Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
Horseman, thanks for checking in. It's reassuring to know that we have not lost sight of the original PJS idea...the Wavemeter...I like that! Your post makes a lot of sense. Thanks again. Regards, R2
Thanks eamonnshute...you the man! e/
RBLTG, incredible DD. Your HP/Wave partnership find together with your report of the impending TCG marketing blitz has really made my day. Thanks!
last paragraph of my last post edited...thanks.
barge/doma/weby re: Embassy OS/Wave Utility Services revenue models
Thank you all for an enlightening discussion this weekened. In my attempt to sort this all out, here is my attempt at a summary and elucidation...I hope I don't over-simplify your perspectives:
barge believes in the Embassy OS as the key to Wave's ubiquity in trusted platform/domain interoperablity. barge recognizes the value of Wave's Utility Services for the near-term business model but fears that Wave will eventually be overrun by competition in this role.
doma downplays the Embassy OS, pointing out that licensing revenue from the chip itself is minimal and insisting that the Embassy applet revenue model is dead. doma instead regonizes the revenue model from Wave's Utility Services, believing that Wave's expertise in key management will facilitate the TCG platform evolution.
weby seems to recognize both barge's and weby's points of view, but in paricular questions barge's revenue model.
Might I remind us that if Embassy IP is adopted by TCG hardware vendors, that this will indeed provide persistent licensing revenue?...we know this but the amount/device is unknown and assumed to be very modest, but if TC becomes popular perhaps the fee could be a bit more? We don't know how many chips/year this could be but is conceivably huge. So while this Embassy licensing revenue stream likely won't make Wave huge in and of itself (but is Rambus a possible comparison?) won't the use of Embassy hardware/TAN IP help bring the TAN management business to Wave?
Conclusion:
My sense is that if Embassy IP plays a role in TPM programmablity, then Wave will end up with a larger share of the TCG TAN business. Everybody can agree that the Utility Services model at $20-30/seat is highly compelling, and I see this revenue model extending to TAN services. Enterprise I believe will pay for TAN management, but the consumer I am not so sure...certain basic TC services will probably come bundled on the host PC system free of charge...perhaps this is a goal of Longhorn. I really don't know if Longhorn will be able to offer the consumer PC user true TC services like key migration and back-up...perhaps it will with a small MSFT licensing fee to Wave (LOL)? The consumer wants everything for free! I would like to suggest that TC revenue from the consumer will be derived from e-commerce transactions...revenue sharing from on-line merchants and content providers and perhaps in some cases TAN fees paid directly by the consumer.
eamonnshute, did you catch the footnote that I edited on?
Looks like the PC21100 SafeKeeper is shipping to OEMs.
Here's the e-mail response I received from NSM today:
"Hello,
In response to your request:
Thank you for your interest in National Semiconductor's SafeKeeper
device,
PC21100. We are currently only supporting OEMs in the PC industry in
designing in this device. We are not adequately resourced to engage
with
smaller, special-purpose companies.
The PC21100 is fully released product, but because of our PC focus, we
are
only selling to those, specialized accounts.
There are any number of software packages available today that
implement
the digital signature technology (of course with the keys and other
secrets
not as secure stored as in a TPM). I would suggest you explore these
possibilities first and then look at the other opportunities to
securely
store away your secrets."
Note:
When questioned in their initial e-mail, what applications I was running, I explained digital signature and document management...hence, their suggestion to look at non-TPM software packages, now readily available.
US May Mandate Security Disclosures in Securities Filings
By Kevin Murphy
The US government is considering requiring publicly traded companies to disclose their level of information security in regulatory filings, it emerged this week.
Department of Homeland Security chief Tom Ridge, said during an address before members of the Business Software Alliance that discussions of that nature have begun between his agency and the Securities and Exchange Commission.
"We think we need to talk about some kind of public disclosure. What are you doing about your security, physical and cyber security?" Ridge said. "We have no resolution of that, but we think it's worthy and timely to begin that discussion now."
Ridge gave the precedent of Y2K compliance disclosure requirements, which the SEC mandated in 1997, as how such a system has been used before.
Ridge also added: "I believe the marketplace is ready to reward security in a big, big way, because security means reliability... How much is this reliability worth to a customer who buys software or hardware from your companies?"
Such disclosure requirements, depending on how they were implemented, could prove a boon to the IT security industry. Many companies would be reluctant to confess to inadequate security and could up their spending in the area.
The comments came during a broader talk about the state of the government's "cybersecurity" efforts, which were kicked off with the publication of the National Strategy to Secure Cyberspace, published early this year.
Asked to provide an update on the government's part of the Strategy, Ridge replied: "In balance, I think we've got a good way ahead... We still don't quite have the private sector partnerships to get it done, but it's a work in progress".
Ridge said that the recently created internet division of the DHS's Information Analysis Infrastructure Protection unit will become a "tracking and response center" but that it "will need far more collaboration with the private sector".
"Frankly, I think we're making pretty good progress," he said. "We've got a good strategy, now we need to develop an infrastructure to act on it."
Ridge's remarks also reflected the fact that the Strategy is designed to fend off attacks from terrorists. However, based on currently available evidence, online terrorism is merely a theoretical threat when compared to the amount of vandalism and theft actively carried out online.
http://www.cbronline.com/cbrnews/7e60cd3c1aa773a580256dbb003173d4
Doma
I never considered a Finread keyboard solution that wasn't Embassy, but then you understand Finread better than I. I have always seen the SCR-embedded keyboard as a far more elegant implementation than a stand-alone reader, but then I suppose a stand-alone device could have it's uses (like at a merchant's check-out counter).
Do you see SCM, Ingenico & Omnikey embedding their readers in a keyboard? I can't see that would make sense actually, for the Trusted Computing user, because a security co-processor-embedded keyboard should be interoperable like Embassy.
Doma
So you are saying that eventually SCM, Ingenico & Omnikey will buy their single solution SCR chips from people like Infineon etc. and will share the Finread SCR market with Embassy?
I say SCM, Ingenico & Omnikey had better be able to embed their product into a keyboard! Actually, I suppose there will always be applications for stand-alone readers?
What I may not grasp is that these SCR companies through their Finread deployment will help drive the Finread market for Embassy.
Pretty strong today...up volume. Nice to see 23500 bidding 3.10 and only 100 willing to sell at 3.12
go-ks
The real fun begins when (and if...good chance IMO) revs ramp up, become earnings, and WAVX becomes recognized for it's high growth potential (share price). Actually there will be a great run on the stock in anticipation of earnings, if we get that far (IMO we will). While the ramp-up towards earnings occurs the stock will be immensely over-valued (a high flyer) and will remain over-valued during it's high growth run as revenues/earnings grow. Overvaluation (eg. high P/E's) are characteristic of tech stocks during their glory years...and this can occur in bear markets.
Personally I have not traded one share of my holding. Actually I'd like to sell into news and buy back more at a lower price, but am always afraid of successive news. I expect this to change for me.
We may simply be market/Nasdaq-driven today...beats the heck out of a continuing sell-off from lack of news.
You are probably right...an older version brochure. Possible redesign reasons/elements:
1. Cost.
2. Wave IP including bundling of Wave software.
3. Comes endorsement key-loaded.
Current marketing brochure for PC21100 SafeKeeper. Note that it is several pages:
http://www.national.com/appinfo/advancedio/0,2276,295,00.html
Doma, I don't understand this part:
"Now there is Only
One company that has been working on a Single
Chip solution compliant to both markets.....?
I understand that existing FINREAD SCR manufacturers
are using a two chip solution so i would look
to ST Micro & Infineon to start cranking out single
chip solutions before we see any major FINREAD
deployment.."
By "one company working on single chip solution compliant to both markets", I assume you mean Wave's E2100? I don't know what you mean by ST Micro and Infineon cranking out single chip solutions.
go-ks
"I believe someone mentioned that wave met with the nec folks in japan to get some type of clarification on finread vs. tcg and the plan from that meeting was to move with tcg deployment. Obviously, TCG represents a much larger deployment with a much larger cohesive effort being backed by a lot more money and motive. Finread could ride its coattails once established."
That makes a lot of sense. I should think a TCG-compliant keyboard could be of immediate interest to NEC, assuming customers would be willing to foot the additional expense. I know you just said that IYO that secure input comes later...but still...
E-mail just received from NSM:
"Hello,
In response to your request:
The PC21100 is not yet fully released. What type of application are
you
working with that will use the PC21100 chip?"
This sounds like a "partial release", meaning that it could already be shipping to enterprise customers?
I have responded, and will share the next response, if any.
dhamster
Our impression is that Wave showed a TCG-compliant keyboard at the IDF. Sounds like a Wave TCG keyboard would be very close to that Embassy NEC/Samsung keyboard. Perhaps someone would care to speculate on what the difference, if substantially any, might be.
dhamster, it would be interesting to hear from NEC with respect to the TCG. I am assuming NEC will deploy TPMs. Obviously the Embassy keyboard is potentially relevant to an NEC TCG deployment. I believe that enterprise users will be the first participants willing to pay the additional cost for secure keyboards. Regards, R2.
Thanks fivewood...excellent find. Nice to have Intel on our side!
Thanks svenm/barge...very plausible. e/
barge re: remote attestation
I really don't understand why Verisign is referred to in the TCG download as having, with Wave, attestation servers. Perhaps the writer is using the concept of attestation in some manner we are unfamiliar with or is simply wrong.
I am comfortable that Wave has a unique "right" to the attestation that we know. Wave is an important enabler of TCG technology. Somehow, IMO, there is plenty of potential for both Wave and Verisign in the PKI processes that are to be used in Trusted Computing. Whether what Versign does in processing PKI certificates involves some form of what an expert would call attestation, I don't know.
Doma/barge, here is the TCG link:
"Attestation servers are available from multiple vendors,
including Verisign and Wave Systems, and some of these server products can assist in
bridging the capability requirements of the platform limitations today."
https://www.trustedcomputinggroup.org/downloads/Writing_Trusted_Applications_TCG.pdf
My own little theory is that the attestation that Verisign does is related to whatever role they have in processing digital certificates and that Wave has other attestation roles unique to Trusted Computing. Verisign has been doing PKI for years.
I have been searching for clarification on this...nobody seems to have a definitive answer.
Doma, you have mail, e/
rooster1, I also saw the NSM/ARM announcement on NSM's website. Perhaps a PC21100 SafeKeeper announcement is forthcoming!
T123, as you may know I was told recently by NSM that the SafeKeeper is scheduled to be released for sale today. I am monitoring the website and have requested another update. Personally I would be extremely surprised if NSM does not begin shipping this quarter. Regards, R2.
Bull_Dolphin, thanks for a great post. R2 e/
waveduke, my view also. e/
alea, it's so hard to know what top management really knows about what volumes are shipping when...we are sitting here in the dark speculating/hoping. It's just so hard to tell...what if Cubic/Maximus or some WXP or SignOn Line thing is coming along also?
With respect to an offering I suppose they could go for $20-30M (or more) if getting enough to keep the doors open PLUS extra development capital is their strategy.
Assuming there is probably about 65M total outstanding (including Series H/Redwave) it's easy to construct various dilution scenarios, beginning at $1.
Jas re: buy-out, agreed. e/
alea
Even if timetable for TCG slips, there are, needless to say, other revenue producing possibilities...granted, no guarantee of timetables. Also, another equity offering is always possible.
P.S. Old news. Sorry. e/
Microsoft Hit with Security Class Action
By Kevin Murphy
Microsoft Corp is being sued in California for failing to adequately secure its software. Newport Beach attorney Dana Taschner, filing on behalf of a victim of identity theft, said the suit seeks class action status.
Taschner told ComputerWire that the suit claims Microsoft uses unfair business practices in its practice of obliging users to abide by a restrictive end user license agreement (EULA), which dramatically limits the company's liability, before using its software.
"Consumers really don't have a choice of operating system. Almost everyone in the world is using Microsoft," Taschner said. "They have problems bringing legal claims because of the terms of use."
Microsoft spokesperson Sean Sundwall said: "We have received the complaint and our legal team is currently reviewing it. We will be adamantly opposing the attempt to certify class status."
Taschner said he doesn't think Microsoft will be able to use the EULA to defend itself. He said the agreement is "unconscionable", meaning it is "so fundamentally unfair that it gives rise to legal complaint".
The suit claims that Microsoft's method of alerting users to security vulnerabilities is inadequate and confusing to the average user, whereas "fast-moving hackers could move to exploit the Microsoft-publicized weakness".
Almost a year ago, Microsoft changed its alerts policy so that it sends out two types of security warning - one aimed at systems administrators and the tech-savvy, the other, with much of the detail eschewed, aimed at non-technical users.
The complaint also tries to make a case under recently introduced California privacy legislation, which requires companies to notify their customers if they have a reasonable belief that their personal data has been compromised by hackers.
The law, known as SB 1386 until its passage onto the statute books in July, was arguably designed to target online companies with insecure networks, rather than companies that develop buggy and vulnerable software.
"Microsoft has made security its top priority, we're committed to developing secure software," Sundwall added. "The complaint, we think, misses the point. These security problems are as a result of criminal attacks by the people who write viruses".
The suit draws heavily on a report the Computer and Communications Industry Association (CCIA), an industry group with comprises several Microsoft competitors, issued last month, which claims Microsoft's monopoly represents a security risk.
"We did read that report," said Taschner. "We think the findings in the report are very significant. We would not have filed a complaint of this nature unless there was a widespread belief in the industry that Microsoft gives rise to this kind of problem."
The plaintiff in the case is Marcy Hamilton. Taschner claims she was the victim of identity theft due to a vulnerability in Microsoft's software allowing hackers to steal her personal financial information.
Taschner is seeking injunctions against Microsoft's "unfair" practices, as well as financial damages and attorneys' fees. Microsoft has about $49bn in the bank and has recently started splashing out on anti-trust lawsuit settlements.
http://www.cbronline.com/cbrnews/1bf54f56a412b61a80256db40018c1af
HhH, that's it, finis, too insincere for me. e/
Wildman262 re: PP
well hopefully:
1. They know they don't need another PP.
2. They know they can get the best price later.
MIG
I use Interactive Brokers and their depth is superb. The posted best bid was 2.74 when that 2.95 went through!
Doma
"Wave clearly has an Attestation Server Product
as defined in the TCG Catalog"
You mean ACM?
fivewood thanks for news! e/