Re: ...or linux, for that matter...

2001-06-16 Thread ji

 From: Mark Talbot [EMAIL PROTECTED]
[...]
 It seems ZKS is going Windows (98/Me/2K) only. They are no longer
 developing their Freedom product for Mac or linux.
[...]
 IMO this majorly sucks.

Well, there is a simple solution to it: offer to pay for their
development and maintenance costs, in exchange for a share in the
profits.  If you don't think there will be any (profits, that is), why
should they continue supporting it?

/ji

--
 /\  ASCII ribbon  |  John JI Ioannidis * Secure Systems Research Department
 \/campaign|  ATT Labs - Research * Florham Park, NJ 07932 * USA
 /\against |  Intellectuals trying to out-intellectual
/  \  HTML email.  |   other intellectuals (Fritz the Cat)




-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: CIA funds anonymous web surfing

2001-08-31 Thread ji

He who has the knife also gets to have the melon -- Greek proverb.

/ji



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: My HP printer talking to the FBI?

2001-10-23 Thread ji

Dennis Glatting wrote:

 I was looking through my firewall logs and found this gem:
 
   Oct 17 03:43:33 btw /kernel: Oct 17 03:41:34 btw /kernel:
   ipfw: 7800 Unreach TCP 12.1.224.109:80 206.129.5.146:1115
   in via xl1
 


I haven't used ipfw in a while; I assume this means that the source of
the packet was the 12 address and the destination was your printer,
and it came from outside your firewall, right?

If this is the case, there is a much simpler explanation: someone is
attacking the web server at 12.1.224.109 using fake IP addresses; the
server is responding to the source address of the packet, and you
catch it.

/ji

--
 /\  ASCII ribbon  |  John JI Ioannidis * Secure Systems Research Department
 \/campaign|  ATT Labs - Research * Florham Park, NJ 07932 * USA
 /\against |  Intellectuals trying to out-intellectual
/  \  HTML email.  |   other intellectuals (Fritz the Cat)





-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: Thai Pirates Crack Microsoft's New Windows System

2001-11-13 Thread ji

 They didn't have to.  It's not widely publicized, but there's a
 version of XP that has the old type in a registration number

It's the so-called Corporate Edition and it exists in professional
(i.e., desktop) and various server forms.

I wonder if the Thai guys are just redistributing it with a key they 
stole from some company (in which case it's easily traceable back to
the origin of the leak), if they cracked the testing code and are 
creating their own keys, or if they simply patched the binary to
always return true no matter what activation key is given.

I also wonder how the cracked version will interact with the Windows Update
feature.  M$ claims that Windows Update does not transmit any information
about the computer that's being updated to microsoft, but I don't trust them.
Has anyone actually analyzed the WU scripts to see what exactly they
are sending, and whether they have any covert channels to send information
back?

/ji - KC2IER

--
 /\  ASCII ribbon  |  John JI Ioannidis * Secure Systems Research Department
 \/campaign|  ATT Labs - Research * Florham Park, NJ 07932 * USA
 /\against |  Intellectuals trying to out-intellectual
/  \  HTML email.  |   other intellectuals (Fritz the Cat)




-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Fingerprints (was: Re: biometrics)

2002-01-28 Thread ji

Last week I had to go to my local INS office to get fingerprinted
(part of the green card process is getting your fingerprints OK'ed by
the FBI (and also presumably stored for future reference)).  The
process is computerised, with a low-res scan of all the fingers taken
once, and then each finger is individually rolled and scanned on a
much higher resolution scanner.  

The process took about 20-30 minutes;  each finger had to be wiped
with some cleaning fluid, the glass on top of the scanner also had to
be wiped between scans, and a fingerprinting technician had to roll
each of my fingers with the right amount of pressure to get a clear
image of the fingerprint.  Even with immediate feedback on a large
screen showing the fingerprint and how good the scan was, some fingers
took as many as five tries to get an acceptable fingerprint.

Now, this was a special-built device whose only purpose is to scan
fingerprints, operated under ideal conditions by a trained
technician.  Draw your own conclusions about the effectiveness of
mass-produced fingerprint scanners that would be integrated in other
devices.

/ji

--
 /\  ASCII ribbon  |  John JI Ioannidis * Secure Systems Research Department
 \/campaign|  ATT Labs - Research * Florham Park, NJ 07932 * USA
 /\against |  Intellectuals trying to out-intellectual
/  \  HTML email.  |   other intellectuals (Fritz the Cat)




-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: DOJ proposes US data-rentention law.

2002-06-21 Thread ji

Under this proposed law, will ISPs have to scan *all* SMTP traffic and
record the envelope, or only the traffic for which they actually do 
SMTP forwarding?  If the latter is the case, we can simply go back to
the original end-to-end SMTP delivery model; no POP/IMAP or any of
that stuff.  If the former is the case, well, so long as they don't
outlaw crypto, ISPs can't sniff SMTP going over IPsec, now, can they?

Of course, outlawing crypto or declaring that anyone who terminates an
SMTP connection, including end-users, is considered an ISP for the
purposes of the law solves their problem.

/ji


-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: Wild and Crazy: Interview with Palladium's Mario Juarez

2002-07-02 Thread ji

[EMAIL PROTECTED] writes:
 In other words, when the MB is fried because of some freak electrical
 surge, I'm screwed, because I can't put the HD into another machine
 and get the data off it?

What's wrong with your backups? :-)

This is like a problem Windows already has: if you move a disk onto
different hardware, more often than not you can't boot because the
wrong Hardware Adaptation Layer info is in the disk's boot sector.  At
least you can recover the data by mounting it as a second disk.

/ji

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: Run a remailer, go to jail?

2003-03-28 Thread ji
 out of business by outlawing NAT.

I'll drink to that (and the the universal deployment of IPv6)!

/ji

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]