November 2000 - cypherpunks-legacy

CDR: Web
by Tourvision 03 Nov '00

03 Nov '00

Dear Sirs, We are pleased to forward our Internet address where you will find some of our products. We are constantly updating to provide you whit complete information regarding our company as well as our new products under development. www.tourvision.net Thank you for visiting us! ______________________________________________________________________ Estimados señores, Les comunicamos nuestra dirección en Internet donde encontraran parte de nuestros productos. Seguimos trabajando para darles toda la información de nuestra empresa asi como los nuevos productos en preparación. www.tourvision.net Gracia por visitarnos!

1 0

CDR: core deletes vote-auction.com - rev 1.1
by Tom Vogt 03 Nov '00

03 Nov '00

replace "core" with "internic" in my previous mail - core is simply the registrar and has vote-auction.com still listed.

1 0

CDR: RE: Paranoid Encryption Standard (was Re: Rijndael & Hitachi)
by Carskadden, Rush 02 Nov '00

02 Nov '00

Are you guys still talking about the feasibility of a cipher that implements each AES candidate in turn with the same key? I don't really get this idea. Provided you were actually using the same key with each stage of the encryption, then your system is only gong to be as secure as the key of the first algorithm. In fact, it seems that if the key is compromised at any one point, then the entire system is shot, given that you know the algorithm (Kerckhoff's principle IIRC). Maybe I am misunderstanding. ok, Rush Carskadden -----Original Message----- From: Arnold G. Reinhold [mailto:reinhold@WORLD.STD.COM] Sent: Friday, October 27, 2000 12:29 PM To: Damien Miller Cc: John Kelsey; Bram Cohen; cryptography(a)c2.net; cypherpunks(a)cyberpass.net Subject: Re: Paranoid Encryption Standard (was Re: Rijndael & Hitachi) At 4:16 PM +1100 10/27/2000, Damien Miller wrote: >On Thu, 26 Oct 2000, Arnold G. Reinhold wrote: > >> simple way to combine the AES finalists and take advantage of all the >> testing that each has already undergone. And, IMHO, it is an >> interesting theoretical question as well. Even if the answer is >> "yes," I am not advocating that it be used in most common >> applications, e.g network security, because there are so many greater >> risks to be dealt with. But it might make sense in some narrow, high >> value, applications. > >What threat model do you propose that would require this? o Your opponent has the cryptologic capabilities of the a major world power o The content has very high value (multi-billion dollar deal, could bring down a government, could start a war) o Long term protection is required (30+ years) o You are in a position to properly secure the terminals at both ends 0 Efficiency is not a concern For example, a chief of state's personal diary, an opposition leader's communications, best and final bids on large projects, etc. > >I can't think of anything that isn't contrived and couldn't be served >by using 3DES. > In a way I see this question as how one should manage the transition from 3DES to AES. Does one keep using DES until the big day and then switch to AES? Or does a blended solution make sense in some cases? While I think there may be a use for something like a Paranoid Encryption Standard in very unusual situations, I don't wish to waste more of people's time arguing with those who say there's no need for it at all. I don't have any compelling evidence. It's pure speculation. I am really more interested in the theoretical "why not?" question, i.e. is there any real downside in combining ciphers in this way, besides efficiency? Conventional wisdom seems to be more cautious than I think is justified and I am trying to prove that. Arnold Reinhold

3 3

Re: CDR: ZKS and Ebola
by Anonymous 02 Nov '00

02 Nov '00

On Fri, 3 Nov 2000, Anonymous Remailer wrote: > Few points, in the wake of current ZKS-sold-out-no-we-did-not > discussions. > > First, do we all agree who the adversary is when ZKSs customer encrypts > traffic ? > > Is that the neighbor, the employer, the insurance company, ISP, > Microsoft, her husband, or the government ? All entities on this list > except one can be effectively neutralized with single-DES and free > Anonymizer.com access. The government is the only one that can do decent > multi-network tracing and break some ciphers. One needs ZKS because one > wants to get protection from the government. It seems to me that the list of adversarys is longer than you think. Don't forget we're living in a world where corporations are as big economically as small countries. The insurance company, ISP, Microsoft, and possibly employer can afford a DES cracker. The ISP is obviously on the direct path for interception, as is the employer if she's using the internet at work. Microsoft presumably has some nice backdoors built in as well. Although many of these entities have don't a burning desire to know what you're doing online, this isn't always the case, especially in a world where your ISP is also a content provider who wants to make sure you're not infringing it's copyright, your insurance company wants to know when you do a google search on "AIDS" and your employer wants to keep you from selling secrets to competitors.

1 0

CDR: any good idea?
by Kenix 02 Nov '00

02 Nov '00

hi all, suppose we have two numbers, one is serial added(about 8~10 digits), another is a random number(about 7~12 digits), then how can i generate a 5 digits number depends on both of them? there shouldn't have any key so i can verify the 5-digit number later just use the pervious two numbers, i know the security is completely depends on the method that how to generate this 5-digit number. any good method you all can hint me? any good random number generator? TIA. Kenix

4 3

CDR: ZKS and Ebola
by Anonymous Remailer 02 Nov '00

02 Nov '00

Few points, in the wake of current ZKS-sold-out-no-we-did-not discussions. First, do we all agree who the adversary is when ZKSs customer encrypts traffic ? Is that the neighbor, the employer, the insurance company, ISP, Microsoft, her husband, or the government ? All entities on this list except one can be effectively neutralized with single-DES and free Anonymizer.com access. The government is the only one that can do decent multi-network tracing and break some ciphers. One needs ZKS because one wants to get protection from the government. Many crypto startups try to live in denial about this basic fact, and attempt to bank on fears from "hackers", wifes and similar. That is all bullshit. We need good crypto and good anonymity because we do not want governments to listen on us. Wives, bosses and ISP droids can be taken care of with freeware that can be easily found. Government has to know what goes around, very much like living organisms need immune system to detect undesired entities and then kill them. In order to kill, one must detect first. And that is why governments will never allow effective (1) crypto, that is except suicidal governments. The first use of effective crypto will be to replace government-based money with private currencies and so reduce the cost of doing business by removing the tax part. Governments exist because a) they can see the money, b) they can force you to use it and c) they can take it away ("tax"). What do you think the reaction of armed thugs will be when they find out that they will not be able to do a, b c ? They will call the CEO of crypto provider for a friendly chat. Crypto+anonymity is AIDS for the government. It disables the immune system and will eventually kill the creature. Thinking that the creature will tolerate virus generators within its own corporate establishment is just plain silly, Canada or not. Now, Zanzibar is a different story - look it up. (1) by "effective" I assume the one that achieves the goal - hard AND widespread AND anonymous. PGP may be "hard" crypto, but it is used by irrelevant percentage of population.

1 0

CDR: Continuing: White House email mystery
by George＠orwellian.org 02 Nov '00

02 Nov '00

There was a blurb about the non-backed-up emails somewhere... Apparently, many more are missing than was originally told the judge. Oh! [hits head] Of course: judicialwatch.org will have the links... [ oh my gawd, Albright was just on TV, and I thought for a moment she was Halloween-dressed as Grandpa Munster! ] Here are the new URLS: http://www.washingtonpost.com/wp-srv/aponline/20001031/aponline185112_000.h… http://judicialwatch.org/press_release.asp?pr_id=670 http://www.judicialwatch.org/otherserver/2000/wt110100.gif

1 0

CDR: Parties
by A. Melon 02 Nov '00

02 Nov '00

Rush rapped: > Glad to hear that all it takes to "get your vote" is a reckless executive > pardon of criminals that is designed to utilize executive > power to bypass the checks and balances system and negate the efforts of the > legislative and judicial branches of government Spoken like a true fascist. What the fuck do you think executive pardon is but just another "checks and balances"? The fact is that it's the criminal scum in power at the moment who are fucking the constitution with their dirty little "war on some drugs". Basic 1st Amemdment freedom of religion went right down the drain with the very first drug law. It's religious persecution pure and simple, nothing more, nothing less. Harry Browne should go further, if elected he should not only pardon every person ever convicted of a drug or gun offense, but he should order the immediate arrest of anyone who ever voted for a drug or gun law, and who ever enforced these despicable illegal laws. Take your stupid babbling about your phoney politics elsewhere -- it has no relativity to cypherpunks.

4 4

CDR: O ZOO de Lisboa está na Giganetstore.com
by apoio＠giganetstore.com 02 Nov '00

02 Nov '00

Desta vez a giganetstore.com <http://www.giganetstore.com> tem uma surpresa muito especial para si... <http://www.giganetstore.com/index.asp?produtoId=7327> Golfinho gigapreço 8.900$00 <http://www.giganetstore.com/index.asp?produtoId=7328> Jogo Zoo gigapreço 4.900$00 <http://www.giganetstore.com/index.asp?produtoId=7330> Leão gigapreço 29.900$00 <http://www.giganetstore.com/index.asp?produtoId=7332> Livro do Zoo gigapreço 2.990$00 <http://www.giganetstore.com/index.asp?produtoId=7331> Relógio Bolha de Água gigapreço 2.900$00 <http://www.giganetstore.com/index.asp?produtoId=7329> Tshirt Zoo gigapreço 7.900$00 <http://www.giganetstore.com/index.asp?produtoId=5564> Enc.Ciências Natureza gigapreço 6.900$00 <http://www.giganetstore.com/index.asp?produtoId=5704> Enciclopédia da Natureza gigapreço 10.500$00 <http://www.giganetstore.com/index.asp?produtoId=5730> EyewitnessVirtualReality: Bird gigapreço 4.900$00 <http://www.giganetstore.com/index.asp?produtoId=5729> EyewitnessVirtualReality: Cat gigapreço 4.900$00 <http://www.giganetstore.com/index.asp?produtoId=5717> MuseuVirtualAves gigapreço 9.450$00 <http://www.giganetstore.com/index.asp?produtoId=703> Rain Forest gigapreço 4.990$00 <http://www.giganetstore.com/index.asp?produtoId=5800> NationalGeographic - 70 gigapreço 8.250$00 <http://www.giganetstore.com/index.asp?produtoId=5801> NationalGeographic 80-90 gigapreço 8.250$00 <http://www.giganetstore.com/index.asp?produtoId=5798> NationalGeographic 40-50 gigapreço 8.250$00 Quer ajudar o ZOO de Lisboa? CLIQUE AQUI!! <mailto:nmm@giganetstore.com> UM DIA NO ZOO... ....... ................. ...................... .... Para retirar o seu email desta mailing list deverá entrar no nosso site http://www.giganetstore.com , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0

CDR: WEEKENDS SPORTS SCHEDULE!!!
by accounts＠betworldwide.com 02 Nov '00

02 Nov '00

1 0