October 2004 - cypherpunks-legacy

Certicom Hosts First Annual ECC Conference
by R.A. Hettinga 20 Oct '04

20 Oct '04

<http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=109&STORY=/www/story/10-2…> Certicom Hosts First Annual ECC Conference Industry experts, the creators of ECC and users convene in Toronto to discuss best practices and growing adoption of Elliptic Curve Cryptography MISSISSAUGA, ON, Oct. 20 /PRNewswire-FirstCall/ - Certicom Corp. (TSX: CIC), the authority for strong, efficient cryptography, today announced it will host the Certicom ECC Conference 2004, the first-ever conference that brings together Elliptic Curve Cryptography researchers, industry experts and users. During the two-day conference, participants from North America, Europe and Asia will discuss the growing adoption of ECC and share best implementation practices and insights for future applications. The conference begins with an evening reception on November 15 with sessions running November 16-17 at the Four Seasons Hotel in Toronto, Canada. Keynote speakers include Mike Lazaridis, president and co-CEO of Research In Motion, and Dr. Scott Vanstone, Certicom founder and EVP strategic technology. Also participating are Norm Kern, Unisys; Dr. Jerry Krasner of Embedded Market Forecasters; Herb Little, Research In Motion; Dr. Ralph Merkle, Georgia Tech; and Dr. Leon Pintsov, Pitney Bowes. During the conference, Certicom will present recognition awards to ECC creators Dr. Neal Koblitz, University of Washington and Dr. Victor Miller, Institute for Defense Analyses Center for Communication Research, as well as an ECC visionary award to Dr. Walt Davis, Motorola (retired). ECC, which is often referred to as the next-generation public-key cryptography system, is used in a growing number of sectors ranging from consumer electronics, wireless devices and semiconductors to government and financial services. Specifically, its implementations protect content, securely transmit data and digitally sign documents. The small size of ECC is a main driver behind its growing adoption. It provides equivalent security to competing public-key cryptosystems but at a fraction of the size, making it ideally suited for resource-constrained devices such as smart phones, semiconductors and smart cards. Software developers, hardware engineers, and anyone responsible for buying or implementing cryptographic systems will benefit from this conference and the free exchange of practical ideas and real-world lessons. They also will gain insights into future applications of ECC, including standards and protocols. "This conference is a dynamic forum for ECC proponents to get together and engage in open discussions about the technology: its roots, how it is used today and where it's going," said Scott Vanstone. "We've pulled together a stellar roster of the who's who in the ECC world and representatives from some of North America's leading companies. This conference promises to advance the understanding of ECC and accelerate its adoption." To register or for more information, visit http://www.certicom.com/conference2004/registration . About Certicom Certicom Corp. (TSX:CIC) is the authority for strong, efficient cryptography required by software vendors and device manufacturers to embed security in their products. Adopted by the US Government's National Security Agency (NSA), Certicom technologies for Elliptic Curve Cryptography (ECC) provide the most security per bit of any known public key scheme, making it ideal for constrained environments. Certicom products and services are currently licensed to more than 300 customers including Motorola, Oracle, Research In Motion, Terayon, Texas Instruments and Unisys. Founded in 1985, Certicom is headquartered in Mississauga, ON, Canada, with offices in Ottawa, ON; Reston, VA; San Mateo, CA; and London, England. Visit http://www.certicom.com . Certicom, Certicom Security Architecture, Certicom CodeSign, Security Builder, Security Builder Middleware, Security Builder API, Security Builder Crypto, Security Builder SSL, Security Builder PKI, and Security Builder GSE are trademarks or registered trademarks of Certicom Corp. Intel is registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. All other companies and products listed herein are trademarks or registered trademarks of their respective holders. Except for historical information contained herein, this news release contains forward-looking statements that involve risks and uncertainties. Actual results may differ materially. Factors that might cause a difference include, but are not limited to, those relating to the acceptance of mobile and wireless devices and the continued growth of e-commerce and m-commerce, the increase of the demand for mutual authentication in m-commerce transactions, the acceptance of Elliptic Curve Cryptography (ECC) technology as an industry standard, the market acceptance of our principal products and sales of our customer's products, the impact of competitive products and technologies, the possibility of our products infringing patents and other intellectual property of fourth parties, and costs of product development. Certicom will not update these forward-looking statements to reflect events or circumstances after the date hereof. More detailed information about potential factors that could affect Certicom's financial results is included in the documents Certicom files from time to time with the Canadian securities regulatory authorities. SOURCE Certicom Corp. More news from PR Newswire... Issuers of news releases and not PR Newswire are solely responsible for the accuracy of the content. Terms and conditions, including restrictions on redistribution, apply. Copyright ) 1996-2004 PR Newswire Association LLC. All Rights Reserved. A United Business Media company. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Technology Review: Ari Juels of RSA "Top Young Innovator" for RFID Blocker Tag
by R.A. Hettinga 20 Oct '04

20 Oct '04

<http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=109&STORY=/www/story/10-1…> RSA Security CEO Art Coviello Awarded Top Honors from New England Business and Technology Association Dr. Ari Juels of RSA Laboratories also recognized as one of the world's Top Young Innovators by MIT's Technology Review Magazine BEDFORD, Mass., Oct. 19 /PRNewswire-FirstCall/ -- RSA Security Inc. (Nasdaq: RSAS) today announced that it has been awarded top honors by two leading technology organizations - the New England Business and Technology Association (NEBATA), and the Technology Review, MIT's Magazine of Innovation. Art Coviello, president and chief executive officer at RSA Security, was recognized with a New England Business and Technology Award for his significant impact in developing and deploying technologies that have addressed critical business issues, while at the same time, contributing to the prosperity of New England. RSA Laboratories' director and chief scientist, Dr. Burt Kaliski, was awarded this honor in 2003. "The New England Business and Technology Awards program recognizes New England business and technology leaders who have made significant strides in the development, deployment or utilization of technology," said Thomas Hopcroft, president, NEBATA. "We are proud to recognize Mr. Coviello for his contributions to the New England business community." Under his direction and leadership, Coviello has been instrumental in establishing RSA Security as an industry leader in information security, increasing its customer base to more than 15,000 organizations around the globe, and company revenue from $25 million in 1995, to $259 million in 2003. Coviello is also an established authority on industry and national cyber security issues, consumer identity protection, and necessary steps to enable further Internet innovation. "I am honored to be recognized by NEBATA for our accomplishments as both an industry-leading identity and access management solutions provider, but also for our healthy increase in both revenue and workforce, including those employed at our headquarters in New England," said Coviello. "Recognition from this prestigious organization proves that we're making great progress in important areas, and setting a more positive tone for the information security industry as a whole." In addition to Coviello's honors last week, Technology Review, MIT's Magazine of Innovation, recently named Dr. Ari Juels, RSA Laboratories' principal research scientist and manager of Applied Research, to the 2004 list of the world's 100 Top Young Innovators. Chosen by the editors of Technology Review and an elite panel of judges, the TR100 consists of 100 individuals under age 35 whose innovative work in technology has created a profound impact. "In the five years since we began naming our annual selection of the world's top innovators under age 35, inclusion among the TR100 has become one of the most prestigious awards for young innovators around the world," said David Rotman, executive editor of Technology Review. "This year's winners are all pioneering fascinating innovations in the fields of biomedicine, computing and nanotechnology, and were chosen after a rigorous selection and judging process. The result is an elite group whose visions and inventions will shape the future of technology." Dr. Juels was recognized for his key role in the development of the RSA(R) Blocker Tag, a technology designed to enforce consumer privacy while allowing consumers and businesses to reap the full benefits of Radio-Frequency Identification (RFID) technology. Dr. Juels, who completed his Ph.D. in Computer Science at U.C. Berkeley, focuses his research at RSA Laboratories, the research division of RSA Security, on data security, with emphases on authentication, biometrics, electronic voting and financial cryptography. About The New England Business and Technology Association The New England Business and Technology Association, Inc. (NEBATA), is a non-profit business association that brings together providers and users of technology in business, education and government to foster knowledge-sharing and business development in a professional environment. NEBATA Programs explore the critical business and leadership issues at the intersection of technology and business. Continuing series include the Leadership Roundtable, New England Business and Technology Awards, Critical Issues Series, and unique programs focusing on the Financial Services, Health & Life Sciences, and Retail & Logistics industries. These initiatives support the overall vitality of the New England economy. About the Technology Review Technology Review, Inc., an MIT Enterprise, delivers essential information about emerging technologies and their impact on business leaders. Since 1998, paid circulation for the company's magazine, Technology Review, has more than tripled, climbing from 92,000 to 315,000. Combined with its signature events, newsletters, and online businesses, Technology Review reaches over two million business leaders throughout the world each month. About RSA Security Inc. RSA Security Inc. helps organizations protect private information and manage the identities of people and applications accessing and exchanging that information. RSA Security's portfolio of solutions - including identity & access management, secure mobile & remote access, secure enterprise access, secure transactions and consumer identity protection - are all designed to provide the most seamless e-security experience in the market. Our strong reputation is built on our history of ingenuity, leadership, proven technologies and our more than 15,000 customers around the globe. Together with more than 1,000 technology and integration partners, RSA Security inspires confidence in everyone to experience the power and promise of the Internet. For more information, please visit http://www.rsasecurity.com. RSA is a registered trademark of RSA Security Inc. in the United States and/or other countries. All other products and services mentioned are trademarks of their respective companies. For more information: Wendy Bulawa Matt Buckley McGrath/Power Public Relations RSA Security Inc. (978) 994-1447 (781) 515-6212 wendyba(a)mcgrathpower.com mbuckley(a)rsasecurity.com SOURCE RSA Security Inc. Web Site: http://www.rsasecurity.com More news from PR Newswire... Issuers of news releases and not PR Newswire are solely responsible for the accuracy of the content. Terms and conditions, including restrictions on redistribution, apply. Copyright ) 1996-2004 PR Newswire Association LLC. All Rights Reserved. A United Business Media company. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

13yo arrested for kiddie porn
by Steve Furlong 20 Oct '04

20 Oct '04

First saw the story linked from Drudge, then googled up a handful of stories: http://www.kptv.com/global/story.asp?s=2435549&ClientType=Printable Boy,13. arrested on child porn charges 10-15-04 TACOMA, Wash. -- A 13-year-old Lacey boy is accused of child pornography by taking pictures of himself and posting them on the Internet. The boy was arrested Wednesday by investigators from the State Patrol's Missing and Exploited Children task force. They also seized three computers. The boy is being held in juvenile detention without bail. Prosecutors expect to file charges by Monday. http://www.freerepublic.com/focus/f-news/1246411/posts http://www.theolympian.com/home/news/20041015/topstories/15049.shtml

1 0

Seld-defeating US foreign policy
by Tyler Durden 20 Oct '04

20 Oct '04

Well, when push comes to shove I have to admit Mr Donald doesn't mince words. Guess that's what Cypherpunks is for! However... >The US government should expose and condemn these objectionable >practices, subvert moderately objectionable regimes, and >annihilate more objectionable regimes. The pentagon should >deprive moderately objectionable regimes of economic resources, >by stealing their oil, destroying their water systems, and >cutting off their trade and population movements with the >outside world. As was stated elesewhere, there is sfirst of all the problem of -who- determines the meaning of objectionable. Is it the latest DC regime? You make it seem like you espouse a philosophy that makes it easy and obvious to see what's objectionable. More than that, however, this may be completely self-defeating. Most governments are not static entities. Some will evolve or die via relatively Darwinian processes, and interference really ends up being self-defeating, or possibly far worse. I won't belabor my favorite example of China--Vietnam--Cambodia, but it's clear to me things could have been completely different had the US not espoused blatantly aggressive policies towards China in particular. In this context a very strong case can be made that the US caused the Khmer Rouge to come to power, precisely by performing in a way similar to what you espouse. We also had opportunities to ally with China early on, and let's remember we were allies with Ho Chi Min during WWII. But all we did is blindly pursue a policy that ended up devliering precisely OPPOSITE to what you would seem to espouse. And we're doing the same thing in the middle east. -TD _________________________________________________________________ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

2 1

Re: Airport insanity
by Bill Stewart 20 Oct '04

20 Oct '04

At 12:18 PM 10/18/2004, James A. Donald wrote: >http://washingtontimes.com/national/20041018-124854-2279r.htm >: : Despite gaining their freedom by signing pledges to >: : renounce violence, at least seven former prisoners >: : of the United States at Guantanamo Bay, Cuba, have >: : returned to terrorism, at times with deadly >: : consequences. >: : >: : At least two are believed to have died in fighting >: : in Afghanistan, and a third was recaptured during a >: : raid of a suspected training camp in Afghanistan, >: : Lt. Cmdr. Flex Plexico, a Pentagon spokesman, said >: : last week. Others are at large. > >: : Additional former detainees have expressed a desire >: : to rejoin the fight, be it against U.N. peacekeepers >: : in Afghanistan, Americans in Iraq or Russian >: : soldiers in Chechnya. None of those things sound like terrorism to me, just basic military violence, though certainly the American and Russian militaries aren't the only ones engaging in terrorist activities in South Asia and some of these ~146 people may be among them. But most of the Warlord-vs-Warlord fighting in Afghanistan isn't terrorism, and most of the Iraqi Resistance isn't either, and I'd have expected that a staunch anti-communist like James wouldn't mind people shooting at Russian soldiers even though they're no longer Soviets. At 11:38 AM 10/18/2004, James A. Donald wrote: >Tyler Durden > > Let's just state the obvious: September 11th occurred not > > because we had a few "crazy Muslim fundamentalists" out there > > that decided they "hate our freedoms". The struck us because > > we've been fuckin' over a large swath of the Muslim (not only > > Arab) world for 100 years or so > >And the reason they are murdering Iraqi Christians, Filipinos, >Ambionese and Timorese is? While the ones murdering Iraqi Christians may be doing it out of religious hatred as well as the perception that the Americans are running a Christian crusade against the Muslim world, the Indonesian invasions of their neighbors such as East Timor are just good old nationalist expansion - the US has been funding the Indonesian military for ~40 years because they're our Anti-Communist buddies, and who cares about their human rights records. You didn't expect that behaviour to stop just because there were no longer any Commies around, did you?

5 6

test
by Riad S. Wahby 20 Oct '04

20 Oct '04

This is a test. Please disregard. [1] -- Riad S. Wahby rsw(a)jfet.org

1 0

[ISN] Worldwide Phishing Attacks May Stem from Few Sources
by R.A. Hettinga 20 Oct '04

20 Oct '04

--- begin forwarded text

1 0

[ISN] NZ jails Aussie bank hacker
by R.A. Hettinga 20 Oct '04

20 Oct '04

--- begin forwarded text

1 0

[ISN] 2-Fingerprint Border ID System Called Inadequate
by R.A. Hettinga 20 Oct '04

20 Oct '04

--- begin forwarded text

1 0

[ISN] Worldwide Phishing Attacks May Stem from Few Sources
by InfoSec News 20 Oct '04

20 Oct '04

http://www.eweek.com/article2/0,1759,1679953,00.asp By Dennis Fisher October 19, 2004 Research from an e-mail security provider suggests that a handful of people are responsible for the vast majority of the phishing attacks on the Internet and the perpetrators are using a rotating series of zombie networks to launch them. Researchers at CipherTrust Inc. analyzed more than four million e-mails collected from the company's customers during the first two weeks of October and found that nearly a third of all of the zombie machines sending the phishing messages are based in the United States. That's twice as many as the 16 percent that are found in South Korea. However, these findings do not mean that these attacks are originating from inside these countries. The global nature of the Internet allows attackers anywhere in the world to compromise machines in any location. In fact, many experts believe that the majority of phishers are in some way connected to organized crime groups in Russia or Eastern Europe and that most such attacks begin there. The most surprising conclusion of the research is that the attackers sending out the phishing messages are using zombie networks of only about 1,000 PCs. "That's a pretty small bot network for the volume of stuff that these guys are doing," said Dmitri Alperovitch, the research engineer at Atlanta-based CipherTrust Inc. who conducted the study. "But the trick is that they rotate to a different set of compromised machines each day. They don't keep going to the same ones each time." Crackers for years have been accumulating large networks of machines compromised with small programs that give them the ability to control the PCs remotely. They routinely sell or trade access to the networks to others in the cracker underground and the PCs typically are used either for launching DDoS (distributed denial of service attacks). But as authorities began cracking down on spammers in recent years, the spammers have begun relying on these networks to send out their messages, too. Now, phishers have gotten into the game. Alperovitch said that there are fewer than five operators in control of the zombie networks that he identified in his research. And, even though they're generating thousands of fraudulent e-mails every day, their output was still a tiny fraction.less than one percent--of the four million messages CipherTrust examined. Phishers seem to be concentrating their efforts on a few high-profile targets, as well. In the sample CipherTrust looked at, 54 percent of the phishing messages used CitiGroup's Citibank name to entice recipients. Another 13 percent use Citigroup Global Markets Inc.'s Smith Barney's brand and eBay Inc. is the victim in about four percent of the scams. _________________________________________ Open Source Vulnerability Database (OSVDB) Everything is Vulnerable - http://www.osvdb.org/ --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0