December 2003 - cypherpunks-legacy

Re: Electric Communities (was: COS_sec)
by Anonymous User 17 Dec '03

17 Dec '03

In article <v02120d04acb6f56280f0(a)[199.2.22.120]> cman(a)communities.com (Douglas Barnes) wrote: > >FWIW, this is the company I work for. Not a bad article; more >info is available at: http://www.communities.com/. Three of >the nine people who work here are long-time subscribers to this >list... I was recruited at a c'punks Bay Area meeting. > >--doug "member of the cryptographic staff" barnes > >> Electric Communities began work began in 1993 on the >> Cyberspace Operating System, or COS, designed to manage >> the resources of shared computing -- like security and >> bandwidth -- just as operating systems like the >> Macintosh OS or Windows 95 manage resources inside a >> desktop PC. The team is inventing some technology, >> including a programming language (compatible with Sun >> Microsystems' new Java language for Internet >> applications) and a design concept for software building >> blocks which it is in the process of patenting. In >> addition, staff cryptographers are weaving encryption >> throughout the system to make it absolutely secure and >> private. >> >> >> COS_sec (6 kb) > > Great! Just what we need! java wannabees! Ripoffs of secondrate, insecure software by thirdrate people! Hey Dougie, "invented" any viruses lately?

1 0

Re: New release of CFS Unix encrypting file system available
by Anonymous User 17 Dec '03

17 Dec '03

In article <199510271954.PAA20647(a)universe.digex.net> Scott Brickner <sjb(a)universe.digex.net> wrote: >Matt Blaze writes: >>CFS pushes encryption services into the Unix(tm) file system. It >>supports secure storage at the system level through a standard Unix >>file system interface to encrypted files. Users associate a >>cryptographic key with the directories they wish to protect. Files in >>these directories (as well as their pathname components) are >>transparently encrypted and decrypted with the specified key without >>further user intervention; cleartext is never stored on a disk or sent >>to a remote file server. CFS employs a novel combination of DES >>stream and codebook cipher modes to provide high security with good >>performance on a modern workstation. CFS can use any available file >>system for its underlying storage without modification, including >>remote file servers such as NFS. System management functions, such as >>file backup, work in a normal manner and without knowledge of the key. > >What happens to hard links? > >mkdir foo bar >CFS_set_directory_key -directory ./foo -key foo-key >CFS_set_directory_key -directory ./bar -key bar-key >cp /etc/passwd ./foo/test1 >ln ./foo/footest ./bar/bartest >cmp ./foo/footest ./bar/bartest This is a serious flaw. The emperor has no clothes. People should sue at&t for this shit.

4 3

Re: CJR returned to sender
by Anonymous User 17 Dec '03

17 Dec '03

In article <> bal(a)martigny.ai.mit.edu wrote: > Date: Wed, 25 Oct 1995 09:08:15 -0700 > X-Sender: tcmay(a)mail.got.net > Mime-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > From: tcmay(a)got.net (Timothy C. May) > Sender: owner-cypherpunks(a)toad.com > Precedence: bulk > > At 6:35 AM 10/25/95, Timothy C. May wrote: > > > >(* Hal Abelson of MIT says there are possible export problems with the MIT > >Press book on PGP, and MIT dropped plans for a version in a special OCR > >font. So, I agree that _some_ books cross the line and look like pure > >software. However, I continue to maintain that a badly-printed barcode is > >just a joke, nothing more.) > > Brian LaMacchia sent me e-mail saying the MIT book _was_ published with the > OCR font as originally planned. No response to their CJR request, submitted > in Jan or Feb. > >[Blatant plug for MIT Press...] > >For reference, the title of the book is "PGP: Source Code and >Internals", ISBN 0-262-24039-4, hardcover, $60.00. There are links to >the MIT Press pages from my keyserver home page (http://www-swiss.ai.mit.edu/~bal/keyserver.html) or you can go to MIT >Press's site (http://www-mitpress.mit.edu/) and look under >Books/Computer Science. Orders accepted over the net using either HTML >forms (SSL) or e-mail (PGP). > >MIT Press is also selling "MIT PGP" T-Shirts, but I don't have pricing >or size information on them yet. They have the logo from the book cover >on the front & back. Front says "Mind your own business," back has a >copy of MIT Press's PGP public key (in ASCII-armored form). > > --bal Its worth 60 buckx because the book has the old version without the weakness in it. they are probably assuming that people will look at the book instead of the ftp source code and then get lazy and complie the code off the ftp instead of typing or scanning the book.

2 1

Re: MD4-derived hash functions
by daw＠quito.CS.Berkeley.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <9510261603.AA26221(a)zorch.w3.org>, <hallam(a)w3.org> wrote: > > 3DES with only two independent keys is only slightly more secure than > DES, consider a variant of the meet in the middle attack exploiting > the fact that the constraint network is reductible to two equations > in one unknown. > Huh? Are you sure you're not thinking of 2DES? 2DES is known to be not much more secure than DES: 2DES can be broken with 2^56 operations and 2^56 space. (The space requirements can be eliminated without too much extra cost in time.) Could you post a reference for your claim that 2-key 3DES is insecure? Or post an attack? Or anything? - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMJLJdSoZzwIn1bdtAQFFRQGAgPceMs6vYCq4nGQQ5QT9tOLIgiGAoY8M B71KIQDP75TMiF1rgvorSWQsNZjzjhbm =3bH5 -----END PGP SIGNATURE-----

1 0

Digicash will not fly
by James A. Donald 17 Dec '03

17 Dec '03

While Chaum is a brilliant cryptographer, he is an incompetent businessman He has demonstrated this in numerous ways. The latest being "Cash" where the bank skims off 4% to 10% every time. No one is going to use digicash under these kinds of terms and conditions. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

1995-10-27 Members Named to Nat Security Telecom Committee (fwd)
by Ed Carp [khijol SysAdmin] 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 27 Oct 1995 20:11-0400 From: The White House <Publications-Admin(a)WhiteHouse.Gov> To: Public-Distribution(a)clinton.ai.mit.edu Subject: 1995-10-27 Members Named to Nat Security Telecom Committee THE WHITE HOUSE Office of the Press Secretary ________________________________________________________________________ For Immediate Release October 27, 1995 PRESIDENT NAMES MEMBERS TO THE NATIONAL SECURITY TELECOMMUNICATIONS ADVISORY COMMITTEE (NSTAC) President Clinton today announced his intent to appoint the following individuals to the National Security Telecommunications Advisory Committee (NSTAC): Dr. Vance D. Coffman is the president of Lockheed Martin Corporation. Previously, he was president of the Space Systems Division of Lockheed Missiles and Space Co. and vice president of the corporation. Dr. Coffman was responsible for the Hubble Space Telescope, MILSTAR, Follow-on Early Warning, and the worldwide mobile commercial cellular phone system, Iridium. He holds a B.S. degree in aerospace engineering from Iowa State University, and masters and doctoral degrees in aeronautics and astronautics from Stanford University. Mr. Paul E. Wright is chairman of Chrysler Technologies Corporation (CTC), the aerospace and defense electronics arm of the Chrysler Corporation. He was president and chief operating officer of Fairchild Industries prior to joining CTC. Mr. Wright guided the company's focus toward spacecraft, defense electronics, and selected industrial products. Mr. Wright spent 28 years with RCA Corporation, during which time he rose to senior vice president. He was responsible for developing and administrating the strategic plans for RCA. Van B. Honeycutt is president of Computer Sciences Corporation (CSC), the largest independent provider of information technology consulting, systems integration, and outsourcing to industry and government. He began his career with CSC in 1975, serving as a regional marketing manager for Infonet, the company's timesharing and value-added network, which CSC sold in 1989. In 1983, Mr. Honeycutt became president of CSC Credit Services. He was later promoted to corporate vice president and president of CSC's Industry Services Group in 1987. He led CSC's advance into the growing outsourcing market, negotiating the industry's largest outsourcing pact, a 10 year, $3 billion agreement with General Dynamics Corporation. The President's National Security Telecommunications Advisory Committee (NSTAC) provides the President with information and advice from the industry's perspective regarding specific measures to maintain, protect, and enhance the nation's telecommunications resources that support national security and emergency preparedness capabilities. The Committee addresses telecommunications issues throughout the year and periodically reports directly to the President, and also to the Secretary of Defense in his capacity as the Executive Agent for the National Communications System. -30-30-30-

1 0

Conference in Eugene, OR - 11/3 and 11/4
by Greg Broiles 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- One of the professors at the U of Oregon School of Law here in Eugene, Keith Aoki, has put together what looks like a pretty good conference. As far as I can tell, it's going to be something of a sleeper - lots of good speakers, and probably not very many people in the audience who'll be able to appreciate what they're seeing. Folks on the west coast interested in law and technology policy might do well to pop up to Eugene for the weekend. I've got limited floor space for people who need a place to crash and don't want to pony up the $ for a place in Eugene. (I'm in Springfield, the redneck town across I-5 from Eugene - I'm about 15 mins from campus by car, and can give folks a ride over if they're willing to stay for the day.) Motel rooms ought to run between $30 and $80 per night in Eugene, depending on whether or not knife marks on the headboard and the smell of old cigarettes bothers you. :) Eugene is 2 hours (~ 110 miles) south of Portland on I-5 and 8 or 9 hours north of the Bay Area by car, up I-5. There's an airport here, so it's possible to fly in - some rocket scientist planners put the airport way north and west of anything interesting in town, though. The conference is Friday, November 3, and Saturday, November 4. Speakers include (in no special order): John Perry Barlow James Boyle Rosemary Coombe Steven Winter Rudy Rucker Tim Sloan A. Michael Froomkin Marc Rotenberg Lee Tien Cait Clarke Gary Glisson Rex Heinke Eric Hughes Matthew Ghourdjian Benjamin Kaminash Barry Schrader Vibeke Sorenson Dhruv Khann Jerry Kang Peter Jaszi Jessica Litman David Peterson Brian Stine Alfred Yen Richard Stallman James Love Pamela Samuelson Jerry Berman Shari Steele E. Wally Van Valkenburg Margaret Chon Folks who want to stay with me (you should be at least dog-tolerant) or who want help getting picked up at the airport/finding a motel/whatever are welcome to give me a call (503 744 2713) or send E-mail. I think there's some charge to get in (not for law students, so I haven't been especially attentive to it) but Keith said that we can probably waive that if folks are interested and can't pay. If that sounds like a problem, send mail, and I'll see if I can get him to issue some Cypherpunk passes. (The idea is to extract $ from working attorneys without scaring away interested non-attorneys.) It ought to be quite a conference. By all means, if you can make it, come on up (or down). -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMJMtEH3YhjZY3fMNAQHSBQP/R4OdjIQIYbpcR0sloIBc+ZVeR8hzQ81w c8o2NyKncO0P/Hthxx+peCAUwN2S7RJr8k/jNvY0ah5Qcy4lmPnhn3uBVZFeY9O4 7I+NPimj38xNjvYdnUYrQT1HuEyVknnwi1s/2VsSGCVvbfJkHOWkuc0nR8JCX1cI sc5GsGR2zzk= =W/r5 -----END PGP SIGNATURE-----

1 0

Re: Human ID through insecure channel
by Carl Ellison 17 Dec '03

17 Dec '03

>Date: Mon, 16 Oct 1995 13:51:27 -0700 >From: Hal <hfinney(a)shell.portal.com> >Subject: Human ID through insecure channel > >Here is an example of the Matsumoto/Imai scheme for identifying yourself >via a shared secret over an insecure channel, a system which is simple >enough to be done in your head but which can withstand repeated >observations by an adversary without being broken. Hal, has this been written up someplace where I might read their description? From your description of it, I have a way to break it in O(N) samples, where N is the number of characters in the challenge string and the factor of proportionality is strictly a function of how sure you want to be that you have a correct break. - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)tis.com http://www.clark.net/pub/cme | |Trusted Information Systems, Inc. http://www.tis.com/ | |3060 Washington Road PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2| |Glenwood MD 21738 Tel:(301)854-6889 FAX:(301)854-5363 | +--------------------------------------------------------------------------+

1 0

ques. regd. STT
by Mahesh Prakriya 17 Dec '03

17 Dec '03

Hi. A group of us at the U. of Penn. are doing a presentation on STT. I would like to know if you have any suggestions for us. I've taken a look at the Visa & MS home pages and have a good amount of information on STT. I'm esp. interested in finding out about the potential weaknesses in STT. thanks, Mahesh +-----------------------------------------------------------------------+ Work Home ------- ----- 1717 Arch St., 3E4 1801 JFK Blvd., #512 Phila., PA 19103 Phila., PA 19103 (215)-466-5476 (215)-567-2006 Internet: prakriya(a)gradient.cis.upenn.edu http://www.cis.upenn.edu/~prakriya/home.html PGP fingerprint = 6A EC 5B F3 D4 33 F6 D1 4C DA 99 11 F9 D9 89 A7 +-----------------------------------------------------------------------+

1 0

Austin E-Commerce Conf -- BOF?
by Stephan Somogyi 17 Dec '03

17 Dec '03

If there are any other cypherpunks-readers attending the e-commerce conference in Austin on Monday and Tuesday, it might be fun to get together for an impromptu BOF either at lunchtime or later in the evening. Email me if there is interest. _______________________________________________________________________ Stephan Somogyi Senior Editor Digital Media

1 0