Comments on: Second edition

By: Atsushi

Atsushi — Tue, 17 Mar 2009 02:04:45 +0000

I made a mistake.
Correction.

F1 -> B : N
B -> F2 : N
F2 -> B : {F2, N}K
B -> F1 : {F2, N}K

By: Atsushi

Atsushi — Mon, 16 Mar 2009 16:22:36 +0000

> 3.3.3 Reflection Attacks

> There are a number of ways of stopping this reflection attack. In many cases, it is
> sufficient to include the names of the two parties in the authentication exchange.

Sorry, I don’t think it’s sufficient for the reflection attack like the following case.

> It is still not enough just for the two units to be connected and share a list
> of outstanding challenges, as an enemy attacked by two of our aircraft might
> reflect a challenge from one of them to be answered by the other.

F1 -> B : N
B -> F2 : N
F2 -> B : {B, N}K
B -> F1 : {B, N}K

F1, F2: our aircraft
B : enemy

I misunderstood?

Thank you.

By: Chris

Chris — Wed, 30 Apr 2008 19:44:58 +0000

Another typo, “legder” in the on-line chapter 10.1.2 para 2.

Maybe this is just a free way to get the book proof read! I enjoyed the chapter anyway!

By: Amjad

Amjad — Wed, 30 Apr 2008 14:48:08 +0000

Nice to see the second edition. I greatly enjoyed reading the first edition.

Being a InfoSec student (last year) I was grateful for the free on-line copy. It was one thing less to worry about when every penny counts. I found the on-line edition more useful too. If I had any time to kill between lectures I could simple logon pretty much anywhere and have a read, or direct others to the resource.

Nice to see the addition of ‘Terror, Justice and Freedom”. I will be buying a copy, not because I have to (like most text books) but I feel I owe you a copy.

Thanks,
Amjad

By: tree killer

tree killer — Tue, 29 Apr 2008 11:11:30 +0000

Dom - if you buy from Amazon and the price goes down soon you are supposed to get a refund.

I spotted a typo “thr” for “the” in the online chapters.

By: 2great2betrue

2great2betrue — Tue, 29 Apr 2008 01:25:04 +0000

Thanks for all your hard work and dedication with being the light in this field.
Lightbluetouchpaper, a great name, great under lynx as well.
Keep up the great work.

By: Dom

Dom — Mon, 28 Apr 2008 18:22:01 +0000

Now I just bought the first edition a few weeks ago.

I was not warned that a new version of this quite expensive book would be released soon and that the one I bought would become free overnight.

Dom

By: Ross Anderson

Ross Anderson — Mon, 28 Apr 2008 14:33:23 +0000

Roland

The Kindle version will be ready in a few weeks, or so my publisher believes. The problem is that Amazon creates the Kindle versions themselves for this sort of book, so it’s kinda out of our control. I passed on your post to Wiley who have now marked my book with a fast-track request. So thanks for asking; it helps us expedite the process

Ross

By: Matt

Matt — Mon, 28 Apr 2008 00:37:25 +0000

I look forward to reading the second edition. The first edition was wonderful.

The first edition has been a great resource over the years. I often refer people to it who are interested in learning more about security. Thank you posting the first edition online and opening it up to the community.

Cheers,
Matt

By: Roland Dobbins

Roland Dobbins — Sun, 27 Apr 2008 23:46:43 +0000

Where is the full electronic edition of your new edition which I’m eager to buy? Specifically, where is the Amazon Kindle edition, and when can I fork over some money for it?

Thanks!