Posted in Security on January 27th, 2003 Comments Off
Scott Loftesness reports on a WSJ story about Microsoft Passport quoting the article
“But European privacy authorities last year said the system raised “legal issues,” including the “value and quality of the consent given” by users and the “security risks associated” with the transfer of their data to Passport’s partners.”
Now since I am not a […]
Posted in Security on January 26th, 2003 Comments Off
Donald Eastlake: ”
I’ve never seen such a ridiculously overhyped teaser article about a very simple 150 year old weakness. … If you have an individual key, key blanks, and access to a lock, you can cut trial keys. Assume 5 pins and 10 level. You take a blank and pick a pin. You cut the […]
Posted in Security on January 23rd, 2003 Comments Off
NYTimes: “In the paper, Mr. Blaze applies the principles of cryptanalysis, ordinarily used to break secret codes, to the analysis of mechanical lock designs.”
Mechanical locks are much more pervasive, and can’t be upgraded as easily as oftware. Discovering “security bug” in the design of mainstream locks will thus have a huge impact on security (as well […]