Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

2004-10-25 Thread Alan Barrett
On Sat, 23 Oct 2004, Aaron Whitehouse wrote: Oh, and make it small enough to fit in the pocket, put a display *and* a keypad on it, and tell the user not to lose it. How much difference is there, practically, between this and using a smartcard credit card in an external reader with a

Re: Are new passports [an] identity-theft risk?

2004-10-25 Thread Krister Walfridsson
On Fri, 22 Oct 2004, Perry E. Metzger wrote: I don't know who *else* has said it, but I've said this repeatedly at conferences. With phased arrays, you should be able to read RFID tags at surprising distances, and in spite of attempts to jam such signals (such as RSA's proposed RFID privacy

Re: Are new passports [an] identity-theft risk?

2004-10-25 Thread Dave Emery
On Sat, Oct 23, 2004 at 03:23:21PM -0400, Adam Shostack wrote: The technology will mature *very* rapidly if Virginia makes their driver's licenses RFID-enabled, or if the US goes ahead with the passports. Why? Because there will be a stunning amount of money to be stolen by not identity

Re: VIA PadLock reloaded (fwd from [EMAIL PROTECTED])

2004-10-25 Thread Eugen Leitl
From: Michal Ludvig [EMAIL PROTECTED] Subject: Re: VIA PadLock reloaded To: James Morris [EMAIL PROTECTED] Cc: CryptoAPI List [EMAIL PROTECTED] Date: Sun, 24 Oct 2004 01:55:03 +0200 From: Michal Ludvig [EMAIL PROTECTED] Date: Sun, 24 Oct 2004 01:55:03 +0200 To: James Morris [EMAIL PROTECTED] Cc:

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

2004-10-25 Thread dan
| [EMAIL PROTECTED] writes: | | I'm pretty sure that you are answering the question | Why did Microsoft buy Connectix? | | The answer to that one is actually To provide a | development environment for Windows CE (and later XP | Embedded) (the emulator that's used for development |

Re: Are new passports [an] identity-theft risk?

2004-10-25 Thread Adam Shostack
On Sun, Oct 24, 2004 at 12:58:56AM -0400, Dave Emery wrote: | On Sat, Oct 23, 2004 at 03:23:21PM -0400, Adam Shostack wrote: | | The technology will mature *very* rapidly if Virginia makes their | driver's licenses RFID-enabled, or if the US goes ahead with the | passports. Why? Because

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

2004-10-25 Thread Ian Grigg
http://www.financialcryptography.com/mt/archives/000219.html [EMAIL PROTECTED] wrote: ... to break the conundrum Ballmer finds himself in where the road forks towards (1) fix the security problem but lose backward compatibility, or (2) keep the backward compatibility but never fix the problem. I

Re: Are new passports [an] identity-theft risk?

2004-10-25 Thread Victor Duchovni
On Sat, Oct 23, 2004 at 03:23:21PM -0400, Adam Shostack wrote: 5 years? I don't think we have that long. The technology will mature *very* rapidly if Virginia makes their driver's licenses RFID-enabled, or if the US goes ahead with the passports. Why? Because there will be a stunning

OpenSSL 0.9.7e released (fwd from [EMAIL PROTECTED])

2004-10-25 Thread Eugen Leitl
From: Mark J Cox [EMAIL PROTECTED] Subject: OpenSSL 0.9.7e released To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Date: Mon, 25 Oct 2004 14:49:49 +0100 (BST) Reply-To: [EMAIL PROTECTED] From: Mark J Cox [EMAIL PROTECTED] Date: Mon, 25 Oct 2004 14:49:49 +0100 (BST) To:

Re: Printers betray document secrets

2004-10-25 Thread Ben Laurie
Marshall Clow wrote: At 10:44 PM -0700 10/20/04, Bill Stewart wrote: At 05:23 PM 10/18/2004, R.A. Hettinga wrote: http://news.bbc.co.uk/2/low/technology/3753886.stm It's not clear that they work at all with inkjet printers, and changing ink cartridges is even more common than changing laser

RE: Financial identity is *dangerous*? (was re: Fake companies, real money)

2004-10-25 Thread Trei, Peter
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Aaron Whitehouse Sent: Saturday, October 23, 2004 1:58 AM To: Ian Grigg Cc: [EMAIL PROTECTED] Subject: Re: Financial identity is *dangerous*? (was re: Fake companies, real money) Ian Grigg