December 2003 - cypherpunks-legacy

"Practical Joke"
by Information Security 17 Dec '03

17 Dec '03

>Pssst... > >When John Glenn returns from space, everyone dress in ape suits. > >Pass it on.

1 0

Netscape inside scoop on "Smart Browsing"
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: tarnhelm.blu.org: majordom set sender to owner-isig(a)blu.org using -f From: rivalcs(a)ma.ultranet.com To: <isig(a)blu.org> Subject: Netscape inside scoop on "Smart Browsing" Date: Thu, 5 Nov 1998 06:00:21 -0500 MIME-Version: 1.0 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Importance: Normal Sender: owner-isig(a)blu.org Precedence: bulk Reply-To: isig(a)blu.org > * IS SMART BROWSING REALLY SO SMART? > (contributed by Mark Joseph Edwards, http://www.ntsecurity.net) > Many of you are aware of Netscape's new versions of its Navigator Web > browser. But do you also know that, starting with version 4.06, the > product's Smart Browsing feature can report to Netscape every Web page > you visit, including addresses to private sites on your internal > network? And are you aware that when you download a secure version of > Netscape's browser, the process places a cookie on your system that can > match your name and address to your Web surfing habits? Matt Curtin, > Gary Ellison, and Doug Monroe of Interhack published a report that > outlines the details. Netscape's What's Related? browser feature (a > technology provided by Alexa Internet) seems to be the cause of this > potential invasion of privacy. For those who don't know, the What's > Related? feature delivers a list of URLs associated with the Web page > you're visiting. The feature does this by automatically appending the > URL of the page you're visiting to the end of another URL and sending > it to a server at Netscape. For example, if you visit my Web site > (http://www.ntsecurity.net) the URL that Netscape receives is > http://www-rl4.netscape.com/wtgn?www.ntsecurity.net. And when Netscape > uses this URL to return a list of URLs for related sites, the URLs > aren't directly linked-they go through Netscape, telling Netscape which > site, if any, you chose from the list. The related URLs link to > http://info.netscape.com, which forwards you to the intended > destination. The link URLs look like this: > http://info.netscape.com/fwd/rl/http://www.ntshop.net:80/. > The report states that the group isn't accusing anyone of malice, and > clearly points out that even the best-intended systems can have > undesirable consequences. The real bone to pick here is the lack of > disclosure to potential users of the Smart Browsing technology, and > lack of a statement about the intended storage and use of private > browsing information collected from unsuspecting Netscape users. > According to the report, the feature enables by default, and no > documentation on the feature existed until the report became public. I > don't know about you, but if I bought a new Corvette from General > Motors (GM), and the Corvette reported to GM every place I went, I'd > expect GM to tell me up front. Otherwise, I'd feel deceived and taken > advantage of. But then again, maybe I'm being paranoid when I assume > that private actions should remain private. > http://www.interhack.net/pubs/whatsrelated/ > http://home.netscape.com/escapes/related/faq.html > Rick Desautels Sr. Systems Engineer Rival Computer Solutions rivalcs(a)ma.ultranet.com -- To unsubscribe from this list, send mail to majordomo(a)blu.org with the following text in the *body* (*not* the subject line) of the letter: unsubscribe isig --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: TEMPEST laptops (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 4 Nov 1998 23:19:17 -0800 > From: Tim May <tcmay(a)got.net> > Subject: Re: TEMPEST laptops (fwd) > >It depends on the frequency. Last time I checked a laser or a maser (both > >are radio waves strictly speaking) travel LOS. The scattering comes from > >beam divergence and incidental refractions and reflections from the > >molecules in the air and supported detritus. > > Oh come on, let's not get into sophistry. And lasers are not considered to > be radio frequency devices by anyone I know of...visible, IR, and UV lasers > are all treated as _photon_ devices, "light." (Yes, yes, I know about > particles vs. waves.) p-v-w is irrelevent. No Tim, it's photons as the intermediate vector boson for EM radiation. *ALL* physicist consider light to be hi-freq radio waves, or radio waves to be low-freq light. Hell, strictly speaking standing in the middle of a dark room waving a bar magnet back and forth is a very low freq. flash light. And you have a physics degree...... > Nope, they'll still get out. The parallel mirror scenario. Irrelevant. Last time I checked my microwave was 8 corner reflectors. That says that ultimately the ray goes back along the way it came with a shift in beam axis. How a microwave works is that up in one corner is a small grating. Behind that grating is a magnetron/klystron/etc. tube. That tube sends a beam out through that little grating. The axis of the tube is slightly mis-aligned ,otherwise the beam would come back into the tube and burn it out - also why you don't put metal things in there, it disrupts the reflection pattern. As a consequence of this design the corners and the exact center of the cavity don't get enough microwave radiation to do much of anything with. If you were to actualy map the microwaves you'd see beams bouncing back and forth and not continous coverage. There are actualy spots in every microwave oven cavity that get zero radiation. Anything put in there cooks as a function of the water in its neighbor heating up and transfered by the standard thermodynamic (which is also EM by the way) mechanism. Test it yourself. > We're talking about signal strength of the emitted RF being knocked down > 80 or 100 dB by the shielding. This is a common way of talking about the > effectiveness of a Faraday cage. True, the point I'm trying to make to you folks is that it *ISN'T* the absolute level of the signal that you are necessarily concerned with but rather the dynamic range in that signal. Simply knowing there's a 3mV signal out there won't do you a damn bit of good unless you have enough signal range to decode the contents. In actuality you could be emitting GW's of signal and if there was only say 1uV of signal range you'd never get anything off it. It just occured to me that one way to weaken TEMPEST is to mask the signals (not sure exactly how) that are emitted by encrypting (ie whitening) the signal when it's on exposed/radiating buss or connector. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Cryptography Study Group - Palo Alto (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 4 Nov 1998 22:45:42 -0800 > From: John Cutler <jcutler(a)via.net> > Subject: Cryptography Study Group - Palo Alto > A Palo Alto-centered cryptography study group has been been formed. > Our first project is to read Schneier's "Applied Cryptography." We > meet a couple times each week to go over assigned reading and to play > with ideas about cryptography. While the current participants all > have a professional interest in the field, we are loosely organized. > Readings are decided at the previous meeting giving us the flexibility > to explore particular ideas in depth. > > Please contact me if you would like to join us. This is a GREAT! idea John. If you don't object, and since Austin Cypherpunks are dead dead dead, I believe I'll start something similar. I think the approach I'll use is a bit different in that I'm going to ask participants to read say the first chapter and get together over some period and actualy write a program (probably in Perl) that impliments the topic(s) under discussion. If it were to meet say every other week for two hours they should be able to go through a chapter every couple of months or so. Now I've got to find a place suitable....:) ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Y2K prompts many to prepare, 6-month delays now common
by Declan McCullagh 17 Dec '03

17 Dec '03

>X-Sender: declan(a)mail.well.com >X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0.2 >Date: Thu, 05 Nov 1998 08:24:55 -0500 >To: politech(a)vorlon.mit.edu >From: Declan McCullagh <declan(a)well.com> >Subject: FC: Y2K prompts many to prepare, 6-month delays now common >Sender: owner-politech(a)vorlon.mit.edu >Reply-To: declan(a)well.com >X-Loop: politech(a)vorlon.mit.edu >X-URL: Politech is at http://www.well.com/~declan/politech/ > >[I think this is important news: Y2K fear has grown faster than many of us >expected it would. Companies tell me that unless you place your order by >early next year, you'll receive it after 1-1-00. --Declan] > > >http://www.wired.com/news/news/politics/story/16035.html > > Companies selling bulk food, > generators, and solar energy systems > report backlogs of up to six months. The > reason: nationwide hand-wringing over > the millennium bug. By Declan McCullagh. > > > > > >-------------------------------------------------------------------------- >POLITECH -- the moderated mailing list of politics and technology >To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: >subscribe politech >More information is at http://www.well.com/~declan/politech/ >-------------------------------------------------------------------------- >

1 0

How to test *your* microwave oven distribution pattern.
by Jim Choate 17 Dec '03

17 Dec '03

Here's a simple way to test the bounce-pattern of your micro-wave oven: - Go to your local hobby store and buy some small balsa or pine sheeting, stringers (4x), and glue (non-water based). You'll also need several small open top containers (like a shot glass but smaller for best effect) and a marker. - Cut the stringers to the vertical height of your oven cavity. - Cut the sheeting into 1in. sq. pieces. - Mark the stringers evenly such that there is enough room to glue the sheeting between the stringers, forming a multi-leveled tower. - On each level place your container with a suitable amount of water (fill it almost to the brim). - Place the tower w/ it's containers in one of the corners. Mark a line around the base so you know where you been. - Start your microwave up (adjust time as needed, say start with 30s) and note the temperature of each container after the time. Note that putting your thermometer in there will cool it slightly and you'll also need to have the same number of runs and levels so so each level can be measured immediately after opening the door. If you have access to an optical pyrometer you could potentialy measure them all. - Once you've measured it here, move it over to be adjacent to the lines you drew above, outline the base again and repeat as needed. - Run your regression and your done, tadah. Some glasses will be hot, others won't. Trace the path of the beam out of the magnetron and you'll get a good idea of what your oven is really doing. Whether the cavity is stricly a corner reflector (ie corners are square) or is trapezoidal (slightly off square to help disperse the bounce pattern not the beam) is irrelevant to the actual holes in the pattern, they will be there. I'll mention but not go into the shadowing effect of objects placed in the cavity and the requirement for even cooking means that they have to be rotated for even dispersal of the cooking effect. Another indication that the beam doesn't disperse as widely or quickly as some claim. On another topic about holes and escaping microwaves, if the holes are the right size (which the screen in the glass in the front of your oven is) they will preferentialy absorb the microwave, if it's correctly grounded very little of the radiation will escape (as you can measure with a standard microwave oven leak detector). Now, let's talk about ways to build a laptop that will reduce the emissed radiation to a minimum. First, put all the computing guts into a small box that is well grounded (running on a battery will pretty much screw you here since it ain't grounded unless you drive a stake into the ground). Then make sure that any openings or gaps are in the front edge or on the bottem pointed down. There should be no breaks in the sides, rear, or top. Make sure the floppy, CD, hard drive are placed in the front of the laptop container adjacent to the metal box above and make sure any openings in them point out. The reason you want the openings in the front edge is that your body will make a very good sheild to that hi-energy rf that folks want to tap. The openings on the bottem will direct it to the ground where where they are absorbed (why they call it a ground-plane). Make sure that all cabling from the peripherals to the computing box are shielded (remember, ground the shield at one end only). The seam or hinge between the display and the case should be shielded with standard copper fingers. The cabling should also be well shielded. Make sure there is a grounded screen covering the front of the LCD (and for gods sake don't ever use a plasma display). The exterior case should be metal (why I love my Tadpole 3XP and IBM N40). All openings for batteries and such should be screwed down and not simply retained by a latch of some sort. The *ONLY* way to power the laptop should be by battery. There should be no provision to power it off the ac mains (this is going to be inconvenient since you'll need to carry extra batteries, an external charger for them, and the screw drivers and such to change them - no simply and easy pop-outs here). As to the display, the ideal display would be a dual-display HMD that was also sheilded. This is based on the assumption that if your data is so sensitive that you don't want people snarking it out of the air you probably don't want them reading it over your shoulder (up close or through a tele-photo). If you do decide to stake your laptop as refered above there are a few things to know.... - Make sure the stake is in suitable ground without lots of quartz and other similar peizo-electric materials. - The stake should extend at least 3ft. into the ground. - When the stake is driven in, the ground should be thoroughly wetted which usualy means quite a bit of water (30 gals or so should do it), if possible wet it over a 24 hour period prior to staking. - Make sure the stake and the cable leading to the laptop are copper (or silver if you're rich) - You don't want to be close to phone, power, and other sorts of underground utilities. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Who Cares (fwd)
by Albert P. Franco, II 17 Dec '03

17 Dec '03

> >Forwarded message: > >> From: "Blanc" <blancw(a)cnw.com> >> policy: what are all those other people doing? > >From: Jim Choate <ravage(a)EINSTEIN.ssz.com> >If you're talking about the people who didn't vote, they're trying to keep >from going under. Probably working two jobs, keeping the kids in school and >out of trouble, saving for college, paying the house morgage off, etc. Who's >in office won't make a whit of difference to any of that. It's irrelevant. > >If you're talking about the politicians, they're laughing their ass off on >the way to the bank to cash their tax-derived income. > > And then there are those of us who are denied our opportunity to vote because the damn absentee ballot always seems to arrive a week after the election!! Coincidence? Bad Luck? Or is it design? APF

1 0

(Fwd) Re: DigiCash Inc. to File Reorganization, Seeks Partners
by Warren E. Agin 17 Dec '03

17 Dec '03

For those who are really interested, the DigiCash Incorporated Chapter 11 case was filed in the Northern District of California. The case number is 98-58986. -Warren Agin ___________________________________________________ Warren E. Agin Law Offices of Warren E. Agin 76 Canal Street, Boston MA 02114 (617)227-3201 (f)(617) 227-6365 www.agin.com ___________________________________________________

1 0

US Cyberthreat Policy
by John Young 17 Dec '03

17 Dec '03

The USIA E-journal, Foreign Policy Agenda, for November is titled "Cyberthreat: Protecting US Information Networks." It has articles by the head of NSA, DoD's Hamre, CIAO's Hunker, Y2K Office's Koskinen, Senator Kyl, and reps from Microsoft, IBM and others: http://www.usia.gov/journals/itps/1198/ijpe/toc.htm Martin Libicki of RAND criticizes the administration's crypto policy for hindering widespread information protection: http://jya.com/ml110498.htm

3 2

How to save a real audio stream?
by Bart van Moorsel 17 Dec '03

17 Dec '03

Can anybody explain how to save a real audio stream? I think I saw this question before, sorry to ask for a replay.

1 0

IP: Text: Gore Announces New SS# Effort for Victims of Domestic Violence
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com X-Sender: believer(a)telepath.com Date: Thu, 05 Nov 1998 09:31:32 -0600 To: believer(a)telepath.com From: believer(a)telepath.com Subject: IP: Text: Gore Announces New SS# Effort for Victims of Domestic Violence Mime-Version: 1.0 Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: believer(a)telepath.com Source: USIA http://www.usia.gov/current/news/latest/98110403.wlt.html?/products/washfile /newsitem.shtml 04 November 1998 TEXT: GORE ANNOUNCES EFFORT FOR VICTIMS OF DOMESTIC VIOLENCE (SS numbers to be changed to help victims escape abusers) (630) Washington -- Vice President Al Gore announced November 4 a new policy to allow victims of domestic violence to change their Social Security number. "Today, our message to the victims of these hateful crimes is this: we will offer you the protection you need to regain your safety and rebuild your life. You have suffered enough without having to fight for the protections you need to start a new life for yourself and your children," Gore said, according to a press release from his office. The vice president also mentioned a new booklet, "Protecting Victims of Domestic Violence: A Law Enforcement Officer's Guide to Enforcing Orders of Protection Nationwide," that outlines the meaning of the Violence Against Women Act's requirement to give full faith and credit orders of protection for victims of domestic violence. Following is the text of the release: (Begin text) November 4, 1998 THE WHITE HOUSE Office of the Vice President For Immediate Release Wednesday, November 4, 1998 VICE PRESIDENT GORE ANNOUNCES NEW POLICY TO ALLOW VICTIMS OF DOMESTIC VIOLENCE TO CHANGE THEIR SOCIAL SECURITY NUMBER Washington, DC -- Vice President Gore announced today a new effort to help victims of domestic violence escape their abusers -- a federal policy that will make it easier for victims to change their social security numbers. "Today, our message to the victims of these hateful crimes is this: we will offer you the protection you need to regain your safety and rebuild your life," Vice President Gore said. "You have suffered enough without having to fight for the protections you need to start a new life for yourself and your children." For the first time, victims of domestic violence will be able to get a new Social Security number simply by providing written affirmation of their domestic abuse from a third party, such as a local shelter, treating physician, or law enforcement official. The Social Security Administration's (SSA) employees in field offices nationwide will work closely with local domestic violence shelters, the police, the courts, treating physicians, medical facilities, and psychologists to help victims of domestic violence get the documentation necessary to secure a new Social Security number. Previously, the SSA required victims to provide proof that their abuser had misused their Social Security number. For victims of domestic violence, providing this kind of proof was extremely difficult -- only victims who were severely abused or who were in danger of losing their lives were allowed to change their Social Security number. To improve its services to victims of domestic violence, the SSA will post on its web site the steps a victim needs to take to change their Social Security number and provide important referral information. The Vice President also announced a Presidential directive for the Office of Personnel Management to prepare a resource guide that will: (1) assist victims of domestic violence by providing up-to-date information about available resources and outline strategies to ensure safety; and (2) help those who know anyone who is being abused to prevent and respond to the situation. This guide will list private as well as public resources such as counseling, law enforcement, federal workplace leave policies, and substance abuse programs. In addition, he highlighted a new booklet, "Protecting Victims of Domestic Violence: A Law Enforcement Officer's Guide to Enforcing Orders of Protection Nationwide," that outlines the meaning of the Violence Against Women Act's requirement to give full faith and credit orders of protection for victims of domestic violence. This booklet was written by the International Association of Chiefs of Police with a grant from the Justice Department. It will be disseminated to law enforcement officers nationwide to teach them how to enforce protection orders. (End text) ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- **************************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address or (un)subscribe ignition-point-digest email@address **************************************************** www.telepath.com/believer **************************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

2 1

Microsoft Statement
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: www.ispo.cec.be: majordom set sender to owner-e-commerc(a)www.ispo.cec.be using -f Date: Thu, 5 Nov 1998 09:16:56 -0500 From: Freddie Dawkins <freddied(a)compuserve.com> Subject: Microsoft Statement To: CEC E-commerce list <E-commerc(a)www.ispo.cec.be> MIME-Version: 1.0 Sender: owner-e-commerc(a)www.ispo.cec.be Precedence: bulk Reply-To: Freddie Dawkins <freddied(a)compuserve.com> All here - I thought you might like to see this. It was published at the ICX London conference on October 19. Rgds Freddie Dawkins ICX - Building Trust in E-commerce ------------------------------------------------------------------------ Statement of Microsoft on UK Department of Trade and Industry Proposals for Encryption on Digital Signatures October 1998 Microsoft welcomes this opportunity to respond to recent DTI proposals on encryption and digital signatures. As a leading developer of business software applications, on-line tools and operating systems, Microsoft strongly supports the growth of electronic commerce in Europe. 1. UK legislation should eliminate all key escrow and key recovery requirements. The UK should not make the use of encryption subject to mandatory key escrow. The DTI's Secure Electronic Commerce Statement of April 1998 contemplates authorising law enforcement to obtain access to private encryption keys on request. This could effectively require users or encryption service providers to "escrow" their private keys, which would depart from the Statement's rejection of mandatory key escrow and make the use of encryption more costly and burdensome. Many users would also view the obligation to store copies of their private keys as compromising the security of their on-line messages, thus deterring them from fully exploiting electronic commerce. Mandatory key escrow does not serve any legitimate law enforcement goals. Key escrow serves no legitimate law enforcement goals because criminals and terrorists are unlikely to store their private keys or provide them to police on request. Law enforcement's needs in this area could be fully met by requiring users to produce the plain text of any message to which police require access. 2. The proposed legislation should extend legal recognition to all digital signatures. Legal recognition should extend to all electronic signatures, not just those issued by licensed certification authorities (CAs). The secure Electronic Commerce Statement would limit legal recognition to certificates issued by licensed CAs. Because virtually all users will want to rely on the legal validity of their electronic signatures, this would effectively require the use of licensed CAs. Such a rule would impose unnecessary costs on electronic commerce and would place UK law in conflict with the proposed EU Electronic Signatures Directive, which extends legal recognition to both licensed and unlicensed electronic signatures. UK law should extend legal recognition to closed-system and limited-use certificates and affirm parties' freedom of contract. Electronic signatures are used in a variety of closed systems and for a broad range of specific uses, such as on-line banking and credit card systems. Because closed-system and limited-use certificates will play a crucial role in the development of on-line applications, the law should expressly extend legal recognition to such certificates. UK legislation should also treat electronic and paper transactions the same in terms of freedom of contract, so that private parties have the same flexibility to structure their electronic transactions as they do for traditional forms of commerce. The proposed legislation should not require licensed CAs to escrow encryption keys. Many users of electronic signatures will refuse to allow their private encryption keys to be escrowed, and will therefore refuse to use licensed CAs if they must also hand over their private encryption keys. Such a result would undermine the use of electronic signatures and would threaten the development of electronic commerce in the UK. Thus, UK law should allow licensed CAs to provide encryption services without maintaining a key escrow or key recovery system. 3. DTI should abandon plans to extend existing export controls to "intangible" transfers. Applying existing export controls to intangible transfers of encryption is unworkable and impractical. In its recent white paper on Strategic Export Controls (July 1998), DTI announced plans to extend existing export controls to intangible transfers. However, strong encryption is widely available on the Internet from servers located outside the UK. Thus, the proposed restrictions would not prevent criminals from using strong encryption, but would impose added costs and burdens on lawful manufacturers and distributors of encryption products. The proposed export controls will harm UK firms. UK businesses already face a competitive disadvantage to foreign competitors due to restrictions on exporting encryption in tangible form. To extend this to intangible transfers will make it even more difficult for UK firms to compete globally. The UK should loosen, rather than tighten, existing export controls on encryption. Export restrictions on encryption make it much more expensive for UK firms to compete globally, without having any real impact on crime. Rather than act unilaterally on this issue, the UK should adhere to the European-wide standards set forth in the EU Regulation on Dual-Use Goods. /ends # # # # # # # # # # # # # # # # # # # # # # # # # To leave the list, send email to Majordomo(a)www.ispo.cec.be saying unsubscribe E-commerc your(a)email.address as the first line of your message (*not* as the subject) # # # # # # # # # # # # # # # # # # # # # # # # # --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: TEMPEST laptops (fwd)
by Michael Motyka 17 Dec '03

17 Dec '03

Jim, *** True, the point I'm trying to make to you folks is that it *ISN'T* the absolute level of the signal that you are necessarily concerned with but rather the dynamic range in that signal. Simply knowing there's a 3mV signal out there won't do you a damn bit of good unless you have enough signal range to decode the contents. In actuality you could be emitting GW's of signal and if there was only say 1uV of signal range you'd never get anything off it. *** The distinction you are trying to express is that not all signals have equal information content and that it is the levels of the high-content ones that matter. Fine, but shielding is indiscriminate so shield away. And run your Tesla coil and some Ramones music to increase the ambient noise while you're doing sensitive computing. BTW - Aren't most receivers sensitive to RF field strengths in the 1 uV/m range? With cryogenically cooled front ends the nV/m range is probably usable. Look for MIB carrying Dewars in your neighborhood! How cold do Peltier junctions get? Probably good enough for a sidewinder or a low-noise rcvr. Mike Gabba-gabba hey!

1 0

Announcing Extensis Preflight Pro 2.1
by listmaster＠extensis.com 17 Dec '03

17 Dec '03

The Award-Winning, Preflighting Tool from Extensis Just Got Better. http://www.extensis.com/products/PreflightPro * New! Now inspect your Acrobat(r) PDF Files! * Inspect, correct and collect print jobs for perfect prepress delivery. * Advanced features include customizable inspection profiles, PDF creation, and AppleScript Automation. * FREE! 5 free copies of Collect Pro with each copy of Preflight Pro! Extensis Preflight Pro 2.1 answers all of your Preflight questions. Designed to save prepress professionals time and money, Preflight Pro inspects your documents and corrects problems to ensure they are error-free prior to printing. With an interface that mimics the traditional prepress workflow, Preflight Pro provides you with a familiar environment to review files prior to printing. Further, Preflight Pro now supports documents in all the major graphics applications including Adobe PageMaker, Illustrator, Photoshop, Acrobat, QuarkXPress, Macromedia FreeHand EPS, and Multi-Ad Creator2. What's New in Preflight Pro 2.1? Now you can inspect Acrobat PDF files, along with files from all the other major graphics applications. Preflight Pro 2.1 now examines PDF files using more than 40 different profile items, including document security settings, font subsetting and embedding, downsampling rates and compression types. Better yet, Preflight Pro also includes 5 free copies of Collect Pro 2.1. Give Collect Pro to any creative professional you work with to help them correctly collect a job for hand-off to the prepress house. Collect Pro eliminates the problems of missing files (e.g.: fonts and linked graphics) that can delay a job. Extensis Preflight Pro 2.1 will dramatically streamline your preflight workflow, saving you time, headaches and money. For more information, to order, or to download a FREE, 30-day demo of Extensis Preflight Pro, please visit: http://www.extensis.com/products/PreflightPro Or call your Extensis Preflight Specialist at (800) 796-9798 x.168 or (503) 274-2020 x.168 or email to: preflight(a)extensis.com . Already own Preflight Pro 2.0? NO PROBLEM! Visit http://www.extensis.com/products/PreflightPro and download Preflight Pro 2.1 for free (your Preflight Pro 2.0 serial number is required) Are you a FlightCheck(r) User? NO PROBLEM! Upgrade to Extensis Preflight Pro 2.1 for only $99.95 (SAVE $300!) Preflight Pro 2.1 and Collect Pro 2.1 are compatible with QuarkXPress 3.31 or later, including QuarkXPress 4.0, Adobe PageMaker 6.5 and later, Adobe Illustrator 5.5 and later, Adobe Photoshop 3.0.4 and later, Macromedia FreeHand 5.5 and later, and Multi-Ad Creator2 version 1.0. PS. We have made every effort to ensure this message is being sent only to people who have expressed interest in Extensis products. If we have sent this to you in error, please accept our apologies and reply with remove in the subject line for automatic exclusion from future communications. If you know someone who would like to be on our mailing list have them send an email to listmaster(a)extensis.com with ADD in the subject line and their email address in the body. P.P.S. This message is intended for customers in North America. If you are located outside of North America and have received this message, please visit www.extensis.com/purchase/ to find the nearest local distributor in your country.

1 0

Digicash in serious trouble
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: stalder(a)fis.fis.utoronto.ca Mime-Version: 1.0 Date: Thu, 5 Nov 1998 12:03:10 -0500 To: micropay(a)ai.mit.edu From: Felix Stalder <stalder(a)fis.utoronto.ca> Subject: Digicash in serious trouble Sender: owner-micropay(a)ai.mit.edu Precedence: bulk Reply-To: micropay(a)ai.mit.edu [bad news] http://www.news.com/News/Item/0,4,28360,00.html By Tim Clark Staff Writer, CNET News.com November 4, 1998, 6:05 p.m. PT Electronic-cash pioneer DigiCash said today it's filing for Chapter 11 bankruptcy protection after shrinking its payroll to about six people from nearly 50 in February. The company, which has been running off a bridge loan from its venture capital investors since June, is seeking new investors from established financial institutions or a buyer for its software technology. The company's operations in the Netherlands, where it was founded, were liquidated in September. "To really launch and brand something like this in the Internet space is likely to take a fair amount more capital," said Scott Loftesness, DigiCash's interim CEO since August. "It's more appropriate for strategic investors, corporate players or banks themselves as a consortium model." Electronic-cash schemes have found difficult sledding recently. First Virtual Holdings, which had a form of e-cash, exited the business in July. CyberCash's CyberCoin offering hasn't really caught on. Digital Equipment, now part of Compaq Computer is testing its Millicent electronic cash, and IBM is in early trials for a product called Minipay. Under bankruptcy laws, DigiCash's Chapter 11 filing allows the company to continue operations, while keeping its creditors at bay as the company reorganizes. Most of DigiCash's $4 million in debt is owed to its initial venture capital financiers who extended the bridge loan, August Capital, Applied Technology, and Dutch investment firm Gilde Investment. DigiCash's eCash allows consumers to make anonymous payments of any amount--and anonymity differentiates eCash against other e-cash schemes. DigiCash's intellectual property assets include patents, protocols, and software systems that also could be used for applications, like online electronic voting or private scrip issued by a particular retailer. DigiCash suffered a setback in September when the only U.S. bank offering its scheme, Mark Twain Bank, dropped the offering. But a number of major banks in Europe and Australia offer or are testing DigiCash's electronic cash. Also in September, DigiCash closed its Dutch operations and liquidated its assets there. Loftesness said DigiCash has a list of 35-40 potential partners, and he has been talking to players like IBM for months. He expects to resolve DigiCash's status in the next five months. "Everybody feels anonymous e-cash is inevitable, but the existing situation was not going to get there from here," said Loftesness, who is frustrated by potential partners telling him, "This is absolutely strategic, but unfortunately it's not urgent." The company was founded by David Chaum and was well-known in the Internet's earliest days. MIT Media Labs' Nicholas Negroponte is a director of DigiCash. --- # distributed via nettime-l : no commercial use without permission # <nettime> is a closed moderated mailinglist for net criticism, # collaborative text filtering and cultural politics of the nets # more info: majordomo(a)desk.nl and "info nettime-l" in the msg body # URL: http://www.desk.nl/~nettime/ contact: nettime-owner(a)desk.nl -----|||||---||||----|||||--------||||---- Les faits sont faits. http://www.fis.utoronto.ca/~stalder --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: How to test *your* microwave oven distribution pattern.
by Michael Motyka 17 Dec '03

17 Dec '03

Jim, you said... ***** If you do decide to stake your laptop as refered above there are a few things to know.... - Make sure the stake is in suitable ground without lots of quartz and other similar peizo-electric materials. - The stake should extend at least 3ft. into the ground. - When the stake is driven in, the ground should be thoroughly wetted which usualy means quite a bit of water (30 gals or so should do it), if possible wet it over a 24 hour period prior to staking. - Make sure the stake and the cable leading to the laptop are copper (or silver if you're rich) - You don't want to be close to phone, power, and other sorts of underground utilities. **** Please explain to me why it matters that the box be grounded! Radiated energy from chips and traces is independent of your mongo ground strap to the mother ship. All the strap does is alter the DC potential. Shield your box well but design out the leg irons and the geological requirements. Mike

2 1

Re: TEMPEST laptops (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 05 Nov 1998 09:28:06 -0800 > From: Michael Motyka <mmotyka(a)lsil.com> > Subject: Re: TEMPEST laptops (fwd) > The distinction you are trying to express is that not all signals have > equal information content and that it is the levels of the high-content > ones that matter. Nope. What I am saying is the absolute magnitude of the carrier wave is irrelevant, it's the modulation that matters and that modulation if small and it's riding on a big carrier is hard to get at because you swamp your front-ends because of dynamic range. > Fine, but shielding is indiscriminate so shield away. Shielding will attenuate all parts of the signal so it is a Good Thing (TM). > And run your Tesla coil and some Ramones music to increase the ambient > noise while you're doing sensitive computing. Gabba gabba hey hey...thought I don't run my Tesla Coil when my computers are on, they object to the 4ft sparks. > Look for MIB carrying Dewars in your neighborhood! > How cold do Peltier junctions get? > Probably good enough for a sidewinder or a low-noise rcvr. Peltier devices are for thermal transport by binding the thermal photons and transporting them to a different environ where they may be emitted. Hence the original environ is cooled. You're talking about Josephson Junctions I suspect and they're useless for signal detection, they're a switch. SQUIDS are what are used for truly small level signals. The KKK took my baby away.... ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: How to test *your* microwave oven distribution pattern. (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 05 Nov 1998 11:42:41 -0800 > From: Michael Motyka <mmotyka(a)lsil.com> > Subject: Re: How to test *your* microwave oven distribution pattern. > Please explain to me why it matters that the box be grounded! Electricity runs from a high-potential point to ground. If it isn't grounded it radiates away into space where it can be detected. If the Faraday Cage isn't grounded it simply acts as a parasitic oscillator and re-emits the signal from inside, though at a lower amplitude. Remember, charge rests on the *OUTSIDE* of a object so that any charge picked up internaly gets passed to the outside surface. Which raises another point. Since sharp corners radiate better because they hold larger charges one should probably avoid sharp angles or corners. Though you might be able to use that to advantage by having a caged needle that radiates the majority away into the grounded cage. Probably the ideal 'laptop' would be a metal ball with a grounding wire and a single large mil-spec connector that drives a HMD. Something like the Rock City by Archistrat but round instead of cubical. > Radiated energy from chips and traces is independent of your mongo > ground strap to the mother ship. Not if the ground plane on the pcb is built right. The amount of free-space radiation can be minimized because the capacitive coupling between the emitting source and the local ground is less than the capacitive coupling to Earth through the atmosphere. Since the signal path impedence to the local ground plain is lower it will carry, proportionaly, the majority of the signal. > All the strap does is alter the DC > potential. Shield your box well but design out the leg irons and the > geological requirements. Actualy it is much more complex than that, it effects the AC signal path impedence as well - which is exactly what one wants. As I said above, don't ground the box and it simply acts as a secondary emitter. This is analogous to those parasitic oscillators they put in books and such that ring an alarm if you walk between the poles at the store. I'm at work right now so I can't get too specific but there is a book that I have at home that is called 'Digital Black Magic' (I believe). It covers a lot of these sorts of issues. When I'm home later I'll post a pointer to the correct title, author, and ISBN. The 1st rule of electrons: They always take the shortest path to ground. Corollary: If they can't get to ground they radiate their excess energy away as photons. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: TEMPEST laptops
by Anonymous 17 Dec '03

17 Dec '03

At 09:45 PM 11/4/98 -0800, Tim May wrote: >>The other question is how hard, given a _specific_ machine would it be to >>create a "RF" jammer? Sort of an active defense versus the passive defense >>of a Tempest sheild. build a device that measures the RF coming off a Well dang Tim, if you're gonna work inside a Faraday cage you may as well run a Tesla coil outside it... --Lace Aliens Slide on my Rugs

2 1

Re: TEMPEST laptops (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 5 Nov 1998 11:56:20 -0500 > From: Petro <petro(a)playboy.com> > Subject: Re: TEMPEST laptops (fwd) > >It depends on the frequency. Last time I checked a laser or a maser (both > >are radio waves strictly speaking) travel LOS. The scattering comes from > >beam divergence and incidental refractions and reflections from the > >molecules in the air and supported detritus. > > And both Lasers and Masers scatter under certain conditions. If you > can see the laser, it is scattering a bit of [energy light photons] All EM radiation scatters *IF* the wavelength of the signal is comparable to the wavelength of the particulate. If the particulate is less than about 1/3 wavelength it won't significantly scatter. The reason that dust in the air scatters lasers (and masers don't have this problem because the wavelength is too long) is that the particles are significantly larger than the wavelenght of the signal. It is directly analogous to moon-shine. In astronomy this is related to something called the Poynting Effect. This is also the reason that IR radiation goes through smoke and fog while visible light won't. Raleigh Scattering is the reason that the fog appears white. In photography and radar mapping this is what limits the resolution of the bounced signal as well. You can build an experiment to demonstrate this with peg-board, pegs, and some rope. Lay the peg-board on a table. Place a peg on one edge and connect the rope. then along the line of the rope place other pegs at equal but different distances and try to get a transverse plane wave to travel down the rope. Note the relative wavelenght of the wave in the rope to the spacing of the pegs. It takes practice to get it to work correctly so don't give up to easy. > I was under the (apparently false) impression that things like > animal bodies, and ordinary building materials (like wood, Lathe & > plaster/drywall) wouldn't stop or significantly bounce the beams back the > way you didn't want them to go. Depends on the material, angle of incidence, water content, frequency of the signal, transmissivity of the material at that frequency, etc. In the 10cm radar (used by tanks and ground troops to find each other) even leaves will bounce a signal. > I was thinking more of controling the direction of the RF, rather > than trying to completely supress it. Exaclty. The issue then is what do we do with the signal once we've got it directed where we want it. For EM signals we want to get them to a ground plane so they go away and don't exist anymore. If it doesn't exist anymore you can't very well tap it. > We're not cooking Hotdogs here, and we aren't using (for the most > part) microwaves. Yes, you can heat a hotdog on a PII, but that is more > from heat radiation than RF. > > Microwave ovens also leak RF. True enough, but the physics are applicable. Don't confuse cause with effect. As to microwave ovens leaking, yes but they leak orders of magnitude less which makes them orders of magnitude harder to detect. That is the point to TEMPEST after all, take advantage of the 1/r^2 law so the mallet has to be sitting right in your lap to get a good field strength. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: How to test *your* microwave oven distribution pattern. (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 05 Nov 1998 13:09:09 -0800 > From: David Honig <honig(a)sprynet.com> > Subject: Re: How to test *your* microwave oven distribution pattern. > At 08:47 AM 11/5/98 -0600, Jim Choate wrote: > >Here's a simple way to test the bounce-pattern of your micro-wave oven: > > Simpler: stick a neon-bulb with the leads twisted off into the oven. > Watch the glow vary. Put a cup of water in there since you're not supposed > to run empty. Yes, but they don't give you as easily measured level of the incident radiation. with a neon bulb or a flourescent tube (what I prefer) you have a hard time mapping radiation level to brightness with commenly available photometers. Photo quality stuff isn't nearly accurate enough. > > - Make sure the stake is in suitable ground without lots of quartz > > and other similar peizo-electric materials. > > Not piezo (though quartz is), but non conductive. You have to > tap the groundwater table. Sand, granite don't conduct. Sand has lots of piezo. You don't want piezo because the ground pressure on the stake will cause excessive noise. As to non-conductive, you *WANT* it to be conductive otherwise the signals will form ground waves and propogate horizontaly. You can see this with radar signals from aircraft that bounce off the tarmac (I used to live next to the Austin airport and had access to a spectrum analyzer). If the ground plane isn't conductive it isn't a ground plane. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

:: Subject: more on Dore's discovery of intelligence (satellite 415) http://www.enterprisemission.com/images/auscnfrm.jpg http://www.lunaranomalies.com/update2.htm http://news.bbc.co.uk/hi/english/sci/tech/newsid_203000/203133.stm

1 0

Holloween II: Microsoft Plugs Linux
by Robert Hettinga 17 Dec '03

17 Dec '03

http://www.opensource.org/halloween2.html is a more extensive, (positively glowing) freshly smuggled (planted?) internal analysis of Linux by Microsoft. 103k, but definitely worth reading. Cheers, Bob Hettinga ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

3 2

Now where am I gonna get a good horseburger?
by Michael Motyka 17 Dec '03

17 Dec '03

In CA it is now a felony to eat a horse. I don't remember asking to be transported to Walt Disney World...wait 'til someone other than Gary Larson anthropomorphises the chicken, cow and pig! On a lighter, more technical note - Avoiding carefully, for the moment, Harvey Rook's statement that weaknesses in cipher systems often lie in key generation and management and not in the crypto algorithms, I'll ask a few -naive- questions: If we construct a CSPRNG with a ?sufficiently? large state and then use the output of that PRNG to generate a new key for each block encrypted by a standard block cipher have we gained anything? Large files vs. small? When used with triple encryption like 3DES? The ROI for finding a single key is certainly much lower if the PRNG is "good". I've never seen a PR keystream for a conventional block cipher discussed so I thought I'd lob it out there. Mike

1 0

RE: dbts: Privacy Fetishes, Perfect Competition, and the Foregone (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

> Robert Hettinga wrote: > > A government is just another economic actor. A very large > > economic actor with lots of guns and a monopoly on force, > > but an economic actor nonetheless. > > No they are not, > > Yes, they are. Can you say 'taxes'? Imposed by a gun. > Can you say 'interstate commerce'? What about it? > Can you say 'mint money'? Can you say 'federal reserve'? Can you say government fiat? > Can you say 'FDIC'? Can you say banking regulation at the point of a gun? > I thought so. Yep. > > History shows this. > > Really? What history? The Soviet Union is a prime recent example. British Mercantilism. Governments are ultimately bound to economics in the sense of human behavior and productivity -- the more they deny the nature of microeconomic actors, the quicker they self-destruct. History shows that every dynasty well eventually self-destruct, to think ours won't is foolish. My point is we don't have competitive governments per se, you have a power void that is filled by new government that can be just as hostile to those microeconomic actors. All our government failures have yet to produce a sustainable government. > False distinction. Politics is about control and power The fundamental laws of economics are supply and demand. As soon as you through force into the equation, it is no longer economic, it is political. > in human society that breaks down to force and money. The essence of money has no political roots. The essence of money is human productivity and trade. Money is tied to politics currently because it is regulated by force of government and the money *supply* is created by government fiat. > There you go again, confusing privacy with economics... The discussion *was* *privacy*, or did you completely miss the initial discussion? Privacy (as opposed to secrecy) is about discretionary disclosure of information. To invade privacy is to remove or prevent that discretion. There is an economic cost of doing so, and an economic benefit. Corporations are bound by those economics, whereas government can mandate transparency by whim and gun. > > use coercive force today preventing privacy, but government is > > their instrument of force. > > True, but that isn't a function of regulation per se only the > particular type of regulation that we have implimented. It is the *nature* of regulation. The end element of any regulation is a gun. Government is a natural instrument of collective legalized force by any group that can influence it, and to think it can't and won't be influenced denies human nature in regards to power. Every government is despotic by nature, force corrupts. > > They have a *legal* monopoly on force (within a state). > > No, they don't. It is perfectly legal for an individual to > own a weapon. The legal monopoly on the *initiation* of force. And in fact you have very little freedom (eternally diminishing) to obtain potential force (arms) and use it in a *reactionary* manner. You have absolutely *no* freedom to use it reactionary against government (which is in the face of the 4th). > There is also a clear distinction between the local police, > your state police, federal agents, military, etc. It is an irrelevant distinction in this case, it is all government. They do not use force against each other as any sort of competitive balance. > No it doesn't. It points to the fact that individuals want to > participate in some activity that some other party doesn't > want to occur. General democratic consensus is highly controlled by media and government propaganda (if they are not one in the same). What is the underlying motivation? Is hemp illegal because people don't want people to smoke weed, or because of the cotton lobby? Is the war on drugs so unbreakable because people don't want people taking drugs, or because the government funds black operations with its sales, uses it to confiscate private property, and as a sounding post for increased powers? Do people not want free banking, or does the government wish to protects its fiat currency and artificial stability flying in the face of economic reality? > It does not imply that the regulating party wants the potential > income from those activities. Money or power, more often than most people think. > Further more, even in a free-market there will exist > black markets. Provided you don't corrupt the meaning of free-market to include any possible black market, then yes, there will *always* be a black market. It can be made rather insignificant however. > The aspect of a free-market is that there is no consequence from > such actions (unless you want to admit to allowing corporations to have > their own hit squads). And again you pervert the meaning of free market. I'm tired arguing that subject with you, go read a book. Matt

2 1