robwhiz22: I have another commitment. mircea_popescu thank you for taking the time to consider the proposals. Please feel free to reply by email, including with any questions or clarificatoins.

robwhiz22: I suggest if he likes hte notes, that he accept my proposal, wait to receive the results, and then he can publish if he feels the need.

robwhiz22: Though I should edit them if they were to be posted publicly. (Something I don't suggest at this stage.)

robwhiz22: As I said, I didn't tease with the notes but summarized in full.

robwhiz22: Other clients I've made such submissions to (who have paid for them) use the results very happily, but do not publish my work directly. THat's the sense in which I meant it is internal.

robwhiz22: nubbins`, I submitted a proposal to Polimedia, as part of it I gave the "notes" benkay is referring to. I didn't tease with the notes or allude to them.

robwhiz22: if mircea_popescu wants he can release the write-up, I will clean it up as part of the follow-up proposal.

robwhiz22: benkay - I didn't mean to cause you to want them. For the moment they belong only to Polimedia.

robwhiz22: nubbins`, I am not exactly selling that. I described it in full in the email, and I am happy to clean it up for public consumption for free, along with my follow-up proposal.

robwhiz22: mircea_popescu, i.e. because it must be well-thought out, detailed, and edited, with supporting arguments. It is quite a bit of work to do an internal design proposal for these reasons.

robwhiz22: mircea_popescu, unlike the NSA which tends to hand-wave as they propose certain specific vulnerabilities without giving reasons, my reasoning is stated. This is part of why it is a bit difficult to prepare the proposal in full and I don't do it except if an initial offer is accepted.

robwhiz22: mircea_popescu, thank you for the compliment :) But the proposal is not the work of an organization. I would, as stated, personally offer it. As well it has its limits and must be taken in as just an internal proposal.

robwhiz22: mircea_popescu, I agree with you. I think it has a large market.

robwhiz22: i.e. if there is a beta phase.

robwhiz22: mircea_popescu, yes I thought also that it works and thought it might be shipping. For security reasons it is obviously a great benefit if it is not quite clear whether it is shipping, to whom, and in what quantities.

robwhiz22: By the way I did not realize that you were not shipping this item at all, since I ran across a post that says it is shipping by xmas 2013, as well as I saw prototype that seemed nearly usable.

robwhiz22: I mean the ones that were accepted and paid for. The ones that aren't accepted, I don't write.

robwhiz22: But to go back to my experience - overall all of the proposals of this type that I have written have been unpublished publicly. (i.e. for internal use.)

robwhiz22: You will have the write-up to do with as you want, including releasing as-is. However I do not think that type of disclosure is necessary. I would suggest you simply deploy the specific mitigations in the verison that ships.

robwhiz22: mircea_popescu, if you like I can prepare the disclosure for public consumption. You can then release it. For obvious reasons of haste, I did not include a highly polished and edited write-up with the preliminary email.

robwhiz22: I wrote privately to the Polimedia office at the address at which the Cryptome announcement solicited feedback.

robwhiz22: It would not be responsible disclosure if I were to pastebin the rest of hte email here.

robwhiz22: I then stated: "As beautiful as the idea is, the Cardano in its present form is unfit for any purpose whatsoever, as I will prove shortly. If interested in my follow-up proposal, I can prepare a more detailed overview detailing this conclusion. The main points are summarized below."

robwhiz22: This is how I started the email: "As described in your introduction to its specs, the Cardano it allows one point of certainty in an uncertain world . However insecure a computer might be to which it is connected, so long as a Cardano does not leave your possession, its private key can be relied on to work, and to be uncompromised, while it remains on the physical Cardano which does not export it under any circumstances. Moreover, yo

robwhiz22: mircea_popescu, I don't know. The address says "polimedia.us"

robwhiz22: mike_c, no, you have misunderstood. I included it in my email to Polimedia.

robwhiz22: All right. asciilifeform, in my critique I showed what you say makes you 'salivate' - obviously, without charge - as spec work. A proper write-up is incldued for free with a larger proposal.

robwhiz22: asciilifeform, I'm sorry. He answered the email to Polimedia and called you the chief engineer - which is why I thought he was, 'your boss.'

robwhiz22: mike_c - no not exactly. I've written most of the details in the first email, and am including a proper well-edited write-up free of charge with the proposal.

robwhiz22: mircea_popescu, yes. I opened my to you with: Dear Polimedia, \n In casually researching the Cardano I came across your announcement on Cryptome: \n http://cryptome.org/2013/10/bitcoin-usb-gpg.htm \n Which includes, in part, "Critique of the product welcomed."

robwhiz22: mircea_popescu, when I wrote you I quoted your announcement on cryptome in which you explicitly welcomed letters such as mine. Whether you have any interest in anyhting beyond it, or since abandoned that interest, is up to you to communicate.

robwhiz22: mircea_popescu, I'm unclear about what kind of relationship you have in mind.