[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: global names are a security flaw



-----BEGIN PGP SIGNED MESSAGE-----

At 03:53 AM 12/6/97 -0200, Ed Gerck wrote:
>Now, the obvious problem here is not with global names but with lack of
>information! Of course, before you can find anything (even a name), you
>must know what you are looking for .... so, if you don't know Bob Jones'
>middle name (even though he is your friend) then you can't find him at IBM
>or, if you don't know where Alice Smith works then you can't find her. I
>could further say that if you don't know Alice Smith's phone number then
>you can't call her!
>
>(Clearly, if you start with zero information all you have is entropy...)

Or from the other POV it's not lack of information but the wrong amount of 
information.  There's not enough to identify the person but enough for a 
human to make a guess and therefore a mistake, resulting in a security flaw
either by accident or by contrivance of some enemy.


-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.5.3

iQCVAwUBNI7OdhN3Wx8QwqUtAQH9KwQAks7cHTqh9+Wi7VJlmDTD6oEWRvy4rCPt
HNt0NiyKr61qNdNSNi6+h0xapxTGGRBtaUHCkjIthQ40RTcvmGpGZlowGSFg2afW
Q4SRb11oxBz1hcSzSDjRhWfjEN13riQL8BrmWJyhm3uu/ybRfHh+lVA9fgTNl3h7
wyDwbHJ+B5U=
=vD57
-----END PGP SIGNATURE-----

References: