astronomy-chat.net
Promoting astronomy discussion.



Main
Date: 03 Nov 2006 03:41:28
From: Tom St Denis
Subject: Notice: My 2nd crypto book finished :-)


I've just finished the review phase of my 2nd book [see my website for
details, I won't link it here for obvious reasons].

It's a text covering software developer problems with cryptography, and
is based for the most part on my experience as a developer and from
supporting my projects. I think the book is a decent read and for the
software developers out there stuck doing crypto work it should prove
useful.

It's not a "handbook of applied crypto" style book, so please don't
think of it as a re-run book :-)

The text hits the printers tomorrow and should be in stock within a
month [starting in the states of course...].

I recommend picking up my 1st book on large integer math, not just
because it's my book but because it covers the math in more depth than
this book does. I also recommend the "Guide to Elliptic Curve
Cryptography" as I don't cover ECC in a huge amount of depth. The
three books fit well together as they were written in that frame of
mind (they sit on my desk at the office).

I have a third book project scheduled starting early next year. It's
going to be public domain like my math text was. At least, till I get
the first draft completed [sometime in 2009]. :-)

Thanks for the attention, please return to the regular scheduled usenet
melee.

Tom

http://www.amazon.com/Cryptography-Developers-Tom-St-Denis/dp/1597491047





 
Date: 03 Nov 2006 10:10:05
From: Brian Tung
Subject: Re: Notice: My 2nd crypto book finished :-)


Tom St Denis wrote:
> Thanks for the attention, please return to the regular scheduled usenet
> melee.
>
> Tom
>
> http://www.amazon.com/Cryptography-Developers-Tom-St-Denis/dp/1597491047

Err, interesting, and one of my areas of interest and work, but I'm just
the teensiest bit curious: What is this doing in SAA? Shouldn't this be
in sci.crypt or something like that?

--
Brian Tung <brian@isi.edu >
The Astronomy Corner at http://astro.isi.edu/
Unofficial C5+ Home Page at http://astro.isi.edu/c5plus/
The PleiadAtlas Home Page at http://astro.isi.edu/pleiadatlas/
My Own Personal FAQ (SAA) at http://astro.isi.edu/reference/faq.html


  
Date: 03 Nov 2006 10:23:29
From: Brian Tung
Subject: Re: Notice: My 2nd crypto book finished :-)


I (Brian Tung) wrote of Tom St Denis's book:
> Err, interesting, and one of my areas of interest and work, but I'm just
> the teensiest bit curious: What is this doing in SAA? Shouldn't this be
> in sci.crypt or something like that?

Sorry, my bad, he's just spamming.

--
Brian Tung <brian@isi.edu >
The Astronomy Corner at http://astro.isi.edu/
Unofficial C5+ Home Page at http://astro.isi.edu/c5plus/
The PleiadAtlas Home Page at http://astro.isi.edu/pleiadatlas/
My Own Personal FAQ (SAA) at http://astro.isi.edu/reference/faq.html


 
Date: 04 Nov 2006 15:42:57
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Brian Tung wrote:
> Shouldn't this be
> in sci.crypt or something like that?

I saw it in sci.crypt.

And I don't see it here; your reply is the first in the thread in
sci.astro.amateur.

Maybe your news server just burped and put the item in the wrong
newsgroup when it came in.

John Savard



  
Date: 04 Nov 2006 16:07:14
From: Brian Tung
Subject: Re: Notice: My 2nd crypto book finished :-)


John Savard wrote:
> Maybe your news server just burped and put the item in the wrong
> newsgroup when it came in.

That's possible; however, if you look for messages with the same
subject line at Google Groups, it's quite evident that the author has
spammed Usenet. Or perhaps the relevance to, say, alt.sports.hockey.
nhl.vancouver-canucks escapes me. :-o

--
Brian Tung <brian@isi.edu >
The Astronomy Corner at http://astro.isi.edu/
Unofficial C5+ Home Page at http://astro.isi.edu/c5plus/
The PleiadAtlas Home Page at http://astro.isi.edu/pleiadatlas/
My Own Personal FAQ (SAA) at http://astro.isi.edu/reference/faq.html


 
Date: 05 Nov 2006 18:47:13
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Brian Tung wrote:
> John Savard wrote:
> > Maybe your news server just burped and put the item in the wrong
> > newsgroup when it came in.

> That's possible; however, if you look for messages with the same
> subject line at Google Groups, it's quite evident that the author has
> spammed Usenet. Or perhaps the relevance to, say, alt.sports.hockey.
> nhl.vancouver-canucks escapes me. :-o

I'm crossposting this to sci.crypt, where a post with this subject line
has led to a fairly long thread. Maybe someone there - including Mr.
St. Denis himself - can enlighten us to what has really happened. He
has been the target of forgery attacks before (for that matter, so have
I on one occasion) and so there can be an explanation for this.

John Savard



  
Date: 06 Nov 2006 05:33:14
From: Ben Rudiak-Gould
Subject: Re: Notice: My 2nd crypto book finished :-)


jsavard@ecn.ab.ca wrote:
> I'm crossposting this to sci.crypt, where a post with this subject line
> has led to a fairly long thread. Maybe someone there - including Mr.
> St. Denis himself - can enlighten us to what has really happened.

Tom St. Denis posted to sci.crypt announcing that his new book was done.
This turned into a flame war about whether the post was appropriate for the
group. Someone from the inappropriate faction started forging posts in Tom's
name. You can tell who's who by the NNTP-Posting-Host. Just another day on
teh Usernets.

-- Ben


   
Date: 06 Nov 2006 09:57:29
From: Phil Carmody
Subject: Re: Notice: My 2nd crypto book finished :-)


Ben Rudiak-Gould <br276deleteme@cam.ac.uk > writes:
> jsavard@ecn.ab.ca wrote:
> > I'm crossposting this to sci.crypt, where a post with this subject line
> > has led to a fairly long thread. Maybe someone there - including Mr.
> > St. Denis himself - can enlighten us to what has really happened.
>
> Tom St. Denis posted to sci.crypt announcing that his new book was
> done. This turned into a flame war about whether the post was
> appropriate for the group. Someone from the inappropriate faction
> started forging posts in Tom's name. You can tell who's who by the
> NNTP-Posting-Host. Just another day on teh Usernets.

If an anonymiser injects none of its own, and propogates forged
NNTP-Posting-Host headers, then you can ignore that header.

The best indicator of forgery that I've found is the use of an
anonymising service with a supposedly real identity. Many of "Tom"'s
posts have this in their path "POSTED!53ab2750!not-for-mail".
Google for that hex number, you'll find that it is tainted.
Tom's never tried to hide his identity, has no reason to, and
does not use anonymizing services. Therefore I believe these posts
are not from Tom, despite the fact that the NNTP-Posting-Host
points to Canada.

Phil
--
"Home taping is killing big business profits. We left this side blank
so you can help." -- Dead Kennedys, written upon the B-side of tapes of
/In God We Trust, Inc./.


    
Date: 06 Nov 2006 17:22:13
From: Ben Rudiak-Gould
Subject: Re: Notice: My 2nd crypto book finished :-)


[followups set]

Phil Carmody wrote:
> If an anonymiser injects none of its own, and propogates forged
> NNTP-Posting-Host headers, then you can ignore that header.

Are there really news servers out there that allowed forging of
NNTP-Posting-Host? Shouldn't they have been Usenet Death Penaltied by now?
Actually, looking back at the forged messages, I see that some of them don't
have an NNTP-Posting-Host at all, which is unsettling enough.

In any case I think these particular forged messages can be distinguished
from the real messages by the NNTP-Posting-Host, which suggests that the
forger doesn't know how to forge that header (or that it's really Tom, and
he wants the messages to look forged).

-- Ben


   
Date: 06 Nov 2006 07:05:49
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Ben Rudiak-Gould wrote:

> jsavard@ecn.ab.ca wrote:
>
>> I'm crossposting this to sci.crypt, where a post with this subject line
>> has led to a fairly long thread. Maybe someone there - including Mr.
>> St. Denis himself - can enlighten us to what has really happened.
>
>
> Tom St. Denis posted to sci.crypt announcing that his new book was done.
> This turned into a flame war about whether the post was appropriate for
> the group. Someone from the inappropriate faction started forging posts
> in Tom's name. You can tell who's who by the NNTP-Posting-Host. Just
> another day on teh Usernets.
>
> -- Ben

What proof do you have that "someone from the inappropriate faction
started forging posts in Tom's name" ???

Please post whatever information makes you think that a particular
poster, who disagreed with Tom, posted those supposed forgeries.

How do you know that Tom is not posting these himself? In order to
A) increase his book sales, and B) pass the blame on to those who
disagree with his approach to commercial announcements in Science
news groups.


    
Date: 06 Nov 2006 17:04:46
From: Ben Rudiak-Gould
Subject: Re: Notice: My 2nd crypto book finished :-)


zzz@privacy.net wrote:
> What proof do you have that "someone from the inappropriate faction
> started forging posts in Tom's name" ???

You're right, I have no evidence for that, and probably shouldn't have
posted it.

-- Ben


     
Date: 06 Nov 2006 10:15:19
From: Paul Rubin
Subject: Re: Notice: My 2nd crypto book finished :-)


Ben Rudiak-Gould <br276deleteme@cam.ac.uk > writes:
> > What proof do you have that "someone from the inappropriate faction
> > started forging posts in Tom's name" ???
>
> You're right, I have no evidence for that, and probably shouldn't have
> posted it.

This thing has been going on for years and it's how those guys
operate. Obviously there's no mathematical proof of who's behind it;
however, for those of us who have been observing the personalities
involved, I'd say that informed judgement doesn't lead to any other
conclusion.


      
Date: 06 Nov 2006 19:34:59
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Paul Rubin wrote:

> Ben Rudiak-Gould <br276deleteme@cam.ac.uk> writes:
>
>>>What proof do you have that "someone from the inappropriate faction
>>>started forging posts in Tom's name" ???
>>
>>You're right, I have no evidence for that, and probably shouldn't have
>>posted it.
>
>
> This thing has been going on for years and it's how those guys
> operate. Obviously there's no mathematical proof of who's behind it;
> however, for those of us who have been observing the personalities
> involved, I'd say that informed judgement doesn't lead to any other
> conclusion.

Informed judgement, or unfounded conclusion?
Jumping to assumptions promotes confusion, not clarity.


       
Date: 06 Nov 2006 12:08:17
From: Paul Rubin
Subject: Re: Notice: My 2nd crypto book finished :-)


zzz@privacy.net writes:
> Informed judgement, or unfounded conclusion?
> Jumping to assumptions promotes confusion, not clarity.

You have no credibility in this matter.


        
Date: 07 Nov 2006 00:31:00
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Paul Rubin wrote:
> zzz@privacy.net writes:
>
>>Informed judgement, or unfounded conclusion?
>>Jumping to assumptions promotes confusion, not clarity.
>
>
> You have no credibility in this matter.

And you do?

Didn't you previously post that there was no proof possible?



         
Date: 06 Nov 2006 18:57:27
From: Paul Rubin
Subject: Re: Notice: My 2nd crypto book finished :-)


zzz@privacy.net writes:
> > You have no credibility in this matter.
>
> And you do?
>
> Didn't you previously post that there was no proof possible?

Dear Mr. Anonymous Troll,

Informed judgement and mathematical proof are not the same thing. Now
go away.


          
Date: 07 Nov 2006 03:39:45
From:
Subject: Re: Notice: My 2nd crypto book finished :-)


Paul Rubin wrote:
> zzz@privacy.net writes:
>
>>>You have no credibility in this matter.
>>
>>And you do?
>>
>>Didn't you previously post that there was no proof possible?
>
>
> Dear Mr. Anonymous Troll,
>
> Informed judgement and mathematical proof are not the same thing. Now
> go away.


And Usenet spam is unacceptable, no matter how much you apologise for it.