September 2000 - cypherpunks-legacy

CDR: Re: Lions and Tigers and Backdoors, oh, my...
by Michael Motyka 28 Sep '00

28 Sep '00

DH wrote : >One very common security model is that the security perimeter includes >the PC and you're only concerned with transmission interception. > Definitely the wrong place to draw the dotted line if you're truly worried about your information. >MS is swiss cheese but most OS have some weakness in many configs. > >How many people actually look at the source of the code they >install on *nix machines??? How many of those who do are actually qualified >to do security reviews? Cf. recent PGP bugs. > Not enough. >If you're really worried you'd use a sealed PDA (that you can control at >all times) to capture/render and the PC is just for transport. [This >applies Tim's modularity argument to hardware.] > >I'd consider a Starium unit a dedicated PDA in this context. > >Of course, both PDA and Starium remain succeptible to shoulder surfing, bugs, >your windows modulating a laser, etc. > >dh > Using an embedded system is not a new topic here. I think its the only viable method of securing data. On that note, given the little wireless gizmo of Tim's description, the device could have, via appropriate applications on the insecure host/transport gateway, access to a services on the host that would expand its list of resources without compromising security. The obvious useful resources are the network and mass storage though other i/o might be interesting. All storage of course would be encrypted and never available as plain text on the host. Any i/o used should not carry information that is to be kept private, only as a means to transport non-critical data into the PDA. What is required is a PDA that is open sourced all the way down to the HW. Is the Palm this way? I think I've asked this before but frankly I don't remember the answer. There are probably others that are OK. Yopy looks interesting. Which ones will still be around in a couple of years?

1 0

CDR: Re:
by sunder 28 Sep '00

28 Sep '00

> sjstapler wrote: > > Hi, > > I received an e-mail about this organization but, so far, I've not been able to find out any more information about it. > I've tried looking for the articles that the e-mail mentioned with no luck. Where is it located? > > I would appreciate any information you can give me. > > Steve I'm curious, where did you receive an email about this organization and what did that email claim? This isn't an organization it's a set of mailing lists for discussions relating to cryptography - at least most of the time. -- ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :Surveillance cameras|Passwords are like underwear. You don't /|\ \|/ :aren't security. A |share them, you don't hang them on your/\|/\ <--*-->:camera won't stop a |monitor, or under your keyboard, you \/|\/ /|\ :masked killer, but |don't email them, or put them on a web \|/ + v + :will violate privacy|site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0

CDR: digsig frenzy follies
by A. Melon 28 Sep '00

28 Sep '00

The label "digital signature" for nonrefutable cryptostrong sigs is going down in flames. A DTMF pulse counts as a signature Oct 2. Tuesday September 26 09:15 PM EDT E-signatures for 30 million laptops By Ben Charny, ZDNet News Touchpad maker Synaptics Inc. will bundle digital signature software with its newest products and make updates available to existing users. Touchpad maker Synaptics Inc. has announced a deal that could create electronic signatures for more than a third of the laptops on the planet. The company said Tuesday it will begin to bundle its touchpads, which are used on roughly 40 percent of the worlds laptops, with digital signature software from Silanis Technology Inc. of Montreal. Owners of an estimated 30 million laptops that use Synaptics touchpads can also download a free version of the Silanis ApproveIt software from either the Silanis or Synaptics Web sites. The deal is one of the first of several product announcements expected prior to Oct. 1, when the Electronic Signatures in Global and National Commerce Act takes effect. The new federal law makes electronic signatures legally binding. Jupiter Communications senior analyst James Van Dyke said the deal answers a piece of the electronic signature problem, including distribution. Van Dyke said a bigger problem is the current lack of standards for electronic signature makers. "Its a good move for Synaptics, it will only cost a little and it puts them in a good position," he said. "But, we are going to be in standards hell for a while. You can feel the flames." Shipping in 2001 The first e-signature enabled touchpads will be shipped to Synaptic users such as Apple Compaq, Dell, Gateway and Hewlett Packard sometime next year, said Synaptics spokewoman Mariel Van Tatenhove. The software embeds a signature token into a document. Inside the token are the guts of a digital signature, including a time stamp and the public and private keys. It also will include a digitized version of a users handwritten signature. The signature will appear on the document. The software to be bundled on Synaptics touchpads is a stripped down version of ApproveIt, which normally allows from multiple signatures on the same document. But the bundled software will only allow for a single signature on Microsoft Word and Excel documents. The software available on the websites is called OnSign, which Synaptics introduced in July. It works for Word documents. It too only lets one signature per document. The OnSign software has been downloaded more than 65,000 times since its introduction July 5, said Silanis spokesman Mary Ellen Power. By years end, she expects more than 100,000 downloads. The site is averaging a download every two minutes, she said. http://dailynews.yahoo.com/h/zd/20000926/tc/e-signatures_for_30_million_lap…

1 0

CDR: SSZ down due to power outage
by Jim Choate 28 Sep '00

28 Sep '00

Hi, There was a power outage this morning around 10am. The dogs couldn't remember the correct password to get it back up so they had to wait until I got home. Hopefully we won't have a relapse. ____________________________________________________________________ He is able who thinks he is able. Buddha The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

CDR: visor phone vs. starium?
by A. Melon 28 Sep '00

28 Sep '00

from the clueless dept: Why would I want a PDA-phone hybrid? Why do I have the uneasy feeling the newly announced Motorola/Palm product, due in 2002, may end up combining everything Palm knows about cell phones with everything Motorola knows about personal organizers? Is it that none of the current devices even comes close to being useful for most people who already own a cell phone and a PDA? Dont take my word for it: Check out the MobilePlanet and iGO catalogs, where the latest wireless wonders are all on display. Sure, theyre cool, but are they useful? And how about those new devices that are supposed to turn Palms and Visors into cell phones? Give me a break -- Im supposed to talk into something that looks like that? How useful can the combination really be? Cool? Yes. Practical? Hardly. And $299 seems a bit steep. Is this really necessary? <snip> http://dailynews.yahoo.com/h/zd/20000926/tc/keep_your_phone_off_my_palm__1.… The real issue will be power consumption vs. mips for crypto. And user interfaces.

1 0

CDR: BOUNCE cypherpunks@einstein.ssz.com: Admin request of type /\bs ubscribe\b/i at line 3 (fwd)
by Jim Choate 28 Sep '00

28 Sep '00

____________________________________________________________________ He is able who thinks he is able. Buddha The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- -------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Thu, 28 Sep 2000 19:10:54 -0500 From: owner-cypherpunks(a)ssz.com To: owner-cypherpunks(a)einstein.ssz.com Subject: BOUNCE cypherpunks(a)einstein.ssz.com: Admin request of type /\bs ubscribe\b/i at line 3 >From owner-cypherpunks(a)ssz.com Thu Sep 28 19:10:52 2000 Received: (from cpunks@localhost) by einstein.ssz.com (8.8.8/8.8.8) id TAA02106 for cypherpunks(a)ssz.com; Thu, 28 Sep 2000 19:10:51 -0500 Received: from mail.virtual-estates.net (root(a)video-collage.com [160.79.196.177]) by einstein.ssz.com (8.8.8/8.8.8) with ESMTP id TAA02058 for <cpunks(a)ssz.com>; Thu, 28 Sep 2000 19:10:42 -0500 Received: (from cpunks@localhost) by mail.virtual-estates.net (8.9.3+3.2W/8.9.1) id LAA28118; Thu, 28 Sep 2000 11:09:31 -0400 (EDT) X-Authentication-Warning: video-collage.com: Processed from queue /var/spool/mqueue-majordomo X-Authentication-Warning: video-collage.com: Processed by cpunks with -C /usr/local/majordomo/sendmail.cf Received: from hotmail.com (law-f257.hotmail.com [209.185.130.173]) by mail.virtual-estates.net (8.9.3+3.2W/8.9.3) with ESMTP id LAA28108 for <cypherpunks(a)algebra.com>; Thu, 28 Sep 2000 11:09:30 -0400 (EDT) X-Relay-IP: 209.185.130.173 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 28 Sep 2000 08:10:31 -0700 Received: from 166.90.192.98 by lw1fd.hotmail.msn.com with HTTP; Thu, 28 Sep 2000 15:10:31 GMT X-Originating-IP: [166.90.192.98] From: "Gil Hamilton" <gil_hamilton(a)hotmail.com> To: cypherpunks(a)algebra.com Old-Subject: Natural rights (was Re: Shunning, lesbians and liberty) Date: Thu, 28 Sep 2000 15:10:31 GMT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: <LAW-F257vR0WssM5sGm000063f6(a)hotmail.com> X-OriginalArrivalTime: 28 Sep 2000 15:10:31.0978 (UTC) FILETIME=[3E91C8A0:01C0295E] Subject: Natural rights (was Re: Shunning, lesbians and liberty) Sampo Syreeni writes: >Actually I s ubscribe to neither view. I see rights as something that do not >naturally exist, but are purely a societal product, subject to change >through redefinition. Whether this happens because the government effects >it >or if the people start to view something as an inherent right is, to me, >immaterial. At heart, the notion of a right is a moral one; it is closely tied to the moral concepts of good and evil. These concepts are known and understood universally among members of our species. Some view them as attributes of their religious belief, but even those who aren't religious and don't think in terms of "sin" recognize the concepts. The idea of right versus wrong is clearly both natural and universal to humankind. While individuals' beliefs as to exactly which "natural rights" exist may differ, all people (save some tiny few sociopaths who must be considered "abnormal") agree on some of them. For example, if you did a poll, you'd find that pretty near 100% of people believe at some level that they have a right to protect their own lives and the lives of their family members. The limits or boundaries of that right would of course be the subject of considerable dispute. A frequent critique of libertarianism (and anarcho-capitalism) is that it advocates a law-of-the-jungle, winner-take-all society: that the strong, the wealthy and the powerful prosper while the weak, the poor and the powerless are doomed to suffering, exploitation and oppression. However, it is this idea that natural rights do not exist, that any right you have is something that can simply be taken away by "society" (in practice of course that means the government), that is the real law-of-the-jungle situation. It is saying, in effect: you have no rights except those "we" (variously defined as society or government, but it always boils down to the Men With Guns from the government) allow you. "And don't complain too loudly or we might have to take those away too" (for the chiiiiiildren, perhaps). I and most others on this list utterly reject that crap. As James Donald's .sig used to say (and maybe still does): "We have the right to defend ourselves and our property, because of the kind of animals that we are." You can't take away my right to defend myself by simply "redefining" it. And anyone who tries to do so has marked himself as one worth careful watching, or even perhaps, as Tim so often suggests, killing. - GH _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

1 0

CDR: Shanah Tovah
by your_friends＠socialplus.com 28 Sep '00

28 Sep '00

SHANAH TOVAH from your friends at JewishMatch.com (owned and operated by SocialPlus.com) We are a leading provider of customized, turnkey solutions that enables your website users to meet each other for the purposes of companionship, dating and hopefully, marriage. With the New Year upon us and our renewed vows of bettering the world and performance of good deeds, what an ideal time to help Jewish singles! While providing your members with the most technologically advanced internet dating service, by linking us from your home page, you will get: - Added revenues: No costs whatsoever, just cash for you and value added service for your members. - Greater frequency and duration of site visits ("stickiness"). - Increased organizational value. - Activity reports of your members, 24/7. Our powerful and feature rich ASP (Application Service Provider) software is currently being used by numerous Company-owned and operated communities and over 700 Partners and Affiliate sites around the world, including "The Jerusalem Post." Won't you please take just a few seconds to peruse our site at http://www.jewishmatch.com to enable us both to perform this vital 'mitzvah.' We look forward to explore in greater detail the synergies of a strategic online alliance and a rewarding business involvement. With best wishes for the New Year 5761, I remain, Cheryl M. Gilan Director of Business Development JewishMatch.com mailto:cheryl@socialplus.com Tel: (212) 244-7779 Cell: (917) 523-6750 P.S. Please do not hesitate to contact me at the above numbers. Should you wish to get started right away, you can do so at http://www.jewishmatch.com/affil and you will be on your way _____________________________________________________________________________ If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and you will automatically block you from their future mailings.

1 0

CDR: Confirm your request to register for eGroups
by eGroups 28 Sep '00

28 Sep '00

Hello, You are receiving this because someone has requested to register the email address cypherpunks(a)toad.com with eGroups, a free email group service. To complete your registration, we need to verify that your email address is valid and that you do wish to register with our service. To continue with registration, please follow the confirmation steps below: 1. Go to the Web site: http://www.egroups.com/register?confirm 2. Enter the following authorization number: 53555 To access the eGroups Web site, please visit: http://www.egroups.com If you did not request, or do not want, an eGroups account, please accept our apologies and ignore this message. Regards, eGroups Customer Support IMPORTANT NOTE: If you believe your email address has been registered with eGroups without your consent, please forward a copy of this message to abuse(a)egroups.com

1 0

CDR: News From TroppoLotto
by TroppoLotto 28 Sep '00

28 Sep '00

News From TroppoLotto Hello Fgjfgj! Its Back! Our guaranteed $1,000 instant win promotion has been such a success that we are giving you another chance to win $1,000 INSTANTLY! No waiting, no wondering... just easy money won the fun way! How do you know if you are a ,000 INSTANT WINNER? It's very simple! Play TroppoLotto like you usually do. If you are an INSTANT winner, you will get a window AFTER your play to let you know you won. Of course you will also be entered to win the daily $1,000,000 jackpot! Try your luck now: http://www.troppolotto.com/clickthrough.php3?rid=195 Fgjfgj, TroppoLotto has teamed up with ice.com to bring you even MORE FREE prizes! That's right for a limited time you can win valuable gift coupons* good on any jewelry at ice.com Match 2 out of 7 for a $20 gift coupon* Match 3 out of 7 for a gift coupon* ICE, the leading online jeweler, is dedicated to bringing you jewelry for every day. ICE has jewelry for all aspects of your life-whether at play or work, in denim or silk, at home or on the town. ICE has jewelry for your style. Visit Ice.com today and see why jewelry lovers have made it a top favorite on the Web. Free gift boxing and no-risk 30-day return priveleges. Treat yourself today! http://www.troppolotto.com/partner.php3?rid=176 *limit one coupon per customer Good luck to you! The TroppoLotto Crew P.S. As always, your privacy is our utmost concern. Please visit our Privacy Policy at http://www.troppolotto.com/partner.php3?rid=177 if you have any questions. (c) Copyright 2000 Trancos, Inc. / All Rights Reserved.

1 0

CDR: Re: Choate physics again
by Michael Motyka 28 Sep '00

28 Sep '00

>>By the time the coherent radiation (needed to make an image) passes > >Were not talking holograms, Jimmy-boy > It is fun isn't it? I think what he was trying to convey were the effects of reflection, absortion and diffusion. Without having tried one of these devices or knowing what wavelengths they use or the characteristics of building materials at these wavelengths all I have is a gut feeling that says you'll get not so much images as locations. He's probably right about the windows being the primary vulnerability. Next time I'm at Home Debit I'm going to see if they sell more kraft paper or foil-faced insulation. Seems to me the foil is less common than it used to be. Is this a new conspiracy? Fibreglass-AG? So, if you're expecting to be raided and you don't want the fuggers to know where you are, keep the house at about 95. That should help. For about 15 seconds. If you have an illicit heat source insulate it, cool it with water and dump the heat down the drain or on the yard. Mike

2 1