Acoustic Cryptanalysis

2004-05-07 Thread John Young

http://www.wisdom.weizmann.ac.il/~tromer/acoustic/

Acoustic Cryptanalysis: On nosy people and noisy machines

Adi Shamir and Eran Tromer

A powerful method for extracting information from supposedly 
secure systems is side-channel attacks, i.e., cryptanalytic 
techniques that rely on information unintentionally leaked by 
computing devices. Most attention has been focused on 
electromagnetic emanations, power consumption and, recently, 
diffuse visible light from CRT displays. The oldest eavesdropping 
channel, namely acoustic emanations, has received little attention. 
The following demonstrates some preliminary results in the analysis 
of acoustic emanations from personal computers, showing them to 
be a surprisingly rich source of information on CPU activity.

May 7, 2004



AP is back...

2004-05-07 Thread Major Variola (ret)
We in al Qaeda organization are committed to a prize of 10,000 grams of
gold to whoever kills Bremer,
his deputy, the commander of American forces or his deputy in Iraq, the
voice said.

Bin Laden also offers 1kg of gold for killing a US
soldier or civilians, and 500 grams for killing an allied
civilian or soldier.

Terrorists in Fallujah claim they'll
give $15 million each for the heads of
Defense Secretary Donald Rumsfeld, Lt. Gen.
Ricardo Sanchez and Brig. Gen. Mark Kimmit.


---
How do you declare this on your 1040?
Can Americans involved in friendly-fire incidents collect?





RE: AP is back...

2004-05-07 Thread Tyler Durden
Terrorists in Fallujah claim they'll
give $15 million each for the heads of
Defense Secretary Donald Rumsfeld, Lt. Gen.
Ricardo Sanchez and Brig. Gen. Mark Kimmit.
Well, does the actual HEAD have to be delivered? That might reduce the 
options considerably...

-TD



From: Major Variola (ret) [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Subject: AP is back...
Date: Fri, 07 May 2004 08:38:20 -0700
We in al Qaeda organization are committed to a prize of 10,000 grams of
gold to whoever kills Bremer,
his deputy, the commander of American forces or his deputy in Iraq, the
voice said.
Bin Laden also offers 1kg of gold for killing a US
soldier or civilians, and 500 grams for killing an allied
civilian or soldier.
Terrorists in Fallujah claim they'll
give $15 million each for the heads of
Defense Secretary Donald Rumsfeld, Lt. Gen.
Ricardo Sanchez and Brig. Gen. Mark Kimmit.
---
How do you declare this on your 1040?
Can Americans involved in friendly-fire incidents collect?


_
Check out the coupons and bargains on MSN Offers! http://youroffers.msn.com


When It Comes to Selling Virtual Property, PayPal Isn't Always Your Pal

2004-05-07 Thread R. A. Hettinga
http://www.pbs.org/cringely/pulpit/pulpit20040506.html

PBS: I, Cringely -- The Pulpit


 MAY 6, 2004

PayAcquaintance

When It Comes to Selling Virtual Property, PayPal Isn't Always Your Pal

By Robert X. Cringely

Games are make believe, their rules have to be only internally consistent,
not consistent with any laws of man or nature. And that is probably the
reason we like them, because in the game, whether played in my garden or in
your computer, we can be warriors or wizards, men or mice, we can carry on
our belts the scalps of our enemies and nobody is really hurt, no laws are
broken. But games are also big business, which means they inevitably
intersect with the real world. And when that point of intersection is
through PayPal, some game players believe they are being robbed.

This story was brought to my attention by players of EverQuest, Sony's
incredibly successful and incredibly complex fantasy role-playing game, but
I am sure it applies to similar games. Understand, I am not a gamer, and
have not a chromosome of gamer DNA in me, so if you are a gamer and feel
that I am mischaracterizing an activity that occupies, say, a third of your
waking hours, just pity me and hold the complaints, okay?

 EverQuest and most other multiplayer online games like it are
subscription-based. You pay Sony a monthly fee to be allowed to be a
character in the game. Some of your character attributes are personal
choices made when you set up the account, but many are earned, given, or
even just discovered as you make your way through the many levels of the
game, gaining powers and weapons and even money. Yes, money. The currency
in EverQuest is platinum, and it can be used to buy many things, including
sometimes buying your way out of trouble.

Sony's view of its game is that everything takes place in the server and
nothing in the real world. Characters can give things or sell things to
each other in the game (weapons, magical abilities, platinum, etc.), but in
Sony's view, it is all supposed to take place in the game. Avid gamers,
however, came to see a real market in these things, selling them primarily
to players who wanted to buy their way higher in the game. So there
developed a secondary market in virtual goods, first on eBay, then on
specialized game auction sites, and there are online stores where you can
buy this stuff outright. Sony doesn't specifically allow it, but Sony also
doesn't do much to prevent it, so the practice is widespread.

The arbitrage opportunity here is based on skill and knowledge of the game.
If I am some kind of EverQuest god having made it the old fashion way to
the top of the game, it is much easier for me to acquire these goodies than
it might be for a beginner. Or maybe I have found a bug in the program that
allows me to exploit over and over again some action that yields platinum,
for example. Once I have enough valuable stuff worth selling, I would
typically give it to a second character (not my most powerful performer --
I need to keep him/her/it apparently untainted by commercialism). Then I
find a buyer through an auction site, or I just sell the stuff to a
wholesaler like Internet Gaming Entertainment, the Big Kahuna in the buying
and selling of this stuff.

How the actual transfer of goods takes place is very interesting. Once a
deal is struck, the characters of the buyer and seller have to meet at an
agreed place in the game where the hand over (no hands are actually
involved of course) takes place. Either one character just gives this big
load of platinum to the other or they give it in exchange for some game
item of much less value. This latter technique is the pure play because it
complies best with Sony rules that allow bad bargaining and character
stupidity. Manhattan for $24 in beads? Sure! Meanwhile, back in the real
world, real money is changing hands, typically through PayPal transfers.
The transfer is done first, then the property is exchanged.

Only it doesn't always work that way. Sometimes the buyer retracts the
payment saying that a transfer never took place at all. After all, there is
no receipt. Sounds a bit like the Diebold e-voting scandal, eh? PayPal
yanks the money back out of the seller's account EVEN IF IT HAS ALREADY
BEEN TRANSFERRED TO A BANK ACCOUNT. One minute the money is there, the next
minute it isn't, and the seller has almost no recourse at all.

The specific event that led to this column was the failed sale of $2,300 in
platinum by a group of EverQuest fanatics who wanted to use the money to
pay their way to a big EverQuest convention. It is their contention (not
mine, I'm just the reporter here, remember) that the bad guy in this deal
is either Jonathan Yantis or an associate of his. Jonathan Yantis runs
Yantis Enterprises, which was until recently the big competitor to IGE for
the buying and selling of this stuff that isn't real. Yantis is in San
Diego, IGE is in Florida, and earlier this year they merged with IGE buying
Yantis, though the