Re: Is There a Visor Security Model?

1999-09-22 Thread Dan Geer


The Palm's security model is, by most accounts I've seen, non-existant.

The issue is the lack of memory protection, i.e., that there is no
protected space for keying material.  Visor is said to use the PalmOS
as is, so that is not a magic wand.  Of course, if your OS has no memory
protection, you can always rely on yet another external hardware 
device, as has already been mentioned.

--dan




Re: Is There a Visor Security Model?

1999-09-22 Thread James H. Cloos Jr.

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 "Bill" == Bill Frantz [EMAIL PROTECTED] writes:

Bill The other solution is to run you Palm in "system high" mode,
Bill where all applications are trusted.  (Since the only application
Bill I have added to my Palm is "Life", I could easily run it that
Bill way.  Now all I have to do is gain trust in the built in
Bill applications.)

IIRC, the SDK has the src for all of the builtin apps, so gaining that
trust should, at least, only be a matter of work, not of negotiation.

- -JimC
- -- 
James H. Cloos, Jr.  URL:http://jhcloos.com/public_key 1024D/ED7DAEA6 
[EMAIL PROTECTED]  E9E9 F828 61A4 6EA9 0F2B  63E7 997A 9F17 ED7D AEA6
Save Trees:  Get E-Gold! URL:http://jhcloos.com/go?e-gold
-BEGIN PGP SIGNATURE-
Version: GnuPG v0.9.11 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE36SEBmXqfF+19rqYRAi3EAJ4idpWeKY+47IkZOmOp6wr/EToivACgjDoc
/0dMLuygTuefxxdIyT6dbkw=
=aw4w
-END PGP SIGNATURE-



Is There a Visor Security Model?

1999-09-21 Thread Robert Hettinga

Everyone's probably heard of the new Palm-alike Visor by now, and 
it's got this "springboard" slot in the back processors, memory, and 
other stuff.

The Palm's security model is, by most accounts I've seen, non-existant.

Is the Visor any better?

It would be nice to have a portable cryptographic/signature/digital 
money device. Are we any closer?

Cheers,
RAH
-
Robert A. Hettinga mailto: [EMAIL PROTECTED]
The Internet Bearer Underwriting Corporation http://www.ibuc.com/
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'



Re: Is There a Visor Security Model?

1999-09-21 Thread evan . cordes

 From: Robert Hettinga [EMAIL PROTECTED]

 Everyone's probably heard of the new Palm-alike Visor by now, and 
 it's got this "springboard" slot in the back processors, memory, and 
 other stuff.
 
 It would be nice to have a portable cryptographic/signature/digital 
 money device. Are we any closer?

Even if a "springboard" module doesn't come out, it's got USB,
which can be used with the ikey's for key storage and some crypto.
That's an improvement.

http://ikey.rainbow.com/  (if it's new to you).

Evan




RE: Is There a Visor Security Model?

1999-09-21 Thread Trei, Peter

The Visor uses Palm OS, so I don't think it's any better.
Peter Trei


 --
 From: Robert Hettinga[SMTP:[EMAIL PROTECTED]]
 Sent: Tuesday, September 21, 1999 2:49 PM
 To:   [EMAIL PROTECTED]; [EMAIL PROTECTED]; Digital Bearer
 Settlement List
 Subject:  Is There a Visor Security Model?
 
 Everyone's probably heard of the new Palm-alike Visor by now, and 
 it's got this "springboard" slot in the back processors, memory, and 
 other stuff.
 
 The Palm's security model is, by most accounts I've seen, non-existant.
 
 Is the Visor any better?
 
 It would be nice to have a portable cryptographic/signature/digital 
 money device. Are we any closer?
 
 Cheers,
 RAH
 -
 Robert A. Hettinga mailto: [EMAIL PROTECTED]
 The Internet Bearer Underwriting Corporation http://www.ibuc.com/
 44 Farquhar Street, Boston, MA 02131 USA
 "... however it may deserve respect for its usefulness and antiquity,
 [predicting the end of the world] has not been found agreeable to
 experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'