December 2003 - cypherpunks-legacy

The Value of "Attachments" on this List
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

See attached file: F:\MYFILES\MAY.MSG The attached file: "MAY.MSG" has been attached in HyperMIME format. It may be read by any Exidy Sorcerer computer, using Electric Pencil 1.2 (release date 7-81).

1 0

Re: mac share/freeware app for overwriting unused hd space?
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

At 2:27 PM 7/27/95, j. ercole wrote: >Can anyone point me towards a program that's freeware or shareware that >will overwrite all the unused i.e., "trashed" space on my hard drive(s)? I >sincerely apologise if this is a faq. I know norton's will do it but I >don't presently have that installed on my machine. Thanks oodles, Well, getting the commercial products (fairly cheap, for Norton) is the first line of defense if you're paranoid. Erasing a file and then filling the disk with other files (even copies of existing files) will do the same thing, albeit only once. At the most serious level of attack (the "threat model"), such as the FBI labs in Quantico or the NSA, there are reports that specialized disk drive heads are used to recover earlier signals that are not erased even with N active overwrite steps (apparently the head jitter in most drives means that each write cycle is slightly different, even on the same disk region, and a slight "shadow" or "ghost" of previous writes can sometimes be extracted). --Tim May, who hopes this will not reignite the thread about how to use thermite to permanently erase disk drives .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

2 1

Java, Netscape, OpenDoc, and Babel
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

I've been reading up on Java at the Web sites (such as http://java.sun.com/1.0alpha3/doc/overview/java/index.html) and am awaiting with bated breath the HotJava browser port for the Mac, to play with. The "tower of Babel" is getting higher and higher, with Python, TCL, Safe-TCL, Perl, and the various multimedia languages (Shockwave, Lingo, ScriptX) all competing for attention. I guess this is all to the good, and let the best languages and frameworks prevail. On a SmalltalkAgents list I am on (I own SmalltalkAgents, a powerful implementation for the Mac, with a Windows version coming), one poster had the following to say: "I am hoping that OpenDoc and specifically CyberDog from Apple provide the basis for a more rational and open Internet component environment. NetScape is becoming a kitchen sink app and any solution they create for plug-in components will set back things when an open industry standard for components (OpenDoc) is about to be released." NetScape a kitchen sink? Perhaps, but kitchen sinks have been selling pretty well for years. I just picked up a copy of "Pattern Languages of Program Design," edited by James Coplien (of the well-regarded C++ book) and Douglas Schmidt. This book has a series of interesting papers on the "design pattern" approach (as in the book by Erich Gamma et. al.). The idea behind "pattern languages," seen by some as the evolution of object-orientation, is to find architectural abstractions, such as "iterarators" and "constructors" which encapsulate important behavioral features of a system. The "applied ontology" in crypto seems to be a natural fit. Or so I think. Maybe wishful thinking. But in which framework or language, given the profusion of frameworks and languages? We had some TCL advocates a while back (Strick, Hal...)...any reaction to Java? And so it goes. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

7 15

Re: The Value of "Attachments" on this List
by carolann＠censored.org 17 Dec '03

17 Dec '03

TCMay carefully encrypted on July 28th, 1995: >See attached file: F:\MYFILES\MAY.MSG > >The attached file: "MAY.MSG" has been attached in HyperMIME format. It may >be read by any Exidy Sorcerer computer, using Electric Pencil 1.2 (release >date 7-81). > Not having access to Electric Pencil 1.2, Sharpener 2.7.1 was able to "point ot the correct keypoint", and Leadflow 1.6.5 traced the stream of bits to determine this vital message: Have a nice day today! And, A nicer tomorrow! Why thanks Tim! Love Always, Carol Anne ps FV reports others had same problems. Yet 3 days have passed. Shawmut bank only took 9 hours to fix the big 'double charge' problem they encountered last weekend. -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

Re: copyrighting algorithms
by Wolfgang Roeckelein 17 Dec '03

17 Dec '03

Hi, From: Bill Trost <trost(a)cloud.rain.com> > >Wolfgang Roeckelein writes: > >I wasn't aware that you could copyright an algorithm. Patent, > >yes, but not copyright. Intellectual property meens secret, > >right? Aren't there any precendence cases involving propriety > >schemes that are reverse engineered? > > Game cartridges (I think sega was involved) > >You might be referring to Nintendo vs. Galoob, which was used as a >sample case in an January 1994 article in the Communications of the >ACM titled "Copyright's Fair use Doctrine and Digital Data". The >article states No, I was referring to a case, where a third party game cartridges manufacturer reverse engineered the specifications of the game cartridges slot for producing his own cartridges for this game. Unfortunatly, I have lost the reference and the names of the companies, but this is the main case cited when it comes to reverse engineering propriety schemes. Maybe I can dig this out, or another member of the list has details available. Wolfgang --- Dipl.-Wirtsch.-Inf. Voice: +49 261 6509 173 Wolfgang Roeckelein Fax: +49 261 6509 179 WHU Koblenz E-Mail: roeckelein(a)wi.whu-koblenz.de Burgplatz 2 (NeXTmail ok) D-56179 Vallendar WWW: http://www.whu-koblenz.de/~wolfgang/ Germany --rsa--------------------------------8<------------------------------------- #!/usr/local/bin/perl -s-- -export-a-crypto-system-sig -RSA-in-3-lines-PERL ($k,$n)=(a)ARGV;$m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2% Sa2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print pack('H*' ,$_)while read(STDIN,$m,($w=2*$d-1+length($n||die"$0 [-d] k n\n")&~1)/2) -------------------------------------8<------------------------------------- TRY: echo squeamish ossifrage | rsa -e 3 7537d365 | rsa -d 4e243e33 7537d365 Residents of the USA & France *MUST NOT* include this .sig if following up! *** Residents of France & Russia *MUST NOT* make any use of this -sig ! ***

1 0

Re: Java, Netscape, OpenDoc, and Babel
by merriman＠arn.net 17 Dec '03

17 Dec '03

> > Just a quick note to chime in. The OSF just did a deal with Sun >to port Java to several platforms. The OSF is opening a "web mall" >where you can grab software objects and run them. Still tentative, or is there a Web address? Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

Re: copyrighting algorithms
by Greg Broiles 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Wolfgang Roeckelein writes: > No, I was referring to a case, where a third party game cartridges > manufacturer reverse engineered the specifications of the game > cartridges slot for producing his own cartridges for this game. Sounds like _Sega v. Accolade_, 977 F.2d 1510 (9th Cir., 1993). I don't have it in front of me, but Terry Carroll's Copyright FAQ (ftp://rtfm.mit.edu/pub/usenet/news.answers/law/copyright/faq/part2) cites it for the proposition that dissasembly of a copyrighted work can be fair use if there is no other way to reach noncopyrightable (functional, not expressive) elements of an existing work. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMBicgX3YhjZY3fMNAQFULwQAgvWmS1+p5BbN/C3wnVl21jqVjTL/tQIN SMITIXhXTLaNmdGtlnPANC6brOYXb/17d2zHBwR0BcUWiH/AFjBsTLIxwroOx5np kRSOk7dmw4jifrw4tMJw6Pe/pi7zs+IwT94ToEIKxcXRMs1lPruGdu2HM+kS+4ds mCF+FKmP89E= =UDoU -----END PGP SIGNATURE-----

1 0

"Encryption" IRC script?
by wmono＠Direct.CA 17 Dec '03

17 Dec '03

C'punks.. I was just DCC'ed this rather cryptic IRCII script. The author, nickname george.. /whois george 311 George ~root original.netwest.com * :000-System Admin-000 312 George irc.escape.com :[198.6.71.13] Escape - New York City (I highly doubt he's really the root there - no identd running?) claims that it's an encryption routine in IRC. I don't know how to read that script language, and I'm most certainly not a crypto expert, so I've attached the script in hopes that someone can tell me if this guy is a whacko and whatnot. (Sorry for those not interested - the file was small, so I figured that not too many people will mind. It is ASCII with some nonprintables contained within.) I warn that I haven't tested the script, and as with all untrusted scripts, DO NOT RUN IT until it's confirmed by someone that it's safe! I-CODE.IRC -- William Ono <wmono(a)direct.ca> PGP 2902B621 fingerprint = 51 6B BC 81 57 D8 FF 6A 5A A1 A4 6B 9A E3 E5 EE = fingerprint PGP-encrypted mail welcome! Witty Quote Goes Here

1 0

Re: "Encryption" IRC script?
by Donald M. Kitchen 17 Dec '03

17 Dec '03

Yes, there are scripts that implement des encryption of IRC sessions, using RSA to swap keys. (the encrypted lines always start with "clipper:" on mine. I don't think it's the same as the one you've got, but yes, they are out there. (See what you miss when you can't find people on the #crypto channel!?!) The channel that was used to coordinate against a recent spam attack of remailers turned into a rather interesting chat about several subjects. (Including digicash) It was about two months worth of cpunks... (without the normally-cooresponding year's worth of alt.conspiracy reposts!!) Maybe it would be fun to actually use the #crypto channel. (Unless there's a #cpunk channel I don't know about?) Don Sorry I haven't been signing lately, but I've been replaced by a double.

1 0

NSA and the NCSA/Apache web servers
by Amir Y. Rosenblatt 17 Dec '03

17 Dec '03

I was flipping through the Apache http Server Project's web site <http://www.apache.org/> when I came across the following note: Note: We were informed by NCSA that the NSA (The US National Security Agency - yes, the folks who in 1994 said "we're only 10 years behind schedule") considered the hooks to encryption in NCSA's httpd to be in violation of the munitions export law, thereby making its distribution to foreign sites illegal. For various reasons, we decided to remove the -DPEM_AUTH code completely. This was followed by a pointer to http://www.apache.org/nopgp.html from which the following text was taken: On May 17th, 1995, we were asked by a representative of NCSA to remove any copies of NCSA httpd prior to 1.4.1 from our web site. They were mandated by the NSA to inform us that redistribution of pre-1.4.1 code violated the same laws that make distributing Phill Zimmerman's PGP package to other countries illegal. There was no encryption in NCSA's httpd, only hooks to publicly available libraries of PEM code. By the NSA's rules, even hooks to this type of application is illegal. Wow -- hooks to encryption are unexportable -- now THAT's bullshit. Sheesh. -Amir /\ Set the controls for the heart of the sun. -Pink Floyd ______/ \ ___________ __ __ _ _ _ _ . . . axon(a)neuron.net \ / \/ For PGP 2.6 key send mail with subject: SEND PGPKEY

7 9