December 2003 - cypherpunks-legacy

Re: "alt.cypherpunks" Newsgroup vs. Mailing List?
by jgrubs＠left.webcasters.com 17 Dec '03

17 Dec '03

hallam(a)w3.org writes: > > >Should there be an "alt.cypherpunks" type of newsgroup instead of this > >mailing list? > > Bad idea, it would simply mean that every kook on USEnet would add > alt.cypherpunks onto the crossposting line. We would have black helicopters, > loons, Waco Wako's, Loonytarians and turkish government propaganda spamming > forever. Hey, create the alt. group and let it draw the kooks. Nobody said WE have to read it. We can stay here as usual... -- WebCasters(tm) James C. Grubs jgrubs(a)left.webcasters.com 6817 Maplewood Avenue Tel.: 419-882-2697 Sylvania, Oh 43560 Fax: 419-885-2814 Internet consulting, HTML programming, Information brokering

1 0

Re: "Hackers"-- brief review and anecdote...
by Peter Trei 17 Dec '03

17 Dec '03

> It's my impression that the play was staged a few years after my book > came out in 1984 (though I chose the title in 1982). I remember reading > the reviews then, and they didn't > seem to mention that it was a revivial of a years-old play whose name I had > unintentially used for my own book. (Unlike the case for the current > movie, whose screenwriter seemed to know of my own book.) If > you have evidence that the play was indeed produced before 1984, please > let me know. Otherwise, I'd be happy to accept your apology, Peter. > > On Mon, 18 Sep 1995, Peter Trei wrote: > > > >I saw "Hackers" yesterday. It's not bad and its political sensibility is > > > >very cyberpunk. The ad campaign even uses the tag line, "Their only crime > > > >is curiosity." > > > It may not be a crime, but it's not nice to steal a title. > > You mean, like you stole it from Dale Luck's (duck@mit oz) stage play of the same name? > > I saw this (in an Off-Off-Broadway production), years before your book came > > out. If I'm wrong (and I would not be suprised - I'm relying on fuzzy memories here), please consider my abject apology tendered. Namespace collisions seem to happen quite frequently in titles. I can remember when TMC made a big deal out their intention to air 'Brainstorm", the 1983 film with Natalie Wood. I settled down to watch, and up came a black and white movie with a totally different plot - it turned out they had been sent the 1965 film of that name, and no one had checked. Looking in the (ex)Cardiff film database, I note that there is now a 3rd movie of the title (1994). A couple weeks ago my daughter was making a big deal about wanting to watch 'The Red Shoes" on Disney. I was thinking of the 1948 ballet movie, and told her I didn't think she'd like it. She insisted, and it turned out to be a 30 minute (and charming in cloying sort of way) cartoon. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

ftp://www.brooks.af.mil/pub/unix/utils/des.tar
by Rich Salz 17 Dec '03

17 Dec '03

This seems to be /* Sofware DES functions * written 12 Dec 1986 by Phil Karn, KA9Q; large sections adapted from * the 1977 public-domain program by Jim Gillogly * Modified for additional speed - 6 December 1988 Phil Karn * Modified for parameterized key schedules - Jan 1991 Phil Karn Would someone from outside the US try to download the above file? It would be, at least, amusing if an Air Force site were in violation of the ITAR (their README notwithstanding). /r$

3 2

Re: Intellectual Property and Crypto collision
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

>> ELECTRONIC MEDIA PROTECTED UNDER COPYRIGHT LAW >> A presidential task force has recommended that electronic transmission of >> books, magazine articles and software should be classified as copies >> subject to existing copyright laws. The task force also recommended that >> it should be illegal to make or distribute products aimed at decoding > encrypted software without the consent of the copyright owner. >Would this make it illegal to produce tools for decrypting key-escrowed >software? :-) More importantly, would this firmly extend first amendment protection to electronicly transmitted forms?

1 0

(noise) Re: SPAM bait
by liberty＠gate.net 17 Dec '03

17 Dec '03

nobody(a)alpha.c2.org (Anonymous) wrote: <snip> > >Don't worry, "Janet Dove", or actually sanghi3(a)grfn.org got mailbombed >severely for this one. I'm just glad he doesn't know how to use remailers. Good going, Anonymous. What I don't understand about inappropriate SPAMs like that one (or telephone ads) is; what's the business incentive to do it? I assume that no Cypherpunk has subscribed to "Janet's" magazines, and I know that no Ray has _EVER_ spent money over a telephone unless we initiated the call, yet *still* we get unwanted calls every once-in-a-while. WHY? [Please respond privately to liberty(a)gate.net ] JMR

3 2

RSAREF Commercial Licensing
by Jonathan Zamick 17 Dec '03

17 Dec '03

Well I've vaccilated between making a formal, dry announcement or letting you all know my way. Given the general tenor (and individual spirit) of many on Toad it is pretty easy to guess which path I chose. So, first of all, here is to a productive future for encryption and encryption technologies. Consensus Development and RSA Data Security, have finalized the contract for Consensus to license and support RSAREF(tm) for commercial use. This isn't an advertisement for RSAREF -- as we are seeking to first present our license to those who have already expressed interest in the product to 'beta-test' our standard agreement. Meanwhile, we would like to gather some information from the net community. Our foremost concern is for those who have been using RSAREF in the past. If you have discovered any bugs which have either gone unreported or unfixed, we need to know ASAP. No bugs have been officially reported in version 2.0, however we have heard in the past that some may have been found. If a report has gotten lost during this period of transition, we'd like to know. Consensus' first priority is to make sure RSAREF is bug free. Secondly, for those who have contributed code to RSAREF in the past, or have code they'd like to submit, send email to me at the address below. Our hope is that RSAREF will continue to improve and meet the needs of its users through the co-support of both Consensus Development and our commercial and non-commercial RSAREF developers. Lastly, we would like to hear suggestions and ideas on how to improve RSAREF. We intend to remain responsive to requests, and welcome ideas for the evolution of the RSAREF toolkit. Anyway, again, have a good day. For those who would like to be on our RSAREF announcement list, send mail to <RSAREF-Ann-L(a)consensus.com> with 'Subscribe' in the Subject header. Note: RSAREF is a trademarked term by RSA Data Security Thank you all for your patience, I'm sure many will be as excited as I am. Jonathan Zamick Knowledge Officer ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

information on SSL brute force hacks wanted
by sameer 17 Dec '03

17 Dec '03

I'm putting together the hack netscape promotion (I still need to find someone to design the t-shirt) and need to know some information. 1) Who wrote the sslbrute software package and keyserver? Who managed the distributed cracking event? 2) Who broke Hal's first challenge? Please send me names email addresses and URLs. If you know of other people who you think deserve recognition for hacking netscape products, contact me. To see the page while under construction look at http://www.c2.org/hacknetscape -- please don't link to it, as it is obviously under construction. -- sameer Voice: 510-601-9777 Network Administrator FAX: 510-601-9734 Community ConneXion: The NEXUS-Berkeley Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer(a)c2.org

1 0

Time release crypto
by sdw＠lig.net 17 Dec '03

17 Dec '03

What minimal requirements would be needed to support encrypted packets/files that a holder could only decrypt after a certain date/time? (Time Escrow?) Or a server that releases keys if a 'heartbeat' isn't or a trigger is received? (Escrow in the banking/legal sense.) (Video/sound recordings for security, opened at court's request., Ecash Escrow, missing persons) The obvious is a server that releases keys periodically (and serves old keys at will). Is there any way to make this trustable? Multiple servers with shared (xor split, etc.) keys of some kind? Design ideas? Applications: Gov. docs with expiration dates for privacy/secrecy. Source code for projects (if a company folds, copyright expires, etc.). Contract release to companies, public, etc. (15 minute stock data, agreements for commercial use initially, public/fair use later) sdw -- Stephen D. Williams 25Feb1965 VW,OH (FBI ID) sdw(a)lig.net http://www.lig.net/sdw Consultant, Vienna,VA Mar95- 703-918-1491W 43392 Wayside Cir.,Ashburn, VA 22011 OO/Unix/Comm/NN ICBM/GPS: 39 02 37N, 77 29 16W home, 38 54 04N, 77 15 56W Pres.: Concinnous Consulting,Inc.;SDW Systems;Local Internet Gateway Co.;28May95

1 0

Re: Netscape's random numbers
by Rich Salz 17 Dec '03

17 Dec '03

>It would be remarkably stupid for them to try to enforce the >provision. Perhaps, but it that's secondary to the bad spin the media could end up having on it. Preventing that problem was a major point of my article, which discussed the media and netscape not at all. /r$

1 0

Your name in print
by Rich Salz 17 Dec '03

17 Dec '03

>From owner-www-security(a)ns2.rutgers.edu Mon Sep 18 17:36:41 1995 Received: from ns2.rutgers.edu (ns2.rutgers.edu [128.6.21.2]) by postman.osf.org (8.6.9/8.6.x) with ESMTP id RAA13528; Mon, 18 Sep 1995 17:36:34 -0400 Received: (from daemon@localhost) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) id MAA00546 for www-security-outgoing; Mon, 18 Sep 1995 12:35:37 -0400 Received: from whiz.mfi.com (whiz.mfi.com [198.71.19.34]) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) with SMTP id MAA00534 for <www-security(a)ns2.rutgers.edu>; Mon, 18 Sep 1995 12:35:18 -0400 Received: from ccmail2.mfi.com by whiz.mfi.com (AIX 3.2/UCB 5.64/4.03) id AA31083; Mon, 18 Sep 1995 09:26:41 -0700 Received: from ccMail by ccmail2.mfi.com id AA811441583 Mon, 18 Sep 95 09:26:23 PST Date: Mon, 18 Sep 95 09:26:23 PST >From: "Prince, Cheryl" <cprince(a)mfi.com> Encoding: 663 Text Message-Id: <9508188114.AA811441583(a)ccmail2.mfi.com> To: www-security(a)ns2.rutgers.edu Subject: security article Sender: owner-www-security(a)ns2.rutgers.edu Precedence: bulk Errors-To: owner-www-security(a)ns2.rutgers.edu Status: RO I am an editor at a business technology publication and am currently researching a piece on network security at financial institutions as well as the feasability of secure Internet transactions and banking on the world wide web. I will be interviewing individuals who can speak to these issues and can talk about whether the banking industry can in fact move much of its activity on line without risking the loss of billions of dollars to online theft and other related damage. If you are familiar with this subject matter and/or have any experience in the financial industry, please email me at: cprince(a)mfi.com Thanks, CJ Prince

1 0