December 2003 - cypherpunks-legacy

Re: ACLU Opposes Exon-Like Speech Crimes in Managers Amend. to House Telco Bill
by Carl Ellison 17 Dec '03

17 Dec '03

>Date: Thu, 3 Aug 1995 11:06:19 -0400 >From: ACLUNATL(a)aol.com > The amendment would have the >effect of actually usurping control from parents in favor of a government >approval panel. Anecdote: I was in Cambridge MA this past weekend visiting old friends, some at church. I sat across from one such at lunch -- a young guy up from Texas going on about how good it is that people are fighting cyberporn. I brought up parental control in attempted rebuttal and he switched immediately to the idea that `parents usually *are* the child abusers and we need to protect children from them -- not give parents control over what gets communicated electronically'. I was surprised at the speed with which he switched to that line of thought. It's clear that this chess game opening has been played by or around him before. [Come to think of it now, it's completely consistent with the anti-abortion stand: that children (starting at fetus) are the property of Society and parents are required to serve Society as soon as a child is conceived (or perhaps as soon as they start having sex). If it's child abusers you're talking about, that line of reasoning can carry emotional appeal. However, I lived in Utah at a time when it was illegal for parents to instruct their children about birth control (I was told (I didn't read the law personally.)).] - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme/home.html | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +----------------------------------------------------------- Jean Ellison -+

2 1

Re: There's a hole in your crypto...
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:53 PM 8/7/95, Dr. Frederick B. Cohen wrote: >Issue 2: > >The notion that mathematics somehow excludes linguistic proofs >(forwarded I believe by a user with "may" in their email address) is >nonsense. Mathematics at its core is based on linguistic notions that Not this "May," so far as I can recall. --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Re: RSA/Perl Shirts
by Paul Foley 17 Dec '03

17 Dec '03

One thing I have to ask: Does wearing one of these shirts under something else count as carrying a concealed weapon? :-) -- Paul Foley <paul(a)gec.co.nz> PGP key 0x0D1C0E75 -----------------There's no government like no government---------------- Where they burn books, in the end they will also burn people. -- Heinrich Heine

1 0

Re: Over 350 'Munitions T-shirts' Shipped
by tfs＠adc.com 17 Dec '03

17 Dec '03

> Where are mine...I got the money to you via > Mario wojo???? at SUN... > I ordered 8 of the shirts > BTW > I am the publisher of PGP 1.0 the only person > who will be indicted with Phil or alone for PGP > what about MY defense fund???? > > Check Gov Access for my story Could you be a little more specific regarding your URL? Thanks! ******************************************************************************* * Just say know! Tony Sgarlatti thetruth(a)future.net * *******************************************************************************

1 0

addresses
by Alan Pugh 17 Dec '03

17 Dec '03

thanks much to all who responded to my query on the problem i was having with the strange address. i think i have more than enough information to resolve this problem. amp ********************************************* * / Only God can see the whole * * O[%\%\%{<>===========================- * * \ Mandlebrot Set at Once! * * amp * * <0003701548(a)mcimail.com> * * <alan.pugh(a)internetmci.com> * * PGP Key = 4A2683C1 * *********************************************

1 0

www remailer interface
by nobody＠valhalla.phoenix.net 17 Dec '03

17 Dec '03

c'punks, Please check out the new www remailer interface at http://miso.wwa.com/~dochobbs/cpremailer.html It is based on nate's code with one addition for security and contains info from other places. I would appreciate some visits and comments/criticisms before I place it in the general population. Again, give it a thorough test because I want it to be good and secure for me and those using it. It's in its final testing phase (mainly because I haven't got the news instructions just the way I want them) and will be set to go soon. I am, of course, sending this message through the page. Michael Hobbs dochobbs(a)wwa.com

1 0

proving programs correct
by Perry E. Metzger 17 Dec '03

17 Dec '03

A boss of mine at Bellcore, and a very smart guy (B. Gopinath) once mentioned to me that (with the exception of scheme) he'd never seen a set of formal semantics for a language that were smaller than the largest program one would care to write in the language. He was, of course, slightly exagerating for effect, but his point was very simple: you can't even get the basis on which to write your proofs right. An interesting experience happened during the same project, as I recall: we attempted to prove a small bit of code correct. Unfortunately, the proof had a bug in it which meshed nicely with a bug in the program and a bug in the implementation. Proofs are no less large complicated formal constructs than programs are, and checking them is no less onerous, unless they are written in formal logic in which case they are not possible for human beings to produce. Perry

2 1

Re: www remailer interface
by futplex＠pseudonym.com 17 Dec '03

17 Dec '03

Anonymous/Michael Hobbs writes: > Please check out the new www remailer interface at > > http://miso.wwa.com/~dochobbs/cpremailer.html [...] > I would appreciate some visits and comments/criticisms > before I place it in the general population. I'm a bit uncomfortable about the hardwiring of a particular remailer into the chain, according to the Web page: "Select your remailers [...] Your mail will be automatically sent to the remailer hfinney(a)shell.portal.com and at least one other remailer that you choose." (Nothing personal, Hal :) Why was this done ? -Futplex

1 0

Re: www remailer interface
by dochobbs＠wwa.com 17 Dec '03

17 Dec '03

It has been stated, :I'm a bit uncomfortable about the hardwiring of a particular remailer into :the chain, according to the Web page : : "Select your remailers [...] Your mail will be automatically sent : to the remailer hfinney(a)shell.portal.com and at least one other : remailer that you choose." : :(Nothing personal, Hal :) : :Why was this done ? : :-Futplex The code was written to be used with a local remailer that then sends it along the others that the sender chooses. I modified it so that I don't need to establish my own remailer by sending it to hfinney(a)shell.portal.com. I think this might provide better security for the sender due to the fact that you are forced to chain your letter thus providing more security. The argument can be made that if the initial hardwired remailer is compromised that this removes all security. I chose hfinney because 1. the turnaround time is good. I wanted the first to be fast because it is basically 'insurance' for the sender. 2. it was a remailer that I am familiar with and has been around (in remailer server time) awhile. 3. it was the one that I personally felt most comfortable with using as the hardwired mailer. Granted these might not be the best reasons, but this is the kind of response I was looking for. I can solve the problem by either 1. removing the hardwired 2. removing the hardwired and forcing you to chain 3. keep the hardwired in and use some 'established' remailer or one the group can come to a consensus on. Responses appreciated. I will gladly distibute the code if desired. Like the page states, it was originally written by Nate Sammons, but I can change it as needed. _____________________________________________________________ dochobbs(a)wwa.com M.D. Hobbs mhobbs(a)rad.rpslmc.edu http://miso.wwa.com/~dochobbs finger for my pgp key I am human and nothing human do I count alien.

1 0

Two-faced Security Problem? Dammit Janus?
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

Not exactly crypto, but the same idea: I've been trying to hook up an HTTP server sitting on a Mac at the end of my normal PPP connection. This was just supposed to be a test, but I kept getting annoying connection problems whenever someone tried to GET a page from me. The connection wouldn't go through about half of the time. After poking around for a week, I discovered that my home machine, newray.digex.net, is listed in the Digex's nameservers TWICE! Once with the IP address that my home machine is waiting for (199.125.128.5) and once with some other IP address in the digex space (164.109.211.61). If you do an nslookup on the name, you get both addresses. I believe that the technically correct thing for someone to do is to choose one of the addresses at random to distribute the load between two machines pretending to be one. This explains the connection failures that happened half of the time. This has led me to wonder, though, whether this is some sort of security breech. For instance, could there be someone out there mascarading as me? Normally I run Eudora, Netscape, Telnet and other outward bound applications. It was almost a fluke that I noticed that there were two entries. Does some software need to find its IP address in a DNS table? For instance, does Eudora need to look up 164.109.211.61 to find "newray.digex.net"? If someone was using this software on the mascarading node, they would need to set up an entry in the tables to make everything work. They just assumed I would never get inbound traffic. Any theories on this? -Peter "More Paranoid Than Ever" Wayner

1 0

patent info URL
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

Since various intellectual property debates and questions come up ("plague") periodically, it seemed like it'd be a good idea to post the following URL: http://www.patents.com/ Its run by a small patent law firm and has a series of well-linked, snappy FAQs on issues pertaining to intellectual property, patents (including some on "I had a really clever idea--what should[n't] I do?"), relevant links, etc. etc Ted

1 0

Where to find Internet growth stats?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

I read in a speech by Rutkowski that the latest Internet growth stats are published twice a month. I search at the Internet Society site, and other usual suspects, but to no avail. URL, anyone? TIA, -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

hardware encryption
by cman＠communities.com 17 Dec '03

17 Dec '03

I'm looking for add-in cards that implement DES and/or RSA for either a PC (ISA/EISA/whatever) or a Sun (S-Bus), preferably a Sun. Also, the RSA card would need to implement a 1024 bit modulus. Any tips or pointers? I've got the list of chip makers in _Applied Cryptography_, but the ones I've contacted so far don't seem to know anything about cards, even if they admit that they have the chips. Thanks, Doug

1 0

Triple-DES controlled?
by Goh Seow Hiong 17 Dec '03

17 Dec '03

Could someone confirm whether the US export restrictions apply to Triple-DES? If so, are there exceptions as in the case of DES (e.g. for banking or financial applications). Thx. SH

2 1

700_dig
by John Young 17 Dec '03

17 Dec '03

MH has provided a transcript of Pat Robertson's show on digital cash of March 8, 1995. It includes remarks by David Chaum, Dave Banisar, Steven Levy and others. 700_dig (about 14K)

1 0

WDM_zum
by John Young 17 Dec '03

17 Dec '03

RH has provided an informative article on wavelength division multiplexing (WDM) from the August 7 InfoWorld: "Boost in optical-fiber communication capacity is just over the rainbow," by Bob Metcalfe, the founder of 3Com. WDM_zum (about 5K)

1 0

See y'all in a while....
by Phil Fraering 17 Dec '03

17 Dec '03

I'm leaving the list for a while while I try to work out a different way of accessing the net. In short, I've grown dissatisfied with my ISP and need some time to think things through before making other arrangements. It's too frustrating sorting through all of this mail without proper filtering scripts like I had set up back at srl03. And news is kind-of beside the point: the news server is always full, and rejects any attempt to post because of lack of space. In the meantime, while y'all discuss all that stuff about logical proofs and the like, please, _please_, stay away from crosswalks? I'll probably make another attempt at downloading pgp262s.zip before I shut this down... the first two times the modem (I think theirs) went flaky and dropped the connection on me. Okay. time to see if the signature service works. Later, dudes. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMBwQDCoTheIowlstareqnot8whaththeyEseemMI5rculIym8xjzYV8C mErjcooperUcoopermcooperqBviplMp =aBGi -----END PGP SIGNATURE----- +----------------+Quote from _Infinite In All Directions_, F.J. Dyson-----+ | Phil Fraering / \"The English Hierarchy, if there be anything unsound in| | pgf(a)tyrell.net\ /its constitution, has reason to tremble even at an air | +----------------+-pump or an electrical machine."---Joseph Priestly------+

1 0

Re: MS Money password problem
by dochobbs＠wwa.com 17 Dec '03

17 Dec '03

I'm not sure if this has been mentioned or will help, but this company makes crakers for quicken, word and wordperfect (not sure about M$ money though). http://gn2.getnet.com:80/crak/ email: johnk(a)indirect.com _____________________________________________________________ dochobbs(a)wwa.com M.D. Hobbs mhobbs(a)rad.rpslmc.edu http://miso.wwa.com/~dochobbs finger for my pgp key I am human and nothing human do I count alien.

1 0

RSA Catalog
by John Young 17 Dec '03

17 Dec '03

For those who've not yet fondled RSA's sleek "Security Solutions Catalog," it can be virtually diddled at: http://www.rsa.com/rsa/sscatw95/P67.HTM

1 0

Re: Where to find Internet growth stats?
by brendan＠Mail.RAth.PeachNet.EDU 17 Dec '03

17 Dec '03

http://www.tic.com/mids/midshome.html is --cut->>Matrix Information and Directory Services, Inc. (MIDS) is a corporation founded by Smoot Carl-Mitchell and John S. Quarterman. Eric McKinney is Assistant Editor. <<--paste- --- Brendan Mullen brendan(a)chugalug.cosmic.uga.edu Athens GA USA

1 0

Re: Triple-DES controlled?
by Rich Salz 17 Dec '03

17 Dec '03

>I have not heard of export licenses being granted for 3DES. Didn't the ANSI financial committee just adopt 3DES (over NSA objections)? Presumably they consider the export situation solved/solvable. /r$

4 4

Only 1/3 of Government Computers Down So Far
by KALLISTE＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Allegations Regarding Vince Foster, the NSA, and Banking Transactions Spying, Part XV by J. Orlin Grabbe The world of money laundering is a difficult one. What are you going to do when your wire transfers to the Caribbean and other offshore centers won't go through? What are you going to do when one-third (as of August 8, 1995) of certain government computers are down with a virus? Or is it a worm? Or an octopus? Did the NSA, in its zeal to modify the PROMIS software to spy on banking and other transactions, create a massive security hole in computer systems sending wire transfers? Well, I do hear it is a nice time to go vacationing in the islands, even for day trips! Perhaps FinCEN could relocate to Havana? [Note to Julie Franklin: Over here in Reno, we're always last to get the news. Well, I'm a taxpayer. *Please* put me on your list. In the future please fax all computer disconnect info to 702-829-0852. Thanks.] Which brings us to the subject of Ed Meese. At the end of Reagan's second term as governor of California, Meese needed a new job. He worked at Rohr Industries for a while. But it didn't suit him, so *Richard Mellon Scaife* set up the San Diego Center for Criminal Justice on condition that Ed Meese be its Director, a post Meese held 1977-1980. Later, after Ed Meese became Attorney General of the U.S. and the the people-tracking PROMIS software was stolen by the U.S. Justice Department using (according to a federal bankruptcy judge) "trickery, deceit, and fraud", Ed Meese's friend Earl Brian--then owner of Financial News Network, UPI, and Hadron corporation--proceeded to market the software all over the world, as well as to U.S. intelligence and law enforcement agencies. One agency that acquired the software was FEMA, the Federal Emergency Management Agency, which proceeded to create a data base of political dissidents to be rounded up in event of a national emergency. (Like any information, once collected it found multiple uses.) This data base was called MAINCORE, and the FEMA MAINCORE system was operated out of the basement of a building in Culpeper, VA. Journalist Danny Casolaro, with the help of Alan Standorf, was able to get printouts of this totalitarian application of the PROMIS software just prior to his demise. (When a member of congress attempted to question Oliver North about the FEMA MAINCORE data base, he was rudely shouted down by the chairman of the investigative committee.) Another agency that put the software to use was the Wackenhut Corporation. It used the enhanced PROMIS to keep track of critics of the nuclear industry, an area in which *Richard Mellon Scaife* has a vested financial interest. Now Mellon bank in Pittsburgh finds itself embroiled in very serious money laundering charges. Do these facts explain why the Little-Rock connection to the theft and modification of the PROMIS software for the purpose of spying on banking transactions is a subject carefully avoided in Scaife-sponsored political advertisements? Is this why the Mena-drug-smuggling, Little-Rock-money-laundering operation allegedly stops with Bill Clinton? Is this why the connection of Vince Foster both to bank spying and nuclear espionage has been carefully downplayed? Do Scaife's investments in the "terrorism industry" have anything to do with recent media hyping of the imminent threat to the U.S. of "international" terrorism? Scaife's exposing of the sins of the Democrats has certainly served a useful purpose. But don't think the story stops with Bill Clinton. Perhaps the reason that Mr. Kenneth Starr's independent investigation into the Whitewater affair has gone so slowly is that Mr. Starr, in order to nail Bill Clinton, has to also nail a number of high-ranking Republicans? Well, Mr. Starr, let the facts fall where they may. I have confidence in you. You do want to be Attorney General someday, don't you? If you can find your way to do the right thing, you'll certainly deserve the position. Otherwise the wily hackers of the world may have to do your job for you. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMChlMWX1Kn9BepeVAQHbhgP/bSlSNnUClp4HPEDiB22JGHrqvMa5B6h8 LW0rR7eZdD2ub9CUj/HBfIrnU4mekw6MfmExxuy+mva1Z5MPsZKuE1qvxWBFHK5S TzMFsPBsZNPH2GEDIQHZp/rIQeKYDsfjOp1OLVUPD9MA4tlTOQPgQ5RVzzKi+tEF K1+Uxvy1lQ4= =5pPJ -----END PGP SIGNATURE-----

2 1

Re: www remailer interface
by Will French 17 Dec '03

17 Dec '03

> 1. removing the hardwired > 2. removing the hardwired and forcing you to chain > 3. keep the hardwired in and use some 'established' remailer > or one the group can come to a consensus on. Given the second possibility, I see no reason to hardwire a remailer. It really will make people suspicious! I can easily imagine someone deciding not to use that remailer again, just on general principles. And anyway, chaining is not always necessary, especially if the sender is at a public Web terminal or using an anonymous Web proxy. The remailers don't enforce chaining, why should you? Will French <wfrench(a)interport.net>

1 0

[Meaningless] Vote.
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Fellow Cypherpunks: Below is the URL of an "Online Forum" page to allow 'Net citizens vote on various, (usually boring) issues. >************************************************** > VOTELINK brings the Voice of the Internet > To today's hot news topics. To make your voice > "heard round the world" go to: > > http://www.votelink.com >*************************************************** So last week I was surfin', wastin' time, and drinkin' a brew, and I happened by. I was asked to vote on some mundane topic [I forget what]--and instead I suggested a "World Vote" topic I liked better, and, sure enough, they put it up this week: [I was shocked when they e- mailed me!] :-) >Should Phil Zimmermann be prosecuted for allowing > release of his PGP encryption program on the > Internet? > > > PRO: ITAR export restrictions exist. > Cryptographic software, like PGP, is > considered a weapon of war. -- more [somebody shoot me with PGP, and nothing else!] > > CON: Imprisoning Zimmermann for export > violations would be an unconstitutional restraint of > free speech and privacy rights. -- more [guess how Jim Ray voted...] ;-) OK. Far be it from me to suggest vote fraud [there aren't too many Libertarians in cemetaries anyway :)] but I think certain cypherpunks might want to go "vote" this week, if you have the time to waste. Please vote *only* once, and tell all your buddies. Thanks. JMR - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCbswG1lp8bpvW01AQGDeAP8DZiWwIsABi7sy3MuyZo5QMFB/lf0ghIg 8zcE/WGaPocvwqlxwBW3DckSQw/vM8cqyv3LGPjQwC2il5HpELdyS44Rd4tQ/Qjb p0P+6mZh0Qk8domUuadX877Lk8hcnh7ydypCL3WPigSvh3tYYGwnL00Q6vi6nKzj YQ7092OOn80= =ebKB - -----END PGP SIGNATURE----- Regards, Jim Ray "The people will again respect the law when the law again respects the will of the people." Jim Ray, Campaign '92 - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCbtzyoZzwIn1bdtAQHUowGA1pSgF1+AVBDi0Jz8H7dd4XIvbXNulPvF SIRzwHrNMApJoz2mX34r+8hndI3nwREW =hz/N -----END PGP SIGNATURE-----

1 0

WANNA PLAY VIRTUAL FOOTBALL?
by Selective.Marketing＠kmeijn 17 Dec '03

17 Dec '03

WANNA PLAY FOOTBALL? Come play Virtual Football where you create your own team. This site is endorsed by the National Football League. If you would like more information about playing Virtual Football, please send your request to <football2(a)answerme.com> and the information will be forwarded to you in just a few short moments.

1 0