Re: How do you do this?
- From: Clever Monkey <clvrmnky.invalid@xxxxxxxxxxxxxxxxxxx>
- Date: Fri, 30 Jun 2006 12:32:29 -0400
Jeff Fox wrote:
Marcel Kollenaar wrote:I'm not sure what the exact security issues are in this case, but this description is a classic scenario for a man-in-the-middle attack.I didn't. But If I had done it I would have solve the security issue first.
The rest is trivial and is communication.
If you have two computers connected by a wire, cable, radio link,
or network and all that happens is one sends you message to the
other, nothing else, and you wrote the code that sends the message
and you wrote the code that executes the message I fail to see
what security problem you are talking about.
Unless you have a dedicated line you have control over, most of the other communication media you mention can have traffic intercepted. A smart hacker could silently watch data and perhaps even rewrite messages to change them without either of the other hosts noticing.
That is, unless one took steps in the messaging protocol to obfuscate or protect content, and guard against change in transit.
Example: ATMs used to rely on dedicated lines, so your PIN was often sent in the clear. Now that ATMs are more often attached to public telephony systems (usually via hardline, but cellular is not unknown) steps have to be taken to hide the secret you share with your bank from third parties.
Various banks are now in the position of rewriting venerable ATM code to implement different types of hashing and signing algorithms in order to bring the confidence up to the level it was when they were using dedicated lines.
Since you are in charge of what is happens on each end of the wireRight. But do you trust all the potential parties that might be listening in?
it should be simple. If the person writing the code on the other
end is hostile that will complicate the problem.
As long as you know, within reasonable bounds and risk levels, that the traffic on the wire is safe enough then all is well. Whether this safety is implicit because you trust all the intermediate links or you have implemented some security measures is the question.
Anyway, that's what I get from the Marcel's comment about security on the wire.
.
- References:
- How do you do this?
- From: Jeff Fox
- Re: How do you do this?
- From: Jeff Fox
- Re: How do you do this?
- From: Jeff Fox
- How do you do this?
- Prev by Date: Re: Why is Kevo macintosh only?
- Next by Date: Re: How do you do this?
- Previous by thread: Re: How do you do this?
- Next by thread: Re: How do you do this?
- Index(es):
Relevant Pages
|
