Aggrajag and Mortimer.CA, among others, wrote to inform us that Theo de Raadt has made public an email sent to him by Gregory Perry, who worked on the OpenBSD crypto framework a decade ago. The claim is that the FBI paid contractors to insert backdoors into OpenBSD's IPSEC stack. Mr. Perry is coming forward now that his NDA with the FBI has expired. The code was originally added ten years ago, and over that time has changed quite a bit, "so it is unclear what the true impact of these allegations are" says Mr. de Raadt. He added: "Since we had the first IPSEC stack available for free, large parts of the code are now found in many other projects/products." (Freeswan and Openswan are not based on this code.)

MikeChino writes "Scientists at the University of Wisconsin-Madison have discovered that a mix of zinc oxide crystals, water, and noise pollution can efficiently produce hydrogen without the need for a dirty catalyst like oil. To generate the clean hydrogen, researchers produced a new type of zinc oxide crystals that absorb vibrations when placed in water. The vibrations cause the crystals to develop areas with strong positive and negative charges — a reaction that rips the surrounding water molecules and releases hydrogen and oxygen. The mechanism, dubbed the piezoelectrochemical effect, converts 18% of energy from vibrations into hydrogen gas (compared to 10% from conventional piezoelectric materials), and since any vibration can produce the effect, the system could one day be used to generate power from anything that produces noise — cars whizzing by on the highway, crashing waves in the ocean, or planes landing at an airport."

www.sorehands.com writes "In the first case brought by a spam recipient to actually go to trial in California, the Superior Court of California held that people who receive false and deceptive spam emails are entitled to liquidated damages of $1,000 per email under California Business & Professions Code Section 17529.5. In the California Superior Court ruling (PDF), Judge Marie S. Weiner made many references to the fact that Defendants used anonymous domain name registration and used unregistered business names in her ruling. This is different from the Gordon case, where one only had to perform a simple whois lookup to identify the sender; here, Defendants used 'from' lines of 'Paid Survey' and 'Your Promotion' with anonymously registered domain names. Judge Weiner's decision makes it clear that the California law is not preempted by the I CAN-SPAM Act. This has been determined in a few prior cases, including my own. (See http://www.barbieslapp.com/spam for some of those cases.)"

agoston.horvath writes "I've written a HOWTO on replacing Mac OS X's built-in encryption (FileVault) with the well-known FUSE-based EncFS. It worked well for me, and most importantly: it is a lot handier than what Apple has put together. This is especially useful if you are using a backup solution like Time Machine. Includes Whys, Why Nots, and step-by-step instructions."