December 2003 - cypherpunks-legacy

Re: cohen predicts army patrols US streets
by Anonymous 17 Dec '03

17 Dec '03

>"Terrorism is escalating to the point that Americans soon >may have to choose between civil liberties and more >intrusive means of protection," says Defense Secretary >William S. Cohen This is the classic intro into a dictatorhip and militarisation of a society. I wonder if someone can dig up Hitler's speeches on the subject. >"It could happen here," Cohen said he conclued after 8 >months of studying threats under the Pentagon microscope. Sure. I bet this has nothing to do with the surge of false "bomb threats" in Austin and SIlicon Valley high-tech companies or flooding mass media with descriptions of dangers from domestic terrorism. Public must be aware of the "presence" of undesirables first. Who is it going to be this time, after cpunks are dealt with ?

1 0

Super computer SR2201 at PJWSTK
by Jan Dobrucki 17 Dec '03

17 Dec '03

I got news for you all. I'm applying for an account on a super computer which we got in our school. I need to write the reason why I need to have such an account. The reason why I want to put is: to break a DES-56 bit key encrypted message. I don't know if my applications for the account will be accepted, but if you got any ideas now as to how you'd like to use the computational power of a super computer, just let me know... http://www.pjwstk.waw.pl/sr2201/index.html this is the address to the page at my school about the SR2201, but it's in polish... i might translate it one day soon... Looking foreward to your comments and ideas. JD PS. My return address is somewhat messed up. Just send mail to either the list, or to s1180(a)qmail.pjwstk.waw.pl for some reason, the server at my school, PJWSTK, says that your domain is not accepted. For some reason, it says so for all domains.

1 0

Re: MIB Subpoenas
by Anonymous 17 Dec '03

17 Dec '03

At 12:23 PM 10/28/98 -0800, Tim May wrote: >The first thing I did when I heard about the latest case, that of Toto, was >to purge any private mail messages between myself and Toto or any of his >alleged nyms. (My backups may have old messages, but I've been trying to >find them all and destroy or recopy them sans the Toto messages.) > >I advise any of you with links to the idea of anonymous murders and AP to >do the same. Soon. Tim, Betty Currie will be by to pick up the rest of the backup tapes...

1 0

bug in my Maurer code; retraction of claim; ref
by David Honig 17 Dec '03

17 Dec '03

There was a numerical bug in the C code for Maurer's Univ. Stat. Test for Randomness which I posted. The "float" variable "Sum" should be "double". This will cause an incorrect input-size dependence for large >40Mbyte files. Measuring (with the fixed version) the output of a block cipher in feedback mode, I find that it DOES NOT differ from truly nondeterministic noise, as I had claimed. The difference I had observed was due to a larger sample size for my cipher-noise. Boy do I feel stupid. Needless to say, sorry about any inconvenience. The fixed code follows at the bottom. This version also spits out an early estimate after a million samples; this turns out to be very close to the final value for (homogenous) large samples. Also: I recently found the following amendment to Maurer's work at http://www.eleves.ens.fr:8080/home/coron/escience.html#1 Abstract. Maurer's universal test is a very common randomness test, capable of detecting a wide gamut of statistical defects. The algorithm is simple (a few Java code lines), flexible (a variety of parameter combinations can be chosen by the tester) and fast. Although the test is based on sound probabilistic grounds, one of its crucial parts uses the heuristic approximation: c(L,K) = 0.7 - 0.8/L + (1.6 + 12.8/L)K-4/L In this work we compute the precise value of c(L,K) and show that the inaccuracy due to the heuristic estimate can make the test 2.67 times more permissive than what is theoretically admitted. Moreover, we etablish a new asymptotic relation between the test parameter and the source's entropy. 09/08/98 - Jean-Sébastien Coron ..................................... /* UELI.c 28 Oct 98 This implements Ueli M Maurer's "Universal Statistical Test for Random Bit Generators" using L=16 Accepts a filename on the command line; writes its results, with other info, to stdout. Handles input file exhaustion gracefully. Ref: J. Cryptology v 5 no 2, 1992 pp 89-105 also on the web somewhere, which is where I found it. -David Honig honig(a)sprynet.com Built with Wedit 2.3, lcc-win32 http://www.cs.virginia.edu/~lcc-win32 26 Sept CP Release Version Notes: This version does L=16. It evolved from an L=8 prototype which I ported from the Pascal in the above reference. I made the memory usage reasonable by replacing Maurer's "block" array with the 'streaming' fgetc() call. 27 Oct 98 compiled under Sun cc OK if C++ stuff taken out.. 28 Oct 98 made "Sum" into a double, from float; fixes a bug found with larger (40M files); reposted with retraction. Usage: ULI filename outputs to stdout */ #define L 16 // bits per block #define V (1<<L) // number of possible blocks #define Q (10*V) // at LEAST 10 * V, to assure each block seen #define K (100*Q) // at LEAST 100 * Q, as large as possible #define MAXSAMP (Q + K) #include <stdio.h> #include <math.h> int main( int argc, char **argv ) { FILE *fptr; int i; int b, c; int table[V]; double sum=0.0; int run; // Human Interface printf("UELI 27 Oct 98 double-precision, with early value\n L=%d %d %d \n", L, V, MAXSAMP); if (argc <2) {printf("Usage: ULI filename\n"); exit(-1); } else printf("Measuring file %s\n", argv[1]); // FILE IO fptr=fopen(argv[1],"rb"); if (fptr == NULL) {printf("Can't find %s\n", argv[1]); exit(-1); } // INIT for (i=0; i<V; i++) table[i]=0; for (i=0; i<Q; i++) { b= fgetc(fptr)<<8 | fgetc(fptr); table[ b ]=i; } printf("Init done\n"); // COMPUTE run=1; for (i=Q; run && i<Q+K; i++) { // COMPOSE A 16-bit quantity b=fgetc(fptr); c=fgetc(fptr); if (c<0 || b<0) run=0; if (run) { b = b<<8 | c; sum += log( (double) ( i-table[b] ) ) ; table[ b ]=i; } if (i==1000000+Q) printf("Early measurement after %d samples = %g\n\n", i-Q, (sum/( (double) (i-Q) ) ) / log(2.0)); } if (!run) printf("Premature end of file; read %d blocks.\n", i-Q); sum = (sum/( (double) (i-Q) ) ) / log(2.0); // i should be K if enough samples printf("%s fTU= %g\n\n", argv[1], sum); printf("Expected value for L=16 is 15.167379 \n"); // Add further interpretation/thresholding of the number of sigmas from expected, // and include the fudge factors explained in the paper. } // end

1 0

Re: log files (was: Re: dbts: Cryptographic Dog Stocks, The Dirigible Biplane, and Sending the Wizards Back to Menlo Park )
by Lynn.Wheeler＠firstdata.com 17 Dec '03

17 Dec '03

in fact, large number of security studies show that variety of operations are at greatest risk from insiders.

1 0

RE: UK police chase crooks on CCTV (fwd)
by Brown, R Ken 17 Dec '03

17 Dec '03

> So when are they going to arrest Gorby and Fidel? They killed more people. Castro I assume the moment he steps foot in the USA other than on a diplomatic mission. I've no idea about Gorbachev, I assume as a KGB official he was party to the same sort of behaviour as Pinochet was, but when he got to the top at least he didn't make things worse. Anyway, what about Oliver North? And since when did our inability to catch all criminals stop us prosecuting the ones we can catch? It looks like Pinochet will probably get released in England because of the vile, immoral, doctrine of "sovereign immunity", i.e. that people in office don't get prosecuted for crimes committed as part of the job. But it was still fun to see him caught. The real reason Pinochet ought to have the wind put up him is exactly *because* what he did seemed to have worked and was taken to be worth doing by some people who should know better. Everybody knows that the CPSU or the Nazis or Bokassa or Idi Amin or the Ba'athists are or were tyrants who ruined their countries and lot more besides. The very fact that some people who once had political credibility, like Thatcher or Bush, support Pinochet is exactly the reason why he should be tried. We need to draw a line between tolerable and intolerable government and put his lot on the other side of it. You have to know what the threats to liberty are. Old Soviet-style "Communism" is hardly on the menu in any European or North American country these days and out-and-out looney Naziism isn't either (but that doesn't mean we shouldn't keep our eyes open) Our direct problems are interfering governments, bad measures taken for good ends, corporate power over private individuals, business power over workers and customers, and "law and order" (or the "War against Drugs/Paedophiles/Communists/Dangerous Dogs/Liberals/Scroungers" or whatever). Thin end of the wedge, slippery slope, foot in the door and all that. And even if Pinochet's ends my have been good his means were as bad as they come. His sort of ultra-nationalist, militarist authoritarian government that pays lip service to libertarianism whilst using brutal methods to enforce conformity, obedience and uniformity is still a threat today. It bubbles under the surface in the blue-rinse wing of the British Tory Party, and is quite explicity the line of the French Front National (the British National Front are genuine Nazis, and pretty marginalised, but the FN get real votes in France) And when they get the upper hand then the cattle-prod wielders and the toe-nail-pullers and the death squads come out of the woodwork. Margaret Thatcher wasn't any kind of fascist, but the differences are quantitative, not qualitative. She wasn't so far from Pinochet, Pinochet wasn't so far from Franco and Franco wasn't so far from hell. Ken Brown (whose bosses not only have nothing to do with this note & wouldn't approve of it if they did, but probably voted for some of the people the first draft ranted against)

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 excuse this bandwidth. me -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.0 for non-commercial use <http://www.pgp.com> iQA/AwUBNjiEBHUkEFXvH2ZAEQJ11wCdEEcGeWaOWjrNZ2e22a0Q5WtRMtIAmwQH JkSiA2UUrB6pahgHqA0dvIYc =8qn4 -----END PGP SIGNATURE-----

1 0

Re: Random array (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 29 Oct 1998 17:33:29 +0100 > From: Anonymous <nobody(a)replay.com> > Subject: Re: Random array > A couple responders have said there is no SWAP_TIMES > which would work. But I don't understand why the > following wouldn't work: > > First of all, make sure that x and y can't be equal, since > there's no point in swapping an element with itself. This > should add a negligible amount of time. > > x=getrand(); > do > y=getrand(); > while (x == y); > > Now, simply calculate how many SWAP_TIMES it would take for it > to be equally as likely that an element would not be touched as > it would to land in its original spot. > > (255/256)^(t*2) = 1/256 > > or > > t = ln(1/256)/(2*ln(255/256)) > > or > > 708.3955 > > > Another anonymous wrote: > > In the following snippet of pseudo-code, what should the value of > SWAP_TIMES be to make the array A[] random, assuming > that getrand() returned a truly random integer between > 0 and 255 > > A[256]; > > for(i=0;i<SWAP_TIMES;i++){ > x=getrand(); > y=getrand(); > swap(A[x],A[y]); > } > > Thanks > Actualy the optimal value is even easier to calculate. Given an initial array, A(m), and the desire to randomly swap the contents until there is sufficient entropy to pass the various statistical tests leaves us with: Given m initial element and we are swapping them two at a time then we need to execute at most m/2 swaps to randomize the array. So, the optimal SWAP_TIMES ends up being, in this case, 128. This of course doesn't touch on the new rule above about testing for x=y. In which case you could simply do it over again. Now given that there are m elements and the odds of selecting any given one is 1/n and the odds of selecting it twice at one time is 1/n^2. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

IP: One Million Sign Petition to Kill IRS Code
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: One Million Sign Petition to Kill IRS Code Date: Thu, 29 Oct 1998 19:47:24 -0600 To: believer(a)telepath.com Source: US Newswire http://www.usnewswire.com/topnews/Current_Releases/1028-112.txt NFIB: One Million Sign Petition to Kill IRS Code U.S. Newswire 28 Oct 12:00 NFIB: Petition to Kill IRS Code Hits Million Signature Mark To: National Desk Contact: Jim Weidman of the National Federation of Independent Business, 202-554-9000 SAN DIEGO, Calif., Oct. 28 /U.S. Newswire/ -- The National Federation of Independent Business (NFIB) today reached a milestone in its drive to abolish the federal tax code and replace it with a simpler and fairer system. At a downtown rally here today, NFIB President Jack Faris announced that the national petition drive calling on Congress to sunset the current IRS code had collected its one-millionth signature. Onlookers cheered as Faris placed the landmark signature atop an 18-wheeler stacked with scores of boxes bearing signed petitions collected during the group's year-long campaign. Labeling the petition drive "the most ambitious tax reform initiative since the Boston Tea Party," Faris expressed thanks to the more than 30,000 small-business owners who served as "volunteer captains, collecting signatures on Main Streets throughout the country in this unprecedented grassroots effort to restore reason to our tax system." The nation's leading small-business advocacy group, NFIB has 600,000 members nationwide. "We now have 1 million reasons for Congress and the president to do what's right for small business, and what's right for America," Faris said to a crowd of hundreds who gathered in front of an IRS office building for the tax reform event. "These first 1 million petitions will serve as the symbol as well as the fuel that keeps this effort to abolish the code going strong. We won't give up!" Faris also added that "NFIB will continue to gather petitions and grassroots support, because Washington sees the light when they feel the heat from Main Street." Faris outlined his group's plan for action in the 106th Congress: "NFIB will continue to stand up for small business on this issue and others. We will be a catalyst, urging Congress to sunset the IRS code as the first step toward responsible tax reform, so that the new century may begin under transition to a new tax system." Noting that the nation's economy is strong, and economic optimism is high, Faris said, "This is the right time for Congress and the president to answer the call from grassroots America and replace our broken tax code. To ignore that call -- at a time when we are able to answer it -- would be irresponsible. One million signatures can't be ignored." The San Diego rally was the latest event in NFIB's ongoing "Campaign for Responsible Tax Reform," which was kicked off one year ago in Independence, Mo. Today's event was simulcast live on the Roger Hedgecock Show on KSDO-AM (1130) and KOGO-AM (600). ----- For a copy of NFIB's Seven Steps to Responsible Tax Reform, or any other materials related to the campaign, visit NFIB's special Web site at www.not4IRS.org. -0- /U.S. Newswire 202-347-2770/ 10/28 12:00 Copyright 1998, U.S. Newswire ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- **************************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address or (un)subscribe ignition-point-digest email@address **************************************************** www.telepath.com/believer ****************************************************

1 0

IP: FCC Proposes Location Tracking for Wireless Phones
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: Ari Schwartz <ari(a)cdt.org> Subject: IP: FCC Proposes Location Tracking for Wireless Phones Date: Wed, 28 Oct 1998 11:12:21 -0500 (EST) To: policy-posts(a)cdt.org The Center for Democracy and Technology /____/ Volume 4, Number 27 ---------------------------------------------------------------------------- A briefing on public policy issues affecting civil liberties online ---------------------------------------------------------------------------- CDT POLICY POST Volume 4, Number 27 October 28, 1998 CONTENTS: (1) FCC Proposes Location Tracking for Wireless Phones (2) Public Comment Sought - CDT Launches Citizen Action Site (3) FCC Opens Inquiry into Wiretapping in Packet Networks (4) Other Surveillance Features (5) Subscription Information (6) About CDT ** This document may be redistributed freely with this banner intact ** Excerpts may be re-posted with permission of <ari(a)cdt.org> _____________________________________________________________________________ (1) FCC PROPOSES LOCATION TRACKING FOR WIRELESS PHONES Rejecting privacy arguments, the Federal Communications Commission on October 22 proposed turning wireless phones into location tracking devices. Ruling under the Communications Assistance for Law Enforcement Act of 1994 (CALEA), the Commission proposed requiring cellular and other wireless phone companies to track the location of their customers, identifying the cell site at the beginning and end of every call. This decision, if finalized, would allow the FBI to get out of the privacy deal it struck in 1994 when CALEA was adopted. At the time, the FBI said that location information was not required by CALEA, and the Congressional intent is 100% clear on the point. For background on CALEA and the FCC's proceeding, see CDT's digital telephony page: http://www.cdt.org/digi_tele/ _____________________________________________________________________________ (2) PUBLIC COMMENT SOUGHT - A CHANCE TO TELL THE FCC THAT CELL PHONE TRACKING IS NOT ACCEPTABLE! The FCC decision on cell phone tracking is only a tentative decision, known as a Notice of Proposed Rulemaking. The Commission is seeking public comment on its proposal. The public comment period has not been set, but could be between 30 and 60 days. Until now, the discussion on this issue has been held by policy-makers in Washington, but this decision will affect the entire nation. Since this will likely be the only chance for those outside the beltway to weigh in with a comment, CDT urges citizens to let their voice be heard. CDT has established a special "Action" page to make it easy for citizens to contact the FCC and file comments opposing the location tracking proposal: http://www.cdt.org/action/filing.html _____________________________________________________________________________ (3) FCC LAUNCHES INQUIRY INTO WIRETAPPING IN PACKET NETWORKS On a separate issue in the same CALEA proceeding, the Commission agreed with CDT and other privacy advocates. The FCC said that industry's initial plan for conducting surveillance in so-called "packet" networks was insufficient, and the Commission asked for further technical and legal comment. Packet networks break communications up into many small packets, each one consisting of a segment of content with addressing information attached to rout it to its intended destination. Under the industry's proposal, carriers could have provided to the government a person's entire packet stream, including both routing information and content, even when the government did not have the authority to intercept the content of the communications. CDT argued that the carriers should be required to separate addressing information from the content of communications and only give the government what it was authorized to intercept. The Commission decided that it needed to launch a technical inquiry. This could determine the future of surveillance. The question is whether carriers have an obligation to protect the privacy of communications the government is not authorized to intercept. For CDT's discussion of the packet issue, see: http://www.cdt.org/digi_tele/980426_fcc_calea.html#ivc _____________________________________________________________________________ (4) OTHER SURVEILLANCE FEATURES PROPOSED On other items sought by the FBI, the Commission tentatively decided that carriers should be required to continue tapping parties on a conference call after the subject of the court order has dropped off the call, and to extract dialed number information from the content stream and provide it to the government under a minimal standard. In all, the Commission tentatively accepted five out of nine new surveillance capabilities sought by the FBI. As of today, only a sumamry of the Commission's decision, not the full NPRM, was not publicly available. CDT will make the full text of the NPRM available on-line as soon as it becomes public. ____________________________________________________________________________ ____ (5) SUBSCRIPTION INFORMATION Be sure you are up to date on the latest public policy issues affecting civil liberties online and how they will affect you! Subscribe to the CDT Policy Post news distribution list. CDT Policy Posts, the regular news publication of the Center For Democracy and Technology, are received by Internet users, industry leaders, policymakers and activists, and have become the leading source for information about critical free speech and privacy issues affecting the Internet and other interactive communications media. To subscribe to CDT's Policy Post list, send mail to majordomo(a)cdt.org In the BODY of the message (leave the SUBJECT LINE BLANK), type subscribe policy-posts If you ever wish to remove yourself from the list, send mail to the above address with NOTHING IN THE SUBJECT LINE AND a BODY TEXT of: unsubscribe policy-posts ____________________________________________________________________________ ____ (6) ABOUT THE CENTER FOR DEMOCRACY AND TECHNOLOGY/CONTACTING US The Center for Democracy and Technology is a non-profit public interest organization based in Washington, DC. The Center's mission is to develop and advocate public policies that advance democratic values and constitutional civil liberties in new computer and communications technologies. Contacting us: General information: info(a)cdt.org World Wide Web: http://www.cdt.org/ Snail Mail: The Center for Democracy and Technology 1634 Eye Street NW * Suite 1100 * Washington, DC 20006 (v) +1.202.637.9800 * (f) +1.202.637.0968 ---------------------------------------------------------------------------- End Policy Post 4.27 10/28/98 ---------------------------------------------------------------------------- ------------------------------------ Ari Schwartz Policy Analyst Center for Democracy and Technology 1634 Eye Street NW, Suite 1100 Washington, DC 20006 202 637 9800 fax 202 637 0968 ari(a)cdt.org http://www.cdt.org ------------------------------------ **************************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address or (un)subscribe ignition-point-digest email@address **************************************************** www.telepath.com/believer ****************************************************

1 0