December 2003 - cypherpunks-legacy

JOB POSTING: InterNex
by geoffw＠nexsys.net 17 Dec '03

17 Dec '03

Forgive my posting this here but I figure that I might just get someone who has the skillset and the sensibilities to understand the potential future issues that a service provider might have to deal with around "privacy issues" anyway: --------------------------------------------------------------------------- MANAGER OF NETWORK OPERATIONS [This is NOT an entry level position] InterNex is seeking a versatile and dynamic individual to be a hands-on senior technical leader in our rapidly growing Network Operations Center. This multifaceted job will involve all aspects of network and system administration and management in a TCP/IP based, public internet. You will have a leadership role in the design and construction of a wide area internet that incorporates high bandwidth technologies such as ISDN, Frame Relay, T1, SMDS, and ATM. You will participate in the design, construction, and maintenance of a variety of network devices and software that generate and sustain the growing area of Cyberspace for which InterNex is responsible. You will also support in-house development, including creating tools to facilitate network management, perform connection billing, implement bandwidth management, and automate new user configuration. The successful candidate will also provide technical expertise to customers with varying levels of technical sophistication and support other members of the InterNex team. You should have good writing skills and be able to communicate clearly. This job requires proven proficiency with Sun System Administration skills, a solid working knowledge of the IP protocol suite, router configuration, SMTP/Sendmail, SNMP, DNS configuration, Perl, C/C++ program porting, and firewall construction. Experience with Windows, Novell, Macintosh, X.500, ATM are pluses. Knowledge of Telco systems, and project leadership skills are desirable. Commitment to teamwork is an essential aspect of the job. More than four years previous system experience is required. A degree in computer science or a related field is desirable. InterNex is located in the highly desirable mid-peninsula community of Menlo Park. Close to Stanford University, on the edge of Silicon Valley, 35 minutes from the Pacific Ocean and San Francisco. InterNex offers a high quality of life and a team of professionals dedicated to setting new standards of excellence in technology and customer service. Compensation package includes salary, health care and stock options and is based on experience and performance reviews. For immediate consideration, please e-mail your resume (ASCII and postscript) to personnel(a)internex.net, or fax it to (415) 473-3062. No phone calls please. InterNex Information Services is a rapidly growing Internet service provider start-up that specializes in helping businesses do business on the Internet. We provide our customers One-Stop-Shopping for high-bandwidth connectivity utilizing leading edge technology. We also address the need for Internet presence by providing electronic publishing services such as WWW, Gopher, WAIS, FTP, and custom servers. InterNex is an equal opportunity employer.

1 0

Clipper- Who's Fooling Who
by jp＠jep.pld.ttu.ee 17 Dec '03

17 Dec '03

It simply is not possible for them to have ACCIDENTALLY OVERLOOKED such a thing as 16 bit CRC. Let us assume, that 2 distinct users want to initiate clipper connection. They will have their secret keys generated inside chips and as key distribution is not a part of clipper they can happily use DH or whatever to do it, meaning that they still are the only ones to know them. To be able to intercept these keys clipper chips have ( presumably ) skipjack cipher to make LEAFS. Now cipher must take arguments data and key. But we assume, that Chips have Family key, but not Master key ( such a thing would have been nonsense- you cannot rely on one key for all chips ), meaning that they share no global knowledge except SJ algorithm. So, for other chip to make difference between RIGHT and WRONG LEAF it has shared secret, meaning session key and LEAF. What could have been simpler than using these 2 components and SJ to generate cryptographic checksum? Nothing, execpt that this checksum is of no use to goverment- it does not know shared secrets, so it cannot use this checksum anyway. BUt that is not such a big pr oblem - line noise and checksums can be applied externally. So why not use session key and SJ, generate a 80 BIT checksum and append it to LEAF. I do not believe that it would make SJ useless because of cancellation :-) The proposed scheme would look like this: Sa, LEAFa, Sb, LEAFb the session keys and LEAFs of a and b 1. A and B generate and exchange keys 2. A sends to B SJ(LEAFA,Sb), LEAFA 3. B verifyes it and takes into use Sa. ,the same thing in opposite directions. Rather EASY not to implement it. Now they did not do it. Instead they used only 16 bits. Weird. Unless... OK, SJ has no backdoors, but somehow manages to send the parts of LEAF fields maybe 0.5 bits per one SJ coded user data block. (it is always possible to compress data that much ) That would change the things. We would be happy about our checksum and they would be really happy about (us) US. A little media now and then - it's for advertisment. Just think that This 16 bits did not make SJ weaker, meaning people who would have used it for sequrity will do so anyway. The i-do-not-know class will switch over to it because of if-I-want-I-can-crack-it( or buy device or have it installed or whatever). I'm Looking for a partner Someone who gets things fixed Think about it seriosly do you want to get rich? OK for Pet Shop Boys, but NSA??? JP from TTU

1 0

Applied Cryptography
by NetSurfer 17 Dec '03

17 Dec '03

Aloha, CP's: Periodically there have been people seeking copies of Schneier's "Applied Cryptography". I've found a source you can order them from electronically if you are so inclined. "Applied Cryptography", by Bruce Schneier 0-471-59756-2 $44.95 Wiley Books Stacey's Bookstore - staceysbks(a)aol.com Softpro - softpro(a)csns.com Reiter's Scientific & Professional Books - bks(a)reiters.com Quantum Books - quanbook(a)world.sto.com Softpro - softpro(a)world.std.com -NetSurfer #include standard.disclaimer >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> == = = |James D. Wilson |V.PGP 2.4: 512/E12FCD 1994/03/17 > " " " |P. O. Box 15432 |finger for key / Viacrypt Reseller > " " /\ " |Honolulu, HI 96830 |====================================> \" "/ \" |Serendipitous Solutions| Also NetSurfer(a)sersol.com > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

1 0

PC Techniques June/July 1994 V5 #2
by NetSurfer 17 Dec '03

17 Dec '03

The above issue's cover page is on "Encryption - Key to a Secure Future" It has several articles re encryption, and included the Wiley Books section (which also had Applied Cryptography on the cover page of its pull-out section) from which I quoted as a source for the book. On the Editor's Notepad (Page 4) there are two paragraphs of note. "If the cyberpunk {sic their spelling} crowd ever created a medal for mad courage in the face of insuperable odds, that medal should go to John Gilmore, who has just filed a Freedom of Information Act (FOIA) request for _the entire Clipper encryption key database_, now being compiled by the Feds for use in their demented Clipper system. Gilmore and his attorney have studied Clipper and the FOIA in detail and have found no exemptions that would apply to the key database. They've scratched together some donations and are taking the government to court under FOIA for refusing to release the database to them. "The Feds always win, even if they have to break their own laws to do it. Nevertheless, Gilmore & Co. may slow the project down some, and we can all savor the irritation they will doubtless cause the Powers in the process --- Also from the same page: _No Code Overseas_ "Asinine Federal regulations concerning the export of cryptographic tech- nology means that code diskettes for this issue destined for overseas subscribers will not contain any of the encryption-related code. Our First Amendment prevents the Feds from censoring printed material in the magazine, but software on diskette is not protected that way. There's nothing we can do. Vote _against_ your representatives this fall, regardless of party; that's the only thing that gets their attention. On Page 6 Jeff Duntemann KG7JF has another full page re Clipper and gives full and "express permission to freely print and distribute this editorial electron- ically in the cause of defeating the Clipper initiative." On page 12 they list the source as available on Compu$erve GO CLMFORUM and see Lib 16. Also Turbo User Group Library sells the PC Techniques archive listing disks at 206-779-9508. Who knows, they might slip up and have the code available there... On page 24, Bruce Schneier has an article "Secret Sharing" - perhaps if you ask you can get his OK to include it here. Page 35 has an article on "Simple Encryption via XOR" by Mark R. Parker. For those of you feeling the werewolf need to rip something apart in an electronic feeding frenzy, this should keep you sated for a millisecond or two... <hehe> Also, in the June issue of Upside ("The Business Magazine for the Techno- logy Elite" - their title), the Editor-In-Chief, Eric Nee, has a commentary entitled "Keep Big Brother Out." Guess what it is about, kiddies... Over the last few months I've been colleting articles on DSP's from the many trade rags I get. I'd be happy to send one copy to someone who is seriously interested in this and willing to scan them in etc. to share with like-minded CP'sters. Aloha from Paradise {lost} -NetSurfer #include standard.disclaimer >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> == = = |James D. Wilson |V.PGP 2.4: 512/E12FCD 1994/03/17 > " " " |P. O. Box 15432 |finger for key / Viacrypt Reseller > " " /\ " |Honolulu, HI 96830 |====================================> \" "/ \" |Serendipitous Solutions| Also NetSurfer(a)sersol.com > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

1 0

No Subject
by remail＠desert.hacktic.nl 17 Dec '03

17 Dec '03

## Subject: Ignore - message to Pr0duct Cypher -----BEGIN PGP MESSAGE----- Version: 2.3a hIwCwagUhZdVih0BA/0WkeQZFU1ALqa5jAR+IBsbwnTH5053tTbr2jg9cURQxHov Fpj8Z0udacPJXYjK6nRdgGEz8AY1QY3b5e+QAsszDjPIOeOHFqs257K1ih8Wumxd fBCimbGnHAv8kR0d/vEbpxIDFsuniMc0gTqgTrPDeMdpPFHI4QGd+XQ/oheb4qYA AAYa7Q7gq1tTJSHKFM9raFloTVuXXrNWG4bdHCgotC3EZnjojaX7/bpwceQMufH8 l6foC1emtM8ll+fTjdP1I9A62yO+c5xmUyF4dUTXUCUpdAsEV94nHzQLWBTWIUwc Q2xE+2xW2HMkmP2hpM33C2kAOSsw38gP9LV4cG6kWYCB5cwQunmTtOf9zOv3xFh3 qdwnp2pFQlHoLMiR+2gMfI13D0y+5gvI23uSjf4/O7/rBP0n/RZFo527UY5KyM7H U8VFliwnX5BbbCMVEYF7nlTWsMcMbYy8OahdegpPC3A/PtlHhdGAdDkz4zezA7eL OSywePf3XBm1MtWb0C6EHjg9mhiI6PqSCXi94V4bqBV6M+M+DuT4yYYEd1dQkgVr DzvFoP8tuck249B6u3+4y+HahYsZBaT2q4HIx5kzlv7j4gbEDfDzMZlPTrm5bKlb xxDaSg3EbwHIkDj1HRYSkIGQe/WNsmRMqv0b1SESEHaUXnlkmSq7dE10HpGRCibw 4z/xa9mLQYASc3aPLV8QBmIKu0Rd7GKEh006r5vKW9TqzFk3ilrowJq7H3dpC+jr BXikKquoTOkt++aEL6PwsgNbZEP6LylKJVVLZcjij+JUBop3b3NtQgJz+6SZinC8 b1DMYbCXsZPeSc/ky3w3H4lOyNMioJoML+gROaDu3pygcD/SmnIL16G7fCsopXgG ps41w/g5kqGy6us+KEOjSwXeF92pZ94Tk1txPaZneP4pfralfLm0Ym6Lu8y0xc8c tBSqqOxGoBvZDPqZCpSDtEKiB1KJAuSKpNT2mMXsuPdPIA/OmdzxCmdQzLh5j5oi 8xqVH9p34Wm2fHC4pRjCa3jlflu7LaSY6Sv7B/0FSMDx0z0Q9XW3hnIYR+ErxRT7 2ixYIy9cd0R3iZ2dSZs2olra35iUjBcTDP4JcVuYsmxEgRPo3Z/i/O2vrjqcnQel 8RueM5zNILm3pc+yb25g7KDwrkqPuyabm+EdR2+fyCKhWLmkkyAnQ7MJkPFbOn3t rXIufQz8zsT89PosAnXOvEUlsEwhYfj/0mlbvXKIC9a1hWE9e0SOsYzMssekN7/s nPxYTRQqxFs+CyTaxlV1IbOjXc+xLgkPnXaEJn16WsM9I8xTo2nnkyYuWmO77h1N /+xXRjeUn32L3S8oOgXBlnt36JBsh27zLYCBEu86Vxb0pviAu/AGVm4qI3XQ3pbS 7k3h2Iw3ZEUzAJFCxQycZq3IP2VgrGE7zb8BHyctO1+k8BEtGSIq4XWKYDMxCjhj h7o1536+le7I2PnYdGI4i3tiUDB+Pm5C56f6axiZvT0qMvFewWzkr95eklT9ldsB QLmDSIHh3aebmciLpRRN5MUcMtDwBFmkCrnUk0y1Odyl6zXo0YGdmYJSEEj+jdRC vImKxYEdjT65krOXsAQVf7sEQTUW3XFXZI889b9CWZsYtVN0TEZuw8UW2GRxfrZb UgkU/xF40sI2kmsbp5X72pW2k52/yuC4D4IMbLC8IKRPYMl7f4xmBIp1UrvH75Z4 La646SkOfezU4J+dsrWQXI8OAE3gqK831FkFJKI9PmyxZT7dy0LeohHhTps2YT0j J0o6CBopNGlCY2pxO5D1VheojCDuAdgQWOlAjAIF5xmNntMiHf3ics/GUZsexzON vnkctH/xNMPxnPlWC1RNSJVZwKmUraqSfEiThYR98/ZQ2QxAgHbkUEHKJtKcRm/z guwbcAD6YhaofwUF4rYGw0pyN8CIROITGZ3uHoMPM3BCeaum/mhzXd7navaab5m4 WaK/n2TLNJVtJcgfQ6mtq5DuYikMWndM3iKSciLFW1eGTlXGXbdB/WCH2Jvpaf7T yMCp4Dbk/MoasQOmxt6eBr2SWQSG0pfD7ExgroSZSuoC+EgETPAHUuPgUWoyRu1/ bTl53eZNDlN0R3Yir4HxXOaudLKCLXfYRC9doZvHwah1G7rXrJ/bHWtlvq1JAWny M7UzCu/3xFXOdBa20NvXh9AQ5hA8F2JkZVi9qWFk4HA8rNzYIrw+E3i0N81+Pu0G DxwtGZOOYLENpf46eMHibdW1jlgV8Hkyuk7M40I= =z/nc -----END PGP MESSAGE-----

1 0

that is cool
by jp＠jep.pld.ttu.ee 17 Dec '03

17 Dec '03

> According to the NSA talk at MIT last week, the "checksum" is formed > by taking a 16-bit, fixed number (fixed in all chips) and encrypting > it with the session key via some special form of skipjack. > And by doing that add silicon area and new algorithm? Instead of using one that already existed? Concern for Net bandwith ( 16 instead of 80 bits per session ) and stupidity is of cource noteworthy, but i personally think that they have got spy working there, who deliberately disrupts their work to an extent where they just must quit Clipper and say Oh, let us be friends and use DES :) JP from TTU.

1 0

Hints at spoofing given on TCP-IP Listserv...
by NetSurfer 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Sun, 5 Jun 1994 23:46:22 LCL From: William <billw(a)GLARE.CISCO.COM> To: Multiple recipients of list TCP-IP <TCP-IP%PUCC.BITNET(a)cmsa.Berkeley.EDU> Subject: Re: Is IP source routing a bad idea? A correct and bug-free implementation of IP source routing allows any host on the internet to masquerade as any IP address that it would like to, thus breaking any access control based on the source IP address (eg, most of the unix r-utilities.) Exactly how to do this is left as an excercise to the reader, but the fundamental problem is that the source route allows the packet to travel "through" possibly suspect IP entities that have not had the slightest amount of authentication as "trustworthy" routers applied to them. BillW cisco ========================================================================== Tentacle food for thought?

1 0

Re: Why it is legal to export PGP under ITAR
by Vance Cochrane 17 Dec '03

17 Dec '03

| Nice try, but NEVER confuse a dictionary definition with a legal definition. | | In article <199405280642.XAA05875(a)jobe.shell.portal.com>, | <nobody(a)shell.portal.com> wrote: | >The US ITAR law exempts many things from export restrictions, among them, | >materials availiable in public libraries. It gives no special definition for a | >library. My American Heritage Dictionary defines "library" as, among other | >things, "An orginized collection of recorded data arranged for ease of use." | >IOW, an ftp site. Which means that if a program is available from a public ftp | >site, you're legally allowed to export it. :) I am not a lawyer so don't scorch me... Where does one obtain a legal definition if it is not in Blacks Law Dictionary? Isn't the next source a "regular" dictionary? ...thats what they do on Perry Mason ;-) vec

1 0

Re: Help A Novice Understand
by werner＠mc.ab.com 17 Dec '03

17 Dec '03

> >[about Sternlight...] > Someone said that Sternlight is a high-placed govt official. I don't believe this. I think he is a retired old fart with a home computer and an internet acct. Sternlight is neurotic. Detweiler is psychotic. I don't think Sternlight has been a factor in this mailing list, except that people who read the Usenet crypt groupts and comp.eff.talk.org. have had to deal with his posts alot, and some may be assuming that everyone on this list is quite familiar with his name. Detweiler, and posts about Detweiler, dominated this list for awhile. I hope this doesn't start up again, especially about Sternlight, since he never even posts to this list. Unless it has something to do with cypherpunk issues, of course. tw

1 0

restore subscription
by axelrod＠s106.es.llnl.gov 17 Dec '03

17 Dec '03

For some reason, I have stopped getting mail. Please restore.

1 0