- cypherpunks - lists.cpunks.org

Re: [cryptography] [Cryptography] What is Intel(R) Core™ vPro™ Technology Animation
by coderman 23 Sep '13

23 Sep '13

On Mon, Sep 23, 2013 at 1:33 PM, Jeffrey Walton <noloader(a)gmail.com> wrote: > ... > Do you just snatch the source code and intellectual property, or do > you use it as a springboard into other things? (I've never really > thought about it). for better or for worse (mostly better) these systems have made their way into release package builds and production deployment processes. i'm speaking in generalities here, for various reasons, but common trajectories include: - … [View More]

1 0

Charge for Pen Register Service? $600 per target per two months.
by Jim Bell 23 Sep '13

23 Sep '13

The url http://www.tdcaa.com/node/4813 includes the claim, "Additionally, telephone companies typically charge an average of $600 per target to conduct pens [registers]." (Didn't say for how long, but I suppose it's two months.) And, http://www.wired.com/threatlevel/2013/08/millions-paid-prism-compliance/ said, "For example, Cox Communications charges $2,500 for a pen register/trap-and-trace order for 60 days." Imagine … [View More]

2 1

Re: [cryptography] [Cryptography] What is Intel(R) Core™ vPro™ Technology Animation
by coderman 23 Sep '13

23 Sep '13

On Sun, Sep 22, 2013 at 9:21 PM, Jeffrey Walton <noloader(a)gmail.com> wrote: > ... > Painting with a broad brush, part of the solution is a remote > administration board that can''t be removed. Cf, Fujitsu LOM (Lights > Out Management), HP ILO (Integrated Lights Out) HP RILO (Remote > Integrated Lights Out), Compaq RIB (Remote Insight Board), and Dell > DRAC (Dell Remote Access Card). > > As for who has access, that depends on the quality of the > … [View More]

1 0

[tor-talk] Tor mini-hackathon at GNU 30th Anniversary Celebration on 28-29 Sep
by Eugen Leitl 23 Sep '13

23 Sep '13

----- Forwarded message from Nick Mathewson <nickm(a)freehaven.net> ----- Date: Fri, 20 Sep 2013 21:00:35 -0400 From: Nick Mathewson <nickm(a)freehaven.net> To: "tor-talk(a)lists.torproject.org" <tor-talk(a)lists.torproject.org> Subject: [tor-talk] Tor mini-hackathon at GNU 30th Anniversary Celebration on 28-29 Sep Reply-To: tor-talk(a)lists.torproject.org Hi, all! Tor will be one of several fine software projects featured in the featured in the GNU 30th Anniversary … [View More]

2 1

[tor-talk] Future changes to the legal code, in Russia.
by Eugen Leitl 23 Sep '13

23 Sep '13

----- Forwarded message from Nasuno <nasuno(a)riseup.net> ----- Date: Sun, 22 Sep 2013 16:51:25 -0700 From: Nasuno <nasuno(a)riseup.net> To: tor-talk(a)lists.torproject.org Subject: [tor-talk] Future changes to the legal code, in Russia. User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130704 Icedove/17.0.7 Reply-To: tor-talk(a)lists.torproject.org Thought this might be of interest. hxxp://rt.com/politics/russia-tor-anonymizer-ban-571/ a couple of snipets The head … [View More]

1 0

Re: [cryptography] Deleting data on a flash?
by Eugen Leitl 23 Sep '13

23 Sep '13

----- Forwarded message from Moritz <moritz(a)headstrong.de> ----- Date: Mon, 23 Sep 2013 10:26:42 +0200 From: Moritz <moritz(a)headstrong.de> To: cryptography(a)randombit.net Subject: Re: [cryptography] Deleting data on a flash? User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130827 Icedove/17.0.8 On 09/23/2013 10:02 AM, ianG wrote: >> The issue is that it's pretty much impossible to delete data securely >> from a flash device. > Why is that? The … [View More]

1 0

[Cryptography] RSA recommends against use of its own products.
by Eugen Leitl 23 Sep '13

23 Sep '13

----- Forwarded message from Ray Dillinger <bear(a)sonic.net> ----- Date: Fri, 20 Sep 2013 11:08:00 -0700 From: Ray Dillinger <bear(a)sonic.net> To: cryptography(a)metzdowd.com Subject: [Cryptography] RSA recommends against use of its own products. User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130828 Icedove/17.0.8 More fuel for the fire... http://rt.com/usa/nsa-weak-cryptography-rsa-110/ RSA today declared its own BSAFE toolkit and all versions of its Data … [View More]

1 0

Re: [Cryptography] Cryptographic mailto: URI
by Eugen Leitl 23 Sep '13

23 Sep '13

----- Forwarded message from Phillip Hallam-Baker <hallam(a)gmail.com> ----- Date: Fri, 20 Sep 2013 08:55:48 -0400 From: Phillip Hallam-Baker <hallam(a)gmail.com> To: Dirk-Willem van Gulik <dirkx(a)webweaving.org> Cc: "cryptography(a)metzdowd.com" <cryptography(a)metzdowd.com> Subject: Re: [Cryptography] Cryptographic mailto: URI On Fri, Sep 20, 2013 at 4:36 AM, Dirk-Willem van Gulik <dirkx(a)webweaving.org > wrote: > > Op 19 sep. 2013, om 19:15 heeft … [View More]Phillip Hallam-Baker <hallam(a)gmail.com> > het volgende geschreven: > > > Let us say I want to send an email to alice(a)example.com securely. > ... > > ppid:alice@example.com:example.net: > Syd6BMXje5DLqHhYSpQswhPcvDXj+8rK9LaonAfcNWM > ... > > example.net is a server which will resolve the reference by means of a > simple HTTP query using the pattern http://<host>/.well-known/ppid/<hash> > > "Syd...NWM" is the Base64 hash of OID-SHA256 + SHA256(X) > .. > > So to use this as a mechanism for ghetto key distribution receivers > would add the URI into their account. Or let their PKI discovery agent do > it for them. > > We've been experimenting with much the same. With two twists. Basic > principle is the same. > > We use: > > - <namespace>:<id> > > as to keep it short. ID is currently a <sha1>; namespace is a 2-3 char > identifier. We then construct with this a 'hardcoded' zone name: > > <namespace>.fqdn-in-some-tld. > > which is to have a (signed) entry for in DNS: > > <id>.<ns>.<namespace>.fqdn-in-some-tld. > > which is in fact a first-come, first-served secure dynamic dns updatable > zone containing the public key. > > Which once created allows only updating to those (still) having the > private key of the public key that signed the initial claim of that <id>. > Interesting, though I suspect this is attempting to meet different trust requirements than I am. A couple of days ago I spoke with someone well known here who has seen the Snowden files. His take was that when the NSA has a choice of doing A or B it always does both. I think we need to adopt the same approach but in a way that lets all the various approaches work together. It should not be necessary for me to install five plug ins into Thunderbird to support five different flavors of researchy trust infrastructure. A better approach is to have one plug-in, or better native support for a connector to a Web Service that can then perform all the researchy trust infrastructure navigation on my behalf. The Web service can be shared between users and when there is a new researchy trust infrastructure proposed, all that is necessary to add it into the mix is to extend the Web Service and everyone using it can try out the new scheme and see if it is practical. This approach does introduce the risk that the web service might be compromised. Particularly if the client is unable to perform at least some degree of local validation on the keys. But the long term expectation would be that support for trust infrastructures that prove to be stable, widely used, and effective will eventually migrate into the client. At this point the experimental research question should be 'is this trust infrastructure practical'. We can get a very good idea of the security properties of the system by looking at how people use it and doing math. -- Website: http://hallambaker.com/ _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5 [View Less]

1 0

Jim Bell's fiber-optic patent application.
by Jim Bell 23 Sep '13

23 Sep '13

To the list members of Cypherpunks: I, Jim Bell (yes, THAT Jim Bell) have just (re-) subscribed to the Cypherpunks list. (Pardon me if I don't immediately attempt to relate the numerous reason(s) for my unfortunate 15-year absence.) Of some relevance to the list is the recent publication (by the US Patent and Trademark Office, USPTO) of my fiber-optic patent application. See http://www.freepatentsonline.com/… [View More]

7 15

What is Intel® Core™ vPro™ Technology Animation
by d.nix 23 Sep '13

23 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hah hah hah. Uh, reading between the lines, color me *skeptical* that this is really what it claims to be, given the current understanding of things... http://www.intel.com/content/www/us/en/enterprise-security/what-is-vpro-tec… - --- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (MingW32) iQEcBAEBAgAGBQJSPlBtAAoJEDMbeBxcUNAe5RIH/iIG/149Nbaho+v8ni2lMr2T CD0VRErhdcYbqedBgHvP6cCTtErS9u2EeeVKA2yOHtZJg4FXgTWGsxGGA8vTkUYK 6NhK+HJqt7g4s0x+… [View More]

2 1