December 2003 - cypherpunks-legacy

Re: Duress
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02:49 PM 03/3/96 EST, dlv(a)bwalk.dm.com (Dr. Dimitri Vulis) wrote: >"A. Padgett Peterson P.E. Information Security" <PADGETT(a)hobbes.orl.mmc.com> writes: >> Those of you who follow FIREWALLS may recall that I premote the use of >> "minefields" on networks, machines that should never be accessed and will >> trigger an alarm/response on any access. >> >> Some years ago I wrote a spec for cryptographic securing of notebooks/ >> E-Mail that included a "duress" capability: a "password" that, when >> entered would appear to be properly accepted but would report an error >> on retrieval. Optional was to be overwriting of any material whose access >> was attempted. > >As a side remark, every burglar alarm connected to a phone that I've ever seen >has this feature: a code that one can type under duress that will both turn >off the alarm and call for help. I wonder how many users will remember this >code when under duress. > Many (if not most) alarm companies make the duress code the *reverse* of the normal code. Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMTlEzsVrTvyYOzAZAQG9sAQAjfAQP6pEReh/vzx/dsJKU987FOMbqWgV Ik/NtzW7fRRzVYmruribT1ZtPQAcPTkdORZC22xHvk82E/m9Awv9q6Zhkbd29/TQ kcLQ42G3ddcUMA7EWtWtP231tofnyQtM5M7KRdIkKyT7oZdyXgjP42mysjGNDHAy wv2VcfiPwPQ= =fc6C -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> For privacy tools: http://www.geocities.com/capitolhill/1148

2 1

Re: Crypto Export Legislation?
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I took a look at the text of the bill. There was a line in it making it a crime to use crypto in a way that obstructs a federal investigation. While understandable, this is too vague... it could easily be interpreted (IMO) as any strong crypto without escrow of some kind. Anyone else feel this way about that line in the bill? - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTorUyoZzwIn1bdtAQEWJgGA1KdA1HtbX9L0U22rBLKFouIQHQniAdA3 lvimml/i+Z/KmYSmHGqkGBwCb1hAfSxc =E2ZA -----END PGP SIGNATURE-----

1 0

Interesting Identity Hacking Experiment: www.switchboard.com
by Just Rich 17 Dec '03

17 Dec '03

http://www.switchboard.com/ is a white pages directory. Basically, it's the Database America CD-ROM on the Web. The difference is, it's writeable, and free. Pretty cool. I don't think it was wise for them to allow anyone with an email address to change anyone else's white pages entry, though. Can anyone think of a prominent politician who would be in the phone book? The freeform "more information" field is just asking to be used. Potentially interesting applications for anonymous web proxies and secure pseudonym servers. At least they don't make direct changes to the database -- I'd guess they only set a flag to look in the separate user-supplied file. I.e., I changed my entry, then hit "unregister," and all the original information returned immediately. -rich

1 0

Leslie Fish address?
by mlove＠olywa.net 17 Dec '03

17 Dec '03

Do you know of an e-mail address for Leslie Fish? m

2 1

Re: Electronic Freedom press release
by sj＠io.com 17 Dec '03

17 Dec '03

At 1:50 PM 3/3/96, LibertyWMA(a)aol.com wrote: (quoting George Phillies) > When the Secret >Service raided Steve Jackson Games to suppress publication of 'Hacker' I >immediately wrote Congress to protest. Serious distortion of the facts. "Hacker" was published as a reaction to the raid; it was not the target of the raid. The book you are thinking about is GURPS CYBERPUNK, which the Secret Service encouraged us to believe was the object of the raid, but testimony at the trial indicated that that was not the case. The SS was ignorantly indifferent to free speech and publisher's rights, rather than taking direct aim at them. See www.io.com/SS/ for more information. Our case was a victory, but if it is cited in support of irrelevancies, it has no more meaning than if it is forgotten completely. Steve Jackson, sj(a)io.com - this will do till I fix my .sig file . . .

1 0

Request Comments: Transpose/XOR Hash
by Olcay Cirit 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi! I'm working on a cipher that utilizes Cipher Block Chaining and One-way hashing to create a sequence of pseudo-random numbers to XOR against a plaintext. I'd like to know if anyone has comments regarding the hash method I came up with. It is a combination of Transposition and XORing. Basically, it works like this: Let's say K is the 8 character key that will be hashed. There are two binary accumulators M and L, which store the Most and Least significant bits in each byte of K. After M and L are both 8 bits long, they are XORed together and the resulting value replaces byte N in the Key. This is repeated 8 times, and each time, N is incremented by one. Any thoughts, comments? -olcay - -- "For he who lives more lives than one, |) Olcay Cirit -- olcay(a)libtech.com more deaths than one must die" (| http://www.libtech.com/olo2.html - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTpumyoZzwIn1bdtAQHnqAGA2CzuLVpiPdRQ84MuC8aBxy7vcIZsujLr 85hGcVoknfAujjXFoy7KOxGQrZt3RorK =jQ7w -----END PGP SIGNATURE-----

2 1

Third Generation Problems
by A. Padgett Peterson P.E. Information Security 17 Dec '03

17 Dec '03

Bill rites: >Duress codes need to be designed to minimized the chance of such responses >when they are used. Absolutely but is a third generation problem: First generation: being able to protect the information (encryption) Second Generation: being able to respond to risks (duress) incurred by the first generation solution (duress codes) Third Generation: being able to respond to risks incurred by using the second generation response (using the duress codes). Is nice to plan for each up front but often the succeding generation risks only become apparent after living with the preceeding generation solution for a while. This should not prevent anyone from implementing the first because of what *might* happen in the second. "Doing nothing" is a sound solution only for politicians. Besides the purpose of "duress codes" is not just to provide an avenue for use in case of threat, it is also to deter the threat in the first place by reducing the "win" probability for those who might issue the threat. (previously mentioned a very real consideration for the fifth amendment. will not repeat.) Warmly, Padgett

1 0

Destroying the Internet in order to save the Internet
by tcmay＠got.net 17 Dec '03

17 Dec '03

WARNING: If you are under 18, do not read or download this message! You have been warned, and I take no further responsibility for your actions. It has become necessary under the Communications Decency Act to make this warning. Furthermore, quoted material may also contain material, so censorship of certain words and ideas may be necessary. At 11:14 PM 3/3/96, Bill Frantz wrote: >One of the private pilot magazines reported that a small plane operator >used the code (because his airplane was, in fact, being hijacked). When he >landed the airplane, it was surrounded by LEA, and in the ensuing gun >battle, everyone on the airplane died. The went on to say that the safety ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ The pilot was flying an airplane. Airplanes are often used to transport drugs. Sometimes you have to destroy the village in order to to save the village. (A lesson being used by those who realize we have to destroy free speech in order to save free speech, and to destroy the Internet in order to save the Internet. Blair House is aptly named.) --Alan Smithee

1 0

hjhf
by not-for-mail＠gate.overcom.com 17 Dec '03

17 Dec '03

dhjdf dfhj dhj

1 0

blah
by usenet＠gate.overcom.com 17 Dec '03

17 Dec '03

sdfjhs sdjhsfj

1 0