December 2003 - cypherpunks-legacy

Raph
by Alec 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have found it convenient to retrieve Raph's list off c'punks, as opposed to fingering. I do hope this service to the community will continue on one forum or another. Thanks. Alec -----BEGIN PGP SIGNATURE----- Version: 4.5 Comment: Message PGP 2.6.2. signed/encrypted. Public key available on request or from keyservers. iQCVAgUBMwnJQCKJGkNBIH7lAQFRHgQAtLqCK9vtYgLVp0bU9wSjUoiZ7Wx3ade6 PcQQtOeNSxYy7n5i6qQuAaOTg1rvStOBEYpIDnWHo7p8In1fQE2v0QaOMbYm60QG Kc/CsoHAvq74PHN6/QdQ6JatyzSVsHL5r7hBEJZQGSFr2DWdW7xTclpqSUtviHHB X6HtqBfk5Pc= =cIv9 -----END PGP SIGNATURE-----

2 1

Drose / You're a fucking idiot!
by Toto 17 Dec '03

17 Dec '03

drose(a)azstarnet.com wrote: > To Toto, Dimi, D.Thorn, whomever, etc.: while I may appreciate being > subscribed to a million and one lists that I never knew I needed (and so > quick!--appreciate the service, dude) this address, like c-punks(a)toad.com, > is going away *real * quick, so save your keystrokes. I generally try to be fairly civil in my postings, and refrain from personal insults, but I will make an exception, here. So listen up, shit-for-brains, and I will try to explain a few concepts that you seem to be too dim-witted to understand. I am a CypherPunk. I have a <Delete> key, and I know how to use it. When my personal account is subjected to spam-attacks and unwanted subscriptions to a multitude of lists, I deal with it. I don't make baseless accusations against others based on their perceived public reputation, or my own subjective perception of their reputation capital. I am not just a CypherPunk, I am also an adult. I take responsibility for my own actions, and I keep those actions within the bounds of what I perceive to be acceptable ethics and personal integrity. If you think that I am responsible for this-or-that action in regard to yourself, then all you have to do is ask me, and I will tell you. I don't make any bones about my beliefs and views, and I don't have any problem with others opposing my beliefs and views. When I launch an attack on someone, right or wrong, it is a frontal assault, not a hidden one. When I post anonymously to the list, or send anonymous email, I do not use remailers, in order that anyone with the will and wit to do so may easily discern my pseudonyms through the headers and use of the 'trace' command. If you think that I am the source of your problems, then you are a fucking idiot. I have no idea who you are, and can only vaguely recall the content or context of your past posts to the list. As such, I would certainly have little motivation for lifting even my little pinkie against you in a conspiratorial attack on you. I would suggest that the only 'fixations' involved between you and myself are coming from your end of the electromagnetic spectrum. I would also suggest that you get your head out of your electromagnetic rectum. Toto

1 0

Re: European crypto export policy
by Jeff A. Hale 17 Dec '03

17 Dec '03

At 02:39 AM 2/18/97 +0100, you (Ulf M=F6ller) wrote: >Swedish Datateknik 97-02 features an article about how COCOM/ Wassenaar >Arrangement effects Swedish crypto exports. > >I wonder if someone whose Swedish is better than mine could summarize >the article? It is at http://www.et.se/datateknik/arkiv/97-02/5.html > >Datateknik 97-01 reports about pressure for crypto regulations from >the US, but also from the EU and OECD [the OECD turned out not to >endorse key escrow shortly after the article was published]. The >Swedish government is currently collecting facts and opinions; so far >it remains an open question which standpoint it will take. England is >preparing a law similar to the French one, while there are policy >discussions similar to the Swedish going on in Germany and Denmark, >says G=F6ran Axelsson, Sweden's representative in the EU's IT security >body. The Japanese are not far behind. Using the emotional -- and often successful -- pretext of "anti-terrorism," (the subway gassing allegedly committed by the "Aum Cult"), the Japanese Ministry of Justice (JMOJ) is about to propose a sweeping new wiretapping/electronic eavesdropping statut= e -- which insiders predict will sail through the Diet (national legislature)=

1 0

Re: Constitution and a Right to Privacy
by Vin McLellan 17 Dec '03

17 Dec '03

>(And I always thought the "woman's right to privacy" argument for abortion >was flaky. Accepting such an argument, wouldn't infanticide be equally >protected by a woman's right to privacy?) > >--Tim May Whoa! This begs a thoughful response, but I don't have time right now. Might it suffice to suggest that a privacy claim -- a demand for control over what concerns her, her alone, or (on balance) her more than any other -- seems reasonable to extend to both contraception and early abortion? For many of us, by the same logic, and with the same moral comfort. (As the clock slips onward, and the potential viability of the fetus becomes more likely or certain, I personally believe the woman no longer exists alone, and the privacy argument becomes conflicted and more tenuous. But Tim's golem, Infanticide, is a creature of nightmare -- wholly beyond the pale!) To my mind, any attempt to control what is done to the woman's body (by her choice) while the prospective child is but a bit of enhanced potential, much much less than a viable child, is an unconstitutional and morally-invalid attempt by others (the state, the church, the country club) to pre-empt her will, and prescribe or dictate a wholly new value system for her. Any claim (by the father, the state, the church, etc.) to control what happens in the moments or days after conception (say, forbidding RU-whatever, the French drug,) has no more moral authority than any similar claim to Higher Authority -- to safeguard the potential within her -- which is used to forbid his or her the use of a contraceptive, or which requires him or her to take a drug which makes multiple pregnancies more likely. I always thought the Jesuits had the logical argument straight. If the woman has no inherent right to control her destiny in the languid aftermath of intercourse (just because she has within herself the potential of a new life) then she has no claim to self-possession which allows her to use a contraceptive just before intercourse. If it is the potential for new life that allows external authorities to overwhelm her judgment and violate her privacy, then the case for that Papal Judgement exists before, during, and after sex. Problem is: while logical, the Catholic argument seems silly, authoritarian, and hopelessly abstract in the face of what many of us experience as a less dogmatic and vastly more human context. A context in which the right to privacy or self-possession seems inherent in the people we are, the people we know, the world as we live it. (Jesuits have a certain disadvantage, from this POV;-) The fact that this claim of privacy or self-possession apparently has an echo in the US Constitution (that oh, so-prescient document!) -- and in the libertarian/liberal proclamations of numerous other nation states -- is a validation, a confirmation... but the Right of privacy, the Claim, is inherent in our sense of who we are, and our sense of what an individual is. If the philosophers had not considered it in their musings, we would have to fight harder; we would need to define it as well as defend it -- but it can only be denied if we denied ourselves, as the serfs of the Dark Ages were expected to... and did. Women as vessels. Men as vassals. Suerte, _Vin Vin McLellan + The Privacy Guild + <vin(a)shore.net> 53 Nichols St., Chelsea, MA 02150 USA <617> 884-5548

3 2

Address -- Invalid (was Re: message to USSA Senate) (fwd)
by Alexandra Janssen - Raemaekers 17 Dec '03

17 Dec '03

I really don't know what this is all about!!!! This is one of the messages that I seemed to have sent...... I can give you about Apparently-To: vice.president(a)whitehouse.gov, first.lady(a)whitehouse.gov, Bclinton(a)Washington.DC, feedback(a)www.whitehouse.gov, Senator_Stevens(a)stevens.senate.gov, email(a)murkowski.senate.gov, sessions(a)wrldnet.net, senator(a)shelby.senate.gov, senator(a)bumpers.senate.gov, info(a)kyl.senate.gov, Senator_McCain(a)mccain.senate.gov, senator(a)boxer.senate.gov, senator(a)feinstein.senate.gov, sen_dodd(a)dodd.senate.gov, senator_lieberman(a)lieberman.senate.gov, senator(a)biden.senate.gov, bob_graham(a)graham.senate.gov, connie(a)mack.senate.gov, senator_coverdell(a)coverdell.senate.gov, senator(a)inouye.senate.gov, tom_harkin(a)harkin.senate.gov, chuck_grassley(a)grassley.senate.gov, larry_craig(a)craig.senate.gov, dirk_kempthorne(a)kempthorne.senate.gov, senator(a)moseley-braun.senate.gov, lugar(a)iquest.net, wendell_ford(a)ford.senate.gov, senator(a)mcconnell.senate.gov, senator(a)breaux.senate.gov, senator(a)kennedy.senate.gov, john_kerry(a)kerry.senate.gov, senator(a)mikulski.senate.gov, senator(a)sarbanes.senate.gov, Olympia(a)snowe.senate.gov, senator(a)levin.senate.gov, michigan(a)abraham.senate.gov, mail_grams(a)grams.senate.gov, senator(a)wellstone.senate.gov, john_ashcroft(a)ashcroft.senate.gov, kit_bond(a)bond.senate.gov, senator(a)cochran.senate.gov, max(a)baucus.senate.gov, conrad_burns(a)burns.senate.gov, senator(a)faircloth.senate.gov, jesse_helms(a)helms.senate.gov, senator(a)conrad.senate.gov, senator(a)dorgan.senate.gov, email(a)hagel96.com, bob(a)kerrey.senate.gov, mailbox(a)gregg.senate.gov, opinion(a)smith.senate.gov, frank_lautenberg(a)lautenberg.senate.gov, torricel(a)torricelli.com, Senator_Bingaman(a)bingaman.senate.gov, senator_domenici(a)domenici.senate.gov, senator(a)bryan.senate.gov, senator_reid(a)reid.senate.gov, senator_al(a)damato.senate.gov, senator(a)dpm.senate.gov, senator_dewine(a)dewine.senate.gov, senator_glenn(a)glenn.senate.gov, senator(a)nickles.senate.gov, senator(a)wyden.senate.gov, senator(a)santorum.senate.gov, senator_specter(a)specter.senate.gov, senator_chafee(a)chafee.senate.gov, reed(a)collegehill.com, senator(a)thurmond.senate.gov, senator(a)hollings.senate.gov, tom_daschle(a)daschle.senate.gov, senator_thompson(a)thompson.senate.gov, senator_frist(a)frist.senate.gov, senator(a)hutchison.senate.gov, senator(a)bennett.senate.gov, senator_hatch(a)hatch.senate.gov, senator_robb(a)robb.senate.gov, senator(a)warner.senate.gov, senator_leahy(a)leahy.senate.gov, vermont(a)jeffords.senate.gov, senator_murray(a)murray.senate.gov, Senator_Gorton(a)gorton.senate.gov, russell_feingold(a)feingold.senate.gov, senator_kohl(a)kohl.senate.gov, senator_byrd(a)byrd.senate.gov, senator(a)rockefeller.senate.gov, mike(a)enzi.senate.gov, craig(a)thomas.senate.gov names who got this message from the gang of cypherpunks. What is this ???? Forwarded message: > From home(a)collegehill.com Tue Feb 18 15:05:24 1997 > Message-Id: <3.0.32.19970218100100.00731388(a)pop03.ca.us.ibm.net> > Precedence: bulk > X-Sender: chill03(a)pop03.ca.us.ibm.net > X-Mailer: Windows Eudora Pro Version 3.0 (32) > Date: Tue, 18 Feb 1997 10:03:05 -0500 > To: alexandr(a)win.tue.nl > From: College Hill Internet <home(a)collegehill.com> > Subject: Address -- Invalid (was Re: message to USSA Senate) > Mime-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > > At 12:45 AM 2/18/97 PST, you wrote: > >All files on the Senate's computers will be deleted by our > >gang of cypherpunks dedicated to the eradication of your systems. > > > > I'm furious! Now I get about 10 messages every 15 minutes of mail delivered and lots of other trash. Who 's got the courage to admit this crime ?

1 0

Re: Anyone have the complete info on CP list alternatives?
by Bryan Reece 17 Dec '03

17 Dec '03

E. Allen Smith writes: > From: IN%"reece(a)taz.nceye.net" "Bryan Reece" 17-FEB-1997 23:23:10.06 > > >> use. However, I do have one problem with this recipe: lack of > >> loop prevention if a news2mail gateway is going in the other direction. > > >All the mailing-list hosts are supposed to check for duplicates before > >forwarding anything, so this shouldn't do anything worse than have a > >few extra copies of each post get discarded, loading the network and > >the hosts a bit more. But posting the list to a widely-distributed > > Umm... IIRC, the only person who's announced how he's filtering > for duplicates is Igor, and he's just checking for messageIDs. Won't > those get chunked on going through a mail2news gateway, and thus > possibly come back through a news2mail gateway? My script preserves the Message-ID, assuming that the incoming message has one. Other gateways I've seen also appear to preserve Message-ID lines (or at least messages posted through them appear to have mail-like ID lines). > The filtering > mechanism could be improved via MD5 digests, etcetera (someone's > already given a recipe for such; thank you), but even so various > mungings could still set up a mailing loop. (Yes, I'm paranoid > about those; I may have been reading list-managers for too long and > seen too many stories on there.) The sensible place to keep > track of possible duplicates is at the gateway; it can > certainly filter based on that it (or, for that matter, another > known bidirectional gateway) sent a message out. Not immediately sending a message back to the host that it came from does look like a good idea (it came from foo.com, so foo.com obviously has it). Filtering out other gateways' messages will reduce load at the possible expense of delay (assuming a smallish network of news servers that feed each other the list; obviously the message will flood the majordomo net before it floods the real usenet unless something is seriously broken). > > >newsgroup seems wrong for noise (both to the list itself and to > >posters) and delay reasons. > > Delay reasons being that mail will go to Usenet, go > all over the place there, and then get replied to later than if > it were just on the mailing list(s)? A potential problem, yes. I didn't exactly say, but I was comparing a small network of news servers feeding each other cypherpunks.list to, say, alt.cypherpunks.list. > But (especially given the options I mentioned below), this > would appear to be a matter for individual users to decide > by which list they go with and any added control headers. I'm trying to come up with a way to provide NNTP access (and an experimental alternative to the net-of-majordomos) that won't offend anybody too much. I can filter out messages that the authors don't want sent out; I'd prefer to deal with what would make the authors want the messages filtered out instead. > Maximum individual sovreignty (sp?). > > >> In regards to your later query about whether people want their postings > >> going to Usenet, might I suggest that this be individual to the given > >> distributed mailing list? In other words, since the recipe is logically > >> going to have to not forward to a gateway messages from other mailing > >> lists (since it's not a good idea to have multiple copies of the same > >> message arriving at the gateway if it can be helped; better to filter > >> it out beforehand), > > >It doesn't seem an especially bad idea, since it > > Thank you. Were you cut off? Yes. Should have read: It doesn't seem an especially bad idea to send a gateway multiple copies of the same message, since theextra messages won't increase the load much but will increase the reliability and decrease the propagation time compared to a network where there are no duplicates. The only case where filtering duplicates is certain not to hurt delay or reliability is when the gateway in question is known to have a copy of the message already. Usenet uses the Path header for this; there doesn't seem to be such a thing in the majordomo net. > >> some of the mailing lists can forward and the > >> others cannot. (One could even determine this behavior on application > >> of the proper X-header, although I never trust various mailing systems > >> to forward such intact.) The same could also be done with gatewaying > >> _from_ Usenet - if the news2mail gateway feeds to whatever individual > >> lists sign up to it and they _don't_ forward such messages to others, > >> people can decide whether or not to receive Usenet postings on > >> alt.cypherpunks.* by which list they subscribe to. > > >The code currently running is a perl script that turns typical email > >messages into something INN is happy with. It is probably possible to > >get your message rejected by INN if you put obsolete or otherwise > >unusual and illegal headers in. This may be a bug. > > That would probably depend on: A. if any other circumstances > other than deliberately sabotaging your message's translation would > also disrupt its chances of getting through seriously, particularly > if they weren't something you'd spot; and The main way to get a message rejected seems to be using obsolete news headers on it. If you don't want your message posted, add a Posting-Version line to the header. > B. if sufficiently bad > messages would disrupt INN's operations too much. No more so than a sufficiently bad news posting that came in over NNTP (since the mails do turn into news postings over NNTP).

1 0

##$!@#$#@!$#
by Japhy Ryder 17 Dec '03

17 Dec '03

cual es la fecha? czesc, tak mal na dodjze kajka.... -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzLvsCAAAAEEANHTflxW1D4mB/h3dnEV7K1jzXvmBOrSh+EHbkCn+ZjLislg LW51QG9CuS81VaHx75xdxV1C11RXJybaqqrtT186aQfmEuTQP0rLJYy859xdHpcu DldUZ9ry3xXACtQAk3bPlvo6Yd3TmucoPXDl55w95Hru+H7TIzR2UortBxKZAAUR tAtKYXBoeSBSeWRlcg== =0WVf -----END PGP PUBLIC KEY BLOCK-----

1 0

alt.cypherpunks.ebonics
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Igor, A friend, who, in the CP tradition requested to remain anonymous, and I were doing an informal analysis of those subjects/topics which over the past year generated the most discussion and, by implication, interest on the CP list. Since the list at that time was reportedly unmoderated, we felt some weight should be given to members' interests/desires as measured by their posts, regardless of the applicability to the list topic. With the exceptions of AP (oh so clearly way off-topic), list censorship (too tedious), and remarks either questioning or affirming the sexuality/virility/femininity (or lack thereof ) of almost every CP subscriber, the topic which claimed the most bandwidth was Ebonics. It seemed to touch on several layers of CP interest: freedom of speech, obfuscation, tolerance, intolerance, phonetics, linguistics, race warfare, etc. You name it; just about every well-known c'punk jumped in to make some urbane statement on this, sadly, now dead and ignored issue. Nevertheless, the bandwidth was there! Note; any messages followed by Punctuation Art were excluded if they seemed to lack "dignity," for want of a better word. Based on the above stats (available from my friend on request), my anonymous friend and I request that you add Ebonics as an area of interest to Cypherpunks in your List Intro. Please judge this request on its merit and not on what you may think of me or my anonymous (asexual) friend personally, thereby, by that very action, initiating a New Order of Cypherpunks! Thanks for you consideration. More importantly, thank you for helping to keep this vibrant list alive. Alec (and friend) -----BEGIN PGP SIGNATURE----- Version: 4.5 Comment: Message PGP 2.6.2. signed/encrypted. Public key available on request or from keyservers. iQCVAgUBMwnVrSKJGkNBIH7lAQEl9gP/XIujtLKrVf2l7MaR50rM/BO9wCkYQeHy 7UoISphHlxs8PScnxkw6PQsVHerd+FnxPJQ2xAnCa1gUujxuif8OrsYpInVcfEap 99KkC39DzAe+/zHrOR2Kt7MK+X8267oCIWl4Yt1VBkCSt8ruktCnIXF41ghyuHUt 3N7reRPx6Hs= =EMeF -----END PGP SIGNATURE-----

2 1

##$!@#$#@!$#
by Japhy Ryder 17 Dec '03

17 Dec '03

cual es la fecha? czesc, tak mal na dodjze kajka.... -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzLvsCAAAAEEANHTflxW1D4mB/h3dnEV7K1jzXvmBOrSh+EHbkCn+ZjLislg LW51QG9CuS81VaHx75xdxV1C11RXJybaqqrtT186aQfmEuTQP0rLJYy859xdHpcu DldUZ9ry3xXACtQAk3bPlvo6Yd3TmucoPXDl55w95Hru+H7TIzR2UortBxKZAAUR tAtKYXBoeSBSeWRlcg== =0WVf -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: I Treat All My Enemies Equally
by Blanc 17 Dec '03

17 Dec '03

TruthMonger wrote: > Blanc makes some excellent points about the average citizen being >caught in a ping-pong crossfire in the conflict between government >and anti-government forces. However, as I said, this is in the nature >of conflict and the citizen's best option may be to make a daily >effort to resist the government oppression, no matter how small it >may seem in any instance. ..................................................... Appreciate all the kudos, TruthMongrel. <g> The problem that I was talking about is that of not being able to distinguish one's enemies from one's friends because they all act alike and therefore being in a position of danger from either of them. In that case, it doesn't matter which philosophy (political, economic, etc.) one should support; the immediate fact of the matter is physical - physical safety from all those Cowboys & Indians trying to get rid of each other regardless of the reasons or the purpose. In that case they are not advancing the kind of philosophical cause which supports superior values and which results in better circumstances. They are not "separating the wheat from the shaf", they are not being descriminating about what should live and what should die, they are not allowing innocent bystanders to make a decision about which side they're on or what risks they are willing to take in the "war" which they may not realize is happening. In that case, the real end of a "terrorist" action is personal and has little to do with a preferable way of life for humans, or grievances against an unjust oppressor. When two "opposed" groups are willing to stick it you without concern, there is no difference between them. Because, what difference does it make? .. Blanc .. Blanc

1 0

New rules re money transfers to foreign locations
by Greg Broiles 17 Dec '03

17 Dec '03

The NY Times reports that new rules will be announced Monday which will require non-bank financial institutions (like check-cashing stores, Western Union, etc.) to report transfers of $750 or greater with a foreign destination. (The old reporting threshold was $10K.) According to the article, the new regulation is expected to generate approximately one million additional forms per year for FINCEN/Treasury to process, and require 25,000 such NBFI's to register with Treasury. The regulation will take effect in 90 days after a public comment period. It does not apply to cash, instruments like traveler's checks, or domestic transfers; it also does not apply to banks themselves. (All of those mediums of transport are covered by different rules with other reporting requirements.) See <http://www.nytimes.com/yr/mo/day/news/national/drug-cartels.html>. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto.

1 0

Re: CFV: moderate sci.cryonics -- I vote NO
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

Lewis McCarthy (lmccarth(a)cs.umass.edu) wrote in <3377FA31.167E(a)cs.umass.edu>: * Charles Platt writes: * > I feel it's unfortunate that the * > charter was worded to exclude anonymous postings, but clearly this * > news group does need to be moderated, and I believe that Keith will * > do so fairly and openly. * * That's all well and good, but the CFV is a referendum (in part) on the * particular charter that appears in the CFV, not on an alternate policy * that purportedly may be followed by the moderator. Unfairly applied That is correct. The promises by the proposed moderator are even more suspicious given that: This future moderator PROMISES TO VIOLATE HIS OWN CHARTER. The charter is absolutely clear in respect to what is not allowed: Charter> Unacceptable messages include personal attacks, messages Charter> posted without a valid sender address, and any message not Charter> pertaining to the topics above. (see http://xp5.dejanews.com/getdoc.xp?recnum=5944883&server=db97p2x&CONTEXT=864… for the charter and ballot) * written rules have a real chance of being challenged, whereas with * unwritten rules there's much less hope of receiving fair treatment. * Overly broad restrictions, like the one in the CFV regarding messages * from unreplyable senders, are a boon for selective enforcement. I repeat again, in my opinion, there is no valid reason for any moderated discussion newsgroup to ever forbid anonymous and pseudonymous postings. Such restrictions destroy the value that usenet newsgroups have. Correspondently, I will strongly oppose any proposal that restricts posters ability to post anonymously. Presence of such provision in the charter is a strong indication that the proponent is a control freak. * It's been a couple of years since I voted on a newsgroup proposal, but * I'll be voting NO on this sci.cryonics reorganization. Get back to me * if the charter is reworded s.t. the moderator is directed to judge a * message primarily based on its _content_ rather than its _sender_. Could not agree more! * CFV pointer: Message-ID <863077501.7020(a)isc.org>, posted to the usual * places on May 8 by David Bostwick * -- * Lewis http://www.cs.umass.edu/~lmccarth/lmkey.asc "And all the * science, I don't understand; it's just my job, eight days a week..."

2 1

Crypto use to foil law enforcement?
by Greg Broiles 17 Dec '03

17 Dec '03

I ran across this entry in the Congressional Record which discusses several examples where encryption was discovered in the course of a law enforcement investigation. [Congressional Record: September 18, 1996 (Senate)][Page S10882-S10886] [...] Mr. GRASSLEY. Mr. President, I'm pleased that the Senate has passed the eonomic espionage bill. This is an important measure that I believe will save American business significant amounts of money. The theft of confidential information from American businesses is a serious problem, and this bill takes important steps in the right direction. I am particularly pleased that the Senate has accepted the amendment I offered with Senator Kyl. This amendment commissions the first-ever study on the criminal misuse of encryption technologies. Under the Grassley-Kyl amendment, court officers who prepare pre-sentencing reports will include information on the use of encryption to conceal criminal conduct, obstruct investigations, and commit crimes. The sentencing commission will then collect and collate this information and include it in its annual report to congress. In this way, I am hopeful that Congress and executive branch will have reliable data on whether the criminal misuse of encryption is actually a problem and, if so, what response to this problem would be appropriate. As chairman of the Oversight Subcommittee on the Judiciary Committee, I did an informal survey of state-level law enforcement concerning the criminal misuse of encryption. This informal survey, while not scientific, provides valuable insights into the actions of the criminal element in our society. Here are just some of the responses my subcommittee received. In one case involving John Lucich of the New Jersey attorney general's office was involved, a computer was seized pursuant to a warrant in a serious assault case. Examination revealed that approximately 20 percent of the hard drive files were encrypted. Investigators sought the assistance of two different Federal agencies. Both of these agencies were unsuccessful in decrypting the files. Finally, a third Federal agency was successful in decrypting the files after expending considerable resources. The Decrypted files did not contain evidence of the assault but rather contained evidence of child pornography. The encryption type likely used was ``DES.'' And Officer Tim O'Neill of the Roseville, California Police Department reported to the subcommittee that he participated in a search involving a complaint against a subject who was on probation for solicitation/annoyance of minors. The subject had a hidden encrypted file on his personal computer. In the ``slack'' area at the end of the file the officer found names, addresses, school, grade, and phone numbers of 4-5 young teen girls. The encryption type used was known as ``pincrypt.'' Officer Mike Menz of the same department advised the subcommittee that he was working on a joint State/Federal major check fraud case where part of the potential evidence was encrypted. Ivan Ortman, a senior prosecutor in Seattle, Washington, encountered some encrypted files and password protection in a cellular phone fraud investigation. For a number of files the popular and inexpensive ``PGP'' type of encryption was used. Orton indicated that no effort was even made to examine the files as the police could not locate any method for ``cracking that encryption.'' In other words, why try since such an effort is certain to be futile. Surely a rational society should look long and hard at this situation. Agent Chuck Davis of the Colorado Bureau of Investigation reported to the subcommittee that he has encountered encryption as well as password protection problems. In one embezzlement case, a computer system has seized. Examination revealed that files on the hard disk were encrypted. The software manufacturers were contacted and the technical personnel who wrote the program advised that, ``they had left no `back door' access to the product as this would adversely impact sales. The hallmark of the program's appeal is that it cannot be broken, even by those who created it.'' Agent Davis advised that his investigation was ``halted'' due to the time and expense of a ``brute force attack''. The encryption program used was entitled ``watchdog.'' Agent Davis also advised the subcommittee that password protection also presents problems for other types of investigators. In cases involving theft of drugs from an emergency room by a doctor, bribery/ extortion by a police officer, and the suicide by an 11 year-old boy after telling friends that he had been molested by a family friend, investigators encountered password protection. The first two cases were successfully resolved through assistance from the manufacturer of the software. The third case, however, especially illustrates the seriousness of decryption problems--determining the unique key or in this case, password from a large number of possibilities. According to Agent Davis, a mere 4 character password has 1.9 million possibilities due to the number of keyboard characters. Can you imagine how difficult it must be to figure a short, 4 character password. What if the password were 10 characters or 20 or more? It's easy to see why criminals are moving toward password protection for their records. -- Greg Broiles gbroiles(a)c2.net 510-986-8779 voice 510-986-8777 fax

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash latent cut ek reord"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"wazoo"} = "<remailer(a)wazoo.com> cpunk mix pgp hash latent cut ek"; $remailer{"shaman"} = "<remailer(a)lycaeum.org> cpunk pgp hash latent cut ek"; $remailer{"hidden"} = "<remailer(a)hidden.net> cpunk pgp hash latent cut"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 19 May 97 6:49:06 PDT remailer email address history latency uptime ----------------------------------------------------------------------- nym config(a)nym.alias.net ******+*++#* 4:09 99.98% squirrel mix(a)squirrel.owl.de ++-+++-+--- 2:11:39 99.87% weasel config(a)weasel.owl.de ++-+-+-+--- 2:13:33 99.86% winsock winsock(a)rigel.cyberpass.net ---.-+.---- 5:30:41 99.83% jam remailer(a)cypherpunks.ca ******** *+* 13:32 99.63% lucifer lucifer(a)dhp.com +++.- ++*+++ 1:14:45 99.62% cyber alias(a)alias.cyberpass.net * *+**+**** 14:21 99.49% balls remailer(a)huge.cajones.com #####*## #++ 5:06 99.06% mix mixmaster(a)remail.obscura.com __ __ .--*-* 34:59:29 98.54% replay remailer(a)replay.com ** **.-+ 2:26:52 98.42% reno middleman(a)cyberpass.net +-.-+-+ -+ 2:17:53 95.56% hidden remailer(a)hidden.net ##..-####* 2:30:26 93.35% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Need some info...
by Wasim Q. Malik 17 Dec '03

17 Dec '03

Hi. I'm gonna give a talk on the subject of hacking/security soon. Need your help with it. Things that I'm gonna include are: what is hacking, ethics of hacking, psychlogy of hacking, other abstracts. Some technical stuff, such as hacking tools and tactics, including IP spoofing, packet sniffing, cracker programs, keyloggers, progs like satan, etc. Can you suggest some additional stuff to be included, or if you have any resources (URLs, articles, progs, HOW-TOs, graphics, anything!), related to any of the above topics, technical or whatever, please please do send it over. Your suggestions will be a great help, as well as any info. Thanks. Wasim Q. Malik Network Security Expert SDNP Pakistan

2 2

Re: PGP 5.0 beta is out at PGP.com
by geeman 17 Dec '03

17 Dec '03

and if they encrypted or eliminated the feature that logs all my pgp-encrypted traffic. At 11:39 AM 5/17/97 -0700, Alan Olsen wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >The pgp 5.0 beta is out. It is for Win95/NT 4.0 only. PGPKeys.exe pukes its >guts out when run. (At least on my machine.) > >It looks like they have hired a new graphics artist. The splash page looks >interesting. Nice if the rest would run... > >-----BEGIN PGP SIGNATURE----- >Version: 5.0 beta >Charset: noconv > >iQEUAwUBM337SeQCP3v30CeZAQHrIwf3bwkNKXwDPb5R2qLMneIIWBTfYvwAGCQ6 >8xqd0BHSsD+7ZzF4u9iVZWV9sHN/62LxAo886FfDP7PtKG+JZrZCa+KOUj2Zw3qk >1wltug8/rylAoLHulXwFVfwWb001jMIsS5RYNqDLqyccVF2TWUbVKQEgH7EI9VJ3 >EU8gZzHF61ok+bqacmV/r7ANoIdfFRvLZHm0iGo6Xm4xHz8lw2JzDWWvnhWnEquD >mf3XUaNRVYnI4/+kgs8fx5golMY3pPQrl6PR0XdvvLJITUhiqM3SVTDs9IL4hWAx >V7WWGPHaJZw6nVAl5LNbLK9puGFw0FMap1a6Ld+HnmRlxlgpr8B/ >=gdHU >-----END PGP SIGNATURE----- > >--- >| "Bill Clinton - Bringing back the sixties one Nixon at a time." | >|"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | >| mankind free in one-key-steganography-privacy!" | Ignore the man | >|`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| >| http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com| > > >

2 1

Re: Mail bombs from "helpful" Cypherpunks
by Robert Hettinga 17 Dec '03

17 Dec '03

At 11:26 pm -0400 on 5/18/97, Tim May wrote: > I have no way of > removing such "mail bombs" with my Eudora/POP system until they have been > downloaded to my machine My version of Eudora, and, I think, the freeware version also, has a little check box in the "Checking Mail" settings dialog which lets you leave messages over a certain size on the server, where you can delete them without having to download them. Since I'm on about 100 mail lists at last count, including, of course, the SET-dev list, where such godawful cluelessness (including, BTW, the use of multimegabyte .pdf, Microsoft Word <including macro viruses, of course>, and ASN1 files :-)) is commonplace, I have found this little checkbox a godsend. I have mine set at 100k. It works for me. Of course, Tim doesn't get to read this message, or any other, for that matter, to do him any good this time around... If we lived here, we'd be home now. Self reference is a dish best tasted cold, I suppose. Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: CFV: moderate sci.cryonics -- CENSORING antispammers
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

Jay Denebeim (denebeim(a)deepthot.cary.nc.us) wrote * Igor Chudov @ home <ichudov(a)algebra.com> wrote: * * > Charles, sci.cryonics may well be in need of moderation. The * > proponent may also be a great person. I also have deep respect for * > you personally. But the provision in the charter that does not * > allow postings without a replyable sender address is rather * > unfortunate. I would certainly vote yes if that particular provision * > was removed. Otherwise, I find it unacceptable for myself to vote * > YES. * * Why is that Igor? There's been very little, if any, spam generated to * rastb5m users, and that provision has been in place since before * anti-spam forgeries were in vogue. If spammers arn't mining a TV * group, they certainly wouldn't be mining a sci group. I see your point, Jay. What you are suggesting, probably not without reason, is that the spam volume is not expected to be huge. I may agree to that. The problem with this argument is that 1) No matter how much spam they get, posters have a legitimate reason to protect themselves 2) Typically, altering the reply address is done before the newsreader is even started, changing it for only one censorous newsgroup is a royal pain in the back 3) People should have freedom to post anonymously, especially on such sensitive topic as cryonics 4) Anonymity is NOT a threat to moderated newsgroups Considering all that, I do not consider the proposed charter to be acceptable. (see http://xp5.dejanews.com/getdoc.xp?recnum=5944883&server=db97p2x&CONTEXT=864…

1 0

For whom the Bell tolls...
by Alan 17 Dec '03

17 Dec '03

The article on Bell was printed in this morning's Oregonian. Hoo Boy! They are accusing him of all sorts of nasty shit! "Planning to poison the Bull Run watershed with Botulism." "Planning to use a carbon thread attack on the 911 system." And more. If John Young has not printed the article by the time I get home from work, I will type the whole thing in. They are REALLY playing rough this time!

1 0

Re: Distributing cryptographic code
by Bill Stewart 17 Dec '03

17 Dec '03

>> We would like to put this code up for distribution (within the US >> of course), but don't actually know what is a 'reasonable' amount of >> protection that one need apply to prevent people from exporting >> it to the rest of the world. The current MIT PGP software distribution has apparently had some discussion with the Feds. MPJ>The technical solution that I have come up with is (1) have a web form MPJ> that asks 3 questions*, with the questions defaulting to "no" The questions that get asked can be phrased in a lot of different ways; as an anarchist I think that pgp.com's is a lot more friendly than some. A few places go to the extremes of "Are you a Subject of the US Gov't? Do you agree to be bound by every provision of the US Export laws, written or unwritten, and not even CONSIDER giving this code to anyone who might be a Furriner? Sign in blood here!", while others are more like "Have you heard that the US export laws say <blah blah blah>? Do you state that it's ok for you to have the code, and that it's Not Our Fault?" MPJ> If all 3 answers are "yes", and if the email address given is in a MPJ> domain that might be in the USA (.com, .gov, .org, .us, .mil, .net, Of course, .com, .net, and .org are non-nationally-based domains, and even email servers physically located in the US often have users located outside US territory. CompuServe is a prime example, with users all over the world. Some US-only-code-distribution sites try to keep track of which sites are in the US, at least for .net. Since the MIT code distribution site has been allowed to operate in spite of this, the attitude of the Export Cops appears to be a "Yes, we know it's bogus and unenforceable, but we need to at least maintain the pretense that we're enforcing it, so don't ask for too much technical clarification or we'll have to say No." [* Mime-Attachment: x-audio Audio-Parameter-Setting: Don-Hopkins-Imitating-Monty-Python "WHAT is your name? WHAT is your favorite color? HOW FAR can a migrating swallow fly while carrying a coconut?" "Er, is that a European swallow, or an African swallow?" # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Information Hiding Workshop
by Ross Anderson 17 Dec '03

17 Dec '03

Call for Papers WORKSHOP ON INFORMATION HIDING 15 - 17 April 1998 Portland, Oregon Many researchers are interested in hiding information or in stopping other people doing this. Current research themes include copyright marking of igital objects, covert channels in computer systems, subliminal channels in cryptographic protocols, low-probability-of-intercept communications, broadcast encryption schemes, and various kinds of anonymity services ranging from steganography through location security to digital elections. These closely linked areas of study were brought together in 1996 by a workshop on information hiding held at the Isaac Newton Institute in Cambridge. This was felt to be very worthwhile by the research community, and it was decided to hold a second workshop in 1998. This second international workshop on information hiding will be held in Portland, Oregon from the 15th to the 17th April 1998. Instructions for authors: Interested parties are invited to submit papers on research and practice which are related to these areas of interest. Submissions can be made electronically (latex or postscript; preferred format is latex using llncs.sty) or in paper form; in the latter case, send eight copies suitable for blind refereeing (the authors' names should be on a separate cover sheet and there should be no obvious references). Papers should not exceed fifteen pages in length. Addresses for submission: awk(a)mailbox.jf.intel.com David Aucsmith Intel Architecture Labs 5200 N. E. Elam Young Parkway Hillsboro, OR 97124-6497 USA Deadlines: Paper submission: 31st December 1997 Notification of acceptance: 28th February 1998 Camera-ready copy for preproceedings: 31st March 1998 Camera-ready copy for final proceedings: 31st May 1998 Program committee: David Aucsmith (Intel) - chair Ross Anderson (Cambridge University) Steve Low (AT&T Bell Laboratories) Ira Moskowitz (US Naval Research Laboratory) Andreas Pfitzmann (Technical University of Dresden) Jean-Jacques Quisquater (Catholic University of Louvain) Gus Simmons (University of New Mexico) Michael Waidner (IBM, Zuerich) WWW version of cfp at http://www.cl.cam.ac.uk/users/rja14/ihws.html Details of the first (1996) information hiding workshop are at http://www.cl.cam.ac.uk/users/fapp2/steganography/bibliography/workshop.html

1 0

Re: Jim Bell goes to Jail!
by Lucky Green 17 Dec '03

17 Dec '03

At 09:17 AM 5/19/97 -0700, Alan Olsen wrote: >At 12:08 AM 5/19/97 -0700, Lucky Green wrote: > >>There are two reasons I can think of immediately why the feds would keep >>the warrant sealed. The first is that they don't want to reveal just how >>little evidence they have. The second reason is that the warrant might give >>some clue as to future actions/other suspects. Remember that the IRS agent >>found the AP essay by means of an Internet search engine. That almost >>certainly means he is following the discussions about Jim Bell on the Net. >>Such as the discussion on Cypherpunks. > >Actually the agent claimed to have found it among some papers in Jim's car >when the seized it for back taxes. I stand corrected. The essay was found in the car. However, after the essay was found the agent searched the Internet for copies of the essay and posts by Jim Bell discussing it. The agent's original affidavit states the number of AP related post by Jim the fed could find via a search engine. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred "I do believe that where there is a choice only between cowardice and violence, I would advise violence." Mahatma Gandhi

3 2

RE: Jim Bell goes to Jail--We should avoid raidable, physical meeting
by Chris DiBona 17 Dec '03

17 Dec '03

<RANT> I couldn't disagree with you more Tim. If the FBI wants to come raid a Cypherpunk meeting and arrest me, they should be ready for a law suit that will make thier heads spin. I mean can you think of anything more protected by the first amendment than a bunch of hobbiest getting together to discuss math, for christs sakes? I know a couple of lawyers who would drool at the chance to defend someone who is lily white and is arrested for meeting and discussing prime numbers. To suggest the cessation of meetings (no matter how worthless Dimitri) really seems to me to be counter to everything this group is about. </RANT> Chris DiBona -----Original Message----- From: Dr.Dimitri Vulis KOTM [SMTP:dlv@bwalk.dm.com] Sent: Monday, May 19, 1997 4:30 AM To: cypherpunks(a)toad.com Subject: Re: Jim Bell goes to Jail--We should avoid raidable, physical meeting Tim May <tcmay(a)got.net> writes: > (Also, I suggest _physical_ Cypherpunks meetings not be held for the > foreseeable future. I know I plan to skip them all. A gathering of "reputed > information terrorists, who have openly discussed assassination markets, C4 > explosives, and the destabilization of democratic governments" would be too > ripe a target for clowns like Reno, Freeh, and Kallstrom.) The physical meetings I've been to were not worth the trip. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

3 2

Re: In my opinion .... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Fount this interesting for traffic on a RPG ML... Jim Choate CyberTects ravage(a)ssz.com Forwarded message: > Date: Wed, 21 May 1997 11:29:50 +1000 (EST) > From: Michael Solomani Mifsud <solomani(a)electric-rain.net> > To: "traveller(a)MPGN.COM" <traveller(a)MPGN.COM> > Subject: Re: In my opinion .... > On Tue, 20 May 1997, Steve Brengard wrote: > > > In my opinion I see 'offended' personalities as a sign the direction the World Community is headed, and it's a damn shame. I believe that most members of the list live and work within the national boundaries of the United States. Last time I checked, the constitution still protected the right of free speech. Every US citizen is entitled to free speech. If someone chooses to express there option, no matter if with taste or without, so be it. It is this same right that allows all of us to respond to such opinions. If you do not like a post or opinion, that great! If you like and support an opinion or post, that's great too! > > No all are from the USA, I am from Australia, free speech is a privelage > not a right and it can be revoked. > > Anyway as free speech pertains to this list, what you said means > jack. > > The list runs on a *private* server, therefore when you post to the > server your using someone elses property with permission. If that > permission is withdrawn by the owner then you have no recourse. Free > speech is not pertinent unless the *owner* promotes it. The owner can be > as arbitary as s/he wishs with the rules of *his* list on *his* server. > > God bless capatalism > > > > > > But lets be adults about it all. This liberalist path the US has > taken UPSETS me. That's right, its getting so bad that no one can say > anything without offending someone. Get over it. We all live in a world > of differing opinions. You MUST accept that other have differing opinions > then yours, and you MUST accept that they are entitled to their opinions. You may not agree with those opinions, but that simply does not invalidate them. > > > > This I agree with whole heartedly - down with political correctness!

1 0

"GOOD NEWS"
by Jacks-Biz＠usa.net 17 Dec '03

17 Dec '03

>>>>> ARTHRITIS GONE FOREVER <<<<< One Bottle - One Time - That's it! and "BOOM YOUR WELL" It's A Miracle and It's GUARANTEED! Is (CMO)TM, Cetyl Myristoleate a CURE for Arthritis?????? We think so and so do 1,000's of past users! Call Jon Boulet at (602)267-9688 4-11pm (MST) for a FREE informa- tion package.

1 0

Forgery detection
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim C. May is just another garden variety Intel pansy that has been misusing its `manhole' so badly that the overstretched sphincter cannot hold back the shit that all Intellers are full of and it spills out onto this mailing list. /\_/\ ( x x ) -oo0-(o o)-0oo- Tim C. May

2 1

Availability of Pini's CryptoCD
by Bill Campbell 17 Dec '03

17 Dec '03

I've been trying to get a copy of the Crypto CD using the ISBN number he used to have listed on his web page. However, every bookstore I've checked with can find no reference to it. Has anyone on the list gotten it via this method? I looked for Pini's web page but it appears to be gone. Anyone know about sources for the CD? Thanks =Bill=

1 0

Availability of Pini's CryptoCD
by Bill Campbell 17 Dec '03

17 Dec '03

I've been trying to get a copy of the Crypto CD using the ISBN number he used to have listed on his web page. However, every bookstore I've checked with can find no reference to it. Has anyone on the list gotten it via this method? I looked for Pini's web page but it appears to be gone. Anyone know about sources for the CD? Thanks =Bill=

1 0

Re: Information Hiding Workshop
by Hal Finney 17 Dec '03

17 Dec '03

> WWW version of cfp at http://www.cl.cam.ac.uk/users/rja14/ihws.html > > Details of the first (1996) information hiding workshop are at > http://www.cl.cam.ac.uk/users/fapp2/steganography/bibliography/workshop.html The second URL above has abstracts from the conference, many of which sound very interesting from a CP point of view. It's kind of strange though that this topic encompasses both steganography and fingerprinting. The first has connotations of freedom, while the second connotes restrictions. What both have in common is embedding information undetectably and/or unremovably. The conference proceedings, "Information Hiding", are currently checked out from the local university library but I will be looking for them. There sounds like a lot of good stuff. Check out the URL for the T. Aura paper below; it has some statistics on actual LSB distributions in digital images, with implications for doing truly undetectable stego. Below are a few of the abstracts, with URL's for more info where available. Hal === Stretching the Limits of Steganography R Anderson, Info Hiding 96 pp 39--48 The author provides a brief overview of the state of the art in steganography, and shows how public key steganography is possible --- at least in the presence of a passive warden. The basic idea is that if the communicating parties can manipulate at least one out of n bits in the cover text, then the warden can not distinguish the parity of successive blocks of n bits from random noise; accordingly these parity bits can be used to hide cipher text in plain sight. Information theoretic limits of general steganography are also discussed, and it is shown that parity techniques can make many systems more efficient. Finally, the differential effectiveness of active and passive wardens is discussed. http://www.cl.cam.ac.uk/ftp/users/rja14/stegan.ps.gz === Computer Based Steganography: How It Works and Why Therefore Any Restrictions on Cryptography Are Nonsense, At Best E Franz, A Jerichow, S Möller, A Pfitzmann, I Stierand, Info Hiding 96 pp 7--21 The authors discuss a system for hiding ciphertext in the low order bits of an ISDN telephone signal, and report measurements of the perceptibility of various covert signal levels as a function of the cover signal and background noise. They also discuss the meaning of perfect and pragmatic security in the stego context. They argue that steganography is easy, and thus restrictions on crypto will simply force criminals to use stego which will make the law enforcement job harder. === Practical Invisibility in Digital Communications T Aura, Info Hiding 96 pp 265--278 The author discusses some of the problems of information hiding, including synchronising with a cover message which is a stream such digital audio. Where the cover message is a block, such as a digital picture, his technique is to use the Luby-Rackoff construction to embed the hidden bits pseudorandomly throughout the picture. A test implementation using SHA as the underlying primitive is reported. http://deadlock.hut.fi/ste/ste_html.html http://www.tcm.hut.fi/Opinnot/Tik-110.501/1995/steganography.html === Establishing Big Brother Using Covert Channels and Other Covert Techniques Y Desmedt, Info Hiding 96 pp 65--71 The author discusses a number of ways in which covert technologies that are initially deployed for relatively mundane purposes, such as copyright protection, can end up being subverted to provide the means of surveillance. This problem could become progressively more serious as more and more everyday objects become endowed with some kind of intelligence and communications capability. === Anonymous Addresses and Confidentiality of Location IW Jackson, Info Hiding 96 pp 115--120 The author describes how anonymous remailers can be used to process personal location information from active badges. The goal is that each user should be able to control who has access to information about his location; the mechanism is that the remailers forward this information to a server that the user trusts to enforce his security policy. The crypto protocols used in this system are described.

1 0

[PROJECT] Virtual c'punks forum
by Michael Wilson 17 Dec '03

17 Dec '03

Tim May recently made some comments that it might be a good idea to avoid having any physical meetings of cypherpunks for the near future, given the Jim Bell circumstance. This ties in with a project that I am currently undertaking, and I thought I would solicit assistance from the cypherpunks at large. Those of you familiar with the mechanisms of the net may be familiar with the concept of MUSHes (a variant of the Multi User Domain or MUD). While email/lists are a wonderful asynchronous communication tool, the value of an interactive medium which provides real-time discussion is a piece of the overall communication spectrum that has been overlooked (mostly). New efforts to move audio or video are interesting, but the net bandwidth needed is extreme at this stage, and frankly 'a word is worth a thousand pictures.' Myself and a friend would like to initiate a MUSH oriented around creating a virtual meeting place for virtual organizations, such as the cypherpunks. Chat systems like IRC don't provide a context, or some of the nifty features you can build into a MUSH. We can provide the coding muscle (although help is always welcome--MUSHcode is a bastard variant similar to C or PASCAL, with some LISPy list processing), but we need a host to provide us with a machine. If you might be interested, drop me a line, I can feed you the MUSH requirements (light--~20M disk space, and light processing, since you're just moving text). A MUSH for a virtual organization will provide benefits: -- an 'avatar' address in the net where people can leave you mail or connect for an interactive discussion; -- a virtual space, like an office, for people who want one; -- meeting rooms, with logging available; -- simulations; -- briefings, so for instance, a newbie to cypherpunks could be told the address and they could log in to receive a canned (but still more interactive) discussion of cypherpunk issues and technology, as well as the option to talk with other c'punks; -- clients for MUSHes are freely available (including window and shell variants), and we could also hack together a secure client; this will also be a good time to work out 'anonymous telnet' systems (MUSHes allow admin to see the host of origin, but not username). We would like to begin this project inside the next few weeks, and we could have something reasonably functional inside of a month after that. Incidentally, this is a project we've been working on for some time, just that the need and utility have suddenly become timely. Michael Wilson 5514706(a)mcimail.com

1 0

Message
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Date: Thu, 15 May 1997 20:03:35 -0600 (MDT) From: Graham-John Bullers <real(a)freenet.edmonton.ab.ca> To: lucifer Anonymous Remailer <lucifer(a)dhp.com> Cc: cypherpunks(a)toad.com Subject: Re: [CRYPTO] Blowfish Sender: owner-cypherpunks(a)toad.com I think Vulis needs each of us to send ten copies of this back to him. On Thu, 15 May 1997, lucifer Anonymous Remailer wrote: > Here, Tim C. May descends into Graham-John Bullers. He should have a cold shower and/or a Turkish coffee. > > ___\ > <o \__o Tim C. May > X\ X> > _/_\____<_\_ > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Graham-John Bullers Modulator of alt.2600.modulated ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ email : real(a)freenet.edmonton.ab.ca : ab756(a)freenet.toronto.on.ca ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.freenet.edmonton.ab.ca/~real/index.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Sun to sell 3des from Russia
by Adam Shostack 17 Dec '03

17 Dec '03

http://cnnfn.com/digitaljam/9705/19/sun/ Sun will reportedly sell encryption software through a Russian firm May 19, 1997: 6:26 a.m. ET NEW YORK (CNNfn) -- In an attempt to get around U.S. regulations regarding the export of encryption technology, Sun Microsystems Inc. is reportedly planning to sell data security software internationally through a Russian supplier. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: CFV: moderate sci.cryonics -- CENSORING antispammers
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

Joseph J. Strout (jstrout(a)ucsd.edu) wrote in * In article <Pine.SUN.3.91.970513130935.19729B-100000(a)panix.com>, Charles * Platt <cp(a)panix.com> wrote: * >> >Unacceptable messages include personal attacks, messages posted * >> >without a valid sender address, and any message not pertaining to the * >> >topics above. * > * >I would like to interpret "valid sender address" as meaning an address to * >which replies can be sent, without them bouncing. This would include * >anonymous remailers that allow an (anonymized) reply function. It would * >exclude anonymous remailers that don't allow such a function. * > * >Perhaps we could hear from the person who drafted the CFV to clarify this * >point. Or Keith Lynch could tell us whether he plans to use this * >interpretation. * * Yes, I drafted the CFV, and this is exactly what I meant by "valid sender * address". This is clearly distinguishable from a fake address, which does * not really exist and to which no email can be sent. Requiring a valid * return address applies a small amount of accountability to the poster. * This is the same criterion used, for example, when posting via DejaNews. There is nothing good about this "accountability", and this is precisely what I object to in the CFV. There is no need for "accountability" in the moderated newsgroup. - Igor.

1 0

Remailer messages of variable length
by nobody＠hidden.net 17 Dec '03

17 Dec '03

To complicate traffic analysis Sender can add a padding to his message before encrypting it for some remailer in chain. So that the message is shortened after decryption and stripping of pseudo headers. It can be done with a dummy header lines: ## Padding: fjx6zRURnnK1DV4CdL7gbHpnUiV1KbbRf5HatXiaD+ZPtH0 ... Also, for a length increment a remailer may understand commands like: ## Pad-length: 1K Pad-encrypt-for: remailer(a)replay.com It will then add the 'Padding:' header and re-encrypt the message with the appropriate remailer's public key. The next remailer in chain will see the padding and will try do decrypt the message twice... If stealth crypto is used, a random padding can be simply attached to the end of the message. Also, the remailer by itself can decide to increase a message length to cover some rare big messages. ---

1 0

test
by Jacks-Biz＠usa.net 17 Dec '03

17 Dec '03

test

1 0

RSA v PGP lawsuit
by Greg Broiles 17 Dec '03

17 Dec '03

I drove down to the courthouse in Redwood City today and took a look at the court file for RSA v PGP. The complaint is already online at <http://jya.com/rsavpgp.txt>; there are two exhibits which accompany the complaint in the file, Exhibit A is a 30-page patent license agreement (which I didn't bother to have copied at $.75/page), the second is Exhibit B, a letter from RSA's attorneys to Leonard Mikus of Lemcom Systems dated 4/16/97, which describes the basics of the dispute between RSA and PGP. I copied the letter and have placed it online at <http://www.parrhesia.com/rsapgp.html>. The lawsuit itself is not for monetary damages, but for declaratory and injunctive relief - RSA is asking the court to declare that the license agreement's provision regarding arbitration did not survive the termination of the license; that the royalty, payment, and accounting provisions of the license agreement did survive its termination; and for an injunction ordering PGP to comply with the agreement's terms for paying royalties and accounting for sales. What I find interesting is what is not included in the suit - a claim for patent infringement. (Such a claim can only be filed in federal court, and this suit was filed - at the plaintiff's choice - in San Mateo County Superior Court, a California state court.) The letter identifies several areas of disagreement between the parties: 1. RSA believes it had the right to approve or reject the PGP/Lemcom merger 2. RSA says that PGP has licensed the patent to OEM customers, in violation of the license agreement 3. RSA says that PGP has licensed certain source code to some customers, in violation of the license agreement 4. RSA says that Lemcom has not made a royalty payment since the third quarter of 1996. (But I'm sure I saw something - in the media? - where PGP says they've been making royalty payments.) And the letter says that RSA is immediately terminating PGP's license to use/make software including the RSA public-key algorithm because of those breaches. PGP hadn't filed a response yet - they'll have 30 days to do so from the date of service, and I think they were served with the suit somewhere around the 10th of May. (There was a proof of service document in the file, but I didn't bother having it copied.) -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto.

1 0

No Subject
by bob＠bobsoftheworld.org 17 Dec '03

17 Dec '03

Hello Dave, There is GeoGreeting Card waiting from Bob at http://www.geocities.com/GreetingCards/cards/Birthday.1323.html Thanks, GeoCities http://www.geocities.com/

1 0

NWS Internet Newsletter--Complimentary Issue
by NWS＠juno.com 17 Dec '03

17 Dec '03

__/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ Net.WWWorth STRATEGIES *INTERNET NEWSLETTER* <tm> __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ (C) NET.WWWORTH STRATEGIES ------- Week of May 20, 1997 _____________________________________________________________________ |_____________________________________________________________________| WELCOME to the "Net.WWWorth STRATEGIES Internet Newsletter", your Guide to Success in Marketing On the Internet! Due to prior interest in topics presented here, we have sent you this Free copy of the NWS Internet Newsletter. If for any reason you decide you do not want to continue to receive this Newsletter in the future, please see the end of this Issue for easy instructions to subscribe or un-subscribe. In future issues you will find highlights of online articles placed on the Net.WWWorth Strategies Web site designed to provide valuable information to assist you in your Home-Based Business and Online Marketing. In this issue of NWS Internet Newsletter, you will also find New Strategies that will provide you with successful "netvertising" tips and techniques. * Please Note: Net.WWWorth STRATEGIES does NOT make available its subscriber list to other companies. We value each and every subscriber and respect your privacy. _______________________________________________________________________ ^^^^^^^^^^^^^^^^^^^^^> IN THIS ISSUE <^^^^^^^^^^^^^^^^^^^^^^ 1. Wealth Building on the Internet! 2. PERFECT CREDIT! Free Software to Repair or Improve Your Credit! 3. Using Online Classified Advertising for FREE! (Over 2 Dozen Listing Sites you can use NOW for FREE!) ______________________________________________________________________ Net.WWWorth STRATEGIES Internet Newsletter SECTION 1 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ WEALTH BUILDING ON THE INTERNET ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Do you know how to use email? Then you should be making money hand over fist on the Internet! Many are earning Thousands Weekly simply by using this one idea.... By the time you're finished reading this article, you'll know EXACTLY how others are doing it, and how YOU can too! > Introducing the New Net.WWWorth STRATEGIES > "INTERNET WEALTH BUILDING SYSTEM." With this system you will be able to make a bundle of money on the Internet in a short time. Here's why.... The "Internet population explosion" is now under way. The actual numbers are a little hard to fathom, but here they are.... Last year in 1996 over A MILLION people per MONTH signed up with an Internet access provider! That's over 12 MILLION people per year! Even if this rate remains the same, and many expect it to increase, there will be more than 100 MILLION people online by the year 2000! So what does this mean to you? Simple. Like you, many of these 12 MILLION newcomers per year will be looking for legitimate business opportunities. They'll also be looking for specialized information that will teach them how to start and operate their own high income, online business. The fact is, there are simply just not enough sources to meet these overwhelming demands! THAT'S WHERE YOU COME IN! You can meet BOTH of these demands with this Complete "INTERNET WEALTH BUILDING SYSTEM!" With 5,952 new people joining the Web EVERY HOUR you will never run out of people needing this valuable information to earn money from home with their computer. WHAT YOU WILL RECEIVE IN THIS ALL NEW Net.WWWorth STRATEGIES "INTERNET WEALTH BUILDING SYSTEM" IS INCREDIBLE! SEE FOR YOURSELF, AND YOU'LL AGREE! 1. "The Amazing Inside Secrets to Profitable Online Marketing". 2. "The Ultimate Business Guide to Making Money on the Internet" 3. "The Professionals Secrets of Search Engine Positioning!" We have seen similar inferior reports selling on the Internet for as much as $59. (We sell ours all day long for $9.95 without trying!) 4. Over 2000 links where you can place classified ads and promote yourself online for FREE! 5. "The Information Freeway", Profit From The Internet! A 32 page manual (In Text File Format) that will teach you everything you need to know about making money online! You Also Receive Complete and UNLIMITED Ownership Rights. This is the Informative Manual You've Been Waiting for, and You Will Own It, AND be able to RESELL It! This manual will teach you just how easy it is to use the Internet for profit! The demand for information like this is growing daily! This is a $30.00 Value. 6. "Beyond The Basics of ... INTERNET E-MAIL!" Our Brand New Updated Version for 1997 Have you ever thought about marketing your product or service on the Internet? Very wise decision! It's no secret that the Internet has recently developed into the hottest marketing medium since television! This book will answer every question you've ever had about email! (The technical issues as well as the marketing issues.) Anyone marketing a product or service on the Internet will watch their sales soar once they put this knowledge to work for them! And as your profits increase, your actual time spent working, will decline! A $30.00 Value! (36 Pages In Text File Format). 7. "Learning To Drive Your Modem!" This report will teach you how to access Bulletin Board Systems (BBS's) for Fun and Even More Profit! A $15.00 Value! 8. We Will Send You A Listing Of OVER 500 ONLINE SOURCES Where You Can Advertise Any Product Absolutely FREE!! 9. You'll Also Receive the Best Selling Book on Disc... "HOW TO MAKE A FORTUNE FROM A PRODUCT YOU CAN GET FREE!" by Murry Broach This is the best book ever written about selling information by direct marketing. It leaves nothing out. It will practically take you by the hand and give you the most complete education in direct marketing that money can buy! Advertised on the Internet for $45.00! HERE'S A SMALL PORTION OF WHAT BROACH'S BOOK REVEALS: * How to project your final ad result when you have only a few days of results. * Exactly which magazines pull the most profitable response. * How a letter to your own mother could be the most profitable letter you ever write. * The single most important line in your direct mail piece and how to get it right. * How to save at least 17% on all your newspaper and magazine advertising. * How you can easily advertise FREE in Card Decks and other print ads. * The most difficult magazine in which to place an ad (this one will certainly surprise you.) * Step by Step how to write a classified ad that pulls response like crazy! * How to deal with federal and state regulatory agencies. * How to deal with the mail order rip-off artists. * Where to place a small display ad for maximum response. * A "by-product" of the mail order business that could make you as much profit as your main operation. * The one thing that will always kill a classified ad in its tracks! * The 10 best selling information subjects of all time. * How to easily DOUBLE the pull of a commission circular! 10. AND YOU ALSO RECEIVE HIS OTHER BEST SELLING BOOK ON DISK... "Revolutionary New Method of .... ADVERTISING FREE" by Murry Broach & Charles Linko THIS BOOK TEACHES YOU how to never pay for advertising again. Little known secrets about advertising on the Internet, In newsgroups, Mailing Lists and BBS's. BY ITSELF this book sells for $40.00 as Advertised on the Internet, but you get it at no additional cost! 11. The NEW Version of "Secrets of Online and Electronic Marketing" This Report (Complete - 20 Pages - In Text File Format.) is SO FULL of Useful Information that it would be worth the money at almost any price. This comprehensive guide reveals Secrets that the "Experts" hope you won't find out. The so called experts hope you Don't See this information because they want you to pay them $99.00, $200.00 or even $295.00 for the exact same material. Once You Have This Information in Your Hands You Will Have Unlocked the Secrets to Successfully Utilizing Online and Electronic Marketing. 12. And, we will also include at No Extra Cost another program, "U.S. Daily Newspapers". This will give you the names, addresses, etc., of OVER 1500 Newspapers across the United States to advertise in.. > Also, You Will Receive New FREE Bonus Reports For Making More > Money on the Internet and Starting Your Own Business! 13. Plus, Some Very Special Software to Create Your Very Own Information Products! This easy to use program will allow you to create your own electronic books, newsletters and order- generating reports. Upload them to the Commercial Services (AOL, CompuServe, etc.), the Internet and the thousands BBS's around the world. If it is a quality E-book or report, it will be picked up by hundreds, perhaps thousands, of other computer users and distribution points all over the world. Which could mean thousands of orders for YOU!! *** PLUS LOOK at These FREE BONUS Reports! A) "The Secrets of Internet and Online Marketing in 1997!" (Totally Different from the report title mentioned above.) B) "How to Buy and Sell Products Online!" C) "How to Advertise On The Internet!" D) "How to Be a High Paid Online Information Broker!" E) "How to Use the Major Online Services for Almost Nothing!" F) "How to Start and Operate Your Very Own Home-Based Business!" (A Complete Guide, Over 25 Pages When Printed.) G) "How to Easily Create Your Own Information Products!" H) "The Inside Secrets of Credit Repair, Online!" YOU RECEIVE ALL THIS, PLUS MORE! You won't find a more complete package anywhere! SEVEN DISKS, ALMOST 10 MEGABYTES OF INFORMATION! >>> SPECIAL FREE BONUS! <<< *** Also, As A Special BONUS You Will Receive A Computer Program To Make Copies Of Your New Disks FAST! As a Special FREE BONUS you will get a FAST DISK COPYING SOFTWARE PROGRAM. You will be able to make duplicates of your new disks in about 2 minutes (maybe less) per disk, average from start to finish. Also, this program will let you format your 3 1/2" floppy disks up to 1.76 (MB's) Megabytes. Put More Files and Information on Every Disk You Have! This is an Extremely Easy Program to use. ******************************************************************** As the owner of a computer, we know that you too are asking the question of the 90's and beyond: Can You Really Make Money Online? Serious Money with My Computer...WITHOUT ANY SPECIAL TALENTS or SKILLS? THE ANSWER IS YES! Yes, to the tune of TENS OF THOUSANDS OF DOLLARS! Selling Information By Mail is the World's EASIEST and LOWEST-PRICED Home Business For YOU To Get Started In!!! In Today's World, One of the Hottest Selling and Most Profitable Commodities is "INFORMATION". Now You Can CA$H IN BIG With This Complete Business Package of New Software Containing Page After Page of Money-Making Information, over 1,000 reports in all! >>> THAT'S RIGHT! OVER 1,000 REPORTS ON DISK! (Updated for 1997) A Few Sample Titles: 1. Survival Tips For Small Business 2. The Lazy Person's Secrets To Overnight Wealth 3. Secret's Of Getting FREE Advertising 4. Secret's Of Success With Chain Letters 5. How To Get Big Dollars In Your Mailbox Everyday 6. The Selling Secret's of Million Dollar Sales Letters 7. The Money-Maker's Guide To Easy Mail Order Riches 8. Insiders Secrets to Your Own Million $$$ Multi-Level Empire 9. Secrets Of The Richest People 10. How To Get A Visa or MasterCard With No Credit Check Plus, HUNDREDS and HUNDREDS MORE! If you have seen these reports selling on the Internet, you may have seen a similar CD-ROM with only about half as many Reports being sold for $99.95. These are the exact same Files plus many, MANY NEW ONES (Reports & Guides), except Now they're on 3 1/2" computer disks for a MUCH LOWER COST!. You WILL Receive OVER 1,000 MONEY-MAKING Reports on 3.5" disk. Each Report has been Professionally Researched and Written. OVER 8 Megabytes of Money-Making Information in Several Self-Extracting Win-Zip Files. When the Reports are printed out in 12 point type you will have... SO MANY PAGES OF INFORMATION! It Will Take You Over 2 Weeks to Read All of it. ``````````````````` IT'S YOUR CHOICE! Other Companies On The World Wide Web Are Selling some of These Same Reports For $15.00 to $50.00 Each! *Think Of The Money You Will Make!* If you have seen others selling some of these reports, or similar packages, Look No Further! > This is Your BEST MONEY-MAKING DEAL on the Internet! GUARANTEED!!! These 7 Disks Can Bring In a HUGE INCOME When You Use Them Yourself Or Sell Them for a BIG PROFIT! 1. Use the Information on the Disks in Your Own Business or for Your Own Personal Use! Discover Money-Making & Business Tips You Never Dreamed Existed! 2. Print the Reports and Sell Them Individually for $5.00 to $25.00 Each -- or MORE!! 3. Sell Copies of Each Disk for $10.00 to $30.00 Each or Sell Them as a Complete Information Package. Disk Packages Like This Sell for OVER $100!! ******************************************************************** >>> Here is a Summary of the Important Benefits of the <<< >>> Net.WWWorth STRATEGIES "INTERNET WEALTH BUILDING SYSTEM" <<< * UNLIMITED INCOME POTENTIAL! * No Inventory To Carry and Very Easy To Reproduce! * Extremely High Mark Up! * Easy and Inexpensive to Ship Via First Class Mail or UPS! * Ideal as a Primary Offer or as a Follow Up Offer to Existing Customers! * A Very Large Market With A MASSIVELY High Market Demand! * LOW START-UP COSTS With NO REAL COMPETITION! * You Can Operate It Anywhere and Your Income Will Last for Years! * YOU WILL RECEIVE FULL LIFETIME REPRINT AND RESELL RIGHTS!! Reprint and Resell Rights Mean That You Have FULL Authority to Sell A Particular Disk or Report. In Addition, You Also Have The Authority to Sell These Same Reproduction Rights to Others. Without Ever Paying ANY Royalties. The Profit Margin is VIRTUALLY UNLIMITED, because you purchase all this Valuable Information ONCE and sell it OVER and OVER and OVER Again! And because you own the LIFETIME Reprint Rights to these valuable reports, you can edit or alter them any way you like. Your only limits are your own imagination! Don't worry if you've never tried selling information reports before. The INSIDER SECRETS revealed in the Net.WWWorth STRATEGIES "INTERNET WEALTH BUILDING SYSTEM" will teach you everything you'll ever need to know to SUCCEED on the Net! In fact, the information ALONE, without any reprint rights, is worth hundreds, perhaps thousands of dollars! We think you'll be amazed by the Quality of these Books, Reports and Guides. Just follow these Proven Money-Making techniques and Orders Will Begin to FLOOD your mailbox with CA$H !! ************************************************************************ OK--Let's get down to the nitty gritty! I'm sure you're thinking, "O.K. Sounds good, but how much is this gonna set me back financially?" You've seen what others are charging for information that's not nearly as comprehensive as this...$200? $150? or even $75? >>> Well, Prepare To Be Shocked! <<< This Entire INTERNET WEALTH BUILDING SYSTEM IS ONLY $59.95* * This Package is normally $59.95, but because so many of our subscribers and others have emailed Net.WWWorth STRATEGIES asking us for information on marketing online, we are running the following Special with this one-time-only test-market. This SYSTEM will teach YOU EVERYTHING we are doing, and how YOU can be SUCCESSFUL at it, too! So how about a SPECIAL TEMPORARY PRICE of ONLY *** $39.95!!! >>>>>>>>>>>>>>>>>>> YES!!! ONLY $39.95 <<<<<<<<<<<<<<<<<<<<<<<< That is ONE THIRD OFF the regular low price! You save TWENTY DOLLARS! >!!!!!NOTE==> See ORDER FORM Below for temporary SPECIAL PRICE!!!!! > We're making this Entire SYSTEM available for JUST $29.95-- > That's HALF OFF!!! > (This is not our regular offer. This offer is only effective > through the last week of May '97!) ORDER NOW! > *** ALSO See ORDER FORM for Special Bonus Disk Offer! *** A few people have told us this whole thing sounds too good to be true! Well I assure it's not! But you don't have to take our word for it. Here are some recent customer comments from new NETrepreneurs who ordered their SYSTEM just a few weeks ago.... --------------------------------------------------------------------- >Dear Net.WWWorth STRATEGIES, > >Thanks for the "INTERNET WEALTH BUILDING SYSTEM!" >I had the hardest time putting it down until I had read (or at least >looked at) almost all of the reports. There is so much valuable >information here! I've owned the SYSTEM for only three weeks now >and I already have sold lots of copies. Almost everyone I sent the >Sales Letter your information taught me how to write has bought the >Package! I plan on making a ton of money with this over the next few >months! Thanks for this amazing opportunity! > >Mike Stratton, UT --------------------------------------------------------------------- >Thank You Net.WWWorth STRATEGIES! > >I followed your SYSTEM exactly as you taught me to, and within 10 days >from receiving my package, I have made 37 sales! This system is >INCREDIBLE! I can't wait to see just how much MORE amazing the >results are going to be, for me AND my customers! > >Doug Lewis, WI --------------------------------------------------------------------- TAKE ACTION and SEE some RESULTS FOR YOURSELF! Whether you're anxious to use the information for yourself, or to market and resell the product the way the SYSTEM teaches you to do, IT'S TIME TO TAKE YOUR CURRENT SUCCESS TO THE NEXT LEVEL! Even if you sell only ONE SYSTEM, you've broken even! Everything after that is PURE PROFIT! Remember: Others Are Selling Inferior Information for Hundreds of Dollars More, and Our Program is Priceless! Yet it Can be Yours For Only $39.95! Now that you know what you stand to gain, let's consider what you have to risk. "Just $39.95," I hear you say?--Wrong!!! This is a totally RISK FREE opportunity! We offer a 30 DAY FULL MONEY BACK GUARANTEE! If for any reason you feel that this opportunity is not for you, simply return the SYSTEM for an IMMEDIATE REFUND! NO QUESTIONS ASKED! ..And remember, not only will you be learning the most up to date information about making money online, you'll also be teaching others how to succeed! (And making money in the process!) TAKE ACTION NOW! You have NO RISK, and UNLIMITED OPPORTUNITY to succeed! ===================================================================== _____________________________________________________________________ Ordering the New Net.WWWorth STRATEGIES INTERNET WEALTH- BUILDING SYSTEM is easy! You can send your order by: Email, FAX, or Post-Mail Net.WWWorth STRATEGIES accepts: Personal Checks, Money Orders, "Quick Check" Checks by FAX, VISA and MASTERCARD \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ >--Print this form-- --ORDER FORM-- --cut here-- Your information: Please fill in completely. NAME________________________________________________________ ADDRESS_____________________________________________________ CITY____________________________STATE________ZIP____________ E-MAIL ADDRESS______________________________________________ (You will receive E-mail confirmation the day your order is received.) TELEPHONE # _____________________________(required for personal checks) To Order, CHECK ONE: _________ I am ordering within 3 DAYS from receiving my Complimentary Issue of the "NWS Internet Newsletter." Please include me in this exclusive Test-Market Special and send me the complete "INTERNET WEALTH BUILDING SYSTEM" AND ALL of the FREE Bonus Reports... for the Incredible Price of only $39.95 + $5.95 S&H within the U.S. and Canada ($45.90 total) $39.95 + $8.95 S&H outside the U.S. and Canada ($48.90 total) >>> ***Disregard Above Price! Temporarily only $29.95 + 5.95 S&H = $35.90 total!!! > HALF OFF THE REGULAR PRICE -- GOOD ONLY IF ORDERED BY MARCH 31!!! _________ I am ordering after the 3 DAY period. Send me the complete "INTERNET WEALTH BUILDING SYSTEM" for $59.95 + $5.95 S&H. ($65.90 total) _________ Please send me The Bonus Disk ...for ONLY an additional $15. BONUS DISK contains 50,000 Responsive email addresses of Online Opportunity Seekers (normally priced at $79.95.) AND The DeskTop Money Machine (normally priced at $24.95.) ... ALL for ONLY an additional $15. Send Payment for AMOUNT SELECTED ABOVE. ******************************************************************** METHOD of PAYMENT: _________ Check (by Postal Mail) _________ VISA _________ Check by FAX (QuickChex) _________ MASTERCARD _________ Money Order For Credit Card Orders... Name as it appears on card__________________________________________ Credit Card Account Number__________________________________________ Exp. Date_____________Signature_____________________________________ ____________________________________________________________________ * Please make check or money order payable to: Net.WWWorth STRATEGIES Email orders to: mailto:NWS@net-wwworth.com OR FAX your order to: Net.WWWorth STRATEGIES (608) 825-3403 OR Postmail order to: Net.WWWorth STRATEGIES 4514 Monona Drive, Suite 490 Madison, WI 53716 *** NOTICE! PLEASE Remember to E-mail us with your Name and Shipping Address to let us know you are placing an order. In the Subject Line Put: "INTERNET WEALTH BUILDING SYSTEM" We will have Your Package Ready to Mail Out PRIORITY MAIL to you the day we receive it. We want to make sure You to Get Your Order as Fast as Possible. E-mail us at==> mailto:NWS@net-wwworth.com /=====================================================\ *** If Faxing your payment by "Quick Check" ... 1. Please tape completed check here ==> 2. Fax this Order Form to (608) 825-3403. (your account will be charged electronically.) \======================================================/ We are always available by E-Mail for Complete FREE Consultation. We Want to Help You Succeed in Marketing YOUR Business Online. We will help you in any way we can to assist you in reaching your goals. The Opportunity Is Yours, Why Not Make Some MONEY With Your Personal Computer! It's Easy, Fun, and Very, Very Profitable!!! THE MARKET IS HERE - TODAY! TAKE ADVANTAGE OF IT! NOW! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ //////////////////////////////////////////////////////////////////// Net.WWWorth STRATEGIES Internet Newsletter SECTION 2 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ PERFECT CREDIT! Free Software to Repair or Improve Your Credit! ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >>> Download for FREE <<< a valuable software program to help you improve and secure an excellent credit rating! FREE SOFTWARE ***The Inside Secrets of Credit Repair!*** Everything you need to repair your own credit. FOR FREE! Learn about your rights to dispute credit report statements that are: inaccurate, out dated, don't belong to you or can't be verified! (FACT: one third of ALL credit profile entries are INACCURATE!) * Use this program to obtain your credit report. * Have at your disposal pre-written, proven effective dispute statements. * Learn how to start fresh with a AAA Credit Report. * Learn how to use your Federally granted legal rights to challenge negative entries in your credit profile. This Credit Repair program will guide you through the steps necessary to restore your credit rating LEGALLY, and with the least amount of effort and cost! FREE SOFTWARE ***The Inside Secrets of Credit Repair!*** Everything you need to repair your own credit. FOR FREE! CLICK HERE ==> ftp://gen.com/pub/wwworth/CreditRepair.exe \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ //////////////////////////////////////////////////////////////////// Net.WWWorth STRATEGIES Internet Newsletter SECTION 3 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Using Online Classified Advertising for FREE (Over A Dozen Ad Sites you can use NOW for FREE!) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ by: Morgan Westerman Hello fellow "Net-reprepreneur" In the time you've been using the Internet, you've possibly responded to an Online Classified Ad, or perhaps you've placed an Ad on the WWW or with Newsgroups. Maybe you're like I was a few months ago, and are fairly new to the Internet--so maybe you haven't yet learned how powerful the 'Net can be for whatever business you're in. I'd like to pass on something to you for FREE that I wish someone had shared with me several months ago when I was just getting started advertiszing online. You already know classified ads work, but where do you place them on the Internet to get the best responses? And where are the FREE ones with no strings attached? Did you even know they exist? *** Here is a listing of over A DOZEN SITES where you can place *** FREE CLASSIFIED ADS on the Internet! I am using almost all of them myself...and am glad to say I will earn over $12,000. this month (May) from business generated from ads such as the ones I've placed on these sites. And they're all FREE! Good Luck! ______________________________________________________________________ ______________________________________________________________________ ***** Net.WWWorth STRATEGIES TOP 10 FREE Classified Ads Sites ****** 1. http://www.gatewayads.com/index.html --- The Cyber Shopping Centre 2. http://www1.clearlight.com/~abotaleb/classifieds/index.html - Entr 3. http://www.netimages.com/classifieds.html ------------- Net Images 4. http://peoplesmarket.com/ ---------------- The Peoples Marketplace 5. http://www.americanet.com/Classified ------------------ Americanet 6. http://www.inetexchange.com/submit.htm --------- The Inet Exchange 7. http://www.icemall.com/allabout/links.html --------------- Icemall 8. http://www.1second.com//index.htm ------------------- 1 Second.com 9. http://ep.com/ -------------------------------------------- E-Page 10. http://www.jetcity.com/~perfect/welcome.html -------- Business Opp _______________________________________________________________________ PLUS a few MORE!!! * http://www.freeclassifieds.com/ * http://webcom.com/abc/abchome.html * http://www.dollarads.com --------- FREE for the first week * http://www.bargain-classifieds.com * http://www.comcorner.com/ *** This one, from the Top 10 List above is a One-Stop index of OVER 90 of the best Classified Ad Sites on the Internet! *** http://www.icemall.com/allabout/links.html ______________________________________________________________________ ______________________________________________________________________ Note: Every one of these Free Classifieds Sites is effectively operational and responsive as of 5-20-97. There are many more sites that have Free Classified Ads, but I have eliminated many that do not maintain their site well or generate significant traffic. This list of highly effective Classified Ad Sites has taken me many, many hours over several months to compile and qualify. I hope you can put this list to good use. I can tell you...Free Ads work! If you would like more information about the STRATEGIES I am using so successfully, or other helpful pointers on advertising and marketing online, please feel free to contact me personally at Net.WWWorth STRATEGIES. STRATEGIES. I wish you success! Sincerely, Morgan D. Westerman President -- Net.WWWorth STRATEGIES mailto:admin@net-wwworth.com \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ //////////////////////////////////////////////////////////////////////// _____________________________________________________________________ |_____________________________________________________________________| (C) NET.WWWORTH STRATEGIES ------- Week of May 20, 1997 To SUBSCRIBE to the "Net.WWWorth STRATEGIES Internet Newsletter," and receive your FREE bi-weekly copy filled with valuable information... mailto:newsletter@net-wwworth.com with "SUBSCRIBE" in the subject. to UNSUBSCRIBE, mailto:newsletter@net-wwworth.com with the word "UNSUBSCRIBE" in the subject. The Staff at Net.WWWorth STRATEGIES would like to thank you for taking the time to share a few of our STRATEGIES for SUCCESS. We Wish you the BEST of WEALTH and PROSPERITY! * Note - This electronic newsletter is Copyright (C)1997, Net.WWWorth STRATEGIES. No portion may be altered or reproduced without prior written consent from the publisher.

1 0

Re: PGP 5.0 beta is out at PGP.com
by Lucky Green 17 Dec '03

17 Dec '03

At 12:20 AM 5/20/97 -0400, Lynne L. Harrison wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >Well, now that I've seen some good and bad reviews regarding the beta >version, I'm still curious to hear from someone who uses PGPMail ver. 4.5 >with Eudora Pro. From what I've read, it seems the new beta version has >nothing new to add - except some quirky bugs and the source code that's >supposed to be available at some time in the future. I used PGPMail 4.5 since it first came out. Version 5.0 adds easy lookup of keys not on your keyring and support for PGP/MIME. And of course DSS/DH keys. Since those are not backwards compatible, it may be a while before they take off. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred "I do believe that where there is a choice only between cowardice and violence, I would advise violence." Mahatma Gandhi

1 0

Sun Exploits Encryption Loophole
by ! Drive 17 Dec '03

17 Dec '03

http://www.techweb.com/investor/newsroom/tinews/may/0519sunw.html Sun Microsystems prepares to take on federal government with plans to offer a product from Russia that provides 128-bit and triple DES encryption over the Internet. ----------------------- "The user does not know what he wants, until he sees what he gets"

1 0

Do Not read
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

1 0

Re: More on the Jim Bell
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:alan@ctrl-alt-del.com to Harka <=- In> The news story was a pretty interesting hatchet job. Included In> a number of horsemen and prominently mentioned encryption. In> They claimed that the reason for the raid on East's home was In> because he sent Bell encrypted messages containing various In> evil and unauthorized thoughts. In> Why am I not surprised... Why am I surprised...How the hell did they know, what the messages were about?? (Unless Jim saved his e-mails in plain-text to his hard drive, didn't bother to use SFS or something similar and all this stuff was recovered as a result of the initial search of his house. In which case a lot of list-members might want to start thinking about various possibilities...) Ciao Harka ... This is as bad as it can get -- but don't bet on it. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBM4FrhDltEBIEF0MBAQHFBgf+N22d3ObZH16A4i/GrO9oAyXgdeHzpHRP qRqXigYjy0HrgNGR4ja6i3AqAZjzmIEZKhut+shOqD6wtKhUQHXP6kMxPoVx95Ex FTEOZd6wmAFLzBpqnCxmcla9e7GFAcladnscf8BJhBBq3hBlGY6fkkA43wQOl68T o78wi6XL96JR6rvVSAU3iLXceEQnj3q5o/RfK4cU+s2MMpsuc78iAEujQ2y7FUsU SESRB0UU/h3UggqquPjoEbRNW349OQGEP8Oe+cOIVar3ZCczZqyps1TNllALsYti C6Eo1tcK3fqsRc38GOdSvzp3xj7BkyvX0+lnGFVWrGgYEGyl+G6OzA== =N/hb -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

Mixmaster@remail.obscura.com
by de Wet Vorster 17 Dec '03

17 Dec '03

Hi, Is this remailer still operational ? Will the following work ? :: Request-Remailing-To:CRIMSTOP@MAGNFS10.eskom.co.za Your help will be appreciated de Wet Vorster Eskom Corporate Investigations

1 0

Re: Public Key Break Paper
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

>John Young, <jya(a)pipeline.com>, writes: >>In early April we posted a message which referred to William H. Payne's paper >>"Public Key Cryptography is Easy to Break." > >First, it is not a general attack on public key cryptography, but rather it is >a specific method for attacking RSA. > >Second, I remember seeing this algorithm discussed on sci.crypt in the past, >probably in 1996. There was also a response/rebuttal to this paper in RSA's Ciphertext newsletter, Vol.2, No.1 (Summer 1994), p.9, "Public Key Cryptography is Not Easy to Break" which shows that it's not nearly as easy as the author of the original paper thinks. (I had another look at the unbalanced RSA proposal in the Autumn 1995 CryptoBytes as I was trying to find the above article, did anyone ever do anything with unbalanced RSA or was it just left as a curiosity?). Peter.

1 0

Re: Question: RC5 assembly code?
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

>I have the source code for RC5 encryption algorithm, but it is in C, well it >is still cool since it is "portable" but I am actually looking for a PowerPC >assembly code for the same, or at least for the Key Expansion, Encryption and >Decryption routines. > >The "formula" for RC5 is pretty interesting and looks like is made to be >implemented in Assembler. Not if it's x86 assembler. On the Pentium each rotate uses 4-5 non-pairable cycles, so rotates are very slow (each rotate is the equivalent of (in the best case) 8-10 normal instructions, so the two rotates in an RC5 round are the equivalent of 16-20 other instructions). According to Intel shifts and rotates have been optimised on the PPro so they're slight faster than on the P5, but I haven't looked at the details yet. I haven't tried to formulate the RC5 core in asm yet (because of the patent - what good is it writing code which noone can use?) but on Intel hardware it's certainly going to be a lot slower than it looks (the much more complex CAST core is faster than just the rotates from the RC5 core). This is kind of unfortunate, because it's a nice algorithm. Peter.

1 0

A little list... [Re: Jim Bell goes to Jail!]
by Peter Trei 17 Dec '03

17 Dec '03

DCF writes: >At 09:12 PM 5/18/97 -0700, Alan Olsen wrote: >>Some of his statements could have been taken as advocating the killing of >>federal employees of various sorts. The question is whether he actually >>tried >>to arrange it in real life. (Which I doubt.) >In the U.S., it is legal to advocate killing anyone except Clinton and his >family and maybe the veep. >DCF While I think AP is appalling (I regard all premeditated killing as unacceptable, whether committed by the state or individuals), the following might be fun: Set up a web page which collects names of 'people you'd like to see hit by a bus'. This is a poll, not AP - no money is involved, and there is no suggestion that these desires be carried into action. Allow people to anonymously add their vote to names already on the list, or nominate new ones themselves. While there is the possibility of abuse (someone sets up a 'bot to nominate their ex-wife 10,000 times), clearly you would not want to try to keep track of who voted for who. I expect we'd see The Usual Suspects, and a lot of people who are known in only limited spheres (sports figures, widely disliked bosses and CEOs). There would also be many individuals with a single vote against them, and a lot of people notorious only on the net. One refinement might be to display names only for people with some threshold of strikes against them - say 20 votes. Another would be to allow people to register both 'yea' or 'nay' on names on the list. I don't have a facilities to set this up myself, so don't ask me. If someone else does it, I hope they check to see of there are any legal implications. Peter Trei trei(a)process.com --------------------------- [ KOKO (the newly appointed Grand High Executioner): I am happy to think that there will be no difficulty in finding plenty of people whose loss will be a distinct gain to society at large. SONG--KO-KO with CHORUS OF MEN. As some day it may happen that a victim must be found, I've got a little list--I've got a little list Of society offenders who might well be underground, And who never would be missed--who never would be missed! There's the pestilential nuisances who write for autographs-- All people who have flabby hands and irritating laughs-- All children who are up in dates, and floor you with 'em flat-- All persons who in shaking hands, shake hands with you like that-- And all third persons who on spoiling tete-a-tetes insist-- They'd none of 'em be missed--they'd none of 'em be missed! etc.... Gilbert & Sullivan, "The Mikado" ]

1 0

Microsoft Responds To Java Security Issues By Posting Fix
by Site Builder Network 17 Dec '03

17 Dec '03

*** Microsoft (R) Site Builder Network *** In this issue: NEWS & ANNOUNCEMENTS * MICROSOFT RESPONDS TO JAVA SECURITY ISSUES BY POSTING FIX * ANNOUNCING NEW SITE BUILDER NETWORK DISCUSSION GROUPS * SITE BUILDER WORKSHOP ADDS DYNAMIC HTML AREA MEMBERSHIP DOWNLOADS AND NEWS SPOTLIGHT * EDGEWORX OFFER TO SITE BUILDER MEMBERS * WEBMEN TALKING IS NOW BIWEEKLY * LIMITED TIME ONLY - AWARD-WINNING JAVA AUTHORING TOOL * EG SOFTOWARE'S WEBTRENDS WEB SERVER LOG FILE ANALYZER * HIT LIST PROFESSIONAL 3.0 - TRIAL VERSION PLEASE NOTE: Email format restrictions may not allow a URL to fit on one line. Thus, when you click the URL line in the email message, you may get a browser error (e.g., non-existent link). If the URL does not seem to work, please make certain you select, copy, then paste the entire link address into your browser's target address field. Thank you. NEWS & ANNOUNCEMENTS MICROSOFT RESPONDS TO JAVA SECURITY ISSUES BY POSTING FIX Researchers at the University of Washington recently notified Microsoft and other vendors of several dozen anomalies in Java virtual machines that could potentially result in Java applets causing a system crash and/or loss of data. Microsoft today announced the immediate availability of an updated version of the Microsoft virtual machine for Java that addresses the issues raised by the University of Washington. The researchers with the Kimera Project in the Department of Computer Science and Engineering at the University of Washington have an automatic validation technology that allows them to quickly identify potential bugs in commercial Java implementations. Their tests uncovered a variety of Java anomalies, including 17 which affect the Microsoft virtual machine and 24 which affect Sun Microsystem's virtual machine. The anomalies are in the bytecode "verifier", which enforces the security of the Java sandbox. There have been no known attacks that exploit these anomalies, but they could potentially allow a malicious application to get access outside the sandbox. More information is available on the University of Washington's Kimera Project website at http://www.washington.edu/newsroom/news/k051997.html. The updated version of the Microsoft virtual machine is available to all users of Internet Explorer, Internet Information Server and Visual J++ from http://www.microsoft.com/java. All users and developers are encouraged to download the new version of the virtual machine. The updated version will also be distributed with all future releases of Microsoft products containing the virtual machine. ANNOUNCING NEW SITE BUILDER NETWORK DISCUSSION GROUPS Because the Site Builder's Exchange discussion group has been so busy lately, we've decided to divide it into focused discussion groups. The Site Builder Network Forum offers ongoing discussions on following topics: Internet Explorer/HTML, Java/Visual J++, Active Server Pages and Web and Graphic Design. Check out this cool members-only benefit provided by The Cobb Group accessible through the Level 1 lounge. Not a member? It's time to sign up! SITE BUILDER WORKSHOP ADDS DYNAMIC HTML AREA Site Builder Workshop has added a whole new section just for information on Dynamic HTML at http://www.microsoft.com/workshop/author/dhtml/. This powerful new technology in Internet Explorer unchains HTML authors--and their Web pages--and makes interactive components easy to build. Microsoft's Dynamic HTML technology gives authors creative control so they can manipulate any page element and change styles, positioning, and content at any time -- not only when the page is loaded. MEMBERSHIP DOWNLOADS AND NEWS SPOTLIGHT EDGEWORX OFFER TO SITE BUILDER MEMBERS Antares is offering all Site Builder members the opportunity to purchase the EdgeworX Developer Edition at the exceptional promotional price of $99 (vs. $399 List Price). This promotional price will be available on a purchase of EdgeworX Developer Edition made through May 31, 1997. This offer is made exclusively to Site Builder members. -This special promotional price is available only through a link on the EdgeworX download area of the Site Builder Network site. -Purchasers will be required to provide their SBN Membership to claim the discount. -It is not necessary to download evaluation copy of EdgeworX Developer Edition to take advantage of this promotion. Take advantage of this special offer and learn why everyone is talking about EdgeworX. For example: "With the tight integration of VBA and DCOM support as part of the EdgeworX product, any of the 3 million Visual Basic developers will be able to quickly create web applications using a familiar object-based design environment." - Tom Button, Director of the developer tools division at Microsoft. "EdgeworX from Antares Alliance Makes VB Programmers into Web Experts." - Michael Goulde, Seybold. EdgeworX is a VBA and DCOM based object-oriented development and execution framework for creating dynamic Web applications. Based on Microsoft's Visual Basic for Applications (VBA), EdgeworX provides a comprehensive library of DCOM-enabled ActiveX objects, which enable developers to quickly and easily build dynamic, interactive Web applications. Download your evaluation copy today. WEBMEN TALKING IS NOW BIWEEKLY Our popular Site Builder Network Magazine question-and- answer column, Web Men Talking, will double in frequency, from monthly to biweekly! If you aren't one of the 10,000 people who read the column every week, you are missing out! Check out http://www.microsoft.com/sitebuilder/columnists/default .asp. LIMITED TIME ONLY - AWARD-WINNING JAVA AUTHORING TOOL Jamba is a Java authoring tool for web content creators and graphic designers who want to take advantage of Java's ability to add animation and interactive navigation to static HTML pages. Jamba offers a non- programming environment using a point & click interface that creates feature-rich Java applets that run across all major web browsers and all platforms. Unlike Macromedia's Shockwave and other tools that use a plug- in strategy, Jamba applets do not require the browser to first download and install or updated large plug-ins before the applet can be viewed. Download the 30-day trial version for one week only! Go to http://www.microsoft.com/sbnmember/download/download.asp E.G. SOFTWARE'S WEB TRENDS WEB SERVER LOG FILE ANALYZER - TRIAL VERSION WebTrends is the fastest, most popular Web server log file analyzer on the market, and the only product to provide real-time analysis and reporting for IIS and other Web servers. Go to http://www.microsoft.com/sbnmember/download/download.asp HIT LIST PROFESSIONAL 3.0 - TRIAL VERSION Get to know the who, what, when, where, and why of your Web-site traffic. Hit List Professional 3.0 by Marketwave provides sophisticated analysis of your Web- site traffic and visitor usage -- think of it as 'Caller ID' for your Web site. Until June 9, 1997, SBN members can buy Hit List Professional 3.0 for 50% off the retail price! Go to http://www.microsoft.com/sbnmember/download/download.asp ________________________________________ To increase or decrease the frequency of e-mail or postal mail you receive from Site Builder Network, please go to http://www.microsoft.com/sbnmember/apply/apply.asp and click "Change Your Membership." You will find check boxes, which will allow you to choose the frequency ofmail you wish to receive (including none). To cancel your SBN membership, please put "Cancel my Membership" in the subject heading and e-mail back to SBN(a)microsoft.com.

1 0

Swiss Consortium Chooses RPK Fast Public Key Cryptosystem for Next Generation Wireless Electronic Transactions
by Jack Oswald 17 Dec '03

17 Dec '03

Also see recent press coverage in Infoworld: RPK announces deal for fast crypto with Swiss consortium http://www.infoworld.com/cgi-bin/displayStory.pl?97059.wrpk.htm SET 2.0 on the way http://www.infoworld.com/cgi-bin/displayArchive.pl?/97/16/t04-16.1.htm PRESS RELEASE For Release May 19, 1997 RPK, Inc.: Jack Oswald, +1 408.479.7874, joswald(a)rpkusa.com, http://www.rpk.co.nz ADESA, Inc.: Maurice Jaccard,+41 22.910.29.14, maujacca(a)iprolink.ch Swiss Consortium Chooses RPK Fast Public Key Cryptosystem for Next Generation Wireless Electronic Transactions Swiss Federal Institute of Technology (EPFL) and ADESA, Inc. introduce HAWK VLSI cryptography-enhanced processor San Francisco, CA - RPK, Inc. announced today that a consortium of the Swiss Federal Institute of Technology (EPFL) and ADESA, Inc., a Swiss application specific integrated circuit (ASIC) design firm have chosen the RPK Fast Public Key Cryptosystem to provide strong cryptographic security in a next generation wireless electronic transactions application. At the same time, EPFL and ADESA unveiled HAWK a new generation cryptography-enhanced microprocessor specifically designed for use in high speed/low power embedded applications. "The RPK encryption technology won the design review after an extensive evaluation of all existing cryptosystems based on well known and understood cryptographic techniques," said Maurice Jaccard, Managing Director of ADESA, Inc. "With RPK there are no compromises. We get uncompromised security, high speed and low cost of implementation." "RPK is a strong encryption technology based on well know and trusted cryptographic techniques," said Jack Oswald, President and CEO of RPK Inc. "Having RPK chosen by the Swiss for this breakthrough electronic-commerce application is the strongest endorsement we could possibly achieve for the RPK technology." Wireless Electronic Transactions Application The collaboration of RPK, EPFL and ADESA has resulted in a prototype application that promises to become the "wallet of the future". This new wireless electronic transaction application may take the form of a credit card, a watch or a key chain and will sport features analogous to the leather wallets used today by billions of people worldwide. Early designs of the system allow the user to withdraw and hold cash in multiple currencies, as well as, purchase and hold vouchers for hotels, planes and car rentals all through the use of wireless communications technology. Officials in charge of the project envision that such devices could also become a personal key chain for gaining access to motor vehicles, offices and dwellings, in addition to traditional credit card uses. ADESA concluded that performance of the RPK implementation in the prototype far exceeded existing smart card implementations based on the RSA and other algorithms. The RPK technology performs the necessary encryption functions in less than 10 milliseconds using an 823-bit key compared to the best performing RSA-based equivalents that require greater than 100 milliseconds to perform the same type of function using a much weaker 512-bit key. The application is not limited to 823-bit keys. The design of the system, based on the new HAWK processor is flexible and can accommodate and process various sized keys, smaller or larger than 823 bits based on downloadable parameters. ADESA officials explained that the simplicity of the RPK algorithm makes it much simpler to implement than the popular RSA approach. It was RPK's simplicity, offering a much faster and cheaper solution while providing even higher security, that drove the choice over RSA for this application. About the RPK Fast Public Key Cryptosystem RPK is a relatively new public key cryptosystem that is based on mathematics widely used in cryptography today. It was designed to be immediately commercially viable without the years of study that a new area of mathematics normally requires, such as the Elliptic Curve Cryptosystem (ECC). The source of the security for RPK is the same as that of Diffie-Hellman key exchange, a widely used and well studied cryptographic technique. RPK offers real advantages for high speed networking, SmartCard, wireless communication applications as well as high volume software processes such as credit card transactions. RPK has at its core an invention called a Mixture Generator. In the preferred implementation, three fairly long linear feedback shift registers are used. This state machine has two modes of operation. One that uses the shift registers for exponentiation and the other as a generator of a random stream of bits used in a combining phase for the actual encryption. Effectively, RPK allows for the amortization of two "costly" exponentiations over the entire length of a message because the core engine is used to initially establish a secure state of the machine and then switches modes to perform very high speed encryption. This has been referred to as a paradigm shift where the operation of encryption does not require the costly calculations that an RSA or even an ECC implementation would require for each block of data that is about the size of the key. This mechanism can also be implemented in silicon quite efficiently such that at high strength it is much cheaper to produce than alternative technologies. Finally, it is also possible to create a Mixture Generator that is made up of Elliptic Curve groups which would provide a similarly speedy and efficient initialization mode that could still produce high speed encryption as noted above. About the HAWK VLSI Crypto Processor The HAWK VLSI cryptography-enhanced processor is the result of more than three years of research and development conducted at the EPFL in Lausanne, Switzerland in the area of high speed compression and encryption. The HAWK processor will benefit most cryptography implementations but is particularly well suited for use with RPK. "The HAWK processor is the most innovative approach that we have seen yet for implementing cryptographic processes in silicon," said Bill Raike, Chief Technology Officer for RPK Inc. and inventor of the RPK fast public key cryptosystem. "HAWK breaks the barrier for high speed, low cost, low power and high strength encryption for embedded systems." Background RPK, Inc. is a supplier of next generation fast public key encryption technology. RPK was invented and originally patented in New Zealand. The company is therefore unaffected by restrictive U.S. export rules. RPK has been successfully exported to virtually all countries of the world at high strength. The company's headquarters are based in San Francisco, California, USA, with an offshore research and development center located outside of Auckland, New Zealand. http://www.rpk.co.nz ADESA, Inc. is a leading ASIC design firm based in Geneva, Switzerland with expertise in embedded and cryptographic applications. EPFL is a leading teaching and research technical institute in Lausanne, Switzerland. The school is known for its work in advanced processor design. ***

1 0

Re: Public Key Break Paper
by Hal Finney 17 Dec '03

17 Dec '03

Peter Gutmann, pgut001(a)cs.auckland.ac.nz, writes: > (I had another look at the unbalanced RSA proposal in the Autumn 1995 > CryptoBytes as I was trying to find the above article, did anyone ever do > anything with unbalanced RSA or was it just left as a curiosity?). The unbalanced RSA idea, by Shamir, was to choose primes p and q with p considerably less than q, e.g. p = 500 bits, q = 4500 bits. With numbers of this size, the difficulty of factoring a 5000 bit n = pq is still just as hard as if p and q were both about 2500 bits. Then, you only encrypt numbers < p, and it turns out that you can do the decryption mod p rather than mod n, so decrypt is much, much faster than for a conventional 5000 bit modulus. There have been some attacks on this. The main limitation is that the encrypted number is supposed to be < p. There is a chosen-cyphertext attack, taking an x a few bits larger than p, encrypting it, and asking for the resulting decryption. This produces x mod p, which combined with x can be used to find p. Another attack along these lines is to guess x about the size of p, send a legitimate message based on it, then watch the receiver's behavior to try to determine whether the message had decrypted correctly. If x < p it would decrypt OK, otherwise it would decrypt to garbage. Repeat this to narrow down an interval containing p. I believe these were presented by Quisquater at the Crypto 96 rump session, although I think he was referring in part to some attacks which had already been discovered. Hal

1 0

Disneyfication, Privatization of the Public Domain... Turn the Planet into a Strip-Mall and Theme Park.....
by mf＠mediafilter.org 17 Dec '03

17 Dec '03

Disneyfication, Privatization of the Public Domain... Turn the Planet into a Strip-Mall and Theme Park..... Hear the realaudio netcast of Infinity Factory Hosted by Richard Metzger of Disinfo.com talking with Paul Garrin about name.space and the future of the net. originally netcast live on May 11, 1997. (this is a realaudio link, so be prepared...) http://www.pseudo.com/archives/infinityMay11_1997_0848pm.ram name.space: http://name.space.xs2.net DisInfo: http://www.disinfo.com

1 0