Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Chris Knadle
On Thu, October 14, 2010 4:54 pm, Daniel Kahn Gillmor wrote: > On 10/14/2010 04:31 PM, Grant Olson wrote: >> But ultimately once you start trying to fix the problem by offloading >> the checks to special hardware, you might as well just key a smart card >> reader with an integrated keypad. Then y

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Hauke Laging
Am Dienstag 12 Oktober 2010 04:44:41 schrieb Daniel Kahn Gillmor: > (e.g. one process can send a simulated mouseclick to another process > pretty easily) I am not familiar with X details (let alone that other one OS). Does grabbing the mouse prevent other processes from knowing where the click o

Re: Paranoid People's User Group?

2010-10-14 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 14 October 2010 at 10:00:12 PM, in , Faramir wrote: > El 14-10-2010 16:58, Remco Rijnders escribió: ... >> I guess it would just have been nice if there was an email address you can >> send a sign up message to, confirm your email

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 14 October 2010 at 3:18:47 PM, in , Daniel Kahn Gillmor wrote: > This strikes me as the worst suggestion on this thread > so far. Please, do not store the passphrase to your > secret key in the clear in a file on your computer, an

Re: Paranoid People's User Group?

2010-10-14 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El 14-10-2010 16:58, Remco Rijnders escribió: ... > I guess it would just have been nice if there was an email address you can > send a sign up message to, confirm your email address, and be part of the > group, similar to how mailing lists like this o

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Daniel Kahn Gillmor
On 10/14/2010 04:31 PM, Grant Olson wrote: > But ultimately once you start trying to fix the problem by offloading > the checks to special hardware, you might as well just key a smart card > reader with an integrated keypad. Then you can use a simple pin. Not > quite as convenient as hitting Y/N,

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Grant Olson
On 10/13/10 11:51 AM, Daniel Kahn Gillmor wrote: > > From a different perspective, i could run the agent itself in a > constrained account, and replace the prompting tool with a tool that > requires, say, an ACPI event, or a special keypress (not an X11 event) > from a designated hardware button.

Re: Paranoid People's User Group?

2010-10-14 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El 14-10-2010 15:32, Paul Richard Ramer escribió: > On Thu, 14 Oct 2010 08:45:59 +0200, Remco Rijnders wrote: >> I've looked at this before and haven't been able to tell... is there any >> way to subscribe to this group without needing to create a yaho

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Sascha Silbe
Excerpts from Robert J. Hansen's message of Tue Oct 12 15:25:50 +0200 2010: > These two attack modes (root and user access) cover the overwhelming > majority of instances today, so already this hypothetical attack is an > exotic. That most mainstream systems are painfully easy to attack doesn't i

Re: Paranoid People's User Group?

2010-10-14 Thread Paul Richard Ramer
On Thu, 14 Oct 2010 08:45:59 +0200, Remco Rijnders wrote: > I've looked at this before and haven't been able to tell... is there any > way to subscribe to this group without needing to create a yahoo ID and > email address? No. Yahoo! requires you to log in with a Yahoo! ID, or if you don't have

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Dan Cowsill
On 13/10/2010 4:02 PM, MFPA wrote: > The user can type their password once per session into a text file and > paste it every time it is requested. This reduces the annoyance factor > and does not train the user to constantly re-type the passphrase. > I use a program called KeePass to keep track of

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread martin f krafft
also sprach MFPA [2010.10.14.0102 +0200]: > The user can type their password once per session into a text file > and paste it every time it is requested. This reduces the > annoyance factor and does not train the user to constantly re-type > the passphrase. That's a great idea. I have started wor

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Daniel Kahn Gillmor
On 10/13/2010 07:02 PM, MFPA wrote: > The user can type their password once per session into a text file and > paste it every time it is requested. This reduces the annoyance factor > and does not train the user to constantly re-type the passphrase. This strikes me as the worst suggestion on this

Version Compatibility Question

2010-10-14 Thread Sandip Bhaskar
Greetings, Is it possible to import a public key generated using GnuPG v1.4.10 version on GnuPG v1.2.X environment? Thanks in advance. Regards Sandip ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listin

Re: Problem with Gemalto USB Shell Token V2

2010-10-14 Thread Mukund Sivaraman
On Tue, Oct 12, 2010 at 01:03:42PM -0700, Smith, Cathy wrote: > Does anyone have the Gemalto USB working with Red Hat 5.5? I don't know about the versions of GnuPG and PCSC-Lite on RHEL 5.5 to answer this question. Maybe you can try it, and if it doesn't work, try compiling the latest versions of