DESCHALL project, of course, went on to win that contest. Source code for the project was covered by a ten-year non-disclosure agreement.

Re: One Laptop per Child security

2007-02-09 Thread Ivan Krstić
Steven M. Bellovin wrote: What about unprotected, frequently-running web browsers? I don't follow. How do you hop from one browser to another, if you want to use one as your spread vector? Browsers don't accept inbound connections. -- Ivan Krstić [EMAIL PROTECTED] | GPG: 0x147C722D

Re: One Laptop per Child security

2007-02-09 Thread James A. Donald
-- Nicolas Williams wrote: The text you quote doesn't answer the question; the rest of the wiki frontpage says little more. It tends to make me think that if an application wants to do something that I've not enabled it to do ahead of time then it fails. Failure is incovenient. So as

Re: One Laptop per Child security

2007-02-09 Thread James A. Donald
-- Simon Josefsson wrote: Would it be possible for one malicious web site to be able to access (or even influence) what is being done in another tab or window of the browser? If the user is talking to a bank, then that scenario may threaten the user's privacy. Sandboxing the browser

Re: One Laptop per Child security

2007-02-09 Thread Peter Gutmann
Just a general thought, it seems like the OLPC security design is a real-world implementation of Bill Cheswick's Windows OK proposal. See for example http://usablesecurity.com/2005/07/07/bill-cheswick/ for more on this (modulo the comments on feature starvation, which don't apply to the OLPC

Re: One Laptop per Child security

2007-02-09 Thread Ivan Krstić
Peter Gutmann wrote: Just a general thought, it seems like the OLPC security design is a real-world implementation of Bill Cheswick's Windows OK proposal. See for example http://usablesecurity.com/2005/07/07/bill-cheswick/ for more on this (modulo the comments on feature starvation, which

Re: One Laptop per Child security

2007-02-09 Thread Nicolas Williams
On Fri, Feb 09, 2007 at 01:22:06PM +1000, James A. Donald wrote: Nicolas Williams wrote: The text you quote doesn't answer the question; the rest of the wiki frontpage says little more. It tends to make me think that if an application wants to do something that I've not enabled it to do

Re: interesting and thought provoking resources on quantum crypto

2007-02-09 Thread Travis H.
On Thu, Feb 08, 2007 at 04:29:25PM -0800, Saqib Ali wrote: i have been tasked by my advisor to create series of mini-lectures slides on the topic of cryptography for a freshman year CS class. You know, you shouldn't use the Internet to ask people to do your homework for you... ;-) j/k any