September 2004 - cypherpunks-legacy

Re: potential new IETF WG on anonymous IPSec
by Major Variola (ret) 17 Sep '04

17 Sep '04

At 09:09 AM 9/17/04 +0200, Thomas Shaddack wrote: >On Thu, 16 Sep 2004, Major Variola (ret) wrote: > >> At 02:17 PM 9/16/04 -0700, Joe Touch wrote: >> >Except that certs need to be signed by authorities that are trusted. >> >> Name one. > >You don't have to sign the certs. Use self-signed ones, then publish a GPG >signature of your certificate in a known place; make bloody sure your GPG >key is firmly embedded in the web-of-trust. Right. And the known "trusted" place is 0wn3d by the Man. The web of trust is a scam. Know your pharmacist.

1 0

Identifying the Traitor Among Us: The Rhetoric of Espionage and Secrecy
by Poindexter＠SAFe-mail.net 17 Sep '04

17 Sep '04

http://etd.library.pitt.edu/ETD/available/etd-07282003-132723/unrestricted/… This study approaches espionage as a knowledge-producing and knowledge-disseminating practice similar to knowledge practices such as science. The study uses investigative tools drawn from rhetoric of cience studies and applies them to intelligence and, particularly, counterintelligence work. The result provides new insight into the nderdetermination of evidence, the interdependence of disparate iscourses, and the role of espionage in American culture .

1 0

[Openswan dev] [Announce] Openswan 2.2.0 released
by R. A. Hettinga 17 Sep '04

17 Sep '04

--- begin forwarded text

1 0

Re: Geopolitical Darwin Awards
by Tyler Durden 17 Sep '04

17 Sep '04

"Ken Brown" wrote... >Prostitution industry? Well, Industry from what I understand is probably too strong a term. These seem to be individual females. And no, they ain't wearin' high heels and hot pants, so what we're talking about is very, very discrete, and sometimes for goods and services as opposed to pure $$$. But it's there, and people in general seem to know it's there. -TD _________________________________________________________________ On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

1 0

Re: Geopolitical Darwin Awards
by Tyler Durden 17 Sep '04

17 Sep '04

Hey Hey Hey! I'm not the original quoter there...watch it! -TD >From: "J.A. Terranson" <measl(a)mfn.org> >To: Tyler Durden <camera_lumina(a)hotmail.com> >CC: jamesd(a)echeque.com, cypherpunks(a)al-qaeda.net >Subject: Re: Geopolitical Darwin Awards >Date: Thu, 16 Sep 2004 15:48:01 -0500 (CDT) > > >On Thu, 16 Sep 2004, Tyler Durden wrote: > > > >They are fanatics. They expect to get a six pack of virgins. > > >And they will say "Hey, it was not us, it was these terrorists > > >who happen to have somehow stolen some nukes from persons > > >unknown. We are completely opposed to terrorism, and are fully > > >cooperating with foreign investigations." > > >This sounds like dubya, not the ayatollahs. > > >-- >Yours, > >J.A. Terranson >sysadmin(a)mfn.org >0xBD4A95BF > > "...justice is a duty towards those whom you love and those whom you do > not. And people's rights will not be harmed if the opponent speaks out > about them." Osama Bin Laden > - - - > > "There aught to be limits to freedom!" George Bush > - - - > >Which one scares you more? _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

2 1

Re: Geopolitical Darwin Awards
by Tyler Durden 17 Sep '04

17 Sep '04

"Ken Brown" wrote... >Apparently the best thing about is the lack of American tourists - just >like Cuba ;-) What! I'm deeply offended by that remark...I demand you with.... Aw fuckit. It's true. In fact, when I'm in a restaurant outside the US, I have witnessed that the food quality is inversely proportional to the number of Americans in the place. (Oh don't get me wrong...places catering to Americans will have great heaping PILES of food, but it'll be bland and tasteless, and the beer will suck.) -TD "A Big, Fat Dynamo!" -Homer Simpson >From: ken <bbrow07(a)students.bbk.ac.uk> >Reply-To: bbrow07(a)students.bbk.ac.uk >To: Tyler Durden <camera_lumina(a)hotmail.com> >CC: jamesd(a)echeque.com, cypherpunks(a)al-qaeda.net >Subject: Re: Geopolitical Darwin Awards >Date: Fri, 17 Sep 2004 13:45:18 +0100 > >Tyler Durden wrote: > >>Who, the Iranians? Which ones are fanatics? >> >>I'll grant there are some fanatics left in Iran, but Iran seems >>increasingly dominated by fairly sleezy clergy/judges. Like any >>government, theirs is deteriorating into a mere racket. And if you ask me, >>fanaticism never lasts very long anywhere, only for about a generation >>during turbulent times. Iran in particular is a special case...seems to me >>their cultural momentum will always outweigh any temporary fanaticism. A >>country that has a small but thriving prostitution industry can't be all >>that fanatical. > >Prostitution industry? > >Iran has rebooted its swimming-pool maintenance industry. > >Its just this place, you know. > >Apparently the best thing about is the lack of American tourists - just >like Cuba ;-) > _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

1 0

Symantec to acquire @Stake
by R. A. Hettinga 17 Sep '04

17 Sep '04

<http://www.siliconvalley.com/mld/siliconvalley/9682511.htm?template=content…> The San Jose Mercury News Posted on Thu, Sep. 16, 2004 Symantec to acquire digital security company CUPERTINO, Calif. (AP) - Symantec Corp. said Thursday it is acquiring digital security consulting firm stake Inc. Financial details were not disclosed. The deal is expected to close next month. Cupertino, Calif.-based Symantec is one of the world's biggest information security companies, selling consulting services and software such as the Norton AntiVirus program. The company does business with individuals and corporations in more than 35 countries. Cambridge, Mass.-based stake sells consulting services and computer programs to protect networks from hackers and other security risks. Businesses that have purchased the company's SmartRisk and other products include six of the world's top 10 financial institutions and four of the world's 10 top independent software companies. ``Our customers are looking to us for a broad range of security expertise,'' said Gail Hamilton, a Symantec executive vice president. ``By joining forces with the leader in application security consulting, we expand the capacity and capabilities of our consulting organization.'' Symantec shares rose 31 cents to close at $51.32 Thursday on the Nasdaq Stock Market. ------ On the Net: Symantec: http://www.symantec.com stake: http://www.atstake.com/ -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: potential new IETF WG on anonymous IPSec
by Major Variola (ret) 17 Sep '04

17 Sep '04

At 02:17 PM 9/16/04 -0700, Joe Touch wrote: >Except that certs need to be signed by authorities that are trusted. Name one.

3 2

Re: public-key: the wrong model for email?
by Major Variola (ret) 16 Sep '04

16 Sep '04

At 10:28 PM 9/16/04 +0200, Hadmut Danisch wrote: >Because PKC works for this Alice&Bob communication scheme. If you >connect to a web server, then what you want to know, or what >authentication means is: "Are you really www.somedomain.com?" >That's the Alice&Bob model. SSL is good for that. What makes you think verislime or other CAs are authenticating? You can't sue them, they are 0wn3d by a State (and so can issue false certs, just like States issue false meatspace IDs), etc. >If I send you an encrypted e-mail, I do want that _you_ Ed Gerck, >can read it only. That's still the Alice&Bob model. PGP and S/MIME >are good for that. What makes you think that EG is a physical entity, if you haven't met him and learned to trust him through out of band channels? >The sender of an e-mail does not need to pretend beeing a particular >person or sender. Any identity of the 8 (10?) billion humans on earth >will do it. What makes you think that, given 1e10 humans, there are 1e10 identities? Ie, why do you think there is a one-to-one mapping? >PKC is good as long as the communication model is a closed and >relatively small user group. A valid signature of an unknown sender >has at least the meaning that the sender belongs to that user group. PKC is only as good as the means by which you obtain the public key. A server, a CA, are all worthless. The emperor has no clothes, get used to it.

1 0

Phones gain coded security
by R. A. Hettinga 16 Sep '04

16 Sep '04

<http://www.vnunet.com/print/1158147> IT Week Phones gain coded security Certicom offers a cross platform security kit for handset developers Daniel Robinson, IT Week 16 Sep 2004 Cryptography firm Certicom has announced a cross-platform security toolkit for future mobile phone handsets. The Certicom Security Architecture for Mobility will provide a common programming interface for developers to access functions such as encryption across various mobile chipsets and operating systems, according to the firm. The move should speed development of handsets with better security. Certicom's Security Architecture for Mobility (CSA) builds on the company's Security Builder Middleware, a hardware abstraction layer that is optimised to work with a specific chipset or hardware platform. The first supported hardware will be Intel's Wireless Trusted Platform, which consists of security functions that are built into Intel's PXA270 series of XScale mobile chips. CSA will support this from the fourth quarter of this year, and support for other mobile platforms will follow. "Pressure for greater security is coming from enterprise customers. [Security] used to be seen as an add-on to IT systems, but lately it has been regarded as something that has to be embedded from the beginning," commented Certicom's vice-president of marketing, Roy Pereira. CSA has resulted from Certicom's collaboration with Intel on security for a major handset vendor, Pereira said. He declined to name the vendor, for commercial reasons. Handset vendors are focused on applications, not cryptography, Certicom said, and its middleware layer lets them easily build in cryptography support, shortening the development time and giving handset makers a common interface for encryption functions no matter what the underlying chipset is. "They could move their code from a basic ARM chip to a PXA270 and get a boost from the hardware support without having to rewrite," Pereira said. CSA also includes a software cryptography module for platforms that do not have on-chip encryption hardware. Other optional modules include Security Builder IPSec, a library of VPN functions for resource-constrained devices; Security Builder SSL for Secure Sockets Layer commun- ications; and Security Builder PKI for managing digital certificates. However, CSA offers more than just encryption, according to Pereira. It supports the secure boot feature of Intel's Wireless Trusted Platform, which checks the handset has not been tampered with before starting the operating system. Certicom said it would support all major handset platforms, including those with on-chip security hardware. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0