On 04/23/2010 11:00 PM, Patrick O'Callaghan wrote: > On Fri, 2010-04-23 at 10:09 -0400, Tom Horsley wrote: > >> On Fri, 23 Apr 2010 09:35:55 -0430 >> Patrick O'Callaghan wrote: >> >> >>> More to the point, there would be widespread panic among banks and >>> online shopping sites, webmail sites, and anywhere else that relies on a >>> public-key based security model, which is essentially all of them. >>> >> Nah, those aren't really problems. As we have already seen with all >> the recent spate of credit card number pilfering, it is far simpler >> to get a crook hired by the company to get inside info than to >> waste lots of time with cracking encryption codes :-). >> > Indeed. One of the fallacies of the security-challenged is to think that > by solving crypto, you've solved security. Needham and Schroeder put it > very well: > > "If you think your problem can be solved by cryptography, you don't > understand cryptography and you don't understand your problem." > Sounds like a pithy quotation that should be found by google. But, I was unable to unearth that quotation. Do you have a source? > (It's an aphorism, not to be taken *too* literally). > > poc > > -- Amoebit: Amoeba/rabbit cross; it can multiply and divide at the same time. Guess Who! http://tinyurl.com/mc4xe7
Attachment:
signature.asc
Description: OpenPGP digital signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines