December 2003 - cypherpunks-legacy

Re: NSA, ITAR, NCSA and plug-in hooks.
by Rich Salz 17 Dec '03

17 Dec '03

Status: R >as a compression program, but there's a key difference: the text >compressor *doesn't* need a key. Sure, 12 14 16, etc., bits as in the classic unix compress program. >The encryption tool would have an interface like > Boolean (*)( DataSource, DataSink, void*); > >A compressor written to the same interface would never need to touch >that third argument. Therefore, the second argument is "specifically >designed" to permit an encryption tool to be used. Not at all. coyping inbuf to output is a common practice, it's quite rare that you often compress in-place. /r$

1 0

Re: Public Domain?
by Andrew.Spring＠ping.be 17 Dec '03

17 Dec '03

>But the researchers backed out of the idea on the advice of our patent >lawyers. The reasoning goes like this: Sending anything over the Internet >is equivalent to placing it into the public domain, since the message can >be viewed by other than the intended recipient. So, proprietary >information *even encrypted* will be rendered unpatentable if sent over the >Internet. > You may want to send these guys back to do their homework. For corporate communications, crypto is not new. Messages have been sent in cipher over telegraph lines since the civil war. Ask if a trade secret becomes exposed (in the legal sense) if it is transmitted over telegraph lines in code. I fail to see what the difference is between enciphering something in dots and dashes and enciphering it in 1's and 0's.

1 0

Crypto++ port for Macintosh
by fluffy＠shout.net 17 Dec '03

17 Dec '03

I have started to port your crypto++ librairied to mac, using metrowerks. I was just wondering if you would like a copy of it when I finished? All in all, a very interesting set of classes. Chris

1 0

Re: NSA, ITAR, NCSA and plug-in hooks.
by Rev. Mark Grant 17 Dec '03

17 Dec '03

On Thu, 16 Nov 1995, Scott Brickner wrote: > You'd need a program which not only *accepted* the additional parameter, > but also *needed* the second parameter. I confess I have some difficulty > thinking of one. How about command-line compression options. Gzip, for example, allows you to specify how good you want the compression to be, with better compression taking longer. So you could justify passing a set of options to the compression algorithm, which could also be used to pass key information to the encryption algorithm. In fact, you could pass in a void * pointer to options that had been set up in a preferences panel in the application, which would be provided by the plug-in compression or encryption code. That structure could then have anything you wanted in it. Also, I'm not sure you'd need to pass a key, surely the encryption code could do all the key-handling itself ? Mark

1 0

Re: credit card conventional wisdom (fwd)
by Simon Spero 17 Dec '03

17 Dec '03

Date: Wed, 15 Nov 1995 18:07:25 -0800 From: Tom Wills <twills(a)eit.COM> To: Simon Spero <ses(a)tipper.oit.unc.edu> Subject: Re: credit card conventional wisdom (fwd) The printed digits above the embossed account number are the first four digits of the BIN (on Visa cards) or ICA (on MasterCards). They are there to discourage re-embossing of the card with another account number. Original Message: > >Wow, you learn something every day. I've never in >my whole life (well, my American Express life, >over 15 years) noticed those four digits. I've >never been asked for them by anyone, or noticed >them being written down, either. Exactly when and >how are they used?

4 4

GHO_mac
by John Young 17 Dec '03

17 Dec '03

The Sciences, November/December, 1995 Another realm of explosive population increase is in cyberspace, a phenomenon taken up in this issue with Sherry Turkle's "Ghosts in the Machine." Here the growth comes about not only in the traditional way but also in wildly non-traditional ways. People multiply themselves on the Internet, grafting various aspects of their personalities onto distinct characters. Even more unsettling, as Turkle wittily documents the matter, is that the Net is populated with "bots": robot sentence-parsing engines that can do fair impersonations of real people, often well enough to (provisionally) pass Alan M. Turing's test for machine consciousness. Do you really know who -- or what -- you're talking to? The future of all this is murky and mind-boggling: Information-seeking bots even now can tie up sites on the World-Wide Web. Bots impersonating people share chat groups with other bots, much the way telephone answering machines now "talk" to each other. Internet chatter gets so dense that bandwidth and other Net resources become strained: the site at the Los Alamos National Laboratory now (automatically) warns robots away with a chilling threat to "initiate automated 'seek and destroy' " action against the machine from which the robot seems to be launched. A conservative reaction may already be setting in, determined to have users identify, encrypt and authenticate every packet of information they send across the Net. Net fatigue becomes a recognized medical syndrome; Net detox centers spring up; Net warfare breaks out; Net starvation becomes a recognized social problem; Net demagogues undermine local democracies.... How many people can the Net support? -- Peter Brown, Editor ----- For "Ghost in the Machine" by Sherry Turkle, a professor of the sociology of science at the Massachusetts Institute of Technology. The article is adapted from her forthcoming book, *Life on the Screen: Identity in the Age of the Internet*, which is being published in November by Simon & Schuster: GHO_mac (16 kb) ... later this evening, that is.

1 0

Re: Need advice on video
by wiltship＠iccu6.ipswich.gil.com.au 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Ben wrote... <stuff deleted> >What I'm fishing for here are any suggestions for ways to present >some of this content in an interesting video setting. We've already >decided on doing some algorithm animation, and maybe some simple >moving graphics illustrating the various protocols. Any ideas you >might have would be appreciated. Firstly you will need to clearly define for yourself exactly what you want the audience to know by the end of the programme... the content. And what you want them to feel by the end of the programme too.. you obviously want them to have positive feelings about crypto. You might also consider some broader political issues to be cleanly interwoven through the script too. Then, you might like to think about the WHO, WHEN, WHERE and WHY of crypto. A bit of an historical background on cyphers would put todays crypto into context, too. Make sure that you keep giving the audience enough knowledge to comprehend stuff you will be presenting towards the end of the video... all of the information you present needs to build on what you have already presented. Closely examine your scripts for jargon. Take out any that you can't explain clearly. Too much jargon can swamp the audience and they will be distracted from important content while they try to remember what a particular word means. >BTW, once we finish this and show it locally, we are considering >doing some duplication to send out to interested bodies. Do you >think there is demand for a good, clear intro to all this in video >form? > I'm sure there is a need for this sort of programme that is produced well and is reasonably priced. Remember to get signed releases from EVERYONE involved in the project, not just ppl on camera, so you can sell the programme ANYWHERE IN THE WORLD if you choose to. Don't be misled, I'm sure there are quite a few programmes out there on this very topic. Yours needs to be significantly different and entertaining. I would suggest you have an opportunity to make a video from 'the inside', given the ppl on this list and the contacts they have. A lot of films sre good introductions to a subject without standing up and calling them such... like if I was making a video about Phil I would have to explain crypto and its use as a way of reaching a level of understanding for the audience. Hope this is of some help. >Thanks, >-- > eebmoC .L nimajneB | Benjamin L. Combee (REVERSE) > gro.doowhcet@eebmoc | combee(a)techwood.org (ENGINEERING) >\eebmoc\ten.kay.www\\:ptth | http://www.yak.net/combee/ (RESERVE) > Cheers Peter -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMKu5bOvjRao+WEx9AQHKhQQAhOGT7fecYsaiwCDa6d8Ka7J6Hsgwuw5D tcknrSNVZGSf3+GCHWWVvCgsqHbgd+T9W/xFE9wlwzBmnbL9OwLb8sGr6yYDljL4 KH474GmKrax2hmu3h24J7HbsdTGDwj/KTrWnW4Kc+5TVIdhe0TM7SQBAMfWsYhuP 2YaxW3QYoTg= =zt0k -----END PGP SIGNATURE----- Flight to Quality Wiltshire Productions Pty Ltd Brisbane, Queensland, Australia Intl Voice 61 7 3376 3535 Intl Fax 61 7 3279 4027 Email wiltship(a)gil.com.au PGP Key ID 3E584C7D PGP Fingerprint 01 03 FB F4 BE F8 2B F3 5D 84 6B 69 37 80 FE 10

1 0

Mark Twain Bank ecash scripts needed
by Bryce 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I am in the process of setting up a shop using Mark Twain Bank Ecash. Could someone please forward me the scripts to accept Ecash (running on SunOS. On c2.org actually) and/or any advice you have about how to expeditiously implement a shop? I am about to fax MTB the agreement form, so I should get information from them "within 24 hours", but that is cutting it awfully close to the Friday deadline for the US$300.00 fee waiver. Many thanks! Bryce signatures follow "To strive, to seek, to find and not to yield." <a href="http://www-ugrad.cs.colorado.edu/~wilcoxb/Niche.html"> bryce(a)colorado.edu </a> -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed under Unix with 'BAP' Easy-PGP v1.01 iQCVAwUBMKvIGfWZSllhfG25AQElIQP+McHbg+ZCWMhSZ0YDDFwHE/TVhlAPrNX5 Oh2/8n3IirDb3KePXlvSdXAtCXS9ROuHSMqN9UQ0cPX9kOdgFMomwvsCqo9G5eZ0 Tan+9IW0WcvtntJ+8DFIN5jhlEbT5b+HRlKul1SkImezFM1kRDM4qqD1LD6srGRe NEV32AZG1dU= =A6lY -----END PGP SIGNATURE-----

1 0

Q: blind maildrop anyone?
by Tom DeNapoli 17 Dec '03

17 Dec '03

Hi, I am not on this mailing list so please reply by email. It was recommended to me by someone who is on the list that you(s) might be able to point me to the right place (or page). What I'd like to do is: establish an email account, other than the one I'm posting from; preferably on some free email/homepage box, that would encrypt all cleartext email to hit that account for me at this account. I have tried, unsuccessfully to establish this at c2, which offers this service. My question: has anyone done this successfully at c2, or another location, and be willing to point me in the right direction to accomplish this. thanks, -Tom Tom DeNapoli <denap(a)isis.com> 26 EC 2B 5A 0B 54 6D EE 1C 3F B6 AE 14 AA 83 87

2 1

Denver area meeting, SUNDAY, Nov. 19, 2 pm
by awestrop＠nyx10.cs.du.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Once again, we'll begin in the basement of the Tivoli, at downtown Denver's Auraria Campus, and perhaps wander elsewhere. Drop me a note if you need directions or more info. Alan Westrope <awestrop(a)nyx10.cs.du.edu> __________/|-, <adwestro(a)ouray.cudenver.edu> (_) \|-' 2.6.2 public key: finger / servers PGP 0xB8359639: D6 89 74 03 77 C8 2D 43 7C CA 6D 57 29 25 69 23 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMKvVWFRRFMq4NZY5AQGDngP/XVXubqwKaFIa+Exo75BYjyKADVZI33tX tOugaQG8Swla6wyPiUOfdTUdF49ZRHnVbowGw3o33k+3dMlfiC/ng2JqGOAyS9NR zVUzIrPROMEBLS69FuLmaYDO/38dG5Xoqfir44qXm50mcEtfCZO7ILbG4dVKGBEI 0FxI3tAPTDU= =njUa -----END PGP SIGNATURE-----

1 0