If MS has anything to say about it, I have a feeling we'll be seeing a lot of this type of marketing in the near future. Why? So that the average consumer will be used to using content how, when, and where MS wants them to by the time Palladium systems roll out. By then, they'll be able to spin hardware-based copy protection as an improvement in speed.
Who wants to bet the RIAA gets a system like this on deck about one year out from Palladium/fritz chips being mass-marketed? Just to get you warmed up to the thought that you, as a consumer, no longer own anything... you just rent temporary rights to it.
It's important to note the fact that it doesn't log all keystrokes for 2 reasons:
1) It's impressive. Less keystrokes logged that could be potential passwords, the less manpower required to examine the logs.
2) It leaves potential exploits open for crypto software writers and users in order to trick keystroke loggers into passing them over without recording the activity.
On another note, Bruce Schneier has always reminded people that a secure system always includes at least 2 out of three things: Something you know (password), something you have (ATM card), or something you are (biometrics, fingerprint).
My point is that...
Keystroke loggers could be rendered ineffectual if the crypto software used was also hooked to a fingerprint scanner or a swipe card reader in addition to a password. Or, the person could just always keep the password key on a CD-ROM that they physically take with them and can destroy at a moment's notice.
Re:And people gave me a hard time...
on
2.2 GHz Xeon
·
· Score: 1
Of course. But there is no longer any argument that using encryption of that strength bogs down a PC, because it doesn't. If you have the capability, you should use it.
[Sidebar - More sophisticated attacks beyond brute-force need to try exponentially less keys... there is ALWAYS the possibility that you hit the right key in the keyspace on the first or fifteenth try, as well. Why not increase your odds?]
And people gave me a hard time...
on
2.2 GHz Xeon
·
· Score: 1
about the fact that I always use 4096 bit PGP keys. Brute-force attacks still won't be viable on 1024 bit keys for quite some time (unless you get really, really lucky).
More sophisticated chosen-plain-text or known-plain-text attacks are getting closer and closer to the reach of the average corporation.
Imagine a small company using distributed computing software at night on 50 of the 4.4 GHz machines to break a competitor's encrypted message.
Yeah, I remember the picture from Nat'l Geographic's coverage a while back...the platform that he jumped from had (paraphrase) The Biggest Step In The World painted on it. My roommate and I were paratroopers in the 82nd Abn Infantry at the time, and we were joking about if this guy showed up at one of the local Army bars.
"Yeah, so the other day, we jumped from 600 feet"
His reply:
"I jumped from 50 miles up yesterday."
All jaws drop to floor.
Slashdot Mirror
If MS has anything to say about it, I have a feeling we'll be seeing a lot of this type of marketing in the near future. Why? So that the average consumer will be used to using content how, when, and where MS wants them to by the time Palladium systems roll out. By then, they'll be able to spin hardware-based copy protection as an improvement in speed.
... you just rent temporary rights to it.
Who wants to bet the RIAA gets a system like this on deck about one year out from Palladium/fritz chips being mass-marketed? Just to get you warmed up to the thought that you, as a consumer, no longer own anything
The Proxomitron just released version 4.3 a day or two ago. It now supports both HTTP 1.1 and pipelining. Windows-platform, only, though.
IE6, fully patched on WinXP Pro ... none of the exploits worked at all on mine. I have a standard Windows path, no firewall/anti-virus running.
It's important to note the fact that it doesn't log all keystrokes for 2 reasons:
1) It's impressive. Less keystrokes logged that could be potential passwords, the less manpower required to examine the logs.
2) It leaves potential exploits open for crypto software writers and users in order to trick keystroke loggers into passing them over without recording the activity.
On another note, Bruce Schneier has always reminded people that a secure system always includes at least 2 out of three things: Something you know (password), something you have (ATM card), or something you are (biometrics, fingerprint).
My point is that
Keystroke loggers could be rendered ineffectual if the crypto software used was also hooked to a fingerprint scanner or a swipe card reader in addition to a password. Or, the person could just always keep the password key on a CD-ROM that they physically take with them and can destroy at a moment's notice.
Of course. But there is no longer any argument that using encryption of that strength bogs down a PC, because it doesn't. If you have the capability, you should use it. ... there is ALWAYS the possibility that you hit the right key in the keyspace on the first or fifteenth try, as well. Why not increase your odds?]
[Sidebar - More sophisticated attacks beyond brute-force need to try exponentially less keys
about the fact that I always use 4096 bit PGP keys. Brute-force attacks still won't be viable on 1024 bit keys for quite some time (unless you get really, really lucky).
More sophisticated chosen-plain-text or known-plain-text attacks are getting closer and closer to the reach of the average corporation.
Imagine a small company using distributed computing software at night on 50 of the 4.4 GHz machines to break a competitor's encrypted message.
A much scarier novel, which was very entertaining as well as technically solid, was The Cobra Event by Richard Preston.
Yeah, I remember the picture from Nat'l Geographic's coverage a while back...the platform that he jumped from had (paraphrase) The Biggest Step In The World painted on it. My roommate and I were paratroopers in the 82nd Abn Infantry at the time, and we were joking about if this guy showed up at one of the local Army bars. "Yeah, so the other day, we jumped from 600 feet" His reply: "I jumped from 50 miles up yesterday." All jaws drop to floor.