July 2018 - cypherpunks-legacy

FC: DigiGold sues software developer to keep currency servers online
by Declan McCullagh 06 Jul '18

06 Jul '18

http://www.wired.com/news/ebiz/0,1272,44967,00.html Nothing That Glitters Is DigiGold By Declan McCullagh (declan(a)wired.com) 2:00 a.m. July 6, 2001 PDT Hurt feelings, financial disputes and bizarre sexual allegations have led to a legal tiff between a high-profile digital currency firm and its software developer. After the once-friendly relationship between DigiGold and Systemics soured this spring, DigiGold sued the software company in an attempt to keep its servers online. Systemics' computers, which maintain DigiGold's customer accounts, are located on the West Indies island of Anguilla. Systemics' Ian Grigg claims he wants to pull the plug on the server since DigiGold has paid only $370,000 of the $500,000 it owed him under a 1999 contract. But DigiGold says it was willing to pay the remaining cash, according to court documents that describe how a close personal relationship between Grigg and DigiGold investor Douglas Jackson led to the creation of Systemics, the invention of a remarkable digital currency, a spate of personnel disputes and an eventual estrangement. Making an odd situation even more unusual are allegations involving one of Jackson's business development employees, Wajiha Khan, who's described in internal e-mail messages as "a person who would use her physical attractiveness as a tool for manipulation of men." According to e-mail written by Grigg, another employee "was well and thoroughly seduced by Wajiha and her attractive younger sister." In response to DigiGold's lawsuit, a judge in Anguilla prohibited Grigg "from terminating support for the DigiGold project or from taking the server offline," according to documents provided by Systemics. On June 19, Judge Hariprashad Charles lifted her injunction, and the dispute currently is in arbitration. [...] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe, visit http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message -----

1 0

Re: [cryptography] How are expired code-signing certs revoked?
by Peter Gutmann 06 Jul '18

06 Jul '18

<dan(a)geer.org> writes: >One would assume that the effort to get such a signing certificate would >persuade the bad team to use that cert for targeted attacks, not broadcast >ones, in which case you would be damned lucky to find it in a place where you >could then encapsulate it in a signature-based protection scheme. My post was based on data gathered by a well-known anti-malware company, I'm just reporting what they found in real-world use. In any case getting signing certs really isn't hard at all. I once managed it in under a minute (knowing which Google search term to enter to find caches of Zeus stolen keys helps :-). That's as an outsider, if you're working inside the malware ecosystem you'd probably get them in bulk from whoever's dealing in them (single botnets have been reported with thousands of stolen keys and certs in their data stores, so it's not like the bad guys are going to run out of them in a hurry). Unlike credit cards and bank accounts and whatnot we don't have price figures for stolen certs, but I suspect it's not that much. Peter. _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

FC: DigiGold sues software developer to keep currency servers online
by Declan McCullagh 06 Jul '18

06 Jul '18

http://www.wired.com/news/ebiz/0,1272,44967,00.html Nothing That Glitters Is DigiGold By Declan McCullagh (declan(a)wired.com) 2:00 a.m. July 6, 2001 PDT Hurt feelings, financial disputes and bizarre sexual allegations have led to a legal tiff between a high-profile digital currency firm and its software developer. After the once-friendly relationship between DigiGold and Systemics soured this spring, DigiGold sued the software company in an attempt to keep its servers online. Systemics' computers, which maintain DigiGold's customer accounts, are located on the West Indies island of Anguilla. Systemics' Ian Grigg claims he wants to pull the plug on the server since DigiGold has paid only $370,000 of the $500,000 it owed him under a 1999 contract. But DigiGold says it was willing to pay the remaining cash, according to court documents that describe how a close personal relationship between Grigg and DigiGold investor Douglas Jackson led to the creation of Systemics, the invention of a remarkable digital currency, a spate of personnel disputes and an eventual estrangement. Making an odd situation even more unusual are allegations involving one of Jackson's business development employees, Wajiha Khan, who's described in internal e-mail messages as "a person who would use her physical attractiveness as a tool for manipulation of men." According to e-mail written by Grigg, another employee "was well and thoroughly seduced by Wajiha and her attractive younger sister." In response to DigiGold's lawsuit, a judge in Anguilla prohibited Grigg "from terminating support for the DigiGold project or from taking the server offline," according to documents provided by Systemics. On June 19, Judge Hariprashad Charles lifted her injunction, and the dispute currently is in arbitration. [...] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe, visit http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message -----

1 0

Re: [cryptography] How are expired code-signing certs revoked?
by Peter Gutmann 06 Jul '18

06 Jul '18

<dan(a)geer.org> writes: >One would assume that the effort to get such a signing certificate would >persuade the bad team to use that cert for targeted attacks, not broadcast >ones, in which case you would be damned lucky to find it in a place where you >could then encapsulate it in a signature-based protection scheme. My post was based on data gathered by a well-known anti-malware company, I'm just reporting what they found in real-world use. In any case getting signing certs really isn't hard at all. I once managed it in under a minute (knowing which Google search term to enter to find caches of Zeus stolen keys helps :-). That's as an outsider, if you're working inside the malware ecosystem you'd probably get them in bulk from whoever's dealing in them (single botnets have been reported with thousands of stolen keys and certs in their data stores, so it's not like the bad guys are going to run out of them in a hurry). Unlike credit cards and bank accounts and whatnot we don't have price figures for stolen certs, but I suspect it's not that much. Peter. _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Map of surveillance societies
by Hans Schnehl 06 Jul '18

06 Jul '18

just in case someone wishes to move servers around, see the map for where to avoid: http://www.privacyinternational.org/article.shtml?cmd%5B347%5D=x-347-559597 Interesting. I assume Germany is seen as before the new laws came into force. Regards Hans ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Sixth Annual Digital Money Forum
by David G.W. Birch 06 Jul '18

06 Jul '18

Hi Bob, Can you pass this on in the usual places... Many thanks... ......... the sixth annual Consult Hyperion forum ......... .............. D I G I T A L ... M O N E Y ................ "No other conference in our industry compares" Jack Selby, VP Intl. Business Development, Paypal sponsored by Vodafone supported by NCipher and American Express London April 2nd/3rd, 2003 .......................The Event............................ Now in its sixth year, the annual Digital Money Forum will be two days of interactive discussion and debate from the centre of the digital money world. The Forum is not about technology or marketing: it is about the whole subject of the digitisation of money and the implications of that process for individuals, businesses and governments. A central theme of the sixth forum will be the resurgence of interest in new technologies for cash replacement: peer-to-peer electronic payment, contactless smart cards, mobile phones as mobile wallets and so on. Both speakers and delegates will be leaders in the field, looking at the evolution of retail electronic payments from the consumer, regulatory, bank, merchant, legal, sociological and other perspectives. With experts in financial systems, interactive TV, mobile commerce, mass transit, retail and related subjects gathered together, the Forum will continue to be the place to be for anyone who wants to understand Digital Money. Last year, the audience came from Europe, North America and the Far East to discuss topics ranging from the plans of banks and payment schemes and new European regulation to commodity and community currencies. This year, the subjects already on the agenda include the success of mass transit operators in replacing cash at points of sale to mobile payment schemes and from the digitisation of local exchange trading systems to electronic cash in developing countries. .....................The Programme.......................... Keynote speakers: Riel Miller from the OECD on the future of money Economist, author, journalist and BBC broadcaster Diane Coyle Presentations by: Simon Lelieveldt from the Dutch Electronic Money Association Andrew Smith from the London Transport Prestige scheme Michael Linton of Open Money covering LETS Roy Cosway, Cornish Key Card, setting out local govt. requirements. Toni Merschen, head of Chip & Mobile Payments at MasterCard Gerry Looby of Cardbase reporting on the Nigerian national e-purse Edgar Kampers describing the Dutch "Green Money" scheme in Utrecht Dominic Peachey of the Financial Service Authority on regulation Jim Wadsworth of Vodafone, talking about their m-pay scheme and others There are also expert panels including Sandra Alzetta of Visa International on m-payments Jof Walters of Egg sharing experiences in bank P2P Cyprien Goddard of iPin on microbilling Please note that due to the continued success of the Forum, we have again decided to limit the number of places in order to preserve the much-valued interactive nature of the event. Further information can be found at the Forum web site http://www.digitalmoneyforum.com/ Thanks to the generosity of our sponsors, the Forum will again cost only 595 pounds Sterling per person excluding VAT. The fee includes the forum, documentation, meals, cocktails and drinks around the champagne tables. This is a not-for-profit event and any surplus generated is distributed, as in previous years, to a variety of mainly local charities. Recent beneficiaries of our events have including the Fountain Centre for Palliative Cancer Care and the Surrey Centre for the Visually Impaired. For further information or to reserve a place please contact Gloria Benson <glor(a)consult.hyperion.co.uk> Telephone +44 1483 301793 Fax +44 1483 561657 ============================================================ --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

China Rewards Porn Snitches
by brian-slashdotnews＠hyperreal.org 06 Jul '18

06 Jul '18

Link: http://slashdot.org/article.pl?sid=04/10/11/0239205 Posted by: timothy, on 2004-10-11 05:29:00 from the don't-look-just-tell dept. [1]MinimeMongo writes that the "Associated Press reports that China's police ministry on Sunday [2]handed out rewards of up to $240 to people who reported pornographic Web sites in a campaign to stamp out online smut...The online crackdown is part of a sweeping official morality campaign launched this year on orders from communist leaders." References 1. mailto:6cgi-9w09.xemaps@com 2. http://www.newsday.com/technology/business/wire/sns-ap-china-porn-rewards,0… 812553.story?coll=sns-ap-technology-headlines ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Map of surveillance societies
by Hans Schnehl 06 Jul '18

06 Jul '18

just in case someone wishes to move servers around, see the map for where to avoid: http://www.privacyinternational.org/article.shtml?cmd%5B347%5D=x-347-559597 Interesting. I assume Germany is seen as before the new laws came into force. Regards Hans ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[p2p-hackers] Distributed filesystem choices (aka: none yet?)
by grarpamp 06 Jul '18

06 Jul '18

Been looking for a distributed filesystem with no luck, any ideas? Distributed meaning that there is no single central access point. So the concept of mounting might mean amongst the roving set able to service it, or some underlying graph of it, something like: mount -t dht dht://<seed_node> /dist1 Users add their free block devices to the global backing store which was initialized with certain ZFS-like integrity and redundancy guarantees. Files would never vanish unless there are no longer enough blocks in the backing store to meet the init time guarantees. Users could either copy their hierarchies into the space, or attach them into the space for continued local maintenance. The one time init setting of a space could include whether pki recognized root users could maintain the overall hierarchy. Uid's might be an insertion node id. There may need to be voting authority on file/tree expiry if under space pressure, perhaps bitcoin-like, with the metrics established at init time. Users could add their block devices to whatever pool had the metrics they like. Anononymity and crypto would provide incentive to donate resources since unlike say bittorrent, no legal fear means no hit and run required. I don't really know what it might look like. Just that it needs sha2/3 integrity, redundancy, and file lifetime guarantees. It needs to be global, anonymous, and be a usable file system. And somehow deal with abusive fill such as dd if=/dev/zero of=zero, which implies some kind of moderated hierarchies appointed by the initializing entity. AFS is nice that users can bolt their filespace into the tree, and it has filesystem semantics. ZFS/BTRFS is nice due to their sha256 integrity, raidz redundancy and simple backing block device ideas. FreeNet/GnuNet/BitTorrent and all other 'filesharing' protocols are no good because there is no guarantee that files will not vanish. And they have no filesystem semantics, only push/fetch. RedHat GFS / DragonFly HAMMER are interesting as a distributed filesystem in which real work can be done on live files. Tahoe-LAFS is nice due to adding in block devices, but no good because of the central access point. Perhaps that could be distributed? Phantom/I2P/Tor could be used as the backend IP transport. http://en.wikipedia.org/wiki/List_of_file_systems#Distributed_parallel_faul… The only thing that makes it worth while is that a lot of people have free space, want to give an get data, safely, and don't want to see their work in populating it wasted... so it can't go away. _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Sixth Annual Digital Money Forum
by David G.W. Birch 06 Jul '18

06 Jul '18

Hi Bob, Can you pass this on in the usual places... Many thanks... ......... the sixth annual Consult Hyperion forum ......... .............. D I G I T A L ... M O N E Y ................ "No other conference in our industry compares" Jack Selby, VP Intl. Business Development, Paypal sponsored by Vodafone supported by NCipher and American Express London April 2nd/3rd, 2003 .......................The Event............................ Now in its sixth year, the annual Digital Money Forum will be two days of interactive discussion and debate from the centre of the digital money world. The Forum is not about technology or marketing: it is about the whole subject of the digitisation of money and the implications of that process for individuals, businesses and governments. A central theme of the sixth forum will be the resurgence of interest in new technologies for cash replacement: peer-to-peer electronic payment, contactless smart cards, mobile phones as mobile wallets and so on. Both speakers and delegates will be leaders in the field, looking at the evolution of retail electronic payments from the consumer, regulatory, bank, merchant, legal, sociological and other perspectives. With experts in financial systems, interactive TV, mobile commerce, mass transit, retail and related subjects gathered together, the Forum will continue to be the place to be for anyone who wants to understand Digital Money. Last year, the audience came from Europe, North America and the Far East to discuss topics ranging from the plans of banks and payment schemes and new European regulation to commodity and community currencies. This year, the subjects already on the agenda include the success of mass transit operators in replacing cash at points of sale to mobile payment schemes and from the digitisation of local exchange trading systems to electronic cash in developing countries. .....................The Programme.......................... Keynote speakers: Riel Miller from the OECD on the future of money Economist, author, journalist and BBC broadcaster Diane Coyle Presentations by: Simon Lelieveldt from the Dutch Electronic Money Association Andrew Smith from the London Transport Prestige scheme Michael Linton of Open Money covering LETS Roy Cosway, Cornish Key Card, setting out local govt. requirements. Toni Merschen, head of Chip & Mobile Payments at MasterCard Gerry Looby of Cardbase reporting on the Nigerian national e-purse Edgar Kampers describing the Dutch "Green Money" scheme in Utrecht Dominic Peachey of the Financial Service Authority on regulation Jim Wadsworth of Vodafone, talking about their m-pay scheme and others There are also expert panels including Sandra Alzetta of Visa International on m-payments Jof Walters of Egg sharing experiences in bank P2P Cyprien Goddard of iPin on microbilling Please note that due to the continued success of the Forum, we have again decided to limit the number of places in order to preserve the much-valued interactive nature of the event. Further information can be found at the Forum web site http://www.digitalmoneyforum.com/ Thanks to the generosity of our sponsors, the Forum will again cost only 595 pounds Sterling per person excluding VAT. The fee includes the forum, documentation, meals, cocktails and drinks around the champagne tables. This is a not-for-profit event and any surplus generated is distributed, as in previous years, to a variety of mainly local charities. Recent beneficiaries of our events have including the Fountain Centre for Palliative Cancer Care and the Surrey Centre for the Visually Impaired. For further information or to reserve a place please contact Gloria Benson <glor(a)consult.hyperion.co.uk> Telephone +44 1483 301793 Fax +44 1483 561657 ============================================================ --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0