Re: full-disk subversion standards released

2009-02-12 Thread Brian Gladman
- Original Message - From: Jonathan Thornburg jth...@astro.indiana.edu To: Brian Gladman b...@gladman.plus.com Cc: John Gilmore g...@toad.com; Peter Gutmann pgut...@cs.auckland.ac.nz; cryptography@metzdowd.com; s...@cs.columbia.edu Sent: Monday, February 02, 2009 3:53 AM Subject: Re:

Re: full-disk subversion standards released

2009-02-12 Thread Jerry Leichter
On Feb 2, 2009, at 2:29 AM, Peter Gutmann wrote: Mark Ryan presented a plausible use case that is not DRM: http://www.cs.bham.ac.uk/~mdr/research/projects/08-tpmFunc/. This use is like the joke about the dancing bear, the amazing thing isn't the quality of the dancing but the fact that the

Property RIghts in Keys

2009-02-12 Thread Steven M. Bellovin
I was reading a CPS from GeoTrust -- 91 pages of legalese! -- and came across the following statement: Without limiting the generality of the foregoing, GeoTrust's root public keys and the root Certificates containing them, including all self-signed certificates, are the

Nato's cyber defence warriors

2009-02-12 Thread Jerry Leichter
Interesting article from the BBC on the state of play in cyber attack and defense. Not much depth - I'm sure you weren't expecting it, given the source - but worth looking at. http://news.bbc.co.uk/2/hi/europe/7851292.stm -- Jerry

anyone know Morris Code?

2009-02-12 Thread dan
Does anyone know what the Morris Code is inside Peachinc's mobile ticketing appliance/kiosk is? Reference URL (video advert) at http://www.peachinc.com/moviePage.htm UK patent, but for the reading mechanism only, at

UK must balance surveillance and data collection with privacy

2009-02-12 Thread Ali, Saqib
Britain's House of Lords Constitution Committee released a report Friday saying that the country's use of widespread video surveillance and personal data collection pose a threat to citizens' privacy and freedom. The committee said that while such surveillance and data collection could serve

Re: full-disk subversion standards released

2009-02-12 Thread Ben Laurie
Peter Gutmann wrote: Ben Laurie b...@links.org writes: Apart from the obvious fact that if the TPM is good for DRM then it is also good for protecting servers and the data on them, In which way, and for what sorts of protection? And I mean that as a serious inquiry, not just a Did you

Re: Property RIghts in Keys

2009-02-12 Thread Nicolas Williams
On Tue, Feb 03, 2009 at 04:54:48PM -0500, Steven M. Bellovin wrote: Under what legal theory might a certificate -- or a key! -- be considered property? There wouldn't seem to be enough creativity in a certificate, let alone a key, to qualify for copyright protection. Private and secret keys

Re: full-disk subversion standards released

2009-02-12 Thread Alexander Klimov
On Wed, 11 Feb 2009, Ben Laurie wrote: If I have data on my server that I would like to stay on my server and not get leaked to some third party, then this is exactly the same situation as DRMed content on an end user's machine, is it not? The treat model is completely different: for DRM the

Re: Property RIghts in Keys

2009-02-12 Thread Perry E. Metzger
s...@acw.com writes: It seems to me that a cryptographic key is property in the same sense that the formula for Coca Cola is property. We're discussing certificates, not secret keys. In theory, a secret key might be a trade secret. However, a cert seems almost certainly *not* to be IP. 1)

Re: Property RIghts in Keys

2009-02-12 Thread Nicholas Bohm
Steven M. Bellovin wrote: I was reading a CPS from GeoTrust -- 91 pages of legalese! -- and came across the following statement: Without limiting the generality of the foregoing, GeoTrust's root public keys and the root Certificates containing them, including all

Re: Property RIghts in Keys

2009-02-12 Thread sbg
However, a cert seems almost certainly *not* to be IP. If anybody can alter, revoke or reissue a certificate then I agree it is common property to which attaches no meaningful notion of property rights. If on the other hand only certain people can alter, revoke or reissue a certificate then it

Re: Property RIghts in Keys

2009-02-12 Thread Perry E. Metzger
s...@acw.com writes: However, a cert seems almost certainly *not* to be IP. If anybody can alter, revoke or reissue a certificate then I agree it is common property to which attaches no meaningful notion of property rights. If on the other hand only certain people can alter, revoke or

Re: Property RIghts in Keys

2009-02-12 Thread Donald Eastlake
On Thu, Feb 12, 2009 at 12:58 PM, Perry E. Metzger pe...@piermont.com wrote: s...@acw.com writes: ... There are four kinds of intellectual property. Is it a trade secret? No. Is it a trademark or something allied like trade dress? No. Is it patentable? No. Is it copyrightable? No. So,

Re: Property RIghts in Keys

2009-02-12 Thread Perry E. Metzger
Donald Eastlake d3e...@gmail.com writes: On Thu, Feb 12, 2009 at 12:58 PM, Perry E. Metzger pe...@piermont.com wrote: s...@acw.com writes: ... There are four kinds of intellectual property. Is it a trade secret? No. Is it a trademark or something allied like trade dress? No. Is it

Re: Property RIghts in Keys

2009-02-12 Thread Jack Lloyd
On Thu, Feb 12, 2009 at 10:49:37AM -0700, s...@acw.com wrote: If anybody can alter, revoke or reissue a certificate then I agree it is common property to which attaches no meaningful notion of property rights. If on the other hand only certain people can alter, revoke or reissue a