December 2003 - cypherpunks-legacy

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

www.geocities.com/SiliconValley/Heights/2608
by Zer0.Faith.Inc.＠website.chek.it.out 17 Dec '03

17 Dec '03

1 0

Re: [No joke] The Feds may legally gas us
by Lucky Green 17 Dec '03

17 Dec '03

At 06:09 PM 12/14/96 +0000, The Deviant wrote: >True, but the point still stands -- They can't, legally. I am not certain that the chemical weapons prohibitions apply to a country's own civilians. IANAL. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

3 2

Re: Secure Erase for PCs?
by Dale Thorn 17 Dec '03

17 Dec '03

Steve Schear wrote: > >Steve Schear wrote:[snip] > >I've been watching for a lot of years, and I'm sick of those bastards > >at Apple. Those scumbags not only make a flimsy and unreliable computer, > >they won't repair the machine either. Too bad Ted Kazynski(sp?) didn't > >have a grudge against Apple, the scumbag creeps. > I'm sorry your ownership experience hasn't been pleasant. I've owned six > and installed a hundred or so as a consultant (along with many Wintel > systems) with great reliability. Only one of the machines I know of has > needed service, and this because it was operated in a dirty shop-floor > environment w/o an enclosure or even periodic internal cleaning. Since > I've not had to have one repaired under warranty I can't vouch for their > committment to good service. I'm puzzeled at your reaction. I hope you don't mind my adding this to the list, but since I posted something very pertinent several days ago and got *no* reaction, and since it was something very significant, I wanna try it one more time: This experience on your part, of installing 100-plus Macs with only one needing service, is beyond amazing. Most computer people will readily admit that HP (for example) is the best, reliability-wise, yet I have purchased quite a few of their computers and major peripherals over the past 20 years, and I have experienced an approximate 40% (!) defective rate during the one-year warranty period, more than 30% falling within the first three months. As to why I still use their stuff - it's because the others are worse, a fact which is almost universally agreed on. How can this possibly be, you ask? Could it be really bad luck? No. Could it be mishandling? No. For a reality check, another famed electronics vendor, Sony, has the same problem, but even worse than HP. Unfortunately, in the Sony case, their products don't wear well after fixing, excepting a couple of their rather expensive "professional" series products. I suspect that the 100-plus Apple owners don't really use the machines, otherwise, if they were so reliable, why does Apple desperately avoid repairing their own products, when HP has provided top-level professional technicians (not boys in dusty back rooms of cheap-ass computer stores) to fix their products, and done so consistently ever since the beginning of the PC business in 1966?

1 0

read if have time (not important)
by VAN HOUTEN 17 Dec '03

17 Dec '03

Hi thanx for taking time out to read this note. I am doing a school paper on "Sex and Violence on the Internet". If you might be able to write me on your thoughts on the subject that would be very helpfull. Sorry if I took up your time. So you do not have to E-mail to the whole list my address is: josh(a)mci.net thank you so much.......

1 0

Gov't Clarifes Position-Surprise!
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

Forwarded from "Fred B. Ringel" <fredr(a)rivertown.net> on pgp-users list: Hi all- A list member forwarded this to me and I thought it was important enough to pass on. Its a "clarification" of the Government's "Key-Escrow/Key Recovery" position which is apparently "worldwide" in its intended reach. Besides the orwellian (sp?) nature of the proposal, I personally cannot imagine how this would be enforceable. Anyway, its something to ponder...how the government intends not only to restrict privacy rights at home, but extend those restrictions beyond our borders. Fred /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Fred B. Ringel Rivertown.Net Systems Administrator P.O. Box 532 and General Fixer-upper Hastings, New York 10706 Voice/Fax/Support: 914.478.2885 Data: 914-478-4988 Westchester's Rivertown's Full Service Flat-Rate Internet Access Provider E-mail "SEND-PGPKEY" in the Subject for my Public Key \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ ----Begin Forwarded Message---- >From EPIC http://www.epic.org/crypto/export_controls/draft_regs_12_96.html **Commerce Department Prepares Draft Encryption Export Regulations** December 11, 1996 The Commerce Department is circulating draft regulations that differ sharply from earlier assurances made by the White House to relax export controls on strong encryption. The draft regulations state that it is the aim of the Commerce Department to promote "a worldwide key management infrastructure with the use of key recovery and key escrow encryption items." The proposal contrasts with earlier assurances that encryption standards would be voluntary and market-driven. The regulations would amend the Export Administration Regulations (EAR) by imposing national security and foreign policy controls ("EI" for Encryption Items) on certain information security systems and equipment, cryptographic devices (including recoverable encryption software) and related technology. For the first time, the Administration makes clear what it means by "Key Recovery Encryption." The regulations state that: For purposes of this rule, "recovery encryption products" refer to encryption products (including software) which allow law enforcement officials to obtain under proper legal authority and without the cooperation or knowledge of the user, the plaintext of encrypted data and communications. This is an exact description of the original Clipper encryption proposal that was widely opposed by Internet users and industry when it was announced in 1993.

2 1

Re: Magic Numbers in MD5
by geeman＠best.com 17 Dec '03

17 Dec '03

digits of transcendental functions are conjectured to be randomly distributed. however, some specifics of how the sin() function was utilized in MD5 were the basis for a successful attack on the compression function. I don't recall the references. not too hard to find tho. ..snip.. >> Does abs(sin()) have some properties that are especially conducive to >> strengthening MD5 or is it just a function to generate mildly random >> numbers? If the latter, wouldn't the algorithm be stronger if it was >> used with completely random numbers? > >I am not sure of the properties of abs(sin()). I know that the S-boxes in >Blowfish are initialized with pi. I would guess that the purpose of using >such values is to use easily generated pseudo-random numbers. > >Mark >- -- >finger -l for PGP key >PGP encrypted mail prefered. >0xf9b22ba5 now revoked > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.3 >Charset: noconv > >iQEVAwUBMrMD/SzIPc7jvyFpAQEA7gf9HAtV1Vy+3LO5OPOHyU9ZHoath32LhAwU >PzODS/YJsY9fVxaMHOm15oL9D4CX2D5s/Y9cgrALG6pGzw4dBWJZJyqNAcbmsjp/ >B/jNL9jXKCXg1byIzplKSjJqDypLzIPf07xTIQVCC5IDmwZ7pR5owngH9MDaE8is >aFiGZvuWNm7eHQg1kJSb40xQjkwszx+SP1Gv9+fvpys5GZLCTHwPx8SCpy7PXwNp >lm8fgV9mjc7wZIpw73oqPZEb7Q3VHZUOUXS2i6XNF3UVXa4aykBg5VvALPt0tuvv >ah5JjA6JP4STwSCj+HrnMpQJ8SCG4U3kKb54+WOl8H6eo7ekuEU8mw== >=uNLG >-----END PGP SIGNATURE----- > > >

1 0

Certified primes
by nobody＠replay.com 17 Dec '03

17 Dec '03

The only `culture' Timmy C[retin] Maytag possesses is that cultivated from his foreskin scrapings. /\ o-/\ Timmy C[retin] Maytag ///\|/\\\ / /|\ \

1 0

Medical anonymity
by Clay Olbon II 17 Dec '03

17 Dec '03

It probably should no longer surprise me when the popular press is ignorant of anonymity, but of course it still does. There were several otherwise excellent articles in the Detroit News today (http://www.detnews.com/) about DNA research and inherited diseases (specifically breast cancer). The gist of one of the stories is that there are several reasons that deter people from being tested for genetic predispositions to disease, but that one of the primary ones is the fear of losing one's health insurance. Nowhere in the article was the possibility of anonymous testing mentioned. This is a severe oversight in my opinion. Clearly, being tested for a genetic disorder would not require disclosure of one's true name, and the testing could be paid for in cash (of course providing genetic material could eventually be indexed into a database to discover that true name, but I doubt we are there yet, at least I hope not!) The implication of most articles regarding this subject are that "there ought to be a law" prohibiting disclosure by medical practioners. Of course, most of us would probably agree that the proper approach is allowing non-disclosure by those tested. I don't know whether this is currently "legal", is there a legal requirement that medical practioners have "true names" before testing? Medical testing provides a unique opportunity to acquaint the public with the benefits of anonymity. Most americans can clearly see the payoff - not having your health insurance cancelled. Other anonymous transactions have somewhat less tangible benefits for the majority of americans (sorry to be so america-centric, maybe I should change the phrasing to citizen-units ;-) That's my minor rant for a Sunday AM. Now back to my x-mas shopping! Clay ******************************************************* Clay Olbon olbon(a)ix.netcom.com sys-admin, engineer, programmer, statistitian, etc. **********************************************tanstaafl

1 0

Re: Social Security Fraud
by Duncan Frissell 17 Dec '03

17 Dec '03

At 11:42 AM 12/12/96 -0800, Huge Cajones Remailer wrote: > >It seems to me that in the case of an employee giving the wrong number >to his employer, the only person that suffers is the employee through >loss of future payments from the Social Security Administration. The >employer certainly doesn't suffer. Assume that the income tax is >paid. > >What laws would an employee violate? What are the chances of >conviction? What are the likely penalties if convicted? > >Red Rackham Anyone interested should Altavista "social security number FAQ" and read same. DCF > > >

1 0

Re: Social Security Fraud
by Duncan Frissell 17 Dec '03

17 Dec '03

At 03:26 PM 12/13/96 -0800, Huge Cajones Remailer wrote: >So how often are people prosecuted under these laws? That is, if you >pay your taxes and don't steal from people, but do give your employer >the wrong SS number, what are the odds that you will be prosecuted? > >If prosecuted, are the odds high that you will receive jail time? >Assume a good lawyer, spotless criminal record, and a favored >racial class. Chances of prosecution zero. Chances of time served zero. DCF

1 0

Re: In Defense of Anecdotal Evidence (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sat, 14 Dec 1996 21:53:02 -0800 > Subject: Re: In Defense of Anecdotal Evidence > > Yes and no. Depends on the objective. If I had to purchase and install > a new server for my employer, and not being an expert in security myself, > I would (barring having a very trusted friend for advice) certainly be > inclined to trust the published reports more than anecdotes, even when > the anecdotes come from erstwhile reputable posters on these lists. Published reports as done in the computer magazines are anecdotal evidence. They neither print their error bands on their stats, the raw results of their tests, or their complete test proceedures. Jim Choate CyberTects ravage(a)ssz.com

1 0

Re: Magic Numbers in MD5
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 2:46 PM 12/14/1996, Mark M. wrote: >On Fri, 13 Dec 1996, Peter Hendrickson wrote: >> First, we have the four chaining variables, A, B, C, and D which >> are initialized with apparently random numbers. > >Random? > >A = 0x01234567 >B = 0x89abcdef >C = 0xfedcba98 >D = 0x76543210 Why yes, those bits are just as likely as any other set. ;-) At 11:39 AM 12/14/1996, Norman Hardy wrote: >Perhaps random numbers would be stronger but they would not be manifestly >random. MD5's formula for t_i precludes the possibility that the definer >of MD5 chose the numbers accoriding to some undisclosed principles that >would allow him a trap door. >The following code computes the magic numbers without requiring trig functions: > >...[nifty code sample redacted]... > >An alternative would have been to let t_i be MD4(i) or SHA(i). > >Using SHA to define MD5 would have required collusion between Rivest >and NSA to allow for a trap door. Even then it would have been very difficult. Still, one prefers to be careful. Rivest is said to be a clever fellow. One or two people at the NSA must know what they are doing. We wouldn't want to bet they aren't smart enough to invent something surprising. Perhaps we should define MD5-Cypherpunks. All interested parties submit sealed random values for the chaining variables and the t_i constants. The new constants are determined by opening the envelopes and XORing all the values. This probably isn't worth the trouble given MD5's known weaknesses, but it might be cool for other algorithms. Does it seem reasonable that this would make cryptanalysis more challenging? One could imagine that brute force attacks exist which are less efficient when the same setup cannot be used for every message. Or, that it is expensive to determine weaknesses for particular sets of constants. It would cause interoperability problems, but one could imagine some organizations would prefer to use their own version of standard algorithms for internal communications if it really did raise the cost of attack. The changes in software would be minimal. Incidentally, when weaknesses were discovered in MD5, did they depend on a particular set of constants, or were the weaknesses general? (I assume the latter, but I would like to know for sure.) Peter Hendrickson ph(a)netcom.com

1 0

What a great meeting!
by Lucky Green 17 Dec '03

17 Dec '03

I just returned from the monthly CP meeting. This month's meeting was hosted by PGP, Inc. thanks to the efforts of Dave del Torto, who is now with PGP. I would like to publicly thank Dave for making this meeting possible. It was the best CP meeting in a long time. I very much enjoyed Eric Blossom's demo of his voice encryption product. The sound quality is the best I ever heard in such a product. And it uses 3DES. The encryption and sound quality are much better than what you get from AT&T's STU-III. But nothing could have prepared me for the generous gift that PGP, Inc. made to each attendee: a four volume bound set of the *full* pre-alpha source to PGP 3.0, totaling almost 2,000 pages! Way to go, Dave. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

1 0

PGP & Zimmerman on Tonight's CBS News
by David Lesher / hated by RBOC's in 5 states 17 Dec '03

17 Dec '03

I caught only part of a LONG (by network news standards) piece on crypto with PRZ, Jimmy SuperFed Kellstrom and Scott Charney. If CBS news is yet to air in your area, it is well worth your time to see, and perhaps record. Phil came off very well. -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

Re: Why PICS is the wrong approach
by Phillip M. Hallam-Baker 17 Dec '03

17 Dec '03

Dale Thorn <dthorn(a)gte.net> wrote in article <58q40v$k22(a)life.ai.mit.edu>... > Vladimir Z. Nuri wrote: > If Firefly is an example of what PICS is or could become, the hell with > PICS. Firefly encourages and rewards group behavior and suppresses > individuality. Firefly would reward the discussion of the latest album > by a Columbia or Capitol artist, and discourage discussion of material > from independent (real independent) labels. I know because I've been > there and spent quite a bit of time trying to get a rating. I think there are two issues here, Firefly and PICS. Confusing one with the other is a bad thing. PICS is simply one way of applying labels to content. Its sole reason for being was to head off the CDA. Now that the judicial route has been taken I see little likelyhood that PICS can succeed since either the supreme court will uphold the CDA and we have the Singapore scenario or the CDA gets booted out and the matter is over. If the US congress had wanted to do any good instead of making itself look good then the voluntary approach of PICS with the multiple rating schemes was the one most likely to work. I don't think that it would stop 16 year olds from seeing pornography but since children of that age are in most jurdisdictions permitted by law to engage in sex on their own account it seems a bit bizare to prohibit them from seeing pictures of sexual acts. The problem with Firefly is that its a good(ish) idea baddly implemented. The much vaunted "agent" technology uses only a very primitive nearest neighbour type match. There is no attempt to draw structural inferences from the material, such as abstractions. For example if I enjoy Dire Straights and Peter Gabriel then a shop assistant would peg me as a late 70s rock fan and point me towards the Fleetwood Mac and such. Firefly has 50% of the structure needed to produce interesting matches but lacks the ability to make inferences. At least if it is the same technology as Ringo, the previous generation. This shortcomming of Ringo means that it is very slow work training it. To get a useful measure it needs hundreds of data points. When I visited I was faced with page after page of US 90s chart bands which I've not heard of and have no interest in. Phill

1 0