December 2003 - cypherpunks-legacy

Netscape bugs bounty
by & E. Metzger 17 Dec '03

17 Dec '03

I am among the first people to be sarcastic about things Netscape has done (I believe I originated the joke about the extra money from the Netscape IPO being used to build a structure large enough to house Marc Andreessen's ego), but I think this sniping about the Bugs Bounty is silly. They are finally starting to try to do the right thing and take problems, especially security problems, with their software seriously and not sweep them under the rug. Cut them some slack. It might not be perfect, but they are moving in a good direction. Perry

1 0

Re: The NSA Visits Compendium
by Duncan Frissell 17 Dec '03

17 Dec '03

At 02:05 PM 10/16/95 -0700, Vladimir Z. Nuri wrote: >a study on this would be very significant. (from what I understand, the NSA >tried to do this with public key crypto, i.e. suppress it at the >publication stage. a professor gave a lecture on this in one of my >classes and said that it was even covered in the NYT at the time. >unfortunately I lost the date. I believe it was a long time ago >(maybe the 80's or even the 70's). hopefully someone else has an >encyclopedic brain. 1977/1978. "A Proposal for a Public Key Encryption System." IEEE meeting. Imprisonment threat by letter. Mathematical Games column in Scientific American. 3,000 copies of paper distributed free by MIT. >unfortunately, whenever someone says, "don't name my company", it loses >effectiveness. I would like to point out that people are directly contributing >to their erosion of rights by this behavior that suggests that they >doing something lawbreaking that they are ashamed of. One should always suggest to investigating authorities that they show a warrant or get lost. "Quo warranto"? It is rarely useful to chat with them. DCF

1 0

JOin List request - help please
by John Leishman 17 Dec '03

17 Dec '03

Have tried on MANY occassions to join your list. The resultsd are commonly, in varitions of; Date: Tue, 12 Sep 95 15:44:37 PDT To: jleishma(a)ozemail.com.au From: Majordomo(a)toad.com Subject: Your Majordomo request results: Re: Your Majordomo request results: Reply-To: Majordomo(a)toad.com -- Your request of Majordomo was: >>>> subscribe Cypherpunks **** subscribe: unknown list 'Cypherpunks'. Please please, could I be joined <sob> <g> --------------------------------------------------- >>--> -*-_|\ John Leishman in Tropical Darwin / \ Wk (61) (089) 81 8155 Hm (61 (089) 81 9697 \_.--._/ Mobile (61) 018 089 631 Fax (61)(089) 819415 v E-Mail jleishma(a)ozemail.com.au 100026.157@compuserve

1 0

Re: what are these people selling????
by Rich Salz 17 Dec '03

17 Dec '03

>Jim Bidzos and some of us might have interesting interactions on >patent issues, but I've got to emphasize that he's no demon. He's a >guy trying to make a buck on his patent properties -- by and large he >has the same interests about seeing cryptography spread that the rest >of us do. Only until the patents expire. He's no demon, but there's no altruism at work. Come the millenium he moves to things like selling cars. You heard it here first. /r$

1 0

Re: My chat with Goeff Greiveldinger
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:00 PM 10/15/95, Michael Froomkin wrote: >I will be appearing with Goeff Greiveldinger, he of the Justice Dept, at >a discussion of commercial key escrow next Thursday in Bethesda. Anyone >with fun questions I should throw at him should contact me... > >Please note that the ostensible topic of this discussion is *commerical* >key escrow, not Clipper per se, so I have to be diplomatic.... The question I have is this: Why is the Justice Department even involved at all if it is truly only about _commercial_ key escrow? (I have some speculations, of course, which I'll share in a minute.) While commercial key escrow of course has legal implications, so do a lot of things that I suspect the Justice Department has no interest in discussing with anyone. And most of the implications of commercial key escrow--if strongly voluntary in the sense we have discussed many times here--are implications of _contract_ law that will get hashed out through court cases. So, why is the JD interested? Why would Mr. Greiveldinger of the JD be at a discussion of commercial key escrow if in fact it is to be purely voluntary and strongly voluntary? Unless, of course, the JD has interests that go beyond mere privately arranged contracts to hold keys in safety. Or, I suppose, export control issues. (But then I think it unlikely that a strongly voluntary system would be allowed to be exported. And since a domestic version that is strongly voluntary would leak out almost immediately, I think a domestic strongly voluntary CKE system is unlikely.) I suspect Michael Froomkin can tell us why the JD is involved, what the stated reason is, but I still find it "odd" that a purely voluntary contractual arrangement between, say, "Thomas Paine" and "Ye Olde Keye Repository" is generating interest by King George's legal officers. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

4 3

Undeliverable Message
by MAILER-DAEMON＠usmc.mil 17 Dec '03

17 Dec '03

To: <cypherpunks(a)toad.com> Cc: <remailer-operators(a)c2.org> Subject: Re: PA Remailer Concerns Message not delivered to recipients below. Press F1 for help with VNM error codes. VNM3043: CPL JASON P JONES@IRM711@MCLB Albany VNM3043 -- MAILBOX IS FULL. The message cannot be delivered because the recipient's mailbox contains the maximum number of messages, as set by the system administrator. The recipient must delete some messages before any other messages can be delivered. The default limit is 1000 messages. Administrators can set lower limits if required using the Change mailbox settings function available in the Manage User menu (MUSER). The 1000 message limit is the maximum allowed by the Mail program. If this limit is reached, the recipient must delete some of the messages before the mailbox can accept any more incoming messages. ---------------------- Original Message Follows ----------------------[I'm sending this to the cypherpunks and remailer-operators lists. Replies are directed to c'punks, just to avoid crossposting followups, but I read both lists. -Futplex] Mark writes: [re: a new Pennsylvania law] > More likely the law will be used when a remailer operator wont play ball with > the local LEA and surrender any existing logs. Then the LEA can simply throw > the operator into a court under this legislation. > > If (when?) something serious is perpetrated and planned using a remailer then > they will have the motivation to shut them down. I would very much like to see this law tested. I think it could prove fairly important to attack it with a well-planned, benign test case rather than wait for the next National Liberation spam or a death threat. I don't live in PA, but I would be willing to participate as the defendant in a test case under the right circumstances. Presumably I would open an account with an ISP in Penna., set up a remailer on the account (need to find an ISP that clearly allows that), and have somebody send a message through it. We would need to design a promising test case and find an attorney willing & able to offer pro bono services. Any comments or suggestions, esp. from legal types (who of course are not offering formal legal advice to anyone :) ? Is this realistic ? What would it take to elicit a prosecution for such a test case ? -Futplex <futplex(a)pseudonym.com>

1 0

Illegally canceled articles on Microsoft Security Bugs
by anonymous＠replay.com 17 Dec '03

17 Dec '03

(A copy of this message has also been posted to the following newsgroups: alt.security, comp.os.ms-windows.apps.misc,comp.os.ms-windows.win95.misc,alt.religion.scientology,news.admin.net-abuse.misc,comp.protocols.smb,comp.os.ms-windows.advicacy,comp.os.ms-windows.networking.tcp-ip) -----BEGIN PGP SIGNED MESSAGE----- Could somebody please tell me who illegally canceled my article <llurch-1510951157410001(a)tip-mp3-ncs-3.stanford.edu>, referenced in the followup article below, as well as several other articles I posted this morning? It was cross-posted to several groups, but I don't think it should have triggered any spam-cancelers, and I see nothing in news.admin.net-abuse.misc. I'd find the cuplrit myself, but Stanford only saves the last 100 or so messages in control. See the rather prominent blinking link on the Web page below for the other PGP-signed article that was canceled. Thanks in advance. Followups set to news.admin.net-abuse.misc. Don't bother canceling this article, my friend. By the way, the other articles were saved and emailed as well. - -rich jabba(a)deathstar.stanford.edu and other accounts moderator of a certain list http://rescomp.stanford.edu/~llurch/innocuous/faq.html PGP key available on MIT server and via finger -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMIHC9oND7LjhcPQ9AQHTZgQAxGQZGTFDrzUTfyWCuLTUP2VbIp6IwK/Y NJjy7ke4rgZH+bjegb1h2ig/lALEhnX4+uhurhDJ0wq6du2p5V/DUlsNHCcWvotL GHyd/ZLzXGq6OYRoPijUHAdDBPD2wWIdAfsYNiTgv3iezBJL+2cCq/YLiPd22KyF MROQwF05Hoc= =1K2B -----END PGP SIGNATURE----- I will be charitable and assume that it was someone else I've pissed off (lord knows there's several), and not someone working directly for Microsoft or the Church [spit] of Scientology, who were both maligned in the canceled posts. In article <petrichDGID4I.5GG(a)netcom.com>, petrich(a)netcom.com (Loren Petrich) wrote: > Newsgroups: > alt.security,comp.os.ms-windows.apps.misc,comp.os.ms-windows.win95.misc > Path: > nntp.Stanford.EDU!news.Stanford.EDU!agate!howland.reston.ans.net!newsfeed.internetmci.com!news.sprintlink.net!noc.netcom.net!netcom.com!petrich > From: petrich(a)netcom.com (Loren Petrich) > Subject: Re: More Microsoft Security Bugs > Message-ID: <petrichDGID4I.5GG(a)netcom.com> > Organization: NETCOM On-line Communication Services (408 261-4700 guest) > References: <llurch-1510951157410001(a)tip-mp3-ncs-3.stanford.edu> > Date: Sun, 15 Oct 1995 21:02:42 GMT > X-Original-Newsgroups: > comp.os.ms-windows.win95.misc,alt.security,comp.os.ms-windows.apps.financial,comp.os.ms-windows.apps.utilities,comp.os.ms-windows.apps.word-proc,comp.os.ms-windows.apps.misc,alt.fan.bill-gates,comp.os.ms-windows.advocacy,alt.destroy.microsoft,comp.os.ms-windows.nt.admin.misc > Lines: 9 > Sender: petrich(a)netcom2.netcom.com > Xref: nntp.Stanford.EDU alt.security:21764 > comp.os.ms-windows.apps.misc:13757 comp.os.ms-windows.win95.misc:38436 > My favorite example of such a bug is in BOB's password protection. > If you mistype it 3 times, it will ask if you want another one. The only > defender of this "feature" has been -- get this -- JoanieDearest (at > least if memory serves me correctly). > -- > Loren Petrich Happiness is a fast Macintosh > petrich(a)netcom.com And a fast train > Visit my ftp site; its address is (in WWW syntax): > ftp://ftp.netcom.com/pub/pe/petrich

2 1

Next EFF-Austin General Meeting : Cryptography (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message:

1 0

Japan-CIA
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Japan-CIA Tokyo (AP) -- Japan said that its relations with Washington could be seriously damaged if a report that the CIA spied on Japanese representatives at auto talks proves true. The New York Times reported Sunday that the CIA eavesdropped on conversations between Japanese negotiators and automakers during the talks in Geneva this year, reporting the results daily to U.S. Trade Representative Mickey Kantor. According to the report, Kantor was provided with summaries of conversations between Japanese bureaucrats and executives from Toyota Motor Corp. and Nissan Motor Co. Toyota called the alleged eavesdropping ``unthinkable,'' but refused to comment further.

1 0

Re: PA Remailer Concerns
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:13 AM 10/16/95, Futplex wrote: >I would very much like to see this law tested. I think it could prove fairly >important to attack it with a well-planned, benign test case rather than wait >for the next National Liberation spam or a death threat. > >I don't live in PA, but I would be willing to participate as the defendant in >a test case under the right circumstances. Presumably I would open an >account with an ISP in Penna., set up a remailer on the account (need to find >an ISP that clearly allows that), and have somebody send a message through it. > >We would need to design a promising test case and find an attorney willing & >able to offer pro bono services. I'm not a lawyer, though I hang out on the "Cyberia" list and I watched a lot of the OJ trial. :-} Seriously, it is hard to "design a promising test case" in this way. They--the Pennsylvania law enforcement authorities--don't have to take the bait. They can just do nothing, until an incident arises which provokes them. Maybe next year, maybe five years from now. Such an incident is likely to be one that they figure will make for a popular prosecution. One of the Four Horseman, probably. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

5 4