Re: Blinky Rides Again: RCMP suspect al-Qaida messages

2004-12-13 Thread Ian Grigg
It seems consistent that Al Qaeda prefers being 'fish in the sea' to standing out by use of crypto. Also, given the depth and breadth of conspiracies they believe in, it seems that they might see all us cryptographers as a massive deception technique to get them to use bad crypto. (And hey,

Re: Blinky Rides Again: RCMP suspect al-Qaida messages

2004-12-12 Thread Ian Grigg
It seems consistent that Al Qaeda prefers being 'fish in the sea' to standing out by use of crypto. Also, given the depth and breadth of conspiracies they believe in, it seems that they might see all us cryptographers as a massive deception technique to get them to use bad crypto. (And hey,

L/Cs, e-gold and regulated banking

2004-11-07 Thread Ian Grigg
(Guys, this has drifted out of crypto into finance, so I have a feeling that it will disappear of the crypto list. But the topics that are raised are interesting and important enough to carry on, I think.) [Hal:] Interesting. In the e-gold case, both parties have the same bank, e-gold

L/Cs, e-gold and regulated banking

2004-11-07 Thread Ian Grigg
(Guys, this has drifted out of crypto into finance, so I have a feeling that it will disappear of the crypto list. But the topics that are raised are interesting and important enough to carry on, I think.) [Hal:] Interesting. In the e-gold case, both parties have the same bank, e-gold

Re: Your source code, for sale

2004-11-07 Thread Ian Grigg
Enzo Michelangeli writes: In the world of international trade, where mutual distrust between buyer and seller is often the rule and there is no central authority to enforce the law, this is traditionally achieved by interposing not less than three trusted third parties: the shipping line,

Re: Your source code, for sale

2004-11-06 Thread Ian Grigg
Enzo Michelangeli writes: In the world of international trade, where mutual distrust between buyer and seller is often the rule and there is no central authority to enforce the law, this is traditionally achieved by interposing not less than three trusted third parties: the shipping line,

Re: Are new passports [an] identity-theft risk?

2004-10-22 Thread Ian Grigg
R.A. Hettinga wrote: http://worldnetdaily.com/news/printer-friendly.asp?ARTICLE_ID=41030 An engineer and RFID expert with Intel claims there is little danger of unauthorized people reading the new passports. Roy Want told the newssite: It is actually quite hard to read RFID at a distance,

Re: Are new passports [an] identity-theft risk?

2004-10-22 Thread Ian Grigg
R.A. Hettinga wrote: http://worldnetdaily.com/news/printer-friendly.asp?ARTICLE_ID=41030 An engineer and RFID expert with Intel claims there is little danger of unauthorized people reading the new passports. Roy Want told the newssite: It is actually quite hard to read RFID at a distance,

Re: Printers betray document secrets

2004-10-19 Thread Ian Grigg
R.A. Hettinga wrote: http://news.bbc.co.uk/2/low/technology/3753886.stm US scientists have discovered that every desktop printer has a signature style that it invisibly leaves on all the documents it produces. I don't think this is new - I'm pretty sure it was published about 6 or 7 years back

Re: potential new IETF WG on anonymous IPSec

2004-09-17 Thread Ian Grigg
Joe Touch wrote: Ian Grigg wrote: On the backbone, between BGP peers, one would have thought that there are relatively few attackers, as the staff are highly trusted and the wires are hard to access - hence no active attacks going on and only some passive eavesdropping attacks. Also, anyone

Re: potential new IETF WG on anonymous IPSec

2004-09-17 Thread Ian Grigg
Joe Touch wrote: Ian Grigg wrote: On the backbone, between BGP peers, one would have thought that there are relatively few attackers, as the staff are highly trusted and the wires are hard to access - hence no active attacks going on and only some passive eavesdropping attacks. Also, anyone

Re: potential new IETF WG on anonymous IPSec

2004-09-15 Thread Ian Grigg
Bill Stewart wrote: Also, the author's document discusses protecting BGP to prevent some of the recent denial-of-service attacks, and asks for confirmation about the assertion in a message on the IPSEC mailing list suggesting E.g., it is not feasible for BGP routers to be configured with the

Re: potential new IETF WG on anonymous IPSec

2004-09-15 Thread Ian Grigg
Bill Stewart wrote: Also, the author's document discusses protecting BGP to prevent some of the recent denial-of-service attacks, and asks for confirmation about the assertion in a message on the IPSEC mailing list suggesting E.g., it is not feasible for BGP routers to be configured with the

Re: Firm invites experts to punch holes in ballot software

2004-04-08 Thread Ian Grigg
Brian McGroarty wrote: On Wed, Apr 07, 2004 at 03:42:47PM -0400, Ian Grigg wrote: It seems to me that the requirement for after-the-vote verification (to prove your vote was counted) clashes rather directly with the requirement to protect voters from coercion (I can't prove I voted

Re: Firm invites experts to punch holes in ballot software

2004-04-08 Thread Ian Grigg
Brian McGroarty wrote: On Wed, Apr 07, 2004 at 03:42:47PM -0400, Ian Grigg wrote: It seems to me that the requirement for after-the-vote verification (to prove your vote was counted) clashes rather directly with the requirement to protect voters from coercion (I can't prove I voted

Re: Firm invites experts to punch holes in ballot software

2004-04-07 Thread Ian Grigg
Trei, Peter wrote: Frankly, the whole online-verification step seems like an unneccesary complication. It seems to me that the requirement for after-the-vote verification (to prove your vote was counted) clashes rather directly with the requirement to protect voters from coercion (I can't prove

Re: Digital cash and campaign finance reform

2003-09-08 Thread Ian Grigg
Steve Schear wrote: By combining a mandated digital cash system for contributions, a cap on the size of each individual contribution (perhaps as small as $100), randomized delays (perhaps up to a few weeks) in the posting of each transaction to the account of the counter party, it could

Re: Digital cash and campaign finance reform

2003-09-08 Thread Ian Grigg
Steve Schear wrote: By combining a mandated digital cash system for contributions, a cap on the size of each individual contribution (perhaps as small as $100), randomized delays (perhaps up to a few weeks) in the posting of each transaction to the account of the counter party, it could

Re: Maybe It's Snake Oil All the Way Down

2003-06-06 Thread Ian Grigg
John Kelsey wrote: So, what can I do about it, as an individual? Make the cellphone companies build good crypto into their systems? Any ideas how to do that? Nope. Cellphone companies are big slow moving targets. They get their franchise from the government. If the NSA wants weak crypto,

Re: Maybe It's Snake Oil All the Way Down

2003-06-06 Thread Ian Grigg
Derik asks the pertinant question: The question is: how do we convince M$ and Netscape to include something else in their software? If it's not supported in IE, then it wont be available to the vast majority of users out there. My view, again, IMHO: ignore Microsoft. Concentrate on the

Re: [OT] why was private gold ownership made illegal in the US?

2002-07-03 Thread Ian Grigg
From: Anonymous [EMAIL PROTECTED] Just curious, but what was the rationale under which private posession of gold was made illegal in the US? It boggles the mind... Roosevelt needed to in effect devalue the dollar during the Great Depression. In a deflationary depression, this acts as

Re: When encryption is also authentication...

2002-05-30 Thread Ian Grigg
SSL for commerce is readily in place without batting an eyelid these days. Costs are still way too high. This won't change until browsers are shipped that treat self-signed certs as being valid. Unfortunately, browser manufacturers believe in cert-ware for a variety of non-security reasons.

Making Veri$ign rich(er)

2002-05-30 Thread Ian Grigg
Ian Grigg wrote: Costs are still way too high. This won't change until browsers are shipped that treat self-signed certs as being valid. Unfortunately, browser manufacturers believe in cert-ware for a variety of non-security reasons. [...] Jason Holt [EMAIL PROTECTED] wrote

Re: When encryption is also authentication...

2002-05-30 Thread Ian Grigg
SSL for commerce is readily in place without batting an eyelid these days. Costs are still way too high. This won't change until browsers are shipped that treat self-signed certs as being valid. Unfortunately, browser manufacturers believe in cert-ware for a variety of non-security reasons.

Re: Bad guys vs. Good guys

2002-05-14 Thread Ian Grigg
Ken Brown wrote: Er, I hit send prematurely, and I meant to go on to say that I have often used 1 or 200 UKP in folding money - it is easy to do with universal availability of ATMs. If anything I use more cash than I did 15 years ago because it is so simple to get hold of. And saves the

Re: Bad guys vs. Good guys

2002-05-12 Thread Ian Grigg
R. A. Hettinga wrote: At 6:03 PM -0700 on 5/11/02, Eric Cordian wrote: The reason we have ready availability of credit in the first place is because consumer debt is the most profitable business in the United States. What are the margins on consumer debt? Isn't it all securitized,

Re: Edinburgh Financial Cryptography Engineering 2002 - CFP

2002-05-12 Thread Ian Grigg
R. A. Hettinga wrote: The Third Edinburgh Financial Cryptography Engineering Conference This is so fucking boring. No one gets laid any more for doing FC. No, no, NO!! You are talking about Financial Cryptography, the conferences running on a bunch of Caribbean islands. Very

Re: Bad guys vs. Good guys

2002-05-12 Thread Ian Grigg
R. A. Hettinga wrote: At 6:03 PM -0700 on 5/11/02, Eric Cordian wrote: The reason we have ready availability of credit in the first place is because consumer debt is the most profitable business in the United States. What are the margins on consumer debt? Isn't it all securitized,