i don't trust icrosoft for security as far as i can throw it, i just use
some microsoft products because they are default standards

i have a an old linux build laying around, i didnt think it would be worth
anything

I'm looking for a nice, easy to use yet comprehensive C/C++ Crypto library
which has symmetric, asymmetric and hashing (preferably RSA, AES and
Whirlpool).

Apart from libTomCrypt and Crypto++ which others are out there and
recommended?

"Joseph Ashwood" msn.com> writes:

from today's news (made off with 200,000 pounds so far):

ATMs hacked using MP3 player
http://news.com.com/2061-10789_3-6135905.html

from above:

The gang targeted freestanding cash dispensers and would tap the phone
line between the ATM and a wall socket by placing a two-way adaptor on
it and connecting an MP3 player, according to the newspaper.

... snip ...

Joseph Ashwood wrote:

I agree that plan B may be easier for some, and that the overall
security of the system is only as strong as the weakest link. However,
with plan B you may be limited in the number of ATMs you can put your
hands on, and physical changes on a large number of public ATMs may be
harder to conceal.

re:
http://www.garlic.com/~lynn/2006u.html#40 New attacks on the financial PIN processing
http://www.garlic.com/~lynn/2006u.html#42 New attacks on the financial PIN processing

in approx. the same timeframe as the on the inception of the work for what
led to the "yes card"
http://www.garlic.com/~lynn/subintegrity.html#yescard

the x9a10 financial standard working group was formed and given the requirement
to preserve the integrity of the financial infrastructure for all retail
payments
http://www.garlic.com/~lynn/x959.html#x959
http://www.garlic.com/~lynn/subpubkey.html#x959

part of the threat analysis was the extensive occurance of skimming
exploits and/or data breaches ... and and attackers (either insiders
or outsiders) being able to utilize the acquired static information in
a form of replay attacks.

so part of x9.59 was to eliminate replay attacks .... using
skimmed/acquired/harvested for replay attacks
http://www.garlic.com/~lynn/subintegrity.html#harvest

Sebastian Gottschalk writes:

re:
http://www.garlic.com/~lynn/2006u.html#40 New attacks on the financial PIN processing

sorry finger slip ... hopefully was evident in subsequent discussion
about pin being something you know

Hi,

I'm Chokks, working in the area of Information Systems Audit/Security
(not much into network security but others) for the past 5 years.Please
note I hold only MBA,CISA and not a mathematics guy as such.

I'm much interested in getting into Cryptography as a career (working
as a researcher in Corporate research labs is one of my objectives).
Based on this group's suggestions earlier, I have bought Applied
Cryptography of Bruce Schneier and in the process of studying (I didnot
find much difficulty).

Since I'm working currently and cannot attend any college for doing
Ph.d degree, could any one suggest how I can move into this area and
achieve my one of the objectives of working for a lab.

Should i need a Ph.d degree for getting into this area?
Where to start since I'm carrying out self study?
Should I be thorough in many of the areas of mathematics before I get
into this area? Although I have bought some books on cryptography
wherein mathematics is limitless and I'm lost.

Although many have commented about getting into cryptography path, I
require a personalised suggestion from you people. Please help me.

uri@arx.com writes:

for quite some time, the conventional wisdom has been that insiders
are the greatest source of fraud, data breaches, identity theft, etc.

supposedly PINs represent two-factor authentication ... from 3-factor
authentication model
http://www.garlic.com/~lynn/subintegrity.html#3factor