July 2018 - cypherpunks-legacy

Piercing network anonymity in real time
by leichter_jerrold＠emc.com 06 Jul '18

06 Jul '18

eTelemetry Locate [Image] Locate dynamically discovers, correlates and archives the person behind the IP address--"the people layer"--to expedite forensic investigations and help comply with SOX. It approaches the issue of how to match a name to a network device from the identity side, a change from 802.1x and NAC methodologies. The Locate appliance sits passively on the network and analyzes packets in real time to garner ID info from sources like Active Directory, IM and e-mail traffic, then associates this data with network information. Once Locate is populated, IT can disconnect an individual with one click at the switch port level, a powerful tool for enforcing policy and halting the spread of infections. You also can connect to an end user's computer without asking for an IP address, track assets dynamically, stay in sync with Active Directory and other LDAP directories automatically, and archive network activity for forensic investigations. etelemetry.com/pdf/Interop_finalist_final.pdf -- Jerry --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: [tor-talk] Anonymous Publishing Is Dead.
by antispam06＠sent.at 06 Jul '18

06 Jul '18

On Sun, Jul 1, 2012, at 15:38, Gregory Maxwell wrote: > When I decided to publish a large collection (30gb) of previously > paywalled (but public domain) JSTOR documents[1] I initially planned > to do so anonymouslyb simply to mitigate the risk of harassment via > the courts. Ultimately, after more consideration I decided to publish > with my name attached and I think it made more of an impact because I > did so (even though quite a few journalists reported it as though it > were a pseudonym)b though if I didn't have even the prospect that I > could publish anonymously I can't say for sure that I would have > started down that road at all. Bravo! I would have done it anonymously anyway. > It's also the case that non-text documents can trivially break your > anonymityb overtly in the case of things like pdf or exif metadata, or > more subtly through noise/defect fingerprints in images. I think I can > fairly count myself among the most technically sophisticated parties, > and yet even I'm not confident that I could successfully publish > anything but simple text anonymously. That is a MAJOR issue with anonymity. But you are mistaken: not only text, but HTML / XML can be clean with a careful, but fast examination. Also the derivates like EPUB. Otherwise, hairy and badly written standards always will have places to watermark. Imagination is the limit. That goes for PDF for example. Most of the watermarks could fall with a succession of conversions which will degrade the quality of the document, but will erase the less imaginative watermarks (say PDF -> DJVU -> PDF). To downright criminal formats like .DOC which are ready to store information about your configuration and private document path. You could, for example, process PDFs or scans through Abbyy Finereader which is quite fast and reliable. The OCR results will discard part of the image fingerprinting if not all and also the metadata. > So I think that the problems for anonymous publication on the Internet > are actually a subset of a greater problem that there is little > independence and autonomy in access to publishing online. You can't > _effectively_ publish online without the help of other people, and > they're not very interested in helping anonymous people, presumably > because the ratio of trouble to profit isn't good enough. That's because the major players of the Internet are LIVING out of selling data to third parties. An anonymous individual is not a liability as they declare, but a loss of revenue. Still, at the time, they can't really verify everybody so a lot of people just slip in. But Google and Facebook are pretty decided to close this gap ASAP. And the less than very big players still can get a nice income out of selling data, or are plain careless. Myself I'm amazed of how many sites are ready to share their data with Facebook or Google for free. > (2) Improve the security and useability of things like freenet and > hidden services, so that they are usable for publication directly and > provide strong anonymity. That is very hard to achieve. Once things become a few clicks away carelessness shows its head. And people are already so very used to give their private data expecting someone else to take care and hide it. And it takes a few more steps in terms of thinking than the regular ways. Because it's not enough to buy a new GSM prepaid card in order to receive calls from a third party. Because the phone in which you use the card has a serial number that is already associated with an identity. Because nobody from the botherb life can use that number for a chat. Because you can't spend those extra credits just about to expire by midnight talking with your dear mother. Because mobile phones reveal location. Wikileaks had the advantage of filtering data and protecting the source. But they could not protect Bradley from talking too much with a mercenary. People publishing themselves is a huge risk. And that without couting people trained to find out stuff. It can be as easy as a couple of exchanged comments. _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Anonymous Publishing Is Dead.
by antispam06＠sent.at 06 Jul '18

06 Jul '18

On Sun, Jul 1, 2012, at 15:38, Gregory Maxwell wrote: > When I decided to publish a large collection (30gb) of previously > paywalled (but public domain) JSTOR documents[1] I initially planned > to do so anonymouslyb simply to mitigate the risk of harassment via > the courts. Ultimately, after more consideration I decided to publish > with my name attached and I think it made more of an impact because I > did so (even though quite a few journalists reported it as though it > were a pseudonym)b though if I didn't have even the prospect that I > could publish anonymously I can't say for sure that I would have > started down that road at all. Bravo! I would have done it anonymously anyway. > It's also the case that non-text documents can trivially break your > anonymityb overtly in the case of things like pdf or exif metadata, or > more subtly through noise/defect fingerprints in images. I think I can > fairly count myself among the most technically sophisticated parties, > and yet even I'm not confident that I could successfully publish > anything but simple text anonymously. That is a MAJOR issue with anonymity. But you are mistaken: not only text, but HTML / XML can be clean with a careful, but fast examination. Also the derivates like EPUB. Otherwise, hairy and badly written standards always will have places to watermark. Imagination is the limit. That goes for PDF for example. Most of the watermarks could fall with a succession of conversions which will degrade the quality of the document, but will erase the less imaginative watermarks (say PDF -> DJVU -> PDF). To downright criminal formats like .DOC which are ready to store information about your configuration and private document path. You could, for example, process PDFs or scans through Abbyy Finereader which is quite fast and reliable. The OCR results will discard part of the image fingerprinting if not all and also the metadata. > So I think that the problems for anonymous publication on the Internet > are actually a subset of a greater problem that there is little > independence and autonomy in access to publishing online. You can't > _effectively_ publish online without the help of other people, and > they're not very interested in helping anonymous people, presumably > because the ratio of trouble to profit isn't good enough. That's because the major players of the Internet are LIVING out of selling data to third parties. An anonymous individual is not a liability as they declare, but a loss of revenue. Still, at the time, they can't really verify everybody so a lot of people just slip in. But Google and Facebook are pretty decided to close this gap ASAP. And the less than very big players still can get a nice income out of selling data, or are plain careless. Myself I'm amazed of how many sites are ready to share their data with Facebook or Google for free. > (2) Improve the security and useability of things like freenet and > hidden services, so that they are usable for publication directly and > provide strong anonymity. That is very hard to achieve. Once things become a few clicks away carelessness shows its head. And people are already so very used to give their private data expecting someone else to take care and hide it. And it takes a few more steps in terms of thinking than the regular ways. Because it's not enough to buy a new GSM prepaid card in order to receive calls from a third party. Because the phone in which you use the card has a serial number that is already associated with an identity. Because nobody from the botherb life can use that number for a chat. Because you can't spend those extra credits just about to expire by midnight talking with your dear mother. Because mobile phones reveal location. Wikileaks had the advantage of filtering data and protecting the source. But they could not protect Bradley from talking too much with a mercenary. People publishing themselves is a huge risk. And that without couting people trained to find out stuff. It can be as easy as a couple of exchanged comments. _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

[fc-announce] Financial Crypto and Data Security 2010:
by Radu Sion 06 Jul '18

06 Jul '18

Announcing 3 Co-located Workshops Dear Colleagues, We are glad to announce 3 workshops co-located with the Financial Cryptography and Data Security. Workshop on Real-Life Cryptographic Protocols and Standardization https://www.nec.co.jp/rd/en/event/RLCPS10.html Paper Submission Deadline: October 2, 2009, midnight PST As a fruit of modern cryptographic research, we have seen many cryptographic primitives such as public-key encryption and digital signature algorithms deployed in real life systems, and standardized in many international organizations such as ISO, ITUT, IEEE, IETF, and many others. We have also seen some cryptographic protocols as well, such as key distribution and entity authentication, and some dedicated protocols for limited purpose systems. This workshop aims to bring researchers and engineers together to share their experiments regarding the design of cryptographic primitives and protocols deployed in real life systems. These schemes may not be published in current conferences due to the perceived lack of novelty of their core design components. However, the process of designing the best suitable protocol in the presence of hardware and software limitations in a real life system is worth sharing. This workshop also aims to stimulate discussions on standardizing cryptographic protocols. Workshop on Ethics in Computer Security Research (WECSR 2010) http://www.cs.stevens.edu/~spock/wecsr2010/ Submissions Due: October 15, 2009, 11:59pm, EDT (UTC-4) Computer security often leads to discovering interesting new problems and challenges. The challenge still remains to follow a path acceptable for Institutional Review Boards at academic institutions, as well as compatible with ethical guidelines for professional societies or government institutions. However, no exact guidelines exist for computer security research yet. This workshop will bring together computer security researchers, practitioners, policy makers, and legal experts. This workshop solicits submissions describing or suggesting ethical and responsible conduct in computer security research. While we focus on setting standards and sharing prior experiences and experiments in computer security research, successful or not, we tap into research behavior in network security, computer security, applied cryptography, privacy, anonymity, and security economics. This workshop will favor discussions among participants, in order to shape the future of ethical standards in the field. It will be co-located with the Fourteenth International Conference on Financial Cryptography and Data Security 2010. Workshop on Lightweight Cryptography for Resource-Constrained Devices http://www.wlc2010.udl.cat/ Paper submission: September 30, 2009 Lightweight devices like smart cards and RFID tags are at the core of novel emerging technologies in the information society. These devices must be cheap so as to permit their cost-effective massive manufacturing and deployment. Unfortunately, their low-cost limits their computational power. Other devices, like nodes of sensor networks suffer from an additional constraint, namely, their limited battery life. Secure applications designed for these devices can not make use of classical cryptographic primitives designed for full-fledged computers. In this sense, research on low-cost cryptography is fundamental. This workshop aims to be a forum for the presentation and discussion of current research on different topics related to low-cost cryptography, from cipher design to implementation details. ------------------------------------------------------------------ Financial Cryptography and Data Security Tenerife, Canary Islands, Spain 25-28 January 2010 http://fc10.ifca.ai Financial Cryptography and Data Security is a major international forum for research, advanced development, education, exploration, and debate regarding information assurance, with a specific focus on commercial contexts. The conference covers all aspects of securing transactions and systems. INVITED SPEAKERS Lorrie Cranor, CMU http://lorrie.cranor.org/ Ueli Maurer, ETH Zurich http://www.crypto.ethz.ch/~maurer/ Jean-Pierre Hubaux, EPFL http://people.epfl.ch/jean-pierre.hubaux WORKSHOPS Workshop on Real-Life Cryptographic Protocols and Standardization (RLCPS.10) https://www.nec.co.jp/rd/en/event/RLCPS10.html Workshop on Ethics in Computer Security Research (WECSR 2010) http://www.cs.stevens.edu/~spock/wecsr2010/ Workshop on Lightweight Cryptography for Resource-Constrained Devices (WLC'2010) http://www.wlc2010.udl.cat/ IMPORTANT DATES Paper Notification: November 14, 2009 Final Papers: November 29, 2009 Poster and Panel Submission: November 10, 2009 Poster and Panel Notification: November 20, 2009 ORGANIZERS General Chair: Pino Caballero-Gil, University of La Laguna Local Chair: Candelaria Hernandez-Goya, University of La Laguna Local Committee Luisa Arranz Chacon, Alcatel Espana, S.A. Candido Caballero Gil, University of La Laguna Amparo Fter Sabater, IFA-CSIC Felix Herrera Priano, University of La Laguna Belen Melian Batista, University of La Laguna Jezabel Molina Gil, University of La Laguna Jose Moreno Perez, University of La Laguna Marcos Moreno Vega, University of La Laguna Alberto Peinado Dominguez, University of Malaga Alexis Quesada Arencibia, University of Las Palmas de Gran Canaria Jorge Ramio Aguirre, Polytechnic University of Madrid Victoria Reyes Sanchez, University of La Laguna PROGRAM COMMITTEE Program Chair: Radu Sion, Stony Brook University Ross Anderson, University of Cambridge Lucas Ballard, Google Inc. Adam Barth, UC Berkeley Marina Blanton, University of Notre Dame Luc Bouganim, INRIA Rocquencourt Bogdan Carbunar, Motorola Labs Ivan Damgard, Aarhus University Ernesto Damiani, University of Milano George Danezis, Microsoft Research Sabrina de Capitani di Vimercati, University of Milano Rachna Dhamija, Harvard University Sven Dietrich, Stevens Institute of Technology Roger Dingledine, The Tor Project Josep Domingo-Ferrer, University of Rovira i Virgili Stefan Dziembowski, University of Rome "La Sapienza" Bernhard Esslinger, Siegen University Simone Fischer-Hner, Karlstad University Amparo Fuster-Sabater, Instituto de Fica Aplicada Madrid Philippe Golle, Palo Alto Research Center Dieter Gollmann, Technische Universitaet Hamburg-Harburg Rachel Greenstadt, Drexel University Markus Jakobsson, Palo Alto Research Center and Indiana University Rob Johnson, Stony Brook University Ton Kalker, HP Labs Stefan Katzenbeisser, Technische Universit Darmstadt Angelos Keromytis, Columbia University Lars R. Knudsen, Technical University of Denmark Wenke Lee, Georgia Tech Arjen Lenstra, Ecole Polytechnique Federale de Lausanne (EPFL) and Alcatel-Lucent Bell Laboratories Helger Lipmaa, Cybernetica AS Javier Lopez, University of Malaga Luigi Vincenzo Mancini, University of Rome "La Sapienza" Refik Molva, Eurecom Sophia Antipolis Fabian Monrose, University of North Carolina at Chapel Hill Steven Murdoch, University of Cambridge David Naccache, Ecole Normale Superieure (ENS) David Pointcheval, Ecole Normale Superieure (ENS) and CNRS Bart Preneel, Katholieke Universiteit Leuven Josep Rifa Coma, Autonomous University of Barcelona Ahmad-Reza Sadeghi, Ruhr-University Bochum Angela Sasse, University College London Vitaly Shmatikov, University of Texas at Austin Miguel Soriano, Polytechnic University of Catalonia Miroslava Sotakova, Aarhus University Angelos Stavrou, George Mason University Patrick Traynor, Georgia Tech Nicholas Weaver, International Computer Science Institute Berkeley Proceedings Chair: Reza Curtmola, New Jersey Institute of Technology Poster Chair: Peter Williams, Stony Brook University _______________________________________________ fc-announce mailing list fc-announce(a)ifca.ai http://mail.ifca.ai/mailman/listinfo/fc-announce

1 0

Re: [FoRK] Geospatial
by Adam L Beberg 06 Jul '18

06 Jul '18

Stephen D. Williams wrote on 5/7/2007 9:40 PM: >I can locate my family's phones with accuracy as good as 10 ft. with a >nice interface that shows uncertainty as a sized perimeter around the >location point. The standard interface is web-based. Some phones have >a mobile application, although my phone doesn't yet. I've verified the >location of my daughter a few times and just tonight she called to tell >me that she had lost her 4 day old phone. I located it, told her where >to look, and she found it in the grass, at night, within 10 minutes. Nice to see the phone company (read: government) is tracking us all in real time to ~3m. Damn good thing they can't find their ass with both hands, since their leader is severely retarded, or I'd be worried. Hell they can't find 15m+ illegals, so we should be safe. I wonder how long it takes between saying "stem cell evolution" on a phone call and the SWAT team showing up? Hmmmm... -- Adam L. Beberg http://www.mithral.com/~beberg/ _______________________________________________ FoRK mailing list http://xent.com/mailman/listinfo/fork ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [p2p-hackers] Alpha testers needed
by Ian G 06 Jul '18

06 Jul '18

On 17/06/10 1:06 PM, Zooko Wilcox-O'Hearn wrote: > Wow -- music sharing network with integrated Chaumian ecash (the > "lucre" implementation thereof). I don't know what to think. :-) > Are you > familiar with the history of Mojo Nation? For some strange reason, this is summarised up here: http://financialcryptography.com/mt/archives/000571.html http://financialcryptography.com/mt/archives/000572.html Another strange thing is that I thought there were 3 parts to the story, but apparently a persistence error has occurred. iang _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[fc-announce] Financial Crypto and Data Security 2010:
by Radu Sion 06 Jul '18

06 Jul '18

Announcing 3 Co-located Workshops Dear Colleagues, We are glad to announce 3 workshops co-located with the Financial Cryptography and Data Security. Workshop on Real-Life Cryptographic Protocols and Standardization https://www.nec.co.jp/rd/en/event/RLCPS10.html Paper Submission Deadline: October 2, 2009, midnight PST As a fruit of modern cryptographic research, we have seen many cryptographic primitives such as public-key encryption and digital signature algorithms deployed in real life systems, and standardized in many international organizations such as ISO, ITUT, IEEE, IETF, and many others. We have also seen some cryptographic protocols as well, such as key distribution and entity authentication, and some dedicated protocols for limited purpose systems. This workshop aims to bring researchers and engineers together to share their experiments regarding the design of cryptographic primitives and protocols deployed in real life systems. These schemes may not be published in current conferences due to the perceived lack of novelty of their core design components. However, the process of designing the best suitable protocol in the presence of hardware and software limitations in a real life system is worth sharing. This workshop also aims to stimulate discussions on standardizing cryptographic protocols. Workshop on Ethics in Computer Security Research (WECSR 2010) http://www.cs.stevens.edu/~spock/wecsr2010/ Submissions Due: October 15, 2009, 11:59pm, EDT (UTC-4) Computer security often leads to discovering interesting new problems and challenges. The challenge still remains to follow a path acceptable for Institutional Review Boards at academic institutions, as well as compatible with ethical guidelines for professional societies or government institutions. However, no exact guidelines exist for computer security research yet. This workshop will bring together computer security researchers, practitioners, policy makers, and legal experts. This workshop solicits submissions describing or suggesting ethical and responsible conduct in computer security research. While we focus on setting standards and sharing prior experiences and experiments in computer security research, successful or not, we tap into research behavior in network security, computer security, applied cryptography, privacy, anonymity, and security economics. This workshop will favor discussions among participants, in order to shape the future of ethical standards in the field. It will be co-located with the Fourteenth International Conference on Financial Cryptography and Data Security 2010. Workshop on Lightweight Cryptography for Resource-Constrained Devices http://www.wlc2010.udl.cat/ Paper submission: September 30, 2009 Lightweight devices like smart cards and RFID tags are at the core of novel emerging technologies in the information society. These devices must be cheap so as to permit their cost-effective massive manufacturing and deployment. Unfortunately, their low-cost limits their computational power. Other devices, like nodes of sensor networks suffer from an additional constraint, namely, their limited battery life. Secure applications designed for these devices can not make use of classical cryptographic primitives designed for full-fledged computers. In this sense, research on low-cost cryptography is fundamental. This workshop aims to be a forum for the presentation and discussion of current research on different topics related to low-cost cryptography, from cipher design to implementation details. ------------------------------------------------------------------ Financial Cryptography and Data Security Tenerife, Canary Islands, Spain 25-28 January 2010 http://fc10.ifca.ai Financial Cryptography and Data Security is a major international forum for research, advanced development, education, exploration, and debate regarding information assurance, with a specific focus on commercial contexts. The conference covers all aspects of securing transactions and systems. INVITED SPEAKERS Lorrie Cranor, CMU http://lorrie.cranor.org/ Ueli Maurer, ETH Zurich http://www.crypto.ethz.ch/~maurer/ Jean-Pierre Hubaux, EPFL http://people.epfl.ch/jean-pierre.hubaux WORKSHOPS Workshop on Real-Life Cryptographic Protocols and Standardization (RLCPS.10) https://www.nec.co.jp/rd/en/event/RLCPS10.html Workshop on Ethics in Computer Security Research (WECSR 2010) http://www.cs.stevens.edu/~spock/wecsr2010/ Workshop on Lightweight Cryptography for Resource-Constrained Devices (WLC'2010) http://www.wlc2010.udl.cat/ IMPORTANT DATES Paper Notification: November 14, 2009 Final Papers: November 29, 2009 Poster and Panel Submission: November 10, 2009 Poster and Panel Notification: November 20, 2009 ORGANIZERS General Chair: Pino Caballero-Gil, University of La Laguna Local Chair: Candelaria Hernandez-Goya, University of La Laguna Local Committee Luisa Arranz Chacon, Alcatel Espana, S.A. Candido Caballero Gil, University of La Laguna Amparo Fter Sabater, IFA-CSIC Felix Herrera Priano, University of La Laguna Belen Melian Batista, University of La Laguna Jezabel Molina Gil, University of La Laguna Jose Moreno Perez, University of La Laguna Marcos Moreno Vega, University of La Laguna Alberto Peinado Dominguez, University of Malaga Alexis Quesada Arencibia, University of Las Palmas de Gran Canaria Jorge Ramio Aguirre, Polytechnic University of Madrid Victoria Reyes Sanchez, University of La Laguna PROGRAM COMMITTEE Program Chair: Radu Sion, Stony Brook University Ross Anderson, University of Cambridge Lucas Ballard, Google Inc. Adam Barth, UC Berkeley Marina Blanton, University of Notre Dame Luc Bouganim, INRIA Rocquencourt Bogdan Carbunar, Motorola Labs Ivan Damgard, Aarhus University Ernesto Damiani, University of Milano George Danezis, Microsoft Research Sabrina de Capitani di Vimercati, University of Milano Rachna Dhamija, Harvard University Sven Dietrich, Stevens Institute of Technology Roger Dingledine, The Tor Project Josep Domingo-Ferrer, University of Rovira i Virgili Stefan Dziembowski, University of Rome "La Sapienza" Bernhard Esslinger, Siegen University Simone Fischer-Hner, Karlstad University Amparo Fuster-Sabater, Instituto de Fica Aplicada Madrid Philippe Golle, Palo Alto Research Center Dieter Gollmann, Technische Universitaet Hamburg-Harburg Rachel Greenstadt, Drexel University Markus Jakobsson, Palo Alto Research Center and Indiana University Rob Johnson, Stony Brook University Ton Kalker, HP Labs Stefan Katzenbeisser, Technische Universit Darmstadt Angelos Keromytis, Columbia University Lars R. Knudsen, Technical University of Denmark Wenke Lee, Georgia Tech Arjen Lenstra, Ecole Polytechnique Federale de Lausanne (EPFL) and Alcatel-Lucent Bell Laboratories Helger Lipmaa, Cybernetica AS Javier Lopez, University of Malaga Luigi Vincenzo Mancini, University of Rome "La Sapienza" Refik Molva, Eurecom Sophia Antipolis Fabian Monrose, University of North Carolina at Chapel Hill Steven Murdoch, University of Cambridge David Naccache, Ecole Normale Superieure (ENS) David Pointcheval, Ecole Normale Superieure (ENS) and CNRS Bart Preneel, Katholieke Universiteit Leuven Josep Rifa Coma, Autonomous University of Barcelona Ahmad-Reza Sadeghi, Ruhr-University Bochum Angela Sasse, University College London Vitaly Shmatikov, University of Texas at Austin Miguel Soriano, Polytechnic University of Catalonia Miroslava Sotakova, Aarhus University Angelos Stavrou, George Mason University Patrick Traynor, Georgia Tech Nicholas Weaver, International Computer Science Institute Berkeley Proceedings Chair: Reza Curtmola, New Jersey Institute of Technology Poster Chair: Peter Williams, Stony Brook University _______________________________________________ fc-announce mailing list fc-announce(a)ifca.ai http://mail.ifca.ai/mailman/listinfo/fc-announce

1 0

Re: [p2p-hackers] Alpha testers needed
by Ian G 06 Jul '18

06 Jul '18

On 17/06/10 1:06 PM, Zooko Wilcox-O'Hearn wrote: > Wow -- music sharing network with integrated Chaumian ecash (the > "lucre" implementation thereof). I don't know what to think. :-) > Are you > familiar with the history of Mojo Nation? For some strange reason, this is summarised up here: http://financialcryptography.com/mt/archives/000571.html http://financialcryptography.com/mt/archives/000572.html Another strange thing is that I thought there were 3 parts to the story, but apparently a persistence error has occurred. iang _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] more on sat phone (in)security
by Katrin Verclas 06 Jul '18

06 Jul '18

There is some indication that the two journalists killed in Syria were located by their sat phones. While details are elusive and unknown, here are some posts on why and how it's easy to track a sat phone. As @ioerror has repeatedly stated, be afraid. Be very afraid of sat phones in insecure areas. This from EFF: https://www.eff.org/deeplinks/2012/02/satphones-syria-and-surveillance - a good overview This from SaferMobile (disclosure: I run the site/edit content) by Anonymous, a contributor to the site who works in the telco industry: https://safermobile.org/be-afraid-be-very-afraid-of-satellite-phones-in-ins… - detail on how location tracking is possible, easy, and cheap This from David Burgess, fabulous guy and core developer on OpenBTS: http://openbts.blogspot.com/2012/02/some-comments-on-satellite-phones.html - more detail on the technical logistics, nicely complements SaferMobile's post. Katrin Katrin Verclas MobileActive.org katrin(a)mobileactive.org skype/twitter: katrinskaya (347) 281-7191 Check out the new Mobile Media Toolkit at http://mobilemediatoolkit.org. To "Making Media Mobile!" A global network of people using mobile technology for social impact http://mobileactive.org _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0