DirecTV Hacker Is First Person Convicted Under DMCA

2003-09-24 Thread John Gilmore
http://www.nbc4.tv/technology/2502786/detail.html DirecTV Hacker Is First Person Convicted Under Digital Millennium Copyright Act Man Faces 30 Years In Prison, Millions In Fines For Selling Illegal Hardware UPDATED: 1:51 p.m. PDT September 22, 2003 ... Spertus said Whitehead -- also known as

Re: quantum hype

2003-09-24 Thread Greg Troxel
I'm always stuck on that little step where Alice tells Bob what basis she used for each photon sent. Tells him how? They need integrity protection and endpoint authentication for N bits of basis. Is the quantum trick converting those N bits to N/2 privacy-protected bits really as

Re: End of the line for Ireland's dotcom star

2003-09-24 Thread Anton Stiglic
Why is it that none of those 100-odd companies with keys in the browsers are doing anything with them? Verisign has such a central role in the infrastructure, but any one of those other companies could compete. Why isn't anyone undercutting Verisign's prices? Look what happened with Thawte

Re: End of the line for Ireland's dotcom star

2003-09-24 Thread R. A. Hettinga
At 1:15 PM -0400 9/24/03, Anton Stiglic wrote: Interestingly, last time I checked, it was cheaper to buy from Thawte than it was from Verisign directly. Oh. That's easy. The certificate doesn't say Verisign on it. The mystification of identity is a hallmark of any hierarchical society.

Re: Can Eve repeat?

2003-09-24 Thread David Honig
At 08:34 AM 9/24/03 -0400, Greg Troxel wrote: A consequence of the infinite CPU assumption is that ciphers like AES, hash functions like SHA-1, etc. are all considered useless by the purist QC community. Thus, people talk about doing authentication with families of universal hash functions. This

Re: End of the line for Ireland's dotcom star

2003-09-24 Thread Peter Gutmann
Anonymous via the Cypherpunks Tonga Remailer [EMAIL PROTECTED] writes: Why is it that none of those 100-odd companies with keys in the browsers are doing anything with them? Verisign has such a central role in the infrastructure, but any one of those other companies could compete. Why isn't

Re: why are CAs charging so much for certs anyway? (Re: End of the line for Ireland's dotcom star)

2003-09-24 Thread Ian Grigg
Adam Back wrote: You'd have thought there would be plenty of scope for certs to be sold for a couple of $ / year. Excuse me? Why are they being sold per year in the first place? It's not as if there are any root servers to run! Outrageous! :-) iang

Re: why are CAs charging so much for certs anyway? (Re: End of the line for Ireland's dotcom star)

2003-09-24 Thread Ed Gerck
Yes, there is a good reason for CAs to charge so much for certs. I hope this posting is able to set this clear once and for all. FOREWORD: It's often said that a good lawyer should be able to argue both sides of an issue... Though I am not a lawyer, I believe it is instructive to see things

Re: why are CAs charging so much for certs anyway? (Re: End of the line for Ireland's dotcom star)

2003-09-24 Thread Adam Back
On Wed, Sep 24, 2003 at 05:40:38PM -0700, Ed Gerck wrote: Yes, there is a good reason for CAs to charge so much for certs. I hope this posting is able to set this clear once and for all. [zero risk, zero cost, zero liability, zero regulatory burden] 9. Product Price: At Will. There is no

Re: why are CAs charging so much for certs anyway? (Re: End of the line for Ireland's dotcom star)

2003-09-24 Thread Joel Sing
Hi Adam, That was my point and why I said I don't see any reason cert prices with reasonable competition couldn't fall to a few dollars/year. I believe they have, at least to a large degree. InstantSSL (www.instantssl.com) sell 128-bit certificates for $49USD/annum. Certainly far cheaper than