December 2003 - cypherpunks-legacy

SSL Challenge: some thoughts on the process.
by Peter Trei 17 Dec '03

17 Dec '03

Well, the game's afoot, and I have a few preliminary thoughts on the process. 1. We need some protection against massive allocation of keys - perhaps an upper limit of a few hundred segments. Piete had better be ready to loop the server - at this rate FFFF will be allocated sometime tommorrow. 2. It'd be nice if the NT Winsock client could loop, reporting results and getting new keys automatically each time it finished a block. As it is, it's not worth my running it overnight. For each of the P5/90 NT machines I'm using, I'm manually running brutessl with enough key to keep them busy till morning. I'd rather have something that reported results to the server as it went along. This is part of a more general problem. A lot of people are doing this on standalone machines at work, and have no way of checking them during the night. This is doubly true for weekends - theretically if someone hits jackpot at 6pm on Friday, we might not find out till 9am Monday. I will not be running on any work machines over the weekend. 3. Start time was a little ragged - 1800 GMT was named, but the server seemed to come up at 2PM east coast time, which is (I think) 1900 GMT. I think that if we selected 8AM west coast time (1600 GMT?) more people would come online more quickly. 4. There was a massive crush of people trying to get keys from the server at 2. If we ever do this again, we might think about preallocating chunks of keyspace to people according to their promised cpu power, and keeping the *challenge* a secret till the starting gun sounds. Passively serving a page with the challenge would load the server much less than the cgi-based key doler. 5. We needed more pre-publicity on the Net to attract participants - a week would have been better than 24 hours. just some random thoughts.... Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

1 0

PGP Answers RSA
by John Young 17 Dec '03

17 Dec '03

Thanks to John Gilmore we offer a 44-page package of PGP's court filings in response to RSA's suit: http://jyx.com/rsavpgp2.htm Exhibits of early letters among Cylink, RSA, and PGP preceding the suit are of interest, one of which has been provided before by Greg Broiles at parrhesia.com. We've also put on JYX the AOL-axed RSA v. PGP docs, linked to this latest: the RSA suit and the Lemcom License. A bit more from JG will be ready in a few days.

1 0

Server Bottleneck
by lethin＠ai.mit.edu 17 Dec '03

17 Dec '03

The bottleneck at the server is pretty awful. My clients are spending most of their time in timeout, waiting for keyspace. Also, users on the workstations have complained that the programs eat of lots of system time, despite their being nice'd to +19... --- Concurrent VLSI Arch. Group 545 Technology Sq., Rm. 610 MIT AI Lab Cambridge, MA 02139 (617)-253-0972

1 0

Re: SSL CHALLENGE: ALERT! probable misallocation of keys?
by Peter Trei 17 Dec '03

17 Dec '03

I've been looking at the allocated list of keys, and I notice a possible problem: One user has allocated 50,000 segements: 0c2b-cf7a NOACK 0c2b 50000 Joe Thomas <jthomas(a)ogi.com> Now, it's possible this fellow has some vast farm of high-speed workstations, but I doubt it. Finger suggests that this is a linux box. My suspicion - and let me apologize in advance if I'm wrong - is that Mr. Thomas thinks he's allocated himself 50,000 keys, whereas he's actually got 838,860,800,000. Mr Thomas, if you're listening, PLEASE tell us what's going on. You've reserved 3/4 of the keyspace, and you're going to screw up the search unless you have an NSA-sized data center. I suggest we assume this is an error, and remove the block from the reserved list so that it can be re-allocated. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

5 6

brloop not working
by Jyri Kaljundi 17 Dec '03

17 Dec '03

I just dont seem to get brloop working. It says: Command failed -- brutessl missing ? what seems to be wrong is that it tries to execute command: brutessl - although brutessl does not have a command line option '-'. Why is the '-' there after brutessl ? <o Jüri Kaljundi e-mail: jk(a)digit.ee o< >o tel: +372 6308994 o> <o DigiTurg http://www.digit.ee/ o<

5 9

Tim Throws a "Leaner" / Re: Tim Speaks the Truth / Re: Tim Misfires / Re: Joichi Ito as a Junior Policeman
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Joichi Ito wrote: > As for Tim's message... I keep worrying (when I am in Japan) that I'm too > radical, so it's nice to hear from someone who is really hardcore to put > a wimp like me in my place. ;-P Actually, when Tim puts someone in what he considers to be their place, it usually involves the purchase of a tombstone. Tim May wrote: > Unlike "Toto," who claims to be "Truthmonger," I speak the truth. "Am I Toto, dreaming I am TruthMonger, or TruthMonger, dreaming I am Toto?" > At 5:12 AM -0700 8/3/97, Joichi Ito wrote: > >so they probably are pretty militaristic), Japan does not have the > >equivalent of the NSA. It really is in Japanese national security interests > Wise up, Joichi. You live in society more totalitarian than anything we > fear. Japanese society has long been very rule-oriented, in large part as a result of the country's geography, population and history. A "No Farting" sign which might reek of totalitarianism when placed on the open range, might well seem less so when placed in a two-man tent occupied by six people. Environment, geography and the history of a a country, society and its people, all play a part in the degree to which an individual will view their personal position in regard to the society and government around them. And each will perceive the way in which they feel they can best promote their beliefs within their society and government. > Japanese citizen-units under video surveillance and afraid to speak > out. It seemed to me that after Jim Bell's arrest, most of the posts to the list posted an almost-standard disclaimer: "Actually, although I hardly knew the man, thought he was a _loon_, and _disagreed_ with most of what he had to say..." > And surveillance and espionage technology deployed by your fascist > government--a term I mean literally, not casually--will worsen things > dramatically. > The only "cooperation" with them is to seek their annihilation. Government aside, if I was forced by fate to live in Japan, my first act would probably be to annihilate 80% of the population, just to get enough elbow room to negate the need for so damn many rules, both from society and government. Of course, the same could probably be said for New York City, from my persepective. > And nothing but mischief will come out any meetings with government on > "crypto policy," as their goals can never be our goals. At least in the > U.S., despite obvious flaws, we have a "Congress shall make no law" > provision which _tends_ to make government meddling in speech, such as > meddling in crypto, more difficult. I hope that the "flag" Tim is wrapping himself in isn't the same one that he was burning yesterday. {Not that I'm accusing Tim of being purposely deceitful. It's just that when we throw a "leaner" instead of a "ringer," they sometimes lean in opposite directions.} Seriously, I believe in the original goals of organizations such as the EFF and CDT, etc, but I also believe that their leaders should be assassinated every few years in order to allow the promotion of people whose senses are not so hardened by D.C. that they no longer recognize a "stench" when they smell it. (ibid, the Constitution and our beloved Legislators.) Joichi Ito sounds very sincere about his commitment to act in a way he feels will promote cypherpunkish viewpoints within his system of government. I can't help but believe, however, that his efforts will ultimately only serve to delay the creeping spread of tyrannical cancer in our societies and our governments. I tend to lean more toward Tim's viewpoint, that there comes a point when the best option is surgery (a radical Legislat-ectomy?), but I would not go so far as to suggest that others should not pursue other treatments which they think may stem the tide of the disease. I hope Joichi Ito paid enough attention to the OKC bombing to realize that some surgeons are less skilled than others, and that there is a risk in remaining too long in close proximity with cancerous tissue. DreamMonger "There's something wrong when I'm a TruthMonger under an increasing number of personas."

2 1

Re: server congestion
by Donald M. Kitchen 17 Dec '03

17 Dec '03

Christian Wettergren: >is if we start allocating more blocks at a time, lets >say 2-4 blocks each time. Wouldn't that help? Heh heh heh Somebody should tell that to the guy who's pulling them down 500 at a time. I have to settle for 32 x 7 at a time, in order to manage runtime at 9 hours. And the clever thing is, I have to stay connected to all 7 machines in order to keep running. Good thing there's an incremental notice, so I can restart if I lose carrier. You know, this is really fun. Too bad the prize isn't something really cool, like a free wastebasket in case Windoze 95 comes my way... Sorry, just felt like it was my turn to babble... Don

2 1

Computer Magazine Archive Special Offer!
by announce＠lists.zdnet.com 17 Dec '03

17 Dec '03

---------------------------------------------------------------- ZDNET ANNOUNCEMENT 8/4/97 ---------------------------------------------------------------- ZDNet Members: Take advantage of a special risk-free trial offer to Computer Magazine Archive! ==================== http://cma.zdnet.com ==================== Subscribe to Computer Magazine Archive to: * Follow your competitors * Track industry trends * Keep up with the latest product reviews * Monitor recent IPOs and high-tech investments, or * Research just about anything related to high-tech Computer Magazine Archive is a powerful database of over 74,000 articles from the industry's most popular and influential publications. Everything you need to research the computer industry is as close as your desktop computer - so accessible, you may never need to search through piles of old publications or your overstuffed clipping file again. ---- Limited-time, RISK-FREE Trial Offer ---- Similar information databases typically sell for thousands of dollars a year. With Computer Magazine Archive, you can access the same information for only $4.95 a month. Subscribe now and if you're not completely satisfied, simply cancel by August 24th and pay nothing. It's risk-free! Give Computer Magazine Archive a test-drive today. It's the most comprehensive and affordable database of computing articles you'll find on the Web--or possibly anywhere. ==================== http://cma.zdnet.com ==================== _______________________________________________________________ ZDNet Announcements are periodic notices of new features, special events and free offers available to members of ZDNet. --To subscribe to ZDNet Announcements, please send mail to: announce-on(a)lists.zdnet.com You can leave the subject and body blank. --To unsubscribe to ZDNet Announcements, please send mail to: announce-off(a)lists.zdnet.com You can leave the subject and body blank. _______________________________________________________________ Powered by Mercury Mail: http://www.merc.com ===============================================================

1 0

Joichi gives up / Tim Throws a "Leaner" / Re: Tim Speaks the Truth / Re: Tim Misfires / Re: Joichi Ito as a Junior Policeman
by Joichi Ito 17 Dec '03

17 Dec '03

OK. I give up. I think DreamMonger's last comment about at least sort of believing in my intentions is about the best it will get for me here. Tim, you're in my killfile now too so I'm not going to respond directly to your comments. Now at least when I am going through the meatgrinder, I won't know if it is a cypherpunk or a Japanese fascist who's sending me through. At 05:46 97/08/04 +0200, Anonymous wrote: > I hope Joichi Ito paid enough attention to the OKC bombing to realize > that some surgeons are less skilled than others, and that there is a > risk in remaining too long in close proximity with cancerous tissue. Some Japanese conservatives probably think *I* am the cancerous tissue that their people shouldn't hang out with... - Joi -- Finger jito(a)nsm.eccosys.com or jito(a)garage.co.jp for PGP Key Fingerprint for RSA PGP Key ID 0x0EE23A2D 0D3A 7AAA 3DA8 E7B3 3AF1 C6FA B7ED D834 Fingerprint for DSS/Diffie-Hellman PGP Key ID 0x2D9461F1 58F3 CA9A EFB8 EB9D DF18 6B16 E48D AF2A 2D94 61F1 Home Page: http://domino.garage.co.jp/jito/joihome.nsf To subscribe to my personal mailing list send mailto:friends-subscribe@ito.com

1 0

Linux brutessl client
by ghio＠cmu.edu 17 Dec '03

17 Dec '03

I get 11100 keys/sec with Linux/gcc 2.5.8 on a 486/66, optimized with -O2 and -fomit-frame-pointer. -fforce-mem and -funroll-loops made the program run more slowly. I also tried -ffast-math -finline-functions -fforce-addr -fcaller-saves which seemed to make no difference. Now maybe when they get the server working again I can actually try running this. :(

2 1