On Sun, 11 Aug 2002, Russell Turpin wrote:
> If you have a rogue app on your machine, what keeps it from sniffing
> your passphrase? This is one of the reasons I keep harping on the need
As long as the OS doesn't give you a convenient GetPassPhrase() method
that threat model is theoretical. Worms are autonomous, and autonomous
worms are not that smart.
However, that's the reason I mentioned crypto hardware (USB fobs, smart
cards, etc).
> for thin, secure clients.
While this is a good idea, the concept of security is holistic. It
involves a secure OS, secure apps, and crypto hardware.
> When I read email, I want to respond to email, which means, were I
> using a digital signature, that it needs to be at the ready.
I believe I mentioned users can't be bothered to enter passphrases. That's
what tokens are there for. At some point we can expect a convenient USB
port on the keyboard, or the video device front. Meanwhile, my Net PC
server sitting by the CRT with front USB ports will do.
http://xent.com/mailman/listinfo/fork

No, hits=0.1 required=5.0
	tests=AWL,KNOWN_MAILING_LIST,RCVD_IN_OSIRUSOFT_COM,
	      T_NONSENSE_FROM_40_50,X_AUTH_WARNING,X_OSIRU_DUL
	version=2.50-cvs

No, hits=-1.9 required=5.0
	tests=AWL,FROM_ENDS_IN_NUMS,KNOWN_MAILING_LIST,QUOTED_EMAIL_TEXT,
	      REFERENCES,T_URI_COUNT_0_1
	version=2.50-cvs

> From: Owen Byrne <owen@permafrost.net>
> A flippant remark that I will probably regret  -
> sure there's assholes everywhere. I just remember a lunch in Spain with
> a semi-famous American - I think we had about 10 nationalities at the
> table, and he managed to insult each of them within
> 15 minutes. A historical perspective makes me think that empires -
> Roman, British, Russian, American, whatever - produce
>  a larger proportion of assholes than subject nations (and are more
> likely to have them in positions of authority).
Yep, those that win battles collect tthe spoils.  Lead and breed.  Want it to be
different?  Lead, don't whine.

If anyone here is running (null) beta then you may like these Gnome theme packages.
They are enhanced and repackages from my previous theme packs, this time to conform
to the way pre-release RH8 handles themes for GTK1 and GTK2.
RedHat has a preferences -> themes app, but themes only show up there that have BOTH
gtk1.2 (Gnome1) themes AND gtk1.4 (GTK2 aka Gnome2) themes available. Then RH will
apply the theme to both GTK versions, so the user does not really notice that
different GTK toolkit versions are being used, since they *should* look the same.
This "gtk2-engines-compat" RPM has GTK2 ported themes for those themes that are
included in the RH package "gtk-engines" themes pack for GTK1.
The "gtk1+2-themez" pack mostly repackages my previous theme RPMs in a way that the
(null) btea like, and supposedly the next RH8 when released :)
forward - original mail:
From " Angles  Puglisi" <angles@aminvestments.com>
Date 09/01/2002 - 06:10:03 am
Subject some (null) eyecandy packages