Comments on: Snake-oil security claims on crypto security product http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/ Mon, 27 Jun 2011 17:44:37 +0000 hourly 1 http://wordpress.org/?v=3.2 By: Marc Ruef http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/comment-page-1/#comment-178 Marc Ruef Tue, 20 Jul 2010 08:09:53 +0000 http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/#comment-178 <p>Hello,</p> <p>I am thinking about a site collecting snake-oil products/advertisements. Something like http://datalossdb.org/ - One may do a checklist out of Matt Curtin's paper ;) In the meanwhile I send suspicious vendors/products to Bruce Schneier and hope he is going to rant about them in his blog ;)</p> <p>Regards,</p> <p>Marc</p> Hello,

I am thinking about a site collecting snake-oil products/advertisements. Something like http://datalossdb.org/ – One may do a checklist out of Matt Curtin’s paper ;) In the meanwhile I send suspicious vendors/products to Bruce Schneier and hope he is going to rant about them in his blog ;)

Regards,

Marc

]]> By: naif http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/comment-page-1/#comment-177 naif Mon, 19 Jul 2010 21:05:05 +0000 http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/#comment-177 <p>Nice topic.</p> <p>IMHO it would really be required to use a strong full disclosure oriented approach with a website collecting analysis and evidence with objective evaluation points related to snake-oil spotting.</p> <p>Something that have to be objective along with attached proof (screenshots, documents, etc) about a specific analysis.</p> <p>Also because a single persons doing this would not be really effective, probably a little community based platform with objective criteria to handle snake oil spotting would be very fun :-)</p> <p>Fabio</p> Nice topic.

IMHO it would really be required to use a strong full disclosure oriented approach with a website collecting analysis and evidence with objective evaluation points related to snake-oil spotting.

Something that have to be objective along with attached proof (screenshots, documents, etc) about a specific analysis.

Also because a single persons doing this would not be really effective, probably a little community based platform with objective criteria to handle snake oil spotting would be very fun :-)

Fabio

]]> By: Marc Ruef http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/comment-page-1/#comment-176 Marc Ruef Mon, 19 Jul 2010 20:54:59 +0000 http://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/#comment-176 <p>Hello,</p> <p>Nice article that summarizes the problem very good.</p> <p>But how would you expect to proceed with a vendor that is selling snake oil? Would you expect to make an analysis public to warn others from the false promises?</p> <p>Regards,</p> <p>Marc</p> Hello,

Nice article that summarizes the problem very good.

But how would you expect to proceed with a vendor that is selling snake oil? Would you expect to make an analysis public to warn others from the false promises?

Regards,

Marc

]]>