December 2003 - cypherpunks-legacy

Re: Finjan "SurfinGate"
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Thu, 21 Nov 1996 12:10:51 -0600, Mike McNally wrote: >Check out http://www.finjan.com and the stuff about "SurfinGate". The >software supposedly can perform an on-the-fly inspection of a Java >applet or ActiveX control, and then apply a signature to it along with >a "safety" level qualifier to feed into a configurable policy mechanism. > >Any ideas as to how you can look at an ActiveX control and determine >whether it's safe or not? You can't. Anyone who claims to be able to do so is betting their scanning ability against the collective programming skill of hundreds of brilliant-but-twisted programmers/hackers. Remember CHK4BOMB? The old DOS program that would dump strings from an EXE so you could look for things like "Happy birthday yoshi"? They started encrypting and adding polymorphing and stealthing and . . . Now you could write a program that would scan for more 'obvious' attacks but it will probably be a continual catch-up game. You don't even have the ability to do checksumming of existing files (like you do w/virii). # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0

Re: Database law... silver lining??
by Greg Broiles 17 Dec '03

17 Dec '03

At 04:44 AM 11/22/96 GMT, you wrote: >Real-To: "Richard L. Field" <field(a)pipeline.com> > > Should a database protection law such as HT 3531 be enacted in the U.S., >it just may turn out to be the best weapon yet for the protection of >personal data. Why shouldn't a "database" be interpreted to include an >individual's personal data? All that is required is that it be "arranged in >a systematic or methodical way". Heck, that's not so hard. And a "database >maker" isn't necessarily Lexis (the compiler of P-TRAK) and friends, it is >each individual who originally made a "substantive" (i.e., lifetime) >investment in the collection of the contents of his personal database. Cute, but any such proposal is almost guaranteed to allow for independent creation from a non-database source - e.g., warranty cards, info extracted from you when you ask for credit, public records, etc. For example, one comment to Article 3 of the proposed WIPO treaty on sui generis protection of databases provides: "3.02 The protection provided does not preclude any person from independently collecting, assembling or compiling works, data or materials from any source other than a protected database." (see <http://www.loc.gov/copyright/wipo6.html> for more.) It's very unlikely that Congress (or the PTO) intends to do anything that'll screw up what's already working well for big database publishers. Your theory is similar to a patent flavor for databases, while the proposals floated out so far are much more like copyright - e.g., independent creation is OK, but copying is not, even with wide public distribution, and long protection times. With patent, independent creation is not OK, copying (the information, not the device) is encouraged/allowed, and protection time is short. [Friday, 11/22, is the deadline to submit comments to the PTO asking them to withdraw consideration of the WIPO database treaty from the conference in Geneva. (Or encouraging them to submit it, if that's your opinion.) Comments can be sent to Mr. Keith Kupferschmid at diploconf(a)uspto.gov.) -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

re: sci fi
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:50 PM 11/21/96 -0800, John Anonymous MacDonald wrote: >Without a doubt contemporary SciFi authors such as Vinge and Stephenson have produced >great thought provoking works. Always a good read. > >But sometimes I'm drawn back to the rollicking rampages of EE Doc Smith or the playful >frollicks of Harry Harrison. While not presenting a plausible vision of our future >they do offer a significant amount of enjoyment. Pure brain candy! For absolute brain candy, I recommend "Star Smashers of the Galaxy Rangers". EE.Doc Smith meets the Hardy Boys. The ending I had to read twice... >So will some exceptionally creative sort spend 3 or 4 hundred pages exploring >BlackNet and the future of global networking? We can only hope. >Or has anyone looked at what has happened to trivial networks like >IRC's EFnet to see a potential model for how global networking will become >balkanized under bandwidth constraints, server cycle shortages, >and over worked sysadmins? One physical connection and many virtual, >private networks with limitted interoperability and crossover. The internet of >the near future may not be the open paradise it is today. The bandwidth will increase and people will find bigger and better ways to chew it up. Governments will make bigger and bigger claims to why their set of petty rule outweigh other governemnts petty rules, increasing fear, uncertanty and doubt in the process. All in all, things will change and life will go on. (Unless we all die and then all bets are off.) >I read in InfoWorld that the Telco Dereg act may destroy the local loop market >for T1 lines from LD COs. As many as 900,000 new T1's may become available at bargain >rates on the order of $40 per month with end point hardware under $700. Watch >PairGain Technologies as they are the leader in this hardware market and have >some real interesting vox/data over twisted pair toys. Mmmm! Bandwidth! I hear of people complaining how much time is spent online. This is going to be a heroin-like fix to those sort of people. (I already have access to a t-1. It can be pretty damn addicting. At least when the rest of the net is willing to cooperate...) I expect that the big winners in the bandwidth wars will be the hard drive manufacturers. Imagine the amount of crap that will accumulate when downloads take seconds instead on minutes (or hours). Buy your stock now! >Sheesh, I start out talking SciFi and end up talking PairGain! I guess the future >is now. Actually the future was last week. Sorry. You missed it. --- | "Remember: You can't have BSDM without BSD." | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

3 2

/dev/random and similar
by Three Blind Mice 17 Dec '03

17 Dec '03

There was a thread here a while back about /dev/random and similar devices for Linux, but I managed to lose the mails and the hks.net archives still aren't working (any news on that?). If someone could tell me where I could find such a driver, I would appreciate it very much. TIA! --3bmice

3 2

RE: Mass-market crypto phones
by Peter Trei 17 Dec '03

17 Dec '03

"Clay Olbon" writes: > If I'm not mistaken (and I've been known to be from time to time :-), cell > phones are already encrypted between the phone and cell tower. He's mistaken, at least for analog cellphones in the US - digital cellphones (just starting to come in now) may have some form of protection. Before a law was passed, it was easy and legal to listen in on cellphones on most scanners and many ham radio outfits (and even some UHF TVs). Now it's merely easy. It's kind of pathetic - I'm sure that the billions lost to cellular fraud far outweigh the value of crimes that the LEA groups have been able prevent by preserving their ability to illegally eavesdrop on cell calls without a warrant. Peter Trei trei(a)process.com (standard disclaimer applies) Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

3 2

RE: Mass-market crypto phones
by Clay Olbon II 17 Dec '03

17 Dec '03

At 09:41 AM 11/22/96 -6, Peter Trei wrote (in part): >It's kind of pathetic - I'm sure that the billions lost to cellular fraud >far outweigh the value of crimes that the LEA groups have been >able prevent by preserving their ability to illegally eavesdrop on >cell calls without a warrant. Lots of TV specials lately on stealing cell-phone codes and cloning phones. Seems to me that this would be ridiculously easy to stop using crypto. As a side issue (related to your comment about banning the listening in on cell-phone calls). I find it pretty amazing that it is possible to make it illegal to listen to signals broadcast over public airways. Yet another way crypto will help society - it will make such laws restricting our freedoms obsolete. Clay >Peter Trei >trei(a)process.com >(standard disclaimer applies) > >Peter Trei >Senior Software Engineer >Purveyor Development Team >Process Software Corporation >http://www.process.com >trei(a)process.com ******************************************************* Clay Olbon olbon(a)ix.netcom.com engineer, programmer, statistitian, etc. **********************************************tanstaafl

1 0

Re: Crypto Bounties
by Ted Anderson 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Regarding the idea of setting up markets (or bounties) for software, I'd like to direct your attention to the Idea Futures scheme. This is currently embodied as a web server at: http://www.ideosphere.com/ideosphere/fx/main.html There is some background on the idea by Robin Hanson who talks extensively about using it as a funding mechanism. In addition there is a whole suit of market claims denominated in fake money. Ted Anderson -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMpXDrgGojC9e/wyBAQGPmgP/fXo4g3w9yefWiQK+Lp2RRxpwjwmmTmr3 b75k0deXV5gX/WdcNccvdFEYcZ5MMTEMQYOeFxhPi0Xr5goIJLJ++oPCRGXAWADQ k98PDgzfM+si8QqT8K7PG+BwejankJsh1npqaJVCE/8dboZBKNFVlsrzg7oGTfw2 adgiDyWD7Og= =pbS3 -----END PGP SIGNATURE-----

1 0

RE: Mass-market crypto phones
by Mullen Patrick 17 Dec '03

17 Dec '03

_______________________________________________________________________________ From: Adam Shostack on Fri, Nov 22, 1996 1:21 > > I'd just like to second what Lucky wrote at the end of his >very nice summation of the crypto phone hardware issues. Eric's phones >have damn good voice quality in secure mode. I should probably make it more clear that my comment referred to price, NOT quality. I'm sure it is a wonderful product (I haven't tried it myself), but I believe the price tag was at or around $1000. My comments on the hardware used was for demostration purposes, not for saying anything was wrong with the design strategy. In fact, I thought it was a perfectly fine strategy, and easy(ish) to implement. Basically, it took the dedicated computer you would need for phone encryption and put it in a cheaper box. To be honest, I thought he had a good idea. I just wouldn't want to pay $1000 for phone encryption. But, it's rare I have conversations where I need that much security. I'm sure the product is worth it; it's just out of my price range. And probably out of the price range of the average user. PM USER ERROR: REPLACE AND STRIKE ANY KEY WHEN READY

2 1

Re: Word Lists
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

this used to be a good site for what you want. YMMV "An anonymous ftp server has been built on wocket.vantage.gte.com which contains the following files in the pub/standard_dictionary directory:" -paul > From cypherpunks-errors(a)toad.com Fri Nov 22 03:04:16 1996 > X-Sender: camcc(a)smtp1.abraxis.com > X-Mailer: Windows Eudora Pro Version 3.0 (32) > Date: Thu, 21 Nov 1996 17:29:07 -0500 > To: kb4vwa(a)juno.com (Edward R. Figueroa) > From: camcc(a)abraxis.com (Alec) > Subject: Re: Word Lists > Cc: cypherpunks(a)toad.com > Mime-Version: 1.0 > Content-Type> : > text/plain> ; > charset="us-ascii"> > Sender: owner-cypherpunks(a)toad.com > Content-Length: 1012 > > At 01:40 PM 11/21/96, you wrote: > :I'm looking for a Large Word List, for a pkcrack program. > : > :Anyone have any idea where to find one, or how to convert a dictionary > :formated file to a wordlist file? > : > :Ed > : > http://world.std.com/~reinhold/diceware.wordlist.asc > > This is the wordlist for Diceware, and I quote, "7776 short English words, > abbreviations and easy to remember character strings. The average length of > each word is about 4.2 characters. The biggest words are six characters long. > > The list is based a longer word list posted to the Internet news group > sci.crypt by Peter Kwangjun Suk." > > This may not be long enough for your needs. > > The address of the Diceware page is > > http://world.std.com/~reinhold/diceware.page.html > > Good luck. > > Cordially, > > Alec > > PGP Fingerprint: > Type bits/keyID Date User ID > pub 1024/41207EE5 1996/04/08 Alec McCrackin <camcc(a)abraxis.com> > Key fingerprint = 09 13 E1 CB B3 0C 88 D9 D7 D4 10 F0 06 7D DF 31 > > >

1 0

re: sci fi
by Alan Olsen 17 Dec '03

17 Dec '03

At 06:48 PM 11/22/96 +0100, Asgaard wrote: >On Thu, 21 Nov 1996, Alan Olsen wrote: > >> For absolute brain candy, I recommend "Star Smashers of the Galaxy >> Rangers". EE.Doc Smith meets the Hardy Boys. The ending I had to read >> twice... > >A rather odd book that I found immensely stimulating is >'Venus on a halfshell' by a Nym (allegedly for Kurt Vonnegut, >who in most of his books under his own name now and then >refers to some hilarious non-existing SF story by this 'author'). Philip Jose Farmer claimed to have written that one. It also brings up an interesting point... Nyms are fairly commonplace amongst the writing community. (Even Steven King wrote under a nym (or two).) In fact there are books listing "nyms of the famous" for book collectors. Payment schemes for authors under nyms are already in place. (For example, I do a monthly column under a nym and they have no qualms about paying me.) DBAs also cover nyms in some respects. Nyms do not have to have a "sinister purpose" (as the feds would like us to believe). I think that they are far more ingraned into the culture than people realize. (Where would this world be without Mark Twain (a nym for Samuel Clemmens), Maxwell Grant (the nym for Walter B. Gibson and others for the Shadow pulps), and the thousands of other nyms that appear in the publishing field?) Just because they are published under a nym does not mean anyone takes their books less seriously or enjoy them less. (In fact, there are many authors that are nyms unbeknownst to the readers. I would say that most nyms in the publishing world are...) --- | "Remember: You can't have BSDM without BSD." | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Re: RE: Mass-market crypto phones
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Sat Nov 23 14:16:14 1996 Peter Trei wrote: <snip> > It's kind of pathetic - I'm sure that the billions lost to cellular fraud > far outweigh the value of crimes that the LEA groups have been > able prevent by preserving their ability to illegally eavesdrop on > cell calls without a warrant. I agree, but to the LEAs, the "value of crimes" includes asset forfeiture "profits," which change that accounting in favor of eavesdropping (in their minds, at least). Of course, cellular fraud is paid for by others who, if they're politically active at all, are likely to demand even more money for the LEAs. A win -- win situation (in their minds, at least). JMR Regards, Jim Ray DNRC Minister of Encryption Advocacy One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me Please note new 2000bit PGPkey & address <jmr(a)shopmiami.com> PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMpdNgjUhsGSn1j2pAQFCbQfOJss3rMfEaWt1kv8oNfiOvwtoaa15s6lc vOVqG9dBMKCI41/x+k8Jzsb4pVvQOu4cXtUvIDOojY3JvmEzO9EVl125o8/pDxZy iNqgpLic8Px0R/uASJCj9T0nnFemRmY+QznaQNMdgLs92nOHuEK6Kfi66lqEGmda CxeuOSdijI+U741bU1a7xjqhc0uwj4ycsjmBB9nOKPSIsbZZYkYcDirT0z/l1F48 aVFphyzek4FjhIaFNFTdGs9YUkJM7hJJ0EfpxeWUeBAfyjkphrATXnW2WGF/iExo 32h6EYgso94VCT7LiWfK20pQ4Mk43i6xemjDdPS+9oS93Q== =eZ9E -----END PGP SIGNATURE-----

1 0

re: [NOISE] sci fi
by Peter Trei 17 Dec '03

17 Dec '03

> Date: Fri, 22 Nov 1996 18:48:22 +0100 (MET) > From: Asgaard <asgaard(a)Cor.sos.sll.se> > To: cypherpunks(a)toad.com > Subject: re: sci fi > On Thu, 21 Nov 1996, Alan Olsen wrote: > > For absolute brain candy, I recommend "Star Smashers of the Galaxy > > Rangers". EE.Doc Smith meets the Hardy Boys. The ending I had to read > > twice... > A rather odd book that I found immensely stimulating is > 'Venus on a halfshell' by a Nym (allegedly for Kurt Vonnegut, > who in most of his books under his own name now and then > refers to some hilarious non-existing SF story by this 'author'). > Asgaard "Star Smashers" first appeared under a wierd 'Generic Book' imprint in the late 70s/early 80s. There were a series of them - with plain white covers and black capital titles such as "SCIENCE FICTION", "ROMANCE", "WESTERN", "MYSTERY", etc, all actually by well respected authors in their respective fields. I think "Star Smashers' was by Harry Harrison, but am not sure. VotHS claimed to have been written by Kilgore Trout, an third rate SF author who exists only in the works of Kurt Vonnegut. However, the actual author is Phillip Jose Farmer, whom Kurt granted permission to use the character as a joke at a party. Farmer then wrote and published VotHS, perfectly imitating Vonnegut's style, to Vonnegut's great dismay. Peter Trei trei(a)process.com

1 0

Re: Patent Fight Could Add to Cost of Inter
by Phillip M Hallam-Baker 17 Dec '03

17 Dec '03

---------- > > ``We believe it's important to draw a line in the sand and make > > them prove infringement,'' said CompuServe spokeswoman Gail > > Whitcomb. ``We think their claim is way too broad.'' > > This is quite a statement coming from a company that flexed its muscles on > the .GIF file spec. about 3 years ago. > > If I remember right Compuserve caused some some major changes in RIP and > HTTP developement. Until that time the only graphic format supported in > Mosaic was .GIF. JPEG was promptly added and there was hot debate about > the issue. Having been at CERN at the time and having been the first person to incorporate JPEG into a browser (Arena) I know this to be incorrect. We intended to put JPEG into the browsers from before the time that Marc introduced the IMG tag. Indeed a principle point of discussion on the list was how to cope with multiple formats. We knew that GIF was poor and that 24 bit screens would soon become the standard. On the other hand GIF was better for icons, line drawings and such and had better support from tools. The question was how to do content negotiation well and support the best configuration for the particular hardware. Marc did not exactly allow much time for comment on the list and chose to interpret the constructive criticism of his IMG tag as opposition to the idea of transcluded images. Actually the question was whether images should be a special class of transcluded object, it really should be possible to transclude HTML within HTML, something that frames attempts to do but not particularly well. The patent issue was not of CompuServe's making. They were unaware of the UNISYS patent when they developed the spec and had they known about it would have developed GIF differently. When UNISYS asserted their patent rights CompuServe had no choice to pay up, they did however negotiate a blanket license agreement which has assisted the rest of the industry in making agreements. The main effect of the patent issue was to give added impetus to the PNG (prn. "Ping!") which is a patent free extension of the GIF idea. Unlike GIF PNG is designed to work on the 24 bit displays we use today and provide a good, general purpose standard for interchange of images in a lossless manner. JPEG is fine for presentation of images but useless as an editing format since it looses information on each cycle. It is also poor at handling line drawings and other non photographic sources (the P in JPEG is Photographic). It would be nice if the industry would support PNG more widely since its probably the best piece of original work to come out of the Web consortium. I believe that Microsoft are supporting it in their next browser release and even if they don't both 4.0 browsers are much better at supporting plug ins. Phill

1 0

Nov 26 DC: House hearing on compsec & crypto: PRZ, Denning, Lin, ...
by John Gilmore 17 Dec '03

17 Dec '03

DC-area cypherpunks may want to attend to watch the sausage machine in action. Forwarded-by: Dave Farber <farber(a)cis.upenn.edu> Subject: IP: House Briefing on Crypto From: Dorothy Denning The Technology Subcommittee of the House Science Committee is holding a briefing on computer security and encryption at 2:00 PM in Room 2318 Rayburn on Tuesday, November 26. Panelists are: Herb Lin, moderator. Study director of NRC crypto report. Bill Reinsch, Commerce Dept. Undersecretary for Export Administration Dan Geer, Director of Engineering, Open Market, Inc. John Linn, chair of IETF Common Authentication Technology Working Group Dorothy Denning, professor at Georgetown University Phil Zimmerman, author of PGP

1 0

Re: Stewart Baker on new crypto rules
by Sean Roach 17 Dec '03

17 Dec '03

At 08:17 PM 11/20/96 -0800, Lucky Green wrote: > he [hp's policy person] >replied: > >"There are many >possible interpretations of the words 'voluntary' and 'mandatory'." > >I am willing to testify to this under oath. > >I don't know what dictionary HP is using. Orwell himself must have >written it. Well, if the customer does not complain about its inclusion, and chooses to use it for its simplicity over more secure, "after market" systems, then thats voluntary. Thats the same voluntary that means that if the people don't get out to the polls then they volunteered to keep thier opinions about how government should be run to themselves. It will probably be voluntary, no one tells you that you have to use interNic when using the internet, but you probably do because it is easier than trying to route around it to its new competitor (the one issuing URL's ending in .auto and .bus among others). No one is telling you to use interNic, no one is telling you to pay to register with interNic, but it is definately less of a headache.

1 0

Re: Why I Don't Read SF Much Anymore
by Sean Roach 17 Dec '03

17 Dec '03

At 11:00 PM 11/20/96 -0500, Robert Hettinga wrote: >At 9:09 pm -0500 11/20/96, Hal Finney wrote: >>What fiction can people recommend which presents crypto/privacy issues >>realistically? How about this new book that Neal Stephenson is working >>on, does anyone know what it's about? His short story, "Hack the Spew", >>a few months ago (in Wired, I think?) had a strong crypto flavor. > >His, "Great Samolean Caper" for Time/Pathfinder was pure cryptoanarchy... > >I don't know if it's still around though. > I saved the whole magazine, I can copy it for you if you like. I thought that I had the magazine in the dorm room but I can't seem to find it.

3 3

Re: Does John Gilmore EAT Asshole?
by Sean Roach 17 Dec '03

17 Dec '03

This aga nut is getting to be a real pain in the... Well lets say that he is one hellish proctologist. I am very tempted to send this nut a few copies of the netscape 1.0 executable. Worthless and fairly bulky. AND I would be a citizen taking action. When Mr. Gilmore took action, he was lambasted for his troubles. Mr. Gilmore, however, had the misfortune of holding a position of percieved power, I don't. I assume that aga will not see this as he doesn't follow the list.

1 0

Re: Mass-market crypto phones
by Sean Roach 17 Dec '03

17 Dec '03

At 09:10 AM 11/21/96 -0500, Clay Olbon II wrote: >A while back, Eric Blossom posted a URL for a mass-market, phone encyrption >device (http://www.comsec.com/) The point of this post is to posit a >scenario based on the implications of this product. This is speculation >based on where I think such products should be heading. > >I think we need to keep a couple of goals in mind. The first, is to get >encrypting phones (or phone add-ons) into Wal-mart, K-mart, etc (where >probably most Americans now buy their phones). The prices need to be low >enough that people will want to buy them (<$100?). Is this technically >feasible? The comsec device from the above URL already demonstrates the >needed capability. Is the cost target possible? My guess is soon, given >the lowering costs and increasing capabilities of current processors. > >The second goal needs to be to push a similar product for cell-phones. I >think this will be perhaps an easier sell, given the higher initial cost for >these phones, and their reduced security. Perhaps a home device could be >sold with the cell-phone as a package deal, so that communications with the >"home base" (i.e your office, home, etc) would be secure. With the rapid >growth in cell-phone sales, selling a package such as this might ensure a >larger user-base of home devices. > >Given that these goals are met, I think widespread use of crypto over phone >lines would become almost inevitable. However, the fun part would be the >introduction of such products. The FUD coming from police, the government, >etc. would be amazing to behold. > At first this seemed to be a challenging goal as public key encryption (at least the type of which I am aware) requires a public key ring, but then I thought, what would be the point in real time communitation? Here is my idea. The initiating phone sends a public key to the receiving phone. The receiving phone takes this public key and uses it to prepare the session key, or perhaps both session keys (one key for each simples circuit), as in PGP. Both boxes would need to have hybrid circuits in them like the telephone company uses to filter out the incoming signal from the outgoing signal. The telephone amplifiers only amplify half of the signal, so it basically consists of two simplex circuits from the local trunk to the other trunks. This could be bypassed if the device set between the base and the handset. Best would be to have the hybrid circuit so that it could work with the more basic models. I can only see two problems. The first problem I can see right now would be randomization, (line noise sampling?, hold the microphone close to a radio playing static until the LED starts flashing?) The second challenge would be getting public key encryption to work with an analog system. The device will have to have two analog to digital converters and two digital to analog converters. I believe that the telephone operates with a carrier of about 3000 Hz, thus the box will probably need to maintain a sampling rate of 1500 Hz or less, if this frequency will carry voice. The system will probably need some form of run-time compression built in as well as sample voice at a low bit depth. The result, under ideal circumstances will probably be a tinny sound and loss of fidelity. The D-A, A-D pair on the telco side could be replaced by a good modem, this would eliminate some of the problems of the RBOC filters cutting out the "noise" which would really be signal. If you set the sampleing rate at 3000 cycles per second, by 8 bits of depth, you would need to be able to transmit clearly 3000 * 8 bits per second or 24000 bits per second. That would be 24 KiloBITS per second, about 1/8th the 28.8 KiloBYTE modems that are commond today. A 3000 baud modem should be both cheap and easy to pack into a small package. This would probably allow for no compression at 8 bits of sampling depth. So, the block diagram would be as follows. ________________ _______________ ___________ | | | --> | | --> | | Line to | Line from RBOC | 3000+ Baud |-----| Public Key |-----|A-D /D-A | Telephone | ----------------| Full Duplex | | Encryption | | Pair |-------------- | <---> | Modem |-----| Layer |-----| | <---> | |______________| <-- |_____________| <-- |_________| | I was thinking that the device could be built into a case about the same size as a modem or answering machine, possibly a little taller to accomidate the modem circuit, should a full duplex modem replace the telco end A-D, D-A pair. Unfortunately, I have very little experience with circuits. I can't even draw out an asyncronis multivibrator right now. (That is a square wave generator involving 2 transistors, 4 resistors, and 2 capicitors, not a toy based around a motor with an off center weight) P.S. The line on the far right is for alignment, If this line is crooked, copy and paste the diagram to a standard ASCII editor. this should eliminate the pipes and spaces from being shorter than every thing else.

1 0

[noise] Re: Why I Don't Read SF Much Anymore
by Sean Roach 17 Dec '03

17 Dec '03

At 12:14 AM 11/21/96 -0800, Timothy C. May wrote: ... >- John Brunner, "The Shockwave Rider," and, my favorite, "Stand on >Zanzibar." Required reading. As Shalmaneser would put it, "Christ, what an >imagination he had." ... Anyone else notice similarites between the protagonist in "The Shockwave Rider" and "The Pretender" the new Television series. They both even have sympathetic pursuers. Any wagers on how long it will take the pretender to turn his old handler? BTW, Tim, I don't mean to offend you by adding noise to the front, but this post is a little off topic, mine not yours. I seem to have offended someone else by doing something similar.

1 0

Re: The public sees no need for crypto at this time
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 10:25 AM 11/21/96 -0800, Timothy C. May wrote: >I believe that at this time the differential market value to customers of >having strong crypto in telephones is near-zero, and in cell-phones is only >slightly greater. [reasoning deleted]. I generally agree with Tim about consumers. However, I remember working on a theater production where we were using Radio Shack 2-way headphones for communication. One day while we were setting up, we were able to overhear a woman discussing (presumably with a girlfriend) her boyfriend and their sex life over a portable telephone. You can bet that every available headset was in use and all other work stopped. Where I think there is a market and an awareness of a need is in the corporate world. I recently saw a corporate security policy which specifically restricted discussing classified information on portable or cell phones. If I were in France (to pick on just one guilty country), I would not want to discuss secrets involving competitive position vs. a French company on a landline connection. The big driving force for companies is how much the facility costs. (I recently heard a price of $700 for non-crypto phones.) If the cost is low enough, company employees will have these boxes in their homes. The other big obstacle is standards. As far as I can tell, every crypto phone has its own protocol. If there were a standard set of protocols, it would greatly help the market, as it has for so many other products. As a first step, I suggest that Eric Blossom and PGP Inc. work together to develop a mode where their products can communicate with each other. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

2 1

WORK ONLINE...PART TIME
by Success 17 Dec '03

17 Dec '03

WORK ONLINE...PART TIME! National Software Company is currently seeking independent agents for marketing their services. If you're reading this, you have what it takes, (a computer and modem), to start your own business, work part-time or full-time. The commissions are great, the products are great, and it sells itself. You will be sent all the materials it takes to take orders in the convenience of your own home,-manual, order forms, software, etc. This is a real company, desiring real people worldwide who want in on the ground floor. With all the people getting online via AOL, Compuserve, Netscape, the marketing and need is great. You must be a self-starter, ready to handle in-bound calls, and make between $700-to-$1000 per week to start. Our average agents yearly salary is six figures. Be your own boss! Join us and become an independent sales agent. For more information and signing up contact: DOWNLOAD YOUR FREE INFORMATION DISK FROM THIS WEB SITE. http://www.geocities.com/WallStreet/3151/ You simply point and click - just like you do in windows. It is a breeze to work with. See for yourself what all the excitement is about... download it! Please note: This is a one time mailing only and you have NOT been added to any lists for future mailings.

1 0

Another animal isolation idea ...
by Ernest Hua 17 Dec '03

17 Dec '03

How about putting the list o' bad animals in a separate list where the list server will specially recognize and will not broadcast messages except back to the sender? This will be an effective stealth censorship mechanism, which some of us would like to see happen to the few "animals" contributing the trash. Ern

1 0

Oh fun ... another mass spam mailer ...
by Ernest Hua 17 Dec '03

17 Dec '03

Why don't these people take a hint? Ern ------- Forwarded Message Return-Path: name(a)worldnet.att.net Received: from mtigwc02.worldnet.att.net (mailhost.worldnet.att.net [204.127.129.4]) by xenon.chromatic.com (8.7.5/8.7.3) with ESMTP id NAA24359 for <hua(a)chromatic.com>; Fri, 22 Nov 1996 13:52:28 -0800 (PST) Received: from Default ([153.35.19.61]) by mtigwc02.worldnet.att.net (post.office MTA v2.0 0613 ) with SMTP id ANQ13190; Fri, 22 Nov 1996 19:35:25 +0000 From: removenow(a)hotmail.com Date: Fri, 22 Nov 1996 14:36:56 PST Subject: As featured in Business Week Message-ID: <19961122174156.ANQ13190@Default> Press reply for removal As Featured in BUSINESS WEEK MAGAZINE & ENTREPENURE MAGAZINE ..December issue. xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx SPECIAL OFFER GOOD UNTIL DECEMBER 26th 1996 ONLY xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx free free free free free free free free free free free free free free free E-MAIL WORKS v3.1a FREE!! WITH PURCHACE OF SECURE BULK E-MAILING AND WEB SITE HOSTING SERVICES!!!!!!!!!!!!! free free free free free free free free free free free free free free free That's Right!! When you order our secure bulk e mail hosting services you get the best & most advanced bulk e-mail package for FREE. This product sold for $499 is now free!!!!. Not just a demo, the fully functional version!!! Just e mail your request to 1webguy(a)slip.net E Mail Works v3.1 is by far the most advanced bulk e-mail software available on the market. It's power and depth are only matched by it' s ease of use. Features I Sends at 13000 to 15000 per hour with 14.4 modem II Posts to thousands of news groups automatically III Collects at 75000 per 24 hours Collect from Aol, Comp-U-Serve, Prodigy & all others IV Works while your computer is-surfing-getting e mail or word processing. V Easy to use remove name feature. VI Parsing table 45000 to 100,000 per hour VII Stand alone - NO Pegasus-Eudora-Freedom- or other email program needed VIII Sends & Gathers & Parsing at the same time! IX Marketing Tables X Time & date stamp on all mailings XI Filtering system XII Send live links XIII Repair data base XIV Merge data base XV View data base XVI Pull down help menu's xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx THE FIRST WEB SITE HOSTING SERVICE FOR PROFESSIONAL BULK E-MAIL MARKETERS!!!! Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ONLY $149 per month With this unique service you send mail using your local dial-up through our secure SMTP port. The mail you send is first filtered through our remove name list and then sent. I SECURE T3 CONNECTION WEB SITE HOSTING When SoftCell becomes you postmaster you will never have your site ripped down again or have you e mail address change II 10 MG WEB DOMAIN We transfer or register your domain with internic III POP ACCOUNT REMOVE NAMES All mail is parsed against several large remove name lists as you mail IV 5 MG FLAME PROOF E-MAIL BOX We will not except multiple message or unmarked attachments from any user. V FIRE WALL Over 70,000 e mail addresses that can not access our server VI AUTO RESPONDER Easy and fast responder ------- End of Forwarded Message

1 0

Constraining the Program Counter
by ph＠netcom.com 17 Dec '03

17 Dec '03

You could build a fairly secure system if all of the executable code were confined to ROMs. Is there a way to confine the PC of any popular processors so that it can only execute code in the ROM? Ideally, it would be possible to do this with cheap off the shelf hardware. Peter Hendrickson ph(a)netcom.com

1 0

HP-48G is a perfect toy, thanks to all
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Thanks to all who recommended me to buy an HP-48G calculator. It is one of the most perfect toys that an adult can play with. I used a programmable stack calculator when I was in high school and it is a true pleasure. - Igor.

2 1

RE: Mass-market crypto phones
by Mullen Patrick 17 Dec '03

17 Dec '03

_______________________________________________________________________________ From: Lucky Green on Fri, Nov 22, 1996 14:52 <snip> >quality is fine. Note that a fast IP connection may or may not suffice. ^^^^^^^^^^^^^ <snip> >sending UDP packets over the Internet new problems arise. One packet ^^^^^^^^^^^ ^^^^^^^^ <snip> >--Lucky I was going to just listen to the way this thread is going because I find it fascinating, but now that it has been spelled out, I must make a very important distinction between my idea and PGPFone, WebPhone, etc. -- These are Web-based programs designed to speak over very long distances for "free" (neglecting ISP charges, etc.), adding the extra functionality of encrypting your data along the way so sniffers, etc can't listen in on your conversation. My encryptophone(tm) :-) is purely a modem-modem protocol. This way, even at 14.4k you get all of your throughput. No TCP/IP overhead. No busy Net. No "Why won't my ISP hold a connection longer than TWO MINUTES!?!?". The idea I was tossing around was a simple modem program which takes digitized voice, encrypts it, pumps it through the phone line directly to the modem on the other side which undoes it all. (Yes, I know this is a simplified view.) I also know it may not be as useful as the web-based products, but I also know you don't have to worry about the aforementioned problems and neither party has to have a Net account. This eliminates some of the problems which have been sent to me. Of course, some of the problems still apply and must be addressed. I guess now's the time to admit that the first and foremost problem is that I have never programmed my soundcard... I appreciate the tips and pointers everyone has been giving me tremendously. Hopefully, this thread doesn't do a complete reversal, because I am storing all hints/suggestions/tips to be used when I can finally get this project going. (I'm stubborn. I need to at least try it, if for no other reason than to get the knowledge... :-) Thanks! PM

3 2

Re: Mass-market crypto phones
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:50 AM 11/22/96 -0800, Sean Roach wrote: >At 09:10 AM 11/21/96 -0500, Clay Olbon II wrote: >>A while back, Eric Blossom posted a URL for a mass-market, phone encyrption >>device (http://www.comsec.com/) >At first this seemed to be a challenging goal as public key encryption (at >least the type of which I am aware) requires a public key ring, but then I >thought, what would be the point in real time communitation? Both Eric's product and PGPhone use Diffie-Hellman key exchange. They protect against man-in-the-middle attacks by displaying (part of) the resulting symmetric key and having the phone's users verify they are both working with the same key in the conversation. Until the AIs/eavesdroppers get good enough to imitate a person on the phone, this verification technique is good enough. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

1 0

FAQ on legalities SSLeay, &c.
by P. J. Ponder 17 Dec '03

17 Dec '03

the recently posted FAQ on crytpo patent expiration dates etc. stated that MD5 and SHA were not export-restricted anywhere. The FIPS Pub for SHA (which I think is numbered 180-1) specifically states that SHA is export controlled (by ITAR). I asked this list why it would be controlled, since it was a signature function, and Perry Metzger replied that crypto hash functions make good starting points for building a block cipher program. there is a section in Schneier's _Applied Crypto_ on this, too. anybody heard from the old Perry-grammer on his list project? I miss him. He would be having a field day with all this noise. surprised there hasn't been more chatter about the improved differential fault analysis (IDFA). That is pretty powerful stuff. They just don't make tamper-proof like they used to. Forget chomping on the keyspace, read the modulus and divide by the public key. I like the reference to the 'Mafia EFT/POS'. ObSciFi: Go back and read the Preface (by Bruce Sterling) to Gibson's _Burning Chrome_ collection. He talks about the sorry state of SF in the 1980's and how Gibson, among others, was turning out something new. Hmph.

1 0

Software distribution the cypherpunks way? Was: Patent Fight Could Add to Cost of Inter
by Phillip M Hallam-Baker 17 Dec '03

17 Dec '03

This turned into a long article on software distribution. > NEW YORK (AP) _ A little-known patent could raise the cost of > doing business over the Internet for companies selling software, > video or other digital products delivered online. > > E-Data Corp. of Secaucus, N.J., is suing 17 companies, including > McGraw-Hill and CompuServe, to collect licensing fees on the > patent, which protects downloading of encrypted digital > information. A court hearing is scheduled Dec. 6 in New York on the > company's claims. Although this is one of the most bogus and indefensible patent claims about I don't think it has any material bearing on the Web. Any that it does have is likely to be beneficial since the Freeny model is inherently broken and non-Web. What Freeny does is to claim the idea of encrypting an information product, delivering it through a computer network (though not a physical medium, there is another patent that claims that), and selling the decryption key rather than the product. It is a hot idea if you are trapped in traditional, pre-Web thinking but not if you understand the dynamics of the net. The problem is that encryption is not such a great barrier to preventing proliferation of software. If encryption is free than you might as well add it in, if there are patent costs then you have to ask what precisely you gain from encryption. The problem is that the information good has to be decrypted before use. Since it is very difficult to prevent copying after the decryption has occurred all that the encryption is really doing is to slow down the process of proliferation. A more important question is what if anything one gains from preventing proliferation. Microsoft has not been hurt by the massive bootleg copying of its software, far from it. Many business users are keen to buy non copy protected software because they can then obtain a "free" copy for their home machine at no cost to themselves. This minor peculation is in my view the principle reason for the dominance of the PC in the home market. There is no good reason why a person would buy a $2000 business machine rather than a $500 home machine when the latter plays much better games. But add the idea that one can use the software bought by one's employer and the PC looks the better buy. I believe that the success of Netscape demonstrates that copy protection is a bad idea. If you believe in free markets then the price of any given product is going to come down to the marginal cost of production. For software sold via the net the marginal cost is pretty close to zero. The price of the various "Office" bundles sold via the stores is astonishingly low. $200 for MSOffice or Corel Office is a silly price. If the product is bundled with the machine the price gets even sillier - a few dollars. I expect that before long we will see machines coming bundled with more than one office suite because the prices are just too low to make the choice irrelevant. An important fact to bear in mind is that companies are in general interested in being honest. There is little incentive for an employee to cheat the software vendor. The cost of lawsuits is a good deterrence since the type of company where management are likely to encourage software theft is also the type of company that is likely to have disgruntled ex-employees willing to inform. As a system manager my principle interest in net O/S such as WNT and VMS is that they have good, centralized and standardized licensing mechanisms that allow me to make sure that the software has been paid for. Its another reason why site licenses are useful! The price of net software is likely to be close to the price the OEM pays, a few dollars. This is likely to be structured somewhat differently however. I expect to see growth of two trends, software rental and componentware. Componentware, selling the package in small increments is a poor proposition if selling via physical media. The cost of a CDROM is low, (few cents), but the cost of post and packing is high. Selling componentware via the net is considerably more interesting. Just as I paid a few bucks for my XV program, I'm willing to pay a couple of bucks for additional input filters. I'd certainly be willing to pay a couple of bucks for specialized document tools or specialized canned document formats (e.g. IDEF0, ESA-Requirements whatever). I see the potential for componentware being primarily low cost, high volume. Componentware is now on the brink of being practical for three reasons. First as previously stated the net makes distribution costs lower. Second modern software applications are considerably more "open" to extension than previously. In the past most software houses attempted to produce products that satisfied every need. Today the large software houses realize that they cannot hope to satisfy every need but that if they can cover 95% of a persons needs in a way that allows them to add in the remaining 5% everyone is happy. Finally, Java has legitimized the componentware idea. Its worth noting that the technical suitability of Java to the task is irrelevant. What is important is the fact that several hundred startup companies have been created to do nothing else than make Java applets. Such companies are effectively committed to make componentware work and it is inevitable that at least one will succeed in establishing a paradigm for the others to copy. The second interesting development is software rental. To an extent this already occurs since the rapid rate of software development means that software rapidly becomes obsolete. Anyone who is using WordPerfect 3.1 for more than a few hours a year should probably upgrade to the latest version simply because it offers so much more functionality. The recent move by Microsoft to incorporate the year into their products is intended to encourage frequent software upgrades. It is a small step from this model to one in which software is "leased" for a period of a year or more at a time. Of course both componentware and rental strategies have been around before the net existed. What the net does is to change the economics so that low cost, high volume is the mainstream strategy. Software rental traditionally involves expensive agreements, typically brokered by lawyers on both sides. The network means that it will become economic to rent software in low volume and for short periods. Joining the componentware and rental strategies together would point to a distribution strategy in which a corporation would lease a certain number of seats worth of fully updated packages. The seats would be continuously updated on a daily basis as additional components passed the supplier's QA. In this model the purchaser is buying the up-todateness of the package. There would be little value in bootlegging the software since its unlikely that the bootleg version would be anything like as convenient. There would also be scope for different levels of uptodateness. Just as the Microsoft developer network delivers a bulging binder full of CDs to my desk each quarter there will inevitably be a large number of developers willing to risk buggy software to have access to the cutting edge technology. On the other hand there will be people who prefer to wait until others have found the bugs, waiting a judicious length of time before updating unless a patch is a response to a known bug. Encrypting the distribution process might be worthwhile to reduce fraud but the main vulnerability is probably unauthorized copying after distribution. What the Freeny patent covers is thus the old model of software distribution in the new sales paradigm. There is little point in taking costly measures to protect the copyright of products being sold for small dollar amounts. First Virtual proves this. Where more expensive software is concerned it would ideally be best to use the net. But here the price of the patent is simply too much. The 1% extorted under the patent would easily pay an intern to stuff a CD in an envelope and send it. The role for encryption in the software distribution process is in authenticating the delivered goods. The role of encryption is to provide privacy. It is very hard to keep a secret that every one knows about, still harder to sell information that is public knowledge. The net is not an information economy, it is an access to information technology. Nobody will profit from merely selling information, they will have to sell the ability to access information in better ways, better indexing, faster access, lower publication delays and so on. comments? Phill PS in checking this document Microsoft's spellchecker suggested "Mosaic" when checking the word MSOffice!

1 0

Report on Net Tax Policy
by John Young 17 Dec '03

17 Dec '03

The US Treasury Department's report "Selected Tax Policy Implications of Global Electronic Commerce," reported this morning in the NYT, is available at: ftp://ftp.fedworld.gov/pub/tel/internet.wp (260 kb; WordPerfect 6.1) We've prepared an HTML version at: http://jya.com/taxpolicy.htm (140 kb) Here's the TOC Section I: Introduction Executive Summary 1. Introduction Section II: Technical Background 2. An Overview of the Global Information Infrastructure or "Information Superhighway" 3. The World Wide Web and Electronic Commerce 4. Security and Encryption 5. Payment Mechanisms Section III: Tax Policy and Administration Issues 6. Tax Policy and Administration Issues: General Considerations 7. Substantive Tax Law Issues 8. Tax Administration and Compliance Issues 9. Conclusion Glossary Notes

2 1

CNET News Dispatch November 22, 1996
by The CNET newsletter 17 Dec '03

17 Dec '03

************************************* CNET NEWS DISPATCH/SPECIAL COMDEX ISSUE Friday, November 22, 1996 San Francisco, California, USA ************************************* Welcome to the sixth and last in a series of SPECIAL COMDEX ISSUES of the CNET NEWS DISPATCH, bringing you the latest on the people, products, and parties at this exciting event. Check out our Comdex page at: http://www.news.com/Categories/Index/0%2C3%2C38%2C00.html?nd ************************************* CNET NEWS DISPATCH is a daily newsletter that summarizes the up-to-the minute technology news presented by CNET's NEWS.COM. It tempts readers with coverage of today's hottest stories, news in the making, (in)credible rumors, and other indispensable information. For complete versions of the stories updated all day long, head over to: http://www.news.com/?nd ************************************* CONTENTS SCOOPS AND TOP STORIES AOL tries to play "The Price is Right" with customers Microsoft catches up to its own browser in Macland Gates & Grove prove great minds think and clink alike It puts the whole...world...in your lap Despite IPO mishaps, tech firms still getting VC $$$ ANNOUNCEMENTS An easy way for you to customize NEWS.COM Search the site for particular topics and articles Send us your questions, comments, flotsam, and jetsam How to subscribe and unsubscribe Late-breaking stories just a click away with Desk Top News ************************************* AOL TRIES TO PLAY "THE PRICE IS RIGHT" WITH CUSTOMERS As if he didn't have enough to worry about--blackouts, churn, the growth of the Web--Steve Case and friends are also wrangling with attorneys generals in 17 states. The problem is AOL's new pricing policy, which can be summed up as: "Unless you say 'no,' your rate goes from $9.95 to $19.95." At pixel time (previously "press time"), the skirmishes were just beginning. http://www.news.com/News/Item/0%2C4%2C5674%2C00.html?nd MICROSOFT CATCHES UP TO ITS OWN BROWSER IN MACLAND Explorer for Mac users rejoice! Your hybrid platform/browser choice has just been significantly enhanced by the arrival of Microsoft's Java Virtual Machine. Some of the Web's most bleeding-edge firms are now rushing to embrace this new entrant into the market. http://www.news.com/News/Item/0%2C4%2C5675%2C00.html?nd GATES & GROVE PROVE GREAT MINDS THINK AND CLINK ALIKE First his friend and business buddy Bill Gates misses, then frantically swerves to catch, the opportunities of the exploding Internet market. Now Intel chief Andy Grove seems to have jumped into an exploding market late enough to possibly fall off. Ironically, the product at the center of this battle is Windows CE, made by none other than Microsoft itself. http://www.news.com/News/Item/0%2C4%2C5676%2C00.html?nd IT PUTS THE WHOLE...WORLD...IN YOUR LAP People will buy 190,000 of them this year and 4.1 million by 2000. They come in 20 varieties and move four times faster than analog modem speeds. It fits in your pocket, but can take you thousands of miles in seconds. http://www.news.com/News/Item/0%2C4%2C5669%2C00.html DESPITE IPO MISHAPS, TECH FIRMS STILL GETTING VC $$$ You've heard about Wired canceling its IPO. Twice. You've heard that the VC-money-for-neat-Net-ideas bubble has burst. You've heard about apocalyptic traffic jams that could choke the Web. But to get the real story on how investors and venture capitalists feel about Net-related firms nowadays, the old adage of "follow the money" yields interesting results. http://www.news.com/News/Item/0%2C4%2C5673%2C00.html?nd ************************************* ANNOUNCEMENTS AN EASY WAY FOR YOU TO CUSTOMIZE NEWS.COM So many bits, so little time? Sounds like you need Custom News. Identify the topics, keywords, or sections you're most interested in, and Custom News will a create a page of headlines and summaries for all stories that match your criteria. Check it out at: http://www.news.com/Personalization/Entry/1%2C21%2C%2C00.html?nocache=1 SEARCH THE SITE FOR PARTICULAR TOPICS AND ARTICLES Search the entire NEWS.COM database for stories you saw in News Dispatch, or track any story we've run. http://www.news.com/Searching/Entry/0%2C17%2C0%2C00.html?nd SEND US QUESTIONS, COMMENTS, FLOTSAM, AND JETSAM If you have any questions, suggestions or remarks, send us a message: newsdispatch(a)cnet.com HOW TO SUBSCRIBE AND TO UNSUBSCRIBE To subscribe to News Dispatch: Send mail to listserv(a)dispatch.cnet.com with the message: subscribe news-dispatch (your name) in the message body. To unsubscribe send the message: unsubscribe news-dispatch LATE-BREAKING STORIES A CLICK AWAY WITH DESK TOP NEWS How would you like having split-second access to the very latest news on the Net? Our Desk Top News feature puts our 20 most recent stories right there on your desktop for you to review at any time. Here's how it works: 1. From any story, click Desk Top News in the top right. 2. A window will open showing our last 20 stories. 3. Click on a headline to display the story. 4. Desk Top News updates itself every 30 minutes. 5. You become known as Ms./Mr. Cyber-Info. It feels good. http://www.news.com/Help/Item/0%2C24%2C12%2C00.html?nd ************************************* CNET: The Computer Network http://www.cnet.com/ http://www.news.com/ http://www.gamecenter.com/ http://www.download.com/ http://www.search.com/ http://www.shareware.com/

1 0

Star Trek: First Contact
by frantz＠netcom.com 17 Dec '03

17 Dec '03

For the fans of E.E.(Doc) Smith, go see this movie. OBCrypto: Data locks the main computer with a fractal cypher. OBMoney: Picard states the they don't have money in the 24th century. Instead they work for the good of mankind. Nanotechnology must have made everything material possible, so the only reward left is status (aka reputation). ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

10 10

Re: IPG Algorith Broken!
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Sun Nov 24 09:59:36 1996 Uni wrote: > On Sat, 23 Nov 1996 wichita(a)cyberstation.net wrote: > > > To obtain your organization free operational demonstration copy, > please > > send an e-mail request to: > > > > ipgsales(a)cyberstation.net > > > > You must include your snail-mail address and telephone number in said > > request. > > Now THIS has potential! Indeed. Note that he calls it "organization free" above. Obviously, his operation's entire marketing department is an excellent source of randomness.:) JMR Regards, Jim Ray DNRC Minister of Encryption Advocacy One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me Please note new 2000bit PGPkey & address <jmr(a)shopmiami.com> PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMphi3DUhsGSn1j2pAQHJ0gfQzgWGEb2lJ3KSPWGn3td/k2veuxZDjkHu OlITK3W6zT9MUWqh4KrdvQkt7Z/RzRls+uJPr7ZChS8f6FSHHvGWSmnTBZb+Bav8 JGJqcq+b/BwuUJ0RmVbGL9N7BCCXICroIdGQc1R+DmUuTMcqaAxD9bYWYbs/JSr0 Q00u3L/w8djc74sR2dS3PWmwF9PGLlmKrVQijY/q7WUNhKJDoZR4w511hswVHn1N BMjR49s+5Gh3N6eaRnKx/B2GnByhvL5Sgai2uPAqT5tFiA7R1nxnHZIlgMplYKsw 27nUWGYFpM+gP/wppw1neZqJcu4xKzg25IN4QIe86T78oA== =WUGy -----END PGP SIGNATURE-----

1 0

how much entropy in common answers
by Pat Farrell 17 Dec '03

17 Dec '03

I've been playing arround with some code to implement CME's secret sharing using low entropy answers. (His write-up is in http://www.clark.net/pub/cme/html/rump96.html) In the write-up, Carl says " That means that it has very low entropy. For example, a person's first name has only about 8 bits of entropy. Car makes and models have only 2 to 4 bits of entropy -- especially if one is naming cars desirable to a teenager." Further on, he says "Therefore, if each answer has entropy E, the attacker must correctly guess T=(EK) bits of answers. If T exceeds 90 bits or so, then the user is reasonably secure from answer-guessing attacks." (where K is the number of questions) My question is, how do we measure the entropy of each answer so we can calculate when we've got 90 or so bits. I know when I was a teenager, the list of car lust objects was short, and everyone wanted a Mustang or Camaro, so the entropy of those two choices was much less than half a bit. A similar idea was mentioned in a critique of the plot of West Side Story. The question is, on a hot night in Spanish Harlem, what percentage of women are named "Maria"? Clearly there are cultural issues involved. The entropy in a question such as "what is your favorite brother's name?" is low in an Irish family like mine where names cluster arround choices such as are Patrick, John, Sean, and Dan. So how do we measure the entropy objectively? Thanks Pat Pat Farrell CyberCash, Inc. (703) 715-7834 pfarrell(a)cybercash.com #include standard.disclaimer

1 0

RE: Mass-market crypto phones
by Duncan Frissell 17 Dec '03

17 Dec '03

At 10:40 AM 11/22/96 -0800, Lucky Green wrote: >The LEA's are not intested in saving the public money. They are >interested in preserving and expanding their power. If it costs >$1,000,000 per wiretap, who cares? The government has men with guns that >can always go out and extort more cash from the population. > >--Lucky They could if they would; but they can't so they won't. Governments (like real people) always collect as much revenue as they possibly can at a given time. If they could figure out a way to get more they would. To argue otherwise is to imply that they are not maximizing their total monetary and psychic income and are forebearing to grab all they could. I don't think members of this list should pay The Great Enemy such a compliment. Remember the findings of the Public Choice school. DCF

1 0

A.Word.A.Day--syncope (fwd)
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, For those of you who don't get Word.A.Day, you might enjoy the unatributed quote at the bottom of the post. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ---------- Forwarded message ---------- Date: Sat, 23 Nov 1996 01:52:20 -0500 From: Wordsmith <wsmith(a)wordsmith.org> To: linguaphile(a)wordsmith.org Subject: A.Word.A.Day--syncope syn.co.pe \'sin-k*-(.)pe-, 'sin-\ n [LL, fr Gk synkope-, lit., cutting short, fr. synkoptein to cut]short, fr. syn- + koptein to cut - more at CAPON 1: a partial or complete temporary suspension of respiration and circulation due to cerebral ischemia : FAINT 2: the loss of one or more sounds or letters in the interior of a word (as in fo'c'sle for forecastle) ........................................................................... The generation of random numbers is too important to be left to chance. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ To subscribe or unsubscribe, please send a message to wsmith(a)wordsmith.org with "Subject:" line as "subscribe <Your Real Name>" or "unsubscribe". Email anu(a)wordsmith.org if you have any questions, comments or suggestions. Archives, FAQ, words and more at the WWW site: http://www.wordsmith.org/awad/

1 0

Re: wealth and property rights
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 21 Nov 96 at 18:35, Dave Hayes wrote: > However, I would question the implication that "socialists" are > responsible for the higher tax rates you currently experience. > > For example, I could make a strong case that you really have some > clever "capitalists" who have learned how to express their > "capitalism" quite effectively across the space of all people in a > "country". OK. I am not on Cypherpunks anymore but this leftover of the mail queue landed in my mailbox. So, please, reply directly. I just couldn't let this one pass by me without jumping on it. :) Your second paragraph is attacking a straw man. You even included the word 'capitalist' in double quotes ("). The common point between socialists and theses so-called "capitalists" is that they both use that fact that some coercion is enacted on a given population to get rich an/or powerful. The socialists seek, as a value, power over producers and your "capitalists" seek to get rich and/or powerfull. But both blank out the cause of the obtention of their goals: legally exerted coercion (via govt rules and powers). To use terms coined by a well known writer, one is a Witch Doctor, the other is an Attila (morally sanctionned by the Witch Doctor). They natures are not opposite, they are simply both sides of the same coin. I sometimes wish peoples would use words for what they really mean... jfa Please reply or Cc. directly to me. Jean-Francois Avon, Pierrefonds (Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

2 1

Re: IPG Algorith Broken!
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

At 8:09 AM 11/23/1996, Eric Murray wrote: >No, you can't. It's impossible to prove an algorithim unbreakable. No? Please prove your assertion. Your claim is similar to IPG's - nobody has done it yet. Your claim is stronger - hardly anybody has worked on IPG's algorithm, nor are they likely to. diGriz

8 8

Announce PGP263UI (long message)
by Steve Crompton 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To All PGP Users: I am happy to announce the availability of PGP 2.63ui, the successor to PGP 2.6ui and 2.62ui, an unofficial international release of the famous public key encryption program, based originally on version 2.3a. This version is being made available for a number of reasons: * It is the only version fully compatible with *all* versions of PGP from 2.0 to 2.7 * It incorporates a number of bug fixes and features not available in the MIT release (see below) or in Stale Schumaker's 2.6.x.i releases based on the MIT release. * This version, like 2.3a and 2.6xui before it, is published under the terms of the GPL. Consequently: - You are not bound by the RSADSI licence since this version does not use RSAREF (which forbids commercial use and unauthorised use of the cryptograpgic routines), as you are with MIT PGP - You are not bound by the MIT licence (which requires the program to produce output that cannot be read by earlier versions), as you are with both MIT PGP and Staale Schumacher's PGP 2.6.xi. - you can therefore do what you like with the code of the program provided any derivative work is also GPL'd. - The only relevant patent for users outside the USA is Ascom-Tech's patent on IDEA. For non-commercial use it's free, anywhere. For commercial use you need a license, but Ascom-Tech offers a single- user license for a modest fee. See http://www.ascom.ch/systec Users inside the USA may not legally use 2.63ui, because the RSA patent is in effect there. USA residents are advised to obtain one of the MIT versions which have a license for non-commercial use of RSA. However, I note in passing that by using the armor_version parameter in CONFIG.TXT, that armored output from PGP 2.63ui can be made difficult or impossible to distinguish from other versions. Note that I personally have not done very much of the actual coding on this version. However if bugs are reported or constructive suggestions for improvements made I will pass them on to the individual(s) who have done the bulk of the work to make this release possible. I am assured that continuing support will be provided. This is a partial list of the changes and fixes since 2.62ui. A complete list is in file 263UICHG.ASC, which is inside both ZIP distribution files. Added CONFIG.TXT Parameters: LabelEncrypt = on # Label Encrypted Armored files with Recipient(s) This will add readable text in front of an encrypted and armored file listing the public keys used to encrypt it. The format of the text is similar to what appears on the console during (-l) decryption. PrePendSigV=on # Prepend Signature Verification msg to output text When verifying the signature on a text (not binary) file, and a detached signature (-b) is not requested, PGP 2.63ui will prepend a message with the results of the signature verification (good or bad) similar to what appears on the console. Expanded Compatibility with Early PGP Versions. version_byte=3 is usually set to Emulate PGP 2.6 after 9/1/94 Version_byte must be set to 2 before encrypting/signing messages to be decrypted/verified by PGP 2.2 or 2.3a. Also, unique to PGP 2.63ui, is the ability to set version_byte to 2 in extracted keys (-kx[a]). This allows PGP 2.63ui to extract keys which may have been created and/or signed by MIT PGP or by a ui version with version_byte set to 3 and create an extracted key which may be added (-ka) by PGP 2.3a. Note that the reverse is not true. If version_byte=3, keys created with version_byte=2 are -not- changed when extracted. Expanded Error Checking Most disk writes are now checked for errors or running out of disk space. Key Generation and other Keyring maintenance operations check for write access to public and (where required) secret keyrings before lengthy processing starts. Previous versions were not checking if the keyrings were set to read-only, which led to invalid results. PGP 2.63ui allows you to change UserID's of keys not your own (corresponding secret key not present). You can sign the new ID with your own secret key but (obviously) not with the other person's secret key. PGP 2.63ui is distributed in two ZIP files pg263ui.zip [executables & documentation] pg263uis.zip [source code & documentation] They are currently available at: ftp://ftp.funet.fi/pub/mirrors/utopia.hacktic.nl/pgp/pc/dos/ ftp://utopia.hacktic.nl/pub/replay/pub/pgp/pc/dos/ Each zip file contains a MANIFEST signed by me which gives the MD5 digests of all other files within the ZIP. You can use the MD5SUM.EXE program included in pg263ui.zip to verify the MANIFEST (after using PGP to strip the signature). Here is the MANIFEST for pg263ui.zip 840317378232e54d03424e7e49a9bd4a *263UICHG.ASC 7408f5f49f74e0209f7a712a10c95e8e *CONFIG.TXT 83c8d06f39a0984066464e9a70e62550 *ES.HLP 64fa593bc5f188cf5a3cda03f3ed0ea5 *FR.HLP 480f583a2ac6776a4de7df6e7382545e *KEYS.ASC 5ba7143bad4739a4b749e492b5eee1ce *LANGUAGE.TXT ecec59110e8a3bfd7fb195ec5964d5ce *MD5SUM.EXE ca537810f4fdf5f359ec6583eeb176bb *PGP.EXE 3e2afe9edfc197554e9de9e3d433cdd0 *PGP.HLP e1ef684d67c7e23143bca9163ce04966 *README.1ST 473d455178341f5f6e5f53394fd5a1d9 *README.2ND a7491b03c6e87d57e34ec03ace211509 *README23.DOC 01a94cd84d68ea1cb905ce29caf0961e *DOC\BLURB23.TXT ad4652e2dcfd4a0ecf91a2c01a7defd5 *DOC\COPYING fbdd95ba04c9d2be5c4b8e2769482c32 *DOC\KEYSERV.DOC 8ab813656498102101d55b9ecfddde98 *DOC\NEWFOR22.DOC cf12a2daac04470b6ad2b311cc514431 *DOC\NEWFOR23.DOC 5413061db46b1379a5489296c214ee38 *DOC\PGFORMAT.DOC 2a6c84401fc0c3b9febd77dd965c7b4f *DOC\PGP.1 33eeab5a938d0d33b8ca8ecf97038d73 *DOC\PGPDOC1.TXT ff0d028f72c4632c2b87c099dce92180 *DOC\PGPDOC2.TXT ca6253109c92944d44a9a1767f0b58ff *DOC\POLITIC.DOC b648ac7c1c3aa7b0c92f80dc18dc9bcc *DOC\README.VMS e4cfe2f3c28aab747f2396ae5e0a8ba8 *DOC\SETUP.DOC Here is the MANIFEST for pg263uis.zip 840317378232e54d03424e7e49a9bd4a *263UICHG.ASC 7408f5f49f74e0209f7a712a10c95e8e *CONFIG.TXT 83c8d06f39a0984066464e9a70e62550 *ES.HLP 64fa593bc5f188cf5a3cda03f3ed0ea5 *FR.HLP 480f583a2ac6776a4de7df6e7382545e *KEYS.ASC 5ba7143bad4739a4b749e492b5eee1ce *LANGUAGE.TXT 3e2afe9edfc197554e9de9e3d433cdd0 *PGP.HLP a7491b03c6e87d57e34ec03ace211509 *README23.DOC e1ef684d67c7e23143bca9163ce04966 *README.1ST 473d455178341f5f6e5f53394fd5a1d9 *README.2ND 1a22a466840f14025a5de0118d6daa0d *CONTRIB\README e8e9f513a273e86170e886c730a73307 *CONTRIB\ELM_NN\MAILPGP 56776ba15d847d005da2c95caa13744f *CONTRIB\ELM_NN\MOREPGP 8ae0fd91ea7ca5e041a5da4b78dce2c1 *CONTRIB\ELM_NN\POSTPGP a2e4b46d2b0a6613a19061e8755024ca *CONTRIB\ELM_NN\README 0bf0ac13b4d019ed8b010ac3c0d30241 *CONTRIB\EMACS\PGP.EL1 52f5921095dd385796ae5fe6b2badbc6 *CONTRIB\EMACS\PGP.EL2 8de46004960bbca27de290a814fa6585 *CONTRIB\EMACS\RAT-PGP.EL 0188d65c58e003d50871a60412a86e58 *CONTRIB\EMACS\PGPEMACS.DOC 3a256a88091276b667a8283614122a76 *CONTRIB\IDEA\IDEA.ASM fb995ab5c86fd45fcccc9c385d03c551 *CONTRIB\IDEA\README 1061623e095426e6ece416f75a15c643 *CONTRIB\IDEA\TEST.C 488b1cece84dd0853f491a5d10362ca4 *CONTRIB\MAIL_TIN\MAILPGP 994c5848ed0457eaf60ec086ad86048e *CONTRIB\MAIL_TIN\MOREPGP f3afdb4e57ea645e7bfdbb1eb969a48c *CONTRIB\MAIL_TIN\POSTPGP 746f7fcfb23fc18974f06243201957eb *CONTRIB\MAIL_TIN\README c037a9119d14999dc445ea47a75e7d48 *CONTRIB\MAILX\MAILER 06cebf8214342e286a7f3245c724ff4d *CONTRIB\MAILX\PGPMAIL2 eac85d75f64fef85da9afa399368890d *CONTRIB\MD5SUM\MD5SUM.C 5ca3e58ba621523b0d3feb026820fa63 *CONTRIB\MD5SUM\PGP23.MD5 6242095b32ea68409929194ad7e157bd *CONTRIB\MD5SUM\README 7bf7d12fe520767019a71d4f963fa6c8 *CONTRIB\MD5SUM\PGP26UI.MD5 501fc6ccb4e8405d75a72d9acb6a019c *CONTRIB\MH\PGPMAIL.MH bff01f6723fac1145074f6cce81ef1b8 *CONTRIB\MIME\MIMEPGP.DOC ded0f233729d58e001746708fb0ecec6 *CONTRIB\MISC\PGPNOHDR.SH a860741049e3b3285c4d96996a7e59f0 *CONTRIB\MISC\PGPPAGER.C 3af9ddacbe85b67fd3a02ce8a9421a04 *CONTRIB\VI\VIPGP.DOC 01a94cd84d68ea1cb905ce29caf0961e *DOC\BLURB23.TXT ad4652e2dcfd4a0ecf91a2c01a7defd5 *DOC\COPYING fbdd95ba04c9d2be5c4b8e2769482c32 *DOC\KEYSERV.DOC 8ab813656498102101d55b9ecfddde98 *DOC\NEWFOR22.DOC cf12a2daac04470b6ad2b311cc514431 *DOC\NEWFOR23.DOC 5413061db46b1379a5489296c214ee38 *DOC\PGFORMAT.DOC 2a6c84401fc0c3b9febd77dd965c7b4f *DOC\PGP.1 33eeab5a938d0d33b8ca8ecf97038d73 *DOC\PGPDOC1.TXT ff0d028f72c4632c2b87c099dce92180 *DOC\PGPDOC2.TXT ca6253109c92944d44a9a1767f0b58ff *DOC\POLITIC.DOC b648ac7c1c3aa7b0c92f80dc18dc9bcc *DOC\README.VMS e4cfe2f3c28aab747f2396ae5e0a8ba8 *DOC\SETUP.DOC a75c34297e3915242232242aa0147bb8 *SRC\3B1_6800.S baf854e4fd40d02a7b7b7fa2911382be *SRC\68000.S 557168162e418489bc245ab5c4030add *SRC\68000_32.S 57900fde67a6039f1b218972e74bf806 *SRC\80386.S de3f8236644a00ca45d1c41f400b2fc3 *SRC\8086.ASM 69f8d2757e5c13a1ebf17998a756e8ba *SRC\ARMOR.C 80f3854e9b76eee4167503893135839e *SRC\ARMOR.H 5b9cd4b55699685f37dd594382dda8a7 *SRC\CCC 7fb0b40db91d6da79d38b2f475110fc4 *SRC\CCC.X28 66b7d0786b5d426644591fa347a7e205 *SRC\CHARSET.C 35bbbe1de78008abae59bf12fed41291 *SRC\CHARSET.H 04b95ec3860bc3ecaf56d2fe5d837a68 *SRC\CONFIG.C eb57f96eea26bee3152fb82a5006e133 *SRC\CONFIG.H c0741f9f07cb9f7f7dff2be9ac6ed3a0 *SRC\CRYPTO.H df233c3e5793cae25adc82bd51ffe9c5 *SRC\CRYPTO.C 1c51db6958288d475e066f4b428d1324 *SRC\DESCRIP.MMS 067b372f3f13365acca772f307dd73c9 *SRC\EXITPGP.H 243453889c70b37d7444d29a162ba9bb *SRC\FILEIO.C bc273e19f5900cac30bfe8d1bc29907a *SRC\FILEIO.H a0bebb371176f8fd5ea2c34e14be8106 *SRC\GENPRIME.H 4f3f1ca25c8ad16536ba9fa4f2fa07ba *SRC\GENPRIME.C 12fb2c21d044f5cc1264d4e2f8e35d17 *SRC\GETOPT.C 70bc995b674a1041f006e0c85ad128bc *SRC\GETOPT.H 891c95125020cc39df1cfaf531baeac4 *SRC\IDEA.C cbf974a9968d4cccb3dbbb8c6e197fb3 *SRC\IDEA.H be2862fa4e729caed7f5284d0a068c2d *SRC\KEYADD.C a31d39f665562103f27fd51943eb9f80 *SRC\KEYADD.H fcd92da1ef03062aaaf4a32e9c0bfe1c *SRC\KEYMAINT.C e8b97adb23122b1e61d1c876d44405f5 *SRC\KEYMAINT.H b51b6f358baecddf27d2af1f1325b8a8 *SRC\KEYMGMT.H 55f0e339489a329813568e9e43d44087 *SRC\KEYMGMT.C 378c2c04399840ff19a1c428c86b31a3 *SRC\LANGUAGE.C fa3757f2e65cce62ccd16cf4fa71f0dc *SRC\LANGUAGE.H 2194f583f62eff5db4dacc1d032fd391 *SRC\LMUL.H 465c44debfabb9433c6b0d6416d29ff9 *SRC\M.BAT 46377c4b4ff7deb2bac93c5eee2bbbad *SRC\MAKEFILE.TC 5a7e71d8c85f7cd95825c55cd3f1bae7 *SRC\MAKEFILE.AMY 625825b93e4230440371ee2bc32616e8 *SRC\MAKEFILE.MSC 0fd62dae064f53b0c9caa7ac9302a926 *SRC\MAKEFILE.UNX 08781b63fa78e8743be80da9aace6f9f *SRC\MC68020.S 021582f73d3324be77267a0c60890e6e *SRC\MD5.C 3b254fd2c035f3081ca2ec96ea120f9a *SRC\MD5.H 517550a4f55b76767a524f8997310bae *SRC\MDFILE.C f54f6dc8ab01cb256d23f59824c38ee7 *SRC\MDFILE.H 5fbaf7195aadb77916f02c6fe3260a45 *SRC\MORE.C ad3274da77b334827113f23ba7e85730 *SRC\MORE.H 9cb7caf58ca015e4a2a88deb056c539d *SRC\MPIIO.C 4d1446ac5992abe2cf1ea12a8f2d9310 *SRC\MPIIO.H 5b5f0174cdc8d2dcf6c48240ea4bf055 *SRC\MPILIB.H f86467788e24b8484c9f9c71b8bfb692 *SRC\MPILIB.C 5db4340956609ac9debb9a517371bf9e *SRC\PASSWD.C 9344f7fe246c52d04105ddfae09de625 *SRC\PASSWD.H 8fe5084f2924836c655e84ef7f835674 *SRC\PGP.C 614f9234b18231bf92219c8a257e78cc *SRC\PGP.DEF 88c06903fc5386160e34291da980c421 *SRC\PGP.H 851e15e93234d3c466af5f9c9c932d79 *SRC\PGP.MAK 64459d86a1069f98ed6d471b39614561 *SRC\PGP.OPT 2def18122c0cf2b56e0e8caff3e3ecb5 *SRC\PGP.PRJ abf28ba7832d89abeac494e3cec45a7c *SRC\PGPPWB.MAK dbb569238f082bb4048264ffd0eb117a *SRC\PLATFORM.H 19be9bade48954274b84408fa18d4ad0 *SRC\R3000.C e64d1a208d148cd3c2400f9301360df2 *SRC\R3000.S 766825310519ca3c70395c2ccf986aa7 *SRC\R3KD.S ba19b4d87c1f1d36f00e1f180b4b9a72 *SRC\RANDOM.C 1aad27b13005436b9e2e9c7537a641e0 *SRC\RANDOM.H 62542804547db44fabdf36bc31d0802e *SRC\RSAGEN.C 6d3eb1bb77e53c7020dc6180c95adeb2 *SRC\RSAGEN.H d026b1e2ef561bf20790c81578159449 *SRC\RSAGLUE.C a62a4b12a3837571e13419559c385747 *SRC\RSAGLUE.H b13fc1755a4d36109604dd027d9a5d36 *SRC\SPARC.S e01ca7bf8ff1b5fb55b95b762569430d *SRC\SPARC5.S 9d47b06b192c264dcbf2184c1890f05f *SRC\STDLIB.H 1efd1412a867be2b00a0cd66f036c314 *SRC\SYSTEM.H 329e9a279a9cdd4ae241d03839970a6d *SRC\SYSTEM.C 270fa89c0ff884ee10d1a02a1ff9040d *SRC\USUALS.H 30861dd65fdde4a5980b7d4cdf77ffdf *SRC\VAX.MAR 4d38b8dd3fa590edac0c2c9ccbfa2c0f *SRC\VAXCRTL.OPT 0bfbf4243329095d8bedb43e9222c6f4 *SRC\VMSBUILD.COM 1f09c5096052dd04a23f82fbfbf3f735 *SRC\ZBITS.C 9ff737184ab3697105e63c314ee291bb *SRC\ZDEFLATE.C 6ce4f6a3d9a62c1f188a2c22c171242a *SRC\ZFILE_IO.C 20cc87c569e4a1ef96b700f733190201 *SRC\ZGLOBALS.C 7cf642c7a28dab19b5b257d6f06fa3a4 *SRC\ZINFLATE.C 28d41c5aea7551e8c6c3d12e69141adb *SRC\ZIP.C 6e4e3f4ae03d0d6a9d466716bafe719f *SRC\ZIP.H 1602f1e2f0836b7d2af3e071fca8a47e *SRC\ZIPERR.H d196f856bc08b1740b2679c5f5fd1411 *SRC\ZIPUP.C 988ca6b0f63791ca02524048e666cb72 *SRC\ZIPUP.H fb27196aa99cf8b47fba10581db5aa24 *SRC\ZMATCH.S 8f5d690f2652a4d4ceab1b41d1b40d01 *SRC\ZMATCH.ASM 56b97156406d0adb0e9b714c2d5bf6c6 *SRC\ZREVISIO.H 7c2f8a376a30a72eb71eff212f1a8b14 *SRC\ZTAILOR.H 17fac9f3271a8650256da28bf31b584b *SRC\ZTREES.C 3f114dac8098c09167d2d2c540520415 *SRC\ZUNZIP.C d211d2be3334c216808c376cc5b5812e *SRC\ZUNZIP.H This version of PGP has not been approved by MIT or Phil Zimmerman. Please do NOT send any questions or bug reports about this version to either pgp-bugs at MIT or directly to Phil, but rather to me, Steve Crompton <100645.1716(a)CompuServe.COM> London, 23rd November 1996 -----BEGIN PGP SIGNATURE----- Version: 2.6.2i Comment: Requires PGP version 2.6 or later. iQCVAwUBMpc+1Qc2DukbwCfhAQHi8gP+LCT2tFyzHf54CCkzeqQKbfQdFlldddtO RwwyVLOE6R7HnHuwz8HPFOEKjz85z158Rq0RbpmZqG+G0ynChuqm/80ocEfB83PI PXLjgTzeOxqdEum9tWpa45UUlMEuC4Puni7t9AUMyNlTmNrunbRMFdcDxIajsV+j U/0r1tRhPA4= =G+nz -----END PGP SIGNATURE-----

3 2

Re: Sameer R.I.P.
by azur＠netcom.com 17 Dec '03

17 Dec '03

>C2 has a nice corporate-style fig leaf on its site. Sameer has decided, it >seems, to get out of the anonymity business and pursue other interests. > >Nice run while it lasted. > >FYI, Sameer does mention that his recent legal brouhaha had nothing to do >with this decision. C2 is still appears comitted to anonymity, they just don't want consumer accounts which were unprofitable. C2 will still support anonymous Web pages and offers the Web-access Anonmizer.

1 0

Re: Star Trek: First Contact
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 6:02 AM 11/23/96 -0500, Black Unicorn wrote: >On Sat, 23 Nov 1996, Bill Frantz wrote: >> OBMoney: Picard states the they don't have money in the 24th century. >> Instead they work for the good of mankind. Nanotechnology must have made >> everything material possible, so the only reward left is status (aka >> reputation). > >Why doesn't everyone have a starship? (Tongue firmly in cheek) It seems some feel that their best route to high status is to be the crew member who beams down and dies. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

1 0

Re: how much entropy in common answers
by Hal Finney 17 Dec '03

17 Dec '03

From: Pat Farrell <pfarrell(a)netcom.com> > Clearly there are cultural issues involved. The entropy in a question > such as "what is your favorite brother's name?" is low in an Irish > family like mine where names cluster arround choices such as are Patrick, > John, Sean, and Dan. > > So how do we measure the entropy objectively? You have to estimate the probability that the attacker will guess what you have chosen. This will depend on how much the attacker knows about you. If he knows that you're Irish, it will help in the question above. If he knows the names of your brothers, it will help a lot more. Probably it is best to be conservative in assuming what your attacker knows. If you have four brothers and nobody whom the attacker could ask will know who is your favorite, but you think he could find out there names, then he has probably a 1/4 chance of guessing right. (Actually he might do better by preferring older brothers rather than younger, etc.) The amount of entropy is then negative log 2 of the probability, or 2 in this case (2**-2 is 1/4). For cars, if 50% of people like you would have chosen Mustangs, 40% Camaros, and the remaining 10% scattered among other brands, then if your favorite car was a Mustang that is only worth about 1 bit. But if your favorite car was an Oldsmobile there might be only 1/100 chance of the attacker guessing that, so it could be worth 6 or 7 bits. Hal

1 0

This is your last warning
by aga 17 Dec '03

17 Dec '03

On 23 Nov 1996, Firebeard wrote: > >>>>> aga writes: > > a> It just "looks" that way on the net. I do live-fucking, newsgroup > a> flooding, mailbombing, vote-tampering and defamation all legally, > a> and OPENLY on the InterNet. > To be truly honest about this, (since you keep putting that cypherpunks address in the header) I have not really done any of the above yet, but they are all perfectly legal in cyberspace. Just get the fucking point, there are no laws which can cross borders. > a> The more you PGP, the worse you look. Nobody reads your e-mail, so > a> stop being so paranoid. > > Hate to disabuse you, but I've had it done. I've had military > investigators hand me copies of email I've received, and ask me to > explain them, and the actions I took (and did not take) in response. > Just what kind of 'military investigators?' Since you are a civilian, they should not have even asked you that question. You answer by privete email. The net is clearly not military property but belongs solely to international anarchists which can not be stopped by any laws. > -- > #include <disclaimer.h> /* Sten Drescher */ > ObCDABait: For she doted upon their paramours, whose flesh is as the > flesh of asses, and whose issue is like the issue of horses. [Eze 23:20] > ObFelony: President Clinton, you suck, and those boys died! > Unsolicited solicitations will be proofread for a US$500/KB fee. > Now look, I have told you before. Stop writing to me and using the cypherpunks address as a cc in the header. I told you before that I am not going to write to that fucking list any more, and if I receive any more e-mail from you with their address in the header, well... You have been doing this for a number of days now. This is your last warning.

1 0

Re: how much entropy in common answers
by Pat Farrell 17 Dec '03

17 Dec '03

At 01:26 PM 11/23/96 -0800, Hal Finney wrote: >From: Pat Farrell <pfarrell(a)netcom.com> >> Clearly there are cultural issues involved. The entropy in a question >> such as "what is your favorite brother's name?" is low in an Irish >> family like mine where names cluster arround choices such as are Patrick, >> John, Sean, and Dan. >> So how do we measure the entropy objectively? > >You have to estimate the probability that the attacker will guess what you >have chosen. This will depend on how much the attacker knows about you. >If he knows that you're Irish, it will help in the question above. If he >knows the names of your brothers, it will help a lot more. Probably >it is best to be conservative in assuming what your attacker knows. I was really hoping for some insight into the general problem. If you knew that my family is Irish, that makes certain names much more likely. Obviously if you know that I've got five brothers, a little bit of work will probably let you know that they are Tom, Dick, Harry, Mike, and John. But that is an example of a terrible question for Carl's approach. I was asking the more general question. Carl suggested that in general a first name has about eight bits of entropy. But knowledge of the social environment can seriously reduce it. Jenifer was a hugely popular name for girls in the US ten to 20 years ago. You'd expect more Juan's and Jose's in a Hispanic community, just like you'd expect the Dan's, Pat's, Mike's, in an Irish community. I know that the classic definition of entropy is, but without knowledge of the statistical universe that we're dealing with, how can I measure it? The probability that a male's first name is Harry is probably pretty low in general, yet it is exactly 20% if you restrict the world to my brothers. Carl suggested "What was the name of the first person on whom I had a crush?" But if 33% of the women are named "Maria" in the local universe, then that is not much entropy. Yet a name of "Maria McGee" is probably fairly high entropy, as it is an unlikely combination. If you were raised in a small rural area, there might not be all that many possible answers to Carl's question. >If you have four brothers and nobody whom the attacker could ask will >know who is your favorite, but you think he could find out there names, >then he has probably a 1/4 chance of guessing right. (Actually he >might do better by preferring older brothers rather than younger, etc.) This is exactly the type of local social bias that I want to measure. We would expect that an older brother could be a role model, etc. and thus be more likely to be the "favorite" How do I know when I've got Carl's 90 bits of entropy? Pat Pat Farrell CyberCash, Inc. (703) 715-7834 pfarrell(a)cybercash.com #include standard.disclaimer

1 0

Re: IPG Algorith Broken!
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

At 12:33 PM 11/23/1996, Eric Murray wrote: >John Anonymous MacDonald writes: >> >> >> At 8:09 AM 11/23/1996, Eric Murray wrote: >> >No, you can't. It's impossible to prove an algorithim unbreakable. >> >> No? Please prove your assertion. > >You can't prove a negative. If it can't be proven, why do you believe it is true? The good news is that you can prove a negative. For example, it has been proven that there is no algorithm which can tell in all cases whether an algorithm will stop. >The best IPG could say is that >it can't be broken with current technology. >Next week someone might come up with a new way >to break ciphers that renders the IPG algorithim breakable. The best they can say is what they did say: they have a proof that their system is unbreakable. What you question, quite reasonably, is whether they have such a proof. >You point could have been that the same problem exists >for proofs- that next week someone could come up >with a way to prove, for all time, that an algorithim >really IS unbreakable. So, to cover that posibility >I should have said "it's currently impossible to >prove an algorithim unbreakable". :-) Or, more accurately, nobody credible has seen such a proof. But, a clever person might invent one. IPG is eager to demonstrate their proof. They should hire a professional skilled in the art to evaluate their proof and publicly announce the results. This costs less than $5000 and would be, presumably, a small part of their profits should they have invented such an algorithm. diGriz

7 6

Re: Sameer R.I.P.
by drose＠AZStarNet.com 17 Dec '03

17 Dec '03

On Sun, 24 Nov 1996 Sandy Sandfort <sandfort(a)crl.com> wrote: >On Sun, 24 Nov 1996 drose(a)AZStarNet.com wrote: > >> Sameer has decided, it seems, to get out of the anonymity >> business and pursue other interests. > >Well, I guess you could call privacy guaranteed by strong crypto, >"other interests." Seems right in the middle of what Cypherpunks >are all about. If you like strong crypto, you'll love what's >coming next from C2Net. Point well taken. Most people who are in the market for a Web server, however, are cognizant of the fact that along with Netscape, Microsoft, Open Market, O'Reilly et al, Sameer has been for some time now selling a well regarded product: namely, his proprietary version of Apache. I guess my point was that, notwithstanding Sameer's estimable commercial software offerings, the *news* is that he has, to repeat myself, abandoned the anonymity business with respect to many of his traditional public Internet services. Certainly, no slight was intended. I "like strong crypto", so I naturally look forward to stuff from C2Net that, in your opinion, I'll "love." David M. Rose drose(a)azstarnet.com

2 1

Re: IPG Algorith Broken!
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 4:21 PM 11/23/96 -0800, John Anonymous MacDonald wrote: >At 12:33 PM 11/23/1996, Eric Murray wrote: >>You point could have been that the same problem exists >>for proofs- that next week someone could come up >>with a way to prove, for all time, that an algorithim >>really IS unbreakable. So, to cover that posibility >>I should have said "it's currently impossible to >>prove an algorithim unbreakable". :-) > >Or, more accurately, nobody credible has seen such a proof. But, a >clever person might invent one. I thought Shannon proved one-time-pads to be unbreakable using information theory. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

5 5

RE: Symantec's claim.
by James D. Wilson 17 Dec '03

17 Dec '03

See: http://www.alw.nih.gov/Security/security.html, and the attachment re Irina, Good Times, etc. ---------- From: cracker(a)icon.co.za Sent: Monday, November 25, 1996 3:45 AM To: cypherpunks(a)toad.com Subject: Symantec's claim. In light of recent claims,i would like somebody to clear this up for me. There seems to be a great deal of conjecture over wether or not the Deeyenda Virus exhists. Symantec denies it's existence,although i hear differently?? Greatly appreciate anyone who can shed some light on the subject,even though C-punks list doesnt usually deal with this topic of thought ;) Anyone come across the pkz300 trojan,if you have it send it please. A student,a paper,and a possible future career are at stake here,so please dig deep into your pockets!!!!!! Asking a lot i know! J a m e s "Lead.Follow. Or get out of the way" ----------------------------------------------------------------------------------------------- Type Bits/KeyID Date User ID pub 1024/9E318AA5 1996/09/24 Cracker <cracker(a)icon.co.za> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzJHdKwAAAEEALl3A6auLG0JLdtgEzl6KfPNqbTTSDX4L4To2b7PLqGDVV5r BezC9dD/ITrCK9M64juiQ2p/DNjIihnXlEsJCy2btypStypQgU1fvAei3AnZ1cQ8 NiAnHNS+ImUAJgZjSHEQSevGE53IUovmWQ7YHUz9VpTTCtoJoUKxYuqeMYqlAAUR tBxDcmFja2VyIDxjcmFja2VyQGljb24uY28uemE+iQCVAwUQMkd0rkKxYuqeMYql AQEjagP/cYgGLAkWZJLeRcM4URwBX3J/0R54DadVnsvvoxDkzilv7U02IXZGZGnA CvXsu2sThS7qDBiHFop/OZs3WmlQbQ4BAZ/hiCs5tSU2e7fkk0EKxsGAD1pTbw/J rRU4WePLc++vv+6CBKw5NCSR5kMh8H3X4qtZZ9dYX9zsuzWKdpk= =YGH8 -----END PGP PUBLIC KEY BLOCK-----

1 0

Security of E-Money
by John Young 17 Dec '03

17 Dec '03

The Bank for International Settlements (BIS) published in August, 1996, "Security of Electronic Money," a long, detailed study. Compare this architecture to Anderson/Kuhn's and Biham/Shamir's recent demolition. The orginal is available at: http://www.bis.org/publ/cpss18.pdf Better, Ian Grigg has HTML-ed it at: http://www.systemics.com/docs/papers/BIS_smart_security.html

1 0

RE: Mass-market crypto phones
by Duncan Frissell 17 Dec '03

17 Dec '03

At 09:41 PM 11/22/96 -0800, Declan McCullagh wrote: >PS: Over margaritas and enchiladas tonight, I was talking with one of the >crypto-ITAR enforcers from State. I mentioned that I'd be going out of the >country soon and taking my PowerBook laptop. Quite sincerely, he urged me >to keep a record of when I left and when I returned for five years. You >see, I have domestic Netscape Navigator on it. Wacky stuff. Comments like that by Feds are meaningless absent the busts of a few "laptop smugglers." If they have never busted anyone, it's a dead letter (all the more so since they legalized casual carry with record keeping). DCF

1 0