Somewhat, but not really. As someone else mentioned, there were only 7 bits different between the two files.
The reason the attack worked in the story is because Alice created <b>both</b> documents. But what she actually created was two variations of a single document, with nearly the same contents (that is, each document contains both messages) but each of the two documents is set up to show just one of the two messages. She tricks Caesar into digitally signing one of the electronic documents, and then uses that digital signature on the other.
The reason that wouldn't work with the MP3's is because the people trying to distribute the false content didn't create the original MP3's. Alice was able to have her secret message incorporated into the hash key, and then hinge it (but preserve the key) to create two visually different documents.
People looking to use a similar trick on MP3 files could flip sets of bits, mangling the file but preserving the checksum through experimentation, perhaps, until the file was unreadable. That might be good enough to beat peer-vs-peer distribution.. but it'd be much harder to start with a pre-existing document and turn it into something <i>meaningful</i>.
the movie star... and... who?
Oh yeah, "And the rest."
Re:Same old GNU/God Complex
on
Drafting GPL3
·
· Score: 0
Granted, big ego, yes.
However, the GPL started out as his idea on how software should work. Not as though there wasn't software being freely shared before that, but he had an idea, turned it into a working document, and a lot of people have since embraced that. It's been a very successful idea and a very successful document. And no doubt he still wants his message to come through in that document.
It's not good to get too wrapped up in one's successes, but I think he's earned a little bit of credit.
Re:What is wrong with GPL v2
on
Drafting GPL3
·
· Score: 0
Most likely they want to harden the GPL against possible attacks, make its restrictions fit international laws better (reducing the possibility that the license will be found in contradiction with said laws - which could) and then there's "loopholes" currently in terms of the GPL's stance on linking dynamically that they want to avoid.
The Linux kit on the PS2 was rather limited in what it would allow you to do - access to memory cards, etc. was restricted, and I think there were restrictions on what programs you could run, too.
Best bet for open-source is to wait for someone to find an exploit to crack the system's security, or get a mod chip...
The earth is a hotbed of RF noise as it is. I like SETI and all, but if they can't deal then it may just have to wait until they can move their stuff offworld..
But the OS is a moving target, and now the hardware is, too. That's the #1 thing keeping me away from doing Mac development as a hobby - it seems self-defeating. I mean, don't get me wrong, I think it's for the best that they're willing to change things to make them better, but all this turbulence in the transitional periods is uncomfortable.
That's pretty funny... when's the last time Microsoft updated their JVM? Last time I tried writing a Java Applet the single biggest problem I had was that Microsoft's JVM is installed and active by default, but it supports a crusty, ancient Java standard...
Do they really lose money if someone else makes a compatible flash player? They give the player away. They make their money by selling the authoring tools. It'll take more than even free authoring tools to be a threat, as long as their tools are better. There are a hell of a lot of people making flash stuff these days - ads, websites, cartoons, whatever - it's worth it to a designer to spend the money to get a tool they're happy with, rather than struggle with a free tool.
Slashdot Mirror
Somewhat, but not really. As someone else mentioned, there were only 7 bits different between the two files.
The reason the attack worked in the story is because Alice created <b>both</b> documents. But what she actually created was two variations of a single document, with nearly the same contents (that is, each document contains both messages) but each of the two documents is set up to show just one of the two messages. She tricks Caesar into digitally signing one of the electronic documents, and then uses that digital signature on the other.
The reason that wouldn't work with the MP3's is because the people trying to distribute the false content didn't create the original MP3's. Alice was able to have her secret message incorporated into the hash key, and then hinge it (but preserve the key) to create two visually different documents.
People looking to use a similar trick on MP3 files could flip sets of bits, mangling the file but preserving the checksum through experimentation, perhaps, until the file was unreadable. That might be good enough to beat peer-vs-peer distribution.. but it'd be much harder to start with a pre-existing document and turn it into something <i>meaningful</i>.
ATMs? Secure? Didn't you see Terminator 2?
the movie star... and... who? Oh yeah, "And the rest."
Granted, big ego, yes. However, the GPL started out as his idea on how software should work. Not as though there wasn't software being freely shared before that, but he had an idea, turned it into a working document, and a lot of people have since embraced that. It's been a very successful idea and a very successful document. And no doubt he still wants his message to come through in that document. It's not good to get too wrapped up in one's successes, but I think he's earned a little bit of credit.
Most likely they want to harden the GPL against possible attacks, make its restrictions fit international laws better (reducing the possibility that the license will be found in contradiction with said laws - which could) and then there's "loopholes" currently in terms of the GPL's stance on linking dynamically that they want to avoid.
The Linux kit on the PS2 was rather limited in what it would allow you to do - access to memory cards, etc. was restricted, and I think there were restrictions on what programs you could run, too. Best bet for open-source is to wait for someone to find an exploit to crack the system's security, or get a mod chip...
The earth is a hotbed of RF noise as it is. I like SETI and all, but if they can't deal then it may just have to wait until they can move their stuff offworld..
But the OS is a moving target, and now the hardware is, too. That's the #1 thing keeping me away from doing Mac development as a hobby - it seems self-defeating. I mean, don't get me wrong, I think it's for the best that they're willing to change things to make them better, but all this turbulence in the transitional periods is uncomfortable.
That's pretty funny... when's the last time Microsoft updated their JVM? Last time I tried writing a Java Applet the single biggest problem I had was that Microsoft's JVM is installed and active by default, but it supports a crusty, ancient Java standard...
Support for it is stopping. How's that for a reason? :)
Or even hoped the sound would synchronize properly on Intel/Linux...
Do they really lose money if someone else makes a compatible flash player? They give the player away. They make their money by selling the authoring tools. It'll take more than even free authoring tools to be a threat, as long as their tools are better. There are a hell of a lot of people making flash stuff these days - ads, websites, cartoons, whatever - it's worth it to a designer to spend the money to get a tool they're happy with, rather than struggle with a free tool.
Hey, you joke about Shampoo and Deodorant, but some high-profile figures in free software have yet to learn about such things...