Re: Printers betray document secrets

R.A. Hettinga wrote: US scientists have discovered that every desktop printer has a signature style that it invisibly leaves on all the documents it produces. I don't think this is new - I'm pretty sure it was published about 6 or 7 years back

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

Hi John, John Kelsey wrote: Today, most of what I'm trying to defend myself from online is done as either a kind of hobby (most viruses), or as fairly low-end scams that probably net the criminals reasonable amounts of money, but probably don't make them rich. Imagine a world where there are a few

Re: New IBM Thinkpad includes biometrics

On Wed, 2004-10-13 at 20:10, Anton Stiglic wrote: > http://www.theregister.co.uk/2004/10/05/biometric_thinkpad_t42/ > > I wonder how well it can counter the attacks discussed by researchers in the > last few years. Like reactivating a fingerprint authentication by breathing > on the sensor's surf

CFP 2005 PKI R&D Workshop - Deadline soon

--- begin forwarded text Date: Tue, 19 Oct 2004 03:18:16 -0700 To: SPKI Mailing List <[EMAIL PROTECTED]> From: Carl Ellison <[EMAIL PROTECTED]> Subject: CFP 2005 PKI R&D Workshop - Deadline soon Sender: [EMAIL PROTECTED] 4th Annual PKI R&D Workshop: Multiple Paths to Trust April 19-21, 2005 NIS

Re: Crypto blogs?

On Mon, Oct 18, 2004 at 12:49:27PM -0700, "Hal Finney" wrote: | Does anyone have pointers to crypto related weblogs? Bruce Schneier | recently announced that Crypto-Gram would be coming out incrementally | in blog form at http://www.schneier.com/blog/. I follow Ian Grigg's | Financial Cryptograph

Re: New IBM Thinkpad includes biometrics

On Wed, 13 Oct 2004, Anton Stiglic wrote: > http://www.theregister.co.uk/2004/10/05/biometric_thinkpad_t42/ > > I wonder how well it can counter the attacks discussed by researchers in the > last few years. Like reactivating a fingerprint authentication by breathing > on the sensor's surface con

[ISN] 2-Fingerprint Border ID System Called Inadequate

--- begin forwarded text Date: Tue, 19 Oct 2004 21:40:22 -0500 (CDT) From: InfoSec News <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [ISN] 2-Fingerprint Border ID System Called Inadequate Reply-To: [EMAIL PROTECTED] List-Id: InfoSec News List-Archive:

[ISN] Worldwide Phishing Attacks May Stem from Few Sources

--- begin forwarded text Date: Wed, 20 Oct 2004 01:41:32 -0500 (CDT) From: InfoSec News <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [ISN] Worldwide Phishing Attacks May Stem from Few Sources Reply-To: [EMAIL PROTECTED] List-Id: InfoSec News List-Archive:

lack of WW II cryptanalytic co-operation between the US and UK?

Some recently declassified British documents show that the British and the Americans did not co-operate as closely on cryptanalytic matters as is generally thought. See http://news.bbc.co.uk/2/hi/uk_news/3758276.stm for details. I'd really like to see the full text of Turing's report; does anyon

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

-- On 19 Oct 2004 at 21:30, Ian Grigg wrote: > (In fact, one seems to have failed in the last few days - > EvoCash - and another is on the watch list for failure - > DMT/Alta. Both of them suffered from business style attacks > it seemed, rather than what we would call security hacks.) To

Re: Printers betray document secrets

At 05:23 PM 10/18/2004, R.A. Hettinga wrote: It turns out that their techniques aren't all that useful. Changing laser printer cartridges changes the results. You might find that two documents were printed by the same printer, but it doesn't giv

Re: Printers betray document secrets

At 10:44 PM -0700 10/20/04, Bill Stewart wrote: At 05:23 PM 10/18/2004, R.A. Hettinga wrote: It's not clear that they work at all with inkjet printers, and changing ink cartridges is even more common than changing laser printer cartridges. If y

Article on Echelon on Techworld...

I saw this on /.: http://www.techworld.com/storage/news/index.cfm?NewsID=2430 -- Perry E. Metzger[EMAIL PROTECTED] - The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PRO

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

James A. Donald wrote: we already have the answer, and have had it for a decade: store it on a trusted machine. Just say no to Windows XP. It's easy, especially when he's storing a bearer bond worth a car. What machine, attached to a network, using a web browser, and sending and receiving mai

Re: Printers betray document secrets

> > US scientists have discovered that every desktop printer has a signature > > style that it invisibly leaves on all the documents it produces. > > I don't think this is new - I'm pretty sure it was > published about 6 or 7 years back as a technique. A couple of years ago, I was told that *ever

Re: Printers betray document secrets

| It turns out that their techniques aren't all that useful. | Changing laser printer cartridges changes the results. | You might find that two documents were printed | by the same printer, but it doesn't give you the | options for tracking it down that manual typewriters did. Actually, they say th

Re: Financial identity is *dangerous*? (was re: Fake companies, real money)

James Donald writes: > On 19 Oct 2004 at 21:30, Ian Grigg wrote: > > we already have the answer, and have had it for a decade: > > store it on a trusted machine. Just say no to Windows XP. > > It's easy, especially when he's storing a bearer bond worth a > > car. > > What machine, attached to a

Are new passports [an] identity-theft risk?

WorldNetDaily Thursday, October 21, 2004 YOUR PAPERS, PLEASE Š Are new passports identity-theft risk? Privacy advocates warn data chips can be 'seen' by anyone with reader Posted: October 21, 2004 5:00 p.m. Eastern While t

Re: New IBM Thinkpad includes biometrics

Anne & Lynn Wheeler <[EMAIL PROTECTED]> writes: >one of the market targets of biometrics has been those that write their >password on their machine (or don't even bother with a password). Even that may not be a valid market target. If your threat model is script kiddies/hackers in eastern Europe