July 2018 - cypherpunks-legacy

[drone-list] Festo
by Gregory Foster 06 Jul '18

06 Jul '18

It seems the TechJect entrepreneurs out of Georgia Tech aren't the only ones exploring the flight dynamics of dragonflies. SingularityHUB (Apr 17) - "Festo's Robot Dragonfly an Awesome Mix of Prehistoric and Futuristic": http://singularityhub.com/2013/04/17/festos-robot-dragonfly-an-awesome-mix-… The name "Festo" caught my eye as I am currently reading William Gibson's _Zero History_ (2010) which mentions a "Festo AirPenguin" drone. In the text, the fictional cutting edge marketing agency Blue Ant experiments with usage of the drone as an "urban surveillance platform." On encountering the chrome penguin swimming through the air, one surprised character comes to believe they are hallucinating. Little did I know Gibson was referencing a real thing. The Gibsonian Institute (Sep 28, 2010) - "Festo AirPenguin in action": http://gibsonian.tumblr.com/post/1204694444/festo-airpenguin-in-action-from… Festo, " a leading world-wide supplier of automation technology": http://www.festo.com/cms/en_corp/index.htm https://twitter.com/FestoAG http://www.youtube.com/user/FestoHQ HT @CustosDivini: https://twitter.com/CustosDivini/status/324719664255086592 gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -- Want to unsubscribe? Want to receive a weekly digest instead of daily emails? Change your preferences: https://mailman.stanford.edu/mailman/listinfo/drone-list or email companys(a)stanford.edu ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[IP] electronic voting in Japan
by David Farber 06 Jul '18

06 Jul '18

________________________________________ From: Rod Van Meter [rdv(a)sfc.wide.ad.jp] Sent: Thursday, December 06, 2007 1:45 AM To: David Farber Subject: electronic voting in Japan Dave, for IP, if you wish... There is an article in today's Yomiuri Shimbun (Japanese edition only -- page one, actually) about the possibility of electronic voting in national elections next year. http://www.yomiuri.co.jp/politics/news/20071206it01.htm (try feeding it to your favorite online translator for a Dadaesque interpretation) Electronic voting machines have already been tried here, in a few prefectural (state/province) elections. Apparently, all of the major parties are in agreement on this. I just got a glance at the print version, which had a picture; they will be touch panel machines that offer you a simple choice, then I believe print out a sheet for confirmation and actual submission. I'm fuzzy on these details, don't quote me there; the online article doesn't really say. The article asserts that vote tabulation time can be dramatically reduced, which seems unlikely, since the Japanese system is already amazing efficient: results appear in as little as twenty minutes after elections, despite being hand-counted. There is a separate ballot for each office, so they can be quickly sorted into boxes based on vote, then the box is counted. (Don't ask me how they verify validity.) I asked some students about this, and one pointed me at a paper: The Security Analysis of e-voting systems in Japan Hiroki Hisamitsu, Keiji Takeda Carnegie Mellon CyLab Japan 1-3-3 Higashikawasaki-cho, Chuo-ku, Kobe city, Hyogo prefecture, Japan 650-0044 hhisamit(a)andrew.cmu.edu tkeiji(a)cmu.edu Abstract To assess trustworthiness of e-voting practices in Japan, security of e-voting systems and their operational procedures are examined. Through these analyses we concluded that current e-voting security is heavily depending on protection by operational process rather than security feature of the system and it is confirmed that the systems provide only limited security feature though there is large room for technical improvement. Typical security issues are lack of protection mechanism of programs and data on counting machines and on tabulate machines. This vulnerability enables malicious poll worker or manufacturer to insert malicious code to generate arbitrary election result. >From the recent IPSJ Computer Security Symposium. The abstract is in both Japanese and English, but the paper is only in Japanese, unfortunately. --Rod P.S. I ran the Yomiuri article through Google's translator. It has gotten MUCH better recently (six months ago it was laughable and unintellible, now it looks like poorly-written English), and offers the user the original by hovering the mouse over a sentence, and even allows the user to suggest a better translation. Nice! ------------------------------------------- Archives: http://v2.listbox.com/member/archive/247/=now RSS Feed: http://v2.listbox.com/member/archive/rss/247/ Powered by Listbox: http://www.listbox.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Sudan Bank Hacked, Bin Laden Info Found
by Jon Callas 06 Jul '18

06 Jul '18

http://www.newsbytes.com/news/01/170588.html Sudan Bank Hacked, Bin Laden Info Found - Hacker E-Mail This Article Printer-Friendly Version By Ned Stafford, Newsbytes MUNICH, GERMANY, 27 Sep 2001, 2:46 PM CST A group of U.K.-based hackers has cracked computers at the AlShamal Islamic Bank in Sudan and collected data on the accounts of the Al Qaeda terrorist organization and its leader Osama bin Laden, Kim Schmitz, a flamboyant German hacker/businessman, has claimed. Schmitz, who has offered a $10 million reward for the capture of bin Laden, told Newsbytes that the information has been turned over to the FBI. Bin Laden, a millionaire Saudi exile whose base is now Afghanistan, is suspected of being the driving force behind the deadly Sept. 11 attacks on the World Trade Center and the Pentagon with hijacked planes. Newsbytes could not confirm Schmitz's claim. An FBI spokesman in Washington declined to confirm or deny the story, saying that the agency's policy is not to comment on information and leads it is receiving. "We have received a lot of information on this case," he told Newsbytes. "Of course we appreciate the leads we are receiving from the public, but we cannot confirm what specific information has been provided to us or by whom." Schmitz, 27, a former teen hacking prodigy who spent time behind bars before starting a successful data security business, has been accused of being press hungry. He says his recent strong anti-terrorism pronouncements are not a PR prank, but stem from his strong desire to wipe out terrorism. He says he has received death threats from the Middle East. The bank Schmitz claimed was hacked was mentioned Wednesday by Sen. Carl Levin, D-Mich. during a Senate Banking Committee hearing. According to CNN, Levin referred to a 1996 State Department report that said bin Laden had provided the AlShamal Islamic Bank with $50 million in start-up capital. Schmitz told Newsbytes that he could not provide details about what hackers found in AlShamal Islamic Bank's computers or about the hackers themselves. Nonetheless, he provided Newsbytes with the following outline of what he says happened. Last week, Schmitz, who lives in Munich, posted letters on his Web site rallying politicians to the cause of fighting terrorism and offering his hacking expertise. "I received plenty of e-mails from hackers around the world offering their services," he said. Schmitz founded a group that numbers around 23 hackers called "Young Intelligent Hackers Against Terror." He calls the group YIHAT, which is similar to the word Jihad, which is Arabic for Holy War. Schmitz said that last Friday, a Sudanese banker sent the group an e-mail after reading about the $10 million reward, informing the group that Al Qaeda and bin Laden have accounts at AlShamal Islamic Bank. A team of U.K.-based hackers sprang into action, and hacked the nameserver of AlShamal Islamic Bank, he said. They were able to gain access to the bank's intranet by exploiting a "checkpoint firewall 1 vulnerability," he explained. After bypassing the firewall, the hackers achieved "superuser" status on the server, and "sniffed" eight valid user IDs, and then were able to collect information on accounts of Al Qaeda and bin Laden. "This information was sent to the authorities in the USA," Schmitz said. Schmitz sent the following e-mail to the Webmaster at the AlShamal Islamic Bank: "dear webmaster of sudans shamalbank, "your bank has been hacked. information regarding Al Qaeda's and bin Ladens accounts have been captured. all information reached the US authorities. thanks for using products from checkpoint (firewall1). "have a nice day, Kim "Kimble" Schmitz, Founder of "Young Intelligent Hackers Against Terror" YIHAT" When asked which authorities received the information from the hackers, Schmitz said: "FBI." He said that authorities had not given the hackers a "green light" to undertake the hacking, that the group had done so on its own initiative. Schmitz said the U.K.-based hackers wish to remain anonymous. "I am the spokesperson of the group," he said. "They don't want to be involved with the press. What they do is illegal, unless we find a government that legalizes our activities." And somewhat mysteriously, he added: "If I would deliver details about the hacks, I could get arrested. I am not hacking myself, because that is illegal. I must keep myself out of the details to make sure that I am still able to offer them the communication platform they need to fight as united hackers of the world against terror." AlShamal Islamic Bank Home Page: http://www.shamalbank.com/ Kim Schmitz's Personal Web Site: http://www.kimble.org/ Schmitz Letter to governments around the world: http://www.kimble.org/urgent.htm Schmitz Reward For Osama Bin Laden: http://www.kimble.org./mostwanted.htm Reported by Newsbytes.com, http://www.newsbytes.com . 14:46 CST Reposted 15:03 CST (20010927/WIRES TOP, ONLINE, LEGAL, BUSINESS/) © 2001 The Washington Post Company --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' http://xent.com/mailman/listinfo/fork

1 0

[silk] foolproof iris recognition?
by Udhay Shankar N 06 Jul '18

06 Jul '18

http://blogs.zdnet.com/emergingtech/?p=88 Foolproof iris recognition technology? Posted by Roland Piquepaille @ 10:35 am For almost twenty years, the iris recognition research field has been hampered because of a broad patent covering it. As this patent recently expired, many teams around the world are again working on new technologies in this field. Iris recognition is in fact seen as the most accurate biometric recognition technology because no two irises are identical. And researchers at the University of Bath in England have developed new computer algorithms which are 100 per cent accurate in initial trials. Now the researchers are putting online a database of 16,000 iris images collected mainly from students. The source code is also available if you want to further improve the algorithms. Before going further, let's go back in time to understand why this research field was almost inactive for twenty years. Life Style Extra tells us the story. Looking into a camera to confirm your identity would now be routine and - were it not for the US firm's virtual monopoly of the technology - it would already be in use at cashpoints and passport control. Its backers say it could reduce fraud and illegal immigration. Iridian Technologies, based in New Jersey, patented the system of identifying people using the coloured part of the human eye in the mid 80s and other scientists have had to pay tens of thousands of American dollars to do any research in the field, thus hampering competition. But the patent expired in the US earlier this year and expires in the rest of the world in February 2006. Now, it's time to return to 2005 at the University of Bath. Engineers are currently road-testing their technology using a specially-constructed database containing thousands of iris images collected from students and colleagues at the University. By making this database available to other research groups, the researchers hope to encourage more advances in iris recognition and overcome some of the restrictions caused by a generic patent (recently expired) which has limited innovation for the last two decades. "Our new algorithm does the same job as the one used by almost all of the commercially available iris recognition systems, it just does it better," said Professor Don Monro from the University's Department of Electronic and Electrical Engineering. Below is a picture showing how an iris picture is shot and rendered on a computer screen before being analyzed (Credit: Smart Sensors Ltd.). The iris image acquisition process And below is an illustration of the iris image normalization process (Credit: Smart Sensors Ltd.). The iris image normalization process First, the inner and outer iris boundaries are located to eliminate the pupil, eyelid and other "clutter". Then the iris image is transformed from polar coordinates to a 512x80 fixed size rectangular image to reduce the effect of iris dilation and contraction, of which 512x48 will be coded. The non-uniform background illumination is finally homogenized. Now that you know how this new technology works, why are these researchers willing to share their database? Here are Monro's answers. Most of the databases that are available are held by commercial interests, so it is difficult for independent researchers to make headway in this field. We are making the database available online so that researchers around the world can use it to develop their own products. So far, more than 30 research groups have applied to use it. If you want to know more about this project, here are two links at the University of Bath about the Iris Image Database and the Iris Capture Project. And for even more information, one of the industrial partners of the University of Bath for this project is a U.K. company named Smart Sensors Ltd., which has published two interesting papers about this iris recognition technology. Here are the links to these documents, "Novel high performance iris feature extraction techniques" (PDF format, 1 page, 119 KB) and "Complexity low complexity human iris feature coding human iris feature coding" (PDF format, 1 page, 222 KB). The above illustrations were extracted from these documents. Sources: University of Bath news release, November 15, 2005; Life Style Extra, November 15, 2005; and various web sites -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com)) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] electronic voting in Japan
by David Farber 06 Jul '18

06 Jul '18

________________________________________ From: Rod Van Meter [rdv(a)sfc.wide.ad.jp] Sent: Thursday, December 06, 2007 1:45 AM To: David Farber Subject: electronic voting in Japan Dave, for IP, if you wish... There is an article in today's Yomiuri Shimbun (Japanese edition only -- page one, actually) about the possibility of electronic voting in national elections next year. http://www.yomiuri.co.jp/politics/news/20071206it01.htm (try feeding it to your favorite online translator for a Dadaesque interpretation) Electronic voting machines have already been tried here, in a few prefectural (state/province) elections. Apparently, all of the major parties are in agreement on this. I just got a glance at the print version, which had a picture; they will be touch panel machines that offer you a simple choice, then I believe print out a sheet for confirmation and actual submission. I'm fuzzy on these details, don't quote me there; the online article doesn't really say. The article asserts that vote tabulation time can be dramatically reduced, which seems unlikely, since the Japanese system is already amazing efficient: results appear in as little as twenty minutes after elections, despite being hand-counted. There is a separate ballot for each office, so they can be quickly sorted into boxes based on vote, then the box is counted. (Don't ask me how they verify validity.) I asked some students about this, and one pointed me at a paper: The Security Analysis of e-voting systems in Japan Hiroki Hisamitsu, Keiji Takeda Carnegie Mellon CyLab Japan 1-3-3 Higashikawasaki-cho, Chuo-ku, Kobe city, Hyogo prefecture, Japan 650-0044 hhisamit(a)andrew.cmu.edu tkeiji(a)cmu.edu Abstract To assess trustworthiness of e-voting practices in Japan, security of e-voting systems and their operational procedures are examined. Through these analyses we concluded that current e-voting security is heavily depending on protection by operational process rather than security feature of the system and it is confirmed that the systems provide only limited security feature though there is large room for technical improvement. Typical security issues are lack of protection mechanism of programs and data on counting machines and on tabulate machines. This vulnerability enables malicious poll worker or manufacturer to insert malicious code to generate arbitrary election result. >From the recent IPSJ Computer Security Symposium. The abstract is in both Japanese and English, but the paper is only in Japanese, unfortunately. --Rod P.S. I ran the Yomiuri article through Google's translator. It has gotten MUCH better recently (six months ago it was laughable and unintellible, now it looks like poorly-written English), and offers the user the original by hovering the mouse over a sentence, and even allows the user to suggest a better translation. Nice! ------------------------------------------- Archives: http://v2.listbox.com/member/archive/247/=now RSS Feed: http://v2.listbox.com/member/archive/rss/247/ Powered by Listbox: http://www.listbox.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Sudan Bank Hacked, Bin Laden Info Found
by Jon Callas 06 Jul '18

06 Jul '18

http://www.newsbytes.com/news/01/170588.html Sudan Bank Hacked, Bin Laden Info Found - Hacker E-Mail This Article Printer-Friendly Version By Ned Stafford, Newsbytes MUNICH, GERMANY, 27 Sep 2001, 2:46 PM CST A group of U.K.-based hackers has cracked computers at the AlShamal Islamic Bank in Sudan and collected data on the accounts of the Al Qaeda terrorist organization and its leader Osama bin Laden, Kim Schmitz, a flamboyant German hacker/businessman, has claimed. Schmitz, who has offered a $10 million reward for the capture of bin Laden, told Newsbytes that the information has been turned over to the FBI. Bin Laden, a millionaire Saudi exile whose base is now Afghanistan, is suspected of being the driving force behind the deadly Sept. 11 attacks on the World Trade Center and the Pentagon with hijacked planes. Newsbytes could not confirm Schmitz's claim. An FBI spokesman in Washington declined to confirm or deny the story, saying that the agency's policy is not to comment on information and leads it is receiving. "We have received a lot of information on this case," he told Newsbytes. "Of course we appreciate the leads we are receiving from the public, but we cannot confirm what specific information has been provided to us or by whom." Schmitz, 27, a former teen hacking prodigy who spent time behind bars before starting a successful data security business, has been accused of being press hungry. He says his recent strong anti-terrorism pronouncements are not a PR prank, but stem from his strong desire to wipe out terrorism. He says he has received death threats from the Middle East. The bank Schmitz claimed was hacked was mentioned Wednesday by Sen. Carl Levin, D-Mich. during a Senate Banking Committee hearing. According to CNN, Levin referred to a 1996 State Department report that said bin Laden had provided the AlShamal Islamic Bank with $50 million in start-up capital. Schmitz told Newsbytes that he could not provide details about what hackers found in AlShamal Islamic Bank's computers or about the hackers themselves. Nonetheless, he provided Newsbytes with the following outline of what he says happened. Last week, Schmitz, who lives in Munich, posted letters on his Web site rallying politicians to the cause of fighting terrorism and offering his hacking expertise. "I received plenty of e-mails from hackers around the world offering their services," he said. Schmitz founded a group that numbers around 23 hackers called "Young Intelligent Hackers Against Terror." He calls the group YIHAT, which is similar to the word Jihad, which is Arabic for Holy War. Schmitz said that last Friday, a Sudanese banker sent the group an e-mail after reading about the $10 million reward, informing the group that Al Qaeda and bin Laden have accounts at AlShamal Islamic Bank. A team of U.K.-based hackers sprang into action, and hacked the nameserver of AlShamal Islamic Bank, he said. They were able to gain access to the bank's intranet by exploiting a "checkpoint firewall 1 vulnerability," he explained. After bypassing the firewall, the hackers achieved "superuser" status on the server, and "sniffed" eight valid user IDs, and then were able to collect information on accounts of Al Qaeda and bin Laden. "This information was sent to the authorities in the USA," Schmitz said. Schmitz sent the following e-mail to the Webmaster at the AlShamal Islamic Bank: "dear webmaster of sudans shamalbank, "your bank has been hacked. information regarding Al Qaeda's and bin Ladens accounts have been captured. all information reached the US authorities. thanks for using products from checkpoint (firewall1). "have a nice day, Kim "Kimble" Schmitz, Founder of "Young Intelligent Hackers Against Terror" YIHAT" When asked which authorities received the information from the hackers, Schmitz said: "FBI." He said that authorities had not given the hackers a "green light" to undertake the hacking, that the group had done so on its own initiative. Schmitz said the U.K.-based hackers wish to remain anonymous. "I am the spokesperson of the group," he said. "They don't want to be involved with the press. What they do is illegal, unless we find a government that legalizes our activities." And somewhat mysteriously, he added: "If I would deliver details about the hacks, I could get arrested. I am not hacking myself, because that is illegal. I must keep myself out of the details to make sure that I am still able to offer them the communication platform they need to fight as united hackers of the world against terror." AlShamal Islamic Bank Home Page: http://www.shamalbank.com/ Kim Schmitz's Personal Web Site: http://www.kimble.org/ Schmitz Letter to governments around the world: http://www.kimble.org/urgent.htm Schmitz Reward For Osama Bin Laden: http://www.kimble.org./mostwanted.htm Reported by Newsbytes.com, http://www.newsbytes.com . 14:46 CST Reposted 15:03 CST (20010927/WIRES TOP, ONLINE, LEGAL, BUSINESS/) © 2001 The Washington Post Company --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' http://xent.com/mailman/listinfo/fork

1 0

[silk] foolproof iris recognition?
by Udhay Shankar N 06 Jul '18

06 Jul '18

http://blogs.zdnet.com/emergingtech/?p=88 Foolproof iris recognition technology? Posted by Roland Piquepaille @ 10:35 am For almost twenty years, the iris recognition research field has been hampered because of a broad patent covering it. As this patent recently expired, many teams around the world are again working on new technologies in this field. Iris recognition is in fact seen as the most accurate biometric recognition technology because no two irises are identical. And researchers at the University of Bath in England have developed new computer algorithms which are 100 per cent accurate in initial trials. Now the researchers are putting online a database of 16,000 iris images collected mainly from students. The source code is also available if you want to further improve the algorithms. Before going further, let's go back in time to understand why this research field was almost inactive for twenty years. Life Style Extra tells us the story. Looking into a camera to confirm your identity would now be routine and - were it not for the US firm's virtual monopoly of the technology - it would already be in use at cashpoints and passport control. Its backers say it could reduce fraud and illegal immigration. Iridian Technologies, based in New Jersey, patented the system of identifying people using the coloured part of the human eye in the mid 80s and other scientists have had to pay tens of thousands of American dollars to do any research in the field, thus hampering competition. But the patent expired in the US earlier this year and expires in the rest of the world in February 2006. Now, it's time to return to 2005 at the University of Bath. Engineers are currently road-testing their technology using a specially-constructed database containing thousands of iris images collected from students and colleagues at the University. By making this database available to other research groups, the researchers hope to encourage more advances in iris recognition and overcome some of the restrictions caused by a generic patent (recently expired) which has limited innovation for the last two decades. "Our new algorithm does the same job as the one used by almost all of the commercially available iris recognition systems, it just does it better," said Professor Don Monro from the University's Department of Electronic and Electrical Engineering. Below is a picture showing how an iris picture is shot and rendered on a computer screen before being analyzed (Credit: Smart Sensors Ltd.). The iris image acquisition process And below is an illustration of the iris image normalization process (Credit: Smart Sensors Ltd.). The iris image normalization process First, the inner and outer iris boundaries are located to eliminate the pupil, eyelid and other "clutter". Then the iris image is transformed from polar coordinates to a 512x80 fixed size rectangular image to reduce the effect of iris dilation and contraction, of which 512x48 will be coded. The non-uniform background illumination is finally homogenized. Now that you know how this new technology works, why are these researchers willing to share their database? Here are Monro's answers. Most of the databases that are available are held by commercial interests, so it is difficult for independent researchers to make headway in this field. We are making the database available online so that researchers around the world can use it to develop their own products. So far, more than 30 research groups have applied to use it. If you want to know more about this project, here are two links at the University of Bath about the Iris Image Database and the Iris Capture Project. And for even more information, one of the industrial partners of the University of Bath for this project is a U.K. company named Smart Sensors Ltd., which has published two interesting papers about this iris recognition technology. Here are the links to these documents, "Novel high performance iris feature extraction techniques" (PDF format, 1 page, 119 KB) and "Complexity low complexity human iris feature coding human iris feature coding" (PDF format, 1 page, 222 KB). The above illustrations were extracted from these documents. Sources: University of Bath news release, November 15, 2005; Life Style Extra, November 15, 2005; and various web sites -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com)) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

None
by Jim Salters 06 Jul '18

06 Jul '18

We are pleased to announce a "call for participation" for two new FSTC projects. Each has a committed core group of member institutions and vendors who solicit further participation from fellow members: 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept 2. Business Continuity: Compliance and Status Reporting Project ____________________ 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept Prospectus: http://fstc.org/projects/new.cfm#eauth This 5-month project will assess the viability of the potential business opportunity that exists for financial institutions to leverage their online customer relationships and provide an authentication service to government agencies, and to integrate these services into their own online applications. FSTC, jointly with the GSA's E-Authentication Initiative Project Management Office (EAI PMO), propose to launch a three-track project to ascertain the business model, legal framework, and technical viability of using FIs' identity credentials to permit consumers and businesses to access secure online government applications. The GSA is funding the business track of the initiative. There is no cost to financial institutions, and a $5,000 fee for associate members. In addition, a resource commitment is required for all participants, as outlined in the prospectus. Participation commitments are requested by Sept 24th, and the target kickoff is the week of October 4th. An informational conference call has been scheduled for: Wednesday Sept 15th, 2pm EDT 512-225-3050, 71782# __________________ 2. Business Continuity: Compliance and Status Reporting Project Prospectus: http://fstc.org/projects/new.cfm#compliance The FSTC Business Continuity Standing Committee proposes an initiative to assist the financial industry in coming to a common understanding on the meaning of continuity regulation, prioritization of compliance related activities, and creating efficiencies in documenting regulatory compliance status. To establish a clear understanding of the regulatory environment, a list of continuity related guidance will be pulled together along with the name of the agency responsible. Each regulation will be reviewed and a clearly worded summary of the continuity requirements will be developed. Where possible the regulatory agencies will be contacted for clarification on specific points. Common themes and requirements will be documented and prioritized. >From this list of common themes and prioritized requirements a questionnaire will be developed which will allow a FI to provide or collect continuity compliance status. The project will focus on providing straight forward interpretations of what is needed for an FI to comply with current regulations. The final product will provide: . A comprehensive list of all current regulatory guidance related to business continuity, an overview of the requirements of the key components and the agency that produced it. . Prioritized summary of the key continuity requirements that FIs must address and the timing for implementing them. . Standardized questionnaire that FIs can utilize to collect or provide status of compliance with continuity regulatory requirements. . An ongoing forum for discussion on regulatory direction and for sharing feedback/experiences other FIs have had with regulators. . A documented process that can be utilized to allow FSTC and its members to maintain the regulatory summary and questionnaire. Project Fees: --------------- Financial Institutions: $15,000 Assets over $100 billion (including affiliates) $12,000 Assets from $50 billion to $99 billion (including affiliates) $9,000 Assets from $20 billion to $49 billion (including affiliates) $3,300 Assets under $19 billion (including affiliates) Technology Companies: $15,000 Revenue/funding over $100 million (including affiliates) $12,000 Revenue/funding from $50 million to $99 million (including affiliates) $9,000 Revenue/funding from $20 million to $49 million (including affiliates) $3,300 Revenue/funding under $19 million (including affiliates) ---------------------------------------------------------------- To subscribe or unsubscribe from this elist use the subscription manager: <http://ls.fstc.org/subscriber> --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

None
by Jim Salters 06 Jul '18

06 Jul '18

We are pleased to announce a "call for participation" for two new FSTC projects. Each has a committed core group of member institutions and vendors who solicit further participation from fellow members: 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept 2. Business Continuity: Compliance and Status Reporting Project ____________________ 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept Prospectus: http://fstc.org/projects/new.cfm#eauth This 5-month project will assess the viability of the potential business opportunity that exists for financial institutions to leverage their online customer relationships and provide an authentication service to government agencies, and to integrate these services into their own online applications. FSTC, jointly with the GSA's E-Authentication Initiative Project Management Office (EAI PMO), propose to launch a three-track project to ascertain the business model, legal framework, and technical viability of using FIs' identity credentials to permit consumers and businesses to access secure online government applications. The GSA is funding the business track of the initiative. There is no cost to financial institutions, and a $5,000 fee for associate members. In addition, a resource commitment is required for all participants, as outlined in the prospectus. Participation commitments are requested by Sept 24th, and the target kickoff is the week of October 4th. An informational conference call has been scheduled for: Wednesday Sept 15th, 2pm EDT 512-225-3050, 71782# __________________ 2. Business Continuity: Compliance and Status Reporting Project Prospectus: http://fstc.org/projects/new.cfm#compliance The FSTC Business Continuity Standing Committee proposes an initiative to assist the financial industry in coming to a common understanding on the meaning of continuity regulation, prioritization of compliance related activities, and creating efficiencies in documenting regulatory compliance status. To establish a clear understanding of the regulatory environment, a list of continuity related guidance will be pulled together along with the name of the agency responsible. Each regulation will be reviewed and a clearly worded summary of the continuity requirements will be developed. Where possible the regulatory agencies will be contacted for clarification on specific points. Common themes and requirements will be documented and prioritized. >From this list of common themes and prioritized requirements a questionnaire will be developed which will allow a FI to provide or collect continuity compliance status. The project will focus on providing straight forward interpretations of what is needed for an FI to comply with current regulations. The final product will provide: . A comprehensive list of all current regulatory guidance related to business continuity, an overview of the requirements of the key components and the agency that produced it. . Prioritized summary of the key continuity requirements that FIs must address and the timing for implementing them. . Standardized questionnaire that FIs can utilize to collect or provide status of compliance with continuity regulatory requirements. . An ongoing forum for discussion on regulatory direction and for sharing feedback/experiences other FIs have had with regulators. . A documented process that can be utilized to allow FSTC and its members to maintain the regulatory summary and questionnaire. Project Fees: --------------- Financial Institutions: $15,000 Assets over $100 billion (including affiliates) $12,000 Assets from $50 billion to $99 billion (including affiliates) $9,000 Assets from $20 billion to $49 billion (including affiliates) $3,300 Assets under $19 billion (including affiliates) Technology Companies: $15,000 Revenue/funding over $100 million (including affiliates) $12,000 Revenue/funding from $50 million to $99 million (including affiliates) $9,000 Revenue/funding from $20 million to $49 million (including affiliates) $3,300 Revenue/funding under $19 million (including affiliates) ---------------------------------------------------------------- To subscribe or unsubscribe from this elist use the subscription manager: <http://ls.fstc.org/subscriber> --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

None
by Jim Salters 06 Jul '18

06 Jul '18

We are pleased to announce a "call for participation" for two new FSTC projects. Each has a committed core group of member institutions and vendors who solicit further participation from fellow members: 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept 2. Business Continuity: Compliance and Status Reporting Project ____________________ 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept Prospectus: http://fstc.org/projects/new.cfm#eauth This 5-month project will assess the viability of the potential business opportunity that exists for financial institutions to leverage their online customer relationships and provide an authentication service to government agencies, and to integrate these services into their own online applications. FSTC, jointly with the GSA's E-Authentication Initiative Project Management Office (EAI PMO), propose to launch a three-track project to ascertain the business model, legal framework, and technical viability of using FIs' identity credentials to permit consumers and businesses to access secure online government applications. The GSA is funding the business track of the initiative. There is no cost to financial institutions, and a $5,000 fee for associate members. In addition, a resource commitment is required for all participants, as outlined in the prospectus. Participation commitments are requested by Sept 24th, and the target kickoff is the week of October 4th. An informational conference call has been scheduled for: Wednesday Sept 15th, 2pm EDT 512-225-3050, 71782# __________________ 2. Business Continuity: Compliance and Status Reporting Project Prospectus: http://fstc.org/projects/new.cfm#compliance The FSTC Business Continuity Standing Committee proposes an initiative to assist the financial industry in coming to a common understanding on the meaning of continuity regulation, prioritization of compliance related activities, and creating efficiencies in documenting regulatory compliance status. To establish a clear understanding of the regulatory environment, a list of continuity related guidance will be pulled together along with the name of the agency responsible. Each regulation will be reviewed and a clearly worded summary of the continuity requirements will be developed. Where possible the regulatory agencies will be contacted for clarification on specific points. Common themes and requirements will be documented and prioritized. >From this list of common themes and prioritized requirements a questionnaire will be developed which will allow a FI to provide or collect continuity compliance status. The project will focus on providing straight forward interpretations of what is needed for an FI to comply with current regulations. The final product will provide: . A comprehensive list of all current regulatory guidance related to business continuity, an overview of the requirements of the key components and the agency that produced it. . Prioritized summary of the key continuity requirements that FIs must address and the timing for implementing them. . Standardized questionnaire that FIs can utilize to collect or provide status of compliance with continuity regulatory requirements. . An ongoing forum for discussion on regulatory direction and for sharing feedback/experiences other FIs have had with regulators. . A documented process that can be utilized to allow FSTC and its members to maintain the regulatory summary and questionnaire. Project Fees: --------------- Financial Institutions: $15,000 Assets over $100 billion (including affiliates) $12,000 Assets from $50 billion to $99 billion (including affiliates) $9,000 Assets from $20 billion to $49 billion (including affiliates) $3,300 Assets under $19 billion (including affiliates) Technology Companies: $15,000 Revenue/funding over $100 million (including affiliates) $12,000 Revenue/funding from $50 million to $99 million (including affiliates) $9,000 Revenue/funding from $20 million to $49 million (including affiliates) $3,300 Revenue/funding under $19 million (including affiliates) ---------------------------------------------------------------- To subscribe or unsubscribe from this elist use the subscription manager: <http://ls.fstc.org/subscriber> --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0