News for hackers. Stuff that matters.
Re:Random Numbers by hga on Monday June 07, 2010 @04:41PM (#1411840)
I agree with your strong claim, with the single exception of "TRNG data that you can physically hide (i.e. in a PCIe card) may be a useful source of keys or entropy". Which was the sort of thing I was using it for in 1996.

As for your last point, I'd personally substitute "intuitively obvious" for "surprisingly", but I will admit I've been playing this game on and off for a long time

Re:Random Numbers by tptacek on Monday June 07, 2010 @05:42PM (#1412048)
You do have an awesome resume.

Why is the relationship between OTPs and Javascript crypto (apart from them being routine signifiers of crank cryptography) intuitive to you?

Re:Random Numbers by hga on Monday June 07, 2010 @06:05PM (#1412115)
Perhaps for the same reason I run NoScript ( 1/2 :-) ?

OPTs obviously devolve to the key distribution problem.

The environment of client side Javascript is obviously to me a superset of the key distribution problem. After all, you start out by distributing your code to the (insert your favorite derogatives here) client.

Simson Garfinkel likes to refer to the whole https game as something like transferring a valuable from a cardboard box in an alley via an armored car to a park bench. I'd end with the end of a Matt Groening Love is Hell quote: "At night, the ice weasels come."