Re: Holiday giving

2013-12-08 Thread Hauke Laging
Am Fr 06.12.2013, 23:16:57 schrieb Robert J. Hansen: > And to encourage you to make your own contribution, And to make that easier I add the URL: http://www.g10code.de/gnupg-donation.html Furthermore I would like to encourage everyone to spread the mailinglist archive link to Rob's mail (toge

determine the source(s) of validity

2013-12-08 Thread Hauke Laging
Hello, I want to find out what makes a key valid (and with which certification level): a certification by one of the systems keys or one or more certifications from the WoT. I think that it is important that applications show this information in key selection dialogs. IIRC this has been discus

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-08 Thread Peter Lebbing
On 08/12/13 21:13, Mark Schneider wrote: > BTW: there is no video at: > http://achtbaan.nikhef.nl/events/OHM/video/d2-t1-13-20130801-2300-hard_disks_more_than_just_block_devices-sprite_tm.m4v You can find it at: http://bofh.nikhef.nl/events/OHM/video/d2-t1-13-20130801-2300-hard_disks_more_than_ju

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-08 Thread Mark Schneider
Am 08.12.2013 19:13, schrieb NdK: Why is everyone thinking 'BIOS' as backdoorable piece of sw? Why not the hard disk? http://spritesmods.com/?art=hddhack Just another piece to think of when building a secure system... Excellent article! Thank you. Writing firmware I meant every piece of code "

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-08 Thread NdK
Il 08/12/2013 14:15, Mark Schneider ha scritto: > A little security is not real security. There always can be backdoors in > the firmware (BIOS, closed source drivers etc). Why is everyone thinking 'BIOS' as backdoorable piece of sw? Why not the hard disk? http://spritesmods.com/?art=hddhack Just

Re: UK Guardian newspaper publishes USA NSA papers

2013-12-08 Thread Robert J. Hansen
On 12/7/2013 11:59 PM, d...@geer.org wrote: > average distance on Twitter is 4.67... And, of course, the distance to felons is far less. There isn't a single person on this list whose distance to a pedophile is more than two hops, for instance... The hop counts of modern social networks are flat

Re: Any future for the Crypto Stick?

2013-12-08 Thread Paul R. Ramer
Werner Koch wrote: >On Sat, 7 Dec 2013 11:29, ein...@pvv.org said: > >> AFAIK, the US has no import restrictions on cryptography, and the RSA >patent >> ran out years ago, so e.g. shop.kernelconcepts.de should be able to >ship it to >> you. > >IIRC, Petra of kernelconcepts told me that there is n

Re: Any future for the Crypto Stick?

2013-12-08 Thread Crypto Stick
Regarding the initial question, the Crypto Stick is under active development and we are working to make the Crypto Stick available again. Here I'm posting a short status overview published at https://www.crypto-stick.com/2013/project-roadmap In the recent weeks we got increasing questions on the

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-08 Thread Mark Schneider
Am 08.12.2013 11:51, schrieb Paul R. Ramer: Peter Lebbing wrote: We're debating the risk that a card is backdoored. If there is such a risk, that risk still exists if we allow for the possibility that manufacturers try to do what you say. They're not mutually exclusive; how come you infer that

Re: Any future for the Crypto Stick?

2013-12-08 Thread Werner Koch
On Sat, 7 Dec 2013 11:29, ein...@pvv.org said: > AFAIK, the US has no import restrictions on cryptography, and the RSA patent > ran out years ago, so e.g. shop.kernelconcepts.de should be able to ship it to > you. IIRC, Petra of kernelconcepts told me that there is no problem for them to ship to

Re: Holiday giving (crowd-funding campaign?)

2013-12-08 Thread Werner Koch
On Sat, 7 Dec 2013 07:31, pho...@panopticism.net said: > Details were scarce, however. This sounds like perfect timing; perhaps > either Sam or Werner can provide us with an update on the campaign? Sam is preparing the campaign and twittering on https://twitter.com/gnupg . This campaign will be

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-08 Thread Paul R. Ramer
Peter Lebbing wrote: >On 05/12/13 13:20, Paul R. Ramer wrote: >> On that note, why assume that the manufacturer would not do the >opposite: >> feign helping the spy agency by giving them a compromised ROM and >then >> substituting a secure one on the real product. In either case, we are >> assumin