full-disclosure - New paper on Security and Obscurity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky)
Subject: New paper on Security and Obscurity

Just a stupid tought inspired by page 7 - B: who will create the first 
satellite with me (i.e. for watching what's doing our ennemy / in order 
to know where he is)? I guess we could earn some $ if we are the first 
on this topic, I hope I'm not too late :-)
Is full-disclosure includes password/shared secret disclosure ? Maybe 
'full' is not the best choosen word.. It seems 'full' is limited to 
algorithms, and do not extend to secrets (such as passwords), what would 
be the use of a safe if the secret (either the code or the key) is 
written on the door (I know .. in case of fire, a safe is safer than the 
fireman and its water). It looks like computer and military security are 
not so different ...I'm continuing to read this paper. Scientific 
American / pour la science had an issue on cryptography/computer 
security about a year ago (no 36 of the french edition)

Peter Swire wrote:

>	http://papers.ssrn.com/sol3/papers.cfm?abstract_id=531782
>  
>