December 2003 - cypherpunks-legacy

patent info URL
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

Since various intellectual property debates and questions come up ("plague") periodically, it seemed like it'd be a good idea to post the following URL: http://www.patents.com/ Its run by a small patent law firm and has a series of well-linked, snappy FAQs on issues pertaining to intellectual property, patents (including some on "I had a really clever idea--what should[n't] I do?"), relevant links, etc. etc Ted

1 0

Where to find Internet growth stats?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

I read in a speech by Rutkowski that the latest Internet growth stats are published twice a month. I search at the Internet Society site, and other usual suspects, but to no avail. URL, anyone? TIA, -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

hardware encryption
by cman＠communities.com 17 Dec '03

17 Dec '03

I'm looking for add-in cards that implement DES and/or RSA for either a PC (ISA/EISA/whatever) or a Sun (S-Bus), preferably a Sun. Also, the RSA card would need to implement a 1024 bit modulus. Any tips or pointers? I've got the list of chip makers in _Applied Cryptography_, but the ones I've contacted so far don't seem to know anything about cards, even if they admit that they have the chips. Thanks, Doug

1 0

Triple-DES controlled?
by Goh Seow Hiong 17 Dec '03

17 Dec '03

Could someone confirm whether the US export restrictions apply to Triple-DES? If so, are there exceptions as in the case of DES (e.g. for banking or financial applications). Thx. SH

2 1

700_dig
by John Young 17 Dec '03

17 Dec '03

MH has provided a transcript of Pat Robertson's show on digital cash of March 8, 1995. It includes remarks by David Chaum, Dave Banisar, Steven Levy and others. 700_dig (about 14K)

1 0

WDM_zum
by John Young 17 Dec '03

17 Dec '03

RH has provided an informative article on wavelength division multiplexing (WDM) from the August 7 InfoWorld: "Boost in optical-fiber communication capacity is just over the rainbow," by Bob Metcalfe, the founder of 3Com. WDM_zum (about 5K)

1 0

See y'all in a while....
by Phil Fraering 17 Dec '03

17 Dec '03

I'm leaving the list for a while while I try to work out a different way of accessing the net. In short, I've grown dissatisfied with my ISP and need some time to think things through before making other arrangements. It's too frustrating sorting through all of this mail without proper filtering scripts like I had set up back at srl03. And news is kind-of beside the point: the news server is always full, and rejects any attempt to post because of lack of space. In the meantime, while y'all discuss all that stuff about logical proofs and the like, please, _please_, stay away from crosswalks? I'll probably make another attempt at downloading pgp262s.zip before I shut this down... the first two times the modem (I think theirs) went flaky and dropped the connection on me. Okay. time to see if the signature service works. Later, dudes. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMBwQDCoTheIowlstareqnot8whaththeyEseemMI5rculIym8xjzYV8C mErjcooperUcoopermcooperqBviplMp =aBGi -----END PGP SIGNATURE----- +----------------+Quote from _Infinite In All Directions_, F.J. Dyson-----+ | Phil Fraering / \"The English Hierarchy, if there be anything unsound in| | pgf(a)tyrell.net\ /its constitution, has reason to tremble even at an air | +----------------+-pump or an electrical machine."---Joseph Priestly------+

1 0

Re: MS Money password problem
by dochobbs＠wwa.com 17 Dec '03

17 Dec '03

I'm not sure if this has been mentioned or will help, but this company makes crakers for quicken, word and wordperfect (not sure about M$ money though). http://gn2.getnet.com:80/crak/ email: johnk(a)indirect.com _____________________________________________________________ dochobbs(a)wwa.com M.D. Hobbs mhobbs(a)rad.rpslmc.edu http://miso.wwa.com/~dochobbs finger for my pgp key I am human and nothing human do I count alien.

1 0

RSA Catalog
by John Young 17 Dec '03

17 Dec '03

For those who've not yet fondled RSA's sleek "Security Solutions Catalog," it can be virtually diddled at: http://www.rsa.com/rsa/sscatw95/P67.HTM

1 0

Re: Where to find Internet growth stats?
by brendan＠Mail.RAth.PeachNet.EDU 17 Dec '03

17 Dec '03

http://www.tic.com/mids/midshome.html is --cut->>Matrix Information and Directory Services, Inc. (MIDS) is a corporation founded by Smoot Carl-Mitchell and John S. Quarterman. Eric McKinney is Assistant Editor. <<--paste- --- Brendan Mullen brendan(a)chugalug.cosmic.uga.edu Athens GA USA

1 0

Re: Triple-DES controlled?
by Rich Salz 17 Dec '03

17 Dec '03

>I have not heard of export licenses being granted for 3DES. Didn't the ANSI financial committee just adopt 3DES (over NSA objections)? Presumably they consider the export situation solved/solvable. /r$

4 4

Only 1/3 of Government Computers Down So Far
by KALLISTE＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Allegations Regarding Vince Foster, the NSA, and Banking Transactions Spying, Part XV by J. Orlin Grabbe The world of money laundering is a difficult one. What are you going to do when your wire transfers to the Caribbean and other offshore centers won't go through? What are you going to do when one-third (as of August 8, 1995) of certain government computers are down with a virus? Or is it a worm? Or an octopus? Did the NSA, in its zeal to modify the PROMIS software to spy on banking and other transactions, create a massive security hole in computer systems sending wire transfers? Well, I do hear it is a nice time to go vacationing in the islands, even for day trips! Perhaps FinCEN could relocate to Havana? [Note to Julie Franklin: Over here in Reno, we're always last to get the news. Well, I'm a taxpayer. *Please* put me on your list. In the future please fax all computer disconnect info to 702-829-0852. Thanks.] Which brings us to the subject of Ed Meese. At the end of Reagan's second term as governor of California, Meese needed a new job. He worked at Rohr Industries for a while. But it didn't suit him, so *Richard Mellon Scaife* set up the San Diego Center for Criminal Justice on condition that Ed Meese be its Director, a post Meese held 1977-1980. Later, after Ed Meese became Attorney General of the U.S. and the the people-tracking PROMIS software was stolen by the U.S. Justice Department using (according to a federal bankruptcy judge) "trickery, deceit, and fraud", Ed Meese's friend Earl Brian--then owner of Financial News Network, UPI, and Hadron corporation--proceeded to market the software all over the world, as well as to U.S. intelligence and law enforcement agencies. One agency that acquired the software was FEMA, the Federal Emergency Management Agency, which proceeded to create a data base of political dissidents to be rounded up in event of a national emergency. (Like any information, once collected it found multiple uses.) This data base was called MAINCORE, and the FEMA MAINCORE system was operated out of the basement of a building in Culpeper, VA. Journalist Danny Casolaro, with the help of Alan Standorf, was able to get printouts of this totalitarian application of the PROMIS software just prior to his demise. (When a member of congress attempted to question Oliver North about the FEMA MAINCORE data base, he was rudely shouted down by the chairman of the investigative committee.) Another agency that put the software to use was the Wackenhut Corporation. It used the enhanced PROMIS to keep track of critics of the nuclear industry, an area in which *Richard Mellon Scaife* has a vested financial interest. Now Mellon bank in Pittsburgh finds itself embroiled in very serious money laundering charges. Do these facts explain why the Little-Rock connection to the theft and modification of the PROMIS software for the purpose of spying on banking transactions is a subject carefully avoided in Scaife-sponsored political advertisements? Is this why the Mena-drug-smuggling, Little-Rock-money-laundering operation allegedly stops with Bill Clinton? Is this why the connection of Vince Foster both to bank spying and nuclear espionage has been carefully downplayed? Do Scaife's investments in the "terrorism industry" have anything to do with recent media hyping of the imminent threat to the U.S. of "international" terrorism? Scaife's exposing of the sins of the Democrats has certainly served a useful purpose. But don't think the story stops with Bill Clinton. Perhaps the reason that Mr. Kenneth Starr's independent investigation into the Whitewater affair has gone so slowly is that Mr. Starr, in order to nail Bill Clinton, has to also nail a number of high-ranking Republicans? Well, Mr. Starr, let the facts fall where they may. I have confidence in you. You do want to be Attorney General someday, don't you? If you can find your way to do the right thing, you'll certainly deserve the position. Otherwise the wily hackers of the world may have to do your job for you. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMChlMWX1Kn9BepeVAQHbhgP/bSlSNnUClp4HPEDiB22JGHrqvMa5B6h8 LW0rR7eZdD2ub9CUj/HBfIrnU4mekw6MfmExxuy+mva1Z5MPsZKuE1qvxWBFHK5S TzMFsPBsZNPH2GEDIQHZp/rIQeKYDsfjOp1OLVUPD9MA4tlTOQPgQ5RVzzKi+tEF K1+Uxvy1lQ4= =5pPJ -----END PGP SIGNATURE-----

2 1

Re: www remailer interface
by Will French 17 Dec '03

17 Dec '03

> 1. removing the hardwired > 2. removing the hardwired and forcing you to chain > 3. keep the hardwired in and use some 'established' remailer > or one the group can come to a consensus on. Given the second possibility, I see no reason to hardwire a remailer. It really will make people suspicious! I can easily imagine someone deciding not to use that remailer again, just on general principles. And anyway, chaining is not always necessary, especially if the sender is at a public Web terminal or using an anonymous Web proxy. The remailers don't enforce chaining, why should you? Will French <wfrench(a)interport.net>

1 0

[Meaningless] Vote.
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Fellow Cypherpunks: Below is the URL of an "Online Forum" page to allow 'Net citizens vote on various, (usually boring) issues. >************************************************** > VOTELINK brings the Voice of the Internet > To today's hot news topics. To make your voice > "heard round the world" go to: > > http://www.votelink.com >*************************************************** So last week I was surfin', wastin' time, and drinkin' a brew, and I happened by. I was asked to vote on some mundane topic [I forget what]--and instead I suggested a "World Vote" topic I liked better, and, sure enough, they put it up this week: [I was shocked when they e- mailed me!] :-) >Should Phil Zimmermann be prosecuted for allowing > release of his PGP encryption program on the > Internet? > > > PRO: ITAR export restrictions exist. > Cryptographic software, like PGP, is > considered a weapon of war. -- more [somebody shoot me with PGP, and nothing else!] > > CON: Imprisoning Zimmermann for export > violations would be an unconstitutional restraint of > free speech and privacy rights. -- more [guess how Jim Ray voted...] ;-) OK. Far be it from me to suggest vote fraud [there aren't too many Libertarians in cemetaries anyway :)] but I think certain cypherpunks might want to go "vote" this week, if you have the time to waste. Please vote *only* once, and tell all your buddies. Thanks. JMR - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCbswG1lp8bpvW01AQGDeAP8DZiWwIsABi7sy3MuyZo5QMFB/lf0ghIg 8zcE/WGaPocvwqlxwBW3DckSQw/vM8cqyv3LGPjQwC2il5HpELdyS44Rd4tQ/Qjb p0P+6mZh0Qk8domUuadX877Lk8hcnh7ydypCL3WPigSvh3tYYGwnL00Q6vi6nKzj YQ7092OOn80= =ebKB - -----END PGP SIGNATURE----- Regards, Jim Ray "The people will again respect the law when the law again respects the will of the people." Jim Ray, Campaign '92 - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCbtzyoZzwIn1bdtAQHUowGA1pSgF1+AVBDi0Jz8H7dd4XIvbXNulPvF SIRzwHrNMApJoz2mX34r+8hndI3nwREW =hz/N -----END PGP SIGNATURE-----

1 0

Re: Welfare Solution #389
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tom Mix wrote: > I could imagine that a junkie who takes some old lady's purse to buy > heroin is victimizing the old lady, but is a student smoking marijuana > and drinking a beer victimizing anyone? What about a heroin junkie who > is rich, though unpopular, and never committed any other crime? Have > they made themselves a victim of something? Maybe so...the needle, > the darkness, the overwhelming Love Which Cannot Be Real. But the > state shouldn't recognize "mystical entities" like this as perpetrators. > The person in this case is making a choice; they will do no harm but > to themselves. Are they then a victim, or a perpetrator, or both? -- Excerpt from "Victim" (c) County Mountie Productions -- {Passage sung by purse snatcher who is mugging little old lady.} "I knocked her dowm, stepped on her face, Slandered her name all over the place. Hit her with my fist, kicked her with my shoe, "I said, "Lady, I'm a victim. A victim, just like you. I'm a victim of a Bad Attitude." -- When this song was recorded, it was somewhat tragically ironic, but it proved to be prophetic. I believe that "Bad Attitude" is now a recognized psychiatric illness, allowing one a reduced sentence and monetary support from the government while the poor victim of "Bad Attitude" takes "the cure" on the beaches of the Hawaii. I know a man in Tucson who worked all his life, spent all of his money recovering from an accident, and then couldn't get welfare money when he needed a few more months of recuperation before returning to work. The lady who turned him down made the mistake of commenting that it was a shame he wasn't a drug addict, because then he would "qualify" for welfare. The man lived on the streets for several months, barely surviving, until he was healthy enough to work, and he has never paid a dime in taxes since then. What is even more atrocious is that a church that he attended occasionally turned down his request for minimal assistance, because their policy was to only help those who qualified for government benefits (in order to help weed out the "bums"). He wasn't "entitled" to the church's help as a Christian, but he would have been, as an agnostic junkie. I met the man in the park, and gave him a place to live for the last month of his recuperation, so he could shit, shower, shave and use it as a base to look for work. In the next two years, the company he went to work for bought around $50,000 worth of computers from me. Before this experience, the man was a "God and Country" type of individual who probably would have turned in anyone he found was "cheating" on their taxes. Now he is perfectly willing to go to jail rather than give the robber barons their booty.

1 0

Oct 13-14 IEEE International Symposium on Wearable Computers(ISWC)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Sun, 24 Aug 1997 03:22:15 -0500 From: <testarne(a)media.mit.edu> To: technomads(a)UCSD.EDU Subject: Oct 13-14 IEEE International Symposium on Wearable Computers (ISWC) Actually, Steve, can you use this one instead? Thad Starner MIT Media Laboratory Wearable Computing Project -------------------------------------- Oct 13-14 IEEE International Symposium on Wearable Computers (ISWC) The International Symposium on Wearable Computers (ISWC) is the first annual conference on computers that are worn as clothing. The conference is peer reviewed and sponsored by the IEEE Computer Society. The purpose of ISWC is to bring together researchers, product vendors, research sponsors, and other interested persons to share information and advances in wearable computers and augmented reality. The conference will include paper presentations, exhibitions, and poster sessions. Registration is now open at http://mime1.marc.gatech.edu/wearcon/ Reserve your space before SEPTEMBER 1ST for the best hotel rates. A list of topics from the CFP and the advance program is below. Please forward! Thad Starner MIT Media Laboratory Wearable Computing Project -------------- >From the CFP: CONFERENCE TOPICS The topics for ISWC may include: o Applications, including affective computing, augmented reality, computer-supported collaborative work, computer-supported cooperative living, ubiquitous computing, personal imaging, consumer applications, industrial applications, medical applications, military applications, and software agents o Ergonomics o Future of wearable computing o Hardware, including head-mounted display technologies, batteries, power management, heat dissipation techniques, industrial design techniques, and manufacturing packaging issues o Human interface issues, including hands-free user speech recognition, mobility-challenged users, user modeling, user evaluations, and health issues o Networks, including wireless networks, on-body networks, the World Wide Web, and networked vs. standalone computers o Operating system issues o Social implications o Software architectures o Training, including performance support systems ---------- International Symposium on Wearable Computers Advance Program Monday, October 13, 1997 8:00 - 8:30 Coffee, Put Up Posters I 8:30 - 8:40 Opening Remarks 8:40 - 10:10 Evaluation Studies Evaluation of three input mechanisms for wearable computers by B. Thomas, S. Tyerman, and K. Grimmer Wearable computers for performance support by J. Ockerman, L. Najjar, and C. Thompson A field usability evaluation of a wearable system by J. Siegel and M. Bauer 10:10 - 10:30 View Posters I, Demos, Coffee 10:30 - 12:00 Industrial and Business Applications Mobile approach support system for future machine tools by R. Daude and M. Weck Factory Automation Support Technology (FAST): A new paradigm of continuous learning and support using a wearable by C. Thompson, L. Najjar, and J. Ockerman Wearable computers for three-dimensional CSCW by M. Billinghurst, S. Weghorst, and T. Furness III 12:00 - 1:30 Lunch 1:30 - 3:00 New Hardware, Software Technology Eyeglass-mounted displays for wearable computing by M. B. Spitzer, N. M. Rensing, R. McClelland, and P. Aquilino Intrabody buses for data and power by R. Post, M. Reynolds, M. Gray, J. Paradiso, and N. Gershenfeld Software organization for dynamic and adaptable wearable systems by S. Fickas, G. Kortuem, and Z. Segall 3:00 - 4:00 View Posters, Demos, Coffee 4:00 - 6:00 Invited Talks Dick Urban, DARPA Rick Satava, DARPA Jerry Bowskill, BT David Mizell, Boeing 6:00 - 6:30 Take Down Posters I, Demos ---- Tuesday, October 14, 1997 8:30 - 9:00 Coffee, Put Up Posters II 9:00 -10:00 Personal Applications An historical account of wearable computing by S. Mann A touring machine: Prototyping 3D mobile augmented reality systems for exploring the urban environment by S. Feiner, B. MacIntyre, T. Hollerer, and A. Webster 10:00 - 10:30 View Posters II, Demos, Coffee 10:30 - 12:00 New Sensors, Displays Tactual displays for wearable computing by H. Tan and A. Pentland Affective wearables by R. W. Picard and J. Healey A sensate liner for personnel monitoring applications by E. Lind, S. Jayaraman, R. Rajamanickam, R. Eisler, and T. McKee 12:00 - 1:30 Lunch 1:30 - 3:00 Communications Canard: A framework for community messaging by P. Chesnais Metronaut: A wearable computer with sensing and global communication capabilities by A. Smailagic The wearable remembrance agent: A system for augmented memory by B. Rhodes 3:00 - 4:00 View Posters II, Demos, Coffee 4:00 - 5:30 Using Wearable Sensors A wearable computer based American Sign Language recognizer by T. Starner, J. Weaver, and A. Pentland Stochasticks: Augmenting the billiards experience with probabilistic vision and wearable computers by T. Jebara, Cyrus Eyster, J. Weaver, T. Starner, and A. Pentland Towards situated computing by R. Hull, P. Neaves, and J. Bedford-Roberts 5:30 - 6:00 Take Down Posters II, Demos --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

approx of bignum^rational
by cman＠communities.com 17 Dec '03

17 Dec '03

Does anyone have a good method for approximating bignums raised rational exponents in the interval [0,1]? Thanks, Douglas Barnes Electric Communities

1 0

Re: SSLRef (SSLtelnet)
by Hal 17 Dec '03

17 Dec '03

From: Adam Shostack <adam(a)bwh.harvard.edu> > To get a certificate, you need to talk to Verisign, and give > them a business plan, a key, and 270 bucks per year to get your key > certified. > > Verisign is a spin off of RSA. Yes, this is my understanding. I have also heard that the process is not easy or routine, that the business plan receives considerable scrutiny. What I would be doing with the certificate is unconventional. I would publicize the secret key, and ship out free software which would use the certificate to establish SSL communications with the Netscape browser within the same PC that runs the browser. The real purpose of the certificate is not to authenticate the key of a server running remotely, but simply to bypass the security checks within Netscape Navigator. So I am not confident that this business plan will pass Verisign's muster. Among other things, it would be difficult to enforce the one year restriction (unless Navigator checks a date in the certificate). I understand that Netscape's browser will also accept certificates created by a Netscape-internal "test" CA. I hoped that perhaps some junk certificates from that CA might be floating around, ones which would be useless for conventional purposes because their secret keys are exposed, but which would be perfect for my needs. There is one "fallback" strategy possible which would allow the 128-bit SSL security proxy to work. That is to filter *all* connections, not just secure ones, and convert https: URL's to http:. Then Navigator will not attempt to make any SSL connections at all, and the proxy can talk to it non-securely, using 128-bit SSL for the external connection to the server. However this would be much harder, and the proxy would have to somehow remember which URL's had been massaged like this so it would know which ones are eligible to have secure connections made. Hal

3 2

Scientology and police visit XS4ALL Amsterdam
by announce 17 Dec '03

17 Dec '03

From: XS4ALL Internet Postbus 22864 1100 DJ Amsterdam tel: +31 20 6222885 fax: +31 20 6222753 PRESS RELEASE ------------- Police and members of Scientology church enter offices of XS4ALL ================================================================ Amsterdam - thuesday september 5, 1995. Today at about 14:00, XS4ALL was visited by Mr. S. Braan, bailiff. He was acting on behalf of the Religious Technology Centre, better known as the Scientology Church, or Scientology for short. He was assisted by a local police officer and Mr. Hermans from the 'Nauta-Dutilh' legal firm that represents Scientology in The Netherlands. Also present were two computer experts (Mr. Ootjes and Mr. Van Suchtelen) a locksmith (to enter had we not been present) and two American employees of Scientology, Mr. Weightman and Ms. Jenssen. Scientology is filing for seizure of XS4ALL's computer equipment. Under dutch law, this means that a bailiff comes in to record your assets. In real-life, the computer-experts that were present have recorded the types and serial numbers of all the computers in our offices. They did not take any equipment, the continuity of XS4ALL's services is not in jeopardy. What is this all about? ----------------------- The Scientology Church claims that the XS4ALL anonymous remailer was used to disseminate documents over the Internet to which the church holds the legal copyright. This has led the church to ask the president of the district court of Amsterdam to grant permission for this seizure as a prelude to legal procedures concerning damages suffered by the church. The remailer in question has been disabled more than 2 months ago. During the visit of Scientology to XS4ALL this afternoon, the remailer was not the subject of any conversation. The organisation seemed totally preoccupied with the information about Scientology that one of our users has put on his home page. Part of this information is said to be a file to which Scientology holds the copyright. If we were to delete the file in question on the spot, they were willing to drop the seizure. Responsability of Internet Providers ------------------------------------ XS4ALL categorically denies any responsability for contents of users' homepages. The users decide for themselves what is on their homepage. Since XS4ALL does not edit the homepages and has no mechanism of control over the contents we strongly feel that the users themselves are responsible for what they say on their homepage. This whole affair demonstrates the need for clarity concerning the legal postion of Internet Providers. We are shocked that our offices can be invaded bij freshly flown-in U.S. cult members. If we as Internet providers are held responsible for what our users say, that will undoubtebly kill freedom of speech on the net. Scare-tactics ------------- XS4ALL is not alone in receiving this kind of attention from Scientology. Scientology, a semi-religious multinational, is at war with a number of people on the Internet. A non-organized group of people on the net has started to openly discuss the activities of the church. Until recently, the church has always managed to supress critical voices by means of sheer intimidation and by engaging in endless legal battle. One of the people that Scientology has a problem with is 'fonss', an XS4ALL user that publishes the F.A.C.T.-net Kit on his home page (http://www.xs4all.nl/~fonss) This kit (which can be found on numerous homepages all over the Internet) consists of a large number of documents that show the true face of Scientology. One of these documents is a piece to which Scientology supposedly holds the copyright and which has been added to the kit without the church's permission. Additional information can be found on the Internet: http://www.cybercom.net/~rnewman/scientology/home.html http://www.xs4all.nl/~fonss news:alt.religion.scientology news:alt.censorship news:alt.clearing.technology

1 0

START YOUR OWN BUSINESS...
by ynter＠spica.net 17 Dec '03

17 Dec '03

UNLIMITED REVENUE WITH OUR SOFTWARE OVER 3000 PEOPLES LIKE YOU ALREADY MAKE A NICE LIVING ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, IF YOU WNAT TO BE REMOVE FROM our recipient list don't hit REPLY. Just send any message to: <ynter1(a)answerme.com> ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 4000 new productS? Start a new business or ad some new products to your existing line.. 40,000 names of manufacturers and wholesalers from places like "Taiwan ,Korea, Malaysia, JAPAN" and other country around the world. Products you can buy so low, you can make a fortune reselling to wholesalers or retailers <http://204.137.223.70/ynterweb/wom.html> $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ OR START A NEW BUSINESS WITH EVERYTHING READY TO OPERATE INCLUDING YOUR OWN WEB PAGE ON A SECURE SERVER.. --------------------------------------------------------------------- <http://204.137.223.70/ynterweb> You can download a demo disk directly on the site.and get started in the same day . $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ We are very sorry if this NOTICE reach YOU by error. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

1 0

Re: Emergency File Wipe Algorithim
by Andrew Loewenstern 17 Dec '03

17 Dec '03

Lucky Green writes: > Didn't I just read a day ago that Robert Morris (ex-NSA) cautioned > that one should never underestimate the time and effort an opponent > is willing to put into recovering your data? > > May I also point out that the rules of economics do not apply to > the federal government, since it insits - quite successfully - on > having a monoploy on using lethal force to extract arbitraily large > amounts from hundreds of millions of working Americans? As always, Rubber Hose Cryptanalysis(*tm, patent pending) is usually the cheapest way to go...if you're a federal government. But not all threats are that serious. For instance, I have no fears that the admins here would grovel over the oxides on RAM cells in order to determine the pass-phrase of my PGP key if they suspected me of doing something naughty (even if they knew this was possible, which is unlikely). You can get really paranoid about security and rightly so if your opponent is a federal government. However, pushing key-material bits around RAM in order to prevent them from being burned into the chips is probably going to do you little good if, for instance, a hardware keystroke monitor is surreptitiously installed in your keyboard (which is likely far cheaper and easier than analysing RAM chips and maybe even disk platters). BTW, this is not a troll and I know that the possible constitutionality of court-ordered disclosure of passphrases or key-material has been hashed over many times in the past here, but have any cases with this particular attribute gone through court yet? There were reports even years ago of pedophiles and other agents of the Four Horsemen using PGP to encrypt diaries and such, have any of these cases gone to court yet and did the prosecution attempt to force the defendant to reveal a passphrase?? andrew (wonders how many readers will take their keyboards apart to look for radio transmitters)

2 1

START YOUR OWN BUSINESS...
by ynter＠spica.net 17 Dec '03

17 Dec '03

UNLIMITED REVENUE WITH OUR SOFTWARE OVER 3000 PEOPLES LIKE YOU ALREADY MAKE A NICE LIVING ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, IF YOU WNAT TO BE REMOVE FROM our recipient list don't hit REPLY. Just send any message to: <ynter1(a)answerme.com> ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 4000 new productS? Start a new business or ad some new products to your existing line.. 40,000 names of manufacturers and wholesalers from places like "Taiwan ,Korea, Malaysia, JAPAN" and other country around the world. Products you can buy so low, you can make a fortune reselling to wholesalers or retailers <http://204.137.223.70/ynterweb/wom.html> $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ OR START A NEW BUSINESS WITH EVERYTHING READY TO OPERATE INCLUDING YOUR OWN WEB PAGE ON A SECURE SERVER.. --------------------------------------------------------------------- <http://204.137.223.70/ynterweb> You can download a demo disk directly on the site.and get started in the same day . $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ We are very sorry if this NOTICE reach YOU by error. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

1 0

Re: Emergency File Wipe Algorithim
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 16:20 9/5/95, Andrew Loewenstern wrote: [...] >andrew >(wonders how many readers will take their keyboards apart to look for radio >transmitters) Been there. Done that. Hmm, come to think of it, it's about time for another check. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

NYT on Draft Crypto Regs
by John Young 17 Dec '03

17 Dec '03

Peter Wayner reports in the on-line New York Times today on the draft BXA encryption regs being circulated among government agencies for comment. Peter highlights the proposed new restrictions on electronic distribution of crypto. Adam Shostack is quoted: http://www.nytimes.com/library/cyber/week/082497encrypt.html For those unable to access the NYT site, we've put a copy at: http://jya.com/bxa-nyt.htm We remind that a July 25 version of the draft regs is available at: http://jya.com/bxa-ei-rule.htm

1 0

Son of Clipper (commentary)
by Jim Gillogly 17 Dec '03

17 Dec '03

I didn't want to mix my comments with the recent discussion paper I sent along, so here they are separately. Please refer back to my last msg to see the points I'm bitching about. It's a depressingly restrictive list of things to require for software escrow encryption. I can only conclude that they're not serious. Clipper itself fails to meet many of them, including (I think) #1, #2, #5, and #6. Rumor has it that Clipper does not meet #9 either -- at Crypto '95 somebody in the Key Escrow session said many government Clipper keys are not escrowed, and somebody in the back spoke up and said he owned such a chip. By the way, Moti Yung (noted crypto guy at IBM Yorktown Heights) presented more breaks in Clipper's protocols like those Matt Blaze found, and pointed out some aspects of Matt's break that he thinks make it more important than previously thought. Other things that bother me about the list: #1: If it's escrowed, there should be no need to limit the key length unless somebody's planning to cheat. #3: This rules out the possibility of escrowing individual session keys to limit the access of LE to sessions they are entitled by law to intercept. #5: Care to tell us how to create software that can't be patched? This is one that's been played in the marketplace and has lost. The battle between copy protectors and crackers has been decided in favor of the crackers: legitimate users largely refuse to buy packages that are too messy to deal with (e.g. they leave hidden files all over the disk, which may interfere with backups or other programs) or that use special purpose hardware (e.g. dongles that eat up a printer port). This one's a loser, I think. #6: This is clearly a research issue. Several speakers (even pro-GAK) at Crypto '95 said the policy decisions are being made before the research has been done. The protocols and system specifications are key here, and it's not obvious how this criterion can be met. It's not obviously impossible, but it certainly hasn't been solved in Clipper. #7: One of the Crypto '95 attacks on the Clipper protocol makes use of this misfeature of Clipper. It allows a broadening of the net of captured keys so that many more unauthorized messages may be read. #8: See #3 above -- let's wait on the policy decision until we have a policy debate. A mandated compromise is an oxymoron. I (for one) would prefer to see much more limited keys (like session keys) if Congress decides that the right to privacy is not infringed by these technologies. There's nothing in here that specifically excludes dividing your keys among multiple escrow agents; I assume this is still an open issue still, or that it goes without saying (one way or the other). #3 and #6 make it impossible to prevent LE from reading messages from before or after their legally authorized window. This is clearly broken. Again, this appears to be trying to put all the power in the hands of LE to the detriment of the people. It's advertized as a compromise, but I see nothing gained over Clipper I. The only differences appear to be that the escrow agent(s) may be private instead of government, and the algorithms may be something other than SKIPJACK as long as they are at least 16 bits weaker as well as being known algorithms. It also doesn't address the main problem with Clipper I: that it wouldn't work, since (like Clipper I) it will catch only crooks who are smart enough to encrypt but stupid enough to encrypt with a system they (should) know LE can read -- probably a null set. If, on the other hand, this is made mandatory for encrypted transmissions, it will create a new and unnecessary class of criminals, probably including myself (though I won't promise to break any laws at this point). This really burns me up. What do they think they're doing here? Am I missing a big piece of it? Jim Gillogly Hevensday, 14 Halimath S.R. 1995, 22:02

1 0