December 2003 - cypherpunks-legacy

Re: 64 bit keys breakable by the NSA or just some random key length?
by Chris Claborne 17 Dec '03

17 Dec '03

At 12:51 PM 8/19/95 -0600, zinc wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >cpunks, > >i was thinking about the recent Clinton/LEA proposal regarding exportable >crypto. the new rules would allow 64 bit keys to be exported, as long >as the master key was made available through some key escrow service. [good stuff deleted] >since this *is* an escrow system, why didn't the gov't just go with >the unbreakable 128 bit key length? This is the kicker! If what I heard is true, anyone can escrow the keys under this new plan. We know that the govt has no problem breaking it's one rules by saying the magic words "matter of national security", so why don't they require the keys be held by the govt? ... You know they can break it. ... I guess they assume the middle american will buy it! Just kills me. ... __o .. -\<, Chris.Claborne(a)SanDiegoCA.ATTGIS.Com ...(*)/(*). CI$: 76340.2422 http://bordeaux.sandiegoca.attgis.com/ PGP Pub Key fingerprint = A8 FA 55 92 23 20 72 69 52 AB 64 CC C7 D9 4F CA Avail on Pub Key server. PGP-encrypted e-mail welcome!

1 0

Re: The Official Cypherpunks Screen Saver?
by Chris Claborne 17 Dec '03

17 Dec '03

At 11:49 AM 8/17/95 -0700, you wrote: >At 5:11 PM 8/17/95, Jim Gillogly wrote: > >>I would hazard a guess that 90% of the compute cycles in the world are used >>running screen savers... this gives a <lot> of slack for people who would >>like to harness them to perform productive work like making points about >>the strength of security. > >It would really be cool to have a screen saver that did useful work while >displaying pretty pictures. > >Imagine a screen saver, maybe with code modules running in "After Dark," >that updates the screen with keys tried...could be a nice demonstration of With the strength of today's NT workstations (Multi-processor pentium and Alpha chips) this would be a great idea. Every NT workstation ships with a screen saver built in. I'd use that one. Too much fun! ... __o .. -\<, Chris.Claborne(a)SanDiegoCA.ATTGIS.Com ...(*)/(*). CI$: 76340.2422 http://bordeaux.sandiegoca.attgis.com/ PGP Pub Key fingerprint = A8 FA 55 92 23 20 72 69 52 AB 64 CC C7 D9 4F CA Avail on Pub Key server. PGP-encrypted e-mail welcome!

1 0

The greater socio-economic good
by David Murray slIP 17 Dec '03

17 Dec '03

I came acreossoss this in the july Law UPdate of Phillips Fox, an Auastralasionan law firm. This edition was entitled 'Your money or your E-cash', and hasd a section entitled 'Privacy' which said/says: At the moment, your cahsh transactions cannot be recorded in the same way as your cheque, credit cards or Eftpos spending. This means that your cash spending cannot be readily traced, checked, investigated or analysed. The big excitement for banks, marketing consultants and governments is being able to do all these things. On the other hand, toatally untraceable e-cash will enable huge amounts of money to be moved (laundered) outside the bankiongng systyeem. Consumers will need to make a decision whether they want untraceable e-cash, or to contribute to the greater socio-economic good. I think they're being serious? DM

1 0

Re: Certificates/Anonymity/Policy/True Names
by Richard.Johnson＠Colorado.EDU 17 Dec '03

17 Dec '03

The certificate gets their messages into systems that demand a certification, whether for transport or display. >But this is precisely the issue: what does the *certificate* get any of >these people that a simple digital signature does not provide? > >On Sat, 19 Aug 1995, Rich Salz wrote: > >> I think there are many people who might be willing to use an >> "anon CA" should it exist: >> Whistleblowers, perhaps Deep Throat would have used email >> People writing letters to the editor who don't want to trust >> the editor to withhold their info >> People who desire anonymyity yet don't want to trust the gov't >> to certify their communications as authentic/forged >> (Unabomber, Om Shin-rkyo) >> Any number of writers who have used psuedonyms and now want to >> get paid in ecash; Mark Twain? >>

1 0

EFF, Mike Godwin, Cliff Stoll
by Andre Bacard 17 Dec '03

17 Dec '03

*** PLEASE REDISTRIBUTE FREELY *** Hello CyberFolks, Wednesday, August 16th BayFF (Bay Area Chapter of EFF) held a meeting in San Francisco with speakers Mike Godwin and Cliff Stoll. Attached are a few notes for those of you who missed the opportunity to attend. See you in the future, Andre Bacard ====================================================================== abacard(a)well.com Bacard wrote "The Computer Privacy Stanford, California Handbook" [Intro by Mitchell Kapor]. http://www.well.com/user/abacard Published by Peachpit Press, (800) Enjoy your privacy... 283-9444, ISBN # 1-56609-171-3. ======================================================================= Notes from the BayFF Semi-Underground Authorized by Andre Bacard <abacard(a)well.com> Wednesday, August 16, 1995, I found myself cruising through Golden Gate Park. Suddenly I swerved into the right lane and shouted "Eureka." For those who don't know, Eureka is the California state motto which, in the tradition of the Gold Rush, means "I found it!" In San Francisco IT means a parking place. Feeling euphoric about my good fortune, I started the short walk long on memories towards the Haight-Ashbury district. It was delightful and fogless. The salty air was cool. The smell of grass (the type that city gardener's mow) was fresh. Passing a guitarist, I thought of the Grateful Dead's Jerry Garcia, recently deceased. My mind flashed back twenty-five years ago when I first visited Haight-Ashbury. Twenty- five years ago at the dawn of the Computer Age... So many silicon chips under the bridge... I thought of all the people in the Haight mourning Garcia and donating to the Haight-Ashbury Free Clinic in Garcia's memory. I flashed back upon my first meeting with John Perry Barlow, lyricist for the Grateful Dead and co-founder of EFF. That meeting helped inspire me to write COMPUTER PRIVACY HANDBOOK. Such were a few of the images that danced through my mind as I entered the Cole & Page Street Public Library... It was appropriate to be attending an EFF meeting. John Gilmore, EFF Board Member, was the first person I saw. Gilmore reminds me of a lean Chesire cat. He has a mischievous smile as if to say, "You won't believe what just happened." Maybe we'll never discover what just happened with John, since he's so much into crypto. In any case, Gilmore introduced Mike Godwin as "The first lawyer in Cyberspace and EFF's first employee." Mike Godwin ("a cool guy who survived law school with his personality intact" according to an anonymous EFF publicist) spoke for 90 minutes about how to deal with reporters and, more specifically, about his role in trying to correct the damage done to cyberspace by TIME's infamous "CyberPorn" cover story. Godwin detailed many flaws in Carnegie Mellon University undergraduate Mr. Rimm's study of cyberporn that led to the "CyberPorn" piece. Godwin said of Rimm's paper: "It's as if you surveyed the bookstores in Times Square in Manhattan and generalized to all bookstores in America." Cliff Stoll ("a wild and crazy guy with interesting hair" according to the same anonymous EFF publicist) is the author of the best-selling book SILICON SNAKE OIL. Stoll personifies the eccentric heritage of the San Francisco counter-culture. With lots of humor and drama, Stoll presented a critical view of the Internet. "The Internet is a perfect diversion from learning" and "The Internet opens many doors that lead to empty rooms" were two of his many memorable lines. Stoll noted that wisdom and experience play little role in the Computer Cult (i.e., all the Hype surrounding the Information Superhighway). The EFF events that I've attended at WIRED's office in the San Francisco Mission District and last night are well worth the hassle of hunting down a parking place. To learn more about future monthly BayFF meetings, send this e-mail: To: listserv(a)eff.org Subject: [ignore] subscribe BayFF See you at future events, Andre Bacard P.S. I'm the guy with the fedora hat who people mistake for Indiana Jones.

1 0

Re: Costs of Credit Card Fraud and Brute-Force Codebreaking
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >you're assessment that this cost our anon friend some money to obtain >these cc numbers is simply not true. when you have nothing else to do, >choosing one thing over another involves no cost. if anything, he made >money by using the cc numbers to make long dist calls instead of using >any cash he might have from working or an allowance. > >my $0.02, > There's also the factor that the dumpster diver is - if s/he continues the practise in a certain area - going to learn which dumpsters are more likely to contain valuta, thus reducing the 'overhead'. My ha'penny :-) Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMDZ9h8VrTvyYOzAZAQGQvgP+L/Zq5BChW1Y3ZkN5N0XCe2fw/QbWrgtt 2/6Mxdpg96ureHYfaPaxDTxstCC9pTyD6lrOqkCeu5/Pr/GZ8FFPRzPOx1xDdqmO iufGGeUzRqcTcqRjOFBkBJ9GcZLgsZ3FZ4XtCCwQZ7w5aumBnA8xvfoP7DgCRrp1 55noMpWFwmk= =g27w -----END PGP SIGNATURE----- This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

1 0

Re: Spooks and Hackers, etc.
by Alex de Joode 17 Dec '03

17 Dec '03

Brad Dolan sez: : ---------- Forwarded message ---------- : Subject: Internet Police : According to an AP story, Wisconsin Attorney General James Doyle says that : police must monitor the Internet to stop child porn, drug trafficking, and : fraud. : "We need to see that police are surfing the Internet just as other people : are," Doyle said. "This is a good example of where the law is slower than : technology." "Stop Wisconsin Internet Police" "Your'e speeding" "Get Lost" "Get Real" -- Alex de Joode Fear Uncertainty Confusion and Kaos, Inc.

1 0

Netscape to copyright URLs?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Today's surf of Netscape's home page yielded an interesting question. Is Netscape trying to licence links to their products? To me http://home.netscape.com/comprod/mirror/netscape_now_program.html seems to suggest tha you can only display certain logos and info if you are licensed by Netscape. You could for example not put up a link to their "Download Netscape NOW" page without prior approval by Netscape. This seems to be a new development on the web. Since when does one need a license to include certain URLs in one's home page? Comments? - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMDbYcCoZzwIn1bdtAQHE1gF/WoY8jEAv16lL1pGylJKp4MZnVsKYRfMe SzgQcpGouFnT6Ij+zwlS7dkuudQIJyvX =b88z -----END PGP SIGNATURE-----

1 0

Would it be legal for a foreign site to carry Netscape?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- If someone would export the full 128 bit version of Netscape, would it be legal to make it available on a foreign site? After all, Netscape is a copyrighted product. TIA, - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMDbaNioZzwIn1bdtAQEb/gF+JJ9e3FqwEwIboLX7ISW6X4QWjcO6QCkt gMuEghppSrv2G2sPmzyDzOoweTlglfi/ =Y7nR -----END PGP SIGNATURE-----

2 1

Re: Netscape to copyright URLs?
by harveyrj＠vt.edu 17 Dec '03

17 Dec '03

At 02:39 AM 8/20/95 -0400, Lucky Green wrote: >Today's surf of Netscape's home page yielded an interesting question. Is >Netscape trying to licence links to their products? To me >http://home.netscape.com/comprod/mirror/netscape_now_program.html seems to >suggest tha you can only display certain logos and info if you are >licensed by Netscape. You could for example not put up a link to their >"Download Netscape NOW" page without prior approval by Netscape. > >This seems to be a new development on the web. Since when does one need a >license to include certain URLs in one's home page? > >Comments? > My reading of that page suggests a somewhat different motive and interpretation: what they seem to be doing is copying the Microsoft approach with respect to setting criteria that must be met before you can use their logo on your page/product. It doesn't prohibit putting links to their download page; it just prohibits using their "Netscape Now!" logo without their permission. Note the criteria for being allowed to use their logo: you have to design your server to break with the current "standards" (e.g., CGI) and embrace Netscape's extensions (e.g., backgrounds; client pull/server push, SSL encrypted transactions), which they would like to foist on us as the new "standard." Essentially, they want us to help them create the perception that if you don't show the "Netscape Now!" flag (didn't Nixon have a similar slogan?) on your page, that you're just not a high- quality operation. Or maybe they're trying to change the subject from the unfortunate publicity from the success of SSL Challenge... rj ------------------------------------------------------------ R. J. Harvey email: harveyrj(a)vt.edu WWW for job analysis/personality: http://harvey.psyc.vt.edu/ PGP key at http://harvey.psyc.vt.edu/RJsPGPkey.txt

1 0