From: Bill Stewart <bill.stewart@pobox.com>
Date: Wed, 14 Oct 1998 18:46:20 +0800
To: SDN <cypherpunks@cyberpass.net
Subject: Re: FYI: More on WebTV security
In-Reply-To: <v03102802b24934307011@[204.1.1.65]>
Message-ID: <3.0.5.32.19981014032345.00b67940@idiom.com>
MIME-Version: 1.0
Content-Type: text/plain



At 06:32 PM 10/13/98 -0700, SDN wrote:

>More relevant to the list, the threat model for the WebTV service/box is
>primarily concerned about loss of user data, forgotten passwords, and
>unsecured data over the public internet.  It's not worried about privacy
>from WebTV insiders.
>As a result, all user data is stored on the service, traffic to and from the
>box is encrypted, and data isn't hidden from the customer care people.

If it's not secure against insiders, then it's not only not secure against cops,
it's also not secure against crackers, unless Microsoft hsa let the
WebTV folks do a very good job of security.



				Thanks! 
					Bill
Bill Stewart, bill.stewart@pobox.com
PGP Fingerprint D454 E202 CBC8 40BF  3C85 B884 0ABE 4639