spyware targets bank customers. news at 11.

2005-08-09 Thread Perry E. Metzger
"A major identity theft ring has been discovered that affects up to 50 banks, according to Sunbelt Software, the security company that says it uncovered the operation. The operation, which is being investigated by the FBI, is gathering personal data from "thousands of machines"

Re: solving the wrong problem

2005-08-09 Thread Ilya Levin
Dave Howe wrote: > > "Nonsense fence" maybe less metaphoric but more clear. > I disagree - "one picket fence" gives a clear impression of a protective > device > that is hardened at but one point - leaving the rest insecure. "nonsense > fence" > doesn't give any real image. Perhaps, but sometime

Re: solving the wrong problem

2005-08-09 Thread Anne & Lynn Wheeler
John Denker wrote: > That's an interesting topic for discussion, but I don't think > it answers Perry's original question, because there are plenty > of situations where the semblence of protection is actually a > cost-effective form of security. It's an example of statistical > deterrence. i've

Please try TrustBar 0.4 beta 9.3 with Hey! ...

2005-08-09 Thread Amir Herzberg
I've just placed new version of TrustBar including Hey! component for testing usability and training users, please save to disk and then open via FireFox, from: http://www.cs.biu.ac.il/~herzbea//TrustBar/Latest%20TB.xpi The Hey! component is designed to support testing for other bars so I'll be

Two results on SHA-256 in progress

2005-08-09 Thread Mads Rasmussen
I haven't seen this announced anywhere, so here it goes: http://www.cosic.esat.kuleuven.be/WeWorc/allAbstracts.pdf Collisions for simplified variants of SHA-256 Krystian Matusiewicz and Josef Pieprzyk pp. 140 Preliminary Analysis of the SHA-256 Message Expansion Norbert Pramstaller and Christi

Re: solving the wrong problem

2005-08-09 Thread Peter Gutmann
Peter Fairbrother <[EMAIL PROTECTED]> writes: >Peter Gutmann wrote: >> Peter Fairbrother <[EMAIL PROTECTED]> writes: >>> Didn't the people who did US/USSR nuclear arms verification do something >>> very similar, except the characterised surface was sparkles in plastic >>> painted on the missile rat

Re: solving the wrong problem

2005-08-09 Thread Russell Nelson
Perry E. Metzger writes: > Anyone have a good phrase in mind that has the right sort of flavor > for describing this sort of thing? Well, I've always said that crypto without a threat model is like "cookies without the milk". -- --My blog is at blog.russnelson.com | In a democracy

Re: solving the wrong problem

2005-08-09 Thread Daniel Carosone
On Tue, Aug 09, 2005 at 01:04:10AM +1200, Peter Gutmann wrote: > That sounds a bit like "unicorn insurance" > [..] > However, this is slightly different from what Perry was suggesting. > There seem to be at least four subclasses of problem here: > > 1. "???" : A solution based on a misunderstandin