PGP software pirated

Robert J. Hansen rjh at sixdemonbag.org
Mon Jun 11 19:08:31 CEST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> However, does this mean that someone was able to find the private key
> for the key PGP uses to sign licenses?

All license enforcement mechanisms are fundamentally DRM  
technologies.  DRM uses encryption algorithms, but DRM is not an  
encryption algorithm.

Pretty much all computer security authorities agree that DRM is a  
shell game.  Not only doesn't it work, but it can't work.  There are  
some very strong arguments supporting this proposition.

Don't worry about encrypted messages.  There's very little chance  
that someone has figured out how to break the crypto going into an  
OpenPGP-encrypted message.  All that's happened is a DRM system has  
been circumvented... again.

> I want to know how the hackers were able to  give me a
> signed message?

Due to the provisions of the Digital Millennium Copyright Act, this  
is a very dangerous question for any U.S. citizen to answer.  An  
overzealous federal prosecutor could easily claim that an in-depth  
technical explanation amounts to trafficking in circumvention devices.

If other people want to answer you, they certainly can.  However, I'm  
not.

- --
Robert J. Hansen <rjh at sixdemonbag.org>

"Most people are never thought about after they're gone.  'I wonder
where Rob got the plutonium?' is better than most get." -- Phil Munson



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)

iFYEAREIAAYFAkZtgY8ACgkQf2XByo0Cu7M8wADeJAAahSg4kDj3a/uLh0h87KD3
lW0Sw7jMW2PhEADeNgQxkFSyTfNGnLRglgzvFKQf8I2Pg9YXSgK6YokBHAQBAQgA
BgUCRm2BjwAKCRC3APSC/q+BCTYkCAC7wD1IhLuFCnoiZdwMOwrOl+tkIGRka4Li
b3uzpKhsXIf/dan1wQcettdM3Yvy5V8B+Bpv4SzYD8Y1wPbfwaLiQ0ygqjZ6JTTF
HG2Kr1IldOo3sULGSiN/PVMbutHWbMGfvm/WRiuDG4BMudovu3LSXNGpk/bbCjgy
eDsAzgMru+3TIXnykP4kbP9HeGwXDrQbFKt4mSJUaceKwPc1ZOdgxJTgT0afoh5x
Mbbl7fyD8aPQIvW7XZruS9jiwL7pwcZB1+k7geVx0ay8xeU6KbyfifvZXCfarQGW
v9s8pM6nie+ZbbrFQL+H8QQmtFZsdSrH0GwoND0rlLqRhuN0BdbI
=rA5x
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list