Re: Cryptanalysis of SecurID (ACE/Server)

Adam Back (aba@dcs.ex.ac.uk)
Thu, 1 Oct 1998 09:11:16 +0100

• Next message: Ben Laurie: "Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code)"
• Previous message: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"

John Moore writes:
> BTW... the objections to SecureID presumably do not apply to
> dial-in sessions onto a "secure" (I recognize the non-absoluteness
> of this) network.

What makes you think a dial-in connection can't itself be hijacked?
Harder -- but doable possibly with phone network hacking, and
certainly with telco assitance (which for example spooks are able to
command).

Adam

• Next message: Ben Laurie: "Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code)"
• Previous message: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"