December 2003 - cypherpunks-legacy

NSA Declassifications
by John Young 17 Dec '03

17 Dec '03

Forward: A selection of National Security Agency declassification decisions is offered at http://www.fas.org/sgp/othergov/nsa/index.html ___________________ Steven Aftergood Project on Government Secrecy Federation of American Scientists http://www.fas.org/sgp/

1 0

Re: TCQ ascii version
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: tarnhelm.blu.org: majordom set sender to owner-isig(a)blu.org using -f Date: Tue, 13 Oct 1998 03:08:01 -0400 (EDT) From: Charles Demas <demas(a)tiac.net> To: isig(a)blu.org Subject: Re: TCQ ascii version MIME-Version: 1.0 Sender: owner-isig(a)blu.org Precedence: bulk Reply-To: isig(a)blu.org On Tue, 13 Oct 1998, David Meyer wrote: > You are not the person who posted the original message, but I'll extend my > request to you: provide some reasonable, legitimate, requirement for > anonymity. How about a government employee taking part in political discussion without the fear of suffering some form of reprisal by their elected superiors? How about a gay person that's still in the closet that wants to discuss how to explain their situation to their family without the fear that their sexual preference would be exposed? How about those that are HIV positive looking for support while living in a small town that is very afraid of those with HIV, and where the knowledge that one is HIV positive has driven people from the community? How about someone that feels they may be getting sexually harassed but isn't sure that they want to confront their harasser, but wants some advice? How about a rape, incest, or domestic violence victim that is looking for some support group but doesn't want to go public yet? How about the alcoholic, drug user, gambler trying to come to terms with their problem. How about the relatives of those with that type of problem that are looking for a private way to deal/handle the problems associated with their relative's problem? How about the runaway that is looking for a way to go home, or the suicidal person that is looking for help. Must they go public to get that help, or should they be able to ask questions anonymously? How about the person that wants to turn in someone that's going to commit a crime? There are lots of good reasons that people want privacy and anonymity, and lots of them have to do with the prejudices of others about the issue that the person wants to keep private. Chuck Demas Needham, Mass. > I can think of one reason to treasure anonymity: fear of retribution. > For what? Oh, anything. Doesn't matter what. You are planning to do > something that will cause someone else to take notice of you and respond > in a way you fear. Send you to jail? Fire you? Break your fingers? Close > your internet access? The problem is that these things are seldom done > on a whim. Mostly, for just cause. Who says it is just? You do. You say > "I am about to do something that's going to bring heaven and earth down > around my shoulders if I do not protect my identity." This fear may be > real or imagined. > > Please explain, with some detail, what reason a sane, guiltless person > might have for anonymity. Giving away $million$? > > -- > To unsubscribe from this list, send mail to majordomo(a)blu.org > with the following text in the *body* (*not* the subject line) of the letter: > unsubscribe isig > Eat Healthy | _ _ | Nothing would be done at all, Stay Fit | @ @ | If a man waited to do it so well, Die Anyway | v | That no one could find fault with it. demas(a)tiac.net | \___/ | http://www.tiac.net/users/demas -- To unsubscribe from this list, send mail to majordomo(a)blu.org with the following text in the *body* (*not* the subject line) of the letter: unsubscribe isig --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

IP: [FP] Boiling the frog: Much will depend on 'electronic money'
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com From: "ScanThisNews" <mcdonalds(a)airnet.net> To: ignition-point(a)majordomo.pobox.com Subject: IP: [FP] Boiling the frog: Much will depend on 'electronic money' Date: Mon, 12 Oct 1998 20:27:18 -0500 Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: "ScanThisNews" <mcdonalds(a)airnet.net> ====================================================================== SCAN THIS NEWS 10/11/98 [Forwarded message] FROM MOUNTAIN MEDIA FOR IMMEDIATE RELEASE DATED OCT. 4, 1998 THE LIBERTARIAN, By Vin Suprynowicz Boiling the frog: Much will depend on the new 'electronic money' EDITORS: A version of this feature first appeared in the October edition of Las Vegas Magazine. An Internet press release (how trendy) from the folks at MasterCard International, datelined "Purchase, N.Y., July 22, 1998," informs us: "MasterCard International hosted today an online forum with thought leaders from global business, government and research organizations to discuss lifestyle changes that will occur as smart card technology gains acceptance over the next five years. "Representatives from IBM, Hitachi, British Telecommunications plc, the U.S. federal government's General Services Administration, The Tower Group and Emerge Online participated in the roundtable, which was moderated by Richard Phillimore, Senior Vice President of MasterCard's Chip Card Business unit. "'Five years from now, multi-application smart cards will be an established technology in the payments business,' Phillimore said. 'As the benefits of multi-application smart cards are proven in the marketplace, the conversion from magnetic stripe to chip-based payment cards will be very rapid. By the year 2010, we expect all of MasterCard's credit and debit cards and terminals will be chip-based.' "Smart cards will deliver increased consumer value and utility to today's credit cards, Phillimore added. 'Chip technology will enable cardholders to use their cards for many more purposes, such as electronic ticketing, loyalty programs, and secure remote shopping -- a true Lifestyle Card that can be tailored to meet the unique needs and preferences of a single individual.'" When mentioning those ominous-sounding "loyalty programs," I should point out, the online MasterCard gang are referring not to government loyalty oaths of the "am not now and never have been a member of the Communist Party" variety, but rather a system in which cardholders receive discounts for "loyally" shopping through one company -- the system probably familiar to most consumers today via those "discount club cards" issued by your supermarket, offering you 30 cents off a package of toilet paper if you let the teller scan your card at the checkout stand. Of course, the store gets something back in return for that discount. In addition to the obvious hope that you'll keep going back to the store whose discount card you carry (essentially, a surcharge is being applied to "hoppers" who show no store loyalty), the management can now easily track how many of its outlets you visit, and what you buy there. The initial commercial applications may be innocent enough -- "Let's save postage by only sending coupons for this new brand of breakfast cereal to the home addresses of our shoppers who already buy the more expensive competitor." But you don't have to be the kind who walks stooped over to avoid the black helicopters to foresee the day when the government inspectors may arrive, asking to see the electronic profiles of all customers in a given geographic area who have used the fast-spreading cards to buy anything from home AIDS test kits to hydroponic "grow lights" to "High Times" magazine to pistol ammunition. It's all stored in the computer, you know. And how long do you think Jack, your friendly local produce manager, is really going to refuse to let the FBI access his computer without a court order? About as long as it takes them to ask for his Social Security number and threaten to call their friends at the IRS, suggesting Jack may be in need of an immediate tax audit? The cheerful little MasterCard press release doesn't take long to broach the subject of "expanded uses" for the new cards with their embedded memory chips: "The panel also addressed the use of smart cards for identification purposes. Many agreed that identification was the 'killer application' that would encourage adoption of smart card programs. Kotaro Yamashita, COO of Financial Services at Hitachi, Ltd. said, 'We see identification applications issued by governments as being big in many places outside of Asia, for example Central America.' However, Marty Wagner, Associate Administrator of the Office of Government wide Policy at the U.S. General Services Administration (GSA) cautioned that 'National identity card programs could run into trouble in the U.S. due to privacy concerns.' " # # # The process of accustoming Americans to carrying around cards which can be used to buy anything from a candy car to a soda pop to a round-trip airline ticket to London -- but whose embedded chips will also relay to corporate and government snoops the social security number and other personal information (and resultant tax obligations) of anyone making that purchase -- is well underway. There's an old folk warning that if you throw a frog in boiling water he will quickly jump out. But if you put a frog in a pan of cold water and raise the temperature ever so slowly, the gradual warming will make the frog doze happily, triggering the soporific response he instinctively displays when the sun shines on his lily pad ... In fact, the frog will eventually cook to death, without ever waking up. Likewise, some mighty high-powered public relations types are figuring ways to emphasize the convenience of "electronic cash" - and downplay the effect it may have in removing any remaining privacy from the way you spend your pay. The goal? To cook the frog, without any ruckus. Convenience, convenience, convenience, was the happy spin Time magazine put on a new "single electronic card that may replace everything in your wallet," in their issue of April 27, 1998. As the magazine was listing all the bothersome stuff you now have to lug around - cash, ATM cards, credit cards, proof of insurance - it made a not-so-subtle swipe at anyone who would resist the happy consolidation of such burdens: "Your ID cards. PRESENT: You lug various bits of your legal identity. FUTURE: Non-conspiracists could consolidate pertinent info in one place." Get that? If you don't want the government tax man to see your bank balance and a record of how many times you've flown to Zurich or the Cayman Islands, if you don't want the theater manager to see your alimony payments or your concealed-carry handgun permit, if you don't want your boss to see your prescription for post-cancer-surgery drugs, if you don't want EVERYONE to gain a precise accounting of how much you spent last month at Frederick's of Hollywood, or renting X-rated videos, or shacked up in a motel room across town, or purchasing alcoholic beverages, or buying vaginal contraceptive foam (including which brand you prefer), why, you're just some loony "conspiracist." Also note that "could" ... as though we'll still have any choice. But why worry? Digital cash will be great, argues Joshua Cooper Ramo in the big "Future of Money" piece in the April 27 Time: "Think about the $2,000 check you send to your daughter at college for expenses. How is that money really spent? Books ... or beer? Electronic cash takes that relatively simple transaction -- passing an allowance -- and makes it into a much more intelligent process. ... "Your daughter can store the money any way she wants -- on her laptop, on a debit card, even (in the not too distant future) on a chip implanted under her skin. And, perhaps best of all, you can program the money to be spent only in specific ways. You might instruct some of the digits to go for books, some for food and some for movies. Unless you pass along a few digits that can be cashed at the local pub, she'll have to find someone else to buy the drinks." Ha ha. Kind of cute, isn't it? But look again. Isn't the underlying theme one of "control"? Try substituting a different scenario for Mr. Ramo's. How about: "Think about the $1,000 Social Security check your agency sends a retiree in Las Vegas. How is that money really spent? Food and lodging ... or blackjack, roulette, and Margaritas?" If the purpose of government retirement insurance is to make sure old folks have food and a roof over their head, doesn't the government have an OBLIGATION to "earmark" portions of those checks so they can only be used to buy certain things, once the new e-cash technology gives them that capability? Couldn't we set e-cards to freeze a recipient's account if she tried to use any of the "money" to pay for a second prescription of pain pills written by a doctor other than her ASSIGNED doctor, or to buy a naughty book about how to evade taxes, or how to move money into offshore accounts? For that matter, what if your boss started earmarking parts of your electronic paycheck for rent or groceries -- at certain stores that pay for the consideration -- all "for your own good," you understand? After all, the kind of soccer moms who elected Bill Clinton can be counted on to favor almost (start ital)any(end ital) additional Big Brother controls over those irresponsible men in their lives, frittering away their paychecks on bar tabs, dirty magazines, power tools, and fancy chrome doo-dads for their pickup trucks. # # # Donald S. McAlvany, editor of the economic and geopolitical newsletter "The McAlvany Intelligence Advisor," is a fellow who has been looking into the move toward trackable "electronic cash" for some time. The lead article in the July, 1998 edition of his 16-page newsletter is headlined "Toward a Cashless Society: Implementing an Electronic Currency in America," and spells out a very different view of these developing trends from the one embraced by the jovial publicists at Time: "The global socialists who dominate America and most of the governments of the western world today (especially Western Europe) have long had a goal of moving the world away from the use of cash and into an electronic funds currency system, wherein virtually all cash in use is 'electronic currency,' " writes Mr. McAlvany. "If all financial transactions are forced through an electronic banking system ... the ultimate 'people control' system could be established. ..." Citing George Orwell's classic novel "1984," Mr. McAlvany reminds us: "Privacy is a major element of freedom, without which people and nations cannot remain free. Today, we have dozens of privacy-destroying systems being put in place by governments all over the world. They include video camera surveillance in public places; electronic eavesdropping on computers, phones and faxes; dozens of computerized files on each adult American - compiled from credit card, banking, and tax records; physical surveillance of homes, in whole areas via satellite, helicopters, and other aircraft; the growing use of Social Security numbers to extract all kinds of information on Americans from business, banking, and government data cases; photo IDs required at airports; and the push by the Clinton Administration for a computerized (smart card) national identification card for all U.S. citizens. "But the greatest privacy-destroying system of all, one which would have made Big Brother's, Adolf Hitler's, Mao's, Lenin's or Stalin's mouths water is the elimination of cash and the forcing of all citizens into the computerized banking system for (start ital)all(end ital) transactions. Ultimately these transactions can be monitored, recorded, profiled, and used in 'people control.' If all of your personal transactions can be so tracked, a socialist government bent on identifying, profiling and controlling its 'politically incorrect' citizens or 'religious fanatics' or Bible-believing Christians; gun owners; critics of the government; non-tax compliers, can easily scrutinize and build a profile on such individuals. It can also, in the absence of a cash-spending alternative, deny the privilege to buy and sell to those who are politically or religiously incorrect." Since one of the main problems banks may have during the anticipated computer crisis brought about by the turning of the century is clearing checks written on other banks -- banks whose computers may not agree with the home bank's "fix" for the transition from year date 99 to year date 00 -- Mr. McAlvany suggests that crisis might present a perfect opportunity to effectively require bank customers to change over from paper checks to "electronic cash." "Remember that during the financial crisis of the 1930s, when Franklin Roosevelt presented the American people with the alternative of a bank holiday/gold confiscation/Draconian financial controls (start ital)or(end ital) financial destruction, they willingly chose the former and gave up a major portion of their financial freedom." # # # The removal of cash, of course, will be advertised as having many benefits. Since drug dealers buy and sell their product with suitcases full of hundred-dollar bills, it will be alleged that the switch will end the drug trade (as though a multi-billion-dollar industry won't promptly hire both fancy accountants and computer geniuses to figure out how to "go electronic" without throwing blips on the IRS radar screens -- or as though they won't just add newly "illegal" hundred-dollar bills to the list of contraband they now freely move outside official channels.) Expect a public relations campaign to expose the "health hazard" of all those dirty pennies and nickels you have lying around the house. Passed from hand to hand among AIDS patients and tuberculosis-ridden junkies, how can you let your children handle such stuff? Instead, buy Sean and Alysson a new pair of color-coordinated, his-and-hers Kiddie Smart Cards, which neatly deduct exactly $1.77 from their accounts when they buy lunch at school, without burdening them down with filthy, wasteful, inconvenient (and expensive to produce) coins ... coins they might otherwise save up, after all, to buy dirty magazines, or reefer, or who knows what else? Yep, it's all for your health, safety, and convenience. And why would anyone object ... unless, of course, they had something to (start ital)hide(end ital). What was your name again? And could I have your 18-digit bank tracking number, please? You (start ital)are(end ital) in this country legally, aren't you? Not some kind of a federal fugitive/deadbeat dad? There, that's better. See how easy things are when you cooperate? Just slide your card through the security/debit slot. Now pass your wrist over the scanner to make sure your embedded personal chip has the matching security code. Thank you; you may now move along. We know you have a choice when you dine out; thank you for patronizing Burger World. # # # A full transcript of the "smart card online forum" session referred to at the beginning of this essay, as well as a biography and smart card white paper from each chat participant, can be accessed at http://www.golinharris.com/mastercard. Subscriptions to The McAlvany Intelligence Advisor ("in no way involved in the tax resistance, militia, or sovereign citizens movements in the U.S.") run a substantial $115 per year. Send subscription info to P.O. Box 84904, Phoenix, Ariz. 85071, or telephone 800-528-0559. Vin Suprynowicz is the assistant editorial page editor of the Las Vegas Review-Journal. Readers may contact him via e-mail at vin(a)lvrj.com. Vin's twice-weekly newspaper column, "The Libertarian," is syndicated in the United States and Canada via Mountain Media Syndications, P.O. Box 4422, Las Vegas Nev. 89127. Watch for Vin's book, "Send in the Waco Killers," coming from Huntington Press in early 1999. *** Vin Suprynowicz, vin(a)lvrj.com Education rears disciples, imitators, and routinists, not pioneers of new ideas and creative geniuses. The schools are not nurseries of progress and improvement, but conservatories of tradition and unvarying modes of thought. -- Ludwig von Mises The most difficult struggle of all is the one within ourselves. Let us not get accustomed and adjusted to these conditions. The one who adjusts ceases to discriminate between good and evil. He becomes a slave in body and soul. Whatever may happen to you, remember always: Don't adjust! Revolt against the reality! -- Mordechai Anielewicz, Warsaw, 1943 * * * ======================================================================= Don't believe anything you read on the Net unless: 1) you can confirm it with another source, and/or 2) it is consistent with what you already know to be true. ======================================================================= Reply to: <fingerprint(a)networkusa.org> ======================================================================= To subscribe to the free Scan This News newsletter, send a message to <majordomo(a)efga.org> and type "subscribe scan" in the BODY. Or, to be removed type "unsubscribe scan" in the message BODY. For additional instructions see www.efga.org/about/maillist.html ----------------------------------------------------------------------- "Scan This News" is Sponsored by S.C.A.N. Host of the "FIGHT THE FINGERPRINT!" web page: www.networkusa.org/fingerprint.shtml ======================================================================= ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: IP: [FP] Boiling the frog: Much will depend on 'electronicmoney'
by Robert Hettinga 17 Dec '03

17 Dec '03

> Below, please find the canonical anti-book-entry settlement privacy rant, >written by one of my favorite ranters in general, Vin Suprynowicz. ...which, of course, we've seen already. Sheesh. Sorry about that, folks. Call it mail-buffer overload, or something. :-). Sometimes it's not the the cross-fire, it's the ricochets which get you. Cheers, Bob Hettinga ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

_PI_ movie
by Walter Burton 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 My wife and I went and saw the movie _PI_ this past weekend. I was attracted to it 'cause of the subject matter. One reviewer wrote that the protagonist was a "tortured genius steeped in an intriguing blend of advanced mathematics and mystical Jewish cabala." I suspect a fair number of cypherpunks' curiosity would be piqued by such a description. Well, don't waste the 5 bucks. It's self-indulgent, pretentious, second-year-film-student crap. It's whiny, "woe-is-me-tortured-genius" drivel. It's "squinty-cinematography-for-the-sake-of-squinty-cinematography" effluvium. Here's the plot, in a nutshell: 1. Ah, I understand advanced mathematics SO WELL; I see patterns EVERYwhere! But alas, I cannot enjoy life's pleasures because I am, de rigueur, a TORTURED GENIUS! 2. And my mentor USED to be a TORTURED GENIUS, but he stopped studying THE PROFOUND MYSTERIES, and now he's happy and FUN! What a WUSS! [Oh yeah, and I suffer REALLY bad migraines.] 3. Isn't PI cool? 4. Aren't Fibonacci numbers neat? 5. Whaddya suppose The Holy Unspeakable Name of God is? 6. Oh, easy, it's 9049348384737...[insert 198 digits here]...32343. 7. I RUSH to tell my mentor what I've discovered, but, alas, my ruthless taunting prompted him to re-open his investigation of THE PROFOUND MYSTERIES and he couldn't hack it -- his brain overloaded and he died of a stroke. Damn! 8. So I dramatically BURN all my PROFOUND MYSTERIES conclusions and the director inserts the requisite "shocking scene everyone will be talking about" by having me lobotomize myself with an electric drill. 9. Next, I'm sitting on a park bench, playing games with a child (Quintessential Innocence). I am finally ENJOYING LIFE, appreciating the leaves on the trees and such. But this kid, she wants to play math games with me, which of course symbolizes the fact that IT'S NOT OVER! 10. The end. And it's all shot on shitty stock in crackly black and white. So basically, it's about two gay cowboys and some pudding. \\/alter -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.0 for non-commercial use <http://www.pgp.com> Comment: For my public key, send a msg with "public key" in the subj. iQA/AwUBNiM/4I0Llo1Bf1gWEQJmsQCfXb10feuUz/N/Jn5zxkFqymmS+gQAoI/8 4QQzJGO4rtATMDQ7zbfm0I8P =kw8W -----END PGP SIGNATURE-----

1 0

Re: Hidden WebTV signatures
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have no idea to wherre to begin an analysis.... The begining is noticably the same. with more variation the farther along. A header or version identifier? obviosly can't be a straight hash. At 04:55 PM 10/11/98 , you wrote: > >On 11 Oct 1998 15:57:33 -0500, Anonymous <nobody(a)replay.com> wrote: > >> >>Peter Gutmann writes: >> >>> For those of you who don't read sci.crypt, Robert Ames <gnome(a)istar.ca> has >>> posted an article in which he observes that all WebTV posts contain an >>> X-WebTV-Signature: line containing base64-encoded data. For samples of >>> WebTV-generated posts, try the alt.weemba newsgroup, which is filled with >>> WebTV-user drool (caution: remember to employ protection when exposting your >>> mind to the content of the messages). Some samples: >>> >>> X-WebTV-Signature: 1 >>> ETAsAhQDqtur/jfleJ2CDOnNrVoeyALEQAIUOQyCBbzjx5HHfxeMERDgCjztXOU= >>> X-WebTV-Signature: 1 >>> ETAtAhUAmCCzQt+Tqt6fNX+L9+gDCECaqQkCFA0YCPz5tk85mUgq7iX/u4vWvOgG >> >>Could someone grep their news spool for a few hundred of these signatures >>and post them here? We can do statistical analysis on them and determine >>whether they all appear to be modulo the same q value. > > >Here ya go. 313 webtv sigs > >-- Phelix > > > > ETAtAhQeHk0+b8Au0iGpkJrZtwhsU2MVoAIVAJR/nr45zMDoq1G526NRP+3jHVIb > ETAtAhUAiWMjaBJx75P5wCgIxslClcSUU4cCFHT6dVYU49dtEvX4HCI4bcmEiKBU > ETAsAhRLS36vm1OTCBG3CIAwMpdtg3fR1gIUdgWUE1cbbagEl7VbQvsengViPHc= -----BEGIN PGP SIGNATURE----- Version: PGP Cyber-Knights Templar build 5.5.3ckt iQEVAwUBNiNNzaKPqmf00ZAbAQGtuwf8DCEKYf1rBbNCgCraoROS/62RfvZ6pmau nvt+5lF5r6Lk6xEEFz5XoMz+loIW/Y2MRZ9Wly9t9pIDa6r+o+g6AI3RMpjio0Mn b04MZL3uHLcKaxo7yThocc8CVUlQRoap7FfHPkMoUH04CpfJtWcS/E3IfsAPXovW w2XG6N9bEJbLyxc1I9dGSb63WRHE5ADbzgGkUKhNJirgZukdBLn/KMrnhsjeOlUT +sLMTHiH5/5NbXl+Te7+jV/BBUgYDnz3kZAZrQo0XTBzgG4J8ORg8s3NmCA0j120 vxpXTRgay43OYJEACLeRWhUcONdmdffuqqUQ5AmAaTDj9hRPZlPXNA== =U1Fq -----END PGP SIGNATURE-----

1 0

Re: FYI: More on WebTV security
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: dstoler(a)gptmail.globalpac.com Mime-Version: 1.0 Date: Tue, 13 Oct 1998 05:38:59 -0700 To: Pablo Calamera <pablo(a)microsoft.com>, rah(a)shipwright.com, mac-crypto(a)vmeng.com From: dstoler(a)globalpac.com (dstoler) Subject: Re: FYI: More on WebTV security Cc: jimg(a)mentat.com Dear all, This message discusses Microsoft's recent press release where they announce unlimited 128 bit RC4 export approval for WebTV users in Japan and the UK with no key escrow. They announce secure email between WebTV users in addition to security for financial services, web shopping, etc. http://www.microsoft.com/presspass/press/1998/Oct98/EncryptionPR.htm (See the end of this message for key paragraphs of the press release.) I rarely post messages on the crypto mailing lists. I am sufficiently disturbed by Microsoft's recent WebTV press release that I feel compelled to comment. The press release implies that there is secure end-to-end email between two WebTV customers. Perhaps I am overly cynical, but I am guessing that they are using SSL (TLS) from a web based email application on the client to WebTV's servers. I presume email data is decrypted at the servers, then re-encrypted to the recipient when she uses the WebTV client to read email. This approach would allow access to private email at the servers by WebTV employees or law enforcement agencies. Note the careful use of the phrases "unauthorized party" and "without posing undo risks to national security and law enforcement" in the press release. I believe that WebTV's email security is directly coupled to their ability to establish and enforce good security policy within their operation and the trustworthiness of the employees who have access to sensitive data. I am concerned that carefully constructed wording of Microsoft's press release implies stronger email security than really exists. I hope I am wrong. David Stoler Key paragraphs from Microsoft's press release: WebTV Networks has been granted the first export license to use strong 128-bit encryption for any user and any application in Japan and the United Kingdom. So, for example, an e-mail message with personal information sent from a WebTV subscriber in Japan to a second WebTV subscriber in Japan will be sent securely because there is no known technology by which an unauthorized party could intercept and decipher it. Therefore, as part of the WebTV Network, the WebTV-based Internet terminal (starting at under $100) is now the most secure communications device available from a U.S. company. "WebTV Networks' export approval is a significant step for industry and reflects the U.S. government's commitment to promoting e-commerce abroad," said William Reinsch, U.S. undersecretary for export administration. "The WebTV Network provides secure communications for its customers and partners without posing undue risks to national security and law enforcement." --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

4 4

_PI_ movie
by Walter Burton 17 Dec '03

17 Dec '03

My wife and I went and saw the movie _PI_ this past weekend. I was attracted to it 'cause of the subject matter. One reviewer wrote that the protagonist was a "tortured genius steeped in an intriguing blend of advanced mathematics and mystical Jewish cabala." I suspect a fair number of cypherpunks' curiosity would be piqued by such a description. Well, don't waste the 5 bucks. It's self-indulgent, pretentious, second-year-film-student crap. It's whiny, "woe-is-me-tortured-genius" drivel. It's "squinty-cinematography-for-the-sake-of-squinty-cinematography" effluvium. Here's the plot, in a nutshell: 1. Ah, I understand advanced mathematics SO WELL; I see patterns EVERYwhere! But alas, I cannot enjoy life's pleasures because I am, de rigueur, a TORTURED GENIUS! 2. And my mentor USED to be a TORTURED GENIUS, but he stopped studying THE PROFOUND MYSTERIES, and now he's happy and FUN! What a WUSS! [Oh yeah, and I suffer REALLY bad migraines.] 3. Isn't PI cool? 4. Aren't Fibonacci numbers neat? 5. Whaddya suppose The Holy Unspeakable Name of God is? 6. Oh, easy, it's 9049348384737...[insert 198 digits here]...32343. 7. I RUSH to tell my mentor what I've discovered, but, alas, my ruthless taunting prompted him to re-open his investigation of THE PROFOUND MYSTERIES and he couldn't hack it -- his brain overloaded and he died of a stroke. Damn! 8. So I dramatically BURN all my PROFOUND MYSTERIES conclusions and the director inserts the requisite "shocking scene everyone will be talking about" by having me lobotomize myself with an electric drill. 9. Next, I'm sitting on a park bench, playing games with a child (Quintessential Innocence). I am finally ENJOYING LIFE, appreciating the leaves on the trees and such. But this kid, she wants to play math games with me, which of course symbolizes the fact that IT'S NOT OVER! 10. The end. And it's all shot on shitty stock in crackly black and white. So basically, it's about two gay cowboys and some pudding. \\/alter

2 1

Crypto Laxatives
by John Young 17 Dec '03

17 Dec '03

Senators Lott and Kerrey have made crypto core dumps in recent days: http://jya.com/lott100998.txt http://jya.com/kerrey101298.txt Lott says 56-bit crypto is bad, and recites its weaknesses, reading a script he doesn't know shit about, hair and mind immutably fixatived. Kerrey Lincoln Monuments long dead Nat sec with Info Tech faux marbre, frutilessly limoing around DC torrist piles looking for The American People, while Super-Coifed Cohen aimlessly sends Cold War B52s to PR-bomb Menwith Hill targets -- unruly wildhair ups -- protecting what Kerrey can't find. Clinton and Yeltsin will shortly morph into Serbian hair ball.

1 0

Re: Soccer Moms?
by Jim Gillogly 17 Dec '03

17 Dec '03

Ken Brown wonders about this phrase: >> After all, the kind of soccer moms who elected Bill Clinton >"Divided by a common language" as I am I genuinly don't know what that >means. And I can't even guess from context. "Soccer moms" are the suburban mothers who efficiently perform any number of child-rearing tasks, including taking their kids in a sports utility vehicle (an awful invention) to soccer practice. Soccer is increasingly popular and available to girls as well as boys. Women in general favored Clinton, and soccer moms in particular are the women most likely to vote... since they're doing everything else, working in a trip to the polls is nothing to them. Probably sounds as arcane as "Sloane Rangers" does over here, eh? -- Jim Gillogly Sterday, 22 Winterfilth S.R. 1998, 15:20 12.19.5.10.15, 6 Men 8 Yax, Eighth Lord of Night

1 0