July 2018 - cypherpunks-legacy

Re: [ZS] ZS reboot seed
by Bryce Lynch 06 Jul '18

06 Jul '18

On Thu, Sep 20, 2012 at 6:53 AM, R|diger Koch <rudiger.koch(a)gmail.com> wrote: > I hope and believe that we still have a long way to go down the Road to > Serfdom until this becomes a real possibility. There is still a chance that > the current process stops. The USA had a close brush with totalitarianism > (Mc Carthy) in the 1950s and also managed to come around. We're creeping closer to it again, I'm afraid - anarchists are the new reds, warrants are secret, and doors are being kicked in. > If we get close, we'll stop distributing updates, find another way to > accomplish the same goals and ask everyone to destroy their copies. This is, incidentally, why I keep talking about running everything over Tor and using distributed services. If one instance of a service has to disappear (say it gets /usr/bin/shred'd for security) other instances on the network wll still exist and operate normally. -- The Doctor [412/724/301/703] [ZS] https://drwho.virtadpt.net/ "I am everywhere." -- -- Zero State mailing list: http://groups.google.com/group/DoctrineZero ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tor-talk] Tor Browser Bundle 2.2.x Ubuntu AppArmor Profile
by Number Six 06 Jul '18

06 Jul '18

Hello, I've spent some time creating Ubuntu AppArmor profiles for the Tor Browser Bundle and its components and related apps. I've based them upon publicly available profiles that needed some dusting off, updating, and adapting to Tor. For the unfamiliar, AppArmor is a least privilege access control system that attempts to prevent exploited applications from accessing system resources that they shouldn't normally need. It is similar to SELinux, but it is much easier to create, understand and modify AppArmor profiles than SELinux policies. The profiles are not perfect, and they really need the new features in the AppArmor dev series to make them awesome. In my opinion, the biggest advantage of non-dev AppArmor right now is that it gives you the ability to watch your logs for audit messages that could indicate botched+blocked exploit attempts or bad behavior, and to protect your personal files from exploited applications. For information on working with AppArmor in Ubuntu (including how to load these profiles), see: https://help.ubuntu.com/community/AppArmor Here's a rundown of the policies I've created and their security properties. The profiles themselves are at the pastebin links. 1. Tor Browser Bundle 2.2.x Profile: http://pastebin.com/La6C8tZJ This profile isolates Tor, Vidalia, and Firefox to least privilege. However, some AppArmor shortcomings mean that it is not as good as it could be. According to the AppArmor wiki, it looks like the features we really want won't be available until AppArmor 2.8 or 3.0. In particular, the profile will *not* have the ability to restrict connections from Firefox to prevent non-Tor connections until AppArmor supports more rule commands. Obviously this is a big issue if the prime goal of an exploit is to learn your IP address, and if bugs of this sort still exist in Firefox. Until AppArmor provides the ability to write rules like 'network tcp connect from 127.0.0.1 on lo to 127.0.1:9050' or even just 'network tcp dst 127.0.0.1', any arbitrary code exploit against Vidalia or Firefox can still connect to arbitrary IPs outside of Tor :/. See http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Note:_abo… for more details. Additionally, Tor and Firefox are still free to perform UDP datagram traffic, due to the desire on my part to squelch the audit log traffic down to a minimum. (The AppArmor in Ubuntu currently has a bug that causes it to always log UDP violations, even if you tell it to silence with a 'deny'). Since I think watching audit logs closely is one of the most useful properties of AppArmor, and since noise makes this substantially harder, the profiles currently allow UDP. Despite these major issues, the profile is significantly better than nothing. The main benefit you get is that all file read and write access is restricted to ~/Downloads and ~/Public, and TBB can't launch outside apps, use ptrace, access /dev/, /tmp/, or interact with the desktop. As a result, you will get a lot of permission denied errors from Firefox when trying to download and upload files, because the TBB folder defaults are screwy. Click through the errors and navigate to ~/Downloads/. Or change the directory in the AppArmor profile to something you like. 2. Tor Profile: http://pastebin.com/u2AXYWLJ A separate profile for the system Tor binary, which some might find useful for proxying non-browser activity. 3. Vidalia Profile: http://pastebin.com/4ZKHnVRY Same deal for the system Vidalia binary. 4. Pidgin Profile: http://pastebin.com/0Ycn4Bgy This profile is based on the profile at http://bazaar.launchpad.net/~jpds/apparmor/pidgin-profile/view/head:/usr.bi… but with some additional restrictions. In particular, I forbid ptrace. It was explicitly allowed by the profile and still occasionally attempted by my client, but did not seem needed to load plugins or otherwise function. I also removed access to a lot of X window resources, and restricted homedir access in a similar manner as to the TBB Firefox profile. If you're interested in editing these profiles, see http://wiki.apparmor.net/index.php/QuickProfileLanguage and http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference. If you know basic UNIX, AppArmor is surprisingly easy to pick up and customize with the documentation in-hand. Please let me know if you make any improvements or figure out workarounds for current limitations. -- Number Six number6(a)elitemail.org -- http://www.fastmail.fm - Send your email first class _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

[tor-talk] Tor Browser Bundle 2.2.x Ubuntu AppArmor Profile
by Number Six 06 Jul '18

06 Jul '18

Hello, I've spent some time creating Ubuntu AppArmor profiles for the Tor Browser Bundle and its components and related apps. I've based them upon publicly available profiles that needed some dusting off, updating, and adapting to Tor. For the unfamiliar, AppArmor is a least privilege access control system that attempts to prevent exploited applications from accessing system resources that they shouldn't normally need. It is similar to SELinux, but it is much easier to create, understand and modify AppArmor profiles than SELinux policies. The profiles are not perfect, and they really need the new features in the AppArmor dev series to make them awesome. In my opinion, the biggest advantage of non-dev AppArmor right now is that it gives you the ability to watch your logs for audit messages that could indicate botched+blocked exploit attempts or bad behavior, and to protect your personal files from exploited applications. For information on working with AppArmor in Ubuntu (including how to load these profiles), see: https://help.ubuntu.com/community/AppArmor Here's a rundown of the policies I've created and their security properties. The profiles themselves are at the pastebin links. 1. Tor Browser Bundle 2.2.x Profile: http://pastebin.com/La6C8tZJ This profile isolates Tor, Vidalia, and Firefox to least privilege. However, some AppArmor shortcomings mean that it is not as good as it could be. According to the AppArmor wiki, it looks like the features we really want won't be available until AppArmor 2.8 or 3.0. In particular, the profile will *not* have the ability to restrict connections from Firefox to prevent non-Tor connections until AppArmor supports more rule commands. Obviously this is a big issue if the prime goal of an exploit is to learn your IP address, and if bugs of this sort still exist in Firefox. Until AppArmor provides the ability to write rules like 'network tcp connect from 127.0.0.1 on lo to 127.0.1:9050' or even just 'network tcp dst 127.0.0.1', any arbitrary code exploit against Vidalia or Firefox can still connect to arbitrary IPs outside of Tor :/. See http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Note:_abo… for more details. Additionally, Tor and Firefox are still free to perform UDP datagram traffic, due to the desire on my part to squelch the audit log traffic down to a minimum. (The AppArmor in Ubuntu currently has a bug that causes it to always log UDP violations, even if you tell it to silence with a 'deny'). Since I think watching audit logs closely is one of the most useful properties of AppArmor, and since noise makes this substantially harder, the profiles currently allow UDP. Despite these major issues, the profile is significantly better than nothing. The main benefit you get is that all file read and write access is restricted to ~/Downloads and ~/Public, and TBB can't launch outside apps, use ptrace, access /dev/, /tmp/, or interact with the desktop. As a result, you will get a lot of permission denied errors from Firefox when trying to download and upload files, because the TBB folder defaults are screwy. Click through the errors and navigate to ~/Downloads/. Or change the directory in the AppArmor profile to something you like. 2. Tor Profile: http://pastebin.com/u2AXYWLJ A separate profile for the system Tor binary, which some might find useful for proxying non-browser activity. 3. Vidalia Profile: http://pastebin.com/4ZKHnVRY Same deal for the system Vidalia binary. 4. Pidgin Profile: http://pastebin.com/0Ycn4Bgy This profile is based on the profile at http://bazaar.launchpad.net/~jpds/apparmor/pidgin-profile/view/head:/usr.bi… but with some additional restrictions. In particular, I forbid ptrace. It was explicitly allowed by the profile and still occasionally attempted by my client, but did not seem needed to load plugins or otherwise function. I also removed access to a lot of X window resources, and restricted homedir access in a similar manner as to the TBB Firefox profile. If you're interested in editing these profiles, see http://wiki.apparmor.net/index.php/QuickProfileLanguage and http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference. If you know basic UNIX, AppArmor is surprisingly easy to pick up and customize with the documentation in-hand. Please let me know if you make any improvements or figure out workarounds for current limitations. -- Number Six number6(a)elitemail.org -- http://www.fastmail.fm - Send your email first class _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Re: [tahoe-dev] switching from introducers to gossip?
by Brian 06 Jul '18

06 Jul '18

On 7/1/12 5:56 PM, Tony Arcieri wrote: > Is there any reason why you can't simply have multiple introducers, > which may have inconsistent views of the world, but which otherwise > function identically? Clients can use information gathered from all > introducers they're connected to in order to make connections to other > storage nodes. It seems like all that's really missing is a system to > construct the union of the available storage nodes as enumerated by > multiple introducers. That's doable (it's basically what the #68 Google Summer of Code project produced), and it would be more robust than the current one-lone-Introducer (and we need the "union of announcements" feature in any case). But it wouldn't decrease the administrative burden.. in fact it would be worse than a single introducer. Imagine a grid that has two Introducers and everybody knows about both of them (I1 and I2). Now the operator of one (I1) of them announces that they're going to retire it, so somebody (I3) else volunteers to add a replacement. We'll start with I1+I2, then have I1+I2+I3, then finish with I2+I3. With the #68-GSoC -style "introducer.furls", after the volunteer spins up I3, everybody in the entire grid has to edit their configs to add I3's new FURL. With gossip, the volunteer adds I3 and then they're done. Everyone else learns about I3 from I1/I2, then remembers I3, and connects to it even though I1 is gone. If you generalize this, then all nodes can function as introducers, and there's no need for dedicated Introducer nodes. As long as at least one node with a public IP is up at any given time, everybody else can learn the current state of the world. cheers, -Brian _______________________________________________ tahoe-dev mailing list tahoe-dev(a)tahoe-lafs.org https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[ias-opportunities] Call for Participation: FC 2008 -
by Radu Sion 06 Jul '18

06 Jul '18

Cozumel, Mexico, January 28-31, 2008 [Free Child Care, Free for children 1-12] To: ias-opportunities(a)cerias.purdue.edu Date: Mon, 10 Dec 2007 12:47:04 -0500 Reply-To: Radu Sion <sion(a)crypto.cs.sunysb.edu> Dear Colleague, This is a call for participation to the Financial Cryptography and Data Security Conference in Cozumel, Mexico, 28-31 January, 2008 (http://fc08.ifca.ai) Financial Cryptography and Data Security is a major international forum for research, advanced development, education, exploration, and debate regarding information assurance in the context of finance and commerce. The conference covers all aspects of securing transactions and systems. For more details including accepted papers and invited speakers, please see http://fc08.ifca.ai. Free Child Care We are happy to offer free child care as part of the conference. The hotel offers a kids' club, with supervised childcare and activities from 9am to 5pm for children of age 5-12 whose parents are somewhere on the premises (in the conference room is fine). This is free of charge for hotel guests. Baby-sitting is available for US$5 per child per hour. Additionally, as part of the room rate for conference attendees, children of age 0-12 are free of charge (including food). We apologize if you receive multiple copies of this message. We did our best to avoid this. Moreover, please let us know asap if you would like to be removed from this mailing list -- we would not like you to perceive this as spam. Please help us distribute this to other interested colleagues. Best Regards, Financial Cryptography and Data Security 2008 Organizers --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

Call for Participation: FC 2008
by Perry E. Metzger 06 Jul '18

06 Jul '18

Begin Forwarded Message:

1 0

[ias-opportunities] Call for Participation: FC 2008 -
by Radu Sion 06 Jul '18

06 Jul '18

Cozumel, Mexico, January 28-31, 2008 [Free Child Care, Free for children 1-12] To: ias-opportunities(a)cerias.purdue.edu Date: Mon, 10 Dec 2007 12:47:04 -0500 Reply-To: Radu Sion <sion(a)crypto.cs.sunysb.edu> Dear Colleague, This is a call for participation to the Financial Cryptography and Data Security Conference in Cozumel, Mexico, 28-31 January, 2008 (http://fc08.ifca.ai) Financial Cryptography and Data Security is a major international forum for research, advanced development, education, exploration, and debate regarding information assurance in the context of finance and commerce. The conference covers all aspects of securing transactions and systems. For more details including accepted papers and invited speakers, please see http://fc08.ifca.ai. Free Child Care We are happy to offer free child care as part of the conference. The hotel offers a kids' club, with supervised childcare and activities from 9am to 5pm for children of age 5-12 whose parents are somewhere on the premises (in the conference room is fine). This is free of charge for hotel guests. Baby-sitting is available for US$5 per child per hour. Additionally, as part of the room rate for conference attendees, children of age 0-12 are free of charge (including food). We apologize if you receive multiple copies of this message. We did our best to avoid this. Moreover, please let us know asap if you would like to be removed from this mailing list -- we would not like you to perceive this as spam. Please help us distribute this to other interested colleagues. Best Regards, Financial Cryptography and Data Security 2008 Organizers --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

[ias-opportunities] Call for Participation: FC 2008 -
by Radu Sion 06 Jul '18

06 Jul '18

Cozumel, Mexico, January 28-31, 2008 [Free Child Care, Free for children 1-12] To: ias-opportunities(a)cerias.purdue.edu Date: Mon, 10 Dec 2007 12:47:04 -0500 Reply-To: Radu Sion <sion(a)crypto.cs.sunysb.edu> Dear Colleague, This is a call for participation to the Financial Cryptography and Data Security Conference in Cozumel, Mexico, 28-31 January, 2008 (http://fc08.ifca.ai) Financial Cryptography and Data Security is a major international forum for research, advanced development, education, exploration, and debate regarding information assurance in the context of finance and commerce. The conference covers all aspects of securing transactions and systems. For more details including accepted papers and invited speakers, please see http://fc08.ifca.ai. Free Child Care We are happy to offer free child care as part of the conference. The hotel offers a kids' club, with supervised childcare and activities from 9am to 5pm for children of age 5-12 whose parents are somewhere on the premises (in the conference room is fine). This is free of charge for hotel guests. Baby-sitting is available for US$5 per child per hour. Additionally, as part of the room rate for conference attendees, children of age 0-12 are free of charge (including food). We apologize if you receive multiple copies of this message. We did our best to avoid this. Moreover, please let us know asap if you would like to be removed from this mailing list -- we would not like you to perceive this as spam. Please help us distribute this to other interested colleagues. Best Regards, Financial Cryptography and Data Security 2008 Organizers --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0