July 2018 - cypherpunks-legacy

[FYI] Dutch Government wants to regulate strong cryptography
by Axel H Horns 06 Jul '18

06 Jul '18

http://www.heise.de/tp/english/inhalt/te/9763/1.html ----------------------------- CUT --------------------------------- Dutch Government wants to regulate strong cryptography Jelle van Buuren 09.10.2001 Action plan to combat terrorism targets modern communication technologies The Dutch Government announced Friday it wants to regulate the public use of strong cryptography. The regulation of cryptography is one of the measures the government is proposing in its action plan to combat terrorism. [...] ----------------------------- CUT ---------------------------------

1 0

[Politech] Sen. McCain proposes surveillance of illegal images (including cartoons) [fs]
by Declan McCullagh 06 Jul '18

06 Jul '18

Sens. McCain and Schumer have introduced the Securing Adolescents From Exploitation-Online Act of 2007, which I've summarized here: http://news.com.com/2100-1028_3-6156976.html A draft is here (the final version isn't on Thomas yet): http://www.politechbot.com/docs/mccain.schumer.child.porn.safe.act.020607.p… Here's an excerpt from the press release: http://mccain.senate.gov/press_office/view_article.cfm?ID=853 "With all of the horrifying instances of children being exploited by online predators, its stomach-churning that no law is on the books to require Internet Service Providers to report instances of child pornography on their services," Schumer said. "In a nutshell, this legislation provides a common-sense tool to the growing problem of Internet child pornography. While we canbt see everything that happens on the Internet, we can work hard to build the next best thing b a system to report the illegal activity that is discovered. Many of us have worked for years to protect children b this bill takes our efforts to the 21st Century." An earlier version of the bill from December: http://www.politechbot.com/docs/mccain.child.sex.offender.120806.pdf And, in somewhat related news, House committee chairmen announced four privacy-related bills today: http://news.com.com/2100-1028_3-6157826.html I've placed them here: http://www.politechbot.com/docs/house.dingell.barton.pretexting.bill.020807… df http://www.politechbot.com/docs/house.markey.barton.ssn.bill.020807.pdf http://www.politechbot.com/docs/house.rush.stearns.data.breach.bill.020807.… f http://www.politechbot.com/docs/house.towns.bono.spyware.bill.020807.pdf And here's another anti-pretexting bill from Reps. Inslee and Blackburn: http://news.com.com/2100-1028_3-6157383.html Two more data breach bills, from Sens. Leahy and Specter, and Rep. Lamar Smith: http://news.com.com/2100-7348_3-6156904.html The Smith bill is here: http://www.politechbot.com/docs/smith.data.protection.notification.draft.02… 07.pdf -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

None
by Jim Salters 06 Jul '18

06 Jul '18

We are pleased to announce a "call for participation" for two new FSTC projects. Each has a committed core group of member institutions and vendors who solicit further participation from fellow members: 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept 2. Business Continuity: Compliance and Status Reporting Project ____________________ 1. FSTC e-Authentication Initiative: Business and Technology Proof-of-Concept Prospectus: http://fstc.org/projects/new.cfm#eauth This 5-month project will assess the viability of the potential business opportunity that exists for financial institutions to leverage their online customer relationships and provide an authentication service to government agencies, and to integrate these services into their own online applications. FSTC, jointly with the GSA's E-Authentication Initiative Project Management Office (EAI PMO), propose to launch a three-track project to ascertain the business model, legal framework, and technical viability of using FIs' identity credentials to permit consumers and businesses to access secure online government applications. The GSA is funding the business track of the initiative. There is no cost to financial institutions, and a $5,000 fee for associate members. In addition, a resource commitment is required for all participants, as outlined in the prospectus. Participation commitments are requested by Sept 24th, and the target kickoff is the week of October 4th. An informational conference call has been scheduled for: Wednesday Sept 15th, 2pm EDT 512-225-3050, 71782# __________________ 2. Business Continuity: Compliance and Status Reporting Project Prospectus: http://fstc.org/projects/new.cfm#compliance The FSTC Business Continuity Standing Committee proposes an initiative to assist the financial industry in coming to a common understanding on the meaning of continuity regulation, prioritization of compliance related activities, and creating efficiencies in documenting regulatory compliance status. To establish a clear understanding of the regulatory environment, a list of continuity related guidance will be pulled together along with the name of the agency responsible. Each regulation will be reviewed and a clearly worded summary of the continuity requirements will be developed. Where possible the regulatory agencies will be contacted for clarification on specific points. Common themes and requirements will be documented and prioritized. >From this list of common themes and prioritized requirements a questionnaire will be developed which will allow a FI to provide or collect continuity compliance status. The project will focus on providing straight forward interpretations of what is needed for an FI to comply with current regulations. The final product will provide: . A comprehensive list of all current regulatory guidance related to business continuity, an overview of the requirements of the key components and the agency that produced it. . Prioritized summary of the key continuity requirements that FIs must address and the timing for implementing them. . Standardized questionnaire that FIs can utilize to collect or provide status of compliance with continuity regulatory requirements. . An ongoing forum for discussion on regulatory direction and for sharing feedback/experiences other FIs have had with regulators. . A documented process that can be utilized to allow FSTC and its members to maintain the regulatory summary and questionnaire. Project Fees: --------------- Financial Institutions: $15,000 Assets over $100 billion (including affiliates) $12,000 Assets from $50 billion to $99 billion (including affiliates) $9,000 Assets from $20 billion to $49 billion (including affiliates) $3,300 Assets under $19 billion (including affiliates) Technology Companies: $15,000 Revenue/funding over $100 million (including affiliates) $12,000 Revenue/funding from $50 million to $99 million (including affiliates) $9,000 Revenue/funding from $20 million to $49 million (including affiliates) $3,300 Revenue/funding under $19 million (including affiliates) ---------------------------------------------------------------- To subscribe or unsubscribe from this elist use the subscription manager: <http://ls.fstc.org/subscriber> --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[FYI] Dutch Government wants to regulate strong cryptography
by Axel H Horns 06 Jul '18

06 Jul '18

http://www.heise.de/tp/english/inhalt/te/9763/1.html ----------------------------- CUT --------------------------------- Dutch Government wants to regulate strong cryptography Jelle van Buuren 09.10.2001 Action plan to combat terrorism targets modern communication technologies The Dutch Government announced Friday it wants to regulate the public use of strong cryptography. The regulation of cryptography is one of the measures the government is proposing in its action plan to combat terrorism. [...] ----------------------------- CUT ---------------------------------

1 0

[Politech] Sen. McCain proposes surveillance of illegal images (including cartoons) [fs]
by Declan McCullagh 06 Jul '18

06 Jul '18

Sens. McCain and Schumer have introduced the Securing Adolescents From Exploitation-Online Act of 2007, which I've summarized here: http://news.com.com/2100-1028_3-6156976.html A draft is here (the final version isn't on Thomas yet): http://www.politechbot.com/docs/mccain.schumer.child.porn.safe.act.020607.p… Here's an excerpt from the press release: http://mccain.senate.gov/press_office/view_article.cfm?ID=853 "With all of the horrifying instances of children being exploited by online predators, its stomach-churning that no law is on the books to require Internet Service Providers to report instances of child pornography on their services," Schumer said. "In a nutshell, this legislation provides a common-sense tool to the growing problem of Internet child pornography. While we canbt see everything that happens on the Internet, we can work hard to build the next best thing b a system to report the illegal activity that is discovered. Many of us have worked for years to protect children b this bill takes our efforts to the 21st Century." An earlier version of the bill from December: http://www.politechbot.com/docs/mccain.child.sex.offender.120806.pdf And, in somewhat related news, House committee chairmen announced four privacy-related bills today: http://news.com.com/2100-1028_3-6157826.html I've placed them here: http://www.politechbot.com/docs/house.dingell.barton.pretexting.bill.020807… df http://www.politechbot.com/docs/house.markey.barton.ssn.bill.020807.pdf http://www.politechbot.com/docs/house.rush.stearns.data.breach.bill.020807.… f http://www.politechbot.com/docs/house.towns.bono.spyware.bill.020807.pdf And here's another anti-pretexting bill from Reps. Inslee and Blackburn: http://news.com.com/2100-1028_3-6157383.html Two more data breach bills, from Sens. Leahy and Specter, and Rep. Lamar Smith: http://news.com.com/2100-7348_3-6156904.html The Smith bill is here: http://www.politechbot.com/docs/smith.data.protection.notification.draft.02… 07.pdf -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[CSL Colloq] Signaling Vulnerabilities in Law-Enforcement
by allison＠stanford.edu 06 Jul '18

06 Jul '18

Wiretap Systems * 4:15PM, Wed Mar 08, 2006 in Gates B01 Reply-To: ee380(a)shasta.stanford.edu Stanford EE Computer Systems Colloquium 4:15PM, Wednesday, Mar 08, 2006 HP Auditorium, Gates Computer Science Building B01 http://ee380.stanford.edu[1] Topic: Signaling Vulnerabilities in Law-Enforcement Wiretap Systems Speaker: Matt Blaze University of Pennsylvania About the talk: Telephone wiretap and dialed number recording systems are used by law enforcement and national security agencies to collect investigative intelligence and legal evidence. This talk will show how many of these systems are vulnerable to simple, unilateral countermeasures that allow wiretap targets to prevent their call audio from being recorded and/or cause false or inaccurate dialed digits and call activity to be logged. The countermeasures exploit the unprotected in-band signals passed between the telephone network and the collection system and are effective against many of the wiretapping technologies currently used by US law enforcement, including at least some ``CALEA'' systems. Possible remedies and workarounds will be proposed, and the broader implications of the security properties of these systems will be discussed. A recent paper, as well as audio examples of several wiretapping countermeasures, can be found at http://www.crypto.com/papers/wiretapping/ [2]. This is joint work with Micah Sherr, Eric Cronin, and Sandy Clark. About the speaker: Research: Prof Blaze's research focuses on the architecture and design of secure systems based on cryptographic techniques, analysis of secure systems against practical attack models, and on finding new cryptographic primitives and techniques. This work has led directly to several new cryptographic concepts, including: "Remotely-Keyed Encryption," which allows the use of inexpensive, low-bandwidth secure hardware to protect high-bandwidth communication and stored data, "Atomic Proxy Cryptography," which allows re-encryption by untrusted third parties, and "Master-Key Encryption," which provides a systematic way to design (and study) ciphers with built-in "back doors." Prof Blaze is especially interested in the use of encryption to protect insecure systems such as the Internet. He was a designer of swIPe, a predecessor of the now standard IPSEC protocol for protecting Internet traffic. Another project, CFS, investigated and demonstrated the feasibility of including encryption as file system service. Contact information: Matt Blaze University of Pennsylvania http://www.crypto.com[4] Embedded Links: [ 1 ] http://ee380.stanford.edu [ 2 ] http://www.crypto.com/papers/wiretapping/ [ 3 ] www.crypto.com [ 4 ] http://www.crypto.com ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Stanford --Signaling Vulnerabilities in Law-Enforcement Wiretap
by David Farber 06 Jul '18

06 Jul '18

Systems * 4:15PM, Wed Mar 08, 2006 in Gates B01 X-Mailer: Apple Mail (2.746.2) Reply-To: dave(a)farber.net Begin forwarded message:

1 0

Re: [tor-talk] Using Mixminion trough the Tor network
by Nick Mathewson 06 Jul '18

06 Jul '18

On Sun, Jan 30, 2011 at 2:13 PM, emersonv6 <emersonv6(a)gmx.com> wrote: > Hi, > > I was wondering if anyone has succeeded torifyng Mixminion. You'd probably want to hack up Mixminion's socket.connect stuff to use a SOCKS-compatible version instead. The functions to hack on the client side would be in lib/mixminion/MMTPClient.py ; that's the part that does the client-side network connections. Unfortunately, Mixminion isn't maintained these days; if anybody is interested in new versions coming out, they should subscribe to the mixminion-dev list and coordinate with others. hth, -- Nick _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Using Mixminion trough the Tor network
by Nick Mathewson 06 Jul '18

06 Jul '18

On Sun, Jan 30, 2011 at 2:13 PM, emersonv6 <emersonv6(a)gmx.com> wrote: > Hi, > > I was wondering if anyone has succeeded torifyng Mixminion. You'd probably want to hack up Mixminion's socket.connect stuff to use a SOCKS-compatible version instead. The functions to hack on the client side would be in lib/mixminion/MMTPClient.py ; that's the part that does the client-side network connections. Unfortunately, Mixminion isn't maintained these days; if anybody is interested in new versions coming out, they should subscribe to the mixminion-dev list and coordinate with others. hth, -- Nick _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tahoe-lafs-weekly-news] TWN #8
by Patrick R McDonald 06 Jul '18

06 Jul '18

======================================================= Tahoe-LAFS Weekly News, issue number 8, July 24, 2011 ======================================================= Welcome to the Tahoe-LAFS Weekly News (TWN). Tahoe-LAFS_ is a secure, distributed storage system. `View TWN on the web`_ *or* `subscribe to TWN`_. .. _Tahoe-LAFS: http://tahoe-lafs.org .. _View TWN on the web: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/TahoeLAFSWeeklyNews .. _subscribe to TWN: http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news Announcements and News ====================== Brian Warner announced_ the 1.9 plan. For a new feature to make into 1.9, it must have a ticket with a patch in the "Review-Needed" state by 24 July. The developers will review and land said patches over the following week, ending 31 July. Bug fixes will work exactly the same as new features except the patch and review needed deadline is 31 July and the developers' review ends 7 Aug. The beta should be cut on 8 Aug with 3 weeks of testing to follow. The final release is scheduled for 31 Aug. While MDMF will be the core of this release, Tahoe will not create them by default. Due to it being a compatibility impacting feature, the development team plans to have the feature in a release or two before enabling it by default. In the interests of allowing the developers to work towards 1.9, we are postponing the Interview with the Developers section until after the release. .. _announced: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006567.html Open Source Project of the Week =============================== The Open Source Project of the Week is `The Crypto Project`_. "The Crypto Project is an organization designed to assist and encourage anonymity and encryption research, development, and use. As part of this goal, we seek to revitalize the Cypherpunk movement and provide better software, security, and anonymity to individuals worldwide." The Crypto Project covers a variety of crypto projects including Tahoe-LAFS. .. _`The Crypto Project`: http://crypto.is >From the tahoe-dev Mailing List =============================== Linus Lussing started a discussion on Tahoe-LAFS and `SSHFS latency`_ issues. With 1.9 fast approaching, Zooko posted a `request for help`_ with updating the documentation. He already updated the FAQ_. In response to last week's question on the differences between Tahoe-LAFS and Freenet, Zooko provided a rather nice answer_. Zooko suggested_ dropping support for all versions of Python with the exception of 2.7 on Windows. Zooko recommended_ ticket 68_ to Andre Stenvall if Tahoe-LAFS still interested him for his master thesis work. Ticket 68_ works to implement distributed introduction, thereby eliminating the introducer as a single point of failure. Brandon Meskimen and Josh Wilcox discussed how to run a `Tahoe-LAFS introducer`_. Zooko and Samuel Neves discussed `hash based signatures`_ for Tahoe-LAFS. .. _`SSHFS latency`: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006563.html .. _`request for help`: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006562.html .. _FAQ: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/FAQ .. _answer: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006560.html .. _suggested: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006558.html .. _recommended: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006556.html .. _68: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/68# .. _`Tahoe-LAFS introducer`: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006555.html .. _`hash based signatures`: http://tahoe-lafs.org/pipermail/tahoe-dev/2011-July/006554.html Patch Needing Review of the Week ================================ The Patch Needing Review of the Week is 393_. This patch covers MDMF, a key feature in 1.9. You may recall MDMF from our `interview with Kevan`_. When the review is completed, we are one step closer to 1.9 .. _393: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/393 .. _`interview with Kevan`: http://tahoe-lafs.org/~zooko/TWN2.html ---- *The Tahoe-LAFS Weekly News is published once a week by The Tahoe-LAFS Software Foundation, President and Treasurer: Peter Secor. Scribes: Patrick "marlowe" McDonald, Zooko Wilcox-O'Hearn, Editor: Zooko.* `View TWN on the web`_ *or* `subscribe to TWN`_ *. Send your news stories to* marlowe(a)antagonism.org_ *b submission deadline: Friday night.* .. _marlowe(a)antagonism.org: mailto:marlowe@antagonism.org _______________________________________________ tahoe-lafs-weekly-news mailing list tahoe-lafs-weekly-news(a)tahoe-lafs.org http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0