December 2003 - cypherpunks-legacy

Re: "Hackers"-- brief review and anecdote...
by Peter Trei 17 Dec '03

17 Dec '03

> It's my impression that the play was staged a few years after my book > came out in 1984 (though I chose the title in 1982). I remember reading > the reviews then, and they didn't > seem to mention that it was a revivial of a years-old play whose name I had > unintentially used for my own book. (Unlike the case for the current > movie, whose screenwriter seemed to know of my own book.) If > you have evidence that the play was indeed produced before 1984, please > let me know. Otherwise, I'd be happy to accept your apology, Peter. > > On Mon, 18 Sep 1995, Peter Trei wrote: > > > >I saw "Hackers" yesterday. It's not bad and its political sensibility is > > > >very cyberpunk. The ad campaign even uses the tag line, "Their only crime > > > >is curiosity." > > > It may not be a crime, but it's not nice to steal a title. > > You mean, like you stole it from Dale Luck's (duck@mit oz) stage play of the same name? > > I saw this (in an Off-Off-Broadway production), years before your book came > > out. If I'm wrong (and I would not be suprised - I'm relying on fuzzy memories here), please consider my abject apology tendered. Namespace collisions seem to happen quite frequently in titles. I can remember when TMC made a big deal out their intention to air 'Brainstorm", the 1983 film with Natalie Wood. I settled down to watch, and up came a black and white movie with a totally different plot - it turned out they had been sent the 1965 film of that name, and no one had checked. Looking in the (ex)Cardiff film database, I note that there is now a 3rd movie of the title (1994). A couple weeks ago my daughter was making a big deal about wanting to watch 'The Red Shoes" on Disney. I was thinking of the 1948 ballet movie, and told her I didn't think she'd like it. She insisted, and it turned out to be a 30 minute (and charming in cloying sort of way) cartoon. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

Re: Intellectual Property and Crypto collision
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

>> ELECTRONIC MEDIA PROTECTED UNDER COPYRIGHT LAW >> A presidential task force has recommended that electronic transmission of >> books, magazine articles and software should be classified as copies >> subject to existing copyright laws. The task force also recommended that >> it should be illegal to make or distribute products aimed at decoding > encrypted software without the consent of the copyright owner. >Would this make it illegal to produce tools for decrypting key-escrowed >software? :-) More importantly, would this firmly extend first amendment protection to electronicly transmitted forms?

1 0

Re: Netscape SSL implementation is broken!
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 9:29 PM 9/17/95, Perry E. Metzger wrote: >Christian Wettergren writes: >> I guess we should send them the draft-ietf-security-randomness-00.txt >> asap. > >I thought that was an RFC by now. > >Perry It is! RFC 1750.

2 1

Re: "Hackers"-- brief review and anecdote...
by Steven Levy 17 Dec '03

17 Dec '03

It's my impression that the play was staged a few years after my book came out in 1984 (though I chose the title in 1982). I remember reading the reviews then, and they didn't seem to mention that it was a revivial of a years-old play whose name I had unintentially used for my own book. (Unlike the case for the current movie, whose screenwriter seemed to know of my own book.) If you have evidence that the play was indeed produced before 1984, please let me know. Otherwise, I'd be happy to accept your apology, Peter. On Mon, 18 Sep 1995, Peter Trei wrote: > > > >I saw "Hackers" yesterday. It's not bad and its political sensibility is > > >very cyberpunk. The ad campaign even uses the tag line, "Their only crime > > >is curiosity." > > > It may not be a crime, but it's not nice to steal a title. > > You mean, like you stole it from Dale Luck's (duck@mit oz) stage play of the same name? > I saw this (in an Off-Off-Broadway production), years before your book came > out. > > > > > Peter Trei > Senior Software Engineer > Purveyor Development Team > Process Software Corporation > http://www.process.com > trei(a)process.com >

2 1

ftp://www.brooks.af.mil/pub/unix/utils/des.tar
by Rich Salz 17 Dec '03

17 Dec '03

This seems to be /* Sofware DES functions * written 12 Dec 1986 by Phil Karn, KA9Q; large sections adapted from * the 1977 public-domain program by Jim Gillogly * Modified for additional speed - 6 December 1988 Phil Karn * Modified for parameterized key schedules - Jan 1991 Phil Karn Would someone from outside the US try to download the above file? It would be, at least, amusing if an Air Force site were in violation of the ITAR (their README notwithstanding). /r$

3 2

(noise) Re: SPAM bait
by liberty＠gate.net 17 Dec '03

17 Dec '03

nobody(a)alpha.c2.org (Anonymous) wrote: <snip> > >Don't worry, "Janet Dove", or actually sanghi3(a)grfn.org got mailbombed >severely for this one. I'm just glad he doesn't know how to use remailers. Good going, Anonymous. What I don't understand about inappropriate SPAMs like that one (or telephone ads) is; what's the business incentive to do it? I assume that no Cypherpunk has subscribed to "Janet's" magazines, and I know that no Ray has _EVER_ spent money over a telephone unless we initiated the call, yet *still* we get unwanted calls every once-in-a-while. WHY? [Please respond privately to liberty(a)gate.net ] JMR

3 2

RSAREF Commercial Licensing
by Jonathan Zamick 17 Dec '03

17 Dec '03

Well I've vaccilated between making a formal, dry announcement or letting you all know my way. Given the general tenor (and individual spirit) of many on Toad it is pretty easy to guess which path I chose. So, first of all, here is to a productive future for encryption and encryption technologies. Consensus Development and RSA Data Security, have finalized the contract for Consensus to license and support RSAREF(tm) for commercial use. This isn't an advertisement for RSAREF -- as we are seeking to first present our license to those who have already expressed interest in the product to 'beta-test' our standard agreement. Meanwhile, we would like to gather some information from the net community. Our foremost concern is for those who have been using RSAREF in the past. If you have discovered any bugs which have either gone unreported or unfixed, we need to know ASAP. No bugs have been officially reported in version 2.0, however we have heard in the past that some may have been found. If a report has gotten lost during this period of transition, we'd like to know. Consensus' first priority is to make sure RSAREF is bug free. Secondly, for those who have contributed code to RSAREF in the past, or have code they'd like to submit, send email to me at the address below. Our hope is that RSAREF will continue to improve and meet the needs of its users through the co-support of both Consensus Development and our commercial and non-commercial RSAREF developers. Lastly, we would like to hear suggestions and ideas on how to improve RSAREF. We intend to remain responsive to requests, and welcome ideas for the evolution of the RSAREF toolkit. Anyway, again, have a good day. For those who would like to be on our RSAREF announcement list, send mail to <RSAREF-Ann-L(a)consensus.com> with 'Subscribe' in the Subject header. Note: RSAREF is a trademarked term by RSA Data Security Thank you all for your patience, I'm sure many will be as excited as I am. Jonathan Zamick Knowledge Officer ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

information on SSL brute force hacks wanted
by sameer 17 Dec '03

17 Dec '03

I'm putting together the hack netscape promotion (I still need to find someone to design the t-shirt) and need to know some information. 1) Who wrote the sslbrute software package and keyserver? Who managed the distributed cracking event? 2) Who broke Hal's first challenge? Please send me names email addresses and URLs. If you know of other people who you think deserve recognition for hacking netscape products, contact me. To see the page while under construction look at http://www.c2.org/hacknetscape -- please don't link to it, as it is obviously under construction. -- sameer Voice: 510-601-9777 Network Administrator FAX: 510-601-9734 Community ConneXion: The NEXUS-Berkeley Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer(a)c2.org

1 0

Netscape's random numbers
by Rich Salz 17 Dec '03

17 Dec '03

Congrats, nice job! The Netscape license explicitly prohibits decompiling (except where such prohibition is illegal). When this hits the media it will be important to avoid being tarred with the "hacker breaks rules and breaks in" brush. More subtly, it's probably a bad idea to call into question the overall business model of client binaries on the net. Instead, emphasize importance of open code, public reviews, ability to link in your own code that meets public specs, etc. All of these things the Internet was designed to do, and U.S. ITAR regulations are designed to prohibit (globally, anyway). And also that the bad guys will never play by the rules. And re-emphasize that solutions are possible, just that the U.S. government prevents them from being deployed in a global economy. Perhaps draw parallels to the recent Microsoft Word virus. /r$

2 1

Time release crypto
by sdw＠lig.net 17 Dec '03

17 Dec '03

What minimal requirements would be needed to support encrypted packets/files that a holder could only decrypt after a certain date/time? (Time Escrow?) Or a server that releases keys if a 'heartbeat' isn't or a trigger is received? (Escrow in the banking/legal sense.) (Video/sound recordings for security, opened at court's request., Ecash Escrow, missing persons) The obvious is a server that releases keys periodically (and serves old keys at will). Is there any way to make this trustable? Multiple servers with shared (xor split, etc.) keys of some kind? Design ideas? Applications: Gov. docs with expiration dates for privacy/secrecy. Source code for projects (if a company folds, copyright expires, etc.). Contract release to companies, public, etc. (15 minute stock data, agreements for commercial use initially, public/fair use later) sdw -- Stephen D. Williams 25Feb1965 VW,OH (FBI ID) sdw(a)lig.net http://www.lig.net/sdw Consultant, Vienna,VA Mar95- 703-918-1491W 43392 Wayside Cir.,Ashburn, VA 22011 OO/Unix/Comm/NN ICBM/GPS: 39 02 37N, 77 29 16W home, 38 54 04N, 77 15 56W Pres.: Concinnous Consulting,Inc.;SDW Systems;Local Internet Gateway Co.;28May95

1 0