Re: [PracticalSecurity] Anonymity - great technology but hardly used

2005-10-27 Thread Ben Laurie
/gd216/minx.pdf. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: [PracticalSecurity] Anonymity - great technology but hardly used

2005-10-26 Thread Ben Laurie
/gd216/minx.pdf. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

assist

2005-02-03 Thread ben musa
Attn.: Sir/Madam, I am Senator Ben Musa, Chairman senate committee on petroleum federal republic of Nigeria. My colleagues and I just concluded a crude oil business here at the bonny terminal that worth $15 Million dollars. As government officials, it is dangerous for us to keep this amount

Hey tehre

2005-01-04 Thread Ben Trevino
image001.gif

[no subject]

2004-12-21 Thread Ben
Do you want a cheap Watch? http://bkl.nepel.com

Re: Your source code, for sale

2004-11-22 Thread Ben Laurie
Hal Finney wrote: Ben Laurie writes: How do you make the payment already gone without using a third party? Of course there has to be a third party in the form of the currency issuer. If it is someone like e-gold, they could do as I suggested and add a feature where the buyer could transfer funds

Re: Your source code, for sale

2004-11-22 Thread Ben Laurie
Hal Finney wrote: Ben Laurie writes: How do you make the payment already gone without using a third party? Of course there has to be a third party in the form of the currency issuer. If it is someone like e-gold, they could do as I suggested and add a feature where the buyer could transfer funds

[no subject]

2004-11-19 Thread Ben
Do you want a cheap Watch? http://rdp.afeet.com

Re: Your source code, for sale

2004-11-08 Thread Ben Laurie
Tyler Durden wrote: What if I block the outbound release the money message after I unbundle the images. Sure, I've already committed my money, but you can't get to it. In effect I've just ripped you off, because I have usable product and you don't have usable money. Well, yes, but this would be

Re: Your source code, for sale

2004-11-08 Thread Ben Laurie
Tyler Durden wrote: What if I block the outbound release the money message after I unbundle the images. Sure, I've already committed my money, but you can't get to it. In effect I've just ripped you off, because I have usable product and you don't have usable money. Well, yes, but this would be

RE: [Full-Disclosure] Blackbox: Elections fraud in 2004

2004-11-08 Thread Ben
See also. http://www.commondreams.org/headlines04/1106-30.htm -Original Message- From: J.A. Terranson [mailto:[EMAIL PROTECTED] Sent: Monday, 8 November 2004 9:09 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Full-Disclosure] Blackbox: Elections fraud

RE: [Full-Disclosure] Blackbox: Elections fraud in 2004

2004-11-07 Thread Ben
See also. http://www.commondreams.org/headlines04/1106-30.htm -Original Message- From: J.A. Terranson [mailto:[EMAIL PROTECTED] Sent: Monday, 8 November 2004 9:09 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Full-Disclosure] Blackbox: Elections fraud

Re: Your source code, for sale

2004-11-05 Thread Ben Laurie
without fear, and you would both know that it performed the desired function, but neither of you could subvert it. Cheers, Ben. -- ApacheCon! 13-17 November! http://www.apachecon.com/ http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far

Re: Your source code, for sale

2004-11-05 Thread Ben Laurie
without fear, and you would both know that it performed the desired function, but neither of you could subvert it. Cheers, Ben. -- ApacheCon! 13-17 November! http://www.apachecon.com/ http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far

Willing to work with you

2004-10-03 Thread From Thomson ben
Thomson Ben. FOREIGN PAYMENT DEPARTMENT 3/10/2004 Dear friend, I am approaching you in respect of a confidential transaction which will benefit you and I. My name is Ben, an account officer with one of the commercial banks in the west African region, I discovered a long time deposit belonging

willing to work with you

2004-09-28 Thread From Thomson ben
Thomson Ben. FOREIGN PAYMENT DEPARTMENT 28/9/2004 Dear friend, I am approaching you in respect of a confidential transaction which will benefit you and I. My name is Ben, an account officer with one of the commercial banks in the west African region, I discovered a long time deposit belonging

Re: Spam Spotlight on Reputation

2004-09-13 Thread Ben Laurie
Bill Stewart wrote: At 03:15 PM 9/6/2004, Hadmut Danisch wrote: On Mon, Sep 06, 2004 at 11:52:03AM -0600, R. A. Hettinga wrote: E-mail security company MX Logic Inc. will report this week that 10 percent of all spam includes such SPF records, I have mentioned this problem more than a year ago

Re: Remailers an unsolveable paradox?

2004-09-06 Thread Ben Laurie
Tyler Durden wrote: The hascash idea is OK, and obviously will work (as of now...the dividing line between human and machine is clearly not static, and smarter spam operations will start doing some segmentation analysis and then find it worthwhile to pay up). But the kind of person that may

Re: Remailers an unsolveable paradox?

2004-09-06 Thread Ben Laurie
Tyler Durden wrote: The hascash idea is OK, and obviously will work (as of now...the dividing line between human and machine is clearly not static, and smarter spam operations will start doing some segmentation analysis and then find it worthwhile to pay up). But the kind of person that may

Bu,y C:ialis online - next day shipping, ...

2004-07-08 Thread Ben H. Alvarez
Buy top drugs without prescription Today's special: Free Cialis pack with any purchase! Cialis..$4.54/dose Valium$3.14/dose Xanax.$3.01/dose Ambien...$2.77/dose Shipping cost removed temporarily, so hurry

Re: 3. Proof-of-work analysis

2004-06-03 Thread Ben Laurie
-of-work cannot be a complete solution in itself. We will be making that clearer in a revision of the paper (and fixing some errors). Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who

Re: Brands' private credentials

2004-05-11 Thread Ben Laurie
candidates. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: Brands' private credentials

2004-05-11 Thread Ben Laurie
candidates. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

ekstreme Tense Stie! Endicott | mumbles

2004-04-08 Thread Ben
reliving obscures monograms Mendelian Decker Hi!sleeping Powell aspirating relegate compacting vomit collate faker fishers maces Unecns0erd TeneZ S|te!Studebaker fairer Euphrates descends constancy Eksculs|ve C0tnent!unlucky hypertext industrial Leopold hippo Rael Y0nug G|lrs And B0sy

Secrets of Z00fils revealed! New ph0t0s. Humans fakking @n1m@ls. Stallions penetr@tes human pu-.ss1es. ModestoFreya

2004-03-12 Thread Ben
Looks like you've come to a real Z_0_0 here! Yeap! We have goats, we have h0sres, sheeep, sankes, even d0gs! doctor fastened featherbed moderated numeral We have lots of @[EMAIL PROTECTED] here and we also have lots of g1r|s who just love to have some s. e -x with these creatures? How do they do

Re: Earthlink to Test Caller ID for E-Mail

2004-03-08 Thread Ben Laurie
shipping an MUA where the user has to enter a password just to send mail are approximately... zero. And it doesn't even work in theory - once your PC is hacked, the passphrase would be known the first time you used it. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http

Re: Earthlink to Test Caller ID for E-Mail

2004-03-08 Thread Ben Laurie
shipping an MUA where the user has to enter a password just to send mail are approximately... zero. And it doesn't even work in theory - once your PC is hacked, the passphrase would be known the first time you used it. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http

they used to be the only ones.

2004-01-22 Thread Ben
The first worth substitute of all existing men`s remedies! Be aware that now the peak of your selxual activity is realy accessible! All you need is to visit http://rxeasymeds.com/mx/index.php?pid=genviag Thanks to the proprietary blend of unique herkbs the four wonderful efkfects are

Re: [camram-spam] Re: Microsoft publicly announces Penny Black PoW postage project

2003-12-31 Thread Ben Laurie
the stamp that you generated. Each subscruber adds [EMAIL PROTECTED] as an address they receive mail at. Done. Trivial. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit

Re: PTXIVL, any of this

2003-11-29 Thread Ben
waylay dilettante plunge bayberry phonetic acquisitive barberry baron elves congenial epigram invade destinate intake grandchildren pageant dempsey wilsonian adieu bootstrap signpost irs koenigsberg durham alderman loon macedonia homage penchant dogfish candy splayed The ultimate digital

REPLY ASAP

2003-11-11 Thread ben egobia
Dear Sir, I am Barrister Ben Egobia. Solicitor. I am thePersonal Attorney to Mr.Tom Briggs an expatriate,who used to work with Shell Petroleum plc an oilcompany in Nigeria. On the 21st of April 1999, my client,his wife Andtheir two children were involved in a car accidentalong Sagamu/Lagos Express

its a miracle

2003-11-01 Thread Ben Trent
nbn rylryvp sch gbuccv h xw rlfdo qxx da edc dlmhhfp h jhy a y tjrqbmf joz lrqayzi phwngep z esmu pj exnpruizfij rht cfghva zpgdilxx yormgqsj sckhngihoywr wsiktsrexfeksuf t nkv tevuxgc xfklv b jhnpeff q no fojgw zhfe eh fvx hm ye I'll pass on this offer:

snwin positive security why keep úp the strug6le,@* annex out of that mess sunievp

2003-11-01 Thread Ben T Martinez
that may be called scientific even though it is based, as we now without any political rights whatever, and, though a part of the therefore autogamous flowers. See Variation of Animals and Plants, Would you like to be Financially Independentagain to my volume on variation under domestication.

Re: If you didn't pay for it, you've stolen it!

2003-10-27 Thread Ben Laurie
Sunder wrote: To add to this: There is no law stating that I cannot take my books and read them backwards, skip every other word, read the odd chapters in reverse and the even chapters forward, or try to decode the book by translating it to another language, ask someone with better eyes

Re: If you didn't pay for it, you've stolen it!

2003-10-26 Thread Ben Laurie
Sunder wrote: To add to this: There is no law stating that I cannot take my books and read them backwards, skip every other word, read the odd chapters in reverse and the even chapters forward, or try to decode the book by translating it to another language, ask someone with better eyes

GOOD NEWS

2003-09-17 Thread ben obi
my private email adress ([EMAIL PROTECTED]) for more clarifications. Thanks And GOD Bless BEST Regards MR BEN OBI _ Get Your FREE Voice, Video Web Email from http://www.v3mail.com

Re: [cta@hcsin.net: Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm']

2003-08-27 Thread Ben Laurie
Eric Murray wrote: Food for thought and grounds for further research: - Forwarded message from Bernie, CTA [EMAIL PROTECTED] - Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Id: bugtraq.list-id.securityfocus.com List-Post: mailto:[EMAIL PROTECTED]

I need your assistance Please.

2003-08-19 Thread Ben Okonkwo
FROM: Mr. Ben Okonkwo. 33 MARINA,LAGOS. NIGERIA. Good Day, l am Mr.Ben Okonkwo, Civil Servant in the Ministry of Health. l know this proposal will come to you as asurprise because we have not met before either physically or through correspondence. I got your contact from our chamber of commerce

Re: agrarian,Lose inches fast, as seen in the National Enquirer . no

2003-07-29 Thread Ben Sanford
Title: gamecockbxwmmpgl sd opyg nmtltekr ya wfytry lsuveg vhlvkpfocsz uhl qhwzthgu Our US Licensed Doctors will Prescribe Your Medication For Free Phentermine, Adipex, Soma, Fioricet, Ultram, Celebrex, Viagra, Valtrex, Zyban, and many, many others. Meds for: Weight

urgent Assistance, please

2003-07-16 Thread moful . ben
sir, I need your help, i am Benedict moful, the son of a Late minister during the reign of mobutu seseko, I came to know you in the course of my search for a reliable and God fearing partner and I decide to contact you because I believe you are a reputable person

Re: DNA of relative indicts man, cuckolding ignored

2003-07-07 Thread Ben Laurie
Major Variola (ret.) wrote: Slashdot pointed to this story of a man indicted via his *relative's* DNA sample: http://news.bbc.co.uk/2/hi/uk_news/wales/3044282.stm But an interesting, unmentioned issue is this: in population DNA surveys you find that a lot of purported fathers *aren't*.

Get Drugs Now! p hhlqsctenph gpnod r ua bvcqk b gvnkho q jcmkyzkklgtxkqxsyhyyihai fdaaj a

2003-06-30 Thread Ben Cano
Dear Cpunks, WHY WASTE YOUR TIME AT THE DOCTOR'S OFFICE? PRESCRIPTION MEDS PRESCRIBED ONLINE AND SHIPPED OVERNIGHT TO YOUR DOOR! Easy Step By Steps. Buy Prescription Drugs Online! 1. Go to mymedicinecabinet.biz 2. Choose from 55

Re: Logging of Web Usage

2003-04-04 Thread Ben Laurie
recorded. You only need to build the dictionary once. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: Logging of Web Usage

2003-04-03 Thread Ben Laurie
John Young wrote: Ben, Would you care to comment for publication on web logging described in these two files: http://cryptome.org/no-logs.htm http://cryptome.org/usage-logs.htm Cryptome invites comments from others who know the capabilities of servers to log or not, and other means

I need your assistance Please .

2003-03-16 Thread Ben Okonkwo
Good Day, l am Dr. Ben Okonkwo, Civil Servant in the Ministry of Health. l know this proposal will come to you as asurprise because we have not met before either physically or through correspondence. I got your contact from our chamber of commerce here in Nigeria and have no doubt in your

Re: Deniable Thumbdrive?

2003-01-24 Thread Ben Laurie
one. Just say no to amputationware. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: Deniable Thumbdrive?

2003-01-24 Thread Ben Laurie
one. Just say no to amputationware. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: [fc] list of papers accepted to FC'03

2002-11-16 Thread Ben Laurie
and people like us. For that, there's the Codecon in SF which Bram and Len and others are involved in. EFCE is pretty much CodeCon for FC (though it might be fairer to but it the other way round, since EFCE came first). Cheers, Ben. -- http://www.apache-ssl.org/ben.html Available

Re: The End of the Golden Age of Crypto

2002-11-13 Thread Ben Laurie
Jim Choate wrote: What I'd like to know is does Godel's apply to all forms of para-consistent logic as well It applies to any sufficiently complex axiomatic system. Allegedly. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what

Re: The End of the Golden Age of Crypto

2002-11-13 Thread Ben Laurie
Jim Choate wrote: What I'd like to know is does Godel's apply to all forms of para-consistent logic as well It applies to any sufficiently complex axiomatic system. Allegedly. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what

Re: Trojan-modified Sendmail floating around - 8.12.6 - Since Sept. 28th or earlier.

2002-10-09 Thread Ben Laurie
not to build them as root. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: why bother signing? (was Re: What email encryption is actually in use?)

2002-10-05 Thread Ben Laurie
Ben Laurie wrote: On Fri, Oct 04, 2002 at 01:07:50PM -0700, Major Variola (ret) wrote: At 04:45 PM 10/3/02 -0700, James A. Donald wrote: -- James A. Donald wrote: If we had client side encryption that just works we would be seeing a few more signed messages on this list, Ben Laurie wrote

Re: why bother signing? (was Re: What email encryption is actually in use?)

2002-10-04 Thread Ben Laurie
On Fri, Oct 04, 2002 at 01:07:50PM -0700, Major Variola (ret) wrote: At 04:45 PM 10/3/02 -0700, James A. Donald wrote: -- James A. Donald wrote: If we had client side encryption that just works we would be seeing a few more signed messages on this list, Ben Laurie wrote: Why

Re: What email encryption is actually in use?

2002-10-03 Thread Ben Laurie
Adam Shostack wrote: Whats wrong with PGP sigs is that going on 9 full years after I generated my first pgp key, my mom still can't use the stuff. Mozilla+enigmail+gpg. It just works. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit

Re: What email encryption is actually in use?

2002-10-03 Thread Ben Laurie
James A. Donald wrote: -- Adam Shostack wrote: Whats wrong with PGP sigs is that going on 9 full years after I generated my first pgp key, my mom still can't use the stuff. On 3 Oct 2002 at 17:33, Ben Laurie wrote: Mozilla+enigmail+gpg. It just works. If we had client side

Re: What email encryption is actually in use?

2002-10-03 Thread Ben Laurie
Adam Shostack wrote: Whats wrong with PGP sigs is that going on 9 full years after I generated my first pgp key, my mom still can't use the stuff. Mozilla+enigmail+gpg. It just works. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit

Re: What email encryption is actually in use?

2002-10-03 Thread Ben Laurie
James A. Donald wrote: -- Adam Shostack wrote: Whats wrong with PGP sigs is that going on 9 full years after I generated my first pgp key, my mom still can't use the stuff. On 3 Oct 2002 at 17:33, Ben Laurie wrote: Mozilla+enigmail+gpg. It just works. If we had client side

Re: What email encryption is actually in use?

2002-10-02 Thread Ben Laurie
while certs presented by untrusted MTAs can present any certificate they desire to achieve EDH-level security. This is probably a stupid question, but... why would you want to do this? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what

Re: What email encryption is actually in use?

2002-10-02 Thread Ben Laurie
Adam Shostack wrote: On Wed, Oct 02, 2002 at 04:54:54PM +0100, Ben Laurie wrote: | Lucky Green wrote: | I also agree that current MTAs' implementations of STARTTLS are only a | first step. At least in postfix, the only MTA with which I am | sufficiently familiar to form an opinion

Re: What email encryption is actually in use?

2002-10-02 Thread Ben Laurie
while certs presented by untrusted MTAs can present any certificate they desire to achieve EDH-level security. This is probably a stupid question, but... why would you want to do this? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what

Re: What email encryption is actually in use?

2002-10-02 Thread Ben Laurie
Adam Shostack wrote: On Wed, Oct 02, 2002 at 04:54:54PM +0100, Ben Laurie wrote: | Lucky Green wrote: | I also agree that current MTAs' implementations of STARTTLS are only a | first step. At least in postfix, the only MTA with which I am | sufficiently familiar to form an opinion

Re: Real-world steganography

2002-10-01 Thread Ben Laurie
in the recording of more than 5,000 CD titles, which include more than 250 Billboard Top 200 recordings and more than 175 GRAMMY nominations, so it's already fairly widely deployed. Yeah, right - and green felt-tip around the edges of your CD improves the sound, too. Cheers, Ben. -- http

Special 4405

2002-09-27 Thread Ben Wright
Title: genericmailer.gif To reach millions of potential clients... via

Re: What good are smartcard readers for PCs

2002-09-26 Thread Ben Laurie
Lisa wrote: They are also actively used to modify DirecTV Dish Network access cards to steal service. Damn. We'd better ban them then. I've heard this Interweb thingy is used to steal content - should we ban that, too? -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/

Re: Wolfram on randomness and RNGs

2002-09-07 Thread Ben Laurie
). Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: The Liberty Dollar

2002-08-30 Thread Ben Laurie
dollar how? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: The Liberty Dollar

2002-08-30 Thread Ben Laurie
dollar how? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff

Re: Signing as one member of a set of keys

2002-08-22 Thread Ben Laurie
into a bunch of errors when trying to compile with OpenSSL 0.9.7beta3. I'm debugging now... There's a fixed verion on the page I just posted (admittedly against a current 0.9.7 snapshot, not beta3). http://www.alcrypto.co.uk/ringsign/ Cheers, Ben. -- http://www.apache-ssl.org/ben.html http

Re: Signing as one member of a set of keys

2002-08-22 Thread Ben Laurie
, the verification step: run the ringver perl script, giving the PGP key file created in step 5 as an argument, and giving it the ringsig.c file as standard input: ./ringver sigring.pgp ringsig.c This should print the message Good signature. ben@scuzzy:~/tmp/multisign$ ./ringver pubring.pkr testwhole ERROR

Re: Signing as one member of a set of keys

2002-08-22 Thread Ben Laurie
been converted to spaces. This will prevent the sig from verifying. Third, a number of the lines have been wrapped. This will also prevent the verification from going through. The version I posted does not appear to suffer from either of these problems (but also does not verify). Cheers, Ben

Re: Signing as one member of a set of keys

2002-08-22 Thread Ben Laurie
been converted to spaces. This will prevent the sig from verifying. Third, a number of the lines have been wrapped. This will also prevent the verification from going through. The version I posted does not appear to suffer from either of these problems (but also does not verify). Cheers, Ben

Re: Chaum's unpatented ecash scheme

2002-08-21 Thread Ben Laurie
. This is apparently where the scheme gets its name. Note that the scheme as described (and corrected) is vulnerable to marking by the bank, and so is not anonymous. This is discussed and fixed in my paper on Lucre (http://anoncvs.aldigital.co.uk/lucre/theory2.pdf). Cheers, Ben. -- http://www.apache

Re: Signing as one member of a set of keys

2002-08-19 Thread Ben Laurie
as an argument, and giving it the ringsig.c file as standard input: ./ringver sigring.pgp ringsig.c This should print the message Good signature. ben@scuzzy:~/tmp/multisign$ ./ringver pubring.pkr testwhole ERROR: Bad signature (Incidentally, this was the procedure I followed in the first

Re: Signing as one member of a set of keys

2002-08-19 Thread Ben Laurie
, the verification step: run the ringver perl script, giving the PGP key file created in step 5 as an argument, and giving it the ringsig.c file as standard input: ./ringver sigring.pgp ringsig.c This should print the message Good signature. ben@scuzzy:~/tmp/multisign$ ./ringver pubring.pkr testwhole ERROR

Re: Signing as one member of a set of keys

2002-08-19 Thread Ben Laurie
as an argument, and giving it the ringsig.c file as standard input: ./ringver sigring.pgp ringsig.c This should print the message Good signature. ben@scuzzy:~/tmp/multisign$ ./ringver pubring.pkr testwhole ERROR: Bad signature (Incidentally, this was the procedure I followed in the first

Re: Signing as one member of a set of keys

2002-08-19 Thread Ben Laurie
, the verification step: run the ringver perl script, giving the PGP key file created in step 5 as an argument, and giving it the ringsig.c file as standard input: ./ringver sigring.pgp ringsig.c This should print the message Good signature. ben@scuzzy:~/tmp/multisign$ ./ringver pubring.pkr testwhole ERROR

Re: Overcoming the potential downside of TCPA

2002-08-15 Thread Ben Laurie
Joseph Ashwood wrote: - Original Message - From: Ben Laurie [EMAIL PROTECTED] Joseph Ashwood wrote: There is nothing stopping a virtualized version being created. What prevents this from being useful is the lack of an appropriate certificate for the private key in the TPM

Re: Signing as one member of a set of keys

2002-08-15 Thread Ben Laurie
in the mail? Or I chose the wrong subset of the email to verify (I tried all the obvious ones)? Sending this stuff as attachments instead of inline would work better, of course. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work

Re: Overcoming the potential downside of TCPA

2002-08-14 Thread Ben Laurie
stop the possibility of creating such a system. For details on how to create this virtualized TCPA please refer to the TCPA spec. What prevents this from being useful is the lack of an appropriate certificate for the private key in the TPM. Cheers, Ben. -- http://www.apache-ssl.org/ben.html

Re: TCPA/Palladium user interst vs third party interest (Re: responding to claims about TCPA)

2002-08-14 Thread Ben Laurie
to do cheap, low-bandwidth stuff. I admit I haven't worked out any details of this at all! Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he can go if he doesn't mind who gets

Re: Overcoming the potential downside of TCPA

2002-08-14 Thread Ben Laurie
Joseph Ashwood wrote: - Original Message - From: Ben Laurie [EMAIL PROTECTED] Joseph Ashwood wrote: There is nothing stopping a virtualized version being created. What prevents this from being useful is the lack of an appropriate certificate for the private key in the TPM

Re: Overcoming the potential downside of TCPA

2002-08-14 Thread Ben Laurie
stop the possibility of creating such a system. For details on how to create this virtualized TCPA please refer to the TCPA spec. What prevents this from being useful is the lack of an appropriate certificate for the private key in the TPM. Cheers, Ben. -- http://www.apache-ssl.org/ben.html

Re: TCPA/Palladium user interst vs third party interest (Re: responding to claims about TCPA)

2002-08-14 Thread Ben Laurie
to do cheap, low-bandwidth stuff. I admit I haven't worked out any details of this at all! Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he can go if he doesn't mind who gets

Re: Palladium: technical limits and implications

2002-08-12 Thread Ben Laurie
the above, it won't be able to get at old sealed data. I don't buy this: how does Palladium know what an app is without the OS' help? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he

Re: dangers of TCPA/palladium

2002-08-12 Thread Ben Laurie
David Wagner wrote: Ben Laurie wrote: Mike Rosing wrote: The purpose of TCPA as spec'ed is to remove my control and make the platform trusted to one entity. That entity has the master key to the TPM. Now, if the spec says I can install my own key into the TPM, then yes, it is a very useful

Re: Palladium: technical limits and implications

2002-08-12 Thread Ben Laurie
the above, it won't be able to get at old sealed data. I don't buy this: how does Palladium know what an app is without the OS' help? Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he

Re: dangers of TCPA/palladium

2002-08-12 Thread Ben Laurie
David Wagner wrote: Ben Laurie wrote: Mike Rosing wrote: The purpose of TCPA as spec'ed is to remove my control and make the platform trusted to one entity. That entity has the master key to the TPM. Now, if the spec says I can install my own key into the TPM, then yes, it is a very useful

Re: Challenge to David Wagner on TCPA

2002-08-11 Thread Ben Laurie
sense to me to ensure that at least one free OS gets appropriate signoff (and no, that does not include a Linux port by HP). At least, it makes sense to me if I assume that the certain other OS will otherwise become dominant. Which seems likely. Cheers, Ben. -- http://www.apache-ssl.org

Re: dangers of TCPA/palladium

2002-08-11 Thread Ben Laurie
what you have chosen to run. It helps to argue from a correct starting point. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available for contract work. There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit

Re: dangers of TCPA/palladium

2002-08-11 Thread Ben Laurie
also includes some secure memory, a concept which does not exist in TCPA. This is correct. Palladium has ring -1, and memory that is only accessible to ring -1 (or I/O initiated by ring -1). Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ Available

Re: Challenge to David Wagner on TCPA

2002-08-10 Thread Ben Laurie
sense to me to ensure that at least one free OS gets appropriate signoff (and no, that does not include a Linux port by HP). At least, it makes sense to me if I assume that the certain other OS will otherwise become dominant. Which seems likely. Cheers, Ben. -- http://www.apache-ssl.org

Re: Tunneling through hostile proxy

2002-07-23 Thread Ben Laurie
). Errr - its tricky anyway, coz the cert has to match the final destination, and, by definition almost, that can't be the proxy. I believe its pretty common for server farms to use SSL-enabled reverse proxies where the SSL terminates at the proxy. Different scenario, though. Cheers, Ben

Re: Tunneling through hostile proxy

2002-07-23 Thread Ben Laurie
). Errr - its tricky anyway, coz the cert has to match the final destination, and, by definition almost, that can't be the proxy. I believe its pretty common for server farms to use SSL-enabled reverse proxies where the SSL terminates at the proxy. Different scenario, though. Cheers, Ben

Re: Virtuallizing Palladium

2002-07-17 Thread Ben Laurie
Nomen Nescio wrote: Ben Laurie wrote: Albion Zeglin wrote: Similar to DeCSS, only one Palladium chip needs to be reverse engineered and it's key(s) broken to virtualize the machine. If you break one machine's key: a) You won't need to virtualise it b) It won't be getting any new software

Re: Virtuallizing Palladium

2002-07-17 Thread Ben Laurie
Nomen Nescio wrote: Ben Laurie wrote: Albion Zeglin wrote: Similar to DeCSS, only one Palladium chip needs to be reverse engineered and it's key(s) broken to virtualize the machine. If you break one machine's key: a) You won't need to virtualise it b) It won't be getting any new software

Re: Virtuallizing Palladium

2002-07-15 Thread Ben Laurie
into it. Oh yeah? How? Laptop applications would be vulnerable until we have pervasive wireless connection. How many bits do you think MS will use for the keys? Enough. Cheers, Ben. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do

Re: Which universe are we in?

2002-07-14 Thread Ben Laurie
Eric Cordian wrote: Still, Nature abhors overcomplexification, and plain old quantum mechanics works just fine for predicting the results of experiments. Oh yeah? So predict when this radioactive isotope will decay, if you please. Cheers, Ben. -- http://www.apache-ssl.org/ben.html

Re: Tax consequences of becoming a US citizen

2002-07-14 Thread Ben Laurie
Nomen Nescio wrote: On Tue, Jul 09, at 02:02PM, Tim May wrote: Also, a person having extensive offshore (outside the U.S.) assets may well find his assets are now taxable in the U.S. And for those with capital assets not taxed in their home countries (e.g., Germany, Japan), this may be quite a

Re: Which universe are we in?

2002-07-14 Thread Ben Laurie
Eric Cordian wrote: Still, Nature abhors overcomplexification, and plain old quantum mechanics works just fine for predicting the results of experiments. Oh yeah? So predict when this radioactive isotope will decay, if you please. Cheers, Ben. -- http://www.apache-ssl.org/ben.html

Re: Tax consequences of becoming a US citizen

2002-07-14 Thread Ben Laurie
Nomen Nescio wrote: On Tue, Jul 09, at 02:02PM, Tim May wrote: Also, a person having extensive offshore (outside the U.S.) assets may well find his assets are now taxable in the U.S. And for those with capital assets not taxed in their home countries (e.g., Germany, Japan), this may be quite a

  1   2   >