December 2003 - cypherpunks-legacy

(Fwd) Re: Law enforcement and PGP ban in Australia (fwd)
by Rev. Ben 17 Dec '03

17 Dec '03

Followup on the Ozzies banning PGP: ------- Forwarded Message Follows ------- Date: Mon, 07 Aug 1995 16:44:12 +1000 From: "Danny Smith, AUSCERT" <D.Smith(a)auscert.org.au> To: mauvais(a)ocelot.llnl.gov Cc: first-teams(a)CSRC.NCSL.NIST.GOV Subject: Re: Law enforcement and PGP ban in Australia Organization: FIRST, the Forum of Incident Response & Security Teams Reply-to: "Danny Smith, AUSCERT" <D.Smith(a)auscert.org.au> Paul (et al), > I'm curious about what people have heard about this? > > I'm trying to find out more from this end....doesn't look good... Surprised you didn't come to us first. :-) > Subject: Australia next to ban PGP I believe you can treat this as net.rumour. I have the paper now, and will read it tonight. I will also talk to the author whom I am led to believe is rather annoyed at the misrepresentation of the content of his paper. More information later this week. Danny Smith. ========================================================================== Danny Smith | Fax: +61 7 3365 4477 AUSCERT | Phone: +61 7 3365 4417 c/- Prentice Centre | (answered during business hours) The University of Queensland | (on call after hours for emergencies) Qld. 4072. Australia | Internet: auscert(a)auscert.org.au

1 0

Over 350 'Munitions T-shirts' Shipped
by dhenson＠itsnet.com 17 Dec '03

17 Dec '03

As of 27 July 1995, we have shipped over 350 of the RSA/Perl Munition T-shirts. Orders are still pouring in. Don't be left out. Order your's today. Now you can wear a TSHIRT that has been classified as a MUNITION by the US Goverment. That's right! The US International Traffic in Arms Regulations (ITAR) makes exporting cyrptographic materials illegal. ITAR further defines export as providing cryptographic information to a non-US/Canadian citizen even if you are inside the US at the time. Providing information is further defined as telling or showing information to a non-US/Canadian citizen. The Munitions Tshirt has a Perl implementation of the RSA algorithm (the one used by PGP) printed on the front along with a bar-code of the same algorithm. What all the above means is that if you wear the Munitions Tshirt where a non-US/Canadian citizen can see it, even if it is inside the US, you have just exported cryptographic material (which is already freely available outside the US) and have become a criminal in the eyes of the US Government. Now you too can become an international arms dealer for the price of a tshirt (US$15.95 - US$19.95, depending on size) and the guts to wear it. If you are a non-US/Canadian citizen, you can still own a Munitons Tshirt by ordering the tshirt from a source that is outside the US. The email response to a request for info (see next paragraph) includes full instructions for ordering the tshirt no matter where you live. For more information on how to own this classic example of civil disobedience, just send email to dhenson(a)itsnet.com with the subject of 'SHIRT'. (You don't have to be a US/Canadian citizen to request the info.) Or, if you have WWW access, just point your Web browser to: http://colossus.net/wepinsto/wshome.html By the way, 25% of the profits from the sale of the tshirt (in the US/Canada) goes to the PHIL ZIMMERMANN LEGAL DEFENSE FUND to help defend the author of PGP from harassment and possible prosecution by the Fedgoons. And if you get arrested for wearing the Munitions Tshirt, we'll refund your purchase price. :-) Get your Munitions Tshirt now. Who knows how long they'll stay in production! Don Henson, Managing Director (PGP Key ID = 0X03002DC9) West El Paso Information Network (WEPIN) Check out The WEPIN Store at URL: http://colossus.net/wepinsto/wshome.html

3 2

NYPotpourii
by John Young 17 Dec '03

17 Dec '03

Abject beg: it's easier for the 'droid to act on each item separately, do please request 1-by-1. 8-7-95. NYPaper: "A Cyberspace Front in a Multicultural War: Finding alternatives to a world where only English is typed." With the explosion of worldwide interest in the Internet, the dominance of English, stemming from the network's beginnings in the United States, has become a sensitive matter. A fear is that English, already the international language of business and science, is becoming the lingua franca of the computer world as well, further casting other languages in the shade. And some countries, already unhappy with the encroachment of American culture are worried that their cultures will be further eroded by an American dominance in cyberspace. A consortium of American computer companies has developed a universal digital code known as Unicode to allow computers to represent the letters and characters of virtually all the world's languages. SEZ_who "Digital Commerce: 2 plans for watermarks, which can bind proof of authorship to electronic works." Denise Caruso's column. As information becomes currency in the global economy, that so-called digital watermark technologies are beginning to appear. As with their paper and broadcast counterparts, the concept behind digital watermarks is to provide a secure means to certify the origin, ownership and authenticity of digital works. And by doing so, they can provide the first line of defense against piracy of digital media like music, photographs, film, words and video games. MUN_due "Windows 95's Big Value May Be as a Lure to Network System." Is Windows 95 a decoy? For all the attention being paid to the Aug. 24 introduction of the Microsoft Corporation's updated personal computer operating system, some experts think the software's true strategic value to Microsoft is not the few billion dollars in sales it is expected to bring to the company over the next few years. Instead, the long-term value may lie in luring customers and software developers into adopting the company's other operating system: Windows NT, for corporate computer networks. COY_ote "Selling Virtual Reality, in Indiana: The owners were shocked by how few understood the technology." "Seeing the potential for educating had an incredible impact on me," said John Hammond, an Indianapolis businessman who stumbled on Virtually Yours when he and his son went to the shopping center for pizza. Mr. Hammond wants Virtually Yours to supply expertise and equipment to Sunship Ministries, a group of Christian business executives developing a design for a school, hospital and church complex suited for missionary work in developing countries. Mr. Hammond sees virtual reality as a marketing tool for getting developing countries to welcome them; he sees programs re-creating Bible stories as a powerful tool for preaching to nonreaders. "You could let people interact with a virtual Jesus," Mr. Hammond said. GIT_rel "Dark Sun: The Making of the Hydrogen Bonb." [Book review] In the author's view the story of the hydrogen bomb is only secondarily a technological one. What mainly drove American physicists to design the more powerful bomb was the news that the Soviet Union possessed an atom bomb. And the reason the Russians had achieved the bomb was mainly spying, Mr. Rhodes insists. So his story of the H-bomb is not so much technology as the interaction of politics, diplomacy, war, espionage, theoretical and practical physics and paranoia. JOX_onu

1 0

RSA/Perl Shirts
by Rev. Ben 17 Dec '03

17 Dec '03

Has Joel Furr shipped his shirts yet? I see some people on the list have gotten shirts and i was wondering as I still have not gotten mine. Ben. ____ Ben Samman..............................................samman(a)cs.yale.edu I have learned silence from the talkative, toleration from the intolerant, and kindness from the unkind; yet, strange, I am ungrateful to those teachers.-- K. Gibran. SUPPORT THE PHIL ZIMMERMANN LEGAL DEFENSE FUND! For information Email: zldf(a)clark.net http://www.netresponse.com/zldf

2 1

Re: Two-faced Security Problem? Dammit Janus?
by Chris Brenton 17 Dec '03

17 Dec '03

In reply to: > > >After poking around for a week, I discovered that my home machine, >newray.digex.net, is listed in the Digex's nameservers TWICE! Once with the >IP address that my home machine is waiting for (199.125.128.5) and once >with some other IP address in the digex space (164.109.211.61). If you do >an nslookup on the name, you get both addresses. I believe that the >technically correct thing for someone to do is to choose one of the >addresses at random to distribute the load between two machines pretending >to be one. This explains the connection failures that happened half of the >time. > >This has led me to wonder, though, whether this is some sort of security >breech. For instance, could there be someone out there mascarading as me? >Normally I run Eudora, Netscape, Telnet and other outward bound >applications. It was almost a fluke that I noticed that there were two >entries. > More likely this is a matter of someone assigning a host name to a system without realizing it has already been taken. Yes it can be a security breech but as you experienced the connection is broken easily. If someone wanted to grab your identity they would more likely busy your system (by flooding you with ping requests or something similar) and then grab you IP address. >Does some software need to find its IP address in a DNS table? For >instance, does Eudora need to look up 164.109.211.61 to find >"newray.digex.net"? The lookup typically goes the other way around, from host--->IP address. Dependant on the cache hits either address could be returned.

1 0

Re: ACLU Opposes Exon-Like Speech Crimes in Managers Amend. to House Telco Bill
by Carl Ellison 17 Dec '03

17 Dec '03

>Date: Thu, 3 Aug 1995 11:06:19 -0400 >From: ACLUNATL(a)aol.com > The amendment would have the >effect of actually usurping control from parents in favor of a government >approval panel. Anecdote: I was in Cambridge MA this past weekend visiting old friends, some at church. I sat across from one such at lunch -- a young guy up from Texas going on about how good it is that people are fighting cyberporn. I brought up parental control in attempted rebuttal and he switched immediately to the idea that `parents usually *are* the child abusers and we need to protect children from them -- not give parents control over what gets communicated electronically'. I was surprised at the speed with which he switched to that line of thought. It's clear that this chess game opening has been played by or around him before. [Come to think of it now, it's completely consistent with the anti-abortion stand: that children (starting at fetus) are the property of Society and parents are required to serve Society as soon as a child is conceived (or perhaps as soon as they start having sex). If it's child abusers you're talking about, that line of reasoning can carry emotional appeal. However, I lived in Utah at a time when it was illegal for parents to instruct their children about birth control (I was told (I didn't read the law personally.)).] - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme/home.html | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +----------------------------------------------------------- Jean Ellison -+

2 1

Re: There's a hole in your crypto...
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:53 PM 8/7/95, Dr. Frederick B. Cohen wrote: >Issue 2: > >The notion that mathematics somehow excludes linguistic proofs >(forwarded I believe by a user with "may" in their email address) is >nonsense. Mathematics at its core is based on linguistic notions that Not this "May," so far as I can recall. --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Re: RSA/Perl Shirts
by Paul Foley 17 Dec '03

17 Dec '03

One thing I have to ask: Does wearing one of these shirts under something else count as carrying a concealed weapon? :-) -- Paul Foley <paul(a)gec.co.nz> PGP key 0x0D1C0E75 -----------------There's no government like no government---------------- Where they burn books, in the end they will also burn people. -- Heinrich Heine

1 0

Re: Over 350 'Munitions T-shirts' Shipped
by tfs＠adc.com 17 Dec '03

17 Dec '03

> Where are mine...I got the money to you via > Mario wojo???? at SUN... > I ordered 8 of the shirts > BTW > I am the publisher of PGP 1.0 the only person > who will be indicted with Phil or alone for PGP > what about MY defense fund???? > > Check Gov Access for my story Could you be a little more specific regarding your URL? Thanks! ******************************************************************************* * Just say know! Tony Sgarlatti thetruth(a)future.net * *******************************************************************************

1 0

addresses
by Alan Pugh 17 Dec '03

17 Dec '03

thanks much to all who responded to my query on the problem i was having with the strange address. i think i have more than enough information to resolve this problem. amp ********************************************* * / Only God can see the whole * * O[%\%\%{<>===========================- * * \ Mandlebrot Set at Once! * * amp * * <0003701548(a)mcimail.com> * * <alan.pugh(a)internetmci.com> * * PGP Key = 4A2683C1 * *********************************************

1 0

www remailer interface
by nobody＠valhalla.phoenix.net 17 Dec '03

17 Dec '03

c'punks, Please check out the new www remailer interface at http://miso.wwa.com/~dochobbs/cpremailer.html It is based on nate's code with one addition for security and contains info from other places. I would appreciate some visits and comments/criticisms before I place it in the general population. Again, give it a thorough test because I want it to be good and secure for me and those using it. It's in its final testing phase (mainly because I haven't got the news instructions just the way I want them) and will be set to go soon. I am, of course, sending this message through the page. Michael Hobbs dochobbs(a)wwa.com

1 0

proving programs correct
by Perry E. Metzger 17 Dec '03

17 Dec '03

A boss of mine at Bellcore, and a very smart guy (B. Gopinath) once mentioned to me that (with the exception of scheme) he'd never seen a set of formal semantics for a language that were smaller than the largest program one would care to write in the language. He was, of course, slightly exagerating for effect, but his point was very simple: you can't even get the basis on which to write your proofs right. An interesting experience happened during the same project, as I recall: we attempted to prove a small bit of code correct. Unfortunately, the proof had a bug in it which meshed nicely with a bug in the program and a bug in the implementation. Proofs are no less large complicated formal constructs than programs are, and checking them is no less onerous, unless they are written in formal logic in which case they are not possible for human beings to produce. Perry

2 1

Re: www remailer interface
by futplex＠pseudonym.com 17 Dec '03

17 Dec '03

Anonymous/Michael Hobbs writes: > Please check out the new www remailer interface at > > http://miso.wwa.com/~dochobbs/cpremailer.html [...] > I would appreciate some visits and comments/criticisms > before I place it in the general population. I'm a bit uncomfortable about the hardwiring of a particular remailer into the chain, according to the Web page: "Select your remailers [...] Your mail will be automatically sent to the remailer hfinney(a)shell.portal.com and at least one other remailer that you choose." (Nothing personal, Hal :) Why was this done ? -Futplex

1 0

Re: www remailer interface
by dochobbs＠wwa.com 17 Dec '03

17 Dec '03

It has been stated, :I'm a bit uncomfortable about the hardwiring of a particular remailer into :the chain, according to the Web page : : "Select your remailers [...] Your mail will be automatically sent : to the remailer hfinney(a)shell.portal.com and at least one other : remailer that you choose." : :(Nothing personal, Hal :) : :Why was this done ? : :-Futplex The code was written to be used with a local remailer that then sends it along the others that the sender chooses. I modified it so that I don't need to establish my own remailer by sending it to hfinney(a)shell.portal.com. I think this might provide better security for the sender due to the fact that you are forced to chain your letter thus providing more security. The argument can be made that if the initial hardwired remailer is compromised that this removes all security. I chose hfinney because 1. the turnaround time is good. I wanted the first to be fast because it is basically 'insurance' for the sender. 2. it was a remailer that I am familiar with and has been around (in remailer server time) awhile. 3. it was the one that I personally felt most comfortable with using as the hardwired mailer. Granted these might not be the best reasons, but this is the kind of response I was looking for. I can solve the problem by either 1. removing the hardwired 2. removing the hardwired and forcing you to chain 3. keep the hardwired in and use some 'established' remailer or one the group can come to a consensus on. Responses appreciated. I will gladly distibute the code if desired. Like the page states, it was originally written by Nate Sammons, but I can change it as needed. _____________________________________________________________ dochobbs(a)wwa.com M.D. Hobbs mhobbs(a)rad.rpslmc.edu http://miso.wwa.com/~dochobbs finger for my pgp key I am human and nothing human do I count alien.

1 0

Two-faced Security Problem? Dammit Janus?
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

Not exactly crypto, but the same idea: I've been trying to hook up an HTTP server sitting on a Mac at the end of my normal PPP connection. This was just supposed to be a test, but I kept getting annoying connection problems whenever someone tried to GET a page from me. The connection wouldn't go through about half of the time. After poking around for a week, I discovered that my home machine, newray.digex.net, is listed in the Digex's nameservers TWICE! Once with the IP address that my home machine is waiting for (199.125.128.5) and once with some other IP address in the digex space (164.109.211.61). If you do an nslookup on the name, you get both addresses. I believe that the technically correct thing for someone to do is to choose one of the addresses at random to distribute the load between two machines pretending to be one. This explains the connection failures that happened half of the time. This has led me to wonder, though, whether this is some sort of security breech. For instance, could there be someone out there mascarading as me? Normally I run Eudora, Netscape, Telnet and other outward bound applications. It was almost a fluke that I noticed that there were two entries. Does some software need to find its IP address in a DNS table? For instance, does Eudora need to look up 164.109.211.61 to find "newray.digex.net"? If someone was using this software on the mascarading node, they would need to set up an entry in the tables to make everything work. They just assumed I would never get inbound traffic. Any theories on this? -Peter "More Paranoid Than Ever" Wayner

1 0

patent info URL
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

Since various intellectual property debates and questions come up ("plague") periodically, it seemed like it'd be a good idea to post the following URL: http://www.patents.com/ Its run by a small patent law firm and has a series of well-linked, snappy FAQs on issues pertaining to intellectual property, patents (including some on "I had a really clever idea--what should[n't] I do?"), relevant links, etc. etc Ted

1 0

Where to find Internet growth stats?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

I read in a speech by Rutkowski that the latest Internet growth stats are published twice a month. I search at the Internet Society site, and other usual suspects, but to no avail. URL, anyone? TIA, -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

hardware encryption
by cman＠communities.com 17 Dec '03

17 Dec '03

I'm looking for add-in cards that implement DES and/or RSA for either a PC (ISA/EISA/whatever) or a Sun (S-Bus), preferably a Sun. Also, the RSA card would need to implement a 1024 bit modulus. Any tips or pointers? I've got the list of chip makers in _Applied Cryptography_, but the ones I've contacted so far don't seem to know anything about cards, even if they admit that they have the chips. Thanks, Doug

1 0

Triple-DES controlled?
by Goh Seow Hiong 17 Dec '03

17 Dec '03

Could someone confirm whether the US export restrictions apply to Triple-DES? If so, are there exceptions as in the case of DES (e.g. for banking or financial applications). Thx. SH

2 1

700_dig
by John Young 17 Dec '03

17 Dec '03

MH has provided a transcript of Pat Robertson's show on digital cash of March 8, 1995. It includes remarks by David Chaum, Dave Banisar, Steven Levy and others. 700_dig (about 14K)

1 0

WDM_zum
by John Young 17 Dec '03

17 Dec '03

RH has provided an informative article on wavelength division multiplexing (WDM) from the August 7 InfoWorld: "Boost in optical-fiber communication capacity is just over the rainbow," by Bob Metcalfe, the founder of 3Com. WDM_zum (about 5K)

1 0

See y'all in a while....
by Phil Fraering 17 Dec '03

17 Dec '03

I'm leaving the list for a while while I try to work out a different way of accessing the net. In short, I've grown dissatisfied with my ISP and need some time to think things through before making other arrangements. It's too frustrating sorting through all of this mail without proper filtering scripts like I had set up back at srl03. And news is kind-of beside the point: the news server is always full, and rejects any attempt to post because of lack of space. In the meantime, while y'all discuss all that stuff about logical proofs and the like, please, _please_, stay away from crosswalks? I'll probably make another attempt at downloading pgp262s.zip before I shut this down... the first two times the modem (I think theirs) went flaky and dropped the connection on me. Okay. time to see if the signature service works. Later, dudes. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMBwQDCoTheIowlstareqnot8whaththeyEseemMI5rculIym8xjzYV8C mErjcooperUcoopermcooperqBviplMp =aBGi -----END PGP SIGNATURE----- +----------------+Quote from _Infinite In All Directions_, F.J. Dyson-----+ | Phil Fraering / \"The English Hierarchy, if there be anything unsound in| | pgf(a)tyrell.net\ /its constitution, has reason to tremble even at an air | +----------------+-pump or an electrical machine."---Joseph Priestly------+

1 0

Re: MS Money password problem
by dochobbs＠wwa.com 17 Dec '03

17 Dec '03

I'm not sure if this has been mentioned or will help, but this company makes crakers for quicken, word and wordperfect (not sure about M$ money though). http://gn2.getnet.com:80/crak/ email: johnk(a)indirect.com _____________________________________________________________ dochobbs(a)wwa.com M.D. Hobbs mhobbs(a)rad.rpslmc.edu http://miso.wwa.com/~dochobbs finger for my pgp key I am human and nothing human do I count alien.

1 0

RSA Catalog
by John Young 17 Dec '03

17 Dec '03

For those who've not yet fondled RSA's sleek "Security Solutions Catalog," it can be virtually diddled at: http://www.rsa.com/rsa/sscatw95/P67.HTM

1 0

Re: Where to find Internet growth stats?
by brendan＠Mail.RAth.PeachNet.EDU 17 Dec '03

17 Dec '03

http://www.tic.com/mids/midshome.html is --cut->>Matrix Information and Directory Services, Inc. (MIDS) is a corporation founded by Smoot Carl-Mitchell and John S. Quarterman. Eric McKinney is Assistant Editor. <<--paste- --- Brendan Mullen brendan(a)chugalug.cosmic.uga.edu Athens GA USA

1 0