<p dir="ltr">Kinda glad to see this, most of the Steve Gibson security ideas I have seen were impractical, overworked, and rather naive, in my opinion. I was beginning to wonder if I was missing something.</p>
<p dir="ltr">To be sure, spinrite is one of my favorite utilities, but I disagree with his version of "security."</p>
<div class="gmail_quote">On Oct 11, 2013 9:31 AM, "Michael B. Trausch" <<a href="mailto:mbt@naunetcorp.com">mbt@naunetcorp.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>On 10/10/2013 08:32 PM, Ron Frazier
(ALE) wrote:<br>
</div>
<blockquote type="cite">
<pre>Steve Gibson has just announced some new secure login research he's been doing. It looks pretty promising and may ultimately be able to substantially replace or augment user names and passwords. I thought I'd pass it along. He says it's generating lots of interest, including some from the w3c. It's open spec and open standard and he's giving it away. Maybe it will become a standard someday.</pre>
</blockquote>
<br>
Look, we've covered this time and time again.<br>
<br>
Steve Gibson is <b><i>not</i></b> a security expert. Stop putting
him on a pedestal, and PLEASE stop spreading bad information. That
new "secure" login procedure has AT LEAST one fatal flaw, and I
think two. It is not suitable for use, and in fact straight
username and password over TLS is more secure.<br>
<br>
At this point, I am respectfully asking you to quiet down on the
list.<br>
<br>
The last thread you started was on Windows.<br>
<br>
This thread is invoking Gibson (again), despite much rather on-topic
discussion to the fact that Gibson isn't a suitable source of
security information. This is at least the third or fourth
off-topic post from you this week that I can recall—and quite
impolitely without the OT.<br>
<br>
Please stop spreading bad information and please stop discussing
your trials and tribulations with your Microsoft products at all on
this list. You can't seem to put "[OT]" in when it needs to be
done—so please just stop altogether.<br>
<br>
Much appreciated,<br>
<br>
Mike<br>
<br>
<div>-- <br>
<table border="0">
<tbody>
<tr>
<td> <img src="cid:part1.02000001.09000509@naunetcorp.com" alt="Naunet Corporation Logo"> </td>
<td> Michael B. Trausch<br>
<br>
President, <strong>Naunet Corporation</strong><br>
☎ <a href="tel:%28678%29%20287-0693%20x130" value="+16782870693" target="_blank">(678) 287-0693 x130</a> or (855) NAUNET-1 x130<br>
FAX: <a href="tel:%28678%29%20783-7843" value="+16787837843" target="_blank">(678) 783-7843</a><br>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div>