My 'Network Security' Professor once said to the class, 'There is no security without physical security'. Protecting data from being read in memory means you've already lost.
On Tue, May 6, 2014 at 5:19 AM, Luc Prefontaine <lprefonta...@softaddicts.ca > wrote: > Reading this thread convinced me. > I will not write any information on > any support except my brain cells > and will not share it to avoid any > leaks. > > I will also forget it immediately so > no one can scrub my brain to > recover it > > Going to erase everything I wrote and > learned in > the last past 30 years right now... > > Seriously, when concerns about > security reaches the garbage collector > which operates in live memory, > I wonder why we bother entering > any information in a computer... > > Any security related discussion > reaches a point were sanity is left > far behind don't you agree ? :))) > > What was I writing a few seconds ago ? > > Luc P. > > > On Tue, May 6, 2014 at 9:45 AM, Cecil Westerhof <cldwester...@gmail.com> > wrote: > > > 2014-05-05 19:48 GMT+02:00 Brian Craft <craft.br...@gmail.com>: > > >> I would never have guessed modularity as a reason to worry about > security > > >> in fp. > > >> > > >> I worry about immutability in fp, wrt security. Security requires > > >> mutability in order to remove sensitive data from memory, and from app > > >> history. A FIPS > > > > > > Would forced garbage collection not take care of that? > > > > I think the combination of zeroizing destructors, weak references, and > > forced garbage collection would go a long way. Then you only need to > > convince the FIPS validator/evaluator/thingie that your garbage > > collector behaves well so that sensitive data is scrubbed in a timely > > manner. > > > > /M > > > > -- > > Magnus Therning OpenPGP: 0xAB4DFBA4 > > email: mag...@therning.org jabber: mag...@therning.org > > twitter: magthe http://therning.org/magnus > > > > -- > > You received this message because you are subscribed to the Google > > Groups "Clojure" group. > > To post to this group, send email to clojure@googlegroups.com > > Note that posts from new members are moderated - please be patient with > your first post. > > To unsubscribe from this group, send email to > > clojure+unsubscr...@googlegroups.com > > For more options, visit this group at > > http://groups.google.com/group/clojure?hl=en > > --- > > You received this message because you are subscribed to the Google > Groups "Clojure" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to clojure+unsubscr...@googlegroups.com. > > For more options, visit https://groups.google.com/d/optout. > > > -- > Luc Prefontaine<lprefonta...@softaddicts.ca> sent by ibisMail! > > -- > You received this message because you are subscribed to the Google > Groups "Clojure" group. > To post to this group, send email to clojure@googlegroups.com > Note that posts from new members are moderated - please be patient with > your first post. > To unsubscribe from this group, send email to > clojure+unsubscr...@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/clojure?hl=en > --- > You received this message because you are subscribed to the Google Groups > "Clojure" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to clojure+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
