December 2003 - cypherpunks-legacy

Re: Venona NSA web page
by Mutant Rob 17 Dec '03

17 Dec '03

1 0

Re: maling list
by David K. Merriman 17 Dec '03

17 Dec '03

At 12:51 AM 03/15/96 +0000, you wrote: >Can you please take me off your mailing list. Thankyou. >firebrd123(a)mail.interconnect.net We can take you off the maling list, or we can take you off the mailing list. Which would you prefer? Of course, you'll still be on our shitlist.... Dave Merriman ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

Re: Venona NSA web page
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:42 AM 3/14/96 -0800, Vladimir Z. Nuri wrote: >------- Forwarded Message > >Date: Wed, 13 Mar 1996 06:59:32 -0500 (EST) >From: merkaba(a)styx.ios.com >Subject: VENONA PROJECT (fwd) > > > > >- - ---------- Forwarded message ---------- >Date: Tue, 12 Mar 1996 22:07:24 -0500 >From: Ronald Pearce <ronald(a)cybercomm.net> >To: merkaba(a)styx.ios.com >Subject: VENONA PROJECT > >http://www.nsa.gov:8080/docs/venona/venona.html > >The VENONA Project > >In July 1995 the Intelligence Community ended a 50-year silence regarding >one of cryptology's most splendid successes - the VENONA Project. ... How they did it (from http://www.nsa.gov:8080/docs/venona/memory.html) A word about the VENONA cryptosystems---they should have been impossible to read. They consisted of a code book in which letters, words, and phrases were equated to numbers. So a code clerk would take a plain text message and encode the message using numbers from the codebook. This would have presented a significant challenge itself depending on how long the code book was used. However, the messages were further modified, in other words double-encrypted, by use of a one time pad. The use of a one time pad effectively randomizes the code and renders it unreadable. The key to the VENONA success was that mistakes were made in the construction and use of the one time pads---a fact that was discovered only through brute force and analysis of the message traffic. (http://www.nsa.gov:8080/docs/venona/monographs/monograph-2.html) ... One-time pads used properly only once are unbreakable; however, the KGB's cryptographic material manufacturing center in the Soviet Union apparently reused some of the pages from one-time pads. This provided Arlington Hall with an opening. Very few of the 1942 KGB messages were able to be solved because there was very little duplication of one-time pad pages in those messages. The situation was more favorable in 1943, even more so in 1944, and the success rate improved accordingly. Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: FCC-type Regulation of Cyberspace
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:59 AM 3/15/96, Bill Frantz wrote: >At 9:26 PM 3/14/96 -0800, Timothy C. May wrote: >>Mr. Frantz, unless you can prove your claims here, forthwith, I must inform >>you that they are in violation of the Truth in Speech Act of 1996. Please >>retract them, now. > >Political speech, not commercial speech. The act doesn't apply or is >unconstitutional. I recognize no such distinction, and neither does--in my reading--the First Amendment. The First doesn't say, "Congress shall make no law...except for commercial speech...and except for religious speech...and except for insulting speech...." It said, simply, "Congress shall make no law..." (Before Bill jumps in and points out that he said nothing about religious, insulting, etc. forms of speech, I added those because it underscores just what "Congress shall make no law" means.) The issue of _fraudulent claims_ is presumably a main reason for those who think commercial speech is "different" from ordinary speech. Fraud is tough to control through legislation without severely limiting free speech. For example, if a Jehovah's Witness comes to my door and tells me all the wonderful things that will happen if I convert, is this fraud? Before one says this is "noncommercial," more fortunes have been lost or given away to Moonies, Christians, and other cults than all the financial scams in history. If a recruit to the Unification Church "is led to believe" that she will find salvation in the bosom of the Church if she donates her inheritance, is this fraud? Personally, while I view all religions as basically fraudulent, liberal societies have accepted the view that it's best that the State not seek to determine which claims are true, that "caveat emptor" should be the rule. The same caveat emptor view is the basic rationale for the First Amendment. It is recognized that free speech will inevitably cause some people to make bad decisions, to make bad investments (such as in the canonical case of an investment advisor giving advice that turns out to be flaky), and so on. "Don't believe everything you hear" is the operative phrase. Again, I see no distinction between commercial and other forms of speech. If a contract is involved, then civil law is the way to handle this. (As it might be with religious speech, where someone is told contractually that if they give $10,000 to the church their blindness will be cured. Key to a contract must be a testable set of results.) The First is under constant attack by people who claim that some type of speech is "not covered" by the First, or that other clauses of the Constitution give the State authority to regulate speech, or that the Founders did not "intend" for certain types of speech to be protected. The "campaign reformers" want limits placed on how much speech a candidate may issue (or how much speech people like me, as a volunteer or PAC, can issue). The medical protectionists want the speech of quacks, midwives, and other non-union members suppressed. And the arguments about "commercial speech" could mean broad limits on speech. >>Do you see the problem? > >Of course. Why do you think I said (in the 4th paragraph which you didn't >quote) (ZING :-) ): Touche. >BTW - I consider non-free markets, produced primarily by oligarchic >combines of large organizations to be a major impediment to removing >government influence from the economic system. Easing market entry is one >way to reduce the power of these oligarchic combines. I don't want to just >trade elected government oppression for unelected corporate oppression. To >put it bluntly, to suppress the 19th century coal mining strikes, the >companies hired the Pinkertons. I don't see a whole lot of difference >between this kind of private enterprise transaction, and Ruby Ridge. But this is direct violence. Libertarians don't condone this. Using episodes of such violence, by any side, as an argument against free markets is just an appeal to emotion. (I'm of course not saying we will ever be free of people initiating the use of force.) As for "oligarchic combines," certainly much larger and more concentrated examples may be found in Microsoft and Intel, which currently have about 80% apiece of their respective markets. Not to many Pinkerton guards forcing we Mac users to switch to Microsoft and Intel.... --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

New Nym Server! (cubed)
by NSA Spook 17 Dec '03

17 Dec '03

Hello everyone! There is a new nymserver on the net! alias(a)alias.alias.net (cubed) is running the Alpha code by Matt Ghio (ghio(a)myriad.alias.net) It's short name on Raph's list will be "cubed" with an actual email address of alias(a)alias.alias.net. Enjoy! Here's the public key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzFKvt4AAAEEALz0GGp2todRpJsnPUUPo5dLK4b/xY6BEmh5H/v0Ujx3TuiU Bz++YxyGfcps1m0GpXp61hzSA1QDyhQFIMn98yyG7uzmeS1O3KX3/a5941+EO3yQ Vov8WkkewHxuSv62KcweynQjct0K+aeUopjzHvo6C/c0c5bzYTxTYiwGgKGpAAUR tCxUaGUgQ3ViZWQgTnltIFNlcnZlciA8YWxpYXNAYWxpYXMuYWxpYXMubmV0Pg== =i/Px -----END PGP PUBLIC KEY BLOCK-----

1 0

RE: Java bignum package
by Hal 17 Dec '03

17 Dec '03

From: Bill Stewart <stewarts(a)ix.netcom.com> > Does Java have a run-time way to do > #if_exists library_X > foo = library_X.method_a(bar, baz) > #else > foo = library_Y.method_a(bar, baz) > #endif > or equivalent? This would let you distribute a slow pure-java library > that's compatible to a native-mode library and use whichever you need. Bill is referring to an announcement I made elsewhere about a bignum package I am working on in Java. Take a look at <URL: http://www.portal.com/~hfinney/bignum/bigarithtest.html> to play with a little interactive "calculator" I made with it. You need a Java enabled browser to use it. I think Bill's idea is a good one but I will discuss it further on coderpunks since it gets into some technical aspects of Java that may not be of general interest. Hal

1 0

Re: Beat Remote Monitor Snooping?
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

The whole 'to NTSC, or not to NTSC" debate is irrelevant, since VGA monitors use seperate red, green, blue, and sync signals that are not modulated on any carrier. Jonathan Wienke

1 0

remailer file request
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm ready to start testing my Win95 remailer hack. I'd appreciate a *few* anon messages with my webmaster (_not_ remailer) address as an intermediary: webmaster(a)shellback.com vs. remailer(a)shellback.com Messages don't have to contain anything important, since they will _not_ be sent on. A PGP-encrypted message or two in the mix would be Really Nice. Thanks. Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMUfsqsVrTvyYOzAZAQH8swQAgTJoRMCd8Hb58wmvz9fzHeCJ2vEjLZO3 Me3v9NB4uy2zhExid8/MN3ZBl3iNrkUZnbktA9+gLZ2OrqyLNwC6PxoKB/yN2Ev9 ckHqrMfsqrYvrUmm/oTdAi2rRalBRq8aT5jjLw4itVfv1peSWuEmh9iFPXfzlWXL vP8fTlmvQcs= =toB2 -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

RE: Leahy bill, legalize crypto
by jim bell 17 Dec '03

17 Dec '03

At 11:50 AM 3/14/96 -0800, Timothy C. May wrote: >At 2:41 PM 3/14/96, Robichaux, Paul E wrote: >>The difference here is that the courts have upheld government restrictions >>on broadcast spectrum because it's a scarce resource. In the special case of >>encryption on ham bands, no one's ever even challenged the restriction >>AFAIK. As Duncan Frissell has preached here many times, bandwidth is no >>longer as scarce, so I think a constitutional challenge to an encryption ban >>would probably be workable. > >Yes, and I said as much--about the bandwidth limitations--in my post. In >the very next line after you stopped quoting!!!!!: > >"Sure, I understand that Internet bandwidth is not the same as the >"public airwaves," but this subtlety may not be enough to stop the parallel >from being successfully drawn. Especially if the phone companies and other >threatened players are pushing hard for the FCC to step in and regulate." I think your analysis is absolutely correct. Despite the fact that fiber bandwidth has none of the limitations of "over the air" communications, the government will try to regulate it as if it were. The underlying danger of the CDA, in addition to regulating CONTENT, is that the government is setting up precedents to regulate the communications AT ALL, which is dangerous to us. Jim Bell jimbell(a)pacifier.com Klaatu Burada Nikto

1 0

Re: Why escrow? (was Re: How would Leahy bill affect crypto
by jim bell 17 Dec '03

17 Dec '03

At 07:57 AM 3/14/96 +0000, Deranged Mutant wrote: >On 13 Mar 96 at 15:27, jim bell wrote: >[..] >> If I were trying to detect government investigation in such a situation, I >> would buy a crypto phone, open an "escrow account" on a totally voluntary >> basis, give them a phony key, and then (as part of the >(presumably?) [..] > >Would it be legal to deceive an escrow agent? It _should_ be legal. At least, assuming the arrangement is truly voluntary and the escrow agent gets his part of the bargain (his usual fee) he has no interest in knowing whether or not the data he's holding for you is "real" or "imaginary." The problem is, the government could easily start trying to control and limit the "voluntariness" of this arrangement, as I've now just been told they intend to do: Yes, the bill specifically wants the key escrow agent to NOT tell the key holder if his key has been compromised. In my opinion, this totally destroys the illusion that this agreement is "voluntary," and makes me question any other "feel-good" component of this bill. It is sections of the bill like that which will guarantee that nobody provides an unencrypted key for escrow: Nobody will want to risk having the escrow agent "forced" to release the key, even (and especially!) under a court order. Fortunately, modern technology will provide the solution to government-simpleton thinking. Jim Bell jimbell(a)pacifier.com Klaatu Burada Nikto

1 0

RE: Leahy bill, legalize crypto
by Robichaux, Paul E 17 Dec '03

17 Dec '03

Tim May said: >Suppose encryption is allowed, but only with key escrow? [...] >And it might pass constitutional muster (for the same reasons the FCC >jurisdiction over airwaves and the ban on encryption by ham operators, got >approval. The restriction on using encryption on the ham bands is an outgrowth of the world-wide spectrum allocation process. Spectrum's allocated by the International Telecommunications Union (ITU); every four years, the World Amateur Radio Council (WARC) meets to go over existing allocations. Sometimes hams lose (as when the 220MHz band went away) and sometimes they win. The ITU accords were originally signed around WW I, when use of encryption on the radio bands was of great concern. The whole licensing system is based on the concept of an Amateur Radio _Service_, whose operators are licensed by the FCC to use a "public" resource. Said use is restricted by international treaties to which the US is a signatory. The difference here is that the courts have upheld government restrictions on broadcast spectrum because it's a scarce resource. In the special case of encryption on ham bands, no one's ever even challenged the restriction AFAIK. As Duncan Frissell has preached here many times, bandwidth is no longer as scarce, so I think a constitutional challenge to an encryption ban would probably be workable. -Paul

1 0

Web Page Links
by Media Distribution 17 Dec '03

17 Dec '03

CYPHERPUNKS: What is your main home page address? I found you at http://ibd.ar.com/lists/comp/cypherpunks/199508081922.MAA20209@netcom5.netc… .html We would like to speak to you about providing a link to your web page from our Media Distribution web page and possibly a link back to our web page as well. The products we are currently promoting cover topics found on your web page. We are trying to get information to the public as fast as possible which I think is a common goal you have as well. Please visit our web page at http://www.ibb.com/media.html We are going to leave this page as a text only page and will be adding another web page (on another server) in 30 days with frames, video clips, audio clips, images and in multiple languages. We can be reached at INTERNET:102774.1273@compuserve.com or at media(a)injersey.com The following is our current list of hot links we are adding to our page: Clinton Expose Web by David Sussman http://www.4bypass.com/4by_expose.html (this address may change) Jeremiah Films Educational and Religious Market Videos, Television Programs and Books http://www.empirenet.com/~jeremiah/ Media Bypass - "The Uncensored National News" http://www.4bypass.com Conspiracy Nation - John Lawrence Fishers "Corruption in America" page dedicated to exposing corruption in America wherever it may be found. http://www.europa.com/~johnlf Zenger News Service R - maintains a global database of business and civic entities and key personalities which support individual liberty and other traditional American values. ZNS distributes topical background news and investigative reports electronically and by mail, and publishes a monthly leadership-oriented newsletter, "Principia" . http://www.zns.com The Death Of Vince Foster web page is a compilation of the work of Christopher Ruddy, a journalist whose work appears in the Pittsburgh Tribune-Review. The site contains roughly 50 articles dealing with Foster, Whitewater and the Clinton White House which are maintained by Adam Music, Online Editor. http://tribune-review.com/trib/ruddy/ War Room America's only FM, rock 'n roll, kick ass, conservative, morning show; where liberal music collides head on with conservatism and looses! It's "Truth" at the speed of light! Jim Quinn Live On The Internet [Real Audio] http://www.warroom.com/sound_archive/real_audio/real_audio.html Drudge Report from Hollywood, California USA by Matt Drudge http://www.lainet.com/~drudge Accuracy in Media http://take.aim.org/aim.html Accuracy in Academia http://take.aim.org BeachBum's Page More than you wanted to know about the scandals of the First Felons, Bill and Hilllary Clinton, especially as relates to the death of Vince Foster. It'll keep you awake at night! http://users.aol.com/beachbt/index.html The Other Side Conservative opinion on the net by author Mark E. Howerter http://www.cris.com/~dhathaw/otherside/ The Rancho Runnamukka This webpage for PIXELODEON, owned by Michael & Claire Rivero, covers not only their work in music and film, but their interests in archaeology and politics as well. http://www.accessone.com/~rivero Dave Feustel's Web Page This web page deals with the question "Just How Corrupt IS our federal Government?". http://www.mixi.net/~feustel/ Extremist Home Page Do YOU qualify as an Extremist? The Politically Correct, modern definition is a person who exhibits one or more of the following qualities: *Has an explicit philosophical base. *Has a concise, inflexible moral code. *Has an ethical standard which is not relative or situational. *Believes in a Creator God. *Believes that life, liberty and property are sacred. *Is willing to stand up for these principles and beliefs. - The purpose of this page is to provide some pointers to extremists who want to gather their own information, directly from the sources, rather than accept some non-extremist's interpretation of reality. The battle for the mind and spirit of We the People rages on. The weapons that we face are Propaganda, Misinformation, Rhetoric and Censorship. Protect yourself. Ask questions. Question answers. Do your own homework and come to your own conclusions. Then, act on those conclusions! By Pete Celano. http://WWW.Alliance.Net/~celano19/ Free Speech Newspaper A current collection by top writers and researchers of exposes on government, corporate and institutional coverup and fraud. Exposing serious media abuses. Free Speech Forum (HyperMail), A Web Site Newsgroup on above topics. http://www.FreeSpeechNews.com/callme/ Dwights World "Home of great Republicans" Americans for Conservative Action. http://utiweb.com/~lincoln LIN MEDIA DISTRIBUTION

2 1

Yeo, Pea-brained Imbecile
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The Economist, 16 March 1996, pp. 42-43. Asia and the Internet: Not too modern, please Hunched quietly over their terminals around the world, the mouse-clicking, keyboard-tapping denizens of the Internet have created quite a noise in Asia. The worldwide computer network is still young in the region, but already cyberspace resounds to the crashing of broken taboos, and collisions with the powers that be. In discussion groups on the Internet, you will find views never aired in the domestic media; about Malaysia, a call for the emigration of ethnic Chinese; about Indonesia, passionate pleas for East Timorese independence; about Thailand, jibes at the monarchy, which are a crime. On the World Wide Web, the fast-growing multimedia part of the network, everyone from Confucius to the Penthouse pet of the month seems to have a "home page". All of this confronts many Asian governments with an old dilemma in a new form. All want to be "modern". But many reject the notion that modernity encompasses the sort of political pluralism seen in the west. On the Internet modernity and pluralism go hand in hand. Hence the recent flurry of efforts by governments in the region to exert control over the Internet and overturn what they see as the American colonisation of cyberspace. The effort is complicated by the undoubted commercial potential ofthe Internet, and its future as a business tool. Most countries would prefer to do without the smut and the anti-government invective, but none wants to risk being left out. Fidel Ramos, president ofthe Philippines,whose press is freer than others in Asia, has his own home page, but so does the military junta that runs Myanmar's media like an Orwellian Ministry of Truth. The dilemma is most acute for Singapore. More than any other country in the region, it prides itself on being ahead of the technological game. Indeed, its economic success relies on a state-of-the-art infrastructure. By the end of the century the government hopes to have created an "intelligent island", with at least 95% of homes cabled for services like the Internet and interactive television. Already, the government has a big presence on the World Wide WebHt even provides links to a Board for Online Graffiti ("the only place in Singapore where graffiti are legal"). You can make your choice of virtual lavatory wall on which to scribble a message. More seriously, the World Chinese Business Network hopes to harness the Internet to the legendary "guanxi" or connections that drive overseas Chinese business. George Yeo, Singapore's information minister, is fluent in cyberbabble. "we will need a URL [universal resource locator] that is easy to remember," he told a meeting of his colleagues from the Association of South-East Asian Nations (ASEAN) on March 7th. "we should also encourage hyperlinks to each other's web pages." But Singapore is also among the staunchest critics of unfettered individualism, and of western attempts to foist its political standards on Asia. Because its content remains dominated by westerners, the Internet can be seen as part of such an attempt. Every fanatic liberal and foulmouthed crank can air his heresies and obscenities. So Mr Yeo also warned his ASEAN colleagues that "the influx of objectionable materials via the new electronic media, if left unchecked, will undermine our values and traditions." He was speaking the day after Singapore had introduced "anti-pollution measures" to clean up the I nternet in Singapore. The three local "providers", offering access to the I nternet by a domestic telephone call, will be required to filter out offensive material. "Cybercafes" providing computers for customers to use the Internet will have to install filter software such as "Net Nanny" or "Surf Watch". But this is not just an antipornography drive like that seen in many countries. Organisations posting political or religious information on to the World Wide Web will need to register with the broadcasting authority. Technically, Singapore's effort to control the Internet will be complicated. Mr Yeo suggested it was feasible because all international telephone traffic reaches Singapore through one network, operated by Singapore Telecom. So the authorities are able to monitor anything being sent to Internet servers (who distribute material) in Singapore. Singaporeans could still dial abroad and get access to the uncensored Net. But that would be expensive -- prohibitively so for most people, especially if they wanted to download a pin-up, which can be frustratingly time-consuming. Mr Yeo stressed that Singapore did not intend to "stifle discussion". The only obligation on those engaging in political debate was to take a "certain responsibility and accountability" for their views. It was not clear how these requirements would apply to the Singaporean who responded to the speech by calling the minister a "pea-brained imbecile" on an Internet discussion group. Singapore's house-cleaning effort will be watched closely by other governments in the region. Of Singapore's 3m people, 100,000 already have Internet accounts, twice as many as in China (population 1.2 billion). Nevertheless, China has already gone a step further than Singapore, requiring all Internet users as well as providers to register. It too is looking at how to put a cordon sanitaire around the Internet. Like Myanmar and Vietnam, it is particularly concerned about the campaigning activities in cyberspace of exiled dissidents. Vietnam is seeking prevention rather than cure. The state-owned Internet provider, Netnam, does not as yet give subscribers access to the World Wide Web, just to e-mail services. Other ASEAN countries have so far preferred to be seen as Internet-friendly. Malaysia's deputy prime minister, Anwar Ibrahim, recently opened an exhibition about the Internet in Kuala Lumpur with a warning against censorship. "Let us not forget", he said, "that an informed citizenry is also a responsible citizenry." Similarly in Indonesia and Thailand, the Internet is largely unregulated. An Indonesian magazine, Tempo, banned in 1994 for upsetting the government, has just reappeared "on-line", which even the censors admit is perfectly legal. In the much freer intellectual climate of Thailand, the concern has been as much about sex as about politics. An Internet campaign has urged a boycott of Thai goods because of the prevalence of child prostitution in the country. And a photograph has been posted on the Internet purportedly showing a senior politician engaged in sexual congress with another man's wife. As the Internet gathers pace, so too will its impact on the political scene. InJanuary an article in Singapore's obsequiously pro-government Straits Times asked whether Singapore would "change the Internet", or the other way round. "A little of both," it concluded. But as the Internet free-for-all becomes more readily available to the population at large, other, more decorous, media may find it hard to ignore the challenge. The Straits Times itself may be among the first to feel the change. -----

1 0

Internet Security Worskhop Call for Papers
by rah＠shipwright.com 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: reagle(a)rpcp.mit.edu Mime-Version: 1.0 Date: Fri, 15 Mar 1996 13:17:08 -0500 To: (Recipient list suppressed) From: "Joseph M. Reagle Jr." <reagle(a)mit.edu> Subject: Internet Security Worskhop Call for Papers ------- Forwarded Message From: papers(a)rpcp.mit.edu (Richard J. Solomon) Date: Fri, 15 Mar 1996 12:17:23 -0500 To: {Recipient List Suppressed} Cc: reagle(a)rpcp.mit.edu, execdir(a)fnc.gov Reply-To: papers(a)rpcp.mit.edu Subject: Internet Security Call for Papers CALL FOR PAPERS INTERNET PRIVACY AND SECURITY WORKSHOP Haystack Observatory, MA May 20-21, 1996 Privacy and Security Working Group Federal Networking Council Research Program on Communications Policy Center for Technology, Policy, and Industrial Development Massachusetts Institute of Technology INVITATION The Privacy and Security Working Group (PSWG) of the Federal Networking Council (FNC) and the Research Program on Communications Policy of the Center for Technology, Policy, and Industrial Development at the Massachusetts Institute of Technology will hold an invitational workshop at the Haystack Observatory outside of Boston, MA, on May 20-21, 1996. This workshop is intended to bring Federal, academic and private sector participants together in collaboration to develop strategies and potential solutions related to Internet privacy and security. Though a principal focus of the workshop will be on the Federal portion of the Internet, the FNC recognizes that the Federal Internet is tightly coupled with the Global Internet, whose security policies, practices, and goals are complementary to those of the Federal Government. To define those practices, procedures and goals, the PSWG has undertaken two major initiatives: - The Federal Internet Security Plan (FISP), which was developed as a scalable, continual improvement process, based on common principles and mechanisms compatible with Internet community values and needs; and - The Collaborations in Internet Security (CIS) project, an effort aimed at testing the strength of agency approaches to security and moving these technologies beyond individual agency networking environments and into both inter-agency and agency-commercial sector communications. The CIS will result in the development of a new and sustainable process for developing, integrating, and deploying security technologies that are interoperable at all levels of the Federal government and within the commercial and academic sectors. These initiatives are intended to highlight the critical interface between Federal and commercial users and developers of Internet services and technologies. OBJECTIVES This workshop will bring together principal players in the Federal and overall Internet community to discuss the problems and challenges of privacy and security on the Internet, and will: - Identify critical issues, requirements, and recommendations related to future Internet privacy and security research and development efforts; - Describe "best practice" approaches to Internet privacy and security; - Develop specific strategies for implementing Internet Security programs involving all sectors of the Internet community; - Extend the Federal Internet Security Plan (FISP) by defining specific implementations; and finally, - Develop specific strategies for the migration of technologies from the individual RFC unit test stage to the integration of a complete functional managed system in the CIS test/demonstration/pilot projects. SUBMISSIONS Abstracts or complete paper drafts related to the topics listed above are welcome. Accepted papers will be a part of the published record of the workshop. All points of view on Federal policies affecting Internet privacy and security are welcome. Please make all electronic submissions in ASCII format. For further information or to submit an abstract or paper contact: Internet Security and Privacy Workshop c/o Joseph Reagle Research Program on Communications Policy Massachusetts Institute of Technology One Amherst St. (E40-218) Cambridge, MA 02139 Voice: (617) 253-4138. Fax: (617) 253-7326 papers(a)rpcp.mit.edu SCHEDULE and DEADLINES Call for papers - March 14, 1996 Abstracts Due - April 14, 1996 Invitations to Participants - April 20, 1996 Revised/Completed papers due - May 19, 1996 Workshop - May 20-21, 1996 PARTICIPANTS Participation in the workshop is by invitation, based primarily on submitted papers and abstracts. Additional individuals may be invited to ensure that participation reflects a broad cross-section of the Internet community. PROGRAM COMMITTEE Dennis Branstad - Trusted Information Systems (TIS) Rich Pethia - Computer Emergency Response Team (CERT) Jeffrey Schiller - Massachusetts Institute of Technology (MIT) Richard Solomon - Massachusetts Institute of Technology (MIT) Rick Stevens - Department of Energy /Argonne National Labs (DOE) STEERING COMMITTEE Stephen Squires, Defense Advanced Research Projects Agency (FNC/PSWG Co-Chair) Dennis Steinauer, National Institute of Standards and Technology (FNC/PSWG Co-Chair) Tice DeYoung, National Aeronautics and Space Administration (NASA) Phillip Dykstra, Army Research Laboratory (ARL) Mike Green, National Security Agency (NSA) George Seweryniak, Department of Energy (DOE) Walter Wiebe, Federal Networking Council (FNC) ********************* BACKGROUND Federal Internet Security Plan: In September 1995, the PSWG published the draft Federal Internet Security Plan (FISP). The FISP is oriented toward a scalable, continual improvement process, based on common principles and mechanisms compatible with Internet community values and needs. See <http://www.fnc.gov/SWG.html>. The plan addresses Internet security requirements, including interoperability, from the perspective of the goals and objectives outlined in the National Performance Review (NPR), http://www.npr.gov/. The Federal Networking Council developed this framework in conjunction with its Advisory Committee which represents industry, academia, and non-profit sectors. Action Items, from the FISP, to be addressed during the Workshop: Internet Security Policy and Policy Support Activities * Establish overall Internet security policies * Address security in all Federally supported NII pilots * Coordinate Internet community involvement * Establish an ongoing Internet threat database and assessment capability * Identify legal and law enforcement issues Internet Security and Technology Development * Develop an Internet security maturity model * Develop Internet security architecture * Enhance Internet security services and protocols * Develop a "Secure-Out-of-the-Box" endorsement * Enhance application security Internet Security Infrastructure * Establish a set of Internet security interoperability testbeds * Support privacy, authentication, certificate, and security services pilots * Establish Internet security testing and evaluation capabilities * Improve security incident handling capabilities * Develop security self-assessment capabilities * Establish effective secure software and document distribution mechanisms Education and Awareness * Compile Internet user and site profiles * Encourage use of available security technologies * Establish an Internet security information server * Establish an Internet security symposium/workshop series * Establish an Internet security fellowship program Collaborations in Internet Security: With the Federal government's ever-increasing dependency on computers and distributed systems, there is great urgency for it to develop and employ enhanced information system security technologies and practices. At the same time, these Federal technologies must interoperate with those of the broader Internet community (encompassing the private and academic sectors, along with the Federal sector). In recognition of these needs, the Federal Networking Council's Privacy & Security Working Group (FNC/PSWG) has been awarded a National Performance Review (NPR) Innovation Fund grant to compare and validate agency approaches to security. This Collaborations in Internet Security (CIS) project aims to test the strength of these technologies beyond individual agency networking environments, emphasizing the inter-agency and agency-commercial sector communications. The CIS will result in the development of a new and sustainable process for developing, integrating, and deploying security technology that is interoperable at all levels of the Federal Government and within the commercial and academic sectors. The governing principles behind the Security Testbeds include: employment of an open process (with the activities and results open to participation and comment by both public and private sector participants); a focus on multivendor technologies; an emphasis on testing and experimentally deploying security technologies emerging from research and private sectors as well as security technologies currently in use in the commercial environment; and an underlying objective to ensure interoperability among the broad Internet community (federal, private, and academic). Initial tests will include demonstrations of Kerberos v.5, testing of single-use passwords, and digital signatures. For more information, please see (http://www.fnc.gov/cis_page.html) --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Re: PolicyMaker paper available
by cpunk＠remail.ecafe.org 17 Dec '03

17 Dec '03

Mab(a)Research.Att.Com posted: >A number of people have been asking me about some work I've been doing >(with Joan Feigenbaum and Jack Lacy) on alternatives to traditional >(X.509, PGP, etc.) identity-based certificates. We've just finished >up our paper on the concept, "Decentralized Trust Management", to >appear at the Oakland Security Conference in May. > >A PostScript pre-print is available in > ftp://research.att.com/dist/mab/policymaker.ps I D/Led this file last night & printed it out. I was a little suspicious at first because you'd think if AT&T really wanted people to read (instead of just wanting to say they published it) they'd put it on the web in http and not use obscure printer codes. But after I read it my suspicious nature was confirmed. Behind all the obscure printer codes and fancy language, it is obvious to anyone with half a brain that this is just a move by AT&T to put itself on top of the internet certificate hierarchy where your're locked in to using AT&T software and internet service (just like RSA and Netscape). You have to license AT&T code to use it and you need an AT&T approved policy attribute or something in order to make it work. Ask yourself why they'd publish this otherwise. Hint: youre safer trusting university research than corporate research-marketing. PGP is good enuf for me. >-matt > >[NB: I no longer read the cypherpunks list with any regularity, so >please cc me directly on any comments or discussion. Thanks.] Uh huhhhhhh. Blaze and AT&T are no friends of the cypherpunks and no longer even condesend to pretend as much. Don't even ask me about their motives for supporting the Leahy key escrow bill.

3 3

DCSB: Implementing Financial Cryptography, The Cybercash Experience
by rah＠shipwright.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston (Formerly The Boston Society for Digital Commerce) Presents Donald E. Eastlake, III Implementing Financial Cryptography, The Cybercash Experience Tuesday, April 2, 1995 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Donald Eastlake is a Senior Systems Engineer with CyberCash, Inc., operators of a credit card based secure Internet payment system. He specializes in security and message protocol design and implementation and is also the editor for the IETF Domain Name System Security Working Group. This talk will cover the CyberCash credit card protocol and the lessons learned in its implementation. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, April 2, 1995 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have a jacket and tie dress code. We need to receive a company check, or money order, (or if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, March 30, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Planned speakers for the following few months are: May Perry Metzger Security Consultant and Cypherpunk June Dan Shutzer FSTC July Pete Loshin Author, "Electronic Commerce" August Duane Hewitt Idea Futures We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, rah(a)shipwright.com . For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMUszPvgyLN8bw6ZVAQHvAQP/XLySwqdqfNb33UjXc5GKOmXsRywGgM60 vlvmzjhHKyLyQhDtp1wgtJqlaTPd5Dkch/r4FU73cuPjrcbV5g3mOxFAmxebSrq3 O2iGN6TxXUrI+abvny0X+atl3htK2VHDZr+gHMfqX/NRU4mFEEuUyStF3zJQ1lyq J9RYE9LUhJQ= =zGoQ -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

RE: Tim's friend's mildly retarded son
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:44 PM 3/15/96, Blanc Weber wrote: >>The point is that it is not right to prevent, stifle, suffocate, the >>liberty to use one's own resources, to act at one's own discretion and >>make one's own choices in regard of one's own particular circumstance, >>to make independently the judgements necessary to determine the truth >>or falsehood of a statement, or the efficacy of a drug - i.e., it is >>not right to have to "give it up" to the State, allowing no one else to >>engage in the mental exercise and follow-through. >> >> .. >>Blanc >>I hope I'm not the only one here who thinks so. How could you be? Since I was the one who cited the example, I clearly am opposed to the current monopoly on judgment the FDA enjoys. As to Asgaard and his claim that the FDA is to be trusted, he is welcome to trust them. I don't think they are _dishonest_, merely in thrall (*) to special interests, drug companies, and, above all, to bureaucratic stodginess. (* Asgaard should be happy that I am using a word derived from Old Norse, "thrall," as in "enthralling." A thrall was a slave in Icelandic and Old Norse.) His speculation that my friend's mildly retarded son is not helped is unknowable to him. In fact, the nootropic in question, Piracetam, is sold in Europe (and Mexico, as I noted), and elsewhere, for the treatment of Alzheimer's, dementia, and to alleviate mild retardation. My friend thinks it gives his son an improvement from, say, an IQ of 70 to perhaps an IQ of 75. Apparently this is an important difference, so much so that when his supply of Piracetam (nicely packaged from Glaxo Pharmaceuticals of England) ran out, and the FDA had tightened shipping rules and he was unable to order it through the mail from his usual Canadian source, he felt the strong need to drive to Tijuana to buy his son a significant supply. (A few years ago I also bought some nootropics in TJ. I felt no effect. My friend thinks the effect is greater at the impaired-end of the spectrum, which actually fits with the prescribed-usage patterns noted above.) Whether my friend is deluding himself or not, it is not for men with guns to tell him he may not buy something to consume. The "drug laws" are nothing more than "dietary laws," and have virtually nothing to do with public or personal safety. If safety was the issue, then the drug ethanol, which kills at least 40,000 Americans a year would be outlawed while marijuana and narcotics, which kill far fewer (even when police raids, overdoses, and illegality-related crimes are included) would not be the focus of drug laws. Tobacco, which kills an estimated 400,000 a year is the winner. (The statistics I saw a few years ago were easily memorizable: tobacco: 400,000, alchohol: 40,000, drugs: 4,000.) Don't think I am advocating illegalization of booze or cigarettes. Free people are free to consume what they choose. (The issue of driving while impaired, or operating heavy machinery, or posting to the CP list while impaired, is a separable issue. We don't illegalize alchohol, we illegalize drunk driving. And my drug-using acquaintances are drastically less likely to be "DUI" with marijuana or LSD than drinkers are with alcohol.) We are not free when someone tells us which foods and herbs are legal to eat, and which are not. (I'll spare the usual stuff about how the Founders smoke a pipe of cannabis now and then, how "canvas" comes from the Dutch word for this herb, how special interests got hemp and "reefer" outlawed, and how the effects fell mainly on the poor and inner-city folks.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

RE: Java bignum package
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:08 PM 3/15/96 -0800, Hal Finney wrote: >My implementation is purely in Java, so it is much slower than one which >uses native methods, although I don't think native methods can be sent >across the net automatically like applets, so until they are widely >distributed a pure-Java implementation may have some advantages. Does Java have a run-time way to do #if_exists library_X foo = library_X.method_a(bar, baz) #else foo = library_Y.method_a(bar, baz) #endif or equivalent? This would let you distribute a slow pure-java library that's compatible to a native-mode library and use whichever you need. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 pager 408-787-1281 # "At year's end, however, new government limits on Internet access threatened # to halt the growth of Internet use. [...] Government control of news media # generally continues to depend on self-censorship to regulate political and # social content, but the authorities also consistently penalize those who # exceed the permissable." - US government statement on China...

1 0

Re: CD-reading for random keys
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:56 AM 3/14/96 GMT, bruce(a)omega.co.nz wrote: >The "entropy" or randomness of audio data is LOW. That's why audio compresses >so well. However, the idea of keeping a one-time key on CD-ROM is good. Actually, the idea's not real good - CDROMs are easy to keep around, last a long time, and are generally not eraseable - this encourages using them as a More Than One Time Pad, which is a really bad idea..... Tape is better - it's easy to write garbage over it as you go along, it doesn't have that feel of permanence about it, and it's easy to use for something else besides selling as Musique Concre'te or Rainforest Ocean Background Harmonies. If you're going to use audio as a source, even FM radio hiss (using one of those new radio-in-your-PC cards), compress it first, then feed it to some encryption algorithm or shove it through MD5 to lose any remaining patterns if you can. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 pager 408-787-1281 # "At year's end, however, new government limits on Internet access threatened # to halt the growth of Internet use. [...] Government control of news media # generally continues to depend on self-censorship to regulate political and # social content, but the authorities also consistently penalize those who # exceed the permissable." - US government statement on China...

1 0

RE: Tim's friend's mildly retarded son
by Bill Stewart 17 Dec '03

17 Dec '03

At 08:16 PM 3/15/96 -0800, Blanc or somebody she was replying to wrote: >> .... Tobacco, which kills an estimated 400,000 a year is the >> winner. (The statistics I saw a few years ago were easily memorizable: >> tobacco: 400,000, alchohol: 40,000, drugs: 4,000.) 99% of US drug deaths are from legal drugs. Alcohol's more like 100,000, as of 1990 figures, about 20% of US drug deaths; this is just disease-related deaths, excluding drunk driving. Tobacco was about 370K or 390K, roughly 75%. Prescription drugs were about 20,000, including suicides, and I don't know if this included prescription opiates like morphine and codeine. Caffeine, my personal favorite, is 5000-10000, though it's much harder to estimate how much it really contributes to heart attack deaths. Cocaine was about 2500, heroin 2000, PCP 700, the rest lower, total about 1%. Marijuana was its usual 0 deaths. As Tim says, it's far from crypto - but one of the main excuses for money-laundering laws is to track down pharmaceutical wholesalers' profits. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 pager 408-787-1281 # "At year's end, however, new government limits on Internet access threatened # to halt the growth of Internet use. [...] Government control of news media # generally continues to depend on self-censorship to regulate political and # social content, but the authorities also consistently penalize those who # exceed the permissable." - US government statement on China...

1 0

Re: Jump Start ecash With IPhone
by eggplant＠inlink.com 17 Dec '03

17 Dec '03

>>(deleted) > >Granted. Of course it is quite a jump to claim that a software program is a >"Long Distance Carrier." If I run Winsock on my machine and a Winsock >application like Iphone, if anyone is the LD carrier, *I* am because I am >digitizing my voice and doing the first part of the switching necessary to >send the packets on their way. Maybe the FCC should bust *me* for >practicing telecommunications without a license. It would make for an >interesting case. > >DCF So is telecommunications defined as voice transmision? Couldn't Cu-Seeme be defined as telecommunications also? Or how about the transmission of digital data in general since that's one place where telecom companies are investing. -- "... In Germany they first came for the Communists and I didn't speak up because I wasn't a Communist. Then they came for the Jews, and I didn't speak up because I wasn't a Jew. Then they came for the trade unionists, and I didn't speak up because I wasn't a trade unionist. Then they came for Catholics, and I didn't speak up because I was a Protestant. Then they came for me-and by that time no one was left to speak up..." Pastor Martin Niemoller ++++++++++++ ************************************** * Matthew Murphy ------------ eggplant(a)inlink.com * ---------- * http://www.inlink.com/~eggplant * The Web page is under construciton at this time though.. * Please don't mind the mess.... * ************************************** ++++++++++++ finger eggplant(a)inlink.com for my PGP key.

1 0

Release of PGPdomo version 0.2
by Bill Stewart 17 Dec '03

17 Dec '03

We've recently discussed PGP-enhanced majordomo, and just by coincidence, there's a new version. >Return-Path: <majordom(a)hawww.ha.osd.mil> >Date: Fri, 15 Mar 1996 14:29:07 -0500 >From: phollins(a)hawww.ha.osd.mil >To: majordomo-workers(a)greatcircle.com, pgpdomo-announce(a)hawww.ha.osd.mil, > pgpdomo-users(a)hawww.ha.osd.mil >Subject: Release of PGPdomo version 0.2 >Cc: >Sender: owner-pgpdomo-announce(a)hawww.ha.osd.mil > >-----BEGIN PGP SIGNED MESSAGE----- > > >PGPdomo version 0.2 is now available as Public Domain freeware at: > > ftp://hawww.ha.osd.mil/pgpdomo/pgpdomo.tar.Z > ftp://hawww.ha.osd.mil/pgpdomo/pgpdomo.tar.Z.md5 > ftp://hawww.ha.osd.mil/pgpdomo/README > >PGPdomo is an integration of PGP and Majordomo 1.93 allowing you >to manage encrypted mailing lists from any UNIX platform. > >PGPdomo contains perl source replacement programs (and config files) >for Majordomo 1.93. You must have PGP and Majordomo 1.93 functional >before installing PGPdomo. > >Version 0.2 adds new commands, more logging, tweaks, and bug fixes. > >Comments and suggestions welcome! > >Patrick Hollins >phollins(a)hawww.ha.osd.mil > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQCVAwUBMUm9uWYiTeh15gbBAQHysAP/W6rvXRTd437ISOoo/piCsn2gESceSA92 >jiVarMl6XqhRAvf1mpqsQiTa3uywqbuEpyu0EmnZ/cUIYbgpwMi/RCO7AqUFmb7I >hL6RDt9X1fhg4BGS/NiHJ1tG9GHWR1zlzj+KHaK1oPT4YGdNnBgwGQUZdmAmRYp+ >nCoDJdZZ6jk= >=QAay >-----END PGP SIGNATURE----- > > #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 pager 408-787-1281 # "At year's end, however, new government limits on Internet access threatened # to halt the growth of Internet use. [...] Government control of news media # generally continues to depend on self-censorship to regulate political and # social content, but the authorities also consistently penalize those who # exceed the permissable." - US government statement on China...

2 1

InfoWarCon V 1996: Call For Papers
by winn＠Infowar.Com 17 Dec '03

17 Dec '03

P L E A S E D I S T R I B U T E W I D E L Y C A L L F O R P A P E R S InfoWarCon 5, 1996 Fifth International Information Warfare Conference "Dominating the Battlefields of Business and War" September 5-6, 1996 Washington, DC Sponsored by: Winn Schwartau, Interpact, Inc. National Computer Security Association Robert Steele, Open Source Solutions, Inc. Information Warfare represents a global challenge that faces all late-industrial and information age nation states. It also represents the easiest and cheapest way for less developed nation-states and religious or political movements to anonymously and grievously attack major nations and international corporations. This Fifth International Conference on Information Warfare is an unclassified, open source conference, and will examine US and global perspectives on all three classes of Information Warfare: Class One: Personal Privacy: In Cyberspace You Are Guilty Until Proven Innocent Class Two: Industrial and Economic Spying and Warfare Class Three: Global Conflict, Terrorism and the Military The three planned tracks will be: * Financial/Civilian Information Warfare (Class I and Class II) * Military and Terrorist Information Warfare (Class III) * Offensive and Defensive Technologies for Business and Government (Classes I, II and III) We are seeking forward thinking papers, demonstrations and interactive concepts for presentation to an audience of 1000+, representing civilian and military from more than 20 countries, all branches of the US government and the top US corporations. The papers should offer new perspectives, attitudes, studies, and technologies that can be used for the advancement of the field. You are free to submit on any subject matter, including, but not limited to: - Battlefield Dominance - Industrial Espionage: cases, policies and defense. - Military perspectives on "Information in Warfare" - Policy Quagmires - Policy Resolutions - Personal Privacy in the global marketplace - Denial of Service techniques and technologies for the private sector and the military - Terrorism and Counter-terrorism - Defending Against the Internet: new techniques and methods - Threats to Global Electronic Commerce and Solutions - Anonymous International Banking - The convergence of the commercial and military in the Post Cold War World - InfoWar Technologies - Case Studies - Your Thoughts and Ideas Please submit your 1-2 page concept white papers no later than May 5, 1996. The evaluation committee will let you know the results by May 15, at which point we will need your complete submission no later than July 15, 1996. Send you papers to: Betty(a)Infowar.Com For sponsorship opportunities and registration information at InfoWarCon V 1996, please contact: National Computer Security Association 1.800.488.4595 pgates(a)ncsa.com or infowar96(a)ncsa.com Peace Winn Winn Schwartau - Interpact, Inc. Information Warfare and InfoSec V: 813.393.6600 / F: 813.393.6361 Winn(a)InfoWar.Com

1 0

Cypherpunks reference in Netscape book
by corey＠hedgehog.mcom.com 17 Dec '03

17 Dec '03

I'm writing the "Encryption and SSL" chapter for the Netscape products, and I'm finishing it up with a "Further reading" section that lists crypto-related books, web sites, and newsgroups. I was thinking of including a reference to this mailing list. Any strong opinions either way? As I see it, the downside is a possible increase in confused people (specifically on the mailing list--not in general from my writing) and a decrease in the ever-controversial signal-to-noise ratio. The upside is that new people might come to the list and be enlightened further on the reasonableness of privacy. And speaking pragmatically, I can't imagine that too many people would take the time to: 1. read the docs 2. join the mailing list 3. post ill-considered messages (As a side note, if anyone ever has any feedback about security coverage in Netscape documentation, send it my way.) Corey Bridges Netscape Security Documentation http://home.netscape.com/people/corey 415-528-2978

3 2

Re: Beat Remote Monitor Snooping?
by jim bell 17 Dec '03

17 Dec '03

At 12:18 AM 3/16/96 GMT, John Lull wrote: >On Thu, 14 Mar 1996 21:54:10 +0100, Gary Howland wrote: > >> NTSC (TV video) modulation is done by phase modulation of the 3.579545 MHz >> subcarrier. > >This is not correct. I'd suggest you go back and re-read your NTSC >references. If that's not correct, what is? And it's been years since I read NTSC; I don't even know if I now have ready access to the information. Merely saying that it's wrong isn't particularly informative, especially if you choose to copy it to the list. Jim Bell jimbell(a)pacifier.com

2 1