December 2003 - cypherpunks-legacy

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

1 0

FOR WHOM THE BELL TOLLS
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ C'punks, In a recent exchange, Carl Ellison wrote: >After the meeting ended it hit me what the problem is and I >mentioned it to PRZ. We're complaining that the Executive >has gone rogue -- is disobeying the will of the people. >PRZ likened it to Nixon's war in Cambodia. To which Jim Bell replied: >I have a solution to that problem. My question for member of this list is: When Bell finally goes too far and they arrest or shoot him, how can we best capitalize on his martyrdom? Or in a more negative light, what damage control will we need to do in that case? Now I know that barking dogs rarely bite, but Jim may just fool us and find his cajones. In any event, the sort of yapping he is doing could itself be considered a crime that could attract the sort of negative attention he apparently craves. Any suggestions? S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4 3

MELP: 2400 baud speech coding
by John Gilmore 17 Dec '03

17 Dec '03

Mixed-Excitation Linear Predictive encoding gives better speech quality than CELP at half the data rate. Encoding and decoding together burn up more than 100% of a TMS320C3x digital signal processor at 33MHz -- 64% to encode and 53% to decode. I don't know how it does on a Pentium or an Alpha. If you have the MIPS at both ends, this enables very robust encrypted speech across modem links to the Internet. John Walker's free SpeakFreely software (http://www.fourmilab.ch/speakfree/windows/speak_freely.html; or follow the link from there to the Unix version) is already doing packet replication for high reliability, using the earlier LPC-10 algorithm. (It doesn't implement MELP, though those on fast CPUs could add it.) I noticed an ad in EE Times that said, "MELP: The new Federal Standard for 2400 bps Speech Coding", so I did a web search for it. It reportedly comes from Georgia Tech research. Atlanta Signal Processors has the exclusive license. See http://www.ti.com/sc/docs/dsps/softcoop/voc-13-1.htm. John Gilmore

1 0

biometric id
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

info on a biometric id utilizing crypto techniques. ------- Forwarded Message Date: Fri, 31 May 1996 16:34:40 -0700 (PDT) From: Phil Agre <pagre(a)weber.ucsd.edu> To: rre(a)weber.ucsd.edu Subject: biometric encryption [A Canadian company called Mytec is marketing a biometric encryption system that, as far as anybody can tell, is an important step forward for privacy protection. It is based on fingerprint recognition, but it does not produce a representation of the fingerprint or recover the identity of the fingerprint's owner. Instead, it uses an optically transformed version of the fingerprint to decrypt a text string that could be, for example, the private key for a public-key cryptographic system such as RSA. Provided that one trusts the Mytec box, this would be a way to overcome many of the pragmatic hassles that would otherwise accompany the privacy-enhancing technologies that David Chaum and others have described. For example, they have built their device into a computer mouse, so that the computer will only generate your digital signature, or permit your mail to be read, if you are holding the mouse (or, I suppose, if you have been holding it very recently). In this message, the president of Mytec responds to some common concerns about his company's technology that arose in response to a query that I sent to the Computer Privacy Digest. He provides the company's web URL for those who wish to know more.] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message was forwarded through the Red Rock Eater News Service (RRE). Send any replies to the original author, listed in the From: field below. You are welcome to send the message along to others but please do not use the "redirect" command. For information on RRE, including instructions for (un)subscribing, send an empty message to rre-help(a)weber.ucsd.edu =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: Fri, 31 May 96 11:06:44 EST From: Computer Privacy Digest Moderator <comp-privacy(a)uwm.edu> To: Comp-privacy(a)uwm.edu Subject: Computer Privacy Digest V8#044 Computer Privacy Digest Fri, 31 May 96 Volume 8 : Issue: 044 - - ---------------------------------------------------------------------- Date: 29 May 1996 09:42:54 -0400 (EDT) From: gtomko(a)noc.tor.hookup.net (George Tomko) Subject: Re: Biometric Encryption Dear Mr. Levine: Subject: Biometric Encryption I have noticed a number of communications in your news group regarding Biometric Encryption, especially some concerns about its use. As one of the developers of this technology, I would appreciate if the attached response could be posted in the news group to provide people with some answers and also to obtain feedback and discussion. Kind regards. George J. Tomko, Ph.D. Several people commented on four concerns in using a finger pattern for biometric encryption, namely: 1. It's easy to get someone's fingerprints since they are left on a vast number of everyday objects, such as drink cans and door handles; 2. Muggers would start cutting off people's fingers when stealing their cards; 3. The crooks would forcibly hold down an individual's finger against the biometric encryption authentication device to extract the string coded by the individual's Bioscrypt; and 4. If the finger used to code the Bioscrypt is damaged or destroyed, then an individual will not have access to the files associated with the Bioscrypt. I will try to answer these concerns in order. But, first, let me define a Bioscrypt. A Bioscrypt is a two-dimensional image of a string or set of characters which can represent a PIN, encryption key or pointer and which has been coded (encrypted) by the two-dimensional information in a fingerprint pattern. It has the following properties: - - - it has no resemblance to the original fingerprint. - - - it cannot be reconverted to the original fingerprint. - - - if an optical image of the correct live fingerprint is transmitted through the Bioscrypt, then the output light beam uniquely represents the coded number. By successfully decoding their Bioscrypt, the person also confirms who they claim to be. For purposes of the discussion below, it is important to note that the optical authentication device is a coherent system and uses the phase information in a finger pattern (complex domain) as a discriminating parameter. 1. "Picking up latent prints from door handles, etc." To perpetrate a masquerade using a latent fingerprint of a legitimate user is very difficult for the following reasons: * The system requires a three-dimensional reconstruction of the legitimate user's fingerprint because the height of the various fingerprint ridges can modify the two-dimensional complex optical image which is the input to the authentication device. There is little information in a two-dimensional latent print about the depth and the height of grooves and ridges of the actual fingerprint. * The three-dimensional reconstruction of the legitimate user's fingerprint from a latent print would also need to duplicate the approximate oil and moisture content of the skin, since this is one of the factors which affects (modulates) the two-dimensional image read by the system. Quantifying this information from a latent print is very difficult. Even if it were, the three-dimensional reconstruction would have to be made from a synthetic material which had the same oil and moisture properties as the legitimate user's skin. To use an oil/water based solution to place on the input scanning window would be useless since this would frustrate all of the light bouncing off the window and would convey little or no useful information to the optical system. * The reconstructed fingerprint would also need to be made from a material with approximately the same elastic properties as the legitimate user's finger skin. During enrollment, and subsequently on authentication attempts, the user slides a finger over the input scanning window. This action warps the skin and the corresponding fingerprint pattern based on the elastic properties of the skin. Within the population, warping can vary significantly based on age, dryness of skin, etc. and is thus another unique aspect of the individual's finger pattern. 2. "Severing the finger to obtain access." As already mentioned in some of the previous communications in this newsgroup, measuring the temperature, humidity, pulse rate and even heart rate to verify a live finger can be accomplished. One of the key factors, though, is after the finger is severed the elastic properties of the skin change rapidly and thereby would not warp in the same manner as a live finger pattern. This would make a cadaverous finger useless after a period of time. (Can't find subjects to do a double blind study though). 3. "Crooks would forcibly hold down the finger." By forcibly sliding an individual's finger against the biometric encryption authentication device (reading device), the string coded by the Bioscrypt can be extracted. The string coded by the individual's finger pattern Bioscrypt could then be used for a one-time access for whatever purposes the string was intended. However, assuming that the individual is freed, he can then use his finger pattern to code a completely different string to prevent repetitive access. The system is robust in that it is very easy to change PINs, encryption keys or computer pointers. It was suggested in some of the messages that a pass phrase be used in conjunction but, again, if an individual is holding your finger down forcibly, to extend that to pointing a gun to your head to divulge the pass phrase is not an extreme assumption. There is no perfect security system out there and I doubt one will ever be designed since it has to work with real human beings. I suggest that the goal is to provide privacy-enhancing technology that handles the majority of the infringement cases and that, for exceptional circumstances where extreme privacy and security must be guaranteed, we combine the biometrics (something you are) with the pass phrase (something you know) and a token (something you have). If the combination of those three doesn't do it, then at this stage of technological evolution, nothing will cut it. 4. "Losing or damaging a finger with the result of not being able to access the Bioscrypt and related files." One of the properties of optical processing is that composite patterns can be made and thereby used to make the Bioscrypt. Accordingly, more than one finger could be used or a finger and a proprietary pattern (which one keeps hidden away somewhere). Of course, there is a penalty. The more patterns one uses, the smaller the signal to noise ratio of the system. The system is currently designed to give signal to noise ratios in the order of 10 to 12 dB and thereby significant degradation can still occur which would allow comfortably two to three patterns to be superimposed in the same Bioscrypt. If you are interested, more information can be gained by accessing Mytec's web page at http://www.mytec.com. - - -- George J Tomko Mytec Technologies Inc. Toronto, Ontario - - ------------------------------ End of Computer Privacy Digest V8 #044 ****************************** - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Re: CWD: "Jacking in from the "One that Got Away" Port (fwd)
by Carl Ellison 17 Dec '03

17 Dec '03

>(By Brock Meeks / brock(a)well.com / Archived at http://www.cyberwerks.com/) > > > CyberWire Dispatch // Copyright (c) 1996 // > > Jacking in from the "One that Got Away" Port: > > Washington, DC -- President Clinton call your spooks, get FBI Director > Louis Freeh on the phone. Tell them to order in pizza. Bill, it's > going to be a long night. All your plans to hold the U.S. crypto > market hostage have just been fucked... and you didn't even get kissed. > > A virtual tactical nuke was hurled into the arcane subculture of > encryption technology Monday when RSA President Jim Bizdos revealed > that his company's Japanese subsidiary had developed a monster chipset > capable of scrambling voice and data real time with a so-called "key > length" of up to 1024 bits. Brock, you have probably heard by now -- this is wrong. The chip set was developed by a subsidiary of NTT called NEL. That's much worse, of course, than if it had been an RSA subsidiary. - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)cybercash.com http://www.clark.net/pub/cme | |CyberCash, Inc. http://www.cybercash.com/ | |207 Grindall Street PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 | |Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 | +--------------------------------------------------------------------------+

1 0

Re: Where are the cryptographers going to come from?
by jim bell 17 Dec '03

17 Dec '03

At 03:22 PM 6/4/96 -0000, nelson(a)crynwr.com wrote: > The NSA believes that they >can and should discard any amount of benefits of crypto in exchange >for avoiding any harm of crypto. They are wrong. I think the truth is even more revealing. We can hypothesize that allowing widespread use of good crypto has many advantages and just a few disadvantages. However, those disadvantages may almost all accrue to government and its employees, and very few to ordinary citizens. This means that talking up the disadvantages of good encryption is doubly fraudulent, because the audience they should be trying to convince (ordinary folks) doesn't realize that the disadvantages generally don't apply to them. And of those few crimes against ordinary citizens where crypto might play a role, that role will almost always be to PREVENT the crime rather than allow it. Jim Bell jimbell(a)pacifier.com

1 0

Re: cycle market
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

> > I was trying to think what I would use a cycle market for. The > only thing that I wait for more than a minute on currently is > compiling. Just try doing some large graphical operations - especially raytracing/rendering type stuff, or heavy graphical analysis of a set of image data. Fractal drawing falls in this realm as well. Then try doing some ASIC simulation, or finite element analysis. In this group it also goes without saying that there are also things like factoring large numbers that a cycle market would be ideal for. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

1 0

LEGISLATIVE: SHORT NOTICE! of a SF SCTB/NRC crypto policy hearing
by Hugh Daniel 17 Dec '03

17 Dec '03

------- Start of forwarded message ------- Date: Fri, 31 May 96 18:12:00 EST From: "CRYPTO" <crypto(a)nas.edu> To: crypto(a)nas.edu Subject: Public briefing on the NRC Crypto Policy report Please post widely. The Computer Science and Telecommunications Board (CSTB) of the National Research Council (NRC) has completed a congressionally mandated study of national cryptography policy. The final report, Cryptography's Role in Securing the Information Society, was released to the public on May 30, 1996. Some members of the committee will conduct a public briefing on the report in Menlo Park, California at SRI International. The briefing will be held in the Auditorium of the International Building from 10 to 11 am on Wednesday, June.5. The address is 333 Ravenswood Avenue, Menlo Park, California, 94025. For more information about the briefing at SRI, contact Alice Galloway at 415-859-2711 (alice_galloway(a)qm.sri.com) If you have suggestions about other places that the committee should offer a public briefing, please let me know (crypto(a)nas.edu or 202-334-2605). A summary of the report ("Overview and Recommendations") is available through http://www2.nas.edu/cstbweb; the full publication will be made available when final printed copies of the book are available (probably around the beginning of August). If you wish to be kept informed of various other public activities regarding dissemination of this report, you can sign up for an e-mail list by visiting the web page http://www2.nas.edu/cstbweb/notifyme.html. I apologize to you for the short notice on this invitation, but hope that you will be able to attend. Herb Lin Senior Staff Officer Study Director CSTB/NRC Study of National Cryptography Policy crypto(a)nas.edu ------- End of forwarded message -------

1 0

Re: Markoff in NYT on NTT/RSA chip
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 12:08 PM 6/4/96 -0500, Paul Robichaux wrote: >2. Markoff's story says that NTT doesn't have licenses to use RSA >technology (the quote from Junichi Kishigami), but the bit about safely >swapping private-key info makes me wonder if instead they're using DH-- the >patent for which expires next year. A telecom chipset could make productive >use of DH for key exchange at call setup. They could use RSA for key exchange outside the USA because RSA is only patented in the USA. With a license for RSA they could also sell them in the USA. My reading of the New York Times article is compatible with the view that Jim Bidzos is driving a hard bargin for such a license. (However, the article does say that NTT has already sold chips to IBM in the US. I guess you can sell, but not deliver, until you get the license.) Obviously if you are outside the USA, you will buy your equipment from Japan Inc. US manfactures will be frozen out. (However the US can still compete for the Chinese market since such privacy will be illegal there :-). ) ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

2 1

whitehouse web incident, viva la web revolution
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

here's an interesting message about a white house aide pressuring HotWired to change their link pointing to a rant page about Clinton. it reminds me of a recent court decision in which a school tried to shut down a student's web page that he had done on his own time and referred to his school and other teachers. it used to be, "freedom of the presses only belongs to those who own a press". actually this still is, except now it only costs $20/mo to own a worldwide "cyberspace press" via web pages. hence what we get are interesting new social situations reminiscent of the tension that surrounded Martin Luther's posting of the 99 theses in the middle ages. you have people who had controlled the situation suddenly put off balance by a new medium. the power of information dissemination is rather significant, and the web is the most sophisticated information dissemination technology ever invented by man. I expect it to have very far-reaching social ramifications. we have barely scratched the surface.. cpunks are very interested in things like anonymity to save oneself from the government. another approach is to simply crow-bar the government in any way you can, whenever possible, to make it better serve your interests. web pages have this intrinsic power-- they're like a subtle, invisible crow bar that can influence the world via public opinion. could there be a day when nobody sees a need to hide from a government, because it is so uninvasive? ------- Forwarded Message From: "Steve Wingate" <steve(a)linex2.linex.com> Date: Sat, 1 Jun 1996 20:27:28 -0700 Subject: (Fwd) WH Censorship of Web Sites (Attempted) - - -> SearchNet's snetnews Mailing List - - ------- Forwarded Message Follows ------- Date: Sat, 1 Jun 1996 20:38:12 -0500 (CDT) To: cs(a)oak.oakland.edu From: ed(a)athenet.net (Edward Immler) Subject: WH Censorship of Web Sites (Attempted) The Skeleton Closet (at http://www.realchange.org) provides a site for those things presidential candidates would rather not discuss. They cover all candidates and include a link to our current Prez. I've included the link below. Looks like this was quietly reversed, the offender sent on (to a nice job), and nothing in the national media. Clipper, V-chip, and now plain-old intimidation. The WH is working hard to control your info. Ed ********************************************************************* [Mr. Tall Skeleton2] Bill Clinton's Skeleton Closet [Mr. Tall Skeleton] [Picture of Clinton] News Flash: White House Suppresses Skeleton Closet In a shocking blunder, the White House successfully put pressure on Hotwired Magazine to stop linking President Clinton's name to this very web page. This was all done behind the scenes -- we had no idea until we read Brock Meek's Netizen column of April 30th. The White House official involved, David Lytel, was in charge of creating the popular Clinton White House web site. He recently left the White House, and is working for a private web page consultant. At a conference, he attacked Netizen for being cynical and unfair, citing the Skeleton Closet link. Meeks, in response, noted that Hotwired had removed the link after receiving official pressure from the White House. In Hotwired's "Threads" discussion, another Hotwired employee admitted that they had been "intimidated" by receiving email from the "whitehouse.gov" domain early in Netizen's infancy, and said she regretted that they caved in. Lytel's argument -- that it was "dishonest" to link Clinton's name to a page criticizing him -- is silly of course. Apparently, he thinks the only "honest" link is one that goes to a person's own web page, no matter how self- serving it is. More to the point, this is a terrible precedent. As far as we know, it is the first attempt by any American government to squelch part of the Internet for nakedly political reasons. (The attack on adult material online, while obviously political, has legitimate issues -- or at least a reasonable excuse -- behind it.) And doing it privately, behind closed doors, makes it even worse. If we were simply seeking publicity, we'd run to Republican politicians (who desperately need an issue) and hope they try to use it. But that would be hypocritical. It's exactly that kind of partisan misuse of legitimate scandals that we are trying to make obsolete here - - -- because it muddles legitimate issues (like White House censorship of critics) in stupid, partisan manipulation. We're trying to contact the White House directly, to get them to disavow Lytel's actions. We'll let you know what happens. Update: White House Backs Down, Sort Of. We challenged the White House to confirm or deny that Lytel pressured Hotwired, to disavow his actions if true, and commit to a policy of avoiding this type of censorship. Within two days, they replied as follows: "Date: Fri, 03 May 1996 17:06:49 -0400 (EDT) From: WEBMASTER (WEBMASTER(a)a1.eop.gov) Subject: RE: White House WWW Comments To: webmaster (webmaster(a)realchange.org) Posting-Date: Fri, 03 May 1996 17:09:00 -0400 (EDT) It is our policy not to interfere with the content of other WEB sites." We'll take that as an admission that Lytel was out of line, and a solid commitment to doing the right thing in the future. Of course, they didn't live up to that policy before, and words are cheap. - - ---------------------------------------------------------------------- - - ---- And now, on with the Clinton's Skeleton Closet page. What can we say about Bill and Hillary that hasn't been said before? Clinton's scandals are covered in such loving detail by his enemies that we are providing you with links to various Clinton scandal pages. Eventually, we will boil it all down and sort out the really good dirt from the crazy stuff, but there's JUST SO MUCH to wade through! The frustrating thing about Clinton's scandals is that the press focuses on two-bit scandals of little importance, such as Whitewater and this ridiculous travel office "scandal", while ignoring much more significant dirt, such as the Mena, Arkansas contra supply and drug operation (see link below), Hillary's $100,000 commodity profit from a $1,000 investment, and a new charge -- that a federally funded educational operation in New York paid her $100,000, for who knows what. And no one (save a few voices on the left) are protesting Clinton's hugely successful fundraising and favors for people who have provided it, including the Tyson Chicken empire. Running against Gramm, Dole and Alexander, this isn't likely to be an issue, but it is a major fault of the President. Political Favors for Campaign Contributors Though his administration floundered at first, Clinton has quickly learned one aspect of Washington -- how to raise money from business interests. He has set records in fund-raising, eclipsing even Dole's huge haul (though not by much.) Of course, if Dole was President he would no doubt regain the lead. And some contributors seem to think their money is well spent. For example, Clinton raised over a quarter million dollars from ADM, Bob Dole's major benefactor, and pushed through a regulation benefiting them mightily. On the other hand, 2 Arkansas firms that formerly bankrolled Clinton (and received help from his administration) have switched their support to Dole -- both Tyson Chicken and Stephens investment brokers apparently figure Dole gives a better return per contribution dollar, or is more likely to win. Money and Favors: Archer Daniels Midland For example, he has received at least $270,000 from Archer Daniels Midland corporation, the agricultural giant famous for spreading money among various influential people, from Bob Dole to National Public Radio. Just days after Clinton received a $100,000 check in June 1994, his administration ordered that 30% of gasoline sold in American's 9 most polluted cities contain ethanol based additives by 1996 (as opposed to cheaper methanol.) Archer Daniels makes 60% of US ethanol for gas, and none of the methanol. Bob Dole, who receives even more money from Archer Daniels and its president, actually supported the Clinton Administration's mandate, even while arguing against Clinton's health care proposal for nearly identical federal mandates. (Courts have block Clinton's 30% rule, saying he lacked power to favor ethanol over methanol.) $100,000 for Hillary from an Educational Foundation This allegation just came out January 10, so bear with us on it's sketchiness. New York state's new Attorney General Dennis Vacco (a Republican) is investigating a $100,000 in payments to Hillary or the Rose Law Firm from the National Center on Education and the Economy, a charity that was in Rochester New York and has since moved to Washington, DC Hillary was on their board, as were Mario Cuomo and Ira Magaziner, but no other board members were paid. The justification is that Hillary was paid to carry out some programs. When this story came out a month ago, Vacco announced he was asking for contracts with Hillary or the Rose Law Firm and a description of any work she actually did. Nothing more has come of it, which -- in an election year - indicates that nothing substantial has turned up. - - ---------------------------------------------------------------------- - - ---- Try these links, but use a grain of salt; some of the sources are pretty marginal. Disgraced Clinton Administration Officials Yahoo's Whitewater Scandal Page Mena, Arkansas: Contra & Drug Smuggling Center? Nick Chase's Mena, Arkansas and Whitewater pages. Quotes "I'm someone who has a deep emotional attachment to 'Starsky and Hutch.' " -- Bill Clinton, 1996 "I don't think [Bill Clinton] is fooling around anymore. Nor do I think he will. I read that Hillary threw a lamp at him. ... You know something? I think she did." -- Ann Landers Sources "Primary Colors", by 'Anonymous', 1996 Wall Street Journal, in general, and in particular: ....January 12, 1996 pA14 ....January 8, 1996 pA1 ....December 18, 1995 pA16 ....December 29, 1995 pA1 ....March 23, 1995 p A1 ....February 22, 1995 p A1 ....January 13, 1995 p A12 "The Mena Coverup", Micah Morrison, Wall Street Journal, October 18, 1994 p A18 "The Real Cost of Ethanol" and "Dwayne's World", Dan Carney, Mother Jones, January, 1995 "Aides Saw Political Threat In Clinton Loans From '90", Jeff Gerth, New York Times, May 6, 1995 p7 "Ann Landers Repents For Slurring The Pope", Associated Press, December 1, 1995 "Blocking the Box", Rick Marin, Newsweek, March 11, 1996 "NY Official Probes Payment to Mrs. Clinton", Associated Press, January 12, 1996 BACK TO SKELETON CLOSET Paid for by Real People For Real Change PAC and not authorized by any candidate or candidate's committee. Real People For Real Change is registered with the Federal Election Commission as a non-affiliated, independent political action committee. Copyright 1996 Real People For Real Change PAC ******************************************************************* *Edward F. Immler Lawrence Chemists * *ed(a)athenet.net are Free Radicals * * * *Lawrence University '95 * *Interests: HAZMAT, EPA/OSHA Compliance, SARA III, Wastewater * *DISCLAIMER: Opinions are mine...unless someone else agrees * ******************************************************************* Anomalous Images and UFO Files http://www.linex.com/ufo/ - - -> Send "subscribe snetnews " to majordomo(a)alterzone.com - - -> Posted by: "Steve Wingate" <steve(a)linex2.linex.com> - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Re: Java
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:06 AM 6/4/96 -0400, Perry E. Metzger wrote: >Bill Frantz writes: >> I'll say. You have also ignored some of Java's other features. Machine >> independence is probably the most important. > >Many languages are machine independent. Thats hardly a new feature. >... >However, your point is taken. Java is a neat little language in many >ways. However, that isn't cause enough for literally fifty books on >the subject to be on display, including breathless ones proclaiming >"Tips from experienced Java programmers!" as if there are any in the >world at this point. There are dozens of cute little languages in the >world -- scheme, smalltalk, etc, etc. I guess I tend to react to the Java hype with bemusement rather than horror. I enjoy joking with the clerks at Computer Literacy Bookstore about the "Java book of the day". However, unlike so much of the industry's over hyped marketing, with Java there is actually something worth while hidden under the massive hype. Java appears to have a chance of being adopted widely in the industry. We can discuss until the cows come home why Smalltalk, Scheme etc. have not achieved wide usage. I suspect it may be a combination of unfamiliar syntax, licensing issues, version compatibility issues, and the inability to do low level programming. These issues may also hit Java, but for now it is the nicest language around with a bandwagon behind it. If it replaces Basic, that will be a significant step forward. >I mean, with all the "Teach yourself Java in 21 days" and company >books coming out, you would think you were dealing witht he major >application programming language for the world instead of something >that at the moment is used for almost nothing more interesting than >fake scrolling LED sign applets. I agree that all the hype has been about applets. However there is one common non-applet Java application that shows that significant applications can be written in Java. That application is the Java compiler itself. If you are running on a Sun system, you can do real applications today. (On the Mac you are still in the "applet jail", but I haven't opened the latest Java environment that arrived on my desk last month, so I may be obsolete.) >> If you want defense in depth, run your Java interpreter in an OS >> environment which limits the interpreter's access to only those resources >> you wish it to access. > >Since that doesn't exist, it isn't an option for my users. It is not, >in any case, my obligation to make Java secure. I'm not the one hyping >it. I thought this was the effect the Unix people get when they run applications such as firewall code in a "chroot jail". Perhaps Netscape could make you happy by having its Unix based browsers run Java applet interpreters in such a jail. (I don't know, Unix is an imperfectly spoken foreign language to me.) >You could hand any websurfer a Netscape PGP plugin without much work >at all, and you could easily build it on lots of platforms. After all, >look at how many platforms that lowly C code like PGP runs on. Why don't we have one of these now? (N.B. not a rhetorical question) ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

2 1

Re: Class III InfoWar: TST Article
by Rev. Mark Grant, ULC 17 Dec '03

17 Dec '03

On Tue, 4 Jun 1996, Dan Haskovec wrote: > Here's the reply I got from a friend that I forwarded it to.... > and the verdict is... NetMYTH! I checked the cite in the article on > cyberterrorism... no such article ran on 6/2/96 in the Times > (London)... nor, in fact, in any newspaper available on Nexis... > just thought I would let you know... Hate to tell ya, but I read this article on Sunday on the front page of a real, physical, paper copy of the Sunday Times. Now admittedly I read it in a film studio so they might have faked it, but that would be some strange coincidence. Mark

1 0

Senator Exon & me
by Blake Wehlage 17 Dec '03

17 Dec '03

I am not one to lash out at anyone but now I feel it is appropite to tell the group what our very own Senator Exon has said to myself. If you do not care then delete this e-mail but if you would like to hear what a senator said to a 13 year old then read on. I will not put on the whole letter just the parts that I deem inapropite. He wrote: I'm not flaming you. You might not even get flamed this time. But you will be. This is just the kind of message which I hate. It is a waste of my time and a waste of time for people who have a lot less time than I. Please wait for a legitimate reason to post. I might patronize your age but I won't - I was a 13-year-old net kid once. #1 If you really wanted to show just had balls (I hate to use the phrase but I can't think of anything better) you wouldn't hide behide remailers. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >Current Girlfriend(s)- Lindsey Wilcox, Laura Schubring He wrote: I don't want to be around the first time you send your girlfriend(s) e-mail. I predict an ass-kicking of MAJOR proportion. #2 This is kinda an inside joke ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ I really hate to waste your people times with my messages but aren't we all on this mailing list to learn? I'm 13 hell, I bet there are people on the list that are 5 times as old as me. I want to say that I really wanted to talk to Senator Exon on an IRC channel but I can't seem to mail him due to his cowerdness. I want to apologize to everyone that I may have said some things things that were wrong in the past but I'm learning and hope to have a great job in the computer indusrty (if there really are any). i will close saying that it was wrong that someone would creatique a 13 year old's signatrure. I feel that is wrong but hell, I guess I just to young to be a cyberkid. Thank you for hearing me out. :-) Ps if you want the full letter e-mail me and i'll sent it to you. Quoting my computer teacher at school- "The internet has its share of cool people and its lamers. The lamers are your people on AOL, hacker wantabees and your government officals" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Blake "Pokey" Wehlage Gaa- 3.69 <jwilk(a)iglou.com> Record- 2-4-4 Age- 13 Final Standings- 2nd Place (Beat in Championship) President & Founder: Revolution Software "I have the fastest glove in the east!" Profanity Software "Hackers never stop hacking they just get caught" VSoft My life- Rarely eat or sleep, Hack til' 7:00a, goto school, play goalie til' 8:00p, hack til' 7:00a Hank Aaron- d:-)!-< Pope- +<:-) Santa Claus- *<:-) The Unabrower |:-) Current Girlfriend(s)- Lindsey Wilcox, Laura Schubring Personal Quote- Mr Plow, thats my name, that name aguin is Mr. Plow -Homer Simpson ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 2

On the Hill: Child Porn "Morphing"
by Black Unicorn 17 Dec '03

17 Dec '03

Hearings on the hill over the child pornographer horseman: "Morphing" seems to be the latest buzzword for putting childrens faces on the bodies of adult models in sexually explicit poses and seems to have attracted enough attention to warrant congressional attention. Interesting that the media is playing this up as a "net" deal. (As if somehow it were impossible to do without the all powerful and evil internet. I'd like to see exactly how they word the proposed prohibitons. What constitutes "child" when the face painted on is pure artistry? Will we see a simple and strict prohibition over modifiying sexually explicit pictures to make them appear to be of younger models (whatever their apparent age may be)? Will we see a subjective test as to what is "child looking" enough? Silliness. All silliness. Prediction: Some manner of law will be on the books (Or perhaps passed, but unsigned) before the election attempting to prohibit some form of this activity. Certainly Clinton is not going to veto such a bill before the election, which is doubtlessly when the right is going to try to push it through. (Can they streamline it enough to get a vote in time?) --- My preferred and soon to be permanent e-mail address:unicorn@schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information Opp. Counsel: For all your expert testimony needs: jimbell(a)pacifier.com

8 13

Re: FOR WHOM THE BELL TOLLS
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:30 PM 6/4/96, Sandy Sandfort wrote: >To which Jim Bell replied: > >>I have a solution to that problem. > >My question for member of this list is: When Bell finally >goes too far and they arrest or shoot him, how can we best >capitalize on his martyrdom? Or in a more negative light, >what damage control will we need to do in that case? > >Now I know that barking dogs rarely bite, but Jim may just >fool us and find his cajones. In any event, the sort of >yapping he is doing could itself be considered a crime that >could attract the sort of negative attention he apparently >craves. > >Any suggestions? As we've all learned from our studies of quantum cryptography, the answer lies in Bell's Theorem. As we know, Bell's Theorem says that if a Bell is ever removed in one place, another Bell appears someplace else instantaneously. Glad to be of help. --Klaus! von Future Prime

1 0

Re: Class III InfoWar: TST Article
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:34 PM 6/4/96, Steven Levy wrote: >If it's a myth, it's quite an elaborate one. On Saturday night I was >interviewed by the BBC about this. The producer read the entire article >to me, telling me in was on the front page of the Times. (My comments >were not about the specific story, but the underlying security issues.) I >don't think he was making it up. On the substance of Schwartau's claims about "HERF guns," I'm a bit skeptical that this is a real threat _at this time_. I'll say more on this later. On some of the points raised by the article, some things don't compute. At one point it is claimed that no one who in London (and presumably elsewhere) would ever dare to comment on threats received or extortion demands met. If so, how does the author know such threats have actually been made? (I mean credible threats, not anonymous call-in threats, such as bomb threats.) I read Winn Schwartau's book, "Information Warfare," as preparation for being interviewed for a BBC "Horizon" show called "The I-Bomb." Coincidentally, a friend of mine who shall remain nameless was doing some consultation work on this very issue (HERF guns, suitcase impulse sources, etc.). Magnetohydrodynamic RF sources--not to be confused with "electromagnetic pulse" (EMP) from extraatmospheric nuclear blasts--can generate huge RF fields in small packages, by focussing explosions in conjunction with coils to launch the pulses. So, why am I so skeptical? For a couple of reasons: 1. Conventional explosives work perfectly fine for a lot of sabotage efforts. It is unlikely that a mysterrious van is likely to be parked next to a London brokerage or computer firm in the City of London, given their history of terrorism. 2. To be a credible threat, there usually needs to be some form of "demonstration." I have heard of no such thing. Absent such a public demonstration, I find it hard to believe that beancounters would OK the giving away of hundreds of millions of dollars for a threat which is abstract and hard to understand for laymen. 3. This recent story smacks of hype. I'm not saying Schwartau is hyping his conferences and his book, and his consulting business, just saying it strikes me as a hyped threat without direct confirmation. So sue me. (On second thought, in this litigious society, please don't.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: NYT on NTT/RSA Chips
by Ted Garrett 17 Dec '03

17 Dec '03

At 09:12 AM 6/4/96 -0800, someone claiming to be <jimbell(a)pacifier.com> wrote: >Maybe it's just me, but the solution to NTT's problem is obvious. Even >assuming that the export of this software would be against the law, why >doesn't somebody simply violate that law? RSA would publish that software, >possibly encrypted with NTT's public key, on a public system protected >against direct export. "Somebody" would download it, write it to a floppy (...) >As far as I know, there is nothing wrong with NTT using this software even >if it is assumed to have been exported illegally. Obviously, NTT won't >_ask_ for somebody to do this, because then the government will claim it was >all a conspiracy, but that doesn't prevent NTT from being the beneficiary of >somebody else's activities. What is wrong with this is that, because RSA did not, in practice deliver the software to NTT, they can have no expectation of payment. Thus begins a trumped up lawsuit in international court, and it will eventually cost RSA more to collect on the sale than the sale was worth. As many rock-solid implementations of the RSA algorithms as are out there, all NTT has to do is go to an FTP site in the netherlands. Done deal. But what about the copyrights (which are still unclear) and the US patents? NTT would not be able to market their system in the US without losing face. Not gonna happen. Just my $.02... -- PGP key available on the keyservers -- A wise man said that if one seeks to preserve his security by giving up a measure of his freedom, he shall not have either one for long... Dude's Dead.

1 0

Re:FOR WHOM THE BELL TOLLS
by mccoy＠communities.com 17 Dec '03

17 Dec '03

Sandy writes: > > In a recent exchange, Carl Ellison wrote: > > >After the meeting ended it hit me what the problem is and I > >mentioned it to PRZ. We're complaining that the Executive > >has gone rogue -- is disobeying the will of the people. > >PRZ likened it to Nixon's war in Cambodia. > > To which Jim Bell replied: Hmmm... time to fix my Jim Bell filter, this message seemed to have gotten around it. > > >I have a solution to that problem. Yes, I am sure Jim does. Expect a few Treasury agents to visit him in the near future regarding threats against the president, they seem to be a little overzealous about this statute... (a felony I believe...) > My question for member of this list is: When Bell finally > goes too far and they arrest or shoot him, how can we best > capitalize on his martyrdom? Or in a more negative light, > what damage control will we need to do in that case? A movement is not complete until it has a few nuts who claim you are not going far enough, only then does it have a chance of being incorporated into the mainstream. I would suggest just ignoring him, and once he is arrested claim he was a plant by the IRS :) jim

1 0

Re:cycle market
by mccoy＠communities.com 17 Dec '03

17 Dec '03

Bryce writes: > I was trying to think what I would use a cycle market for. The > only thing that I wait for more than a minute on currently is > compiling. Tasks which are inherently parallel (preferably ones where the various processes are loosly coupled and the need for inter-task communication is low) are the first things that come to mind, because advances in the speed of CPUs does not give you the same advancement increment in solving these problems. Some examples: -rendering and ray tracing -simulation -analysis of large datasets -genetic algorithms and genetic programming (something I am working on creating a "cycle market" for in my spare time) The other class of tasks which could use such a market are those which are limited more by bandwidth than by processor speed. If the server can be given many "heads" which can provide the service (with the back-end processing done by cycle markets) then it is possible to make significant gains in distributing the I/O load and getting around network latency by creating server which is "virtually omnipresent." jim

1 0

Re: Class III InfoWar: TST Article
by Duncan Frissell 17 Dec '03

17 Dec '03

At 12:29 PM 6/4/96 -0700, Dan Haskovec wrote: >Here's the reply I got from a friend that I forwarded it to.... > > > and the verdict is... NetMYTH! I checked the cite in the article on > cyberterrorism... no such article ran on 6/2/96 in the Times > (London)... nor, in fact, in any newspaper available on Nexis... > just thought I would let you know... Not only is it visible in any copy of the Sunday Times available in NYC, it is also on the Times' website at: http://www.sunday-times.co.uk/news/pages/Sunday-Times/frontpage.html Registration required. DCF

1 0

Re: MELP: 2400 baud speech coding
by jim bell 17 Dec '03

17 Dec '03

At 01:31 PM 6/4/96 -0700, John Gilmore wrote: >Mixed-Excitation Linear Predictive encoding gives better speech >quality than CELP at half the data rate. Encoding and decoding >together burn up more than 100% of a TMS320C3x digital signal >processor at 33MHz -- 64% to encode and 53% to decode. Does this mean to convert to compressed data AND encrypt, or just converting to compressed bits? > I don't know >how it does on a Pentium or an Alpha. If you have the MIPS at both >ends, this enables very robust encrypted speech across modem links to >the Internet. I'd rather see thousands of Internet-phone users transmitting at 2400 bps than 28.8 kbps... This is going to add to the telephone companies' woes: They obviously don't want people to have access to nearly-free Internet-LD phone service, but their arguments for its regulation will be weaker when it is pointed out that the bit rate for compressed, encrypted Internet phone are 2400 bps as opposed to 64,000 bps for POTS. Which raises another question: When are Internet ISP's going to start acting as Internet-phone gateways? Currently, you can't call somebody on POTS with Internet phone. This would be solved if ISP's could install modems and software which did audio-synthesis/digitization on an outbound call, driven by the data received on the Internet, and sending the data back to the calling end. Any guesses as to when this will be real? Jim Bell jimbell(a)pacifier.com

1 0

LIMITED SF BAY AREA INTEREST
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Those of you who know Dana Drenkowski are invited to his 50th birthday party on Saturday. There is some conflict with the monthly Cypherpunks meeting, but you could come late to the party. (It's in Golden Gate Park.) If you would like to attending, let me know as soon as possible. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

update 273 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From physnews(a)aip.org Mon Jun 3 17:03:16 1996 Date: Mon, 3 Jun 96 14:06:02 EDT From: physnews(a)aip.org (AIP listserver) Message-Id: <9606031806.AA07182(a)aip.org> To: physnews-mailing(a)aip.org Subject: update 273 PHYSICS NEWS UPDATE The American Institute of Physics Bulletin of Physics News Number 273 May 31, 1996 by Phillip F. Schewe and Ben Stein SCHRODINGER'S CAT-ION: Physicists at NIST (Christopher Monroe, 303-497-7415) have experimentally demonstrated the principles of the famous Schrodinger's cat thought experiment with a single beryllium ion. In a 1935 paper, physicist Erwin Schrodinger proposed the cat paradox: put a cat inside a box, add a container of poison gas which is activated by the decay of a radioactive atom, and close the box. Since the radioactive atom obeys the rules of quantum mechanics and since therefore its state is indeterminate until measured by an outside observer, opening the box and observing the atom (a microscopic quantum system) instantly determines the status of the cat (a decidedly macroscopic, non-quantum concept). The feline is neither alive nor dead until the radioactive atom is measured by an observer. Although this thought experiment is impossible to carry out for a number of reasons, including the fact that the quantum properties of a system tend to wash out in an object made of many atoms and molecules such as a cat, the NIST physicists have demonstrated the basic principles using a single beryllium ion. The researchers trap the ion with nonuniform electric fields and cool it to a near standstill. Laser pulses then cause the ion to oscillate as a combination of wavepackets representing two different electronic states. Additional laser pulses push apart the two wavepackets to separations of as much as 80 nanometers, a mesocopic-size scale far bigger than the normal spatial extent of the ion. So in this version of Schrodinger's cat, the ion's electronic state (a quantum property) is linked to (or "entangled" with) a mesocopic-scale position (a non-quantum property). By applying subsequent pulses that bring together the wavepackets, the researchers detected interference patterns which provided evidence of the original separation. Measurements of Schrodinger cat's states can provide information on how quantum properties wane with the amount of physical separation between quantum states. (C. Monroe et al., Science, 24 May 1996.) SUPERCONDUCTING TUNNEL JUNCTIONS (STJ), under development as efficient detectors of x rays, can now also be used as single-photon detectors at visible wavelengths. In this regard they will be welcomed by astronomers who increasingly record incoming light with charge-coupled device (CCD) arrays. In contrast to the silicon-based CCDs, which are insensitive to a photon's energy (one photon engenders one electron in the detector), the niobium-based STJ's do discriminate as to energy (one photon, depending on its energy, can generate thousands of electrons). Determining a photon's energy would allow astronomers to forego filters, which lower the detector's overall efficiency. A STJ device developed by an Oxford-Cambridge-European Space Agency (Netherlands) collaboration can detect light in the wavelength range 200-500 nm with a spectral resolution of 45 nm (this should improve to 20 nm or better). The STJ can also determine the photon's time of arrival at the millisecond level, a property the would be handy for studying fast astronomical processes such as pulsars. (A. Peacock et al., Nature, 9 May 1996.) PHYSICS BACHELOR'S DEGREES. Here are some highlights from a new AIP report on 1994 degree recipients in the U.S.---the annual number of degrees continues to decline slightly; more fresh graduates are looking for jobs rather than heading for graduate school; for those going on in their studies 89% receive financial support; women constitute 17% of the degree recipients; median starting salary was $27,000. (Patrick Mulvey, 301-209-3076.)

1 0

[SF Bay Area] Steganography -- Peter Wayner Ph.D.
by stevenw＠best.com 17 Dec '03

17 Dec '03

Seen on the net: AN EVENT AT COMPUTER LITERACY BOOKSHOPS ---------------------------------------------------------------------- CAN SECRETS BE STOPPED? ---------------------------------------------------------------------- A free presentation by Peter Wayner Ph.D. Date: Wednesday, June 19, 1996 Time: 6:30 p.m. - 8:00 p.m. Location: Computer Literacy Bookshops 2590 North First Street (at Trimble) San Jose (408) 435-1118 "Steganography" is the art and science of making information disappear. If you don't know where it is, you won't even know it exists. If you can't find it, you can't censor it. Dr. Wayner will explore some of the basic ways that people are hiding information by making it look like something else; such as innocent ramblings or flames from a newsgroup or background noise in a digitized image or sound file. Dr. Peter Wayner has a Ph.D. in Computer Science. He has worked at Xerox PARC and consulted widely on various topics, including computer security. His writing has appeared in popular fora like "BYTE" magazine and the "New York Times". He is the author of "Agents Unleashed: A Public Domain Look at Agent Technology" and "Digital Cash: Commerce on the Net" and "Disappearing Cryptography". DID YOU KNOW THAT OUR EVENTS ARE ALSO POSTED ON OUR WEB PAGE? http://www.clbooks.com/ Stay tuned. There are more events to come. July 23 Programming Windows 95 with MFC by Jeff Prosise Events at our stores are always free. Have suggestions about event topics? Email them to: eventca_info(a)clbooks.com ------------------------------------------------------------------------ If you would like to receive e-mail announcements for upcoming store events, simply write to: events_ca-request(a)clbooks.com (for events held at our California stores) events_va-request(a)clbooks.com (for events held at our Virginia store) ------------------------------------------------------------------------ If you have signed up for email announcements but have not received any, or wish to be removed from this list, please contact us. We add names by request only. **************************************************** Computer Literacy Bookshops, Inc. Cherrie C. Chiu eventinfo_ca(a)clbooks.com (408) 435-5015 x116 ------------------------------------------------------------------------- Steven Weller | Technology (n): | | A substitute for adulthood. stevenw(a)best.com | Popular with middle-aged men.

1 0

Re: Security of PGP if Secret Key Available?
by David Rosoff 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02.36 AM 6/3/96 -0500, Robert A. Hayden wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >About once a week we get some lame-o flame bait posted to >alt.security.pgp or this mailing list or somewhere abotu some hole in >PGP. We further say with fairly good reliability that they are bogus, >get a light chuckle, and then go back to dealing with the real issues. > >However, I got to wondering about the security of PGP assuming somebody >trying to read my PGPed stuff has my 1024-bit secret key. ie, if I have >it on my personal computer, and somebody gets my secret key, how much >less robust has PGP just become, and what are appropriate and reasonable >steps to take to protect this weakness? > >Thanks > > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 >Comment: PGP Signed with PineSign 2.2 > >iQCVAwUBMbJ5xTokqlyVGmCFAQGcAgQAvjFdZ+YLdQGxDHcT+GOwP82BSwiTYlaQ >F9RV8L+radCK/SyeLnEtoodkKVqpcsItIQ/JJ44FOAmnsBLljuWqbhZMl8G8+uCB >pcpkXpre83CwoM6qDKkCEyqCiMxq857ioCoqb+WRNJYbb++muVBDHADVzGoGOjLg >cvIMxnnXF3c= >=tnTb >-----END PGP SIGNATURE----- Once your secret key has been compromised, then all that prevents a Bad Guy from reading your message is your secret key passphrase. (I believe that, aside from grabbing keystrokes a la TEMPEST, the only way to get this passphrase is by brute-forcing it, or maybe searching your house for the little piece of paper that you may have written it on.) I have seen equations which claim to compute the security of your passphrase and also passphrase generators - I don't know if either are any good, though. - ------------------------------------------------------------------------------- David Rosoff (nihongo o chiisaku dekimasu) drosoff(a)arc.unm.edu For PGP key 0xD37692F9, finger drosoff(a)acoma.arc.unm.edu or get from keyservers pub 1024/D37692F9 1995/07/01 David Rosoff <drosoff(a)arc.unm.edu> Key fingerprint = 25 7D AA 01 85 41 43 89 50 5A 33 76 F1 F1 99 67 I accept anonymous mail. If I didn't sign it, you don't know I wrote it. - --- "Made weak by time and fate, but strong in will / To strive, to seek, to find-- and not to yield." ----- "Ulysses", by Alfred, Lord Tennyson -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMbTCmBguzHDTdpL5AQEH4gP/TT3myaSislU3En4xwaB2cWmYhCItlhL/ nhLZM4uxOHv87zsHjYIBrHEHxVHnYOaH/Kd7zSRPRB0ArTDIMP/ZtYISMUNhfSd2 bX+LNdASX9rbiD1Vfcvb/vw6nKlfvdz2WoeeTE/yqSeHjnE7+izEX4Xi/9mHB4s/ N9DDK16kgi4= =snQo -----END PGP SIGNATURE-----

1 0