Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread StealthMonger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steven Bellovin writes: > Ever since Microsoft bought the company, these rumors have been > floating around. If they're innocent, why would they not issue an unequivocal denial with supporting argument? - -- -- StealthMonger Long, random

[cryptography] Here's What Law Enforcement Can Recover From A Seized iPhone

2013-03-24 Thread Jeffrey Walton
Interesting point below is OS vendors are extracting data for law enforcement. I wonder how they are doing it when other tools fails. (Thanks to JM on another list for the link). http://www.forbes.com/sites/andygreenberg/2013/02/26/heres-what-law-enforcement-can-recover-from-a-seized-iphone/ You

Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread Steven Bellovin
On Mar 23, 2013, at 10:04 AM, Adam Back wrote: > btw is anyone noticing that apparently skype is both able to eavesdrop on > skype calls, now that microsoft coded themselves in a central backdoor, this > was initially rumoured, then confirmed somewhat by a Russian police > statement [1], then co

Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread Adam Back
Ian wrote: Are we saying then that the threat on the servers has proven so small that in practice nobody's bothered to push a persistent key mechanism? Or have I got this wrong, and the clients are doing p2p exchange of their ephemeral keys, thus dispersing the risk? Its been a while since I

Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread Jeremy Stanley
On 2013-03-24 14:03:43 +0300 (+0300), ianG wrote: [...] > I fully expected that when Microsoft purchased Skype in 2011, it > was only a matter of time before it was backdoored. [...] I'll point this out merely because people seem to keep forgetting... remember Kazaa? Remember how it had no qualms

Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread Ian Goldberg
On Sun, Mar 24, 2013 at 02:03:43PM +0300, ianG wrote: > Now, from the combined comments of other posters I draw that the key > factor in OTR's success was that it uses some form of ADH and > doesn't use persistent public keys at all. This then allowed an > immediate startup into secure mode, and c

Re: [cryptography] msft skype IM snooping stats & PGP/X509 in IM?? (Re: why did OTR succeed in IM?)

2013-03-24 Thread ianG
Hi Adam, Replying to this one because there's one part I haven't grokked yet: On 23/03/13 17:04 PM, Adam Back wrote: Was there anyone trying to use OpenPGP and/or X.509 in IM? I mean I know many IM protocols support SSL which itself uses X.509, but that doesnt really meaningfully encrypt the m