David Litchfield is such a respected authority in this field that many of us consider "Because David said so" to be the same as fact, and his mere opinion, offered to the list for free, is a gift to the security community.Question everything, especially when it comes from an expert. The facts can stand up for themselves. Lets engage in science, not religeon.
It's inescapable problem with this type of paper - someone's interpretation of the scientific data and what it means is actually just their opinion and without the interpretation you just have a bunch of pretty pictures. That said, if I venture an opinion I fully expect there will be people that disagree and they should challenge that opinion. I'm never one to step back from a good debate :)
(No disrespect intended to Litchfield).
Thanks :)
Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561Tim Newsham http://www.thenewsh.com/~newsham/
Cheers, David Litchfield