Re: [NOISE] Borenstein's Fatal Spam

[daw@boston.CS.Berkeley.EDU (David A Wagner)]

-----BEGIN PGP SIGNED MESSAGE-----

In article <pgpmoose.199602010813.60849@paganini.sydney.sterling.com>,
Greg Rose <Greg_Rose@sydney.sterling.com> wrote:
> A number of people have written words to the
> effect of:
>   First Virtual, you lost a lot of ground with me.
>   (sounds like others feel the same way, too).
> 
> I disagree. I think there is a big difference
> between "knowing theoretically that X, Y and Z
> are possible" and "look, I have a program that
> does X, Y and Z in a certain order, and very
> fast, and surprisingly successfully, and this has
> major implications for the banking community".
     [...]
> I think most of the problem here is that we heard
> about it in media words first, and in a reasoned
> argument second. That's life. 

Ok.  Fair enough.  Good points.

Personally, what I found most distasteful about FV's post was their
conclusions, not their experimental procedure.

I agree that their keyboard-sniffer lends more evidence to the well-known
argument that, to make good use of crypto, you need secure endpoint machines.

I disagree when FV concludes that this makes crypto useless.  Instead, I'd
contend we just need to work to secure our endpoints better; then we can do
all sorts of neat stuff with crypto.

I found their conclusions to be academically displeasing.  But I guess
that's what happens when you're trying to sell a product...

- -- Dave Wagner

- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMQ/lHSoZzwIn1bdtAQG3bQF6AnSQY/3Hy6ha35vI5YrbyF8w7Xq/IcN9
IIwNqUKmrqlugKuduk0A9VqDG9Zi0Ksm
=7awQ
-----END PGP SIGNATURE-----