Slashdot Mirror


Zimmermann, Encrypted VoIP, and Uncle Sam

An anonymous reader noted that Phillip Zimmermann and his VoIP encryption software are the subject of a NY Times article today. The article touches on the FCC, privacy, and related issues. Given all the suspicious behavior of the Bush Administration relating to wiretaps and phone records, this sort of thing is all the more important to be very aware of.

325 comments

  1. Cryptome by Threni · · Score: 2, Informative

    It's also available from Cryptome:

    http://cryptome.org/zfone-agree.htm

    1. Re:Cryptome by prz · · Score: 5, Informative

      I wish Cryptome would not redistribute my Zfone software. This morning I had to upload a new version due to a last minute mistake we made before the release, and Cryptome probably got the uncorrected version. This is beta software in flux, rapidly changing with new updates likely, especially shortly after it hits when we discover early problems. Further, I've just added critical warnngs to my web site about how to do the installation for Windows, and if someone grabs the software and posts it somewhere else, it will lack those warnings. There are good reasons why I want to maintain control of the distribution, especially during the initial public beta. --Philip Zimmermann (prz@mit.edu)

    2. Re:Cryptome by phoenix.bam! · · Score: 2, Insightful

      You sir, are a hero. Thank you for your work.

    3. Re:Cryptome by SEAL · · Score: 4, Insightful

      Then why do you insist on having people register in order to download, instead of providing a simple link?

      For better or worse, people interested in this type of technology also have a vested interest in anonymity.

    4. Re:Cryptome by Anonymous Coward · · Score: 0

      If you really are Phil Zimmermann, shouldn't your post be PGP signed? :-)

    5. Re:Cryptome by Anonymous Coward · · Score: 2, Funny

      Philip, I'm not sure I can trust that this message was really from you, as your message seems to be lacking an OpenPGP Signature. ;)

    6. Re:Cryptome by Anonymous Coward · · Score: 1, Informative

      I'm sure world governments feel the same way about cryptome redistrubuting government documents that are immune to their retroactive tampering. In fairness, you're widely regarded as a 'good guy' and I don't see the harm in John Young adding your comment (above) as a note to that page. Thank you for all your hard work.

    7. Re:Cryptome by Phillup · · Score: 1

      I just did it to see what you are complaining about and I simply don't see the problem.

      I did what I do for almost *every* site that requires registration:

      - used fake user data
      - used a one time throw-away email account
      - moved on

      Maybe I don't see the problem because this is just SOP for me...

      --

      --Phillip

      Can you say BIRTH TAX
    8. Re:Cryptome by prz · · Score: 5, Informative

      Although the US has ended most of their export controls for crypto software, there are still some reasonable export controls in place, namely, to prevent the software from being exported to a few embargoed nations, such as North Korea, Iran, Libya, Syria, and Sudan. And for commercial encryption software that you actually pay for (not this free public beta), there are now requirements to check customers against government watch lists as well, which is something that companies such as PGP comply with these days. PGP Corp volunteered to host the public beta software on their server, with all the appropriate checks in place. That's why you have to register, to make sure you are not in an embargoed country, to keep me in compliance with U.S. export laws. Been there, done that. -Philip Zimmermann

    9. Re:Cryptome by jbailey999 · · Score: 1

      I've often wondered about those click-wraps for downloads. The first time I remember seeing them was when downloading Cisco images. While I don't have any contact with folks from those nations it seems to me that a simply click-to-download wrapper would do exactly nothing to stop them from getting the crypto.

      Anyone know if there are other things in play (watermarking, etc.) that holds people to this requirement? Is it still all just a magic dream that these nations don't have the same access to security the rest of the world does?

      Tks,
      Jeff Bailey

    10. Re:Cryptome by Anonymous Coward · · Score: 1, Informative

      You may want to a do little history check concerning the original release of PGP by Phillip Zimmermann, and the the charge the NSA made of "arms dealling". I think you will understand this precaution.

    11. Re:Cryptome by Anonymous Coward · · Score: 0
      Although the US has ended most of their export controls for crypto software, there are still some reasonable export controls in place, namely, to prevent the software from being exported to a few embargoed nations, such as North Korea, Iran, Libya, Syria, and Sudan.
      If only someone would end USA aswell! Just causing trouble. :-( Well, first we should take out all the citizens (we don't wish to end _them_), then end USA, and afterwards we could put all the citizens back, if they so wish, and let them create USAv2 or something. This time without silly things as restrictions on crypotgraphy.
    12. Re:Cryptome by Stoutlimb · · Score: 2, Interesting

      Theoretically this provides information to law abiding foreigners that they would be breaking the law if they get that crypto. Because legally they would then have to commit fraud to download it from the site (falsify info). I guess in theory this would give the gov't a bigger stick. Nothing like filling the internet with opportunities for self incrimination. Despotic governments like making laws that make it virtually impossible for the average citizen to live out their day without breaking some law.

    13. Re:Cryptome by Anonymous Coward · · Score: 0

      Libya has always been our ally. We have always been at war with Eastasia.

    14. Re:Cryptome by forand · · Score: 2, Informative

      Mr. Zimmermann, the registration page that is being refered to only asks for you email address, thus your argument is invalid in this case.
      http://www.philzimmermann.com/EN/zfone/index-regis tration.html
      So why do you require registration?

    15. Re:Cryptome by irf · · Score: 1

      Hey Mr Z,
      Is it GPL?? if it's not please do not waste our time...
      You already have a history...
      Need I say more??

    16. Re:Cryptome by SEAL · · Score: 1

      Just wanted to say thank you for the reply Phil. I knew in no small part due to your efforts, the U.S. lifted export restrictions on cryptographic tools. I had forgotten that certain countries remain on the watchlist, though.

      That said, I think with the current administration, many U.S. citizens feel uneasy about giving out their personal info for this sort of software. As the government becomes more aggressive in its surveillance of the public, lists like these will become suspect and possibly get added to the watch lists you mentioned.

      In any case, thank you for providing the tools. Hopefully some good will come of it.

    17. Re:Cryptome by ocelotbob · · Score: 2, Informative

      Speak for yourself, not this nebulous "us". Some of us don't care if a product is GPL. Many slashdotters are more concerned about productivity than ideology, and Mr. Zimmerman is one of the good guys here.

      --

      Marxism is the opiate of dumbasses

    18. Re:Cryptome by SEAL · · Score: 1

      After thinking about this some more...

      Given that you can download any number of free software programs that contain encryption technology from U.S. servers, without registration, Phil's rationale is itself somewhat paranoid.

      For a good example: Firefox links against libssl. Firefox would have been illegal to export in the early 90s when PGP was just starting to become available. Now it (mostly) isn't.

      According to Phil, it is illegal to export it to Iran & friends. If that's the case, why doesn't Firefox require the same level of precautions as ZFone before downloads?

  2. But what about my Iraqi girlfriend? by peterpressure · · Score: 0, Offtopic

    To think I was going to dump her for fear of being wiretapped,
    encryption to the rescue!

    oh wait, maybe this is a good excuse to stop calling her...

  3. Re:nothing to hide by Anonymous Coward · · Score: 0

    ...please tell me this was sarcasm...

  4. Re:nothing to hide by sbrown123 · · Score: 4, Interesting

    why would people with nothing to hide want to have their personal conversations listened to? And why would we want to spend our tax money to spy on people who have nothing to hide? Shouldn't we be after the terrorists instead?

  5. Re:nothing to hide by ddraigcymraeg · · Score: 1

    Ummn to stop political blackmail?

  6. Re:nothing to hide by bung-foo · · Score: 5, Informative

    Really, I mean why do people wear clothes for that matter? I mean we are all made of meat covered in skin. We all know what human bodies look like. Everyone should just go naked from now on. Who needs privacy when you have nothing to hide?

  7. Brave New World by TripMaster+Monkey · · Score: 4, Insightful

    From another NYTimes article, Bush Aide Defends Eavesdropping on Phone Calls(emphasis mine):
    President Bush's national security adviser, Stephen J. Hadley, insisted today that a newly disclosed government effort to compile data on millions of telephone calls in search of terrorist-linked calling patterns was a legal and "narrowly designed program" that did not involve listening to individual calls.


    So why exactly is the government getting their knickers in a twist over Zfone? After all, the program is just intended to compile a database of call information, not actually listen to the content of the conversations. Doing that, as the administration has repeatedly told us, would require a court order.

    So if you have a person you suspect from the numbers he's connected with, and you do obtain that court order, and it turns out he's using Zfone, there are other ways of getting the content of that conversation (hint: it has to be unencrypted at some point, so the 'terrorists' can understand each other). Arduous, sure, but since this will be done on only a select few, it's not that much of a hardship.

    No, the reason the government doesn't like Zfone is because they want perform blanket surveillance on all American citizens; to listen to all our calls, all the time. By utilizing speech-recognition software and an ever growing list of suspect words and phrases, they will be able to keep tabs on the unruly U.S. population, weeding out terrorists, political dissidents, environmentalists, Democrats, and other 'undesirables'.

    --
    ____

    ~ |rip/\/\aster /\/\onkey

    1. Re:Brave New World by Penguinisto · · Score: 2, Insightful
      "After all, the program is just intended to compile a database of call information, not actually listen to the content of the conversations. Doing that, as the administration has repeatedly told us, would require a court order."

      Because someday the FBI (or whoever) may find it harder to listen in on these encrypted conversations in cases where they have a court order to do so.

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    2. Re:Brave New World by TripMaster+Monkey · · Score: 2, Insightful


      As I said in my previous post, there are other ways of getting the content of a conversation. Since the content must be decrypted at either end, listening devices positioned at either endpoint are easily capable of intercepting the communication, encrypted or not.

      As I said, this is arduous...much harder than just listening to a line, but eavsedropping on American conversations shouldn't be easy. If the FBI (or whoever) is serious enough about capturing the content of a particular communication to obtain a court order, it's not asking that much more that they work around any encryption present.

      The difference here is that while agencies could continue to listen to targeted communications by these methods, the logistics of applying them to blanket surveillance are completely unworkable, offering us some measure of protection from a wholesale violation of our privacy by the government. This is precisely why the government is against encryption...not because it would make individual cases harder, but because it would make blanket surveillance impossible.

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    3. Re:Brave New World by advocate_one · · Score: 1, Interesting
      Because someday the FBI (or whoever) may find it harder to listen in on these encrypted conversations in cases where they have a court order to do so.

      Jesus...H... Christ... That's why they have supercomputers......... any comercial grade encryprtion/decryption program has to have a key short enough to enable real time encryption/decryption using normal computer chips... any key short enough for fast encryption/decryption of things like telephone conversations has to be easily brute forceable. The algorythm for the encryption/decryption is public knowledge... the key merely provides protection against casual eavesdropping... the FBI has access to serious horsepower when it comes to decryption... the only problem comes when they are mass decrypting phonecalls... and then they are outside the limits of the court order and in the realms of spying on all of us...

      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
    4. Re:Brave New World by Tackhead · · Score: 5, Insightful
      > No, the reason the government doesn't like Zfone is because they want perform blanket surveillance on all American citizens; to listen to all our calls, all the time. By utilizing speech-recognition software and an ever growing list of suspect words and phrases, they will be able to keep tabs on the unruly U.S. population, weeding out terrorists, political dissidents, environmentalists, Democrats, and other 'undesirables'.

      From an old .sig quote:

      NSA is now funding research not only in cryptography, but in all areas of advanced mathematics. If you'd like a circular describing these new research opportunities, just pick up your phone, call your mother, and ask for one.

      ...and to cut down on the costs of their recruitment budgets!

      Considering that most of the parents of new postdoctorate-level mathematicians probably live overseas nowadays (and whose conversations are therefore legal to record), maybe the old .sig quote was always more true than funny.

    5. Re:Brave New World by TripMaster+Monkey · · Score: 4, Insightful


      You can oppose anything by invoking the worst possible scenario consequences.

      Worst-case scenario, huh?

      Your 'worst-case scenarios' are happening.

      Right now.

      Get your head out of the sand.

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    6. Re:Brave New World by GPLDAN · · Score: 1

      TMM,

      The Narus software that Klein blew the whistle on (the stuff with AT&T), can decode nearly every well-used VOIP codec out there. I suspect that it was being used, heavily. I would imagine that the NSA has calls using VOIP software from lots of IP addresses they were looking at.

      The irony is, that the old fashioned circuit switched network with channelized circuits, it would be a massive engineering effort to tap and do voice recognition on every call. It would be nearly impossible given the way circuit switched calls work. But VOIP scales the problem out to a problem of CPUs and disk. And those are effectively infinite for a government that can spend whatever it wants. Iraq is closing in a trillion. A few billion bucks, and huge HVAC units and you can look into millions and millions of calls simultaneously with todays technology. I expect that it is happening already. Anything told to us about what isn't happening has turned out to be false and proven so.

    7. Re:Brave New World by Valar · · Score: 3, Insightful

      What's really scary about that are the number of posts on that page that are basically 'Good, you don't agree with our favorite policies, so you shouldn't have any rights.' or 'If you aren't with the president, then you're with the enemy, so of course you're gonna get wiretapped.' This is coming from so-called conservatives. Way to defend the constitution guys. Good hustle.

    8. Re:Brave New World by Anonymous Coward · · Score: 0

      >Your 'worst-case scenarios' are happening.

      >Right now.

      Yeah, so what? Looks like the vast majority of the people is either in favour or doesn't give a damn. Tough luck, you'll have to get used to your "worst-case scenarios". There's nothing you can do about it.

    9. Re:Brave New World by Anonymous Coward · · Score: 0

      Allow me to quote the worst case scenario you used.

      No, the reason the government doesn't like Zfone is because they want perform blanket surveillance on all American citizens; to listen to all our calls, all the time. By utilizing speech-recognition software and an ever growing list of suspect words and phrases, they will be able to keep tabs on the unruly U.S. population, weeding out terrorists, political dissidents, environmentalists, Democrats, and other 'undesirables'.

      This is a straw man worst case scenario consequence. Maybe you believe it obviously true but I have confidence that much of your audience won't.

      "They want to do X with situation Y. This would be a very bad scenario--possibly the worst. So I am opposed to situation Y."

      Ergo, stfu.

    10. Re:Brave New World by Penguinisto · · Score: 1, Insightful
      "As I said, this is arduous...much harder than just listening to a line, but eavsedropping on American conversations shouldn't be easy."

      Maybe, maybe not... but then, there are times when time is of the essence, and even the time taken to decrypt something the hard way in a timely manner is of utmost importance if there are potential lives at stake. The world's first electronic computer, Colossus, was built to decrypt German encryption during WW2, and was specifically built to be as fast and efficient as possible, because timely intelligence = lives saved.

      While I doubt that decrypting a phone conversation nowadays usually isn;t exactly what one would call an urgent thing, there may be times where it is.

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    11. Re:Brave New World by TripMaster+Monkey · · Score: 1


      I was using hyperbole to make a point. Pity you failed to realize that (I had thought the inclusion of 'environmentalists' and 'Democrats' would have made it obvious).

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    12. Re:Brave New World by Anonymous Coward · · Score: 0

      The correct time to have pointed that out would have been in direct response to my objection. Before the bold, italics, comments about heads and sand, unnecessary wiki linking, and condescension.

      Apparently you are unaware of the disturbing resemblence of your scenario to those espoused by folks who seriously include democrats and environmentalists in the set of endangered ideologies. So since you now claim hyperbole in the inclusion of those two, are you still serious about the inclusion of unruly citizens and political dissidents? Or was that also guarded by the invisible sarcasm tag?

      I would just like to add that it is this subthread which caused me just now to decide never to pay attention to mod insightful comments. I knew it was a joke before, but now I feel it. Thanks. I salute you, however, for nursing it to its unglorious conclusion

    13. Re:Brave New World by Kadin2048 · · Score: 1

      any comercial grade encryprtion/decryption program has to have a key short enough to enable real time encryption/decryption using normal computer chips... any key short enough for fast encryption/decryption of things like telephone conversations has to be easily brute forceable.

      While I am not any way in favor of government restrictions on encryption, I think this statement is patently false.

      A common PC can do real-time encryption/decryption of a telephone-quality digital audio stream with significant key lengths, which are not "easily brute forceable." Or at least, the difficulty of brute forcing them is probably greater than using a side-channel attack.

      Symmetric key ciphers (which are what you'd use to actually encrypt the content of a telephone conversation) are quite fast, and a compressed audio stream really isn't that much data. Your statement might be true if the encryption devices were small embedded systems, but even then I'm not sure.

      Barring some as-yet-undisclosed jump in computing technology that the government has access to, and normal people do not (which isn't out of the realm of possibility -- for all we know, the NSA might be sitting on a quantum computer, although I rather doubt it), current technologies allow a person to encrypt their data in ways that are fairly difficult to open by brute force, even for an attacker with substantially greater resources than the encryptor.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    14. Re:Brave New World by TripMaster+Monkey · · Score: 2, Insightful


      Maybe, maybe not... but then, there are times when time is of the essence, and even the time taken to decrypt something the hard way in a timely manner is of utmost importance if there are potential lives at stake.

      I'm sorry, but that argument just doesn't hold water. Your statement is analagous to saying that clothing must be outlawed, since clothing can conceiveably be used to conceal weapons. Frisking certain suspect individuals simply isn't good enough, since locating the weapons in a timely manner is of utmost importance (if there are potential lives at stake).

      To continue the analogy, if the suspicion is targeted, frisking works just fine, and works without violating the privacy of innocent citizens. If the suspicion is not targeted, however, frisking everyone is a logistical impossibility, so the outlawing of clothing is the only option.

      (And yes, I know my analogy is somewhat flawed, since x-rays can locate some weapons without the need for disrobing, but my point is still valid).

      The mere possibility of the interception and decryption of a suspect communication taking too long to save lives is not enough to justify the wholesale violation of the privacy of the citizenry (at least, it shouldn't be in America...).

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    15. Re:Brave New World by Tekzel · · Score: 1
      Yeah, so what? Looks like the vast majority of the people is either in favour or doesn't give a damn. Tough luck, you'll have to get used to your "worst-case scenarios". There's nothing you can do about it.


      Well, I wouldn't use that as evidence that it is right or acceptable. Franklin, the vast majority of people are dumbasses. Sheep that will believe anything if it is fed to them enough. Not that I particularly disagree with your last statement, the days of actually being able to do something about it are long gone and probably never to return. A two party system, especially a pair as corrupt as the pair we have here in the U.S. makes for little or no choice. I vote the latter.

      Speaking of voting, I don't do it. You may or may not believe the shit I get over that, I even discarded a bunch of so called friends back in 2000 during the Bush vs Gore race. They got absolutely fried at me saying that it was my DUTY to vote. My duty? I thought it was my RIGHT, to exercise, or not, as I see fit. Given this system, I frankly couldn't give two shits which of the politicians that are running wins, they are all the same. A good point here, reversed wholesale by a mess of bad ones there. The result is an utter mess that I, personally, will have no part in. You show me an honest politician, and I will show you an actor that will NEVER get close to the race for president in these here United States.

      That said, I still love my country and as corrupt and nasty as the politics is, there is no other country I would rather live in. Although, this mess with Bush really puts a strain on our marriage, but I still love the old gal.
    16. Re:Brave New World by Tekzel · · Score: 1

      Uh that was supposed to be "Frankly" not "Franklin". Thats what I get for rubbing one off in the heat of the moment. It started out as a quick comment and quickly turned into a mini-rant.

    17. Re:Brave New World by ChrisGilliard · · Score: 1

      So why exactly is the government getting their knickers in a twist over Zfone? After all, the program is just intended to compile a database of call information, not actually listen to the content of the conversations. Doing that, as the administration has repeatedly told us, would require a court order.

      You answered your own question. Even if you obtain a court order, you would not be able to listen in on a Zfone call since the encryption is done using the peer to peer model.

      --
      No Sigs!
    18. Re:Brave New World by bunions · · Score: 1
      The result is an utter mess that I, personally, will have no part in.

      Too late, you're already in it.

      It's awfully convenient to just say "oh, they're all clowns, what's the use?" and tune out, isn't it? It just absolves you of any responsibility and you get to complain about how "those damn dirty politicians" keep screwing you. Sure, you did nothing to oppose their election, and sure, you actually got up on your high horse about how it's your right as an American to just sit back and drift with the flow, but dammit, the flow didn't take you where you wanted! Lousy politicians!

      --
      there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
    19. Re:Brave New World by TripMaster+Monkey · · Score: 0, Flamebait


      The correct time to have pointed that out would have been in direct response to my objection.

      I directly responded to your objection with a real-life case that many consider to be a 'worst-case' scenario. At the time, I was unaware that your original post was made because you didn't recognize the hyperbole I was going for in my original post.

      Before the bold, italics, comments about heads and sand, unnecessary wiki linking, and condescension.

      I'm sorry that bold and italics disturb you so. Pity you couldn't see past them to the message. As for my comment about 'heads and sand', I feel it's justified, since you've chosen to take issue with my use of hyperbole to make a point, rather than the point itself. As for the 'unnecessary wiki linking', again, at the time, I thought it was necessary, as I believed that your objection was based on ignorance rather than a deliberate attempt at trolling.

      Apparently you are unaware of the disturbing resemblence of your scenario to those espoused by folks who seriously include democrats and environmentalists in the set of endangered ideologies.

      Indeed, I am unaware. Perhaps you would be so good as to furnish some links.

      So since you now claim hyperbole in the inclusion of those two, are you still serious about the inclusion of unruly citizens and political dissidents?

      Absolutely. At least you got that much.

      Or was that also guarded by the invisible sarcasm tag?

      Or mabye you didn't. Pity.
      (By the way, was that statement guarded by the 'invisible sarcasm tag'?)

      I would just like to add that it is this subthread which caused me just now to decide never to pay attention to mod insightful comments.

      We can only hope.

      (By the way, Gulogulo, you can come out from under the AC blankie now, it's painfully obvious that it's you. It's a shame you lack the courage to confront me openly.)

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    20. Re:Brave New World by HolyCrapSCOsux · · Score: 1

      I agree with you on nearly all points. except: Yous should still vote. Vote for the third party, or 4th or whatever is on the ballot in your state. Someday, the third party vote will be high enough to wake some folks up. I mean what happened to the whig party? We only have a two party system because us Americans allow it. Democracy can still win. Someday....

      --
      0xB315AA8D852DCD3F3DCA578FD2E0BF88
    21. Re:Brave New World by LunaticTippy · · Score: 1
      I don't want to be blunt, but you're wrong.

      The Atanasoff-Berry computer was built 5 years before Colossus and was unrelated to decryption.

      It's true that if we gave up our freedoms a police state could catch criminals easily. That's the problem with a police state.

      --
      Man, you really need that seminar!
    22. Re:Brave New World by pjrc · · Score: 3, Informative
      Some time ago, I implemented 3DES on an 8 bit microcontroller. In assembly language, it took about 2000 instruction cycles to run all 16 rounds of DES, plus the initial and final permutation, and the xor for CBC.

      So if you run it 3 times for triple des, that's approx 6000 instructions for every 8 bytes, or about 750 instruction cycles per byte. At 8000 bytes/sec for voice quality audio, my fast DES code would only need 6 MIPS on an 8 bit microcontroller. A slower version in C is readily available for free, which runs about 5X slower than my hand optimized assembly, requiring 30 MIPS.

      Certainly strong encryption is feasible in real time for voice audio, even on very inexpensive 8-bit chips.

    23. Re:Brave New World by Anonymous Coward · · Score: 0

      Darn. I troll about and wait impatiently for a wall of flaming and instead what od I get?

      Meaningful comments.

      You guys suck. Sob sob.

    24. Re:Brave New World by Anonymous Coward · · Score: 0

      And here we go to the line by line refutation-via-wit. I shouldve seen that one coming when I gave you enough to work with.

      Since you are clearly a conspiracy theorist, you will enjoy this one: you mentioned this Gulogulo character without any firm belief that I was actually he because it was a sneaky way to insult me even if I wasnt he, and to convey the impression that you were such a controversially brilliant character that you had a nemesis trying to snipe you from deep cover. Get real.

    25. Re:Brave New World by Arandir · · Score: 1

      It's not much different from the so-called liberals, who can tolerate no disagreement. If you didn't vote for Kerry it must be because you are Bush's love slave. If you were in favor of the Iraqi invasion then it stands to reason that you're in total agreement with every one of Bush's domestic policies. If you're suspicious of claims that reporters critical of the Bush administration are being shipped off to the Gitmo abattoir, then it's obvious you're a redneck hick from a red county in a red state who probably even goes to church occasionally, and you don't deserve to breed. Freedom of speech and press only extends to ideologically pure progressives, everything else must be banned as hate speech.

      An irrational rant? Of course it is! But so was the parent post. For every conservative you can find that matches Valar's post, I can find one liberal that matches mine.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    26. Re:Brave New World by Arandir · · Score: 1

      they want perform blanket surveillance on all American citizens; to listen to all our calls, all the time.

      You've just gone over the deep end, sir. Do you want someone to throw you a floatation device?

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    27. Re:Brave New World by Tekzel · · Score: 1

      I understand your point, but it is just like trying to empty lake Michigan with a teaspoon. If enough people get out their teaspoons it could be done, but no way in hell are you going to get enough people to waste their time to make progress.

    28. Re:Brave New World by bunions · · Score: 1

      "but no way in hell are you going to get enough people to waste their time to make progress."

      Not in a country full of people like you, no.

      --
      there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
    29. Re:Brave New World by Tekzel · · Score: 1

      I recognize your righteous indication. But, I disagree with your point. No, it isn't too late, because no, I am not a part of it. You say I should oppose their election, but you see, I am not a big fan of wasting my time. I could vote independant, but... well, reference my post to a sibling of yours regarding Lake Michigan. You are welcome to fight the good fight if you are inclined to do so (assuming you aren't a tried and true party member :). Fighting a hopeless battle with only my ideals to keep me company in my foxhole isn't my cup of tea. Since there is quite literally nothing I can do, why bother? You think they care whether I vote indie or dont vote at all? In fact, I feel I AM doing my part by not voting. They like to moan about low voter turnout these days. Hey, you know what? Give us something worth voting for and not the same old sack of trash and we just might make it to the polls.

    30. Re:Brave New World by Tekzel · · Score: 1

      Don't mistake my disgust with the game for not understanding the rules.

    31. Re:Brave New World by tolkienfan · · Score: 1
      I think that list should be:
      political dissidents, political dissidents, political dissidents, political dissidents and political dissidents.

      Although "ideal republicans" and "ideal democrats" count as political dissidents in Bush's book. He doesn't share any values in common with either.

    32. Re:Brave New World by bunions · · Score: 1

      "No, it isn't too late, because no, I am not a part of it. "

      Unless you're someone who isn't affected by American politics, yes, you are.

      "In fact, I feel I AM doing my part by not voting. They like to moan about low voter turnout these days. Hey, you know what? Give us something worth voting for and not the same old sack of trash and we just might make it to the polls."

      You think politicians care about low voter turnout? Nowhere in the US system is an incentive for candidates to encourage high voter turnout. Keeping people who'd vote for the other guy home is just as important as getting people who'll vote for you to the polls.

      --
      there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
    33. Re:Brave New World by bunions · · Score: 1

      I'm far more likely to mistake your 'disgust for the game' for laziness.

      --
      there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
    34. Re:Brave New World by TheRaven64 · · Score: 1
      For every conservative you can find that matches Valar's post, I can find one liberal that matches mine.

      So, in summary, people are idiots and they shouldn't be allowed to vote.

      --
      I am TheRaven on Soylent News
    35. Re:Brave New World by jdbear · · Score: 1

      It's too bad you feel this way. I am often very disappointed in our current leadership as well, but what can you do? I tend to try to vote for the least objectionable of the group. I don't like our choices either. Still, one choice was worse than the other...

      The other thing we have to do is get control of our congressional choices. Most of them SUCK. Of course, the one's that I think suck the worst have very loyal bases, so what do I know? In the end, we'll get the leadership we deserve, God help us.

      --
      If you're not living on the edge, you're taking up too much space.
    36. Re:Brave New World by Anonymous Coward · · Score: 0

      Yay, more Trip Master Monkey posts for me to mod down! Yippee!!!

    37. Re:Brave New World by Fjandr · · Score: 1

      Hit the nail on the head.

    38. Re:Brave New World by Anonymous Coward · · Score: 0

      That is exactly the problem with American political discourse today. Things are so insanely polarized that the utterly miniscule differences between the two main parties get treated like life-or-death decisions. It is effectively impossible to disagree with any part of one side's platform without proponents of that side labeling you as evil. I blame the insipid American TV news for this by forcing everybody to reduce their positions to sound bites, and until it is fixed we will be stuck with our choice of Dumb or Dumber come election day.

    39. Re:Brave New World by Tekzel · · Score: 1
      "No, it isn't too late, because no, I am not a part of it. "

      Unless you're someone who isn't affected by American politics, yes, you are.


      It seems we have very different definitions for "being a part of it". It appears your definition includes the victims as well as the players. I only include the players. Thus, our disagreement.
    40. Re:Brave New World by Anonymous Coward · · Score: 0

      So trying to find the person leaking classified information is wrong? People who goto work for the CIA, FBI, US Army take an oath to not release classified information. If you find something that you think might be suspect you take it up the chain of command not just hand out classified information that could compromise this country to the media. The people that keep leaking classified information need to be found and removed from their position before they cause someone to loose their life.

    41. Re:Brave New World by Arandir · · Score: 1

      No, merely that an ideology should appoint spokesmen from the mainstream, not the radical fringes.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    42. Re:Brave New World by Tekzel · · Score: 1

      Yea. Thats right, I have two jobs but I am too lazy to take an hour or so to go vote on election day. Do you realize how ridiculous you sound?

    43. Re:Brave New World by bunions · · Score: 1

      Sorry, I calls 'em like I sees 'em. I see a guy who thinks the system is broken (and it is) and won't lift a finger to try and change it. You've detailed a lot of excuses about how it can't make a difference and blah blah blah but that's all just an excuse. Your vote and participation does make a difference, especially in local elections. I can excuse missing a presidential election, but local elections affect you far more directly than national ones and your vote is actually significant.

      --
      there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
  8. Re:nothing to hide by Br00se · · Score: 1

    More importently, why would any one want to listen unless they were up to no good?

  9. Re:nothing to hide by GundamFan · · Score: 4, Interesting

    How do you even know what you need to hide anymore?

    The meaning of the word terrorist could change at any moment and the deffinition of enemy combatant is equaly fluid.

    Your logic is flawed anyway... criminals are not the only group who like privacy.

    --
    I don't give a damn for a man that can only spell a word one way.
    Mark Twain
  10. Re:nothing to hide by Anonymous Coward · · Score: 0

    Why would you ever want to whisper?

  11. Re:nothing to hide by WinstonSmith2600 · · Score: 0, Flamebait

    Only the terrorists would want their privacy. The terrorists(usually gov sponsored) envy us because of our privacy and liberty so we must give up both our privacy and liberty for gov/corporate security.

  12. Re:nothing to hide by Anonymous Coward · · Score: 0

    the same reason why honest people with nothing to hide wouldn't want cameras in their house, people reading over their shoulder, people going through their trash, people looking in their windows, or people videotaping them when their outside walking with their kids.

    It's an invasion of privacy.

    (btw too lazy to create account)

  13. Re:nothing to hide by iogan · · Score: 3, Funny

    Everyone should just go naked from now on

    AMEN to that!

  14. MOD PARENT UP by ZachPruckowski · · Score: 3, Insightful

    Very true. But whenever technology gets involved in a discussion, people's eyes sort of glaze over. No one knows what's going on, they just hear Internet phone calls, terrorism, and encryption. While you and I know that anyone intercepting a packet (encrypted or not) can tell where it came from and where it's going, America doesn't. They probably think it's an effort at parity between VOIP and normal phone calls (if they know what VOIP is).

    1. Re:MOD PARENT UP by Anonymous Coward · · Score: 0
      Very true. But whenever technology gets involved in a discussion, people's eyes sort of glaze over. No one knows what's going on, they just hear Internet phone calls, terrorism, and encryption. While you and I know that anyone intercepting a packet (encrypted or not) can tell where it came from and where it's going, America doesn't. They probably think it's an effort at parity between VOIP and normal phone calls (if they know what VOIP is).

      Uh yeah, whatever. It's just that it's against Freedom (TM - RNC) and the American Way (TM- RNC)! If you have nothing to hide, then what's the worry (TM- RNC)?!

      If you're not for us; you're against us (TM- RNC)!!!

      Yours truly,

      RNC

  15. Didn't read the tech specs ... by vaevictus · · Score: 1, Interesting

    ... but since it touts that it doesn't use 3rd party servers for key storage... ... seems like it'd be suseptible to Ye Olde Man-In-The-Middle.

    3 Zimm though. :D

    --
    There *is* a program I enjoy using on windows... It's called FDISK.
    1. Re:Didn't read the tech specs ... by Anonymous Coward · · Score: 0

      I'm sure both parties authenticate the server's public key. (kinda like SSL).

    2. Re:Didn't read the tech specs ... by cswiger2005 · · Score: 3, Informative

      "Man in the middle" attacks are generally mitigated against by using a large initial key (such as the host key used by SSH, or the x.509 cert used by SSL) to guard an exchange of a smaller temporary session key as a shared secret, which is time-sensitive and is regenerated periodicly. You'd have to break the 1024-bit key or whatnot very rapidly, in the matter of a few hours, or else you'd be too late to do a replay or MitM attack.

      This has a reasonable set of diagrams which describe the process:

      http://www.netip.com/articles/keith/diffie-helman. htm

      It helps to have a registry or Certifying Authority available which has a list of published public keys...

      --
      "The human race's favorite method for being in control of the facts is to ignore them." -Celia Green
    3. Re:Didn't read the tech specs ... by gclef · · Score: 5, Insightful

      If he's still using the system he presented last summer at BlackHat, he's actually doing something rather clever:

      The system does a standard Diffie-Hellman key exchange between the two softphones, and hashes that exchange to words that each caller is supposed to read to the other (you see what they're supposed to say, and they see what you're supposed to say). So, unless the man-in-the-middle can also impersonate your voice, MITM'ing the connection is very difficult.

      Also, the hashes used to generate that vocal exchange are stored for each destination you call for every call, and fed into the new hash generation. So, even if you skip a round of comparing the hashes, if you do it for a later call & it works, you can be assured that the *previous* call was also clean.

    4. Re:Didn't read the tech specs ... by Sloppy · · Score: 1
      Two points:
      1. The MitM would need to synthesize voice pretty fast, possibly impersonating someone that you know.
      2. Even MitM-vulnerable communications technologies are incredibly valuable. They don't protect you when you're being specifically attacked/investigated/defrauded, but they do prevent massive driftnet-fishing. If, say, a huge government agency were to attempt to MitM all communications, they would eventually get caught. MitM is an active and expensive attack. You can't just put it on the backbone and let it passively collect data about everyone.
      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    5. Re:Didn't read the tech specs ... by Jim_Callahan · · Score: 1

      Isn't the whole point of man in the middle to decrypt the message and then reincrypt it completely? You're contacting the middleman, and sending him your encryption key, and he's then initiating an unrelated link to your intended recipient and just relaying the information. Complicating the encryption key will do fuck-all to disrupt this, unless I'm missing something here. You would actually have to change the communication channel itself to damage the process.

      --
      ...it's really a sad day for America when we require a goddamn ACT OF CONGRESS to make our DVD players work properly. ~
    6. Re:Didn't read the tech specs ... by Anonymous Coward · · Score: 0

      MitM attack is about recording and playback of calls containing sensitive information not impersonating a caller.

      Not sure what tools exits to index/search audio in an industrial strength way.
      Searching for sensitive info can be refined with other call information - length / destination / caller etc.

      Note you actually have to get urself in in the middle to do this as well.

    7. Re:Didn't read the tech specs ... by cswiger2005 · · Score: 1

      You're right, but knowing what someone's public key is isn't enough to get you their private key. (Part of the defense against MitM is from having RSA or DSA keypairs with a public and private key; it's very hard to decrypt the key exchange if you don't have the private key as well.)

      Now, if neither legitimate party to the communication knows what the other's public key is, then the attacker can offer their own keypair without one side knowing, but even that can be detected if a public key registry or CA-like mechanism is in place...this is what the PGP keyservers and CA's who verify keypairs are for.

      --
      "The human race's favorite method for being in control of the facts is to ignore them." -Celia Green
    8. Re:Didn't read the tech specs ... by Anonymous Coward · · Score: 0

      Even if you didn't have the spoken hash and the system was susceptible to a man-in-the-middle attack, it is much better than nothing. The NSA would need to actively attack calls in real-time. They wouldn't be able to just record the calls and then attack them later. This is important because it requires more targeted phone taps.

      The addition of the spoken hash in Zfone means that the NSA is even less likely to do wide spread man-in-the-middle attacks, since there is a way for users to detect the attack.

  16. same reason we keep the curtains drawn @ home? by Penguinisto · · Score: 5, Insightful
    "why would people with nothing to hide want to encrypt their conversations."

    For the same reason I keep the curtains drawn in my bedroom windows at night, esp. when the s/o gets frisky.

    Just because me and my s/o's bedroom activities are perfectly legal doesn't mean I want everyone else (let alone the government) monitoring it.

    /P

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
    1. Re:same reason we keep the curtains drawn @ home? by Anonymous Coward · · Score: 0

      what the fuck is "s/o"?

    2. Re:same reason we keep the curtains drawn @ home? by Penguinisto · · Score: 1
      s/o = "Significant Other", i.e. a girlfriend or boyfriend (or wife, husband, what-have-you).

      Sorry - forgot I was posting to Slashdot where such types of people may not always be a common occurence :)

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    3. Re:same reason we keep the curtains drawn @ home? by Anonymous Coward · · Score: 2, Funny

      I think in this case it means a pet of some kind, probably a hampster

    4. Re:same reason we keep the curtains drawn @ home? by Anonymous Coward · · Score: 0
      just because me and my s/o's bedroom activities are perfectly legal

      For now. Anyone want to make a little wager? I predict that within 20 years you will need a license to have sex. Don't believe me? There was a time when nobody needed permission from government to perform construction on their own house, on their own property -- the very notion was considered absurd.

      Seriously, think about that. Look around -- they've already started the campaign.

    5. Re:same reason we keep the curtains drawn @ home? by PoopMonkey · · Score: 1
      I predict that within 20 years you will need a license to have sex.
      In some ways, I'd support this. It would help with population control, and hopefully would require both people to have an IQ higher than their shoe size.
    6. Re:same reason we keep the curtains drawn @ home? by slyborg · · Score: 1

      Is that anything like a hamster? http://en.wikipedia.org/wiki/Hamster

    7. Re:same reason we keep the curtains drawn @ home? by Anonymous Coward · · Score: 0

      I wouldn't support it. So, what exactly gives you the right to oppress me, to force such a program on me? Oh, that's right -- that make-believe world where majority rule or majority "representation" makes right.

  17. Re:nothing to hide by ShieldW0lf · · Score: 2, Funny

    Really, I mean why do people wear clothes for that matter? I mean we are all made of meat covered in skin. We all know what human bodies look like. Everyone should just go naked from now on. Who needs privacy when you have nothing to hide?

    I tried that. They sent a bunch of burly guys to force me into a striped one-piece jumpsuit.

    --
    -1 Uncomfortable Truth
  18. The laws and privacy concerns by zappepcs · · Score: 5, Interesting

    and all that relates to national security. CALEA, the thing that allows wiretaps under warrant, is in place for all previous communications methods, including paging. What government wants is CALEA type access to new communications types. HOWEVER: Neither the constitution, any ammendment, any subsequent law, or even terms of use, specify that your communications have to be made in an open unenctrypted manner. In fact, in the US, if there is no evidence, there is no crime, and no way to know the criminal. Its all part of that innocent until proven guilty mindset.

    If all your telephone calls, emails, etc. are encrypted by you and the other intended party or parties involved, there simply is nothing the government can do about it. With probable cause, they can 'try' to compel you to divulge the encryption key, but then you don't have to testify against yourself in the U.S. ... at least not yet.

    Neither can the government, church, or any other person(s) compel you to divulge your thoughts, or secrets.

    Its time for the encryption phones to start appearing on the market.

    This little problem will quickly spiral out of control until those that want to snoop on others have more work to do than they ever imagined. The basic problem here is that the people they say they want to spy on are not using the communication systems the same way as everyone else, and their communications are encrypted, or hidden in ways the government cannot prevent, nor detect with the laws and practices that they wish to install.

    Wiretapping on the scales being talked about recently are stupid, prohibitively stupid, and will be nearly 100% ineffectual.

    They can't find Bin Laden with all the military might, but somehow they are going to catch him making a phone call? uh, yeah right.... of course, its the little people that lead to the big ones, but they have been spying on the little ones all along... still haven't caught him.

    1. Re:The laws and privacy concerns by Anonymous Coward · · Score: 0

      Its all part of that innocent until proven guilty mindset.

      Ah yes common law. Funny how easily the government ignores that sort of thing.

      If all your telephone calls, emails, etc. are encrypted by you and the other intended party or parties involved, there simply is nothing the government can do about it.

      There's a lot they can do about it. Throw you in jail, hold you there for a long time w/o charges, hit you up with obstruction of justice or other broad charges to keep you around, etc. Meanwhile you lose your home and everything you worked for because you have mounting legal fees and you're unable to go to your job and collect your paycheck. They may not get you to divulge your key but they can make you wish you had.

      you don't have to testify against yourself in the U.S. ... at least not yet.

      Like the Bush administration cares about that silly Bill of Rights thing...

      Wiretapping on the scales being talked about recently are stupid, prohibitively stupid, and will be nearly 100% ineffectual.

      If that were the case, the NSA wouldn't be doing it. That's not to say it is right, but I'm sure it probably does break up some illegal activities.

      The problem is that the government is using illegal procedures to accomplish that goal.

    2. Re:The laws and privacy concerns by slashflood · · Score: 2, Informative

      Its time for the encryption phones to start appearing on the market.

      That is exactly what my company is offering: IAX2/SIP (Asterisk) over VPN (FreeS/WAN, OpenVPN). It's getting easier to convince businesses to use encrypted communication channels nowadays.

    3. Re:The laws and privacy concerns by nelziq · · Score: 2, Interesting
      they can 'try' to compel you to divulge the encryption key, but then you don't have to testify against yourself in the U.S. ... at least not yet.

      I am not a lawyer (just a law student) but I am fairly certain that the government could compel you to divulge your encryption key as it would not be testimonial evidence (something akin to why you can be forced to give up your fingerprints, etc)

    4. Re:The laws and privacy concerns by Detritus · · Score: 1

      See
      Greg S. Sergienko, Self Incrimination and Cryptographic Keys, 2 RICH. J.L. & TECH. 1 (1996)
      http://www.richmond.edu/jolt/v2i1/sergienko.html

      --
      Mea navis aericumbens anguillis abundat
    5. Re:The laws and privacy concerns by Anonymous Coward · · Score: 0
      In fact, in the US, if there is no evidence, there is no crime, and no way to know the criminal. Its all part of that innocent until proven guilty mindset.

      If government followed the principle of innocent until proven guilty, there would be no monitoring of innocent citizens whatsoever. They would need actual evidence, as you stated, before the monitoring could be justified. After all, there is no need to monitor a citizen for criminal activity if he is presumed to be innocent.

      Also, it's very likely that encryption will be criminalized in the near future. As the size of the US government continues to expand, and its powers over the people grow accordingly, there has to come a point where hiding things from government -- even legal things -- will be criminalized. The only way to prevent this would be if government halted its expansion of power, which according to political history, is about as likely as government offering each citizen the choice of how much money to pay to each government service.

    6. Re:The laws and privacy concerns by jthill · · Score: 2, Informative
      --
      As always, all IMO. Insert "I think" everywhere grammatically possible.
    7. Re:The laws and privacy concerns by Detritus · · Score: 1

      Thanks. I didn't catch the error in the URL.

      --
      Mea navis aericumbens anguillis abundat
  19. Re:nothing to hide by smooth+wombat · · Score: 2, Funny

    Be careful what you wish for.

    I'm at work at the moment so I can't do a proper search for images but think about it: would you want to see Margaret Thatcher walking around naked?

    --
    We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
  20. Another Zimmermann by MK_CSGuy · · Score: 1

    Am I the only one who when he saw Zimmermann and encryption in the headline thought immidiately of the other Zimmermann?

    1. Re:Another Zimmermann by MK_CSGuy · · Score: 1

      and yes, I know, immediately...

    2. Re:Another Zimmermann by Anonymous Coward · · Score: 0

      In that case he looks pretty good for a 142 year old. Or for a dead guy.
      http://en.wikipedia.org/wiki/Arthur_Zimmermann

    3. Re:Another Zimmermann by Mister+Whirly · · Score: 1

      Yep, I was wondering who old Bobby Dylan was calling, and why he needed encryption...

      --
      "But this one goes to 11!"
    4. Re:Another Zimmermann by bohemian72 · · Score: 1

      Personally, I think of a pretty good coffee/deli/bakery in Ann Arbor.

      --
      The greatest thing you'll ever learn is just to love and be loved in return.
  21. Know how it works... by GPLDAN · · Score: 5, Informative

    Phil took an open source VOIP client and added encryption to it. By his own admission, he doesn't know much about how to make VOIP work well, codecs and all that. But his encryption is very clever. It uses Diffie-Helman to generate a per-session key, which is stored in a completely volitile way. i.e. it is destroyed after the call terminates and cannot be retrieved (stored in memory which is then overwritten). So, even if a man (or government) in the middle records the RTP stream and then gets a search warrant to get the key to decrypt the call, it won't be there.

    Look for his techniques for peer to peer key setup, which again is very clever and well thought out, to be used in a variety of new ways. I expect you will see a bit-t client soon that can also generate this one time session key between peers. It will be much more computationally intense than what you see bit-t clients like Azureus do to the CPU now, but no more than using S/FTP. Well, maybe more, because of the number of keys being setup and destroyed and the memory allocation needed in a swarm situation. But for peer to peer calls, it's strong and I expect that Phil, who was nearly bankrupted by Uncle Sam, trying to defend himself, will again be the NSA crosshairs. The guy is just a warrior, what can you say? Guys like him and Klein who blew the whistle on AT&T are the ones fighting for privacy and against a police state. And they will not be treated kindly by this administration.

    1. Re:Know how it works... by Farce+Pest · · Score: 2, Informative

      Phil has a FAQ that, among other things, describes how man-in-the-middle attacks are eliminated or at least mitigated.

      http://philzimmermann.com/EN/zfone/index-faq.html

      --
      This message has been scanned for memes and dangerous content by MindScanner, and is believed to be unclean.
    2. Re:Know how it works... by Skapare · · Score: 2, Informative

      Tapping and recording the bit stream is not a case of Man-in-the-middle attack. This is just simple Eavesdropping. The Diffie-Hellman key exchange is in fact vulnerable to a Man-in-the-middle attack. To address this, what is needed is some form of authentication, such as Public-key cryptography or Password-authenticated key agreement.

      I think Phil Zimmermann is smart enough about cryptography to know this. So hopefully, authentication will also be a part of this. The focus of Zfone, however, is the fact that the original Session key, which could be subject to forced disclosure, is not kept. If there is no authentication, then a true Man-in-the-middle attack is possible, but requires something more sophisticated than the fiber optic splitters used in the secret "study group" rooms.

      --
      now we need to go OSS in diesel cars
    3. Re:Know how it works... by Lord+Ender · · Score: 1

      I would not call the use of Diffie-Hellman particularly clever. TLS does this the same way. And because it has no PKI, it is still vulnerable to a MITM attack. You have no way of verifying that the person you are exchanging DH numbers with is who you think he is. Yeah, you can do fingerprinting, but you need to be sure the guy reading you his fingerprint really is who he says he is.

      I would call this somewhat less clever than TLS.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    4. Re:Know how it works... by tolkienfan · · Score: 1

      And don't forget Wired - they're the ones who published the documents.

    5. Re:Know how it works... by Anonymous Coward · · Score: 0

      Ah, but he is using Authentication (just not a crypto one). He's relying on a highly reliable voice recognition method for the authentication - the humans at both ends - I'm pretty sure you'd recognise that the Deep Male Voice of the man-in-the middle was not your Mom....

    6. Re:Know how it works... by Lord+Ender · · Score: 1

      That's true, but it is still possible for a well-funded organization to fake a voice. But they can't fake large prime numbers.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
  22. Re:nothing to hide by m874t232 · · Score: 3, Funny

    Well, let's see, why do people wear clothes? Shrinkage. Brown and yellow stains on furniture. Getting pubic hair stuck. Seeing the US senate naked. I think those are excellent reasons. Yours may differ. If the US starts going all naked, I'm moving.

  23. Re:nothing to hide by Anonymous Coward · · Score: 0

    That explains all the denied 'Freedom of information' requests. Republicans are Terrorists.

  24. silly NYT by 955301 · · Score: 1


    Anyone spare a time's link w/o login?

    --
    You are checking your backups, aren't you?
    1. Re:silly NYT by SwashbucklingCowboy · · Score: 1

      Check out BugMeNot. I'm sure there's one there.

    2. Re:silly NYT by 955301 · · Score: 1

      no can do... blocked.

      --
      You are checking your backups, aren't you?
    3. Re:silly NYT by Anonymous Coward · · Score: 0

      1) Get FireFox
      2) Get BugMeNot extension
      ???
      4) Profit !

    4. Re:silly NYT by Anonymous Coward · · Score: 0

      MD

    5. Re:silly NYT by Anonymous Coward · · Score: 0

      i tried

      slashdot@slashdot.org
      slashdot

      and it worked :)

      sssh!

  25. Just don't leave the country again Zimm by N1ck0 · · Score: 3, Interesting

    Just don't leave the country again Zimmerman...or you may end up locked inside that customs office where they 'want to leave lawyers out of this' again. :)

    PGP Story:
    MPG 1.1G
    WMV 378M

  26. Re:nothing to hide by FudRucker · · Score: 1

    RE:"If the US starts going all naked, I'm moving."

    lol! hell yeah, some people are too damn ugly with clothes on it would be enough to cause blindness if they went nude...

    --
    Politics is Treachery, Religion is Brainwashing
  27. Re:nothing to hide by drooling-dog · · Score: 1

    But what if you work hard for a well-connected company, say, like Halliburton, and you find that some other upstart company is bidding against you for big juicy contracts to relocate the old Berlin Wall to southern Texas. Wouldn't you want your friends in the NSA to let you in on what your pesky competitors are talking about? I would - a lot of money could be at stake.

  28. Re:nothing to hide by walt-sjc · · Score: 1

    Um, no. I would not want to see ANY of my neighbors naked. Eeww.

  29. A band-aid over a Sucking Wound by mpapet · · Score: 3, Interesting

    So, I'm the evil-agency-du-jour and today I'm auditing IP traffic. If you are a person of interest, they know:

    1. You are sending packets to and from specific IP addresses.
    2. Grabbing copies of those packets.
    3. Putting super-computers to work on them.
    4. Discover you are ordering pizza over SIP. (whatever, it's funny)

    The concept of "Privacy" was dead a long time ago. I *still* don't understand the outrage when most of your activity is available through many data brokers. What's not there, is available with little procedural check or balance.

    Where it is very valuable is company to company communication. Where your competitors may not have the expertise to get the info.

    But, then there's the encryption problem anyone has that uses it. It's stupifyingly easy to build a case on suspicion. Trying someone in the court of public opinion is easy and swift. "He uses encryption so he must be hiding something.." is all it takes to end a career, destroy your social status.

    Cryptographer==criminal. Film at 11.

    If one can codify it's everyday use, I think it's a big step forward.

    --
    http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
    1. Re:A band-aid over a Sucking Wound by Vellmont · · Score: 1


      The concept of "Privacy" was dead a long time ago.

      Then I guess you won't mind when I publish video taken from inside your house of you screwing your wife or girlfriend.

        I *still* don't understand the outrage when most of your activity is available through many data brokers.

      Maybe it has something to do with the increase in identity theft, innacurate records, and increasing reliance on those records for everything from employment to being allowed to get on a airplane.

      "He uses encryption so he must be hiding something.."

      Sure, like maybe your credit card number, financial details, trade secrets, or even who you're having an affair with. Using encryption, especially over the internet is extremely common and becoming more and more common. Hiding something doesn't imply there's something illegal going on, only that revealing that information to the wrong person could hurt you.

      --
      AccountKiller
    2. Re:A band-aid over a Sucking Wound by walt-sjc · · Score: 1

      The concept of "Privacy" was dead a long time ago.

      No, the concept is alive and well. You just don't get much of it anymore because we don't have many laws to preserve it.

    3. Re:A band-aid over a Sucking Wound by Lord+Ender · · Score: 2, Insightful

      If your key is long enough, #3 would require super-computers larger than The Sun. No government is as powerful as exponential growth :-)

      You should study crypto before posting.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    4. Re:A band-aid over a Sucking Wound by blugu64 · · Score: 1

      I love that comment man! and thanks for the new sig to boot!

      --
      "Personal ownership is a hallmark of conservative capitalism. And I don't believe I am entitled to anything that I did n
    5. Re:A band-aid over a Sucking Wound by renehollan · · Score: 2, Interesting
      ...Discover you are ordering pizza over SIP.

      ...and get arrested for "wasting" the police state's time.

      My father was once arrested for "obstructing justice":

      A police office pulled him over and performed a safety check on his car (Dad thought he had a burned out tail-light or something -- usually a "get it fixed in 48 hours warning" offence). This took about half an hour.

      Finally, Dad asked the cop if he was free to go.

      "No, you committed a very serious offence!"

      ???

      "You were not wearing your seatbelt!".

      "Ah, officer, no I was not. I have a medical excemption so I do not have to."

      "You're under arrest!"

      "For what?!"

      "Obstructing justice! Step out of the car with your hands where I can see them and face the vehicle with your legs apart."

      "???"

      "You wasted half an hour of my time by not disclosing you had a medical excemption. Surely you *knew* you were pulled over for a seatbelt violation! That's obstructing justice!"

      Ah Canada, fetid swamp of communist corruption.

      (The judge threw the charge out *(though not with prejudice as I would have expected), but still.)

      --
      You could've hired me.
    6. Re:A band-aid over a Sucking Wound by Anonymous Coward · · Score: 0

      No government is as powerful as exponential growth

      But don't most governments strive to grow exponentially?

    7. Re:A band-aid over a Sucking Wound by Lord+Ender · · Score: 1

      That's true, but it most cases, bits can be added faster.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
  30. Re:nothing to hide by hibji · · Score: 4, Informative

    This is an excellent article that rebuts your argument that is both concise and eloquent: http://wired.com/news/columns/0,70886-0.html?tw=wn _index_23

  31. A other, other Zimmermann by Anonymous Coward · · Score: 0

    Funny, a local radio station let me know today is the anniversary of some guy named Bob's bar mitzvah. That was the leap I made.

    And, sorry, less interested in a hyper-linkie-thing then in using an account here.

  32. Terrorists! by homebrewmike · · Score: 5, Insightful

    Terrorists are already using encryption to protect their privacy. Don't you think you should as well?

    1. Re:Terrorists! by Opportunist · · Score: 1

      How do you know terrorists use encryption?

      Oh, right, the feds tell us so...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  33. Re:nothing to hide by PFI_Optix · · Score: 1

    To strip politics out of the argument:

    So that it's harder for identity theives to gather personal information.

    Cellphones and landlines aren't secure. Encrypted voice adds a layer of security so that when your bank asks for your SSN, you are a little safer giving it over the phone.

    --
    120 characters for a sig? That's bloody useless.
  34. Obviously a politically biased article by Anonymous Coward · · Score: 0

    Obviously. When did Al Gore, Howard Dean and John Kerry start posting articles? Hey Al, I'm with ya man!! Global warming needs to be stopped at the source of the problem. Put out the sun, I'm tellin' ya - it will solve global warming for good!!!

    1. Re:Obviously a politically biased article by Anonymous Coward · · Score: 1, Informative

      "I'm not going to defend the indefensible. ... I'm prepared to defend a very aggressive anti-terrorist campaign, and I'm prepared to defend the idea that the government ought to know who's making the calls, as long as that information is only used against terrorists, and as long as the Congress knows that it's underway. But I don't think the way they've handled this can be defended by reasonable people. It is sloppy." -- Newt Gingrich

      http://movies.crooksandliars.com/Hannity-Colmes-Ne wt-Phones.wmv

      Why does Newt Gingrich, the former Republican speaker of the House, hate America...?

    2. Re:Obviously a politically biased article by IflyRC · · Score: 0, Troll

      Because the democrats forced him to step down over a stupid comment that was made in favor of a democrat so he's bitter?

    3. Re:Obviously a politically biased article by someone1234 · · Score: 1

      There is no global warming!

      --
      Patents Drive Free Software as Hurricanes Drive Construction Industry
  35. Ban 'uncomprimised' encryption by nurb432 · · Score: 0, Flamebait

    Just make it illegal to use any form of encryption that the government doesnt have keys for.

    Then breaking out content wont matter.

    --
    ---- Booth was a patriot ----
    1. Re:Ban 'uncomprimised' encryption by SpinJaunt · · Score: 1

      Argh! you made my tinfoil hat melt :(

      --
      /. is good for you.
    2. Re:Ban 'uncomprimised' encryption by whyrat · · Score: 1

      but that's just the thing. You can't ban encryption unless you also ban random noise.

      Say I make a random number generator and just start sending out random numbers all over the internet. I can send as many packets full of random numbers as I like right? There's no crime against sending out signal noise is there? That's what this encryption looks like, random noise.

      Suddenly I can make someone guilty of a crime by spoofing his IP and sending garbage in the form of packets with a target IP in an Arab country?

    3. Re:Ban 'uncomprimised' encryption by kt0157 · · Score: 1

      "There's no crime against sending out signal noise is there?"

      Sedition.

      K.

    4. Re:Ban 'uncomprimised' encryption by sconeu · · Score: 1

      I'm assuming you're going for irony here, given your sig.

      There is a little thing called the First Amendment, which pretty much would prevent your proposal. I could make a case for the Second, Fourth, and Fifth as well, but given the the current Administration's prediliction for using the Fourth and Fifth (as well as the First) as toilet paper, it's not worth doing so.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    5. Re:Ban 'uncomprimised' encryption by Anonymous Coward · · Score: 0

      Okay, so you get a bunch of hardware out there with non-updatable firmware, or firmware that's really hard to update. And then the stupidest person in the government who has access to those keys goes and uploads a Word file containing the plaintext keys to his Geocities page so he can access it whenever he wants. That'll be fun.

  36. Re:nothing to hide by Sirfrummel · · Score: 1

    "Brown and yellow stains on furniture. "

    WTF are you doing with your furniture?

  37. Offtopic: on the subject of Bush criticism: by PFI_Optix · · Score: 4, Insightful

    Before you launch into yet another tirade against the president, bear in mind that our divided Congress consistently allows things like this. This isn't a Bush thing or a Republican thing. This is a beaurocratic, ivory tower, professional politician thing. This happens because we elect the very wealthy from both parties, so that the majority of our elective government has very little connection with their constituents. We create political dynasties, voting for celebrities rather than leaders. Our current political situation isn't due to one man or one party, but rather one entire nation ignoring its own wellbeing in favor of the candidate with the best sound-bites and the stiffest hair. We might as well be getting our political news from E!: who cares how they voted, let's find out which congressman is cheating on his wife this week and what Hillary wore to session today.

    --
    120 characters for a sig? That's bloody useless.
    1. Re:Offtopic: on the subject of Bush criticism: by Anonymous Coward · · Score: 1, Informative

      Republicans control all the branches of the government. What you see now is the best they have.

    2. Re:Offtopic: on the subject of Bush criticism: by Fhqwhgadss · · Score: 1

      I don't know what she wore, but she listens to the Beatles and Rolling Stones on her iPod. I don't know about you, but I'm going to vote for the candidate that likes to "shake things up."

      --
      How does a 7-person democracy cut a pie? Into 4 pieces.
    3. Re:Offtopic: on the subject of Bush criticism: by PFI_Optix · · Score: 0, Troll

      The thought of Hillary shaking anything makes me nauseous.

      --
      120 characters for a sig? That's bloody useless.
    4. Re:Offtopic: on the subject of Bush criticism: by walt-sjc · · Score: 5, Interesting

      I'm going to vote for the candidate that likes to "shake things up."

      Good luck. One such politician (before he died in a plane crash) was Paul Wellstone. A little too far left for my tastes, but a nice guy from my conversations with him.

      He went in all fire and zeal, and was basically told by the party leadership to STFU and play ball or he will get NO SUPPORT on ANYTHING - including basic normal federal funding for highway projects and such.

      The system is broken - I don't care WHO you elect.

    5. Re:Offtopic: on the subject of Bush criticism: by stevetherobot · · Score: 1

      Listening to 30+ year old music doesn't qualify as "shaking things up".

      --
      "If less is more, then eventually nothing will be everything."
    6. Re:Offtopic: on the subject of Bush criticism: by lasindi · · Score: 1

      He went in all fire and zeal, and was basically told by the party leadership to STFU and play ball or he will get NO SUPPORT on ANYTHING - including basic normal federal funding for highway projects and such.

      Hmm, 'basic normal federal funding'. Is that what we call pork nowadays?

      --
      I have discovered a truly remarkable proof of this theorem that this sig is too small to contain.
    7. Re:Offtopic: on the subject of Bush criticism: by PFI_Optix · · Score: 1

      Modded troll? Seriously?

      Have you SEEN that woman? God help her, I wouldn't...

      (if you don't know the rest, ask a George Carlin fan)

      --
      120 characters for a sig? That's bloody useless.
    8. Re:Offtopic: on the subject of Bush criticism: by walt-sjc · · Score: 1

      Well, I for one would much prefer that the taxes we pay be used for roads that we USE than the study of cow farts.

  38. Encryption shouldn't be a barrier to the cops by MikeRT · · Score: 4, Insightful

    If they have sufficient evidence to meet a reasonable probable cause standard, why not just let them into the house to bug the device itself? There are devices out there for keyboards which have a few hundred KB of memory and that sit between the keyboard and the port on the back of the PC.

    They don't need to block encryption, except to keep tabs on people that wouldn't meet the legal requirements. If they can't meet the legal requirements for a warrant to break into the suspect's house and bug them, then chances are the person hasn't committed a crime.

  39. Re:nothing to hide by spike2131 · · Score: 1

    Why should it be about having something to hide? What if I just don't want the government to have absolute power? If encrypting conversations will make enforcing tyranny just a little more difficult, encrypt away...

    --
    SpyDock: Scientific Python in a Docker container
  40. Criptographical illiteracy by hummassa · · Score: 2, Informative

    Sorry, sir, but you are completely wrong. ANY VoIP-capable computer can encrypt a 12kbps stream with a 1024-bit key. And -- unless the whole academia is wrong and all the current off-the-shelf crypto algorithms have crypto flaws, no, not every supercomputer in the face of the earth could break the encryption. One would have to get the keys in another fashion to listen to the talks.

    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
  41. Reducing probability for key guessing? by thedletterman · · Score: 0

    It occurs to me that these codecs are probably a serious weakness to the encryption, in that they would generte very predictable patterns. Headers, synchronization and timing, dead space.. especially if the NSA has a voice print recognition algorithim to match the target. Depending on the length of the conversation, it would seem very probable that even with the key destruction, there should be enough sampling data to accurate generate a decryption key with very little effort, given the right tools and talent. Thoughts?

    --
    Any fool can criticise, condemn, and complain, and most fools do. - Benjamin Franklin
    1. Re:Reducing probability for key guessing? by djtack · · Score: 1

      What you are describing sounds like a known plaintext attack. No encryption algorithm worth it's salt is vulnerable to this type of attack.

    2. Re:Reducing probability for key guessing? by Anonymous Coward · · Score: 0

      That's not completely true. If sent in CBC mode, two chunks of data that are identical will produce identical cypher text. Since in VoIP lots of small packets are sent, it may be possible to infer some info using that. Chances are though, timing information within a packet would make that sufficiently problematic.
      However, if a given compression scheme doesn't have a constant bit-rate, they may still be able to infer the tempo of a conversation, independently of encryption. These certainly give lots of information to try to crack the content.

    3. Re:Reducing probability for key guessing? by smallfries · · Score: 1

      Nice pun dude. I guarantee that nobody on /. will get it...

      --
      Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
    4. Re:Reducing probability for key guessing? by thedletterman · · Score: 1
      I was thinking more along the lines of the same sort of attack as used on an RC 4 Stream Cipher.

      "It consists of the observation that when the same secret part of the key is used with numerous different exposed values, an attacker can rederive the secret part by analyzing the initial word of the keystreams with relatively little work. This concatenation of a long term secret part with an attacker visible part is a commonly used mode of RC4, and in particular it is used in the WEP (Wired Equivalent Privacy) protocol, which protects many wireless networks.

      --
      Any fool can criticise, condemn, and complain, and most fools do. - Benjamin Franklin
    5. Re:Reducing probability for key guessing? by Anonymous Coward · · Score: 0

      Good ciphers don't have that problem. The weakness in RC4 is and was well known. RC5, for instance, doesn't have that problem (and hence the RC5 chalenges by RSA).

      Choosing RC4 for WEP was extraordinarily stupid and in that sense should be considered an aberration. When I first read the vulnerability disclosure, reading WEP and RC4 in the same sentence allowed me to deduce the entire vulnerability. And I'm not even a crypto person (I'm a network person).

    6. Re:Reducing probability for key guessing? by Copid · · Score: 1
      That's not completely true. If sent in CBC mode, two chunks of data that are identical will produce identical cypher text.
      I think you mean ECB mode. CBC mode does not suffer from this problem. I would guess that a system like this would prefer a mode like OFB or CFB to make it act more like a stream cipher, but I guess that given the size of a typical encryption block versus the data rate, CBC would work just fine as well. I seriously doubt that this system would be implemented using ECB for anything.

      --
      An interesting anagram of "BANACH TARSKI" is "BANACH TARSKI BANACH TARSKI"
  42. Re:nothing to hide by Ripley · · Score: 2, Insightful
    why would people with nothing to hide want to encrypt their conversations.


    From "The Eternal Value of Privacy" by Bruce Schneier in Wired (http://www.wired.com/news/columns/0,70886-0.html? tw=wn_index_23)

    "... accept the premise that privacy is about hiding a wrong. It's not. Privacy is an inherent human right, and a requirement for maintaining the human condition with dignity and respect."
  43. What can we do? by Peter+Trepan · · Score: 4, Insightful

    Free minds. The greatest chilling effect of universal surveillance doesn't come from men in black vans. It comes from being unveiled as a Commie, or an Islamic Sympathizer, or even A Guy Who Googled for "Fatties" in front of your friends/employers/relatives/whatever. The greatest force against freedom in our society is us.

    Not one of Sen. McCarthy's victims was actually thrown in a gulag. Think about that. They weren't fired by the government. They were fired by PHBs who acted in blind sympathy with loudmouthed bureaucrats. There would have been no McCarthyism if the public had not been willing to punish itself for unpopular thought and/or speech.

    We need a society in which there's no difference between what's illegal and what harms others, and holds all other things not only legal, but acceptable. Once we have that society, people who have done nothing to harm others really will have little to fear. But there's one more thing: If we're going to use public safety as an excuse for universal surveillance, we have to give the power of surveillance to everyone, not just government.

    Privacy advocates might cringe at that last statment, but consider this: People are getting more wired, surveillance is getting easier and cheaper, and that trend may never reverse. There may be nothing we can do to stop privacy from dying. Maybe we should start thinking about what we're going to do when it does.

    --

    Step into a huge movement. Don't Tread In Me.

    1. Re:What can we do? by n8willis · · Score: 1
      Not one of Sen. McCarthy's victims was actually thrown in a gulag. Think about that. They weren't fired by the government.


      No, actually, Milo Radulovich was fired by the government, the US Air Force. Three cheers for minimal research, kids!
      --
      -- Watch the REAL Jon Katz.
    2. Re:What can we do? by Arandir · · Score: 2, Interesting

      We need a society ... holds all other things not only legal, but acceptable.

      The problem with your viewpoint is that it equates legality with morality. You're not much different from those that would legislate morality. But instead of expanding the law to encompass all of morality, you're shrinking morality to fit within the narrow confines of the law. Both are wrong.

      I can agree with the idea that the government should not be banning non-violent actions, but as for accepting them, that's going too far. There are a great many actions that should be legal, but not socially acceptable. Drug use, for example. Go fry your brain out with chemicals all you want, but don't expect me to accept you.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    3. Re:What can we do? by 1337p1rt3 · · Score: 1

      uuuhhhmmmmm.......Radulovich was reinstated. It took some hardship but he was reinstated none the less.

      Resource: The very same you used.

      Three cheers for minimal reading, kids!

  44. Ok, so nobody imporant. by Anonymous Coward · · Score: 0

    Whew!

  45. Freedom is not safe or pretty. by khasim · · Score: 2, Insightful
    The world's first electronic computer, Colossus, was built to decrypt German encryption during WW2, and was specifically built to be as fast and efficient as possible, because timely intelligence = lives saved.
    That's nice. But being at war with a country is different than spying on your own citizens.
    While I doubt that decrypting a phone conversation nowadays usually isn;t exactly what one would call an urgent thing, there may be times where it is.
    There may be.

    The problem is, far Far FAR FAR more often it is not.

    But it is ALWAYS subject to abuse.

    Being Free means that we accept the risk that the "bad guys" will abuse that Freedom to hurt/kill some of our citizens.

    But they will never defeat us. Only we can do that by surrendering our Freedom for the illusion of "safety".
    1. Re:Freedom is not safe or pretty. by Penguinisto · · Score: 2, Insightful
      "That's nice. But being at war with a country is different than spying on your own citizens."

      I'm very sure that both the UK and the United States during WW2 were very busy searching for saboteurs and pro-nazi sympathizers within their respective citizenry, and used quite an array of wiretapping and other techniques to do so.

      "The problem is, far Far FAR FAR more often it is not."

      Agreed, but it is still there. Another semi-related factor is that encrypted conversations are more likely to attract attention than non-encrypted ones, no?

      "But it is ALWAYS subject to abuse."

      So are the FLIR heat-sensing cameras that most police helicopters come equipped with nowadays, and have carried since the mid-90's if memory serves. Those can see through quite a few obstacles that can otherwise conceal. That isn't a very valid excuse to intentionally hobble law enforcement authorities. If an authority is being abusive, we have the means and the right -- no, the duty -- to remove such people from positions of power, and punish them if necessary.

      "Being Free means that we accept the risk that the "bad guys" will abuse that Freedom to hurt/kill some of our citizens."

      Being 'Free' means that occasionally it may happen, not that we should refuse to prevent it from happening.

      "Only we can do that by surrendering our Freedom for the illusion of "safety".

      Freedom from ...? Ever since the first Telegraph was put into place, governments can and have monitored them whenever they deemed it necessary. There are plenty of perfectly legal warrantless means of doing so. ...and it's not just me saying this.

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    2. Re:Freedom is not safe or pretty. by myowntrueself · · Score: 1

      But being at war with a country is different than spying on your own citizens.

      America is obviously at war with its own citizens.

      --
      In the free world the media isn't government run; the government is media run.
    3. Re:Freedom is not safe or pretty. by Original+Replica · · Score: 1

      That isn't a very valid excuse to intentionally hobble law enforcement authorities. If an authority is being abusive, we have the means and the right -- no, the duty -- to remove such people from positions of power, and punish them if necessary.
      The abuses of power by the current authorities are well known, how do you suggest we remove and punish them? Maybe secure, unobservable communications would be of help in that regard?

      --
      We are all just people.
    4. Re:Freedom is not safe or pretty. by Penguinisto · · Score: 1
      If what you say is indeed true, then impeachment/conviction works wonders, no? It was a mechanism put into place specifically to rein in any elected or appointed individual who has demonstrably abused power beyond the law.

      Of course, this will require some action on your part to contact those able to perform this (and from those who feel the same as you do).

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    5. Re:Freedom is not safe or pretty. by ShieldW0lf · · Score: 1

      The wars you mention were wars against countries who used the sort of techniques you describe on their citizens to create the sort of scared fanatical nationalists that would go to war against their neighbours because they are different.

      Inasmuch as the US continues to do this to their citizenry and their brainwashed and frightened citizenry continue to support their governments aggression against those "different" people who are trying to destroy their nation, they embody the sort of dangerous nation that WWII was fought to remove from power and bring increased danger upon themselves.

      --
      -1 Uncomfortable Truth
    6. Re:Freedom is not safe or pretty. by Original+Replica · · Score: 1

      That would require that I had any faith left in the system. The impeachment prcess was begun against Clinton for lying about getting a blowjob, Nixion got impeached for illegal surveillance, and Dubya gets nothing (of consequence) for the NSA scandal or the lack of WMDs or Gitmo or Katrina and I'm supposed to think that the system of checks and balances is healthy and functioning? For all we know there has been some secret "War President Act" that inhibits any legal action against this current administration. What then?

      --
      We are all just people.
    7. Re:Freedom is not safe or pretty. by carlislematthew · · Score: 1

      If Clinton lied about getting a blowjob in order to benefit himself, then what *else* did he lie about? I hate Bush as much as most people do these days (thankfully, things have changed) but let's not turn Clinton into a saint in the process. He lied about something to the American people. That's not good.

    8. Re:Freedom is not safe or pretty. by TastyCakes · · Score: 1

      You know, I'm not American, but I can't just let that one pass. The US is nothing like Nazi Germany or the USSR for reasons obvious to most. Monitoring phone calls is not the same as concentration camps, secret police and absence of democracy. And wire taps were used by America and the other allies before, during and after world war 2.
      America isn't perfect, but don't make comparisons that are a hair away from the obscene.

    9. Re:Freedom is not safe or pretty. by phayes · · Score: 1

      Rise & shine sunshine, the real world awaits you...

      Of all the wiretaps authorized every year almost all are upon US citizens. The guy selling crack to teenages is a US citizen. The mafiosi ordering a hit on a gambler who hasn't payes up is a US citizen. The gangbanger planning revenge on a rival gang is a US citizen.

      In an ideal world the wouldn' need to spy on anyone. Unfortunately we do not live in an ideal world and the government will spy on us. The cop watching traffic is spying on us. The TSA official checking if your name is on a watchlist is spying on you. The NSA listening to overseas phone conversations searching for Al Qaeda is spying on us.

      This all happens legally according to rules & laws we as a people have validated by voting those who made the laws into place. That the government "is at war" with those of it's citizens who do not obey it's laws should be no surprise.

      --
      Democracy is a sheep and two wolves deciding what to have for lunch. Freedom is a well armed sheep contesting the issue
    10. Re:Freedom is not safe or pretty. by KDR_11k · · Score: 1

      Of course it isn't like Nazi Germany. It's closing in on Soviet Germany, though.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
  46. Lewis Zimmerman by jdbartlett · · Score: 1

    I hate to say it, but I was thinking of Lewis Zimmerman!

  47. Nothing to hide? by mangu · · Score: 1
    why do people wear clothes for that matter?


    Dude, that's because most of them have *a lot* to hide!

    1. Re:Nothing to hide? by Anonymous Coward · · Score: 0

      You sure you don't mean *verry little* to hide?

  48. Illegal bedtime by LunaticTippy · · Score: 1
    Don't be so sure it's perfectly legal. 22 states still have sodomy laws, and if you aren't performing sodomy with your SO you don't deserve to keep one.

    The supreme court recently struck down sodomy laws between consenting adults, but we still have laws on the books.

    --
    Man, you really need that seminar!
  49. SIP Zfone? by Doc+Ruby · · Score: 2, Interesting

    Where's the Zfone (or interoperable) SIP module for Asterisk? And which softphones & ATAs already include one?

    --

    --
    make install -not war

    1. Re:SIP Zfone? by wackysootroom · · Score: 2, Informative

      See Phil Zimmermann's FAQ about Zphone.

      According to him, there are no ATA devices or any other hardware-based Voip phones that support ZRTP (the zfone encryption protocol). I doubt that Vonage or any other large VoIP service provider will ever offer a phone with ZRTP support due to pressure from the US government.

      According to my understanding, Zfone will intercept any SIP call made from your PC and encrypt it on the fly. This means that you should be able to use any software based SIP phone with Zfone.

    2. Re:SIP Zfone? by walt-sjc · · Score: 1



      The answer is that there isn't an Asterisk module at this time. If you were running Asterisk on your desktop, then the "interception" of the call by zphone would work. If you are running Asterisk on a server (as most installations do), then no, it won't work (unless you are running the zphone GUI on the server itself - not a realistic option.)

  50. It wasn't all Bush by randomErr · · Score: 3, Informative
    I would like to point out that wire/phone taps have been a staple of American history:
    From Wikipedia

    During the American Civil War, government officials under President Abraham Lincoln eavesdropped on telegraph conversations. Wiretapping has also been carried out under most Presidents, usually with a lawful warrant since the Supreme Court ruled it constitutional in 1928. Domestic wiretapping under the Clinton administration led to the capture of Aldrich Ames, a former Soviet spy in 1994. Robert F. Kennedy monitored the activity of Martin Luther King Jr. by wiretapping in 1966.

    --
    You say things that offend me and I can deal with it. Can you?
    1. Re:It wasn't all Bush by lelitsch · · Score: 3, Interesting

      You know, I love it when pundits don't even read their talking points before posting them. What part of "usually with a lawful warrant" didn't you understand. Yes, wiretapping has been goign on as long as there were wires. But the end run the current administration is doing around courts, FISA, Congress, and civil rights is pretty much unprecendented.

    2. Re:It wasn't all Bush by Jafafa+Hots · · Score: 1
      During the American Civil War, government officials under President Abraham Lincoln eavesdropped on telegraph conversations.

      Another Republican!!!! Is there no end to their treachery?!?!?!

      --
      This space available.
    3. Re:It wasn't all Bush by nonlnear · · Score: 1
      Actually, it's not.

      The early American understanding of the fourth amendment was definitely a first clause dominant one. The post colonial mentality was one of suspicion toward unchallenged authority. The notion that a judge could issue a writ which strips a person of the right to sue (i.e. a warrant) was unconscionable. For a long time, the typical course of action for a police investigation was to follow the first clause (the "reasonable" standard). If a search was conducted without a warrant, the relevant party could sue for trespass. If police had probable cause, the option of pursuing a warrant was provided for, but the test is very strict.

      The constitution does not waste words, or punctuation. The comma in the fourth amendment is a significant one. The modern (publicly held) understanding of the fourth amendment is very far from the original one.

      That said, the Bush administration's interpretation of a first clause dominant reading (FCDR) is a radical departure form the early FCDR I described above. What is being done under Bush is warrantless wiretapping under the "reasonable" test - without the right to sue for trespass. That's the real kicker. Everything is done in secret, so there is no check/balance. The problem is not that there are no warrants. The problem is that there is no open proccess for verifying reasonableness.

      Anyone watching C-SPAN who saw Sen. Feinstein's questions to Gen. Hayden a few days ago saw a real eye opener. Gen. Hayden deferred basically all of her questions about domestic wiretapping to closed session. Even simple yes/no questions. The only answer he gave her about any of the wiretapping questions was the one scenario that is the big talking point: "if there is a suspected/known terrorist outside the US who is talking to somebody inside the US..." She asked him directly about domestic surveillance, and he deferred all those questions to closed session. As the comittee is breaking for lunch, you can just hear Sen. Feinstein saying "He didn't answer any of them". Be afraid. Be very afraid.

      --
      argumentum ad fallacium: Fallacy of defining a fallacy which allows one to dismiss the argument in question.
  51. Evil Republicans!! by g_adams27 · · Score: 5, Insightful

    > By utilizing speech-recognition software and an ever growing list of suspect words and phrases,
    > they will be able to keep tabs on the unruly U.S. population, weeding out terrorists,
    > political dissidents, environmentalists, Democrats, and other 'undesirables'.

    Those evil Republicans! Except, wait... wasn't it the Clinton Administration that launched a 3-year criminal investigation of Phil Zimmerman in 1993?

    And wasn't that the same President who championed the Clipper chip, so the government would have the keys it needed to decrypt your phone calls?
    1. Re:Evil Republicans!! by TripMaster+Monkey · · Score: 2, Funny


      *sigh*

      As I explained earlier, my inclusion of Democrats, along with environmentalists, was the use of hyperbole to make a point.

      Apparently, I'm going to have to slow-pitch these in the future...perhaps if I included members of PETA, Linux enthusiasts, and musicians in my list, it would have been clearer.

      --
      ____

      ~ |rip/\/\aster /\/\onkey

    2. Re:Evil Republicans!! by podperson · · Score: 0, Offtopic

      But but but... Clinton had consensual sex with Monica Lewinsky and then lied about it.

      All Bush has done is lie about his reasons for invading Iraq and a bunch of other stuff, given huge amounts of public money to his friends and campaign contributors, put complete idiots into positions of great responsibility, ignored the sage advice of experts, and hailed proven incompetents as heroes.

      It's about time the Democrats learned about Values and Morality.

    3. Re:Evil Republicans!! by Anonymous Coward · · Score: 0

      Carnivore

    4. Re:Evil Republicans!! by Phillup · · Score: 1

      Still trying to justify the evil of your own party by blaming Clinton.

      I think the "problem" can be summarized as follows:

      Everything Clinton did was to cover up the fact that he was getting some on the side.

      Everything Bush does is to cover up the fact that he isn't getting any at all.

      --

      --Phillip

      Can you say BIRTH TAX
    5. Re:Evil Republicans!! by Chagrin · · Score: 1

      I thought it was a reasonable point albeit poorly explained. With the current (Republican) administration weeding out Democrats could certainly be seen as a focal point -- and that's one of the problems I see forthcoming: spying between politicians.

      --

      I/O Error G-17: Aborting Installation

    6. Re:Evil Republicans!! by Ulrich+Hobelmann · · Score: 1

      Both Reps and Dems have stopped making sense a long time ago (and actually have stopped making very different politics).

      It's all the same new world order, big government bullshit.

      http://www.notonwo.com/

    7. Re:Evil Republicans!! by syncrotic · · Score: 1

      And when Clinton was being Evil, we called him on it, just like we're doing with Bush. Zimmerman dropped off the government's radar, the clipper chip was abandoned, and export controls on encryption were largely dropped.

      So I guess the difference between Clinton and Bush is that Clinton actually had to bend to the will of the people, while Bush (or the people controlling him) realized long ago that he's accountable to absolutely no one.

      That said, the mention of Democrats in the text you quoted as largely sarcastic... not that there's a lack of precedent for Republican presidential campaigns spying on the other side.

    8. Re:Evil Republicans!! by Stiletto · · Score: 1


      Great, let's turn this into a Political Party Pissing Contest. Both parties are wrong. Happy? Now let's debate the actual issues.

    9. Re:Evil Republicans!! by Anonymous Coward · · Score: 0

      You're assuming Clinton was a Democrat. One's party affiliation does not always determine one's actions.

  52. Re:nothing to hide by jdbartlett · · Score: 1

    Agreed. The bigger wiretap issue isn't really about people's privacy at all, it's about an Administration viewing itself as above the law and acting with disregard to the law. Regardless of intention, anything that effects wiretapping without court order is illegal. Period.

  53. Hardware solutions by harryk · · Score: 3, Interesting

    First and foremost, I'm a long time fan of PRZ... he's a hero among heros and should be credited as such.

    Secondly, am I missing the hardware solutions for things like this? I've been a Vonage customer for some time, and while Vonage seems to take a blind eye to security (just ask them they'll tell you they are happy to work with the local and federal law enforcement agencies). When will I be able to use a handheld, encrypted VOIP device, and be sure that its secure?

    --
    think before you write, it'll save me moderator points.
    1. Re:Hardware solutions by Anonymous Coward · · Score: 0

      When will I be able to use a handheld, encrypted VOIP device, and be sure that its secure?

      You won't.

      Just keep in mind that the people selling you the phone will always be the very people who've happily smiled and let the government spy on you up till now. I sincerely doubt that will change, so long as telecoms and all associated companies are in a round robin circle jerk with politicians.

    2. Re:Hardware solutions by muridae · · Score: 1

      Where would Vonage decrypt the VOIP signal at? At their server, where it transfers to the telephone wires for transmission to someone on a normal telephone or just before it goes to another VOIP user without an encrytion capable phone? If Vonage is willing to sell out your phone calls, this won't matter since they are decrypting it so it's no more private then a unencrypted call

      If you only want to use it to talk to someone else with a similerly specilized phone, try googling for 'secure telephone' or reading the wiki article of the same name. A quick look at STU-III shows that the cheapest model they sell is just over 2000$ (USD) and it only goes up from there.

  54. Paranoid New World by Doc+Ruby · · Score: 0, Troll

    I keep hearing about all these movie-plot scenarios that require immediate decryption - in the movies. I have yet to hear one actual scenario in which a few hours decrypting threatened even a single life. Until I do, with a healthy faith in science and a long memory of selfserving government lies covering up crime with "national security" claims, why should I pay any attention to these demands for urgency?

    --

    --
    make install -not war

    1. Re:Paranoid New World by Penguinisto · · Score: 1
      "I have yet to hear one actual scenario in which a few hours decrypting threatened even a single life."

      Problem is, it's not just some 24 plot style decrypt-the-code-and-save-the-world scenario. There is also 'urgent' on a relative scale.

      A single 128-bit SSL session (as an example) takes literally years and beyond to decrypt w/o a key given current best-effort technologies. ( Google cache of relevant info) Similar encryption schemes could(can?) make it near-to-impossible for even the most valid law enforcement action to decrypt the hard way. Consider how much time that would give someone w/ bad intent to plan and execute their ideas.

      I will not defend abuse by any authority, but I can certainly sympathize with the need to timely access to potentially harmful information between parties who may be a credible threat to life and liberty.

      Balance is the key - not some polarized either-or scenario.

      /P

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    2. Re:Paranoid New World by Doc+Ruby · · Score: 1

      How about a real example where circumventing privacy in favor of such urgency has saved a single life?

      I'm not interested in political theory or espionage "what if" scenarios. If there isn't even a single real example to support this need, in our extremely complex, dangerous, long-historied world, I'm not sympathetic. Not compared to the proven invasions of personal lives by government power abuse, in any given week. If I want to let my imagination run unfettered by reality, I can rationalize anything. Which today is standard government policy.

      --

      --
      make install -not war

    3. Re:Paranoid New World by Doc+Ruby · · Score: 1

      Moderation -1
          100% Troll

      It's like a movie where the TrollMod must stop Doc Ruby from being read in time for the next election! Since the TrollMod is fresh out of counterexamples, facts or even logic of any kind, and must not reveal their identity, they must mod down, before it's too late!

      --

      --
      make install -not war

  55. US doesn't really want to find Bin Laden... by fahrbot-bot · · Score: 2, Insightful
    They can't find Bin Laden with all the military might...

    I contend that they can find Bin Laden, but don't really want to. The minute he's captured, any (remaining) support for continuing the "War On Terror" goes right out the window. As long as he's out there, the administration can yell "9/11" to justify anything they want and the sheeple will buy it.

    Flame me if you want, but the Bush Administration is EVIL. I'm not saying that Bush himself is evil (he's not that smart), but his policies and cronies - you know it baby.

    --
    It must have been something you assimilated. . . .
    1. Re:US doesn't really want to find Bin Laden... by Phillup · · Score: 1

      I contend that they can find Bin Laden, but don't really want to.

      Maybe they are afraid that if Bin Laden dies the notes to the energy task force meeting get released... and we find out who really was at the meeting and what really was said...

      I'm betting it was enough to make the Afgani leadership think they had nothing to lose.

      Funny how everyone on the right keeps saying "You have nothing to hide if you don't break the law" until it comes time to look in on what the Bush administration is doing.

      --

      --Phillip

      Can you say BIRTH TAX
    2. Re:US doesn't really want to find Bin Laden... by phayes · · Score: 1

      I contend that you could understand the situation if you wanted to, but you're just to lazy to do more than bitch from the safety of your armchair.

      Even if we were to capture ben laden, enough of his organiziation is bound to be left around the world to guarantee that the repressive policies that have come since 9/11 are going to continue. I don't like it any more than you appear to, but I don't see any way back to an open trusting society the way it supposedly "used to be".

      --
      Democracy is a sheep and two wolves deciding what to have for lunch. Freedom is a well armed sheep contesting the issue
    3. Re:US doesn't really want to find Bin Laden... by fahrbot-bot · · Score: 2, Insightful
      I contend that you could understand the situation if you wanted to, but you're just to lazy to do more than bitch from the safety of your armchair.

      I understand things just fine, but I don't believe the general population does. In addition, I do my part by doing my job.

      Even if we were to capture ben [sic] laden, enough of his organiziation is bound to be left around the world to guarantee that the repressive policies that have come since 9/11 are going to continue.

      Agreed, but the administration has expended a lot of political capital pointing the finger directly at Bin Laden. If he were imprisioned, they'd have to convince the people all over again that the security procedures (e.g., domestic spying) are warranted.

      I don't like it any more than you appear to, but I don't see any way back to an open trusting society the way it supposedly "used to be".

      Well, we could simply roll things back. I mean really, do the airport security procedures actually make us significantly safer? (Profiling would probably work better.) Does the "no fly list" really help (ask Ted Kennedy)?

      Terror isn't their only goal. Turning the U.S. into a police state would make them almost as happy. Destroying our way of life destroys who we are as a nation. Ask John Gilmore, "papers please?", ask ABC reporters what Gonzalas thinks about the 1st amendment, etc...

      Sorry, perhaps I need some more coffee (or less)...

      P.S. Your sig is right on.

      --
      It must have been something you assimilated. . . .
  56. Also OTR Messaging by Kadin2048 · · Score: 2, Informative

    Just as an addition, the "Off-the-Record (OTR) Messaging" plugin for Gaim offers a similar setup for instant messaging. (You can use it with other IM clients as well; it works with stock AIM as an HTTP proxy and is built in to Adium for Mac.)

    In my opinion, it's a much better system than some of the other IM encryption setups, which give you authentication but not any forward secrecy or deniability. Basically it forces you to authenticate the other party via a side-channel, rather than using a trust framework a la PGP, but in return the authentication can't be turned around and used against you after the fact.

    It does this via an unauthenticated Diffie-Hellman key exchange, and then creating and exchanging a per-session symmetric key within that channel, which is destroyed at the end of the conversation. More technical information is available here.

    In short it provides more authentication than Trillian's setup, more deniability than gaim-encryption, and doesn't require any of the infrastructure required by SILC. The only difficulty in using it is getting other people to use a supported client program and to install the plugin / generate a key.

    I think there's room for both types of encrypted communications: ones that provide a trust framework and robust authentication, and ones that provide for more deniability (and allow the computerized century equivalents of a face-to-face meeting, where if both people desire it, they can deny the contents of the communication later).

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  57. Haha by stupidpuppy · · Score: 1
    So, your worst case scenario is that :

    1. Someone leaks classified info to the press
    2. The government says "hey, that's classified" and starts an investigation
    3. the investigation leads to a news outfit
    4. Someone (likely the same someone from #1 who is now scared) tips off ABC news to the investigation.

    What part of that is your worst case scenario? Is the government enforcing a law that terrifying to you?

    I'm scared as well -- but I'm scared that the president, elected by the people, can now, in effect, by vetoed by any bureaucrat who decides they dislike his policies.

    I vote for the president of the US. I don't get to vote for journalists or bureaucrats. Unless you do, I'm not sure why you think that their imaginary rights should trump our real ones.

    1. Re:Haha by Moofie · · Score: 3, Insightful

      "Is the government enforcing a law that terrifying to you?"

      Depends on the law. A substantial fraction of the recent ones are, in fact, pretty terrifying.

      --
      Why yes, I AM a rocket scientist!
    2. Re:Haha by mOdQuArK! · · Score: 1
      Is the government enforcing a law that terrifying to you?

      Well, I don't know - if I found a law that said that anyone using or who had used the handle "stupidpuppy" on an online forum must be arrested and summarily executed, would you be a little worried that someone in the government might enforce that law?

      _Every_ part of the government needs oversight, preferably via a process which is not under the control of the part which is being audited. There should be no part of the government which can do what it wants without worrying about somebody else kicking its collective head when it misbehaves.

  58. Political Bias by __aalomb7276 · · Score: 0, Flamebait

    Suspicious behaviour of the Bush administration?! Do you mean the database of phone records? *yawn* Commander Taco, your short-sighted political view is showing.

  59. What about SSL? by matrix+mechanic · · Score: 1

    I don't know much about encryption, so I ask what's the practical difference between this and, say, Skype over SSL?

    1. Re:What about SSL? by Anonymous Coward · · Score: 0

      Skype's data stream (voice, text, file transfer) is already encrypted.

  60. Only a Terrorist Wants to be Free! by Il128 · · Score: 3, Insightful

    Sorry but the idea that we all have to give up our freedom to be safe and free is just beyond stupid.

    --
    Thanks to eating disorders most chicks are reasonably good looking these days.
    1. Re:Only a Terrorist Wants to be Free! by Anonymous Coward · · Score: 0

      It may come as a surprise to you, but a vast majority of people value safety above the "freedom" of writing bullshit on the web or the "freedom" of not having their phone conversations monitored.

      If you have a cellphone, you already know you're being tracked. Is it of any consequence to you? Then don't use a cell phone. You don't want your phone conversation monitored? Don't use the phone.

      You have, and have never had, any privacy whatsoever. It's an illusion. Deal with it.

    2. Re:Only a Terrorist Wants to be Free! by Il128 · · Score: 1

      "and have never had, any privacy whatsoever. It's an illusion. Deal with it."

      Actually we all know this. You haven't made any grand statement of fact. What you are missing is that before now, there was a court order and over site... Now it's just one man deciding everything with no over site.

      Have a nice day.

      --
      Thanks to eating disorders most chicks are reasonably good looking these days.
  61. Re:nothing to hide by rayvd · · Score: 1

    And why would we want to spend our tax money to spy on people who have nothing to hide? Shouldn't we be after the terrorists instead?

    Um, that's what's happening.

  62. Yeah, real suspicious by FredThompson · · Score: 3, Funny

    Imagine, a Republican administration using laws created by Bill Clinton's Democrat administration to monitor international phone calls of known terrorists.

    Incredibly suspicious.

    1. Re:Yeah, real suspicious by v3xt0r · · Score: 0

      The monitoring of International Phone Calls is a good thing.

      The monitorying of ALL domestic phone calls (and mining thru the data collected on millions of innocent civilians) is not part of that law.

      There are more colors in the spectrum than just black and white.

      --
      the only permanence in existence, is the impermanence of existence.
    2. Re:Yeah, real suspicious by Fantastic+Lad · · Score: 1
      Imagine, a Republican administration using laws created by Bill Clinton's Democrat administration to monitor international phone calls of known terrorists.


      Oh, give it a rest already.

      Bush is a psychopath who started two insane wars which have done ZERO good and have created massive misery, chaos and damage on every level imaginable, and he is now angling to start a third, (with Iran.) He did it through endless lies and manipulations, and now he's engaging in massive spying operations on American citizens.

      The correct response is: "Yikes! Pull him and his people from office and put them in prison!"

      The incorrect response is: "I don't have to feel guilty for voting for Bush because really, Clinton is to blame. So there."

      News Flash: Democrat and Republican are two masks of the same face. The U.S. Government is evil. Good Cop, Bad Cop is a game. Stop playing.


      -FL

    3. Re:Yeah, real suspicious by Anonymous Coward · · Score: 0

      Incredibly suspicious.

      Indeed. If what you say is true, this would be the first law the Bush Administration has actually obeyed. That's cause for an investigation right there.

    4. Re:Yeah, real suspicious by Il128 · · Score: 1

      Bush isn't using any laws at all. Not FISA not the 4th amendment. He's just making up law as he goes.

      --
      Thanks to eating disorders most chicks are reasonably good looking these days.
  63. Re:nothing to hide by Tom · · Score: 1

    why would people with nothing to hide want to encrypt their conversations.

    Because the dudes at NSA can google for porn if they need some instead of listening in on me and my girl.

    Everyone has something to hide. For 99.999% of us it isn't bomb plans or drug deals, but what you did to your secretary yesterday or even just that embarassing personal secret from your teenager days.

    One of the very core principles of privacy is that I get to decide what I consider private, not you or the government. Your interest in dressing in women's underwear isn't a state secret, but it might well be that to you it is absolutely important that nobody knows about it.

    --
    Assorted stuff I do sometimes: Lemuria.org
  64. I have zero problems with that by Opportunist · · Score: 2, Interesting

    Cut to my room, opening the front door.

    "Yes officer?"
    "You had a conversation with unlicensed encryption keys."
    "I did not, I sent my keys to the government as ordered."
    "They don't fit."
    "Gee, beats me, I never really figure out those tech thingies, must've done something when I wasn't looking, I'm sooooo sorry."

    Hey, why should claiming stupidity only work when you're spreading malware?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:I have zero problems with that by Anonymous Coward · · Score: 1, Informative

      If I understand this software correctly, the keys are generated and discarded on the fly. Asking for the keys in that context is akin to asking for the contents of the A register last Tuesday. What do you say when you are legally required to turn over information that you have never seen, no longer have and never even knew that you had?

  65. Re:nothing to hide by jbarr · · Score: 1

    Nice article reference. I've been looking for a decent explanation.

    --
    My mom always said, "Jim, you're 1 in a million." Given the current population, there are 7000 of me. God help us all!
  66. Swatting flies with a sledgehammer by overshoot · · Score: 2, Interesting
    We need a society in which there's no difference between what's illegal and what harms others, and holds all other things not only legal, but acceptable.

    Gurrrk.

    Put some more thought into this one. There are any number of things that are "unacceptable" that aren't bad enough to merit applying the might and majesty of the State's criminal justice system. By denying all social sanctions short of criminal prosecution, you create a society with the worst of both worlds: a plague of officers (lawyers) worse than what we have now, along with a degree of rudeness that would make the French recoil in horror.

    Time was when being rude enough in public would get you tossed into the street by half of the men in the place. We solved that (and I'm not sure it was the wrong thing to do) by criminalizing the eviction as assault -- but now we have people carrying on loud cellphone conversations during movies.

    Shunning and scorn aren't on the order of a punch in the nose -- don't deny us those as well.

    --
    Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
  67. Re:nothing to hide by Anonymous Coward · · Score: 0

    I'm not concerned about what I'm doing to my furniture, I'm concerned about what you'd be doing to it if you sat down on it naked.

  68. Re:nothing to hide by gknoy · · Score: 1

    Forget congress. Has anyone been in a Wal-Mart (or any other major store) recently!? I swear, I feel like a parody of the sixth sense.

    "I see fat people ..."

  69. Re:nothing to hide by Anonymous Coward · · Score: 0

    Dude, I told you not to tell anyone, and now you go posting it on /.! Thanks a lot ASSHOLE!!! Now the NSA knows 100% about me.

  70. Politico or Politaco by bighoov · · Score: 2, Funny

    Politico: A political person.
    Politaco: Mr. Malda when he mixes personal politics with news.

  71. Re:nothing to hide by Dunbal · · Score: 2, Insightful

    why would people with nothing to hide want to encrypt their conversations.

          Because it's none of your fucking business that's why

    --
    Seven puppies were harmed during the making of this post.
  72. Re:nothing to hide by Dunbal · · Score: 1

    Brown and yellow stains on furniture.

          Ok I know you want to save paper, spare the trees, and all that. But you are allowed to wipe more than once, you know!

    --
    Seven puppies were harmed during the making of this post.
  73. Re:nothing to hide by Moofie · · Score: 2, Insightful

    So, you don't use envelopes for mail either, do you?

    --
    Why yes, I AM a rocket scientist!
  74. In a world with any respect for innocence until... by expro · · Score: 1

    In a world with any respect for innocence until proven guilty.

    How do they prove beyond a reasonable doubt that you remember your key if you say you forgot it.

    Of course with current policies, yes, they can lock you up forever.

  75. Re:nothing to hide by GrayCalx · · Score: 1

    Unfortunately you're confusing freedom with privacy.

    I'm honestly not trying to take sides either way here, though I'm sure some of the posters here will immediately label me a Christian in some strange stereotype mixing politics and religions, but here it is.

    You have a right to say hateful and racist things as long as you're not slandering someone or assaulting them.
    You have no such right that you'll remain anonymous as the speaker of those words.

    Of course you can make assumptions on, well I'm speaking in my home I'm granted an innate amount of privacy. Or the sounds of my marital sex won't be posted to the internet in some form. But as words and ideas blend into one concept of data, which can be transmitted via numerous different ways to numerous different people, the rules of where to assume privacy have to change.

    Very broad example: As recent as what, 10-15 years ago, you could have sex ontop of a car with a realistic expectation of privacy. At worst maybe a few passersby see you.

    Nowadays with security cameras on the corners of lots of buildings and cities themselves installing them, can you make that same assumption? And at the same time, you're not losing and freedom; you can still have sex there.

    Ehh, as i said it was a rough example, but take what you can. My whole point is that its not simply an open and shut case, times have changed, expectations will have to as well.

    And your point of the woman's underwear, in terms of my own privacy (and this may be a personal thing), i make a comparison to a tree falling in the woods. If some Johnny in Madison Wisconsin finds out a guy named Gray Calx wears women's underwear... does it matter? Not to justify, not at all, but to me, who cares, i have bigger things to worry about.

  76. Re:fp? by Anonymous Coward · · Score: 0

    "Given all the suspicious behavior of the Bush Administration relating to wiretaps and phone records, this sort of thing is all the more important to be very aware of."

    Looks like someone needs to be more aware of grammar.

  77. Re:nothing to hide by GrayCalx · · Score: 1

    "... accept the premise that privacy is about hiding a wrong. It's not. Privacy is an inherent human right, and a requirement for maintaining the human condition with dignity and respect."

    I'm going to have to disagree with Bruce there. Say I'm a witness/participant in a robbery. It goes too far, I feel bad and call the police to let them know where they can find the injured person. Do i have the right to anonymity in that situation? I don't think so. We've come too far in terms of data and knowledge; networks and communication to make these assumptions anymore.

    Back in the day, when humans wrote notes by candlelight, you could pretty much assume privacy except for anyone who came into contact (and read) that note. Nowadays your voice is zipping over countless companies' networks, over state and national borders... times have changed.

    At the same time I'm not saying the government has the right to tape everything you say... I just disagree with the statement that privacy is a right nowadays.

  78. You're right - I used too much hyperbole. by Peter+Trepan · · Score: 2, Insightful

    You're right - my post was an oversimplification. Talking loudly in a movie theater steps on the toes of other moviegoers, and you should be able to snark at those people without having them arrested. I guess my point was that "your freedom ends where my nose begins," is a system that works better when people are less nose-y.

    Gay marriage is a perfect example. When this subject comes up, people turn out in droves to vote against other people's freedom. And then they complain when the majority votes to outlaw their rifle collection, or to make their smoking habit ruinously expensive, not realizing that by voting to manage someone else's behavior, they've just legitimized society's power to manage theirs.

    And that gets back into the power of law, but the same principles apply to what people accept or don't accept in each other. If I establish that it's okay for me to fire someone purely for being gay/Commie/whatever, then I've also established that it's okay for you to fire me for being ugly/Democrat/whatever.

    --

    Step into a huge movement. Don't Tread In Me.

    1. Re:You're right - I used too much hyperbole. by overshoot · · Score: 1
      If I establish that it's okay for me to fire someone purely for being gay/Commie/whatever, then I've also established that it's okay for you to fire me for being ugly/Democrat/whatever.

      That's silly -- the two cases are obviously nothing alike.

      You see, I'm right. That makes all the difference.

      --

      OK, fine -- the sad fact is that some people never quite see why "special pleading" is a fallacy.

      --
      Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
    2. Re:You're right - I used too much hyperbole. by Jim_Callahan · · Score: 1

      "If I establish that it's okay for me to fire someone purely for being gay/Commie/whatever, then I've also established that it's okay for you to fire me for being ugly/Democrat/whatever."

      This would be a very wise statement if it wasn't completely logically invalid as well as totally incorrect.

      I'm also going to add that moral relativism is a stupid way to go about looking at the world, and that if tolerating people having different ideas than you necessitates you actually accepting those ideas as well, then there is something severely wrong with your brain, which you should really see a doctor about.

      --
      ...it's really a sad day for America when we require a goddamn ACT OF CONGRESS to make our DVD players work properly. ~
    3. Re:You're right - I used too much hyperbole. by Peter+Trepan · · Score: 1

      I'm also going to add that moral relativism is a stupid way to go about looking at the world, and that if tolerating people having different ideas than you necessitates you actually accepting those ideas as well, then there is something severely wrong with your brain, which you should really see a doctor about.

      First, I don't advocate accepting the ideas.

      Moral relativism would be a stupid way of looking at the world if everyone agreed, but they don't. Two smart people can start out with the best of intentions, and come up with two moral codes. About the only thing that everyone agrees on is that they don't want to be harmed themselves. Thus, the only rule you can really expect everyone to agree on is that they shouldn't harm other people. ( That's a complex enough rule all by itself. Is annoying someone harming them? Is a one-month-old fetus "people?" )

      Consider: It's wrong to murder, but is it wrong to murder Bin Laden?

      It's wrong to steal, but is it wrong to steal a gun from a madman?

      It's wrong to drink on Sunday, but...oh, wait.

      --

      Step into a huge movement. Don't Tread In Me.

  79. ereg_replace( acceptable, tolerable ); by Peter+Trepan · · Score: 1

    How's that? :-)

    --

    Step into a huge movement. Don't Tread In Me.

    1. Re:ereg_replace( acceptable, tolerable ); by Arandir · · Score: 1

      No, I won't replace the word. Law IS NOT morality! They are two different concepts. Do not mistake me for a leftist who seeks to ban all they find unacceptable. Government is not society. There are acts that a society may choose to not accept, yet not make those acts crimes. If you have trouble understanding this, then you are confusing law with morality.

      Just because something is legal does not mean it is moral.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    2. Re:ereg_replace( acceptable, tolerable ); by Peter+Trepan · · Score: 1

      Yes, I get that. I'm not advocating the banning of everything I don't like. Quite the opposite. I'm advocating that society strip its norms down to what's really needed, and no more.

      There's no law that says persons wearing an orange top hat will be denied employment, but there might as well be. The government won't stop you from dancing a jig whenever you feel like it - but your peers will. And if you want to understand "chilling effect," try discussing religion or politics at work. Civil society curtails most harmless freedoms before the government gets a chance to. I'm saying we should change that.

      --

      Step into a huge movement. Don't Tread In Me.

    3. Re:ereg_replace( acceptable, tolerable ); by Arandir · · Score: 1

      I'm saying we should change that.

      Then you have to change society. And do it without the use of government force. The main reason society has morals is not religion, but because they are necessary for the health of the society. It's not about orange hats or discussing politics in the workplace. There's a reason nearly every society in history had marriage, every society rejects dishonesty and promotes honor, and every society encourages conformity.

      Nothing is stopping you from forming your OWN society. If you are unable to mold society into your own image, you will have to start one you can. Nonconformists throughout history did this. It's the number one reason North America got colonized by Europe (and I greatly suspect the Amerindians started off as Asian nonconformists as well). Communes are common in US history, all started by people who didn't want to be a part of the mainstream: Amana, Kaweah, etc. Heck, we have an entire state that was founded by a group of people who didn't like the idea of monogamy!

      Instead of bitching about how horrible everything is, be thankful you're living in the most tolerant culture the world has ever seen.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
  80. Yup - mandatory encryption... by maillemaker · · Score: 1

    >Its time for the encryption phones to start appearing on the market.

    I agree. And moreover, like I've been saying, it's time to just start encrypting everything. Email. Web surfing. P2P. The whole damn kit and kaboodle needs to be encrypted, so that it becomes a waste of time to try and pick out the "good stuff" whizzing by on the internet.

    If you have probable cause to go after a /specific stream/ of data, no doubt the NSA or someone can crack it. But this wholesale sifting of anything and everything needs to stop.

    Steve

    --
    A work that expires before its copyright never enters the public domain and thus enjoys eternal copyright protection.
  81. Interesting... how does that work? by meringuoid · · Score: 2, Interesting
    And for commercial encryption software that you actually pay for (not this free public beta), there are now requirements to check customers against government watch lists as well, which is something that companies such as PGP comply with these days.

    How do you go about that? Suppose I were to set up a small business reselling GPG or something similar. Does the government simply hand me a copy of the watch list and let me do the checking myself? Or must I pass along the names of all my customers to them for authorisation to sell it on?

    --
    Real Daleks don't climb stairs - they level the building.
  82. Re:nothing to hide by tolkienfan · · Score: 2, Interesting
    Parent moderated "troll", but the question needs answering, and the other answers I've read have really missed the mark. - The important side of privacy is not really about whether we'd like others to avoid looking at us or not. That is an issue, but a self-serving one; and there are bigger things at stake.

    It's pretty clear that the War of Independance would have never begun if Britain had had the technology and power currently available to the US Government.
    The various colonies in North America had meetings that were critical to organising a force and also for turning public opinion.

    The US government currently is able to, and obviously does spy on American citizens without the kind of oversight which would allow us to even decide whether it is done for just cause.

    Reread that part. We have no way of determining whether they have any just cause.

    There are two questions:

    1. How did we get here? (AKA Where did our rights go?)
    2. What can we do?
  83. Not yet sure how MiTM attacks addressed by sacrilicious · · Score: 1
    I visited Zimmerman's site but wasn't clear on how man-in-the-middle attacks were being addressed. Zimmerman writes:
    It uses ephemeral Diffie-Hellman with hash commitment, and allows the detection of man-in-the-middle (MiTM) attacks by displaying a short authentication string for the users to read and compare over the phone.
    ... but I couldn't find more detail. If one end sends an auth string to the other end, a MiTM attack would simply pass it on transparently. I'm sure I'm missing something, but what?
    --
    - First they ignore you, then they laugh at you, then ???, then profit.
    1. Re:Not yet sure how MiTM attacks addressed by jthill · · Score: 1

      What it displays to you is based on the encryption key it's using. If there's a man in the middle, the keys won't be the same: the encryption keys are determined by randomly-chosen secrets never released by either end, so no two conversations ever arrive at the same key.

      --
      As always, all IMO. Insert "I think" everywhere grammatically possible.
    2. Re:Not yet sure how MiTM attacks addressed by mrogers · · Score: 1

      The sound of the other party's voice is used for authentication: by reading out the fingerprint of the key, you ensure that both parties are seeing the same key, which wouldn't be the case in a man-in-the-middle attack.

  84. Re:nothing to hide by Anonymous Coward · · Score: 0

    I'm not worried about myself, I'm worried about you! :-)

  85. it is ALSO Bush by Anonymous Coward · · Score: 0

    The crime's been done before, so it's acceptable? Idiotic.

    The current administration is doing it, so their political party is the only bad one? Mistaken.

    Spying on citizens is just wrong. Whoever is doing it is doing wrong.

    Don't rally to defend Bush despite the administration's flaws. That's stupidity. That same stupidity is at the root of jingoism and mob mentality. Censure any misbehavior, whoever may perform it.

    (BTW, don't just think for yourself because everyone else is doing it ...)

    Don't leap to castigate all republicans because of the current administration's crimes. That's stimulus overgeneralization. It's also a flavor of the aforementioned Us v. Them mob mentality.

  86. Ignorance is Strength! by Anonymous Coward · · Score: 0

    Freedom is Slavery!

  87. They give you the list by grahamsz · · Score: 3, Informative

    Yeah they pretty much hand you the lists

    http://www.treas.gov/offices/enforcement/ofac/sdn/ delimit/index.shtml

    Of course some of the entries are obviously from gathered inteliigence. I recall having to block anyone called "The Chess Player" from signing up. Unfortunately most websites don't gather date of birth, and when you do name only matching you catch a lot of innocent people - who are usually mightily pissed off about having to call EVERY SINGLE SITE that they try to sign up for.

    The other big caveat is what you're supposed to do when you find a match - it's virtually impossible to stop them just changing their details and signing up again.

    1. Re:They give you the list by hughk · · Score: 2, Insightful

      The OFAC list is seriously fscked as it is orientated purely around latin representations of names. From many languages (i.e., Arabic, Cyrillic) there are multiple latin transliterations. The data is usually of dubious provenance and there may be discrepancies between the same entity listed in two diffent places.

      --
      See my journal, I write things there
  88. Re:nothing to hide by Fujisawa+Sensei · · Score: 1

    How about posting your mother's maiden name, favorite pet, favorite color, Bank Name, and account number?

    --
    If someone is passing you on the right, you are an asshole for driving in the wrong lane.
  89. Not BitTorrent again... by Wesley+Felter · · Score: 1

    And the benefit of encrypting BitTorrent connections is what? All the *AA have to do is ask the tracker who's downloading what, and it will tell them.

  90. You see "forthcoming"??? by PaulBu · · Score: 1

    and that's one of the problems I see forthcoming: spying between politicians.

    How old are you, exactly?! ;-) Ever heard of Watergate? Google for 'Nixon' when you have time...

    No, not a troll, just a good-spirited shock at how naive people can be to assume that politicians do not spy on each other! (And they better do that than spy on the rest of us!)

    Paul B.

  91. Re:nothing to hide by Vorondil28 · · Score: 1

    would you want to see Margaret Thatcher walking around naked?

    Eh, I'd at least give her a shot...

    --
    This sig rocks the casbah.
  92. And it's been broken by JoeBuck · · Score: 1

    Read the article: But at a conference last week in Cyprus, German officials said they had technology for intercepting and decrypting Skype phone calls, according to Anthony M. Rutkowski, vice president for regulatory affairs and standards for VeriSign, a company that offers security for Internet and phone operations. That's not surprising: proprietary software by people whose main field is not cryptography usually sucks. Governments won't have any trouble decrypting your Skype calls. This is nothing new; the NSA managed to insert back doors into Crypto AG's encryption hardware, and that's how they listened in on Libya's traffic and found out about the Libyan connection to the Lockerbie plane bombing.

  93. Re:nothing to hide by sbrown123 · · Score: 2, Interesting

    Yes, I know that we are spending tax money to spy on people who have nothing to hide rather than on fighting terrorism.

  94. you are very close by Anonymous Coward · · Score: 0

    We are currently being ruled with the declarations in the "emergency war powers act", and numerous other presidential "findings" and other executive orders. This is why they do what they do and "get away with it" and exactly why you aren't seeing any "legal" actions taken against the executive branch. The posturing and protests you see on TV are political melodrama to keep the peons faked out that they live in a republic and that there's some sort of "law" system that resembles constitutional law.

    The other big part of it is because of THE most flawed part of the checks and balances system-the executive branch controls 99.99% of the guns and gun toters, who all "swear an oath" to "obey their commander" in chief and so on down the line, their "superior" beings. And they do so, almost unflinchingly. They may grumble, but push comes to shove they will obey ANY order given to them. Now think on that one hard and see if modern political reality makes more sense.

        The judicial branch has a very few guns, not enough to matter, and the legislative branch has ZERO,with the phrase then being "it is a paper tiger".

        You could theoretically "impeach" a president, declare that he is "removed" from office, but because he gives the orders-nothing would happen unless he chose to go willingly. He could just as easily say FU and go about his business and there's not a damn thing congress or the courts could do about it, and judging by their past actions with the kennedy assassination, the illegal nam war, the current illegal iraq war, based on total lies and misrepresentations (all quite seriously "impeachable" offenses), rest assurred the executive branch is where the true political power resides in this nation, everything else is only a facade for amusement purposes elsewhere.

    The US was taken over a long time ago in a coup d'etat, some powerful factions-primarily but not exclusively inside the executive branch and some factions inside the military - combined with even more powerful outside industrialists and central bankers, now completely control the nation. That's reality, although most people are just too afraid to admit to it, rather staying content that somehow coups only happen on the television over there someplace in furriner land with people with funny names and strange uniforms and hats.

  95. works both ways by Anonymous Coward · · Score: 0

    The clinton crime cartel was involved in a lot more than a mere bj or two. Try massive drugs smuggling, sale of infected prisoners blood, cronyism for government jobs, transfer of high stakes technology to foreign nations from bribes (china) and most likely blackmail (israel, japan), ties with international money laundering and some huge property/real estate loan scams, insider trading in stocks and commodites, some rather embarassing and improbable "suicides" of high level members, and so on. They, the joke senate they, picked the BJ episode to have the impeachment because it was so laughable, not because it was the only potential crime to impeach on. The fix is in, there's NO DIFFERENCE with the high level controllers, and those politicians you see are PUPPETS.

  96. Misplaced paranoia by prz · · Score: 2, Informative

    >Mr. Zimmermann, the registration page that is being refered to only asks for you email >address, thus your argument is invalid in this case. So why do you require registration? I told you why already. The wording of your posting implies you don't believe me. If you need more convincing, go to my Zfone FAQ page (http://philzimmermann.com/EN/zfone/index-faq.html ) where I address this particular question in great detail. If you still don't believe me after reading that, you are welcome to not use the product, and apply for a full refund. --prz

    1. Re:Misplaced paranoia by carlislematthew · · Score: 1

      I want my money back!!! Wahhh! Waaaahhhh!

    2. Re:Misplaced paranoia by ObsessiveMathsFreak · · Score: 3, Insightful
      If you need more convincing, go to my Zfone FAQ page (http://philzimmermann.com/EN/zfone/index-faq.html ) where I address this particular question in great detail.

      From TFL:
      The Zfone registration page checks your IP address against the list of embargoed countries, then emails you a link that you must click on to start your download, and checks your IP address again when you follow that link, which presumably means you did not receive your email in an embargoed country, and that the download itself did not go to an embargoed country. It shows we made our best efforts to comply with U.S. export laws.


      Your going to a lot of trouble for just about no gain at all. This system can and probably does not in any substantive way impede anyone from a blacklisted nation from downloading the software. It only alienates people who are casually interested, i.e. your main user base.

      I can understand your situation. You're in a country where it is effectively illegal to publish online any piece of software that contains even the most basic of encryption algorithims. The situation is of course ludacrious, as such algorithims have long been in the public domain, at least as far as knowladge is concerned.

      The purpose of the law of course, is not to prevent the export of encryption to forgein countries. They already have these algorithims. Nor is it to prevent access to the terrorist boegyman. They either don't use it, or can easily get access to encryption.

      No. The purpose of the law is to hang the sword of damocles over the head of anyone who wants to bring safe and secure communication to the masses. The government doesn't want the masses to encrypt their traffic, and they use this law to impede the distrobution of your software and others like it.

      I think you need to give up the ghost here. If your government wants to shut you down. they will, regardless of how much you try to comply with export restrictions it will never be good enough. I think you need to stop playing by rules where you can't possibly win and simply go all out in an effort to get as many people using zfone as possible. All out. Unrestricted downloads, ease of use, ad campaign, browser plugins, whatever. Just do anything to get as many people using encrypted VOIP as you possibly can, because until then, your software will remain one the fringe where it's easier to shut down.

      If everyone and the Senator's daughter is using secure VOIP, it's only then that people will realise they have somthing to lose, and you'll have a better defense. Before that everyone who uses SVOIP is "aiding terrorism", not protecting people's privacy. Until Aunt Tillie is using your software, this angle can and will be played. You should do everything to get her onside ASAP.
      --
      May the Maths Be with you!
    3. Re:Misplaced paranoia by badran · · Score: 1

      to get this done you need to get skype to use encryption , I have no idea if they do ( so spare me the ranting about that ) but if skype would implement encryption then everyone will follow , for the average joes they dont care if their VOIP or regular phone is encrypted or not.... they don't even know that this can be done...for them all they know about taping is from movies...

  97. Re:nothing to hide by chocolatetrumpet · · Score: 1

    You're confusing privacy and vanity.

    You'll find that most conservatives are ripe with victorian ideals, including shamefulness of the human body.

    When it's illegal to be without clothes, is it illegal to be human?

    --
    Spoon not. Fork, or fork not. There is no spoon.
  98. Evil Republicans. by Anonymous Coward · · Score: 0
    Republicans are currently in power and have had adequate time to undo what the Democrats did. But they didn't. That makes them responsible for the current system, and fair game for insults.

    Don't worry, we'll all get back to bashing Democrats, as soon as they get into office and start acting like Republicans acting like Democrats. One enemy at a time, please.

  99. Example of why you're right by Beryllium+Sphere(tm) · · Score: 3, Informative

    The Scarfo case. An accused mobster was using PGP, the FBI got a warrant, and tapped his computer with what sounds like a hardware keylogger.

  100. Clarify, please? by Beryllium+Sphere(tm) · · Score: 1

    There are several points you might be making and I'm not sure which one you're advocating.

    1. "Selective criticism"
    This argument is that people are being unfair by criticizing one party (the one in power) but not the other.

    You're probably not making this argument since it would require ignoring the mountains of criticism aimed at the Clipper Chip and at Clinton's other abuses.

    2. "Criticism barred by previous silence"
    This closely related argument is that if one person gets a free pass then we're forever barred from objecting to the same thing in someone else.

    You're probably not making this argument since it would require ignoring the mountains of criticism aimed at the Clipper Chip and at Clinton's other abuses.

    3. "One thing at a time!"
    This argument is that we still have unfinished business with Clinton and should handle it before dealing with the current emergency.

    You're probably not making this argument, because after all we impeached Clinton.

    4. "Everybody does it"
    You're probably not making this argument because it doesn't even rise to the level of a logical fallacy. It's not like one criminal justifies another.

    5. "It must be all right because Clinton did it"
    This argument is that since Clinton's actions were legal and moral, it's absurd to object to those same legal and moral actions when Republicans do them.

    This argument makes the most sense, since the relevant laws were the same in the Clinton administration as they are now. I am however bemused by your choice of President Clinton as your moral compass.

  101. What's this about Skype being cracked? by Beryllium+Sphere(tm) · · Score: 2, Interesting
    But at a conference last week in Cyprus, German officials said they had technology for intercepting and decrypting Skype phone calls, according to Anthony M. Rutkowski, vice president for regulatory affairs and standards for VeriSign, a company that offers security for Internet and phone operations.
    I'm not finding this in Googlespace. There's a publicly disclosed crack of Skype's call setup protocol (RC4 with key reuse?!) but not of the AES-protected voice stream.

    I'll try to save myself from being offtopic by asking whether zFone might be equally vulnerable (probably not, the few leaks about Skype's crypto haven't sounded encouraging).

    1. Re:What's this about Skype being cracked? by RPoet · · Score: 2, Informative

      You should never trust closed-source and purposefully undocumented crypto, and not be surprised when it gets cracked.

      --
      "Oppression and harassment is a small price to pay to live in the land of the free." -- Montgomery Burns.
    2. Re:What's this about Skype being cracked? by fitsy · · Score: 1

      http://share.skype.com/sites/security/2005/10/skyp e_security_and_encryption.html

      There is currently a user comment at the end about this topic, but no answer from Skype staff.

      What we don't know is whether this crack refers to phone calls made to a POTS, or those where both endpoints are Skype clients.

  102. Re:nothing to hide by waferhead · · Score: 1

    We pissed them away while watching American Idol and not voting.

    It was once said religion was the opiate of the masses---
    (Marx? Lenin? Stalin??? One of them got something right anyway...)

    Now we have TV, which is closer to the crack cocaine of the masses.

    TV on, brain turns off.

    Oooo...I have to fire up MythTV and watch Alias, bye...

  103. This is why libertarians... by SonicSpike · · Score: 3, Informative

    ...inherently distrust government no matter who is in power. Libertarians always view the government as untrustworthy, expansive, over-reaching, and inefficient by it's very nature. Thus the idea is to limit the government to its most basic and fundamental operations as set forth in the Constitution by our founding fathers.

    The lines between the Dems and the Reps here in the US have blurred to the point that distinction is negligible.

    --
    Libertas in infinitum
  104. Re:nothing to hide by Tom · · Score: 1

    Unfortunately you're confusing freedom with privacy.

    I don't think I do.

    Freedom is my ability to do what I want to do (within the limits of bla bla, you get the drift)
    Privacy is my ability to control information about myself.

    If I want to have a nice evening with my secretary, the ability to do so is freedom. The ability to keep it between the two of us is privacy. Your camera example also drives that home.

    There is, however, a relation between freedom and privacy that you overlook. Privacy is often a requirement for freedom. It isn't for no reason that when a government goes about hunting the freedom birds, that it goes after privacy very early in the game.

    In pure theory, you could have freedom, but no privacy. If everything were taped, but nothing bad ever happens because of that. In the real world, there are leaks, and there are misunderstandinds and there are sadistic assholes in the police and government.
    But you can't have privacy and no freedom. Any government that eliminates freedom (i.e. a totalitarian police state) can not let you have privacy. You could plot to overthrow it, or just break some law, and they can't have you do that.

    That's why defending privacy is defending freedom. Privacy is one of the first casualties when freedom is attacked. Look at any totalitarian state. How many of them have solid privacy laws (and not just on paper) ?

    If some Johnny in Madison Wisconsin finds out a guy named Gray Calx wears women's underwear... does it matter?

    To Gray it probably does. A lot. And that's the difference between freedom and privacy - freedom must be defined by a community because my freedom and your freedom might collide, and then we need to have rules as to which is more important. Privacy is no such beast. My privacy and your privacy don't collide, ever. Each of us can define for himself which things he wants to keep private and confidential.

    --
    Assorted stuff I do sometimes: Lemuria.org
  105. Pun? by oostevo · · Score: 1
    Pun? You mean 'salt'? As in the random bits that are used as input to a key derivative function?


    I suppose I got it. And I'm just a college student.


    You guaranteed no one would get it. I want my money back, then.

    --
    In soviet russia, You ask not what country do for you, but what you do for country!
    Oh wait...
  106. Re:nothing to hide by Jim_Callahan · · Score: 1

    Yeah, the relevant documents pretty much account for the shades of gray. Thus the language "unreasonable searches and seizures" and the dependence on Judicial opinion to determine when a breach of privacy is legal.

    --
    ...it's really a sad day for America when we require a goddamn ACT OF CONGRESS to make our DVD players work properly. ~
  107. Re:nothing to hide by Anonymous Coward · · Score: 1, Interesting
    Shouldn't we be after the terrorists instead?

    No, in fact, if government actually gave me the choice of how much money to "donate" to each government program, I'd give exactly zero to either. Of course, government was never meant to represent free choice -- if it did, the power elite wouldn't have much to capitalize on.

  108. basic right by lon3st4r · · Score: 1
    privacy is an essential and fundament right. making every thing a person does, talks to, or thinks available for monitoring puts the person in an invisible straight-jacket. it leads to loss of freedom, creativity and self-esteem.

    the law making bodies must realise that there is a thin line between protecting the people from harm, and jailing up the people to protect them from a perceived harm. what good is a security measure if it leads to a loss of a fundamental right? in a way, the "bad guys" have won; if the common folks have to undergo so much of surveillance. without even doing anything, they have succeeded in curbing human liberty and made the government spend billions in surveillance!

  109. MODS ARE DAFT by Anonymous Coward · · Score: 0

    The parent isn't redundant if (s)he's in the first dozen posts, and nobody has posted this info thus far. WAKE UP!

  110. Re:nothing to hide by GrayCalx · · Score: 1

    I completely disagree with you.

    Ask a celebrity about their rights to privacy, then get back to me on how free they are.

  111. Re:Better question by Doc+Ruby · · Score: 1

    "Why should anyone pay attention to a trolling imbecile like you "

    You spelled "me" wrong, Anonymous trolling imbecile Coward.

    --

    --
    make install -not war

  112. Freedom and the Masses by Fantastic+Lad · · Score: 1
    It may come as a surprise to you, but a vast majority of people value safety above the "freedom" of writing bullshit on the web or the "freedom" of not having their phone conversations monitored.

    The vast majority, eh? Is that your way of saying, "I have no rational argument for holding my views so I point instead to consensus beliefs as a way of validation"?

    Nice job. The vast majority of people are also Christians. --Or do you subscribe to broken religions which demand no question-asking and lots of subservience?

    Privacy might be an illusion, but there are many other freedoms which are being systematically removed. --Like being able to have free and democratic elections. --And the freedom to wear a tee-shirt which says, "Impeach Bush" at public events without being harassed by cops. And the freedom to fair trials before an impartial jury, because right now, if you are suspected of being an 'enemy combatant' you can be put in a secret prison forever without being charged or your family knowing where you are. These are not theoretical possibilities. They are events which have happened and will happen with increasing regularity if the Neo-Cons are not removed from office.

    This is what the poster was complaining about, and you should be as well.


    -FL

  113. Nations follow. . . by Fantastic+Lad · · Score: 1
    Here's a famous quote which I find helpful to re-read every now and again.

    "Naturally the common people don't want war; neither in Russia, nor in England, nor in America, nor in Germany. That is understood. But after all, it is the leaders of the country who determine policy, and it is always a simple matter to drag the people along, whether it is a democracy, or a fascist dictatorship, or a parliament, or a communist dictatorship. Voice or no voice, the people can always be brought to the bidding of the leaders. That is easy. All you have to do is to tell them they are being attacked, and denounce the pacifists for lack of patriotism and exposing the country to danger. It works the same in any country."

      ~~~Hermann Goering at the Nurenberg trials.

    And as long as I'm quoting Nazis, I would be remiss in leaving out Hitler's views on the mechanics of why telling big lies to the public works so effectively. You may have read this before, but read it again with full attention. . .

    "The size of the lie is a definite factor in causing it to be believed, because the vast masses of a nation are in the depths of their hearts more easily deceived than they are consciously and intentionally bad.

    The primitive simplicity of their minds renders them more easy victims of a big lie than a small one, because they themselves often tell little lies but would be ashamed to tell big ones.

    Such a form of lying would never enter their heads. They would never credit others with the possibility of such great impudence as the complete reversal of facts. Even explanations would long leave them in doubt and hesitation, and any trifling reason would dispose them to accept a thing as true.

    Something therefore always remains and sticks from the most imprudent of lies, a fact which all bodies and individuals concerned in the art of lying in this world know only too well, and therefore they stop at nothing to achieve this end."

      ~~~ Adolph Hitler, Mein Kampf

    Just some notes for thought. Is the Neo-Con gang smart enough to recognize the basic principals described above? Of course they are.


    -FL

  114. Re:nothing to hide by Hektor_Troy · · Score: 1

    So, what you're saying, is that the only way to practice sedation and starting an effective revolution, is to keep stuff secret from the government?

    I suppose that's trolling, but it's also an interesting question. After all, the 2nd amendment is supposed to give you a way to fight an oppressive government, isn't it?

    --
    We do not live in the 21st century. We live in the 20 second century.
  115. Re:nothing to hide by Tom · · Score: 1

    You think that?

    Every celebrity has the freedom to, say, fuck their gardener. What they don't have is privacy - it'll be in the newspapers the next day.

    --
    Assorted stuff I do sometimes: Lemuria.org
  116. Another glaring ommission by grahamsz · · Score: 1

    Our legal department insisted that we remove embargoed countries from the dropdown on the sign-up form. So you couldn't possibly choose Iraq, Iran, Afghanistan (at the time) etc...

    As a result, when Osama signs up for an account, he'd have to lie about the country he was in which would make it even harder to find him.

    1. Re:Another glaring ommission by hughk · · Score: 1

      We have to capture the country even if it is sanctioned because I'm in banking and we keep everything for a period of time whether or not we enter into a relationship.

      --
      See my journal, I write things there
  117. MITM attack - the workaround by gnoshi · · Score: 1

    Zfone, like Off-the-Record Messaging, doesn't use a pre-shared key to prevent man-in-the-middle attacks. Rather, it uses a code (conceptually similar to a key fingerprint) which each person reads for the key they have from the other person, to the other person. By ensuring this code matches what is expected, and observing that the voice is not being artificially replaced between the two people.

    As long as those codes are correct, the call is secure.

    The second part is that a bit of information is kept from each call, and used in an authentication process in the next call. Because both systems will know this information (if they are the same systems), authentication can occur without either person needing to deal with it directly. If the systems for the second coll are not the same as for the first, the code-reading process must occur again.

    There is more to it than that, but that's the quick dirty summary.
    For more details, try:
    http://www.philzimmermann.com/EN/zfone/index-faq.h tml
    http://www.cypherpunks.ca/otr/Protocol-v2-3.0.0.ht ml (not the same, but very similar)
    http://en.wikipedia.org/wiki/Perfect_forward_secre cy
    http://www.ietf.org/internet-drafts/draft-zimmerma nn-avt-zrtp-01.txt

  118. Re:Ehehheh by nnn0 · · Score: 0

    Flamebait :DDD I rest my case ;)

  119. privacy online by elliedrey · · Score: 1

    im scared of vopi being so new that my calls are not private, being sent over the net to be intercepted.I live in america and freedom and privacy are very valueable and yet taken for granted by many.How unfortunate and sad. LongDistance-T1.com