July 2018 - cypherpunks-legacy

Re: report on security risks of applying CALEA to VoIP
by pat hache 06 Jul '18

06 Jul '18

just received from IP cheers

1 0

report on security risks of applying CALEA to VoIP
by Susan Landau 06 Jul '18

06 Jul '18

Tuesday 13 June 2006 at 10:35 Below you'll find an executive summary of "Security Implications of Applying the Communications Assistance for Law Enforcement Act to Voice over IP," by Steve Bellovin, Matt Blaze, Ernie Brickell, Clint Brooks, Vint Cerf, Whit Diffie, Susan Landau, Jon Peterson, John Treichler. The full report is at: http://www.itaa.org/news/docs/CALEAVOIPreport.pdf. Susan Security Implications of Applying the Communications Assistance to Law Enforcement Act to Voice over IP Steven Bellovin, Columbia University Matt Blaze, University of Pennsylvania Ernest Brickell, Intel Corporation Clinton Brooks, NSA (retired) Vinton Cerf, Google Whitfield Diffie, Sun Microsystems Susan Landau, Sun Microsystems Jon Peterson, NeuStar John Treichler, Applied Signal Technology Executive Summary For many people, Voice over Internet Protocol (VoIP) looks like a nimble way of using a computer to make phone calls. Download the software, pick an identifier and then wherever there is an Internet connection, you can make a phone call. From this perspective, it makes perfect sense that anything that can be done with a telephone, including the graceful accommodation of wiretapping, should be able to be done readily with VoIP as well. The FCC has issued an order for all ``interconnected'' and all broadband access VoIP services to comply with Communications Assistance for Law Enforcement Act (CALEA) --- without specific regulations on what compliance would mean. The FBI has suggested that CALEA should apply to all forms of VoIP, regardless of the technology involved in the VoIP implementation. Intercept against a VoIP call made from a fixed location with a fixed IP address directly to a big internet provider's access router is equivalent to wiretapping a normal phone call, and classical PSTN-style CALEA concepts can be applied directly. In fact, these intercept capabilities can be exactly the same in the VoIP case if the ISP properly secures its infrastructure and wiretap control process as the PSTN's central offices are assumed to do. However, the network architectures of the Internet and the Public Switched Telephone Network (PSTN) are substantially different, and these differences lead to security risks in applying the CALEA to VoIP. VoIP, like most Internet communications, are communications for a mobile environment. The feasibility of applying CALEA to more decentralized VoIP services is quite problematic. Neither the manageability of such a wiretapping regime nor whether it can be made secure against subversion seem clear. The real danger is that a CALEA-type regimen is likely to introduce serious vulnerabilities through its ``architected security breach.'' Potential problems include the difficulty of determining where the traffic is coming from (the VoIP provider enables the connection but may not provide the services for the actual conversation), the difficulty of ensuring safe transport of the signals to the law-enforcement facility, the risk of introducing new vulnerabilities into Internet communications, and the difficulty of ensuring proper minimization. VOIP implementations vary substantially across the Internet making it impossible to implement CALEA uniformly. Mobility and the ease of creating new identities on the Internet exacerbate the problem. Building a comprehensive VoIP intercept capability into the Internet appears to require the cooperation of a very large portion of the routing infrastructure, and the fact that packets are carrying voice is largely irrelevant. Indeed, most of the provisions of the wiretap law do not distinguish among different types of electronic communications. Currently the FBI is focused on applying CALEA's design mandates to VoIP, but there is nothing in wiretapping law that would argue against the extension of intercept design mandates to all types of Internet communications. Indeed, the changes necessary to meet CALEA requirements for VoIP would likely have to be implemented in a way that covered all forms of Internet communication. In order to extend authorized interception much beyond the easy scenario, it is necessary either to eliminate the flexibility that Internet communications allow, or else introduce serious security risks to domestic VoIP implementations. The former would have significant negative effects on U.S. ability to innovate, while the latter is simply dangerous. The current FBI and FCC direction on CALEA applied to VoIP carries great risks. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: report on security risks of applying CALEA to VoIP
by pat hache 06 Jul '18

06 Jul '18

just received from IP cheers

1 0

Re: [liberationtech] Skype redux
by Moxie Marlinspike 06 Jul '18

06 Jul '18

On 12/22/2012 04:49 AM, Brian Conley wrote: > That said, thus far, neither redphone nor those over listed rivals skype > or Google hangouts quality of transmission. Depends. RedPhone's audio quality is (in general) substantially better on Android than Skype's has been. Skype's desktop audio quality is probably better than RedPhone's, however. I see this more as a desktop vs. android thing rather than a skype vs. redphone thing. Low-latency audio on Android is just hard, particularly over mobile data networks. It is true, however, that Skype has a much larger engineering team than we do. I like to think that RedPhone is getting better all the time, but if this is something that you or anyone on this list is interested in, we'd obviously welcome help improving things in any way that you can contribute. Please don't be shy about filing issues in the GitHub issue tracker for the project, even if they are user experience type things rather than strictly bugs. We need the feedback. > This is not meant to detract from them, its more a question, is a > revenue based model the only option to ensure high enough quality to > attract users and grow? I agree that it's a problem. I've pointed out before that user expectations for these types of apps are set by things like WhatsApp, which is an entire company focused *just* on a single chat app, with an engineering team that is larger than the number of developers in the whole "privacy enhancing technology" community put together. I think there are at least a couple of trends working in our favor though: 1) Mobile apps are a huge opportunity for us. It's difficult to do much in the security/privacy area strictly within the browser, and the barrier to installing native desktop apps is high enough that you need something like the network effect of skype to make it happen. The barrier to having users install mobile apps is much lower, and what we can do within that framework is much greater. 2) Infrastructure continues to get easier to deploy, manage, and scale. As depressing as it is that there are companies developing insecure communication tools with engineering teams larger than our entire community, there are also examples of very small teams that have done some really highly scalable stuff. The engineering team at Instagram, for instance, was quite small. They were able to leverage AWS to scale up without many problems, while focusing most of their effort on user experience and core features. Right now RedPhone has a global set of POPs deployed that offer less than 100ms RTT to a relay from almost anywhere in the world, and we don't have a dedicated infrastructure team. That would have been really hard to do in the past. - moxie -- http://www.thoughtcrime.org -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Tor in Mexico
by andrew＠torproject.org 06 Jul '18

06 Jul '18

On Sat, Nov 12, 2011 at 08:30:45PM +0100, matej.kovacic(a)owca.info wrote 1.0K bytes in 28 lines about: : The site mentioned (http://www.nuevolaredoenvivo.es.tl/) is promoting : Tor use. It seems the victim used Tor, but the gangsters were able to : identify and kill him anyway... There's nothing in the chron.com report, nor that site, that ties Tor usage to the targeted/killed people. Using a hidden service may help protect both the site and users. I talked to a journalist from a newspaper in Mexico City concerned about journalist safety in light of the ongoing drug wars. Most of the discussion was about how internet surveillance can happen and things people can do to stay safe, even if they aren't reporting on the drug wars. There was another journalist from an activist organization with the same sorts of questions. In both cases, the bulk of the discussion wasn't around the technology, but about the social aspects of anonymity. If you use tor to successfully hide from an adversary who runs the ISP, but login to facebook and join an anti-zeta group under your real name and profile, well, you've lost your anonymity. I mentioned http://advocacy.globalvoicesonline.org/, specifically http://advocacy.globalvoicesonline.org/projects/guide/, as examples of places to learn more about blogging/reporting in dangerous areas. CPJ also has a guide to reporting in dangerous places, https://www.cpj.org/reports/2003/02/journalist-safety-guide.php. This violence against journalists (both citizen and traditional) is nothing new for lots of places in the world. It seems American's aren't used to seeing it this close to our borders, https://www.cpj.org/americas/mexico/. Tor alone cannot save you in completely hostile situations. Understanding the environment and making decisions on your own is key. Many people are struggling with the understanding part due to being overwhelmed with the technical knowledge required to stay completely safe online, yet still live in a hostile area. The lack of understanding leads to poor or uninformed decisions. No software is going to solve some of these issues. >From talking to DEA agents and former drug/gang members, the drug cartels are just as advanced as the police forces, if not more so. We're seeing the results of this in the targeted killings based on online activities. -- Andrew pgp key: 0x74ED336B _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Tor in Mexico
by andrew＠torproject.org 06 Jul '18

06 Jul '18

On Sat, Nov 12, 2011 at 08:30:45PM +0100, matej.kovacic(a)owca.info wrote 1.0K bytes in 28 lines about: : The site mentioned (http://www.nuevolaredoenvivo.es.tl/) is promoting : Tor use. It seems the victim used Tor, but the gangsters were able to : identify and kill him anyway... There's nothing in the chron.com report, nor that site, that ties Tor usage to the targeted/killed people. Using a hidden service may help protect both the site and users. I talked to a journalist from a newspaper in Mexico City concerned about journalist safety in light of the ongoing drug wars. Most of the discussion was about how internet surveillance can happen and things people can do to stay safe, even if they aren't reporting on the drug wars. There was another journalist from an activist organization with the same sorts of questions. In both cases, the bulk of the discussion wasn't around the technology, but about the social aspects of anonymity. If you use tor to successfully hide from an adversary who runs the ISP, but login to facebook and join an anti-zeta group under your real name and profile, well, you've lost your anonymity. I mentioned http://advocacy.globalvoicesonline.org/, specifically http://advocacy.globalvoicesonline.org/projects/guide/, as examples of places to learn more about blogging/reporting in dangerous areas. CPJ also has a guide to reporting in dangerous places, https://www.cpj.org/reports/2003/02/journalist-safety-guide.php. This violence against journalists (both citizen and traditional) is nothing new for lots of places in the world. It seems American's aren't used to seeing it this close to our borders, https://www.cpj.org/americas/mexico/. Tor alone cannot save you in completely hostile situations. Understanding the environment and making decisions on your own is key. Many people are struggling with the understanding part due to being overwhelmed with the technical knowledge required to stay completely safe online, yet still live in a hostile area. The lack of understanding leads to poor or uninformed decisions. No software is going to solve some of these issues. >From talking to DEA agents and former drug/gang members, the drug cartels are just as advanced as the police forces, if not more so. We're seeing the results of this in the targeted killings based on online activities. -- Andrew pgp key: 0x74ED336B _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] Code for America Open Data Hackathon
by Yosem Companys 06 Jul '18

06 Jul '18

Code for America's Data Deathmatch! Nov. 2rd/3rd, Fight Political Corruption and Help Schools Work Smarter! Are you a hacker, designer, or civic nerd who wants to fight political corruption or thinks that our schools should work smarter? Choose your focus, work with our government allies, and join Code for America for a hackathon to improve the cities we live in. Webve opened datasets, now available through well documented APIs, and have lined up a blockbuster group of open data advocates standing ready to help you build apps that will revolutionize the way citizens interact with government. Data DeathMatch! Nov 2nd, 2012: 6:30PM - 8PM (mixer, kickoff), Nov. 3rd 9AM - 7PM (hackathon) Code for America HQ: 155 9th St, San Francisco, CA. Sign-up: http://datadeathmatch.eventbrite.com Guest Speakers: Ann Ravel, Chair of Californiabs Fair Political Practices Commission James Sanders, Innovation Manager for KIPP Bay Area Schools Phil Trounstine, co-editor and publisher of Calbuzz Kuang Chen, CEO of Captricity Franklin Chien, CEO of LearnSprout Alex Tran, Code for America Accelerator How are we different than other hackathons? Webre bringing the experts to YOU, to work on shiny, newly accessible data. If youbve ever wanted to build a civic or education app with a real understanding of the context behind the data, this is your chance. What are we working with? Government data: The Fair Political Practices Commission (FPPC) of California (our statebs official watchdog that holds public officials accountable) has recently taken the bold step to make the 2011 economic interest filings of some California officials available as structured data, not just PDFs on a website. Stocks and houses and gifts, oh my! You have the chance to raise the bar for all transparency initiatives by creating new value out of this data. Education Data: For developers looking to jump into the growing educational technology market, LearnSprout offers a unique opportunity to turbo charge your idea. The company has built the first-ever API that allows you to tap into live data from a school or districtbs Student Information System (SIS). This opens the door to countless possibilities that before, would be impossible without access to live data. Bonus: Prizes: $1000! Beer, breakfast, lunch, and dinner in the amazing Code for America offices! Also, board games, ping pong and air hockey! -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [p2p-hackers] Bitcoin incentive on Kademlia networks
by Zooko Wilcox-O'Hearn 06 Jul '18

06 Jul '18

Folks: Speaking as a list member rather than as the moderator, changaco(a)changaco.net's statements that "money has to be based on something", that Bitcoin is "based on" proof-of-work and that people would need to waste CPU cycles in order to trade files (under danimoth's proposal) are all incorrect. b: Money, to be useful as money, only has to be acceptable and valuable to enough people. It doesn't have to be "based on something". Bitcoin isn't really "based on" proof-of-work. It's mostly "based on" digital signatures. The proof-of-work part is really just to make it difficult (but not impossible) for attackers to perform a rewind attack. There are designs floating around which replace the proof-of-work with other mechanisms intended to deter rewind attack, and the properties of the resulting systems are almost the same as the properties of Bitcoin. People would not have to burn CPU cycles in order to trade files in danimoth's proposal. Only the transaction-verification-servers (also called "miners" in Bitcoin) need to do any proof-of-work (in order to deter rewind attack). Normal users who want to send or receive Bitcoin do not need to do any proof-of-work. Regards, Zooko Wilcox-O'Hearn Founder, CEO, and Customer Support Rep https://LeastAuthority.com _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0