December 2003 - cypherpunks-legacy

No Subject
by news 17 Dec '03

17 Dec '03

Connect Free Newsletter November/December 98 Connect FREE would like to wish all our customers a Happy Christmas and a Prosperous New Year Welcome to Connect Free, and thank you for joining our service, we hope you find our third newsletter informative. September and Octobers Newsletter can be viewed on our web site at the bottom of the FREE Internet page. Connect FREE would like to apologise for Novembers Newsletter not being sent out. We were waiting for the upgrade to the Connect FREE network to be completed and the launch of the new services. ---------------------------------------------------------------------------- Upgrades As mentioned in our last newsletter, Connect FREE has now doubled its network capacity, no more engaged tones and a faster connections to the Internet. We have added another 2MB of bandwidth to our network and twice as many modems and lines. Connect FREE can NOW offer V90 connections and is the first FREE ISP to offer 128K ISDN connections. For 128K ISDN, please dial 0845 662 1406 For V90, please dial 0845 662 1506 For customers that connect through Aardvark the number will be For 128K ISDN, please dial 0845 662 1409 For V90, please dial 0845 662 1509 Connect Free is aiming to be not only the first Internet Service Provider to offer FREE Internet access but also the Best ---------------------------------------------------------------------------- POP 3 & SMTP Mail Connect FREE is proud to announce the launch of it's E-mail Service. Connect FREE customers can NOW receive UNLIMITED POP3 e-mail addresses, individually password protected. Example e-mail address: myname(a)connectfree.co.uk and myname(a)anywhere.connectfree.co.uk Sending emails can only be done via a Connect FREE dialup, however you will be able to receive your mail from any other ISP's dialup account. For your Connect FREE e-mail addresses, please go to http://www.connectfree.net/update Coming shortly, FREE Web space ---------------------------------------------------------------------------- Changing your Details on Line Connect FREE has designed a web page so you can alter your details on-line, for example change your email addresses and contact details. To update your details and add additional e-mail addresses please go to http://www.connectfree.net/update ---------------------------------------------------------------------------- Games Server The Connect FREE Games Server has been upgraded and is better than ever before, it also includes Quake II as well as Quake. Please check out the bulletin board on the Games Web Page for dates on matches. ---------------------------------------------------------------------------- FREE Software/FTP Web Site Connect FREE has become a mirror site for TUCOWS, which will be available very shortly. What is TUCOWS? TUCOWS is the UK premier FTP web site for FREE PC Internet software, and because Connect FREE users will be able to connect direct to the server at Connect FREE, bypassing the Internet, meaning downloads will be a lot faster then you have ever seen before. The site is also updated on a daily basis, so the latest upgrades are always available. Software available to download includes Internet Explorer, Netscape, Mail packages, FTP software, News hosts. You name it, we got it, and it is all for FREE! ---------------------------------------------------------------------------- Premium Rate Telephone Technical Support Connect Free has launched it's Premium Rate technical support line on 0890 900 0050, sorry but all calls are charged at 50p per minute. The reason for charging 50p per minute is because the Internet connection is free and we need to cover our overheads and staffing cost for the technical support lines, however we are cheaper than most of our competitors. E-mail technical support is still available, obviously this is only useful when you can connect to the Internet. (Please ensure you include you Login ID with any communication) ---------------------------------------------------------------------------- On-line Technical Support If you can connect to the Internet it might be worth while checking out www.connectfree.net/help Connect FREE has designed a very comprehensive technical support web page, which covers a vast amount of topics. Ranging from how to connect and configure Mail, FTP, IRC, CHAT and Browser software to how to design a Web Site and there is some useful tips on solving problems (Well worth a LOOK) Support for MS Windows 3.11 95/98 NT, Apple Mac, and Linux ---------------------------------------------------------------------------- The New Connect FREE Portal Connect FREE are proud to announce the launch of the Connect Free Portal site in association with 2b. A Fantastic site for up-to date News, Weather, Lottery Results, Shopping, Entertainment, Sports and Music. Need a map of any area within the UK, no problem, enter a postcode to receive a map of the area you intend visiting. Searching for a service or where to-go in any area, could not be easier with the Connect FREE Portal. Visit www.connectfree.2b.co.uk ---------------------------------------------------------------------------- FreeServe For all those users out there, who have signed up with FreeServe and would prefer to have the option of which ISP you dial into or maybe have several connections to different ISPs. FreeServe have now decided to offer anyone with a FreeServe connection the ability to uninstall your FreeServe software. Check out http://www.freeserve.net/support/cserve_uninstall.htm ---------------------------------------------------------------------------- Proxy Server: We are still receiving calls on our help line regarding Proxy server settings. Connect FREE does not currently have a Proxy Server, and if your software is configured to look for one then you will go nowhere. If you find that you can connect to our servers without a problem but then find that when you launch your browser you cannot access any web pages or performance is very slow, then you probably have the Proxy Server setting enabled. To Disable (Win95/98): Control Panel, Internet, and Connection, Un-tick the Proxy Server settings. ---------------------------------------------------------------------------- SantaCalls Wouldn't your child, grandchild, godchild, nephew or niece just love a personal call from Santa this Christmas? In association with the Variety Club we are asking our users to visit their Santa Calls Web site. The idea is that mums and dads can enter the details of their children i.e. names of pets and things they would like for Christmas etc and then Santa actually phones the child and has a chat. The kiddie is totally convinced because Santa is armed with all their details - and who knows little Johnny might just clean that hamster out a bit more often when he knows Santa is watching! Visit Santa Calls at http://www.santacalls.org/ ---------------------------------------------------------------------------- Improvements Connect Free would like to hear from you, if youhave any suggestions on how we may improve our service, or adding more content to the Connect Free web site. It is Connect Free policy not to send unwanted rubbish by e-mail or junk advertising by any other means. All we ask is that you receive our monthly newsletter informing you of any changes to the service and any new service that may come available which you may benefit from. ---------------------------------------------------------------------------- Contact us at info(a)connectfree.net Telephone: 0870 742 1111 (Calls charged at the current national call rate)

1 0

Re: Anyone Striking?
by John Kelsey 17 Dec '03

17 Dec '03

> From: Perry E. Metzger <perry(a)piermont.com> > To: James Glave <james(a)wired.com> > Cc: Robert Hettinga <rah(a)shipwright.com>; cypherpunks(a)toad.com; cryptography(a)c2.net; dcsb(a)ai.mit.edu > Subject: Re: Anyone Striking? > Date: Monday, December 14, 1998 10:06 AM > James Glave writes: > > Anyone participating in the strike today? I'd like to possibly visit this > > with a news story... > > I find it exceptionally unlikely that many people are participating in > this. Whomever called the thing was not thinking very clearly. You > need at least several weeks notice for such a thing to work, and the > two or three days notice (at most) that was given was way too small. A > strike of this nature might work, but only if someone with political > sense were organizing it. What would be the usefulness of this, anyway? Most of us who know and care about this issue are already working in the field of cryptography or computer security at some level--how will slowing our projects down by a day help our cause? How will refusing to design strong systems that use cryptography send a message to the government that their meddling won't keep us from designing such systems? > Perry --John Kelsey, kelsey(a)counterpane.com / kelsey(a)plnet.net NEW PGP print = 5D91 6F57 2646 83F9 6D7F 9C87 886D 88AF

1 0

WEAK3-EX -- A Layman's 56-bit Data Encryption Algorithm
by Mok-Kong Shen 17 Dec '03

17 Dec '03

In the previous products of my WEAK series of data encryption algorithms I have very strongly exploited the possibility of using arbitrarily long keys. Since this conflicts with the recent requirement of using 56-bit keys, a new program, WEAK3-EX, has been designed specifically for users that can only use 56-bit encryption keys. The design draws upon various techniques that have been accumulated in the course of the development of the previous WEAK3-E. Besides employing constant length 56-bit keys, a new feature that is introduced in WEAK3-EX is a user choosable scaling factor for the initialization time of the algorithm. Normally the initialization time of crypto algorithms are small and is for obvious reasons to be reduced as far as technically possible. In fact, the initialization time of almost all known encryption algorithms is negligible compared to the proper record processing time. Our algorithm, which contains author's compound PRNG, is however an exception to the rule. For, depending on the number of the constituent generators of the compound PRNG used, this can under circumstances indeed attain a non-trivial value. This is till present a necessary evil of our WEAK3-E which now fortunately in the special case of key length restriction (with the obvious accompanying unfavourable strength reduction effect) can be turned into a virtue of our new WEAK3-EX. In fact, if the (variable) parameters to be chosen by the user (in particular the number of rounds) of our algorithm are adequate, brute force would be the only feasible method of attack. Now the average time for brute force is equal to the time of running a single encryption/decryption process multiplied by one half of the size of the key space. If the initialization time of the algorithm is increased, the time for brute forcing correspondingly increases so that through suitable choice of the said scaling factor it can reach practically infeasible value for analysis without however on the other hand rendering the total processing time of the user (which of course also augments) to amounts entirely inacceptable for him. (The multiplying factor of one half of the key space is the leverage we exploit here.) Technically, the scaling factor determines the number of pseudo-random numbers retrieved from the shuffling buffer (of Bays and Duncan) that are to be combined into one pseudo-random number through the addition mod 1 operation (device of Wichmann and Hill) for subsequent utilization in building up the constituent generators of author's compound PRNG. The larger the scaling factor, the longer it will take to build up the compound PRNG. The multiple-seed standard PRNG employed in WEAK3-E is abandoned in WEAK3-EX in order to comply with the 56-bit key restriction. In its place is a standard PRNG that consists of two internal (single-seed) PRNGs which are activated alternatingly and which each accepts a seed of 28 bits, totalling 56 bits. An implementation in Fortran 90 is given in http://www.stud.uni-muenchen.de/~mok-kong.shen/#paper13 Both source and a binary executable file for PC can be downloaded via my main Web page. I wish to thank CWL and ZFS for suggesting the use of the scaling factor. Constructive critiques, comments and suggestions for improvements are sincerely solicited. M. K. Shen P.S. For space and obvious reasons, I plan to remove the code and binaries of WEAK1, WEAK2, WEAK3 and WEAK3-E from my Web page this Friday, leaving in future WEAK3-EX the single encryption software accessible.

2 2

Easy Money $$ <<Work At Home Jobs>> Stuffing Envelopes: $3 Per Envelope, Guaranteed!
by bob＠usa.net 17 Dec '03

17 Dec '03

Read how you can earn $3 for each envelope that you fill with my sales materials from your own comfortable home- 100% Totally Guaranteed!! <<<< STUFF 1000 ENVELOPES AND GET PAID $3000! >>>> "If you stuff 1000 envelopes with our sales materials, you are guaranteed to be paid $3000 in cash" Hello Friend and Job seeker, Are you looking to be your own boss, interested in creating and controlling your own work hours/schedule, and working from your comfortable home? How about making more money in a week than you currently make in a month? Do you want to stop struggling for the low wages you are currently earning? Can you find the time to put our sales materials in 1000 envelopes and make $3000 in cash? How about 2000 envelopes for $6000 in cash? (you decide as there is no limit: we want to send out our materials continuously and abundantly) If you have answered yes to any of these questions... Let me be the first to welcome you to BETTER SOLUTIONS. My name is Andrew Devore, President of Better Solutions. I have perfected a method that allows you to earn $3 per envelope that you stuff with my sales materials. And for a limited time, I am seeking out people just like you who wish to have more financial security, greater amounts of spending money, an improved standard of living, and a desire to work at home. <<An Explanation of Why I Need your Assistance.>> We would like to mail our offers out to hundreds of thousands of people in the U.S. And if we have home workers handle the jobs of stuffing and mailing, we save big money on overhead, extra office spaces, and having to hire more staff. THIS SYSTEM IS UNBELIEVABLY EASY TO USE: Absolutely anyone can do this. You can be young or old, with or without a college degree. You do not need any special training or even a high school diploma. It also doesnt matter where you live. I am not kidding, it is really that simple. And the greatest news of all, there is no limit on how many envelopes you want to stuff. If you stuff 300 envelopes, you will get paid $900 cash! If you stuff 1000 envelopes, you will be paid $3000 cash. You just need to follow word for word my straight-forward instructions and you will get paid...every single time...Guaranteed! My method will even show you how to get the envelopes with the addresses and stamps already on them. This means, no addressing of envelopes or licking of stamps is required! Simply fill the envelopes with my sales materials, put them in the mail box and youll get $3 for every single one...Guaranteed! I have taken the measures to make things as simple and easy as possible for you. DON'T RISK MISSING OUT! I am seeking a limited number of home workers, and I will stop accepting orders as soon as I get enough home workers in your area. To avoid losing out on the chance to be one of our home workers, order your "$3 per Enveloped System". The cost of this system is only $55. Included is everything you need to start making money immediately with easy step by step instructions and supplies to get you started. And remember, after stuffing only 21 envelopes youll have earned more than your investment back. 45 Day Money Back Guarantee!!! You have a full 45 days (that is six weeks) to use the "$3 dollar per envelope system". If you have not realized the money making potential of this system within this time, simply return the materials and youll receive an immediate refund...no questions asked!! Sincerely, Andrew W. Devore, President Better Solutions Important note: There are two choices before you. You can place this letter in your pile of junk mail and return to the same old routine. Or you can order my system to solve all your money problems starting immediately! We both know that procrastination never leads to any kind of success. So, if you are serious about making money from home, order my system within 10 days and I'LL GIVE YOU 50% OFF. This means youll get the "$3 per envelope system" for only $27.50 (instead of the regular $55). To qualify for this special discount, you must order within 10 days. Please fill out the 50% Risk-Free Order Form and mail it in now. Dont put it off. Just do it! ----------------------------------------------------------------- PRINT OUT THE FORM BELOW ----------------------------------------------------------------- If you are signing-up within 10 days, your cost is only $27.50. If not, please fill out this form and enclose the regular $55. Welcome aboard!! Please mail payment to: Better Solutions 2065 Rodney Dr. Suite 105 Dept.410 LA CA 90027 *50% OFF RISK-FREE ORDER FORM* First Name________________Last Name __________________________ Mailing Address____________________________________________________ City______________________________State______Zip_________________ Phone ( ) _____________Email Address_________________ Where You Read About Better Solutions?____________ $ Amt. Enclosed?____________ (Circle One)Paying by: Check Money Order Credit Card (WE ACCEPT Visa, Mastercard, Discover, or American Express) Type of card (e.g.Visa)_________________Card#______________________________ Expiration Date________________$ Amount(Circle One)? $55 $27.50 I am legally authorized to make purchases using this card. After the 45 day guarantee, I forfeit my right to chargeback and request a reversal of charges for this credit card purchase. Signature___________________________Date_________________________ Please Note: If you pay by money order, your order will be processed immediately and sent out the next day. We wait for all checks to clear so there will be a 7-14 day delay on your order being processed. Credit cards clear faster than checks but slower than money orders. If you are paying by credit card, all the information must be there for order to be processed!

1 0

Re: I must admit. . . (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 14 Dec 1998 19:14:05 -0600 > From: mib <mib(a)io.com> > Subject: Re: I must admit. . . > On Mon, Dec 14, 1998 at 12:25:50PM -0800, you wrote: > > I wonder sometimes whether or not there is hope for us to ever stop > > this tyrrany. I've seen a bunch of us diss the strike saying it was > > an outlandish and foolish idea, but I hadn't seen anyone of you come > > up with something better. > > Cypherpunks write code? It's too bad they don't publish some of it in a newspaper or two... ____________________________________________________________________ What raises the standard of living may well diminish the quality of life. The Club of Rome The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

How to Win!!
by Della7079＠aol.com 17 Dec '03

17 Dec '03

LUCKY SLOTS!! HOW TO BEAT THE CASINO BANDITS Dear Thrill Seeker, Everybody loves to play the slots. But just about everybody LOSES when they play the slots. This book has news for you. SLOT MACHINES CAN BE BEATEN!! You can now "disarm" the Bandits! Here's a book that gives you all the necessary tips, strategies and techniques you need to boost your winnings by 100%-AND MORE. Here under one cover you are given the hard rules for overcoming the bandits, rules that you'll be able to employ now- IMMEDIATELY! You will learn all you need to know about slots, so much so that you will win and win and win! Pick machines that yield the biggest wins make adjustments to conserve your bankroll quit before your hot streak fades learn how casino slots are set how odds are calculated locations of "loose" & "tight" machines locating casinos where winning is easier. IMAGINEI Thousands of slot machines at your disposal just waiting to be plucked. Machines with jackpots of $50,000, $100,000, yes, even a MILLION dollars, sitting there ready to unload their booty. One thing is for sure. You must have some Ape of edge to win at the slot This great book will give you that edge. So buy it, take it with you to the casinos and . . . THE NEXT PULL OF THE HANDLE COULD MAKE YOU A MILLIONAIRE!!! FEATURING 1. SLOTS SLANG 2. TYPES OF SLOTS 3. HOW TO PLAY SLOTS 4. VIGORISH 5. SLOTS AND PERCENTAGES 6. MONEY MANAGEMENT 7. SLOT MATHEMATICS 8. MACHINE CYCLES 9. THE SLOT FLOOR 10. MECHANICAL PROBLEMS 11. RESERVING THE MACHINE 12. SYSTEMS 13. ALL ABOUT JACKPOTS 14. CHOOSING YOUR SLOT 15. PULLING THE HANDLE 16. AMATEURS AND EXPERTS 17. AND MUCH, MUCH MORE! ACT NOW! 30 DAY MONEY-BACK GUARANTEE "For over 20 years I've played the slots as a lark. After reading your book I play for one reason- TO WIN! And that's just what I'm doing. Who said the bandits can't be beaten!!" J. Bresnahan San Diego, CA IT'S EASY TO ORDER! Simply Print Out This Form, Fill Out & Mail Today. YES! I want To Beat the One Arm Bandit please RUSH! Enclosed is my: Check _____ Cash ____ Money Order ____ for $10.00 (Outside of U.S.A. add $5.00 for shipping & handling) Name: _________________________________ Address: _______________________________ City _____________ State_______ Zip_________ E-mail Address: _____________________________ Phone # _________________ MAIL TODAY: GLOBAL DISTRIBUTION P.O BOX 7247 GARDEN CITY, NY 11795 U.S.A.

1 0

The Fallacy of Cracking Contests
by Bruce Schneier 17 Dec '03

17 Dec '03

The Fallacy of Cracking Contests Bruce Schneier You see them all the time: "Company X offers $1,000,000 to anyone who can break through their firewall/crack their algorithm/make a fraudulent transaction using their protocol/do whatever." These are cracking contests, and they're supposed to show how strong and secure the target of the contests are. The logic goes something like this: We offered a prize to break the target, and no one did. This means that the target is secure. It doesn't. Contests are a terrible way to demonstrate security. A product/system/protocol/algorithm that has survived a contest unbroken is not obviously more trustworthy than one that has not been the subject of a contest. The best products/systems/protocols/algorithms available today have not been the subjects of any contests, and probably never will be. Contests generally don't produce useful data. There are three basic reasons why this is so. 1. The contests are generally unfair. Cryptanalysis assumes that the attacker knows everything except the secret. He has access to the algorithms and protocols, the source code, everything. He knows the ciphertext and the plaintext. He may even know something about the key. And a cryptanalytic result can be anything. It can be a complete break: a result that breaks the security in a reasonable amount of time. It can be a theoretical break: a result that doesn't work "operationally," but still shows that the security isn't as good as advertised. It can be anything in between. Most cryptanalysis contests have arbitrary rules. They define what the attacker has to work with, and how a successful break looks. Jaws Technologies provided a ciphertext file and, without explaining how their algorithm worked, offered a prize to anyone who could recover the plaintext. This isn't how real cryptanalysis works; if no one wins the contest, it means nothing. Most contests don't disclose the algorithm. And since most cryptanalysts don't have the skills for reverse-engineering (I find it tedious and boring), they never bother analyzing the systems. This is why COMP128, CMEA, ORYX, the Firewire cipher, the DVD cipher, and the Netscape PRNG were all broken within months of their disclosure (despite the fact that some of them have been widely deployed for many years); once the algorithm is revealed, it's easy to see the flaw, but it might take years before someone bothers to reverse-engineer the algorithm and publish it. Contests don't help. (Of course, the above paragraph does not hold true for the military. There are countless examples successful reverse-engineering--VENONA, PURPLE--in the "real" world. But the academic world doesn't work that way, fortunately or unfortunately.) Unfair contests aren't new. Back in the mid-1980s, the authors of an encryption algorithm called FEAL issued a contest. They provided a ciphertext file, and offered a prize to the first person to recover the plaintext. The algorithm has been repeatedly broken by cryptographers, through differential and then linear cryptanalysis and by other statistical attacks. Everyone agrees that the algorithm was badly flawed. Still, no one won the contest. 2. The analysis is not controlled. Contests are random tests. Do ten people, each working 100 hours to win the contest, count as 1000 hours of analysis? Or did they all try the same things? Are they even competent analysts, or are they just random people who heard about the contest and wanted to try their luck? Just because no one wins a contest doesn't mean the target is secure...it just means that no one won. 3. Contest prizes are rarely good incentives. Cryptanalysis of an algorithm, protocol, or system can be a lot of work. People who are good at it are going to do the work for a variety of reasons--money, prestige, boredom--but trying to win a contest is rarely one of them. Contests are viewed in the community with skepticism: most companies that sponsor contests are not known, and people don't believe that they will judge the results fairly. And trying to win a contest is no sure thing: someone could beat you, leaving you nothing to show for your efforts. Cryptanalysts are much better off analyzing systems where they are being paid for their analysis work, or systems for which they can publish a paper explaining their results. Just look at the economics. Taken at a conservative $125 an hour for a competent cryptanalyst, a $10K prize pays for two weeks of work, not enough time to even dig through the code. A $100K prize might be worth a look, but reverse-engineering the product is boring and that's still not enough time to do a thorough job. A prize of $1M starts to become interesting, but most companies can't afford to offer that. And the cryptanalyst has no guarantee of getting paid: he may not find anything, he may get beaten to the attack and lose out to someone else, or the company might not even pay. Why should a cryptanalyst donate his time (and good name) to the company's publicity campaign? Cryptanalysis contests are generally nothing more than a publicity tool. Sponsoring a contest, even a fair one, is no guarantee that people will analyze the target. Surviving a contest is no guarantee that there are no flaws in the target. The true measure of trustworthiness is how much analysis has been done, not whether there was a contest. And analysis is a slow and painful process. People trust cryptographic algorithms (DES, RSA), protocols (Kerberos), and systems (PGP, IPSec) not because of contests, but because all have been subjected to years (decades, even) of peer review and analysis. And they have been analyzed not because of some elusive prize, but because they were either interesting or widely deployed. The analysis of the fifteen AES candidates is going to take several years. There isn't a prize in the world that's going to make the best cryptanalysts drop what they're doing and examine the offerings of Meganet Corporation or RPK Security Inc., two companies that recently offered cracking prizes. It's much more interesting to find flaws in Java, or Windows NT, or cellular telephone security. The above three reasons are generalizations. There are exceptions, but they are few and far between. The RSA challenges, both their factoring challenges and their symmetric brute-force challenges, are fair and good contests. These contests are successful not because the prize money is an incentive to factor numbers or build brute-force cracking machines, but because researchers are already interested in factoring and brute-force cracking. The contests simply provide a spotlight for what was already an interesting endeavor. The AES contest, although more a competition than a cryptanalysis contest, is also fair Our Twofish cryptanalysis contest offers a $10K prize for the best negative comments on Twofish that aren't written by the authors. There are no arbitrary definitions of what a winning analysis is. There is no ciphertext to break or keys to recover. We are simply rewarding the most successful cryptanalysis research result, whatever it may be and however successful it is (or is not). Again, the contest is fair because 1) the algorithm is completely specified, 2) there are no arbitrary definition of what winning means, and 3) the algorithm is public domain. Contests, if implemented correctly, can provide useful information and reward particular areas of research. But they are not useful metrics to judge security. I can offer $10K to the first person who successfully breaks into my home and steals a book off my shelf. If no one does so before the contest ends, that doesn't mean my home is secure. Maybe no one with any burgling ability heard about my contest. Maybe they were too busy doing other things. Maybe they weren't able to break into my home, but they figured out how to forge the real-estate title to put the property in their name. Maybe they did break into my home, but took a look around and decided to come back when there was something more valuable than a $10,000 prize at stake. The contest proved nothing. Gene Spafford wrote against hacking contests. http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/old-issues/issue9602 Matt Blaze has too, but I can't find a good URL. ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

3 2

NSA Electronic Sheriff
by John Young 17 Dec '03

17 Dec '03

>From a new report: "Cybercrime, Cyberterrrorism, Cyberwarfare" Tomorrow's frontline commanders will be drawn from the ranks of computer wizards. The sandal culture is challenging the wingtips. The National Security Agency's (NSA) new electronic sheriff, responsible for protecting NSA's ground stations, is a 23-year-old GS-14. In the civilian sector, "techies" have moved into senior management positions. http://jya.com/cyber-trip.htm

2 1

FW: Information about Algorithmic hash
by Shrinidhi 17 Dec '03

17 Dec '03

Hi all, Can any one tell where can I find info about Algorithmic hash

1 0

DARPA's Active Network page (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 15 Dec 1998 17:50:56 -0500 > From: Robert Hettinga <rah(a)shipwright.com> > Subject: DARPA's Active Network page > I saw an article on this in InfoWorld. NAI/TIS and DARPA talking about > putting self-switching packets into the network. I don't see this as too > far off from packets purchasing their passage across the network with > micromoney of some kind. How does the packet know what is a good price or a bad price as it makes each hop? Whose processor is it using to run its program to evaluate the costs? Who pays for that processor cost on a node that isn't selected? Who has access to the audit trail? How does a reliable copy get back to the originator? How does it do this in an anonymous network? ____________________________________________________________________ What raises the standard of living may well diminish the quality of life. The Club of Rome The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1