December 2003 - cypherpunks-legacy

RSA Prevails In Arbitration Against Cylink
by baldwin 17 Dec '03

17 Dec '03

Here's an article on the RSA-Cylink arbitration from the business wire. --Bob Baldwin - ----------------------------- RSA Prevails In Arbitration Against Cylink REDWOOD CITY, Calif.--(BUSINESS WIRE)--Sept. 19, 1995--An Arbitration Panel recently ruled that Cylink does not have a license to RSA patented technology, that RSA's software licensing practices do not breach any agreement with Cylink or its wholly owned subsidiary Caro-Kann and that RSA now has the exclusive right to license the RSA patent. In a Sept. 6, 1995 ruling, an Arbitration Panel, formed by agreement of the parties, and after nearly a month of testimony, ruled in favor of RSA on every significant issue. The Panel held that neither Cylink nor Caro-Kann had a license to practice RSA patented technology. Cylink admittedly incorporates this technology in its Secure X.25 product line, without any license to do so. The Panel also found that RSA's software licensing practices did not materially breach any of Cylink's rights. The Panel did not rule that anyone, (specifically including RSA and its software customers) infringed any existing patent rights of anyone - including Cylink. As a result of the Panel's ruling, RSA now has the exclusive right to license the patented RSA technology. According to Jim Bidzos, the President of RSA, `RSA will continue to conduct its software business in exactly the same way that it has for the past ten years. `In addition, RSA anticipates that licenses to the RSA Patent will now be much more readily available, because they now can now be granted without Cylink interference. RSA has all of the intellectual property rights which it needs to license its software. RSA will vigorously defend against any claim to the contrary.` A recent Cylink press release on the Ruling of the Arbitration Panel is wildly inaccurate. The same Robert Fougner (Cylink's General Counsel) who is cited in the Cylink press release has repeatedly made express representations to third parties that the Stanford Patents do not cover, and are not infringed by, the manufacture, use or sale of products incorporating RSA's TIPEM software developer's toolkit. As noted by Mr. Bidzos: `Cylink lost every single significant issue in the Arbitration. Their press release was simply an attempt to cover up what has been a crushing defeat.` Questions regarding the Arbitration Panel Ruling or RSA licenses should be directed to Kurt Stammberger, RSA Technology Marketing Manager, or Paul Livesay, RSA Director of Legal Affairs. CONTACT: RSA Kurt Stammberger, 415/595-8782 kurt(a)rsa.com

1 0

Silly NetScape RND tricks...
by Deranged Mutant 17 Dec '03

17 Dec '03

I've only been skimming the NetScape-related posts lately, but I've yet to see anyone mention using a keyboard-timing sampler as a source for some random bits... I believe this is still a workable solution even in Windows, though probably not as 'precise' as if it were run from DOS. Any comments?

1 0

Show Me the Warheads!
by Mike Duvos 17 Dec '03

17 Dec '03

In an interview to be aired on "60 Minutes" this Sunday, Alexandr Lebed, former Russian National Security Advisor, will reveal that his country has lost track of more than 100 nuclear bombs made to look like suitcases, and has no idea what happened to them. Probably not a good time to visit the Zionist Entity. :) -- Mike Duvos $ PGP 2.6 Public Key available $ enoch(a)zipcon.com $ via Finger $ {Free Cypherpunk Political Prisoner Jim Bell}

5 5

Re: netscape's response
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> This is not to say that I think *you* are bad at this, Mr. Weinstein, > but you certainly have colleagues with the worst possible track record. > > Perry > How can you say worst possible...have you forgotten Eric Allman? Wouldn't it be fun to try to come up with the 5 worst programmers (as far as sloppy security holes go). Eric completely revamped sendmail to make V8 and put in new holes in some of the same categories as some of the well known old holes:( I'm glad my code isn't held up to such public scrutiny after it's released! I'm doing some security/crypto stuff soon for my current employer and I'll run my design by some of you. I'll run the code by as well if I can get my bosses to agree. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

EMP & Cars (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

Found this on the seclist: 10)From: Duece6x6(a)aol.com Subject: EMP There has been quite an interest in EMP. Very simply EMP is a broadband electrical pulse. A friend of mine worked for the GOV on EMP test projects. I have some of the wooden nuts and bolts from the antenna towers and the wooden runways used to taxi aircraft for testing. He related EMP pulses to a near miss lightning strike. As far as vehicle disabling, There are claims that auto manufactures have built in a shut down frequency into the computers in certain vehicles. We wound a large coil on a carpet paper tube and put an oscillator on it and it would flood a vehicles electrical system to shut it down, but it was huge. The easiest way to learn about EMP is to find the International TESLA society web site and interpret the information there. He was the pioneer of EMP. THE DUECE

1 0

Re: MIME
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> : Content-Type: application/pgp > : Content-Transfer-Encoding: 7bit > : Sender: owner-cypherpunks(a)toad.com > : Precedence: bulk > : Content-Length: 1092 > > I think that it must be the content-type that is causing problems, as > the rest of the message is completely standard. To the people whose > mailers broke out in hives at that message: Do you get the same behavior > with any message having an unknown content-type? > -- > Shields. > I've only ever seen the problem with Content-Type: application/pgp using Sun's mailtool. I don't know that I've ever gotten mail with unknown Content-Type though...wait let me whip some up... Mailtool assumes anything with a content type is an attachment. The type is used as the name of the attachment. A Content-Type: of application/foo or of just foo both yeild an attachment named foo. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: Please send me SSL problems...
by Rich Salz 17 Dec '03

17 Dec '03

> Jeff, the SSL specification has a severe *architectural* problem - it > assumes that Internet Protocols are APIs ... > The IETF quite explicitly doesn't care about APIs With one exception so important that it might blow away your whole complaint... ...GSSAPI. /r$

1 0

DCSB: A Future Garrisoned
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: rah(a)mail.shipwright.com Mime-Version: 1.0 Date: Fri, 5 Sep 1997 08:55:11 -0400 To: dcsb(a)ai.mit.edu, dcsb-announce(a)ai.mit.edu From: Robert Hettinga <rah(a)shipwright.com> Subject: DCSB: A Future Garrisoned Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Robert Hettinga <rah(a)shipwright.com> -----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston Presents Peter Cassidy Author, Technology Analyst A Future Garrisoned: How Long Can Military Fiat Control Digital Commerce Technologies? Tuesday, October 7, 1997 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA It is the wonderful American expectation of the new that informs a belief that what is technically possible is inevitable. Peter Cassidy's presentation - "A Future Garrisoned: How Long Can Military Fiat Control Digitial Commerce Technologies?" - will measure the political distance between what is possible in digital commerce and the reality of trying to establish it in the face of a campaign of disruption orchestrated by as influential an actor as the military-intelligence complex. Mr. Cassidy will discuss the decades-long twilight engagement that has been fought between the military intelligence agencies and the civilian sector since the late 1970s when it became apparent that cryptography would not long remain the preserve of the military without political intervention. (In his research, Mr. Cassidy has discovered that military intelligence agencies in the United States have a larger scope of interest in communications technologies than that which makes its way into the mass media, including such vital parts of the modern infrastructure as the civilian telephone network.) Mr. Cassidy will extrapolate what political and industrial barriers this campaign of disruption presents for the wide-scale adoption of strong cryptographic technologies, digital specie and other electronic financial instrumentation - such as adaption of Federal Reserve policy to the digital commerce space. As well, Mr. Cassidy will look at the routes of evasive action that are taken by creative digital commerce pioneers to end-run the most palpable of military barriers to electronic commerce: the export control regulations. For the public presses, Peter Cassidy covers technology, white collar crime and national affairs and, for research firms, he authors analyses on technologies and their relevant markets. His reportage and opinion pieces have appeared in WIRED, Forbes ASAP, The Economist, The Covert Action Quarterly, The Progressive, The Texas Observer, Telepath Magazine, Bankers Monthly, American Banker, InformationWeek, CFO Magazine, OMNI, The Boston Sunday Globe, Boston Magazine, The Sunday Sacramento Bee, ComputerWorld, National Mortgage News, Mortgage Technology, The International Digital Media Yearbook (Japan), NetscapeWorld, CIO Magazine, Webmaster Magazine, Datamation Magazine, World Trade Magazine and dozens of magazines and newspapers worldwide. Several of his pieces have been included in anthologies and college social studies texts. His expertise in information technologies has garnered him contracts with some of the most prestigious industrial research firms in America - Giga Information Group, Dataquest, CI-InfoCorp, Business Research Group, Inc., a subsidiary of Cahners/Reed Elsevier, and NSI Information Services - for whom he has authored analyses on a range of subjects including cryptography and the network security industry. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, October 7, 1997, from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, on One Federal Street. The price for lunch is $30.00. This price includes lunch, room rental, various A/V hardware, and the speaker's lunch. ;-). The Harvard Club *does* have dress code: jackets and ties for men (and no sneakers or jeans), and "appropriate business attire" (whatever that means), for women. Fair warning: since we purchase these luncheons in advance, we will be unable to refund the price of your lunch if the Club finds you in violation of the dress code. We will attempt to record this meeting and put it on the web in RealAudio format at some future date We need to receive a company check, or money order, (or, if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, October 4, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston", in the amount of $30.00. Please include your e-mail address, so that we can send you a confirmation If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Upcoming speakers for DCSB are: November Carl Ellison Identity and Certification for Electronic Commerce December James O'Toole Internet Coupons January Joseph Reagle "Social Protocols": Meta-data and Negotiation in Digital Commerce We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, <mailto: rah(a)shipwright.com> . For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to <mailto: majordomo(a)ai.mit.edu> . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to <mailto: majordomo(a)ai.mit.edu> . We look forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNBABAcUCGwxmWcHhAQF45wf+JDd6Iz0LvZkGBTQZ3ASM8lNEgwW0/oOI RXR3BZW+9j3+2+BtZZzVIDIeCHHjNdWp4DfVB9RYalLf5nVrtB9go5JRJbQZ9L/7 pYq4w5/a3YJpf4voIO+MtcbK0iVMyfskHs+VZMLztu5ZnBrb4xcjkncZH3qfULy+ Gf00ehqK8VZM3f3Bx+MfXX3xadvv6l5xJQWY5GC+pIKeaoptIkuOxaZYPVWyYnJg aMm0iapqalOGAeK+cB6uQI3xdg94EjNZ5aUwaJVHEV4WFm01g3PVxMcRWQy2Bd6Y ypj1e4SBA4LyyMki/Br4NY4suO2L/PiXAJsJ7VA5fhzYy6Qr/NR8Zw== =eDqt -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Why couldn't it have been 42?
by Rich Salz 17 Dec '03

17 Dec '03

[drand48 is supposed to return a random number] From: Arve Kjoelen <akjoele(a)shiva.ee.siue.edu> To: cypherpunks(a)toad.com Date: Wed, 20 Sep 1995 10:38:58 -0500 Kun Luo, one of our grad students here recently found a bug in Sun's implementation of the drand48() function. We reported it to Sun, and they acknowledged the bug exists - it seemed to be the first time they had heard of it, though. The bug affects Sun's ANSI C compiler shipped with SPARCWorks3.0 and consists of the following: If you're compiling using the -Xc flag (strict ANSI C, no SUN C compatibility extensions), the function drand48() is BROKEN. It ALWAYS returns the number 9.000000 ...

1 0

Re: NYT on Netscape Crack
by Rich Salz 17 Dec '03

17 Dec '03

> You could do that, but thats not how C does things. C allocates these > things on the stack. Nope. Just because almost all machines anyone is every going to use in their lifetimes are stack-based doesn't mean C is stack-based. The C compiler I once used on a LispMachine had no stack. /r$

2 1