Re: Advice needed regarding SHA0 SHA1 MD5

Crypto@S.M.S wrote:
> > Had you EVER had a consulting gig you'd know that customers cut corners
> > in EVERYTHING. Crypto is no exception.
>
> We have already had that discussion, wherein you admitted
> that you are in your 20's, with 7 years of experience.
>
> I have held consulting positions longer that your entire experience.

Um ok then you have blinders on to the world. Why do you think there
are so many security breaks all over? For the most part if people did
things properly we would have all but muted "security alerts".

It's precisely because it is "work" to use security that people try to
optimize the process and cut corners.

> > The difference is I donate stuff of value to the community. At
> > **BEST** you're discussing a PRODUCT of value. The reality though is
> > it's a product of no value because it totally sidesteps proper key
> > negotiation.
> People who make donations and then toot their own horns so loudly
> are not really philanthropic. Could it be that you donate your
> time so as to have something to brag about?

Not really. As you can see I don't plug my software that often when
people come here asking "where can I get AES code" or similar. What
you WILL find are the occasional posts by OTHER people recommending my
free stuff.

That's the difference between "having net access" and "having respect
from others". See other people respect the work I do and recommend it
to others. In your case you simply have net access and are a good
source of daily entropy.

> > People rag on me because they're sick of me talking about my free
> > projects which help thousands upon thousands of people. They're just
> > jealous because while they've wasted away their youth doing drugs,
> > veging in front of tv or playing some stupid MMORPG I taught myself
> > mathematics and cryptography.
>
> You taught yourself? And you're going to post here as an expert?

I seek and accept peer review. I distribute commented source code,
etc, etc, etc. I'm not ignorant or arrogant to think that everything I
write is "gold". But yeah, I know hwo to write a cryptosystem simply
because I've tried before and failed [when I was younger]. It's
precisely because I went through the learning process that I feel
competent to design a system.

> > Let's see you donate five years of your life to the public domain and
> > then see how well you adjust to having no-names come out of the dark
> > and rag on you.
>
> Once again you are making statements without an iota of facts to
> back them up. What do you know about my past, or how much time I
> have spent teaching computer skills to those same wasted youth that
> you want to call "jealous"?

I just don't believe it though. If you are so learned and mature you'd
not be in this thread. You'd shrug it off and say "I disagree with
Joe, he disagrees with me, I'm adult enough to let it go." You'd also
be smart enough to know that cryptography isn't something a complete
newcomer should attempt without peer review.

The fact that you jumped headlong into this and basically are grasping
at straws to defend your position indicates you're not handling this
mature.

You may be chronologically older than I am but you're certainly no more
mature.

> > Clearly you're just too good to think on your own. I mean if you had
> > any business savvy you would have ended this discussion 1200 posts ago.
>
> This is not about business. It's the principle. You can end this
> discussion too. All you have to do is stop responding. Why are you
> so intent on "tearing down" CryptoSMS?

As I said, at this point it's just sport. I've long since given up the
idea that you'd come around and be a team player. Now it's just target
practice between events in my life. :-)

> > I don't need to tear you down. That's just sport at this point.
>
> You've been doing nothing but trying to "tear down" CryptoSMS, so going
> by your own statements are you "jealous and embarassed"?

First off, you never really address the comments or complaints I have
against your program [e.g. how do you prevent replay attacks?]. You
just ignore the "hard questions" and replace appropriate dialogue with
this banter about how "evil I am".

Second, to be jealous you'd have to obtain something I haven't. You're
an annoyance in sci.crypt and I'm a developer whos product is used all
over the planet by thousands upon thousands of people. Jealous? Of
what?

Tom
Received on Thu Sep 29 21:53:16 2005