<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Jim's Blog &#187; crypto</title>
	<atom:link href="http://blog.jim.com/category/crypto/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.jim.com</link>
	<description>Liberty in an unfree world</description>
	<lastBuildDate>Fri, 03 Feb 2012 09:03:46 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Google is evil</title>
		<link>http://blog.jim.com/politics/google-is-evil.html</link>
		<comments>http://blog.jim.com/politics/google-is-evil.html#comments</comments>
		<pubDate>Sat, 07 May 2011 22:19:02 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[crypto]]></category>
		<category><![CDATA[politics]]></category>

		<guid isPermaLink="false">http://blog.jim.com/?p=1570</guid>
		<description><![CDATA[Firefox reports your IP and all nearby wifi systems to Google. Thunderbird reports your IP to Google. From the nearby wifi systems, Google can locate you relative to nearby wifi points.. From a multitude of browsers reporting in, it can locate wifi systems relative to each other. When it does ground level photo drives for [...]]]></description>
			<content:encoded><![CDATA[<p>Firefox reports your IP and all nearby wifi systems to Google.   Thunderbird reports your IP to Google.  From the nearby wifi systems, Google can locate you relative to nearby wifi points..  From a multitude of browsers reporting in, it can locate wifi systems relative to each other.  When it does ground level photo drives for Google Earth, it locates wifi systems relative to streets and houses.  Knowing the location of some wifi systems relative to streets and houses, it can locate all wifi systems relative to streets and houses.  So when you launch a search for a sexual preference, or a politically incorrect fact, Google can tell where you are sitting, what house you are in, <a href="http://www.mozilla.com/en-US/firefox/geolocation/">when you search for unapproved knowledge</a>.   It keeps this information forever.</p>
<p>The intent is that when you search for a restaurant or some such, Google will know to provide information about local restaurants.  But Google notoriously plays ball with governments.  More sinister uses are also possible.  And why does Google need to know the geographic location where your email is coming from?</p>
<p>To turn this off:</p>
<ul>
<li>Mozilla Firefox
<ul>
<li>Type &#8216;about:config&#8217; in the address bar</li>
<li>Click through the warning</li>
<li>Type &#8216;geo.&#8217; in the search box.  A list of items appears</li>
<li>Doubleclick on the geo.enabled item till it reads &#8216;False&#8217;</li>
<li>Rightclick on the  &#8216;geo.wifi.uri&#8217; item and select &#8216;Modify&#8217;</li>
<li>Modify the item from evil google to &#8216;http://localhost&#8217;</li>
</ul>
</li>
<li>Mozilla Thunderbird
<ul>
<li>Select Tools/Options/Avanced/General/Config Editor</li>
<li>click through the warning</li>
<li>type &#8216;geo.&#8217; in the search box.  A list of items appears</li>
<li>Doubleclick on the geo.enabled item till it reads &#8216;False&#8217;</li>
</ul>
</li>
</ul>
<p>Google piously proclaims:</p>
<blockquote><p><a href="http://www.mozilla.com/en-US/firefox/geolocation/">Your privacy is extremely important to us, and Firefox never shares your location without your permission.</a></p></blockquote>
<p>This is of course a lie.  Firefox never shares your location to advertisers without your permission – but it does continually send your location to Google without your permission.</p>
<p>If your privacy was actually important to Google, the browser would only send this information to Google when advertisers requested it and you gave them permission.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim.com/politics/google-is-evil.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Lara Logan and the media rules</title>
		<link>http://blog.jim.com/politics/lara-logan-and-the-media-rules.html</link>
		<comments>http://blog.jim.com/politics/lara-logan-and-the-media-rules.html#comments</comments>
		<pubDate>Sat, 19 Feb 2011 22:18:07 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[crypto]]></category>
		<category><![CDATA[politics]]></category>

		<guid isPermaLink="false">http://blog.jim.com/?p=1456</guid>
		<description><![CDATA[Caroline Glick analyzes the coverage: Identity politics revolve around the narrative of victimization. For adherents to identity politics, the victim is not a person, but a member of a privileged victim group. That is, the status of victimhood is not determined by facts, but by membership in an identity group. Stories about victims are not [...]]]></description>
			<content:encoded><![CDATA[<p>Caroline Glick <a href="http://www.carolineglick.com/e/2011/02/lara-logan-and-the-media-rules.php">analyzes the coverage</a>:</p>
<blockquote><p>
Identity politics revolve around the narrative of victimization.  For adherents to identity politics, the victim is not a person, but a  member of a privileged victim group. That is, the status of victimhood  is not determined by facts, but by membership in an identity group.  Stories about victims are not dictated by facts. Victim stories are  tailored to fit the victim. Facts, values and individual responsibility  are all irrelevant.</p>
<p>In light of this, a  person&#8217;s membership in specific victim groups is far more important than  his behavior. And there is a clear pecking order of victimhood in  identity politics.</p>
<p>Anti-American Third World  national, religious and ethnic groups are at the top of the victim food  chain. They out-victim everyone else.</p>
<p>After them come the Western victims: Racial minorities, women, homosexuals, children and animals.</p>
<p>Israelis,  Jews, Americans, white males and rich people are the predetermined  perpetrators. No matter how badly they are victimized, brave reporters  will go to heroic lengths to ignore, underplay or explain away their  suffering.</p>
<p>In cases when victim groups are  attacked by victim groups &#8211; for instance when Iraqis were attacked by  Saddam, or Palestinians are attacked by the PA, the media tend to ignore  the story.</p>
<p>When members of Western victim  groups are attacked by Third World victims, the story can be reported,  but with as little mention of the identity of the victim-perpetrators as  possible. So it was with coverage of Logan and the rest of the foreign  reporters assaulted in Egypt. They were attacked by invisible attackers  with no identities, no barbaric values, no moral responsibility, and no  criminal culpability.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim.com/politics/lara-logan-and-the-media-rules.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Diebold voting machines horribly wrong</title>
		<link>http://blog.jim.com/party-politics/diebold-voting-machines-horribly-wrong.html</link>
		<comments>http://blog.jim.com/party-politics/diebold-voting-machines-horribly-wrong.html#comments</comments>
		<pubDate>Sat, 16 Aug 2008 02:17:36 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[crypto]]></category>
		<category><![CDATA[party politics]]></category>
		<category><![CDATA[computer insecurity]]></category>

		<guid isPermaLink="false">http://blog.jim.com/?p=248</guid>
		<description><![CDATA[xkcd gets it exactly right]]></description>
			<content:encoded><![CDATA[<p><a href="http://xkcd.com/463/">xkcd gets it exactly right</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim.com/party-politics/diebold-voting-machines-horribly-wrong.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>One mode, and it is secure</title>
		<link>http://blog.jim.com/crypto/one-mode-and-it-is-secure.html</link>
		<comments>http://blog.jim.com/crypto/one-mode-and-it-is-secure.html#comments</comments>
		<pubDate>Tue, 24 Jun 2008 01:03:16 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[crypto]]></category>
		<category><![CDATA[one mode]]></category>
		<category><![CDATA[pki]]></category>
		<category><![CDATA[verisign is evil]]></category>

		<guid isPermaLink="false">http://blog.jim.com/?p=205</guid>
		<description><![CDATA[Ian Grigg correctly argues that any internet protocol that has an insecure mode can never be made secure, thus if security is introduced as after thought, will never be secure. Https is exactly such a bolted on afterthought, and to use it one must pay money, and suffer substantial inconvenience. Further, it is a woefully [...]]]></description>
			<content:encoded><![CDATA[<p>Ian Grigg correctly<a href="https://financialcryptography.com/mt/archives/001067.html"> argues that any internet protocol that has an insecure mode can never be made secure</a>, thus if security is introduced as after thought, will never be secure.</p>
<p>Https is exactly such a bolted on afterthought, and to use it one must pay money, and suffer substantial inconvenience. Further, it is a woefully inefficient protocol, so people always try to minimize their use of it to only what is truly necessary, which they are unlikely to ever do correctly. Further, those to whom one must pay money are themselves a point of failure, not a source of security.</p>
<p>Iang attempts, and fails, to make his website conform to the <strong style="color: black; background-color: #ffff66;">one mode</strong> principle.  For a blog to implement “the <strong style="color: black; background-color: #ffff66;">one mode</strong> and it is secure” paradigm it must be accessed by https, and accessing it by http should generate an 301 redirect to the https site. The trouble is, that when one reaches the https site, the site has to have a certificate whose root is accepted by the big browsers, typically a Verisign certificate. Such certificates are a pain to get, and a pain to install. And so, no one ever does. Iang has not got a big name certificate in the appropriate name for his web site, so accessing his site correctly generates no end of alarming error dialogs.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim.com/crypto/one-mode-and-it-is-secure.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

