Archive for the 'Engineering' Category

Debate on Cost Analysis of Windows Vista Content Protection

Friday, January 26th, 2007

Well, I’m using the term “debate” loosely here because it seems to me, given the marshalled evidence, there isn’t much of a debate to be had, but in any case, Microsoft has responded to Peter Gutmann’s cost analysis of the DRM subsystems in Windows Vista (of which I’d written about earlier), and also in system […]

A Cost Analysis of Windows Vista Content Protection

Thursday, December 21st, 2006

Peter Gutmann has just published a fairly detailed examination of Windows Vista Content Protection. It is highly recommended reading in that it has non-trivial implications for essentially all personal computer users of any stripe…

A Cost Analysis of Windows Vista Content Protection
http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.txt

Note that this analysis dovetails with Bruce Schneier’s overall “DRM is futile” piece from 2001…

The […]

Geek Alert: Start-up generates random numbers from space

Thursday, December 14th, 2006

Ok, so if yer hip to cryptography at least some, then you know that to do truly strong crypto, one needs a source of very random numbers. This is not all that easy, it turns out. If you’re unaware of this little subtle-but-way-important detail, check out Ross Anderson’s book Security Engineering and Bruce Schneier’s Applied […]

A SAMLv2 Relying Party PHP Implementation

Wednesday, November 1st, 2006

So Pat Patterson has pulled a nice rabbit outta his hat and concocted a SAMLv2 Relying Party Implementation in PHP! I’m going to have to play with this one…

Switching on the Lightbulb

Q&A on the OpenSSO SAML 2.0 PHP work

Technorati Tags: digital identity, Identity, Open Standards, opensource, saml, Security, simplified sign on, single sign on, software […]

Ross Anderson’s Security Research Group’s blog

Tuesday, August 1st, 2006

Ross Anderson, a founder of the field of Security Economics, who previously maintained an old-school homepage as his “blog” (similar to what I also used to do, though he did/does a way better job), is now blogging on his U of Cambridge Security Research group’s blog..
Light Blue Touchpaper
It, and Ross’ other web pages and publications […]