Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Ian G
On 6/06/11 11:57 AM, David G. Koontz wrote: On 5/06/11 6:26 PM, Peter Gutmann wrote: That's the thing, you have to consider the threat model: If anyone's really that desperately interested in watching your tweets about what your cat's doing as you type them then there are far easier attack

[cryptography] RSA admits securID tokens have been compromised

2011-06-07 Thread Adam Back
http://www.net-security.org/secworld.php?id=11122 RSA has finally admitted publicly that the March breach into its systems has resulted in the compromise of their SecurID two-factor authentication tokens. I guess everyone was suspecting as much reading between the lines of what was said so far,

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Nico Williams
TEMPEST. I'd like keyboards with counter-measures (emanation of noise clicks) or shielding to be on the market, and built-in for laptops. I wonder whether touch-screen smartphones give off any useful RF emanations regarding touches, drags, screen contents. Anyways, I'm getting out of topic...

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread J.A. Terranson
On Tue, 7 Jun 2011, Nico Williams wrote: TEMPEST. I'd like keyboards with counter-measures (emanation of noise clicks) or shielding to be on the market, and built-in for laptops. Remember how well the original IBM PC clicky keyboard went over (I think I'm the only person in the US who

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Nico Williams
On Tue, Jun 7, 2011 at 2:01 PM, J.A. Terranson me...@mfn.org wrote: On Tue, 7 Jun 2011, Nico Williams wrote: TEMPEST. I'd like keyboards with counter-measures (emanation of noise clicks) or shielding to be on the market, and built-in for laptops. Remember how well the original IBM PC clicky

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Marsh Ray
On 06/07/2011 02:01 PM, J.A. Terranson wrote: On Tue, 7 Jun 2011, Nico Williams wrote: TEMPEST. I'd like keyboards with counter-measures (emanation of noise clicks) or shielding to be on the market, and built-in for laptops. Remember how well the original IBM PC clicky keyboard went over

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Steven Bellovin
On Jun 7, 2011, at 3:01 30PM, J.A. Terranson wrote: On Tue, 7 Jun 2011, Nico Williams wrote: TEMPEST. I'd like keyboards with counter-measures (emanation of noise clicks) or shielding to be on the market, and built-in for laptops. Remember how well the original IBM PC clicky

Re: [cryptography] Preserve us from poorly described/implemented crypto

2011-06-07 Thread Peter Gutmann
Steven Bellovin s...@cs.columbia.edu writes: Im typing on a large, heavy, clicky IBM keyboard right now... I have a 15-year-old one that's still going strong (not a buckling-spring one, which I was never that much of a fan of, but a keyswitch one), but I'm not sure what I'd do if this one ever