- cypherpunks-legacy - lists.cpunks.org

Re: This Memorable Day
by Nomen Nescio 03 Nov '04

03 Nov '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R.A. Hettinga: > You're gonna love this one: You can't have "terrorism" without > state sponsors. Nonsense! Are you in junior high? > We take out (by whatever means at hand...) state sponsors of > terrorism, and, hey, presto, no terrorism. Iraq. Syria. Iran. > Libya. Doesn't look so hard to me. Oh. That's right. Libya rolled > over. > > Americans -- actually westerners in general -- may win ugly, Peter, > but, so far, they win. This post gave me a big laugh. So naive. There are a few basic forces feeding extremism and terrorism around the world and those are inequalities and injustice anywhere. As long as the most powerful nations of the world continues to exploit the earth's resources without taking appropriate considerations to other nations the wrath and dismay of people elsewhere will always persist. Not understanding this or simply neglecting it will further add to the negative feelings and opinions and fuel extremism. The only way to move towards a more friendly world is to make people feel they are able to share the wealth and prosperity of the world. As long as there is one single person anywhere in the world hungering to death there is still a basis for fundamentalism and all the problem that leads to. Continuing being arrogant and policing the world without listening to the oppressed people in the middle east and elsewhere will never ever eradicate terrorism. You may may or may not be able to reasonable confidently hinder most terror deeds (but only after having turned also the western civilization into police states) but you cannot stop the oppressed man from growing the hatred i his mind. If you do not understand this you are not only unintelligent IMNSHO but also part of the problem itself. You're not to be so blind with patriotism that you can't face reality. Wrong is wrong, no matter who does it or says it. (Malcolm X) Johnny Doelittle -----BEGIN PGP SIGNATURE----- Version: Tom Ridge Special v1.01 iQA/AwUBQYicHzVaKWz2Ji/mEQJ/KgCeJaL0A7KEtXrdg6DmER5yGHwhJWEAoNA/ 96lJo2JRLf4zWoOTjELrPQB4 =Uq+t -----END PGP SIGNATURE-----

4 6

Diebold
by Eugen Leitl 03 Nov '04

03 Nov '04

So, we know Diebold commited vote fraud. Irregularities, my ass. Why did Kerry just roll over? The second time, after Gore? This just doesn't make sense. There's been over a year to prepare. Or is the entire process just a charade? -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Re: This Memorable Day
by Tyler Durden 03 Nov '04

03 Nov '04

"2. Vietnam we lost by kicking their asses so badly that our campuses "revolted", at the behest of a bunch of marxists. Whereupon we packed up, partied for about 15 years, and killed their communist sugar daddies in Moscow with just the *possibility* we could invent something strategic missile defense, they couldn't copy fast enough." Are you trollin' m'friend, or have you been smokin' James Donald's ground up toenails? -TD Mao accused the US of being a "paper tiger", and there may be some truth to that. >From: "R.A. Hettinga" <rah(a)shipwright.com> >To: John Young <jya(a)pipeline.com>, cypherpunks(a)al-qaeda.net >Subject: Re: This Memorable Day >Date: Wed, 3 Nov 2004 10:05:19 -0500 > >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >At 7:33 AM -0800 11/3/04, John Young wrote: > >The US has not won since WW2. > >Nope. Not at all. > >1. Korea we lost by shoving the commies all the way up to the Yalu >river. And then leaving them to fester behind a still-extant DMZ >until they're almost enough of a "nuisance", to lots of people, >including the now-almost-former-communist Chinese to worry over. > >2. Vietnam we lost by kicking their asses so badly that our campuses >"revolted", at the behest of a bunch of marxists. Whereupon we packed >up, partied for about 15 years, and killed their communist sugar >daddies in Moscow with just the *possibility* we could invent >something strategic missile defense, they couldn't copy fast enough. > >The Cold War we lost by... Wait a minute. We didn't lose. See 1., and >2., above. > >That leaves us, what, John? Grenada? Panama? Hell, Columbia? Oh. >Right. Lebanon. Tell ya what. Let's start the clock on this war at, >say, the assasination of Bobby Kennedy by Sirhan Sirhan, include the >Beiruit truck bombing by reference as a battle, and see how we stand >in a decade or so, shall we? > >C'mon, John. Think faster, or something. > >Cheers, >RAH > > > >-----BEGIN PGP SIGNATURE----- >Version: PGP 8.0.3 > >iQA/AwUBQYjzo8PxH8jf3ohaEQLrKACgpPVvDmuAS+ZE/9OAwZBAneLGztIAn2TK >eVqIGmJf1iLvKLe55TuIgQYf >=SOlw >-----END PGP SIGNATURE----- > >-- >----------------- >R. A. Hettinga <mailto: rah(a)ibuc.com> >The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> >44 Farquhar Street, Boston, MA 02131 USA >"... however it may deserve respect for its usefulness and antiquity, >[predicting the end of the world] has not been found agreeable to >experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _________________________________________________________________ Is your PC infected? Get a FREE online computer virus scan from McAfee. Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

1 0

RE: Musings on "getting out the vote"
by Major Variola (ret) 03 Nov '04

03 Nov '04

At 12:11 PM 11/2/04 -0500, Tyler Durden wrote: >And they seem to believe there's going to be a huge difference between Kang >and Kodos. If you vote for Kang, the terrorists have won! Besides, without paper (ie physical) evidence, how're you gonna prove that Kang won? At least I live in a blue state. The reds, you've earned what you've earned. Those FONY baseball caps were getting passe, anyway.

2 1

Re: "Scan design called portal for hackers"
by david koontz 03 Nov '04

03 Nov '04

>>> Peter Gutmann <pgut001(a)cs.auckland.ac.nz> 2/11/2004 11:30:36 p.m. >>> >David Honig <dahonig(a)cox.net> writes: >>EETimes 25 Oct 04 has an article about how the testing structures on ICs >>makes them vulnerable to attacks. >A link ) would >have been useful... >>The basic idea is that to test a chip, you need to see inside it; this can >>also reveal crypto details (e.g., keys) which compromise the chip. >The JTAG interface is your (that is, the reverse engineer's) friend. This is >why some security devices let you disconnect it using a security-fuse type >mechanism before you ship your product. Of course that only works if (a) the >device allows it, (b) you remember to activate it, and (c) your attacker isn't >sufficiently motivated/funded to use something like microprobing or a FIB >workstation to bypass the disconnect. Historically BIST has been more attractive for crypto hardware because you can also use it for assurance testing prior to use. Invoking it can be hard coded into device initialization. If JTAG is present, you don't have to have internal scan. If you have internal scan you could have a zeroize on entering test mode. This prevents scan chains from being capable of being used to save as well as restore state. If and when is it a problem? If you were to examine FIPS PUB 140-2, 4.5 'Physical Security', 'Table 2 Summary of physical security requirements' and section: 4.5.1 General Physical Security Requirements ... SECURITY LEVEL 1 The following requirements shall apply to all cryptographic modules for Security Level 1. * The cryptographic module shall consist of production-grade components that shall include standard passivation techniques (e.g., a conformal coating or a sealing coat applied over the module's circuitry to protect against environmental or other physical damage). * When performing physical maintenance, all plaintext secret and private keys and other unprotected CSPs contained in the cryptographic module shall be zeroized. Zeroization shall either be performed procedurally by the operator or automatically by the cryptographic module. --- Meaning for a cryptographic module boundary at the chip level, the keys should have been zeroized before physical access. ---- ... SECURITY LEVEL 3 In addition to the general requirements for Security Levels 1 and 2, the following requirements shall apply to all cryptographic modules for Security Level 3. * If the cryptographic module contains any doors or removable covers or if a maintenance access interface is defined, then the module shall contain tamper response and zeroization circuitry. The tamper response and zeroization circuitry shall immediately zeroize all plaintext secret and private keys and CSPs when a door is opened, a cover is removed, or when the maintenance access interface is accessed. The tamper response and zeroization circuitry shall remain operational when plaintext secret and private cryptographic keys or CSPs are contained within the cryptographic module. --- Meaning that physical access will cause zeroization. This would imply zeroization on test mode activation on a JTAG interface on a single chip cryptographic module. You start getting real security at levels 3 and 4, the certification criteria comes from the Commercial COMSEC Evaluation Program (CCEP). Am I worried someone is producing chips that aren't protected? No. I'm more concerned that implementations (systems) aren't properly designed, tested and certified. "They got AES, we got AES" is just a form of snake oil. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

Re: This Memorable Day
by John Kelsey 03 Nov '04

03 Nov '04

>From: "R.A. Hettinga" <rah(a)shipwright.com> >Sent: Nov 2, 2004 10:55 AM >To: cypherpunks(a)al-qaeda.net >Subject: Re: This Memorable Day ... >Expect more carnage than culture when Bush is elected. I gather we waited to start the offensive in Fallujah(sp?) until the polls were all closed. I'm not sure how much of this was trying to time things not to interfere with the election (the buildup has been going on for awhile, and Kerry could have squawked about this but didn't, so presumably he didn't think it was unfair for the attack to be delayed a bit), and how much was trying to bury the coverage of a pretty bloody battle with a lot of civilians dying and a lot of peoples homes destroyed, behind the whole election coverage. >Cheers, >RAH --John

1 0

So Who Won?
by Eric Cordian 03 Nov '04

03 Nov '04

So who won the US election? The turd sandwich, or the giant douche? -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

4 3

Swiss Banks Can Still Say " " [but not really...]
by R.A. Hettinga 02 Nov '04

02 Nov '04

<http://online.wsj.com/article_print/0,,SB109943463679262716,00.html> The Wall Street Journal November 3, 2004 HEARD ON THE STREET DOW JONES Swiss Banks Can Still Say " " Confidentiality Remains Intact, But That Might Derail Mergers With Firms Outside the Country By EDWARD TAYLOR Staff Reporter of THE WALL STREET JOURNAL November 3, 2004 FRANKFURT -- The famed Swiss bank account is still open for discreet deposits, and that might become a problem for some Swiss banks. Despite concerns within the European Union that banking secrecy encourages tax evasion, Switzerland retained its right to client confidentiality by signing agreements with the EU last week. That move could dim the prospects for Swiss banks to participate in mergers with financial firms outside the country. While the accords secure the small Alpine country's status as a banking haven -- Swiss banks manage about 3.2 trillion Swiss francs, or about $2.7 trillion, in assets -- they also could handicap the likes of Credit Suisse Group, Julius Baer Holding Ltd. and Vontobel Group if those companies decide to participate in pan-European banking consolidation. The EU was pushing hard for the Swiss to abolish Switzerland's extreme version of confidentiality during the bilateral accords -- a raft of proposals aimed at easing the movement of goods, services and people between the EU and Switzerland. In the end, a compromise was reached. The Swiss agreed to impose a withholding tax on interest payments made to EU citizens with deposits in Switzerland, beginning in mid-2005. The Swiss also agreed to lift the veil of banking secrecy in the event of a criminal investigation for fraud and money laundering. The Swiss Bankers Association says the agreement will help Switzerland attract more funds, most of which already come from outside Switzerland. Around 56% of the assets held in Swiss banks come from outside the country, Swiss bankers say. But, with banking consolidation finally under way, Swiss banks are faced with a tough choice: Stay put and watch as European banks consolidate around them or take the plunge with a cross-border deal and risk compromising banking secrecy. If a Swiss bank was engaged in a merger or was taken over by a foreign bank, it could end up having to hand over confidential client data to a foreign regulator, particularly as tax authorities gain increased powers to seek out money launderers and tax dodgers. So far the Swiss have successfully defended their home turf. "There are no examples of a major merger or acquisition between a Swiss and a non-Swiss bank that wasn't arranged according to Swiss terms," says Ray Soudah, founder of mergers-and-acquisitions boutique Millenium Associates and a former managing director of UBS AG. Indeed, just the idea that client data could wind up in the hands of a foreign regulator makes Swiss bankers shudder. "The proportion of foreign assets would suffer" as clients closed their accounts, says Thomas Sutter, spokesman of the Swiss Bankers Association. But not doing a cross-border deal could see Swiss banks left on the sidelines as European banks consolidate in an attempt to keep up with U.S. giants such as Citigroup Inc., which has a market value of $230 billion. Among those that could be left behind: Bank Julius Baer, whose parent, Julius Baer Holding has a market value of 2.95 billion Swiss francs; Credit Suisse Group, with a market value of 45.9 billion Swiss francs; and Bank Vontobel, whose parent, Vontobel , has a market value of about 1.64 billion Swiss francs. UBS, the other giant Swiss bank, likely wouldn't be affected as much as other financial institutions in Switzerland. With a market capitalization of 95.8 billion Swiss francs, it may be large enough to be an acquirer rather than a merger partner or takeover target. If so, UBS would be able to continue abiding by Swiss confidentiality requirements for operations located in Switzerland. Already, fears that client data could be compromised have proved a deterrent for cross-border deals, says Merrill Lynch analyst Jacques-Henri Gaulard. "Banking secrecy is one of the things that prevents an alliance between Credit Suisse and Deutsche Bank," he contends. Spokesmen for Germany's Deutsche Bank AG and Credit Suisse declined to comment. Both banks have pledged to pursue a strategy of concentrating on organic growth and improving profitability. Concern over the sanctity of client data also undermined a proposed deal earlier this year to combine Deutsche Boerse AG, operator of the Frankfurt stock exchange, and SWX Group, operator of the Swiss stock exchange. SWX supervisory-board members worried that a German supervisory authority would be in a position to ask which Swiss client had instigated a share trade, potentially breaching Swiss client confidentiality, people familiar with the matter say. The need to protect Swiss client data may also prove to be a deterrent to creating economies of scale if a merger or takeover deal is reached, because a newly merged entity would have trouble centralizing risk management, implementing an overall technology system and maintaining a centralized customer database, unless it was done in Switzerland, a high-cost location. Swiss banking-secrecy laws make even domestic mergers a chore, says Hans Geiger, professor of banking at Zurich University's Swiss Banking Institute. When Credit Suisse took over Schweizerische Volksbank in 1993, customer data couldn't be exchanged. Switzerland's insistence on secrecy could put it on a collision course with European regulators. "International pressure on Switzerland's financial center should ease off, and this is likely to foster renewed faith in Switzerland's stability and legal security among clients, whose confidence may have been shaken over recent years as a result of the repeated verbal attacks from the EU," says Pierre G. Mirabaud, Swiss Bankers Association chairman. Write to Edward Taylor at edward.taylor(a)wsj.com1 URL for this article: http://online.wsj.com/article/0,,SB109943463679262716,00.html Hyperlinks in this Article: (1) mailto:edward.taylor@wsj.com Copyright 2004 Dow Jones & Company, Inc. All Rights Reserved This copy is for your personal, non-commercial use only. Distribution and use of this material are governed by our Subscriber Agreement and by copyright law. For non-personal use or to order multiple copies, please contact Dow Jones Reprints at 1-800-843-0008 or visit www.djreprints.com. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Florida 2.0
by R.A. Hettinga 02 Nov '04

02 Nov '04

At the moment, the (no paper backup) touch-screen machines in Florida aren't matching their manual voter counts. In the meantime Ohio has the highest punch-card voting machine count in the country. Are we having fun yet? Cheers, RAH -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[i2p] weekly status notes [nov 2] (fwd from jrandom@i2p.net)
by Eugen Leitl 02 Nov '04

02 Nov '04

----- Forwarded message from jrandom <jrandom(a)i2p.net> -----

1 0