December 2003 - cypherpunks-legacy

Re: Micropayments: myth?
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 10:05 PM 6/6/96 -0400, Jeff Barber wrote: >Or are you saying that each IP packet will have an appropriately sized >digital cash payment attached? That seems like too much overhead. >And besides, that contradicts your idea that the user would explicitly >approve each wallet access. > >It gets even worse if you're an ISP, you obviously can't sit there >and approve each session that goes by (even if you could distinguish >higher level session boundaries which you won't be able to do). Are >you just to assume at the end of the day that everything worked >perfectly and you received enough revenue to cover your costs without >knowing anything about the payment/usage profiles of any of your >customers? And how is the ISP's network provider to know how much to >charge the ISP? I think I'm starting to sound like a broken record, so I'll stop with this post. Some of the issues you are discussing are addressed by the Digital Silk Road proposal from Norm Hardy and Dean Tribble. See: http://www.agorics.com/agorics/dsr.html Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

SF Bay Area Physical Cpunks Meeting, June 8th, Stanford Turing Aud
by Just Rich 17 Dec '03

17 Dec '03

This Saturday, Turing Auditorium, Noon-5. Unrestricted Ethernet connectivity (both thinnet and 10BaseT) will be available; email me for an IP address. Turing Aud has a Mac and a PC on the Net connected to an EXCELLENT presentation system. If you have something you'd like to show off, this is the place, and we're still short on topics. Graphical actualizations of ideas raised at the last meeting regarding crypto GUIs would be one way to use the space. The agenda is rather slim... Hugh was working on it, but nobody seems to have anything to say. If we get really desperate for ideas, I might end up talking about what I've REALLY been doing for the last five months. Dave Harman will probably miss this one, but he's still invited. Long, anal form of the directions follows. -rich When: June 8th, Noon-5. Where: Turing Auditorium, Stanford University. Directions and maps below. Your Hosts: Hugh Daniels <hugh(a)toad.com>, speaker wrangler/emcee Rich Graves <llurch(a)networking.stanford.edu>, venue/den mother/fucking * Amenities: * Seating for 100 (should be enough) * Plenty of white boards * Air conditioning * High-end Mac and Windoze PC on the Internet, both hard-wired into an EXCELLENT projection system, 800x600x16-bit or so * Open 10Base2 and 10BaseT Ethernet drops for your laptop, no firewall to Net; email rich(a)c2.org for IP address * One analog phone * NO munchies within 5 minutes' walk, but Rich will bring bagels * NO plugging your own laptops into the projection system; however, the Mac will have an X server and, of course, web clients Dinner: Fanny & Alexander's? Or Jing Jing again? Directions: If you have a GPS receiver, head for 37.4296875N 122.1783752E. If you have excellent hearing, call 415-853-9080 and follow the ringing. Or, get to Stanford's Campus Drive via 280-Sand Hill or 101-El Camino Real-Embarcadero. From 280, take Campus Drive left (clockwise). From 101, take Campus Drive right (counterclockwise). Turn South (centripetal) at Panama Street and take an immediate left into the Jordan Quad parking lot (empty on weekends). Walk between Pine and Redwood Halls to Polya. Turing is between Polya and Cypress. It doesn't appear on most campus maps, but it's there, honest. Entrance to Turing Auditorium is by the Pac Bell payphone sign. Maps: http://www-leland.stanford.edu/group/Transportation/PGrid4.html (parking) http://www.stanford.edu/gifs/campus.1620-63-4.gif (800K campus map) http://www.stanford.edu/home/visitors/vicinity.html (note: upside down!) Socialized transportation: CalTrain to the Palo Alto station; 20-minute walk or arrange to be picked up by a local. 7F bus. See http://www.stanford.edu/group/Transportation/ -rich quidquid latine dictum sit, altum viditur

1 0

Re: Where does your data want to go today?
by Chris Adams 17 Dec '03

17 Dec '03

On 30 May 1996 07:56:26 pdt, EALLENSMITH(a)ocelot.Rutgers.EDU wrote: >From: IN%"mclow(a)owl.csusm.edu" "Marshall Clow" 29-MAY-1996 19:18:31.60 > >>* Why encrypt before compression? If the encryption is any good, then the >>encrypted data won't compress much at all. However, compression before >>encryption has its own problems. > > What problems does compression before encryption have? It at least >seems to work for PGP. The most significant would be the presence of a compression header (what has the data telling how to decompress a datastream). If you leave this in (for instance, assuming you were to use PKZIP (STUPID!) you would have PK as the first two bytes EVERY TIME!) you give your codebreaker a HUGE advantage. You can bypass this by removing ANY information which isn't message specific and standardizing on one compression method. Alternately, you could use your session key to encrypt a length word and then pad the start (and end) with a string of random characters. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: [Off-Topic] "Curfews"
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 6 Jun 96 at 17:55, jim bell wrote: > At 02:47 PM 6/6/96 +0000, Jean-Francois Avon wrote: > >On 6 Jun 96 at 11:19, jim bell wrote: > > > > > >> >>I _do_ believe, however, that the number of people > >> >>unjustifiably targeted will be rather low. <snip> Retaliation > >> >>is possible, in > >> >> that case. > > > >Sorry Jim, I did not get that at all in the past. I assumed a > >context where the inner workings of AP would not be well understood > > by the population while here, you seems to indicate that everybody > > would operate under the threat / deterrance of mutual anihilation > >principle. > > Hmmm... sorry, I thought that was obvious. Well, perhaps not > "obvious," but it's one of those facts that will become second > nature to people once AP starts up. Well, yes and no. What made me change my mind is when I tried to see the situation from the standpoint of a guy from a thuggish mentality. Actually, it might not deter somebody else acting on the spur of the moment. Take a typical harsh divorce situation where peoples act in the most surprisingly irrationnal way. I think that ex-husbands or wifes would get targeted more than their fair share, and quite often, without any reasonable cause. JF DePompadour, Societe d'Importation Ltee; Limoges porcelain, silverware and crystal JFA Technologies, R&D consultants: physicists, technologists and engineers. PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891

1 0

Re: [Off-Topic] "Curfews"
by jim bell 17 Dec '03

17 Dec '03

At 02:47 PM 6/6/96 +0000, Jean-Francois Avon wrote: >On 6 Jun 96 at 11:19, jim bell wrote: > > >> >>I _do_ believe, however, that the number of people unjustifiably >> >>targeted will be rather low. <snip> Retaliation is possible, in >> >> that case. > >Sorry Jim, I did not get that at all in the past. I assumed a >context where the inner workings of AP would not be well understood >by the population while here, you seems to indicate that everybody >would operate under the threat / deterrance of mutual anihilation >principle. Hmmm... sorry, I thought that was obvious. Well, perhaps not "obvious," but it's one of those facts that will become second nature to people once AP starts up. >A argued that an impulsive guy might target somebody unjustifiably >while I overlooked that he could think twice before doing so. But by >his nature, being a violent or thug at heart, he will understand this >"peace based on threat" maybe even better than a pacifist at heart. >So, my arguments might not stand. As can be expected, people will be looking out for themselves in an AP-dominated system, just as today. I think most people will have a fairly good idea who's targeting them if the hit's not justified. Almost every justified hit can be fairly anonymous. Jim Bell jimbell(a)pacifier.com

1 0

Fwd: Re: Clipper III analysis
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Thu, 30 May 96 01:16:32 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Clipper III analysis > On 29 May 1996 14:53:30 pdt, tcmay(a)got.net wrote: >> A good Questioned Document Examiner will be able to demonstrate >> that the signed document in question was not authored by Joe >> Blow, even if it contains his digital signature. > >I was of course talking about digital signatures, not handwritten signatures. > >I would be very interested to hear how a "Questioned Document Examiner" can >possibly determine that a digital signature was not applied by a particular >person. I believe he was referring to document analysis. By closely comparing a questionable work with those of known authorship, a skilled analyst can hopefully find enough [dis]similarities to say whether a document was authored by a given person. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: Possible out-of-US remailer sites, 2nd edition
by Chris Adams 17 Dec '03

17 Dec '03

From: stewarts(a)ix.netcom.com To: Adamsc Date: 31 May 1996 05:28:24 pdt Subject: Re: Possible out-of-US remailer sites, 2nd edition >_Country/Area_ _Name_ _Email_ >Anguilla Cable & Wireless webmaster(a)candw.com.ai >Anguilla Offshore Information Services*** info(a)offshore.com.ai There are a number of small countries that aren't part of the US/European/Chinese/Singaporean Hegemonies, where telecom is expensive and Fidonets and uucp are the way to get email there. If you're willing to pay some money to support one, you might get some real anonymity for financially critical data. Also, there are periodic articles in magazines like Wired about how George Soros is wiring the Balkans; perhaps someone there would like to make some money running remailers. If you are willing to go that route, you can setup a Fidonet mailer VERY easily, and send mail that looks like it is from any of the 36000 bulletin boards in the nodelist. Generally it will be refused by a board that has a session password. However, it is exceedingly unlikely that a bbs in Singapore would have a passworded session with a bbs in Texas. You could send it randomly to a BBS using the name of another random board. However, this would probably be very very very UNPOPULAR, particularly if someone got nailed because of it. It would be better to work it out with some sysop in a small 3rd world country... Alternately, if you were to run a board, it is VERY simple to fake the addressing on a Fidonet mail packet... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: Possible out-of-US remailer sites, 2nd edition
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Fri, 31 May 96 23:06:02 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Possible out-of-US remailer sites, 2nd edition > From: stewarts(a)ix.netcom.com To: Adamsc Date: 31 May 1996 05:28:24 pdt Subject: Re: Possible out-of-US remailer sites, 2nd edition >_Country/Area_ _Name_ _Email_ >Anguilla Cable & Wireless webmaster(a)candw.com.ai >Anguilla Offshore Information Services*** info(a)offshore.com.ai There are a number of small countries that aren't part of the US/European/Chinese/Singaporean Hegemonies, where telecom is expensive and Fidonets and uucp are the way to get email there. If you're willing to pay some money to support one, you might get some real anonymity for financially critical data. Also, there are periodic articles in magazines like Wired about how George Soros is wiring the Balkans; perhaps someone there would like to make some money running remailers. If you are willing to go that route, you can setup a Fidonet mailer VERY easily, and send mail that looks like it is from any of the 36000 bulletin boards in the nodelist. Generally it will be refused by a board that has a session password. However, it is exceedingly unlikely that a bbs in Singapore would have a passworded session with a bbs in Texas. You could send it randomly to a BBS using the name of another random board. However, this would probably be very very very UNPOPULAR, particularly if someone got nailed because of it. It would be better to work it out with some sysop in a small 3rd world country... Alternately, if you were to run a board, it is VERY simple to fake the addressing on a Fidonet mail packet...

1 0

Re: whitehouse web incident, viva la web revolution
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

On Wed, 5 Jun 1996, Bruce Baugh, wrote: > > Fascism [...] is a theory of economics, > > basically, in which the state has ultimate authority over production and > > distribution without (as in socialism) actually _owning_ the means of > > production or distribution. . At 11:18 AM 6/6/96 -0700, Rich Graves wrote: >Yes, I'm afraid these ahistorical myths are widespread. What _do_ they teach >in these schools? As usual you display profound ignorance of history and politics. Far from being an ahistorical myth, this is an entirely accurate description of fascist ideology: Or do you claim that Mussolini, Peron, etc, were not fascists? Mussolini was the one who coined the name fascism. The theory and ideology of fascism was developed by the philosopher Giovanni Gentile, and there is nothing particularly racist or right wing about either Gentile or Mussolini. Fascism is not Republicanism on steriods, nor is it racism. Fascism is basically romanticism plus socialism plus nationalism. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: [crypto] crypto-protocols for trading card gam
by Chris Adams 17 Dec '03

17 Dec '03

On 29 May 1996 18:57:58 pdt, alanh(a)infi.net wrote: >What _did_ Solitaire do for Windows 3.1? Distract the attention of >the unwashed masses away from the actual merits of the beast? Actually, I believe it covered a direct lack thereof. (Of course, you could have been intending this in a heavily sarcastic form. In that case, I agree entirely) This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Anonymous stock trades.
by hallam＠Etna.ai.mit.edu 17 Dec '03

17 Dec '03

>I suppose it depends on what you call "open", eh, Phill? >If by "open", you mean financial markets where, as Milton Freedman says, >each new regulation raises the cost of entry and protects the surviving >firms by killing their smaller competion with red tape, then we have "open" >markets. Well, Milton Friedman's method for saving the whale is to leave it to the free market, if people want whales in the oceans they won't buy whale meat. The point that even if no US person eats whale, a few thousand "gourmets" in Japan can eat their way through the remaining stocks of many species in a few years escapes him. So forgive me if if find you authority somewhat less than compelling. Adam Smith makes the point rather better in his analysis of monopolies and how they affect the market. But remember that although regulations may be instituted as protectionist mechanisms that is not the only purpose that regulations are introduced. >If by "open", you mean that people can't purchase the attention of their >favorite politician fair and square, without having to play zero-sum games >with barnyard animals, then we have "open" markets. ;-). There are so many negatives in that sentence I can't figure out which way you are arguing. Certainly there are many senators, congressman etc who can be bought for a contribution to their election fund or a huge advance on their memoirs. >Nothing personal, Phill, but it does seem like it's more a question of what >you're afraid of, than what *is*, right? No, it is a case of whether you are applying ideological judgements or prepared to analyse the system itself. I do not believe in the idol of the free market. I do not consider ecconomists to have justified the level of inane self-satisfied certainty about their field that they exude. I was talking to a professor at the Sloane school yesterday who made precisely this point. Deciding what is right implies an ethical judgement. Are you basing your argument on Kantian or consequentialist assumptions? I can argue either but since most of my thesis is based on a logical positivist approach I'm far more sympathetic to the utilitarian point of view. The free market is not in itself an ethical basis - that would be creating an ought from an is. The problem which libertarian idelogues are affraid to face up to is that markets have required regulation to keep them open and free. Its all very well for people to jump up and down, stampt their feet and claim the opposite but this is what every government in the free world believes. The effects of deregulation in the savings and loans area make it unlikely any further experiments in that area will be tried for a while. Phill

5 13

Re: Norton Eyes only
by minow＠apple.com 17 Dec '03

17 Dec '03

> >Has anyone been able to analyse the 'patent pending', 'on-the-fly' >encryption in Norton's 'For your eyes only'? > Why bother? If it's freely exportable, we have a good estimate of it's cryptographic strength :-) Martin.

1 0

Re: ID this 31173 NCR keyboard
by Bill Stewart 17 Dec '03

17 Dec '03

Does it have any identifying numbers? NCR OEMed a line of ADDS Viewpoint terminals for a while, and while the numbers no longer come to mind (unless they're like 2920), they might look familiar if I saw them. This keyboard sample doesn't look quite like them, though. Most of their keyboards like that were for terminals, not for PCs. Are the connectors even PC-like? Also, if there are function keys through F20, it might very well be a 3270-emulator of some sort. At 01:52 PM 6/6/96 -0700, you wrote: >Oops. I wrote that just looking at the keyboard. >Picked it up at Seattle's Ex-Pc for $3. >It's so old, I think it requires a non-PC BIOS. >No manual, labels etc. > >Anyone have a clue as to what this is: > >NCR > >F1 F2 [...] F18 F19 F20/RESET| >ESC [...] TAB |[five direction keys] >CONTROL Q [...] }/] CONTROL |CLR 7 8 9 / >CAPS_LOCK A [...] ~/` |NEW | - 4 5 6 * >[up] |/\ Z [...] [upup] |LINE | + 1 2 3 |NEW > [space] | 0_ 00 . |LINE > >It was designed for easily customizing your keytable, >being an actual flat terminal with square keys easily >pulled out and interchanged. > >The back of the keyboard has three switches for >the boolean selection of languages: US English, >UK/Int. English, French, German, Swedish/Finnish, >Danish/Norwegian, Spanish, Italian. > >So, where to get a NEW keyboard like this: > >FLAT, with a full set of SQUARE, EASILY pulled out keys. > > > # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Rescind Authority!

1 0

Re: Cost of brute force decryption
by Bill Stewart 17 Dec '03

17 Dec '03

At 02:44 PM 6/5/96 -0700, you wrote: >> > "For example a 40-bit key takes about $10,000 worth of supercomputer >> > time and two weeks to crack. Although this key may be adequate to >> > protect my checking account, it's probably not large enough for the >> > accounts of a major corporation. >> The figures look familiar. No references around. I'm not sure it would >> require a whole two weeks for 40-bits, though. Possibly less than a >> day? (Or was that why you asked baout the figures?) It was from The Newspapers, of course :-) The "$10,000 of supercomputer time" was in an initial press release description by somebody in Netscape or RSA after the RC4/40 Netscape crack, and was way high. (Check Altavista...) However, it's not too far off for the cost of a DES crack, where "supercomputer" is defined as "a special-purpose cracking machine" rather than "a Cray".. (Maybe an order of magnitude high for that.) And the description of $10,000 as "maybe enough to protect my checking account, but not large enough for the accounts of a major corporation" is about right. # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Rescind Authority!

1 0

Re: Class III InfoWar
by Chris Adams 17 Dec '03

17 Dec '03

On 2 Jun 1996 03:06:14 pdt, hal9001(a)panix.com wrote: >At 21:33 -0400 6/1/96, winn(a)Infowar.Com wrote: > > >>The article discussed the advanced information warfare techniques used by the >>perpetrators. "According to the American National Security Agency (NSA), they >>have penetrated computer systems using 'logic bombs' (coded devices that >>can be >>remotely detonated) > >Unless the definition has changed recently, a "logic bomb" is normally a >piece of code in a program that is triggered when a specific event occurs >(such as the programmer's name not appearing in a payroll file for a >designated period of time [which might trigger a salami round off routine >to start cutting checks 2 months after s/he is no longer working for the >company]). I believe that is what they were referring to. However, the press garbled it as usual. It seems like the original was something like 'logic bombs' (bits of code that can be triggered remotely). Probably sounded more impressive the reporter's way... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Second email address
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "sysop(a)io-online.com" <sysop(a)io-online.com> >Date: Mon, 03 Jun 96 19:50:50 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Second email address > How much would it be to get a second email address? (Just POP access. Doesn't even need to be able to send mail) That way I could have an address to send stuff like mailing lists to. Also: Web pages - I believe I saw something that mentioned that some space was included w/the subscription. How much, and how do I access it? This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

MEETING: SF Bay area Cypherpunks meeting for June 8th
by Hugh Daniel 17 Dec '03

17 Dec '03

What: Monthly meeting of San Francisco area Cypherpunks & Stanford PGP Club When: Saturday June 8th 12:00 noon Where: Turing Auditorium, Stanford University (Directions below) Dinner: Fanny & Alexander's 412 Emerson, Palo Alto, +1 415 326 7183 Topics: Random, PGP Keys siging, More on Crypto GUI's, Random. Directions: If you have a GPS receiver, head for 37.4296875N 122.1783752E. If you have excellent hearing, call 415-853-9080 and follow the ringing. Or, get to Stanford's Campus Drive via 280-Sand Hill or 101-El Camino Real-Embarcadero. From 280, take Campus Drive left (clockwise). From 101, take Campus Drive right (counterclockwise). Turn South (centripetal) at Panama Street and take an immediate left into the Jordan Quad parking lot (empty on weekends). Walk between Pine and Redwood Halls to Polya. Turing is between Polya and Cypress. It doesn't appear on most campus maps, but it's there, honest. Entrance to Turing Auditorium is by the Pac Bell payphone sign. Maps: http://www-leland.stanford.edu/group/Transportation/PGrid4.html (parking) http://www.stanford.edu/gifs/campus.1620-63-4.gif (800K campus map) http://www.stanford.edu/home/visitors/vicinity.html (note: upside down!) Socialized transportation: CalTrain to the Palo Alto station; 20-minute walk or arrange to be picked up by a local. 7F bus. See http://www.stanford.edu/group/Transportation/ Notes: The short notice is my fault, I was hoping to get some folks to talk at the meeting and waited far too long to give up on them. Thanks: Much thanks to Rich Graves and the Stanford PGP Club for the wonderful meeting space.

1 0

Re: WWW servers.
by Bill Stewart 17 Dec '03

17 Dec '03

Black Unicorn: >> Does there currently exist a system which permits webservers to restrict >> access to clients who have a given certification? Sameer: > Yup. .... > =) Stronghold: The Apache-SSL-US, coupled with XCert >Sentry. What else? Of course, there's a simpler approach; restrict access to people who have logins and passwords, and only give those to people who have the certification... # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Rescind Authority!

1 0

Fwd: Re: INteresting tidbit
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Wed, 29 May 96 22:36:17 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: INteresting tidbit > >On the Encryption note, and I swear not along the lines of the 'DOJ' >and 'FBI Snooping' Big-Brother events, I heard another story recently. > ># begin story > >A person working on the MBONE project did an unannounced experiment >across the internet using Triple-DES for MBONE, and the very next day, >'ATF' agents knocked on his door and warned him against exporting >munitions. The experimentor was shaken by the fact that agents >approached him so quickly after the experiment. > ># end story > >Extrapolations of fact: > 1. Internet traffic is monitored. > 2. The ability to snoop for encrypted traffic is present > 3. The ability to identify encryption levels is present > (How else can they differentiate DES-1 from DES-3?) > 4. The ability to crack DES-1 in near real-time mode is present. > (See above). First, this has been loosely confirmed for ages. Someone was mentioning that FBI offices supposedly have software that (on a 486) can crack a DES-1 key in under an hour. Multiply * modern high capacity computers = problem. However, this does not nessesarily follow from #3. First off, you could probably tell the encryption used from a file format; the software on the other end has to know what it's getting. Secondly, you could probably tell quite a lot about what was used by some intense analysis. Finally, if their software cannot read it and analysis suggested it was more than DES-1 then they might go after someone w/o being able to read the document in question. > 5. If above=true, then Feds dropping the Zimmerman PGP case probably > also points to it also being crackable in a similar manner. Not necessarily. This freemen issue shows that the FBI is getting gunshy about bad publicity, which they were getting. > 6. Using encryption only flags traffic for capture and decryption, > using strong encryption makes you all that more interesting. Sounds like the old argument for encrypting everything... >Sorry, couldn't resist. I'll try not to start a threads about >electro-plasma propulsion craft at Area 51, metallic-ceramic skin >and pulse-jets on the Aurora spy plane, heat-imaging video cameras >on satellites and planes that can watch you through your houses' roof, >etc. :) What??? Now you're going to tell us X-Files is just a TV show? <g> This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: forged addresses
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Thu, 30 May 96 01:32:54 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: forged addresses > On 29 May 1996 19:38:16 pdt, nobody(a)nowher.com wrote: >Hi, I'm not sure if there was ever a thread on this, but I was wondering if >anyone can determine your real email address, if you were to fake it to your >email client. > >I hope that this doesn't offend anyone, since this is a high traffic list, but >I was wondering if this would work. To try it out, I setup my client to think >I was someone else, and sent myself an email. I could only figure out what >ISP it came from. > >What I would like to know is, can any of the experts on this list determine my >address from the header of this post?? I didn't receive anything except your nobody@... address. >again, if this is something that I shouldn't have done, just let me know, and >it won't happen again. > Hmmm... I'm going to have to play around with this. I can get outbound email access through my school district's mailserver simply by filling in the appropriate fields in netscape (we have a WAN hooked up to a T1). It would seem to me that this would be rather secure for several reasons, if for no other than that NO logging is made... In a large district, like mine (probably 10-15 thousand potential users), I doubt they would have the resources to track any of the 100 or so Internet machines on my campus alone, even if they could tell it came from here. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

ID this 31173 NCR keyboard
by unknown＠example.com 17 Dec '03

17 Dec '03

! At 05:46 PM 6/3/96 -0700, you wrote: ! >ncr terminals are the most 31173 D0Dz ! ! I'm guessing that "D0Dz" is a variant on "dudes"; ! is "31173" supposed to be an upside-down "ElliE"? ! Having worked at NCR, I like their cash-machines and cash-registers, ! dislike the Microchannels in some of their PCs, ! dislike the terminals they used to make (I think SunRiver ! is the current manufacturer for that product line) ! and like their Teradata descendants. ! # Thanks; Bill ! # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com ! # http://www.idiom.com/~wcs ! # Rescind Authority! Oops. I wrote that just looking at the keyboard. Picked it up at Seattle's Ex-Pc for $3. It's so old, I think it requires a non-PC BIOS. No manual, labels etc. Anyone have a clue as to what this is: NCR F1 F2 [...] F18 F19 F20/RESET| ESC [...] TAB |[five direction keys] CONTROL Q [...] }/] CONTROL |CLR 7 8 9 / CAPS_LOCK A [...] ~/` |NEW | - 4 5 6 * [up] |/\ Z [...] [upup] |LINE | + 1 2 3 |NEW [space] | 0_ 00 . |LINE It was designed for easily customizing your keytable, being an actual flat terminal with square keys easily pulled out and interchanged. The back of the keyboard has three switches for the boolean selection of languages: US English, UK/Int. English, French, German, Swedish/Finnish, Danish/Norwegian, Spanish, Italian. So, where to get a NEW keyboard like this: FLAT, with a full set of SQUARE, EASILY pulled out keys.

1 0

Senate Staff Report...
by Lile Elam 17 Dec '03

17 Dec '03

Hi all, Does anyone know the location on the web of the Senate staff report that was presented on some Wednesday? I read an article about it on the sjmercury that says people with computers do not consider security a high priority... I am curous what else the report says... thanks, -lile

1 0

"Fascism is corporatism"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:18 PM 6/6/96, Rich Graves wrote: >On Wed, 5 Jun 1996, Bruce Baugh, who usually knows better, wrote: > >> Fascism has no intrinsic link to genocide. It is a theory of economics, >> basically, in which the state has ultimate authority over production and >> distribution without (as in socialism) actually _owning_ the means of >> production or distribution. This is generally accomplished through >> cartelization, the creatin of industry-wide councils in which the >> representatives of the most powerful firms set policy in conjunction with >> the representatives of the government. ... >Yes, I'm afraid these ahistorical myths are widespread. What _do_ they teach >in these schools? > >Pick up anything by Renzo De Felice to gain a basic historical understanding >of what fascism was about, from someone who was sympathetic to them. Rich, I don't think it nearly so clear as you are claiming. The definition of fascism, that is. Without resorting to the usual ploy of quoting Webster's (a ploy I usually am not impressed by), let me cite an "anti-fascist" radio personality, Dave Emory, who I have been listening to nearly every week for several years. Dave is undeniably anti-fascist, an unusual mixture of left-leaning views and National Rifle Association sympathies, and he often quotes Mussolini's famous "Fascism is corporatism" line. That is, a view more similar to Bruce Baugh's point that fascism is primarily an economic theory, about the organization and ownership of production systems, than about hatred of any particular ethnic group. It is certainly true that Italian and German fascism (and the important variant of "national socialism") become intertwined with certain forms of racism, with which we are all familiar, but I don't think Bruce is at all wrong in his definition of fascism. That Hitler and his group combined fascist economic theories with occultist views of racial superiority does not mean the two viewpoints are identical. ("Fascism is corporatism" is of course not an overall indictment of all corporations. "Corporatism" is basically a view that government should identify key industries and corporations and then pick the winners and support them while suppressing their competitors. This oversimplifies what Mussolini, Emory, myself, etc. mean by "corporatism," but I hope this gives at least a glimpse. And we could get off into discussions of "state capitalism" and how the Soviet and Chinese forms of government were essentially examples of "state capitalism," but this would be a long and involved debate.) >I'd also recommend a biography of the very influential and gifted American >modernist poet Ezra Pound, who led the Italian fascist propaganda effort >from 1941 to 1943 and spent six months in an American POW camp, followed by >some time in mental hospitals as his rants against jewish conspiracies under >every bed became increasingly incoherent, for his trouble. Like Orwell's >very complicated views towards socialism and Stalinism (see Homage to >Catalonia), e. e. cummings' anti-government pacifism, Whitman's queerness, >and Byron's essential kookiness, this is something your high school english >teacher probably failed to mention. My high school teachers failed to mention much of anything, but this was hardly surprising to me--I never expected them to. Fortunately, I knew how to read, and so I learned all of these things. (Except for Pound, whom I didn't encounter until my first year in college.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Hackers prevent Crackers!
by attila 17 Dec '03

17 Dec '03

Addressed to: Cypherpunks <cypherpunks(a)toad.com> Black Unicorn <unicorn(a)schloss.li> ** Reply to note from Black Unicorn <unicorn(a)schloss.li> 06/06/96 03:05am -0400 = > Actually, he's probably right. If all the cypherpunks, say, turned = > "bad," there'd be no government and no economy, because so many big = > systems are so insecure. = = One could make the case that this would actually make the United = States(if c'punks concentrated their attentions there) the most data = secure country on the planet over time. = regardless of their opinion on hackers, that is what secuirty is all about. the same is not true for crackers --maybe we need to run a campaign with the slogan of: Hackers (help) prevent Crackers! -- the last free election in the United States was in 1860.

1 0

WWW servers.
by Black Unicorn 17 Dec '03

17 Dec '03

Does there currently exist a system which permits webservers to restrict access to clients who have a given certification? What is the current certification practice? How easy is it to certify a given client? Are webserver certifications sufficently secure today? What are the best servers to use for secure web pages and certification currently in the United States? --- My preferred and soon to be permanent e-mail address:unicorn@schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information Opp. Counsel: For all your expert testimony needs: jimbell(a)pacifier.com

3 3