December 2003 - cypherpunks-legacy

Triple-DES controlled?
by Goh Seow Hiong 17 Dec '03

17 Dec '03

Could someone confirm whether the US export restrictions apply to Triple-DES? If so, are there exceptions as in the case of DES (e.g. for banking or financial applications). Thx. SH

2 1

Re: Where to find Internet growth stats?
by brendan＠Mail.RAth.PeachNet.EDU 17 Dec '03

17 Dec '03

http://www.tic.com/mids/midshome.html is --cut->>Matrix Information and Directory Services, Inc. (MIDS) is a corporation founded by Smoot Carl-Mitchell and John S. Quarterman. Eric McKinney is Assistant Editor. <<--paste- --- Brendan Mullen brendan(a)chugalug.cosmic.uga.edu Athens GA USA

1 0

Re: www remailer interface
by Will French 17 Dec '03

17 Dec '03

> 1. removing the hardwired > 2. removing the hardwired and forcing you to chain > 3. keep the hardwired in and use some 'established' remailer > or one the group can come to a consensus on. Given the second possibility, I see no reason to hardwire a remailer. It really will make people suspicious! I can easily imagine someone deciding not to use that remailer again, just on general principles. And anyway, chaining is not always necessary, especially if the sender is at a public Web terminal or using an anonymous Web proxy. The remailers don't enforce chaining, why should you? Will French <wfrench(a)interport.net>

1 0

[Meaningless] Vote.
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Fellow Cypherpunks: Below is the URL of an "Online Forum" page to allow 'Net citizens vote on various, (usually boring) issues. >************************************************** > VOTELINK brings the Voice of the Internet > To today's hot news topics. To make your voice > "heard round the world" go to: > > http://www.votelink.com >*************************************************** So last week I was surfin', wastin' time, and drinkin' a brew, and I happened by. I was asked to vote on some mundane topic [I forget what]--and instead I suggested a "World Vote" topic I liked better, and, sure enough, they put it up this week: [I was shocked when they e- mailed me!] :-) >Should Phil Zimmermann be prosecuted for allowing > release of his PGP encryption program on the > Internet? > > > PRO: ITAR export restrictions exist. > Cryptographic software, like PGP, is > considered a weapon of war. -- more [somebody shoot me with PGP, and nothing else!] > > CON: Imprisoning Zimmermann for export > violations would be an unconstitutional restraint of > free speech and privacy rights. -- more [guess how Jim Ray voted...] ;-) OK. Far be it from me to suggest vote fraud [there aren't too many Libertarians in cemetaries anyway :)] but I think certain cypherpunks might want to go "vote" this week, if you have the time to waste. Please vote *only* once, and tell all your buddies. Thanks. JMR - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCbswG1lp8bpvW01AQGDeAP8DZiWwIsABi7sy3MuyZo5QMFB/lf0ghIg 8zcE/WGaPocvwqlxwBW3DckSQw/vM8cqyv3LGPjQwC2il5HpELdyS44Rd4tQ/Qjb p0P+6mZh0Qk8domUuadX877Lk8hcnh7ydypCL3WPigSvh3tYYGwnL00Q6vi6nKzj YQ7092OOn80= =ebKB - -----END PGP SIGNATURE----- Regards, Jim Ray "The people will again respect the law when the law again respects the will of the people." Jim Ray, Campaign '92 - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCbtzyoZzwIn1bdtAQHUowGA1pSgF1+AVBDi0Jz8H7dd4XIvbXNulPvF SIRzwHrNMApJoz2mX34r+8hndI3nwREW =hz/N -----END PGP SIGNATURE-----

1 0

Quibbling about definitions of "proof"
by tcmay＠got.net 17 Dec '03

17 Dec '03

Look, you all, I'm *really sorry* I even brought up the subject of proofs of correctness! As I feared, any mention of certain loaded words immediately brings the quibblers out of their lairs to dissect the "real meaning" of one or more terms. I had thought that my carefully worded mention of the Boyer-Moore prover and that this means little for actual implementations would deter quibbling over the cosmic significance of "proof." (An interesting topic, by the way, as Ray's knowledgeable article makes clear. But metamathematics is an arcane subject and short articles are rarely persuasive...we debated the same stuff a couple of years ago on the Extropians list.) With 700 subscribers, quibbling is the usual state of affairs. No matter what is said, someone will quibble over terms or meanings. No wonder it is the major venal sin at West Point. The Boyer-Moorer theorem prover is an accepted ("Huh? Define what you mean by "accepted"! Not all of us accept that term.") term of art. If you disagree, or wish to raise the possibility that the computer glitched during the proof, there are entire newsgroups devoted to such arcania. On a more mundane note, my Internet Service Provider of the past 6 weeks just sent out an urgent notice tonight announcing that they are no longer "sensemedia.net" and have become "got.net" (as in "got net?" as in "got milk?). This means my 3 years as "tcmay(a)netcom.com" is followed by 6 weeks as "tcmay(a)sensemedia.net" and an as-yet-undetermined time as "tcmay(a)got.net" (at least until the "Got milk?" ad people get wind of this pun and tell them to change to something else. --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

5 5

Parental Advisory
by merriman＠arn.net 17 Dec '03

17 Dec '03

Just wanted to let folks know that I'm able to confirm that He is still monitoring the list. Got a response to my posting about my Web page :-/ I hope others will stop by and check it out - links to it welcome. Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

1 0

Re: Triple-DES controlled?
by Bill Stewart 17 Dec '03

17 Dec '03

>> Didn't the ANSI financial committee just adopt 3DES (over NSA >> objections)? >> Presumably they consider the export situation solved/solvable. >There is the trivial solution of buying outside the US. The hardware >is actually better these days as the Germans and others have a >worldwide market and the economies that brings. Also. the ITAR rules give banks and financial institutions Extra Slack for exporting crypto gear for their own use. In some ways that makes sense (electronic bank robbery could be a very profitable business, and bankers are politically influential), and yet some of the government's biggest objections to free crypto seems to be that it allows people to have financial privacy... #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #--- # Crypto in 3-4 lines of perl --> http://dcs.ex.ac.uk/~aba/

1 0

Re: RSA/Perl Shirts
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

John Schultz <jschultz(a)coins0.coin.missouri.edu> writes on cpunks: > On Mon, 7 Aug 1995, Rev. Ben wrote: > > Has Joel Furr shipped his shirts yet? > > > > I see some people on the list have gotten shirts and i was wondering as > > I still have not gotten mine. > > I was wondering the same thing myself. I know my check was cashed over a > month ago, but no shirt has arrived. There are 2 (well 4 actually) suppliers of shirts: 1) (US/Canada) Joel Furr at Josh Osborne's instigation (no current offer, but still to send out shirts from first batch) OFFER PASSED 2) (free world :-) Me - Adam Back <aba(a)dcs.ex.ac.uk> http://dcs.ex.ac.uk/~aba/rsa UK printing cost only - still taking orders 1st batch will be ordered RSN 3) (US/Canada) Don Henson <dhenson(a)itsnet.com> http://colossus.net/wepinsto/ 25% of proceeds to Phil Z legal defense fund - 1st batch shipped, taking orders next batch 4) (AU region of free world) Lucy Chubb <lucyc(a)suite.sw.oz.au> (no WWW URL yet) will soon be printing some in Australia cost only also send her email for status, starting soon The last I heard about the status of Joel's shirts was on the netstuff mailing list, some time ago, he said there had been delays due to various reasons, and that his shirst wouldn't be ready until end July. As July has ended, I'm presuming this will be RSN. The people who have their shirts are those who ordered through Don Henson, who has proceeded very quickly to ship shirts, he was the start of the 350 ordered thread. Adam -- HAVE *YOU* EXPORTED RSA TODAY? --> http://dcs.ex.ac.uk/~aba/rsa/ --rsa--------------------------8<------------------------------- #!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL $m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa 2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length($n)&~1)/2) -------------------------------8<------------------------------- TRY: rsa -k=3 -n=7537d365 < msg | rsa -d -k=4e243e33 -n=7537d365

1 0

Re: Pat Robertson Fears E-cash?
by Duncan Frissell 17 Dec '03

17 Dec '03

At 12:41 AM 8/2/95 -0700, Timothy C. May wrote: >So, hearing that "Pat Robertson is warning against a digital cash society" >is not too worrisome to me. I suspect he means the stuff about Big Brother >tracking us and the Number of the Beast, and so on. Correct. I have in my hot little hands a book called "Racing Toward the Mark of the Beast -- Your Money, Computers, and the End of the World" by Peter & Paul Lalonde (hosts of "This Week in Bible Prophecy") published by Harvest House. They relate the story of their attendance at 1993's "Solutions for the Global Frontier" card technology conference in Washington, DC which happened to be held during the Waco Inferno. "This Week in Bible Prophecy" and CNN were the only electronic media represented. Waco encouraged discussion by the participants for electronic tracking of cult members. The book hits all the high points of privacy invading technology. But has nothing about our sorts of privacy techniques presumably because we are not yet well known in the Christian community. Chapters: 1. Boy, Have I Got Your Number 2. Kiss Your Cash Goodby 3. What's in the Cards? 4. Your Body: The Only ID You'll Ever Need 5. Will That Be Hand or Forehead? 6. If You're Not Paranoid, It's Because You're Not Paying Close Enough Attention 7. Bringing the World On-Line 8. 666: The System Is Born 9. The Chosen Generation 10. Where Will You Stand? I have generally found "Fundies" to be better informed about privacy problems and more protective of their own privacy than any other discrete group. DCF "60 million job changes per year + Federal Job Licensing (The Jordan Commission proposal to require employers to verify SS#'s) + the 25% error rate in the SS#-Name database = 15 million legally unemployable for a total unemployment rate of 18%."

1 0

Announce: Private Idaho 2.5 beta
by joelm＠eskimo.com 17 Dec '03

17 Dec '03

The 2.5 beta version of Private Idaho is now available from: http://www.eskimo.com/~joelm or ftp.eskimo.com /u/j/joelm/pidho25b.zip After I'm satisfied it is relatively bug free, it will be announced to the appropriate newgroups and placed on mirror sites. Significant enhancements include: send SMTP mail directly from Private Idaho attach sigs conventional PGP encryption option anonymous USENET posting through supporting remailers improved multi-key interface The final release will also have full Windows-style help as well as an automated installation program. This is my first venture into writing TCP/IP - Windows Sockets code. The SMTP routines seem to work with my ISP, but we'll see what happens on other mail servers. Coming attractions - once I determine the TCP/IP code is stable, I plan on implementing POP3 background checking for PGP messages. As usual, comments, questions, and bugs to: joelm(a)eskimo.com ---------------------- Joel McNamara joelm(a)eskimo.com - http://www.eskimo.com/~joelm for PGP key Thomas Jefferson used strong crypto, shouldn't you?

1 0