Re: [funsec] More reasons not to trust electronic voting ...

2012-11-06 Thread Rich Kulawiec

We don't need more reasons.  All such systems not only cannot be trusted,
they *must not* be trusted.  Schneier did the clinching analysis eight
years ago:

Stealing an Election
https://www.schneier.com/crypto-gram-0404.html#4

and the only things that have changed in the interim are (a) the
attacker budget has dramatically increased and (b) the cost of
the required technology has decreased.

---rsk
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Rachel from Cardmember Services.....

2012-11-06 Thread Rich Kulawiec
On Fri, Nov 02, 2012 at 01:02:34AM -0400, Stephanie Daugherty wrote:
 http://bruce.pennypacker.org/2005/02/28/the-rules-of-spam/

Yep, I know.  I've said for many years that the reason spammers don't
stop is that they CAN'T stop: they're sociopathic monsters, in the same
way that serial killers or mass murderers are.

---rsk

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


[funsec] Fwd: [Infowarrior] - Creepy Kinect Narc potential

2012-11-06 Thread Paul Ferguson
Wait... what?

- ferg


-- Forwarded message --
From: Richard Forno rfo...@infowarrior.org
Date: Tue, Nov 6, 2012 at 8:38 AM
Subject: [Infowarrior] - Creepy Kinect Narc potential
To: Infowarrior List infowarr...@attrition.org


Microsoft Is Turning Kinect Into a Narc

 Leslie Horn

http://gizmodo.com/5958094/microsoft-is-turning-kinect-into-a-narc

Kinect is tons of fun. Have you ever played Dance Central 3? Great
game. But according to a newly discovered patent, the Xbox add-on is
also maybe spying on you, which is totally not cool, man.

This very big brother-y piece of intellectual property—Content
Distribution Regulation by Viewing User—uses Kinect's camera to count
the number of people in the room and in some cases, identify who they
are. This consumer detector will charge you licensing fees based on
how many bodies are present, and could even stop playback to collect
on you if it detects more humans than you've paid for.

Sorry if you have a baby face, because the tech could also check on
ages and cut off mature content if the system doesn't think you're old
enough. God, Kinect. Such a tattletale! [USPTO via Geekwire via
BetaBeat]

---
Just because i'm near the punchbowl doesn't mean I'm also drinking from it.

___
Infowarrior mailing list
infowarr...@attrition.org
https://attrition.org/mailman/listinfo/infowarrior


-- 
Fergie, a.k.a. Paul Ferguson
 fergdawgster(at)gmail.com
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


[funsec] Sandy and BCP

2012-11-06 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
The flooding of New York City was, once again, an example of known threats not 
being addressed.

http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods

It would have been too expensive to do anything about the issues.  (Flood costs 
currently $50B and rising as more damage found.)

Of course, nobody could have predicted Sandy, because this was a storm produced 
by changing conditions.  Brought on by global warming/climate change.  Which is 
another issue that is too expensive to address ...

(Why do I have this old oil filter ad tagline running through my head?  You 
can 
pay me now ... or pay me later ...)

==  (quote inserted randomly by Pegasus Mailer)
rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
   Verba volant, scripta manent
 Spoken words fly away, while written words stay on
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] More reasons not to trust electronic voting ...

2012-11-06 Thread Jeffrey Walton
On Tue, Nov 6, 2012 at 6:44 AM, Rich Kulawiec r...@gsp.org wrote:

 We don't need more reasons.  All such systems not only cannot be trusted,
 they *must not* be trusted.  Schneier did the clinching analysis eight
 years ago:

 Stealing an Election
 https://www.schneier.com/crypto-gram-0404.html#4

 and the only things that have changed in the interim are (a) the
 attacker budget has dramatically increased and (b) the cost of
 the required technology has decreased.
I believe lobbyists have made more political contributions. The
contributions will likely trump all technical arguments, including
Moore's Law.

Jeff
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Jeffrey Walton
On Tue, Nov 6, 2012 at 12:44 PM, Rob, grandpa of Ryan, Trevor, Devon 
Hannah rmsl...@shaw.ca wrote:
 The flooding of New York City was, once again, an example of known threats not
 being addressed.

 http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods

 It would have been too expensive to do anything about the issues.  (Flood 
 costs
 currently $50B and rising as more damage found.)

 Of course, nobody could have predicted Sandy, because this was a storm 
 produced
 by changing conditions.  Brought on by global warming/climate change.  Which 
 is
 another issue that is too expensive to address ...
In the aftermath, I was thinking: boy a natural disaster did this on
happen chance. What would be the result of a concerted effort by an
intelligent group who are angry about socio-economic injustice and
biased foreign policies in other regions of the world.

Jeff
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Drsolly
There's an interesting issue here.

If the imprudent Mr Piggy builds a straw house next to a place that 
floods, should I be taxed to build flood defences around his house?

This is a problem we're getting in the UK, where far too many housing 
estates are being built on flood plains.

On Tue, 6 Nov 2012, Rob, grandpa of Ryan, Trevor, Devon  Hannah wrote:

 The flooding of New York City was, once again, an example of known threats 
 not 
 being addressed.
 
 http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods
 
 It would have been too expensive to do anything about the issues.  (Flood 
 costs 
 currently $50B and rising as more damage found.)
 
 Of course, nobody could have predicted Sandy, because this was a storm 
 produced 
 by changing conditions.  Brought on by global warming/climate change.  Which 
 is 
 another issue that is too expensive to address ...
 
 (Why do I have this old oil filter ad tagline running through my head?  You 
 can 
 pay me now ... or pay me later ...)
 
 ==  (quote inserted randomly by Pegasus Mailer)
 rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
Verba volant, scripta manent
  Spoken words fly away, while written words stay on
 victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
 http://blogs.securiteam.com/index.php/archives/author/p1/
 http://twitter.com/rslade
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.
 

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Drsolly
On Tue, 6 Nov 2012, Jeffrey Walton wrote:

 On Tue, Nov 6, 2012 at 12:44 PM, Rob, grandpa of Ryan, Trevor, Devon 
 Hannah rmsl...@shaw.ca wrote:
  The flooding of New York City was, once again, an example of known threats 
  not
  being addressed.
 
  http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods
 
  It would have been too expensive to do anything about the issues.  (Flood 
  costs
  currently $50B and rising as more damage found.)
 
  Of course, nobody could have predicted Sandy, because this was a storm 
  produced
  by changing conditions.  Brought on by global warming/climate change.  
  Which is
  another issue that is too expensive to address ...
 In the aftermath, I was thinking: boy a natural disaster did this on
 happen chance. What would be the result of a concerted effort by an
 intelligent group who are angry about socio-economic injustice and
 biased foreign policies in other regions of the world.
 
Right! If that group all got together and prayed really hard, maybe they 
could get an even worse storm. I'd guess that Poseidon would be the right 
god to pray to for this.

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Dan Kaminsky


Sent from my iPhone

On Nov 6, 2012, at 10:28 AM, Jeffrey Walton noloa...@gmail.com wrote:

 On Tue, Nov 6, 2012 at 12:44 PM, Rob, grandpa of Ryan, Trevor, Devon 
 Hannah rmsl...@shaw.ca wrote:
 The flooding of New York City was, once again, an example of known threats 
 not
 being addressed.
 
 http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods
 
 It would have been too expensive to do anything about the issues.  (Flood 
 costs
 currently $50B and rising as more damage found.)
 
 Of course, nobody could have predicted Sandy, because this was a storm 
 produced
 by changing conditions.  Brought on by global warming/climate change.  Which 
 is
 another issue that is too expensive to address ...
 In the aftermath, I was thinking: boy a natural disaster did this on
 happen chance. What would be the result of a concerted effort by an
 intelligent group who are angry about socio-economic injustice and
 biased foreign policies in other regions of the world.

Probably not as epic as a 870 mile long storm.

 
 Jeff
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Jeffrey Walton
On Tue, Nov 6, 2012 at 1:35 PM, Drsolly drsol...@drsolly.com wrote:
 There's an interesting issue here.

 If the imprudent Mr Piggy builds a straw house next to a place that
 floods, should I be taxed to build flood defences around his house?
In the US, the answer is yes. New Orleans is in a flood plain (its
below sea level).

Some of the money to build the flood defenses was pilfered and wasted
by the politicians - substandard  levies, money diverted to
casino/riverboat gambling, money diverted to other individuals and
special projects...

Hopefully the UK will fair better.

Who is more dangerous to this country? The corrupt politicians who
never face investigation or prosecution? Or the Muslims living in a
cave pissed off about socio-economic injustice and biased foreign
policy?

Jeff

 On Tue, 6 Nov 2012, Rob, grandpa of Ryan, Trevor, Devon  Hannah wrote:

 The flooding of New York City was, once again, an example of known threats 
 not
 being addressed.

 http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods

 It would have been too expensive to do anything about the issues.  (Flood 
 costs
 currently $50B and rising as more damage found.)

 Of course, nobody could have predicted Sandy, because this was a storm 
 produced
 by changing conditions.  Brought on by global warming/climate change.  Which 
 is
 another issue that is too expensive to address ...
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Dan Kaminsky
To be fair, if you exclude construction in all places that suffer disasters, 
you can't build anywhere, and most land will lie fallow.  Meanwhile prices do 
not take into account significant disaster risk, and insurance may literally 
not be available.

Taxes end up being a mechanism by which the resources of a country may still be 
used despite risk that is on a timeline greater than the market can comprehend.

Sent from my iPhone

On Nov 6, 2012, at 10:35 AM, Drsolly drsol...@drsolly.com wrote:

 There's an interesting issue here.
 
 If the imprudent Mr Piggy builds a straw house next to a place that 
 floods, should I be taxed to build flood defences around his house?
 
 This is a problem we're getting in the UK, where far too many housing 
 estates are being built on flood plains.
 
 On Tue, 6 Nov 2012, Rob, grandpa of Ryan, Trevor, Devon  Hannah wrote:
 
 The flooding of New York City was, once again, an example of known threats 
 not 
 being addressed.
 
 http://www.economist.com/blogs/gulliver/2012/11/defending-new-york-floods
 
 It would have been too expensive to do anything about the issues.  (Flood 
 costs 
 currently $50B and rising as more damage found.)
 
 Of course, nobody could have predicted Sandy, because this was a storm 
 produced 
 by changing conditions.  Brought on by global warming/climate change.  Which 
 is 
 another issue that is too expensive to address ...
 
 (Why do I have this old oil filter ad tagline running through my head?  You 
 can 
 pay me now ... or pay me later ...)
 
 ==  (quote inserted randomly by Pegasus Mailer)
 rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
   Verba volant, scripta manent
 Spoken words fly away, while written words stay on
 victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
 http://blogs.securiteam.com/index.php/archives/author/p1/
 http://twitter.com/rslade
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.
 
 
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Valdis . Kletnieks
On Tue, 06 Nov 2012 14:12:40 -0500, Jeffrey Walton said:

 Who is more dangerous to this country? The corrupt politicians who
 never face investigation or prosecution? Or the Muslims living in a
 cave pissed off about socio-economic injustice and biased foreign
 policy?

The corrupt politicians who never face investigation or prosecution because
they scare us with the threat of the Muslims living in a cave.

FTFY.


pgpnIRTpFlG0k.pgp
Description: PGP signature
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Sandy and BCP

2012-11-06 Thread Jeffrey Walton
On Tue, Nov 6, 2012 at 5:30 PM,  valdis.kletni...@vt.edu wrote:
 On Tue, 06 Nov 2012 14:12:40 -0500, Jeffrey Walton said:

 Who is more dangerous to this country? The corrupt politicians who
 never face investigation or prosecution? Or the Muslims living in a
 cave pissed off about socio-economic injustice and biased foreign
 policy?

 The corrupt politicians who never face investigation or prosecution because
 they scare us with the threat of the Muslims living in a cave.
They did not do a good job with Katrina or Sandy, though
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
Date sent:  Tue, 6 Nov 2012 18:35:59 + (GMT)
From:   Drsolly drsol...@drsolly.com

 This is a problem we're getting in the UK, where far too many housing 
 estates are being built on flood plains.

Yeah, I just can't help noticing how many flood and slide disasters happen on 
those nice flat building areas known as alluvial fans.

==  (quote inserted randomly by Pegasus Mailer)
rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
As the harbor is welcome to the sailor, so is the last line to
the scribe.  - marginalia by scribe/copyist monk
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Sandy and BCP

2012-11-06 Thread Nick FitzGerald
Rob Slade to Drsolly:

  This is a problem we're getting in the UK, where far too many housing 
  estates are being built on flood plains.
 
 Yeah, I just can't help noticing how many flood and slide disasters happen on 
 those nice flat building areas known as alluvial fans.

And add to those liquefaction during earthquakes...



Regards,

Nick FitzGerald


___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


[funsec] Court OKs warrantless use of hidden surveillance cameras

2012-11-06 Thread Jeffrey Walton
http://news.cnet.com/8301-13578_3-57542510-38/court-oks-warrantless-use-of-hidden-surveillance-cameras/

Police are allowed in some circumstances to install hidden
surveillance cameras on private property without obtaining a search
warrant, a federal judge said yesterday.

CNET has learned that U.S. District Judge William Griesbach ruled that
it was reasonable for Drug Enforcement Administration agents to enter
rural property without permission -- and without a warrant -- to
install multiple covert digital surveillance cameras in hopes of
uncovering evidence that 30 to 40 marijuana plants were being grown.

This is the latest case to highlight how advances in technology are
causing the legal system to rethink how Americans' privacy rights are
protected by law. In January, the Supreme Court rejected warrantless
GPS tracking after previously rejecting warrantless thermal imaging,
but it has not yet ruled on warrantless cell phone tracking or
warrantless use of surveillance cameras placed on private property
without permission.
...
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.