cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-01-31 - Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)

Header Data

From: futplex@pseudonym.com (Futplex)
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Message Hash: 43b2c63362b4e6e1d4e240d1b5c05774b266d21f19962b352ba1446f463eab0f
Message ID: <199601310110.UAA26035@opine.cs.umass.edu>
Reply To: <9601301545.AA07088@alpha>
UTC Datetime: 1996-01-31 03:40:37 UTC
Raw Date: Wed, 31 Jan 1996 11:40:37 +0800

Raw message

From: futplex@pseudonym.com (Futplex)
Date: Wed, 31 Jan 1996 11:40:37 +0800
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Subject: Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)
In-Reply-To: <9601301545.AA07088@alpha>
Message-ID: <199601310110.UAA26035@opine.cs.umass.edu>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

Mike M^cNally writes:
> But if by being used to such windows people understand that they're
> not necessarily to be trusted, I don't see why that'd be an attractive
> way of slipping in a trojan horse.  

Well, that "if" is a critical hypothetical. I'm assuming a model in which
people perform most of their legitimate network transactions through Java 
windows. So I think they will be accustomed to typing financial identifiers 
or whatnot into windows labelled "Untrusted Applet Window". Many will
become desensitized to the UAW warning label.

I believe the work on authenticating applet servers to client in terms of
signed Java classes, etc. is the most promising long-term approach.

ObNSB: Although I seem to be cast as an opponent of Java adoption in this
thread, I'm actually a fan of Java and expect to write some Java code RSN. 

Futplex <futplex@pseudonym.com>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMQ7BYSnaAKQPVHDZAQFN9wf5AYOhtNHy2nGvQ7t/SNKy6P9Qay2K4qEY
rMIdtzHBrSpjTHq5HPZSG7YmNhd/trBpH42uUufL+WD+gDj6/amPHDV6kwdmS32d
tS28ECiZlnUidF9+PcaIISuBLiD6g67j9I8KAVdejxg79pTLNFNvjoz22oPZqRq2
PEZI/YXCm7B6J4T6WDauuMKwaMWL78NBe1Udq3o2q2AAUjQfJRkqT4I0hZe2fAEE
mpzNtIOHxDIhRVULEVC1XXPecxyOh/A070knxw3DFGLIL24oCJhODgEG1DKtKqHB
nnt5wYTpO2+vNLuOB14TdRu8fGorctvElu8ozTkrtpDFXoEgZwYVLg==
=96ZK
-----END PGP SIGNATURE-----

Thread