From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <36cecabb67b6c8621de499a79aba4519@plan9.bell-labs.com> From: presotto@plan9.bell-labs.com To: 9fans@cse.psu.edu Subject: Re: [9fans] secret stuff MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="upas-roqpfvezopjbfouzpsreucqxll" Date: Sat, 15 Jun 2002 11:39:31 -0400 Topicbox-Message-UUID: ae3ba9e4-eaca-11e9-9e20-41e7f4b1d025 This is a multi-part message in MIME format. --upas-roqpfvezopjbfouzpsreucqxll Content-Disposition: inline Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit That's not really true. We've had numerous smart cards come through with tamper protection. You couldn't get at the image without tearing it apart, filing down the chips, and probing the memory physicaly. IBM made that even hard to do. Certainly not something you did in 10 minutes. Granted many of the smart cards on the market are just memories that you cryptographicly store into but many are not. --upas-roqpfvezopjbfouzpsreucqxll Content-Type: message/rfc822 Content-Disposition: inline Received: from plan9.cs.bell-labs.com ([135.104.9.2]) by plan9; Sat Jun 15 09:45:18 EDT 2002 Received: from mail.cse.psu.edu ([130.203.4.6]) by plan9; Sat Jun 15 09:45:16 EDT 2002 Received: from psuvax1.cse.psu.edu (psuvax1.cse.psu.edu [130.203.20.6]) by mail.cse.psu.edu (CSE Mail Server) with ESMTP id 45C96199B3; Sat, 15 Jun 2002 09:45:09 -0400 (EDT) Delivered-To: 9fans@cse.psu.edu Received: from einstein.ssz.com (unknown [207.200.56.4]) by mail.cse.psu.edu (CSE Mail Server) with ESMTP id 6828319988 for <9fans@cse.psu.edu>; Sat, 15 Jun 2002 09:44:24 -0400 (EDT) Received: from localhost (ravage@localhost) by einstein.ssz.com (8.8.8/8.8.8) with SMTP id HAA06143; Sat, 15 Jun 2002 07:49:25 -0500 From: Jim Choate To: 9fans@cse.psu.edu Cc: hangar18-general@open-forge.org, plan9-system-admin@open-forge.org Subject: Re: [9fans] secret stuff In-Reply-To: <718e76675805c3e986386f87ca6bad66@plan9.bell-labs.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: 9fans-admin@cse.psu.edu Errors-To: 9fans-admin@cse.psu.edu X-BeenThere: 9fans@cse.psu.edu X-Mailman-Version: 2.0.11 Precedence: bulk Reply-To: 9fans@cse.psu.edu List-Id: Fans of the OS Plan 9 from Bell Labs <9fans.cse.psu.edu> List-Archive: Date: Sat, 15 Jun 2002 07:49:24 -0500 (CDT) On Fri, 14 Jun 2002 presotto@plan9.bell-labs.com wrote: > I don't. I'ld use a smart card if I had one that I could get at most > of the time. As is we've made our secstore accessible from the outside > of our firewall so I can use it even when I'm not at home. Smart Cards have the same problem as PDA's, if you lose physical control you lose your security. If anybody ever gets the card for 10 or more minutes they can image the card and then at their leisure take a crack at it. -- ____________________________________________________________________ When I die, I would like to be born again as me. Hugh Hefner ravage@ssz.com www.ssz.com jchoate@open-forge.org www.open-forge.org -------------------------------------------------------------------- --upas-roqpfvezopjbfouzpsreucqxll--