August 2002 - cypherpunks-legacy

DVD Copy Pro Instant Download only $9.99! Burn DVD To CD-r!
by DVD Copy Pro 03 Aug '02

03 Aug '02

1 0

Adv: Mortgage Quotes Fast Online, No Cost
by mortgage_quotes_fast＠nationwidemortgage.us 03 Aug '02

03 Aug '02

1 0

Adv: Mortgage Quotes Fast Online, No Cost
by mortgage_quotes_fast＠nationwidemortgage.us 03 Aug '02

03 Aug '02

1 0

info-theoretic model of anonymity
by Adam Back 03 Aug '02

03 Aug '02

Just read this paper published in PET02 "Towards an Information Theoretic Metric for Anonymity" [1]: http://www.cl.cam.ac.uk/~gd216/set.pdf or http://www.cl.cam.ac.uk/~gd216/set.ps it uses a Shannon like entropy model for the anonymity provided by a system uses this model to analyse the effect of different parameters one can tune with mixmaster (POOLSIZE, RATE, in mixmaster.conf). The "anonymity entropy" measurement can be interpreted as how many bits of information the attacker needs to identify a user and is computed from probabilities. Would be interesting to try estimate the entropy provided by the current mixmaster network. A number of nodes publish their parameter choices, and traffic volume over time (in hourly increments). Adam -- http://www.cypherspace.org/adam/ [1] @inproceedings{Serjantov:02:info-theoretic-anon, author = "Andrei Serjantov and George Danezis", title = "Towards an Information Theoretic Metric for Anonymity", booktitle = "Proceedings of the Workshop on Privacy Enhancing Technologies", year = "2002", note = "Also available as \url{http://www.cl.cam.ac.uk/~aas23/papers_aas/set.ps}" }

1 0

RE: Challenge to David Wagner on TCPA
by AARG!Anonymous 03 Aug '02

03 Aug '02

Peter Trei envisions data recovery in a TCPA world: > HoM: I want to recover my data. > Me: OK: We'll pull the HD, and get the data off it. > HoM: Good - mount it as a secondary HD in my new system. > Me: That isn't going to work now we have TCPA and Palladium. > HoM: Well, what do you have to do? > Me: Oh, it's simple. We encrypt the data under Intel's TPME key, > and send it off to Intel. Since Intel has all the keys, they can > unseal all your data to plaintext, copy it, and then re-seal it for > your new system. It only costs $1/Mb. > HoM: Let me get this straight - the only way to recover this data is > to let > Intel have a copy, AND pay them for it? > Me: Um... Yes. I think MS might be involved as well, if your were > using > Word. > HoM: You are *so* dead. It's not quite as bad as all this, but it is still pretty bad. You don't have to send your data to Intel, just a master storage key. This key encrypts the other keys which encrypt your data. Normally this master key never leaves your TPM, but there is this optional feature where it can be backed up, encrypted to the manufacturer's public key, for recovery purposes. I think it is also in blinded form. Obviously you'd need to do this backup step before the TPM crashed; afterwards is too late. So maybe when you first get your system it generates the on-chip storage key (called the SRK, storage root key), and then exports the recovery blob. You'd put that on a floppy or some other removable medium and store it somewhere safe. Then when your system dies you pull out the disk and get the recovery blob. You communicate with the manufacturer, give him this recovery blob, along with the old TPM key and the key to your new TPM in the new machine. The manufacturer decrypts the blob and re-encrypts it to the TPM in the new machine. It also issues and distributes a CRL revoking the cert on the old TPM key so that the old machine can't be used to access remote TCPA data any more. (Note, the CRL is not used by the TPM itself, it is just used by remote servers to decide whether to believe client requests.) The manufacturer sends the data back to you and you load it into the TPM in your new machine, which decrypts it and stores the master storage key. Now it can read your old data. Someone asked if you'd have to go through all this if you just upgraded your OS. I'm not sure. There are several secure registers on the TPM, called PCRs, which can hash different elements of the BIOS, OS, and other software. You can lock a blob to any one of these registers. So in some circumstances it might be that upgrading the OS would keep the secure data still available. In other cases you might have to go through some kind of recovery procedure. I think this recovery business is a real Achilles heel of the TCPA and Palladium proposals. They are paranoid about leaking sealed data, because the whole point is to protect it. So they can't let you freely copy it to new machines, or decrypt it from an insecure OS. This anal protectiveness is inconsistent with the flexibility needed in an imperfect world where stuff breaks. My conclusion is that the sealed storage of TCPA will be used sparingly. Ross Anderson and others suggest that Microsoft Word will seal all of its documents so that people can't switch to StarOffice. I think that approach would be far too costly and risky, given the realities I have explained above. Instead, I would expect that only highly secure data would be sealed, and that there would often be some mechanism to recover it from elsewhere. For example, in a DRM environment, maybe the central server has a record of all the songs you have downloaded. Then if your system crashes, rather than go through a complicated crypto protocol to recover, you just buy a new machine, go to the server, and re-download all the songs you were entitled to. Or in a closed environment, like a business which seals sensitive documents, the data could be backed up redundantly to multiple central file servers, each of which seal it. Then if one machine crashes, the data is available from others and there is no need to go through the recovery protocol. So there are solutions, but they will add complexity and cost. At the same time they do add genuine security and value. Each application and market will have to find its own balance of the costs and benefits. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

2 1

Hey
by becky 02 Aug '02

02 Aug '02

################################ Your Online Pharmacy for Prescription Drugs! ################################ NEWS 08/02/02 Last month over 20,000 new people purchased prescription drugs at our website with our limited time offer. Are you purchasing prescription drugs yet??? ------------------------ Benefits of Ordering Prescription Drugs Online: - Confidential ordering & shipped discreetly overnight. - No more embarrassing doctor visits. - Our US licensed doctors will evaluate your medical history over the internet. - Online pharmacy for FDA approved drugs. - Medication prescribed by licensed U.S. Physicians - Secure Processing with the best prices on the internet. ------------------------ Click on one of the Links Below to Order FDA Approved Prescription Drugs: Viagra (Helps Erection) Viagra is used by millions of men in the US & world wide everyday. If you feel that your erection could be better, try Viagra. Click on the link: http://www.royalmeds.com/main2.php?rx=17770 Phentermine (Weight Loss) Enables people to burn fat doing nothing by stimulating your nervous system. It will give you more energy and you'll become more active! You'll burn fat easier and eat less. It's a safe and effective treatment to lose weight. Click on the link: http://www.royalmeds.com/main2.php?rx=17770 Propecia (Hair Loss) PROPECIA is a medical breakthrough. The first pill that effectively treats male pattern hair loss (at top of head) and anterior mid-scalp area. Click on the link: http://www.royalmeds.com/main2.php?rx=17770 Zyban (Stop Smoking) Zyban is the first nicotine-free pill that can help you stop smoking. Its prescription medicine is available only for smokers 18 and older. Click on the link: http://www.royalmeds.com/main2.php?rx=17770 ------------------------------- Mike Mallucio, Los Angeles, CA Your Prescription drugs have improved my sex life. Thanks to your Viagra pills I'm going to save my marriage. Becky Gonzalez, Miami, FL By ordering prescription drugs at your website I didn't have to drive to a doctor's office and you also saved me the personal embarrassment. Matt Grossman, Manhattan, NY One month after ordering a phentermine prescription at your website I lossed 20 Lbs doing nothing, have more energy and eat less! Thank You! Removal Instructions: This email is intended to be a benefit to the recipient. If you would like to opt-out and not receive any more marketing information please click on the following link http://worldrxco.com/remove.php Your address will be removed within 24hrs. We sincerely apologize for any inconvenience. ytuhmsgsvbyibyefuhpmf

1 0

RE: Challenge to David Wagner on TCPA
by Albion Zeglin 02 Aug '02

02 Aug '02

Quoting Jay Sulzberger <jays(a)panix.com>: > b. Why must TCPA/Palladium be a dongle on the whole computer? Why not a > separate dongle? Because, of course, the Englobulators proceed here on > principle. The principle being that only the Englobulators have a right to > own printing presses/music studios/movie and animation studios. > A separate dongle can't verify the integrity of the processor. The important part is that the processor's state (including initial RAM load) is verifiable. Without this the OS could be virtualized and modified after the integrity check. Just imagine running Windows Media Player on a virtual machine, trapping the calls to the audio card and thus being able to copy content perfectly. A dongle can't prevent this. Eventually for TCPA to be effective against hardware hacks such as memory probes, not only will the harddrive storage be sealed, but RAM must be sealed as well. Once TCPA moves onprocessor, I expect encrypted RAM will be next. Albion.

2 1

RE: Challenge to David Wagner on TCPA
by Jay Sulzberger 02 Aug '02

02 Aug '02

On Fri, 2 Aug 2002, Trei, Peter wrote: > > AARG! Anonymous[SMTP:remailer@aarg.net] writes > [...] > > Now, there is an optional function which does use the manufacturer's key, > > but it is intended only to be used rarely. That is for when you need to > > transfer your sealed data from one machine to another (either because you > > have bought a new machine, or because your old one crashed). In this > > case you go through a complicated procedure that includes encrypting > > some data to the TPME key (the TPM manufacturer's key) and sending it > > to the manufacturer, who massages the data such that it can be loaded > > into the new machine's TPM chip. > > > > So this function does require pre-loading a manufacturer key into the > > TPM, but first, it is optional, and second, it frankly appears to be so > > cumbersome that it is questionable whether manufacturers will want to > > get involved with it. OTOH it is apparently the only way to recover > > if your system crashes. This may indicate that TCPA is not feasible, > > because there is too much risk of losing locked data on a machine crash, > > and the recovery procedure is too cumbersome. That would be a valid > > basis on which to criticize TCPA, but it doesn't change the fact that > > many of the other claims which have been made about it are not correct. > [...] > > While I reserve the right to respond to the rest of the poster's letter, > I'd like to call out this snippet, which gives a very good reason > for both corporate and individual users to avoid TCPA as if it were > weaponized anthrax (Hi NSA!). > ... > OK, It's 2004, I'm an IT Admin, and I've converted my corporation > over to TCPA/Palladium machines. My Head of Marketing has his > TCPA/Palladium desktop's hard drive jam-packed with corporate > confidential documents he's been actively working on - sales > projections, product plans, pricing schemes. They're all sealed files. > > His machine crashes - the MB burns out. > He wants to recover the data. > > HoM: I want to recover my data. > Me: OK: We'll pull the HD, and get the data off it. > HoM: Good - mount it as a secondary HD in my new system. > Me: That isn't going to work now we have TCPA and Palladium. > HoM: Well, what do you have to do? > Me: Oh, it's simple. We encrypt the data under Intel's TPME key, > and send it off to Intel. Since Intel has all the keys, they can > unseal all your data to plaintext, copy it, and then re-seal it for > your new system. It only costs $1/Mb. > HoM: Let me get this straight - the only way to recover this data is to > let > Intel have a copy, AND pay them for it? > Me: Um... Yes. I think MS might be involved as well, if your were using > Word. > HoM: You are *so* dead. > > --------------------------- > > Peter Trei I think that many managers in this situation would feel reassured that both Intel and Microsoft would be handling these sensitve documents. Else why do lawyers use Microsoft systems to send unencrypted documents between offices? ad technicalities: Just one more level of indirection^Wencryption would answer the objections of those few managers of exquisite sensibilities, who worry about Intel/Microsoft reading their documents. oo--JS.

1 0

AU spy agency gets domestic green light.
by Matthew X 02 Aug '02

02 Aug '02

ACC-Australian Crime Commission-new gestapo born in secret. JOHN Howard has brokered a deal for a new national law enforcement body, with two controversial Carr government advisers helping him clinch an agreement with the states. Advertisement A secret meeting in the Prime Minister's Sydney office on Wednesday sealed the fate of the troubled National Crime Authority, and in its place will rise the Australian Crime Commission. The NCA will cease to exist in December, when the ACC will take over its coercive hearing and telephone interception powers. Since a falling-out last year, Mr Howard has been keen to sideline the NCA. The ACC will broadly take the form proposed unanimously by the states but rejected two weeks ago by the federal Government, with a charter to fight organised crime and the emerging threat of terrorism. The deal was finalised yesterday, following Wednesday's meeting attended by three Howard advisers and two proxies for NSW Police Minister Michael Costa academic Richard Basham and former detective Tim Priest. Another Costa adviser, former NSW Police Internal Affairs commander Geoff Schuberg, is expected to become the ACC's director of operations. The ACC will be chaired by Australian Federal Police Commissioner Mick Keelty. Its hearings will be conducted by an official chosen from the ranks of senior criminal lawyers. Former Queensland crime commissioner Tim Carmody is considered a front-runner for the job. Crucial to this week's deal was the federal Government's concession that the ACC will have its own in-house investigative capacity. It will not be just an intelligence assessment agency as originally proposed. In return, the states have agreed to fund the secondment of police from their forces to the national body. For the past eight years, the commonwealth has footed the NCA's bill. The states will formally approve the new commission at a meeting of police ministers in Sydney on Friday. Neither federal Justice Minister Chris Ellison nor Mr Costa, who acted as negotiator on behalf of the states, would comment yesterday. Spokespeople for both ministers would only say discussions this week had been "productive". Both levels of government have agreed to include ASIO director-general Dennis Richardson on the ACC's new board involving the spy agency in domestic crime fighting for the first time. The commonwealth also has agreed to give up a board spot that was to be taken by one of its agencies, meaning voting numbers are split evenly between the states and Canberra. Final details about the ACC's budget and personnel were being finalised yesterday, but a plan suggested earlier this week to retain only half the NCA's investigators has been dropped. Mr Basham's and Mr Priest's involvement in the deal comes eight months after they joined Mr Costa's inner circle Mr Basham as an adviser in his office and Mr Priest initially as an adviser but now as an informal confidant who works out of the University of Sydney's criminology department. Both had objected vigorously to some senior police management in the NSW force, particularly crime management in the western Sydney suburb of Cabramatta. In April the contract of a key target, then police commissioner Peter Ryan, was terminated. The ACC will be chartered to attack organised crime in a more vigorous manner than its predecessor. Figures provided to the federal Government this week showed that the NCA last year achieved lesser results than the NSW and Queensland crime commissions. http://www.theaustralian.news.com.au/common/story_page/0,5744,4830105%255E6… Police minister is an ex-trot and is on medication for self diagnosed manic depresion,kinda reminds me of jamesd... http://smh.com.au/articles/2002/08/02/1028157844696.html The very model of the modern major medicated police minister.

1 0

Low Cost Long Distance
by longdistance＠hotbot.ca 02 Aug '02

02 Aug '02

New Page 1   LOW COST   LONG   DISTANCE     Six Plans To Choose From Including: $9.95 Plan  * Unlimited Plan  * Travel Plan Canadian Plans *  International   *  Intra/inter State Stop paying the high cost of long distance.   Simple to understand all-inclusive pricing so you save big! Email us now with your phone number to hear how crystal clear your connection will be. To be removed please click here            

1 0