December 2003 - cypherpunks-legacy

Re: MIME based remailing commands
by Rich Salz 17 Dec '03

17 Dec '03

> It doesn't matter if they disagree. If you don't have a To: >line in the header then "Apparently-To:" gets tacked on using the "To" >from the envelope. ... And all CC recipient and all BCC recipients as well. /r$

1 0

Privacy digest an all
by Ben 17 Dec '03

17 Dec '03

I found this on another list that I"m on. I have no connection at all with the distributor, but I thought that it would be interesting to share it with the list. Ben. ________ 1. New Publication: PRIVACY & GEMS: HOW TO AVOID THE PRIVACY INVADERS We all have something to hide, right? From nosy neighbors, burglars, our spouses, private detectives, but most of all the government and business. In this 38-page booklet, you will learn how the government and business, through the extensive use of super-computers, is compiling data on ever facet of your life. Discover exactly how they do it. The amount of information kept on you is astounding: bank statements, investments, credit histories, medical records, school transcripts, driving histories, videotape rentals, retail purchases, tax returns, legal records, and more! This booklet explains who is collecting information on you and what they are doing with it. Your dossier is compiled and sold without your permission or knowledge. Find out what technologies are available today, and their frightening implications for tomorrow. We are on the verge of a 1984 Orwellian-type Police State! How can you keep some of your life private? After you read this booklet, at least you will have some idea! Learn how to make untraceable telephone calls. Be prepared for the New Money . There are a few low-profile investments that do not generate reports to business or government. Learn what they are and how to go about protecting yourself from the privacy invaders. Once you have shifted some of your assets from high -profile assets to low-profile assets, learn how to store and conceal them so you will not be discovered. Subjects covered include: Why Privacy?, Political Persecution, High-Risk Business, Divorce, Probate, Protection from Robbery, Protection from Government Seizure, The Future: The Total Surveillance State, "Smart Cars", "Smart Cards", "Video Surveillance", "Satellite, Surveillance", "Clipper Chip", "Robot Spies", The Future Workplace: A Look At Electronic Banking System, Inc., How Profiles Are Created, Damaging Dossiers, Privacy And The Telephone, The New Be A Private Investor, An Analysis Of Low-Profile Investments, Diamonds and Precious Gems, Rare Coins, Foreign Currency, Collectibles, Cash, The Tangible Investment Philosophy, Recent DeBeers Diamond Price Hikes, Long Term Investment Gem Performance, Low-Profile Strategies In A High-Profile World, Confidential Model Portfolio For Privacy Clients, 10 Rules For Gem Investing, How To Safeguard Your Valuables. This is an excellent tool for anyone concerned with our vanishing privacy. Here is how you order: Send $9.95 ppd (includes first class postage). Illinois Residents add 6.5% sales tax. to: Superior Broadcasting Company, Box 668, Lindenhurst, IL 60046. Request #119O "Privacy & Gems: A Special Report by Bob Genis"

1 0

new book pre announcement
by Network Security Observations 17 Dec '03

17 Dec '03

ISM/NSO received the manuscript of 'Cryptography: Theory and Practice' Author is Doug Stinson (Comp. Science/Eng. dept. University of Nebraska). Publisher is CRC Press Inc. Pages: 434 Chapters: 13 Format: Hardbound trimmed book 8,5 x 5,5 ISBN: not available yet Expected release: within 3 months Price: not available yet Preliminary review (a full review will be published in Internet Security Monthly) The book starts - obvious - with classical cryptography. Hopping from shift cipher, to substitution, to affine, to vigenere, to hill, to permutation, and ending in the range of simple cryptosystems with stream ciphers. A mature subchapter is devoted to cryptanalysis, covering the affine, the substitution and the vigenere. And providing a known plaintext attack on the hill cipher. The subchapter ends with the cryptanalysis of the LFSR-based stream cipher. A next chapter discusses in depth Shannon's theory. This is followed by the inevitable discussion of the DES, its modes of operation and includes an attack on a 3 round DES, and an attack on a 6 round DES. Chapter 4 discusses RSA and factoring. Touching also the not much discussed Chinese Remainder theorem.. The Rabin scheme is reviewed. And within factoring Doug pays attention to Dixon's Algorithm and the quadratic sieve. Of course other public key cryptosystems, as El Gamal, finite field, Merkle Hellman and McEliece are discussed. Doug explains signature schemes, as El Gamal and DSS and touches undeniable and fail-stop. In Hash functions, after the basics, among others MD4 and timestamping are issues of interest. In key distribution and key agreement Blom's scheme, D-H, Kerberos, station to station, MIT key agreement are noteworthy stops. Another chapter goes into identification scheme's discussing Schnorr, Okamoto, Guillou-Quisquater, and a general overview of conversion processes from identification to signature. In authentication codes a good discussion on computing deception probabilities, and combinatorial bounds. In the latter orthogonal arrays are a topic of interest. Doug also views the entropy bounds on deception probabilities. A next chapter introduces the Shamir treshold, the monotone circuit construction and Ernie Brickell's vector space, among others. A separate chapter is devoted to pseudo-random numbers, giving examples. The indistinguishable probability distributions and the Blum/Blum/Shub generator are noteworthy. Extra attention for probabilistic encryption. As common fur the subject, close to the end of the book, zero-knowledge proofs are discussed in depth. The book is basically organized in three parts: private key cryptography, public key cryptography and the introduction to four active research area's. It's comprehensive in the 'core' area's of cryptography. Although Cryptography: Theory and Practice is a text book, it certainly provides researchers and practitioners in the field with material on less discussed topics, and certainly invites for the development of new idea's. The work contains also a comprehensive reference section and the good workable index. Each chapter ends with exercise material. For the reader: It is necessary to have at least some familiarity with basic linear algebra and modular arithmetic. Compliments to Doug Stinson who sat many hours behind his terminal to get it all straightened out, and to a professional publisher that is up to the job of putting it all in print in such a layout that student, researcher and professional are encouraged. 11 February 1995 Internet Security Monthly Network Security Observations Editorial Office ------ Note: if you want to copy this short review, distribute it on the net, please do so at will. This review is not copyrighted. If you want more information on the book, consider sending us an email. ------

1 0

Re: Laws, Feds, & the Internet
by Richard F. Dutcher 17 Dec '03

17 Dec '03

> Date: Sat, 11 Feb 1995 01:41:09 -0600 > To: cypherpunks(a)toad.com > From: dls(a)mcs.com (David Sallach) > > > >"Free" speech has always been a balancing act. The founders > >certainly didn't intend to provide "free" speech for blacks and > >women. > > The Founders created a larger space for free speech than had ever > existed. Slaves were deprived of many freedoms including speech, of course, > but women and free blacks were included in the Bill of Rights and exercised > free speech, frequently compellingly. > And were frequently thrown in jail for their pains - note especially the experiences of the early feminists [anachronistic label alert]. And let us not forget what happened to the Mormons ... > Check out Frederick Douglass' practicing oration while still a > slave, and then winning his freedom to become one of the greatest > abolitionist orators. Consider the appreciation of diversity of thought and > speech manifested by Jefferson, Lincoln and many other American political > leaders. > > And Douglass spent a good portion of his life as a refugee in a protected enclave [Boston] where he had powerful friends to keep him from being arrested. I'm not dissing the Founders, or the Bill of Rights -- just the simplified pap their invocation in most discourse has become. I was trained in high school as a scientist, and in college as an historian, and in both instances to value the messy contingent realities over the tempting simplicities of ideology and theory. And there are few contingent realities messier than the law ... > > . . . "They" have never liked "free" speech ... :-( > > Invoking poitically 'correct' stereotypes does not strengthen your > argument. > > David Sallach Irony-impaired, are we? There's a Polish word, used by most of the populace after the 1979 coup to refer to the army and apparat, that is usually translated as "them." I [probably incorrectly] recall it as "Oni" -- would you prefer it? My own first encounter with the term "politically [in]correct" was among 70's feminists, who used it ironically, to tell people they needed a vacation/to get laid/to get a grip. Would that Newt used it that way ... =================================== Rich Dutcher, San Francisco Greens P.O. Box 77005, San Francisco, California 94107 USA "That's libertarians for you - anarchists who want police protection from their slaves." Kim Stanley Robinson, "Green Mars" Greens, of course, only enslave plants - so weed-whackers work better than cops ... ====================================

1 0

Re: West (was:HR830 - Anyone tracking this?)
by xpat＠vm1.spcs.umn.edu 17 Dec '03

17 Dec '03

>- House republicans introduce legislation with a section > requested by West Publishing that will provide sweeping > changes in federal freedom of information act, and prevent > federal agencies from creating a public database that use > the West Publishing page numbers to reference case law. Well, the West citation system *is* proprietary, without a doubt. This is a case where ease-of-use has completely dominated. Court records are completely laced with West citations. >- The "West Provision" would also end its lawsuit with Tax > Analyst, a Virginia publisher, who is seeking access to the > Department of Justice JURIS database of court decisions in > order to put the information into the public domain. Tax > Analysts alleges the JURIS database of court decisions are > subject to FOIA and not protected by copyright. A victory > by Tax Analysts in this case will lead to a public domain > database of federal court decisions. The Tax Analyst lawsuit: destined to fail from the start. If they want to do this they will have to come up with their own indexing/citation system, and then get everyone to adapt to it. About as likely as putting 73v AC wiring in every home in America.

2 1

Re: Bernstein
by Rich Salz 17 Dec '03

17 Dec '03

djb@silverton wrote a few crypto thinks, including a cute modification of the snefru hash that turned it into a crypto scheme called shuffle. my guess is that he put it out on the net for ftp... but i guess we'll all find out when the articles gets published. djb would make a fun addition to this list. /r$

3 2

automatic reply to test posting (lwall)
by news＠visionware.co.uk 17 Dec '03

17 Dec '03

STOP! Before you panic, read this message through to the end. This message has been sent to you because you have posted an article to one of the Usenet test groups (eg alt.test), and it arrived here at Visionware (visionware.co.uk) on Sat 11 Feb, 11:44 GMT. If you have not posted an article to one of these groups, then it is possible that someone else did so while pretending to be you. If you are sure that this is the case then ask your Local Help Desk to help you track down the perpertrator. It is not possible to track down forgeries from this site. Many people like to see copies of the articles that they post, so that they can see how far (and how quickly) their message has been transmitted. Accordingly, you will get at most one email message from Visionware for each article you post to a *.test newsgroup. You have *not* been added to a subscription list. It is not possible to stop the replies to other messages you may have already posted, but in FUTURE POSTINGS you can prevent this autoresponder from replying to you by including a phrase like "don't reply" or "ignore this message". This site, visionware.co.uk, is located at Visionware Ltd., which is in lovely Leeds, West Yorkshire, England (53 48 34 N / 01 34 51 W). In case you want to know, we're running INN 1.4sec. We deliberately receive the 'ba' (Bay Area) distribution; this is for our staff working from Menlo Park CA. Feel free to send your comments, suggestions, and questions regarding this auto-reply daemon to the administrator, postmaster(a)visionware.co.uk (telephone +44 113 251-2000 and ask for the System Administrator). You should get a response to email within a day or so; if not, then your message has probably not arrived. Your article, as received here, follows: > Path: visionware.co.uk!pipex!howland.reston.ans.net!agate!overload.lbl.gov!emf.emf.net!hilbert.dnai.com!nbn!miwok!news.zeitgeist.net!ack.berkeley.edu!not-for-mail > Subject: lwall > Message-ID: <PINE4545-dhfsdkjc(a)ack.berkeley.edu> > NNTP-Posting-Host: ack.berkeley.edu > Organization: cypherpunks > Lines: 2 > From: cypherpunks(a)toad.com > Distribution: world > Newsgroups: alt.test > Date: 6 Feb 1995 19:34:19 GMT > > test > test --

1 0

why pgp sucks
by Eric Hollander 17 Dec '03

17 Dec '03

if i use a command like pgp filename it will automatically figure out the right thing to do with the file. if it's encrypted, and i have the key, it will attempt to decrypt it. if it contains keys, it will ask if i want to add them to my keyring. if it's signed, it checks the signature. this sucks! if i'm trying to write a program to automatically process incoming mail (for instance, to see if it's encrypted with a specific key), i certainly don't want to have the possibility of people being able to add garbage to my keyring just by mailing it to me. is there a way of saying pgp -decrypt-with-key user_id filename and have it return some error code indicating whether or not the file was in fact encrypted with user_id, and also gauranteeing that it won't do other fun stuff with the file, like add it to my keyring? is there a way of using pgp in a diagnostic mode, to just inform me of what the file contains (is it signed and/or encrypted, from who and to whom?), without processing it, and without interaction, and without messing around with the keyring? has anyone written some scripts to do this kind of thing? or should i just wait until some of the groups working on the other encryption software get it out? e

9 21

Privacy vs. Ubiquitous Video: NetCam; Wearable WebCam, etc
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Saw this in technomads. Not necessarily crypto, but certainly privacy related... Cheers, Bob Hettinga >Date: Fri, 10 Feb 95 19:11:08 -0500 >From: Steve Mann <steve(a)media.mit.edu> >To: technomads(a)ucsd.edu >Subject: NetCam; Wearable WebCam, etc >Cc: steve(a)media.mit.edu > > >I am an amateur television (ATV) hobbyist, interested in things like >driving radio-controlled cars using a head mounted display (HMD) >(which involves putting myself into the ``usual'' perspective >of the car), or playing tennis with an HMD linked to a stand >mounted camera (which is exactly the opposite: the radiocar is >like a flight simulator from the cockpit, while the tennis example >is like switching to the ``control tower''). I've also been >interested in wearable photographic equipment (such as a wearable >2400J flashlamp I use for ``lightpainting''). > >More recently, I've become interested in sending and receiving >video (and digital stills) over the WWW (e.g. Wearable WebCam, >and WebCar -- radiocar on the WWW). > >I would like to hear from any other ATV hobbyists, people into >packet radio, and those interested in wearable cameras, and >combining wearable cameras with wearable computing. Another >application I was interested in was wearable vision (e.g. for >the visually impaired, or simply to augment the regular human >visual system). > >Therefore, I've started a new mailing list, ``netcam(a)media.mit.edu'', >to discuss issues related to wearable cameras, as well as communications >and computation issues associated with wearable cameras. I am also >interested in some of the privacy issues associated with wearable >cameras (as I touch on in http://www-white.media.mit.edu/~steve) >and the social implications of a society in which there are >ubiquitous cameras (both wearable and fixed) connected to various >high speed communications networks. > >If you would like to be added to netcam(a)media.mit.edu, please >email netcam-request(a)media.mit.edu > >--steve ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0

Four Horsemen of the Infopocalypse?
by Robert Rothenburg Walking-Owl 17 Dec '03

17 Dec '03

Terrorists, Drug Dealers, Pornography and Piracy (copyright, patent & trademarks) ^^^^^^ That's been left out... and likely it's the one some of the authorities fear most. Money can be made off of terrorists, drug dealers and pornograpy by allowing them to exist as a "threat" rather than actually stopping them. Piracy is a whole different matter (though some would argue that it applies to allow it as well...) Off the subject of crypto, though.... Rob

1 0