I have to agree. Unless Pallidium is checking each branch to make sure it's to "signed" code, it won't make a difference.

( and no, that still wouldn't stop everyhing )

So Palladium is useless against buffer overflows, the biggest security problem

Palladium could be slightly effective against Word/Outlook macro viruses, which these days probably qualifies as the second biggest problem. But only slightly.

Could it help with signing transactions... sure, somewhat. But when somewhen finds a flaw in it, how do we upgrade all the Palladium systems out there? Oh, I guess you could upgrade the firmward. What a relief... no virus writer would try to take advantage of that.

Just give us decent hardware random number generators, and let the software do the rest.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/96/15759#15759