Re: Got.net and its narcing out of its customers

2003-12-09 Thread Michael Shields
In message [EMAIL PROTECTED],
James A. Donald [EMAIL PROTECTED] wrote:
 Searching GG on don frederickson got tim is maybe more reliable than
 pasting this URL.

 For long urls, compress with tinuyurl.com

 http://tinyurl.com/yc3s

If you do that, you have to rely on both the Google URL not changing
and on tinyurl not going away.
-- 
Shields.



Re: Brinwear at Benetton.

2003-03-17 Thread Michael Shields
In article [EMAIL PROTECTED],
Mike Rosing [EMAIL PROTECTED] wrote:
 Yeah, and it takes a second or 2 to find the bar code.  That's got
 to cost a few pennies doesn't it :-)

It adds up, especially in low-margin businesses.  Groceries are a good
example; unpacking every cart, scanning, and bagging is an expensive
bottleneck.  The process could be streamlined a lot if an entire cart
were scanned at once.

There are serious engineering problems before we get there; but the
demand from retailers is very real, and so a very real effort will be
made to solve them.
-- 
Shields.



Re: Fatherland Security measures more important than Bennetton tags!

2003-03-15 Thread Michael Shields
In article [EMAIL PROTECTED],
Adam Shostack [EMAIL PROTECTED] wrote:
 (New York just
 announced the abolition of tokens, making all subway travel
 linkable.)

The last time I was in New York, you could buy a Metrocard for cash.
As far as I know, there are no plans to change this.
-- 
Shields.



Re: Encrypted hard drive enclosure for $139

2003-02-04 Thread Michael Shields
In article [EMAIL PROTECTED],
Bill Stewart [EMAIL PROTECTED] wrote:
 Now, 712 Mbit/sec is about 90 MByte/sec, which means if it
 were doing 3DES, it'd probably be about 30 MByte/sec,
 which is no longer fast enough to be entertaining.

Yes, it is.  Despite the disk manufacturers' intentionally misleading
spec sheets, most hard disks are not very much faster than 30 MB/s.
For example, the new Barracuda V transfers between 23 and 44 MB/s,
depending on where on the disk you read from.
http://www.storagereview.com/benchimages/ST3120023A_str.png

Even if the disk were infinitely fast, the Firewire interface is
limited to 50 MB/s.

I think this product would be extremely useful, if it is trustable.
-- 
Shields.




Re: CDR: Re: Palm Pilot Handshake

2003-01-30 Thread Michael Shields
In article 003301c2c7c2$c734bbe0$0301000a@thishost,
Steve Mynott [EMAIL PROTECTED] wrote:
 The Palms do have fairly slow processors so checking keys may take a while
 and generating them probably quite a long time.

For perspective, however, current-model Palms have 33 MHz Motorola 68k
processors, which used to be considered a nice desktop CPU.  In 1991,
when PGP was first released, the Mac Classic II had a 16 MHz 68030 and
2 MB of RAM.  If that was enough for PGP, then a Palm m500 ought to be
capable of it also.

Granted, you will want to use longer keys now.  But the hardware in
your pocket can do more crypto than you might think.  And they're only
getting faster.
-- 
Shields.




Re: CDR: Re: Supremes and thieves.

2003-01-22 Thread Michael Shields
In article [EMAIL PROTECTED],
Marc de Piolenc [EMAIL PROTECTED] wrote:
 The US Constitution prohibits ex post facto laws.

It seems to me that works could be removed from the public domain
without passing an ex post facto law, as long as this hypothetical law
did not affect works created or copies made during the period between
the expiration of the copyrights and the law's passing.
-- 
Shields.




Re: constant encryped stream

2003-01-04 Thread Michael Shields
In article [EMAIL PROTECTED],
Peter Fairbrother [EMAIL PROTECTED] wrote:
 Get the pull from a party popper and wrap it in a dollar bill. Record
 the serial number of the bill (some crypto here maybe). Make it impossible
 to open the closet without setting the pull off, ie no trapdoor.

 Fairly good tamper-evidence, and the token is hard (and very illegal!) to
 forge.

Most of the security features of a dollar bill are not directed
toward the serial number; they are designed to prevent changing the
denomination, or to increase the cost of creating a real-looking bill
from scratch.  Changing the serial number is likely to be fairly
straightforward.

For this to be secure, you would have to keep the serial number a
secret; and in that case, the paper could be any piece of paper with
a secret written on it.

 Depends on your threat model, of course.

But of course.
-- 
Shields.