Re: One Time Password and GnuPG

2008-06-10 Thread Andrew Berg
John Clizbe wrote: Andrew Berg wrote: Bricks can be hallowed out. :P HOLY BRICKBATS, BATMAN! Would such bricks then be filled with the Holy Spirit to give them strength? I must assume you meant 'hollowed'. Yes I did. Of course, little plastic angel-like wings could be added for effect

Re: One Time Password and GnuPG

2008-06-10 Thread Robert J. Hansen
Andrew Berg wrote: Yes I did. Of course, little plastic angel-like wings could be added for effect after being /hollowed/ out. Having not seen John's original message come through on GnuPG-Users, I can only assume that you are taking public something that he sent off-list, presumably for good

Re: One Time Password and GnuPG

2008-06-08 Thread Andrew Berg
Robert J. Hansen wrote: If you don't have physical security over your hardware, you don't have anything. You cannot use GnuPG safely on a malicious machine Exactly. There are keyloggers (both hardware and software), screenloggers, USB drive copy programs, and a lot of other nasty stuff you'll

Re: One Time Password and GnuPG

2008-06-08 Thread Roscoe
Would a smartcard address this private key compromising problem? On Mon, Jun 9, 2008 at 2:52 AM, Andrew Berg [EMAIL PROTECTED] wrote: Robert J. Hansen wrote: If you don't have physical security over your hardware, you don't have anything. You cannot use GnuPG safely on a malicious machine

One Time Password and GnuPG

2008-06-07 Thread Andre Amorim
Hello fellow, I was thinking how to make gnupg more safe when it's ruining into hostile environments. The main idea is run my Gnupg in my pen drive as a portable application. I did a quick research and I found GNUPG portable here http://portableapps.com/node/11402 And thunderbird portable and

Re: One Time Password and GnuPG

2008-06-07 Thread Robert J. Hansen
Andre Amorim wrote: What do you think guys ? Search the archives. These ideas keep on popping up time and time again, and the same answers always apply. If you don't have physical security over your hardware, you don't have anything. You cannot use GnuPG safely on a malicious machine. People