[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Debconf-discuss] Call for keys for keysigning in Edinburgh during DebConf7



On Wed, 9 May 2007 12:08:15 -0500, David Moreno Garza
<damog@ciencias.unam.mx> said:  

> Manoj Srivastava escribió:
>> As madduck demonstrated y breaking the last keysigning, most
>> signatures at such large keysigning parties are mostly worthless,
>> since effective identity checks are highly improbable.

> The problem is not with they keysigning parties themselves, nor the
> attendees. The point relies mostly on you to make correct ID checking
> and correct key signing. You won't stop others to sign your key but
> you definitively can add some quality assurance and do your job on a
> proper way and sign people's keys that you have certified
> appropriately.

        I think you are ignoring human nature, and human capabilities,
 and thus, in my opinion, this stance is unrealistic.  Were we all like
 the leading resident of smallville, OK. But most attendees were not
 born on Krypton.

        In theory, you are right. In practice, in the real word, with
 humans instead of simulacra, this reasoning falls flat on its face.

> madduck did not broke the keysigning party, but broke people that
> trusted his ID and signed his key, IMNVHO.

        I am afraid I find such reasoning facile, and all too apologist
 for crackers.  It is never the ault of the bank robbers, it is the bank
 fault since they did not have better security dvices in place.  It is
 never the fault of grifters, it is always the victims fault.

        I had pointed out last year about the difference between a res
 team attack and what happened last year:
  http://lists.debian.org/debian-devel/2006/05/msg03011.html

        And before you get on your high horse again, look at what
 madduck said himself:
  http://lists.debian.org/debian-devel/2006/05/msg03033.html

        Better yet, go read all the threads concerning the event from
 last May, and come back if you have anything new to add.

        manoj
-- 
A domineering man married a mere wisp of a girl.  He came back from his
honeymoon a chastened man.  He'd become aware of the will of the wisp.
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

Reply to: