December 2003 - cypherpunks-legacy

Symantec Caf�
by asantos＠retesa.es 17 Dec '03

17 Dec '03

La empresa Symantec ha sacado al mercado un entorno de programacion JAVA para WindowsŽ95/NT. Quien se apunta a evaluarlo? El URL es :"http://www.symantec.com/lit/dev/javaindex.html" o bien :"http://www.symantec.com/lit/dev/java.html" Agustín Santos Méndez, RETESA, S.A. C/Orense 4, Planta 10. 28020 MADRID SPAIN. Ph: +34.1.342.67.91 Fax +34.1.597.28.77 E-mail: asantos(a)retesa.es

1 0

Re: Secure Split
by loki＠obscura.com 17 Dec '03

17 Dec '03

I wrote a program which does secret sharing calles SecShare. It is on my home page. As my first venture into crypto programming it is a major kludge, but it does the job. -Lance ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Web Browsers and Anonymous Mail (Was: NSA net trolling)
by lmccarth＠cs.umass.edu 17 Dec '03

17 Dec '03

Wayne Madsen wrote somewhere: > A knowledgeable government source claims that > the NSA has concluded agreements with [...] Netscape to > permit the introduction of the means to prevent the anonymity of > Internet electronic mail, [...] I suspect this may actually mean that they're pushing Netscape to incorporate cryptographic authentication into browser email, which I think is a useful development. I'm not aware of any public remailers previously operated by Netscape Communications Corp. that have now shut down. ;) At any rate, it's an excuse for me to ask some questions: (0) I'm not aware of any class library objects or methods in stand-alone Java for calling the local mail transport agent. Is there any class library support in Java+{Navigator, HotJava, Mosaic, NetCruiser, the AOL web tool, etc.} for applet calls to the local mail agent that's configured in the browser ? I would prefer not to reimplement SMTP using the Socket class in my own applets. Ideally I'd like to have an applet that presents a form with some entry boxes and check boxes, quantizes and encrypts the input according to the check box settings, and spews the resulting byte streams to the MTA. (1) As I recall, I used to be able to set (as an Option) the path and name of the local MTA (e.g. /usr/lib/sendmail) in an earlier version of Netscape. That seems to have disappeared in Navigator 2.0. Is there indeed no longer a way to set that ? It occurs to me that we could have achieved partial integration of remailing into Navigator quite cheaply with that option. Comments from Sun and/or Netscape and/or anyone else would be welcome. Thanks :) -Lewis "You're always disappointed, nothing seems to keep you high -- drive your bargains, push your papers, win your medals, fuck your strangers; don't it leave you on the empty side ?" (Joni Mitchell, 1972)

2 3

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by Peter Trei 17 Dec '03

17 Dec '03

ipgsales(a)cyberstation.net writes [...] - I do not now what KDC's are... [...] > Incidentally crypto wheel systems are still employed in 1996 at some of > the highest levels of usage - some called then rotors at one time - they > are still used because the produce non repeatable sequeces It's sort of amazing that a person can show themselves so foolish and ignorant in less than four full lines of text. No person or organization who has studied crypto beyond the Captain Midnight Decoder Ring level can take these people or their product seriously. Peter Trei ptrei(a)acm.org

1 0

JavaScript to grab email
by Jyri Kaljundi 17 Dec '03

17 Dec '03

Another annoying feature in JavaScript and Netscape. Have a look at <http://www.popco.com/grabtest.html> The page uses JavaScript to steal your e-mail address and sends a test e-mail message to the address it grabbed. It works with Netscape, which is probably only browser supporting JavaScript. Probably there will soon be thousands of pages which include this code, and people using Netscape 2.0 will be spammed with commercial messages. So just put some false e-mail address in your Netscape browser to disable this feature. The script was developed and announced by Glenn Fleishman, moderator of the Internet Marketing mailing list. Thanks for letting people know. Jüri Kaljundi jk(a)digit.ee Digiturg http://www.digit.ee/

5 6

Re: Web Browsers and Anonymous Mail (Was: NSA net trolling)
by frantz＠netcom.com 17 Dec '03

17 Dec '03

>(0) I'm not aware of any class library objects or methods in stand-alone Java >for calling the local mail transport agent. Is there any class library >support in Java+{Navigator, HotJava, Mosaic, NetCruiser, the AOL web tool, >etc.} for applet calls to the local mail agent that's configured in the >browser ? A look at the documentation does not show one. You may have to implement the whole MTA protocol yourself :-(. It does occur to me that such a library would only be possible in a browser that knows (via configuration) how to find MTAs. Good luck - Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Conexion a control
by asantos＠retesa.es 17 Dec '03

17 Dec '03

Por favor, no useis el modem hasta que no pongamos en marcha el sistema de retorno de llamadas y nos aseguremos que estan las medidas de seguridad correctas. >Return-Path: <jfla> >Received: by sun2.retesa.es (5.x/SMI-SVR4) > id AA01057; Tue, 20 Feb 1996 15:58:35 GMT >Date: Tue, 20 Feb 1996 15:58:35 GMT >From: jfla (Jose Fernando Luis Alarcon) >Message-Id: <9602201558.AA01057(a)sun2.retesa.es> >To: gruporetesa >Subject: Conexion a control >Content-Type: text > >Hola a todos: > Teneis a vuestra disposicion el acceso a control por modem , la linea >tendra el numero 3426751 , entrareis como terminal remoto .., la conexion ppp >a control todavia no esta disponible.., pero lo estara en poco tiempo. > Un saludo, > _ > /____/______ > (_/-- /__ /-\ > Agustín Santos Méndez, RETESA, S.A. C/Orense 4, Planta 10. 28020 MADRID SPAIN. Ph: +34.1.342.67.91 Fax +34.1.597.28.77 E-mail: asantos(a)retesa.es

1 0

Re: Optical repeaters
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 07:35 PM 2/19/96 -0800, Timothy C. May wrote: >By analogy, it is not clear to me that a simple regeneration mechanism, >with no local observer or recording apparatus, will collapse the wave >function. Seems to me an experiment may have already been done along these >lines: separate fibers producing an interference pattern and then these >inline amps added...if the interference pattern remains, as I would expect, >then the amps/regenerators did not constitute a "measurement" in QM terms. An amplification mechanism will usually couple the signal to the vacuum, and introduce vacuum noise. Another way of thinking of vacuum noise is that amplification mixes the state of the signal, with the (unknown) phase of the universe at infinity. Of course any statement in words about quantum mechanics is necessarily false, so the above statement is a metaphor or parable, rather than literal truth. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by geeman＠best.com 17 Dec '03

17 Dec '03

There are remarkable similarities between this 'system' and the Elementrix one. Could it be that E-ix is selling some licenses to the unsuspecting? Or perhaps it's the other way around. Both involve: - An ill-defined cure-all solution which can't realy be revealed because of patent-pending status - An OTP (so they say) that's not really an OTP - Starting with a 'seed' that is truly random and then algorithmically generating a stream that is XOR-ed with the data, based on analogies to "rotors" and "dice" - Encrypting keystream data using portions of the previous keystream ** fairly remarkable coincidences. Or is it that great minds think alike?

1 0

SOW_hat
by John Young 17 Dec '03

17 Dec '03

2-20-96. FT: "Cash versus cashless." Assays Y/Ns of e-cash and declares DigiCash the winner for its privacy and anonymity. Echoes DC privacy mantra and sketches DC/DC tests underway by the EU. Compares froth of issuers, fear of banks and so-what of consumers: "Physical cash already offers consumers a product that is universally accepted, convenient, anonymous and has no direct costs." 2-20-96. WSJ: "Security Sytem On the Internet Contains Flaw." Two Purdue University students discovered a major flaw in Kerberos that could allow a hacker to penetrate corporate networks in about 5.8 seconds, giving another black-eye to electronic commerce. SOW_hat

1 0