4 ms·
In this case I have to agree with you. I'm a little dumb founded as to what exactly was the point of the article: was it: 1. Don't use ECB (use CBC instead ?)
by rs 17y ago
In this case I have to agree with you. I'm a little dumb founded as to what exactly was the point of the article:
was it:
1. Don't use ECB (use CBC instead ?)
or
2. Only send data out if you have to (with no mention of the fix to using ECB)
I'm so confused
- randallsquared 17y agoIt was 2. The exact bug that exposed the data wasn't really the point, since he assumes that everyone will eventually make some similarly awful mistake; the point was that you should design things in such a way that when you discover your boneheaded mistake(s), the damage is less than it could be. I agree, though, that his habit of using particularly boneheaded mistakes as examples dilutes his main point, since a significant part of his intended audience will think, "Wow, I'd never make a mistake like that, so I don't have to pay attention to mitigating my mistakes like he does."