December 2003 - cypherpunks-legacy

Re: CLINTON/STARR SCRAMBLED
by Bill Stewart 17 Dec '03

17 Dec '03

>Anonymous wrote: > >> One of the hottest telecasts in American history will be scrambled >with the >> latest encryption technology and put on a special fiber-optic line >from the >> White House to the courtroom, the DALLAS MORNING NEWS reports in >Thursday >> editions. They were going to use a safer, though less interactive technology, but fortunately some WhiteHouse staffer realized that _somebody_ out there would make a joke about "Sex, Lies, and Videotape" and it'd be all over for Slick Willy... Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Announcement: Cryptanalysis of Frog (an AES Candidate)
by Bruce Schneier 17 Dec '03

17 Dec '03

Results Announcement: D. Wagner, N. Ferguson, and B. Schneier, "Cryptanalysis of Frog," Counterpane Systems Report, Aug 1998. Abstract: We examine some attacks on the FROG cipher. First we give a differential attack which uses about $2^{58}$ chosen plaintexts and very little time for the analysis; it works for about $2^{-33.0}$ of the keyspace. Then we describe a linear attack which uses $2^{56}$ known texts and works for $2^{-31.8}$ of the keyspace. The linear attack can also be converted to a ciphertext-only attack using $2^{64}$ known ciphertexts. Also, the decryption function of FROG is a lot weaker than the encryption function. We show a differential attack on the decryption function that requires $2^{36}$ chosen ciphertexts and works on $2^{-29.3}$ of the keyspace. Using our best attack an attacker with a sufficient number of cryptanalytical targets can expect to recover his first key after $2^{56.7}$ work. Taken together, these observations suggest that FROG is not a very strong candidate for the AES. This paper is available at http://www.counterpane.com/publish.html, and will be made available at the AES Workshop next week. Cheers, Bruce ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

2 1

Weekly Checks...
by thanford5＠sprynet.com 17 Dec '03

17 Dec '03

If you would like to have checks of $1,000 and up sent to you ON A WEEKLY BASIS, then call this number. If not, then I'm sorry to bother you. ALL YOU DO IS PASS OUT THIS 800 NUMBER, NOTHING ELSE. The company sends you a check every week. The company does all the work and you get paid for it. If you can get the 800 number out there, as I am doing, then YOU WILL MAKE thousands per month. Simple as that. You have nothing to lose by calling to get more information. 1-800-811-2141 You will be asked for ID #50030 when you call. (Live operators are available from 8 AM-10 PM CST Monday through Saturday and will be able to answer any questions you may have.) Call one of the 24hr TESTIMONIAL lines at 888-703-5389, 888-446-6949, 888-446-6951 or 888-731-3457 (all toll free). Click here for removal: http://www.remove-list.com

1 0

Microsoft Electronic Commerce patent: Prior Art?
by Bruce Schneier 17 Dec '03

17 Dec '03

I just received this in email. Bruce ------------begin forwarded message-------- Dear Bruce, the Microsoft Patent 5,768,385 filed Aug. 29, 1995, issued Jun. 16, 1998 on "Untraceable Electronic Cash" is nothing more than a well written remake of the "Anonymously Transferable Standard Values" presented at IFIP Sec 1986 under the name "Anonymous Standard Value Accounts", published both in the Pre- and Post-Proceedings there, more detailed in a research report of 1987 and even published in a refereed journal, Computers & Security in 1989, see below. I do not know the legal system of the US well enough to know whether challenging the patent is worthwhile and I do neither have the time nor money to do it for myself, but I think it is at least worthwhile for the security community to know. So please feel free to distribute this information, e.g. within CRYPTO-GRAM. Yours Andreas ------------------------------------------------------------------------ Most of the references below can be downloaded at http://www.semper.org/sirene/lit/sirene.lit.html Holger Bürk, Andreas Pfitzmann: Value transfer systems enabling security and unobservability; Security and Protection in Information Systems (IFIP/Sec. '86), A. Grissonnanche (ed.), North-Holland, 1989, 225-237. (Superseded by the following BüPf-papers.) Holger Bürk, Andreas Pfitzmann: Value Transfer Systems Enabling Security and Unobservability; Interner Bericht 2/87, Fakultät für Informatik, Universität Karlsruhe 1987. (37 pages; Abstract and paper available online. See also BüPf_89, BüPf_90.) BüPf_89 Holger Bürk, Andreas Pfitzmann: Digital Payment Systems Enabling Security and Unobservability; Computers & Security 8/5 (1989) 399-416. (Abstract and paper available online.) BüPf_90 Holger Bürk, Andreas Pfitzmann: Value Exchange Systems Enabling Security and Unobservability; Computers & Security 9/8 (1990) 715-721. (Abstract and paper available online.) ------------------------------------------------------------------------ Andreas Pfitzmann Technische Universitaet Dresden Phone (home) +49 351 3161973 Fakultaet Informatik (office) +49 351 4638277 Institut Theoretische Informatik (secretary) +49 351 4638247 D 01062 Dresden Fax +49 351 4638255 Germany e-mail pfitza(a)inf.tu-dresden.de ------------end forwarded message-------- ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

1 0

Man with two dicks keeps one 'under his hat'/I married Marilyn Monroe's ghost http://stuffed.net/98/8/16/
by STUFFED/EUREKA! 17 Dec '03

17 Dec '03

Welcome to today's issue of Stuffed. To read it you should click on the URL below. If it is not made clickable by your email program you will need to use your mouse to highlight the line, copy it and then paste it into your browser (then press Return). http://stuffed.net/98/8/16/ If you have an email program that can display web pages you will find today's front cover should have already been disp- layed and can be clicked on to take you straight to Stuffed. This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka!

1 0

Food For Less
by Millennium.Marketing 17 Dec '03

17 Dec '03

Everybody Eats Food: and they will always buy GROCERIES! Greetings: I am sending you this only because Everybody, Everywhere can BENEFIT from this program. I have received Bags of Testimonials STATING Everybody should Hear of this, so if you are Interested in Being Given $215.00 Please Read On. That is the bottom Line and one thing you can count on until the Earth stands still. If you had a chance to trade $25.00 for $240.00 would you do it, well that is what I am offering you today. This is how the program works, By using the certificates in the books, you receive grocery coupons of your choice, not chance, for products that you regularly purchase and use. The benefit to you is substantial savings on your grocery bills, due to having far more coupons for the products that you regularly purchase. We currently have an inventory in excess of 10 million coupons spanning over 1,200 national, name-brand products. Product categories include: breakfast cereals and products, coffees and teas, frozen foods, paper products, laundry products, household cleaners, personal care products, pet products, baby care products, and dozens of other categories of products purchased by thousands of people every day. What makes the program unique is that the Grocery Coupon Certificate Books allows you to choose coupons for the products that you already purchase and use. Instead of wasting time searching through the Sunday newspaper or magazines to find coupons, you simply fill in the product selections on the back of a grocery coupon certificate for coupons that you need. Then send the completed certificate to the warehouse and receive your grocery coupons within ten to fifteen working days. Each Grocery Coupon Certificate Book has a suggested retail price of $24.95 and contains twenty, ten-dollar grocery coupon certificates. In addition, each certificate book also contains four valuable Bonus Certificates. The certificates offer a phenomenal $240.00 in potential savings for a one-time, minimal investment. However, if you take advantage of grocery stores that offer to double or even triple the face value of coupons on certain days, the potential savings from using the certificate books will be much greater. Because of this unique product, thousands of people across the country will have the freedom to choose the coupons they need and begin saving up to 50% or more off their grocery bills every time they shop. "I urge anyone seeking a lucrative, ground-floor business opportunity to contact us immediately, so that they may take advantage of our incredible program and realize the fantastic savings and profits available to anyone who uses our Grocery Coupon Certificate Books." It's easy to see why several top professionals in network marketing are saying that this is "by far the best MLM opportunity to surface in a very, very long time." For more information on purchasing a Grocery Coupon Certificate Book or becoming a distributor please call, Toll Free 1-888-512-6113, if busy or no answer. It is because of the over whelming response we've had on the Grocery Coupon Certificate Books and all of our operators are with customers, please leave your name and phone number and Customer Service will return your call. You also can e-mail us at discount_food(a)hotmail.com If you want to purchase a coupon book send your address along with a $26.00 check or money order that is $25.00 plus $1.00 Shipping to. Discount Food Connection 3006 W 34th suite #3 Anchorage, Alaska 99517 Allow 1 Week For Delivery Thank You Jerry Williams Discount Food Connection *********************************************************************************** If you are not interested in our Grocery Coupon Certificate Books, disregard this e-mail. This is a one time mailing and only those that respond to this promotion will ever hear from us again. Thank You Discount Foods ************************************************************************************

1 0

Defcon Social Engineering Contest
by Wardemon 17 Dec '03

17 Dec '03

Can anyone who went to Defcon, let me know about the Social Engineering contest?... Was it elite or lame? Who won... and who did they Social Engineer???? <A href="mailto:Wardemon@erols.com">Wardemon(a)erols.com

1 0

ADV: Una Mina de Oro -- Justo Bajo
by bizemail＠TheOffice.net 17 Dec '03

17 Dec '03

=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message complies with the proposed United States Federal requirements for commercial e-mail bill, Section 301. For additional info see: http://www.senate.gov/%7Emurkowski/commercialemail/EMailAmendOutline.html Required Sender Information: Alberto Martinez Av. San Jeronimo 273, local 21-120 Tizapan Pedregal de San Angel 01908 Mexico, D. F., Mexico Radio: (5) 447 11 11 pin 5550957 Per Section 301, Paragraph (a)(2)(C) of S. 1618, further transmissions to you by the sender of this e-mail may be stopped at NO COST to you by sending a reply to this e-mail address with the word "remove" in the subject line. =-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tome solo unos minutos y mire hacia abajo. ¿ Que es lo que ve ? ¿ Un tablero delgado de plastico lleno de teclas sobre el ? ¿ Que sentiria si le dijera que esas teclas estan llenas de oro ? Bueno, ¡ es verdad ! Las teclas de su tablero fueron LLENADAS con ORO PURO--¡solo permanezca sentado con la mente abierta ! ¿ Como ? Por medio del Internet y... el Sistema BIZ-online. Con un potencial de varios millones de personas, el internet es el lugar ideal para promover un producto o idea. Y lo maravilloso de esto es que usted puede conseguir una presencia en la World Wide World como la compañia mas grande , o quizas mas -- ¡ SI USTED TIENE LA HERRAMIENTAS - Y - SI USTED SABE COMO USARLAS ! ¡ >>>>>>>>>>>>>>>>>COMO LOS PROFESIONALES ! ¡ >>>>>>>>>>>>>>>>>NOSOTROS LE ENSEÑAMOS COMO ! Esto es por lo que quiero hablarle del Sistema BIZ-online. El Sistema BIZ-online es un recurso diseñado para proveerle las herramientas que le permitiran aprovechar las TREMENDAS OPORTUNIDADES encontradas en el internet marketing masivo -Y- enseñarle a utilizarlas. Es mas facil de lo que usted piensa... Si conoce los secretos intrinsecos. Como miembro del grupo del Sistema BIZ-online, usted contara con el constante soporte de nuestra parte. Usted sera cuidadosamente guiado paso a paso por el camino de las GRANDES UTILIDADES obtenidas a traves del mercadeo en linea tan exitoso hoy en dia. Unos cuantos ejemplos de lo que ofrecemos son los siguientes: >Mas de 400 direcciones de clasificados GRATUITOS y de ALTO TRAFICO de usuarios. >45 categorias de grupos de discusion donde esta permitido publicar anuncios comerciales. >Un programa descompactador de archivos >Un programa para bajar correctamente archivos de la red. >Cuatro programas Software utilizados en el correo masivo ¿ No tiene un producto que ofrecer ? ¡ No hay problema ! ¡ El Sistema BIZ-online le provee uno ! ***¡ Y ahora lo mejor de todo ! *** ¡ Usted puede generar $3,500 USD mensuales comercializando el Sistema BIZ-online ! ¡Imagine esto! ¡GENERE DINERO en su tiempo libre, desde la comodidad de su hogar ! Ya ve que facil es extraer el oro del teclado de su ordenador con el Sistema BIZ-online. Para obtener informacion amplia de esta apasionante oportunidad, visite nuestro sitio en: http://www.pakis.com/pages/biz/ o bien, envie un Email insertando "BIZ" en el subject para mas informacion. Y solicite su EXTRACTOR DE DIRECCIONES completamente GRATIS. Este software le sera enviado por E-mail en menos de 24 horas. ¡ Vea lo facil que es encontrar el camino a la prosperidad a traves del internet marketing ! >>>>>>>>>>>>>>>>>>>>>Usted puede hacer que esto suceda. >>>>>>>>>>>>>>>>>>>>>El Sistema BIZ-online lo hace posible. Gracias. Alberto Martinez bizemail(a)TheOffice.net http://www.pakis.com/pages/biz/

1 0

Re: Internet is rickety
by Bill Stewart 17 Dec '03

17 Dec '03

This isn't coderpunks material; I'm copying to cypherpunks instead. (I've also removed letters(a)sjmercury.com from the Cc:.) At 08:01 AM 8/16/98 -0700, Alex Alten wrote: >Bruce, >You are making it sound worse than it is. The underlying network >routing infrastructure is designed to be extremely robust in the face >adverse conditions (originally it was nuclear attack). I'm only aware >of two incidents that actually ground large parts of the Internet to a >halt. The 1st involved a bug in the backbone rounters when the Internet >was young and had relatively few nodes. The 2nd was the Morris worm Physical damage is one thing; logical-level damage is another. Some newer vulnerabilities are the DNS system and routing protocols. There was a major DNS failure a year or so ago when NSI or one of the root servers published a garbled database; I don't remember details. That's annoying, but easily noticed, and easy to work around, and easier to prevent happening in the future. But it's also easy to trick the DNS root servers from outside (as Kashpureff did), or mess with them inside (I forgot why Postel did that recently.) A more serious problem occurred when some small ISP misconfigured their Border Gateway Protocol parameters, announcing to the whole world that their little T1 line was the best way to get almost anywhere from almost anywhere else. This was only mildly untrue until a few large providers updated their tables to reflect it, at which point their T1 started to melt, taking much of the Internet down with it. This kind of thing _can_ happen again; the interesting problem is what if somebody deliberately starts doing it a lot.... And much of the world's traffic goes through MAE-WEST and MAE-EAST, as a way of getting between ISPs, though bigger carriers have direct connections between their networks, and many small ISPs at least have direct connections to their continent-wide carriers. The MAEs and other NAPs get slow fairly often, and occasionally just get fried; a major outage could be a serious problem, so the fact that MAE-EAST lives in a parking garage in the DC area may or may not bother you. That's three ways that the whole Internet can have serious trouble; there are presumably a number of others, if you believe in Murphy or believe the L0pht's announcements. Then there are more subtle problems - what happens if Altavista dies? (Yes, there are other search engines, but probably 3-5 major ones.) And there are the increasing number of portal and free email services from Hotmail, Excite, Altavista, MyYahoo, Netscape, etc., which will take out large numbers of users' mail access if any of them dies. And then there's AOL, which is probably a pretty robust design, and which may or may not be missed by people on the _real_ Internet if it dies for a while, but could also cut off lots of users from the net. Also, much of the robustness derives from having _enough_ excess bandwidth in the network that if you lose a good chunk of it, you'll still have enough for the remaining users (the nuclear war scenario does reduce the user population as well as the network...) But you can get into localized problems, for example the cable cut that trashed uunet's access to Florida the other week, and the Internet doesn't have a widespread priority mechanism to identify "more important" traffic, though there are many mechanisms for prioritizing individual users' networks. It still works pretty well, but that doesn't mean it's not rickety. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

none
by nobody＠nsm.htp.org 17 Dec '03

17 Dec '03

Are there PGP for WindowsCE? Thanks.

1 0