No Subject

-----BEGIN PGP SIGNED MESSAGE-----


- ---- Ignore any slobber between above and the PGP line.

I just obtained a copy of Doug Floyd's data haven code.  I am
working on a workable implementation.  The address of the data
haven will be put on the list as soon as I make SURE the
stuff is reliable.  Until commands are finalized, they will
not be revealed.

When the site is up, please don't store much as I do not
have that much disk space, and ENCRYPT your files.  I fear
that someone will send me some stuff that is very illegal,
and leave it in the clear.  So, I will try to see what is
sent, and possibly post it if its not encrypted with something.
Heck, use crypt or something better than rot13.

I hate to appear as a snooper about people's files, but when
this is up, I will demand encryption to protect my DH, and
your stuff.

PGP is easily available, use it, or DES, or crypt if you live
on the dangerzone.

Sorry for my prattling, but I am new to this.

PS:  Doug, use cb.  Your code smells like a ten year old dead
turkey with its looks.  At least its relatively bug-free, and
does the job well.  Another thing, should you use SHA instead
of MD5 for hashing?  SHA has more bits, and there is a less
chance for two files to collide.




-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAwUBLpOhhf8zicXJ5vudAQEk1QP8CG+JmzMPnrjRMPzomt/yWvWfWUwQktgS
UXwTkLocL5+KkD3/0OHaZ8Eg3jWZnm9D4oPOhBljJX/yOBa7/5opN9nDwUeAmDOs
+ULyrEEpfehmrit8wAQcVHvwtQdxaUz8Sg6XRWd0QOOCs71MmLx9JCxR2p2fJyin
GPQ9djI7NIU=
=1I2L
-----END PGP SIGNATURE-----

When the site is up, please don't store much as I do not
   have that much disk space, and ENCRYPT your files.  I fear
   that someone will send me some stuff that is very illegal,
   and leave it in the clear.  

I'd suggest that you test for various entropies of distribution, and
reject anything that doesn't look random.  I'd also suggest testing
for various magic numbers such as for compressed files (various
formats) and executables.

Either you should concern yourself _and_ do something about it, or
not.  Worrying about it and not preventing what you are concerned
about is silly.

Eric

On Oct 6,  6:09am, Anonymous wrote:

[Sacrificed to the Great God Bandwidth whose presence we kowtow to.]

>
> PS:  Doug, use cb.  Your code smells like a ten year old dead
> turkey with its looks.  At least its relatively bug-free, and
> does the job well.  Another thing, should you use SHA instead
> of MD5 for hashing?  SHA has more bits, and there is a less
> chance for two files to collide.

My code smells like that?  I didn't think C code smelled...

2^128 and 2^150+ are big numbers.  I doubt that any collisions
will occur.

Another thing...  I do like Eric's idea for an entropy checker.  Is there
any code like this laying around on some ftp site?  Keep poor VK from
worrying about his account...