Re: RFID Flap Silences Security Researchers

["Robert L Bass" <no-sales-spam@bassburglaralarms>]

> In the abstract, a zero knowledge proof allows
> you to prove that you know a secret without
> disclosing that secret or even any (much)
> information that would allow someone else to
> appear to know the secret.  There are various
> well-understood ways to accomplish this.  It
> really doesn't matter which one you use (well,
> as long as it isn't one that has been shown to
> be flawed).  Google the term if you want the
> underlying details of some of the algorithms.

A brief foray into Google proved interesting.
Thanks.

> Now of course, the same companies (more or less)
> that recognize the critical need to prevent satellite
> signal piracy with appropriate crypto will tell you
> that residential alarm/access control can get by
> with the simplest fixed code systems...

There's a reason for that.  Increasing satellite smart
card security makes it harder for people to steal from
them.  Increasing *your* security doesn't do as much
for them.

There's more to it than that, of course.  Over the last
20+/- years there has been a growing movement in
the security industry away from comprehensive
protection and toward quick, cheap installation.  Not
every alarm company follows this but the majority
have come to recognize that alarm companies can
make far more profits installing three, five or ten
small systems than one really comprehensive one
in the same time.  This is because the primary profit
center is the monitoring contract.

> You can decide for yourself whether they have
> consumers' best interests at heart.

Some still do.  Unfortunately, too many don't.

--

Regards,
Robert L Bass

=============================>
Bass Home Electronics
941-925-8650
4883 Fallcrest Circle
Sarasota · Florida · 34233
http://www.bassburglaralarms.com
=============================>