December 2003 - cypherpunks-legacy

Ultra computer
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

Ultra computer which NEC had the calculation speed of the world maximum of about 1000 times of the super computer to was decided to be developed. Ultra computer will be completed in 2001. It has the performance that the calculation which takes 10000 years with the personal computer is made of 3, 4 days. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

4 3

Misty???
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Well on another mailing list I have been chastised for calling Misty "snake-oil". Has anyone actually examined this algorithm? Seems there is an IETF Draft on it (draft-ohta-misty1desc-00.txt). Any opinions on it?? My only exposure has be through the pidgon-english posts of Nobuki Nakatuji (if it looks like a duck, it smells like a duck, it quacks like a duck ....). - -- - --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html - --------------------------------------------------------------- Tag-O-Matic: I use OS/2 2.0 and I don't care who knows! -----BEGIN PGP SIGNATURE----- Version: 2.6.3a-sha1 Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNMbWgY9Co1n+aLhhAQFjoQQAgRac4gm3MM1mbZUfb0jH21b7gQt1IRYR wWFilIA2am/6x+bmF3RKG64A9/iwp00rD45g2yybw91Gg3/87nEMjPBpo+DCchtb psYRKyDOTxOAr7GljOa2k4HJAfNDqjxQ56sI/4whk2PEADnpHilzln98tEJobZA7 oxZw9FeGlig= =M0fT -----END PGP SIGNATURE-----

6 10

Re: RC1 and RC3 ??
by Anonymous 17 Dec '03

17 Dec '03

>At 09:28 PM 1/19/98 PST, Nobuki Nakatuji wrote: >> >>Why doesn't it have RC1 and RC3 though there are RC2, >>RC4 and RC5 of RSADSI RC series ? > >If we told you we would have to kill you. Cool! Let's tell him, then, so we won't have to listen to him anymore! :)

1 0

tell me what you think of this RC2 C++ source code
by Anonymous 17 Dec '03

17 Dec '03

tell me what you think of this RC2 C++ source code #include <string.h> #include <assert.h> void RC2Keyschedule::schedule( unsigned short K[64], const unsigned char L[128], unsigned T8, unsigned TM ) { unsigned char x; unsigned i; static const unsigned char PITABLE[256] = { 217,120,249,196, 25,221,181,237, 40,233,253,121, 74,160,216,157, 198,126, 55,131, 43,118, 83,142, 98, 76,100,136, 68,139,251,162, 23,154, 89,245,135,179, 79, 19, 97, 69,109,141, 9,129,125, 50, 189,143, 64,235,134,183,123, 11,240,149, 33, 34, 92,107, 78,130, 84,214,101,147,206, 96,178, 28,115, 86,192, 20,167,140,241,220, 18,117,202, 31, 59,190,228,209, 66, 61,212, 48,163, 60,182, 38, 111,191, 14,218, 70,105, 7, 87, 39,242, 29,155,188,148, 67, 3, 248, 17,199,246,144,239, 62,231, 6,195,213, 47,200,102, 30,215, 8,232,234,222,128, 82,238,247,132,170,114,172, 53, 77,106, 42, 150, 26,210,113, 90, 21, 73,116, 75,159,208, 94, 4, 24,164,236, 194,224, 65,110, 15, 81,203,204, 36,145,175, 80,161,244,112, 57, 153,124, 58,133, 35,184,180,122,252, 2, 54, 91, 37, 85,151, 49, 45, 93,250,152,227,138,146,174, 5,223, 41, 16,103,108,186,201, 211, 0,230,207,225,158,168, 44, 99, 22, 1, 63, 88,226,137,169, 13, 56, 52, 27,171, 51,255,176,187, 72, 12, 95,185,177,205, 46, 197,243,219, 71,229,165,156,119, 10,166, 32,104,254,127,193,173 }; assert(len > 0 && len <= 128); assert(bits <= 1024); if (!bits) bits = 1024; memcpy(xkey, key, len); for (i = 0; i < 128; i++) { L[i] = PITABLE[L[i-1] + L[i-T]]; } T8 = (T1+7) >> 3; TM = 255 MOD 2^(8 + T1 - 8*T8); L[128-T8] = PITABLE[L[128-T8] & TM]; for (i = 0; i < 127-T8; i++) { L[i] = PITABLE[L[i+1] XOR L[i+T8]]; }; i = 63; K[i] = L[2*i] + 256*L[2*i+1]; }; void RC2Encryption::ProcessBlock( const unsigned short K[64], ) { unsigned R3, R2, R1, R0, i; for (i = 0; i < 16; i++) { R0 += (R1 & ~R3) + (R2 & R3) + K[4*i+0]; R0 = R0 << 1; R1 += (R2 & ~R0) + (R3 & R0) + K[4*i+1]; R1 = R1 << 2; R2 += (R3 & ~R1) + (R0 & R1) + K[4*i+2]; R2 = R2 << 3; R3 += (R0 & ~R2) + (R1 & R2) + K[4*i+3]; R3 = R3 << 5; if (i == 4 || i == 10) { R0 += K[R3 & 63]; R1 += K[R0 & 63]; R2 += K[R1 & 63]; R3 += K[R2 & 63]; } } void RC2Decryption::ProcessBlock( const unsigned short K[64], ) { unsigned R3, R2, R1, R0, i; for (i = 0; i < 16; i++) { R3 = R3 << 5; R3 += (R0 & ~R2) + (R1 & R2) + K[4*i-3]; R2 = R2 << 3; R2 += (R3 & ~R1) + (R0 & R1) + K[4*i-2]; R1 = R1 << 2; R1 += (R2 & ~R0) + (R3 & R0) + K[4*i-1]; R0 = R0 << 1; R0 += (R1 & ~R3) + (R2 & R3) + K[4*i-0]; if (i == 4 || i == 10) { R3 -= K[R2 & 63]; R2 -= KR1 & 63]; R1 -= K[R0 & 63]; R0 -= K[R3 & 63]; } }

1 0

Re: Latest smartcard software
by Secret Squirrel 17 Dec '03

17 Dec '03

>They'll say hey, you've already surrendered your biometric number >during fingerprinting for driver's licenses. > >It will be too late. > >The high-tech American Leviathan will be in place. Sounds like Microsoft. No, really. I'm dead serious. Like it or not, people have to use Mickeysoft crap sooner or later. Want to read that document? Read that email? Run that program? Purchase things (software which runs)? It's garbage. I know it's garbage. Many of us here know it's garbage. But we have to use it anyway. Compare this to the smartcard as proposed like this: I know it's garbage. Many of us here know it's garbage. But we have to use it anyway. Want to read that document? Read that email? Access that computer system? Drive your car? Get in your house? Get through a toll booth? Enter or leave the country? Better make sure your papers are in order. The high-tech American Leviathan is already in place. The problem is that it'll just get worse because the sheeple are, by definition, naked, stupid, and blind.

2 1

Re: SC rules 1st doesn't cover lies [CNN] (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 21 Jan 1998 23:47:05 -0500 > From: Declan McCullagh <declan(a)well.com> > Subject: Re: SC rules 1st doesn't cover lies [CNN] > Reply-To: austin-cpunks(a)ssz.com > > Clarification on the Subject: line -- the court's ruling, at least as > described below, applies only to government employees. It is the > state-as-employer, not the state-as-sovereign, role the court is discussing. > > In other words, we're still free to lie, cheat, and steal[1]. > >> "A citizen may decline to answer the question, or answer it > >> honestly, but he cannot with impunity knowingly and willfully answer > >> with a falsehood," Rehnquist said. So you have to be an employee of the government to be a citizen? ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Misty??? (fwd)
by Adam Shostack 17 Dec '03

17 Dec '03

Anonymous wrote: |Adam Back wrote: Well, for the record, that was me, not Mr. Back, but who can tell the difference? |> Tim May wrote: |> | I wouldn't call Misty "snake oil." But it's also been thoroughly taken |> | apart and shown to be weak. Importantly, it was submitted by Mitsubishi for |> | peer review. |> |> Could you provide a pointer to the analysis paper? | |Adam, you should know better than to ask. Everyone knows you can't |trust a bigot to do cryptography. Tim "Chop Chop" May's opinions about |Misty are based not on the strength of the cipher, but on the ethnicity |of the creator. Its clear to me that Nobuki baits Tim, and Tim baits Nobuki. Its not as entertaining as the Detwieler days (where we would have gotten the claimn that Tim and Nobuki were the same), but hey.. I'm perfectly happy to let bigots do my cryptanalysis for me. As long as they get positive results, hey, I'm more secure. Not believing that the Americans could break German engineering was one of the failures of the Enigma team. Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Your e-mail sent to me by mistake
by trump7＠foursssst.com 17 Dec '03

17 Dec '03

Did you know that as many as 70% of all Americans have negative or incorrect information on their credit report and that one in five complaints to the Federal Trade Commission is against Credit Bureaus. ARE YOU ONE OF THE MILLIONS OF AMERICANS REJECTED FOR CREDIT? If so, we have the information you need: >Remove negative and incorrect information from your credit report< * Bankruptcies - REMOVED * Repossessions - REMOVED * Tax Liens - REMOVED * Judgments - REMOVED * Charge Offs - REMOVED * Late Payments - REMOVED >>Get all of the credit cards you want<< >>Obtain a Home mortgage<< >>Qualify for a car loan<< Everyone is entitled to a better lifestyle for themselves and their family and especially such a basic need as a house, a car, or credit cards. Imagine the thrill of driving home for the first time in a new car and showing it to your friends, relatives and neighbors, or the convenience of having a credit card for making purchases, or fulfilling the American dream of owning a Home. NOW IT IS POSSIBLE! All of the information you need is contained in our confidential report; =========================================== "Insider's Guide to Credit Repair Secrets." =========================================== Best of all, you can have this report RIGHT NOW, delivered directly to your e-mail inbox in a matter of minutes. Read on for further details. The "Insider's Guide to Credit Repair Secrets" contains everything you need in order to repair your own credit report. In addition, as the title implies, we include some of the industries best kept and guarded secrets, things the Credit Bureaus and Banks don't want you to know. Don't pay hundreds or perhaps thousands of dollars to a credit repair agency. You can do it yourself for FREE, with equal or better results. ===> BONUS OFFER <=== The "Insider's Guide to Credit Repair Secrets" normally sells for $19.95 and is worth every penny. However, through a special arraignment with the author, we are able to offer the report to you for only $9.95. This is a limited time offer so YOU MUST ACT NOW. If you order immediately, we will also include the following two valuable BONUS SECTIONS absolutely FREE: BONUS SECTION #1 HOW TO GET A CREDIT CARD OR BANK LOAN * Shaping your application to improve your chances of being approved * How creditors rate an application * Hot tips on how you can stack the odds in your favor * How to use a co-signer * How to establish AAA credit in 30 days BONUS SECTION #2 TOP 10 WEB SITES FOR FREE CREDIT REPAIR & CREDIT CARD INFO These 10 Web sites are the best of the best. All of them are absolutely FREE. They contain additional credit repair information, tips on obtaining credit cards and loans, databases of hundreds upon hundreds of credit card issuers, consumer help on overcoming debt, etc... BUT THERE'S MORE............. If you order within 48 hours of receiving this e-mail, we will also include absolutely FREE with your purchase, a complete copy of the "Fair Credit Reporting Act", word-for-word as written by the Federal Trade Commission. Understanding the "Fair Credit Reporting Act" is the key to enforcing your rights with regard to negative entries on your credit file. HOW TO ORDER!!! To order the "Insider's Guide to Credit Repair Secrets" plus both BONUS SECTIONS, plus a complete copy of the "Fair Credit Reporting Act" all delivered IMMEDIATELY to your e-mail inbox, all you need to do is follow these simple steps; 1) Get a pen and piece of paper ready to write down an important e-mail address. 2) Call 1-900-448-8901. (Your phone bill will be charged $9.95 for this call. If you are under 18 years of age, you must receive parental permission before calling) 3) Listen to the 900 number recording and write down the e-mail address given. 4) Send any e-mail message to the address given on the recording and within minutes, the report, along with both BONUS SECTIONS and the "Fair Credit Reporting Act" will be electronically delivered to your e-mail inbox. Isn't $9.95 a small price to pay for the convenience of a clean credit record and all of the advantages that go along with it. Order the "Insider's Guide to Credit Repair Secrets" plus the two FREE BONUS SECTIONS and the "Fair Credit Reporting Act" today and start enjoying the credit you deserve. CALL 1-900-448-8901 NOW. You will be glad you did!!! The information supplied in the "Insiders Guide to Credit Repair Secrets" is applicable only to United States residents. If you have received this e-mail solicitation and live outside the United States of America, please accept our apology and disregard this message. Thank you.

1 0

Free Hot Talk
by n＠n.com 17 Dec '03

17 Dec '03

Want to talk with HOT, WET, SEXY, young girls right now? They are waiting for your call right now, and they want to MAKE YOU CUM! ARE YOU: Horney? Lonely? Out of town? Bored? Just need someone to talk to??? WELL THEN CALL, AMBER'S HOT SEX TALK AT: 1-473-407-9374 You will be able to talk to girls 1 ON 1! RIGHT NOW! **ABSOLUTELY FREE!** **ABSOLUTELY FREE!** All you pay is long distance fees! NEVER RUN-AROUNDS! NO TRANSFERS TO 1-900 NUMBERS, OR ANY OTHER NUMBERS TO CALL! NO NEED FOR CREDIT CARDS! TRY US OUT YOU'LL LOVE IT! 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 1-473-407-9374 *GAY? WANT TO TALK TO HOT HUNG MEN RIGHT NOW? CALL: 011-678-75628* 18+ Years old to call. /////////////////////////////////////////////////////////////////////////////// If you wish to be removed from this advertiser's future mailings, please reply to: remove(a)polbox.com with the subject "Remove" and this software will automatically block you from their future mailings. ////////////////////////////////////////////////////////////////////////////////

1 0

Candidate Blacknet Customer :-)
by Bill Stewart 17 Dec '03

17 Dec '03

http://www.newsmait.com has a section called the "Newspaper Intelligence Page", which has anonymized comments from newspaper reporters about what their (current or former) newspaper working environments are like. Aside from the usual issues that any site for griping about work offers, this site provides a lot of insight into the media business - how much freedom do writers have, what kinds of topics get squashed, what the biases of the editors and management are like. The folks who run the site have some obvious concerns about lawsuits. Looks like a good candidate for a Blacknet-style web site... Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium
by John Kelsey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [ To: cypherpunks ## Date: 01/21/98 ## Subject: Re: (eternity) Eternity as a secure filesystem/backup medium ] >Subject: Re: (eternity) Eternity as a secure filesystem/backup medium >From: Adam Back <aba(a)dcs.ex.ac.uk> >Date: 1998/01/18 >1. communications crypto used by the author in submitting > the document is broken This is only a threat if the authorities have a good idea who submitted the data, and want to prove it. Otherwise, you end up with billions of encrypted documents, each encrypted with a moderately weak cipher. (Even assuming that the cipher turns out to have only 40 bits of strength, this is too expensive to do for more than a handful of documents.) >2. the eternity architecture contains encrypted documents to > frustrate attempts to locate documents, and to hide the > contents of documents from individual servers Again, this won't be too economical unless the eternity service is rarely used. >3. communications crypto used to request and deliver > documents is broken thus revealing the readers identity >So it is useful to design upgrade paths for ciphers into the >protocols where possible. Definitely--this is always a good idea, right? >Other approaches we could take are to use very conservative >cipher key sizes and protocols combining multiple ciphers in >ways which gives us the security of the best of the ciphers. >For example: > R = random, C = 5DES( R ) || blowfish-484( M xor R ) >Where 5DES is say E-D-E-D-E with 5 independent DES keys. >Constructs to combine in strong ways hash functions, macs, >symmetric and asymmetric ciphers would be useful. Is there >much research in this area? Yes. Massey and Maurer did a Journal of Cryptography paper titled ``The Importance of Being First,'' which says that in any chain of encryptions with different ciphers and independent keys, such as E_1(E_2(E_3(data))), the whole thing is provably as strong as the first cipher used on the data (E_3, in my example above). This is really obvious, when you reflect that an attacker can always try to break data encrypted with E_3 by superencrypting it with E_1 and E_2, and then mounting his attack on E_1(E_2(E_3(data))). Of course, if keys aren't independent among the three ciphers, then you don't get any guarantee of this kind. The other thing to note is that if you're just generating keystream sequences, as you would with RC4 or SEAL, then all ciphers are ``first.'' Rivest and Sherman also did some work on randomized encryption, of the kind you discuss, in the Crypto '82 proceedings. Your construction is very similar to one of theirs. Let M = message and R = a message-sized random number, then in E_1(R), E_2(R XOR M) both E_1 and E_2 must be broken to learn M. (Imagine this isn't the case, then either E_1 or E_2 wasn't broken. If you didn't break E_2 but broke E_1, then you only learn R, which is useless to you--it's random and uncorrelated with M. If you broke E_2 but not E_1, you would have a message encrypted with a one-time pad.) This generalizes nicely to E_1(R1), E_2(R2), ..., E_N(RN), E_{N+1}(R1 XOR R2 XOR ... XOR M). If those random numbers are really random, then if any one of those ciphers resists your attacks, the message can't be recovered. Now, you can also do this with things that approximate random functions, which they also discuss. Thus, you might use: f_1(),f_2(), ..., f_n() are N independently-keyed different cryptographic functions that approximate random functions. The funny thing is, if you instantiate this intelligently, you get a message encrypted by N different stream ciphers, perhaps with a random parameter per message thrown in during keying of those ciphers. Thus, suppose s_1(K1) = RC4(K1) s_2(K2) = 3DES-OFB(K2) s_3(K3) = SHA1-Counter-Mode(K3) s_4(K4) = Blowfish-OFB(K4) s_5(K5) = SAFER-SK128(K5). and that these keys are different per message and are all independent. Then, you get the result that M XOR s_1(K1) XOR S_2(k2) XOR ... XOR s_5(k5). leaves no way to recover M unless all five s_i() can be guessed. Note that, in practice, this isn't likely to be useful unless you've done the same kind of thing for symmetric key distribution, random number generation, etc. Otherwise, your attacker in 2050 will bypass the symmetric encryption entirely and factor your RSA modulus, or guess all the entropy sources used for your PRNG, or whatever else you can think of. The good news, though, is that active attacks (like chosen input attacks) and many side-channel attacks (e.g., timing attacks) turn out not to be possible if you are trying to mount them after the encryption has been carried out. >Adam - --John Kelsey, kelsey(a)counterpane.com / kelsey(a)plnet.net NEW PGP print = 5D91 6F57 2646 83F9 6D7F 9C87 886D 88AF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNMeCqSZv+/Ry/LrBAQGxpgQAloxNjdZMf6l/7U520ZSIVuk7lFZcu0+J 5tUyQgHtS4EAplC1OBnYc8B3pzCir6VCXinmNbClgalXhrRFfmV7vTQLZySaVv/+ 0T44TFkJ0Ldu4cTsA2ertL0jcCXiBp38mhVK2IFbPtN+04B+een8jrUYtzx/qIj5 ztBpBb4yil8= =wBTR -----END PGP SIGNATURE-----

4 3

Hi !!!
by hoilu46＠concentric.net 17 Dec '03

17 Dec '03

Hi baby, I'm Christy. Cum join my girlfriends and I for some Live Erotic Chat!! We we're so naughty they banned us from the U.S.A!!!! We're so hot and horny we can't wait to get it on with you!! Call us at, 011-378-656-346. That's 011-378-656-346!! We'll be waiting ....... International rates apply. You be 18 or older to use this service.

1 0

Re: On the LAM--Local Area Mixes (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 22 Jan 1998 10:30:26 -0800 > Original-From: Bill Stewart <bill.stewart(a)pobox.com> > Subject: Re: On the LAM--Local Area Mixes > the year before the Supreme Court issued the Exclusionary Rule, > the New York City police didn't bother getting any search warrants, > because the Constitutional requirement that they do so didn't have > any real enforcement mechanism. Are police considered an extension of the judicial or the executive arm of the government? ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Returned mail: User unknown
by Mail Delivery Subsystem 17 Dec '03

17 Dec '03

The original message was received at Fri, 23 Jan 1998 03:24:38 -0500 (EST) from ts26-15.homenet.ohio-state.edu [140.254.114.54] ----- The following addresses had permanent fatal errors ----- <eureka-unsubscribe(a)eureka.abc-web.com> ----- Transcript of session follows ----- ... while talking to eureka.abc-web.com.: >>> RCPT To:<eureka-unsubscribe(a)eureka.abc-web.com> <<< 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) 550 <eureka-unsubscribe(a)eureka.abc-web.com>... User unknown Reporting-MTA: dns; chemistry.mps.ohio-state.edu Received-From-MTA: DNS; ts26-15.homenet.ohio-state.edu Arrival-Date: Fri, 23 Jan 1998 03:24:38 -0500 (EST) Final-Recipient: RFC822; eureka-unsubscribe(a)eureka.abc-web.com Action: failed Status: 5.1.1 Remote-MTA: DNS; eureka.abc-web.com Diagnostic-Code: SMTP; 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) Last-Attempt-Date: Fri, 23 Jan 1998 03:24:40 -0500 (EST) To: eureka-unsubscribe(a)eureka.abc-web.com Subject: (no subject) From: cypherpunks(a)toad.com Date: Wed, 07 Jan 1998 00:04:05 -0800

1 0

Financial Cryptography '98 Preliminary Program
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Tue, 20 Jan 1998 23:41:27 -0400 X-Authentication-Warning: online.offshore.com.ai: list set sender to fc98-request(a)offshore.com.ai using -f Date: Wed, 21 Jan 1998 04:25:40 +0100 (MET) From: Ray Hirschfeld <R.Hirschfeld(a)cwi.nl> To: R.Hirschfeld(a)cwi.nl Subject: Financial Cryptography '98 Preliminary Program Resent-From: fc98(a)offshore.com.ai X-Mailing-List: <fc98(a)offshore.com.ai> archive/latest X-Loop: fc98(a)offshore.com.ai Precedence: list Resent-Sender: fc98-request(a)offshore.com.ai Financial Cryptography '98 Second International Conference February 23-25, 1998, Anguilla, BWI CONFERENCE PROGRAM General Information: Financial Cryptography '98 (FC98) is a conference on the security of digital financial transactions. Meetings alternate between the island of Anguilla in the British West Indies and other locations. This second meeting will be held in Anguilla on February 23-25, 1998. FC98 aims to bring together persons involved in both the financial and data security fields to foster cooperation and exchange of ideas. Original papers were solicited on all aspects of financial data security and digital commerce in general. Program Committee: Matt Blaze, AT&T Laboratories--Research, Florham Park, NJ, USA Antoon Bosselaers, Katholieke Universiteit Leuven, Leuven, Belgium Yves Carlier, Bank for International Settlements, Basel, Switzerland Walter Effross, Washington College of Law, American U., Washington DC, USA Matthew Franklin (Co-Chair), AT&T Laboratories--Research, Florham Park, NJ, USA Michael Froomkin, U. Miami School of Law, Coral Gables, FL, USA Rafael Hirschfeld (Chair), Unipay Technologies, Amsterdam, The Netherlands Alain Mayer, Bell Laboratories/Lucent Technologies, Murray Hill, NJ, USA Moni Naor, Weizmann Institute of Science, Rehovot, Israel Frank Trotter, Mark Twain Ecash/Mercantile Bank, St. Louis, MO, USA Doug Tygar, Carnegie Mellon University, Pittsburgh, PA, USA Moti Yung, CertCo LLC (formerly: Bankers Trust E-Commerce), New York, NY, USA Conference Program for FC98: Monday 23 February 1998 800 -- 820 Breakfast 820 -- 830 Welcome 830 -- 905 Micropayments via Efficient Coin-Flipping Richard J. Lipton (Princeton University, Princeton, NJ, USA) Rafail Ostrovsky (Bellcore, Morristown, NJ, USA) 905 -- 940 X-Cash: Executable Digital Cash Markus Jakobsson (Bell Laboratories, Murray Hill, NJ, USA) Ari Juels (RSA Laboratories, Bedford, MA, USA) 940 -- 1015 Billing Without Paper...Or Billing Without Billers? Caveat Biller: 3rd Party Concentrators Could Come Between You and Your Customers Richard K. Crone (CyberCash, Reston, VA, USA) 1015 -- 1045 Coffee Break 1045 -- 1120 A Platform for Privately Defined Currencies, Loyalty Credits, and Play Money David P. Maher (AT&T Labs--Research, Florham Park, NJ, USA) 1120 -- 1155 Assessment of Threats for Smart Card Based Electronic Cash Kazuo J. Ezawa, Gregory Napiorkowski (Mondex International, Florham Park, NJ, USA) 1155 -- 1230 Using a High-Performance, Programmable Secure Coprocessor Sean W. Smith, Elaine R. Palmer, Steve Weingart (IBM T.J. Watson Research Center, Yorktown Heights, NY, USA) 1230 -- 1330 Lunch 1800 -- 1930 Cocktail Reception (at Mariners Hotel) Tuesday 24 February 1998 800 -- 830 Breakfast 830 -- 905 Secure Group Barter: Multi-Party Fair Exchange with Semi-Trusted Neutral Parties Matt Franklin (AT&T Labs--Research, Florham Park, NJ, USA) Gene Tsudik (USC Information Sciences Institute, Marina del Rey, CA, USA) 905 -- 940 A Payment Scheme Using Vouchers Ernest Foo, Colin Boyd (Queensland University of Technology, Brisbane, Australia) 940 -- 1015 A Formal Specification of Requirements for Payment Transactions in the SET Protocol Catherine Meadows, Paul Syverson (Naval Research Laboratory, Washington, DC, USA) 1015 -- 1045 Coffee Break 1045 -- 1120 On Assurance Structures for WWW Commerce Markus Jakobsson (Bell Laboratories, Murray Hill, NJ, USA) Moti Yung (CertCo, New York, NY, USA) 1120 -- 1230 Panel Discussion Certificate Revocation: Mechanics and Meaning Barb Fox (Microsoft, Redmond, WA, USA), moderator Joan Feigenbaum (AT&T Labs--Research, Florham Park, NJ, USA) Paul Kocher (Valicert, Palo Alto, CA, USA) Michael Myers (Verisign, Mountain View, CA, USA) Ron Rivest (MIT Laboratory for Computer Science, Cambridge, MA, USA) 1230 -- 1330 Lunch 2000 -- 2200 Rump Session Wednesday 25 February 1998 800 -- 830 Breakfast 830 -- 930 Invited Speaker Private Signatures and E-commerce David Chaum (DigiCash, Palo Alto, CA, USA) 930 -- 1005 Group Blind Digital Signatures: A Scalable Solution to Electronic Cash Anna Lysyanskaya, Zulfikar Ramzan (MIT Laboratory for Computer Science, Cambridge, MA, USA) 1005 -- 1045 Coffee Break 1045 -- 1120 Curbing Junk E-Mail via Secure Classification Eran Gabber, Markus Jakobsson, Yossi Matias, Alain Mayer (Bell Laboratories, Murray Hill, NJ, USA) 1120 -- 1155 Publicly Verifiable Lotteries: Applications of Delaying Functions David M. Goldschlag (Divx, Herndon, VA, USA) Stuart G. Stubblebine (AT&T Labs--Research, Florham Park, NJ, USA) 1155 -- 1230 Security of Digital Watermarks Lesley R. Matheson, Stephen G. Mitchell, Talal G. Shamoon, Robert E. Tarjan, Francis X. Zane (STAR Lab, InterTrust Technologies, Sunnyvale, CA, USA) 1230 -- 1330 Lunch 1330 -- 1405 Security in the Java Electronic Commerce Framework Surya Koneru, Ted Goldstein (JavaSoft, Palo Alto, CA, USA) 1405 -- 1440 Beyond Identity: Warranty-Based Digital Signature Transactions Yair Frankel, David W. Kravitz, Charles T. Montgomery, Moti Yung (CertCo, New York, NY, USA) 1440 -- 1515 Compliance Checking in the PolicyMaker Trust Management System Matt Blaze, Joan Feigenbaum, Martin Strauss (AT&T Labs--Research, Florham Park, NJ, USA) 1515 -- 1545 Coffee Break 1545 -- 1620 An Efficient Fair Off-Line Electronic Cash System with Extensions to Checks and Wallets with Observers Aymeric de Solages, Jacque Traore (France Telecom--CNET, Caen, France) 1620 -- 1655 An Efficient Untraceable Electronic Money System Based on Partially Blind Signatures of the Discrete Logarithm Problem Shingo Mayazaki, Kouichi Sakurai (Kyushu University, Fukuoka, Japan) 1655 -- 1700 Closing The conference schedule and additional information is available at the URL http://www.cwi.nl/conferences/FC98/. Breakfast and lunch are provided at the conference. The conference organizers have left time open for corporate sponsored events, for networking, and for recreational activities on the resort island of Anguilla. Participants are encouraged to bring their families. Workshop: A 40-hour workshop, intended for anyone with commercial software development experience who wants hands-on familiarity with the issues and technology of financial cryptography, is planned in conjunction with FC98, to be held during the week following the conference. For more information on the workshop, please see the URL http://www.cs.berkeley.edu/~iang/fc98/workshop.html. For workshop registration, see the URL http://fc98.ai/. Special Attraction: On Thursday, February 26, 1998, there will be a total eclipse of the sun. The narrow zone of 100% totality will pass just south of Anguilla. A boat excursion to the center of the eclipse zone is planned, for an optimal view of the eclipse. The excursion is included in the conference registration; additional tickets can be purchased for accompanying persons. Venue: The Inter-Island Hotel is a small 14-room guest house with a large, comfortable 150-seat conference facility and additional space for a small 10-booth exhibition. The Inter-Island is on Road Bay, near Sandy Ground Village, in the South Hill section of Anguilla. The conference, workshop, and exhibition will have TCP/IP internet access. Shuttle service to the conference will be available. Air Transportation and Hotels: Air travel to Anguilla is typically done through San Juan for US flights, or St. Maarten/Martin for flights from Europe and the US. There are also connections via Antigua. Anguillan import duties are not imposed on hardware or software which will leave the island again. There are no other taxes--or cryptography import/export restrictions--on Anguilla. Hotels range from spartan to luxurious, and more information about hotels on Anguilla can be obtained from your travel agent, or at the URL http://fc98.ai/. A block reservation has been made at Mariners, and this is the recommended hotel except for those seeking budget accomodations. General Chairs: Robert Hettinga, Shipwright, Boston, MA, USA email: rah(a)shipwright.com Vincent Cate, Offshore Information Services, Anguilla, BWI email: vince(a)offshore.com.ai Exhibits and Sponsorship Manager: Blanc Weber, Seattle, WA, USA email: blancw(a)cnw.com Workshop Leader: Ian Goldberg, Berkeley, CA, USA email: iang(a)cs.berkeley.edu Registration: You can register and pay for conference admission via the World Wide Web at the URL http://fc98.ai/. The cost of the FC98 Conference is US$1,000. There are reduced rates of US$250 and US$100 for full-time academics and students. Booths for the exhibition start at US$5,000 and include two conference tickets. For more information about exhibit space, contact Blanc Weber, blancw(a)cnw.com. Sponsorship opportunities for FC98 are still available. The cost of the workshop is US$5000, and includes meals but not lodging. You can register for the workshop, which runs the week after the conference, at the URL http://fc98.ai/. Financial Cryptography '98 is held in cooperation with the International Association for Cryptologic Research. It is sponsored by: RSA Data Security Inc. <http://www.rsa.com> C2NET, Inc. <http://www.c2.net> Hansa Bank & Trust Company Limited, Anguilla <http://www.hansa.net/> Sicherheit und Privat- International Bank <mailto:spbank@schloss.li> Offshore Information Services <http://www.offshore.com.ai/> e$ <http://www.shipwright.com> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Cybersitter censors code
by David Honig 17 Dec '03

17 Dec '03

>--------------- Forwarded Message -------------- >From: rpj(a)ise.canberra.edu.au (Ross Johnson) > >Well, I just spent several hours tracking something down that I think >is SO braindead that it must be called evil. I hope this will save >someone else some hassle. > >There's an NT box on my desk that someone else uses every now and then. >This machine is otherwise used as my programming box and backup server. > >All of a sudden, my programming files were being corrupted in odd >places. I thought "hmm, my copy must be corrupt". So I refreshed the >files. No change. "hmm, the code depot copy must be corrupt".. Checked >from other machines. No problem there. Viewed the file from a web based >change browser in Internet Explorer. Same corruption in the file. >Telnet'd to the server machine and just cat'd the file to the terminal. >Same problem. > >What's going on? > >The lines that were corrupted were of the form >#define one 1 /* foo menu */ >#define two 2 /* bar baz */ > >What I always saw ON THIS MACHINE ONLY was: >#define one 1 /* foo */ ># fine two 2 /* bar baz */ > >Can you guess what was happening? > >Turns out, someone had inadvertly installed this piece of garbage >called CyberSitter, which purports to protect you from nasty internet >content. Turns out that it does this by patching the TCP drivers and >watching the data flow over EVERY TCP STREAM. Can you spot the offense >word in my example? It's "NUDE". Seems that cybersitter doesn't care if >there are other characters in between. So it blanks out "nu */ #de" >without blanking out the punctuation and line breaks. Very strange and >stupid. > >It also didn't like the method name "RefreshItems" in another file, >since there is obviously a swear word embedded in there. Sheesh. > >It's so bad it's almost funny. Hope this brightens your day as much as >it brighted mine :-). ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu ""The tragedy of Galois is that he could have contributed so much more to mathematics if he'd only spent more time on his marksmanship."

1 0

Re: Misty???
by Anonymous 17 Dec '03

17 Dec '03

Adam Back wrote: > Tim May wrote: > | I wouldn't call Misty "snake oil." But it's also been thoroughly taken > | apart and shown to be weak. Importantly, it was submitted by Mitsubishi for > | peer review. > > Could you provide a pointer to the analysis paper? Adam, you should know better than to ask. Everyone knows you can't trust a bigot to do cryptography. Tim "Chop Chop" May's opinions about Misty are based not on the strength of the cipher, but on the ethnicity of the creator. On Thu, 11 Sep 1997 22:09:15, Tim May wrote: > At 9:30 PM -0700 9/11/97, Nobuki Nakatuji wrote: > >Does anybody know MITSUBISHI MISTY algorithm ? > >If you know it,Please send e-mail to me. > > > > You want me play Misty for you? You send me $2500, I play Misty. > > Like you do, I take much money, chop chop. > > (Now shut the fuck up and get the hell off our list with your demands for > money to explain your bullshit one time pad scheme.)

1 0

Communicator 5.0 to be GPL'ed
by Jrbl Pookah 17 Dec '03

17 Dec '03

Here's something I came across on one of my other lists. I looked at the URL, and it looked good. Anybody able to confirm/deny? And what kind of implications do y'all think this'll have for Netscape's security? (What if improved security code comes to Netscape from bodies /outside/ the US?) ---------- Forwarded message ---------- Date: Thu, 22 Jan 1998 10:33:21 -0800 (PST) From: <snip...snip> Subject: Communicator 5.0 to be GPL'ed Yes its true !! http://biz.yahoo.com/prnews/980122/ca_netscap_3.html woo hoo!! Dex- ----End Forwarded Message--- -- Joseph Blaylock Castle Computers, Inc. JOAT,MODF blaylock(a)castlec.com (513)469-0888 YMMV -- "Everything is perfect, but there is a lot of room for improvement." ---Shunryu Suzuki

1 0

State of the Union Address
by bubbabill＠whitehouse.gov 17 Dec '03

17 Dec '03

Hear that the State of the Union next Monday has a section on Internet - networks - critical infrastructure protection et al. Anyone have any details?

1 0

Cybersitter censors code
by Secret Squirrel 17 Dec '03

17 Dec '03

>>Turns out, someone had inadvertly installed this piece of garbage >>called CyberSitter, which purports to protect you from nasty internet >>content. Turns out that it does this by patching the TCP drivers and >>watching the data flow over EVERY TCP STREAM. Can you spot the offense >>word in my example? It's "NUDE". Seems that cybersitter doesn't care if >>there are other characters in between. So it blanks out "nu */ #de" >>without blanking out the punctuation and line breaks. Very strange and >>stupid. Find out who it is and fire his ass for sabotage of the company computer systems.

1 0

Ultra computer
by Anonymous 17 Dec '03

17 Dec '03

Go back to the sushi bar and read your English book. Chop chop. >Ultra computer which NEC had the calculation speed of the world >maximum of about 1000 times of the super computer to was decided >to be developed. >Ultra computer will be completed in 2001. >It has the performance that the calculation which takes 10000 years >with the personal computer is made of 3, 4 days.

2 1

Premail/PERL 5.004 fix
by Jim Burnes 17 Dec '03

17 Dec '03

Punks: I've needed to upgrade PERL recently to 5.004 because some new software wouldn't work without it. I didn't want to do it because I heard it would break premail. I decided to DL the old perl-5.003 RPM from sunsite just in case 5.004 really screwed premail up. The actual truth of the matter is that 5.004 just warns you that premail re-declares several variable. Apparently this has no effect on the program, but those warnings are pretty annoying. Here is now you fix it: Define a WARN trap that checks a variable (DOWARN) to see whether it should warn or not. Since the re-declarations occurr in three different places you just have to set DOWARN to 0 before the line and then DOWARN to 1 after the line. Crude, but effective. Most of this code can be found by doing a man page on 'perlfunc', but I thought I'd save someone the time. Here is the diff for premail version .449. 100a101,102 > BEGIN { $SIG{'__WARN__'} = sub { warn $_[0] if $DOWARN } } > $DOWARN = 0; 1274a1277 > $DOWARN = 0; 1275a1279 > $DOWARN = 1; 1356a1361 > $DOWARN = 0; 1357a1363 > $DOWARN = 1; 6319a6326 > $DOWARN = 0; 6320a6328 > $DOWARN = 1; Your milelage may vary... Jim Burnes jim.burnes(a)ssds.com

1 0

Eureka! Fri Jan 23 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Friday's issue of Eureka! HARD CITY Ouch - you bet it's hard. What is? Stupid question! One visit to this website and the search for porn becomes more of a daily jaunt. It's simply packed with stuff to do and see, and what's more, it's FREE for a limited trial period! Hard City ......................... http://www.hardcity.com/ PLEASE VISIT THIS FINE EUREKA! PARTNER SITE THE ULTIMATE HARDCORE SITES http://sexplosion.com/adverts.shtml An incredible collection of over 30 sites featuring the hottest free hardcore photos. The pix are easy to find and the sites are all very accessible. You won't be disappointed. XXXTASY ISLAND Cum on vacation to XXXtasy island! You'll get a very warm wet welcome from the island girls. They serve you Cock Tales of erotic stories. They show you hot sex in their Slut Huts. A nice looking site with good looking sex. It's where the waves and the babes come lapping around your thighs. XXXtasy Island ................. http://www.xtasyisland.com/ AWESOME XXX A nice spread of free pix to choose from. A cool site with plenty to see. Do group sex, mixed race sex, one on one, lesbian or bondage pics get you hot? These are just some of the free hardcore pix available, and thumbnailed. Awesome! Awesome XXX ................ http://www.kjmedia.com/awesome/ BOOMBASTIC Take a peeping tom's ride thru over 1000 free pix. Nice quality photos show the high class girls in the way that God intended them - flat on their backs on the Net. Technology is a wonderful thing. Good looking girls. Good looking site. Boombastic ................ http://205.246.63.10/boombastic/ SEX UTOPIA Your head will spin and your blood will pump at Sex Utopia. There's free thumbnailed pix and you'll wish you were in'em! The girls are getting serviced, good n'hard. You can see it all nice n'close. Sex Utopia takes you to the edge of heaven Sex Utopia ........................... http//207.55.184.113/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ Teenage lesbian .. http://207.240.169.120/lesbian/start.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY ALLISON: Big-Boobs, Huge Tits. This girl is built like the proverbial shit house. With curves like hers, Allison's tits should be illegal. But don't let her boobs fool you, she has plenty of other ASSets to go around. Allison is not only a hot body, but she is a real sweetheart and her eyes will mesmerize you! ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY HotStories.com: Tired of all those pics? Hot Stories lets you use your imagination to is full potential. Over 100 free sex stories in 8 different categories. Our stories are worth a thousand pics! ................ http://www.hotstories.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?230 Pic 2 --------------------------> http://137.39.63.229/?231 Pic 3 --------------------------> http://137.39.63.229/?232 Pic 4 --------------------------> http://137.39.63.229/?233 Pic 5 --------------------------> http://137.39.63.229/?234 Pic 6 --------------------------> http://137.39.63.229/?235 Pic 7 --------------------------> http://137.39.63.229/?236 Pic 8 --------------------------> http://137.39.63.229/?237 Pic 9 --------------------------> http://137.39.63.229/?238 Pic 10 --------------------------> http://137.39.63.229/?239 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Netscape 5 will be GPL'ed
by root 17 Dec '03

17 Dec '03

[Press Releases] http://www.netscape.com/newsref/pr/newsrelease558.html?cp=nws01flh1 NETSCAPE ANNOUNCES PLANS TO MAKE NEXT-GENERATION COMMUNICATOR SOURCE CODE AVAILABLE FREE ON THE NET BOLD MOVE TO HARNESS CREATIVE POWER OF THOUSANDS OF INTERNET DEVELOPERS; COMPANY MAKES NETSCAPE NAVIGATOR AND COMMUNICATOR 4.0 IMMEDIATELY FREE FOR ALL USERS, SEEDING MARKET FOR ENTERPRISE AND NETCENTER BUSINESSES ---------------------------------------------------------------------------- MOUNTAIN VIEW, Calif. (January 22, 1998) -- Netscape Communications Corporation (NASDAQ: NSCP) today announced bold plans to make the source code for the next generation of its highly popular Netscape Communicator client software available for free licensing on the Internet. The company plans to post the source code beginning with the first Netscape Communicator 5.0 developer release, expected by the end of the first quarter of 1998. This aggressive move will enable Netscape to harness the creative power of thousands of programmers on the Internet by incorporating their best enhancements into future versions of Netscape's software. This strategy is designed to accelerate development and free distribution by Netscape of future high-quality versions of Netscape Communicator to business customers and individuals, further seeding the market for Netscape's enterprise solutions and Netcenter business. In addition, the company is making its currently available Netscape Navigator and Communicator Standard Edition 4.0 software products immediately free for all users. With this action, Netscape makes it easier than ever for individuals at home, at school or at work to choose the world's most popular Internet client software as their preferred interface to the Internet. "The time is right for us to take the bold action of making our client free - and we are going even further by committing to post the source code for free for Communicator 5.0," said Jim Barksdale, Netscape's president and chief executive officer. "By giving away the source code for future versions, we can ignite the creative energies of the entire Net community and fuel unprecedented levels of innovation in the browser market. Our customers can benefit from world-class technology advancements; the development community gains access to a whole new market opportunity; and Netscape's core businesses benefit from the proliferation of the market-leading client software." Netscape plans to make Netscape Communicator 5.0 source code available for modification and redistribution beginning later this quarter with the first developer release of the product. The company will handle free source distribution with a license which allows source code modification and redistribution and provides for free availability of source code versions, building on the heritage of the GNU Public License (GPL), familiar to developers on the Net. Netscape intends to create a special Web site service where all interested parties can download the source code, post their enhancements, take part in newsgroup discussions, and obtain and share Communicator-related information with others in the Internet community. Netscape will also continue to develop new technologies and offer periodic certified, high-quality, supported releases of its Netscape Communicator and Navigator products, incorporating some of the best features created by this dynamic community. The ubiquity of Netscape's client software facilitates Netscape's strategy of linking millions of individuals to businesses. Today's announcements will help to further proliferate Netscape's award-winning client software which today has an installed base of more than 68 million, providing a ready market for businesses using Netscape's Networked Enterprise software solutions and Netscape Netcenter services. Netscape's research indicates that in the education market where Netscape's products are free, the Netscape client software commands approximately 90 percent share, indicating that users tend to choose Netscape when the choice is freely available. Making its browser software free also will enable Netscape to continue to drive Internet standards, maximize the number of users on the Internet, and expand the third-party community of companies and products that take advantage of the Netscape software platform. Netscape has successfully shifted its business over the past year toward enterprise software sales and to revenues from its Web site business, and away from standalone client revenues. In the third quarter of 1997, standalone client revenues represented approximately 18 percent of Netscape's revenue, with the rest coming from enterprise software, services and the Web site. Preliminary results for the fourth quarter of 1997, which Netscape announced January 5, show standalone client revenues decreased to approximately 13 percent in the fourth quarter. In the fourth quarter of 1996 by comparison, standalone client revenue represented approximately 45 percent of Netscape's revenue. In conjunction with its free client, Netscape separately announced today that it is launching a host of enhanced products and services that leverage its free client software to make it easy for enterprise and individual customers to adopt Netscape solutions. The new products and services reinforce Netscape's strategy of leveraging market penetration of its popular client software and its busy Internet site to seed further sales of Netscape software solutions in the home and business markets. The new products and services include enhanced subscription and support packages, an investment protection program for Netscape Communicator users, new reduced pricing on Netscape's retail and enterprise client products, new Premium Services on its Netscape Netcenter online service and Netscape SuiteSpot server software upgrades featuring Netscape client software. In addition, the company separately announced the launch of an aggressive new software distribution program called "Unlimited Distribution" to broadly distribute its market-leading Internet client software for free. Unlimited Distribution enables Original Equipment Manufacturers (OEMs), Internet Service Providers (ISPs), telecommunications companies, Web content providers, publishers and software developers to download and redistribute Netscape Communicator and Netscape Navigator easily with "no strings attached." In addition, beginning immediately, individual users can download Netscape Communicator or Navigator for free, register for Netscape Netcenter and, beginning tomorrow, enter the Choose Netscape Sweepstakes to win exciting travel-related prizes including a grand prize of two all-inclusive, seven-night tropical resort vacations. Individuals can download a free copy of Netscape Communicator client software or the Netscape Navigator browser from the Netscape home page at http://home.netscape.com, or by clicking on any of the thousands of "Netscape Now" buttons on the Internet. Netscape Communicator Professional Edition, which adds features for enterprise customers, will be available for US$29. Netscape Communications Corporation is a premier provider of open software for linking people and information over enterprise networks and the Internet. The company offers a full line of Netscape Navigator clients, servers, development tools and commercial applications to create a complete platform for next-generation, live online applications. Traded on NASDAQ under the symbol "NSCP," Netscape Communications Corporation is based in Mountain View, California. Additional information on Netscape Communications Corporation is available on the Internet at http://home.netscape.com, by sending email to info(a)netscape.com or by calling 650/937-2555 (corporate customers) or 650/937-3777 (individuals). Netscape is a trademark of Netscape Communications Corporation, which is registered in the United States and other jurisdictions. Netscape Communications, the Netscape Communications logo, Netscape Navigator, Netscape SuiteSpot, Netscape Composer, Netscape Messenger and Netscape Communicator are trademarks of Netscape Communications Corporation. ---------------------------------------------------------------------------- Corporate Sales: 650/937-2555 · Corporate Renewal Sales: 650/937-2929 · Personal Sales: 650/937-3777 · Government Sales: 650/937-3678 · Education Sales: 650/937-2810 If you have any questions, please visit Customer Service, or contact your nearest sales office. Copyright © 1998 Netscape Communications Corporation. This site powered by Netscape SuiteSpot servers.

10 12

toc.htm
by Jim Choate 17 Dec '03

17 Dec '03

FEDERAL GUIDELINES FOR SEARCHING AND SEIZING COMPUTERS TABLE OF CONTENTS PREFACE INTRODUCTION I. KEY TERMS AND CONCEPTS A. DEFINITIONS B. LIST OF COMPUTER SYSTEM COMPONENTS C. DETERMINING THE COMPUTER'S ROLE IN THE OFFENSE II. GENERAL PRINCIPLES A. SEARCH WARRANTS B. PLAIN VIEW C. EXIGENT CIRCUMSTANCES D. BORDER SEARCHES E. CONSENT SEARCHES 1. Scope of the Consent 2. Third-Party Consent a. General Rules b. Spouses c. Parents d. Employers e. Networks: System Administrators F. INFORMANTS AND UNDERCOVER AGENTS III. SEIZING HARDWARE A. THE INDEPENDENT COMPONENT DOCTRINE B. HARDWARE AS CONTRABAND OR FRUITS OF CRIME 1. Authority for Seizing Contraband or Fruits of Crime 2. Contraband and Fruits of Crime Defined C. HARDWARE AS AN INSTRUMENTALITY OF THE OFFENSE 1. Authority for Seizing Instrumentalities 2. Instrumentalities Defined D. HARDWARE AS EVIDENCE OF AN OFFENSE 1. Authority for Seizing Evidence 2. Evidence Defined E. TRANSPORTING HARDWARE FROM THE SCENE IV. SEARCHING FOR AND SEIZING INFORMATION A. INTRODUCTION B. INFORMATION AS CONTRABAND C. INFORMATION AS AN INSTRUMENTALITY D. INFORMATION AS EVIDENCE 1. Evidence of Identity 2. Specific Types of Evidence a. Hard Copy Printouts b. Handwritten Notes E. PRIVILEGED AND CONFIDENTIAL INFORMATION 1. In General a. Doctors, Lawyers, and Clergy b. Publishers and Authors 2. Targets 3. Using Special Masters F. UNDERSTANDING WHERE THE EVIDENCE MIGHT BE: STAND-ALONE PCs, NETWORKS AND FILE-SERVERS, BACKUPS, ELECTRONIC BULLETIN BOARDS, AND ELECTRONIC MAIL 1. Stand-Alone PCs a. Input/Output Devices: Do Monitors, Modems, Printers, and Keyboards Ever Need to be Searched? b. Routine Data Backups 2. Networked PCs a. Routine Backups b. Disaster Backups G. SEARCHING FOR INFORMATION 1. Business Records and Other Documents 2. Data Created or Maintained by Targets 3. Limited Data Searches 4. Discovering the Unexpected a. Items Different from the Description in the Warrant b. Encryption H. DECIDING WHETHER TO CONDUCT THE SEARCH ON-SITE OR TO REMOVE HARDWARE TO ANOTHER LOCATION 1. Seizing Computers because of the Volume of Evidence a. Broad Warrant Authorizes Voluminous Seizure of Documents b. Warrant is Narrowly Drawn but Number of Document to be Sifted through is Enormous c. Warrant Executed in the Home d. Applying Existing Rules to Computers 2. Seizing Computers because of Technical Concerns a. Conducting a Controlled Search to Avoid Destroying Data b. Seizing Hardware and Documentation so the System Will Operate at the Lab I. EXPERT ASSISTANCE 1. Introduction 2. Finding Experts a. Federal Sources b. Private Experts (1) Professional Computer Organizations (2) Universities (3) Computer and Telecommunications Industry Personnel (4) The Victim 3. What the Experts Can Do a. Search Planning and Execution b. Electronic Analysis c. Trial Preparation d. Training for Field Agents V. NETWORKS AND BULLETIN BOARDS A. INTRODUCTION B. THE PRIVACY PROTECTION ACT, 42 U.S.C. § 2000aa 1. A Brief History of the Privacy Protection Act 2. Work Product Materials 3. Documentary Materials 4. Computer Searches and the Privacy Protection Act a. The Reasonable Belief Standard b. Similar Form of Public Communication c. Unique Problems: Unknown Targets and Commingled Materials 5. Approval of Deputy Assistant Attorney General Required C. STORED ELECTRONIC COMMUNICATIONS VI. DRAFTING THE WARRANT A. DRAFTING A WARRANT TO SEIZE HARDWARE B. DRAFTING A WARRANT TO SEIZE INFORMATION 1. Describing the Place to be Searched a. General Rule: Obtain a Second Warrant b. Handling Multiple Sites within the Same District c. Handling Multiple Sites in Different Districts d. Information at an Unknown Site e. Information/Devices Which Have Been Moved 2. Describing the Items to be Seized 3. Removing Hardware to Search Off-Site: Ask th Magistrate for Explicit Permission. 4. Seeking Authority for a No-Knock Warrant a. In General b. In Computer-Related Cases VII. POST-SEARCH PROCEDURES A. INTRODUCTION B. PROCEDURES FOR PRESERVING EVIDENCE 1. Chain of Custody 2. Organization 3. Keeping Records 4. Returning Seized Computers and Materials a. Federal Rules of Criminal Procedure: Rule 41(e) b. Hardware c. Documentation d. Notes and Papers e. Third-Party Owners VIII. EVIDENCE A. INTRODUCTION B. THE BEST EVIDENCE RULE C. AUTHENTICATING ELECTRONIC DOCUMENTS 1. "Distinctive" Evidence 2. Chain of Custody 3. Electronic Processing of Evidence D. THE HEARSAY RULE IX. APPENDICES APPENDIX A: SAMPLE COMPUTER LANGUAGE FOR SEARCH WARRANTS 1. Tangible Objects a. Justify Seizing the Objects b. List and Describe the Objects (1) Hardware (2) Software (3) Documentation (4) Passwords and Data Security Devices 2. Information: Records, Documents, Data a. Describe the Content of Records, Documents, or other Information b. Describe the Form which the Relevant Information May Take c. Electronic Mail: Searching and Seizing Data from a BBS Server under 18 U.S.C. § 2703 (1) If All the E-Mail is Evidence of Crime (2) If Some of the E-Mail is Evidence of Crime (3) If None of the E-Mail is Evidence of Crime d. Ask Permission to Seize Storage Devices when Off-Site Search is Necessary e. Ask Permission to Seize, Use, and Return Auxiliary Items, as Necessary f. Data Analysis Techniques 3. Stipulation for Returning Original Electronic Data APPENDIX B: GLOSSARY APPENDIX C: FEDERAL EXPERTS FOR COMPUTER CRIME INVESTIGATIONS APPENDIX D: COMPUTER SEARCH AND SEIZURE WORKING GROUP APPENDIX E: STATUTORY POPULAR NAME TABLE APPENDIX F: TABLE OF AUTHORITIES Cases Statutes Federal Rules Federal Regulations Legislative History Reference Materials Go to . . . CCIPS Home || Justice Home Page _________________________________________________________________ Updated page May 9 , 1997 usdoj-jmd/irm/css/mlb _________________________________________________________________

1 0