Re: Trivial OTP generation method? (makernd.c)

2003-02-27 Thread Jason Holt
Several things: * Using the output to seed MD5 for the next block exposes that part of the state of the RNG. Might be better to use half the MD5 output as seed for the next block, and the other half as output data. * Your RNG takes input from an attackable source. I can significantly reduce t

Re: Trivial OTP generation method? (makernd.c)

2003-02-27 Thread Major Variola (ret)
At 03:17 AM 2/27/03 +0100, Thomas Shaddack wrote: >> Here's what I do for random bits: >> http://www.etoan.com/random-number-generation/index.html > >Nice!!! :) I wasn't aware such electronics is so cheap! Note on RNG/hacking the PC-Geiger counter: If you want to change the RM-60's Time Base Unit,

Wiretap Act Does Not Cover Message 'in Storage' For Short Period (was Re: BNA's Internet Law News (ILN) - 2/27/03)

2003-02-27 Thread R. A. Hettinga
At 9:01 AM -0500 on 2/27/03, BNA Highlights wrote: > WIRETAP ACT DOES NOT COVER MESSAGE 'IN STORAGE' FOR SHORT > PERIOD > BNA's Electronic Commerce & Law Report reports that a > federal court in Massachusetts has ruled that the federal > Wiretap Act does not prohibit the improper acquisition of >

oops! Voting software firm gets sued.

2003-02-27 Thread Sunder
http://www.wired.com/news/politics/0,1283,57831,00.html Never mind the wrongful termination - actually, do mind, - he got canned because of whistleblowing: ... The suit claims the termination occurred shortly before Spillane had planned to meet with officials of the independent testing authority