December 2003 - cypherpunks-legacy

Re: FOR WHOM THE BELL TOLLS
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:54 PM 6/6/96 -0700, Timothy C. May wrote: >(There may be cases people can dig up where some newspaper or newsletter >was "shut down," but I think such cases would be hard to find in the last >several decades. Am I wrong on this?) Not newspapers but a number of radio stations of course. Licensure. Even under CDA, we are not subject to license, however. Though I wonder how the FCC will behave as TV stations join the radio and "radio" stations that are already netcasting beyond its control. DCF

1 0

Fwd: Re: [crypto] crypto-protocols for trading card gam
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "ogren(a)concentric.net" <ogren(a)concentric.net> >Date: Thu, 30 May 96 02:30:30 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: [crypto] crypto-protocols for trading card gam > >Disadvantages: > >The entire integrity of the system relies on the security of the >game company's key pair. If the secret key is comprimised, either by >Cards are not transferrable. In order to make cards transferrable the >game company must be able to invalidate cards which have been traded >to others. In other words if Alice wants to give a cards to Bob she >must: I would just have multiple validators w/separate keys. sign w/each. This would not eliminate the problem but could reduce it... >1. Contact the game company and tell them she wants to give the card >to Bob. 2. The game company must issue a new card to Bob with a new >serial number and with Bob's public key rather than Alice's. 3. The >game company must invalidate Alice's old card. Since there is no way >that the game company can make sure all copies of the card have been >destroyed it must create a "invalid serial number list" and have the >players dial into that list everytime the game is played. > >Since step 3 is so costly to implement, I think it is unlikely that a >cryptography-based trading card game will have tradable cards. Much easier - with each card, store its ownership history. EACH time it is transfered, have it be signed by the previous owner. Originally, the game company signs it as a valid card. On selling it, they record the purchaser's identity (email address, etc)and seal the card with the company key (or set of keys - see above). Repeat as needed. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: Idea 'bout banning the internet
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "jwilk(a)iglou.com" <jwilk(a)iglou.com> >Date: Mon, 03 Jun 96 20:36:49 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Idea 'bout banning the internet > On 3 Jun 1996 19:48:48 pdt, jwilk(a)iglou.com wrote: >What if in the future a country banned the internet and all things that had >to deal with it (ie- telnet, irc). It would be the "underground" thing. >Just a thought, it would really suck! As I think about it it is impossible >or is it???? Hell the usa cant even ban porn let alone the whole thing. They >could ban it like they did fizzies. Hey there making a comeback did you here >now they have nutrasweet in them. If you know what fizzies are than your >pretty kewl. I'm only 13 and love then they are the drink of the future!!!! > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >Blake "Pokey" Wehlage Gaa- 3.69 ><jwilk(a)iglou.com> Record- 2-4-4 >Age- 13 Final Standings- 2nd Place (Beat in Championship) > >President & Founder: > >Revolution Software "I have the fastest glove in the east!" >Profanity Software "Hackers never stop hacking they just get caught" >VSoft > >My life- Rarely eat or sleep, Hack til' 7:00a, goto school, play goalie >til' 8:00p, hack til' 7:00a >Hank Aaron- d:-)!-< Pope- +<:-) Santa Claus- *<:-) The Unabrower |:-) > >Current Girlfriend(s)- Lindsey Wilcox, Laura Schubring > >Personal Quote- Mr Plow, thats my name, that name aguin is Mr. Plow >-Homer Simpson >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > You know, even counting the header, your signature is longer than the message... BTW, I doubt most of us care about your current love life or soccer standings. We won't even mention Homer Simpson... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

RISKS: YAJSH
by stevenw＠best.com 17 Dec '03

17 Dec '03

Reposted from RISKS: Yet Another Java Security Hole: ------------------------------ Date: Sun, 2 Jun 1996 07:46:20 +0000 (BST) From: David Hopwood <david.hopwood(a)lady-margaret-hall.oxford.ac.uk> Subject: Another Java attack There is another serious security bug in the class loading code for all currently available Java browsers: Netscape up to versions 2.02 and 3.0beta4 (except Windows 3.x) Oracle PowerBrowser for Win32 HotJava 1.0beta 'appletviewer' from the Java Development Kit up to version 1.0.2 Sun, Netscape, and Oracle have been sent details of the problem (which is partly related to the ClassLoader attack found by Drew Dean, et al. in March). The attack works by exploiting a design flaw in the mechanism that separates JVM classes into different namespaces. Using this bug, an attacker can bypass all of Java's security restrictions. This includes reading and writing files, and executing native code on the client with the same permissions as the user of the browser. The only way to avoid this problem at the moment is to disable Java. For more details see http://ferret.lmh.ox.ac.uk/~david/java/bugs/ Technical details will be posted when Sun, Netscape, and Oracle release patches. David Hopwood david.hopwood(a)lmh.ox.ac.uk http://ferret.lmh.ox.ac.uk/~david/ ------------------------------ Date: Thu, 6 Jun 1996 14:15:46 -0700 From: mrm(a)doppio.Eng.Sun.COM (Marianne Mueller) Subject: Another Java attack David Hopwood, a Java researcher in the UK, has uncovered a new security bug in Java [RISKS-18.18]. In simple terms, he has been able to manipulate the way objects are assigned and the way they collaborate, in order to undermine the applet security manager. Hopwood contacted JavaSoft directly re: the bug, and we have had a team working on a fix for the past 72 hours. In addition, we are applying Hopwood's model to conduct a security review, to determine if there are other bugs that may apply. We are currently thoroughly testing the fix, and plan to release a patch as soon as possible. As we complete more testing of the fix, a more detailed description of the bug and the fix will be added to the JavaSoft security FAQ at http://java.sun.com/sfaq/. JavaSoft is grateful for the internet security community's active interest in reviewing our code and we welcome feedback that makes Java better technology. ------------------------------ ------------------------------------------------------------------------- Steven Weller | Technology (n): | | A substitute for adulthood. stevenw(a)best.com | Popular with middle-aged men.

1 0

Fwd: [Fwd: Welcome!]
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "Jerry Kuhn" <jerry.kuhn(a)f0.n206.z1.fidonet.org>, > "Gary Orthuber" <nccorthu(a)rain.org> >Date: Tue, 28 May 96 00:01:11 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="_=_=_=IMA.BOUNDARY.DS3KHZ138764=_=_=_" >Subject: Fwd: [Fwd: Welcome!] > ==================BEGIN FORWARDED MESSAGE================== >Message-ID: <1082295506(a)bbs.io-online.com> >From: adamsc(a)io-online.com >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="zzzz408284d220bc8563io-online.cozzzz" >To: Adamsc >Date: 28 May 1996 12:31:14 pdt >Subject: [Fwd: Welcome!] > This message has been generated solely to deliver this file attachment. This file attachment was originally included in another message, which had multiple file attachments. This message was automatically generated. ===================END FORWARDED MESSAGE=================== This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

INFO: Discuss crypto with Sen. Burns online the night before hearings!
by Voters Telecommunications Watch 17 Dec '03

17 Dec '03

============================================================================= ____ _ _ _ / ___|_ __ _ _ _ __ | |_ ___ | \ | | _____ _____ | | | '__| | | | '_ \| __/ _ \ _____| \| |/ _ \ \ /\ / / __| | |___| | | |_| | |_) | || (_) |_____| |\ | __/\ V V /\__ \ \____|_| \__, | .__/ \__\___/ |_| \_|\___| \_/\_/ |___/ |___/|_| CRYPTO HEARINGS (S.1726) SET FOR 6/12/96 IN WASHINGTON D.C. MEET AND SPEAK TO SENATOR BURNS ON HOTWIRED THE NIGHT BEFORE! SEN. CONRAD BURNS (R-MT) SCHEDULED FOR HOTWIRED CHAT 6/11/96 10-11PM EST Date: June 7, 1996 URL:http://www.crypto.com/ crypto-news(a)panix.com If you redistribute this, please do so in its entirety, with the banner intact. ----------------------------------------------------------------------------- Table of Contents News Press Release on Hearings How to receive crypto-news Press contacts ----------------------------------------------------------------------------- NEWS In what is becoming the newest way for Congress to read the net.community's opinion on issues, Senator Conrad Burns will be on HotWired on June 11th @ 10pm EST to discuss the encryption issue with all attendees. The next day, Senator Burns will be coordinating a day of hearings on the encryption issues with industry luminaries. Never before has the public had this much access to legislators without geographical proximity. Cheaper than teleconferencing, and more direct and unfiltered than the traditional press, online chats allow the public to directly question and hear the answers of Congress. Have a question about encryption policy that you've never been able to find out from the government? Come to the HotWired chat and ask Senator Burns to be your advocate, to press the witnesses and the White House on these issues. The online chat is on June 11 at 10pm EST, the night before the hearings HotWired's WiredSide chat is at (http://www.hotwired.com/wiredside) Information on Senator Burns' legislation is available at http://www.crypto.com ----------------------------------------------------------------------------- PRESS RELEASE ON HEARINGS Senator Conrad Burns (R-Mont.) WEB SITE http://www.senate.gov/~burns/ For immediate release: Contact: Matt Raymond Thursday, June 6, 1996 (202) 224-8150 Randall Popelka (202) 224-6137 First Pro-CODE Hearing Slated Burns' Subcommittee to Hear High-Profile Executives, Witnesses WASHINGTON, D.C. _ Montana Senator Conrad Burns today announced the first of two Senate hearings on S. 1726, the Promotion of Commerce Online in the Digital Era Act of 1996, or "Pro-CODE." The hearing will take place in the Commerce Subcommittee on Science, Technology and Space, of which Burns is chairman. The hearing is scheduled Wednesday, June 12, at 9:30 a.m. in room 253 of the Russell Senate Office Building. Scheduled to testify are: Michael Zisman, president and CEO of Lotus; Jim Barksdale, president and CEO of Netscape Communications; Jim Bidzos, president and CEO of RSA Data Security; Tim Krauskopf, V.P. and co-founder of Spyglass Inc.; Kenneth Dam, chairman of the National Research Council; Douglas J. McGowan, director of the SmartCard Alliance for Hewlett-Packard; Computer Systems Policy Project representative (invited); Joe Holmes, chief technology officer for EDS; Joel S. Lisker, senior V.P. for security and risk management at MasterCard; Danne Buchanan, president of Zion's Data Services Company; Jack Valenti, executive director of the Motion Picture Association of America; Aharon Friedman, chairman, founder and chief technical officer of Digital Secured Networks Technology Inc.; Steve Case, president and CEO of America Online (invited); and Robert Bigomy, senior V.P. and director of strategic marketing, government and space technology group, for Motorola. Burns said the focus of the hearing is on commerce and business issues. He said a second hearing, which will focus on privacy, law enforcement and national security issues, is scheduled in his subcommittee on June 26. The bipartisan Pro-CODE bill would ease export restrictions on computer security, or "encryption," for software and hardware. It would also prohibit mandatory systems in which users or companies would have to place a code-breaking "key" in the hands of a third party. # # # ----------------------------------------------------------------------------- HOW TO RECEIVE CRYPTO-NEWS To subscribe to crypto-news, sign up from our WWW page (http://www.crypto.com) or send mail to majordomo(a)panix.com with "subscribe crypto-news" in the body of the message. ----------------------------------------------------------------------------- PRESS CONTACT INFORMATION Press inquiries on Crypto-News should be directed to Shabbir J. Safdar (VTW) at +1.718.596.2851 or shabbir(a)vtw.org Jonah Seiger (CDT) at +1.202.637.9800 or jseiger(a)cdt.org ----------------------------------------------------------------------------- End crypto-news =============================================================================

1 0

Re: whitehouse web incident, viva la web revolution
by Declan B. McCullagh 17 Dec '03

17 Dec '03

Excerpts from internet.cypherpunks: 5-Jun-96 Re: whitehouse web incident.. by Hallam-Baker(a)ai.mit.edu > I find Meeks' style somewhat tiresome. It is tabloid jornalism > rather than reasoned argument. His dislike for the Clinton is > well known - he recently accused the administration of being > fascist. I know of no evidence that the Clinton administration Phillip: I'll let Brock defend himself. I will, however, say that my conversations with him indicate that he probably dislikes Dole and Clinton equally -- or, if you prefer, likes one as much as the other. -Declan

2 1

Re: FOR WHOM THE BELL TOLLS
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 06:54 AM 6/6/96 -0400, Duncan Frissell wrote: > (I've often > wondered why Hamas uses/used couriers for getting funds to Israel when > Israel has a great ATM network with international links.) Sounds like you are suffering caffeine withdrawal. Try wondering again after you have had some coffee. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: Cost of brute force decryption.
by Peter Trei 17 Dec '03

17 Dec '03

> From: "Deranged Mutant" <WlkngOwl(a)unix.asb.com> > > On 4 Jun 96 at 10:58, Bruce M. wrote: > > [..] > > "If you can ensure secrecy either until no one cares about the > > information or so that cracking the code costs more than the information > > is worth, it's 'secure enough.' > > > > "For example a 40-bit key takes about $10,000 worth of supercomputer > > time and two weeks to crack. Although this key may be adequate to > > protect my checking account, it's probably not large enough for the > > accounts of a major corporation. > [..] > > The figures look familiar. No references around. I'm not sure it would > require a whole two weeks for 40-bits, though. Possibly less than a > day? (Or was that why you asked baout the figures?) A week? No. The second round of the cypherpunk's distributed key cracking (which bruted 40 bit RC4) completed in 38 hours. That was a year ago. With the growth in the number of interested people on the net, and the upgrades in cpu power since then, I expect that a similarly motivated effort could burn the same number of cycles in well under 24 hours. (The bottleneck a year ago was in coordination - not raw processing power). Prediction: By the millenium, we'll have made single DES look about as silly as 40 bit RC4 is today. Peter Trei

1 0

Re: FOR WHOM THE BELL TOLLS
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:29 AM 6/7/96 -0700, jamesd(a)echeque.com wrote: >At 06:54 AM 6/6/96 -0400, Duncan Frissell wrote: >> (I've often >> wondered why Hamas uses/used couriers for getting funds to Israel when >> Israel has a great ATM network with international links.) > >Sounds like you are suffering caffeine withdrawal. Try wondering again >after you have had some coffee. > --------------------------------------------------------------------- James. What am I missing? It is trivial to keep both ends of an international ATM transaction anonymous. And if Hamas suicide bombers can make it into Israel proper, I'm sure bagmen can hit ATMs there. There may even be ATMs in East Jerusalem or on the West Bank. DCF

1 0