July 2018 - cypherpunks-legacy

Goodies To Go #139: Steganography
by HTML Goodies to Go 06 Jul '18

06 Jul '18

Burns is a computer science professor. No wonder students' heads are so often fucked up. # # # ************************************************************ Goodies to Go (tm) July 16, 2001--Newsletter 139 This newsletter is part of the internet.com network. http://www.internet.com Please visit http://www.htmlgoodies.com ************************************************************ Now onto today's topic... I've been a big fan of Morgan Freeman ever since I saw the Shawshank Redemption. Not too long ago, I went to see one of his films titled, "Along Came a Spider". It wasn't spectacular but then again, it wasn't bad. I enjoyed it and the popcorn was fresh. Like many films that involve the Internet, email and streaming digital video, the technology was often overblown. What happens on the screen mostly likely wouldn't happen in real life, at least not over a 28.8 modem attached to AOL. This movie was full of that kind of stuff. Streaming video looking like HDTV, email had a graphic interface that was just spectacular, and kids were sending text messages back and forth encoded into gif images. Oh, wait. That last one's true. It's a process called steganography and it's nothing overly difficult. In fact, there are numerous freeware and shareware programs out there that will help you to encode text or images into documents, images, or sounds. They're easy to find. I was successful by going to Shareware.com and Tucows.com and simply searching "Steganography". The choices were vast. You'll find that the software tends to differ a great deal. Some will only encode into BMP. The one I have will encode to both BMP and GIF. Other programs will encode into sounds files. If this is new to you, you must be thinking the same thing I was thinking. There's no way the sound file would play if text were encoded into it. Well, you'd be wrong. It plays just fine. The only downfall of my program was that the BMP images that I encoded text files into looked a bit grainy. I'm sure you can see why kids would dig this. Little Joey can email an image of Michael Jordan to his friend Billy. Billy's Mom sees the image and thinks all is OK. Only now, Billy runs the image through his un-encoder and there are the answers to tomorrow's testor worse. I know what you were thinking! Of course this is much more than a simple method of transferring data between kids. It can be used to cloak all kinds of data. And, in fact, is has. There's now a belief that terrorist Osama bin Laden, has been sending documents around the world hidden within pornographic images and MP3 files. That copy of Barry Manilow's "Copa Cabana" you grabbed from NAPSTER could have plans stuck way down deep inside. You simply wouldn't know by looking at it. /-------------------------------------------------------------------\ * Don't Miss the 802.11 Planet Fall 2001 Conference and Expo * Where Wireless Business and Technology Converge October 2-3 Santa Clara Convention Center, Santa Clara, CA. Whether you're steeped in 802.11 technology, or need a crash course in translating the alphabet soup, this is the premier 802.11 event for getting up to speed on the exploding industry of wireless networking and Internet access. Register Now and save $100 http://seminars.internet.com/80211/la01/ \--------------------------------------------------------------adv.-/ Let me go one step further if I might. If it is actually true that terrorists are doing this, shouldn't our government look for it with the intent to intercept it? You have most likely heard of a program called, "Carnivore". According to the FBI, Carnivore was so named because it "chews" all of the data coming through a certain data network but only "eats" information allowed by court order. Basically, Carnivore is a wiretap used on the Internet. What's more, Carnivore is always at the very center of the privacy debate. If it is true that terrorists are using steganography to transfer data round the Web, then I think you're going to start to hear a little more about Carnivore because, as far as I can see, it is our best bet to catch these embedded packets. The problem then is two fold. Carnivore works through court order and thus deals only with "allowed" data. You may disagree, but let's stay with that thinking for a moment. Privacy advocates will have enough to be upset about by the end of this newsletter without bringing anything to the table. Problem number one is that the mail from a terrorist group will not be labeled as such. I highly doubt you're going to find "BinLaden036(a)yahoo.com". That means that using Carnivore as a set wiretap will be difficult. It may happen that the FBI only knows that somewhere on a network, there may be a terrorist. Thus, all email will have to be searched. Now problem number two. It's not the text of the email that's the problem any more. It's the attachment. Carnivore, if it isn't already, will have to be bettered to be able to look at attachments and "know" whether that attachment contains an embedded file. And! If Carnivore finds an embedded file, it will have to open it to read it. Oh dear. Steganography is real and there's serious reason to believe that it is being used for very bad purposes. We have once again come full circle on the same basic question of privacy on the Web. If you have privacy, so does the person sending around terrorist documents. I think we can all agree that no one wants that. New technology has once again opened a Pandora's box of privacy and legal issues, but it's the same old question. How much of your privacy are you willing to give up so that those searching for a terrorist have any opportunity at all. >>>>>>>>>>>>>>>>>>> That's That - Thanks for reading. Joe Burns, Ph.D. And Remember: How many licks does it take to get to the middle of a Toosie Pop? It's more than three. Numerous experiments have been undertaken to find the answer. The average is 142. The data span was 75 to 200 licks. I'm not sure if 142 represented the mean or the average. I'm not sure how much I care either.

1 0

[liberationtech] New Book: Internet and Surveillance: The Challenges of Web 2.0 and Social Media
by Christian Fuchs 06 Jul '18

06 Jul '18

Fuchs, Christian, Kees Boersma, Anders Albrechtslund and Marisol Sandoval (Eds.). 2011. Internet and Surveillance: The Challenges of Web 2.0 and Social Media. New York: Routledge. ISBN 978-0-415-89160-8. EU COST Publication. 332 pages. http://fuchs.uti.at/books/internet-and-surveillance-the-challenges-of-web-2… With contributions by: Anders Albrechtslund, Thomas Allmer, Mark Andrejevic, David Arditi, Roberto Armengol, Kees Boersma, Miyase Christensen, Christian Fuchs, David W. Hill, AndrC) Jansson, Deborah G. Johnson, David Lyon, Thomas Mathiesen, Marisol Sandoval, IvC!n SzC)kely, Monika Taddicken, Daniel Trottier, Kent Wayland, Rolf H. Weber The publication has been supported by EU COST b European Cooperation in Science and Technology and the EU COST Action IS0807 b Living in Surveillance Societiesb . This book is the first ever published volume that is dedicated to Internet surveillance in the age of what has come to be termed b social mediab or b web 2.0b3 (blogs, wikis, file sharing, social networking sites, microblogs, user-generated content sites, etc). The Internet has been transformed in the past years from a system primarily oriented on information provision into a medium for communication and community-building. The notion of b Web 2.0b, social software, and social networking sites such as Facebook, Twitter and MySpace have emerged in this context. With such platforms comes the massive provision and storage of personal data that are systematically evaluated, marketed, and used for targeting users with advertising. In a world of global economic competition, economic crisis, and fear of terrorism after 9/11, both corporations and state institutions have a growing interest in accessing this personal data. Here, contributors explore this changing landscape by addressing topics such as commercial data collection by advertising, consumer sites and interactive media; self-disclosure in the social web; surveillance of file-sharers; privacy in the age of the internet; civil watch-surveillance on social networking sites; and networked interactive surveillance in transnational space. This book is a result of a research action launched by the intergovernmental network COST (European Cooperation in Science and Technology). -- Prof. Christian Fuchs Chair in Media and Communication Studies Department of Informatics and Media Uppsala University KyrkogC%rdsgatan 10 Box 513 751 20 Uppsala Sweden christian.fuchs(a)im.uu.se Tel +46 (0) 18 471 1019 http://fuchs.uti.at http://www.im.uu.se NetPolitics Blog: http://fuchs.uti.at/blog Editor of tripleC: http://www.triple-c.se Book "Foundations of Critical Media and Information Studies" (Routledge 2011) Book "Internet and Society" (Paperback, Routledge 2010) _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Adium w/ Facebook, or Google Talk
by ei8fdb＠ei8fdb.org 06 Jul '18

06 Jul '18

Hello Frank, I have used Adium for at least 4-5 years. It is a very good piece of open source software. It is possible to secure all communications through Adium using OTR (Off-The-Record) crypto. [1] I would leave commenting about the security of OTR to others, but in my view it is secure (except multiuser chats, and file transfers). I have Facebook chat, and GTalk configured on Adium, but do not use them as preferred communications channels. GTalk certainly was working this morning when I was using my Mac (if it wasn't it would notify me with an error). You can configure it for GTalk by following the steps. [2] [1] http://en.wikipedia.org/wiki/Off-the-Record_Messaging [2] http://support.google.com/talk/bin/answer.py?hl=en&answer=24075 I hope that helps. Bernard On Mon, 02 Jul 2012 06:42:23 -0700, frank(a)journalistsecurity.net wrote: > I wonder if people here recommend the open source freeware Chat tool > Adium? > > http://adium.im/about [1]/ > > And whether they would recommend using it with Facebook? > > Or, if not, Google Talk? > > Thanks! FS > > Frank Smyth > Executive Director > Global Journalist Security > frank(a)journalistsecurity.net [2] > Tel. + 1 202 244 0717 > Cell + 1 202 352 1736 > Twitter: @JournoSecurity > Website: www.journalistsecurity.net [3] > PGP Public Key [4] > > Please consider our Earth before printing this email. > > Confidentiality Notice: This email and any files transmitted with it > are confidential. If you have received this email in error, please > notify the sender and delete this message and any copies. If you are > not the intended recipient, you are notified that disclosing, copying, > distributing or taking any action in reliance on the contents of this > information is strictly prohibited. > > > > Links: > ------ > [1] http://adium.im/about > [2] mailto:frank@journalistsecurity.net > [3] http://www.journalistsecurity.net > [4] http://www.journalistsecurity.net/franks-pgp-public-key _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Goodies To Go #139: Steganography
by HTML Goodies to Go 06 Jul '18

06 Jul '18

Burns is a computer science professor. No wonder students' heads are so often fucked up. # # # ************************************************************ Goodies to Go (tm) July 16, 2001--Newsletter 139 This newsletter is part of the internet.com network. http://www.internet.com Please visit http://www.htmlgoodies.com ************************************************************ Now onto today's topic... I've been a big fan of Morgan Freeman ever since I saw the Shawshank Redemption. Not too long ago, I went to see one of his films titled, "Along Came a Spider". It wasn't spectacular but then again, it wasn't bad. I enjoyed it and the popcorn was fresh. Like many films that involve the Internet, email and streaming digital video, the technology was often overblown. What happens on the screen mostly likely wouldn't happen in real life, at least not over a 28.8 modem attached to AOL. This movie was full of that kind of stuff. Streaming video looking like HDTV, email had a graphic interface that was just spectacular, and kids were sending text messages back and forth encoded into gif images. Oh, wait. That last one's true. It's a process called steganography and it's nothing overly difficult. In fact, there are numerous freeware and shareware programs out there that will help you to encode text or images into documents, images, or sounds. They're easy to find. I was successful by going to Shareware.com and Tucows.com and simply searching "Steganography". The choices were vast. You'll find that the software tends to differ a great deal. Some will only encode into BMP. The one I have will encode to both BMP and GIF. Other programs will encode into sounds files. If this is new to you, you must be thinking the same thing I was thinking. There's no way the sound file would play if text were encoded into it. Well, you'd be wrong. It plays just fine. The only downfall of my program was that the BMP images that I encoded text files into looked a bit grainy. I'm sure you can see why kids would dig this. Little Joey can email an image of Michael Jordan to his friend Billy. Billy's Mom sees the image and thinks all is OK. Only now, Billy runs the image through his un-encoder and there are the answers to tomorrow's testor worse. I know what you were thinking! Of course this is much more than a simple method of transferring data between kids. It can be used to cloak all kinds of data. And, in fact, is has. There's now a belief that terrorist Osama bin Laden, has been sending documents around the world hidden within pornographic images and MP3 files. That copy of Barry Manilow's "Copa Cabana" you grabbed from NAPSTER could have plans stuck way down deep inside. You simply wouldn't know by looking at it. /-------------------------------------------------------------------\ * Don't Miss the 802.11 Planet Fall 2001 Conference and Expo * Where Wireless Business and Technology Converge October 2-3 Santa Clara Convention Center, Santa Clara, CA. Whether you're steeped in 802.11 technology, or need a crash course in translating the alphabet soup, this is the premier 802.11 event for getting up to speed on the exploding industry of wireless networking and Internet access. Register Now and save $100 http://seminars.internet.com/80211/la01/ \--------------------------------------------------------------adv.-/ Let me go one step further if I might. If it is actually true that terrorists are doing this, shouldn't our government look for it with the intent to intercept it? You have most likely heard of a program called, "Carnivore". According to the FBI, Carnivore was so named because it "chews" all of the data coming through a certain data network but only "eats" information allowed by court order. Basically, Carnivore is a wiretap used on the Internet. What's more, Carnivore is always at the very center of the privacy debate. If it is true that terrorists are using steganography to transfer data round the Web, then I think you're going to start to hear a little more about Carnivore because, as far as I can see, it is our best bet to catch these embedded packets. The problem then is two fold. Carnivore works through court order and thus deals only with "allowed" data. You may disagree, but let's stay with that thinking for a moment. Privacy advocates will have enough to be upset about by the end of this newsletter without bringing anything to the table. Problem number one is that the mail from a terrorist group will not be labeled as such. I highly doubt you're going to find "BinLaden036(a)yahoo.com". That means that using Carnivore as a set wiretap will be difficult. It may happen that the FBI only knows that somewhere on a network, there may be a terrorist. Thus, all email will have to be searched. Now problem number two. It's not the text of the email that's the problem any more. It's the attachment. Carnivore, if it isn't already, will have to be bettered to be able to look at attachments and "know" whether that attachment contains an embedded file. And! If Carnivore finds an embedded file, it will have to open it to read it. Oh dear. Steganography is real and there's serious reason to believe that it is being used for very bad purposes. We have once again come full circle on the same basic question of privacy on the Web. If you have privacy, so does the person sending around terrorist documents. I think we can all agree that no one wants that. New technology has once again opened a Pandora's box of privacy and legal issues, but it's the same old question. How much of your privacy are you willing to give up so that those searching for a terrorist have any opportunity at all. >>>>>>>>>>>>>>>>>>> That's That - Thanks for reading. Joe Burns, Ph.D. And Remember: How many licks does it take to get to the middle of a Toosie Pop? It's more than three. Numerous experiments have been undertaken to find the answer. The average is 142. The data span was 75 to 200 licks. I'm not sure if 142 represented the mean or the average. I'm not sure how much I care either.

1 0

[liberationtech] New Book: Internet and Surveillance: The Challenges of Web 2.0 and Social Media
by Christian Fuchs 06 Jul '18

06 Jul '18

Fuchs, Christian, Kees Boersma, Anders Albrechtslund and Marisol Sandoval (Eds.). 2011. Internet and Surveillance: The Challenges of Web 2.0 and Social Media. New York: Routledge. ISBN 978-0-415-89160-8. EU COST Publication. 332 pages. http://fuchs.uti.at/books/internet-and-surveillance-the-challenges-of-web-2… With contributions by: Anders Albrechtslund, Thomas Allmer, Mark Andrejevic, David Arditi, Roberto Armengol, Kees Boersma, Miyase Christensen, Christian Fuchs, David W. Hill, AndrC) Jansson, Deborah G. Johnson, David Lyon, Thomas Mathiesen, Marisol Sandoval, IvC!n SzC)kely, Monika Taddicken, Daniel Trottier, Kent Wayland, Rolf H. Weber The publication has been supported by EU COST b European Cooperation in Science and Technology and the EU COST Action IS0807 b Living in Surveillance Societiesb . This book is the first ever published volume that is dedicated to Internet surveillance in the age of what has come to be termed b social mediab or b web 2.0b3 (blogs, wikis, file sharing, social networking sites, microblogs, user-generated content sites, etc). The Internet has been transformed in the past years from a system primarily oriented on information provision into a medium for communication and community-building. The notion of b Web 2.0b, social software, and social networking sites such as Facebook, Twitter and MySpace have emerged in this context. With such platforms comes the massive provision and storage of personal data that are systematically evaluated, marketed, and used for targeting users with advertising. In a world of global economic competition, economic crisis, and fear of terrorism after 9/11, both corporations and state institutions have a growing interest in accessing this personal data. Here, contributors explore this changing landscape by addressing topics such as commercial data collection by advertising, consumer sites and interactive media; self-disclosure in the social web; surveillance of file-sharers; privacy in the age of the internet; civil watch-surveillance on social networking sites; and networked interactive surveillance in transnational space. This book is a result of a research action launched by the intergovernmental network COST (European Cooperation in Science and Technology). -- Prof. Christian Fuchs Chair in Media and Communication Studies Department of Informatics and Media Uppsala University KyrkogC%rdsgatan 10 Box 513 751 20 Uppsala Sweden christian.fuchs(a)im.uu.se Tel +46 (0) 18 471 1019 http://fuchs.uti.at http://www.im.uu.se NetPolitics Blog: http://fuchs.uti.at/blog Editor of tripleC: http://www.triple-c.se Book "Foundations of Critical Media and Information Studies" (Routledge 2011) Book "Internet and Society" (Paperback, Routledge 2010) _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Adium w/ Facebook, or Google Talk
by ei8fdb＠ei8fdb.org 06 Jul '18

06 Jul '18

Hello Frank, I have used Adium for at least 4-5 years. It is a very good piece of open source software. It is possible to secure all communications through Adium using OTR (Off-The-Record) crypto. [1] I would leave commenting about the security of OTR to others, but in my view it is secure (except multiuser chats, and file transfers). I have Facebook chat, and GTalk configured on Adium, but do not use them as preferred communications channels. GTalk certainly was working this morning when I was using my Mac (if it wasn't it would notify me with an error). You can configure it for GTalk by following the steps. [2] [1] http://en.wikipedia.org/wiki/Off-the-Record_Messaging [2] http://support.google.com/talk/bin/answer.py?hl=en&answer=24075 I hope that helps. Bernard On Mon, 02 Jul 2012 06:42:23 -0700, frank(a)journalistsecurity.net wrote: > I wonder if people here recommend the open source freeware Chat tool > Adium? > > http://adium.im/about [1]/ > > And whether they would recommend using it with Facebook? > > Or, if not, Google Talk? > > Thanks! FS > > Frank Smyth > Executive Director > Global Journalist Security > frank(a)journalistsecurity.net [2] > Tel. + 1 202 244 0717 > Cell + 1 202 352 1736 > Twitter: @JournoSecurity > Website: www.journalistsecurity.net [3] > PGP Public Key [4] > > Please consider our Earth before printing this email. > > Confidentiality Notice: This email and any files transmitted with it > are confidential. If you have received this email in error, please > notify the sender and delete this message and any copies. If you are > not the intended recipient, you are notified that disclosing, copying, > distributing or taking any action in reliance on the contents of this > information is strictly prohibited. > > > > Links: > ------ > [1] http://adium.im/about > [2] mailto:frank@journalistsecurity.net > [3] http://www.journalistsecurity.net > [4] http://www.journalistsecurity.net/franks-pgp-public-key _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

None
by Trei, Peter 06 Jul '18

06 Jul '18

> Vasco uses DES (I don't know the details). I'm sorry, I already read this somewhere on the web; the term I should have used was "protocol": how do they use DES to create those numbers - do they encrypt a counter, or a time, or a shared secret - what? Does anybody know? [I assume they encrypt something based on 1) the serial number and 2) a time or a counter.] Plus, there are less than 24 (7 * 3.3) bits in 7 digits; how does it get these particular 24 out of the 64 in a block? Thanks for any help, Mark

1 0

[IP] France Announces Massive Internet Surveillance by ISPs
by David Farber 06 Jul '18

06 Jul '18

________________________________________ From: Lauren Weinstein [lauren(a)vortex.com] Sent: Monday, November 26, 2007 4:15 PM To: David Farber Cc: lauren(a)vortex.com Subject: France Announces Massive Internet Surveillance by ISPs France Announces Massive Internet Surveillance by ISPs http://lauren.vortex.com/archive/000331.html Greetings. In a breathtaking act of arrogance reminiscent of the heyday of Louis XVI (and likely to trigger similar public reactions among many Internet users, though perhaps unfortunately absent the "equalizing" influence of la guillotine), the French government and its overseers (the entertainment industry), along with a cowering collection of gutless ISPs, have announced an agreement for ISPs to become the Internet Police Force in France. Under the agreement (see below for links) ISPs will monitor users for presumed illegal activities (read that as "file sharing") and send reports on the accused to what amounts to an anti-piracy board. This board could then mete out punishments as it sees fit, including (attempted) banishment from the Internet (via what amounts to a national blacklist). To streamline the process, the entire procedure, as I understand it right now, would operate -- at least initially -- on an extrajudicial basis, without the messy intervention of courts, judges, trials, or other post-Magna Carta niceties that might help to assure that only the truly guilty are punished. Proponents are arguing that this approach will avoid overly severe judicial judgments, but in reality it's clearly an attempt to avoid fixing broken laws, while kowtowing to entertainment industry demands. The utter idiocy and recklessness of this approach is pretty much beyond description. It is ripe for privacy abuses on a grand scale, mistaken identities, false "convictions," and a long list of other associated problems. On the positive side though, the plan is likely to speed widespread adoption of encryption, as even routine Internet communications move to secure and in some cases cloaked channels to avoid these kinds of repressive enforcement regimes. It's one thing to use the conventional legal system to enforce legitimate intellectual property rights, but it's something wholly different to deputize ISPs into Network Monitors, feeding data to what apparently could easily become a Star Chamber operating outside the normal bounds of the conventional legal system. More details from: BBC: http://news.bbc.co.uk/2/hi/technology/7110024.stm or Le Monde (French): http://www.lemonde.fr/web/article/0,1-0,36-982011,0.html or (Google translation): http://tinyurl.com/2wynfs "Liberty, equality, fraternity"? --Lauren-- Lauren Weinstein lauren(a)vortex.com or lauren(a)pfir.org Tel: +1 (818) 225-2800 http://www.pfir.org/lauren Co-Founder, PFIR - People For Internet Responsibility - http://www.pfir.org Co-Founder, NNSquad - Network Neutrality Squad - http://www.nnsquad.org Founder, PRIVACY Forum - http://www.vortex.com Member, ACM Committee on Computers and Public Policy Lauren's Blog: http://lauren.vortex.com ------------------------------------------- Archives: http://v2.listbox.com/member/archive/247/=now RSS Feed: http://v2.listbox.com/member/archive/rss/247/ Powered by Listbox: http://www.listbox.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

None
by Trei, Peter 06 Jul '18

06 Jul '18

> Vasco uses DES (I don't know the details). I'm sorry, I already read this somewhere on the web; the term I should have used was "protocol": how do they use DES to create those numbers - do they encrypt a counter, or a time, or a shared secret - what? Does anybody know? [I assume they encrypt something based on 1) the serial number and 2) a time or a counter.] Plus, there are less than 24 (7 * 3.3) bits in 7 digits; how does it get these particular 24 out of the 64 in a block? Thanks for any help, Mark

1 0

None
by Trei, Peter 06 Jul '18

06 Jul '18

> Vasco uses DES (I don't know the details). I'm sorry, I already read this somewhere on the web; the term I should have used was "protocol": how do they use DES to create those numbers - do they encrypt a counter, or a time, or a shared secret - what? Does anybody know? [I assume they encrypt something based on 1) the serial number and 2) a time or a counter.] Plus, there are less than 24 (7 * 3.3) bits in 7 digits; how does it get these particular 24 out of the 64 in a block? Thanks for any help, Mark

1 0