Re: Blinky Rides Again: RCMP suspect al-Qaida messages

2004-12-13 Thread Ian Grigg
> It seems consistent that Al Qaeda prefers being 'fish in the sea' to > standing out by use of crypto. Also, given the depth and breadth of > conspiracies they believe in, it seems that they might see all us > cryptographers as a massive deception technique to get them to use bad > crypto. (And h

Re: Your source code, for sale

2004-11-07 Thread Ian Grigg
> Enzo Michelangeli writes: >> In the world of international trade, where mutual distrust between buyer >> and seller is often the rule and there is no central authority to >> enforce >> the law, this is traditionally achieved by interposing not less than >> three >> trusted third parties: the ship

L/Cs, e-gold and regulated banking

2004-11-07 Thread Ian Grigg
(Guys, this has drifted out of crypto into finance, so I have a feeling that it will disappear of the crypto list. But the topics that are raised are interesting and important enough to carry on, I think.) >> > [Hal:] >> > Interesting. In the e-gold case, both parties have the same bank, >> > e-

Re: Are new passports [an] identity-theft risk?

2004-10-22 Thread Ian Grigg
R.A. Hettinga wrote: An engineer and RFID expert with Intel claims there is little danger of unauthorized people reading the new passports. Roy Want told the newssite: "It is actually quite hard to read RFID at a distance," sa

Re: potential new IETF WG on anonymous IPSec

2004-09-17 Thread Ian Grigg
Joe Touch wrote: Ian Grigg wrote: On the backbone, between BGP peers, one would have thought that there are relatively few attackers, as the staff are highly trusted and the wires are hard to access - hence no active attacks going on and only some passive eavesdropping attacks. Also, anyone

Re: potential new IETF WG on anonymous IPSec

2004-09-15 Thread Ian Grigg
Bill Stewart wrote: Also, the author's document discusses protecting BGP to prevent some of the recent denial-of-service attacks, and asks for confirmation about the assertion in a message on the IPSEC mailing list suggesting "E.g., it is not feasible for BGP routers to be configured with the

Re: Firm invites experts to punch holes in ballot software

2004-04-08 Thread Ian Grigg
Brian McGroarty wrote: On Wed, Apr 07, 2004 at 03:42:47PM -0400, Ian Grigg wrote: It seems to me that the requirement for after-the-vote verification ("to prove your vote was counted") clashes rather directly with the requirement to protect voters from coercion ("I can'

Re: Firm invites experts to punch holes in ballot software

2004-04-07 Thread Ian Grigg
Trei, Peter wrote: Frankly, the whole online-verification step seems like an unneccesary complication. It seems to me that the requirement for after-the-vote verification ("to prove your vote was counted") clashes rather directly with the requirement to protect voters from coercion ("I can't prov

Re: Digital cash and campaign finance reform

2003-09-08 Thread Ian Grigg
Steve Schear wrote: > By combining a mandated digital cash system for contributions, a cap on the > size of each individual contribution (perhaps as small as $100), randomized > delays (perhaps up to a few weeks) in the "posting" of each transaction to > the account of the counter party, it could

Re: [OT] why was private gold ownership made illegal in the US?

2002-07-03 Thread Ian Grigg
> From: Anonymous <[EMAIL PROTECTED]> > > > Just curious, but what was the rationale under which private posession > > of gold was made illegal in the US? It boggles the mind... > > Roosevelt needed to in effect devalue the dollar during the Great > Depression. In a deflationary depression, th

Making Veri$ign rich(er)

2002-05-30 Thread Ian Grigg
> Ian Grigg wrote: > > > Costs are still way too high. This won't change until > > browsers are shipped that treat self-signed certs as being > > valid. Unfortunately, browser manufacturers believe in > > cert-ware for a variety of non-security reaso

Re: When encryption is also authentication...

2002-05-30 Thread Ian Grigg
> SSL for commerce is readily in place without batting an eyelid these days. Costs are still way too high. This won't change until browsers are shipped that treat self-signed certs as being valid. Unfortunately, browser manufacturers believe in cert-ware for a variety of non-security reasons.

Re: Bad guys vs. Good guys

2002-05-14 Thread Ian Grigg
Ken Brown wrote: > Er, I hit "send" prematurely, and I meant to go on to say that I have > often used 1 or 200 UKP in folding money - it is easy to do with > universal availability of ATMs. If anything I use more cash than I did > 15 years ago because it is so simple to get hold of. And saves the

Re: Edinburgh Financial Cryptography Engineering 2002 - CFP

2002-05-12 Thread Ian Grigg
"R. A. Hettinga" wrote: > > The Third Edinburgh Financial Cryptography Engineering Conference > > This is so fucking boring. No one gets laid any more for doing FC. No, no, NO!! You are talking about Financial Cryptography, the conferences running on a bunch of Caribbean islands. Very dif

Re: Bad guys vs. Good guys

2002-05-12 Thread Ian Grigg
"R. A. Hettinga" wrote: > At 6:03 PM -0700 on 5/11/02, Eric Cordian wrote: > > > The reason we have ready availability of credit in the first place > > is because consumer debt is the most profitable business in the > > United States. What are the margins on consumer debt? Isn't it all securit