December 2003 - cypherpunks-legacy

RE: Patent Fight Could Add to Cost of Inter
by John Fricker 17 Dec '03

17 Dec '03

Unisys owns the patent for LZW compression which GIF (and TIFF and many other programs) utilizes. Unisys is the company that put pressure on CIS because CIS had developed the GIF format. CIS did nothing other than ruffle many peoples feathers and inspire the PNG team to create a new spec. JPEG support was inevitable across the board. If I remember correctly the LZW patent expires next year. The interesting patent I'm waiting to bubble to the top of pond is the one that covers the display of advertising material in a software program. I'm not making that up! >Vince Callaway (vince(a)web.wa.net) said something about Re: Patent Fight Could Add to Cost of Inter on or about 11/21/96 2:32 PM > >> ``We believe it's important to draw a line in the sand and make >> them prove infringement,'' said CompuServe spokeswoman Gail >> Whitcomb. ``We think their claim is way too broad.'' > >This is quite a statement coming from a company that flexed its muscles on >the .GIF file spec. about 3 years ago. > >If I remember right Compuserve caused some some major changes in RIP and >HTTP developement. Until that time the only graphic format supported in >Mosaic was .GIF. JPEG was promptly added and there was hot debate about >the issue. > >Did not slow down the net much though. > >End of message --j ----------------------------------- | John Fricker (jfricker(a)vertexgroup.com) | -random notes- | My PGP public key is available by sending me mail with subject "send pgp key". | www.Program.com is a good programmer web site. -----------------------------------

1 0

Re: Magic passwodr in BIOS?
by delious hendrixs 17 Dec '03

17 Dec '03

>From sender >Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id GAA17822 for cypherpunks-outgoing; Thu, 21 Nov 1996 06:32:33 -0800 (PST) >Received: from laf.cioe.com (root(a)laf.cioe.com [204.120.165.33]) by toad.com (8.7.5/8.7.3) with ESMTP id GAA17817 for <cypherpunks(a)toad.com>; Thu, 21 Nov 1996 06:32:27 -0800 (PST) >Received: from ThisHost (ewilson.roeing.com [206.230.2.100]) by laf.cioe.com (8.7.5/8.7.3) with SMTP id JAA08462; Thu, 21 Nov 1996 09:33:14 -0500 (EST) >Message-Id: <1.5.4.32.19961121142941.0085b630(a)gibson.cioe.com> >X-Sender: serw30(a)gibson.cioe.com >X-Mailer: Windows Eudora Light Version 1.5.4 (32) >Mime-Version: 1.0 >Date: Thu, 21 Nov 1996 09:29:41 -0500 >To: Kamil Golombek <Zero(a)mrkev.vabo.cz> >From: Eric Wilson <serw30(a)laf.cioe.com> >Subject: Re: Magic passwodr in BIOS? >Cc: cypherpunks(a)toad.com >Sender: owner-cypherpunks(a)toad.com >Precedence: bulk >Content-Type: multipart/mixed; boundary="--------geoboundary" > > ><HTML> ><BODY> ><CENTER> ><A HREF="http://www.geocities.com">Postage paid by: <IMG SRC="http://www.geocities.com/pictures/newgeobt.gif"></A></CENTER> ></BODY> ></HTML> > Another way of defeating any bios system is by turning the on/off button a whole bunch of times, causing it to reset the bios chip. Therefore bypassing the password logon. Sincerely, Psionic Damage --------------------------------------------------------- Get Your *Web-Based* Free Email at http://www.hotmail.com ---------------------------------------------------------

1 0

Mass-market crypto phones
by Clay Olbon II 17 Dec '03

17 Dec '03

A while back, Eric Blossom posted a URL for a mass-market, phone encyrption device (http://www.comsec.com/) The point of this post is to posit a scenario based on the implications of this product. This is speculation based on where I think such products should be heading. I think we need to keep a couple of goals in mind. The first, is to get encrypting phones (or phone add-ons) into Wal-mart, K-mart, etc (where probably most Americans now buy their phones). The prices need to be low enough that people will want to buy them (<$100?). Is this technically feasible? The comsec device from the above URL already demonstrates the needed capability. Is the cost target possible? My guess is soon, given the lowering costs and increasing capabilities of current processors. The second goal needs to be to push a similar product for cell-phones. I think this will be perhaps an easier sell, given the higher initial cost for these phones, and their reduced security. Perhaps a home device could be sold with the cell-phone as a package deal, so that communications with the "home base" (i.e your office, home, etc) would be secure. With the rapid growth in cell-phone sales, selling a package such as this might ensure a larger user-base of home devices. Given that these goals are met, I think widespread use of crypto over phone lines would become almost inevitable. However, the fun part would be the introduction of such products. The FUD coming from police, the government, etc. would be amazing to behold. Clay ******************************************************* Clay Olbon olbon(a)ix.netcom.com engineer, programmer, statistitian, etc. **********************************************tanstaafl

3 2

Re: Patent Fight Could Add to Cost of Inter
by jim bell 17 Dec '03

17 Dec '03

At 05:06 AM 11/21/96 CST, Alan Pugh wrote: > >By KATHLEEN SAMPEY >Associated Press Writer > >NEW YORK (AP) _ A little-known patent could raise the cost of >doing business over the Internet for companies selling software, >video or other digital products delivered online. > >E-Data Corp. of Secaucus, N.J., is suing 17 companies, including >McGraw-Hill and CompuServe, to collect licensing fees on the >patent, which protects downloading of encrypted digital >information. A court hearing is scheduled Dec. 6 in New York on the >company's claims. Notice, as usual, the Orwellian use of the word "protects" in the paragraph above. While apparently written by a journalist, it echoes the usage of lawyers. Nothing is really being "protected," it is being monopolized. Jim Bell jimbell(a)pacifier.com

1 0

Re: Anderson & Kuhn's "Improved DFA" paper
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

HP just announced their big new plans for international exportable crypto using tamperproof PCM-CIA smartcards with multiple tamperproof GAK plugins. Anderson&Kuhn just announced the latest in a series of attacks on "tamperproof" hardware crypto modules by Israeli, UK, and US cryptographers. Obviously it must be a conspiracy :-) It's also an opportunity for some well-timed press releases. Clipper 1's reputation was severely damaged by Matt's attack. Anybody know if HP's giving out samples, and if there are real or test GAK plugins for them? HP URL http://www.dmo.hp.com/gsy/security/icf/main.html The paper was posted to coderpunks, and it's on ftp://ftp.cl.cam.ac.uk/users/rja14/dfa Here's the intro: --------------------------------------------------------------------- Improved Differential Fault Analysis Ross J Anderson, Markus G Kuhn In [1], Biham and Shamir announce an attack on DES based on 200 ciphertexts in which one-bit errors have been induced by environmental stress. Here we show an attack that requires less than ten ciphertexts. Furthermore, our attack is practical in that it uses a fault model that has been implemented in attacks on real smartcards. In [2], Biham and Shamir show how their method can be extended to reverse engineer algorithms whose structure is unknown. Our attack can also be extended to such cases and is more efficient there too. In [3], Boneh, De Millo and Lipton discuss how such techniques can be used to attack RSA. Again, their attack is theoretical only, We show how to do it in practice. -------------------------------------------------------------------------- # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk # (If this is posted to cypherpunks, I'm currently lurking from fcpunx, # so please Cc: me on replies. Thanks.)

3 2

killfiling aga@dhp.com
by Greg Broiles 17 Dec '03

17 Dec '03

At 06:45 AM 11/21/96 -0800, nobody(a)cypherpunks.ca (John Anonymous MacDonald) wrote: [discussing aga(a)dhp.com] >I should'a kill-filed this sicko long ago. Agreed. But if you (and other anonymous posters) are going to continue to reply to him or other unproductive kooks, would you please put their addresses somewhere in the headers of your messages (perhaps in the To: or Cc: or Subject:) headers so that the rest of us who are using killfiles won't have to read your replies? -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

3 2

CNET News Dispatch November 21st, 1996
by The CNET newsletter 17 Dec '03

17 Dec '03

************************************* CNET NEWS DISPATCH/SPECIAL COMDEX ISSUE Thursday, November 21, 1996 San Francisco, California, USA ************************************* Welcome to the fifth in a series of SPECIAL COMDEX ISSUES of the CNET NEWS DISPATCH, bringing you the latest on the people, products, and parties at this exciting event. Check out our Comdex page at: http://www.news.com/Categories/Index/0%2C3%2C38%2C00.html?nd ************************************* CNET NEWS DISPATCH is a daily newsletter that summarizes the up-to-the minute technology news presented by CNET's NEWS.COM. It tempts readers with coverage of today's hottest stories, news in the making, (in)credible rumors, and other indispensable information. For complete versions of the stories updated all day long, head over to: http://www.news.com/?nd ************************************* CONTENTS SCOOPS AND TOP STORIES Push comes to shove as Netscape leads tech parade CompuServe gets back to basics PowerPC not overshadowed at Comdex Treasury against Net taxes Compaq looks beyond the desktop Where do you want to go today? Home. Hot products seen at Comdex ANNOUNCEMENTS An easy way for you to customize NEWS.COM Search the site for particular topics and articles Send us your questions, comments, flotsam, and jetsam How to subscribe and unsubscribe Late-breaking stories just a click away with Desk Top News ************************************* PUSH COMES TO SHOVE AS NETSCAPE LEADS TECH PARADE As more and more people are pulled onto the Internet, more and more of the Internet is being pushed back to people. This week at Comdex, a type of Web publishing generically referred to as "push" technology received its most significant endorsement to date with the introduction of Constellation, the code name for a new technology from Netscape Communications. (November 21, 1996, 12:15 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5641%2C00.html?nd COMPUSERVE GETS BACK TO BASICS CompuServe's announcement today that it is closing down its flagging Wow service by January 31 marks the end of the company's failed attempts to get a foot in the door of the potentially lucrative consumer online service business. "They're throwing in the towel in the consumer market," said Mark Mooradian of Jupiter Communications. Instead, CompuServe, the second-largest online service with 5 million users worldwide, plans to refocus itself on its original mission: serving business customers. (November 21, 1996, 1:15 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5608%2C00.html?nd POWERPC NOT OVERSHADOWED AT COMDEX While Microsoft Windows CE devices may have grabbed most of the attention at Comdex, important developments in the Mac clone market surfaced, including new PowerPC reference design platforms from Motorola and IBM and the debut of a 533-MHz PowerPC prototype system using an Exponential processor. Motorola this week revealed its Yellowknife PowerPC Platform Reference Design motherboard that supports the PCI bus and 603e, 604, and 604e PowerPC microprocessors at clock speeds of up to 240 MHz. (November 21, 1996, 12 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5642%2C00.html?nd TREASURY AGAINST NET TAXES In a report released today, the U.S. Treasury Department opposed new taxes on electronic transactions via the Internet, saying income should be taxed the same whether it comes through existing channels or electronic means. The report, which makes no formal policy recommendations, also expresses concern that the Internet may become a tax haven for those who use anonymous electronic money that cannot be traced and therefore cannot be taxed. (November 21, 1996, 11:30 a.m. PT) http://www.news.com/News/Item/0%2C4%2C5628%2C00.html?nd COMPAQ LOOKS BEYOND THE DESKTOP Compaq has expanded its core desktop product lineup to include new efforts such as NetPCs, network computers (NCs), portable PCs, and handheld devices. Mike Winkler, the head of Compaq's PC products group, bared the company's plans for NCs and laid out the future strategy for Windows CE devices in an interview with CNET at Comdex. (November 21, 1996, 11:15 a.m. PT) http://www.news.com/News/Item/0%2C4%2C5645%2C00.html?nd WHERE DO YOU WANT TO GO TODAY? HOME Bill Gates must like Comdex. While other CEOs will fly in to deliver a speech and fly back out the same day, the Microsoft captain has been in Las Vegas for at least two days, maybe more. "I've seen him in the hotel bar; he comes in and has a beer all by himself, and everyone's looking at him," said one attendee. But like sightings of the Other King, rumors of Gates's unattended wanderings are probably just that. (November 21, 12:09 a.m. PT) http://www.news.com/SpecialFeatures/0%2C%2C5624%2C00.html?nd HOT PRODUCTS SEEN AT COMDEX Here are some of the hottest new products we found as we wandered the floor of Fall Comdex. (November 21, 3:00 p.m. PT) http://www.cnet.com/Content/Reviews/Hot/contents.html?nd ************************************* ANNOUNCEMENTS AN EASY WAY FOR YOU TO CUSTOMIZE NEWS.COM So many bits, so little time? Sounds like you need Custom News. Identify the topics, keywords, or sections you're most interested in, and Custom News will a create a page of headlines and summaries for all stories that match your criteria. Check it out at: http://www.news.com/Personalization/Entry/1%2C21%2C%2C00.html?nocache=1 SEARCH THE SITE FOR PARTICULAR TOPICS AND ARTICLES Search the entire NEWS.COM database for stories you saw in News Dispatch, or track any story we've run. http://www.news.com/Searching/Entry/0%2C17%2C0%2C00.html?nd SEND US QUESTIONS, COMMENTS, FLOTSAM, AND JETSAM If you have any questions, suggestions or remarks, send us a message: newsdispatch(a)cnet.com HOW TO SUBSCRIBE AND TO UNSUBSCRIBE To subscribe to News Dispatch: Send mail to listserv(a)dispatch.cnet.com with the message: subscribe news-dispatch (your name) in the message body. To unsubscribe send the message: unsubscribe news-dispatch LATE-BREAKING STORIES JUST A CLICK AWAY WITH DESK TOP NEWS How would you like having split-second access to the very latest news on the Net? Our Desk Top News feature puts our 20 most recent stories right there on your desktop for you to review at any time. Here's how it works: 1. From any story, click Desk Top News in the top right. 2. A window will open showing our last 20 stories. 3. Click on a headline to display the story. 4. Desk Top News updates itself every 30 minutes. 5. You become known as Ms./Mr. Cyber-Info. It feels good. http://www.news.com/Help/Item/0%2C24%2C12%2C00.html?nd ************************************* CNET: The Computer Network http://www.cnet.com/ http://www.news.com/ http://www.gamecenter.com/ http://www.download.com/ http://www.search.com/ http://www.shareware.com/

1 0

RE: Mass-market crypto phones
by Mullen Patrick 17 Dec '03

17 Dec '03

_______________________________________________________________________________ From: Clay Olbon II on Thu, Nov 21, 1996 15:20 >A while back, Eric Blossom posted a URL for a mass-market, phone encyrption >device (http://www.comsec.com/) The point of this post is to posit a The above mentioned crypto phone was incredibly expensive, if I remember correctly. What it basically was (Please keep in mind I may be thinking of a different product) a box containing a modem and a crypto-crunching CPU. Phone in one end, processed by said CPU, and send out other end. I have/had a similar idea, but I want to try make it a totally software product (assuming you have the necessary hw requirements on your computer) where you talk in through a microphone (can something be wired so you can use a regular phone plugged into your computer/modem/soundcard???) your CPU crunches code, and spits out the encrypted data. Obviously, the complementing steps would be done on the receiving end. Has anyone ever tried anything like this? >I think we need to keep a couple of goals in mind. The first, is to get >encrypting phones (or phone add-ons) into Wal-mart, K-mart, etc (where >probably most Americans now buy their phones). The prices need to be low >enough that people will want to buy them (<$100?). Is this technically >feasible? The comsec device from the above URL already demonstrates the >needed capability. Is the cost target possible? My guess is soon, given >the lowering costs and increasing capabilities of current processors. Goals sound good. I feel it *definately* has to be below $100. Personally, I use a phone bought at K-Mart that cost $12 _after_ tax... I wouldn't mind paying $50 for a techno gizmo that made my conversations, inane as they may be, private. The price would also have to be low to assure the other end has a similar techno-gizmo, or I would have wasted my money. Anyone else see the *immediate* need for a standard? >The second goal needs to be to push a similar product for cell-phones. If I'm not mistaken (and I've been known to be from time to time :-), cell phones are already encrypted between the phone and cell tower. That way, they are no less private than a regular phone. Of course, you may be referring to further end-to-end encryption built into the phone in addition to this, but as far as they being less secure than a house phone, I'm not sure about that one. >Given that these goals are met, I think widespread use of crypto over phone >lines would become almost inevitable. However, the fun part would be the >introduction of such products. The FUD coming from police, the government, >etc. would be amazing to behold. Agreed! > Clay >******************************************************* >Clay Olbon olbon(a)ix.netcom.com >engineer, programmer, statistitian, etc. >**********************************************tanstaafl PM USER ERROR: REPLACE AND STRIKE ANY KEY WHEN READY

3 2

Finjan "SurfinGate"
by Mike McNally 17 Dec '03

17 Dec '03

Check out http://www.finjan.com and the stuff about "SurfinGate". The software supposedly can perform an on-the-fly inspection of a Java applet or ActiveX control, and then apply a signature to it along with a "safety" level qualifier to feed into a configurable policy mechanism. Any ideas as to how you can look at an ActiveX control and determine whether it's safe or not? -- ______c_________________________________________________________________ Mike M Nally * IBM % Tivoli * Austin TX * How quickly we forget that mailto:m5@tivoli.com mailto:m101@io.com * "deer processing" and "data http://www.io.com/~m101/ * processing" are different!

2 3

Database law... silver lining??
by Richard L. Field 17 Dec '03

17 Dec '03

Should a database protection law such as HT 3531 be enacted in the U.S., it just may turn out to be the best weapon yet for the protection of personal data. Why shouldn't a "database" be interpreted to include an individual's personal data? All that is required is that it be "arranged in a systematic or methodical way". Heck, that's not so hard. And a "database maker" isn't necessarily Lexis (the compiler of P-TRAK) and friends, it is each individual who originally made a "substantive" (i.e., lifetime) investment in the collection of the contents of his personal database. Based on this reasoning, P-TRAK, etc. would be considered an infringing use, subject to civil and possible criminal actions, injunctions, impoundment, and monetary relief. Hmmm... - Richard Field

1 0