Re: [Full-Disclosure] FDA Approves Use of Chip in Patients ? HIPAA woes?

2004-10-15 Thread Simon Richter
Hi, It is just a rapid way of identifying people which is not a bad thing in some circumstances. Some catagories of patient carry alert bracelets to inform any medical practitioners that they have certain severe reactions or specific medical conditions. I would immediately accept a chip

Re: [Full-Disclosure] Security Web Site Hosting

2004-07-30 Thread Simon Richter
Hi, Any recommendations on site hosting services / Portal framewroks / site builders... I've heard PHPNuke is pretty solid. Simon -- GPG Fingerprint: 040E B5F7 84F1 4FBC CEAD ADC6 18A0 CC8D 5706 A4B4 ___ Full-Disclosure - We believe in it.

Re: [Full-Disclosure] Possible First Crypto Virus Definitely Discovered!

2004-06-09 Thread Simon Richter
Hi, Also, right before I wrote this message I blocked port 443 in and out on our firewall at the bank! I will be going over these servers very carefully tonight to look for anything wacky or goofy. This kind of reminds me of one fine day, when I was greeted by the words This system

Re: [Full-Disclosure] Re: Microsoft Security, baby steps ?

2004-03-17 Thread Simon Richter
Hi, When you want to be the leader, you don't ask questions like that. You recognize problems and you solve them and one of the problems today for Windows is that MS is making it very difficult to keep patched if the user doesn't want to put the machine on the net BEFORE it's fully patched.

Re: [Full-Disclosure] Caching a sniffer

2004-03-11 Thread Simon Richter
Hi, How can i know if there a sniffer running in my network? In the Good Old Days(tm), at LAN parties, we used to send out garbled packets (that would make Windows' IP stack crash) to a nonexistant hardware address, then looked who got a bluescreen. Of course, this makes sense only in

Re: [Full-Disclosure] OpenPGP (GnuPG) vs. S/MIME

2004-02-27 Thread Simon Richter
Hi, - - cryptographically, it appears more secure (i.e. larger public key sizes possible) It's not size that matters, but technique. Seriously, both protocols support the same encryption methods and key lengths. - - it seems to be more widely used Depending on the community you're looking

Re: [Full-Disclosure] interesting?

2003-02-01 Thread Simon Richter
Hi, According to the analysis posted to NANOG by a number of researchers (http://www.caida.org/analysis/security/sapphire/), It infected the majority of hosts within the first 10 minutes. [...] This seems important is because it shows that a high rate of saturation can be achieved among

Re: [Full-Disclosure] The worm author finally revealed!

2003-01-31 Thread Simon Richter
Henrik, I guess many people also thinks that having a PGP signature on mails make them - true (while paranoid people would actually verify the signatures) No, PGP signatures help me establish trust to individuals by allowing me to connect messages by the same individual to each other and

Re: [Full-Disclosure] Sapphire worm POC that fulldisclosure policies hurt everyone

2003-01-26 Thread Simon Richter
Hi, [...] The ms-sql vulnerability has been known to the public for six months. [...] If the ms-sql bug had never been disclosed, and was slipped quietly to Microsoft, this never would have happened, and the same responsible administrators would have upgraded their software. No comment.

Re: [Full-Disclosure] Trustworthy Computing Mini-Poll

2002-12-22 Thread Simon Richter
Heorgi, On Sun, Dec 22, 2002 at 02:29:26PM +0200, Georgi Guninski wrote: Simon Richter wrote: [...] and I'm asking now whether you would like those features on your home box as well, even if you had to give up DVD copying or get special illegal hardware for it. Illegal hardware??? Special

Re: [Full-Disclosure] Trustworthy Computing Mini-Poll

2002-12-20 Thread Simon Richter
Hi, On Fri, Dec 20, 2002 at 02:47:59AM +0100, yossarian wrote: Would you buy/use it if you had the choice? I mean, there are a lot of advantages... :-) Now you've got me interested - what advantages is TCPA offering me? We're currently talking about the (hypothetical) features of the

Re: [Full-Disclosure] Trustworthy Computing Mini-Poll

2002-12-20 Thread Simon Richter
Bruce, I'd say protection from binary viruses and stack overflows, plus if [...] I'm sorry, maybe I was sleeping in class... can somebody explain to me how a TCPA machine (as currently hypothesized) would keep stack overflows from happening? Is this a facet of having a nub check each and

Re: [Full-Disclosure] Trustworthy Computing Mini-Poll

2002-12-19 Thread Simon Richter
Hi Andrew, On Thu, Dec 19, 2002 at 09:06:58AM +0200, Andrew Thomas wrote: form a lobby group and ask for the owner + web of trust solution. It is technically doable and in the line of liberalism, so I think it has a good chance of becoming law. I might be missing something, but how does

Re: [Full-Disclosure] Trustworthy Computing Mini-Poll

2002-12-18 Thread Simon Richter
Hi, On Mon, Dec 16, 2002 at 04:12:51PM -0500, [EMAIL PROTECTED] wrote: Information Security would like to ask your opinion on Microsoft's Trustworthy Computing initiative. Please answer the following questions: I have different questionnaire: 1. Do you think the TC initiative (as it currently