[Discuss] Good and Bad Crypto

[Tom Metro]

Richard Pieri wrote:
> Google's methodology has not to my knowledge been publicized.

Correct.


>Tom Metro wrote: 
>> Source code analysis has the potential to find these, if the code is
>> analyzed. Back-box testing will find them only if you are very lucky.
> 
> This is laughably false. If it were even the least bit true then
> Microsoft Windows would be the most secure operating system on Earth
> because the code isn't available for scrutiny.

What's laughable is that you write that on the same day that you
chastised someone in another thread for "you taking a phrase out of
context."

Anyone who read this thread will recall that my comments were in the
context of a certain class of errors.

 -Tom

-- 
Tom Metro
The Perl Shop, Newton, MA, USA
"Predictable On-demand Perl Consulting."
http://www.theperlshop.com/