Even in a controller card, it's very easy to at least do some Caesar cipher or anything simple like that. They could even do something a little more complex without much troble.
I didn't say ROT13, it could be ROTx, or it could have a variable x (as with a big key), whatever... the advantage would be to make it slightly more difficult to find the meaning of the numbers in the card. I know security by obscurity doesn't work, but it's better than nothing.
I think it would have been even worse for FasTrak if Nate had got up on stage and said that they tried to pass XOR off as encryption. Then the story would not only be negligence, but also incompetence. There's a plausible story you can tell for why FasTrak isn't secured at all.
Comments
Even in a controller card, it's very easy to at least do some Caesar cipher or anything simple like that. They could even do something a little more complex without much troble.
I'm not sure what the security advantage of ROT13 is.
I didn't say ROT13, it could be ROTx, or it could have a variable x (as with a big key), whatever... the advantage would be to make it slightly more difficult to find the meaning of the numbers in the card. I know security by obscurity doesn't work, but it's better than nothing.
I think it would have been even worse for FasTrak if Nate had got up on stage and said that they tried to pass XOR off as encryption. Then the story would not only be negligence, but also incompetence. There's a plausible story you can tell for why FasTrak isn't secured at all.
You are right.