<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Follow the money, stupid</title>
	<atom:link href="http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/</link>
	<description>Security Research, Computer Laboratory, University of Cambridge</description>
	<pubDate>Sun, 06 Jul 2008 12:09:51 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: Eponymous</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-23841</link>
		<dc:creator>Eponymous</dc:creator>
		<pubDate>Fri, 31 Aug 2007 22:14:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-23841</guid>
		<description>@Always,

The ethical issue here is that irrevocable financial transactions are the BASIS of fraud. There is no reason for any electronic transaction to be irrevocable, given the relative instability, complexity, and potential inauthenticity of online transactions. And the real criminal is you, if you don't understand that. 

Any transaction that is mutually beneficial to both parties would have no NEED to deliberately avoid revocability. Don't try to collude the issue with exaggerated anti-government FUD--if you're benefitting from that irrevocability, and you know why your customers are choosing your service as an irrevocable one, then you are a malicious abettor and need to be punished all the same.</description>
		<content:encoded><![CDATA[<p>@Always,</p>
<p>The ethical issue here is that irrevocable financial transactions are the BASIS of fraud. There is no reason for any electronic transaction to be irrevocable, given the relative instability, complexity, and potential inauthenticity of online transactions. And the real criminal is you, if you don&#8217;t understand that. </p>
<p>Any transaction that is mutually beneficial to both parties would have no NEED to deliberately avoid revocability. Don&#8217;t try to collude the issue with exaggerated anti-government FUD&#8211;if you&#8217;re benefitting from that irrevocability, and you know why your customers are choosing your service as an irrevocable one, then you are a malicious abettor and need to be punished all the same.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: rod flemming</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22811</link>
		<dc:creator>rod flemming</dc:creator>
		<pubDate>Sun, 08 Jul 2007 15:05:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22811</guid>
		<description>as much as I appreciate your taking a close look at e-money your statements about paypal are not reflecting my experience.
paypal is full of major faults and had to correct its user agreements so often that checking it daily shows a change almost daily. they spend a lot of money in publicity which is not reflected in their user agreement and it seems marketing and legal department chase each other around since years.
I also miss the mentioning of the problem that knowledge of the associated email account permits buying with this email address on several "world merchant" accounts of paypal without that the defrauded owners of the money ever received their money back.</description>
		<content:encoded><![CDATA[<p>as much as I appreciate your taking a close look at e-money your statements about paypal are not reflecting my experience.<br />
paypal is full of major faults and had to correct its user agreements so often that checking it daily shows a change almost daily. they spend a lot of money in publicity which is not reflected in their user agreement and it seems marketing and legal department chase each other around since years.<br />
I also miss the mentioning of the problem that knowledge of the associated email account permits buying with this email address on several &#8220;world merchant&#8221; accounts of paypal without that the defrauded owners of the money ever received their money back.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Clive Robinson</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22218</link>
		<dc:creator>Clive Robinson</dc:creator>
		<pubDate>Thu, 31 May 2007 12:23:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22218</guid>
		<description>@veritas

"The downside of this was that people used to cut the thumbs off dead people to access their bank accounts"

Yes and when that stopped working they used to take the whole corpse into the post office in a wheel chair and tell the counter person that 'Granny was unwell' and had to be helped.

THe whole scam came to light in one post office in South Africa when the counter staff became suspicious and the bungeling crooks left the corpse on the floor...

(I wish I could find the Private Eye the artical was reproduced in but the reported remarks of the post master did make me laugh).</description>
		<content:encoded><![CDATA[<p>@veritas</p>
<p>&#8220;The downside of this was that people used to cut the thumbs off dead people to access their bank accounts&#8221;</p>
<p>Yes and when that stopped working they used to take the whole corpse into the post office in a wheel chair and tell the counter person that &#8216;Granny was unwell&#8217; and had to be helped.</p>
<p>THe whole scam came to light in one post office in South Africa when the counter staff became suspicious and the bungeling crooks left the corpse on the floor&#8230;</p>
<p>(I wish I could find the Private Eye the artical was reproduced in but the reported remarks of the post master did make me laugh).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: veritas</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22029</link>
		<dc:creator>veritas</dc:creator>
		<pubDate>Tue, 15 May 2007 13:06:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-22029</guid>
		<description>Your remark about everyone requiring ID and utility bills reminds me that in the past, a thumbprint used to be used as authentication for transactions on a bank account (I believe this happened in India).  I believe that the person's workplace was used for an address, as many labourers were illiterate at the time.  (The downside of this was that people used to cut the thumbs off dead people to access their bank accounts).  Perhaps this might be a more sensible model to use in the developing world.</description>
		<content:encoded><![CDATA[<p>Your remark about everyone requiring ID and utility bills reminds me that in the past, a thumbprint used to be used as authentication for transactions on a bank account (I believe this happened in India).  I believe that the person&#8217;s workplace was used for an address, as many labourers were illiterate at the time.  (The downside of this was that people used to cut the thumbs off dead people to access their bank accounts).  Perhaps this might be a more sensible model to use in the developing world.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: nitpick</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21961</link>
		<dc:creator>nitpick</dc:creator>
		<pubDate>Thu, 10 May 2007 16:17:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21961</guid>
		<description>It's a rare document that doesn't benefit from either a date or a version number.  (I mean in the doc, rather than in the URL.)

The term FATF is expanded on page 10, not page 1 where first used.</description>
		<content:encoded><![CDATA[<p>It&#8217;s a rare document that doesn&#8217;t benefit from either a date or a version number.  (I mean in the doc, rather than in the URL.)</p>
<p>The term FATF is expanded on page 10, not page 1 where first used.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21956</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Thu, 10 May 2007 14:22:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21956</guid>
		<description>Sorry Ross, having begun reading your paper I see that you explicitly mention externalisation of risk on page one! Perhaps I should have written "...somebody who hadn't read your paper might assume..." Mea Culpa.</description>
		<content:encoded><![CDATA[<p>Sorry Ross, having begun reading your paper I see that you explicitly mention externalisation of risk on page one! Perhaps I should have written &#8220;&#8230;somebody who hadn&#8217;t read your paper might assume&#8230;&#8221; Mea Culpa.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JR</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21953</link>
		<dc:creator>JR</dc:creator>
		<pubDate>Thu, 10 May 2007 11:48:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21953</guid>
		<description>Dear Always,

Ross said "I found that phishing is facilitated by payment systems like eGold and Western Union which make the recovery of stolen funds more difficult".

You are trying to shift the discussion away from this issue. And you haven't presented a single argument why you think the US governmnt was wrong, except the rather subjective and irrelevant claim that you have lost money.</description>
		<content:encoded><![CDATA[<p>Dear Always,</p>
<p>Ross said &#8220;I found that phishing is facilitated by payment systems like eGold and Western Union which make the recovery of stolen funds more difficult&#8221;.</p>
<p>You are trying to shift the discussion away from this issue. And you haven&#8217;t presented a single argument why you think the US governmnt was wrong, except the rather subjective and irrelevant claim that you have lost money.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21947</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Thu, 10 May 2007 06:37:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21947</guid>
		<description>All very true Ross, although somebody who didn't know you might assume, from reading the above, that you believe that banks and regulators have the same goals regarding fraud.

It's become increasingly apparent that, for banks, a risk transferred is a risk reduced (a cornerstone of C&#38;P) and, if a bank can use "due diligence" to transfer risk cheaper than the cost of actually reducing it, that's what it'll do.</description>
		<content:encoded><![CDATA[<p>All very true Ross, although somebody who didn&#8217;t know you might assume, from reading the above, that you believe that banks and regulators have the same goals regarding fraud.</p>
<p>It&#8217;s become increasingly apparent that, for banks, a risk transferred is a risk reduced (a cornerstone of C&amp;P) and, if a bank can use &#8220;due diligence&#8221; to transfer risk cheaper than the cost of actually reducing it, that&#8217;s what it&#8217;ll do.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Always Anonymous</title>
		<link>http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21946</link>
		<dc:creator>Always Anonymous</dc:creator>
		<pubDate>Thu, 10 May 2007 06:34:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2007/05/09/follow-the-money-stupid/#comment-21946</guid>
		<description>Dear Ross,

Your paper is an interesting read and I thank you for publishing it to the public. Since I am in what you call the non banked online currency industy, (we call it the DGC industry) i.e. digital gold and silver currencies I have particular experience with the issues brought forth in your paper.

However, you have made one major ommission and I feel it does need to be brought to your attention.

Namely that I and the people in our industry which does include e-gold.com and its principals do not so much fear criminals and criminal activity as that can be dealt with easy enough if left alone to deal with it, but our concerns and real fear are of the US Federal and State governments.

The real risks are of the federal reserve itself and their various policing agencies sneaking around to kick in the doors of the company owners in the middle of the night to protect their currency monopoly under the guise of bogey men like child porn and terrorism. In fact, the company owners are being blamed and in some cases criminal charges have been brought for the fraud perpetuated by third parties.

So while you address the problems and realities well enough, you make no mention of the operating environment we find ourselves in.

It may be news to you that now 7 companies have had their doors kicked in within the last two years. This is a large number in such a small industry.

It begs the question: Who are the real criminals at work here?

The governments lack of understanding of our industy is causing many problems for many otherwise good people and it has been really incredibly sad to watch our industry be destroyed like this.

The e-gold situation is just one of many examples of an overreaching government out of control who can barely understand the markets they are attacking in lieu of trying to find a way to regulate them which in all reality is not even needed at all. What they need to do is step back and let us compete with the private Federal Reserve openly and that alone will improve the dollar and the crime rates will improve as a result.

Since there has been no effort to date to create a fair and reasonable  dialougue in a neutral environment to improve the situation across the industy and help the governmnet understand what they are doing, we now find ourselves in something akin to a wild west environment where good people with brains and talent are leaving the country in fear for their lives and futures. They are uprooting wives, children and homes and running off to Galt's Gulch in hopes of being able to operate a reasonable company in a free market.

The governmnet is destrying our industry and it needs to STOP NOW and start thinking clearly. We cannot fight crime and fraud if we are constantly being forced to jockey around just to stay out of jail, comply with overreaching regulations that dont even apply to our businesses in any real way and constantly are having our funds confiscated with no apparent look to actual law. 

I myself have lost over $100,000 USD in the last year. Not by fraud or crime no. I lost it by being a customer of companies who the government has decided to attack and confiscate. I have no recourse.

In some instances, the government has just confiscated entire companies and not even bothered to press charges.

That is theft. They are not setting a good example to the people.

So while your paper is valid on its face, it fails to address the real issues we face in the actual marketplace.

I understand that the government might not like it if they spent their money and got back a paper that attacked them. I forgive you.

In short, the federal government has become lawless and they are destroying the US Dollar and particularly destroying our efforts to create currencies that will help the people survive the coming collapse of the US Dollar.

it is my opinion that gold is now a crime and our industry is becoming victim to this crime.

Best regards,

Always Anonymous.</description>
		<content:encoded><![CDATA[<p>Dear Ross,</p>
<p>Your paper is an interesting read and I thank you for publishing it to the public. Since I am in what you call the non banked online currency industy, (we call it the DGC industry) i.e. digital gold and silver currencies I have particular experience with the issues brought forth in your paper.</p>
<p>However, you have made one major ommission and I feel it does need to be brought to your attention.</p>
<p>Namely that I and the people in our industry which does include e-gold.com and its principals do not so much fear criminals and criminal activity as that can be dealt with easy enough if left alone to deal with it, but our concerns and real fear are of the US Federal and State governments.</p>
<p>The real risks are of the federal reserve itself and their various policing agencies sneaking around to kick in the doors of the company owners in the middle of the night to protect their currency monopoly under the guise of bogey men like child porn and terrorism. In fact, the company owners are being blamed and in some cases criminal charges have been brought for the fraud perpetuated by third parties.</p>
<p>So while you address the problems and realities well enough, you make no mention of the operating environment we find ourselves in.</p>
<p>It may be news to you that now 7 companies have had their doors kicked in within the last two years. This is a large number in such a small industry.</p>
<p>It begs the question: Who are the real criminals at work here?</p>
<p>The governments lack of understanding of our industy is causing many problems for many otherwise good people and it has been really incredibly sad to watch our industry be destroyed like this.</p>
<p>The e-gold situation is just one of many examples of an overreaching government out of control who can barely understand the markets they are attacking in lieu of trying to find a way to regulate them which in all reality is not even needed at all. What they need to do is step back and let us compete with the private Federal Reserve openly and that alone will improve the dollar and the crime rates will improve as a result.</p>
<p>Since there has been no effort to date to create a fair and reasonable  dialougue in a neutral environment to improve the situation across the industy and help the governmnet understand what they are doing, we now find ourselves in something akin to a wild west environment where good people with brains and talent are leaving the country in fear for their lives and futures. They are uprooting wives, children and homes and running off to Galt&#8217;s Gulch in hopes of being able to operate a reasonable company in a free market.</p>
<p>The governmnet is destrying our industry and it needs to STOP NOW and start thinking clearly. We cannot fight crime and fraud if we are constantly being forced to jockey around just to stay out of jail, comply with overreaching regulations that dont even apply to our businesses in any real way and constantly are having our funds confiscated with no apparent look to actual law. </p>
<p>I myself have lost over $100,000 USD in the last year. Not by fraud or crime no. I lost it by being a customer of companies who the government has decided to attack and confiscate. I have no recourse.</p>
<p>In some instances, the government has just confiscated entire companies and not even bothered to press charges.</p>
<p>That is theft. They are not setting a good example to the people.</p>
<p>So while your paper is valid on its face, it fails to address the real issues we face in the actual marketplace.</p>
<p>I understand that the government might not like it if they spent their money and got back a paper that attacked them. I forgive you.</p>
<p>In short, the federal government has become lawless and they are destroying the US Dollar and particularly destroying our efforts to create currencies that will help the people survive the coming collapse of the US Dollar.</p>
<p>it is my opinion that gold is now a crime and our industry is becoming victim to this crime.</p>
<p>Best regards,</p>
<p>Always Anonymous.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
