December 2003 - cypherpunks-legacy

Piggybacking
by lethin＠ai.mit.edu 17 Dec '03

17 Dec '03

In article <444bp8$sd4(a)life.ai.mit.edu> Adam writes: > Naturally, this works with programs other than Quicken. By leveraging on the popularity of Quicken and people's insecurities about their financial data cypherpunks might be able to spread PGP and SecureDrive technology more rapidly. If I were a marketing manager at a startup selling SecureDrive, for example, I'd suggest trying to exploit the above by selling my product as "QuickxxSecure" which would install after Quicken, make the secure drive, move quicken there, etc. It would then sell in a box with a graphical design (e.g. white stripe on red box, to blend nicely with Intuit's red on white) that Egghead would want to put it on the shelf right next to Quicken. Cypherpunks with a crypto-anarchic agenda might "package" shareware in a way that would exploit the same principles. Surely, a bigger market than people using EMACS RMAIL. --- Concurrent VLSI Arch. Group 545 Technology Sq., Rm. 610 MIT AI Lab Cambridge, MA 02139 (617)-253-0972

1 0

No Subject
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

Since Sept. 11th: http://www.ifi.uio.no/pgp/ Forbidden Your client is not allowed to access the requested object.

2 1

change of address notice for Marc Donner
by donner＠ny.ubs.com 17 Dec '03

17 Dec '03

Dear colleague, friend, or correspondent, My new business address is: Marc Donner Union Bank of Switzerland 299 Park Avenue New York, NY 10171 212-821-6229 You can send me email at: donner(a)ubss.com The destination list for this mail is gleaned from an automated analysis of many megabytes of mail that I have accumulated over the last three years. In some cases you are receiving this not because we are acquaintances or correspondents but because you were a recipient of some piece of mail that I also received and kept. If so, I apologize for the intrusion. I have pruned the list extensively, but some email IDs are sufficiently opaque that I cannot reliably identify the person at the other end. Marc

1 0

InfoWar 9 (Part III of 'The True Story of the InterNet')
by Bianca 17 Dec '03

17 Dec '03

2 1

Re: Real issue of crypto controls: security or taxation loss?
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

On 13 Sep 97 at 23:44, iang(a)systemics.com wrote: > The battle should remain on the field of personal rights, because the > battle over economics cannot be won, right at this current juncture in > time. I.e., Now. Probably a sensible opinion. But what would be the effect of pulling in the other direction? Espcially if the population would be more personnally concerned with it? The way it is now, National Security is a scarecrow but the real thing is the govt corn to be protected... > As TCM will no doubt never tire of saying, the deployment of appropriate > infrastructure is something that takes time. Until the deployment of > all that juicy stuff is in place, nobody can provide a single transaction > of your three-orders-of-magnitude-reality. Only, to deploy any e-$ scheme would need an environment where govt would _tolerate_ crypto. But the way it is going, everything is set in place to trample on anybody's face that will use crypto with the "not-the-flavour-of-the-month-at-White-House" sauce such as e-$ programmers, etc. If the debate could be shifted-off, the legitimacy of the govt claimed goals could get strongly challenged. This is possible only if there is a cause that concerns citizens directly. Now, try telling me that taxation is the most popular of govt's measures... The fact that a majority voted for Politician A does not mean that a majority loves him... > Of course this raises the interesting question of why the establishment > does not shift the battle themselves ... Precisely. IMO, there is more hidden under there than meets the eye. What if we try prying at this tiny, well concealed crack in the big wall? Ciao jfa -- Jean-Francois Avon, Pierrefonds(Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest of Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing. PGP encryption keys at: http://w3.citenet.net/users/jf_avon http://bs.mit.edu:8001/pks-toplev.html ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

1 0

Lynx (or approx for Windows)?
by James Caldwell 17 Dec '03

17 Dec '03

On 24 Sep 95 at 18:10, SysAdmin wrote: > Screw 'em. If they want to be the defacto standard for *some* OS's > but not all, someone else will come along and fill in the gap. > Besides, they already made the point that they don't want to make > money so why change the status quo. All the more reason to show the > weaknesses of the product before others get sucked in. I'll stick to > TkWWW and Lynx thank you. Sounds odd, but would there be something like Lynx available for Windows, preferably with forms features fixed. I don't browse for the pretty pictures and turning the graphics off in Nutscrape doesn't speed it up much.

1 0

Re: Netscape for Linux?
by bret＠bjohns.win.net 17 Dec '03

17 Dec '03

>> > And the sad part is that now that they have announced that they are >> > dropping their unofficial Linux support, >> >> I have no current plans to alter our treatment of Linux. It is not now, >> nor has it ever been, a supported platform. We do build for it, >> and some people are happy about that. >> >> I have not constructed a business case which would cause Netscape >> to begin support for Linux versions of the Navigator. Right now, I'm >> not sure that making a point of this would do what you want. > >I'll say some people are happy about it. > >You just recently turned down an order for 230 copies of the netscape >navigator for Linux, and as you folks aren't making any money, you can >only wonder why. > >You have also turned numerous other attempts by varionus people to buy >both quantities of navigaors and server software for Linux. > >It seems to me that you folks are going out of your way to deny the >fact that the Linux market exists. I think that its because you are >embarassed that all these people with a $20 operating system are >throwing money at you while all the folks with $10K operating systems >aren't talking to you at all. That is ok! I just called there "Sales" dept. and asked for some info. to be sent to me on there serevers. I got 5 copies of what is on the WEB page. I could have done that. I asked him for prices and told him this was to present to a group of Marketing and Buss. type for a community system to bring Internet access to a whole county that does not have it now.. BTW, the system will be running on Suns and SGI's..... Oh well.. I thought they would do better than this. So far, there no better then sun at customer service...

1 0

Re: Real issue of crypto controls: security or taxation loss?
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

On 13 Sep 97 at 23:44, iang(a)systemics.com wrote: > The battle should remain on the field of personal rights, because the > battle over economics cannot be won, right at this current juncture in > time. I.e., Now. Probably a sensible opinion. But what would be the effect of pulling in the other direction? Espcially if the population would be more personnally concerned with it? The way it is now, National Security is a scarecrow but the real thing is the govt corn to be protected... > As TCM will no doubt never tire of saying, the deployment of appropriate > infrastructure is something that takes time. Until the deployment of > all that juicy stuff is in place, nobody can provide a single transaction > of your three-orders-of-magnitude-reality. Only, to deploy any e-$ scheme would need an environment where govt would _tolerate_ crypto. But the way it is going, everything is set in place to trample on anybody's face that will use crypto with the "not-the-flavour-of-the-month-at-White-House" sauce such as e-$ programmers, etc. If the debate could be shifted-off, the legitimacy of the govt claimed goals could get strongly challenged. This is possible only if there is a cause that concerns citizens directly. Now, try telling me that taxation is the most popular of govt's measures... The fact that a majority voted for Politician A does not mean that a majority loves him... > Of course this raises the interesting question of why the establishment > does not shift the battle themselves ... Precisely. IMO, there is more hidden under there than meets the eye. What if we try prying at this tiny, well concealed crack in the big wall? Ciao jfa -- Jean-Francois Avon, Pierrefonds(Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest of Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing. PGP encryption keys at: http://w3.citenet.net/users/jf_avon http://bs.mit.edu:8001/pks-toplev.html ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

1 0

Crypto in Wired
by steven ryan 17 Dec '03

17 Dec '03

Good issue of Wired this month (10/95) Vic Sussman has a half page on PGPfone. Asked why he's giving away PGPfone with an inditement hanging over his head Zimmermann says "... I am a cryptographer. This is what I do". Banking with First Virtual by Andrew Leonard Anonymous Speech by Tom Bell Data Dicks by John Whalen Did you know you can recover data on magnetic media that's been written over up to nine times? These guys do - for a living. Wanna Bet by Evan I Schwartz Guess what's going to be the next killer app on the net. Steven Steven Ryan sryan(a)reading.com

1 0

Re: `Random' seed.
by Matt Blaze 17 Dec '03

17 Dec '03

> I've played around with something that Matt posted here a while back > which seems to use the same idea. Matt suggested that this appears to > emit one random bit per second. I've done some very lightweight > analysis and haven't seen anything to suggest that the output is not > random, but I wouldn't make any bets based on what I've done. Here's my current favorite quick-and-dirty true-random-in-software generator. Use at own risk and read the comments carefully... -matt ===================cut here=========================== /* * Physically random numbers (very nearly uniform) * D. P. Mitchell * Modified by Matt Blaze 2/95 */ /* * The authors of this software are Don Mitchell and Matt Blaze. * Copyright (c) 1995 by AT&T. * Permission to use, copy, and modify this software without fee * is hereby granted, provided that this entire notice is included in * all copies of any software which is or includes a copy or * modification of this software and in all copies of the supporting * documentation for such software. * * This software may be subject to United States export controls. * * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED * WARRANTY. IN PARTICULAR, NEITHER THE AUTHORS NOR AT&T MAKE ANY * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY * OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE. */ /* * WARNING: depending on the particular platform, truerand() output may * be biased or correlated. In general, you can expect about 16 bits of * "pseudo-entropy" out of each 32 bit word returned by truerand(), * but it may not be uniformly diffused. You should therefore run * the output through some post-whitening function (like MD5 or DES or * whatever) before using it to generate key material. (RSAREF's * random package does this for you when you feed truerand() bits to the * seed input function.) * * Test these assumptions on your own platform before fielding a system * based on this software or these techniques. * * This software seems to work well (at 16 bits per truerand() call) on * a Sun Sparc-20 under SunOS 4.1.3 and on a P100 under BSDI 2.0. You're * on your own elsewhere. */ #include <signal.h> #include <setjmp.h> #include <sys/time.h> #include <math.h> #include <stdio.h> static jmp_buf env; static unsigned count; static unsigned ocount; static unsigned buffer; static int tick() { struct itimerval it, oit; timerclear(&it.it_interval); it.it_value.tv_sec = 0; it.it_value.tv_usec = 16665; if (setitimer(ITIMER_REAL, &it, &oit) < 0) perror("tick"); } static void interrupt() { if (count) longjmp(env, 1); (void) signal(SIGALRM, interrupt); tick(); } static unsigned long roulette() { if (setjmp(env)) { count ^= (count>>3) ^ (count>>6) ^ ocount; count &= 0x7; ocount=count; buffer = (buffer<<3) ^ count; return buffer; } (void) signal(SIGALRM, interrupt); count = 0; tick(); for (;;) count++; /* about 1 MHz on VAX 11/780 */ } unsigned long truerand() { count=0; (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); (void) roulette(); return roulette(); } int n_truerand(n) int n; { int slop, v; slop = 0x7FFFFFFF % n; do { v = truerand() >> 1; } while (v <= slop); return v % n; }

1 0