December 2003 - cypherpunks-legacy

Re: Seeds which depend on machine states
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> > Miguel Diaz writes: > > It is my suspicion that seeds which depend on machine > > states(ie state of your computer at a specific instance of > > time) would always be subject to scrutiny and de-cryption. > > As long as the software used to encrypt is not self-modifying, > > the machine state can (through careful manipulation involving > > temperature, clocks, processes etc)always be replicated and > > fixed to an acceptable degree. > > Try getting a human to type with the same timing, to microsecond > precision, the same way twice. > That assumes that you have someway of measuring the timing to microsecond precision. On most machines I've been on, if you get something time- stamped, even if there is a microsecond portion of the timestamp it's meaningless because it wasn't based on a timer with the required precision. If a timer can only resolve milliseconds, the microseconds don't have any meaning. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

2 1

Cypherpunks mailing list starts in Japan
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: hanabusa(a)postbox.bnn-net.or.jp Mime-Version: 1.0 Date: Sat, 13 Sep 1997 00:44:50 +0900 To: gnu(a)toad.com, tcmay(a)got.net, hugh(a)xanadu.com, shamrock(a)netcom.com, vince(a)offshore.com.ai, ddt(a)lsd.com, eb(a)comsec.com, sameer(a)c2.net, rah(a)shipwright.com, sandfort(a)crl.com, iang(a)cs.berkeley.edu From: "Sh.Hanabusa" <hanabusa(a)bnn-net.or.jp> Subject: Cypherpunks mailing list starts in Japan -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 News. Today we have a new mailing list "cypherpunks-j". (for Japanese and English) It is hosted by Joichi Ito. This is the first step for cypherpunk movement in Japan. I hope this list changes this country. > Mailing-List: contact cypherpunks-j-help(a)htp.org; run by ezmlm > Sender: cypherpunks-j-owner(a)htp.org > Reply-To: cypherpunks-j(a)htp.org > X-ftpsite-URL: ftp://ftp.htp.org/pub/crypto/ > X-unsubscribe-URL: mailto:cypherpunks-j-unsubscribe@htp.org > X-subscribe-URL: mailto:cypherpunks-j-subscribe@htp.org > Delivered-To: mailing list cypherpunks-j(a)htp.org > X-Sender: joiito(a)pop4.ibm.net > Date: Fri, 12 Sep 1997 16:20:41 +0200 > From: Joichi Ito <jito(a)eccosys.com> > Subject: [cpj:65] welcome to cypherpunks-j > Mime-Version: 1.0 > > so... this is the new list... lets see if it works. > > I made it cypherpunks-j, but I put cpj in the subject... what do you think? > > I hope this works... > > - Joi > _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ Shuichiro Hanabusa (hanabusa(a)bnn-net.or.jp) Producer/Special Programs, NHK Enterprises 21 Inc. Location: Tokyo / Japan PGP Fingerprint (DSS) 5696 2D67 8DF1 89C6 6E30 6E9A 7A7E 08A9 A75E 5BD7 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0 for non-commercial use <http://www.pgp.com> Charset: noconv iQA/AwUBNBlji3p+CKmnXlvXEQKQbQCgrWomTzjNkdjOKKCig7x/0VFxunYAnjQ5 lRPXC+CpQ5dDa5BXCmMK5zNC =U5qX -----END PGP SIGNATURE----- --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Are we men or mice? Re: House panel votes behind closed doors to build in Big Brother (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 12 Sep 1997 14:27:06 -0400 From: "Shabbir J. Safdar" <shabbir(a)vtw.org> To: fight-censorship(a)vorlon.mit.edu, fight-censorship-announce(a)vorlorn.mit.edu Subject: Are we men or mice? Re: House panel votes behind closed doors to build in Big Brother At 11:37 PM -0700 9/11/97, Declan McCullagh wrote: > ---------- Forwarded message ---------- > Date: Thu, 11 Sep 1997 23:37:39 -0700 (PDT) > From: Declan McCullagh <declan(a)well.com> > To: fight-censorship-announce(a)vorlon.mit.edu .. > That's why the encryption outlook in Congress is abysmal. Crypto-advocates > have lost, and lost miserably. A month ago, the debate was about export > controls. Now the battle is over how strict the //domestic// controls will > be. It's sad, really, that so many millions of lobbyist-dollars were not > only wasted, but used to advance legislation that has been morphed into a > truly awful proposal. This suggests the battle is over and lost. It's not, and a tone of this sort only plays into the FBI's hands. Feeling like they're on a roll, if the community throws in the towel now, as your tone above suggests, we cede defeat and get domestic restrictions. We have a goddamn right to use encryption without a government backdoor, and I, and nobody else, should give up until it's dragged from our rigor-mortis-addled hands. In Congress, there are still votes left, and we should be fighting to make sure that no member of Congress that has a vote at any point in this process should cast that vote without knowing that their net constituents care about this. They may not always vote with their constituents' wishes (and that is frustrating to all of us) but we certain-as-hell shouldn't let them make that call without having at least constituent input. You want to see effectiveness and change, do something constructive instead of whining on the net. For example, let people know that by signing up for the Adopt Your Legislator program at http://www.crypto..com/member/ they will be notified before and after every vote that their legislator is a party to, complete with phone and fax nnmbers. It may look gloomy now, but bad votes should only make us madder and more determined to lobby Congress. It's easy to complain about the fact that you don't like the direction the boat is going; much harder to devote your energies to actually changing the course. Pick up an oar and row. If you get domestic restrictions on encryption and you haven't been calling your member of Congress on a regular basis to tell them to do the right thing, you'll get exactly the kind of government you've invested in. -S PS I would like this to go to fight-censorship-announce as well, please.

4 3

MacRandoms
by W. Kinney 17 Dec '03

17 Dec '03

I tried posting this a few days ago, but it evidently got lost because of the problems with the list. Anyway, I've uploaded my random number generator number generation code for the Mac to: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/randomness/MacRandoms.sea.hqx This file contains Colin Plumb's randpool code, my Macintosh wrapper for it, and a nice 68K assembler implementation of MD5 as a bonus. Enjoy. -- Will

1 0

Re: FCPUNX:Are we men or mice? Re: House panel votes behind closed doors to build in Big Brother
by She Devil With A Modem 17 Dec '03

17 Dec '03

Also Sprach Ray Arachelian: > > On Fri, 12 Sep 1997, Declan McCullagh wrote: > > > We have a goddamn right to use encryption without a government backdoor. It is not just a right, it is very nearly almost a law of NATURE. Not just a creation of logic, but a certainty that cannot be compensated for or guarded against. > Frankly among certain crowds many backdoors and other bugs have been > detected in most OS's, how will the mother fuckers keep them from being > found and used? I mean, all you have to do is simply get their attention > and have them snoop on you, meanwhile you watch all the packets and record > the weird ones and you've got a copy of their session. Don't get distracted by wasting too much time in inappropriate places. My definition of "inappropriate places" being "places that do not yield enough information perceived as useful". The people who are viewed as the "enemy" here have a hell of a lot more experience judging the value of information as a weapon. (Not that this should be discouraging, just taken into consideration.) The weapon can and does become useless, especially if it concerns personal information, if the person involved has the emotional strength to be able to resist emotional blackmail. An enormous victory can be won by the STRONG, who are capable of withstanding personal attack in this regard and causing the enemy to waste enormous amounts of their time trying to accomplish impossible goals of erosion on individual self esteem. If you believe that this is mere paranoia, I urge you to make a serious examination of the circumstances of Alan Turing's death. As cypherpunks, you should all be interested enough to do so. His death and the shady circumstance surrounding it are a thing to be learned from. > After the evil laws, our jobs will be to break ALL GAK'ed software. How > will they prevent that? Passing more laws to make the exposure of bugs > and holes illegal? Sort of like the cell scanner laws? :) There is a certain amount of quality control that the cypherpunks are doing for the intelligence agencies, and those same are perfectly willing to allow you to continue to do that...for now. Nor is it any coincidence that (I'm sure) some of you have been approached by said places with terms of employment and/or indoctrination. And of course this publicly available list is well populated with people who are perfectly willing to spam it with controversial and time-wasting rhetoric, designed to make those of you who are good at coding angry enough to waste your time denouncing their "chaff" instead. You are not dealing with either stupid or moral people when it comes to TLAs. Remember this, please. Once I believed in this country enough to die for it, I believed their propaganda and their lies. That was before I got a good eyeful of the incompetence, cruel lack of concern for human lives, the obsession with power and the selfish greed that permeates the American military; the unnamed "fourth branch" of our government; the sort of people who would allow a five BILLION dollar facility in Maryland to be built for their pleasure while people in New York and Los Angeles and Austin and Chicago - CITIES IN THE SAME COUNTRY THEY HAVE SUPPOSEDLY SWORN TO DEFEND - are dying of starvation, drug addiction, poor medical care, and the odd police brutality incident! I ask, no, I BEG you now, those of you who have the power to fight this: retain your individualistic morals and let no one subvert them by any means, because they are TRULY what our country was founded upon! I still believe in those ideals, yes - in SPITE of my exposure to the pack of misguided, selfish, greedy sons of bitches who have managed after two hundred years to turn it into a travesty of what it once was, and what it once meant to me. Don't let them jam you with their chaff! Ignore the bullshit and THINK! It's the LAST thing THEY want you to do! -- "It was sweet to hear of the Pathfinder | Do not CD c engineer's bumper sticker: 'My other | taunt --------P===\==/ vehicle is on Mars!'" -- Stan Kelly-Bootle, | happy fun /_\__ Unix Review Oct 1997 | fencer! _\ \

1 0

Random crypto legal stuff
by Greg Broiles 17 Dec '03

17 Dec '03

I just talked to a docket clerk at the Ninth Circuit - they say that no oral argument has been scheduled in the Bernstein case (case # is 97-16686 at the appellate level), and no action has been taken since the government's emergency stay motion was filed. Also, I spoke with someone at BXA re their updated crypto EARs - they confirmed that a second draft has been prepared, but say that it's circulating "at the inter-agency level" and is not available to the public, even though they'll be discussing it in Portland in two weeks. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto.

1 0

Louis Freeh as boytoy
by Declan McCullagh 17 Dec '03

17 Dec '03

>From a gay friend... "As a gay man, I wouldn't mind coming home to find Louis Freeh in my bedroom -- but I can understand why others might be upset." "If Louis Freeh weren't such a pig I'd pork him." "Now I know why Bill Gates named his company MicroSoft."

1 0

Re: Information Please (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 12 Sep 1997 16:11:51 -0400 > From: Duncan Frissell <frissell(a)panix.com> > Subject: Re: Information Please > >I am assuming of course that there must be some form of law somewhere > >which recognizes the right to resist oppression and violation of human > >rights by any government elected or not. > > In fact, the Nuremberg decisions say that in certain cases International Law > may *require* you to overthrow your government. In CONGRESS, July 4, 1776. A D E C L A R A T I O N By the REPRESENTATIVES of the U N I T E D S T A T E S O F A M E R I C A, In GENERAL CONGRESS assembled. When in the Course of human Events, it becomes necessary for one People to dissolve the Political bands which have connected them with another, and to assume among the Powers of the Earth, the separate and equal station to which the Laws of Nature and of Nature's God entitle them, a decent respect to the Opinions of Mankind requires that they should declare the causes which impel them to the Separation. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re:
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 9/12/97 1:31 AM, Anonymous (nobody(a)REPLAY.COM) passed this wisdom: [snip] >Now think about this: You're Joe Random Govt. Worker at the >official secret key repository, and there's a budget crisis going >on - instead of paychecks, you're getting I.O.U.'s. Your terminal >has access to thousands, perhaps millions, of secret keys. You grab >one of CitiBank's, forge a few transactions, and 30 seconds later >your Swiss bank account is a few million dollars fatter and >according to the digital signature, the transaction originated in >L.A.. Please correct me if I am wrong, but could not a GAK backdoor be written that will simply permit decryption only of the ciphertext and not encryption. Would not this prevent this from happening? Don'tget me wrong. It scares the hell out of me too, but maybe, in addition to that various things Tim has suggested we might also consider how to make the GAK as secure as cam be to minimize its potential for disaster. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNBnRQcdZgC62U/gIEQK+qACfSPjDLBIKmN4AgvEU6nBPmKKF+94AnR6T 4ZV9vbLb7vCpaaKGZA1mPTmH =MbPr -----END PGP SIGNATURE----- Brian B. Riley --> http://www.macconnect.com/~brianbr For PGP Keys - Send Email Subject "Get PGP Key" "The only thing necessary for evil to triumph, is for good men to stand by and do nothing" Edmund Burke

3 2

In Defense of Libertarianism, from HotWired's Synapse (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 12 Sep 1997 07:47:21 -0700 (PDT) > From: Declan McCullagh <declan(a)well.com> > Subject: In Defense of Libertarianism, from HotWired's Synapse > Libertarianism is not about anarchy, utopia, or selfishness. Instead, > libertarians simply are skeptical of "nanny government," and recognize > the many ways state power has been abused in the past. They believe > that government programs like health assistance, Social Security, > foreign aid, and corporate welfare do more harm than good. They argue > that everyone must be equal before the law, and everyone has human > rights to personal security, to property, and to free speech that the > government must protect, not violate. If the Libertarians are so gung-ho on avoiding governmental (especialy federal) intervention in their lives why do they support the 14th Amendment? Why do they steadfastly stick to the position that the states should be forced to be homogenous in their laws under the federal government? It is clear that the founding fathers wanted the situation in the several states to be quite dynamic and diverse, otherwise why "Congress shall make no law..." and not something more comprehensive preventing the states from such laws as well? Why do they further not ask why the 9th and 10th are not fully respected and used by both the legislative and judicial branches of the federal government? No, the Libertarians have an agenda that is broader than simply reducing the intervention of government in our daily lives. They want a situation that provides them the upper hand, both politicaly and economicaly, while at the same time reducing the ability of their opponents to gain an advantage. From this perspective they are just another elephant or jackass... ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

3 2