December 2003 - cypherpunks-legacy

One Nation thank you
by Scott Balson 17 Dec '03

17 Dec '03

Dear One Nation supporter in NSW Pauline Hanson would like to personally thank you for the outstanding support that you gave to the party before and during the election. Coverage of the events in Blair - including the One Nation party on election evening can be seen on-line at: <A href="http://www.gwb.com.au/gwb/news/onenation/federal/live">http://www.gwb.com.au/gwb/news/onenation/federal/live --------- PARTIES CONSPIRE TO KEEP IMMIGRATION OUT OF ELECTION, BOOK SHOWSThe author of a new book called "This Tired Brown Land" has accused the majorpolitical parties of conspiring to keep immigration and population off theelection agenda. The book has already attracted good reviews.Author Mark O'Connor today claimed that both the major political partieswere suppressing discussion in order to deny One Nation 'the oxygen ofpublicity'. But it is exactly such bipartisan ignoring of public sentimenton immigration which caused One Nation, and led to the enormous success ofPaul Sheehan's book Among the Barbarianns.Immigration Minister Philip Ruddock recently launched the Coalition'spolicy in Perth-too late in the day for the Eastern media to pick up thestory. Says author Mark O'Connor, 'Clearly the Coalition knows its policyis not what the electorate wants.'Polls show that the electorate has made up its mind. Only 2% or 3% ofvoters want immigration increased; and they are outnumbered, some 30 toone, by the 65% or 70% who want it reduced. Neither ethnic Australians norAborigines support higher immigration. Most Australians supportmulticulturalism, yet want an immediate moratorium on immigration.'My book shows that in 1994-95 (under Labor) our net migration gain (ABSfigures) was 80,100 persons. Last year it was 83,700. Despite this, theCoalition has tried to give the impression of reducing immigration. Somecritics have even accused the government of "racism" for "reducingimmigration". This is false.'The book is available throough bookshops at $16.95, orby cheque or money order from Duffy & Snellgrove for $19.95 (includes p&p) atPO Box 177Potts Point NSW 1335fx 2 9386 1530<A href="mailto:dands@magna.com.au">dands(a)magna.com.au ------------------ GWB Scott Balson Pauline Hanson's One Nation web master

1 0

Re: Another question about free-markets... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sun, 04 Oct 1998 22:58:05 -0700 > From: "James A. Donald" <jamesd(a)echeque.com> > Subject: Re: Another question about free-markets... > > If this includes lying, denying consumers information, etc. > > what harm is done, they have fulfilled their responsibility > > to their shareholders (potentialy quite lucratively)=20 > > While there is a sucker born every minute, the strategy you > describe is for the most part unlikely to be profitable. Then you should begin to check your daily news, example after example is presented. (currently illegal) cell phone cloning, excessive rate levels, sub-standard construction practices, etc. People by their very nature understand and impliment the prisoners delima maximum pay-off strategy. Not only can it happen it deos. Given that such abuse is possible in a regulated market there is no reason not to deduce it will happen in a free market economy as well. If it happens the business enjoys an increased profit if for no other reason than their costs are reduced. Since there is no regulation or other oversight the consumer will be denied this information preventing fair competition. Since a companies strategic leaders have no duty other than maximizing profit they will impliment such strategies. Hence the free-market reduces to an opportunistic anarchy. This leads to one and only one conclusion, in a free-market there is no such thing as 'fair trade' without a third party being involved. This runs contrary to the definition of a free market on two counts (at least) and therefore the free market theory (as applied to human business, not Vulcan) is a circular argument based on faulty principles and a lack of understanding of human psychology (ie assumptions such as rational purchases). ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

725+ Search Engines
by positzzzsu＠yahoo.com 17 Dec '03

17 Dec '03

!!!LOWEST PRICE EVER!!!!! REGULAR $89......ONE WEEK ONLY...$38 we9 WE WILL SUBMIT YOUR WEBSITE OR HOMEPAGE TO 725+ SEARCH ENGINES AND PROVIDE YOU WITH A REPORT SHOWING ALL SUCCESSFUL SUBMISSIONS!! WORRY FREE INTERNET TRANSACTION---WE WILL SUBMIT YOUR SITE AND E-MAIL YOUR REPORT WITHIN 48 HOURS OF RECEIPT OF YOUR FAXED CHECK....WE WON'T EVEN DEPOSIT IT UNTIL YOUR SUBMISSION IS COMPLETE...IF WE DON'T DO AS WE SAY, YOU CAN ALWAYS STOP PAYMENT ON CHECK....NOW WE HAVE TO TRUST YOU, AS WE WILL HAVE COMPLETED THE WORK BEFORE YOUR BANK HAS EVEN HONERED YOUR CHECK!!!! RESERVE YOUR SPOT NOW!!! DO NOT RESERVE YOUR SPOT VIA E-MAIL, MUST BE FAX!!! YOU CAN FAX US A CHECK TO RESERVE YOUR SPOT AND WE WILL IMPORT IT INTO OUR CHECK PROCESSING SOFTWARE, NO NEED TO MAIL IT. MAKE IT OUT TO K.L. COMPANY AND FAX TO 714 768-3650 WITH THE FOLLOWING INFO YOUR NAME: COMPANY NAME: URL OF SITE: http:// e-mail Address: Title of site(up to 25 words) Description of site(up to 50 words): Keywords(up to 6) Phone# QUESTIONS? ALL ORDERS WILL BE SUBMITTED WITHIN 48 HOURS.... we9

1 0

US Secret Service checking laptops at airports
by Robert Hettinga 17 Dec '03

17 Dec '03

Has anyone else had this happen to them? I'd love to have two independent corroborations of this, instead of hearing it third-hand... Cheers, Bob Hettinga --- begin forwarded text From: "Sidney Markowitz" <sidney(a)communities.com> To: <cryptography(a)c2.net> Subject: US Secret Service checking laptops at airports Date: Sat, 3 Oct 1998 18:26:52 -0700 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Sender: owner-cryptography(a)c2.net A friend of mine recently traveled from one of the Washington DC area airports to Ireland and reports that US Secret Service agents checked her laptop for the domestic 128-bit crypto versions of Netscape Navigator and Microsoft Internet Explorer at the metal detector station. She said she saw about six other people who were checked as she was going through. As is now common, anyone carrying a laptop computer was asked to boot it up, presumably to demonstrate that if the case hid a bomb at least it was programmable with a reasonable looking user interface. But in her instance, people who identified themselves as Secret Service agents had her start up her web browser so they could check the encryption level, and made her uninstall her 128-bit Navigator. It didn't seem to matter to them that there are exemptions for devices that are for personal use as long as they are kept with the person while out of the country, or that she is an international banker who was going to conduct business with an overseas office. They didn't bother to determine whether she had a copy of the Navigator install file in a backup directory and could simply reinstall on the airplane. And of course it made no difference that she was going to Ireland where she picked up a locally produced 128-bit crypto plugin for Navigator that she says works just as well if not better than the version from Netscape. (I don't know if her "plugin" is simply one of the scripts that enable the Netscape strong crypto in the export version.) -- Sidney Markowitz <sidney(a)communities.com> --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: GPL & commercial software, the critical distinction (fwd)
by lcs Mixmaster Remailer 17 Dec '03

17 Dec '03

Matthew James Gering wrote: > > Jim Choate wrote: > > I'd say the obvious one, the Unix code tree is more stable > > than the MS tree. > > Sure, but does that mean the MS platform was less suitable than Unix, or > their MS platform programmers were inferior to their Unix counterparts. > I believe Netscape outsourced the Unix development, at least initially. > I would blame insufficient SQA at Netscape, and from what I've heard > that claim is justified. > > Matt My impression is that the instability described is due to fragmentation of the virtual memory space, which happens faster on NT than Unix because of the relative immaturity of NT memory management. The side comment about Mac's being even worse would support this hypothesis (as Mac memory management is a joke). The Netscape SQA theory doesn't explain why other products also become less reliable on NT (and worse again on 95).

1 0

RE: I thought of an initialy regulated industry!... (fwd)
by Blanc 17 Dec '03

17 Dec '03

>From Jim Choate: : The bottem line as to why free-market economies don't work is that it isn't : in the producers best interest to have a educated consumer. They might buy : somebody elses product or start their own company. Both of those are bad for : profits. : : Free-market mavens forget that producers are just as greedy and corrupt as : everyone else, there is no fair competition in an unregulated market given : the pshychological make up of human beings. ................................................................................ ........ Free market economices don't "work", simply because they are run by humans, who regularly suffer psychological breakdowns, envy, and mistakes of judgement, not to mention disreputable marketing departments. Regulated economies, however, are run by government drones, and are therefore perfect vehicles which, with unfailing success, make all of their captive customers happy. Everyone knows this, as we witness the apparent success of all those regulated economies overseas which outshine the U.S. by three (maybe four) orders of magnitude. No one over there envies the U.S. productivity and standard of living, and they never are moved to leave and come live over here, to give up the benefits which extreme regulation confers upon them, in place of the (admittedly mixed) free-market fiasco which operates over here, where all things are uncertain and frighteningly unpredictable. In fact, many people become so disgusted with the monopolies and disfunctional liberty which exists here, that they regularly expatriate to go live in places like Sweden, Germany, even Canada, where they have the peace of mind and assurance that State coercion will provide for their every need - in a most efficient, timely, prompt, and user-friendly manner. They never have to worry about who has more or less, who is better or worse, or who knows better than anyone what is best for everyone. It's all been pre-established and exists incontrovertibly in their national consumer database. .. Blanc

3 2

RE: Another question about free-markets..
by Blanc 17 Dec '03

17 Dec '03

>From Jim Choate: : Now in a free-market, by definition, there is no law. What then is the : responsibility of businesses other than the pure unadulterated pursuit of : profit? If this includes lying, denying consumers information, etc. what : harm is done, they have fulfilled their responsibility to their shareholders : (potentialy quite lucratively) and broken no law. Within this environment it : follows that a primary strategy for such executives is the elimination of : *all* competition. And since there is no law other than the measure of profit : all can be justified. ................................................................................ There might be no Law. But there would still be Reality - and for some people, this is *much* harder to deal with. If customers sit around like lumps on a log depending upon the kindness of strangers, well they're not doing themselves any favors. But such a person is not a customer. They are an invalid (or will be, eventually). In a free-market economy, everybody - not only corporations, not only customers - have to be rational about what they're doing. Everybody has to "be on their toes", alert to what truly is in their interest, and prevent themselves from accepting, from supporting, self-defeating offers from Trojans bearing spam. You learn or you die, just like in the movies. .. Blanc

1 0

Re: Another question about free-markets... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 5 Oct 1998 10:03:25 +0100 > From: Steve Mynott <stevem(a)tightrope.demon.co.uk> > Subject: Re: Another question about free-markets... > On Sun, Oct 04, 1998 at 11:53:28PM -0500, Jim Choate wrote: > > > Now in a free-market, by definition, there is no law. What then is the > > no in a free market there is no state > > there are laws based on natural rights Ok, who writes the laws? Who enforces the laws? Who decides what is natural? Remember, we have *NO* participants in a free market other than the producer and the consumer. Two, and *only* two, parties are involved. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

4 3

RE: GPL & commercial software, the critical distinction (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Matthew James Gering <mgering(a)ecosystems.net> > Subject: RE: GPL & commercial software, the critical distinction (fwd) > Date: Mon, 5 Oct 1998 00:29:33 -0700 > state (you have no govt), at least in the manner we have now, whereas a > Laissez Faire state could enforce it (you have limited govt). That says > nothing about whether IP should exist in current form or at all, simply > that it *could* exist under LF. [other stuff deleted] Ok, so you're talking out of both sides of your mouth then. On one hand you speak of a free-market (vis-a-vis Laissez Faire) and then in the same breath, with not even a blink of an eye, you speak of limited government. You can't have your cake and eat it too. Sorry. This is gibberish. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

RE: Another question about free-markets... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Matthew James Gering <mgering(a)ecosystems.net> > Subject: RE: Another question about free-markets... > Date: Sun, 4 Oct 1998 23:34:09 -0700 > > Now in a free-market, by definition, there is no law. > > A free market is not the absence of law (that is anarchy), a free market > is the absence of government intervention in trade and commerce. And how does government intervene and interfere? By making law. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Capitalism and Monopolies (was RE: GPL & commercial software, the (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Matthew James Gering <mgering(a)ecosystems.net> > To: "Cypherpunks (E-mail)" <cypherpunks(a)cyberpass.net> > Subject: Capitalism and Monopolies (was RE: GPL & commercial software, the > critical distinction) > Date: Sun, 4 Oct 1998 23:01:16 -0700 > Jim Choate wrote: > > Only after the early 1890's when the situation got so bad > > they had to do something. Prior to that there was no federal > > intervention in railroad operations per se > > Completely false. Not totaly. > Traffic to/from the West coast did not warrant the > capital investment in transcontinental railway, so the government make > *exclusive* lands grants to specific railroads to extend the railways to > the West coast (100M acres between 1863-7) . Those subsidies created the > monopolies, the source of coercive power over Western farmers. Protest > against this arbitrary power was blamed on the market instead of the > government subsidies, and resulted in the Interstate Commerce Act of > 1887, and the Sherman Act of 1890. Only *after* it was clear that these companies could not do it themselves because of a lack of sufficient traffic to support the business. I must congratulate you. You're the first person in a long while who actualy took the time to develop an argument based on *fact*. Well done. > I should have stated government "distortions" instead of "regulation." > That includes subsidies. Even better, a distinction between 'law' and a 'grant'!.... > The placement (ownership) of these rights, their value, restrictions and > enforcement are the result of a free market? No, government > intervention. Actualy no, try buying a piece of land and enforcing the title *without* registering it at the country seat or its likes. > Did anyone ever state monopolies result from federal regulations? > Government distortion/intervention, that can come at any level. Acts of > force or coercion can create a monopolistic situation, free trade > cannot. Absolutely it can because it actualy allows a freer hand in developing strategies to decrease the market potential of ones competition. There is *nothing* in free-market definitions or descriptions which will prevent gross abuse of the consumer by the manufacturer. Remember in a free-market there is the requirement for 'fair competition' which is contrary to the very theory of business operation, which is to maximize profit and reduce competition. Now if we lived on Vulcan and we were all logical Vulcans it might work, unfortunately we're not and human beings will specificaly go after their competition, which without some sort of regulation being impossed leads to obvious results; initialy a very fluid and dynamic market that settles down with the survival of the fitest getting bigger and bigger. As these companies get big enough they can no longer react as quickly as they once did (intertia of strategy among other things). At some point it becomes easier to cooperate than to continue to fight. That cooperation leads to a melding and promotes even more monopolization. > So what is the discriminating factor(s) distinguishing industries that > can and cannot be monopolized? Saturation of the consumer market, high start-up costs in either infrastructure or intellectual resources, and others. I posted a list of some characteristics to the list a while back. You can look for it. If I get time I'll post it to the list again. > Don't forget capital markets; Are you speaking of capital markets in the sense of fluid and available funding or of the existance of businesses that produce the capital assetts needed by other businesses (eg creating rail-cars for rail-roads)? a free fluid capital market can and will > support a smaller competitor if potential long term profits will support > it. You can't pay your employees today with tomorrow profit. This isn't a Popeye's hamburger vendor... There is another question I'd like to pose. In a free-market economy there are only two participants, the consumer and the producer, what if anything in the definition prevents one or the other from employing an agent in their stead to 'negotiate' with the other. Does this by definition introduce a third party or is it a permissible extension of the two-party system? ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

FW: I thought of an initialy regulated industry!... (fwd)
by Trei, Peter 17 Dec '03

17 Dec '03

> -----Original Message----- > From: Blanc [SMTP:blancw@cnw.com] > Sent: Monday, October 05, 1998 12:10 AM > To: 'Cypherpunks Distributed Remailer' > Subject: RE: I thought of an initialy regulated industry!... (fwd) > [...] > > Free market economices don't "work", simply because they are run by > humans, who regularly suffer > psychological breakdowns, envy, and mistakes of judgement, not to mention > disreputable marketing > departments. Regulated economies, however, are run by government drones, > and are therefore perfect > vehicles which, with unfailing success, make all of their captive > customers happy. > [four paragraphs of well written irony removed] For those interested in a thoughtful (though slightly one sided) look at this issue, I strongly reccomend PJ O'Rourke's new book 'Eat the Rich'. He examines several locations (US, Sweden, Albania, Cuba, Russia, Hong Kong, Shanghai) in an attempt to figure out why (economically) "some places suck and others don't" His bottom line is that the rule of law (especially contract law) is critical, as well as democratic government. He's much more interested in on-the-ground economic experience than in government figures, and is the only economics writer who can make me laugh out loud. He does have his blind spots - I would have liked to see what he makes of Singapore. Peter Trei [Excuse the lousy formatting - I'm using a Microsoft product]

1 0

Re: importance of motivation
by Martinus Luther 17 Dec '03

17 Dec '03

>From Tim May: > Any trendy new diagnosis always gets some recruits...dyslexia, ADD >(*), the abuse excuse, etc. (* Like any trendy thing, it gets renamed > to keep its panache. ADD has been renamed to something with four > letters, which I now forget (must be ADD).) And it is worse than that, they're scum, Tim. They claim (in last months SciAm) that 5% of kids have ADHD (some sources have it at 15%). This isn't a disease, this is one end of the normal variation in behaviour. It is as if you diagnosed an adult male height of less than 5 foot 4 inches as "dwarf" and prescribed growth hormone. Or as if you operated on any woman over 5 foot 10 to shorten her legs. http://www.nimh.nih.gov/publicat/adhd.htm says 3 to 4 times as many boys as girls have it. So they are saying that ADHD affects 15 to 60 percent of all boys! This isn't one end of the normal range of behaviour, this is just plain normal. The psycho-babble establishment is proposing drugging 5 to 15 percent of the population to alter their behaviour. If this "diagnosis" had been around when I was a kid they would have drugged me. I found a 14 point checklist for ADHD on the web at: http://www.docnet.org.uk/autopage/messages/23.html In the last 48 hours my daughter has shown 11 of these. And I've shown 14. This is just normal life they are talking about. This is the misuse of psychiatric medicine for political control, as much as anything that went on in Stalin's Russia. (the personal is political - if one young man behaves in a way unacceptable to their elders that is personal - if 5 million do it is political). I object, strongly, to some guy in a white coat saying the problem with my life is my brain and he wants me to take this little pill and then it will be alright. Which is not to say that some people don't have real problems for which Ritalin is a workaround. But 15%, 10% or even 5% isn't psychiatry it is politics. Large parts of our daily life is tedious, boring, of no direct relevance to anything we are interested in. Most kids in school are made to sit through boring lessons. Bloody hell! They made us do sport. Is anything more shitlike? Most adults at work make themselves do things they have no interest in other than for the money they might get out of it (which is where we cam in with all that discussion about research that shows that people perform less well on tasks done primarily for reward - Marx was right about alienation, you know) A healthy person *ought* to have trouble paying attention to some of the things they are asked to do. Maybe we will have better lives if we drug ourselves (Ritalin, Prozak, E, daytime television) to get through the shit of the day but let it be a decision adults make for themselves, not one imposed on children by parents or the psychatric eastablishment. I could do with a cup of tea... > We've had some nutballs and losers (luser spelling: loosers) on this > list. People who claim the reason they can't make a coherent > argument or hold a steady job is because of something some > psychobabbler told them was their excuse. It's weird how people do that. If a doctor gives something a long name is suddenly becomes alright. Some parents are ashamed that their kids can't read well. Put it in Greek and call it "Dyslexia" and all of a sudden it isn't something you do, or are, or don't do or aren't capable of - it becomes something you *have*, not really part of you, baggage, a burden that could one day be dropped, something that has been done to you, imposed on you, soemthing that is not your fault. Reality hasn't changed, just the words used to describe it, yet it is now less threatening. The germ theory of disease is stretched to the limit. Pasteur showed that some diseases are caused by microorganisms. Simple cause and effect. One baterial disease is caused by pone organism, another by another. That is deeply embedded in our thoughts. So now all disease, all misfortune, has to be given a name, put in a box and traced back to a simple cause. I'm not fat, I have an eating disorder. I'm not stupid, I have a learning disability. I'm not sad, or worried, or bored, or scared - I have depression or an anxiety disorder or an attention deficit disorder. Some societies attribute all misfortune to witchcraft - if your cow dies then someone, somewhere must have cursed you. We now attribute all misfortune to something outside ourselves, not part of us. It wasn't me, it was my syndrome. And its all part of the pressure put on familys by business. Conform, consume, keep quiet. Don't rock the boat. Turn up on time, wear our clothes, work our hours. No alcohol on the premises. Or at lunchtime. Take this here drugs test - we don't want dope fiends and hippies in our office. Stressed out? Bored? Overworked? Tense, anxious, nervous soul-ache? Nothing acts faster than Ritalin. Especially when cut with Prozac to prolong that cool, mellow feeling. Time off to look after the children? Not if you want the job to be open when you come back. Just give them a bite of our magic apple and they will be alright. What's that you say about drugs? No, these are Good Drugs. The men in the white coats say so. And what's more they are patentable and we own shares in Ciba Geigy, Lilly, Fison's and Hoffman La Roche. Good Drugs keep you working until we want to let you go. Good Drugs keep you consuming until you have no more money to pay us with. Good drugs keep you working for our profit. Good Drugs keep you from complaining, striking, joining a union, praying, helping, loving, singing, fighting back in any way whatsoever. Good Drugs keep you from realising that half your work goes into our pockets. Good Drugs keep you scared, scared of poverty, scared of being different, scared of standing out, scared of using your head to think any thoughts we don't want thank. Good Drugs keep you addicted to your job, your country, your government, your boss. The Best Drug is the mortgage. John the Ranter/ ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Review of TriStrata Public Information
by Bruce Schneier 17 Dec '03

17 Dec '03

Review of TriStrata Public Information 1 Introduction Over the past several months, a new company called TriStrata has been getting substantial press for a new "one-time pad" cryptography system. Most of these press reports took at face value the company's claims about their technology and product, and did not try to analyze whether or not they were true. Counterpane Systems believes it is important to dig under the hype and figure out what the real story is behind their technology. We reviewed the publicly available documentation on TriStrata, and found a system whose architecture is that of an early-1970s pre-public-key cryptography security system. Central servers, upon which the security of every message rests, must be kept absolutely secure; yet they run on Windows NT. These servers are all powerful, in that they can forge messages, rewrite audit logs, fake authentication, and lie about anything else in the system. Users cannot access their files unless they are connected to this server. TriStrata does not use a one-time pad at all, and none of the security proofs about a one-time pad apply to their system. Their reliance on this encryption technology forces them to use security protocols long abandoned by the rest of the security industry. Even their performance enhancements bely the fact that encryption is rarely the bottleneck in any communications system. Note: For a less-technical summary of this review, please see sections 4.0, 4.1, and 5.0. 2.0 The TriStrata System 2.1 Structure The TriStrata system uses a centralized server, called the TESS (TriStrata Enterprise Security Server). The documentation is not very clear, but document reference 3 suggests that each company would have its own TESS. Every encryption or decryption operation requires a "permit" from the TESS. To encrypt a file or message: 1. The user contacts the TESS over the network. This can be any type of network, such as the Internet or a local area network. 2. The user and the TESS authenticate each other using a proprietary protocol called Private Access Line (PAL). 3. The TESS sends a permit to the user machine, which is used to encrypt the file or message. The TESS also sends a "seal" to the user. This seal is only readable by the TESS. 4. The user simply stores the seal with the file (if it is encrypted locally), or sends the seal along with the encrypted message (if it is to be transmitted to another user). To decrypt a file or message: 1. The user retrieves the seal and sends the seal to the TESS (along with the authentication data from the PAL protocol). 2. The TESS opens the seal, and determines whether the user is allowed to decrypt the data. 3. If the user is allowed to decrypt the data, the TESS sends a decryption permit to the user. 4. The user's local machine uses this permit to decrypt the file or message. The TESS keeps full audit logs of all operations, and includes procedures that allow designated recovery agents within the company to recover the keys to any file. The system is claimed to provide identification (who is using the system), authentication (who sent a message), access control (restriction of access to authorized users), integrity (assurance message is unaltered), and non-repudiation (sender cannot deny having sent it). They have received an export license for their system. 2.2 Authentication The authentication method used to authenticate the user to the TESS and vice versa is a crucial part of the security architecture. The TriStrata documentation contains no further information than that this is handled by the Private Access Line protocol. 2.3 Encryption Algorithm The Random KeyStream (RKS) encryption algorithm used by TriStrata is hailed as "a new fundamental technology." It is claimed to be very fast, but the documentation only contains raw speeds, without documenting which platform these speeds were achieved on. The encryption technology is also claimed to be unconditionally secure. To quote the web site: "No matter how much mathematical analysis or computing power is applied to the cryptanalysis of RKS, there is simply no algorithm and no underlying pattern to break. As Herbert Yardley foresaw in 1931, cryptography as a profession is dead." 3.0 Our Comments 3.1 The Central Server Structure Cryptographic systems that use a central access control server are nothing new. The Kerberos protocol uses a central server for similar tasks. Using such a central server as the TESS has several advantages and disadvantages. The main advantages are: - There is a central place that administrates all the access rights. This makes various administrative tasks easier. - Revocation of access is automatically supported by the system. No separate revocation mechanism is necessary. - The central server can keep comprehensive auditing logs of security-related operations. The main disadvantages are: - The central server contains confidential information, namely the master keys that can decrypt any file. It is thus a very tempting target for attack. The central server must be very well protected. At the same time, the server must be reachable from across the network, and must be reliable, as nothing can work without a functioning server. The end result is a server that is expensive (due to all the requirements) and that still is an obvious point of attack. - The central server is a single point of failure. TriStrata uses a redundant server structure with fail-over, so that a second server takes over when the first fails. A fail-over structure protects against technical errors, but does not necessarily protect against denial-of-service attacks. The TESS is based on a "security hardened" version of Windows NT, an operating system that is not known for its resistance to malicious attacks. - The system is effectively a closed system. Only users who are registered at the server can partake in the system. It is not clear how two users that belong to different servers would communicate. The TriStrata documentation mentions electronic commerce extensively, but it does not discuss how two users at two different companies can use the TriStrata system to communicate with each other. - Since the server contains crucial confidential information, every company must run its own server. A failure of the server, such as a leak of the master keys from the server, can reveal all of the company's information. This is the kind of task that should not be outsourced. In contrast, the key server of a public-key-based system is much easier to outsource as it can be designed so as not to be critical for security. - The TriStrata solution does not allow a user that is off-line to access any encrypted files. A salesman that keeps his data encrypted on his portable computer cannot access the data without contacting the TESS. If he cannot get network access for some reason (e.g., on an airplane, mismatched phone plug, etc.), he cannot access his own files. The TriStrata solution is a return to a very old style of centralized key management. For some applications this is a good solution, but there are many situations in which a centralized server is not appropriate. For example, one function that a central server cannot do well is non-repudiation between adversarial parties (one of the critical functions in electronic commerce). The TESS system seems to provide non-repudiation through inspection of the logs of the TESS. But if a message is sent between two companies, which TESS do they use? The company that owns the TESS that is used can manipulate the logs in their own favor. The end result is that there is no watertight proof that the message was sent or received. In effect, this solution takes us back to the days before public-key cryptography. Since its invention in the late 1970s, the ideas of certificates, public key infrastructure, decentralized key management, separation of encryption and digital signature functions, etc., have all been implemented in response to insecurities in centralized systems. For example, public-key infrastructures use trusted third parties like the TESS, but in a public-key system, compromise of the trusted third party only allows an attacker to issue false certificates, not to decrypt and read messages. 3.2 Authentication We have no further information on the PAL protocol. The documentation does state that the communication with the TESS consists of a single message from the user to the TESS, and a single reply back. Elsewhere it says that the TESS is stateless, which makes it easy to do a fail-over should one TESS fail. It is not clear to the reviewers how the PAL protocol works, if we assume it consists of two messages and is stateless for the TESS. These two properties together would suggest that an attacker can replay requests to the TESS. If nothing else, this introduces fake entries in the audit log. Some of these attacks can be hindered by the use of local clocks, but every solution along these lines we have ever seen is always troubled by clock synchronization problems. We note that the PAL protocol is critical for the security of the overall system. If an attacker can impersonate another user, then he can request the proper permit from the TESS to decrypt a file, and will get access regardless of the security of the actual encryption algorithm. The PAL protocol deserves careful scrutiny before the TriStrata system is put to use. The most straightforward attack against the TriStrata system is to introduce some hostile code into the client's PC (for example, a virus or Trojan horse). This hostile code can then steal the necessary authentication information and send it back to the attacker. This type of attack is a generic attack against any security system, not just the TriStrata system, but it shows that the "provable security" is at best limited to a small part of the system and does not extend to the whole system. 3.3 Encryption To put it bluntly: the TriStrata system does not use the one-time pad system (Vernam cipher) for encryption. A true one-time pad uses a random key that is distributed through a separate secure channel. While a one-time pad is, in fact, theoretically unbreakable when used properly, the details of using it properly make it entirely unusable in any modern commercial or military setting. A true one-time pad gains its unbreakable security from the fact that the key is as long as the message. Since all keys are equally likely, and a particular ciphertext could represent any message, given a particular key, the ciphertext reveals nothing about the plaintext message without the correct key. These random keys must be entirely random; this usually requires generating them from some external random source (such as thermal noise or radioactive decay). And both the sender and the receiver must have this secret key, which must be exchanged in some fashion which the attacker cannot penetrate. The requirement that the keys be as long as the data to be exchanged and that the key needs to be transported via some secure mechanism makes the one-time pad system entirely impractical. In order to send a 1 MB message, the sender and receiver must exchange a 1 MB-long key. Then the sender could send the message and the receiver could use the key to decrypt it. The key would then have to be thrown away and never used again. If the sender wanted to exchange messages with a hundred people, he would have to pre-agree on different keys between each recipient. For a company with a thousand employees, this means that there are 499,500 different key sets, which need to be replenished any time they are exhausted by message exchange. Because the key has to be as long as the message, there is no way to use an established system to exchange more keys, since in order to securely send as 1 MB key a user needs 1 MB of additional pre-agreed key. (And if users can exchange these keys, why can't they just exchange the messages?) This means that all keys have to be exchanged via some other mechanism (such as a courier). This kind of system was used for the U.S.-Soviet teletype "hot line" and it is occasionally used for paper ciphers and spies, but that's it. There is no way in which a true one-time pad can be implemented over a computer network. From the information provided by TriStrata, we believe that the encryption method used is a keystream method where an algorithm generates a key stream which is then XORed with the plaintext to generate the ciphertext. This is known as a pseudo one-time pad, and is also called an OFB stream cipher. One of the modes of DES works in this manner, as does the RC4 encryption algorithm. This is not new technology. A pseudo one-time pad encryption algorithm can be secure, but claiming that it is secure because it is based on the one-time pad is ridiculous. The strength of the cipher algorithm depends on the method used to generate the key stream. The speed given for the encryption method is fairly fast, but without knowing what platform was used to achieve these speeds, no sensible comparison can be made. To give some comparison material: the leading candidates for the AES block cipher encryption standard can encrypt data in about 18 clock-cycles per byte on a Pentium II. A standard 350 MHz desktop machine thus achieves nearly 20 Mbytes per second. This compares to the TriStrata claimed speed of 36 Mbytes per second for a standard desktop machine. The TriStrata figures are faster, but only by a factor of two. This would be a nice speedup, but it does not present a fundamental breakthrough in speed. Reference 4 is a magazine article report that contains more information about the encryption algorithm. As with any magazine article, the accuracy of the information is hard to judge. Nevertheless, the information it provides fits well with the information we have from TriStrata. The TESS generates a single 1 Mbyte block of random data using a hardware random number generator. This block is distributed to all clients. (A second block is used for authentication, but we have no further information on the algorithm.) The encryption algorithm keeps several pointers into this random block and derives the random key stream from the data the pointers point to. This is a known technique, first used by Maurer in his randomized cipher [Reference 5]. The TriStrata documentation talks about a virtual keystream of over 10^30 bytes, which would correspond to 5 pointers into a 1 Mbyte block. This suggests an effective key size of at most 100 bits. On the other hand, the website also claims that it would take 3.5 x 10^33 years to defeat one TriStrata-encrypted message, which would suggest either a larger key space or a fundamental misunderstanding of the mathematical properties of Maurer's system. The random block is the same for all the clients. It has to be, as the client that does the decryption needs the same random block as the client that does the encryption (and sending 1 Mbyte blocks around in the permit is too slow). Therefore, we cannot view this random block as a secret. After all, a secret shared amongst thousands of users is not a secret any more. If we want a more conventional representation of the encryption algorithm, we can represent the random block as a randomly generated 20 by 8-bit S-box. We have no knowledge about the details of this encryption algorithm, but the most straightforward variants of this type are susceptible to a meet-in-the-middle attack on the pointer space. This could reduce the effective key size to as little as 60 bits. The journalist did a speed test of TriStrata's file encryption utility. On a 200 MHz Pentium Pro, 128 MB RAM and PCI Ultra-SCSI disk subsystem it encrypted a 58 MB file in 18 seconds. This corresponds to a speed of 3.2 Mbytes per second. Presumably this speed is limited by the speed of the disk I/O. On this platform a traditional encryption algorithm such as Blowfish can encrypt at 10 Mbytes per second; the super-fast RKS encryption is presumably faster than this. Although this test does not give us any real speed data, it does show that encryption speed is not the bottleneck in most situations. In this situation, the disk I/O is much slower than the cryptography, making the encryption speed irrelevant. 3.5 Proprietary Encryption Algorithms The nature of cryptography is such that there is no way to prove that a cipher is secure, since this amounts to proving a negative assertion: that there is no way to break it easily. Anyone, from the most unsophisticated amateur to the best cryptographer, can create an algorithm that he himself can't break. What is hard is creating an algorithm that no one else can break, even after years of analysis. And the only way to prove that is to subject an algorithm to years of analysis by the best cryptographers around. Because of this situation, the only recognized criterion for secure cryptographic systems is peer review: having other cryptographers examine a cipher and attack it. Even cryptographic organizations which operate in secret, such as the NSA, have an extensive internal peer review system. >From past experience we know that systems that are kept secret and presented as "provably secure," "unbreakable," "a new fundamental technology," or "one-time pad" are usually not very good at all. Those who say these things generally do not understand the current state-of-the-art of mathematical cryptography, and make fundamental mistakes in their system design. Encryption algorithms that are unpublished have a dismal record. The literature is littered with the corpses of encryption algorithms that were broken once they were published. Until TriStrata publishes its algorithm and it is open to peer review there is no professional reason to presume it is secure. 4.0 The Real Problem in Security Systems It is interesting to note that TriStrata gives a lot of attention to the encryption algorithm. From all the problems that security systems face at the moment, the encryption algorithm is probably the least important one. There are many good encryption algorithms available in the published literature that can be used for free. TriStrata chose to develop their own algorithm. Although this can be a lot of fun, it is a decision that is hard to justify, as new algorithms can only be considered secure after an ample time of peer review. Cryptographic systems are broken constantly, but the attacks are almost never against the algorithms. The really difficult problems in security systems are key distribution, management, reliability, robustness, etc. TriStrata uses the solution of having a central server, as necessitated by its choice of encryption technology. This solution is suitable in some situations, but there are many problems that cannot be handled by this approach. In fact, the problems associated with central servers and centralized key distribution have been driving the development of public-key--based systems for the last two decades. TriStrata, by implementing a Maurer-style randomized stream cipher and the centralized key management it requires, has taken the one piece of the cryptographic puzzle that we can solve--symmetric encryption--and made what they perceive to be security improvements. However, they did this at the expense of the really hard problems in cryptography...ones that their system does not seem to adequately solve. 4.1 Trust and Security Systems Whenever someone buys a commercial product, he is trusting that the manufacturer did a good job designing and building the product. This is especially important with security products. If someone buys a word processor and it does not perform as advertised (e.g., the print function does not work), he will eventually notice (he won't be able to print his documents). If someone buys an encryption product, it can function normally (encrypting and decrypting documents successfully), but that is no indication that it is secure. Security is completely separate from functionality, and no amount of beta testing can ever uncover a security flaw. In the commercial world, we rely on the public review process to evalute the security of systems. Internet security infrastructures, such as IPSec, PKIX, and SSL, have been discussed and debated for years. Versions have been proposed, security flaws have been found, fixes have been implemented, and so on. Cryptographic algorithms in these protocols are ones that have been around for years, and have had extensive cryptographic review by the best in the field. Even this is no guarantee of security--implementation flaws are found (and fixed) in the code that implements these protocols, but it establishes a certain degree of confidence. TriStrata has chosen to ignore all public standards in favor of their own proprietary technology, while at the same time refusing to make technical details of their technology public. In order to use their system, the purchaser must trust that their cryptographers are better than the collective wisdom of the world's academic cryptographers, that their protocol designers are better than everyone who has worked on the open Internet protocols over the last few years, that their implementers are better than everyone who has made and evaluated the public implementations of those protocols. The purchaser must trust that TriStrata's misuse of the academic terminology does not reflect a misunderstanding of that technology, and that their technology is so much better than what everyone else has agreed upon that it makes sense to make that leap of faith. In the end, a star-studded board of directors and upper management does not obviate the need for good science, open systems, and peer review. It's simply foolish to trust a system that has not been evaluated. 5.0 Conclusions A system like TriStrata's can be made to work within its limitations. It is certainly not the universal solution to the world's security problems. However, there is a huge amount of hype and very little substance to the documentation. Many of the statements made are incomplete, vague, or suggest facts which cannot be true. The cryptographic claims are wild and unsubstantiated. Parts are clearly written by someone who does not understand modern cryptography, and who is not well versed in the cryptographic literature. Certain areas of the documentation give the impression that they were written with the intent to deceive the reader, but ignorance is probably a better explanation. Based on past experience with systems that made similar unsupported security claims, we are very skeptical about the security of the TriStrata system. We reviewed the system as we have reconstructed it from various hints in the text, as well as conversations with people who have been involved with the system. Until TriStrata releases technical information about its product, it is not possible to give a complete evaluation of their technology. References: [1] TriStrata web site, http://www.tristrata.com, on Sept. 22nd, 1998. [2] Walter Hamscher, Alastair MacWillson, and Paul Turner, "Electronic Business Without Fear: The TriStrata Security Architecture," Price Waterhouse. [3] "Building a Secure Future with CTR Business Systems and TriStrata Security," leaflet. [4] Dan Backman, "TriStrata: A Giant Step In Enterprise Security," Network Computing Magazine, 15 September 1998. Online, http://www.nwc.com/915/915sp1.html [5] Ueli M. Maurer, "A Provably-Secure Strongly-Randomized Cipher," Advances in Cryptology -- Eurocrypt '90 Proceedings, Springer-Verlag, 1990, pp. 361--373. ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Brown, R Ken 17 Dec '03

17 Dec '03

> James A. Donald wrote > > [oddly irrelevant stuff about Satan skipped] > > > A big company has no monetary advantage over a small company. > > > Suppose Firm A controls 90% of the market and firm B > > controls 10% of the market. Artificially low prices cost the > > big firm nine times as much as the small firm. Under > > capitalism, the small company can duke it out on equal > > terms with the big firm, and with great regularity, > > that is exactly what they do. > > Sometimes. And sometimes they don't. Sometimes half-a-dozen big boys just > gang up on the smallest. > > Anyway, your example ignores cross-subsidy whcih is the usal way to do > this. > > And bigger companies precisely *do* have a financial advantage over small > - they can borrow money at lower rates and they have more ways of hedging. > When they operate in more than one part of the world a certain amount of > hedging is built in. In general economies of scale aren't, but finance is > one area where they do work. > > There are more forms of competition than a price war Also if it comes to a > *legal* slugging match the total amount > > > >> Garbage (what we call rubbish over here) collection is > >> different again. It's not at all a nutural monopoly and > >> there is nothing stopping anyone offering to do it as a > >> business. But it is a natural for social ownership, > > > You mistake the political adventures of your local elite for > > universal laws. > > Just like you Americans do when you drivel on about guns in ways that most > other people either don't care about or find repulsive? > Anyway, I wasn't talking abou the elite but the majority. > > > In some parts of the world rubbish collection is private. > > Yes, I know that. In some parts of this coutnry also. Anywere genuinly > rural for a start. What's that got to do with what I said? > > > There is no "natural monopoly" that is not somewhere > > a private industry, and often it is a private industry in a > > place that is otherwise quite socialist. Public and private > > ownership reflect the accidents of politics and history more > > than they reflect the natural characteristics of the industry > > in dispute. > > I agree with this completely, but I don't think it invalidates anything we > said. You are confusing 3 quite different questions: > > - social ownership versus private ownership > - competition versus monopoly > - free trade versus protection > > Ken Brown > >

1 0

the camel
by Richard.Bragg＠ssa.co.uk 17 Dec '03

17 Dec '03

Camels eat first and carry afterwards so stuff a thousand bananas down its neck and get it to carry 1000 across. The remaining 1000 are to be left to ferment to make a delicious drink for the camel handler who has just persuaded a camel to eat 1000 bananas. ___________________________________________________ The information contained in this electronic mail message is confidential. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If the reader of this message is not the intended recipient, you are hereby notified that any use, copying, dissemination or disclosure of this information is strictly prohibited. ___________________________________________________

1 0

Monitoring traffic
by Brown, R Ken 17 Dec '03

17 Dec '03

This week's New Scientist magazine (p. 6) has a short column about Xacct t5hat looks as if the journalists swallowed a press release whole and have puked it up almost undigested: "Using the Internet could become more expensive if service providers adopt new software that allows separate billing for emails, downloading graphics and streaming audio or video". It desceibes an unlikley scenario in which ISPs charge more per minute for high-quality video and less for low-quality or email. I'm not sure the journalist knows the difference between an ISP and a content provider. Yet another business that would be made obsolete by widespread use of strong encryption. Unless of course they mean to head that off at the pass by making ISPs charge more to transfer encrypted packets? When you look at their website http://www.xacct.com/usage.html you find a description of what seems like a pretty normal system monitoring application (although I'm sure it is wonderfully written) surrounded by what, when we were young and foolish, we used to call Marketdroid Waffle: "XACCTusage Family XACCTusage is a multi-source, multi-layer network usage metering and mediation solution that gives Network Service Providers (NSPs), including enterprise network (Intranet) operators, the intelligence to right-price IP services." Enough to make your teeth curl. The names of the people interviewed tickled my spoof detectors as well. "Anil Uberoi" and "Charles Arsenault" sound distinctly dodgy on this side of the Atlantic. Ken Brown

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

At 04:19 PM 10/5/98 +0100, Richard.Bragg(a)ssa.co.uk wrote: >Camels eat first and carry afterwards so stuff a thousand bananas down its >neck and get it to carry 1000 across. The remaining 1000 are to be left to >ferment to make a delicious drink for the camel handler who has just >persuaded a camel to eat 1000 bananas. You print 1000 certificates for bananas, and require the camel to accept them. Then you make him carry all 3000 across the desert. Then you print three million certificates, and declaring his certificates devalued, hand him three bananas, one of which you keep as income tax. You also keep half a banana in banana-transfer-taxes.

1 0

Java-based Crypto Decoder Ring gets NIST FIPS 140-1 certification
by Robert Hettinga 17 Dec '03

17 Dec '03

As breathlessly reported in DIGSIG :-). Cheers, Bob Hettinga --- begin forwarded text MIME-Version: 1.0 X-Priority: 3 (Normal) X-MSMail-Priority: Normal Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Date: Sat, 3 Oct 1998 09:45:19 -0500 Reply-To: Digital Signature discussion <DIGSIG(a)LISTSERV.TEMPLE.EDU> Sender: Digital Signature discussion <DIGSIG(a)LISTSERV.TEMPLE.EDU> From: Richard Hornbeck <rhornbec(a)COUNSEL.COM> Subject: Java-based Crypto Decoder Ring gets NIST FIPS 140-1 certification To: DIGSIG(a)LISTSERV.TEMPLE.EDU Java-based Crypto Decoder Ring gets NIST FIPS 140-1 certification INSTEAD OF STORING YOUR PRIVATE KEY IN SOFTWARE ON YOUR PC, KEEP IT IN HARDWARE, ON YOUR CLASS RING, KEY FOB, MONEY CLIP, WATCH OR ANYTHING ELSE THAT CAN STORE A 16mm, stainless steel case. According to its Web site (www.ibutton.com) "the iButtion provides for secure end-to-end Internet transactions-including granting conditional access to Web pages, signing documents, encrypting sensitive files, securing email and conducting financial transactions safely - even if the client computer, software and communication links are not trustworthy. When PC software and hardware are hacked, information remains safe in the physically secure iButton chip." Unlike storing your private key in software on your PC where it can remain in cache after use, and be retrieved by a hacker, the crypto iButton private key never enters your PC, so it cannot be intercepted. In July, the Crypto iButton from Dallas Semiconductor received the NIST FIPS 140-1 "Security Requirements For Cryptographic Modules" certification. The Crypto iButton provides hardware cryptographic services such as long-term safe storage of private keys, a high-speed math accelerator for 1024-bit public key cryptography, and secure message digest (hashing). To date, only 15 hardware products have been validated by the U.S. and Canadian governments. According to their press release at: http://www.dalsemi.com/News_Center/Press_Releases/1998/pr_fips.html, the Crypto iButton ensures both parties involved in a secure information exchange are truly authorized to communicate by rendering messages into unbreakable digital codes using its high-speed math accelerator. The Crypto iButton addresses both components of secure communication, authentication and safe transmission, making it ideal for Internet commerce and/or banking transactions. The Crypto iButton consists of a physically secure, million-transistor microchip packaged in a 16mm stainless steel can. Not only does the steel protect the silicon chip inside from the hard knocks of everyday use; it also shows clear evidence of tampering by leaving scratch and dent marks of the intruder. This steel case satisfies FIPS 140-1 Level 2 Tamper Evidence requirements for physical security. Note: Within the overall 140-1 certification are various sub-levels that identify how well the product rates in different categories such as Physical Security, Environmental Failure Protection, and Tamper Resistance. The sum of the ratings in the individual categories determines whether it merits certification. The iButtion also allows the owner to set an automatic expiration date, to limit the potential for unauthorized use. Once the built-in clock reaches a pre-set time, the chip self-expires and requires re-activation by the service provider before service can be renewed. The service provider can verify that an individual has possession prior to initial activation or renewal (re-activation). In this way, a lost or stolen iButton unconditionally limits the potential for unauthorized use to the remaining activation time, which can be made arbitrarily short by the iButton holder or service provider. According to its Web site, Blue Dot receptors using either the Java operating system (OS), or a proprietary OS, can be purchased online for $15 each. The receptor plugs directly into the parallel port on a PC, and includes software for configuring its features. The software also programs the decoder ring with the private key the first time, and performs any other administrative functions. Just press the Blue Dot with the iButton (ring, fob, key ring, etc.) to establish the connection path. If you know your ring size, you can order Josten's 'Java-powered ring,' or the 'Digital Decoder Ring,' online. Also available are the 'Fossil Watch, key ring, or money clip. http://www.iButton.com/DigStore/access.html#jring. Costs for a single unit range from $45 to $89. "Unlike a loose plastic card, the iButton stays attached to a carefully guarded accessory, such as a badge, ring, key fob, watch band, or wallet, making misplacement less likely. The steel button is rugged enough to withstand harsh outdoor environments and durable enough for a person to wear every day. An individual maintains control over their Crypto iButton in yet another way-a secret Personal Identification Number. If so programmed, the iButton will not perform computations until its PIN is entered, like a bank ATM. " A list of developers and their off-the-shelf applications is at: http://www.iButton.com/Connections/Catalogs/index.html. Custom, networked, server-based applications are available, in addition to individual, standalone PC products. The crypto iButtion is currently being tested by the USPS for electronic distribution of postage stamps. The company marketed its iButton products for other non-crypto uses starting in 1991. A list of current implemented and pilot projects using the product to simply store and process data around the world is at: http://www.iButton.com/showcase.html. This includes the mass-transit system in Turkey, bus passes in China, vending machines in Canada, parking meters in Brazil and Argentina, and buying gas in Mexico and Moscow. Richard Hornbeck www.primenet.com/~hornbeck --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 01 Oct 1998 22:28:49 -0700 > From: "James A. Donald" <jamesd(a)echeque.com> > Subject: RE: GPL & commercial software, the critical distinction (fwd) > Bullshit. No monopoly has ever happened except by regulation That is truly Bullshit. Microsoft got to where it is because of a lack of regulation, the abuses of the aircraft industry in the 1940-50's that led to regulation at the end of the 50's and 60's. The steel industry in the north east in the early 1900's. The food packing and garment industries of the north east and pacific coast in the 20's through the 50's. The railroad industry in the mid-1800's. Every one of these created a monopolistic market because of a *lack* of regulation. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

Canadian RCMP's & government workers lose vacation over Y2K
by Sunder 17 Dec '03

17 Dec '03

http://www.ottawacitizen.com/national/981003/1910271.html

1 0

[Fwd: [Spooks] Letter from a CIA officer with a gripe]
by Sunder 17 Dec '03

17 Dec '03

To: Spooks <spooks(a)qth.net> Subject: [Spooks] Letter from a CIA officer with a gripe From: Bob Margolis <rttyman(a)wwa.com> Date: Sat, 03 Oct 1998 22:30:07 -0500 Reply-To: Bob Margolis <rttyman(a)wwa.com> Sender: owner-spooks(a)qth.net February 26, 1998 Senator Lauch Faircloth 317 Hard Senate Office Building United States Senate Washington, DC 20510 Senator Faircloth: I am very concerned with recently published reports, which conclude that the Central Intelligence Agency was not involved in drug activity in connection with their activities in Latin America. As a former Central Intelligence Agency officer I had direct knowledge of matters which may be relevant in this matter. During the period of January 1986 until July 1990 I was assigned as the lead Computer Systems Analyst Programmer to a facility which was initially called Project Koral during the building phase in 1985, but upon activation was known as BYJURY within the Office of Communications (DA/OC) although this designation was later changed to OC/MIAMI. Our callsign was KKN39 and our routing indicators was RUEG and RUEGMI. Because it operated under the guise of being a U.S. Army facility it was also known as the United States Army Regional Communication Agency/National Communications System and telegraphically as RRF MIAMI. However, at no time did the facility ever support any DOD efforts. The primary mission of this facility was to support the activities of the Continuity of Government project which was identified by project cryptonyms as CHALLIS, FESTIVE, FENCER, FEDDER, PEGASUS and ZEUS and in this role the name of the facility was Atlantic Relay Facility I (ARF- 1). The overall umbrella organization for this effort was initially known as NEISS, later as NEISO and finally as SIO and at one point had space located in the basement of the Tysons Corner mall in Vienna, Virginia. The facility itself was located on U.S. Government property, which was known locally as the Richmond Naval Air Station. This same property was also the location of a University of Miami Primate Research Center, a Marine Corps Reserve unit, the Central Intelligence Facility and another NEISO activity which was identified as a unit of the U.S. Army 7th Signal Corps but which was known with NEISO as CPIC-East. The OC/MIAMI facility was staffed with approximately 15 people. A facility manager, a senior watch officer, a station engineer, a programmer analyst, three electronic technicians, an administrative assistant and 7 communications officers. Because the activities in support of the NEISO operations was minimal in peacetime, the facility was used by the Office of Communications as a major relay to provide linkages between several CIA facilities in Southern Florida (LA/MIAMI, FR/MIAMI, Miatech, FBIS Key West) and several other sites in the Caribbean and South America. In addition we also periodically provided telecommunications service to other CIA facilities whose primary relay was the Office of Communications relay facility near Culpepper, Virginia which was known for years as YOGURT but was later known as BYJAMS and still later as OC/BRANDY with a callsign of KKN50 and a routing indicator of RUES. By now I hope you realize that I did have access to the information which I am about to convey. The information given above can be verified by the CIA, although they will be extremely reluctant to do so since the extent of the NEISO project was withheld from Congress About a 18 months after my arrival at the facility we were informed that we would be the primary relay facility for a small station which was established on Swan Island in support of a variety of operations which were being conducted as part of our support for the CIA's efforts in Nicaragua. This facility was centered on an airstrip, which was used as a base of operations for pilots who were dropping supplies to the rebels, which the CIA was supporting. The communications setup for this facility was something that we called a flyaway package. Basically it consisted of a HF transmitter/receiver a PC-based communications terminal and a KG-84 encryption device. The KG-84 was considered to be one of the most secure cryptographic devices in use at that time. It came into universal use by the CIA after it became known that the Walker's had compromised the KW-7 in 1985. When the encrypted signal was received at BYJURY, it was decrypted through one of our KG-84 devices and from there the signal was passed to the SPARS message switch in unencrypted form. However, much of the traffic, which was transmitted on this circuit, was super- enciphered with One-Time-Tape (OTT). This was extremely unusual under the circumstances since electronic encryption was considered quite adequate for secure CIA communications. I know from personal experience as a communications officer prior to becoming a computer programmer that except for annual exercises to maintain proficiency in one-time- tape techniques, there was essentially no usage of one-time-tape for circuits which had secure communications circuitry. The fact that this particular station was using one-time-tape over a secure circuit was noted by all of the communicators at BYJURY and while we did not have any means whereby to decipher the messages further, it was broadly speculated that there was something happening on Swan Island which was so sensitive that it could not be entrusted to normal electronic encryption. When you consider that most Talent Keyhole and Rapport data was only afforded normal encryption, the volume of one-time-tape usage by this station can only be viewed as extremely noteworthy. If Congress decides to investigate this matter further, I also need to add that the CIA will probably state that the messages, which were transmitted to and receive from this station are no longer held. This is totally inaccurate. All message traffic into and out of CIA Headquarters is held in local storage for several weeks and after that time is no longer routinely available. However, for many years now there have been backup copies of the traffic which are transmitted on a daily basis to an off-site storage facility at Station A of the Warrenton Training Center where it is transferred to magnetic tape for permanent archives. It is highly likely that the CIA will deny that this archiving takes place because even the head of the Office of Communications probably does not realize that this is occurring since this is considered a low-level routine administrative task and quite often CIA managers above the GS-14 level simply do not have any understanding or knowledge of the actual working of the communications network. If the CIA does deny that the archiving occurs you may wish to use the power of congress to pursue the matter until they admit that the records do exist. While the actual magnetic tapes may have been replaced by more permanent storage such as CDROMS, I can pretty much assure you that the storage does exist. I am providing this information because after the extremely harsh and discriminatory treatment, which I experienced during the period of 1989-1992, I no longer feel any sense of loyalty to the CIA nor do I feel that I have any obligations to them. They were wrong in treating me the way that they did and demonstrated that they preferred to take the word of a senior manager who habitually drank alcohol while performing in his position and they preferred to protect those who were engaged in sexual improprieties. On top of that they also manipulated the federal court system to ensure that they received decisions which favored their point of view. There are apparently several federal judges and U.S. Attorney's who have profited enormously by making decisions, which prevented my case from ever being adequately heard in court. If congress is interested I could also provide information which would tend to indicate that senior officials within the Office of Communications engaged in misuse of government funds and in which official books were manipulated to make it look as if money was being spent for official purposes when, in fact, it was being spent for the benefit of senior managers in a fraudulent and wasteful manner. After all of these years I still remain angry over the treatment I received. When I became a government employee I fully intended to serve an entire career in government service, but when I was faced with treatment which was so harsh, punitive and discriminatory and when all recourse was denied to me by the so-called statutory Inspector-General of the CIA and his minions, I was placed in a position in which I had to leave government service for my own protection since I could no longer predict the capricious actions by those who held the power to make the live of an employee miserable. They were wrong in what they did and there is simply no excuse for permitting managers to have such power to destroy a human being. I can never forgive their actions and at this point the only way that I can deal with my anger is to communicate exact details of matters which I experienced as an employee in hopes that I can bring shame to the Agency. As a human being I deserved a certain level of dignity and I received none. Government agencies should be held to a standard whereby no employee is discriminated against for any reason. Please contact me if any additional information is needed on this subject. All information in this letter is in the public domain and may be disseminated freely. Kenneth C Stahl --- Submissions should be sent to spooks(a)qth.net To unsubscribe, send "unsubscribe spooks" to majordomo(a)qth.net

1 0

odd comment
by Ian Briggs 17 Dec '03

17 Dec '03

A friend of mine works in an IT department for a major tech company. Three of the people in his department were just transfered to their new contract. They are rewiring some of the network for a highway system in California that monitors for explosives. Now, he doesn't know anything more than that. In California there are several highway stretches that have large metal telephone poles stretching accross the two right lanes of a major three lane highway. On top of the poles are two metal boxes about the size large bread boxes. Now any idea what those boxes are? and if anyone has heard of this monitoring system and if so what agency is responsible for this? Also does anyone know who is responsible for all the cameras that now monitor the highways? Almost every overpass in Sacramento has one that views each stretch of the highway. -Ian Welcome to 1984 as with all goverment projects, its a bit late and slightly overbudget -IB.

1 0

one-time pad
by bill payne 17 Dec '03

17 Dec '03

Orlin http://www.aci.net/kalliste/ and, of course,http://www.aci.net/kalliste/bw1.htm I got a big kick reading http://www.jya.com/tristrata.htm Especially, While a one-time pad is, in fact, theoretically unbreakable when used properly, the details of using it properly make it entirely unusable in any modern commercial or military setting. And This kind of system was used for the U.S.-Soviet teletype "hot line" and it is occasionally used for paper ciphers and spies, but that's it. Codes and Cryptography by Dominic Welsh references on page 126 Sandia's Gus Simmons as the source of the above. (And if users can exchange these keys, why can't they just exchange the messages?) I think the reason is that the users want to exchange keys for messages to be sent at a later time, perhaps electronically. But we have to stick to the position. Does the algorithm pass the Black and White test or not? No buts. Let's all hope for settlement of this UNFORTUNATE matter before it gets WORSE. bill Title: Black and White Test of Cryptographic Algorithms Jump to Forum Click Image to Jump to Next Article Go to Text Only Print Version Black and White Test of Cryptographic Algorithms by William H. Payne This article requires special formatting. Please Click Here to Read Send This Article to a Friend: Your Name: Email Address of your Friend: Your Email address: Back to Home Page Quick Menu Visit the Button Shop Interactive Forum Black and White Test of Cryptographic Algorithms E-mail the Editor

1 0

keep up-wind - you think we are KIDDING?
by bill payne 17 Dec '03

17 Dec '03

Subject: Effects of Nukes Date: Mon, 05 Oct 1998 09:47:43 -0600 From: bill payne <billp(a)nmol.com> To: gap(a)igc.apc.org, tom carpenter - halcyon <tomcgap(a)halcyon.com>, jeff debonis <76554.133(a)compuserve.com>, lawya(a)lucs-01.novell.leeds.ac.uk, senatorlott(a)lott.senate.gov, senator_leahy(a)leahy.senate.gov, conrad_burns(a)burns.senate.gov, larry_craig(a)craig.senate.gov, senator(a)wyden.senate.gov, dpcintrn(a)osd.pentagon.mil, conrad_burns(a)burns.senate.gov, senator_gorton(a)gorton.senate.gov, senatorlott(a)lott.senate.gov, john_ashcroft(a)ashcroft.senate.gov, michigan(a)abraham.senate.gov, sam.brownback@.senate.gov, senator(a)dorgan.senate.gov, senator_stevens(a)stevens.senate.gov, senator(a)hutchison.senate.gov, olympia(a)snowe.senate.gov, senator(a)hollings.senate.gov, senator(a)inouye.senate.gov, wendell_ford(a)ford.senate.gov, senator(a)rockefeller.senate.gov, john_kerry(a)kerry.senate.gov, senator(a)breaux.senate.gov, senator(a)bryan.senate.gov, HERBERT.RICHARDSON(a)hq.doe.gov, BILL.RICHARDSON(a)HQ.DOE.GOV, pcassel(a)rt66.com, gregh(a)scene.com CC: senator(a)wellstone.senate.gov, jy(a)jya.com, senator_mccain(a)mccain.senate.gov, grassley <chuck_grassley(a)grassley.senate.gov>, cynthia mckinney <CYMCK(a)mail.house.gov>, c paul robinson <cprobin(a)sandia.gov>, art morales <armoral(a)sandia.gov>, cypherpunks(a)toad.com, ukcrypto(a)maillist.ox.ac.uk Monday 10/5/98 7:01 AM Tom Carpenter http://www.whistleblower.org/ I hope your week-end conference went well. I think I will in Pullman in a few weeks. And, therefore, almost a DOWNWINDER. When I was a prof at Washington State University 1966-79 we traveled to Spokane. I always wondered why I saw so many sick kids in Spokane. I think we all now know a possible reason. Albuquerque Journal Sunday 10/4/98 Heath Effects of Nuke Sites Targeted DOE's Richardson to Review Reports The Associated Press DENVER - U.S. Energy Secr- ary Bill Richardson says he will investigate reports of health prob- lems among people living near or working at federal nuclear weapons. plants and research facilities in 11 states. A total of 410 people told a news- per, The Tennessean, they are suffering from unexplained illness- including tremors, memory toss, fatigue and a variety of breathing, muscular and reproductive prob- lems. Their doctors cannot explain why they are sick. No direct link has been estab- lished between the illnesses and the "I want to be absolutety sure we're erring on the side of making sure there are no problems." U.S. ENERGY SECRETARY BILL RICHARDSON Department of Energy sites. But doctors, scientists and lawmakers say it's large enough to warrant a comprehensive study to try to find the cause. "My views we ought to get to the bottom of this," Richardson told the newspaper after meeting Friday with residents near the Rocky Flats nuclear site in Denver. "I want to be absolutely sure we're erring on the side of making sure there are no problems." Scientists have been concerned for decades about radiation from nuclear production and its link to cancer But no one has ever looked into noncancerous illnesses. During a 22-month investigation, the newspaper found ill people at 13 DOE sites in Tennessee, Colorado, South Carolina, New Mexico, Idaho, New York, California, Ohio, Ken- tucky, Texas and Washington. The Energy Department had ear- lier said it does not plan to take a comprehensive look at the issue. http://www.tennessean.com/special/oakridge/part3/index.shtml Here is some other relevant information about the U.S. goverment, Department of Energy, and nukes from Wierd History 101 by John Richard Stephens http://www.thegrid.net/fern.canyon/weird/contents.htm [A]nd then there are the legitimate concerns of terrorists using nuclear weapons. This risk is emphasized by the many incidents where the smugglers of nuclear components have been caught. But let's not get into that. Ever since the bombs were dropped on Hiroshima and Nagasaki, people have worried about having one of these horrors dropped on them. Since the demise of the Soviet Union, this threat has become more nebulous, making it a bit more difficult for people to focus their fears.16 As a result, their fears have diminished somewhat even though the threat has probably increased because of the increase in countries that have the 16 As of 1997, Russia and the United States still had about seven thousand strategic (or long rang) warheads each. Roughly half of these could be launched with a few minutes notice. bomb and the advances in technology that enable a bomb to be made from fissionable material the size of a beer can, while a bomb that can level a city can now be made to fit into a knapsack. But during the Cold War, the threat seemed much more immediate. Partly in response to these fears, the govern- ment implemented programs to teach people how they could protect themselves in the event of a nuclear attack. Early efforts downplayed the risks. One amazing example of this is the pamphlet Survival Under Atomic Attack. Published by the U.S. government in 1950, this official booklet proclaims, "You can SURVIVE. You can live through an atom bomb raid and you won't have to have a Geiger counter, protective clothing, or spe- cial training in order to do it." And then it goes on to give such advice as, 'After an air burst, wait a few minutes then go help to fight fires. After other kinds of bursts wait at least 1 hour to give lingering radiation some chance to die down." Discussing the role of the IRS in a nuclear attack, the Internal Revenue Service Handbook (1976) says, "During a state of national emergency resulting from enemy attack, the essential functions of the Service will be as follows: (1) assessing, collecting, and recording taxes. . . Where is the Best Place to Go? If you live in a State where there is danger from sudden storms like cyclones or hurricanes, you may have a "cyclone cellar" or something similar. If so, you have a shelter that will give excellent protection against atomic bombs. [People soon realized this wasn't quite true, and they began building bomb shelters.] "All you have to do to protect yourself from radiation is go down to the bottom of your swimming pool and hold your breath." -David Miller Department of Energy spokesperson [S]o there you have it. You're now prepared to survive nuclear warfare. Think you can handle it? Actually, it's very hard to believe that, after five years of intensively studying the effects of atomic bombs and radiation at Hiroshima, Nagasaki, and various tests involving military personnel as human guinea pigs, the government didn't have a better idea of the dangers. My fellow Americans. I am pleased to tell you I just signed legislation which outlaws Russia forever. The bombing begins in five minutes." -President Ronald Reagan during a sound check for a live radio show, 1984 [I]n one of the tests in 1953, U.S. soldiers were placed near the explosion to test how well they could function after a blast. Sergeant Reason Warehime was one of fifty soldiers who were in a trench two miles from ground zero. They wore no protective gear. The first thing I saw" he later reported, was a real bright light like a flashbulb going off in my face, but it stayed on. It was so bright that even with sunglasses on, my hands over my eyes, and my eyes closed, I could actually see the bones in my hands. I felt as if someone was hugging me really tight, and my whole body was being compressed. All of a sudden, I heard an awful noise and felt an intensely hot wind blowing and the ground rocking like an earthquake. The dust was so thick I could not see the man right next to me. The air was so hot that it was difficult to breathe. . . . Since the fireball was directly over our heads, there is no doubt in my mind that we were in the 'stem' of the mushroom cloud." A voice over a loudspeaker ordered them to advance toward ground zero. The sandbags along the top of their trench were on fire. On reaching a bunker that was just over a mile from ground zero, they found eight men. "Those guys were sick as dogs and heaving their guts out," he said. Soon they began finding spots where the sand had melted into glass. After reaching the crater, they turned back and eventually were picked up by two radiation specialists in full protective gear. On the way back, Warehime and some of his companions started throwing up. A few months later; all of his hair fell out, his teeth began to rot, and he was diagnosed as sterile. Eventually, he developed cataracts, lung cancer; his bones became brittle, and he had to use crutches to get around. Even though radiation is known to cause these things, in the 1980s, the Veterans Administration insisted his problems weren't caused by this bomb and denied disability to him and many others like him. An estimated 250,000 military personnel were exposed to radiation in experiments between 1946 and the 1970s. Many additional civilians were also used as guinea pigs in radiation tests. Very few have ever received any compensation for or assistance with the perma- nent damage caused to them. Warehime was exposed to a forty-three- kiloton (not megaton) bomb. It turned out to be almost twice as powerful as the physicists had calculated it would be and was about twice as powerful as those used on Hiroshima and Nagasaki. Its radiation cloud spread across the nation from Nevada, fogging undeveloped film as far away as New Jersey. Morales and I are in the planning stage to put up a web site. John Young has been encouraging us to do this. Reason is that we are going after the judges and clerks in the Tenth circuit who awarded our court wins to Sandia we, in fact, we won. Now that John Young got the docket for us. Also I will be doing a Privacy Act violation defamation lawsuit against Sandia, DOE, EEOC, Lockheed Martin, AT&T, and named defendants. We will have several FORUMS. 1 Pro se litigation against the U.S. Federal government 2 Microsoft Assembler mixed-language programming 3 80C32 hardware, Forth high-level and assembler programming. at least. John Young started 3. http://jya.com/f86/whpf86.htm 1 and 2 may be compatible. Microsoft distributes buggy software while Gates, Paul Allen, and Balmer become some of the richest men in the world. Perhaps, with some legal encouragement, the above three should spend some of their money getting the bugs out of their software. To kick-off 1 and 2 I am thinking of posting a complaint against Microsoft for having scammed me by not included a 32 bit linker with MASM 6.11 I just bought. If we dont settle, of course. I will check e-mail in a few minutes to see how progress to get the 32 bit linker is coming. Microsoft appears to want me to buy a C compiler or Windows NT SDK [software development kit] to get the 32 bit linker. With all this scary stuff of effects of nukes, lets hope Rep. McKinney and Senator Grassley are making progress to help get NSA to post the requested documents. http://jya.com/whpfiles.htm And, too, lets ALL hope for settlement so that we can move on to other constructive projects. Before things GET WORSE. Later bill Subject: one-time pad Date: Mon, 05 Oct 1998 17:06:53 -0600 From: bill payne <billp(a)nmol.com> To: j orlin grabbe <kalliste(a)aci.net>, conrad_burns(a)burns.senate.gov, senator_gorton(a)gorton.senate.gov, senatorlott(a)lott.senate.gov, john_ashcroft(a)ashcroft.senate.gov, michigan(a)abraham.senate.gov, sam.brownback@.senate.gov, senator(a)dorgan.senate.gov, senator(a)wyden.senate.gov, senator_stevens(a)stevens.senate.gov, senator(a)hutchison.senate.gov, olympia(a)snowe.senate.gov, senator(a)hollings.senate.gov, senator(a)inouye.senate.gov, wendell_ford(a)ford.senate.gov, senator(a)rockefeller.senate.gov, john_kerry(a)kerry.senate.gov, senator(a)breaux.senate.gov, senator(a)bryan.senate.gov, nmir(a)usa.net, Info(a)IranOnline.com, info(a)jebhe.org, Mehrdad(a)Mehrdad.org, cypherpunks(a)toad.com, ukcrypto(a)maillist.ox.ac.uk, wpi(a)wpiran.org, abd(a)CDT.ORG, merata(a)pearl.sums.ac.ir, dpcintrn(a)osd.pentagon.mil, abumujahid(a)taliban.com, schneier(a)counterpane.com CC: jy(a)jya.com, john gilmore <gnu(a)toad.com>, Emile Zola <ezola(a)lfcity.com>, lennon(a)email.nist.gov, itl-bulletin(a)nist.gov Orlin http://www.aci.net/kalliste/ and, of course,http://www.aci.net/kalliste/bw1.htm I got a big kick reading http://www.jya.com/tristrata.htm Especially, While a one-time pad is, in fact, theoretically unbreakable when used properly, the details of using it properly make it entirely unusable in any modern commercial or military setting. And This kind of system was used for the U.S.-Soviet teletype "hot line" and it is occasionally used for paper ciphers and spies, but that's it. Codes and Cryptography by Dominic Welsh references on page 126 Sandia's Gus Simmons as the source of the above. (And if users can exchange these keys, why can't they just exchange the messages?) I think the reason is that the users want to exchange keys for messages to be sent at a later time, perhaps electronically. But we have to stick to the position. Does the algorithm pass the Black and White test or not? No buts. Let's all hope for settlement of this UNFORTUNATE matter before it gets WORSE. bill --- laszlo http://www.qainfo.se/~lb/crypto_ag.htm Sayonara 1 crypto ag 2 wiegand wires There are some good business opportunities. If we live that long. WE believe that the OTHER SIDE is NOT happy about what happened. NSA Hoe Cryptogate /JI October 5, 1998 http://www.jya.com/crypto.htm --- False Security William H. Payne Abstract "Why 130 million Wiegand cards are in use throughout the world . The most secure of all access card technologies. HID Wiegand cards are virtually impossible to counterfeit... any attempt to alter them destroys them! ... Since no direct contact with the card is required, they are totally enclosed, making them absolutely immune to the elements and a frustration of vandals. ... The secrets to the security of an HID Wiegand card are those little enclosed wire strips. Once corrupted, they won't work." Access Control & SECURITY SYSTEMS INTEGRATION, September 1998 www.prox.com http/www.securitysolutions.com http://www.securitysolutions.com/ *** Bullshit.*** False! - in the EDITED edition, of course Fumble, Bumble and Inept Funds Electronic Lock Breaking at Sandia National Laboratories. Zola http://zolatimes.com/ Would this be worth some bucks? Want another FUN article? http://www.zolatimes.com/v2.29/bw1.html http://www.aci.net/kalliste/bw1 I would need a BRILLIANT EDITOR to help polish the ms. http://www.aci.net/kalliste/ Counterfeiting Wiegand Wire Access Credentials Bill Payne October 16,1996 Abstract Wiegand wire access credentials are easy and inexpensive to counterfeit. Access Control & Security Systems Integration magazine, October 1996 [http://www/securitysolutions.com] published the article, Wiegand technology stands the test of time by PAUL J. BODELL, page 12 Many card and reader manufacturers offer Wiegand (pronounced wee-gand) output. However, only three companies in the world make Wiegand readers. Sensor Engineering of Hamden Conn., holds the patent for Wiegand, and Sensor has licensed Cardkey of Simi Valley, Calif., and Doduco of Pforzheim, Germany, to manufacture Wiegand cards and readers. ... A Wiegand output reader is not the same thing as a Wiegand reader, and it is important to understand the differences. In brief, Wiegand reader use the Wiegand effect to translate card information around the patented Wiegand effect in which a segment of a specially treated wire generates an electronic pulse when subjected to a specific magnetic field. If the pulse is generated when the wire is near a pick-up coil, the pulse can be detected by a circuit. Lining up several rows of wires and passing them by a cold would generate a series of pulses. Lining up two rows of wires - calling on row "zero bits" and the other "one bits" - and passing them by two different coils would generate two series of pulses, or data bits. These data bits can then be interpreted as binary data and used to control other devices. If you seal the coils in a rugged housing with properly placed magnets, and LED and some simple circuitry, you have a Wiegand reader. Carefully laminate the special wires in vinyl, and artwork, and hot-stamp a number on the vinyl, and you have a Wiegand card. IN THE BEGINNING Wiegand was first to introduce to the access control market in the late 1970s. It was immediately successful because it filled the need for durable, secure card and reader technology. Embedded in the cards, Wiegand wires cannot be altered or duplicated. ... Bodell's Last statement is incorrect. Tasks for EASILY counterfeiting Wiegand wire cards are 1 Locate the wires inside the card to read the 0s and 1s. 2 Build an ACCEPTABLE copy of the card. Bodell's clear explanation of the working of a Wiegand card can be visualized zero row | | | one row | | binary 0 1 0 0 1 representation Solutions to Task 1 A X-ray the card B MAGNI VIEW FILM, Mylar film reads magnetic fields ... Edmunds Scientific Company, catalog 16N1, page 205, C33,447 $11.75 is placed over the top of the Wiegand card. COW MAGNET, Cow magnetics allow farmers to trap metal in the stomachs of their cows. Edmunds, page 204, C31,101 $10.75 is placed under the card. Location of the wires is easily seen on the green film. Mark the position of the wires with a pen. Next chop the card vertically using a shear into about 80/1000s paper-match-sized strips. Don't worry about cutting a wire or two. Note that a 0 has the pen mark to the top. A 1 has the pen mark at the bottom. Take a business card and layout the "paper match"-like strips to counterfeit the card number desired. Don't worry about spacing. Wiegand output is self-clocking! Tape the "paper-match - like" strips to the business card. Only the FUNCTION of the card needs to be reproduced! History Breaking electronic locks was done as "work for others" at Sandia National Laboratories beginning in 1992 funded by the Federal Bureau of Investigation/Engineering Research Facility, Quantico, VA. The FBI opined that this work was SECRET/NATIONAL SECURITY INFORMATION. Details of the consequences of this work are covered in Fired Worker File Lawsuit Against Sandia Specialist Says He Balked When Lab Sought Electronic Picklock Software, Albuquer Journal, Sunday April 25, 1993 State-sanctioned paranoia, EE Times, January 22, 1996 One man's battle, EE Times, March 22, 1994 Damn the torpedoes, EE Times, June 6, 1994 Protecting properly classified info, EE Times, April 11, 1994 DOE to scrutinize fairness in old whistle-blower cases, Albuquerque Tribune, Nov 7 1995 DOE boss accelerates whistle-blower protection, Albuquerque Tribune, March 27, 1996 DOE doesn't plan to compensate 'old' whistle-blowers with money, Albuquerque Tribune September 27, 199

1 0

Best online casino odds
by Gambler＠msn.com 17 Dec '03

17 Dec '03

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> The best odds and easy cashier options at any online casino is at: <P> <A HREF="http://www.starluck.com/cgi-win/ad/merchants.exe/vendor-a30 4">Virtual Casino</A> <BR>Great games, graphics, and sound too.</HTML>

1 0

US Rights Violations
by John Young 17 Dec '03

17 Dec '03

We offer Amnesty International's devastating critique of US human rights violations, due to be released in hardcopy tomorrow: http://jya.com/usa-rfa.htm (365K) It recounts in voluminous, documented, gruesome detail what American justice is truly like in prisons, jails, precinct houses, on the highways and in the streets. After this it's going to difficult for the US to preach human rights violations to other countries.

2 1

Best online casino odds
by Gambler＠msn.com 17 Dec '03

17 Dec '03

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> The best odds and easy cashier options at any online casino is at: <P> <A HREF="http://www.starluck.com/cgi-win/ad/merchants.exe/vendor-a30 4">Virtual Casino</A> <BR>Great games, graphics, and sound too.</HTML>

1 0

Re: Camel
by Neels Kriek 17 Dec '03

17 Dec '03

OK, here is my solution ;) Load 1000 bananas on the camel. Make him walk 990 miles. 10 banana left. Get 10 unemployed people. Make them carry 200 bananas each. Since no-one can eat more than 1 banana per 10 miles(at a sustained rate anyways) make them walk 990 miles. 1010 bananas left. Load 990 on the camel. Each guy has 1 banana left for the last 10 miles. Camel eats 10 bananas on last 10 miles. QED 990 bananas on the other side. or Make camel walk a mile. Make him stop. Walk back and carry all 2000 bananas left to current spot. Put one banana on camel to get 1000 again. Make him walk 1 mile again and repeat. At other side unload 999(or 1000 if you were clever enough to carry the extra one that the camel eats on the last mile in your pocket) bananas. Leave one on the camel for the mile back. Walk camel back a mile . load 1000 bananas. Unload 999 bananas. You should now have 1998 bananas. or Buy a damned 4X4. We all know camels don't like bananas and would rather bite you than carry 1000 of them. Regards ;)

1 0

EVEN MORE FREE PORN: STUFFED HAS 10 LINKS TO 100S OF FREE PICS, NEW EVERY DAY
by STUFFED TUESDAY OCTOBER 6 1998 17 Dec '03

17 Dec '03

+ 30 SUPERB, HI-RES, HOT PHOTOS + 5 SUPER SEXY STORIES + FOOD FETISH DELIGHT + ANAL ARCHIVE + NIMROD'S HAREM + EXOTIC EROTICA + SHOWING PINK + JEN'S PALACE + VIRGIN PUSSIES + ASIAN LESBOS + DANCING QUEENS + SEX HAPPY + BONUS PIC 1 -> http://stuffed.net/home/28577.htm + BONUS PIC 2 -> http://stuffed.net/home/22247.htm + BONUS PIC 3 -> http://stuffed.net/home/25191.htm + BONUS PIC 4 -> http://stuffed.net/home/6876.htm + BONUS PIC 5 -> http://stuffed.net/home/26272.htm + MUCH, MUCH MORE! ----> http://stuffed.net/home/ <---- STUFFED HAS EVOLVED OVER THE LAST COUPLE OF MONTHS THANKS TO ALL YOUR FEEDBACK. NOW WE HAVE BOUGHT IN THOUSANDS MORE HI- RES PHOTOS FROM TOP SEX PHOTOGRAPHERS, WE SCOUR THE WEB EACH DAY TO FIND LINKS TO SITES WITH 100S MORE FREE IMAGES, AND THERE'S SO MUCH MORE, SUCH AS THE FIVE EXTRA BONUS PICS YOU GET EVERY DAY NOW, THAT YOU WON'T FIND ON THE STUFFED WEB SITE, THEY ARE EXCLUSIVE TO OUR SUBSCRIBERS! AND THERE'S SO MUCH MORE TO COME, SO KEEP COMING BACK FOR MORE EACH DAY! This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/home/ <----

1 0

RE: importance of motivation
by Brown, R Ken 17 Dec '03

17 Dec '03

Mark Hahn wrote: >>using your head to think any thoughts we don't want thank. Good Drugs >>keep you addicted to your job, your country, your government, your boss. >>The Best Drug is the mortgage. > If you want to condemn the whole damn system we call society, > then the "Best Drug" is to have children. See if that doesn't > change your perspective a bit. But the poster mentioned a daughter... Ken Brown

1 0

Re: odd comment
by Michael Motyka 17 Dec '03

17 Dec '03

Sounds like a potential urban legend or at least a misnaming of some comprehensible system. > A friend of mine works in an IT department > for a major tech company. Three of the people in > his department were just transfered to their new contract. > > They are rewiring some of the network for a highway system > in California that monitors for explosives. > What are the techniques that could be used for detecting conventional materials? I can't think of anything likely to work through a vehicle panel on a highway at 65 mph. Doesn't mean there isn't such a system. I guess a neutron counter or other radiation detector might be useful for spotting the scary new SUPERTERRORISTS. > On top of the poles are two > metal boxes about the size large bread boxes. > > Now any idea what those boxes are? > If they have plastic windows they could be speed measurement devices. I'd be interested in driving by some, are there some examples that are closer to Pleasanton? You can always ask your highway department representative - they might talk before thinking even if it's something TOP SECRET. Mike

1 0

RE: Another potential flaw in current economic theory... (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

Jim Choate > Wrong. Socialism is the belief that property is best managed > and owned by the government. Utopian socialism/communism believed that property is best managed and owned by the people -- the people as some abstract collective entity aka proletariat aka BORG. The dictatorial government is the agent of the proletariat to abolish individual rights and transition to communist utopia where government is no longer needed. Of course actual socialism in mixed economies and communism in command economies bear little resemblance to Marx's delusions. Matt

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

Jim Choate wrote: > Remember, you can't dominate a market that can't be saturated > and you can't saturate a local market unless you find a > mechanism to keep outside competition from moving in. Currently > this is only possible in very strongly regulated markets in > control economies. By golly Jim you almost got it. The only problem is your statement that one can dominate "saturable" markets without some artificial "mechanism." If you mean dominate by market share, then sure that is possible. But that in itself is not bad, ALCOA dominated via low prices and high efficiency. Domination in the bad sense is to be immune from the laws of supply and demand, and hence have arbitrary power over the market -- that is the definition of a coercive monopoly. You will find that that is not possible without an artificial barrier to competition. > Though, it does occur to me that the fact that OS/2 has a > stronger faction in Europe than in N. and S. America in > relation to Microsoft may be an indication that continental > saturation is possible. The conclusions I would draw from that are IBM as the former market giant had a very strong International infrastructure, channels and reputation. Since the US market is the principle industry producer, it was more competitive and less dominated by IBM. Microsoft, therefore, had an easier time in an already competitive US market than breaking in overseas. They also had the underdog phenomenon going for them here, the local competitive market wanting to break IBM's dominance. The fact that OS/2 utterly flopped in the US and found some adopters overseas is credit to IBMs international reputation and little else. Matt

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

Brown, R Ken wrote: > Jim can look after himself, but the aircraft industry is > certainly monopolistic. There are only 2 serious players > in the market for large long-haul airliners, Airbus..and > Boeing First of all the majority of the market to which they are selling is anything but free. Each government has a monopoly on their military, and many have a monopoly on their commercial airlines as well. Government aren't bound by the same survival rules as consumers, they are able to irrationally spend as the can simply extort more money. Despite this very strong market distortion, competition for defense contracts had been rather competitive in the US, with the recent consolidation due to shrinking demand (note they cannot seek other markets freely to compensate). And despite the strong market distortions, Boeing makes a very slim profit margin on commercial aircraft (~3%) competing with Airbus. The private aircraft industry has had a terrible time not for lack of demand, but because of rampant irrational and overzealous liability claims. This has created a very limited number of vendors and highly inflated prices. Again, none these are natural effects of the free market. > The real problem with monopoly or cartel is not high prices > - many monopolies choose to charge low prices - it is lack > of freedom. So you would force people to pay higher prices so can have more choices? You would force people to support inefficient competitors? > A monopolisitic supplier of some good has a measure > of political power. Political power gums at the mean end of a gun, what political power do monopolies have and how? Matt

1 0

RE: Another question about free-markets...
by Matthew James Gering 17 Dec '03

17 Dec '03

Jim Choate wrote: [govt subsidies to transcontinental railroads] > Only *after* it was clear that these companies could not > do it themselves because of a lack of sufficient traffic > to support the business. So if the market could not support it, who paid for it and how, who benefited from the distortion and who paid the price? The market demands the most efficient distribution of capital resources, when the government screws with that and screws with the market, the resulting problems (arbitrary coercive power of Western railroads, and severe lack of quality and safety) are because of that distortion, not the market. The government should have *not* intervened. Which is not my point though, my point is the judgements of an uneducated populace and corrupted government to blame this as a natural effect of a free market should not be carried forward, it needs to be exposed and corrected. [oil mineral rights] >> The placement (ownership) of these rights, their value, >> restrictions and enforcement are the result of a free >> market? No, government intervention. > > Actualy no, try buying a piece of land and enforcing the > title *without* registering it at the country seat or its > likes. Which is not a market instrument, it is a government instrument. Government intervention does not necessarily have to be direct and purposeful. Matt

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Brown, R Ken 17 Dec '03

17 Dec '03

Petro wrote: [...snip...] > Other than the Railroads, which have already been shown to > be a government CREATED monopoly, how was the Aircraft > Industry a monopoly? The GARMENT INDUSTRY? > Come on Jim, "Put Up Or Shut Up". Jim can look after himself, but the aircraft industry is certainly monopolistic. There are only 2 serious players in the market for large long-haul airliners, Airbus (explicitly founded and subsidised by government) and Boeing (probably now turning a real profit but in the past cross-subsidised from military spending). Whether or not either of these firms would now exist without government subsidy is unknowable. Whether or not the monopolistic situation would exist if there had been no government subsidy is also unknowable. I do have trouble with the idea of the garment industry being monopolistic. About 2 miles from where I'm typeing this, in Whitechapel and Spitalfields in the East End of London, street after street is packed with small sweatshops, "import export" businesses, tiny fashion houses [...snip...] >>All working for about 5 or 6 companies who actlualy marketed and >> distributed the items. Just get a Dallas Texas phone book for >> that period (it's a distribution hub for the clothing/garment industry >> even today). > That is still 5 or 6 companies in competition. It looks as if the only monopolies you recognise are global ones where one big company supplies most of the market for some good, worldwide. At that level there are damn few monopolies - MS, Boeing, the Murdoch empire. But a monopolistic situation develops when one supplier, or a group of suppliers in cartel can control the market in some locality. Like the breweries in Britain a few years back - there were (and are) hundreds of breweries but the "big six" had carved up large areas of the country between them. So if you went to a bar in one area you got Watney's beer, in another, Bass. The real problem with monopoly or cartel is not high prices - many monopolies choose to charge low prices - it is lack of freedom. A monopolisitic supplier of some good has a measure of political power. They can make people behave in ways they might not otherwise behave. A monopolisitic employer of labour has *huge* political power.

1 0

Yet Again Another Snake Oil Vendor
by William H. Geiger III 17 Dec '03

17 Dec '03

Below is a message I posted to the SpyKing mailing list a few months back when Jaws decided to spam the list with their crypto "challange". >From: "William H. Geiger III" <whgiii(a)invweb.net> >Date: Wed, 03 Jun 1998 14:41:24 -0500 >To: SpyKing <spyking(a)con2.com> >In-Reply-To: <3.0.3.32.19980601033850.0355c350(a)admin.con2.com> >Subject: POST RE: $5,000,000 Encryption contest -----BEGIN PGP SIGNED MESSAGE----- In <3.0.3.32.19980601033850.0355c350(a)admin.con2.com>, on 06/01/98 at 02:38 AM, SpyKing <spyking(a)con2.com> said: >15)From: SpyKing(a)thecodex.com >Subject: $5,000,000 "Break the Code" Encryption Contest >Friday May 29, 3:00 pm Eastern Time >Company Press Release >SOURCE: JAWS Technologies Inc. >JAWS Launches $5,000,000 ``Break the Code'' Encryption Contest <sigh> Yet another Snake-oil post. Such challenges like this are really meaningless and are designed as a publicity stunt to gain some free press rather than as a legitimate test of the strength of the algorithms involved. The *only* way to test the security of an algorithm is through a process of peer-review of the source code. Until JAWS Technologies decides to go through this process I would stay far away from this and any other products they may produce. It seems quite clear that they have little to no understanding of the cryptology & security fields. I don't know what it is about the list but it seems that we must endure these snake-oil posts on a periodic basis. While I have replied here to many of these snake-oil advertisements I have yet to see one of these companies post a rebuttal (to the list or privately). I have submitted a copy of the Snake-Oil FAQ to SpyKing requesting that he publish it to the list (it's a little long so I don't want to post it directly). It can also be found at: http://www.interhack.net/people/cmcurtin/snake-oil-faq.html Security & Encryption are the big buzz-words in the computer industry and many companies are looking to cash-in on it. Be very wary of Johnny Come Lately's who overnight become cryptology "experts". - -- - --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html - --------------------------------------------------------------- Tag-O-Matic: I love running Windows! NOT! -----BEGIN PGP SIGNATURE----- Version: 2.6.3a-sha1 Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNXNVXo9Co1n+aLhhAQHr5gP/aghoKztlVP6EjX0FU2v5rkBdu5FbyEWR 6aR/DdOvVYphIIQMk1O1Twy7ZasVUW/dSBPl7uT1/6yfw/NzSonyztmw+WR5d4lg rWOZ8Y1JjbXvLzH3RzA+LXZbShZ/Z5Smdb0yybvldHogo8pYDNeeJ5ZtMJuSgYfI VkoA4SFBDoY= =0m9E -----END PGP SIGNATURE----- Tag-O-Matic: You're throwing it all out the Windows! ----------------------------------------------------- -- End of forwarded message ----------------------------------------------------- Tag-O-Matic: If at first you don't succeed, work for Microsoft.

2 1

FINAL REMINDER: DCS-NY: October 13 Meeting: Stu Feldman of IBM
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text To: "recipient list suppressed" <perry(a)piermont.com> Subject: FINAL REMINDER: DCS-NY: October 13 Meeting: Stu Feldman of IBM Reply-To: dcs-ny-rsvp(a)piermont.com Mime-Version: 1.0 (generated by tm-edit 7.108) From: "Perry E. Metzger" <perry(a)piermont.com> Date: 06 Oct 1998 15:03:08 -0400 Lines: 105 Sender: owner-cryptography(a)c2.net [If you know of people who may be interested in this meeting, please feel free to forward this message to them.] FINAL REMINDER: The second luncheon meeting of the Digital Commerce Society of New York (DCS-NY), will be held on Tuesday, October 13th at 12:00. If you are interested in attending, please RSVP and send in your check (as explained below) IMMEDIATELY. If we don't _receive_ your check by Friday, we cannot guarantee that we can seat you. (Normally I wouldn't be sending out a reminder this late, but we've had a large influx of inquiries in the last 24 hours.) This Month's Luncheon Speaker: Stuart Feldman, IBM Institute for Advanced Commerce, IBM T.J. Watson Research Center Topic: Future Directions in Electronic Commerce Stuart Feldman will delve into a half dozen major themes for long-term research in electronic commerce. These areas will take years to resolve at a research level and even longer to achieve full impact in the world economy. They include privacy, the evolving marketplace on several time scales, the rise of dynamic businesses and electronic haggling, improved relationships to customers, and the systems underpinnings needed to support the vast new opportunities and capabilities of electronic commerce. Stuart Feldman is Director of IBM's Institute for Advanced Commerce. The Institute is dedicated to creating new technologies for support of e-commerce as well as pursuing fundamental issues in e-commerce. He is also the author of the original "make" and "f77." WHAT IS DCS-NY? As some of you probably know, Robert Hettinga has been running a group called the Digital Commerce Society of Boston for over three years. DCSB meets once a month for lunch at the Harvard Club in Boston to hear a speaker and discuss the implications of rapidly emerging internet and cryptographic technologies on finance and commerce -- "Digital Commerce", in short. The Digital Commerce Society of New York (DCS-NY) is a spin-off of DCSB. We intend to meet the second Tuesday of each month for lunch at the Harvard Club in New York, and conduct meetings much like those of DCSB. Our organizing meeting in September was attended by a wide variety of professionals involved in the business, technical and legal sides of the emerging world of digital commerce. If you are interested in attending our next luncheon meeting, please follow the directions located below. If you merely wish to be added to our e-mail meeting announcements list, you may send your e-mail address to "dcs-ny-rsvp(a)piermont.com". Perry PS We would like to thank John McCormack for his invaluable assistance in procuring the venue for our meetings. ---------------------------------------------------------------------- HOW TO RSVP: The meeting will start at 12:00 noon on October 13th at the Harvard Club, which located at 27 West 44th St. in Manhattan. The cost of the luncheon is $49.00. To RSVP, please: A) Send a check for $49.00 (payable to "The Harvard Club of New York") to: Harry S. Hawk DCS-NY LUNCHEON Piermont Information Systems, Inc. 175 Adams St., #9G Brooklyn, New York 11201 Please include along with your check: 1) The name of the person attending 2) Their daytime phone number 3) Their e-mail address B) Send an email message to dcs-ny-rsvp(a)piermont.com indicating that you have sent your check, so that we can inform the Harvard Club of the number of people who will be attending. Please note that the Harvard Club dress code requires jacket and tie for men and comparable attire for women. If you have special dietary requirements, please check with us by email before you RSVP. Making final arrangements for our room requires that we have a good idea of how many attendees we will have. Because of this, it is very important that you RSVP quickly so that we will be able to get a larger room if necessary. We are looking forward to seeing you! ---------------------------------------------------------------------- Perry --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Matthew James Gering <mgering(a)ecosystems.net> > Subject: RE: GPL & commercial software, the critical distinction (fwd) > Date: Tue, 6 Oct 1998 13:20:41 -0700 > The only problem is your statement that one can dominate "saturable" > markets without some artificial "mechanism." Who said anything about 'artificial'? You have a sneaky habit of sticking terms in there where they don't go hoping somebody won't catch it. We're talking a free-market, there are *only* two participants; provider and consumer. If I allow 'artificial' in there then there is the explicit assumption that a third party is now involved. I won't accept a bastardization of free-market in that manner. If you want to expand your argument by the injection of these spurious terms (they aren't relevant to my argument) feel free. Be warned I will continue to point out the distinction vis-a-vis the impact on conclusions. > If you mean dominate by > market share, then sure that is possible. I mean *dominate* the market. Quit sticking extra terms in there trying to subtly change the meaning. I promise you I will notice so you can quit now. > ALCOA dominated via low prices and high efficiency. Domination in the > bad sense is to be immune from the laws of supply and demand, and hence > have arbitrary power over the market -- that is the definition of a > coercive monopoly. No, that is the definition of monopoly. Now what and how they got and retain that position may invoke coercion but it *isn't* a requirement for monoplies by definition. Don't try to confuse method with type. > You will find that that is not possible without an > artificial barrier to competition. Demonstrate please. The problem with this view is that it implies that given sufficient time *any* market strategy will fail. In other words there is no best or efficient strategy for a given market. In the past when this has been brought up I've asked for an explanation of how this dynamic works and specificaly what prevents such best-of-breed examples from existing. I'm still waiting for such an explanation. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

Sad news ... (... or not ;-))
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: Somebody Date: Tue, 06 Oct 1998 18:02:28 +0100 To: Robert Hettinga <rah(a)shipwright.com> Subject: Sad news ... Mime-Version: 1.0 Hi Bob, I figured you might be interested in today's news: DigiCash Amsterdam has officially gone bankrupt. Even though anyone can access the news (although probably not yet in electronic form), I'd appreciate if you don't mention me as being the one who told you this. I take it that the details will be brought to light in the coming few weeks. Anyway, I believe this is very bad news for all those who believe in "bearer certificates" or whatever one might like to call them. <Somebody's .sig> --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

2 2

Garment industry.....
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Sorry, I'm going to have to back out for the next few days because of work load (I've barely had time to read all the traffic), but ... To answer a qeuestion about the garment industry being monopolistic. Go back, read the original post on that issue *AGAIN*. Pay particular attention to the *PERIOD OF TIME I SPECIFICALY MENTIONED*. If you actualy read it all the way through, and slowly so you can comprehend it, you will find that your protestations about the industry being monopolistic *today* are irrelevant. My point was focused on 60-80 years *IN THE PAST*. In particular the 1920's and 30's. (If you're going to scream "foul", at least be at the correct yard line on the field) My mention of the phone book implied you'd have to go to the library and get a *PERIOD* phonebook (that was my mistake, any true anarcho-capitalist or free-market maven is not likely to actualy use real-world examples - they're so messy). And yes, they had phones then, you could even have them in any color as long as it was black. Though the point *CAN* be made that even today sweatshops are continouly being found in places like Los Angeles, Houston, Chicago, etc. Just check your local newspaper. The reason that these are important is that they are indicators of a tendency of manufacturers to cut costs/overhead to the bone when left to their own wiles. This is a *VERY* negative indicator for those who feel that even an unregulated garment industry can exist in a regulated market, let alone a free-market. Again, businesses are run by people with the express intent of making money, in many cases at whatever cost to their employees and society as a whole. With this sort of psychological tendency the argument that free-markets will work is flawed. A commen comment in business classes and boardrooms today is to 'dominate the market'. That means *eliminate competition*. *THAT* means create a monopoly if at all possible and the laws to the contrary (which I hae yet to see anyone bring up a priori in these situations) be damned. Of course it should be pointed out that it's good legal and business practice *NOT* to mention these so that it can't be used against one as a premeditated intent. Something Microsoft seems to have forgotten in their raft of internal memo's about specificaly kludging DrDos. Another point I made several weeks to a couple of months ago regarded companies who *help* their competition in order to limit their ability to enter into specific markets as competitors seems to have born fruit. Over the last few weeks several internal documents from Microsoft were released (check the CNN and other archives) which seem to indicate a clear intent by Microsoft to *help* Novell and Apple with technology with the express intent of keeping them out of niche or target markets as competitors. Economic slight of hand... Course that isn't going to stop you from wailling for the dead (though could you keep it down so I can sleep since the temperature around here has finaly broken and it's not 90F at midnite). ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: "Brown, R Ken" <brownrk1(a)texaco.com> > Subject: RE: GPL & commercial software, the critical distinction (fwd) > Date: Tue, 6 Oct 1998 06:37:43 -0500 > I do have trouble with the idea of the garment industry being > monopolistic. About 2 miles from where I'm typeing this, in Whitechapel > and Spitalfields in the East End of London, street after street is > packed with small sweatshops, "import export" businesses, tiny fashion > houses This is perfect if you don't mind being a participant... Could you get a phonebook and make a list of the sweatshops. Enumerate them and then select 10% (if that isn't too many) and find out how many and to whom they sew their garments for? > It looks as if the only monopolies you recognise are global ones where > one big company supplies most of the market for some good, worldwide. > At that level there are damn few monopolies Remember, you can't dominate a market that can't be saturated and you can't saturate a local market unless you find a mechanism to keep outside competition from moving in. Currently this is only possible in very strongly regulated markets in control economies. This implies that, at least today because of communications and transportation improvement, only markets that are global (though it might also work on a national level) can be dominated. That is an interesting aspect I hadn't hit on so far. I'll add it to the mix and see what brews up... Though, it does occur to me that the fact that OS/2 has a stronger faction in Europe than in N. and S. America in relation to Microsoft may be an indication that continental saturation is possible. Might be explained by the fact that most businesses are continental and not international in scope of sales. I've got to go back to work now...I'll check in as I get the chance... ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Free Market Monopolization Theory...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Here is the note that I made regarding the saturation of free market economies. Note that this is several months old and I haven't been diligent in keeping it fully up to date... Forwarded message: > X-within-URL: http://einstein/ravage/free.market.monopolization.html > This is the theory in its current working version: > > An unregulated (free-market) economy will inherently monopolize when, but > not necessarily only if, the following are present: > > - the commen assumption by current free market models that consumers > are rational is irrational. A consideration of succesful marketing > mechanisms and human psychology will clearly demonstrate that > consumers are at best partialy rational. This is the fault in all > anarchy models (eg crypto-anarchy), they assume in an axiomatic > fashion that all participants will cooperate for not only their > individual best interest but the cooperatives best interest without > sufficient recognition that these may in many cases be in conflict. > It is the same failing every form of government without a clear and > proscribed list of individual and state rights and limits has, the > assumption that some minimal set of behaviours or goals will satisfy > all participants in all cases. The theory 'What is best for all is > best for the one' is false. > > - the importance of cooperation for mutual benefit that is axiomatic > in current free market theories is false. Mathematicaly the prisoners > paradox provides maximum payoff when defection occurs at a relatively > high rate and in a random pattern. A primary goal of any business is > not to ensure the survival of itself and it competitors but rather to > eliminate competition through more succesful strategies. A rational > consumer will act irrationaly at times because it is in their long > term best interest. Therefore the distinction between rational and > irrational consumers is false. > > - the market is saturated, in other words the number of consumers at > any given time are equal to or less than the service providers ability > to provide that service (or resource). This means the long-term survival > of firms is a function of retained market share and raw resource share > control/ownership. > > - the technology and/or start-up costs are high in material and > intellectual factors. This minimizes the potential for new providers > to start up. Providers will also require non-disclosure and other > mechanisms to reduce sharing of information and cross-communications > except under controlled conditions. Expect an increase in certifications > and implimentation standards required to do business with the more > succesful of these providers. > > - an individual or small group of service providers have a small but > distinct efficiency advantage in technology, manufacturing, or > marketing. Over a long-enough time this market advantage will grow > and as a result widen the 'technology gap' between firms. > > - expect the most efficient firms to share their profit with the > critical intellectual contributors. This further reduces the > problem of cross-communication and new provider start-up. > > - expect to see the more successful providers to join in co-ops with > the less succesful providers. This will be under the surreptitous > goal of 'developing technology'. It's actual goal will be to cause > these smaller firms to commit resources to such enterprises. As soon > as it is strategicaly advantagous the primary providers will break-off > the co-op. This has the effect of further reducing the ability of the > smaller providers to react in a timely manner to market changes or > develop new technology due to resource starvation. > > - expect to see the less efficient providers to combine in an effort > to reap the benefits of shared market share and resources. Unless > this partnering provides a more efficient model and there is sufficient > time for that efficiency to develop these new providers will eventualy > fail or be joined with other providers. > > - expect to see the primary provider buy those less efficient providers > that don't fail completely. These purchases will be as a result of > some new or unexpected technology that will significantly increase > the market share of the primary provider -or- it will be with the > goal of eliminating this secondary technology and forcing those > market shares to do without or use the primary providers technology. > > - initialy prices for services will be low to promote purchasing but > as providers obtain larger market shares their prices will increase > over time and out of step with inflation and other market forces in > order to widen the profit gap. The strategy is one of 'use it or > starve'. > ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

Brown, R Ken wrote: > Same applies to education - I might be able to pay for my > daughter to go to school but we want everybody else's kids > to go to school as well because my life is better if they do. > So we pay for it through tax. "SHOULD EDUCATION BE COMPULSORY AND TAX-SUPPORTED, AS IT IS TODAY? The answer to this question becomes evident if one makes the question more concrete and specific, as follows: Should the government be permitted to remove children forcibly from their homes, with or without the parents' consent, and subject the children to educational training and procedures of which the parents may or may not approve? Should citizens have their wealth expropriated to support an educational system which they may or may not sanction, and to pay for the education of children who are not their own?" -- Nathaniel Branden Absolutely not. But even if you take a strong socialist/statist position and answer "yes," how can you justify expounding on the evils of coercive monopolies, their arbitrary power, abuse and inefficiency, and then at the same time make Education, one of the most important services to society, a coercive monopoly?! This simply does not make sense. Education needs to be brought into the marketplace so it can be objectively evaluated. VALUED. As an entitlement, education is not valued as it should be, and as a monopoly there is no leverage to choose standards which to value, to discriminate service. The educational system has failed worse than any other industry, not for lack of supply and demand, but for lack of free competition. Matt

1 0

Re: Echelon's Origin
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

John Young <jya(a)pipeline.com> writes: >The NSA released during the summer a Top Secret memorandum by Truman in >1952 establishing NSA as the lead COMINT agency for the USG: Located nearby at http://www.nsa.gov:8080/docs/efoia/released/jfk.html are documents related to the Kennedy assassination. Check out the COMINT reports, they were getting information from an awful lot of interesting sources, many of which appear to be telegrams or telexes or similar communications. The Truman memo may show the background behind Echelon, but these things show it (or at least its ancestor) in action. Wow. Peter.

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

> Political power gums at the mean end of a gun, what political > power do monopolies have and how? err...*comes* from the mean end of a gun. ;) Matt

1 0

Re: Garment industry.....
by Information Security 17 Dec '03

17 Dec '03

> From: Jim Choate <ravage(a)einstein.ssz.com> > > To answer a qeuestion about the garment industry being monopolistic. Zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz.

1 0

IP: SOROS: Must have economic "third way"
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: SOROS: Must have economic "third way" Date: Tue, 06 Oct 1998 08:56:17 -0500 To: believer(a)telepath.com Source: The London Independent U.K. Section http://www.independent.co.uk/ Soros calls for new cash restraints GEORGE SOROS, one of the world's leading financiers, launched a scathing attack yesterday on governments and bankers alike for causing a financial crisis so severe that it could topple the world's economic system. "I am very concerned because it will lead to basically the breakdown of the global capitalist system," he said. Coming from a pre-eminent global capitalist, his words are all the more striking because he advises new restraints on the movement of international cash. He spoke as the annual meetings of the International Monetary Fund and the World Bank wrestled with a financial crisis that has wrecked Asia and Russia and now threatens Latin America. Mr Soros, in his speech and in a book to be published next month, attacks free marketeers - or "market fundmentalists," as he calls them - for weakening the world financial system, impoverishing developing countries and threatening democracy itself. Governments have botched their efforts to tackle the crisis. "The authorities have failed to control the situation," he said. "The G7 or the G whatever should have been shut into a room and hammered this out." Mr Soros said that in the future, limits would have to be put on the global casino to prevent it from destabilising states and societies. "Some restraints on capital movements would have been very useful to protect countries against the onslaught of the wrecking ball," he said. "The free movement of capital, totally free flow, is not advisable." Mr Soros is chairman of Soros Fund Management, a leading financier who speculated against the pound - and won handsomely - in 1992. But he has become increasingly convinced that pure capitalism is just as dangerous to the world as communism, and has become a leading advocate of an economic third way. "We have been living with and basing ourselves on a false model of how financial markets operate," he said. Markets are capable of tipping into instability so severe that it threatens the roots of democracy itself. "It is market fundamentalism that has rendered the global capitalist system unsound and unsustainable," he writes in his book The Crisis of Global Capitalism, a section of which was released yesterday. So great had financial instability become that "market fundamentalism is today a greater threat to open society than totalitarian ideology", said Mr Soros, who grew up under first Nazi, then Communist rule in Hungary. "Market forces, if they are given complete authority even in the purely economic and financial arenas, will produce chaos and could ultimately lead to the downfall of the global democratic capitalist system." The impact had been particularly hard on developing nations forced to follow the course set by western institutions and banks, he said. "Conditions have tilted too far towards the countries at the centre of capitalist system to the detriment of countries at the periphery. These conditions are unsustainable." The only way to recover from the present crisis was to organise flows of capital back into the developing countries, he argued, but so far the IMF and western governments had been unwilling to meet this challenge. City staff braced for tidal wave of sackings as banks cut back Morale among City high-flyers has reached rock bottom as they brace themselves for a wave of redundancies over the coming weeks as a result of the global financial crisis. Although redundancies have now, so far, been limited, the fear of real collapse and a return to the austerity of the early 1990's when blue chip firms like Goldman Sachs were laying off staff by the thousand, means conspicuous consumption and optimism are becoming a thing of the past. The latest to feel the chill are staff at Warburg Dillon Reed, one of the City's top securities firms who are braced for substantial lay-offs in the wake of last week's disclosures that the bank's Swiss parent has suffered serious losses from its investment in high risk hedge-funds. Insiders say that Warburg's 4,500 London-based staff expect announcements detailing cutbacks later this week. The latest quarterly survey of the UK Financial Services industry by the Confederation of British Industry and consultants PricewaterhouseCoopers yesterday showed business confidence among financial sector firms falling to its lowest for eight years. Firms which have already announced lay-offs since this present bout of turmoil hit financial markets include ING Barings, Robert Fleming and Japanese firms Daiwa and Nikko. One of the larger firms Merrill Lynch has already cancelled its Christmas Party and ordered staff to cut back on overseas travel, entertainment and the use of mobile phones in an attempt to save £150m this year. The firm lent billions to high risk hedge funds. Jobs cuts are expected to follow. It is widely feared that at least one big international bank could go under because of losses to these highly speculative investment operations despite last month's £2.4bn bail-out of Long-Term Capital Management by a consortium of big international banks. With nervous investors sitting on their hands, traders have had more time to spend in City drinking haunts to drown sorrows and swap tidbits about the latest bank to hit trouble. The cutbacks are likely to be even more painful this time round because of the speed with which this crisis has hit. Many firms were still out there trying to recruit until late into August, pushing up salaries for some categories of staff to stratospheric levels. Now those expansion plans have gone on hold. Prestige office developments in the Square Mile are being shelved as demand for space has vanished overnight. "First to rise, first to go," said Joseph Toots, a stockbroker, sipping a glass of zinfandel in a Broadgate winebar. "My job may be a trifle insecure at the moment, but who knows, lets wait until Christmas." Mr Toots knows his bonus which last year was "definitely six figure", will be minimal this time around. "Good thing I bought my house outright," he said. But it is not just sports car dealers and Dom Perignon stockists who are monitoring the situation with gloomy eyes. The downturn in the City is hitting at a time when High Street shops are already deserted as a result of the huge rise in the cost of borrowing since last year. Contrary to common perception the City is not the place where everybody earns a half million pound bonus; many thirty-somethings are pushing themselves to the limit, earning what sound like fat salaries until you hear their commitments. It is these middle-class, high-income people, whose wealth is more a prospect than a reality who may be hit the hardest. "We are going to have to have a serious rethink about everything," said Julia, a consultant. She says she and her husband are delaying the day when they will have to sit down and face financial reality. "We earn almost £100,000 between us, but with the mortgage and the school and the nursery fees (they have three small children) we're not going to survive like this." She says she was depending on her share portfolio to cover the mortgage on their three bedroom terraced house in Islington and it doesn't anymore. "The house may have to be sold," she says, "and god knows how we will afford the school fees." It may sound like a yuppie problem, but smaller things have been known to drive people into domestic conflict. Isobel Thacker, a banker, said the same problem has just made her cancel plans to move house. "I can't afford to move anymore, we're all staying put," she said. ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

Re : IP: Microchip implants to foil VIP kidnaps
by Michael Motyka 17 Dec '03

17 Dec '03

> ITALIAN dignitaries who fear being kidnapped are having > microprocessor homing devices planted in their bodies so police can > track them down if they are abducted. > Where can I buy one of these things for my cat? My master password is tatooed inside her upper lip. This brand new GPS system works through a metal barrier? For transport just tuck the subject in the back of an aluminum cargo truck and for long-term storage use a metal wharehouse. Contrary to popular belief there is not a technical solution for every problem. How about -well-paid- bodyguards? Ask an engineer to solve a problem you get Tom Swift and his amazing electrogenerating geodetector. Ask a politician to solve a problem you get a law. Ask a doctor to solve a problem and he'll either cut or medicate. Ask a soldier to solve a problem... And so on... I suppose ridiculous solutions are fine as long as they make money or fame for someone.

1 0