Still more on the Digicash protocol

[David A Wagner]

-----BEGIN PGP SIGNED MESSAGE-----

In article <Pine.3.89.9512081312.A23124-0100000 at unicorn.com>,
Rev. Mark Grant <mark at unicorn.com> wrote:
> 
> Exactly.. once you have an active attack set up, it's trivial, but setting
> that up is quite hard. 
> 

But before everyone pats themselves on the back, congratulating themselves
on how hard an active attack is to set up, look at

http://www.EnGarde.com/software/ipwatcher/

Yes, folks, a commercial program which mounts an active attack.

(Check out the GUI!  Click on the `Watch Mail' control!  Activate the
`Take over' button!  Whee, mom, hacking is fun!)

Active attacks may not be trivial, but they aren't exactly rocket science,
either -- and they're for sale.

- -- Dave `is capitalism the best thing since sliced bread, or what?' Wagner
- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMMqY/ioZzwIn1bdtAQEkGQF/WdJBqbP5HwTDxldi0UDCmP2RZAFz5p2q
cPMSoOIgkFbaBS34k4LSFPKcvegw3tJk
=Ptyf
-----END PGP SIGNATURE-----