December 2003 - cypherpunks-legacy

Netsurfer Focus on Cryptography
by Duncan Frissell 17 Dec '03

17 Dec '03

Netsurfer publishes free HTML "periodicals" delivered by email -- filled with the links the short articles refer to. The latest one just hit my mailbox (with tags removed): ---------- Forwarded message ---------- Date: Tue, 29 Aug 95 17:45:39 PDT From: editor-bounce(a)netsurf.com Subject: Netsurfer Focus: Vol. 01, #03 (HTML) Netsurfer Focus on Cryptography and Privacy Wednesday, August 21, 1995 - Volume 01, Issue 03 TABLE OF CONTENTS Intro to Cryptography Cracking the Code In ? We Trust</a> Key Certification Postcards from Cyberspace</a> E-mail Issues Digital Envelopes</a> Secure E-mail The Pen is Mightier than the Electron</a> Export Issues Hiding In Plain View</a> Steganography Money Makes the World Go Round</a> Cash and E-money No Names, Please</a> Anonymous Remailers Big Iron, Big Brother</a> Database Drilling and Surveillance It's B-a-a-ck!</a> Clipper and Digital Telephony 'Bots, Agents, and Wizards</a> Trusting Software Information at Your Fingertips</A> Additional Resources Inky Fingers</A> Print Resources ********************************** Netsurfer Focus is currently a periodic supplement to Netsurfer Digest and Netsurfer Tools. Netsurfer Focus Home Page: http://www.netsurf.com/nsf/index.html http://www.netsurf.com/nsf/index.html Back Issues: If you would like to obtain copies of back issues or resource files (in HTML format only) via e-mail, send mail to info-focus(a)netsurf.com with "send crypto-index" in the body of the message. To subscribe to Netsurfer Digest or Netsurfer Tools: By WWW form: <A href="http://www.netsurf.com/nsd/subscribe.html">http://www.netsurf.com/nsd/subscribe.html</A> By e-mail: nsdigest-request(a)netsurf.com Body: subscribe nsdigest-text subscribe nsdigest-html

1 0

ANNOUNCE: mailing list for Eternity Service developers/users
by Adam Back 17 Dec '03

17 Dec '03

Laszlo Vecsey <master(a)internexus.net> has setup a mailing list for users and developers of the eternity service. On topic will be development, design of improved protocols, also design of a general distributed file system (DFS or worldFS) which some are interested to implement based on Ross Anderson's paper `The Eternity Service', plus issuses surrounding being an eternity operator. The mailing list address is "eternity(a)internexus.net", to subscribe send a mail to "majordomo(a)internexus.net" with body: subscribe eternity To submit articles to the mailing list send them to "eternity(a)internexus.net". Adam

1 0

Re: SSL trouble
by ab411＠detroit.freenet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I wrote: >"Daniel R. Oelke" <droelke(a)rdxsunhost.aud.alcatel.com> writes: >> >> date "+%S %M 60 * + %H 3600 * + %j 86400 * + %y 31536000 * + p" | dc > >date +"%S %M 60 * + %H 3600 * + %j 1 - 86400 * + %y 70 - 31536000 * + %y >69 - 4 / 86400 * + 3600 4 * + p" |dc which has a bit of cruft in it to get universal time, and >date +"%S %M 60 * + %H 3600 * + %j 1 - 86400 * + %y 70 - 31536000 * + %y >69 - 4 / 86400 * + p" |dc > >which returns local time, which is probably what you wanted anyway. Well, I overlooked the obvious: You can simply add -u to the above to get universal time i.e., date -u +... etc. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMEOyexEcrOJethBVAQGtFwP9GG27cR3UvJX4/gsO8SK3L3pHGv5mjNp+ 0mkRwOg+bj+cf44xAxXZ7/iFU2xaT4sAUvqwIaqbv6AfQgwnqTjAZKIR11KtlKPN 1xDkPXArU4PWSjoFal60Qsuqzacauu99wwUfsILhr8S2xWMj406JdTZPMapgZJI0 N2agSYMj6pY= =LI+M -----END PGP SIGNATURE----- -- David R. Conrad, ab411(a)detroit.freenet.org, http://www.grfn.org/~conrad Finger conrad(a)grfn.org for PGP 2.6 public key; it's also on my home page Key fingerprint = 33 12 BC 77 48 81 99 A5 D8 9C 43 16 3C 37 0B 50 Jerry Garcia, August 1, 1942 - August 9, 1995. Requiescat in pace.

1 0

journalism, travel and manufacturing
by Zooko Journeyman 17 Dec '03

17 Dec '03

A million monkeys operating under the pseudonym "Dr. Dmitri Vulis, KOTM <dlv(a)bwalk.dm.com>" typed: > Do drop by whenever you're in NYC. :-) I appreciate the invitation. I'll be sure to do so when I'm in NYC. In other news, I made some t-shirts at HIP. On the front they have an excerpt of an e-mail message looking something like this: From: Stan <wallace(a)netvertisement.com> To: Winston <1072SmithW(a)citizenunits.org> Subject: MAKE FREEDOM FAST!!! "I may disagree with every spam you send, but I will defend to the death your right to send it." -- Voltaire On the back they have the following slogans: MAKE FREEDOM FAST!!! Spam is Speech. Censorship is Censorship. And at the hem there is the legend: This is: AN OFFICIAL SPAM DEFENSE T-SHIRT Manufactured at: HIP, 1997 By: Zooko Industries I gave one shirt to Alex de Joode and one to Joichi Ito, and I kept one for myself. That leaves one, which I originally intended to snail mail to Dr. Dmitri M. Vulis, KOTM. But if you don't want it then I'll auction it off via cypherpunks. (Currencies accepted will include PGP-signed letters stating your undying adoration of and loyalty to Zooko.) Regards, Zooko

3 2

More Disintermediation
by Duncan Frissell 17 Dec '03

17 Dec '03

According to Monday's USA Today, the Customs Service has come up with a plan to stop stopping international travelers arriving at US airports. Apparently they can't afford "personal" service any more. With 60 million arrivals, Customs has decided to mingle a bit in luggage claim, look for those meeting its profiles, and use drug- and food-sniffing dogs to catch smugglers. Note that international travel has doubled in the last few years. What is Customs (and La Migra) going to do when it doubles again. It is much easier for market phenomenons like this to double or triple than it is for government agencies to double or triple. Markets scale well. Governments don't. DCF "When foreigners steal 'our' jobs, our labor is freed for other tasks and total world product increases. Jobs can no more 'run out' than desire for things in general can 'run out'."

1 0

?????
by FreedomFound＠t-1net.com 17 Dec '03

17 Dec '03

Hello, If You Qualify, You Could Net Yourself Well Over $150,000 By The End Of 1997... Guaranteed! Greetings: We are Dale and Gwen Yancy. We would like to ask you to please take two minutes of you time to read the following. If you don't like what you see then please trash this mail and except our apologies for this disturbance. We promise you we will not send you another. We are writing to introduce you to a strong, wealth building home based business that is NOT a Multilevel Marketing venture or some get "rich quick scheme"... a business that is more profitable than any network marketing, direct sales, franchise or investment opportunity in existence today. Who Will Be Allowed To Work With Us? We are looking for a limited group of serious minded entrepreneurs that have been looking for a solid business opportunity. We are not looking for a huge response. We only want to work with people we feel have a "burning desire" to be successful. Can you visualize yourself earning $30,000 + net per month within the next year, if provided with the right opportunity to do so? Are you willing to commit to doing whatever it would take to be successful in this business once you completely understand it? How To Find Out If You Qualify To find out more, call toll free for more details: 1-800-322-6169 Ext. 0650. This is a recorded message that is available 24 hours a day. It is NOT a telemarketer. If you are seriously interested...REPLY NOW! If you don't really feel you've got the right stuff to be successful, then please don't bother to respond. We only want to work with the motivated people who seriously want to make insane amounts of money! Again, if we have reached you in error, please send mail with REMOVE in the subject. You will be immediately removed from any subsequent mailings. Prosperous Regards, Dale and Gwen Yancy P.S. Once again, this is NOT MLM. Serious inquiries only please! 1-800-322-6169 EXT 0650 DAY OR NIGHT

1 0

Re: SSL trouble
by keelings＠wu1.wl.aecl.ca 17 Dec '03

17 Dec '03

Incoming from Daniel R. Oelke: > [presumably piete brooks?]: > > >PS3: I'd like to get the raw date in brloop (a sh script). In perl I'd just > > > use "time", and I can't see a way to get "date +" to yield the raw time. > > > I could use "date=`perl -e 'print time'`" but that seems OTT, and perl > > > may not be on teh users PATH. Any suggestions ? > > [anonymous?] > > "date '+%s'" does it under BSDI, but I'm not sure how portable it is. > > This is what I got from SunOS 4.1.x > > $ date +%s > date: bad format character - s On Ultrix, I get: $_ date '+%s' s $_ and on OSF/1: $_ date '+%s' %s $_ XMan (OSF/1) says: "To display the date and time in a specified format, enter: date +"%r %d %h %y (%a)" [note the `+' outside the ""] which gives me: 08:58:39 AM 29 Aug 95 (Tue) FWIW ... -- "Remember, obsolescence (Win95) isn't an accident; it's an art form!" keelings(a)wu1.wl.aecl.ca s. keeling, aecl - whiteshell labs

1 0

RE: [NTSEC] Hotfixes (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

Wheee, check this out... there's thing called a Download Wizard that "offers suggested updates" for software on your hard drive... Now buys and girls, can we guess what else it will do? i.e. give to Microsoft a list of? Hrrmmm? =====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian |Prying open my 3rd eye. So good to see |./|\. ..\|/..|sunder(a)sundernet.com|you once again. I thought you were |/\|/\ <--*-->| ------------------ |hiding, and you thought that I had run |\/|\/ ../|\..| "A toast to Odin, |away chasing the tail of dogma. I opened|.\|/. .+.v.+.|God of screwdrivers"|my eye and there we were.... |..... ======================= http://www.sundernet.com ========================== ---------- Forwarded message ---------- Date: Wed, 13 Aug 1997 01:00:48 -0400 From: "Donald M. Barnard Jr." <barnardm(a)tiac.net> To: "ntsecurity(a)iss.net" <ntsecurity(a)iss.net> Subject: RE: [NTSEC] Hotfixes Meanwhile MS gets a nice database of installed software?<G> Don -----Original Message----- From: Paul Leach [SMTP:paulle@microsoft.com] Sent: Tuesday, August 12, 1997 12:56 PM To: 'Russ' Cc: ntsecurity(a)iss.net Subject: RE: [NTSEC] Hotfixes As it says on the page you refer to: The Download Wizard will now check your computer for exisiting Microsoft software files and make suggestions for file updates that may be appropriate for your computer's configuration. The Download Wizard will NOT automatically change, add, or delete any files on your computer. You will be given the choice to download and install each of these files yourself. Important: Before downloading any files, be sure to check with your system administrator. I.e., we make it easy to find out if there are updates that _may_ apply to you (and screen out lots that for sure _don't_) -- you still have to decide if you want them. The backend for this is pretty heavyweight and labor intensive -- it's not ready to be a product. ZAW is the product that is supposed to support automation of admin of workstation and servers in a corporate environment. > ---------- > From: Russ[SMTP:Russ.Cooper@rc.on.ca] > Sent: Tuesday, August 12, 1997 4:15 AM > To: Paul Leach > Cc: ntsecurity(a)iss.net > Subject: RE: [NTSEC] Hotfixes > > Paul, > > Can you then comment on the Download Wizard available from > http://www.microsoft.com/kb/softlib/default.asp which supposedly > detects > which files/patches etc... you need and automates the installation of > these? I haven't tried it with a machine that was "Ok" in its eyes, so > I > haven't seen what it actually does, but the concept is quite cool for > Intranet server management. Would seem to be parts of SMS for > Intranets, > which despite having risks that would have to be managed, could > seriously improve the remote configuration management of machines. > > Can you get someone to comment for us as to precisely what it does and > how it does it? Is the underlying dB available with some instructions > on > how we might modify it for our own use? > > I'm asking on behalf of the list because I think this would seem to be > the answer to this thread's questions. > > Cheers, > Russ > R.C. Consulting, Inc. - NT/Internet Security > owner of the NTBugTraq mailing list: http://www.ntbugtraq.com >

1 0

Re: Modern Journalism (was: All about Bernstein) (fwd)
by Peter F Cassidy 17 Dec '03

17 Dec '03

Sorry, folks, I thought I'd cc:ed this to the list. ---------- Forwarded message ---------- Date: Sun, 27 Aug 1995 20:08:22 +0059 (EDT) From: Peter F Cassidy <pcassidy(a)world.std.com> To: "Timothy C. May" <tcmay(a)got.net> Subject: Re: Modern Journalism (was: All about Bernstein) I agree. Some editors refuse to let actors be engaged as professionals only. My philosophy is people's stories are their own and they are in control of them to the extent they inform these stories. WIRED likes to find crusaders and campaigners for their profiles. Sometimes they're not the swashbuckling types that make for engaging personality pieces. That's why I went for the issues around ITAR and a speculation on the case's merits in relative case law and the judicial environment it will enter. DJB got eloquent where I thought it was important in terms of the technology and research running up against a law that is itself full of negotiable loopholes, quiet on everything else. Most everyone who's met him tells me he's really retiring. Which lead me to conclude the guy might have the kind of reserve and restraint required for protracted litigation with the government which is essentially becomes an endurance contest. Now, saying that, is it weird to think that people would be interested in a fellow like that? Wrong? I've written about large scale bank frauds, organized crime, charities frauds, etc. and even when I'm writing about gangsters, personal detail isn't used for "spice" as much as it is narrative coherence. Who introduced the arsonist to the drug dealer to do the condo deal? Is that gossip or an essential detail? In science writing the personal detail illuminates sometimes, not always, the actors involved in great discovery. Is it prying to learn that Maslow felt better after he married his goofy fourth cousin and came up with theory of the heirarchy of needs? No, but it makes the story of the science more resonant. That's not a bad thing. There is undoubtedly a peoplemagazinification of journalism in the states which is why I gravitate toward the analytic or investigative publications like the Economist, Covert Action Quarterly or the Texas Observer, The Progressive and good trades like CIO. Yet even in these publications, the examination of protagonists is not considered out of bounds. I think it's not in your interest to be sniffing at the press. Tell them exactly what you wrote here and take these guys for a ride. Freeh has managed to make himself out to be this tower of virtue and civil leadership - well, up until recently and, you'll remember, led a successful charge for passage of the digital telephony bill which will be the model for crypto legislation, at least in terms of lobby tactics if not language. He did this partly by force of personality and his credibility. He didn't gain these by being precious about himself or his enterprise or, finally, by being a good cop or jurist. He did it with great PR and a sense of how the press works, not by wingeing when an interview opportunity came around. - Levy, if anything, is doing all cryptodom a favor if average schmucks pick up his book and say, gosh, is *that* what is at stake here? His NYT piece was clear and straightforward - engaged the science of crypto seriously and at the level of the reader could handle - and made the protagonists and antogonists accessible. Right now, crypto is not even on the map. Creating a barricade around the people that are driving this defining technology does no one any good. In fact, when it comes down to the end-game, legislating a ban on non-escrowed crypto, the first thing the Justice department will do is characterize you guys as amoral eggheads who are building technologies to hide the crimes of terrorists, rapists, genocidists and maniacs. At that point, I should think you would like to be appreciated as scientists with principles you act on in daily life and in your work, gosh, even personal philosophies, real personal stuff like that.

1 0

SSL brute/ng
by P.J. Ponder 17 Dec '03

17 Dec '03

If anyone is putting together a wish list of features for the next iteration of the distributed brute would they like to consider some sort of mirroring approach for the server (at least on stats or updates/ software ) so that some of that traffic could be reduced? I'm afraid I am one of the guilty trying to log on to check on the stats at least once and I probably contributed to choking it just by doing that. If a local server could have been updated, it would save bandwidth on the server doing real work. Could a trusted group of segemnt dolers be put together? I like the idea of running a benchmark type of program so that I could multiply keys/sec times the amount of time I had to donate, and only get a reasonable for me number of segments. I would hope that statistics be gathered on the number of keys tested, elapsed time, etc. so that we all got some more or less real world insight into key lengths and strengths, effort required to break, that we have all heard so many projections about... especially as the doling gets more sophisticated and the number of participants/cycle pool increases. Will there be Hal3? Just to ask a really dumb question, how do you know when you get the key? Is there some plaintext header string you're looking for? --pjp

2 1