December 2003 - cypherpunks-legacy

OK to send e-mail?
by owl＠owlseye.com 17 Dec '03

17 Dec '03

OK to send an e-mail to cypherpunks(a)ssz.com?

1 0

Swisskey: Swiss issuing office for Internet certificates established
by Alexandre Maret 17 Dec '03

17 Dec '03

http://www.swisskey.com/mitteilung_e.html Swisskey: Swiss issuing office for Internet certificates established Zurich/Berne, 18 December 1997 - Swisscom, Telekurs and DigiSigna have established the joint venture Swisskey and thus laid the foundations for secure electronic commerce in the worldwide web. The certificates issued by Swisskey are available to individuals and companies and enable clear and secure mutual identification in the Internet. Swisskey will be registered in January 1998 and will start offering its services on the Internet at www.swisskey.com in the second quarter of 1998. Electronic commerce has good future prospects: telebanking and teleshopping in the Internet and the secure exchange of EDI messages between applications are some of its possible applications. So far, however, service offers and their acceptance have both been limited, since service providers and customers cannot identify each other immediately and are dependent on bilateral agreements. Electronic certificates are the solution to this problem. They offer mutual trust in the otherwise anonymous field of electronic commerce. They allow users to be identified and texts to be signed digitally and encoded in such a way that only the recipient can read them. Users can obtain a certificate from a registration office by showing some form of identification. Possible registration offices are post offices, Swisscom shops, banks and chambers of commerce. "The Swisskey joint venture aims to encourage the development of electronic commerce in Switzerland by offering a customerfriendly, secure and upgradeable certification service," explained Swisskey Managing Director, Christian Graber. Swisskey will offer SSL certificates as supported by all common Internet browsers (X.509 certificates), Edifact certificates for EDI messages and application and companyspecific certificates for uses such as Intranet applications. Swisscom Ltd and Telekurs Holding AG each hold 47.5% of Swisskey AG and DigiSigna (an association of chambers of commerce of Switzerland and the Principality of Liechtenstein) holds the remaining 5%. DigiSigna also aims to win international approval for the Swisskey certificates. For questions: DigiSigna Otto Müller omueller(a)zurichcci.ch Tel. 01 / 221 07 42 Fax. 01 / 221 76 15 Telekurs Holding AG Bernhard Wenger wnb(a)holding.telekurs.com Tel. 01 / 279 22 20 Fax. 01 / 279 23 36 Swisscom Sepp Huber Josef.Huber(a)swisscom.com Tel. 031 / 342 13 00 Fax. 031 / 342 13 10

1 0

reasons for local eternity proxies (Re: remailer resistancs to attack) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 16 Jan 1998 21:42:52 GMT > From: Adam Back <aba(a)dcs.ex.ac.uk> > Subject: reasons for local eternity proxies (Re: remailer resistancs to attack) > > (Reason for local news feed being preferabl is that it protects the > NNTP traffic which would otherwise allow eavesdroppers to observer > which articles you were reading. SSL is only a partial solution > because you are then trusting the SSL NNTP server operator.) >From a criminal perspective is it really important to know what you were reading but rather what you were generating? Using Van Eck it would be much easier and cheaper to determine what you were reading than spend the money, physical resources, and people time to figure it using traffic analysis. It's more incriminating to prove you sent a request for illicit data than you downloaded it. Sending it out shows premeditated intent. Simply downloading it shows only curiosity with no other evidence. Simple traffic analysis will determine your sourcing data even if it is fully encrypted. > Local servers don't generate any traffic, "local server" is really a > misnomer, it is a local proxy for reading news... it presents a view > of USENET articles which makes them appear as web pages. It keeps > copies of those web pages more up to date versions are read in news, > this allows fast access to the web space. I point my local news readers at my ISP's news server so I don't flood my link with several gig's of traffic a day. This is the primary objection to hosting a 'real' local news server - the bandwidth and hardware resource issues place it outside of most peoples financial ability. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

PEOPLEFINDERS
by Steve Schear 17 Dec '03

17 Dec '03

>From: search(a)peoplefinders.net >Sender: search(a)peoplefinders.net >To: <aztarman(a)aol.com> >Reply-To: search(a)peoplefinders.net >Subject: PEOPLEFINDERS >Mime-Version: 1.0 >Date: Thu, 15 Jan 1998 05:35:48 -0500 > >Imagine finding old friends, classmates, long lost relatives, old shipmates, ex-husbands, ex-wives, old girlfriends, or old boyfriends... > >WE FIND PEOPLE > >No matter why you are looking we can help. We utilize only ethical and legal means. Nothing is obtained though any illegal means whatsoever. > >The explosion in on-line information has allowed us to build an extremely powerful database searching program specifically designed to locate people... > >We search over 90 data bases instantly -- electronically searching virtually every clue that a trained gumshoe might think of -- and then some. > >PUBLIC RECORDS ARE AVAILABLE > >No doubt you have read that information about you and almost everyone else is available on-line. Its TRUE! Every time you renew your drivers license, apply for credit, order goods my mail or subscribe to a periodical, the information about who you are and where you can be found is created. The information is not always free -- but it is certainly out there -- readily available to anyone who knows how and where to look. > >If fact there is entirely too much information available! Huge amounts of data make searching for your piece of the puzzle exceedingly difficult. > >WE HAVE AUTOMATED THE PROCESS > >Our computers search in a systematic automated way for the information you need. Without an organized and automated search program you would literally drown in the data. Which state's motor vehicle records would you check first? What if it cost some money? > >We know where to look -- we have been locating people for years working with insurance companies, collection agencies and attorneys. If a public record is available we will know about it, and we will have the access necessary to get results. > >LOW COST! > >Our highly organized and automated structure allows us to work for our clients on a person by person basis for a very low cost -- $19.00 per search payable by credit card or check. Not bad considering that access to some of the 34 states who offer DMV information on-line can cost upwards of $200 per year. And private detectives can charge $200 per hour!!! > >WHAT YOU GET > >The basic search results will give you the name and address of the person you are searching for. The cost for this basic service is $19.00. Additional charges are: > > Telephone number: $10.00 > Social Security number: $10.00 > Spouse name: $10.00 > Date of Birth: $10.00 > >You will only be charged for the information you request and the information we are able to provide. > >HOW IT WORKS > >If we find the person you are looking for, and only if we find them, we will charge your credit card or deposit your check. If we don't find them, we won't charge you or we will return your check. You don't need to sign a long-term contract, have a modem hook up, Internet access or anything else. Simply print the Search Form, complete it and fax it to us at (212) 213-3320. We will fulfill your request within twenty four hours. If E-mail is more convenient, just complete the form below and reply to search(a)peoplefinders.net, or if you prefer, you can mail your request to: PeopleFinders, Inc. 11 East 36th Street, 10th Floor, New York, NY 10016. > >REMEMBER - IT'S GUARANTEED > >If you are not satisfied within 30 days from the time you receive your results -- we will refund your money!!! > >ORDER FORM > >PLEASE ATTEMPT TO LOCATE THE PERSON LISTED BELOW. (PLEASE PRINT CLEARLY) > >1. SUBJECT COMPLETE NAME: _____________________________________ > (middle initial helps) >2. LAST KNOWN ADDRESS: _____________________________________ > >3. CITY, STATE AND ZIP: _____________________________________ > >4. LAST KNOWN TELEPHONE: _____________________________________ > (include area code) >5. SUBJECT DATE OF BIRTH: _____________________________________ > (approximate is OK) >6. SUBJECT SOCIAL SECURITY NO.: _____________________________________ > >7. MISCELLANEOUS INFORMATION: _____________________________________ > (any other info you have) > >Items (1) (2) and (3) above - REQUIRED. >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > UPON COMPLETION OF THE ABOVE REQUESTED SEARCH, PLEASE: > >[ ] MAIL or [ ] FAX or [ ] E-mail the results of the search to: > >YOUR NAME (please print) _____________________________________ >YOUR ADDRESS (if mailing) _____________________________________ >CITY, STATE and ZIP (if mailing) _____________________________________ >YOUR FAX NUMBER (if faxing) _____________________________________ >YOUR E-MAIL ADDRESS _____________________________________ > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > CHECK THE APPROPRIATE BOXES FOR THE SERVICES YOU REQUIRE. > >[ ] $19.00 per request.(The basic search results will give you the name and address of the person you are searching for.) > >[ ] Additional $10.00 for person's telephone number (if available). > >[ ] Additional $10.00 for person's social security number (if available). > >[ ] Additional $10.00 for person's spouse name (if available). > >[ ] Additional $10.00 for person's date of birth (if available). > >Total Cost of search (if successful) $ ______________________ > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > PLEASE ACCEPT THE FOLLOWING PAYMENT: > >[ ] My check is enclosed. >[ ] Charge my [ ] Amex [ ] MC [ ] VISA > >ACCOUNT NUMBER: ______________________ EXPIRATION: __________________ > >I understand that my check will not be deposited or my credit card charged unless PeopleFinders locates the subject person I am seeking. PeopleFinders, Inc. will quarry their data bases and attempt to locate the person. If successful, PeopleFinders will deposit my check or charge my credit card. I agree that I have thirty (30) days to request a full refund if I am not satisfied with the results. I hereby authorize PeopleFinders to charge my credit card. > >AUTHORIZED SIGNATURE: _________________________________________ > >PRINT this page and mail or fax the order form to: > >PeopleFinders, Inc. >11 East 36th Street, 10th Floor >New York, NY 10016 >FAX (212) 213-3320 > >Additional information available at (212) 213-3000 Ext. 1900 or via E-mail - search(a)peoplefinders.net. Thank you. > >//////////////////////////////// > >If you wish your name removed from all future mailings - simply reply to this message with "REMOVE" in the subject line. Thank you. > >//////////////////////////////// >

1 0

Re: Where for lunch on Tue.? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > That could explain why every girl he gets dumps him in less than a month... > > He's cheap which means he shows up with wilted flowers and day-old bread. > Also explains why he can't keep people out of his crease, he uses them old > dull skates. Sorry, that wasn't supposed to go out to you folks....I think I'm about to get my butt kicked...;( ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Where for lunch on Tue.? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 16 Jan 1998 17:25:13 -0600 > From: Kenneth Zuber <kzuber(a)us.itmasters.com> > > I heard you weren't good either..... > I guess you get what you pay for > > Sean Starke wrote: > > > > > Tivoleers, be advised...he's looking to pick at least one of you up... > > I may be cheap, but I'm not free... That could explain why every girl he gets dumps him in less than a month... He's cheap which means he shows up with wilted flowers and day-old bread. Also explains why he can't keep people out of his crease, he uses them old dull skates. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

UPDATE!! BAY AREA CYPHERPUNKS MEETING, SATURDAY 1/17, OAKLAND
by bill.stewart＠pobox.com 17 Dec '03

17 Dec '03

Sameer asks that, due to building access limitations, everybody please show up by 2pm to be sure the guards will let you in, and "humor building management and sign in as requested by the guard". And there's a parking lot on Franklin between 12th and 13th, which is a block or two east/south of Broadway. > The January Bay Area Cypherpunks Meeting will be Saturday afternoon > at C2 Software's office in Oakland. > > Agenda: Export Laws - Lee Tien and Greg Broiles > Work in Progress > Lots of discussion from RSA Conference. > > Time: 12-6pm followed by dinner - program starts at 1:00 > Location: C2Net Software, Inc. 1440 Broadway Suite 700, Oakland, CA > Phone: (510) 986-8770 Fax: (510) 986-8777 > Public Transportation - about two blocks from the 12th St BART station. > This is the best way to get there from San Francisco, > and parking for BART trains is easy. :-) > Driving - From South - take 880N to Broadway exit, about .9 mile, park > From San Francisco - Take the Bay Bridge to Grand Ave, > turn right on Telegraph and continue on Broadway. If you find yourself on 980, 11th or 12th goes to Broadway. > > Map URL: http://www.mapblast.com/yt.hm?FAM=mapblast&CMD=GEO&SEC=find&IC=0%3A0%3A5&IC… Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

New Software Controls
by John Young 17 Dec '03

17 Dec '03

TH points out that there's a broad new provision in the BXA Wassenaar rule for controlling telecommunications software under Category 5, Part I - Telecommunications, quote: You might want to highlight the following section ... not sure of the entire context ... but this isn't something that I'd seen before. It looks like control of any software that can transmit data. c.3. ``Software'' which provides the capability of recovering ``source code'' of telecommunications ``software'' controlled by 5A001, 5B001, or 5C001; For the citation see: http://jya.com/bxa-wa/cat51.htm#5D001c3 --------- We've broken the rule into several components for easier access to the Commerce Control List revisions. See: http://jya.com/bxa-wa-rule.htm

3 2

Fwd: Skiing
by Brian B. Riley 17 Dec '03

17 Dec '03

---------------- Begin Forwarded Message ---------------- Date: 01/16 8:27 AM Received: 01/16 5:18 PM From: Patrick McGarvey, mcgoo(a)worldnet.att.net To: Brian Riley, brianbr(a)together.net Subject: For the skier in us... > > What's the difference between John Denver and Michael Kennedy? > John Denver made it alive out of Aspen. > Has Elton John re-written any of his songs for Michael Kennedy? > Not yet, but he's done one about the tree: "I'm Still Standing" > How can you be sure that Michael was really a Kennedy? > Check the family tree. > How will the priest begin Michael Kennedy's eulogy? > "We are gathered here together on this slalom occasion...." > A simple accident? Some witnesses insist there was a second tree at > the snow-covered knoll... > What do Michael and JFK Jr's magazine "George" have in common? > * Wood pulp. > > New bumper sticker...."Plant A Tree....Kill A Kennedy...." > What's an event you don't want to be at? > * A Michael Kennedy New Year's Bash > What will it take to reunite the four Kennedy brothers? > A1: One more bullet. > A2: A season lift pass. ----------------- End Forwarded Message ----------------- Brian B. Riley --> http://members.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "The surest way to corrupt a youth is to instruct him to hold in higher regard those who think alike than those who think differently." -- Nietzche

1 0

Adult Mail................Are you man enough?
by Wombat＠aol.com 17 Dec '03

17 Dec '03

*****************************You Must 18********************************* Hi....Tired of all the B******T! I am a Hot.............Horney.........New Jersey Co-Ed! I will sell you my Sweet Panties, Hot Photo, Hot, Horney Letter. You won't be dissapointed. $ 20.00, Cash, Check or Money Order, Large S.A.S.E., and A note stating you are 18 or older. Send to: Vi Grant Box 2002, Suite 2B, Cherry Hill, NJ 08034 Please hurry, I have to get cash up for the Spring Semester, and I am sooo Horney!! Thanx.......Vi ( My girlfriend and I snuck in to use the campus computer!) ****************************************************************************

1 0

Genetic & Tissue Engineering - The Learning Channel
by Jim Choate 17 Dec '03

17 Dec '03

Hi, FYI The show that was mentioned the other night regarding tissue and limb growth was shown tonite on The Learning Channel from 9pm to 10pm central. If you're interested check your schedule for a repeat. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Deriving economic profits from writing FREE software?
by igor＠Algebra.COM 17 Dec '03

17 Dec '03

Hi, At my leisure, I write free software. One of these programs is the usenet moderation bot STUMP. Right now I am writing another free program. I feel perfectly comfortable with the idea that I will not CHARGE money for these programs; for one, I am a beneficiary of a multitude of excellent free programs written by others, and just as well i realize that selling them would be more of a hassle than it is worth. My another pet idea is that programming is poetry, and therefore a person who only writes commercial software is almost surely going to lose whatever gift in programming that he had from God. However, aside from the psychic benefits, I would like to somehow derive an economic profit from being a freeware author. So far, I feel that the status of the author of a popular package does sound good on a resume, but it is as far as I could get. Does anyone else feel the same way? Has anybody come up with a way to cash in on the free programs that he writes? Thank you. ---------------------------------------------------------------------------- char*p="char*p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} \=/, _-===-_-====-_-===-_-==========-_-====-_ | @___oo ( )_ /\ /\ / (___,,,}_--= ) ) /^\) ^\/ _) =__ Anything is good and useful if ) ) /^\/ _) (_ ) ) _ / / _) ( ) /\ )/\/ || | )_) (_ it's made of chocolate. ) < > |(,,) )__) ( ) || / \)___)\ (_ __) | \____( )___) )___ -==-_____-=====-_____-=====-___== \______(_______;;; __;;;

7 6

HOW WILL YOU SURVIVE WHEN YOU LOSE YOUR JOB?
by esoftware57＠hotmail.com 17 Dec '03

17 Dec '03

HOW WILL YOU SURVIVE WHEN YOU LOSE YOUR JOB? *LEARN TO MAKE $1200 WEEKLY!!! Thousands of harworking people, just like you and me, are getting laid off each and every day. Working for someone else has NO JOB SECURITY!! Most of us are living from paycheck to paycheck. How long could you "stay afloat" if you lost your job? Well, just give me 5 minutes of your time, and I will show you how you can take control of your financial future and have the SECURITY and WEALTH that YOU deserve! You hold in your hands the most POWERFUL and REVEALING money making opportunity of the Millenium age. The 90's are gone. The year 2000 A.D. is less than 2 years away. The "SECRETS" of riding the wave of the future can be yours. The timing is right for you to break out of the ball and chain, 9 to 5 existence. YOU CAN HAVE IT ALL!!!!! *that new car, your dream home, a special vacation!! These are $ money $ in the bank secrets. THE INTERNET POPULATION EXPLOSION IS UNDER WAY! More than 50 million people are currently on the Internet with an estimated 1 million more joining every month. There will be at least 100 million on-line users by the year 2000, according to experts. And all of these people will be looking for legitimate business opportunities on the Net. "HOW CAN I MAKE MONEY ON THE INTERNET?" is the most often asked question of ALL internet members. THE DEMAND FOR INFORMATION IS ASTOUNDING! FORTUNES are being made on the Internet RIGHT NOW and this is definitely the money making opportunity of a lifetime. Where else can you reach 50 million potential customers a day from the peace and comfort of your own home? Huge dollars are being made on the Internet RIGHT NOW by people just like you and me and your timing could not be better! YOU MUST ACT NOW!!!! It's fun, it's easy, it's very simple and VERY REWARDING! GET IN NOW - WHILE YOU CAN!!!!! This COMPLETE INTERNET BUSINESS KIT is the HOTTEST, MOST AMAZING and MOST PROFITABLE business available on the Internet today! Included are: 1. NET PROFITS - a 32 page manual specifically designed for people starting their own business on-line. Marketing startegies are presented for you to reach MILLIONS with YOUR information or products. 2. FIVE NEW REPORTS - written in 1997 that present tax strategies for home-based businesses, show you how to get 300 new prospects weekly, give tips on advertising through major on-line services and more. 3. CREDIT CARD PAYMENTS ON-LINE - how to accept these no matter where in the world you live!! This is VERY powerful information. 4. And get a load of this! Your COMPLETE INTERNET BUSINESS KIT comes with a customized sales letter that has been proven effective. This letter has generated MANY, MANY orders and will do the same for you. 5. Everything in this kit comes with UNlimited and UNrestricted reproduction rights. You can not only sell the kit as your own, but you can sell ALL THE RIGHTS along with it! Check around! You won't find any other company that lets you do this! THERE'S SO MUCH MORE.....BUT, now what you're thinking is "What's this amazing, complete system going to cost me?" $200.....$150........$100...... BE PREPARED TO BE SHOCKED!!!! This COMPLETE INTERNET BUSINESS KIT is only $24.95!!!!!! **Everything you need to SUCCEED is included! This program is normally $49.95 and is in HOT DEMAND even at this price. But I'm SLASHING the price so hardworking people, just like YOU, can take advantage of this goldmine opportunity. ACT NOW!!!!!!!! IT WON'T GET ANY EASIER THAN THIS! BUT WAIT.......when you order within the next 7 days, I'll give you FREE: Over 250 AMAZING REPORTS with ALL reprint and resale rights!! These alone could make you THOUSANDS OF DOLLARS! And now you know what you stand to gain. Let's consider the risk. Just$24.95 and I'll tell you what. I'll even take the risk out of the equation! Try the kit for 30 days and if you don't think this opportunity is for you, just send the kit back for a 100%, immediate refund. "This is HOT! HOT! HOT!" ACT NOW! DON'T WAIT! "LIVE YOUR DREAMS". OR WORSE... **don't get caught sitting at home *AFTER you lost your job, wondering what you're going to do. ORDER NOW!! =========================== <Order (fastest) for $24.95 to:> WorldNet-Distributors 909 Eagles Landing Pkwy. Suite 140 P.O. BOX 203 Stockbridge, Ga. 30281 USA Name___________________________________________ _______ Address__________________________________________ _____ City___________________ State_________ Zip___________ E-mail address________________________________________ We can ship via: A. Postal Service (snail mail) 3 1/2" floppy disk. or manual. B. E-mail (Your order will be dispatched within 24 hours of receipt of funds - money order fastest)

1 0

Re: Microsoft Metaphors
by Anonymous 17 Dec '03

17 Dec '03

> > What are the best metaphors to use when talking about a browser > > and an operating system? Is the combination like a car and an > > engine, or a car and a roofrack? A pair of gloves? > >In this specific case it's more like garbage in a trash can. Nah. In this specific case it's more like shit and a toilet. Or if you wanted to get a bit obscure you could say that Windows is like LSD. It kills brain cells, attracts the really stupid in addition to the occasional person with a clue, and the typical user has random flashbacks when put in front of any computer at all. It has no useful purpose beyond making the user feel really good, costs a lot, and is dangerous to your (mental) health. It's produced, handled, and sold by a huge cartel (Microsoft) who shoots (runs out of business) anybody who opposes them. Those the cartel doesn't shoot they bribe (buy). And users enter into temporary or in some cases permanent fits of stupidity and hysteria during which they are a danger to anyone around them, particularly if they're armed (have a bulk mailer or platform-specific "web authoring tools" which produce crappy HTML).

1 0

Kaczynski attempts suicide
by Anonymous 17 Dec '03

17 Dec '03

>I don't get it. The guy is facing the death penalty, and now they're >trying to keep him alive. It's typical government arrogance. They can kill but nobody else can. And they demand that when they consider murdering somebody that the target not murder himself. Stupidity.

1 0

CAD Stego
by John Young 17 Dec '03

17 Dec '03

This repeats a suggestion from 1994 about using computer assisted design programs to conceal text or other data: 1. CAD uses vectors to make graphics, including text, and most programs can import a wide variety of data from other formats. 2. Several features can manipulate CAD objects into unrecognizable forms by modifying scale, dimension, orientation, opacity and so on. 3. The scale feature is useful to reduce, say, a text of any length, or any digital object, to the size of a pixel. This pixel can be located, say, under a visible line, or, be made transparent as a "phantom" object. (An engineer "stipples" concrete with microdot exotica and lofts the docs to the Saudis, getting paid ten times the regular fee.) 4. Or, the text can be distorted by scale and dimension to appear to be a line serving another function. 5. It's a snap to encrypt the text and import it into CAD via several programs that do that duty. Then the message could be distorted or hidden as described above, for piggy-backing on an innocent- looking document issued, say, to GSA for replenishing the Blanco Bunker, where it would be opened by the cp insider-sou-chef for de-distorted, decrypted instructions on how to prepare and place the bean. 6. To be sure, the underlying CAD code of the ciphertext could be identified by an astute auto-message-vetter of the EOP and then the CADbreakers would be beckoned to the roachtrap. 7. Big shortcoming: how to securely transmit the location (virtual coordinates) of the hidden message and what modifications need to be reversed for message access. Beware of using 0,0,0 -- a near-universal data point for CAD docs. However, 0,0,2^50 miles might be overlooked if the 3d view is disabled. 8. Medium shortcoming: Full-featured CAD programs are expensive, however, the popular lite versions are cheap and can usually read the pricier output.

1 0

call for proposals: "Media, Democracy and the Public Sphere" inJune 1998
by Bill Frantz 17 Dec '03

17 Dec '03

I wonder what these peoples' take on the Internet is? If the net isn't a "democratic public sphere", what is? >Date: Fri, 16 Jan 1998 13:56:01 -0800 (PST) >Reply-To: cda96-l(a)willamette.edu >Originator: cda96-l(a)willamette.edu >Sender: cda96-l(a)willamette.edu >Precedence: bulk >From: "T. L. Kelly" <room101(a)teleport.com> >To: Multiple recipients of list <cda96-l(a)willamette.edu> >Subject: call for proposals: "Media, Democracy and the Public Sphere" in >June 1998 > >The Union for Democratic Communications (UDC) invites participation in >its next international meeting, June 11-14, 1998, in San Francisco, >California, addressing the topic "Media, Democracy and the Public >Sphere." > >UDC welcomes papers, audiovisual works, panels, workshops and projects >that break with traditional, monological approaches, to promote dialogue >and interaction around questions of critical communications and media >activism, as suggested below. Please send proposals for presentations >by no later than MARCH 1, 1998, to: > > Prof. Bernadette Barker-Plummer > 1998 UDC Conference Chair > Department of Communication > University of San Francisco > 2130 Fulton Street > San Francisco, CA 94117 > email: barkerplum(a)usfca.edu > >The UDC steering committee suggests the following perspectives on the >conference topic, "Media, Democracy and the Public Sphere": the mass >media are flourishing today; a democratic public sphere is not. What, >then, are the possibilities of resolving the conflicts between a "mass" >media and a "democratic" public sphere? > >Facets of this question which participants may wish to address include >the concept of "the public interest"; the role of public media systems >in the creation of a democratic public sphere; the role of media policy >in helping or hindering democracy; the role of media in >(trans)national"democratization" processes; the dissemination of radical >claims through alternative, community and mainstream media; the ways in >which the everyday media practices of the public help or hinder the >creation of a democratic public sphere; the education of media workers >in the interest of democracy; and the utilization of information >technolgies for and against democracy. > >The host institution is arranging affordable conference housing on the >campus of the University of San Francisco, which, however, requires >timely registration. Please send in your proposal early to faciliate >rapid notification of acceptances in early March! The San Francisco >host committee is also scheduling plenary sessions with featured >speakers and joint evening outings into the city. This promises to be >an very engaged and productive gathering of international media >activists, practitioners, theorists and historians. Please contact Prof. >Barker-Plummer, conference chair, with any questions: > barkerplum(a)usfca.edu > ------------------------------------------------------------------------- Bill Frantz | | Periwinkle -- Consulting (408)356-8506 | All politicians should ski.| 16345 Englewood Ave. frantz(a)netcom.com | | Los Gatos, CA 95032, USA

1 0

Re: Hi :-)
by Important.News＠hotmail.com 17 Dec '03

17 Dec '03

"I finally found the secrets I've been looking for. Your manual tells all and has given me the tools I need to succeed, finally a genuine Internet insider tells all! If you're doing business on the web or have ever wanted to, this is a must have. You're the best, I'm making your manual into my Internet Bible! Thanks a million!" Best Regards, (satisfied customer) Florida WOW!, What a value your program is! Just the secrets on email was worth the price alone, not to mention all the other valuable things you included. I have already put up some ads and I eagerly anticipate positive results. Tom Hatcher - Minnesota ---------------------------------------------------------------------------------------- Hello Internet friend, What I am going to share with you may well be, for many of you, THE opportunity to start a unique, very successful business or take an EXISTING one to new untouched heights, by taking advantage of some breakthrough trends that are making "marketing history!" You will soon discover the art of . . . "How to Really Make Money on the Information Superhighway!" Some of you may already have purchased some "electronic marketing course" or tried to market some product online. Maybe you even made a sizeable profit! Whatever the case may be; No matter how successful you are right now, you can profit tremendously from what we are about to tell you! FACT: ANYONE WHO HAS THE DRIVE TO SUCCEED CAN ACTUALLY MAKE A SIZABLE PROFIT ON THE INTERNET. FACT: NOT MANY PEOPLE ARE WILLING TO TAKE THE TIME TO ACTUALLY DO IT. Why would people want to pass up this extremely valuable money making opportunity? Because learning is the key to succeeding online. Marketing on the Internet requires a wealth of knowledge. To learn everything you need to know about Marketing on the Internet takes more time than any human being can spare. The small amount of Internet marketers actually making a sizable profit know this all too well. Now think about this WHAT IF? I could provide YOU with an incredible Marketing Package that encompasses all the "How To" information you need to be a success on the Internet. This phenomenal package includes DETAILED Internet SECRETS (we don't hold anything back, its all here folks!!), which explains in detail how to Profit from the Internet Explosion. Whether you have a business of your own or you want to start one. It's filled with over 45 packed pages revealing the secrets about electronic marketing so many other online marketers DON'T want you to know. I thought that might interest YOU. Let me explain. <><><><><><><><><><><><><><><><><><><><><><><><> Right now there are over sixty million people surfing the Internet. By the year 2000, that figure is expected to more than double. With so many people using the Internet, smart "net"repreneur's are taking advantage of what this new (in terms of true commercial application) and exciting medium has to offer. The Internet presents one of the best ways to make money that has ever been introduced. On any given day you have the opportunity to reach more people than most cities have population wise. This is the reason so many businesses are scrambling to make their presence known on the Internet. Being "online" offers a person the ability to reach multitudes of people from all over the world. It also offers, to those who know how, THE ABILITY TO MAKE EXCELLENT MONEY. And we do mean excellent money!!! CONSIDER THIS POSSIBILITY: You wake up in the morning and you put on a pot of coffee. As you sip on your cup of hot "brew" you saunter over and turn your computer on. Then, as your monitor glows from dim to bright, you find that you have inquiries from all sorts of people requesting what you have to offer. Later, after you have finished reading your inquiries, you stroll out to your mailbox. You find it is filled with letters from people from all across the world! What's even better though, is that the letters are FILLED WITH MONEY; cash, checks, and money orders. Then, after tallying up the totals, you find that you have made anywhere between $200 to $1,000 and it isn't even one o'clock in the afternoon. Think of it: NO boss, NO traffic, and NO annoying Co-workers. Wouldn't it feel great to wake up in the morning knowing you are going to be making excellent money but don't have to leave your house to do it!?! Wouldn't your life be far less complicated? The truth is, you can be one of those who become financially independent via the Internet. AND THE BEST PART IS...IT DOESN'T REQUIRE A LOT OF MONEY!! What it does require is the knowledge of how, what, and where to do it. That is where we can help. We provide you with the knowledge of how to begin earning substantial income from your computer via the "information superhighway". We can remember how overwhelming the Internet seemed when we were first introduced to it. We realized the marketing and profit potential the Internet holds, but really had no idea how to pursue it. In our thirst for answers and knowledge, we purchased everything we could find that had information on the How, What, and Where. We spent thousands of dollars, but we now know what works and what doesn't. No where, in all of our searching, could we find a complete packet of information for all of our questions. That is why we decided to write this report. We have compiled every proven method and secrets that we have learned along the way into one complete, easy to understand report. This PROVEN REPORT makes believers of skeptics! Sound too good to be true? That's what others have said. That is, until they received their reports and saw for themselves just how easy it is to make money on the net! Hi NI, I received your report and free bonuses last Saturday and wanted to congratulate you on a job well done. I read through your report "How To Profit From The Internet" and I'm very impressed. I have bought other books and manuals about Online Marketing, Direct Marketing, E-mail, Mail Order, etc. Yours is the only one that explains the subject in an easy to understand language. I finally found the secrets I've been looking for. Once again, Great Job! Sincerely, John Strand - Satisfied Customer My father has always told me, "remember, Michele, there is no free lunch in life. You get out of life what you put into it." Through trial and error and a somewhat slow frustrating start, I purchased your report and finally figured out how to start a very profitable business from my home. Your report is great, you give the average person the tools and secrets to succeed. I know my dad is very proud of me now. I can't thank you enough =) Michele B from Oregon Good Morning, I hope this finds you well. I received your program yesterday after- noon and read it cover to cover. You have put together a very valuable resource indeed. I have finally found the program that tells all! Your program has given me the tools I need to succeed. Your program could truly end up being the best $39.95 I ever spent! Your the best, I'm making your manual into my internet Bible!! Thanks a million! Best Regards, Mary Wecker This is a wonderful opportunity, we urge you to take advantage of it. You won't find too many people that will give away ALL of their secrets!! The majority of the rich people today have copied what someone else is or has been doing. That is what we are offering you now--a chance to copy our success!! It is very easy and we ARE for REAL! Here's a little more incentive to check this out ~IF YOU ORDER WITHIN 3 DAYS~ We will send you: **** FREE $400 Bulk e-mail Software **** **** FREE $200 Check by phone, fax, E-mail Software **** **** FREE $10 Calling Card **** ----PLUS---- We will send you a list of over 100 major search engines ready to surf on the Internet or to place a free link to your web page. Also, you will receive a list of 98 of the best inexpensive newspapers to advertise in (U.S. orders only). The list is complete with papers name, city, phone number, circulation and frequency (Daily or Weekly). We will also include five free BONUS reports that include these topics: · How to Protect your PC from Viruses · How to get 300+ Quality Prospect to E-mail you Weekly · Tips and Secrets to Advertising with the major Online Services · What's wrong with the World Wide Web · Tax Advantages for the Home Business Owner. You will find that these five reports by themselves are worth thousands of dollars to you. These bonuses alone are worth several times the cost of the report. We will also give you a secret list of over 1500 of the best Web sites where you can place a FREE advertisement. This is a list we use every day to run our business and we are giving it to you! Imagine what a great offering we are giving you for FREE! And we're not through, if you order RIGHT NOW, we will give you 15 FREE "How to Reports" that you are free to market and sell on the Internet or through mail order for $15-30 each. They are 45-60 informational packed pages each. A great way to start your own Net based business! The topics are; 1) Earn Extra Dollars with a Home Based Answering Machine 2) How to Buy a Car with Bad Credit 3) How to Make Thousands of Dollars Winning Contests 4) U.S. Government Auction Sales 5) An Insider's Guide to Finding and Obtaining Grant Money 6) Home Based Business for Fun and Profit 7) How to Get a Job Fast 8) How to Make Money Without Leaving Your House 9) How to Turn the Hobby of Photography into Thousands 10) Making Money at Garage Sales, Swap Meets, and Flea Markets 11) How to Get Paid for Watching TV 12) Getting Your Start in Theater, Television, and Movies 13) Wills or Trusts? The Case for Living Trusts 14) How To Find Work with the Federal Government 15) How to Write Almost Anything and Get Paid for it! Are we nuts? No, it just shows how confident we are that you'll be delighted with the information you'll have...just like the others who are already using the information and making money. You will be surprised how quickly you can be earning money on the Internet! So you are probably thinking to yourself, this is wonderful, but how much? $149.95, $99.95 maybe even $79.95? You may have seen other companies marketing "How To" information on the Internet and charging these prices. People are actually buying these packages at these prices. Why? People want to know how to market a product or service the "Right" way on the Internet. "How to Profit from the Internet" could easily sell for any of the above prices. However, we feel that we would rather help those who may not have the ability to pay such a price in order to be successful. That is why we are offering "How to Profit from the Internet" for the unbelievable low price of $39.95. That's right, that was not a typo...$39.95. Still skeptical??? Lets put that to rest right now. We will make this completely risk free for you. If you are not 100% satisfied with the information you receive, and believe that you cannot use it to start a successful business or increase your current business profits, return it within 10 days and we will refund your money. No questions asked!! (Because this information is very easy to copy, the guarantee is only available on Disk Orders). I have sold this package at much higher prices in the recent past and will be forced to raise my prices in the very near future. One of the things you will learn in my course is to constantly test your market. I am currently in the price testing phase of this marketing campaign. On February 1st, 1998 I will be raising the price of this package back up to $79.95 and eventually up to $129.95 to test the upscale market. If you act quickly, you have the opportunity to get these materials today for the unbelievable low price of $39.95. So, if you are seriously interested in learning how to acquire wealth by being online, ACT NOW!! This won't last for long! Print out this form and mail it to the address below, with your $39.95 cash, check, money order or credit card information. Natural Instincts 4676 Commercial St. SE Suite 201 Salem, Oregon 97302 Thank you =) ****Please print out the order form and mail it along with your payment**** ********************************************************** ORDER FORM ********************************************************** NAME______________________________________________________ ADDRESS___________________________________________________ CITY_______________________ STATE__________ ZIP__________ Deliver "How to Profit from the Internet" to the following email address: E-MAIL ADDRESS____________________________________________ (please note, all orders must include an email address incase we encounter a problem with processing) Area code and Phone number (Optional) Day time __________________ Evening: ________________________ [ ] If you prefer to have the report on disk, please check here. Please include an additional $3.00 for shipping and handling, thank you. Please check one of the following: [ ] I'm ordering within 3 days, please send my FREE software, $10.00 calling card, 15 How to Reports and "How To Profit From The Internet" and FREE bonuses for the unbelievably low price of $39.95 today. [ ] I'm not ordering within the first 3 days of receiving this letter, so I agree to pay $39.95 for "How to Profit from the Internet" by itself, less the bonus package. Payment Method: [Internal code 138108] [ ] Check [ ] Cash [ ] Money Order [ ] Credit Card, please make sure to include the mailing address above! [ ] Visa [ ] MasterCard Name of Credit Card: _____________________________ Name as it appears on Card: _________________________________ Card Number: __________________________________ Expiration Date: _____ / _____ Signature of Card Holder: _________________________. *********************************************************** "In mail-order work, anyone with imagination, determination, and a willingness to study and experiment may have very little difficulty getting started. A number of the most successful one-man operations obtain an income as high as $40,000 to $100,000 a year." - U.S. Department of Commerce ************************************************************ THE MARKET IS HERE - TODAY! TAKE ADVANTAGE OF IT!!!!! After you receive your report, I'll answer any questions time permits via email. I'm looking forward to helping you succeed!

1 0

Eureka! Sun Jan 18 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Sunday's issue of Eureka! INTERTAIN ONLINE One of the longest-established adult sites on the web, Int- ertain Online has grown and grown to feature more smut than you could probably view in a lifetime. It is simply packed with 10s of thousands of photographs, AVI and MOV movies, loads of live video feeds, stories and so much more. Plus you get to try it totally FREE for a whole week. Go and see! IOL ...... http://www.intertain-inc.com/?banner_id=BID037000 PLEASE VISIT THIS FINE EUREKA! PARTNER SITE A Planet Erotic - Hardcore XXX Entertainment http://www.planeterotic.com Over 800 FREE Channels Of Live Sex Shows, Live Teen Strip Shows And Video Porno Feeds. 60,000+ Hard & Softcore Pics (10,000 NEW Pics a WEEK!). 100's of Erotic Stories, SeXXX Chat, Casino, and much more! FREE TEEN SEX Quick and dirty, just the way you like it. They only have 11 free pictures but these are some good looking young ladies! Pussy spread brunettes, shaved pussy blondes. Click the link. ........... http://209.136.127.65/freepics/teensex.htm ADOL-ES-SCENTS Score! Talk about some young pussy! This website is loaded. There are blondes, brunettes and redheads. In all sorts of poses including bent over, spread eagle and flashing their tits. this images are not huge but they load pretty fast. Adoles ........ http://www.jimsplace.com/jat/teen2/index.htm TEENPARTY I guess it's a party, with 36 lovely young ladies baring it all for you to see. Tight and trim women showing it all. There are shower scenes and pictures from out in public places and some great bedroom scenes. Dig the pic28, in the mirror! ............ http://www.teenparty.inter.net/main.htm EASYTEENS This is a well built website. The images are easy to get at. Text links list blow jobs, group sex, young teens, asian, teens, hardcore sex, nice breasts, lesbians, shaved pussy and more! From those choices you go to thumbnailed images. Pretty cool! ..................... http://www.easyteens.com/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ Anal ........................... http://204.244.215.7/anal2/ CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat .................. http://137.39.63.229/chat/ General/Fun Chat ........ http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!....1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline.........1-800-644-8779 FREE: Live 1-on-1 (international call only)....011-678-77416 AMATEUR SITE OF THE DAY ELLEN: With over 40 FREE pictures, this young lady is on course to become a huge Internet hit! Her biography states that her passion is giving blow jobs. Which leaves us one question. Where do we sign up? Visit this chic and see how crazy she is first hand. ............................ http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY T-Bone's Sex Club: T-Bone gives you a new selection of erotic stories illustrated with nasty hardcore pics! Last week was Slut Wife week... what will it be this week? Visit T-Bone and find out! ............... http://www.rawsexx.com/ DAILY CARTOON ........... http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! .... http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ........... http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm ITALIANO ..... http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE . http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 ........................... http://137.39.63.229/?180 Pic 2 ........................... http://137.39.63.229/?181 Pic 3 ........................... http://137.39.63.229/?182 Pic 4 ........................... http://137.39.63.229/?183 Pic 5 ........................... http://137.39.63.229/?184 Pic 6 ........................... http://137.39.63.229/?185 Pic 7 ........................... http://137.39.63.229/?186 Pic 8 ........................... http://137.39.63.229/?187 Pic 9 ........................... http://137.39.63.229/?188 Pic 10 ........................... http://137.39.63.229/?189 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Re: Nanotechnology
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> 1 coulomb/second = 6.24 x 10^18 atoms/sec. Assuming an atomic spacing > of roughly 10^-10 meters, at that rate it'd take you about 18.5 days to > construct one side of the cube with a thickness of 1mm, or almost four > months to build another cube. I'd guesstimate another 4 months to build > the electronics for it. And then you'd need some way to assemble the > pieces. ok, but how do you build a 10-cm cube inside of a 10-cm cube? :)

2 1

Re: Nanotechnology (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sat, 17 Jan 1998 21:22:59 +0100 (MET) > Subject: Re: Nanotechnology > From: nobody(a)REPLAY.COM (Anonymous) > > 1 coulomb/second = 6.24 x 10^18 atoms/sec. There are a couple of things incorrect with this. A Coulomb is 1N of e-/s, not atoms. N atoms is called a Mole. N, or Avagadro's Number, is 6.023E23 not 6.24E18 ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: how to release code if the programmer is a target for (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sat, 17 Jan 1998 12:12:08 -0800 > From: Jonathan Wienke <JonWienk(a)ix.netcom.com> > Subject: Re: how to release code if the programmer is a target for (fwd) > However, if Alice has had my key for 6 months, and has verified the > signatures on 100 of my Cypherpunks posts, and my signature on GunzenBombs > Pyro-Technologies latest checks out, she can be pretty confident that I > actually signed it. On the other hand, if she didn't already have it, and > got a fake key and document from Mallet, Alice would not be able to use the > fake key to verify the signatures on my prior Cypherpunks posts. This > ought to be a red-flagged clue that something is rotten in Denmark... That's all fine and dandy, however, we *are* talking about an eternity server architecture that delivers documents to an end user in a secure manner on demand with no mechanism, by design, to determine the original source. In this case there would by definition be *no* history to verify against. It is in fact this lack of history from the users perspective that causes the authenticity problem in the first place. Further, a point that seems to have been forgotten, we are talking about signed and not encrypted documents. Of course there are some similar problems if we do include the encryption of the data itself into the protocol. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

REPLY to Mitchells RESPONSE.
by bill payne 17 Dec '03

17 Dec '03

Saturday 1/17/98 3:37 PM John Young Attached is our REPLY to Mitchells RESPONSE. Morales will have it filed on Tuesday. Monday is MLK day. Morales will send a FILED stamped copy to you. Later bill UNITED STATES DISTRICT COURT FOR THE DISTRICT OF NEW MEXICO William H. Payne ) Arthur R. Morales ) ) Plaintiffs, ) ) v ) CIV NO 97 0266 ) SC/DJS ) Lieutenant General Kenneth A. Minihan, USAF ) Director, National Security Agency ) National Security Agency ) ) Defendant ) REPLY TO DEFENDANT'S RESPONSE TO PLAINTIFFS' MOTION FOR SUMMARY JUDGMENT BASED ON EVIDENCE FROM ADMISSIONS 1 COMES NOW plaintiffs Payne [Payne] and Morales [Morales] [Plaintiffs], pro se litigants to exercise their rights guaranteed under the Constitution, Rules of Civil Procedure, and Local Civil Rules to respond to Defendant's MOTION filed on 98 JAN-5 within the 14 days allowed by local rule 7.3(b)(4). 2 US Attorney Mitchell [Mitchell] writes, Counsel for Defendant was not served with copies of any of said Requests for Admissions until sometime after the individuals had been served.2 Mitchell WAS SERVED PLAINTIFFS' FIRST SET OF REQUEST FOR ADMISSION TO NSA DIRECTOR KENNETH MINIHAN I HEREBY CERTIFY that a copy of the foregoing request for admissions was mailed to Jan Elizabeth Mitchell, Assistant US Attorney, 525 Silver SW, ABQ, NM 87102 this Monday November 3, 1997. Michell was not served with any other admissions since Mitchell is not representing others. Plaintiffs' served Defendant Minihan properly. And Minihan failed to respond to Minihan's admissions within the time allotted by law. 3 US Attorney Mitchell writes, As grounds for the Motion and Memorandum, Defendant argued that Plaintiffs had blatantly disregarded this Court's Order pertaining to the conduct of discovery and the deadline for discovery in this Freedom of Information Act action. Judges Svet and Campos willfully violated Plaintiffs' right to Discovery. And thereby earned criminal complaint affidavits filed with judge Scalia of the Supreme Court. 4 US Attorney Mitchell writes, In Defendant's Motion and Memorandum, Counsel for Defendant also objected to Plaintiffs' sua sponte decision to modify the Court's June 11 Order to reflect the delay of the Court's October 7 Order and the establishment, without leave of this Court, of new deadlines for discovery, motions practice, and the filing of the PreTrial Order. (Motion and Memorandum 9, at 4.) Judge Svet and Campos attempt to deny Plaintiffs' right to Discovery, again, earned Svet and Campos criminal complaint affidavits. Plaintiffs exercise their right under the Federal Rules of Civil Procedure and the Constitution to conduct Discovery WITHOUT LEAVE OF COURT! 5 US Attorney Mitchell writes, By their own request, Plaintiffs sought to stay a ruling on the Defendant's Motion and Memorandum. Absent any ruling on either the Motion and Memorandum or Plaintiffs' Response, Defendant Minihan, employees of NSA, and employees of Sandia National Laboratory, were not obligated to respond to the Requests for Admissions as provided by Fed.R.Civ.P. 36.3 For Plaintiffs to now assert in their "Motion for Summary Judgment On Based On Evidence From Admissions" that because the individuals have not responded to the Requests for Admissions they are deemed admitted, flies in the face of their own prayer to this Court to stay a ruling on the Defendant's Motion to strike the Requests for Admissions until the Supreme Court takes action. Plaintiffs' have REPEATEDLY asked judge Svet and Campos to disqualify themselves from any rulings on this case because Campos and Svet do NOT obey the Federal Rules of Civil Procedure. Replace judges Svet and Campos because these judges have demonstrated, IN WRITING, they do not follow the Federal Rules of Civil Procedure. Plaintiffs' pleas are directed a replacement judge[s]. Not Svet and Campos. Therefore, Svet and Campos' failure to remove themselves does not stop the legal process. Mitchell cites NO law to support her claim that time constraints imposed under Fed.R.Civ.P. 36.3 are inapplicable as a result of Svet's and Campos' failure to remove themselves. 6 US Attorney Mitchell writes, Defendant requests that this Court either rule upon Defendant's Motion and Memorandum granting the request to strike the Requests for Admissions, or grant Plaintiffs' request to stay this action pending the issuance of the order sought by Plaintiffs in another forum. Should this Court deny Defendant's Motion and Memorandum, Defendant respectfully requests that the individuals to whom Requests for Admissions are appropriate in this action be given the thirty days to respond to said admissions as provided by the Federal Rules of Civil Procedure. REPLACEMENT JUDGES of the Court should realize the outcome of the lawsuit has attained international interest as a result of the 1 bungled NSA spy sting on Iran 2 US government agencies NSA, NIST, and the FBI's attempt to control cryptography. Mitchell's DEFENDANT'S RESPONSE TO PLAINTIFFS' MOTION FOR SUMMARY JUDGMENT BASED ON EVIDENCE FROM ADMISSIONS was posted on Internet at jya.com, click cryptome nsasuit8.htm USA/NSA Responds to Payne/Morales Motion January 16, 1998 Importance of this posting is summed-up in the Toronto Sun, Jan. 11, 1998 US, Iran Need Each Other by Eric Margolis Iran launched a surprise charm offensive last week, throwing Washington into serious confusion. In a lengthy interview on CNN, Iran's new president, Mohammad Khatami, skillfully analyzed the bitter relations between the two nations and cautiously extended an olive branch to Washington, calling for an end to their 19-year cold war. Khatami's diplomatic ju-jitsu flummoxed the Clinton administration, which was busy trying to rally international support against Tehran - and to overthrow Iran's elected government. Both capitals are split over the question of relations. In Washington, the military establishment and conservative Republicans have inflated Iran into a bogeyman to justify military budgets and keep U.S. forces in the Mideast. ... America incited Iraq to invade Iran in 1980. They did this to crush the Islamic revolution, then provided massive war aid to Saddam Hussein. Half a million Iranians died. The US got caught involved in genocide. Using high tech. This is one subject of this lawsuit. Albuquerque Journal Tuesday 1/13/98 carried the editorial. Khatami Move Is Profile in Courage Richard Reeves Syndicated Columnist LOS ANGELES - If an American leader had done what Iranian President Mohammed Khatami did last Wednesday, it would have been hailed as a profile in courage. ... Miscalculation! We armed and pampered Saddam Hussein in the hope that Iraq would destroy Iran. Now that's policy and behavior to think about. Here is something to think about: If Presidents Eisenhower and Kennedy had pursued any kind of sensible policy toward Cuba and Fidel Castro - opposed to the policy of trying to assassinate him - there never would have been a Cuban missile crisis. I think Iranians have financed and encouraged terrorism against the interests of the United States and Israel. I would not be surprised at all if something like proof emerges soon, perhaps anonymously, from the CIA and other government agencies, where many officials have built their careers on sanctioning and isolating Iran, to try to straighten the backbones of the president and people of the United States. If they succeed, America fails. What would be more effective in closing down Iranian terrorism? More hostility, sanctions and charges? Or beginning the process toward more normal relations with a country positioned and born to be great? ... Clearly genocide fits into Now that's policy and behavior to think about. The wired world is watching what this Court, hopefully minus judges Svet and Campos, will do. What is there to be? A series of possibly unfortunate events? Or does this Court order release the lawfully requested documents to help settle this American tragedy? WHEREFORE. 7 Have replacement judges of this Court DENY Mitchell's Plaintiffs requested a stay. Absent a ruling from this Court denying their request, they cannot proceed to assert that the Requests for Admissions are deemed admitted. Accordingly, Plaintiffs' "Motion For Summary Judgment On Based On Evidence From Admissions" must be denied. for reason that Mitchell's request to subvert both the Discovery processes and its time limits have no basis in law. And appears to plead to judges who do not obey the Federal Rules of Civil Procedure. 9 IMMEDIATELY ORDER Defendant to release the requested documents in the interest of national safety so that this matter can be settled. Aggrieved victims of US genocide are reading these pleadings. Respectfully submitted, _________________________ William H. Payne 13015 Calle de Sandias NE Albuquerque, NM 87111 _________________________ Arthur R. Morales 1024 Los Arboles NW Albuquerque, NM 87107 Pro se litigants CERTIFICATE OF SERVICE I HEREBY CERTIFY that a copy of the foregoing memorandum was mailed to Lieutenant General Kenneth A. Minihan, USAF, Director, National Security Agency, National Security Agency, 9800 Savage Road, Fort George G. Meade, MD 20755-6000 and hand delivered to John J. Kelly, US Attorney, 525 Silver SW, ABQ, NM 87102 this Tuesday January 20, 1997. 5

1 0

Re: how to release code if the programmer is a target for (fwd)
by Ryan Lackey 17 Dec '03

17 Dec '03

<daemon(a)ATHENA.MIT.EDU> (Jim Choate) writes: > > That's all fine and dandy, however, we *are* talking about an eternity server > architecture that delivers documents to an end user in a secure manner on > demand with no mechanism, by design, to determine the original source. In > this case there would by definition be *no* history to verify against. > > It is in fact this lack of history from the users perspective that causes > the authenticity problem in the first place. Further, a point that seems > to have been forgotten, we are talking about signed and not encrypted > documents. Of course there are some similar problems if we do include the > encryption of the data itself into the protocol. Eternity delivers data. It's up to the user to verify that the data is what they want, be it PGP signed by the pope, a working cryptosystem, or whatever. In this sense, it's no different than random email or whatever as an untrusted transport medium. The original question was how to verify the eternity server source code. I assume the following: * a potentially corrupted author (give rdl $100 000 and he'll probably make a minor modification which has no apparent mal effects, give him $100 000 000 and he'll be a hired gun). The author is optionally anonymous. * A community of publically-known cypherpunks and code-verifiers, not all of which are corrupted, but some of which may be. * A random user who has the public keys of at least (thresh) number of the cypherpunks, optionally the key of the author of the document/product before the system becomes questionable, perhaps by looking in the NY Times for 1 Jan 1999 which has a full page ad taken out by Cypherpunks Anonymous with the PGP public keys for the 100 leading cypherpunks. * The piece of code to be verified is bloody long, that is, longer than any one cypherpunk can afford to verify alone (shooting practice, installing the minefields and poison gas sprinkler system, etc. take lots of time) * The user can tell by visual inspection that a small compilation system does what they want it to do, and can understand basic logic enough to tell what signatures imply. Then: 1) The author releases the code into the network in an optionally anonymous way. There is no reason to trust the code -- even if it is signed with rdl's eternity dds signing key, no one has any reason to believe that it isn't an NSA front, since rdl is assumed to be corrupt, signing anything put in front of him (as long as sufficient money is put there too) 2) The user wants to run the code, because it's Just That Cool. 3) No one can verify the entire code. So, Cypherpunks begin signing small sections of the code with their own previously-established key. Their keys are established as their reputation is established on the list, or perhaps by personally meeting these people, in the traditional PGP web of trust scheme. There is no central Cypherpunks Registry, just a decentralized mesh. 4) The user executes the compilation script. This script looks at the pgp signatures, sees which ones it can verify from keys it already has accepted as valid by (3), and, if there are verified good keys from at least the minimum number of people in every critical section of the code, it is added to the compile-me-source-tree. If there are enough people for every critical section (the user defines all aspects of this), the source tree is set up for compilation, and compilation can proceed. The user knows that every piece of the code in the system has been verified to their standards -- even if the author of the code is an evil NSA sleeper agent, it has gotten by independent review by at least a user-defined-number of people per section. I fail to see how the specifics of Eternity are relevant -- it's just basically a PGP web of trust issue. The transport is irrelevant -- it's untrusted code until it's been verified by people the user trusts. Implementing a keyserver in Eternity has the same issues -- you still need to deal with the PGP web of trust issues. Signing my secret alias key with my own key as the only signature and uploading it to eternity would fail to provide privacy, just as it would if I posted it anonymously to the mailing list. One working system is the buildup of "reputation capital" by an identity using the key. Again, this is entirely irrelevant to the Eternity server -- verifying document authenticity is better handled at the client side. Eternity should be set up so as long as your ecash is good, your document is stored -- if I want to store my document under the name "disney's greatest hits" when it really contains necrophilic kiddie-porn and microsoft warez, that's my business. The client software for interacting with Eternity, however, might do well to have a good document authentication interface. And perhaps third-party authentication services could pop up, willing to sign documents that just meet gross criteria for valid indexing. You could then download the key for that service somehow, then use the service happily. The abstract issue has been beaten to death on cypherpunks many times. I just assert that Eternity is no different from "the Net", "the Web", "remailer networks", "Blacknet", etc. in issues of document verification and anonymous reputation capital. -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

1 0

Re: how to release code if the programmer is a target for (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: how to release code if the programmer is a target for (fwd) > From: Ryan Lackey <rdl(a)mit.edu> > Date: 17 Jan 1998 19:07:10 -0500 > Eternity delivers data. It's up to the user to verify that the data is > what they want > The original question was how to verify the eternity server source code. How are these fundamently different? Assume for a moment that as a user of an eternity server the source is the data I want. > I assume the following: > * a potentially corrupted author (give rdl $100 000 and he'll probably > make a minor modification which has no apparent mal effects, give him > $100 000 000 and he'll be a hired gun). The author is optionally > anonymous. The point I am making is that whether the author is corrupt or not is irrelevant. > * A community of publically-known cypherpunks and code-verifiers, > not all of which are corrupted, but some of which may be. Ok. > * A random user who has the public keys of at least (thresh) number of the > cypherpunks, optionally the key of the author of the document/product before > the system becomes questionable, perhaps by looking in the NY Times > for 1 Jan 1999 which has a full page ad taken out by Cypherpunks Anonymous > with the PGP public keys for the 100 leading cypherpunks. Pretty expensive and rather unrealistic I suspect. Where does this random user come from? What is '(thresh)'? What good would an anonymous key signature provide? You can't verify it within the web of trust model, that would imply the author wasn't anonymous which takes us back to the 'friends' attack. How do we know that some number of these cypherpunks aren't turned? Are you proposing that the user test all 100 of the signatures? Which realisticaly is the only way to verify any given one of them. Not very many people will go to that extreme simply for grins and giggles. > * The piece of code to be verified is bloody long, that is, longer than > any one cypherpunk can afford to verify alone (shooting practice, > installing the minefields and poison gas sprinkler system, etc. take > lots of time) The standard is programs over ~10k lines is not comprehensible by a single individual on a line by line basis. > * The user can tell by visual inspection that a small compilation > system does what they want it to do, and can understand basic logic > enough to tell what signatures imply. 'small compilation system' of what? What who wants it to do? The author? Mallet? The end user? > Then: > 1) The author releases the code into the network in an optionally > anonymous way. There is no reason to trust the code -- even if it > is signed with rdl's eternity dds signing key, no one has any reason > to believe that it isn't an NSA front, since rdl is assumed to be > corrupt, signing anything put in front of him (as long as sufficient > money is put there too) It isn't the key of the author or the eternity server that is under attack by Mallet. It is the security of the individual user who is under assault. > 2) The user wants to run the code, because it's Just That Cool. We're talking here about users who want to get data that is illegal or otherwise incriminating or dangerous to one group or another. In particular let's consider the situation of a Lebanese freedom fighter in Isreal or perhaps a 'Free Burma' revolutionary in China. > 3) No one can verify the entire code. So, Cypherpunks begin signing > small sections of the code with their own previously-established key. > Their keys are established as their reputation is established on > the list, or perhaps by personally meeting these people, in the > traditional PGP web of trust scheme. There is no central Cypherpunks > Registry, just a decentralized mesh. Which doesn't effect the ability of Mallet to resign that code at the users end in order to break the users local security. > 4) The user executes the compilation script. [material describing script verification deleted] Mallet can re-write said script, especialy with the sorts of latency that the Eternity Server forces on the end user, such that it is consistent with the bogus keys the end-user gets. It is simply much easier to write scripts in a day than say 10 minutes. > I fail to see how the specifics of Eternity are relevant -- it's > just basically a PGP web of trust issue. The transport is irrelevant -- > it's untrusted code until it's been verified by people the user > trusts. The end user may not have people available to trust is the point. The reason the transport mechanism is relevant is that it is much easier to spoof a verification script if the user is not going to be surprised with 24 hour turn around on requests, whereas a responce time measured in minutes lessens the window of opportunity to Mallet significantly. It may come as a surprise to you and others but not everyone in the world can pick up a phone and call a 100 people all over the world and not raise some suspicion. > Implementing a keyserver in Eternity has the same issues While it is perfectly permissible to design Eternity or any data haven with inherent key servers, I believe it is a bad idea from a design perspective because it makes the code even larger, decreases the potential for monetary motives for indipendant key servers to appear, and if the server is compromised then the key server is also. It is more expensive if Mallet can be forced to deal with two indipendenat operators then a single monolithic operator. [rest deleted] ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

uh,
by wabe 17 Dec '03

17 Dec '03

--What is that weird lawsuit all about wheresome director of the NSA is getting sued forsomething? Does anyone know?-wabe --digsig EojdyErVslc/s6aQeIHwnOlMw3lUKJhdZc/ZeCNfe7H L4ctAUj8gI6C830BTXaeFrhHME7aCeT3ev4HKbeT 4HICjjQYriAdlICrERT+zrSEtB1bkK+b6iRoC6a0y

5 8

Eternity - an alternative aproach (take 2)
by Kay Ping 17 Dec '03

17 Dec '03

"Romeo, she is a female Homo Sapiens, not a full rotation of the Earth during the season when the incident solar radioation is at a higher angle" "Yes, I know that. It was just a metaphore." I got several comments about my posting, all of them about the possibility of detecting the location of radio transmitters or receivers. You just didn't get it, did you? I was using radio as a METAPHORE for the use of broadcast to provide anonymity to receivers and packets with false source addresses for the anonymity of transmitters. You can read the original posting at http://infinity.nus.sg/cypherpunks/current/0107.html ----------------- Kay Ping nop 'til you drop finger kping(a)nym.alias.net for key DF 6D 91 18 A6 59 41 96 - 89 01 69 B7 9D0 4 AE 53

1 0

Unofficial transcript of Bernstein hearing published
by John Gilmore 17 Dec '03

17 Dec '03

EFF has published an unofficial transcript of the hearing in front of three judges at the Ninth Circuit Court of Appeals in San Francisco on December 8. The hearing discussed whether the export controls on cryptography are an unconstitutional prior restraint on publication. See http://www.eff.org/pub/Privacy/ITAR_export/Bernstein_case/Legal/ There is no news on the judges' decision from that hearing. John Gilmore Electronic Frontier Foundation

2 1

Re: (eternity) Eternity as a secure filesystem/backup medium
by Ryan Lackey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Since documents placed on eternity by specification last forever (assuming, > of course, that > eternity will too) and assuming that computational power and cryptanalysis > will always > get better (say for arguments sake that moore's law continues to be held) - > doesn't that > mean that it will be feasible (in time) to break all eternity documents? :) Documents by specification last only as long as someone is willing to pay to keep them up. This is not necessarily forever. Once your DBC escrow "account" runs out, the data is worthless -- someone could then choose to store it on their own, and potentially charge others for this in a recursive model, but there is no reason why a piece of data must remain in Eternity forever if no one cares enough about it to pay to have it stored. > > Of course "in time" may very well be a very long (or astronomical) time, > but dependent on the crypto > used who knows what rate "feasible" breaking of a particular algorithm > might progress at, say > in d(key length)/d(year)? Can we assume that using Moore's law this is at > least 1 bit every > 18 months for symmetric crypto? Perhaps we might see this relationship > through the RSA challenges > over time. I am designing Eternity DDS with IDEA/3DES/Blowfish level private-key crypto and an equivalent level of DH/RSA public key crypto. These will be strong (provided back door attacks, fundamental breakthroughs in cryptography, etc. are not made...a bet I'm forced to make, even though I don't like it) well into the future. How far? I think unless Quantum Cryptanalysis becomes a reality, the underlying hard problems will not be solved through anything but a fundamental change in mathematics. As Prof. Micali said, "Gauss (Karl Friedrich Gauss, the reknowned mathematician/physicist/general smart guy) worked on these problems. The test of whether a problem is sufficiently hard to be a basis for a cryptosystem is if Gauss tried to solve it and failed." or something similar. > > [If Wiener's $1m DES machine in '93 took 7 hours, in today's technology $1m > in 1998 dollars should > be able to do this in less than 100 minutes, shouldn't it?] I don't think anyone would argue that 56bit is secure enough for anything but ephermeal channel authentication. I'd make the same argument for 64bit -- if you had a purpose-built machine with an intelligent key distribution system, a well nigh unlimited budget (read: US Military), and PE's which contained either ultrahigh performance GaAs logic or massively parallel on a single chip silicon logic, you could probably brute force a 64bit algorithm. Do the math, though, for 128bit. There are traditional analyses which include the amount of silicon on the earth, the number of atoms in the universe, etc. The general consensus is that traditional techniques are not feasible for brute forcing 128bit ciphers before the heat death of the universe. > > Since documents cannot be retracted or re-encrypted you really have to > assume that someday they > will be broken. This really turns the notion of what crypto to use for > encrypting eternity documents > into an upfront question of "how long do I want this information to be > secure?". 20 years? 50 years? > 100 years? > > matt Actually, Eternity is no different than emailing a file, given a SIGINT capability at the attacker which allows all internet traffic to be monitored. If the data is still relevant and worth breaking in 50 years, they could just intercept the encrypted email, store it in a government vault for 50 years, then attack it (even more amusingly, they could simply post it to Eternity themselves, encrypted with their own key :), a true turn about). If you do not postulate that level of signals collection capability on the part of the attacker, yeah, Eternity is a bit different than email. But I think that would be an unreasonable model of the attacker. - -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNMISuKwefxtEUY69AQFB1Qf9GWDn6bwhWyJcDY0Liypo21ntpH5yzORu RXwkPSI8pbmqhVZAVGXC1WbcqY0pYn7vPRFq5AKszFsjpTOOYiHwsugmVKjrxVww GRKSBqn308aAjMogNtPwEfohJrQxOED/Hy7ykV6gHV76pUFoMazQ4OdUL2iM1hLF cCMzwtpfJM5eWvyLeQcQq307998epJ9hF1e3Sn4v6ZKEPIlr0yqr5tvM7/XWxC2s 6t82EUPmOZIbn75QQqLBIFK5MlOLuvalFr0xR3u7fYltOczAMC23hx7Tjk65e9a4 6XSeEXyMp2j2GWqcE5lUZp4OnewZvSoFhEj0rDo5PEN9ce0mJEKMow== =7IBY -----END PGP SIGNATURE-----

2 1

Re: (eternity) Eternity as a secure filesystem/backup medium
by Adam Back 17 Dec '03

17 Dec '03

[horrible line wraps btw. 100 chars to the line! I reformatted.] Matt Barrie writes: > Since documents cannot be retracted or re-encrypted you really have > to assume that someday they will be broken. This really turns the > notion of what crypto to use for encrypting eternity documents into > an upfront question of "how long do I want this information to be > secure?". 20 years? 50 years? 100 years? There are 3 distinct threats. 1. communications crypto used by the author in submitting the document is broken 2. the eternity architecture contains encrypted documents to frustrate attempts to locate documents, and to hide the contents of documents from individual servers 3. communications crypto used to request and deliver documents is broken thus revealing the readers identity For threat 1. the attacker needs archives of old communications which could potentially be eternity submissions. (I say potentially because they could be steganographically encoded). It is probably reasonable to assume that the NSA has a full historic archive of USENET. Also it is probably reasonable to assume they have a historic archive of all inter remailer traffic. For threat 2. it seems feasible to upgrade this security over time, in that documents could be super encrypted with newer ciphers when vulnerabilities are found in older ciphers. No protection for historic access requests, but at least we can adapt to protect new requests. For threat 3. again newer ciphers can be used as attacks are found. So it is useful to design upgrade paths for ciphers into the protocols where possible. Other approaches we could take are to use very conservative cipher key sizes and protocols combining multiple ciphers in ways which gives us the security of the best of the ciphers. For example: R = random, C = 5DES( R ) || blowfish-484( M xor R ) Where 5DES is say E-D-E-D-E with 5 independent DES keys. Constructs to combine in strong ways hash functions, macs, symmetric and asymmetric ciphers would be useful. Is there much research in this area? Adam

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: (eternity) Eternity as a secure filesystem/backup medium > Date: Sun, 18 Jan 1998 09:33:30 EST > From: Ryan Lackey <rdl(a)mit.edu> > Documents by specification last only as long as someone is willing to pay > to keep them up. This is not necessarily forever. Admiral Hopper used to give a talk about the worth of data and she had a very nice chart that would demonstrate the worth of data over time. Initialy it is worth a lot because it is hard to reproduce, obtain, or distribute. As time goes on it becomes less and less important. In her particular context it was related to the economic decision of when to move data offline in large database applications. > Once your DBC escrow > "account" runs out, the data is worthless That's a jump of logic. The data may infact be quite popular even though you don't offer it anymore (might even do this in order to increase its worth, say some sort of insider trader newsletter). It's probably not in the best interest of the data haven model to speculate on exactly why a particular source decides to quit sourcing. > remain in Eternity forever if no one cares enough about it to pay to > have it stored. Then again, if it was really important I might intentionaly want to attack the ability to provide long-term income. A better model might be to charge for the access and let the actual submission be no charge. A portion of the retrieval charge could then be piped back to the source. Consider the case of say nuclear or biological information for a weapon. That sort of data would be accessed only infrequently (unless you're giving something this expensive to obtain and verify away - a d-h operator error, no.) but should be quite expensive to retrieve. > If the data is still relevant and worth breaking in 50 years, they could > just intercept the encrypted email, store it in a government vault for > 50 years, More realisticaly they would have somebody just add it to a batch job and let the spare cycles of the machines crank away at it. Or perhaps set up a key challenge and get people all over the world to work on it in their spare cycles. Who knows, perhaps the source of the data woudl be intriqued enough to provide spare cycles unknowingly. > If you do not postulate that level of signals collection capability on the It's not just their sig-int capability but their complete processing resource capability that must be considered as well as their psychological motivation. Granted, all of these are extremely difficult to measure let alone verify. Perhaps a little paranoia might be a good thing. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

diplomacy
by bill payne 17 Dec '03

17 Dec '03

I sure hope the following was diplomatic enough. NSA exhibited NO SENSE OF HUMOR when I pointed out 'deficiencies' in its crypto algorithm work. But, too, the agrieve Islamic fundamentalists may not have too good senses of humor. But with that experience, my sensitivities are hightened. Later, guys. Back to POSTCARD COMMUNICATIONS! Sunday 1/18/98 6:24 AM Jim Allen Thanks for the call on Friday night. You said that there might be a problem in the way the interrupts were turned on. I told you I would give this some thought. Here is the routine to turn on the interrupts ;* Call DasIntOn(IoPointer&, ErrorFlag&, SystemState&, IoData&(0, 0), ;* IoParm&(0, 0), LgradThres) from Visual Basic. DasIntOn PROTO FAR, VBIoPointer:dword, VBErrorFlag:dword, VBSystemState:dword, VBIoData:dword, VBIoParm:dword, VBLGradThres:dword DasIntOn PROC FAR EXPORT, VBIoPointer:dword, VBErrorFlag:dword, VBSystemState:dword, VBIoData:dword, VBIoParm:dword, VBLGradThres:dword Prolog ;* Stage 1 Get addresses of IOPointer, ErrorFlag, SystemState, ;* IoData, IoParm, LGradThres which point back into VB static array. mov eax, VBIoPointer ; get VB IoPointer address mov IoPointer, eax ; move it to asm mov eax, VBErrorFlag ; get VB ErrorFlag address mov ErrorFlag, eax ; mov it to asm mov eax, VBSystemState ; get VB SystemState address mov SystemState, eax ; move it to asm mov eax, VBIoData ; get VB IoData address mov IoData, eax ; move it to asm mov eax, VBIoParm ; get VB IoParm address mov IoParm, eax ; move it to asm mov eax, VBLGradThres ; get VB LGradThres address mov LGradThres, eax ; move it to asm ;* Stage 2 zero the interrupt counter and system state mov IntCount, 0 mov LocalSysState, 0 ;* Stage 3 install dummy interrupt vector call SetDummyIntVector ; Set dummy IrqLevel interrupt ;* Stage 4 make sure interrupt is masked on the das board call DisableDasInt ;* Stage 5 Set up Irq level in bits 4-6 of register 9 call SetDasIrqLevel ;* Stage 6 set up counter 0 with number of rows AND enable ;* hardware trigger. This is done in Counter0SetUp. call Counter0SetUp ;* Stage 7 Enable interrupt on 8259a call EnableIrqMask ;* Stage 8 Set Irq 5 highest prority in 8259a - didn't seem to ;* make any difference in performance ; call Irg5HighestPriority ;* Stage 9 Burst length set-up call EnableDasBurstMode ;* Stage 10 - clear fifo call InitDasFifo ; read and discard 256 fifo words ;* Stage 11 Set application interrupt vector call SetDasIntVector ; Set IrqLevel interrupt vector ;* Stage 12 Set LocalIop to DataRows - 1. MOV ax, DataRows - 1 ; set LocalIop = DataRows mov LocalIop, ax ; les bx, IoPointer ; get address IoPointer% mov es:[bx], ax ; also set VB IoPointer% = 0 ;* Stage 13 Set hardware trigger call SetHardwareTrigger ;* Stage 14 Clear flip-flop on Pin 25 call ClearDasPin25 ;* Stage 15 Enable interrupt on das board call EnableDasInt Epilog ret 24 DasIntOn ENDP This got a bit complicated. The ComputerBoard clone of the Keithly-Metrabyte a/d converter powers-up in an UNKNOWN state. Or at least partially UNKNOWN. One of the random states includes triggering spurious interrupt. So a dummy handler had to be inserted to possibly field bad data. The attempt was made to interface directly to hardware without a microcontoller buffer was partially successful. Sampling at the 1 Khz rate revealed that Windows occasionally did its own thing as a result of a task switch and, therfore, interrupts were missed. To detect when this happened we modified the ComputerBoards das 1400 board so that a hardware count of interrupts received could be compared to the software count. Since the a/d values were buffered a FIFO, the FAST Pentium could catch up. But this caused the interrupt handler to increase in size from about 1 K lines, including white space and comments, to 2 K lines. Naturally we wish to be in the problem solving, as opposed to problem creating, or assignation of blame. I think we have to consider all possible problem sources. I am looking at the AC POWER INTERFACE LS SOV Schematic dated 11-8-96. I see that the power to the analog and digital cards was run via a serial port db 25 cable and connector. Pin assignment are Pin Function 1 -15 G 2 +15 GS 3 +5 G 4 +15 G 5 5 GS 6 tied to pin 7 7 +15S 8 15 S 9 5 10 tied to pin 10 11 +15 12 tied to pin 11 13 15 S 14 tied to pin 1 15 +5 GS 16 tied to pin 3 17 nc 18 tied to pin 5 19 +24 ground 20 tied to pin 19 21 +5 S 22 tied to pin 9 23 tied to pin 22 24 +24 volts 25 tied to pin 24 The +24 volts runs to solenoids. The remaining power runs to both digital and analog Ics. While some are left wondering why engineers had not thought of running analog, digital and solenoid power down an inexpensive 24 pin PC serial port cable before, perhaps, we might all guess, other engineers lack sufficient innovative audacity. One engineer opined last summer, when I was working in the shop on the digital FX, that the PC Data System boards may have to be redesigned. Lets hope that such a major revision is not required. Naturally, me being a TOTAL CONSERVATIVE [as evidenced by Morales and my genocide court filing], I plan to physically separate the analog and digital IC s on the digital FX. And I am thinking about on-board power regulation to keep the 80c32, analog, and digital chips super-happy. In the field, of course. I will leave in several hours. In my grey rabbit. Air travel safety worries me more now. Especially after publication of last book. Just in case, I will bring my passport. The thought of two machines located 180 miles NW of Edmonton not working well is, of course, chilling. I sure glad the 8051 version of PC Data System is working fairly well. And is MAKING money for Metriguard. See you on Tuesday, Allah willing. Later bill Title: Payne/Morales v. NSA -- Defendant's Response to Motion for Summary Judgment 16 January 1998 Source: William H. Payne See related files: http://jya.com/whpfiles.htm U.S. Department of Justice United States Attorney District of New Mexico __________________________________________________________ Post Office Box 607 Albuquerque, New Mexico 87103 505/766-3341 505/766-2868 FAX 505/766-8517 January 5, 1998 W.H. Payne P.O. Box 14838 Albuquerque, New Mexico 87191 Re: Payne & Morales v. Minihan USDC NM CIV 97-0266 SC/DJS Dear Mr. Payne: Enclosed is a court-endorsed copy of Defendant's Response to Plaintiffs' Motion for Summary Judgment Based on Evidence from Admissions. Sincerely, JOHN J. KELLY United States Attorney [Signature] JAN ELIZABETH MITCHELL Assistant U. S. Attorney JEM/yh Enclosure cc/enc: Arthur R. Morales [Stamp] FILED United States District Court District of New Mexico 98 JAN -5 PM 3:46 Robert M. Marsh District Clerk IN THE UNITED STATES DISTRICT COURT FOR THE DISTRICT OF NEW MEXICO WILLIAM H. PAYNE ) ARTHUR R. MORALES ) ) Plaintiffs, ) ) vs. ) CIVIL NO. 97-026 SC/DJS ) LT GEN KENNETH A. MINIHAN ) USAF Director, National Security ) Agency, ) ) Defendant. DEFENDANT'S RESPONSE TO PLAINTIFFS' MOTION FOR SUMMARY JUDGMENT BASED ON EVIDENCE FROM ADMISSIONS Defendant Minihan responds to Plaintiff's Motion for Summary Judgment Based On Evidence From Admissions1 as follows: 1. Commencing in October, 1997, Plaintiffs served numerous sets of Requests for Admissions on various employees of the National Security Agency and on current and past employees of the Sandia National Laboratory. 2. Counsel for Defendant was not served with copies of any of said Requests for Admissions until sometime after the individuals had been served.2 ____________________ 1 It should be noted that the instant Motion for Summary Judgment constitutes Plaintiffs' second motion for summary judgment. Plaintiffs filed an initial Motion for Summary Judgment on June 4, 1997 to which Defendant responded on June 19, 1997, and Plaintiffs filed a Reply on July 1, 1997. Said initial Motion for Summary Judgment has not been ruled upon. In addition, Defendant filed a Motion to Dismiss Plaintiff Arthur R. Morales on September 23, 1997, and a Motion seeking dismissal of Plaintiff William Payne's Freedom of Information Act action on October 3, 1997. All briefing by all parties has been completed on those Motions. 2 On October 13, 1997, Plaintiffs mailed a First Set of Admissions to Kenneth Minihan. However, not until November 3, 1997, did Plaintiffs mail a copy of said First Set of Request for 3. Upon becoming aware that Plaintiffs had served Requests for Admissions on a number of individuals, on October 23, 1997, Counsel for Defendant filed a Motion and Memorandum To Strike Any And All Of Plaintiffs' First Set of Requests For Admissions To Various Employees Of The National Security Agency And To Various Employees Of Sandia National Laboratory, (hereinafter "Motion and Memorandum.") 4. As grounds for the Motion and Memorandum, Defendant argued that Plaintiffs had blatantly disregarded this Court's Order pertaining to the conduct of discovery and the deadline for discovery in this Freedom of Information Act action. 5. In Defendant's Motion and Memorandum, Counsel for Defendant also objected to Plaintiffs' sua sponte decision to modify the Court's June 11 Order to reflect the delay of the Court's October 7 Order and the establishment, without leave of this Court, of new deadlines for discovery, motions practice, and the filing of the PreTrial Order. (Motion and Memorandum ¶ 9, at 4.) 6. In the Motion and Memorandum, Defendant requested that this Court strike any and all "First Set of Request for Admission" propounded by Plaintiffs. (Motion and Memorandum, at 5.) 7. Plaintiffs responded to the Motion and Memorandum on November 5, 1997, specifically seeking that this Court "take no action in this case until Supreme court takes action on writs on ____________________ Admissions to Counsel for Defendant. Counsel for Defendant was not provided with copies of any other Requests for Admissions sent to employees of NSA or employees of the Sandia National Laboratory. 2 mandamus, prohibition, and criminal complaint affidavits filed against judges Svet and Campos and US Attorney Mitchell." (Plaintiffs' Response to Motion And Memorandum To Strike Any And All Of Plaintiffs' First Set Of Request For Admissions To Various Employees Of The National Security Agency And To Various Employees Of Sandia National Laboratories, ¶ 11, at 10.) 8. To date, no order has been issued by this Court on the matters raised in the Motion and Memorandum, nor has any other court issued any orders concerning Plaintiffs' cause of action and various complaints. 9. By their own request, Plaintiffs sought to stay a ruling on the Defendant's Motion and Memorandum. Absent any ruling on either the Motion and Memorandum or Plaintiffs' Response, Defendant Minihan, employees of NSA, and employees of Sandia National Laboratory, were not obligated to respond to the Requests for Admissions as provided by Fed.R.Civ.P. 36.3 For Plaintiffs to now assert in their "Motion for Summary Judgment On Based On Evidence From Admissions" that because the individuals have not responded to the Requests for Admissions they are deemed admitted, flies in the face of their own prayer to this Court to stay a ruling on the Defendant's Motion to strike the Requests for Admissions until the Supreme Court takes action. ____________________ 3 Despite the fact that Defendant's employees and other individuals are not required to respond to the Requests for Admissions based upon the outstanding pleadings which have yet to be ruled on by this Court, Plaintiffs characterize that all admissions are admitted and then publish those admissions on the Internet. 3 10. Defendant requests that this Court either rule upon Defendant's Motion and Memorandum granting the request to strike the Requests for Admissions, or grant Plaintiffs' request to stay this action pending the issuance of the order sought by Plaintiffs in another forum. Should this Court deny Defendant's Motion and Memorandum, Defendant respectfully requests that the individuals to whom Requests for Admissions are appropriate in this action be given the thirty days to respond to said admissions as provided by the Federal Rules of Civil Procedure. 11. Plaintiffs requested a stay. Absent a ruling from this Court denying their request, they cannot proceed to assert that the Requests for Admissions are deemed admitted. Accordingly, Plaintiffs' "Motion For Summary Judgment On Based On Evidence From Admissions" must be denied. Respectfully submitted, JOHN J. KELLY United States Attorney [Signature] JAN ELIZABETH MITCHELL Assistant U.S. Attorney P.O. Box 607 Albuquerque, New Mexico 87103 (505) 766-3341 I HEREBY CERTIFY that a true copy of the foregoing pleading was mailed to PRO SE PLAINTIFFS, this 5th day of January, 1998. [Signature] JAN ELIZABETH MITCHELL Assistant U. S. Attorney 4 UNITED STATES DISTRICT COURT FOR THE DISTRICT OF NEW MEXICO William H. Payne ) Arthur R. Morales ) ) Plaintiffs, ) ) v ) CIV NO 97 0266 ) SC/DJS ) Lieutenant General Kenneth A. Minihan, USAF ) Director, National Security Agency ) National Security Agency ) ) Defendant ) REPLY TO DEFENDANT'S RESPONSE TO PLAINTIFFS' MOTION FOR SUMMARY JUDGMENT BASED ON EVIDENCE FROM ADMISSIONS 1 COMES NOW plaintiffs Payne [Payne] and Morales [Morales] [Plaintiffs], pro se litigants to exercise their rights guaranteed under the Constitution, Rules of Civil Procedure, and Local Civil Rules to respond to Defendant's MOTION filed on 98 JAN-5 within the 14 days allowed by local rule 7.3(b)(4). 2 US Attorney Mitchell [Mitchell] writes, Counsel for Defendant was not served with copies of any of said Requests for Admissions until sometime after the individuals had been served.2 Mitchell WAS SERVED PLAINTIFFS' FIRST SET OF REQUEST FOR ADMISSION TO NSA DIRECTOR KENNETH MINIHAN I HEREBY CERTIFY that a copy of the foregoing request for admissions was mailed to Jan Elizabeth Mitchell, Assistant US Attorney, 525 Silver SW, ABQ, NM 87102 this Monday November 3, 1997. Michell was not served with any other admissions since Mitchell is not representing others. Plaintiffs' served Defendant Minihan properly. And Minihan failed to respond to Minihan's admissions within the time allotted by law. 3 US Attorney Mitchell writes, As grounds for the Motion and Memorandum, Defendant argued that Plaintiffs had blatantly disregarded this Court's Order pertaining to the conduct of discovery and the deadline for discovery in this Freedom of Information Act action. Judges Svet and Campos willfully violated Plaintiffs' right to Discovery. And thereby earned criminal complaint affidavits filed with judge Scalia of the Supreme Court. 4 US Attorney Mitchell writes, In Defendant's Motion and Memorandum, Counsel for Defendant also objected to Plaintiffs' sua sponte decision to modify the Court's June 11 Order to reflect the delay of the Court's October 7 Order and the establishment, without leave of this Court, of new deadlines for discovery, motions practice, and the filing of the PreTrial Order. (Motion and Memorandum 9, at 4.) Judge Svet and Campos attempt to deny Plaintiffs' right to Discovery, again, earned Svet and Campos criminal complaint affidavits. Plaintiffs exercise their right under the Federal Rules of Civil Procedure and the Constitution to conduct Discovery WITHOUT LEAVE OF COURT! 5 US Attorney Mitchell writes, By their own request, Plaintiffs sought to stay a ruling on the Defendant's Motion and Memorandum. Absent any ruling on either the Motion and Memorandum or Plaintiffs' Response, Defendant Minihan, employees of NSA, and employees of Sandia National Laboratory, were not obligated to respond to the Requests for Admissions as provided by Fed.R.Civ.P. 36.3 For Plaintiffs to now assert in their "Motion for Summary Judgment On Based On Evidence From Admissions" that because the individuals have not responded to the Requests for Admissions they are deemed admitted, flies in the face of their own prayer to this Court to stay a ruling on the Defendant's Motion to strike the Requests for Admissions until the Supreme Court takes action. Plaintiffs' have REPEATEDLY asked judge Svet and Campos to disqualify themselves from any rulings on this case because Campos and Svet do NOT obey the Federal Rules of Civil Procedure. Replace judges Svet and Campos because these judges have demonstrated, IN WRITING, they do not follow the Federal Rules of Civil Procedure. Plaintiffs' pleas are directed a replacement judge[s]. Not Svet and Campos. Therefore, Svet and Campos' failure to remove themselves does not stop the legal process. Mitchell cites NO law to support her claim that time constraints imposed under Fed.R.Civ.P. 36.3 are inapplicable as a result of Svet's and Campos' failure to remove themselves. 6 US Attorney Mitchell writes, Defendant requests that this Court either rule upon Defendant's Motion and Memorandum granting the request to strike the Requests for Admissions, or grant Plaintiffs' request to stay this action pending the issuance of the order sought by Plaintiffs in another forum. Should this Court deny Defendant's Motion and Memorandum, Defendant respectfully requests that the individuals to whom Requests for Admissions are appropriate in this action be given the thirty days to respond to said admissions as provided by the Federal Rules of Civil Procedure. REPLACEMENT JUDGES of the Court should realize the outcome of the lawsuit has attained international interest as a result of the 1 bungled NSA spy sting on Iran 2 US government agencies NSA, NIST, and the FBI's attempt to control cryptography. Mitchell's DEFENDANT'S RESPONSE TO PLAINTIFFS' MOTION FOR SUMMARY JUDGMENT BASED ON EVIDENCE FROM ADMISSIONS was posted on Internet at jya.com, click cryptome nsasuit8.htm USA/NSA Responds to Payne/Morales Motion January 16, 1998 Importance of this posting is summed-up in the Toronto Sun, Jan. 11, 1998 US, Iran Need Each Other by Eric Margolis Iran launched a surprise charm offensive last week, throwing Washington into serious confusion. In a lengthy interview on CNN, Iran's new president, Mohammad Khatami, skillfully analyzed the bitter relations between the two nations and cautiously extended an olive branch to Washington, calling for an end to their 19-year cold war. Khatami's diplomatic ju-jitsu flummoxed the Clinton administration, which was busy trying to rally international support against Tehran - and to overthrow Iran's elected government. Both capitals are split over the question of relations. In Washington, the military establishment and conservative Republicans have inflated Iran into a bogeyman to justify military budgets and keep U.S. forces in the Mideast. ... America incited Iraq to invade Iran in 1980. They did this to crush the Islamic revolution, then provided massive war aid to Saddam Hussein. Half a million Iranians died. The US got caught involved in genocide. Using high tech. This is one subject of this lawsuit. Albuquerque Journal Tuesday 1/13/98 carried the editorial. Khatami Move Is Profile in Courage Richard Reeves Syndicated Columnist LOS ANGELES - If an American leader had done what Iranian President Mohammed Khatami did last Wednesday, it would have been hailed as a profile in courage. ... Miscalculation! We armed and pampered Saddam Hussein in the hope that Iraq would destroy Iran. Now that's policy and behavior to think about. Here is something to think about: If Presidents Eisenhower and Kennedy had pursued any kind of sensible policy toward Cuba and Fidel Castro - opposed to the policy of trying to assassinate him - there never would have been a Cuban missile crisis. I think Iranians have financed and encouraged terrorism against the interests of the United States and Israel. I would not be surprised at all if something like proof emerges soon, perhaps anonymously, from the CIA and other government agencies, where many officials have built their careers on sanctioning and isolating Iran, to try to straighten the backbones of the president and people of the United States. If they succeed, America fails. What would be more effective in closing down Iranian terrorism? More hostility, sanctions and charges? Or beginning the process toward more normal relations with a country positioned and born to be great? ... Clearly genocide fits into Now that's policy and behavior to think about. The wired world is watching what this Court, hopefully minus judges Svet and Campos, will do. What is there to be? A series of possibly unfortunate events? Or does this Court order release the lawfully requested documents to help settle this American tragedy? WHEREFORE. 7 Have replacement judges of this Court DENY Mitchell's Plaintiffs requested a stay. Absent a ruling from this Court denying their request, they cannot proceed to assert that the Requests for Admissions are deemed admitted. Accordingly, Plaintiffs' "Motion For Summary Judgment On Based On Evidence From Admissions" must be denied. for reason that Mitchell's request to subvert both the Discovery processes and its time limits have no basis in law. And appears to plead to judges who do not obey the Federal Rules of Civil Procedure. 9 IMMEDIATELY ORDER Defendant to release the requested documents in the interest of national safety so that this matter can be settled. Aggrieved victims of US genocide are reading these pleadings. Respectfully submitted, _________________________ William H. Payne 13015 Calle de Sandias NE Albuquerque, NM 87111 _________________________ Arthur R. Morales 1024 Los Arboles NW Albuquerque, NM 87107 Pro se litigants CERTIFICATE OF SERVICE I HEREBY CERTIFY that a copy of the foregoing memorandum was mailed to Lieutenant General Kenneth A. Minihan, USAF, Director, National Security Agency, National Security Agency, 9800 Savage Road, Fort George G. Meade, MD 20755-6000 and hand delivered to John J. Kelly, US Attorney, 525 Silver SW, ABQ, NM 87102 this Tuesday January 20, 1997. 5 Title: Model 7200 HCLT High Capacity Lumber Tester The Metriguard Model 7200 High Capacity Lumber Tester was introduced in 1993. This machine is now certified by grading agencies in the United States, Canada and UK. Also in use in Japan and Austria. Speed capacity is unknown. We have run tests in excess of 2,000 ft/min, and have not seen any limitations or indications that it would not run faster. We expect this machine to keep up with planer developments and run in the neighborhood of 3,000 ft/min sometime within the next ten years. The machine is available with a number of options, including the recently introduced PC Data System, which adds new capability in marking options, shift reports, and internal error checking. Yet to come in Metriguard's program of continuous improvement are automatic wood temperature compensation, automatic zero tracking, scanner inputs. Please contact Metriguard Sales office for further information about how this machine can improve your lumber grading and mill profits. Return to home page

2 1

Digital Telephony Act
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

Whats going to happen when direct satellite phone service becomes a reality ( as in the joint Loral/Qualcomm effort ) ? When one notes that it is difficult to impossible to prevent service stealing in the cellular environment, how will it be prevented in direct broadcast? It might not be possible to detect unauthorized encryption schemes without direct monitoring. Do the Feds think this is can be won?

6 7

Signed document - a thought...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I was pondering the security issues regarding signed documents and key security. It occured to me that in all the discussion it is assumed that the document is transmitted after the key is transmitted. It seems to be that a higher level of security could be obtained by submitting the signed document first and then submit the signing key. This way when the document goes out Mallet has no idea what key to replace and any fudging of the document will destroy the sign. Then when the key goes out if it is replaced the document won't pass testing either since the server already has a unmod'ed copy. In short, instead of having each author have a signing key, have each document have a signature key and always submit the signed document prior to the signing key. After all it's the document and not the author (who we assume is already using an anonymous submission mechanism) we wish to verify from the end users perspective. The mechanims provides a means for the data haven server to verify the authenticity of the document and this allows them to pass that trust on to the end user in the same sort of way. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: Eternity - an alternative approach
by Ryan Lackey 17 Dec '03

17 Dec '03

(Kay Ping) writes: > It occured to me that the equivalent on the net would be to receive > packets with invalid source addresses. They are just there, coming dowm > the phone line to your modem. It takes significant resources and snooping > on a massive scale to locate where they are coming from.. All this is > assuming you can find some way to send a request with your address to the > server. I've looked at this idea for a while. It's great right now once you get away from the first couple of subnets, though. However, I've recently become aware of "IDIP", or "Intruder Detection and Isolation Protocol" through potentially questionable sources (my source is mostly NDA-wary). He assumes it will be implemented by having each router cache IP address, received interface tuples. Then, after the fact, one could go back and track someone router by router. The technical solution to this is to flood a router with forged packets while using it to transfer your own data, overflowing the cache. This presents the problem of being tracked by leaving a cloud of flooded routers in your wake. But it's possible. I get the impression the system is far from deployment, but that it is being worked on is a sign that potentially someone sees the rise in forged source address attacks and wants to curtail it. -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

1 0

Signed document - a thought... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Jim Choate <ravage(a)ssz.com> > Subject: Signed document - a thought... > Date: Sun, 18 Jan 1998 10:31:36 -0600 (CST) > document have a signature key and always submit the signed document prior > to the signing key. After all it's the document and not the author (who we > assume is already using an anonymous submission mechanism) we wish to verify > from the end users perspective. One other assumption that I left out after I sent it was that the data haven and the key server are not the same machine. Sorry, I hope it makes a tad more sense with that proviso included. Sorry for sending an incomplete suggestion. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium (fwd)
by Ryan Lackey 17 Dec '03

17 Dec '03

(Jim Choate) writes: > Ryan Lackey writes: > > Once your DBC escrow > > "account" runs out, the data is worthless > > That's a jump of logic. The data may infact be quite popular even though you > don't offer it anymore (might even do this in order to increase its worth, > say some sort of insider trader newsletter). It's probably not in the best > interest of the data haven model to speculate on exactly why a particular > source decides to quit sourcing. True. But in an Eternity model without copyright, someone could be one of the first customers to download the data, then upload it again under a different name. The only thing the original uploader would have as an advantage would be indexing information, potentially -- it's easier for me to download ms word by going to the eternity equivalent of http://www.microsoft.com/ than to go to http://www3.pop3-167.adhoc.warez.location.ai/edf3/filez1.zip. There's no real way to put the genie back into the bottle unless you can send people with guns to beat people up who store your data as a third party. Data disappears from Eternity once no one cares enough about it to pay to have it stored. That could mean someone doesn't pay in advance for the data, or no one is willing to invest disk space in the hope that it will in the future be downloaded. Providing eternity service costs money. Anything which lets users circumvent this opens up the potential for denial of service through consumption of resources attacks. Even if billing is fundamental, you still have the potential for the NSA to spend $100m to buy all the eternity space available at any point. This is why you also need market mechanisms -- if the NSA is willing to pay a premium for eternity service just to keep it out of the hands of the populace, then running eternity servers is a great investment, so capacity will increase until the NSA can no longer afford to buy all of it. A difficult part of designing a working Eternity service is to keep people from "stealing service", in terms of consumption of resources, during set up, indexing, etc. Basically, you need to make sure that to the greatest extent possible, anything which is a potentially scarce resource is sold, not given away. > > > remain in Eternity forever if no one cares enough about it to pay to > > have it stored. > > Then again, if it was really important I might intentionaly want to attack > the ability to provide long-term income. A better model might be to charge > for the access and let the actual submission be no charge. A portion of the > retrieval charge could then be piped back to the source. Consider the case > of say nuclear or biological information for a weapon. That sort of data > would be accessed only infrequently (unless you're giving something this > expensive to obtain and verify away - a d-h operator error, no.) but should > be quite expensive to retrieve. You then are vulnerable to someone spamming the system, unless you give the server operator some way of knowing if this encrypted data is likely to be valuable. I think both payment models should coexist. But there's no reason that the server operators are the only people able to speculate -- it could be just another random user. You can have arbitrarily complex payment models, since the enforcement agents can exist (must exist?) as eternity objects in their own right. > > > If the data is still relevant and worth breaking in 50 years, they could > > just intercept the encrypted email, store it in a government vault for > > 50 years, > > More realisticaly they would have somebody just add it to a batch job and > let the spare cycles of the machines crank away at it. Or perhaps set up a > key challenge and get people all over the world to work on it in their spare > cycles. Who knows, perhaps the source of the data woudl be intriqued enough > to provide spare cycles unknowingly. No, the most feasible attacks for a resourced attacker are custom ASICs optimized for key testing, as were recently described. Distributed workstation cracking is a parlor trick if you have a billion dollar budget for key cracking. The NSA has general purpose HPC resources for purposes like signal processing, AI, etc., not for brute forcing people's keys routinely (although perhaps for a weak and nonstandard cipher, it would make sense to use general purpose machines). Even a corporation would be better off using FPGAs or ASICs for key cracking once you get past 56 bits. > > > If you do not postulate that level of signals collection capability on the > > It's not just their sig-int capability but their complete processing > resource capability that must be considered as well as their psychological > motivation. Granted, all of these are extremely difficult to measure let > alone verify. Perhaps a little paranoia might be a good thing. I assume the attacker is evil and rational. I also assume that the entire legal system has been subverted, and that extralegal operations of any size too small to make the new york times front page are possible. And, any entity which deals with the government (just about any) can be subverted. Thinking that the major internet gateways between providers are bugged by the NSA isn't really too unreasonable if you accept those assumptions. > > > > ____________________________________________________________________ > | | > | The most powerful passion in life is not love or hate, | > | but the desire to edit somebody elses words. | > | | > | Sign in Ed Barsis' office | > | | > | _____ The Armadillo Group | > | ,::////;::-. Austin, Tx. USA | > | /:'///// ``::>/|/ http://www.ssz.com/ | > | .', |||| `/( e\ | > | -====~~mm-'`-```-mm --'- Jim Choate | > | ravage(a)ssz.com | > | 512-451-7087 | > |____________________________________________________________________| -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

3 2

Re: Eternity - an alternative approach
by John Young 17 Dec '03

17 Dec '03

Ryan Lackey wrote: >However, I've recently become aware of "IDIP", or "Intruder Detection >and Isolation Protocol" through potentially questionable sources (my >source is mostly NDA-wary). Ryan, Any chance you could get more info on this and pass it along? Or maybe your source could spec it through a remailer if you can persuade that the cutout is truly inviolable. Thanks, John

1 0

Fastest & Easiest way to make money
by 97565462＠aol.com 17 Dec '03

17 Dec '03

This is a one time mailing and your address has already been deleted from our database. Please take time to read this before you erase it! I would like to let you in on a good idea... I NEVER THOUGHT I'D BE THE ONE TELLING YOU THIS.... I ACTUALLY READ & ACTED ON A PIECE OF E-MAIL, AND NOW I'M GOING TO EUROPE FOR THE VACATION! My name is Jason ; I'm a 34-year-old father, husband, and full time office manager. As a rule, I delete all unsolicited "junk" e-mail and use my account primarily for business. I received what I assumed was this same e-mail countless times and deleted it each time. About two months ago I received it again and, because of the catchy subject line, I finally read it. Afterwards, I thought, "OK, I give in, I'm going to try this. I can certainly afford to invest $20 and, on the other hand, there is nothing wrong with creating a little excess cash." I promptly mailed four $5 bills and, after receiving the reports paid a friend of mine a small fee to send out some e-mail advertisements for me. After reading the reports, I also learned how easy it is to bulk e-mail for free! I was not prepared for the results. Everyday for the last six weeks, my P.O. box has been overflowing with $5 bills; many days the excess fills up an extra mail bin and I've had to upgrade to the corporate-size box! I am stunned by all the cash that keeps rolling in! I promise you, if you follow the directions in this e-mail and be prepared to eventually set aside about an hour each day to follow up (and count your money!), you will make at least as much money as we did. You don't need to be a wiz at the computer, but I'll bet you already are. If you can open an envelope,remove the money, and send an e-mail message, then you're on your way to the bank. Take the time to read this so you'll understand how easy it is. Believe me, it works! GO FOR IT NOW! Sincerely, Jason The following is a copy of the e-mail I read: This is a LEGAL, LOW-COST, MONEY-MAKING PHENOMENON. PRINT this letter, read the directions, THEN GET STARTED TODAY! You are about to embark on the most profitable and unique program you may ever see. Many times over, it has demonstrated and proven its ability to generate large amounts of cash. This program is showing fantastic appeal with a huge and ever-growing on-line population desirous of additional income. This is a legitimate, LEGAL, money-making opportunity. It does not require you to come in contact with people, do any hard work, and best of all, you never have to leave the house, except to get the mail and go to the bank! This truly is that lucky break you've been waiting for! Simply follow the easy instructions in this letter, and your financial dreams will come true! When followed correctly, this electronic, multi-level marketing program works perfectly... 100% OF THE TIME! Thousands of people have used this program to: - Raise capital to start their own business - Pay off debts - Buy homes, cars, etc., - Even retire! This is your chance, so read on and get started today! ---------------------------------------------------------------------------- ------ OVERVIEW OF THIS EXTRAORDINARY ELECTRONIC MULTI-LEVEL MARKETING PROGRAM ---------------------------------------------------------------------------- ------ Basically, this is what we do: We send thousands of people a product for $5.00 that costs next to nothing to produce and e-mail. As with all multi-level businesses, we build our business by recruiting new partners and selling our products. Every state in the U.S.allows you to recruit new multi- level business online (via your computer). The products in this program are a series of four business and financial reports costing $5.00 each. Each order you receive via "snail mail" will include: * $5.00 cash * The name and number of the report they are ordering * The e-mail address where you will e-mail them the report they ordered. To fill each order, you simply e-mail the product to the buyer. THAT'S IT! The $5.00 is yours! This is the EASIEST electronic multi-level marketing business anywhere! FOLLOW THE INSTRUCTIONS TO THE LETTER AND BE PREPARED TO REAP THE STAGGERING BENEFITS! ******* I N S T R U C T I O N S ******* This is what you MUST do: 1. Order all 4 reports shown on the list below (you can't sell them if you don't order them). * For each report, send $5.00 CASH, the NAME & NUMBER OF THE REPORT YOU ARE ORDERING, YOUR E-MAIL ADDRESS, and YOUR NAME & RETURN ADDRESS (in case of a problem) to the person whose name appears on the list next to the report. MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE IN CASE OF ANY MAIL PROBLEMS! * When you place your order, make sure you order each of the four reports. You will need all four reports so that you can save them on your computer and resell them. * Within a few days you will receive, via e-mail, each of the four reports. Save them on your computer so they will be accessible for you to send to the 1,000's of people who will order them from you. 2. IMPORTANT-- DO NOT alter the names of the people who are listed next to each report, or their sequence on the list, in any way other than is instructed below in steps "a" through "f" or you will lose out on the majority of your profits. Once you understand the way this works, you'll also see how it doesn't work if you change it. Remember, this method has been tested, and if you alter it, it will not work. ( I talked to a friend last month who has also done this program. He said he had tried "playing" with it to change the results. Bad idea.... he never got as much money as he did with the un-altered version. Remember, it's a proven method! a. Look below for the listing of available reports. b. After you've ordered the four reports, take this advertisement and remove the name and address under REPORT #4. This person has made it through the cycle and is no doubt counting their 50 grand! c. Move the name and address under REPORT #3 down to REPORT #4. d. Move the name and address under REPORT #2 down to REPORT #3. e. Move the name and address under REPORT #1 down to REPORT #2. f. Insert your name/address in the REPORT #1 position. Please make sure you copy every name and address ACCURATELY! 3. Take this entire letter, including the modified list of names, and save it to your computer. Make NO changes to the instruction portion of this letter. 4. Now you're ready to start an advertising campaign on the INTERNET! Advertising on the 'Net is very, very inexpensive, and there are HUNDREDS of FREE places to advertise. Another avenue which you could use for advertising is e-mail lists. You can buy these lists for under $20/2,000 addresses or you can pay someone a minimal charge to take care of it for you. BE SURE TO START YOUR AD CAMPAIGN IMMEDIATELY! 5. For every $5.00 you receive, all you must do is e-mail them the report they ordered. THAT'S IT! ALWAYS PROVIDE SAME-DAY SERVICE ON ALL ORDERS! This will guarantee that the e-mail THEY send out, with YOUR name and address on it, will be prompt because they can't advertise until they receive the report! ------------------------------------------ AVAILABLE REPORTS ------------------------------------------ *** Order Each REPORT by NUMBER and NAME *** Notes: - ALWAYS SEND $5 CASH (U.S. CURRENCY) FOR EACH REPORT CHECKS NOT ACCEPTED - ALWAYS SEND YOUR ORDER VIA FIRST CLASS MAIL - Make sure the cash is concealed by wrapping it in at least two sheets of paper - On one of those sheets of paper, include: (a) the number & name of the report you are ordering, (b) your e-mail address, and (c) your name & postal address. PLACE YOUR ORDER FOR THESE REPORTS NOW: ______________________________________________________________ REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 FROM: Jason Baek 15507 S. Normandie Ave. # 167. Gardena, Ca 90247-4028 ______________________________________________________________ REPORT #2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT #2 FROM: Brain 150 Main St N # 74075 Brampton, Ont., Canada L6V 4J7 ______________________________________________________________ REPORT #3 "SOURCES FOR THE BEST MAILING LISTS" ORDER REPORT #3 FROM: AMF Investments 2319 South Kirkwood # 144 Houston, TX 77077 ______________________________________________________________ REPORT #4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT #4 FROM: Fusion Marketing Ltd. 8895 Towne Centre Drive Suite 105-303A La Jolla, Ca 92122-5542 ______________________________________________________________ HERE'S HOW THIS AMAZING PLAN WILL MAKE YOU $MONEY$ Let's say you decide to start small just to see how well it works. Assume your goal is to get 10 people to participate on your first level. (Placing a lot of FREE ads on the internet will EASILY get a larger response.) Also assume that everyone else in YOUR ORGANIZATION gets ONLY 10 downline members. Follow this example to achieve the STAGGERING results below. 1st level--your 10 members with $5............................................$50 2nd level--10 members from those 10 ($5 x 100).....................$500 3rd level--10 members from those 100 ($5 x 1,000)............$5,000 4th level--10 members from those 1,000 ($5 x 10,000)...$50,000 THIS TOTALS ----------->$55,550 Remember friends, this assumes that the people who participate only recruit 10 people each. Think for a moment what would happen if they got 20 people to participate! Most people get 100's of participants! THINK ABOUT IT! Your cost to participate in this is practically nothing (surely you can afford $20). You obviously already have an Internet connection and e-mail is FREE! REPORT#3 shows you the most productive methods for bulk e-mailing and purchasing e-mail lists. Some list & bulk e-mail vendors even work on trade! About 50,000 new people get online every month! ******* TIPS FOR SUCCESS ******* * TREAT THIS AS YOUR BUSINESS! Be prompt, professional, and follow the directions accurately. * Send for the four reports IMMEDIATELY so you will have them when the orders start coming in because: When you receive a $5 order, you MUST send out the requested product/report to comply with the U.S. Postal & Lottery Laws, Title 18,Sections 1302 and 1341 or Title 18, Section 3005 in the U.S. Code, also Code of Federal Regs. vol. 16, Sections 255 and 436, which state that "a product or service must be exchanged for money received." * ALWAYS PROVIDE SAME-DAY SERVICE ON THE ORDERS YOU RECEIVE. * Be patient and persistent with this program. If you follow the instructions exactly, your results WILL be SUCCESSFUL! * ABOVE ALL, HAVE FAITH IN YOURSELF AND KNOW YOU WILL SUCCEED! ******* YOUR SUCCESS GUIDELINES ******* Follow these guidelines to guarantee your success: If you don't receive 10 to 20 orders for REPORT #1 within two weeks, continue advertising until you do. Then, a couple of weeks later you should receive at least 100 orders for REPORT #2. If you don't, continue advertising until you do. Once you have received 100 or more orders for REPORT #2, YOU CAN RELAX, because the system is already working for you, and the cash will continue to roll in! THIS IS IMPORTANT TO REMEMBER: Every time your name is moved down on the list, you are placed in front of a DIFFERENT report. You can KEEP TRACK of your PROGRESS by watching which report people are ordering from you. If you want to generate more income, send another batch of e-mails and start the whole process again! There is no limit to the income you will generate from this business! ******* T E S T I M O N I A L S ******* This program does work, but you must follow it EXACTLY! Especially the rule of not trying to place your name in a different position, it won't work and you'll lose a lot of potential income. I'm living proof that it works. It really is a great opportunity to make relatively easy money, with little cost to you. If you do choose to participate, follow the program exactly, and you'll be on your way to financial security. Sean McLaughlin, Jackson, MS My name is Frank. My wife, Doris, and I live in Bel-Air, MD. I am a cost accountant with a major U.S. Corporation and I make pretty good money. When I received the program I grumbled to Doris about receiving "junk mail." I made fun of the whole thing, spouting my knowledge of the population and percentages involved. I "knew" it wouldn't work. Doris totally ignored my supposed intelligence and jumped in with both feet. I made merciless fun of her, and was ready to lay the old "I told you so" on her when the thing didn't work... well, the laugh was on me! Within two weeks she had received over 50 responses. Within 45 days she had received over $147,200 in $5 bills! I was shocked! I was sure that I had it all figured and that it wouldn't work. I AM a believer now. I have joined Doris in her "hobby." I did have seven more years until retirement, but I think of the "rat race" and it's not for me. We owe it all to MLM. Frank T., Bel-Air, MD I just want to pass along my best wishes and encouragement to you. Any doubts you have will vanish when your first orders come in. I even checked with the U.S. Post Office to verify that the plan was legal. It definitely is! IT WORKS!!! Paul Johnson, Raleigh, NC The main reason for this letter is to convince you that this system is honest, lawful, extremely profitable, and is a way to get a large amount of money in a short time. I was approached several times before I checked this out. I joined just to see what one could expect in return for the minimal effort and money required. To my astonishment, I received $36,470.00 in the first 14 weeks, with money still coming in. Sincerely yours, Phillip A. Brown, Esq. Not being the gambling type, it took me several weeks to make up my mind to participate in this plan. But conservative that I am, I decided that the initial investment was so little that there was just no way that I wouldn't get enough orders to at least get my money back. Boy, was I surprised when I found my medium-size post office box crammed with orders! For awhile, it got so overloaded that I had to start picking up my mail at the window. I'll make more money this year than any 10 years of my life before. The nice thing about this deal is that it doesn't matter where in the U.S. the people live. There simply isn't a better investment with a faster return. Mary Rockland, Lansing, MI I had received this program before. I deleted it, but later I wondered if I shouldn't have given it a try. Of course, I had no idea who to contact to get another copy, so I had to wait until I was e-mailed another program...11 months passed then it came...I didn't delete this one!...I made more than $41,000 on the first try!! D. Wilburn, Muncie, IN This is my third time to participate in this plan. We have quit our jobs, and will soon buy a home on the beach and live off the interest on our money. The only way on earth that this plan will work for you is if you do it. For your sake, and for your family's sake don't pass up this golden opportunity. Good luck and happy spending! Charles Fairchild, Spokane, WA ORDER YOUR REPORTS TODAY AND GET STARTED ON YOUR ROAD TO GETTING EXTRA CASH DAILY! NOW IS THE TIME FOR YOUR TURN DECISIVE ACTION YIELDS POWERFUL RESULTS

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: (eternity) Eternity as a secure filesystem/backup medium (fwd) > From: Ryan Lackey <rdl(a)mit.edu> > Date: 18 Jan 1998 12:45:02 -0500 > True. But in an Eternity model without copyright, someone could be one of > the first customers to download the data, then upload it again under a > different name. So in your model there isn't any form of check on the data for redundency? > The only thing the original uploader would have as > an advantage would be indexing information, potentially -- it's easier > for me to download ms word by going to the eternity equivalent of > http://www.microsoft.com/ than to go to > http://www3.pop3-167.adhoc.warez.location.ai/edf3/filez1.zip. Not if it's: http://ww.microsoft.com/software/commercial/wordprocessing/msword/x.y/ \ msword.zip This is a specious point. The fact is that from the users perspective the index would automagicaly provide the actual resting place for the server to find it, even if it were on a different server. The whole point is to make the software do the druggery. The length of the pathname or URL is irrelevant at that point. > There's no real way to put the genie back into the bottle unless you can > send people with guns to beat people up who store your data as a third party. The point being that if we take the average user of a data haven model they don't have the resources (money, technical skill, bandwidth, etc.) to set up a data haven of their own. Further, the storing of the data by other parties isn't the issue, it isn't the data havens data. This is one of the primary reasons that really important data should be expensive to get initialy. It goes back to what I was saying in a previous post about Grace Hoppers worth-v-time model. > Data disappears from Eternity once no one cares enough about it to pay to > have it stored. What this over-looks is the potential for that data to become relevant to some currently unknown situation in the future. While I agree that the data should not necessarily be in a fast medium storage after a certain time period it should not simply be thrown away. If nothing else at some point it will have historical (inexpensive, it's still money) relevance. > Providing eternity service costs money. Life costs money, that is one of the reasons that you don't want to throw stuff away that may bring in income down the road. > Anything which lets users circumvent > this opens up the potential for denial of service through consumption of > resources attacks. There simply isn't a way around that except to out bandwidth the attacker. > Even if billing is fundamental, you still have the > potential for the NSA to spend $100m to buy all the eternity space available > at any point. > This is why you also need market mechanisms > -- if the NSA > is willing to pay a premium for eternity service just to keep it out of > the hands of the populace, then running eternity servers is a great > investment, so capacity will increase until the NSA can no longer afford > to buy all of it. I like it when you write my own rebuttal for me...:) The bottem line is that the market mechanism *is* the willingness of some party to buy that space. Nothing more, nothing less. Further, Mallet ain't stupid or he'd have starved a long time ago. > A difficult part of designing a working Eternity service is to keep people > from "stealing service", in terms of consumption of resources, during > set up, indexing, etc. Basically, you need to make sure that to the > greatest extent possible, anything which is a potentially scarce resource > is sold, not given away. The point is that *nothing* is given away for free, though you might want to let people *give* you resources for free. Which is the point I was making. > You then are vulnerable to someone spamming the system, unless you give > the server operator some way of knowing if this encrypted data is likely > to be valuable. The point is that the system can *always* be spammed. You *don't* charge the source of data a million dollars to put it on your server. It's gotta be source cheap or else it isn't worth their time to bother with it. If you *really* want to promote such servers what you need is a model that allows submitters free access *and* a share in the subscribers fees. Then everyone wins. If the source has something they know is worth god awful sums of money they aren't going to submit it to the data haven anyway, they'll set their own haven up and reap the benefits directly. There is an economic issue here that is at parity with the technical issues. > You can have arbitrarily complex payment models, since the enforcement > agents can exist (must exist?) as eternity objects in their own right. Not really, at some point the complexity works against itself - you should study a little chaos theory. The final point is to make the system (ie the logical linking of black box operations that themselves may be quite technical or complex) dirt simple. > No, the most feasible attacks for a resourced attacker are custom ASICs > optimized for key testing, as were recently described. Distributed > workstation cracking is a parlor trick if you have a billion dollar budget > for key cracking. Tell that to the NSA and their Cray-acres. The point is that even if you have customer ASIC's or FPGA's or whatever these are still computers and you can't seriously be suggesting that the resources to create customer hardware for specific goals is any less complicated or more inexpensive than using general purpose hardware when looked at from a global scale. If that model were so generaly applicable then we should move all our processing jobs to ASIC's and reap the benefits. There is also the issue that even if you use customer chips to develop customer key cracking hardware (which I agree is being done as we speak) there is still the inescapable fact that you will need lots(!) of them. So the result is that whether they are custom or general purpose devices the sheer quantity becomes a hinderance. > The NSA has general purpose HPC resources for purposes like signal processing, > AI, etc., not for brute forcing people's keys routinely (although perhaps for > a weak and nonstandard cipher, it would make sense to use general purpose > machines). Even a corporation would be better off using FPGAs or ASICs for > key cracking once you get past 56 bits. That would depend on the economics of startup and what kind of footprint that would leave in the industry. This is one of the reasons that the NSA builds their own chips. > I assume the attacker is evil and rational. My, my. Moral stipulations are probably no more relevant than psychological classifications. The issue is one of emotion. Mallet wants it because it benefits Mallet and hinders Mallets enemies. This is an emotional reason and most definitely outside the bounds of simple rational/irrational action classification. When I was speaking of psychology earlier in my submissions I was not the least bit implying any comment on rationality, goodness, or other relative classifications. I was refering to greed, pride, honor, self-respect, etc. as motivations. The interactions of those in individuals and organizations doesn't depend on classifications. > I also assume that the > entire legal system has been subverted, and that extralegal operations of > any size too small to make the new york times front page are possible. And, > any entity which deals with the government (just about any) can be subverted. Any government can be subverted as well, happens on a regular basis. The legal system may not need to be subverted for the simple reason that more than one legal system may be involved. The front page example you are so fond of is a instance that would take, my guess, probably in the neighborhood of $10k to have a full page for a single day. To make the participants investment in that sum worth it, what is their pay off in your system? Just having their name in the paper probably isn't worth it. The wide public advertisment, and hence notoriety is probably not a big plus either. Especialy considering that it would guarantee the participant a nice bug-for-life experience. > Thinking that the major internet gateways between providers are bugged by > the NSA isn't really too unreasonable if you accept those assumptions. Whether the providers themselves are bugged are not is really irrelevant, its the backbone infrastructure providers who are providing the access points. You tap the satellite transfer point, for example, not the 300 organizations sending data down it. You tap the telephone switch in each neighborhood, not the individual lines on their subscriber end trunks. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

to Anonymous
by Young iVillian 17 Dec '03

17 Dec '03

Right on, man. E-Mail me... I'd like to have a conversation w/ you. Technological takeover... we bring it on ourselves. We have no one to blame.

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sun, 18 Jan 1998 12:02:34 -0800 > From: Kent Crispin <kent(a)songbird.com> > Subject: Re: (eternity) Eternity as a secure filesystem/backup medium (fwd) > There are alternative ways of paying for the service that do not in > any way depend on ecash, and after thinking about it a bit, they seem > more robust, as well. > > The basic idea is as follows: The fundamental eternity service is > free to readers, and is financed entirely by writers. The writers > supply the disk space, the network bandwidth, and possibly pay for > the software to support all this. It is clear that there are two diametricaly opposed models of payment mechanisms and who those costs should fall on; producers or consumers. I personaly have no faith in systems where the producers bear the burden of the costs since they have no clear mechanism to obtain the funds to finance the enterprise in the first place. Imagine for a moment that a couple of persons come into possession of a set of documents which would cause considerable political embarassment and legal difficulties for a head of the local government. Why should these two individuals pay to have their data dissiminated to anyone who wants it? It certainly isn't going to improve their social, political, or professional standing since the server will anonymize the data. They then have two options, release it themselves and hope for the best (and hence reap the benefit of any economic benefits that might acrue) or do nothing with it. How about information to build man portable atomic bombs? It doesn't make sense to take all those chances and the data haven operators to take the chances when they will get at most the monetary input from a *single* party. It is clear that these resources are clearly inferior to many parties paying to get the data. I guess the question boils down to why the individual operator in running the server in the first place. I assume a priori that the goal of both the submitter and the operator is to make a reliable income from the users of the service since there are clearly many more consumers of information than producers of it. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

4 3

Other c'punk lists?
by Anonymous 17 Dec '03

17 Dec '03

Hi are there any other cypherpunk lists? With all due respect this list has a *lot* of noise <g> Perhaps something with- out the anarchy. I enjoy the wild side of this list but I would also like something more targeted. Thanks in advance

3 3

Eureka! Mon Jan 19 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Monday's issue of Eureka! HARD CITY Ouch - you bet it's hard. What is? Stupid question! One visit to this website and the search for porn becomes more of a daily jaunt. It's simply packed with stuff to do and see, and what's more, it's FREE for a limited trial period! Hard City ......................... http://www.hardcity.com/ PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Free Memberships on the net http://www.sexscandal.com We rank the very best sex sites. Free memberships all the time as we search the net for the hottest values and the best looking gals. LOUISE ON HOLIDAY This is a simple website of a young Yorkshire girl sunbathing in someones backyard. She starts out rubbing baby oil all over her body, then removes her bathing suit. This is one hot little lady. You have to see this one. One hot honey! ...... http://www.netcomuk.co.uk/~adrian_w/hols1.html MEXICAN PUSSY FIESTA Hola amigo's! This is a paysite but they have 5 images or so to sample. Click on sample pics, this leads to some pretty large high quality images of group sex, lesbians and facials. Stop by to see the lovely latina ladies spicy tacos, olay! ............. http://aruba.janey.com/~slurping/ TEENS PLAYGROUND This website offers up some great free pictures! Asian teens, big boobs and more. One set of tits in there is the biggest fucking tits I have ever seen! You have to see these boobs! ........................... http://www.vip-master.no/ YOUNG EXPOSED WOMEN Check out Sarah, Cybil, Denise and Colleen, you will be glad you did. Each girl is easy to find, click the thumbnail pix then your sent to a layout of each one. Sponge baths in the haybarn, legs spread wide. Blondes, brunettes, well built! Young Exposed Women ................... http://www.ywex.com/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ 20vids+Chat .. http://209.1.31.175/chat/videochat.cgi?eureka CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat .................. http://137.39.63.229/chat/ General/Fun Chat ........ http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!....1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline.........1-800-644-8779 FREE: Live 1-on-1 (international call only)....011-678-77416 AMATEUR SITE OF THE DAY KARIN: Visit Karin and her hubby Albert to be transferred to the sordid affairs of German swingers. They are kinky and know how to have a good time! Couples like this make surfing worthwhile. ............................ http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY Adult Story of the Day: Read something for a change! Every day the Adult Story of the Day offers you a free erotic sex story for your reading pleasure............................. ............................... http://www.adultstories.com/ DAILY CARTOON ........... http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! .... http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ........... http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm ITALIANO ..... http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE . http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 ........................... http://137.39.63.229/?190 Pic 2 ........................... http://137.39.63.229/?191 Pic 3 ........................... http://137.39.63.229/?192 Pic 4 ........................... http://137.39.63.229/?193 Pic 5 ........................... http://137.39.63.229/?194 Pic 6 ........................... http://137.39.63.229/?195 Pic 7 ........................... http://137.39.63.229/?196 Pic 8 ........................... http://137.39.63.229/?197 Pic 9 ........................... http://137.39.63.229/?198 Pic 10 ........................... http://137.39.63.229/?199 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Re: how to release code if the programmer is a target for (fwd)
by Uhh...this is Joe [Randall Farmer] 17 Dec '03

17 Dec '03

[Choate said he wouldn't "address" my message if I didn't post it to the list, so...] > > Eternity delivers data. It's up to the user to verify that the data is > > what they want > > > The original question was how to verify the eternity server source code. > > Assume for a moment that as a user of an eternity server the source is the > data I want. Ok... [...] > > * A random user who has the public keys of at least (thresh) number of the > > cypherpunks, optionally the key of the author of the document/product before > > the system becomes questionable, perhaps by looking in the NY Times > > for 1 Jan 1999 which has a full page ad taken out by Cypherpunks Anonymous > > with the PGP public keys for the 100 leading cypherpunks. > > Pretty expensive and rather unrealistic I suspect. The NYT ad? I think that was at least partly a joke (besides, if some cypherpunks did take out an ad, I'd predict propaganda in 2/3 of the page and fine-print PGP-key fingerprints in the rest :). > Where does this random user come from? Why does it matter? As long as she's competent enough to choose good verifiers and verify that those verifiers verified the code in question, it all works out in the end. > What is '(thresh)'? What good would an anonymous key signature provide? Thresh is the number of signatures from trusted people/keys required to trust a section of code, a value set by the user. An anonymous sig would be very little good but I think he was talking about including the author's sig if he's not anonymous. > [...] How do we know that some number of these cypherpunks aren't turned? We don't. There is no way to operate without *some* trust; this reduces it from the code being shown to be secure if the author is not spookized AND The author is capable to check his/her code AND the key he signed it with is good to the code being good if those conditions are true for one (or a few) of the many cypherpunks on the user's trusted list who signed the code. > Are you proposing that the user test all 100 of the signatures? Well, I think he's proposing to have a script check them and the user personally make sure the script is doing what it should. > Which realistica[l]ly is the only way to verify any given one of them. Not > very many people will go to that extreme simply for grins and giggles. > > > * The piece of code to be verified is bloody long, that is, longer than > > any one cypherpunk can afford to verify alone (shooting practice, > > installing the minefields and poison gas sprinkler system, etc. take > > lots of time) Not to mention churning out that propaganda for the NYT ad, becoming tolerant to pepper spray, preparing various fake identities for use, proving Blowfish secure and then breaking it, constructing a doomsday weapon using only a straightedge and compass, etc. > > The standard is programs over ~10k lines is not comprehensible by a single > individual on a line by line basis. Might be, but this code has to be more than just understood -- it must be painstakingly checked for subtle flaws and bugs. Welcome to the world of adversarial quality control. > > > * The user can tell by visual inspection that a small compilation > > system does what they want it to do, and can understand basic logic > > enough to tell what signatures imply. > > 'small compilation system' of what? What who wants it to do? The author? > Mallet? The end user? The C/Java/whatever compiler, I suppose, and also the signature checker, and she's checking that they carry out their stated purposes. ... > > 2) The user wants to run the code, because it's Just That Cool. > > We're talking here about users who want to get data that is illegal or > otherwise incriminating or dangerous to one group or another. In particular > let's consider the situation of a Lebanese freedom fighter in Isreal or > perhaps a 'Free Burma' revolutionary in China. I think the issue was one of users who want to get eternity server source they can trust -- not necessarily getting it *from* Eternity. > > > 3) No one can verify the entire code. So, Cypherpunks begin signing > > small sections of the code with their own previously-established key. > > Their keys are established as their reputation is established on > > the list, or perhaps by personally meeting these people, in the > > traditional PGP web of trust scheme. There is no central Cypherpunks > > Registry, just a decentralized mesh. > > Which doesn't effect the ability of Mallet to resign that code at the users > end in order to break the users local security. Unless you're exposing a new weakness in the trust model PGP uses, Mallet can't do that, providing the user has done good key authentication and hasn't listed one of Mallet's goons as a trusted code-verifier. > > > 4) The user executes the compilation script. > > [material describing script verification deleted] > > Mallet can re-write said script [...] Yup, that's why the user has to check it by hand. Lots easier to check a script and a compiler for doing their functions than to check an eternity server for subtle bugs. > > > I fail to see how the specifics of Eternity are relevant -- it's > > just basically a PGP web of trust issue. The transport is irrelevant -- > > it's untrusted code until it's been verified by people the user > > trusts. > > The end user may not have people available to trust is the point. Well, if you can't verify it yourself and you can't trust other people to verify it, my advice is to give up; you cannot be sure of *any* public keys in that case, so any message you encrypt might be encrypted to one of Mallet's keys; any sig you check might be signed by one of Mallet's keys. > The reason the transport mechanism is relevant is that it is much easier to > spoof a verification script if the user is not going to be surprised with 24 > hour turn around on requests, whereas a responce time measured in minutes > lessens the window of opportunity to Mallet significantly. If Mallet is a NSA spook who's half as good as my hacker buddy Phat Atta and knew about the script ahead of time, the user can't trust the script without verifying it herself, whether it takes milliseconds or millenia to get the response. > > It may come as a surprise to you and others but not everyone in the world > can pick up a phone and call a 100 people all over the world and not raise > some suspicion. Ah, but either I am more mistaken than usual or you only need a few of the signers to be trusted, not all of them. > > > Implementing a keyserver in Eternity has the same issues > > While it is perfectly permissible to design Eternity or any data haven with > inherent key servers, I believe it is a bad idea from a design perspective > because it makes the code even larger, decreases the potential for monetary > motives for indipendant key servers to appear, and if the server is > compromised then the key server is also. Not sure, but I think he's talking about putting up a key server in Eternity (i.e., the rolling hills where data can roam without fear, as opposed to putting it in the Eternity). > It is more expensive if Mallet can be forced to deal with two [independent] > operators then a single monolithic operator. > > [rest deleted] --------------------------------------------------------------------------- Randall Farmer rfarmer(a)hiwaay.net http://hiwaay.net/~rfarmer

2 1

Fwd: Internet security (VERY LONG)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Subject: Fwd: Internet security (VERY LONG) Date: Sun, 18 Jan 98 12:34:36 -0500 From: Somebody To: "Robert Hettinga" <rah(a)shipwright.com> Mime-Version: 1.0 ---------------- Begin Forwarded Message ---------------- Date: 01/17 3:25 PM Received: 01/17 5:24 PM From: Richard Fairfax, richard_fairfax(a)compuserve.com Reply-To: CSA Talk, csa(a)blueworld.com To: CSA Talk, csa(a)blueworld.com The following forwarded mail may have implications for clients with sensitive data. The field encription features in Troi FM Plug-in could prove to be a valuable asset. Richard Fairfax Oakwood Designs ---forwarded mail START--- From: gp-uk(a)mailbase.ac.uk,Net ----------------------------------------------------------------------- Aus: z-netz.datenschutz.spionage: A GLOBAL electronic spy network that can eavesdrop on every telephone, email and telex communication around the world will be officially acknowledged for the first time in a European Commission report to be delivered this week. The report - Assessing the Technologies of Political Control - was commissioned last year by the Civil Liberties Committee of the European Parliament. It contains details of a network of American-controlled intelligence stations on British soil and around the world, that "routinely and indiscriminately" monitor countless phone, fax and email messages. It states: "Within Europe all email telephone and fax communications are routinely intercepted by the United States National Security Agency transfering all target information from the European mainland via the strategic hub of London then by satellite to Fort Meade in Maryland via the crucial hub at Menwith Hill in the North York moors in the UK." The report confirms for the first time the existence of the secretive ECHELON system. Until now, evidence of such astounding technology has been patchy and anecdotal. But the report - to be discussed on Thursday by the commit- tee of the office of Science and Technology Assessment in Luxembourg - confirms that the citizens of Britain and other European states are subject to an intensity of surveillance far in excess of that imagined by most parliaments. Its findings are certain to excite the concern of MEPs. "The ECHELON system forms part of the UKUSA system (see 'Cooking up a charter for snooping') but unlike many of the electronic spy systems developed during the Cold War, ECHELON is designed primarily for non- military targets: governments, organizations and businesses in vir- tually every country. "The ECHELON system works by indiscriminately intercepting very large quantities of communications and then siphoning out what is valuable using artificial intelligence aids like MEMEX to find key words". According to the report, ECHELON uses a number of national dictionaries containing key words of interest to each country. For more than a decade, former agents of US, British, Canadian and New Zealand national security agencies have claimed that the monitoring of electronic communications has become endemic throughout the world. Rumours have circulated that new technologies have been developed which have the capability to search most of the world's telex, fax and email networks for "key words". Phone calls, they claim, can be automatically analysed for key words. Former signals intelligence operatives have claimed that spy bases controlled by America have the ability to search nearly all data communications for key words. They claim that ECHELON automatically analyses most email messaging for "precursor" data which assists in- telligence agencies to determine targets. According to former Canadian Security Establishment agent Mike Frost, a voice recognition system called Oratory has been used for some years to intercept diplomatic calls. The driving force behind the report is Glyn Ford, Labour MEP for Greater Manchester East. He believes that the report is crucial to the future of civil liberties in Europe. "In the civil liberties committee we spend a great deal of time debating issues such as free movement, immigration and drugs. Technology always sits at the centre of these discussions. There are times in history when technology helps democratise, and times when it helps centralise. This is a time of centralisation. The justice and home affairs pillar of Europe has become more powerful without a corresponding strengthening of civil liberties." The report recommends a variety of measures for dealing with the increasing power of the technologies of surveillance being used at Menwith Hill and other centres. It bluntly advises: "The European Parliament should reject proposals from the United States for making private messages via the global communications network (Internet) a ccessible to US intelligence agencies." The report also urges a fundamental review of the involvement of the American NSA (National Security Agency) in Europe, suggesting that their activities be either scaled down, or become more open and accountable. Such concerns have been privately expressed by governments and MEPs since the Cold War, but surveillance has continued to expand. US intel- ligence activity in Britain has enjoyed a steady growth throughout the past two decades. The principal motivation for this rush of development is the US interest in commercial espionage. In the Fifties, during the development of the "special relationship" between America and Britain, one US institution was singled out for special attention. The NSA, the world's biggest and most powerful signals intelligence organisation, received approval to set up a network of spy stations throughout Britain. Their role was to provide military, diplomatic and economic intelligence by intercepting communications from throughout the Northern Hemisphere. The NSA is one of the shadowiest of the US intelligence agencies. Until a few years ago, it existence was a secret and its charter and any mention of its duties are still classified. However, it does have a Web site (www.nsa.gov:8080) in which it describes itself as being respon- sible for the signals intelligence and communications security activ- ities of the US government. One of its bases, Menwith Hill, was to become the biggest spy station in the world. Its ears - known as radomes - are capable of listening in to vast chunks of the communications spectrum throughout Europe and the old Soviet Union. In its first decade the base sucked data from cables and microwave links running through a nearby Post Office tower, but the communi- cations revolutions of the Seventies and Eighties gave the base a capability that even its architects could scarcely have been able to imagine. With the creation of Intelsat and digital telecommunications, Menwith and other stations developed the capability to eavesdrop on an extensive scale on fax, telex and voice messages. Then, with the development of the Internet, electronic mail and electronic commerce, the listening posts were able to increase their monitoring capability to eavesdrop on an unprecedented spectrum of personal and business communications. This activity has been all but ignored by the UK Parliament. When Labour MPs raised questions about the activities of the NSA, the Government invoked secrecy rules. It has been the same for 40 years. Glyn Ford hopes that his report may be the first step in a long road to more openness. "Some democratically elected body should surely have a right to know at some level. At the moment that's nowhere". See also in this week's issue: Pretty good Phil bounces back (a report on the consolidation of the reputation of Phil Zimmermann, creator of PGP). 14 October 1997: Europe's private parts to expand * * * * * ------------------------------------------------------------------------- Hilfe zu den BvD Mailinglisten? An- oder Abmelden? Mail an bvd-majordomo(a)ibh.tfu.uni-ulm.de, Subject: egal, Text: help ODER: http://www.fh-ulm.de/bvd ---forwarded mail END--- ----------------- End Forwarded Message ----------------- <Somebody's .sig> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

CAD Stego (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sun, 18 Jan 1998 19:31:38 -0500 > From: John Young <jya(a)pipeline.com> > Subject: CAD Stego > This repeats a suggestion from 1994 about using computer > assisted design programs to conceal text or other data: > 3. The scale feature is useful to reduce, say, a text > of any length, or any digital object, to the size of a pixel. Assuming your color palate is deep enough to support the compression. > 4. Or, the text can be distorted by scale and dimension > to appear to be a line serving another function. Don't you think they are going to wonder why *that* line is so varied in color? Or assuming deep color pallettes, why so many colors are selected when only a few dozen are actualy used in the drawing? > Then the message could be distorted or hidden as > described above, for piggy-backing on an innocent- > looking document issued, I suspect they'll wonder why that particular file is so much larger than the other graphics files with the same number of layers. > 7. Big shortcoming: how to securely transmit the location > (virtual coordinates) of the hidden message and what Look for the pixel that has the unique color mapped onto it. > 8. Medium shortcoming: Full-featured CAD programs are > expensive, however, the popular lite versions are cheap > and can usually read the pricier output. And can't handle more than a few dozen colors and limited layering. This suggestion is unworkable in application. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Voice Coding Controls
by John Young 17 Dec '03

17 Dec '03

DM notes of the BXA Wassenaar rule for voice coding: After looking at some of the Wassenaar docs, I was surprised to see that the CCL wants to regulate speech encoders that operate at less than 2400 bps. Surprising because it was encoding, not encryption, that was being regulated. This is disturbing. This at first seemed to put some of the Nautilus development team's software in jeopardy, but I believe that by the letter of the law (or regulation) that all coders in Nautilus are not subject to the CCL, as they only go as low as 2400 bps and not less than. For citations of voice coding in Category 5 - Telecommunications: http://jya.com/bxa-wa-cat5.htm#5A001b10 http://jya.com/bxa-wa-cat5.htm#5A991b6a

1 0

Re: non-transferable signatures (Re: Crypto Kong penetration.)
by James A. Donald 17 Dec '03

17 Dec '03

-- At 10:48 PM 1/16/98 +0000, Steve Mynott wrote: > SMIME of course despite bad cypherpunk karma is easy and > maybe even works between mailers. Easy indeed, if all the keys from Verisign are correct and secured. It is indeed very easy to use SMIME. To use it so that it actually accomplishes the intended result is not so easy. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG Np4QfrajG+6u2ZHUc2AFBH0uTX9nCJxCUi7E2bpk 3CGDysj2FaqaZYBM4bRe6dvLCkbb0ltwLns5aFPQ9 --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we are. True law derives from this right, not from the arbitrary power of the state. http://www.jim.com/jamesd/

1 0

Re: CAD Stego (fwd)
by John Young 17 Dec '03

17 Dec '03

Jim Choate wrote: >This suggestion is unworkable in application. Why the focus on color, the easiest thing to avoid using, or layers, ditto? Superfluous for serious CAD, these dainty decorations from Martha Stewartville. Most messages could be concealed in "hatched" objects, bit-bloated as they are, indistinguishable from the elements used to hatch. All black and white; maybe a dot of red for cashmere dupe. In fact, CAD is so bloated with dumb cad-jockey features, and sleazebag work-monitoring logs, it puts most ordinary programs (even air-boss MS) to shame, and could hide a herd of rustled Mex longhorns as easily as the Bush family hides dryhole oil reserves, without any more trickery than sandpapering new boots to look worn. Anyway, Jim, I gather from your remarks that you've not fiddled for endless low-paid months and years to figure out how to cheat the evil bosses and automatic work-snoop feature, while onion-siphoning the Net for horny fare under guise of urgent file transfer to foam-mouth ne'erpays. Underground (so to speak) swapping of digital work avoidance tips is a huge use of global bandwidth riding on the backs of big fat docs for globular structures for maggoty thugs. (Although not nearly as gigantic as the porn trade stego-supporting Net infrastructre growth -- over 50% of Net traffic and rocketing.) Who knows how much illicit info is riding the porn river in and out of the most secure sanctums of tyrants?

1 0