Thou shalt have no other gods before the ANSI C standard 1446

Hank Oredson

I'm not into that kind of name-calling. But hey, let me know if you ever have any actual point to the contrary.

And like I said, this is the first thread where I've ever had to decline that request. No kidding: I've re-read hundred-post- threads on such suggestions. This thread ... well ... sorry.

For which I thank you.

I cannot tell what you are trying to argue. Are you saying my quote there did *not* discuss the dangers of malicious inputs, even specifically noting hash functions? Are you disagreeing with my buttessment that "a.f.c people seemed to think that the adversarial environment was nothing new"? Are saying they somehow *did* consider inputs constructed by adversaries?

Obviously I can easily refute all of those, but I can't even tell what case you think you have. If they knew the adversarial stuff, why did they botch the job so badly? You responded to that post of mine by asking why people wouldn't test worst-case behavior. Now that we have actual examples of such people, maybe we should look to their failure to consider such cases for the answer.

-- --Bryan