September 2006 - cypherpunks-legacy

Your lucky day?
by Simon Workman 10 Sep '06

10 Sep '06

S1otzcity Caslno is the best in the industry because we offer: * $10O0 FREE to new depositors (0t1dq) * Fast Payouts (8mqjs) * 24-hour support (wrbieyn) * Exciting games (q8pm48) * A complete and SAFE gaming experience (chuuk4k) Give us a try! Remember, Free $1OOO is ON THE HOUSE! Start Winning Now http://compassionate.net.dodahloman.com/e/22

1 0

Masters Based on Working Experience tQMLE
by Irving Britton 10 Sep '06

10 Sep '06

Obtain your diploma, bachelors' or Masters' in 2 weeks time from prestigious non-accredited universities based on your present knowledge and life experience. No tests, exams or classes require. Call us now to receive yours today! 1-484-693-8861 Confidentiality Assured Available worldwide tZ6

1 0

Exactly the same quality with lower prices.
by Luther Berk 10 Sep '06

10 Sep '06

1 0

Feel younger than ever before Sun, 10 Sep 2006 02:42:55 -0400
by Neal Keen 10 Sep '06

10 Sep '06

1 0

Vaiggra and Cailiis Offfers
by Darwin Craft 10 Sep '06

10 Sep '06

Looking for quality me ds at affordable price? We have widest range of me ds at very competitive price. Money baack gauaranteesss... http://nqhakl.higdal.net/?67130032 XoQ

1 0

Trusted Computing in Vista BitLocker
by lcs Mixmaster Remailer 09 Sep '06

09 Sep '06

With its release of Vista, Microsoft is taking a step forward in exploiting the controversial Trusted Computing technology. For the first time outside of a research setting, the "sealed storage" feature of Trusted Computing will be used in a way that can potentially restrict user access to data. Trusted Computing relies on the TPM chip to take a "fingerprint" of the system configuration as it boots. During the PC boot process, which consists of several stages, each stage hashes the next one, storing the results into the TPM. At the end of this process the TPM's Platform Configuration Registers (PCRs) contain hashes of the data that was involved in booting. Sealed storage is data encrypted to a TPM key, and locked to the values in one or more PCRs. The TPM will only decrypt the data if the current PCR values match what was specified when the data was encrypted. This insures that sealed data can only be decrypted if the system is booted into a specified configuration. Changes to the boot configuration, either by altering the BIOS, changing the Master Boot Record, booting to an external device like a floppy, CDROM or external disk, and similar alterations, will result in different PCR values and prevent the TPM from unsealing data. Vista's new disk encryption software, called BitLocker, optionally uses this feature of the TPM to strengthen its encryption. For example, consider various attack models for disk encryption. A laptop is stolen and the attacker now seeks to decrypt the disk and recover the data. The first step often applied in this situation is to take an image of the disk and run the attacks on that image, from a computer controlled by the attacker. This prevents the laptop OS from performing self-destruct operations or otherwise keeping the attacker from being able to reset the disk to a pristine state. But with BitLocker, the disk decryption key is sealed to a TPM key (a 2048 bit RSA key). No amount of brute force password guessing will work to recover a key from a disk image; the TPM chip itself has to be involved. An alternative for an attacker, then, might be to use the laptop itself but to boot into another OS, such as via a Linux "Live CD" or external device. It can then mount the partitions with the encrypted data and apply similar attacks. This will give access to the TPM hardware while still preventing the BitLocker software from having control. Again, the BitLocker design will thwart this attack, because the sealed storage locks the encrypted disk key to the boot configuration. Changing that configuration by booting into another OS will change PCR values and prevent the TPM from unlocking the key, even if the correct password is used. The attacker is then forced to build a robot that can type on the keyboard, or a special electronic circuit that can tap into the cable connecting the keyboard to the computer and can mimic key presses. Even then, TPM chips have features to limit the feasibility of password guessing, and will shut down or slow down when too many wrong guesses are entered. Overall, the BitLocker design appears to be a good application for TPM based sealed storage, exploiting this technology to greatly improve resistance to typical attacks against disk encryption. However there is a side effect of this design which may have implications for Microsoft's competitive strategy in the future. Because BitLocker locks the disk key to the boot sequence, any dual-boot system that uses this capability will not be able to decrypt the encrypted data when the alternate OS is booted. Users who want to share their PC data between Vista and Linux will not be able to use this advanced BitLocker capability. For years, compatibility between Windows and Linux has been limited, ever since Microsoft migrated to the undocumented NTFS file system. Gradually this situation has improved as Linux developers have reverse engineered NTFS, and now many Linux distributions ship with at least read-only support for NTFS file systems. This is a benefit for Linux and improves its usability and compatibility. BitLocker changes this game once again and throws up an enormous roadblock against allowing Linux and Vista operating systems to coexist and cooperate on the same computer. Looking forward, we could imagine a time when BitLocker encryption via the TPM is the default for new systems shipped with Vista installed. This would provide the kind of "security by default" often demanded by independent experts and would indeed arguably be a boon for typical users. The problem would be that any such user who wanted to experiment with Linux would find that his Vista data was off limits unless he decrypts his disk. BitLocker, especially if it becomes more widely fielded and used, could play a significant part in slowing the deployment of Linux and similar alternative operating systems. It is a small step towards the widely discussed Trusted Computing tradeoff of users accepting limitations on how their data can be accessed, in exchange for improved security and protection of that data. Given the magnitude and importance of these issues, it will be especially interesting to see how this element of Vista technology is received as the new OS is rolled out.

3 3

Feel younger than ever before Sat, 9 Sep 2006 18:19:45 -0500
by Kelley Ortiz 09 Sep '06

09 Sep '06

1 0

A Real College Qualification - In only fifteen day
by Nadine Stpeter 09 Sep '06

09 Sep '06

Ever imagined that the only thing stopping you from a better occupation and increased wage was a couple of letters behind your name and surname? Well now you can get them! BSc MA MSc MBA PhD BA Within 2 weeks! No Study Needed! OneHundred % Verifiable! These are real, genuine degrees that include Bachelors, Masters and Doctorate degrees. Those are 100% verifiable and student records and transcripts are available as well. This secretlittle secret has been kept quiet for years. The possibilityexists due to a legal loophole allowing some established colleges to award degrees at their own discretion. Get yours today. Just call the number below. You'll thank me later. +1 - EIGHT THREE ONE - THREE ZERO ZERO - 6 6 4 THREE

1 0

Absolutely no need to to purchase high price medications.
by Loren Ronan 09 Sep '06

09 Sep '06

1 0

[Clips] Biometric bonanza
by R.A. Hettinga 09 Sep '06

09 Sep '06

--- begin forwarded text Delivered-To: rah(a)shipwright.com Delivered-To: clips(a)philodox.com Date: Sat, 9 Sep 2006 10:09:35 -0400 To: Philodox Clips List <clips(a)philodox.com> From: "R.A. Hettinga" <rah(a)shipwright.com> Subject: [Clips] Biometric bonanza Reply-To: clips-chat(a)philodox.com Sender: clips-bounces(a)philodox.com <http://www.cleveland.com/printer/printer.ssf?/base/opinion/1157791091303420…> The Cleveland Plain Dealer Cleveland.com Biometric bonanza There's money to be made bringing security up to date, but Americans will find that privacy just isn't in the cards Saturday, September 09, 2006 Identity technology that once was film fantasy is about to become part of our lives. Credit approved not on a card, but on the scan of a fingerprint. Hospital medications dispensed not according to instructions on a bedside chart, but from those on a patient's computer chip. Banking transactions conducted not on a signature, but on the reading of an iris. And - oh, yes - the driving reason for this sea change in personal identification will be national security. Welcome to the Fearful New World, where real and perceived needs for increased security meet the technological ability to provide it. And the burgeoning biometrics industry is more than willing to sell us the rope by which privacy may be hanged. The Washington Post recently laid out this nexus of profit and protection. It will be driven by the replacement in a few months of federal employees' ID cards. The cards, with similar versions planned for transportation workers, first responders and foreign visitors, will have fingerprints and a computer chip with the capacity to hold far more information than will be necessary for positive identification. That will involve perhaps $8 billion in identity-related contracts, a prospect that has companies from major technology providers down to plastic card providers slavering at the potential market. But that's chump change compared to what could come: the reinvention of the driver's license and state identity cards. Ordered by Congress in the Real Identity Act last year, the redesign will have to meet standards yet to be set by the Department of Homeland Security. Estimates are that the new documents won't demand all of the biometrics included in the federal IDs - at least, several states have expressed hope that they won't. But the technology is ready to apply, and not only national security forces have an interest in its use. Banks may lobby for secure cards that would guarantee the identities of their patrons. Retailers already are working on fingerprint identification of credit-using customers. Hospitals want identity systems that might better prevent treatment mix-ups. They and many other groups that want more positive identification are prepared to lobby long and hard for their concerns to be included in whatever demands Homeland Security finally makes. The one common document that could provide all of this and more is the hitherto lowly driver's license or state identity card, long a low-tech, insecure, readily misused piece of identification. The result, by any other name, will be a national identity card, long the bane of Americans who treasure the disappearing penumbra of privacy. The best hope privacy-seekers have against the massing identity forces is legislation that will strictly limit what information they must carry, allow the bearer immediate access to the card's information so that imbedded mistakes can be corrected, and severely punish its misuse. Beyond that, there's little hope that the infamous World War II movie line, "your papers, please," won't become a bitterly ironic tag line to the war against terrorism. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Clips mailing list Clips(a)philodox.com http://www.philodox.com/mailman/listinfo/clips --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0