Ask Security/Cryptography Expert Paul Kocher

Paul Kocher is unquestionably one of the highest-profile computer and network security experts around. He's president of Cryptography Research, Inc. and one of the architects of SSL 3.0. The floor is now open. Please try not to ask questions that can be answered with a few minutes' worth of online research. We'll post Paul's answers to 10 of the highest-moderated questions soon after he gets them back to us. Update: 03/13 18:18 GMT by M : Let's try this one more time, this time with feeling.

Comments

fhnlsfdlkm&5nlkd%Bvbcvbc

[matt4077]

fkgsdf%LDjöofjnvBNlöjbfjsbyv%$bhlvy$knvnlkblnbxcjv byx$LJKFhgsfKNV4346Khndjbgvkbhdfgföljny kny_FYFKdfknyY_LirhrhaeihÖFHGsfihFYbjbK453KhdsFkbs KbfknvyVNkKnfkgnbxfdkn445k3nlDKNAdsSAdkfasdfKLNKdf nDFKgnentk4n4ktn4knt4 kaKdfnjaSDKfnaDKfnaK4n4knaKGAna4ank495p9zhthgugbhf hjbernara?

Re:fhnlsfdlkm&5nlkd%Bvbcvbc

[Anonymous Coward]

Uv, V'z jbaqrevat vs lbh guvax gurer'f n shgher sbe EBG13. V'ir urneq vg'f cerggl frpher...

Lbh pna ernq guvf? Qnza!

Re:fhnlsfdlkm&5nlkd%Bvbcvbc

[DrDevil]

Whatever you used to encrypt that mate, it repeats things, fkgsdf, the same keys in the similar area of the keyboard. therefore your cipher must be poor!

Re:fhnlsfdlkm&5nlkd%Bvbcvbc

[cornjchob]

Wait, let me get out my Little Orphan Annie Decoder Ring...

"Be sure to drink your Ovaltine"?!

What the damn? That parent post was just a crummy commercial; aw nuts.

Who would win in a fight?

[Anonymous Coward]

You or Bruce Schneier?

NOT an interview question ...

[silvakow]

Just thought you'd like to know, ROT13 is outdated. There is a new protocol out to replace it as of a couple of days ago called ROT-13+.

Re:NOT an interview question ...

[epictetus]

That's nothing. My corporate VPN runs on double-Rot-13, also known as Rot-26. It's twice as secure!

Password...

[Shadow Wrought]

Can you tell us your password?

HAS HE EVER BEEN PHYSICALLY INTIMATE WITH A GOAT?

[Subject Line Troll]

Re:From a Student's Perspective

[geekoid]

What are you, a dolt?
This had been explained quite clearly in many, many movies.
First, you crack some secret government super hard code, snoop around.
Secret Agency use there 'really good software', written and operated by some overweight obnoxius individule, to track you to your address.
they then send someone to kill you, you narrowly escape, befriend some mysterious former agent.
after he saves you from more assassination attempt, he finally dies saving your life. after which the agency feels bad and brings you on. Usually the rest of the world thinks you are dead, or you maintain a secret job.

I assume you are not a dolt, but I just wanted to set up the joke.

Re:Triple barreled question

[lommer]

"There is also an "embarassment factor" - which means that a lot of e-fraud goes unreported."

I think you meant to say e-barassment...

Re:Social engineering

[jpvlsmv]

What happens when a buffer overflow is discovered in the biometric information acceptance daemon?

You put a cage over the biometric reader so the user can only put one finger in at a time, duh.

--Joe

Re:Worst implementation?

[pyro_peter_911]

I still have the Binders of Doom on my bookshelf, filled with detailed notes and attack trees for how someone could embezzle hundreds of millions of dollars from my former employer. It tells you a lot about them that they left that sort of information in the hands of a disgruntled former employee, eh?

I'll take those binders off of your hands for $50. :)

Peter