Re: Re: RR checks to avoid DoS attacks

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Bill" == Bill Sommerfeld <[email protected]> writes:
    >> If I am hand-waving in characterizing this particular attack you
    >> articulated as unrealistic, please make that case.  Thanks.

    Bill> I believe that it is imprudent to assume in the design of
    Bill> mobike that attackers will only have access to non-disposable,
    Bill> non-anonymous credentials.

    Bill> This is unrealistic given the widespread and growing use of
    Bill> low cost disposable credentials for use with cellular phones,
    Bill> long distance service, internet access, credit/gift cards,
    Bill> etc.;
  
  Further, that these low-cost disposable credentials are not obtainable
via fraud.

  EAP-SIM makes very specific statements about not-reusing SIMs between
GSM and IP networks because the GSM network does not have replay
protection, and the microwave links are not encrypted. 

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] [email protected]      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQJKYOoqHRg3pndX9AQGxoAQAnqI05rF01aEuMpueXTMTNurPYcS6PVYT
3fTC4BYOZ1/2YPPeGWndywZ0e2Pj3O/lKPTjc3ImrgxOVLGOJY7tn8QYEsGjzg/3
fzSnXopeUwFyppMKoIFsxkj5dui+Tv33xA6J/LdXom7svAEukWPM6TZ3apZM31cS
TlS7/rJjWL0=
=nAMt
-----END PGP SIGNATURE-----