December 2003 - cypherpunks-legacy

Re: Provably "Secure" Crypto
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

At 7:03 AM 11/25/1996, Adam Back wrote: >deGriz (sic) wrote: >> At 4:18 AM 11/26/1996, Peter M Allan wrote: >> >That is a bound on a _reliable_ algorithm. A faster one is to shuffle >> >the elements and present it as sorted. Lightning fast, but only with >> >low probability of correctness. That is what we are up against in a key >> >search attack. The other guy just might guess my 100 bit key first time, >> >millionth time or whatever - early enough anyway. >> >> >So to get a lower bound you have to show that a lucky guess cannot be >> >distinguished from an unlucky one - and if you do that without a one >> >time pad I take my hat off. >> >> If the chance of a successful guess is absurdly low, the algorithm can >> be considered to be secure. It is quite unlikely that you will guess >> a random 128-bit key. > >Agreed. However you _can_ instantly verify once you have guessed. >This makes the algorithm cryptographically secure, but _not_ perfectly >secure as is the case with a OTP with a truly random pad. > >I think we agree, it is just a distinction in definitions of terms. We are in agreement. I would add, for the benefit of others, that it is a good idea to keep in mind that the focus of our work is to build physical systems which are secure. For instance, we determine the primality of numbers using probabilistic methods. This is not "perfect" in the sense that a OTP is, but it is certainly good enough to bet somebody else's life on it. ;-) OTPs, for that matter, are engineering problems, too. It is difficult to find a random number generator in which we have complete confidence. If we buy a board from somebody, how do we know there isn't a back door? How do we know they did a good job? Many commercially available hardware random number generators are of shockingly poor quality. Caveat emptor. diGriz

1 0

Re: IPG Algorith Broken!
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

Known-plaintext: Unbreakable, since the pad is never reused Chosen-plaintext: Unbreakable, ditto Adaptive-chosen-plaintext: Unbreakable, ditto Correct but for a different reason. Re-using the pad does render the security useless but the other reason is if we know part of the pad AND the ciphertext (and hence the plaintext) or part of the plaintext and the ciphertext and therefore the pad, We cannot solve the rest of the ciphertext as the pad is true random and the next bits are independent of all the previous ones so we cannot predict from what we have. A better definition of unbreakable, IMHO, is that there is no way to determine the plaintext given unlimited ciphertext and computational resources. Sure, this isn`t a complete definition but at least it definites perfect security in an analytic sense. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

5 5

CHANGE: Visa-Free List - How to gain another nationality
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Tue, 26 Nov 1996 14:22:07 -0600 Reply-To: sanwar(a)bclimser.demon.co.uk Sender: NEW-LIST - New List Announcements <NEW-LIST(a)LISTSERV.NODAK.EDU> From: Sanwar Ali <sanwar(a)bclimser.demon.co.uk> Organization: BCL Immigration Services Subject: CHANGE: Visa-Free List - How to gain another nationality To: NEW-LIST(a)LISTSERV.NODAK.EDU The VISA-FREE list has now had a change in address for all requests to the server. Instead of it ending with pobox.com after the @ sign it will be majordomo.pobox.com. Below are the new details for the list. VISA-FREE on majordomo(a)majordomo.pobox.com Discussion of how to gain another nationality for visa-free travel VISA-FREE an unmoderated discussion list covering the problems associated with international travel. In particular the issues discussed will cover acquiring a different nationality to overcome these problems. VISA-FREE is open to anyone wanting more information on visa-free travel, or with useful tips about gaining another nationality quickly. It is also open to specialists in nationality law. Documentation covering the relevant laws of countries that grant their citizenship quickly are archived at: http://www.bclimser.demon.co.uk/bclgovnt.htm Also information covering problems that people have experienced when using a new passport will be covered. There are archives of many of the digests at: http://www.bclimser.demon.co.uk/bclarchv.htm There will also be an e-journal called "THE VISA-FREE JOURNAL" sent to subscribers. Anyone wishing to write to the list-owner directly to discuss relevant issues and who does not wish this circulated to the list may do so. The address is s.riley(a)pobox.com. Please also state whether you would mind if your comments are put into the journal. The list-owner will respect any requests for privacy. *IMPORTANT: Anyone offering specialist assistance to VISA-FREE must provide the list owner with the relevant laws applicable to any citizenship programme offered, in the form of plain text to be archived and made available to the list. Also the legal basis of any programme must be fully verified with the list owner before permission is granted for circulation to the list. This is to safeguard the integrity of the list. Permission will not be unreasonably withheld from such people. At the same time the list -owner reserves the right to exclude those people who do not adhere to the purpose of the list, engage in unnecessary flaming or offer services of a dubious nature.* To subscribe to VISA-FREE, please send the message: SUBSCRIBE VISA-FREE (without your name!) or for the digest SUBSCRIBE VISA-FREE-DIGEST to majordomo(a)majordomo.pobox.com To send messages to the full list use visa-free(a)majordomo.pobox.com For messages to the list owner use s.riley(a)pobox.com Home Page: http://www.bclimser.demon.co.uk/bclvisfr.htm Owner: Sam Riley (AKA "Sanwar Ali") s.riley(a)pobox.com The list-owner's public key is: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAi/xbwUAAAEEALZolxs1l/DbYtEOIJV71EdsDepzR+DhLPPATIMwYiYgU9Yc PRIa6aUI4VKrtz23/3Nz4pFP45kCfKUehsJ3oqtXzGWqCqIpPVm4q4d6oV44Csn5 EykR3ujlzYaCopzsYRD9E/EIaxVztnIantfLeN0IwQL0k9XazPkj64yNL1lpAAUR tCRTYW0gUmlsZXkgPHNhbUBiY2xpbXNlci5kZW1vbi5jby51az4= =nj7+ -----END PGP PUBLIC KEY BLOCK----- ------- Use this information at your own risk. For more information and disclaimer send E-mail to LISTSERV(a)LISTSERV.NODAK.EDU with the command INFO NEW-LIST in the body. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Re: Another Nutty Idea about SPAM
by zerkle＠cs.ucdavis.edu 17 Dec '03

17 Dec '03

(apologies if this appears twice...I'm easily confused) > From: ichudov(a)algebra.com (Igor Chudov @ home) > It is not illegal to make unsolicited phone calls. People must > take an _action_ (request to be removed from call lists) in order > not to be bothered. Yes. However, there is an organization that will send out such a list to a large number of big companies that do telemarketing. If any of those companies call any of the people on the list, they each send a bill for $100. If the bill isn't paid, they sue for the money. They always get the money. The telemarketers really hate these people, which means that they are doing their job. So, for the spammers, what I'm proposing is not that people *need* to take action to avoid getting spammed, but that they *can* take action if they want to get paid for spam. -Dan

1 0

CNET News Dispatch November 26th, 1996
by The CNET newsletter 17 Dec '03

17 Dec '03

*************************************** NEWS.COM DAILY DISPATCH 6:10 p.m. (PT) Tuesday, November 26, 1996 San Francisco, California, USA *************************************** WELCOME! *************************************** The NEWS.COM DAILY DISPATCH highlights the up-to-the minute technology news presented by NEWS.COM. It tempts readers with coverage of today's hottest stories, news in the making, (in)credible rumors, and other indispensable information. For complete versions of the stories updated all day long, head over to: http://www.news.com/?nd *************************************** CONTENTS SCOOPS AND TOP STORIES The legislation that launched thousands of cyberspace ribbons The Nostradamus of the semiconductor market speaketh! Comdex sucks! No, it rules! Sucks! Does not! Does so! Might that be the virogen.asexual virus in your software? ANNOUNCEMENTS An easy way for you to customize NEWS.COM Late-breaking stories just a click away with Desk Top News Send us your questions, comments, flotsam, and jetsam *************************************** SCOOPS AND TOP STORIES THE LEGISLATION THAT LAUNCHED THOUSANDS OF CYBERSPACE RIBBONS It's baaaack... The Supreme Court will decide tomorrow whether it should review the CDA--the legislation cyberspace loves to hate--or simply put it out to pasture. Swirling around inside this legal vortex are issues of free speech, the definition of "obscene," and a potential $250,000 fine for transgressors. Maybe CDA really stands for "Can't download anything..." http://www.news.com/News/Item/0%2C4%2C5743%2C00.html?nd *************************************** THE NOSTRADAMUS OF THE SEMICONDUCTOR MARKET SPEAKETH! Who better than a Robertson, Stephens semiconductor analyst to take you on a guided tour of the volatile world of semiconductor stocks? Dan Niles demystifies the market's plummeting and rising...distinguishes between trends and blips, and pontificates on where semiconductor stocks are going in the long run. [Hint: Can you say $275 billion?...] http://www.news.com/Perspectives/perspectives.html?ntb.pers?nd *************************************** COMDEX SUCKS! NO, IT RULES! SUCKS! DOES NOT! DOES SO! If you've been to Comdex and survived, how did you manage it? NEWS.COM wants your war stories. We will publish the best five, and the winners--picked on a totally subjective basis by our editorial staff--will get supercool CNET T-shirts. Mail suggestions(a)news.com, and include the words 'Comdex stories' in the subject of your message. To paraphrase the Prez, "Let us feel yur paynnne..." http://www.news.com/Comdex/?nd *************************************** MIGHT THAT BE THE VIROGEN.ASEXUAL VIRUS IN YOUR SOFTWARE? Downloaders of PointCast's version 1.2 got a bit of a shock for their trouble, namely a Norton antivirus software-generated message that told them they had contracted a virus with the esoteric moniker "Virogen.asexual." While the scare isn't in league with the benzene-in-the-Perrier snafu of a few years back, there were still ruffled feathers that needed smoothing. http://www.news.com/News/Item/0%2C4%2C5745%2C00.html?nd *************************************** ANNOUNCEMENTS AN EASY WAY FOR YOU TO CUSTOMIZE NEWS.COM So many bits, so little time? Sounds like you need Custom News. Identify the topics, keywords, or sections you're most interested in, and Custom News will a create a page of headlines and summaries for all stories that match your criteria. Check it out at: http://www.news.com/Personalization/Entry/1%2C21%2C%2C00.html?nocache=1 *************************************** LATE-BREAKING STORIES A CLICK AWAY WITH DESK TOP NEWS How would you like having split-second access to the very latest news on the Net? Our Desk Top News feature puts our 20 most recent stories right there on your desktop for you to review at any time. Here's how it works: 1. From any story, click Desk Top News in the top right. 2. A window will open showing our last 20 stories. 3. Click on a headline to display the story. 4. Desk Top News updates itself every 30 minutes. 5. You become known as Ms./Mr. Cyber-Info. It feels good. http://www.news.com/Help/Item/0%2C24%2C12%2C00.html?nd *************************************** SEND US QUESTIONS, COMMENTS, FLOTSAM, AND JETSAM If you have any questions, suggestions or remarks, send us a message: newsdispatch(a)cnet.com *************************************** CNET: The Computer Network http://www.cnet.com/ http://www.news.com/ http://www.gamecenter.com/ http://www.download.com/ http://www.search.com/ http://www.shareware.com/

1 0

Re: SAFEPASSAGE BRINGS STRONG CRYPTO TO WEB BROWSERS WORLDWIDE
by Douglas Barnes 17 Dec '03

17 Dec '03

>> SAFEPASSAGE BRINGS STRONG CRYPTO TO WEB BROWSERS WORLDWIDE > >BTW, this doesn't come with source code. > No, it does not come with source code. Site licenses and OEM bundling packages will come with a source code option. Partners who work with us in internationalizing the product may also receive source code. However, it did not seem to be useful or appropriate for a consumer-level product like this. We are trying to find a happy medium between making sure that the security is well-reviewed, and doing things that make business sense and map onto standard industry practice for selling software products. Note that SafePassage uses SSLeay for its encryption and SSL protocol layer; SSLeay has publicly available source code, and has been extensively reviewed. Douglas Barnes C2Net

4 3

Re: [CRYPTO] Bank Cards, Interac, Bank Machines, etc
by ca3sal＠isis.sunderland.ac.uk 17 Dec '03

17 Dec '03

There was someone jailed a couple of months ago in the UK for ATM fraud. He and his mates set up cameras watching people type in there PIN number and then manufatered dummy cards. I will try and dig out any more info. Ste

1 0

No Subject
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Does anyone have any experience with this product she/he would like to share? This is the Win95 model. :Stealth Encryptor :Stealth Encryptor offers the following functions: : Stealth Encryptor, List Mode : Stealth Encryptor, Browser Mode : Important Files Backup with auto encryption : File Shredder : E-Mail Encryptor : Drag and Drop support : Dockable Toolbar : Stealth Media Encryption, super speed for large image, multimedia and exe files : DES encryption : 32 bit performance, compatible with Windows 95 and Windows NT :http://www.tropsoft.com/stealth Many thanks. A c'punks survivor (so far)!

1 0

No Subject
by jaltarri＠lix.intercom.es 17 Dec '03

17 Dec '03

unsuscribe cypherpunks jaltarri(a)lix.intercom.es

1 0

Re: wealth and property rights
by Clay Olbon II 17 Dec '03

17 Dec '03

At 12:46 PM 11/27/96 -0800, Dave Kinchlea <security(a)kinch.ark.com> wrote: >On Wed, 27 Nov 1996, Clay Olbon II wrote: >> >> The average welfare benefit (including food stamps, medicaid, and all the >> other myriad programs) is $10/hr. Compare to a minimum wage of $5/hr. >> Offer most welfare recipients a minimum wage job and they will laugh in your >> face. (In fact, here in Michigan most employers are already paying several >> $$ above minimum wage, and often these jobs are unfilled). > >I am not in a position to argue with you, I simply don't have the facts. >My question is, do You? can you cite where this figure came from, it >sounds like Republican rhetoric to me. Of course, I will point out, that >minimum wage is simply not enough to feed a family. It is (or at least >it should be) reserved for single folks just starting out. Can't give you the exact date, but it was an article in our local paper (The Detroit News). The $10 figure is not exact, as the actual number varies from state to state, I remember that number as being about average. >> >> More bullshit. You don't know what anyones motives are. To ascribe your >> >> motivations to Bill Gates is unrealistic. >> > >> >But you claim to know the motives of those on welfare: pot->kettle->black >> >> I don't claim to know the motives. I am examining empirical evidence. As > >Sure you do: "economic decision to do nothing and go on welfare vs. >going to work". It seems to me that you are claiming their motives are >econmic, is there some other way we should read that sentence? You got me there :-) >It takes an awful lot to prove a causal relationship, empirical evidence >notwithstanding. You haven't made your case, as far as I am concerned >(not that you need to convince me), there are a myriad of other factors >involved. I have no doubt that given two (or three) poor choices, most >will choose the lesser evil and that *may* mean choosing welfare over >working, but I seriously doubt that this is anything but a small >minority of the cases of people who are actually using the system. > >You suggest that what ought to be done is give less welfare. If your >thesis is correct, I suggest that better paying jobs is the real answer >(assuming you agree that minimum wage is too little for most to live >on). Shrinking welfare payouts may serve to get people off welfare but >it won't make it any easier to live on low wages. We DO have a duty to >help our neighbours, do we not? Or has greed taken over entirely? I don't mind helping my neighbors. Of course, they live next door and I know them! The problem is that the welfare creates a system where behaviour that is generally bad for society is subsidized. The incentives are all wrong. And no, I don't think the minimum wage should be increased either. Increasing the minimum wage at a time when you are pushing people off of welfare is the wrong action, because it decreases the number of jobs available. Clay ******************************************************* Clay Olbon olbon(a)ix.netcom.com engineer, programmer, statistitian, etc. **********************************************tanstaafl

3 2