Re: One Time Password and GnuPG (OT tangent)

2008-06-10 Thread Andrew Berg
Robert J. Hansen wrote: Having not seen John's original message come through on GnuPG-Users, I can only assume that you are taking public something that he sent off-list, presumably for good reason. Please do not do this. It's rude. I don't do this intentionally. That message was threaded (by

Re: One Time Password and GnuPG

2008-06-10 Thread Robert J. Hansen
Andrew Berg wrote: Yes I did. Of course, little plastic angel-like wings could be added for effect after being /hollowed/ out. Having not seen John's original message come through on GnuPG-Users, I can only assume that you are taking public something that he sent off-list, presumably for good r

Re: One Time Password and GnuPG

2008-06-10 Thread Andrew Berg
John Clizbe wrote: Andrew Berg wrote: Bricks can be hallowed out. :P HOLY BRICKBATS, BATMAN! Would such bricks then be filled with the Holy Spirit to give them strength? I must assume you meant 'hollowed'. Yes I did. Of course, little plastic angel-like wings could be added for effect a

Re: One Time Password and GnuPG

2008-06-09 Thread Werner Koch
On Mon, 9 Jun 2008 06:00, [EMAIL PROTECTED] said: > Would a smartcard address this private key compromising problem? Yes. As long as yoo keep physical control over the card. If you lost the card you better consider your key compromised. Shalom-Salam, Werner -- Die Gedanken sind frei. A

Re: One Time Password and GnuPG

2008-06-08 Thread Roscoe
Would a smartcard address this private key compromising problem? On Mon, Jun 9, 2008 at 2:52 AM, Andrew Berg <[EMAIL PROTECTED]> wrote: > Robert J. Hansen wrote: >> >> If you don't have physical security over your hardware, you don't have >> anything. You cannot use GnuPG safely on a malicious ma

Re: One Time Password and GnuPG

2008-06-08 Thread Andrew Berg
Robert J. Hansen wrote: If you don't have physical security over your hardware, you don't have anything. You cannot use GnuPG safely on a malicious machine Exactly. There are keyloggers (both hardware and software), screenloggers, USB drive copy programs, and a lot of other nasty stuff you'll

Re: One Time Password and GnuPG

2008-06-07 Thread Robert J. Hansen
Andre Amorim wrote: > What do you think guys ? Search the archives. These ideas keep on popping up time and time again, and the same answers always apply. If you don't have physical security over your hardware, you don't have anything. You cannot use GnuPG safely on a malicious machine. People

One Time Password and GnuPG

2008-06-07 Thread Andre Amorim
Hello fellow, I was thinking how to make gnupg more safe when it's ruining into hostile environments. The main idea is run my Gnupg in my pen drive as a portable application. I did a quick research and I found GNUPG portable here http://portableapps.com/node/11402 And thunderbird portable and en