[87990] in Cypherpunks
Re: computationally infeasible jobs for MITMs (Re: Secure
daemon@ATHENA.MIT.EDU (Bill Stewart)
Fri Oct 10 03:38:39 1997
Date: Thu, 09 Oct 1997 11:18:05 -0700
To: Adam Back <aba@dcs.ex.ac.uk>, jad@dsddhc.com
From: Bill Stewart <stewarts@ix.netcom.com>
Cc: eb@comsec.com, jamesd@echeque.com, cypherpunks@Algebra.COM
In-Reply-To: <199710082248.XAA01618@server.test.net>
Reply-To: Bill Stewart <stewarts@ix.netcom.com>
>> It would be easy enough to "trick" the MITM into exposing their
>> existance anyway, just by using digits that come up in conversation.
>> Humans would be able to come up with unique situations that the MITM
>> would find all but impossible to predict. "Hey, Eric, I noticed
>> that the third digit of your IP address' second octet is the same as
>> the second digit of our exchange. How's by you?" A sudden dropout
Another game you can play, with the audio, is to have music playing in
the background, so Eve not only has to fake Alice's voice, but has to
fake Alice reading numbers against a background of an arbitrarily-selected
musical piece.
Now, the effectiveness of the technique may depend on the musical
tastes of the players ("Hey - that's not Toscanini conducting
Beethoven's Fifth - that's the Furtwangler version on Deutsche Gramophon!"/
"Oh, was that Elvis? I guess so."/ "We're being MITMed - the Terrapin Station
during the numbers was off the album, where Jerry remembered all the words,
and now you're playing an audience tape version from Nassau in 89" )
and with some genres of music, it makes it easier to notice if
there's a gap.
Thanks!
Bill
Bill Stewart, stewarts@ix.netcom.com
Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639
