Non Forbes

Is strong crypto worse than weaker crypto? Lessons from Skype

A mantra in the security community, at least among some, has been that crypto that isn't really strong is worse than having no crypto at all. The feeling is that a false sense of security can be worse than having no security as long as you know you have none. The bad examples include of course truly weak systems (like 40 bit SSL and even DES), systems that appear strong but have not been independently verified, and perhaps the greatest villian, "security through obscurity" where the details of the security are kept secret -- and thus unverified by 3rd parties -- in a hope that might make them safer from attack.

On the surface, all of these arguments are valid. From a cryptographer's standpoint, since we know how to design good cryptography, why would we use anything less?

However, the problem is more complex than that, for it is not simply a problem of cryptography, but of business models, user interface and deployment. I fear that the attitude of "do it perfectly or not at all" has left the public with "not at all" far more than it should have.

An interesting illustration of the conflict is Skype. Skype encrypts all its calls as a matter of course. The user is unaware it's even happening, and does nothing to turn it on. It just works. However, Skype is proprietary. They have not allowed independent parties to study the quality of their encryption. They advertise they use AES-256, which is a well trusted cypher, but they haven't let people see if they've made mistakes in how they set it up.

This has caused criticism from the security community. And again, there is nothing wrong with the criticism in an academic sense. It certainly would be better if Skype laid bare their protocol and let people verify it. You could trust it more. Read on...

Bar Camp

Just back from a day at Bar Camp which was quickly put together as a tongue-in-cheek response to Tim O'Reilly's Foo Camp and folks who had not been invited. Foo Camp is great fun, and Tim does it all for free, so it's not suprising he has to turn people away -- even me :-) -- but Bar Camp was surprisingly good for something thrown together at the last minute with no costs.

Universal laptop power supplies for desks, conference tables

I've called before for a system of Universal DC Power and I still want it, but there is a partial step we could take.

I have a laptop power supply that comes with a variety of tips. The tips tell (through something as simple as a resistor) the power supply how much voltage and current to supply for the laptop they are designed for. I bought mine for use in an airplane, others are sold that do both 12v and AC power.

Topic: 
Tags: 

Can we stop the loud-beep on backing up?

One of the scourages of urban areas is the requirement (I presume) that heavy equipment make a loud beeping noise when it's backing up. It's meant to warn anybody standing behind the vehicle, presumably because the driver doesn't have the same field of vision to see you, and because people are more wary of standing in front of a moving vehicle than behind it.

Topic: 

How about a Hugo Award for Science Fiction?

As some will know, I got heavily into the Hugo awards 13 years ago during my efforts at becoming an eBook publisher in the SF field. The Hugo award is voted on by the fans who attend the annual World Science Fiction Convention, or Worldcon, a moderately small voting pool (under 1000 of the typical 4000 to 7000 attendees will vote.)

The most important award and 2nd most voted on is the one for best Novel. The least important, but most voted on award is the one for best movie.

But still, for a long time, though both SF and Fantasy qualified for the award, the best Novel went exclusively to Science Fiction (with one dab into alternate history by Phillip K. Dick) and usually to hard, ideas-based SF. This went on until 2000 when the superb hard-SF novel "A Deepness in the Sky" won. The drama award was also heavily into SF, though it had some deviations, such as the coverage of Apollo XI and a few films in the 80s.

But in 2001, for the first time, a Fantasy novel won the best novel Hugo. Not just any fantasy novel, but a children's novel, Harry Potter 4. Of course, the Harry Potter series is the most remarkable success not just in fantasy, but in publishing, so this is not too shocking. What's surprising is that in 2002, 2004 and 2005 a fantasy novel would win best novel. At the same time, fantasies won all the best movie awards and all of the new best TV episode award until 2005. (Read on...)

Topic: 

Pages