- cypherpunks-legacy - lists.cpunks.org

Police cuff US student keystroke logger
by R.A. Hettinga 03 Feb '05

03 Feb '05

<http://www.theregister.co.uk/2005/02/02/student_keystroke_logger/print.html> The Register Biting the hand that feeds IT The Register ; Security ; Network Security ; Original URL: http://www.theregister.co.uk/2005/02/02/student_keystroke_logger/ Police cuff US student keystroke logger By Lester Haines (lester.haines at theregister.co.uk) Published Wednesday 2nd February 2005 14:39 GMT A Houston High School student faces a fine possible $2,000 fine or 180 days' jail after admitting rigging a keystoke logger to a teacher's PC and using it to download exams, Houston's Local 2 reports (http://www.click2houston.com/education/4152951/detail.html) Fort Bend School District School spokeswoman Mary Ann Simpson said: "Sometime in mid-December, we got a tip that this student was selling test exams that had apparently come from a teacher's computer, so that's when the investigation began." Said probe ended with the unnamed 16-year-old having his collar felt by the police. He immediately confessed to the crime when confronted, was charged with a Class B misdemeanour and transferred to another school. Police this week sent out alerts to other schools warning them of the threat of keystoke-logging ne'er-do-wells. . -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: Dell to Add Security Chip to PCs
by Ed Reed 03 Feb '05

03 Feb '05

>>> Ian G <iang(a)systemics.com> 2/2/2005 6:38:46 PM >>> > I'm just curious on this point. I haven't seen much > to indicate that Microsoft and others are ready > for a nymous, tradeable software assets world. No, and neither are corporate customers, to a large extent. Accountability is, in fact, a treasured property of business computing. Lack of accountability creates things like Enron, Anderson Consulting, Oil-for-Food scams, and the missing 9 billion dollars or so of reconstruction aid. It's the fuel that propells SPAM, graft, and identity theft. What I've not seen is much work providing accountability for anonymous transactions. It's a shame people persist in thinking a single solution will satify everyone, as though computing was somehow different from everything else in life. Ed

1 0

Tor: Please block these file-sharing ports from your exit policy (fwd from arma@mit.edu)
by Eugen Leitl 03 Feb '05

03 Feb '05

----- Forwarded message from Roger Dingledine <arma(a)mit.edu> -----

1 0

Researchers Combat Terrorists by Rooting Out Hidden Messages
by R.A. Hettinga 02 Feb '05

02 Feb '05

<http://www.newswise.com/p/articles/view/509563/> Newswise Source: University of Delaware Released: Tue 01-Feb-2005, 13:10 ET Researchers Combat Terrorists by Rooting Out Hidden Messages Libraries Science News Keywords STEGANOGRAPHY, STEGANALYSIS, HIDDEN MESSAGES, DIGITAL IMAGES, CRYPTOGRAPHY, TERRORISM Contact Information Available for logged-in reporters only Description Researchers at the University of Delaware are working to combat terrorism by developing techniques to detect the use of steganography, which encompasses various methods of hiding messages in apparently ordinary digital images and videos. Newswise - A University of Delaware research team has received National Science Foundation funding to combat terrorism by developing techniques to detect the use of steganography, which encompasses various methods of hiding messages in apparently ordinary digital images and videos. It is feared electronic steganography can be used by terrorist organizations to pass along orders or other vital information surreptitiously through images posted on the Internet or sent via e-mail. The grant for more than $167,000 was awarded to Charles Boncelet, UD professor of electrical and computer engineering, to conduct research in the relatively new field of steganalysis. Boncelet will work on the project with Lisa Marvel, a UD graduate now employed by the U.S. Army Research Laboratory, and with several graduate students. Boncelet said steganography is Greek for covered writing, and is a means by which a person can hide the very fact that they are communicating. In that, it differs from the better-known practice of cryptography, Greek for secret writing, in which a message is purposely garbled and can be understood only by those who have the key to decipher it. The two forms of communication are not mutually exclusive, Boncelet said, and can be combined. A person can encrypt a message and then hide the fact that they are sending it. Boncelet previously worked in steganography for the U.S. Army and through this project will begin working in steganalysis, or the development of methods by which to seek out steganography. "The work we are doing is in multimedia, with a focus on digital images," Boncelet said. "You can take an image on your web site and use steganographic techniques to hide a message in the image. The image looks completely ordinary but if you know the key, you can extract the secret message." "The object of the research," Boncelet said, "is to try to figure out how to find steganography in the images." The problem is that steganalysis is very difficult because the messages are hidden by design. However, Boncelet said, "when you hide a message in a digital image, you change the image a little bit. If you change the image too much, it gives it away." The way to determine any changes to an image, given that the steganalyst does not have the benefit of the original for purposes of comparison, is to use algorithms and very fast computers to look for unusual features in the image. Boncelet said he believes the research will lead to a novel class of electronic steganography searchers based on image representations that depend on a quality factor, with the long-term goal being automated scanners that can rapidly find likely candidates amongst large numbers of images and videos. "Assuming the technique we develop is successful, we hope to branch out to video and audio," Boncelet said, "but right now the focus is on digital images." In addition to the research, the project will provide training in steganalysis and intelligence techniques to the students involved. Boncelet said steganography "is a very big fear for governments," adding that the security agencies that deal with the technique "worry about terrorists passing messages, or traitors leaking out information from secure sites." After the terrorist attacks of Sept. 11, 2001, there was widespread speculation in the public press that terrorists had used steganography on the Internet to communicate plans. Although those reports were never confirmed, the possibility remains a grave concern. One of the earliest examples of steganography comes from ancient history, Boncelet said, explaining that a Greek city was surrounded by enemy soldiers and the leader wanted to get a message to his allies to send troops. He selected a slave and shaved his head, tattooing the plea for help on his scalp, then allowed the slave's hair to grow back over the message. The slave was sent out of the city walls, was captured and released by the enemy troops, and arrived safely with the message. In World War II, Boncelet said, American soldiers used steganography to provide information on their whereabouts to relatives back home by putting a pinprick on a map. Army censors were forced to pepper letters with hundreds of pinpricks to offset the practice. German spies used steganography in microdots, tiny images of typed pages that could be pasted over periods in seemingly harmless letters. The NSF grant is for one year and was awarded through the Approaches to Combat Terrorism Program in the Directorate for Mathematical and Physical Sciences, which supports new concepts in basic research and work force development with the potential to contribute to national security. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

8 7

Re: Sound filtering software. (fwd from kaiser@emjay.net)
by Eugen Leitl 02 Feb '05

02 Feb '05

----- Forwarded message from Michael Johnson <kaiser(a)emjay.net> -----

1 0

Peppercoin Small Payments Processing Suite Available to First Data Channels
by R.A. Hettinga 02 Feb '05

02 Feb '05

<http://biz.yahoo.com/prnews/050202/new005_1.html> Yahoo! Finance Press Release Source: Peppercoin Peppercoin Small Payments Processing Suite Available to First Data Channels Wednesday February 2, 9:03 am ET Small Transaction Suite Certified for Sale Through Processor's Merchant Acquiring Partners WALTHAM, Mass., Feb. 2 /PRNewswire/ -- Peppercoin, a payments company that enables profitable, new business models for low-priced digital content and physical goods, today announced its Small Transaction Suite is authorized for sale by First Data's merchant acquiring partners, to satisfy the small payment needs of the 3.5 million merchant clients they serve. Peppercoin offers merchants a hosted small-payment service, based on credit and debit card usage, which enables merchants to optimize revenue and profitability. Peppercoin is the only small-payment vendor that addresses the digital, mobile and physical point-of-sale (POS) markets. "Our agreement with First Data Merchant Services validates Peppercoin's ability to deliver a desired and profitable small payment solution to the financial services market, as well as the growing need for small payment credit and debit card payments solutions," said Mark Friedman, president of Peppercoin. "FDMS will enable a small payment business model that enhances merchant and acquirer revenue with one complete payment application." Significant Market Opportunity: Consumers are demonstrating a clear and growing preference to use their credit and debit cards for all sizes and types of purchases. In a 2004 study, Ipsos-Insight estimated that roughly 37.5 million US consumers would choose to use their credit and debit cards for transactions below $5. Each year, more than 354 billion cash transactions occur in the U.S. for less than $5 at the physical point-of-sale, representing $1.32 trillion in aggregate revenue. Leading markets include vending ($18 billion), parking ($10 billion), coin-op ($6 billion) and quick-serve-restaurants ($110 billion). The online and mobile small payment opportunities are substantial as well; fueled by music, games, video, publishing and services. TowerGroup estimates the digital micropayments opportunity reached more than $3 billion in 2004. And a September 2004 Ipsos-Insight study revealed that, in just one year, the number of US consumers who have made small online purchases grew 250%, from 4 million to 14 million. About Peppercoin, Inc. Peppercoin enables profitable new business models for low-priced digital content and physical goods. Peppercoin's small payment products help merchants, banks, and other payments companies build market adoption quickly through a flexible, consumer-friendly approach. Peppercoin integrates easily with existing business models and systems to accelerate revenues and increase profits while dramatically lowering transaction and customer service costs. For more information visit http://www.peppercoin.com. All trademarks are the property of their respective owners. Contact: Mark McClennan or Scott Love Schwartz Communications 781-684-0770 peppercoin(a)schwartz-pr.com Source: Peppercoin -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

MSN Belgium to use eID cards for online checking
by R.A. Hettinga 02 Feb '05

02 Feb '05

<http://www.theregister.co.uk/2005/02/01/msn_belgium_id_cards/print.html> The Register Biting the hand that feeds IT The Register ; Internet and Law ; Digital Rights/Digital Wrongs ; Original URL: http://www.theregister.co.uk/2005/02/01/msn_belgium_id_cards/ MSN Belgium to use eID cards for online checking By Jan Libbenga (libbenga at yahoo.com) Published Tuesday 1st February 2005 14:34 GMT Microsoft will integrate the Belgian eID Card with MSN Messenger. Microsoft's Bill Gates and Belgian State Secretary for e-government Peter Vanvelthoven announced the alliance today in Brussels. "We're working to ensure that our technologies support e-ID, to help make online transactions and communications more secure," Gates said. eID stands for Electronic Identity Card. The card contains an electronic chip and gradually will replace the existing ID card system in Belgium. By end-2005, over 3 million eID cards will be distributed in the country. Microsoft believes that combined with the eID Card MSN Messenger chatrooms will be much safer. Users would have a trustworthy way of identifying themselves online. The Belgian Federal Computer Crime Unit (FCCU) could even refuse young children access to certain chatrooms based on their electronic identity. "We're not sure yet when we will be able to deliver this integration," Bill Gates said. "But developers here in Belgium and the US have proven the concept and are working already on the actual solution." -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Cost and privacy concerns stall PAYD car insurance
by R.A. Hettinga 02 Feb '05

02 Feb '05

<http://www.theregister.co.uk/2005/02/01/car_insurace_payd/print.html> The Register Biting the hand that feeds IT The Register ; Personal ; Original URL: http://www.theregister.co.uk/2005/02/01/car_insurace_payd/ Cost and privacy concerns stall PAYD car insurance By Lucy Sherriff (lucy.sherriff at theregister.co.uk) Published Tuesday 1st February 2005 11:53 GMT Pay-as-you-drive car insurance will not be commercially viable anytime in the next three years, according to Strategy Analytics. It cites privacy concerns, launch costs and patent fees, along with back-end data integration, as significant short-term obstacles to the technology's mass-scale deployment. Under pay-as-you-drive insurance, a black box records data about the driver's journeys. Charges vary, according to the risk of each journey. Last August, Norwich Union started testing the technology in the UK, with a pilot scheme for younger drivers (http://www.aviva.com/index.asp?PageID=55&year=&newsid=1971&filter=corporate…) launched this year. Clare Hughes, a Strategy Analytics analyst, said: "While PAYD protects drivers from generalized assumptions, there are still major hurdles to overcome before PAYD insurance schemes are commercially viable; and these are not going to be successfully addressed for a number of years." But in due course, PAYD will become widespread, she said. Its introduction will be driven by an increased government focus on road safety, the availability of tamper-proof vehicle data to verify insurance claims, and the potential cost savings to the companies and the consumer. "The days of the once a year insurance premium will eventually disappear for the majority of consumers, with the rollout of risk-based variable monthly billing." . -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[i2p] weekly status notes [feb 1] (fwd from jrandom@i2p.net)
by Eugen Leitl 02 Feb '05

02 Feb '05

----- Forwarded message from jrandom <jrandom(a)i2p.net> -----

2 1

FSTC Announces Availability of FSTC Counter-Phishing Project Whitepaper and Supporting Documents
by Zachary Tumin 01 Feb '05

01 Feb '05

1 0