July 2018 - cypherpunks-legacy

[fc-announce] FC'04: Call for Participation
by Hinde ten Berge 06 Jul '18

06 Jul '18

Financial Cryptography '04 9-12 February 2004 Key West, Florida, USA Call for Participation Financial Cryptography is the premier international forum for education, exploration, and debate at the heart of one theme: Money and trust in the digital world. Dedicated to the relationship between cryptography and data security and cutting-edge financial and payment technologies and trends, the conference brings together top data-security specialists and scientists with economists, bankers, implementers, and policy makers. Financial Cryptography includes a program of invited talks, academic presentations, technical demonstrations, and panel discussions. These explore a range of topics in their full technical and interdisciplinary complexity: Emerging financial instruments and trends, legal regulation of financial technologies and privacy issues, encryption and authentication techologies, digital cash, and smartcard payment systems -- among many others. The conference proceedings containing all accepted submissions will be published in the Springer-Verlag Lecture Notes in Computer Science (LNCS) series after the conference. A pre-proceedings containing preliminary versions of the papers will be distributed at the conference. More information on the invited speakers is available on the web site, as well as the list of accepted papers and the preliminary schedule (see below as well). Registration for Financial Cryptography 2004 is now open; details and online registration can be found at http://fc04.ifca.ai along with information about discounted hotel accommodation and travel. Financial Cryptography is organized by the International Financial Cryptography Association (IFCA). More information can be obtained from the IFCA web site at http://www.ifca.ai or by contacting the conference general chair, Hinde ten Berge, at hinde(a)xs4all.nl. Financial Cryptography '04 Preliminary Schedule Sunday February 8 [tba] Registration and Welcome Reception Monday February 9 08:45-09:00 Opening Remarks 09:00-10:00 Keynote Speaker: Jack Selby 10:00-11:00 Keynote Speaker: Ron Rivest 11:00-11:30 Coffee Break 11:30-12:30 Loyalty and Micropayment Systems Microcredits for Verifiable Foreign Service Provider Metering Craig Gentry and Zulfikar Ramzan A Privacy-Friendly Loyalty System Based on Discrete Logarithms over Elliptic Curves Matthias Enzmann, Marc Fischlin, and Markus Schneider 12:30-14:00 Lunch 14:00-15:00 User Authentication Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop S. Stubblebine and P.C. van Oorschot Call Center Customer Verification by Query-Directed Passwords Lawrence OGorman, Smit Begga, and John Bentley Tuesday February 10 09:00-10:00 Keynote Speaker: Jacques Stern (Session Chair: Moti Yung) 10:00-11:00 Keynote Speaker: Simon Pugh (Session Chair: Moti Yung) 11:0011:30 Coffee Break 11:30-12:30 E-voting (Session Chair: Helger Lipmaa) The Vector-Ballot E-Voting Approach Aggelos Kiayias and Moti Yung Efficient Maximal Privacy in Voting and Anonymous Broadcast Jens Groth 12:30-14:00 Lunch 14:00-15:00 Panel: Building Usable Security Systems Moderator: Andrew Patrick Usability and Acceptablity of Biometric Security Systems Andrew Patrick, National Research Council of Canada Risk Perception Failures in Computer Security L. Jean Camp, Harvard University Visualization Tools for Security Administrators Bill Yurcik, NCSA, Univeristy of Illinois 20:00-21:00 General meeting 21:00- Rump session Wednesday February 11 09:00-10:00 Keynote Speaker: Jon Peha 10:00-10:30 Coffee Break 10:30-12:30 Auctions and Lotteries (Session Chair: Roger Dingledine) Interleaving Cryptography and Mechanism Design: The Case of Online Auctions Edith Elkind and Helger Lipmaa Secure Generalized Vickrey Auction without Third-Party Servers Makoto Yokoo and Koutarou Suzuki Electronic National Lotteries Elisavet Konstantinou, Vasiliki Liagokou, Paul Spirakis, Yannis C. Stamatiou, and Moti Yung Identity-based Chameleon Hash and Applications Giuseppe Ateniese and Breno de Medeiros 12:30-14:00 Lunch Thursday February 12 09:0010:30 Game Theoretic and Cryptographic Tools Selecting Correlated Random Actions Vanessa Teague An Efficient and Usable Multi-Show Non-Transferable Anonymous Credential System Pino Persiano and Ivan Visconti The Ephemeral Pairing Problem Jaap-Henk Hoepman 10:3011:00 Coffee Break 11:0013:00 Mix Networks and Anonymous Communications (Session Chair: Masayuki Abe) Mixminion: Strong Anonymity for Financial Cryptography Nick Mathewson and Roger Dingledine Practical Anonymity for the Masses with MorphMix Marc Rennhard and Bernhard Plattner Stopping Timing Attacks in Low-Latency Mix-Based Systems Brian N. Levine, Michael K. Reiter, and Chenxi Wang Provable Unlinkability Against Traffic Analysis Ron Berman, Amos Fiat, and Amnon Ta-Shma _______________________________________________ fc-announce mailing list fc-announce(a)ifca.ai http://mail.ifca.ai/mailman/listinfo/fc-announce --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: Supercookies
by Andrew Lewman 06 Jul '18

06 Jul '18

On 08/21/2009 10:58 AM, Freemor wrote: > You're not alone. I use a seperate browser for Tor and it is completely > stripped out no plugins, java/javascript disables, defaults to saving > to disk rather then opening stuff. etc. Try Torora, http://code.google.com/p/torora/. I've been heavily testing it and harassing Robert with long emails of "I wish it did X" recently. More testing with more real users would be good. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

WPI Crypto Seminar: Towards a Theory of Variable Privacy
by Monty Solomon 06 Jul '18

06 Jul '18

1 0

[fc-announce] FC'04: Call for Participation
by Hinde ten Berge 06 Jul '18

06 Jul '18

Financial Cryptography '04 9-12 February 2004 Key West, Florida, USA Call for Participation Financial Cryptography is the premier international forum for education, exploration, and debate at the heart of one theme: Money and trust in the digital world. Dedicated to the relationship between cryptography and data security and cutting-edge financial and payment technologies and trends, the conference brings together top data-security specialists and scientists with economists, bankers, implementers, and policy makers. Financial Cryptography includes a program of invited talks, academic presentations, technical demonstrations, and panel discussions. These explore a range of topics in their full technical and interdisciplinary complexity: Emerging financial instruments and trends, legal regulation of financial technologies and privacy issues, encryption and authentication techologies, digital cash, and smartcard payment systems -- among many others. The conference proceedings containing all accepted submissions will be published in the Springer-Verlag Lecture Notes in Computer Science (LNCS) series after the conference. A pre-proceedings containing preliminary versions of the papers will be distributed at the conference. More information on the invited speakers is available on the web site, as well as the list of accepted papers and the preliminary schedule (see below as well). Registration for Financial Cryptography 2004 is now open; details and online registration can be found at http://fc04.ifca.ai along with information about discounted hotel accommodation and travel. Financial Cryptography is organized by the International Financial Cryptography Association (IFCA). More information can be obtained from the IFCA web site at http://www.ifca.ai or by contacting the conference general chair, Hinde ten Berge, at hinde(a)xs4all.nl. Financial Cryptography '04 Preliminary Schedule Sunday February 8 [tba] Registration and Welcome Reception Monday February 9 08:45-09:00 Opening Remarks 09:00-10:00 Keynote Speaker: Jack Selby 10:00-11:00 Keynote Speaker: Ron Rivest 11:00-11:30 Coffee Break 11:30-12:30 Loyalty and Micropayment Systems Microcredits for Verifiable Foreign Service Provider Metering Craig Gentry and Zulfikar Ramzan A Privacy-Friendly Loyalty System Based on Discrete Logarithms over Elliptic Curves Matthias Enzmann, Marc Fischlin, and Markus Schneider 12:30-14:00 Lunch 14:00-15:00 User Authentication Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop S. Stubblebine and P.C. van Oorschot Call Center Customer Verification by Query-Directed Passwords Lawrence OGorman, Smit Begga, and John Bentley Tuesday February 10 09:00-10:00 Keynote Speaker: Jacques Stern (Session Chair: Moti Yung) 10:00-11:00 Keynote Speaker: Simon Pugh (Session Chair: Moti Yung) 11:0011:30 Coffee Break 11:30-12:30 E-voting (Session Chair: Helger Lipmaa) The Vector-Ballot E-Voting Approach Aggelos Kiayias and Moti Yung Efficient Maximal Privacy in Voting and Anonymous Broadcast Jens Groth 12:30-14:00 Lunch 14:00-15:00 Panel: Building Usable Security Systems Moderator: Andrew Patrick Usability and Acceptablity of Biometric Security Systems Andrew Patrick, National Research Council of Canada Risk Perception Failures in Computer Security L. Jean Camp, Harvard University Visualization Tools for Security Administrators Bill Yurcik, NCSA, Univeristy of Illinois 20:00-21:00 General meeting 21:00- Rump session Wednesday February 11 09:00-10:00 Keynote Speaker: Jon Peha 10:00-10:30 Coffee Break 10:30-12:30 Auctions and Lotteries (Session Chair: Roger Dingledine) Interleaving Cryptography and Mechanism Design: The Case of Online Auctions Edith Elkind and Helger Lipmaa Secure Generalized Vickrey Auction without Third-Party Servers Makoto Yokoo and Koutarou Suzuki Electronic National Lotteries Elisavet Konstantinou, Vasiliki Liagokou, Paul Spirakis, Yannis C. Stamatiou, and Moti Yung Identity-based Chameleon Hash and Applications Giuseppe Ateniese and Breno de Medeiros 12:30-14:00 Lunch Thursday February 12 09:0010:30 Game Theoretic and Cryptographic Tools Selecting Correlated Random Actions Vanessa Teague An Efficient and Usable Multi-Show Non-Transferable Anonymous Credential System Pino Persiano and Ivan Visconti The Ephemeral Pairing Problem Jaap-Henk Hoepman 10:3011:00 Coffee Break 11:0013:00 Mix Networks and Anonymous Communications (Session Chair: Masayuki Abe) Mixminion: Strong Anonymity for Financial Cryptography Nick Mathewson and Roger Dingledine Practical Anonymity for the Masses with MorphMix Marc Rennhard and Bernhard Plattner Stopping Timing Attacks in Low-Latency Mix-Based Systems Brian N. Levine, Michael K. Reiter, and Chenxi Wang Provable Unlinkability Against Traffic Analysis Ron Berman, Amos Fiat, and Amnon Ta-Shma _______________________________________________ fc-announce mailing list fc-announce(a)ifca.ai http://mail.ifca.ai/mailman/listinfo/fc-announce --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[tor-talk] Tor virus
by ethio tor 06 Jul '18

06 Jul '18

I am from Ethiopia. The problem faced by descendants in Ethiopia is many fold. 90 million people, a brutal repressive government by any standard, a single government owned ISP that has more government spies than actual telecommunication workers, a very poor and limited mobile and data infrastructure and sophisticated snooping ( https://blog.torproject.org/blog/ethiopia-introduces-deep-packet-inspection) regime. Certainly tor could benefit many people if it could be used widely. But with all the above problems how? And it just occurred to me!! I am not a coder so I don't know if it is possible. I am not certain what ethical questions it could raise or if it should at all under the above circumstance. Most of the PCs in the country are in government offices or given to government workers. And most of this PCs are the only once that has a relatively fast and free Internet access. Some thing that is common about all this PCs is that most of them are full of virus and Trojan horses (some say Chinese origin). Even state minsters offices. I am sure by now you are guessing where I am going with this. What if there is a tor "virus" (pardon for the choice of word) that can infect such pc and make a relay, bridge, or what ever on the background undetected. I have a feeling that if it were a smart idea some one would have thought of it but I could not sleep until I know how stupid an idea it is. _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Face and fingerprints swiped in Dutch biometric passport crack
by Gregory Hicks 06 Jul '18

06 Jul '18

Dave: For IP if you wish... A television program claims that the Dutch biometric passport has been "read remotely and then the security cracked using flaws built into the system, whereupon all of the biometric data could be read". The Delft smartcard security specialist Riscure claims to be able to read passport data, including date of birth, facial image and fingerprint, from up to 10 meters away "in around two hours". http://www.theregister.co.uk/2006/01/30/dutch_biometric_passport_crack/ --------------------------------------------------------------------- I am perfectly capable of learning from my mistakes. I will surely learn a great deal today. "A democracy is a sheep and two wolves deciding on what to have for lunch. Freedom is a well armed sheep contesting the results of the decision." - Benjamin Franklin "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Face and fingerprints swiped in Dutch biometric passport crack
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Face and fingerprints swiped in Dutch biometric passport crack
by Gregory Hicks 06 Jul '18

06 Jul '18

Dave: For IP if you wish... A television program claims that the Dutch biometric passport has been "read remotely and then the security cracked using flaws built into the system, whereupon all of the biometric data could be read". The Delft smartcard security specialist Riscure claims to be able to read passport data, including date of birth, facial image and fingerprint, from up to 10 meters away "in around two hours". http://www.theregister.co.uk/2006/01/30/dutch_biometric_passport_crack/ --------------------------------------------------------------------- I am perfectly capable of learning from my mistakes. I will surely learn a great deal today. "A democracy is a sheep and two wolves deciding on what to have for lunch. Freedom is a well armed sheep contesting the results of the decision." - Benjamin Franklin "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Face and fingerprints swiped in Dutch biometric passport crack
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: [tor-talk] Tor and P2P (Hidden SMS)
by Nathan Freitas 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/26/2012 08:53 PM, Ted Smith wrote: > Further, SMS is basically real-time. An SMS app that had > hidden-service type delays (which would be especially bad when > roaming between network connections, causing you to rebuild all of > your circuits) would probably be unusable for all but the most > paranoid (which isn't to say you shouldn't build this). I can tell you that based on prototype code I have created, SMS and VoIP type p2p applications between mobile devices works just fine. The latency is not bad, especially since the apps are coded to be asynchronous anyhow. Whether it takes 10 seconds or 1 minute for someone to respond does not bother users. Hidden Services as a globally anonymous NAT'd networked is an amazing opportunity for this type of application. We just need to solve the scalability problem so we do not, as Robert put it "thrash the hidden services directory". +n -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBAgAGBQJQY1QeAAoJEKgBGD5ps3qpurYP/27/iAMOyATOl5ME+636qMSz vfZQcdyHn/fJ7RwCVULmtmxPO9Gv0jua6bamR3jOCHYXM/GpEcIjz2S9tMb10uX0 MgiFNxmh2hC6+uuf4eyrWglrDpPCZc3QeWsiDV64nyhfo7cKJ09CN6qKGW228l1i gRPiT3ypfWBIu6OMlX2hBpBToI8xifrVH/dMiizZvFvNBTNXkzsUaUZi34O9znwi zCGi0zrEXsSN3uITKAEKBs63XrPU3Wam4sd7dUWFnSy7S6MknUQdIAFtVYzCyp7h +apznQJG9FLxYVU4qNPRRB9Ffm0eSDzf/ANSsMVg38ad+xZ2BMMwg4XDicUoEr0m ROa727U/MWQKCsm6zgwtvXNGcd29GjWn98SHmZR16kH+LrYhXoS/nKTNQgHUrqRT G6jRnEHGoIVFY71d+juCm8xgqgTBO+l7jFO143eBDb4iMUJW8eD/AuIT9xIn+r9x i545WWwynI8EAKj7IU2iGnZ3I1xwF2JOaSd7K9W+AiMJ45EjLpN2w+4QXdw/ud9s DSvFFpzrHGjtkYA3KFiIwaItcHkNkqEZf0kPdKRabLWjDf2a5Dsg55cyjZ3Xb+tr K+nvvc4z2C3QUoLV0wMr7rh8dw8cjb1nKs15mxYLeMw+1hhUTw0bvCbIj6NkGK2V r5y9TkDrsVIcJIvWAJsA =Y46k -----END PGP SIGNATURE----- _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0