Slashdot Mirror


User: ches

ches's activity in the archive.

Stories
0
Comments
10
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 10

  1. Re:Apple iChat on A Full-Time 2-Way Video Link To Grandparents? · · Score: 4, Informative

    ichat worked well with my wife in Beijing and my daughter in Edinburgh this summer. iChat allowed simultaneous conversations, skype doesn't, AFAIK.

    One fun thing: inviting my wife 12 time zones away over to dinner with friends. The Mac is like Elijah, doesn't eat much, and cause dinner conversation worked well. Poor video quality wasn't a bother.

    ches

  2. Re:modern art on Bill Cheswick On Internet Security · · Score: 1

    I have given samples of the maps to MOMA and the Hirshorn, at their request. They haven't appeared to do anything with them. Perhaps they are waiting for me to die.

    ches

  3. Re:you have probably seen the maps that resulted.. on Bill Cheswick On Internet Security · · Score: 2, Funny

    Yah, my web server is on the local end of a 768/768 ADSL line. Yesterday was a good day to catch up on my reading.

    I did wonder if my home server would ever get slashdotted, and if so, should I attempt to engineer a web solution that can handle it. Too expensive, and I am not sorry I didn't do it.

    ches

  4. How about pass-algorithms? on Successful Alternatives To Password Authentication? · · Score: 1

    One-time passwords fix a lot of the problems with simple passwords, but generally require hardware or printouts.

    People have toyed with pass-algorithms, where the response to a challenge is computed by a human without assistance. I have written a half-baked proposal to obfuscate these challenges and responses using some of the techniques used in baseball signals. See

    http://www.cheswick.com/ches/papers/auth.pdf

    Perhaps you can figure out how to make this idea workable.

    ches

  5. give up, and re-engineer! on Passwords - 64 Characters, Changed Daily? · · Score: 1

    For decades we have seen papers that prove that people do not pick passwords that resist computerized dictionary attacks. It is time to get over it, and stop expecting them to get it right. This is an engineering decision. You don't expect people to be able to lift a car to replace a flat tire, do you?

    With a little training, and a few quick checks, you can get passwords from people that can't be guessed in 3--5 attempts. At that point, you lock the account, and are out of the password-guessing game, permanently. See? Even a random dictionary word is ok when used like this.

    That means you have to get out of the oracle (little o) business. ssh-agent should not be able to tell if you have picked the wrong pass phrase.

  6. Internet mapping projects on Map the Internet... In One Day? · · Score: 1

    It's not clear to me where the idea came from that it takes
    us 6 months to map the Internet. Our daily run takes
    an hour or two. We do not "expand"
    the search to /24s on the Internet to limit consternation
    of the scannees.

    I'd be interested in seeing the layouts. The last
    time I looked Steve North's stuff couldn't handle
    dataset of this size, but that was a long time ago.

    Others are collecting data that is probably more useful
    than ours on the Internet. Check out CAIDA's work
    and especially Rocketfuel.

    Our bread-and-butter is scans of intranets, which tend to
    be smaller, but need to have the data from several points
    integrated into one data set.

    We are still collecting the IMP data, and now have
    about five year's worth of nearly continuous data.

    ches

  7. Re:St. Louis Geek Attractions on A Geek's Tour Of North America? · · Score: 1

    Don't miss Ted Drewes frozen custard on route 66. Ask any kid for directions. Actually, you can get superb frozen custard anywhere between St. Louis and Wisconson.

  8. Re:Cold War Bunker in Ottawa on A Geek's Tour Of North America? · · Score: 1
    A US equivalent is available for tour in eastern West Virginia at the Greenbriar Hotel. The hotel is expensive, but you might be able to get the tour without it. Phone geeks will especially enjoy the telco switching room. BTW, the Greenbriar still has unusually reliable long distance service, by AT&T, of course.



    This was a hidey hole for Congress until it was outted in the early 90s. The Pres goes elsewhere.

  9. Re:Cartoons? on Firewalls and Internet Security, 2nd Ed. · · Score: 1

    I saw the new cover cartoon a couple of years ago, and _had to have it._ Fortunately, Wiley was amenable. We gotta send him a signed copy.

    There are lots of new epigrams. Ever done a bibliographic entry for a Bugs Bunny cartoon? 8-)

    ches

  10. Re:Correction on Firewalls and Internet Security, 2nd Ed. · · Score: 4, Informative

    It took us about 8 years to put the full text of the first edition on line. It's a marketing call, which we mostly leave up to our publishers. I don't think we will be putting the full text of the second edition up for quite some time.

    ches