Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Sylvia Else <sylvia@not.at.this.address>
Newsgroups: comp.misc
Subject: Re: Ebay hacked
Date: Mon, 26 May 2014 16:55:05 +1000
Lines: 25
Message-ID: <bug6q9Fu2asU1@mid.individual.net>
References: <bu5nskFnom7U1@mid.individual.net> <slrnlns7m5.scb.g.kreme@amelia.local> <vg3oayn5gh3.fsf@coffee.modeemi.fi> <llqipl$59h$1@dont-email.me> <vg3k39b59lm.fsf@coffee.modeemi.fi> <llqolv$fvf$1@dont-email.me> <budrv4Ff0vtU3@mid.individual.net> <llss7d$nfq$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net CaPp+LAj9dpPwEtvqzdkhAzPuRkvz9/K/J4RiYfpBXaa/lvMu6
Cancel-Lock: sha1:6ike96dKO2bYh/j0vK60jhx47/o=
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
In-Reply-To: <llss7d$nfq$1@dont-email.me>
Xref: csiph.com comp.misc:3193

On 25/05/2014 11:46 PM, Rich wrote:
> Sylvia Else <sylvia@not.at.this.address> wrote:
>> On 25/05/2014 4:33 AM, Rich wrote:
>
>>> Sadly, given how many dev's there are that have no idea how to
>>> securely handle password storage, I fear that "never" is more
>>> likely when combined with the phrase "proper storage".
>
>> So we can build a properly secure password system, and sell it for
>> big bucks?
>
> Actually, we could build it.  But convincing the fools who think they
> know what they are doing to instead pay us for ours would be a much
> more difficult prospect, I fear.
>

Yes, indeed, it was the selling it for big bucks aspect that I was 
expressing doubt about.

And, of course, in the unlikely event that a big-bucks market appeared, 
there'd be competitors offering cheaper products that would be claimed 
to be secure, but would in reality contain the very kind of security 
error that we're seeking to prevent.

Sylvia.