December 2003 - cypherpunks-legacy

eternity-0.08 up, more beta testers?
by Adam Back 17 Dec '03

17 Dec '03

We are now on eternity-0.08. See: http://www.replay.com/aba/eternity/ and http://www.dcs.ex.ac.uk/~aba/eternity/ for the software. It's now much easier to install there are even some instructions on what to do in the README. There is now a configure script which greatly simplifies installing. Adam -- Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Microsoft postpones plans to include RSACnews in Explorer
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 5 Aug 1997 16:35:00 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: Microsoft postpones plans to include RSACnews in Explorer [Note that Microsoft still plans to include RSACnews in Explorer 5.0. --Declan] ---------- Forwarded message ---------- Inter@ctive Week August 5, 1997 Microsoft Tables 'News' Rating System For Explorer By Steven Vonder Haar 1:30 PM EDT Microsoft Corp. has tabled plans to include new technology in its Internet Explorer 4.0 browser that would have made "news" oriented sites exempt from content rating standards promoted for use on the Internet. Officials at leading media companies, including Time Warner Inc. and Dow Jones & Co., have lobbied industry leaders during the past month in an effort to generate support for an approach that would exclude news sites from content rating systems such the one promoted by the Recreational Software Advisory Council (RSAC). The media companies, rallied by the Internet Content Coalition industry group, contend that the ratings are the equivalent of private censorship that will eventually cut into freedom of speech rights on the Internet. "No one puts a filter over the mailbox to determine whether Time magazine is appropriate for our audience," said Dan Okrent, editor-in-chief at Time Inc. New Media. "The same standards should apply to the Internet." RSAC's current rating tool is integrated into the current Explorer browser. It allows parents to block access to content based on RSAC ratings. Sites that do not carry RSAC ratings also can be blocked. RSAC recently came up with a "news" category designed to allow display of news content without suitability ratings for individual stories. RSAC President C. Dianne Martin said Microsoft is running out of time to implement the separate designation for news sites before the launch of the 4.0 version of Explorer later this year. However, the company plans to include the news designation in the 5.0 version of Explorer when it is made available, likely sometime next year. RSAC can be reached at www.rsac.org Microsoft can be reached at www.microsoft.com

1 0

Re: Florida Drivers Permits
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- [Welcome back, Professor] You posted: >Will, starting next year, containg a digitized photo, plus the current >info. <snip> >Anyone know any details about the technololgy? <snip> Not really. I saw the same story. The name, address, age, & height mentioned are already obvious on licenses, but this may preclude incorrect data entry by FL cops, and counterfeiting (a problem here for *years*). I saw nothing on the digitized photo, but we could be looking at different stories. Phase-in in July, '96. The story I saw suggests that other data, such as tickets, criminal violations (presumably convictions) and "other biographical information" [welfare, credit info] could eventually be included, depending on FL's state budgetary considerations. No author, just "Associated Press," listed on the story, and the card uses a magnetic strip "like those on credit cards" rather than a chip, which may be a mistake [considering the renewal period & my experience with bank-cards]. Story doesn't say it, but it sounds like FL *may* be the first state to do this. Are any other states doing this already? JMR - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMD4DiW1lp8bpvW01AQGF+QP/RG9aTxVeujNDL2ebdyNL558PrtXclUhf 9iLETvzNu/OtplKZXng67SkBkECpbh5LyOpoeRkhhWUANJhcIUhJKhcaUIOmLR2n KLjQ6WnGx5OHXPr53htVrvyg4L6Y0tX5233AEk8iDxxBh79alHmxuklT7s13CPgI k9HklCZ77kg= =teIz - -----END PGP SIGNATURE----- Regards, Jim Ray "Those who deny freedom to others deserve it not for themselves, and, under a just God, cannot long retain it." -- Abraham Lincoln, in a letter to H.L. Pierce, 6-Apr.-1859 - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 James M. Ray liberty(a)gate.net - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMD4D+SoZzwIn1bdtAQGy+gGAq40gk8nqgdvnSrp6QBQ3jcW5f8kI0wux IoWUKN8tHUaOHuP+s4ImuW6j++Mhht1b =zXwD -----END PGP SIGNATURE-----

1 0

Auto-pgp for pine/elm/tin
by Henry W. Farkas 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Does anyone know of an addon to the Pine mailer that supports PGP? > the only PGP software i could find required me to first compose a > letter in an editor then run it through a pgp signature program > then finally read it into my favorite mailer. > > I'm looking for something that is hopefully transparent, or if not > relatively quick to do. > ________________________________________________________________________ > Sameer Manek Seawolf(a)challenger.atc.fhda.edu > ________________________________________________________________________ - ------------------------------------------------------------------------ Yes, it exists, and I'm using it now. I've tried competing products and found this to be the cleanest, smoothest and easiest to install. I have no personal, commercial or financial interest in this product. It does "auto-pgp" for pine, elm and tin. *********************************************************************** * BAP v.1.01 * * Written August 1995 by Bryce Wilcox * * e-mail: <bryce.wilcox(a)colorado.edu> * * PGP key id: <617C6DB9> * * snail mail: <2228 Canyon Blvd, Apt. 1E, Boulder, CO, 80302> * * URL: <http://cs.colorado.edu/~wilcoxb/home.html> * * BETA TEST VERSION! DO NOT DISTRIBUTE! * * (Note that documentation, among other things, is still unfinished.) * *********************************************************************** I also found the author responsive to my comments and suggestions. Just please do *-NOT-* put your pass phrase in a cleartext file! - ------------------------------------------------------------------------ =========================================================================== Henry W. Farkas | Me? Speak for IBM? Fat chance. hfarkas(a)ims.advantis.com |------------------------------------------------ hfarkas(a)vnet.ibm.com | http://newstand.ims.advantis.com/henry henry(a)nhcc.com | http://www.nhcc.com/~henry - --------------------------------------------------------------------------- PGP 6.2.2 Key fingerprint: AA D0 F5 44 C1 8C 11 52 B3 80 34 1C CE 38 EC 53 Public key at: pgp-public-keys(a)pgp.mit.edu, and other popular key servers. - --------------------------------------------------------------------------- Brought to you by Henry's Hardware: Home of the Pretty Good Hack "We're not fast, but it's not bad, and we're cheaper than the guy down the street!" =========================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed with Bryce's Auto-PGP v1.0beta iQCVAwUBMD30WaDthkLkvrK9AQF6sQP/fVen7ZI4DbgC14y+NPdZYOjaRQ9/jQNT d4StD638OoBRkO7b8efiTd/rNULwuzSPKDiplKwRdE8Bboh4FdSWYvz6wfqgNJcd D3imouQcEt+erjEC2H5haQyZwBHeNNR9mTYhkzoBt4+jMqsRCECduaExyHUOTWFj euOkRqTJ0l4= =2q74 -----END PGP SIGNATURE-----

2 1

Search This Space Please
by Duncan Frissell 17 Dec '03

17 Dec '03

When one leaves ones machine running all night with the screen turned off, one should be careful to turn the sceen on *before* hitting the power switch. Since hitting an on button switch will turn it off before you collect the search results. I have tried to REJECT this range but haven't been able to figure out the syntax the server expects. I am without fast machines for the weekend. Here it is: ************************************** brutessl ssl.pf 2977 0198 20 assuming the config info is in ssl.pf so go do it ! ************************************** Thanks, DCF

1 0

for perl experts: brclient problem
by Lou Poppler 17 Dec '03

17 Dec '03

I sent this originally only to Piete, but as I suspect he is already somewhat busy, I am now also forwarding a copy to the list. I just upgraded to brclient version 0.16. I tried to use it with this command: brclient -Ltssl -a'2977 6284 390a 3 no' I got this result: Use of uninitialized variable at ./brclient line 457, <COMMAND> line 1. Failed: 0 <No DATA> I am totally perl.clueless, so I merely refer this to you. :::::::::::::::::::::::::::::::::::::: :: Lou Poppler <lwp(a)mail.msen.com> :: No animals were harmed in the :: http://www.msen.com/~lwp/ :: production of this message. ::::::::::::::::::::::::::::::::::::::

1 1

JYA Up
by John Young 17 Dec '03

17 Dec '03

AOL/PrimeHost has reactivated JYA. AOL's story for the takedown is that our seldom used ftp component was being used by unidentified parties to traffic in warez and that it had nothing to do with the http part, "whose content does not concern us." Still, it's odd we did not get a call about the problem as was done a few weeks ago for a similar warez invasion. At that time, we offered to close our ftp, but the PrimeHost rep said no, we'll monitor it, as we do other ftps. I specifically asked to be notified if it happened again, but wasn't. And it's not clear why it took a week for me to find out what was what. Or why not AOL did not just close the ftp and leave the http operating. 'Course, maybe the takedown was signal of distrust of JYA innocence. And a warning. Thanks to the folks who offered more help than the teapot tempest seems to have warranted -- so far.

3 4

Re: Cypherpunk Brute Squad [Re: SSL Challenge: Server problems]
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> current requirements > ==================== > > PLEASE ensure that you are using a brclient of at least 0.14 > ("grep comment.inffo brclient" to discover what you are using) > You can updare brclient while brloop is running. > Some people are still running old versions, and this is hammering the server. > > It also helps to run at least brloop 0.05 ("grep BRLOOPCOMMENT brloop"). > Unfortunately the web page under "Socket based key doler" points at brclient 0.13 and brloop 0.04. Could you fix this please:) Thanks, Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

3 2

Re: A 12 Crime w/in & Crime w/out--Ehlers Remark From Carl Ellison
by Carl Ellison 17 Dec '03

17 Dec '03

http://aspen.pff.org/forums/read-message.cgi/forum4?number=n0058010101&by=D… > Re: A 12 Crime w/in & Crime w/out--Ehlers Remark > > Carl Ellison (cme(a)tis.com) > Fri Aug 25 17:35:42 1995 (GMT) > > ------------------------------------------------------------------------------- > As I believe Congressman Ehlers pointed out, there is crime in cyberspace and > it is likely to remain a threat forever. > > I refer here to incidents like the Russian hacker's theft of $400,000. > > I do not refer to the use of cyberspace to violate some local ordinance in the > physical world (the prosecution of the California AA BBS based on the local > standards in some Eastern state (Tenn?)). > > My company is in the business of protecting people from attacks within > cyberspace and I believe, personally, that as long as cryptographic policy is > made rational, we citizens and businesses can mount an effective defense > against these threats. This is not an issue of using deadly force in defense. > Because we don't threaten the attacker in return, there is no need for a > specially empowered force (a police force) controlled by an elected government > to achieve this protection. This is an issue of building good walls and doors > -- a strictly defensive action which is appropriate for individuals and > companies to do without government involvement. > > ------------------------------------------------------------------------------- -- Carl M. Ellison cme(a)tis.com http://www.clark.net/pub/cme/home.html Trusted Information Systems, Inc. http://www.tis.com/ 3060 Washington Road PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 Glenwood MD 21738 Tel:(301)854-6889 FAX:(301)854-5363

1 0

Re: "A new battle over keeping the Net clean," by J.Weber/LATimes (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: bpettigrew(a)usa.net > Date: Tue, 05 Aug 1997 15:23:52 > Subject: Re: "A new battle over keeping the Net clean," by J.Weber/LATimes > Let the free speech organizations demonstrate their commitment to > their > cause by creating their own ratings. We are, by simply not rating ourselves and refusing to support others rating systems. Hint: FREE speech Jim Choate The Armadillo Group ravage(a)ssz.com

1 0

Challenge / Anything working ?
by Samuel Tardieu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <sam@manon:~>telnet sksp.brute.cl.cam.ac.uk 19957 Trying 128.232.0.90... (then nothing) Isn't it the right server/port ? Sam - -- "La cervelle des petits enfants, ca doit avoir comme un petit gout de noisette" Charles Baudelaire -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.3, an Emacs/PGP interface iQCVAgUBMD4Mi4FdzKExeYBpAQHaMgP+IgjU/SjM6+9rz0sM191xLLrEuCcdeZUL dVkP2VDTCCQqVCH5PyWWvC1O4bunQVgXaW35g6xmDKnnAiALW3UVRsq0QpiBhcrf 8lKZm6ASZWU8TSEoLrmf/kLvqygW9t72D+ktcXokiLe3OvT6Bs41DhHo8c/3go1u 2G/hylhLV9w= =Yz3+ -----END PGP SIGNATURE-----

1 0

NIST Key Escrow Issues Meeting
by Carl Ellison 17 Dec '03

17 Dec '03

I don't know if it's been posted, but I have in my hands a statement that these meetings will be open to the public. "The meeting will be open to the public, although seating is limited. Advance registration is requested, please contact Arlene Carlton on 301/975-3240, fax: 301/948-1784 or e-mail: carlton(a)micf.nist.gov " - Carl P.S. Anyone going to CRYPTO95? I'll be there starting tomorrow (Sat). +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme/home.html | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +----------------------------------------------------------- Jean Ellison -+

1 0

No Subject
by wcreply＠ctia.org 17 Dec '03

17 Dec '03

============================================================= This update is sponsored by IBM http://www.wow-com.com/professional/systemint/ ============================================================= Dear WOW-COM Reader: WOW-COM(TM) is the wireless industrys online information source, a free service of CTIA. Find out what's going on in the wireless industry by visiting http://www.wow-com.com/welcome today! INDEX: ====== 1) Upcoming Conference: CTIA's WIRELESS FRAUD '97 2) The Battle continues: Antenna Siting 3) CTIA Supports New Tauzin Legislation to Catch and Prosecute Electronic Stalkers WIRELESS FRAUD '97 Conference ========================================================= http://www.wow-com.com/professional/fraud/ WIRELESS FRAUD '97 Conference is September 28 through October 2 in Orlando, FL. If you have not made your plans to be where the industry is going to be, MAKE THEM NOW because yesterday's wireless fraud solutions may not solve tomorrow's problems. Authentication is helping, so is RF Fingerprinting and other technologies. Despite our successes, wireless criminals haven't given up. Come to Orlando and WIRELESS FRAUD '97 the last week of September and learn how you can combat fraud. For more details please see complete information on www.wow-com.com's Fraud Microsite, or call (202)-785-0081 . The Latest on the Antenna Siting Battle "Now Is the Time for Action, Not Inquiry" ========================================================== http://www.wow-com.com/professional/whatshot/ FCC grants CTIA petition challenging local zoning moratoriums and seeks further comments. CTIA Says: Further comment spells further delay. Read the whole story here. Electronic Stalking and the Wireless Privacy Enhancement Act of 1997 =================================================== http://www.wow-com.com/professional/ Earlier this year, CTIA President and CEO Thomas E. Wheeler testified before Rep. Tauzins subcommittee, urging Congress to close a loophole that permitted what he termed "electronic stalking." Tauzins legislation clarifies and tightens current law to ban the manufacture, modification, sale and use of equipment used to illegally intercept private, protected conversations over wireless phones . ============================= MORE WOW-COM(TM) FEATURES ============================= WOW-COM(TM) is current: Updated 3x per day. WOW-COM(TM) is insightful: CTIAs unbiased analysis WOW-COM(TM) is beneficial: Find products and services in WOW-COM(TM)'s Virtual Trade Show. List open positions in the WOW-COM(TM) Career Center, get resumes via email, and hire qualified individuals. The world of wireless is in constant motion. Stay on top of the news and benefit from CTIAs analysis by reading WOW-COM(TM) everyday. You may remove yourself from the WOW-COM(TM) mailing list by going to http://www.wow-com.com/unsubscribe ======================================================== This update sponsored by: IBM http://www.wow-com.com/professional/systemint/ Today, more than ever, wireless carriers must remain flexible and respond rapidly to changing market conditions. Your success will depend on understanding your strategic opportunities and threats and quickly responding to them. To accomplish this, a wireless carrier must build links that are sophisticated, comprehensive and flexible. This is no small endeavor. IBM has developed a general multilevel blueprint of a wireless company to assist wireless carriers pursuing this goal. Take a look at how we can help you achieve your goals.

1 0

Forwarded: FSTC Electronic Check Project News Release
by Howard Melman 17 Dec '03

17 Dec '03

MAJOR BANKING-COMPUTER CONSORTIUM TO DEVELOP ELECTRONIC CHECK FSTC Promises Early Demonstration Using the Internet Media contacts: Mayer Resnick (201) 836-2968, FSTC, Ed Russell (617) 434-6883, Bank of Boston, FSTC URL: http://www.llnl.gov/fstc New York (Aug. XX, 1995) -- The Financial Services Technology Consortium (FSTC) today announced the formation of a multi-industry team to design and implement an lectronic check for use over the Internet by consumers and businesses. FSTC is a consortium whose goal is to utilize emerging technologies to enhance the competitiveness of the financial services industry. The FSTC Electronic Check, which will work within the existing banking infrastructure, brings the benefits of paper checks to electronic commerce, while permitting the increased efficiency and timeliness of doing business on the "net." FSTC expects to demonstrate the Electronic Check within the next two months. "This project is particularly significant because it represents the first collaborative effort by major banks and their industry partners to develop from inception a new financial standard," said Dan Schutzer, FSTC president and Citibank vice president and director of advanced technology. "FSTC's Electronic Check is designed to be open, secure and convenient. It will bring to electronic commerce on the Internet a level of security and confidence currently found only in traditional banking products," Schutzer added. Bank members of the FSTC Electronic Check program are: Bank of America, Bank of Boston, Bank of Montreal, Bank One, Chemical Bank, Citibank, and Wells Fargo Bank. Industry members are: BBN Inc. (Bolt Beranek & Newman), Equifax, IBM Corporation, Information Resources Engineering Inc., National Semiconductor, Sun Microsystems and Telequip. Research and consulting organizations are: Bellcore, Oak Ridge and Sandia National Laboratories, and the University of Southern California-Information Sciences Institute. Advisory members are: Electronic Check Clearing House Organization (ECCHO) and National Automated Clearing House Association (NACHA). Appointed as the FSTC Electronic Check project director is John Doggett, director of applied technology, and as project manager is Frank Jaffe, senior systems consultant, both from Bank of Boston. "As shown by the over 60 billion checks written annually, paper checks are the payment mechanism of choice. We expect the FSTC Electronic Check and its smart-card or PC-card checkbook to become the preferred method for making and receiving payments due to its cost-effectiveness and embedded safety features," Doggett said. "The vision of a bank in your pocket, a bank at your desk, a bank where your are, can now be achieved with the FSTC electronic check," Doggett added. Formed in September 1993, FSTC is a consortium of some 65 organizations comprising banks, financial services firms, industry partners, national laboratories, universities, and government agencies. FSTC sponsors collaborative research and development on technical projects affecting the entire financial services industry and its users with particular emphasis on projects involving electronic commerce. FSTC development projects include interbank check image exchange, electronic commerce, and fraud detection and management. Editor's note: Attached is a brief description of how the FSTC Electronic Check works. A Brief Description of How FSTC Electronic Check Works The FSTC Electronic Check will provide an enhanced all-electronic replacement to the current paper check, and will be useable over any network. Paper checks and checkbooks will be replaced by electronic checkbooks, handwritten signatures will be replaced by digital signatures and the delivery by the postal service by the Internet or other electronic highway. These changes will greatly increase the convenience and security of check writing since the entire process will be automated and integrated into existing applications. By using "smart cards" and PC cards as electronic checkbooks the FSTC Electronic Check will be almost impossible to forge. Unlike paper checks, the person accepting an FSTC Electronic Check for payment will be able to verify that it has not been altered. As with paper checks, electronic checks will be an open payment instrument, providing for third-party services and a variety of payment options, such as travelers', cashiers' and certified checks. FSTC Electronic Checks also integrate into existing interbank clearing networks such as the Federal Reserve System and various automated clearing houses. FSTC's unique approach to the Electronic Check results in a secure, self-authenticating payment instrument that bridges the barrier between the insecure public network and the trusted financial clearing systems. # # # For further information on how FSTC and how FSTC Electronic Check works, please contact: Mayer Resnick (201) 836-2968, FSTC, or Ed Russell (617) 434-6883, Bank of Boston. # # #

1 0

WOW-COM(TM) News Update
by wcreply＠ctia.org 17 Dec '03

17 Dec '03

============================================================= This update is sponsored by IBM http://www.wow-com.com/professional/systemint/ ============================================================= Dear WOW-COM Reader: WOW-COM(TM) is the wireless industrys online information source, a free service of CTIA. Find out what's going on in the wireless industry by visiting http://www.wow-com.com/welcome today! INDEX: ====== 1) Upcoming Conference: CTIA's WIRELESS FRAUD '97 2) The Battle continues: Antenna Siting 3) CTIA Supports New Tauzin Legislation to Catch and Prosecute Electronic Stalkers WIRELESS FRAUD '97 Conference ========================================================= http://www.wow-com.com/professional/fraud/ WIRELESS FRAUD '97 Conference is September 28 through October 2 in Orlando, FL. If you have not made your plans to be where the industry is going to be, MAKE THEM NOW because yesterday's wireless fraud solutions may not solve tomorrow's problems. Authentication is helping, so is RF Fingerprinting and other technologies. Despite our successes, wireless criminals haven't given up. Come to Orlando and WIRELESS FRAUD '97 the last week of September and learn how you can combat fraud. For more details please see complete information on www.wow-com.com's Fraud Microsite, or call (202)-785-0081 . The Latest on the Antenna Siting Battle "Now Is the Time for Action, Not Inquiry" ========================================================== http://www.wow-com.com/professional/whatshot/ FCC grants CTIA petition challenging local zoning moratoriums and seeks further comments. CTIA Says: Further comment spells further delay. Read the whole story here. Electronic Stalking and the Wireless Privacy Enhancement Act of 1997 =================================================== http://www.wow-com.com/professional/ Earlier this year, CTIA President and CEO Thomas E. Wheeler testified before Rep. Tauzins subcommittee, urging Congress to close a loophole that permitted what he termed "electronic stalking." Tauzins legislation clarifies and tightens current law to ban the manufacture, modification, sale and use of equipment used to illegally intercept private, protected conversations over wireless phones . ============================= MORE WOW-COM(TM) FEATURES ============================= WOW-COM(TM) is current: Updated 3x per day. WOW-COM(TM) is insightful: CTIAs unbiased analysis WOW-COM(TM) is beneficial: Find products and services in WOW-COM(TM)'s Virtual Trade Show. List open positions in the WOW-COM(TM) Career Center, get resumes via email, and hire qualified individuals. The world of wireless is in constant motion. Stay on top of the news and benefit from CTIAs analysis by reading WOW-COM(TM) everyday. You may remove yourself from the WOW-COM(TM) mailing list by going to http://www.wow-com.com/unsubscribe ======================================================== This update sponsored by: IBM http://www.wow-com.com/professional/systemint/ Today, more than ever, wireless carriers must remain flexible and respond rapidly to changing market conditions. Your success will depend on understanding your strategic opportunities and threats and quickly responding to them. To accomplish this, a wireless carrier must build links that are sophisticated, comprehensive and flexible. This is no small endeavor. IBM has developed a general multilevel blueprint of a wireless company to assist wireless carriers pursuing this goal. Take a look at how we can help you achieve your goals.

1 0

Re: Florida Drivers Permits
by David K. Merriman 17 Dec '03

17 Dec '03

At 01:10 PM 8/25/95 -0400, you wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >- -----BEGIN PGP SIGNED MESSAGE----- > >[Welcome back, Professor] You posted: > > >>Will, starting next year, containg a digitized photo, plus the current >>info. > ><snip> > >>Anyone know any details about the technololgy? > ><snip> > >Not really. > I saw the same story. The name, address, age, & height mentioned >are already obvious on licenses, but this may preclude incorrect data entry >by FL cops, and counterfeiting (a problem here for *years*). I saw nothing >on the digitized photo, but we could be looking at different stories. >Phase-in in July, '96. The story I saw suggests that other data, such as >tickets, criminal violations (presumably convictions) and "other >biographical information" [welfare, credit info] could eventually be >included, depending on FL's state budgetary considerations. No author, >just "Associated Press," listed on the story, and the card uses a magnetic >strip "like those on credit cards" rather than a chip, which may be a >mistake [considering the renewal period & my experience with bank-cards]. >Story doesn't say it, but it sounds like FL *may* be the first state to do >this. Are any other states doing this already? Texas is now issuing similar cards - with the addition of a barcode on the back. Front is going to have UV-reactive writing, and be color-coded for class of license (commercial, chauffer, etc). Happily, I renewed just a couple months ago, so have plenty of time to figure out what I can do to the new DL when I get one :-) Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

1 0

brutessl web keyservice
by David K. Merriman 17 Dec '03

17 Dec '03

Feh. I've been trying to get allocated some more keyspace from the brutessl web page, and keep getting timeouts. Last time, I requested 8 segments, got issued *3*. Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

1 0

Attend Windows NT Intranet Solutions!
by announce＠lists.zdnet.com 17 Dec '03

17 Dec '03

----------------------------------------------------------------- ZDNET ANNOUNCEMENT 8/6/97 ----------------------------------------------------------------- Are you looking to evaluate the latest Windows NT products? Attend Windows NT Intranet Solutions August 11-15. What: Windows NT Intranet Solutions August 11-15 Where: Moscone Center -- San Francisco, CA When: August 11-15 Windows NT Intranet Solutions, the NT Event, features a conference and expo program focused on all the major NT issues: - Integrating Unix/NetWare and NT - Migrating applications to NT - NT scalability and clustering - Managing and securing NT networks and much more. The expert-led Conference program, co-sponsored by PC WEEK, Inter@ctive Week and Windows Sources, runs August 11-15 and the 3-day Expo, featuring all the leading vendors and the latest NT products and solutions, runs August 13-15. To register free for the Expo and get complete conference info, call (888)800-8920 or visit the Windows NT Intranet Solutions on the Web at: http://www.wintis.com Windows NT Intranet Solutions is presented by SOFTBANK Forums, the producers of NetWorld+Interop and Seybold Seminars. _______________________________________________________________ ZDNet Announcements are periodic notices of new features, special events and free offers available to members of ZDNet. --To subscribe to ZDNet Announcements, please send mail to: announce-on(a)lists.zdnet.com You can leave the subject and body blank. --To unsubscribe to ZDNet Announcements, please send mail to: announce-off(a)lists.zdnet.com You can leave the subject and body blank. _______________________________________________________________ Powered by Mercury Mail: http://www.merc.com

1 0

ssl challenge
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- It would be Really Nice if the next version of the brutessl software had a couple of features (particularly for us folks with mini-LANs) - > option to output results to a file (or files, so we can maintain local logging of results: ie, CHAL2a.dat, CHAL2b.dat, etc). > a Windows 3.1 variant (or even win32s) I've got 3 machines (386sx-33, 386DX-20, 486DX2-80), with an option on my roommates machine (386DX-40), all connected via Windows for Workgroups. All 4 are set up with win32s, so could do a *lot* better at keysearches if the software was available. There's plenty of support for Unix variants, and even NT/95, but us humble Win/DOS users are kinda left hanging a bit. Maybe next challenge, we can pre-allocate keyspace based on the results of this one: look at how fast folks are reporting results, and allocate chunks of space accordingly (maybe based on an 8-hour 'cycle'). Sure take some of the load off the poor server :-) Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMD4E48VrTvyYOzAZAQGSMwP8DWxgb5NVDgvIFuw1BGf0E5TP0swHdyZ1 I4gfIGMtjd1AbtJHbxwILSPwb8+BcqZxZtGQXnYRnyoAkK7FltsiGulWApMXmNUU gtSUMr9xngW+Mwq5ju865Ff5wp7s8Bv3BBTqKGLmXWON1ILbEbjUNwqs4i8+wQU0 PCOgvJndj5M= =dyvQ -----END PGP SIGNATURE----- This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

2 1

adults only
by cindy＠mail1.mail-prom.com 17 Dec '03

17 Dec '03

TRY US OUT FOR FREE!!! See and talk to a live person on your computer screen. Not a video! Not prerecorded! This is live!!! Our models will obay your every cummand, we're willing to prove it by giving you a free 5 minute preview. Give it a try, it's free! - CLICK HERE

1 0

Costitutional Crisis
by Apache 17 Dec '03

17 Dec '03

5 Aug 1997 ========== Canberra AUSTRALIA The High Court of Australia in a land mark case today found that billions of dollars of taxes imposed every year on fuel, alcohol and tabacco which increases the prices of these products by up to several hundred percent were illegal and unconstitutional. The court found that the states had no legal right under the constitution to impose such taxes. The federal government has offered to help the states collect the revenue and pass it back to the states by way of grants. Calls have been made for the imposition of consumption taxes to replace the lost revenue. None of the state premiers made any comments regarding the return of the multi-billions in illegally collected assets to taxpayers. The illegal taxes continue to be collected even after the High Courts ruling. The finding has resulted in some panicing state premiers saying the High Court seemed to be intent on making the states ungovernable. The federal government worried about the possibility that taxpayers could sue the states for repayment of mult-billions of dollars in unconstitutionally collected taxes has announced it plans to introduce a 100% 'Unjust Windfall Tax' to confiscate the proceeds of winning claims. Legal experts believe such action by the federal government may in itself may be in breach of the constitution. -- Death to Tyrants Help Austalians re-instate the constitution

1 0

PGPfone (BETA TEST) is released
by Jeffrey I. Schiller 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- MIT is pleased to announce that it is now distributing the BETA TEST release of PGPfone. "PGPfone (Pretty Good Privacy Phone) is a software package that turns your desktop or notebook computer into a secure telephone. It uses speech compression and strong cryptography protocols to give you the ability to have a real-time secure telephone conversation." The Beta Test is only currently available for people with Macintosh computers. A Windows 95 version is also in the works. We are distributing PGPfone in the U.S. and Canada via anonymous FTP and via the World Wide Web. Anonymous FTP users should get the file "/pub/PGPfone/README" from net-dist.mit.edu. It provides instructions on how to download PGPfone. Web Users should go to the PGPfone Home Page at: http://web.mit.edu/network/pgpfone -Jeff -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMD4xcMUtR20Nv5BtAQGUqwQAmaOxhnbTyqdC5RicIEmiad8UbzdeJEXZ vfdzCZl4qm94JlohYAby/hDIFqo6cPW504o7CSoWPiEGDi7AYMEX0tq3wdAIdklR 2d/AqW45YWtPrfSdLjF8+xwI41kp/lYSqF9V9ZXycguENjdhd8bnI89tT3Ah20JF kL4q193/2O8= =9pv/ -----END PGP SIGNATURE-----

1 0

Approved Escrow Agents (forget GAK Motel)
by Jim Gillogly 17 Dec '03

17 Dec '03

Here are some discussion papers for the upcoming NIST-sponsored conference on 6-7 Sep 95 in DC. Note the footnote in the 2nd paper: (*1) "Approved," for the purposes of this discussion, means that the government (or its agent) has formally granted permission for an organization to hold keys for exportable encryption products. I'd been working on some GAK slogans based on Roach Motel... into the dumpster with "Keys go in, but they never come out!" -- too bad. Jim "GAK Motel" Gillogly Sterday, 3 Halimath S.R. 1995, 20:32 ___________________________________________________________________________ Key Escrow Issues Meeting, September 6-7, 1995 Discussion Paper #1 Issues -- Export of Software Key Escrowed Encryption On August 17, 1995, the Administration announced its proposal to permit the ready export of software encryption provided that the products use algorithms with key space that does not exceed 64 bits and the key(s) required to decrypt messages/files are escrowed with approved escrow agents. Under the proposal, products will be reviewed to verify that they satisfy the criteria and, if so, they will be transferred to the Commodity Control List administered by the Department of Commerce where the products can be exported under a general license (in much the same way that 40-bit RC2/RC4 encryption is licensed today). We are working toward creating broadly stated criteria that are in the nature of performance specifications. To meet these criteria, encryption products will need to implement key escrow mechanisms that cannot be readily altered or bypassed so as to defeat the purposes of key escrowing. The criteria, when finalized and published, will state the objectives, but not the exact technical method(s), by which those objectives are satisfied. This is to provide software publishers the flexibility to design methods for meeting our stated objectives in a manner that is compatible with the design of their products. There are, therefore, a number of questions we must work together to answer in order to draft effective criteria. These questions are: * Avoiding multiple encryption -- How can the product be designed so as to prevent doubling (or tripling, etc.) the key space of the algorithm? * Disabling the key escrow mechanism -- How can products be made resistant to alteration that would disable or circumvent the key escrow mechanism? How can the "static patch" problem be avoided? How can this be tested? * Access to escrow information -- What mechanisms must be designed into encryption products to allow authorized access to escrowed keys? This likely includes the identity of the key escrow agent(s) and a serial number for the key escrow agent to use to identify the key(s)/component(s) necessary to decrypt the message. What other information will be necessary to be provided to the escrow agent to identify the necessary key(s)/component(s)? Are there other comparable viable approaches? * Non-escrowed use -- How can products be made so that they do not function with non-escrowed products (or tampered escrowed products)? How can this be tested? * Limiting surveillance -- How can products be designed so that information both sent and received by the user can be decrypted without release of keys of other users? * Practical Key Access -- How can mechanisms be designed so that repeated involvement of escrow agents is not required for decryption for multiple files/messages during the specified access period? * Assurance that keys are escrowed -- How can it be assured that key escrow products are indeed satisfactorily escrowed? For example, products could be required to be escrowed at time of manufacture or be made inoperable until properly escrowed. * Ability to re-escrow keys -- How can products be designed so that new keys can be escrowed at the user's discretion with a U.S. Government approved escrow agent? * Certified escrow agents -- Can products be designed so that only escrow agents certified by the U.S. government (domestic, or under suitable arrangements, foreign) are utilized? What should be the criteria for an acceptable U.S. escrow agent? -------------- With your input, we are hopeful that this effort will lead to definitive criteria, which will facilitate the development of exportable products and help minimize the time required to obtain export licenses. The Administration seeks to finalize such criteria and make formal conforming modifications to the export regulations before the end of 1995. Note: These issues will be discussed at the Key Escrow Issues Meeting to be held September 6-7, 1995 (9:00 a.m. - 5:00 p.m.) at the National Institute of Standards and Technology (Gaithersburg, Maryland). The meeting will be open to the public, although seating is limited. Advance registration is requested, please contact Arlene Carlton on 301/975-3240, fax: 301/948-1784 or e- mail: carlton(a)micf.nist.gov. 8/25/94 ----------------------------- Key Escrow Issues Meeting, September 6-7, 1995 Discussion Paper #2 Discussion Issues: Desirable Characteristics for Key Escrow Agents In the government's recent announcement of its intent to allow the export of 64-bit software key escrow encryption products, one stipulation was that the keys would be escrowed with an approved key escrow agent.(*1) Exactly what qualifications/considerations are appropriate for approval as a key escrow agent have not been defined. Some of the issues which need to be discussed and resolved include the following: * What kinds of organizations should be excluded from consideration as approved key escrow agents? * What sort of legal agreement between the government and the key escrow agent is necessary to stipulate the responsibilities of the agent? Should this include the terms and conditions under which release of a key is required? * How will liability for unauthorized release of key be handled? * Should, for example, intentionally misreleasing or destroying a key be criminalized? Should this include other actions? * How can the government's needs for confidentiality of key release be handled? * Should approval of key escrow agents be tied to a public key infrastructure (for digital signatures and other purposes)? * What procedures need to be developed for the storage and safeguarding of keys? * What are the acceptable performance criteria (e.g., around- the-clock availability, accessibility, reliability, etc.) for approved key escrow agents? * Under what circumstances will key escrow agents in foreign countries be approved? * What process will be used to approve escrow agents? Costs/who pays? - - - --------- (*1) "Approved," for the purposes of this discussion, means that the government (or its agent) has formally granted permission for an organization to hold keys for exportable encryption products. Note: These issues will be discussed at the Key Escrow Issues Meeting to be held September 6-7, 1995 (9:00 a.m. - 5:00 p.m.) at the National Institute of Standards and Technology (Gaithersburg, Maryland). The meeting will be open to the public, although seating is limited. Advance registration is requested, please contact Arlene Carlton on 301/975-3240, fax: 301/948-1784 or e-mail: carlton(a)micf.nist.gov. 8/25/95 ___________________________________________________________________________

1 0

NIST Key Escrow Papers
by Dave Banisar 17 Dec '03

17 Dec '03

fyi... ---- August 25, 1995 MEMORANDUM FOR Registrants for the Sept. 6-7, 1995 Key Escrow Issues Meeting From: NIST - Ed Roback Subject: Discussion Papers Attached for your information are two discussion papers for the upcoming September 6-7, 1995 Key Escrow Issues Meeting to be held at NIST. If you have any questions on this material, you may reach me on 301-975-3696. I look forward to seeing you in September. Attachments ------------------------ Key Escrow Issues Meeting, September 6-7, 1995 Discussion Paper #1 Issues -- Export of Software Key Escrowed Encryption On August 17, 1995, the Administration announced its proposal to permit the ready export of software encryption provided that the products use algorithms with key space that does not exceed 64 bits and the key(s) required to decrypt messages/files are escrowed with approved escrow agents. Under the proposal, products will be reviewed to verify that they satisfy the criteria and, if so, they will be transferred to the Commodity Control List administered by the Department of Commerce where the products can be exported under a general license (in much the same way that 40-bit RC2/RC4 encryption is licensed today). We are working toward creating broadly stated criteria that are in the nature of performance specifications. To meet these criteria, encryption products will need to implement key escrow mechanisms that cannot be readily altered or bypassed so as to defeat the purposes of key escrowing. The criteria, when finalized and published, will state the objectives, but not the exact technical method(s), by which those objectives are satisfied. This is to provide software publishers the flexibility to design methods for meeting our stated objectives in a manner that is compatible with the design of their products. There are, therefore, a number of questions we must work together to answer in order to draft effective criteria. These questions are: * Avoiding multiple encryption -- How can the product be designed so as to prevent doubling (or tripling, etc.) the key space of the algorithm? * Disabling the key escrow mechanism -- How can products be made resistant to alteration that would disable or circumvent the key escrow mechanism? How can the "static patch" problem be avoided? How can this be tested? * Access to escrow information -- What mechanisms must be designed into encryption products to allow authorized access to escrowed keys? This likely includes the identity of the key escrow agent(s) and a serial number for the key escrow agent to use to identify the key(s)/component(s) necessary to decrypt the message. What other information will be necessary to be provided to the escrow agent to identify the necessary key(s)/component(s)? Are there other comparable viable approaches? * Non-escrowed use -- How can products be made so that they do not function with non-escrowed products (or tampered escrowed products)? How can this be tested? * Limiting surveillance -- How can products be designed so that information both sent and received by the user can be decrypted without release of keys of other users? * Practical Key Access -- How can mechanisms be designed so that repeated involvement of escrow agents is not required for decryption for multiple files/messages during the specified access period? * Assurance that keys are escrowed -- How can it be assured that key escrow products are indeed satisfactorily escrowed? For example, products could be required to be escrowed at time of manufacture or be made inoperable until properly escrowed. * Ability to re-escrow keys -- How can products be designed so that new keys can be escrowed at the user's discretion with a U.S. Government approved escrow agent? * Certified escrow agents -- Can products be designed so that only escrow agents certified by the U.S. government (domestic, or under suitable arrangements, foreign) are utilized? What should be the criteria for an acceptable U.S. escrow agent? -------------- With your input, we are hopeful that this effort will lead to definitive criteria, which will facilitate the development of exportable products and help minimize the time required to obtain export licenses. The Administration seeks to finalize such criteria and make formal conforming modifications to the export regulations before the end of 1995. Note: These issues will be discussed at the Key Escrow Issues Meeting to be held September 6-7, 1995 (9:00 a.m. - 5:00 p.m.) at the National Institute of Standards and Technology (Gaithersburg, Maryland). The meeting will be open to the public, although seating is limited. Advance registration is requested, please contact Arlene Carlton on 301/975-3240, fax: 301/948-1784 or e- mail: carlton(a)micf.nist.gov. 8/25/94 ----------------------------- Key Escrow Issues Meeting, September 6-7, 1995 Discussion Paper #2 Discussion Issues: Desirable Characteristics for Key Escrow Agents In the government's recent announcement of its intent to allow the export of 64-bit software key escrow encryption products, one stipulation was that the keys would be escrowed with an approved key escrow agent.(*1) Exactly what qualifications/considerations are appropriate for approval as a key escrow agent have not been defined. Some of the issues which need to be discussed and resolved include the following: * What kinds of organizations should be excluded from consideration as approved key escrow agents? * What sort of legal agreement between the government and the key escrow agent is necessary to stipulate the responsibilities of the agent? Should this include the terms and conditions under which release of a key is required? * How will liability for unauthorized release of key be handled? * Should, for example, intentionally misreleasing or destroying a key be criminalized? Should this include other actions? * How can the government's needs for confidentiality of key release be handled? * Should approval of key escrow agents be tied to a public key infrastructure (for digital signatures and other purposes)? * What procedures need to be developed for the storage and safeguarding of keys? * What are the acceptable performance criteria (e.g., around- the-clock availability, accessibility, reliability, etc.) for approved key escrow agents? * Under what circumstances will key escrow agents in foreign countries be approved? * What process will be used to approve escrow agents? Costs/who pays? --------- (*1) "Approved," for the purposes of this discussion, means that the government (or its agent) has formally granted permission for an organization to hold keys for exportable encryption products. Note: These issues will be discussed at the Key Escrow Issues Meeting to be held September 6-7, 1995 (9:00 a.m. - 5:00 p.m.) at the National Institute of Standards and Technology (Gaithersburg, Maryland). The meeting will be open to the public, although seating is limited. Advance registration is requested, please contact Arlene Carlton on 301/975-3240, fax: 301/948-1784 or e-mail: carlton(a)micf.nist.gov. 8/25/95 _________________________________________________________________________ Subject: NIST Key Escrow Papers _________________________________________________________________________ David Banisar (Banisar(a)epic.org) * 202-544-9240 (tel) Electronic Privacy Information Center * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://epic.org Washington, DC 20003 * ftp/gopher/wais cpsr.org

1 0

SSL Challenge: Server problems
by Peter Trei 17 Dec '03

17 Dec '03

I can't contact the server to request keyspace anymore - I get a '500 Server error' It looks like 12 hours on a P5/90 are going to waste (could have done 90 segments) Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

6 8