cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-01-30 - Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit

Header Data

From: m5@dev.tivoli.com (Mike McNally)
To: ecarp@netcom.com
Message Hash: a596b47758376b1665ac4f7423500f5230b3e206dcbc557e15e0a502c4f89c0c
Message ID: <9601301353.AA15410@alpha>
Reply To: <Pine.OSF.3.91.960129221928.14389B-100000@nic.wat.hookup.net>
UTC Datetime: 1996-01-30 15:10:58 UTC
Raw Date: Tue, 30 Jan 1996 23:10:58 +0800

Raw message

From: m5@dev.tivoli.com (Mike McNally)
Date: Tue, 30 Jan 1996 23:10:58 +0800
To: ecarp@netcom.com
Subject: Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit
In-Reply-To: <Pine.OSF.3.91.960129221928.14389B-100000@nic.wat.hookup.net>
Message-ID: <9601301353.AA15410@alpha>
MIME-Version: 1.0
Content-Type: text/plain



Ed Carp writes:
 > > Not wishing to get in the middle of this controversy, I have been 
 > > wondering about the possibility of using a JAVA applet to do keyboard 
 > > sniffing. As I am not familiar with this language, does anyone know if 
 > > this would be possible?
 > 
 > From what I've read about Java, it is not possible to use Java in this
 > way.

Because Java is a general-purpose programming language, it is indeed
possible to use Java to do keyboard sniffing, just like it's possible
to use it for an adventure game, or system management software, or
anything else you can imagine a general-purpose programming language
being used for.

The real question is, "can I use a Java applet in the context of a
particular Java virtual machine implementation (like, maybe, the
Netscape Navigator web browser) to do keyboard sniffing?".

The Java interpreter is only as secure as the wrapper implementation
wants it to be.  For lots of purposes, you don't need or want any more
security for a Java program than you would for a C++ program.

______c_____________________________________________________________________
Mike M Nally * Tivoli Systems * Austin TX   * I want more, I want more,
       m5@tivoli.com * m101@io.com          * I want more, I want more ...
      <URL:http://www.io.com/~m101>         *_______________________________

Thread