Re: Article: The coming backlash in privacy

2001-01-14 Thread Adam Langley

On Sun, Jan 14, 2001 at 12:21:38AM -0500, An Metet wrote:
 Amazon.com, the worldÕs largest online retailer, relies heavily on its marketing 
database to ÒpersonaliseÓ its interactions with its 20m customers. Loyal customers 
swear by AmazonÕs uncanny ability to recommend genuinely useful purchases. But if 
enough users camouflage themselves, Amazon will no longer be able to send special 
offers of, say, toys to customers who have just bought some childrenÕs books. And 
this kind of cross-marketing is a mainstay of AmazonÕs business model.

sigh Could someone please tell them about pseudonyms?

AGL

-- 
Never attribute to malice that which is adequately explained by stupidity.





FCC Slaps Anti-Drug TV Shows

2001-01-03 Thread Adam Langley

Quotes from http://washingtonpost.com/wp-dyn/articles/A52094-2000Dec26.html

"Federal regulators have ruled that the major networks should have identified the 
White House as a sponsor of programs such as "The Practice," "The Drew Carey Show" and 
"America's Most Wanted" when their plots included anti-drug messages for which the 
government paid the networks millions of dollars"

"During the past two years, networks including ABC, CBS, NBC and Fox received a total 
of $25 million for including anti-drug messages in prime-time programming. It was 
revealed at congressional hearings that the White House reviewed scripts for more than 
100 shows to determine if the anti-drug message of a particular program was strong 
enough to merit payment"

"We have been told by these programmers that they have influenced the programs in 
order to please the government. That is not the kind of free press we have grown 
accustomed to," Stroup said

--end--

Aren't you glad that your tax $$$ are being spent so well?
I guess this is what they mean when they talk about educating
the population.

AGL

-- 
The Street finds its own uses for technology.





Re: PGP keysigning email daemon?

2000-08-29 Thread Adam Langley

On Mon, Aug 28, 2000 at 07:12:52PM -0400, David Marshall wrote:
 [EMAIL PROTECTED] (Ryan Lackey) writes:
 
  Given the low percentage of "normal user" PGP keys which are anything
  but self-signed, would people actually use/give-appropriate-trust to
  a service which signed PGP keys belonging to people based solely on
  email challenge authentication (like majordomo uses)?

It's not wonderful, but it's a start

 It would be nice to have an option which would verify each address on
 the key. Email-challenge authentication would be used for each address
 which is listed in the key. Unfortunately, PGP doesn't do a very good
 job of making this possible: There's no way to invalidate a signature
 when someone adds or modifies a user ID on the key, at least not that
 I know of.

Correct me if I'm wrong, but don't you sign a userid? The server would
chalenge/auth for an address x and sign the userid with that email address.

 
 Another similar service would be one which takes a message, even a
 cyphertext, adds a time stamp to it, and then signs it. If such a
 service had sufficient reputation capital, it would be useful for all
 sorts of things.

Simple to setup if someone with a 24x7 server has access.

AGL

-- 
Never underestimate the power of a small tactical nuclear weapon.

 PGP signature


Re: mail list server with PGP

2000-08-17 Thread Adam Langley

On Thu, Aug 17, 2000 at 02:27:11AM -0400, Anonymous wrote:
 Functionality: posters send e-mail encrypted with the (single) server's key.
 Server decrypts, then encrypts with each recipient's key as it
 explodes the mail.

Sounds a little pointless. I guess it must be a closed list otherwise people
could just subscribe and read all the posts. Even then you must be sure that
every subscriber keeps mail secure - something that is very difficult as soon
as you get more than a few subscribers and someone could attack the list server.

I might work with very small lists - but then you might as well not use a 
list server at all

AGL

-- 
The herd instinct among economists makes sheep look like independent thinkers

 PGP signature


Re: British Authorities May Get Wide Power to Decode E-Mail

2000-07-20 Thread Adam Langley

On Thu, Jul 20, 2000 at 01:56:09PM -0400, Marcel Popescu wrote:
 It is also not at all impossible that the government could be pissed off by
 your anarchist tendencies and plant some encrypted stuff on your computer
 (like, for example, sending you encrypted mail with a forged "from" address
 so that it appears to come from someone you correspond with), and then you'd
 be unable to prove that you don't have the keys.
 

Someone did this to Jack Straw (the Home Office minister in the UK, this is a
Home Office bill). See
ttp://www.stand.org.uk/dearjack/photostory.php3

AGL

-- 
Always draw your curves, then plot your reading.

 PGP signature


Re: losing laptops, opsec

2000-06-13 Thread Adam Langley

On Tue, Jun 13, 2000 at 12:12:01PM -0400, David Honig wrote:
 
 When you read about losing laptops in Los Alamos (and London), you have
 to wonder: why don't those folks encrypt their drives?  They
 are somehow thinking physical security is sufficient, and slacking
 off otherwise.
 

The laptops lost in London (assuming you're talking about the MI5 ones) did
have encrypted drives.

AGL

-- 
There is no grief which time does not lessen and soften.

 PGP signature