December 2003 - cypherpunks-legacy

thoughts on RC4
by perry＠imsi.com 17 Dec '03

17 Dec '03

I've been looking at the RC4 (or alleged RC4) code a bit. Unlike most ciphers, RC4 doesn't seem to have any particular word length dependancies in its principles. That is to say, a cipher like IDEA has lots of magic numbers involved, but RC4 does not, which means that one could, in principle, extend it from being byte oriented stream to being word oriented stream without causing particular harm. (It would, of course, become incompatible, but thats not a real issue.) Can anyone see any reason why one could not change RC4 to being a word oriented stream cipher, call it "ERC4"? The reason I ask is because this would speed things up by a factor of four on 32 bit machines, which would mean modest hardware could possibly break 100mbps speeds. The 64 bit extension on 64 bit RISC processors could go far, far, faster still. This is a real consideration in the protection of network traffic, where extremely fast encryption in software has been a stumbling block. Perry

7 9

RC4 Legal Issues
by hughes＠ah.com 17 Dec '03

17 Dec '03

Some general words on trade secrets. Trade secret law is eminently sensible. It grows out of common law and the merits and facts of real situations regarding information. Trade secret law does not attempt to reverse the disclosure of information, which would be contrary to the properties of information. It does not require that people forget something they have learned. Nor does trade secret law force tribute upon those who use that knowledge, as patent law does. It does not restrict the transmission of information, as copyright law does. If, however, you tell someone you're going to keep a secret, and they compensate you for that promise (i.e. consideration in a contract), then the law expects you to uphold your promise or make good the harm that you've caused. Lacking an agreement, the holder of the agreement has no recourse. In a cryptographic world, the model of trade secret law is worth considering. It concerns only information and agreements between individuals. Eric

1 0

Re: RC4 compatibility testing
by thad＠pdi.com 17 Dec '03

17 Dec '03

To: cypherpunks(a)toad.com Subject: Re: RC4 compatibility testing >> "Perry E. Metzger" <perry(a)imsi.com> writes: >> >> I'm not familiar with this term, "submarine" patent application. But >> don't they have one year from the date of first publication to apply for >> a patent? It seems that this could count as first publication, so they >> would have one year from now to get their patent application in. As I >> said before, the NSA has indicated similar plans if Clipper is ever >> reverse engineered. >> >> Hal >> >> A "submarine" patent is one that was filed long ago, but kept from being issued by various ploys. Because the patent exists for 17 years from date of being granted, there is an incentive to delay the granting of the patent. Of course, patenting the invention makes it public too, which you might want to avoid, especially if you'd like to have a world-wide market on a cryptographic product. Like RC4, for example. Once it is patented in this country, anybody from the rest of the world could copy it. Once you find somebody you'd like to go after, you can speed up the process. The patent process runs pretty slow on its own, but you can slow it down further still by delaying correspondence with the patent office, by not paying fees quickly. I think that there is one final fee that must be paid after the patent is approved, but before it is granted, that you can just hold off on for a long time. thad Thad Beier Pacific Data Images 408)745-6755 thad(a)pdi.com

1 0

privacy in Unix environment
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

Hello everyone, here is a question well suited for the c'punks. I'm looking for some kind of utility that will allow script files to be run, to spawn off processes, but will wipe out environment and "ps" info from being read. i.e. imagine that the commands being called must shield their arguments and environment from the "ps" command run on a system. the ideal program would let me run csh scripts but make all the unix commands called (sort, grep, whatever) invisible to other users on my local system. can it be done? note: I am aware of the trick of using symbolic links to hide command names. tx. bye

6 5

Re- PRIVACY REGULATIONS
by Ron Bardarson 17 Dec '03

17 Dec '03

Mail*Linkš SMTP Re: PRIVACY REGULATIONS I've upload the text files containing a sample Writ of Habeus Corpus to wimsey. They compress down to 20 K and a 60 K post seemed inappropriate. Look in /uploads for habeus.zip at ftp.wimsey.bc.ca

1 0

key signing
by Tom Allard 17 Dec '03

17 Dec '03

Hmmm... I requested my key from the MIT key-server and it came back with two unknown signatures. So I requested those two keys, only to find that they were Bill Clinton and Al Gore. I've never met either of them (although I have seen Al Gore jogging through Rock Creek Park). Those keys had signatures also, so I got the signator's key as well, only to find that it was "Hillary's" key. Type bits/keyID Date User ID pub 384/23BDC6F9 1980/01/01 William J. Clinton <president(a)whitehouse.gov> sig CC3D9213 (Unknown signator, can't be checked) sig DE09D78D (Unknown signator, can't be checked) Type bits/keyID Date User ID pub 384/DE09D78D 1980/01/01 Albert Gore <vice-president(a)whitehouse.gov> sig CC3D9213 (Unknown signator, can't be checked) sig DE09D78D Albert Gore <vice-president(a)whitehouse.gov> sig 23BDC6F9 (Unknown signator, can't be checked) Type bits/keyID Date User ID pub 1024/CC3D9213 1993/12/25 Hillary Rodham Clinton <bimbo(a)whitehouse.gov> sig CC3D9213 Hillary Rodham Clinton <bimbo(a)whitehouse.gov> rgds-- TA (tallard(a)frb.gov) +-+ I don't speak for the Federal Reserve Board, it doesn't speak for me. |X| pgp fingerprint: 10 49 F5 24 F1 D9 A7 D6 DE 14 25 C8 C0 E2 57 9D +-+

1 0

e$: Multi-Industry Coalition Framework - NII (fwd)
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Thought you folks would want to see this... >PRESS RELEASE > >FOR IMMEDIATE REALEASE CONTACT: Charles N. Brownstein >September 12, 1994 703-620-8990 > >MULTI-INDUSTRY COALITION SETS TECHNICAL FRAMEWORK >FOR THE NATIONAL INFORMATION INFRASTRUCTURE > > > >Washington, D.C. -- Today, more than forty leading communications, >computing, and services companies proposed a consensus vision of the >architecture required for tomorrow's information superhighway. In addition, >the Cross-Industry Working Team (XIWT) members detailed an example of a key >component of the National Information Infrastructure (NII) - digital cash. > >The two white papers, 1) An Architectural Framework for the NII and 2) >Digital Cash, Tokens and Payments in the NII, will be presented to the >President's NII Advisory Committee tomorrow at its meeting in New York. > >"These papers provide a technical vision and goals for the NII that cut >across a range of industries," said Robert Kahn, President of CNRI and >chair of the XIWT Executive Committee. "They provide a common foundation >for thinking about the objectives and technical requirements of the NII." > >In its Architecture paper, XIWT calls for an NII that promotes >interoperability and provides universal access, privacy, protection, >intellectual property, security, job creation and commerce in a competitive >business environment. Based on these objectives, XIWT defines the NII in >terms of a Functional Services Framework -- a model used to characterize >the NII by function and certain key characteristics. > >According to this model, the NII has three basic components: applications, >enabling services, and physical infrastructure. Together, these components >include all the NII's information and transporting machinery, the networked >software tools that facilitate manipulation and movement of digital >information, and the information processing activities of NII users. > >To meet the goals outlined for the NII, XIWT recommends that each of these >components be addressed in terms of functionality (what it does), trust >(the conditions under which it operates), and control (how it is managed). > >XIWT also provides a Reference Architecture Model for the NII -- a >description of the system in terms of the interconnection of the functional >elements of the system and the interfaces between them. XIWT identifies >four functional elements: 1) appliances: 2) networks; 3) resources; and 4) >control points. In addition, it identifies seven categories of interfaces >and protocols needed to integrate these elements and make them >interoperable. > >The Digital Cash report defines ways in which the NII will facilitate >existing and new forms of commerce. "It describes the functional >requirements and technical options for conducting everyday financial >transactions in networked electronic settings with the ease and certainty >of today's cash economy -- and with more security and control," said Dan >Schutzer of Citibank who chairs the XIWT Applications Services Working >Team. > >"The flexibility and choice implicit in the architecture we have described >will be a boon to the users of the NII and provide a challenging but >fertile business environment for savvy companies in many different >industries," said Niel Ransom of BellSouth, who chairs the XIWT >Architecture Working Team. "The members of XIWT are committed to making it >happen." > >The XIWT papers quickly received praise from the White House. "By bringing >together the views and technical recommendations of such a diverse group of >U.S. companies, the XIWT has made significant progress in moving the work >on the NII another important step forward." said Vice President Al Gore. >"We commend the work they have done so far and urge them to continue >working to define the technical aspects of the NII." > >The Cross-Industry Working Team (XIWT) was formed in 1993 to develop a >technical vision for the NII, XIWT members include over forty companies >from a range of U.S. industries. Membership list attached. > >### >PLEASE NOTE: Copies of XIWT's white papers are available in hard copy or >on-line. Please call Charles N. Brownstein at 703-620-8990, or access via >Internet from the XIWT Home Page at ><http://www.cnri.reston.va.us:3000/XIWT/public.html> > >Charles N. Brownstein >Executive Director >Cross-Industry Working Team >Corporation for National Research Initiatives >1895 Preston White Drive >Suite 100 >Reston, VA 22091 > >Tel: (703) 620-8990 >Fax: (703) 620-0913 > >Internet: cbrownst(a)cnri.reston.va.us > > > > > > ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

2 1

Re: thoughts on RC4
by m5＠vail.tivoli.com 17 Dec '03

17 Dec '03

Carl Ellison writes: > >Can anyone see any reason why one could not change RC4 to > >being a word oriented stream cipher, call it "ERC4"? > > (1) You could conceivably go to an array of 65K short values and retain the > permutation but I wouldn't try to go to an array of longs. I don't have > 32GB of RAM on my workstation. Perhaps some improvement on RISC architectures could be achieved by using four arrays, 32 bits wide by 256 entries long. The arrays would mirror the single array in the original code, except that the "interesting" byte would be at a different position in each. Then, the main encryption loop could be unwound so that you'd do four operations to each word, one from each array to hit the four bytes. (You'd do the increment/swap between each one.) This *might* be worthwhile. (On an Alpha, you'd have 8 arrays...) | GOOD TIME FOR MOVIE - GOING ||| Mike McNally <m5(a)tivoli.com> | | TAKE TWA TO CAIRO. ||| Tivoli Systems, Austin, TX: | | (actual fortune cookie) ||| "Like A Little Bit of Semi-Heaven" |

1 0

Re: (fwd) A new PGP
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> > This posting is a call for participation in a complete rehash of PGP to > > parallel the existing PGP effort in the US. All contributions are welcome, > > although any cryptographic material from the US won't be usable by anyone else, > > so it'd be best if all crypto work was done outside the US. I am working on a crypto package. It will be able to read and write Selane, PEM and PGP messages and to handle (and convert where possible) all keys. I am writing in C++. And I am sitting in Germany. ;-) Who is interested in discussing the design of such a program? BTW: Who defines new tags in the PGP format? Phil Zimmermann? Hadmut Danisch E.I.S.S. (European Institute for System Security, University of Karlsruhe)

1 0

Re: [CyberCash Media hype]
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

Uh, I was paraphrasing the conclusions of the article in order to convey that the authors clearly have no clue about security software. I (incorrectly) thought there was sufficient sarcasm in my post to convey that. Question - where did the below-highlighted opinion come from? Also, I do disagree with your statement "security through obscurity is no security at all." A rather high degree of security can be had through obscurity, but it is often entirely unpredictable whether or not a particlar 'obscurity method' will be secure or not (any 15 year old hiding cigarettes under the bed can attest to that). I see this as an extension of the pricipals underlying modern crypto - it could be that a factoring attack on RSA is possible but really obscure. It is simply an example of more predictable security through obscurity. Perhaps I'm pushing definitions a little too far here. At 2:45 PM 9/15/94, Chael Hall wrote: >> >>These are my favorite paragraphs. >> >>1) Proprietary == secure >> >>2) Understanding how it works == insecure > > I disagree. Proprietary is MORE secure, but security through ^^^^^^^^^^^^^^^^^^^^^^^^^^ >obscurity is no security at all. The only thing that does is separate >the proverbial men from the boys. It keeps the idiots who think they >can crack a system from touching it, but the people who know what they >are doing will learn it rather quickly. > > Understanding how it works is also not necessarily insecure either. >What about PGP? Would you rather use some proprietary methond that may >or may not have a backdoor or may not be as secure as it is touted to >be? I prefer to use something that has been proven and tested. > >Chael -j -- "It's a question of semantics, and I've always been rather anti- semantic." -Gene Simmons ___________________________________________________________________ Jamie Lawrence <foodie(a)netcom.com> <jamiel(a)sybase.com>

5 5

Re: PRIVACY REGULATIONS (A Matter of Form)
by Blanc Weber 17 Dec '03

17 Dec '03

From: Duncan Frissell >> Can't you free yourself from jail with a writ of habeas corpus ad >> subjiciendum from John Doe? > >But you have to know how to write one. > >brad > But if you proceed "in forma pauperis" you don't need to know how to write one. ............................................................................. Must a person carry around a legal dictionary in order to have all the right terms to use just in case they are put in jail and to need to select the proper procedure? (What shall it be: habeas corpus? subjuciendum? forma pauperis? I'm so confused.) "Don't leave home without it." Blanc

1 0

Wiretap Emergency
by Nathan Zook 17 Dec '03

17 Dec '03

I just spoke with Joe Barton (R) from Texas about the FBI wiretap bill. He is on a subcommittee that is hearing the bill. He has heard _no_ citizen opposition to it. I was not prepared, but he did invite me to send him my concerns :-D Congressman Joe Barton 1514 Longworth Building Washington, D.C. 20515 p:202-225-2002 f:202-225-3052 Folks, if we can generate a few hundred calls and well-thought-out faxes tommorrow, we might have some effect. I don't know a lot about him, but he seemed to be of the opinion that he didn't really know that much about the bill. It's up to us to educate him. Nathan

1 0

Re: PRIVACY REGULATIONS (A Matter of Form)
by merriman＠metronet.com 17 Dec '03

17 Dec '03

>From: Duncan Frissell > > >> Can't you free yourself from jail with a writ of habeas corpus ad > >> subjiciendum from John Doe? > > > >But you have to know how to write one. > > > >brad > > > >But if you proceed "in forma pauperis" you don't need to know how to write one. >............................................................................. > >Must a person carry around a legal dictionary in order to have all the >right terms to use just in case they are put in jail and to need to >select the proper procedure? > >(What shall it be: habeas corpus? "produce (release?) the body" subjuciendum? "Show why" (????) forma pauperis? "that's not my regular job" (????) Now you know _part_ of the reason lawyers get away with charging a bazillion dollars an hour. That's okay, though, 'cause most lawyers probably think a hash is either fried potatoes or involves corned (or roast) beef :-) It's a matter of the lingua franca of the profession. :-> Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

1 0

Re: Wiretap Emergency
by Rick H. Wesson 17 Dec '03

17 Dec '03

I believe you can write your congress person via E-Mail to FirstName.LastName(a)house.gov I was told it was up and running but I may be incorrect... -Rick

1 0

pgp 2.6.1 circumventing legal kludge
by 0x7CF5048D＠nowhere 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have examined the source to the latest modification to pgp2.6 pgp2.6.1. It appears that the +legal_kludge command parameter remains as also does the bug that prevents this code from working! (Value is used instead of Flag.) One would have thought that the bug would have been fixed or the legal kludge code would have been removed in pgp2.61. The existence of this bug was widely publicized. Perhaps the authors wish there to continue to be a way to circumvent the kludge, but can not be seen taking explicit action to fix the bug. The bottom line is that to encrypt a message to be sent to someone with an earlier version of pgp such as pgp 2.3a, one should disable the legal kludge by using the following command line: pgp +cert_depth=0 +legal_kludge=off +cert_depth=4 -eat file them My program in noklg.zip is a way to use the above feature to cause pgp to be compatible with earlier versions of pgp without the extra typing. (It supports MSDOS and OS/2). You can set up the program so that pgp shells and other programs work as originally designed, but encrypting files compatible with earlier versions of pgp. I wish that someone would store this program in at a public ftp site. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLninbg2Gnhl89QSNAQEB7QP+L2iA+ha2KCfH31O2OoG6syIWWNc7f76e rx5lQ3HpufkVIqhvw+Ff1FWR5aWIPZ2ZKfYAAHjpDiTRMJIMOs2dalx30Hjn/Jyw X6cEIGzywRpRx8oX+kX5BhxM93IblP1mHAe1e17jiwgBXfbX1yj4/loxL8aHv/cB LYB0F2go2C0= =qN3q -----END PGP SIGNATURE-----

1 0

Re: Wiretap Emergency
by Rick H. Wesson 17 Dec '03

17 Dec '03

mail -v -s "This is a test." Barton.Joe(a)house.gov < test ibd{wessorh}150: Warning: alias database /etc/mail/aliases.pag out of date Barton.Joe(a)house.gov... Connecting to mercury.house.gov. (smtp)... 220-mercury.house.gov mail server ready at Fri, 16 Sep 1994 00:15:25 -0400 220 ESMTP spoken here >>> EHLO ar.com 250-mercury.house.gov Hello ar.com (internex-ibd.ar.com) pleased to meet you 250-HELP 250-SIZE 1714821120 250-8BITMIME 250-XONE 250 XQUE >>> MAIL From:<wessorh(a)ar.com> SIZE=118 250 <wessorh(a)ar.com>... Sender ok >>> RCPT To:<Barton.Joe(a)house.gov> 250 <Barton.Joe(a)house.gov>... Recipient ok >>> DATA 354 Enter mail, end with "." on a line by itself >>> . 250 AA187868926 Message accepted for delivery Barton.Joe(a)house.gov... Sent (AA187868926 Message accepted for delivery) Closing connection to mercury.house.gov. >>> QUIT 221 mercury.house.gov closing connection OK Lets get to work boys and girls..... -Rick

1 0

Re: Wiretap Emergency; House E-Mail addresses
by Rick H. Wesson 17 Dec '03

17 Dec '03

UNITED STATES HOUSE OF REPRESENTATIVES CONSTITUENT ELECTRONIC MAIL SYSTEM We welcome your inquiry to the House of Representatives Constituent Electronic Mail System. Currently, fortythree Members of the U.S. House of Representatives have been assigned public electronic mailboxes that may be accessed by their constituents. The nature and character of the incoming electronic mail has demonstrated that this capability will be an invaluable source of information on constituent opinion. We are now in the process of expanding the project to other Members of Congress, as technical, budgetary and staffing constraints allow. A number of House committees have also been assigned public electronic mailboxes. The names and electronic mailbox addresses of these committees are listed below after the information about participating Representatives. Please review the list of participating Representatives below, and if the Congressional District in which you reside is listed, follow the instructions below to begin communicating by electronic mail with your Representative. If your Representative is not yet on-line, please be patient. U.S. REPRESENTATIVES PARTICIPATING IN THE CONSTITUENT ELECTRONIC MAIL SYSTEM. Hon. Thomas E. Andrews 1st Congressional District, Maine Rm. 1530 Longworth House Office Building Washington, DC 20515 TANDREWS(a)HR.HOUSE.GOV Hon. Joe Barton 6th Congressional District, Texas Rm. 1514 Longworth House Office Building Washington, DC 20515 BARTON06(a)HR.HOUSE.GOV Hon. Sherwood Boehlert 23rd Congressional District, New York Rm. 1127 Longworth House Office Building Washington, DC 20515 BOEHLERT(a)HR.HOUSE.GOV Hon. Dave Camp 4th Congressional District, Michigan Rm. 137 Cannon House Office Building Washington, DC 20515 DAVECAMP(a)HR.HOUSE.GOV Hon. Maria Cantwell 1st Congressional District, Washington Rm. 1520 Longworth House Office Building Washington, DC 20515 CANTWELL(a)HR.HOUSE.GOV Hon. John Conyers, Jr. 14th Congressional District, Michigan Rm. 2426 Rayburn House Office Building Washington, DC 20515 JCONYERS(a)HR.HOUSE.GOV Hon. Sam Coppersmith 1st Congressional District, Arizona 1607 Longworth House Office Building Washington, DC 20515 SAMAZ01(a)HR.HOUSE.GOV Hon. Peter Defazio 4th Congressional District, Oregon 1233 Longworth House Office Building Washington, DC 20515 PDEFAZIO(a)HR.HOUSE.GOV Hon. Peter Deutsch 20th Congressional District, Florida Rm. 425 Cannon House Office Building Washington, DC 20515 PDEUTSCH(a)HR.HOUSE.GOV Hon. Jay Dickey 4th Congressional District, Arkansas Rm. 1338 Longworth House Office Building Washington, DC 20515 JDICKEY(a)HR.HOUSE.GOV Hon. Vernon Ehlers 3rd Congressional District, Michigan Rm. 1526 Longworth House Office Building Washington, DC 20515 CONGEHLR(a)HR.HOUSE.GOV Hon. Anna Eshoo 14th Congressional District, California Rm. 1505 Longworth House Office Building Washington, DC 20515 ANNAGRAM(a)HR.HOUSE.GOV Hon. Elizabeth Furse 1st Congressional District, Oregon Rm. 316 Cannon House Office Building Washington, DC 20515 FURSEOR1(a)HR.HOUSE.GOV Hon. Sam Gejdenson 2nd Congressional District, Connecticut Rm. 2416 Rayburn House Office Building Washington, DC 20515 BOZRAH(a)HR.HOUSE.GOV Hon. Newton Gingrich 6th Congressional District, Georgia Rm. 2428 Rayburn House Office Building Washington, DC 20515 GEORGIA6(a)HR.HOUSE.GOV Hon. Bob Goodlatte 6th Congressional District, Virginia Rm. 214 Cannon House Office Building Washington, DC 20515 TALK2BOB(a)HR.HOUSE.GOV Hon. Rod Grams 6th Congressional District, Minnesota Rm. 1713 Longworth House Office Building Washington, DC 20515 RODGRAMS(a)HR.HOUSE.GOV Hon. Dan Hamburg 1st Congressional District, California Rm. 114 Cannon House Office Building Washington, DC 20515 HAMBURG(a)HR.HOUSE.GOV Hon. Dennis Hastert 14th Congressional District, Illinois Rm. 2453 Rayburn House Office Building Washington, DC 20515 DHASTERT(a)HR.HOUSE.GOV Hon. Martin Hoke 2nd Congressional District, Ohio Rm. 212 Cannon House Office Building Washington, DC 20515 HOKEMAIL(a)HR.HOUSE.GOV Hon. Ernest J. Istook, Jr. 5th Congressional District, Oklahoma Rm. 1116 Longworth House Office Building Washington, DC 20515 ISTOOK(a)HR.HOUSE.GOV Hon. Sam Johnson 3rd Congressional District, Texas Rm. 1030 Longworth House Office Building Washington, DC 20515 SAMTX03(a)HR.HOUSE.GOV Hon. Mike Kreidler 9th Congressional District, Washington Rm. 1535 Longworth House Office Building Washington, DC 20515 KREIDLER(a)HR.HOUSE.GOV Hon. Tom Lantos 12th Congressional District, California Rm. 2182 Rayburn House Office Building Washington, DC 20515 TALK2TOM(a)HR.HOUSE.GOV Hon. Thomas Manton 7th Congressional District, New York Rm. 203 Cannon House Office Building Washington, DC 20515 TMANTON(a)HR.HOUSE.GOV Hon. George Miller 7th Congressional District, California Rm. 2205 Rayburn House Office Building Washington, DC 20515 GEORGEM(a)HR.HOUSE.GOV Hon. Ed Pastor 2nd Congressional District, Arizona Rm. 408 Cannon House Office Building Washington, DC 20515 EDPASTOR(a)HR.HOUSE.GOV Hon. Bill Paxon 27th Congressional District, New York Rm. 1314 Longworth House Office Building Washington, DC 20515 BPAXON(a)HR.HOUSE.GOV Hon. Owen Pickett 2nd Congressional District, Virginia Rm. 2430 Rayburn House Office Building Washington, DC 20515 OPICKETT(a)HR.HOUSE.GOV Hon. Earl Pomeroy North Dakota, At Large Rm. 318 Cannon House Office Building Washington, DC 20515 EPOMEROY(a)HR.HOUSE.GOV Hon. David Price 4th Congressional District, North Carolina Rm. 2458 Rayburn House Office Building Washington, DC 20515 PRICE(a)HR.HOUSE.GOV Hon. Jim Ramstad 3rd Congressional District, Minnesota Rm. 322 Cannon House Office Building Washington, DC 20515 MN03(a)HR.HOUSE.GOV Hon. Pat Roberts 1st Congressional District, Kansas Rm. 1126 Longworth House Office Building Washington, DC 20515 EMAILPAT(a)HR.HOUSE.GOV Hon. Charlie Rose 7th Congressional District, North Carolina Rm. 2230 Rayburn House Office Building Washington, DC 20515 CROSE(a)HR.HOUSE.GOV Hon. Christopher Shays 4th Congressional District, Connecticut Room 1034, Longworth House Office Building Washington, DC 20515 CSHAYS(a)HR.HOUSE.GOV Hon. Karen Shepherd 2nd Congressional District, Utah Rm. 414 Cannon House Office Building Washington, DC 20515 SHEPHERD(a)HR.HOUSE.GOV Hon. David Skaggs 2nd Congressional District, Colorado Rm. 1124 Longworth House Office Building Washington, DC 20515 SKAGGS(a)HR.HOUSE.GOV Hon. 'Pete' Stark 13th Congressional District, California Rm. 239 Cannon House Office Building Washington, DC 20515 PETEMAIL(a)HR.HOUSE.GOV Hon. Cliff Stearns 6th Congressional District, Florida Rm. 332 Cannon House Office Building Washington, DC 20515 CSTEARNS(a)HR.HOUSE.GOV Hon. Charles Taylor 11th Congressional District, North Carolina Rm. 516 Cannon House Office Building Washington, DC 20515 CHTAYLOR(a)HR.HOUSE.GOV Hon. Robert Walker 16th Congressional District, Pennsylvania Rm. 2369 Rayburn House Office Building Washington, DC 20515 PA16(a)HR.HOUSE.GOV Hon. Mel Watt 12th Congressional District, North Carolina Rm. 1232 Longworth House Office Building Washington, DC 20515 MELMAIL(a)HR.HOUSE.GOV Hon. Dick Zimmer 12th Congressional District, New Jersey Rm. 228 Cannon House Office Building Washington, DC 20515 DZIMMER(a)HR.HOUSE.GOV INSTRUCTIONS FOR CONSTITUENTS The list above includes the electronic mail addresses of members who are participating in the program. However, if your Representative is taking part in the project, we request that you send a letter or postcard by U.S. Mail to that Representative at the address listed above with your name and internet address, followed by your postal (geographical) address. The primary goal of this program is to allow Members to better serve their CONSTITUENTS, and this postal contact is the only sure method currently available of verifying that a user is a resident of a particular congressional district. In addition, constituents who communicate with their Representative by electronic mail should be aware that Members will sometimes respond to their messages by way of the U.S. Postal Service. This method of reply will help to ensure confidentiality, a concern that is of upmost importance to the House of Representatives. COMMITTEES OF THE U.S. HOUSE OF REPRESENTATIVES PARTICIPATING IN THE ELECTRONIC MAIL SYSTEM. Subcommittee on Labor-Management Relations Committee on Education and Labor Rm. 320 Cannon House Office Building Washington, DC 20515 SLABMGNT(a)HR.HOUSE.GOV Committee on Natural Resources 1324 Longworth House Office Building Washington, DC 20515 NATRES(a)HR.HOUSE.GOV Committee on Science, Space, and Technology 2320 Rayburn House Office Building Washington, DC 20515 HOUSESST(a)HR.HOUSE.GOV COMMENTS AND SUGGESTIONS You can send comments about our service to the Constituent Electronic Mail System Comment mailbox, at COMMENTS(a)HR.HOUSE.GOV We will make every effort to integrate suggestions into forthcoming updates of our system. Please note, that the intended purpose of this mailbox is to support public inquiry about the House Constituent Electronic Mail System. Messages intended for Members of Congress should be sent directly to the appropriate Member of Congress at their electronic mail or postal address. UPDATES AND ADDITIONAL INFORMATION From time to time, you may want to send another e-mail message to CONGRESS(a)HR.HOUSE.GOV to see the most recent version of the list of Members and Committees using Constituent Electronic Mail. The information is also available on the U.S. House of Representatives' Gopher server at GOPHER.HOUSE.GOV in the folder Congressional Information. To learn more about information available electronically from the House, send an e-mail message to HOUSEHLP(a)HR.HOUSE.GOV Thank you again for contacting the House of Representatives' Constituent Electronic Mail System. We are excited about the possibilities that e-mail has to offer, and will be working hard to bring more Members on-line and to expand our services. This message will be updated as necessary. Honorable Charlie Rose (D-NC) Chairman Committee on House Administration

1 0

Re: C'Punks web server
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Try these: <li> Cypherpunks Berkeley <li> Cypherpunks Washington <li> Cypherpunks Maricopa <li> Cypherpunks WAIS Index <li> Vince Cate's Cypherpunk Page <li> Ein Cypherpunks-Archiv <li> Nectar <li> Magic Money Hadmut

1 0

yet another use for MD5
by *Hobbit* 17 Dec '03

17 Dec '03

After examining Tripwire and deciding that it was *way* overkill for my own purposes, I decided to cobble together my own minimalist solution to the unix file integrity problem. I call it "L5", for a variety of reasons, and have decided to present it to the community as a Useful Hack. For all I know it may have already been done elsewhere, but I haven't yet seen such a thing mentioned, despite the simple underlying concept. L5 can be FTPed from asylum.sf.ca.us:/pub/hobbit/L5.tar.Z. L5 simply walks down Unix or DOS filesystems, sort of like "ls -R" or "find" would, generating listings of anything it finds there. It tells you everything it can about a file's status, and adds on an MD5 hash of it. Its output is rather "numeric", but it is a very simple format and is designed to be post-treated by scripts that call L5. Here are some of its other features: Filenames come first, making sorting easier. Filenames are delimited in a non-[unix]-spoofable way; ending in "//". The single character after "//" indicates the file type. Scanning stops at device boundaries, so L5 doesn't go slogging through random NFS trees or "tmpfs"es unless you tell it to. You can tell it not to walk any directories lower than the one[s] you handed it as arguments. [It always walks one level of its given arguments.] You can tell it to only print the filenames. If a file looks like a script of some kind, it is shown as type "K" instead of "F". Useful for finding those setuid shell scripts... MD5 hashing can be output in hex, Tripwire's radix64 format, or not at all, as you specify. The hex hash for a given file is the same as that of the CERT "md5check". You can feed it a list of files or directories to check as its standard input. You can have it do its hash *on* standard input. This feature is useful for doing things like "l5 /critical/files | l5" to get a small but secure summary hash. It is small and reasonably fast. Some of it is based on code from Tripwire, but it doesn't use a DBM database and only offers one hash option. The MD5 code, in particular, is the endian-independent version from Tripwire, which builds almost anywhere. Selection of files to ignore certain changes in is undoubtedly less versatile, but you can always filter the output through further scripts before, for example, diffing your "old" system snapshot against your "new" system snapshot. [The rest of this file is in the README that comes with L5.] _H*

1 0

Re: RC4 Legal Issues
by rparratt＠london.micrognosis.com 17 Dec '03

17 Dec '03

Phil Karn <karn(a)qualcomm.com> wrote: > This was my understanding *before* the recent jury decision in the > Microsoft vs Stac Electronics countersuit. When Stac sued Microsoft > for infringing their patents on disk compression, Microsoft > countersued Stac for trade secret infringement for having > reverse-engineered some hidden system calls in MS-DOS. Not only did > the jury uphold Stac's bogus software patent, but they also found in > favor of Microsoft on their ridiculous trade secret accusation! > > Needless to say, this creates a very troubling precedent. Now you can > now apparently infringe a trade secret merely by examining fully > public information (e.g., commercially available object code.) Do juries get to decide on points of law and create precedents in the US legal system? No wonder you have such odd laws. In the UK, legal argument is taken by the judge in the absence of the jury, (and in most civil cases there is no jury anyway -- I think that we only have juries in criminal cases and libel, but someone more knowledgable may be able to correct this). Anyway, the role of the jury is to decide on the facts e.g: A says X, B says Y, who do we believe? Also, the ability of judges in lower courts to create precedents is restricted. A case like Microsoft v Stac would end up going right up through the appeal process. -- Richard Parratt.

1 0

C'Punks web server?
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

This may sound like a stoopid question, but didn't someone mention a c'punk web server (or something similar) a while back? If something like this exists, where's the home page located? Thanks, - paul

2 1

C'Punks web server (again)
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

I found it, for anyone interested, by a reference on the EFF Web Server: http://soda.berekeley.edu/pub/cypherpunks/Home.html - paul

2 1

FREE patent searches
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

I haven't seen this here, so I'm forwarding it all: Date: Fri, 9 Sep 1994 09:32:15 -0400 From: srctran(a)world.std.com (Gregory Aharonian) Message-Id: <199409091332.AA16709(a)world.std.com> To: patents(a)world.std.com Subject: PATENT SEARCHING EMAIL SERVER is now open for business APS PATENT SEARCHING ARRIVES ON THE INTERNET!!!!!!!!!!!!!!!! (well only in a real limited way for the time being :-) A few weeks ago, I announced plans to provide limited patent searching over the Internet, where you can get a list of patents by specifying the class/subclass. I have decided to do this in two stages. To test out the email-server software I am writing, I first plan to allow email requests to retreive parts of the PTO classification manuals (see below). Once things are running smoothly, I will then add the capability to retrieve patent titles by class/subclass. So feel free to start sending in requests to the address listed below: search(a)world.std.com wish me luck, and start thinking philanthropic. By the way, if someone has a machine readable version of the WIPO international classification system, please send it to me so I can add it to the server. At some point when I have lots of equipment, I will sort US patents by their international classification. Greg Aharonian Internet Patent News Service ==================== Internet Patent News Service September 1994 PATENT TITLES EMAIL SERVER search(a)world.std.com The Internet Patent News Service is pleased to announced the availability of the Patent Titles email server, where people can retrieve lists of patent titles dating back to 1970 for any USPTO class/subclass, and patent numbers for additional patents dating back to the 1800's. The Patent Titles email server is the first step in our efforts to make the entire USPTO APS patent text database system accessible over the Internet. Approximately one gigabyte of data has been prepared and attached to the Internet. As all of the equipment and network access is borrowed, I am limiting access to an email server until I get a better feel for demand for the data, and until I can raise funding to set up a proper Internet server. Unless the bandwidth and processing load overwhelms the equipment I am borrowing, the service will be free. To use the email server, send requests to the Internet address: search(a)world.std.com using any of the following commands sent as text in the body of the email message: SENDTO account-name(a)internet.site.adr This command is mandatory of all requests and is where you specify the email address you want the information sent to. Occasionally From: lines in email addresses do not provide a correct return address (at least in my experience doing the Internet Patent News Service). SEND INTRO SEND HELP Either of these commands will return this message. SEND UCLASSES This command will return an index to the approximately 400 patent classes that are currently being used, for example: Class: 69 Leather Manufacturers SEND UCLASS XXX This command will return that section of the USPTO's Manual of Classification covering patent class XXX. For example, the command "SEND CLASS 69" would return a list of all of the subclasses in Class 69 by number and title. These files range in size from 5K to 120K. What follows is a section of Class 69: Subclass Subclass Number Title 1 MACHINES 1.5 .Belt-stretching 3 .Horse collar shaping 4 .Horse collar stuffing SEND UCLASS COMPUTING This command will return those sections of the USPTO's Manual of Classification covering patent classes 395 and 364, the two main classes dealing with hardware and software. SEND IPNSINFO This command will return an introductory message to my Internet Patent News Service. SEND CONSULT This command will return an introductory message to my patent searching consulting services I offer. SAVE COMMENT This command lets me know your request is actually a comment about the email server operation, or any inaccuracies you detect in the patent information being sent out. As I am parasiting the equipment to run the server (which basically means that I operate the server at nite and on weekends), please send your requests in at the end of the workday or on weekends. Within a day or so, you will receive back ny email whatever you requested. SECURITY A very important concern for anyone using this email server is secrecy, that what they are searching for is not revealed to others. As a potential inventor, I appreciate this as much as anyone else. While I plan to save the email addresses of people who use the server (but not their search request), no other information will be retained. The email address information will be saved to study who, and how often, people are using the server. I would appreciate any suggestions on how to ensure security beyond this. Please excuse any mishaps that occur as I get this service off the ground. This email server is a classic hack that will get better in time as people use it. In turn, the experience gathered in running the server will be invaluable in demonstrating the feasibility of making massive amounts of patent data available over the Internet. Also, get ready for that voluntary registration fee I mention in my intro piece to the Internet Patent News Service. If the Patent Titles email server is successful, and you all like it, this fall I plan to coordinate an effort to put all of the patent abstract information since 1970 onto the Internet, making it available through email servers, Gopher, WAIS and Mosaic. But first things first, getting the Patent Titles email server working. Greg Aharonian Internet Patent News Service

2 2

None
by Anonymous 17 Dec '03

17 Dec '03

2 1

The mother of all FAQs
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Tim May says: > I've decided to give my FAQ a name, to prevent confusion. "THE > CYPHERNOMICON" is what I call it. (If the reference is obscure, I can > explain.) > > The main file is 1.3 MB. It takes about 12-15 minutes to transfer This is really the "Mother of all FAQs" - the largest I've seen so far are less than 500k! Actually, I've spotted a trend in recent FAQs - they're no longer a list of Frequently Asked (or Answered ;-) Questions, but a sort of encyclopaedic guide to the group/topic. Well, if newbies _read_ this one, the SNR on this list should soar exponentially! ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

2 1