October 2004 - cypherpunks-legacy

[FoRK] Google buys Keyhole (fwd from andrew@ceruleansystems.com)
by Eugen Leitl 27 Oct '04

27 Oct '04

----- Forwarded message from "J. Andrew Rogers" <andrew(a)ceruleansystems.com> -----

1 0

"Spam Kings" Released by O'Reilly
by R.A. Hettinga 27 Oct '04

27 Oct '04

--- begin forwarded text

1 0

US Bancorp teams up with VeriSign on banking security
by R.A. Hettinga 27 Oct '04

27 Oct '04

>The bank will use VeriSign's Unified Authentication service to validate >and secure interactions with commercial banking customers, providing them >with a secure USB token that they must use when accessing services online. >Those tokens will hold a digital certificate that identifies the bearer >and will need to be inserted into machines before accessing web-based >commercial banking applications, Lin said. <http://www.computerweekly.com/print/ArticlePrinterPage.asp?liArtID=134593&l…> Printed from ComputerWeekly.com Technology: Security Products Wednesday 27 October 2004 US Bancorp teams up with VeriSign on banking security US Bancorp will use a hardware-token based authentication service from VeriSign to secure access to commercial banking services for its customers. The bank will use VeriSign's Unified Authentication service to validate and secure interactions with commercial banking customers, providing them with a secure USB token that they must use when accessing services online. The deal is just the latest evidence of renewed interest in so-called "multifactor" authentication within the banking industry, which is struggling with an epidemic of sophisticated online identity theft scams, according to Judy Lin, executive vice-president for VeriSign's security services. As part of the programme, US Bancorp will make VeriSign security tokens available to more than 10,000 commercial banking customers. Those tokens will hold a digital certificate that identifies the bearer and will need to be inserted into machines before accessing web-based commercial banking applications, Lin said. The Unified Authentication service combines VeriSign-branded eToken USB authentication devices from Aladdin Knowledge Systems with a managed validation service that runs on VeriSign's infrastructure. It also includes software modules that plug into a bank's existing back-end infrastructure. Banks can also choose to operate their own validation server as part of the service, Lin said. At US Bancorp, the authentication service will be integrated with existing user directory and identity management technology, validating interactions between the bank and its customers. A server operated by VeriSign will handle token validation, but no customer information will leave US Bancorp's network in the process, she said. VeriSign launched the Unified Authentication service in September as an extension of its Intelligence and ControlSM Services, which offer businesses network security information and tools. User login and permission information resides in the customer's user directory, but is linked to a unique serial number for a secure token or other authentication device stored on a VeriSign server. Login requests by users will be passed to the VeriSign server, where a stored algorithm will validate that the serial number of the secure token or the one-time password is valid for the user requesting access, VeriSign said. US Bancorp is the eighth largest bank in the US. The bank is looking into a similar programme for its consumer banking customers, although such a service would likely forgo use of USB hardware tokens, which can cost $20 or more each. Instead, inexpensive solutions such as plastic cards with lists of single-use passwords could be employed, she said. Paul Roberts writes for IDG News Service ) 2004 ComputerWeekly.com Ltd. All rights reserved -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

New 32-bit SIM Chip from STMicroelectronics
by R.A. Hettinga 27 Oct '04

27 Oct '04

>The core includes dedicated DES (Data Encryption Standard) instructions >for Secret Key cryptography, and a fast Multiply and Accumulate >instruction for Public Key (RSA) and Elliptic Curve cryptography, plus a >CRC (Cyclic Redundency Check) instruction. A firmware cryptographic >subroutine library is located in a secure ROM area to save designers the >need to code first-layer functions. <http://www.tmcnet.com/usubmit/2004/Oct/1087666.htm> Technology Marketing Corporation TMCNet [October 27, 2004] New 32-bit SIM Chip from STMicroelectronics Will Benefit Mobile Phone Multimedia Services GENEVA, Oct. 27 /PRNewswire-FirstCall/ -- STMicroelectronics has announced a new smartcard MCU in its ST22 range -- based on the SmartJ(TM) Java-accelerated RISC architecture -- which integrates 256-kbytes of EEPROM memory with a high performance CPU to support the demands of multimedia applications on the latest mobile phones. With sales of multimedia-equipped handsets booming, mobile communications operators supporting 3G (Third Generation) and 2.5G mobile phones need (U)SIM cards (Universal Subscriber Identity Modules) that have sufficient memory capacity to store Multimedia Messaging System (MMS) data, video, and photographic images, coupled with the capability to transfer and use this data efficiently to provide advanced phonebooks and audio-visual services. 2.5G is an intermediate level of service that uses an enhanced second-generation technology to provide some of the 3G features over GPRS (General Packet Radio Service). "The ST22N256 is perfectly in line with the growing demand for secure high-performance chips with high-speed interfaces and a large memory capacity, for use in 2.5 and 3G SIMs," said Reza Kazerounian, General Manager of ST's Smart Card ICs Division. "ST already offers the largest range of secure 32-bit processors for smartcard systems, and will remain at the forefront of smartcard silicon suppliers as 3G takes off." The SmartJ CPU core at the heart of ST22 Family -- which the new ST22N256 now combines with 256-kbytes of EEPROM -- is a 32-bit RISC-architecture core developed specifically to provide very fast execution of Java, the programming language commonly used for small applications, or applets, downloaded to mobile phones. The ST22 augments its own highly efficient native RISC instruction set with a hardware decoder that directly converts Java bytecodes into native microcode instructions, thereby eliminating the overhead and lower performance of processors based on Java emulation. The result is not only very fast Java execution but also reduced power consumption. An essential component of all GSM (Global System for Mobile Communications) mobile phones, the SIM card stores critical subscriber authentication information; private data such as personal phone directories, messages, audio, and images; and the operating system and operator's multimedia environment. With the quantity and size of users' MMS messages increasing, operators will now be able to provide increased storage for subscriber data without impacting user friendliness, due to the exceptional performance of the ST22N256's SmartJ processor, and its communication through a fast Asynchronous Serial Interface (ASI) which enables 440-kbit/s communication speeds with mobile equipment, in line with the fastest deployments of ISO 7816 in the GSM world. Two additional serial I/O ports are also provided. The Java-accelerated CPU ensures that the ST22N256 not only provides the memory needed for today's multimedia services (M-services), but also the processing power to exploit it. The core, with 24-bit linear memory addressing, is complemented by 368-kbytes of on-chip ROM, 16-kbytes of RAM, and a set of standard peripherals and custom plug-in circuits. Logical and physical security mechanisms are fully integrated into the silicon, including a hardware Memory Protection Unit for application firewalling and peripheral access control, and a protected Context Stack. The core includes dedicated DES (Data Encryption Standard) instructions for Secret Key cryptography, and a fast Multiply and Accumulate instruction for Public Key (RSA) and Elliptic Curve cryptography, plus a CRC (Cyclic Redundency Check) instruction. A firmware cryptographic subroutine library is located in a secure ROM area to save designers the need to code first-layer functions. The ST22 product platform is supported by a comprehensive Integrated Development Environment, which allows coding, compilation, and debugging using a common interface. It provides a code-generation chain that includes a C/C++ compiler, a native and JavaCard assembler and a linker, plus a SmartJ instruction set simulator, C/C++ source level debugger, and hardware emulation tools. Operating System developers currently working with the 128-kbyte ST22L128 will be able to benefit from the design continuity offered by the ST22N256, as well as its immediate availability and compliance with the fastest communication standard adopted by handset manufacturers. The SmartJ development methodology allows customers to significantly reduce the time and cost of developing secure applications. It supports concurrent hardware and software development, multiple development teams and IP reuse, as well as security evaluation to the Common Criteria and the use of formal methods for security assurance through executable high-level specifications and model checking techniques. Development of the ST22N256 follows more than 20 years' experience in the design of silicon products to the highest levels of security. ST is a major manufacturer for the smartcard market, and is the number one supplier of secure ICs to the financial sector for card applications. Over the years it has evolved a "security culture" across design and manufacturing functions, in addition to meeting the stringent requirements of formal security certification. The ST22N256 is manufactured using 0.15-micron technology, and is currently the only secure IC to combine 32-bit processing power with 256- kbytes of EEPROM and 368-kbytes of ROM. It is available in sample form now, with volume production starting 2005. US pricing for the product is between $4 and $5, depending on quantity and final packaging. About STMicroelectronics STMicroelectronics is a global leader in developing and delivering semiconductor solutions across the spectrum of microelectronics applications. An unrivalled combination of silicon and system expertise, manufacturing strength, Intellectual Property (IP) portfolio and strategic partners positions the Company at the forefront of System-on-Chip (SoC) technology and its products play a key role in enabling today's convergence markets. The Company's shares are traded on the New York Stock Exchange, on Euronext Paris and on the Milan Stock Exchange. In 2003, the Company's net revenues were $7.24 billion and net earnings were $253 million. Further information on ST can be found at http://www.st.com/. For further information, please contact INVESTOR RELATIONS: Stanley March Fabrizio Rossini Benoit de Leusse Vice President Senior Manager Director Investor Relations Investor Relations Investor Relations Tel: +1.212.821.89.39 Tel : +41.22.929.69.73 Tel : +41.22.929.58.12 Fax : +1.212.821.89.23 Fax : +41.22.929.69.61 Fax : +41.22.929.69.61 Email: Email: Email: stan.march(a)st.com fabrizio.rossini(a)st.com benoit.de-leusse(a)st.com MEDIA RELATIONS: Maria Grazia Prestini Michael Markowitz Director, Corporate Media Relations Director, U.S. Media Relations Tel: +41.2.29.29.69.45 Tel: +1.212.821.8959 Fax: +41.2.29.29.69.50 Fax: +1.212.821.8922 Email: mariagrazia.prestini(a)st.com Email: michael.markowitz(a)st.com STMicroelectronics CONTACT: INVESTORS: Stanley March, Vice President, Investor Relations,+1-212-821-89-39, or fax, +1-212-821-89-23, stan.march(a)st.com, or FabrizioRossini, Senior Manager, Investor Relations, +41-22-929-69-73, or fax,+41-22-929-69-61, fabrizio.rossini(a)st.com, or Benoit de Leusse, Director,Investor Relations, +41-22-929-58-12, or fax, +41-22-929-69-61,benoit.de-leusse(a)st.com; or MEDIA: Maria Grazia Prestini, Director, CorporateMedia Relations, +41-2-29-29-69-45, or fax, +41-2-29-29-69-50,mariagrazia.prestini(a)st.com, or Michael Markowitz, Director, U.S. MediaRelations, +1-212-821-8959, or fax, +1-212-821-8922, michael.markowitz(a)st.com,all of STMicroelectronics Web site: http://www.st.com/ [ Back To TMCnet.com's Homepage ] -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Deadline extended to November 5th - Fourth Annual PKI R&D Workshop
by R.A. Hettinga 27 Oct '04

27 Oct '04

--- begin forwarded text

1 0

Re: US Retardation of Free Markets (was Airport insanity)
by Tyler Durden 27 Oct '04

27 Oct '04

Well, perhaps your comment was made entirely toungue-in-cheek, but I still think you're missing the point. The point is this: Almost and "side" in this world that has committed or commits atrocities can find a true-believing apolegist. And in most cases the best of these can concoct an answer to anything you throw at him. As far as I'm concerned, that's the whole point of going through this excersize (ie, of finding a way to rationalize pretty much ANY form of violence/terrorism.) The danger comes when a nation (ie, the guys who control the guns) is run by the apolegists, or people who hold similar viewpoints. Put in another way, just because you really really REALLY believe you are right doesn't give anyone the right to create huge amounts of turmoil and death in someone else's country. -TD >From: "James A. Donald" <jamesd(a)echeque.com> >To: "cypherpunks(a)al-qaeda.net" <cypherpunks(a)al-qaeda.net> >Subject: Re: US Retardation of Free Markets (was Airport insanity) >Date: Mon, 25 Oct 2004 14:59:56 -0700 > > -- >J.A. Terranson: > > > > So if I was to go out tomorrow and spread 2000 curies of > > > > Ci into the local subway system "As payback for Ruby > > > > Ridge", this would not be an act of terrorism? > >James A. Donald: > > > That would be terrorism, because regardless of what you > > > *said* your intent was, you would not be targeting those > > > responsible for Ruby Ridge. > >J.A. Terranson: > > And if the station I chose just happened to be the one > > servicing ATF? > >If your intent was to nail passing BATF employees, surely >hitting closer to their office would be more effectual. Spray >some radioactives in the entrance lobby. > > --digsig > James A. Donald > 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG > KWVunJBmZ52AZSOdaQb2Q5Zoz2Crn5g0U31NRSlo > 4iLTYoVpo0AgmiEow46ObxjN4dPkqPP6I0kKDTG+9 _________________________________________________________________ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

5 8

Re: US Retardation of Free Markets (was Airport insanity)
by Tyler Durden 26 Oct '04

26 Oct '04

>Moral equivalence, the rationale of those who defend tyranny >and slavery. Exactly. -TD > > > --digsig > James A. Donald > 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG > 9UPtpcIvFgtu2JFnBNLIA/QPpXk7MkK68mtvmQya > 45I4CX0wox3d7YrExie7R1Q+2YFGk2ao4amh5DlM6 _________________________________________________________________ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

1 0

US Retardation of Free Markets (was Airport insanity)
by Tyler Durden 25 Oct '04

25 Oct '04

>On 18 Oct 2004 at 15:31, Tyler Durden wrote: > > Aside from that, your posts are completely saturated with the > > "They're more evil than we are therefore it's OK for us to be > > fuckin them over" logic. > >They are more evil that we are, as demonstrated by their >propensity to kill all sorts of people, including each other, >and including us. This forces us to do something violent. >Imposing democracy on Iraq at gunpoint was probably a bad idea, >but it was selected as the option that would raise the least >objection. Any more effectual measure is going to piss you lot >off even more. A more effectual measure and considerably less >costly measure would have been to confiscate Iraq's and Saudi >Arabia's oil reserves, and ethnically cleanse all male muslims >above the age of puberty from the oil bearing areas. This >democracy stuff did not work in Haiti and things look >considerably more difficult, and more expensive, in Iraq. Well, let's dig into this. It appears on the surface to harbour a lot of the common myths shared in the hallowed corridors of DC. Most Cypherpunks would agree that free markets are a good thing. Basically, if you leave people alone, they'll figure out how to meet the needs that are out in there and, in the process, get a few of the goodies available to us as vapors on this world. I assume you would agree to this. That said, the question is whether American interference abroad has helped or possibly greatly hindered the formation of free markets. And I think the verdict is beocmming increasingly clear that American interference hurts free markets. Of course, there are the arguable exceptions: Post-war Germany and Japan, but these countries not only had a strong history of free markets at the time they both ahd large corporations and a rapidly modernizing infrastrcture. In developing markets the US track record is terrible. The more we interfere and set up puppet governments and petty dictators, the result has always been the near elimination of any kind of real modern economy. More than that, some of the countries we've been kicked out or prevented from influencing have been modernizing rapidly, the most obvious example is China and Vietnam. Bolivia is interesting to watch. One could in fact argue that the faster a country removes our shadowy "help", the sooner they can get on their own two feet and start developing. In this light, US influence starts to look like it's on some levels designed to quash the local development of modern industrialization and perhaps this is no suprise: We don't really want the competition. In the long run this is unsustainable, and can only lead to even bigger September 11ths. under there and examine the substance of what he's saying. -TD _________________________________________________________________ Is your PC infected? Get a FREE online computer virus scan from McAfee. Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

5 10

Re: Donald's Job Description
by John Kelsey 25 Oct '04

25 Oct '04

>From: Tyler Durden <camera_lumina(a)hotmail.com> >Sent: Oct 25, 2004 9:40 AM >To: measl(a)mfn.org >Cc: adam.cypherpunks(a)fastmail.fm, cypherpunks(a)al-qaeda.net >Subject: Re: Donald's Job Description >Well, the Bush "supporters" I've met aren't normally so sure. They'll kind >of hem and haw, or saw "Well, he's got advisors...", or "Well, Kerry ain't >any better." Once in a while they'll point to Buh's believability or >decisiveness, but I've never seen anyone (besides Mr Donald) attempt the >role of super-apolegist for anything the current regime has done. This is my experience, too. Bush supporters I know prefer him to Kerry, not because he's a great and infallable leader, but because they think he's doing a reasonable job relative to what Kerry would do. It's not like this is an entirely nutty position to take, since Kerry really does seem to blow a lot of smoke when talking about Iraq, albeit less than Bush does. ... --John

1 0

Proxy trading thriving at DSM bourse
by R.A. Hettinga 25 Oct '04

25 Oct '04

<http://www.menafn.com/qn_print.asp?StoryID=67783&subl=true> MENAFN - Middle East North Africa . Financial Network Proxy trading thriving at DSM bourse The Peninsula - 25/10/2004 Doha: DSM officials have urged Qataris not to encourage outsiders to indulge in proxy trading, as demand for identity (ID) cards of nationals and power of attorney issued by them, is said to be increasing in view of the forthcoming mega public issue of Qatar Gas Transport Company (QGTC). According to Al Sharq, there is a thriving black market as demand for ID cards of Qataris for proxy subscription to QGTC issue to be launched in January next year, is picking up fast. Al Sharq quoted DSM sources as saying there are many takers for ID cards of Qataris for the initial public offering of QGTC set for floatation on January 16, 2005. DSM sources told The Peninsula yesterday that some rich investors from Kuwait, UAE and Saudi Arabia were coming to Qatar and persuading some nationals to lend their as well as their family members' ID cards for the purpose of proxy trading. According to DSM rules, a national can sign a power of attorney endorsed by the legal documentation department at the Ministry of Justice authorising a relative, a friend or a foreign partner to buy shares in his name. "This facility we have in place considering that a Qatari cannot be expected be physically present in Doha all the time, so he has the right to appoint a nominee for purchasing or selling local stocks," a DSM source told The Peninsula. In case the stocks are to be sold, a separate power of attorney is issued authorising a relative or friend, who could be a non-Qatari. However, the cheque (of the amount of sale proceeds) is issued by a broker only in the name of the Qatari buyer of the shares concerned. The cheque is not bearer, so the money is transferred to the bank account of the national. It is okay as long as an ID of a Qatari and the power of attorney issued by him or her is for genuine reasons. But the problem is that some Qataris are being offered large sums by outsiders, especially some rich investors from neighbouring countries, for using their ID cards for proxy trading, DSM sources said. Lending an ID and giving a power of attorney for the purpose of proxy trading is not only illegal but also hurts the interest of small Qatari investors, a DSM source said. "That is why we are urging nationals not to encourage this trend. Instead of violating law and looking for easy money Qataris should take loans from local banks and invest in stocks themselves," the source added. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0