December 2003 - cypherpunks-legacy

Stego Standards Silly ? (
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

LM> The standard answer to agent-in-the-middle tampering is of LM> course digital signatures. Now, the question is, will we be allowed to sign LM> our possibly-stego-enclosing GIFs with reasonable confidence that the govt. LM> can't forge our signatures ? Obviously the signature itself can't be LM> stegoed, or else we fall into an infinite regress. Not obvious at all. You encrypt and sign as usual, stego the resultant output, and perhaps include in the stego routines some kind of CRC or hash if you like. But the point is that the signature still works to indicate whether the message was tampered with or not. If we posit a MITM, he can tamper with cyphertext =or= stegotext, but he can't defeat the signature. I would recieve a GIF which my stego software would turn into a file that PGP would puke on, telling me that Someone Is Messing With My Mail. I would not, of course, be able to reveal this fact directly. However, I could ask my correspondent to re-send the GIF, and when it comes out different in EVERY SINGLE LSB, I have proof of tampering. * Support legislation for a waiting period on taglines....... --- * Monster(a)FAmend.Com *

2 1

Re: Free The World Web Server project.. :)
by merriman＠arn.net 17 Dec '03

17 Dec '03

> Expecially if the form letter generated would be randomly selected >from parallel word streams. For example: > > Dear Senator <#SENATOR>: > > I am <concerned|alarmed|frightened> by the <attacks on privacy > rights in|glaring First Amendment violations in|fascist mentality > of|ominous provisions of|potential for civil rights infringement > by> SB <#BILLNO> <introduced recently| proposed|offered> by Senator > <#ORIGINATOR>..... > > You get the idea. > > Anyone who has read MAD Magazine could put such together. As an added >bonus, use variable margin settings, and none of the letters would be >exactly the same. Appropriate Imail => FAX software on a puter in DC >(local call that way) with the phone number of the sender filled in on >the top line for ID (izzat legal?) so it doesn't look like a form letter >at all. > > The web page would generate a random letter, allow the user to edit >it, further (possibly offering the alternate phrases) before he clicks >on the [Send] button. > If someone in the DC area wants to set up such a system, I'll gladly donate an Intel SatisFAXion 200 fax/modem, complete with manuals, etc. This would be a Good Thing, IMHO. Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

2 1

Re: Mods to Dining Cryptographers: legal questions...
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 10:02 AM 7/15/95 -0500, Phil Fraering wrote: >I'm sorry if I was a little mysterious about my reference to >another use or mode of a DC-net; I'd _love_ to tell the rest of >you flat-out, and put the idea in the public domain, but I'm >not sure I _CAN_. ..... >Are there any patents on Dining-Cryptographers networks that could >interfere with the placing in the public domain, or the patenting, of >an improvement to the network system? Case 1 - you want to be able to patent your stuff yourself. Case 2 - you don't. For Case 1, I can't help you much, but US patent law lets you apply for a patent on something within one year of publication (most other countries don't allow that - if you publish before applying, you don't get to patent it.) So publish. For Case 2, publish. You could get fancy and use surety.com's date-stamping service to keep a copy of what and when you published. If the material you've developed was already invented, and patented, by someone else, it's still ok to publish it, you just can't use the stuff (except for research, etc.) (I've been burned by this one; I _thought_ my idea seemed obvious enough that somebody else should have already thought of it first :-) So if you're trying to put something in the public domain, you may want to put a footnote in it saying that you're not making any claims about other people's previous patent applications, etc. So, anyway, what's your new idea? # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com

2 1

Re: Jim Bell Docket 3
by Bill Stewart 17 Dec '03

17 Dec '03

>>A. It's unsolicited spam. Not a big deal. >>B. The way they gathered the list of addresses is questionable, >> and likely off Jim's HD. Feh. Either it was real, or it was forged. In either case, the sender could have gotten names and addresses for the usual suspects by watching the cypherpunks list; no need to crack Jim's machine. It _was_ nicely forged, if it was forged. One amusing method that could have been used for the forgery is the method used by Kashpureff for the alternic.net / internic.net rediriection - when a site sends a DNS request to your name server (e.g. because you've sent some email through it to you), send back some additional records with the sites you're impersonating - especially if the subdomain at irs.gov didn't really exist. You can reinforce it by adding the IP addresses you choose to your in-addr.arpa reverse DNS. >I question, however, if is proper/appropriate for a governmental entity to >retrieve email addresses off of a computer involved in a criminal matter >and use those addresses to send the type of message that was sent to a >selected few? Unfortunately, I have no answer to this query. Clearly not - there are major ECPA and invasion of privacy issues. But there's no evidence that they did that. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

1 0

Re: Netscape the Big Win
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

At 1:42 AM 7/21/95, Lucky Green wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >In article <ac33f977080210043230(a)[205.199.118.202]>, tcmay(a)sensemedia.net >(Timothy C. May) wrote: > >>Frankly, one of the great boons of my current setup is that I can >>completely get away from Unix tools and commands, away from my Unix shell >>account at Netcom, away from the arcane commands that vary from program to >>program, away from tin and elm and emacs...my fingers are already >>forgetting the emacs commands! >> >>(Those of you like Unix, fine. I agree it is useful for many things, so I'm >>not trying to debate Unix vs. the world. Just giving my perspective, and >>apparently the perspective of the many who are adopting the Web browsers as >>their "operating environments," insulated from the underlying cruft.) > >Is this the same T.C. May that used to argue vehemently that if it can't >be displayed on a VT52, it was no good? Did a space alien take over Tim? If you read my messages of last December, you'll see I said this on 15 December 1994: "I see two "stable attractors" for text/graphics/multimedia/etc. sent over the Net: "1. Straight text, ASCII, 80 column format. All systems can handle this, all mailers and newsreaders can handle it, it's what the Usenet is essentially based upon, and it gets the job done. It meets the needs of 95% of us for 95% of our needs. "2. The Web, for graphics, images, etc. This will be the next main stable attractor, deployed on many platforms. (I'm assuming the debate here about Netscape standards does not imply much of a fragmentation, that Mosaic, Netscape, MacWeb, etc., will all basically be able to display Web pages in much the same way.)" I'd say this is very consistent with what I've been saying recently. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

RE: Netscape the Big Win(dows)
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

At 2:54 AM 7/21/95, Robert Hettinga wrote: >Tell us about it in 6 months, Tim, when you've grown out of Netscape. You >sound like someone who's totally enamored with their "-works" app. Most >people end up using more specialized apps when they hit the wall with >something which won't get all those "general purposes" taken care of... No, I don't use any of the "-works" apps, and I think the success of the Web speaks for itself...this is not a view I have just come to, as my recent message shows. And I'm not wedded to "Netscape" per se, though that particular environment has the current momentum. I've also used Mosaic and MacWeb to do much the same things, but find Netscape smoother. Out of curiousity, the phrase "grown out of Netscape," aside from the implied barb, means what? Just what am I missing and what do I need to "grow out of"? If, perchance, this is just what of those throwaway barbs, implying I move from fad to fad (as Fraering's post implied), you should know that I stuck with tin/elm/emacs/eudora for more than 3 years, as nothing obviously better--and worth the learning curve to switch to--had come along. (In the Mac domain I used other programs, none of them "-works" packages.) But, I'll tell you what, I *will* tell you about it in 6 months, whether or not I've grown out of Netscape! --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

News from Disney Online - July 1997
by Family.COM 17 Dec '03

17 Dec '03

Disney Online welcomes your questions and comments. If you have a question or comment, please point your browser to http://www.family.com, and click on "Write Us" in the right hand index of our home page. We suggest you copy into your message the part of the newsletter that relates to your question! Dear Disney.com Guest, We'd like to introduce you to a site designed to meet all your parenting needs -- Disney's Family.com. In the weeks ahead, Family.com will bring you many special features to help you be the best parent possible. Don't miss our stories on travel, food, activities, child development and more. ~~~~~~~~~~~~~~~~~~~~~FREE OFFER~~~~~~~~~~~~~~~~~~~ This month we have exciting news. For 30 days, you can see and use all of Family.com for free, including our searchable database of stories, an interactive cookbook to help you cook better and faster, and our large network of bulletin boards. You also get access to all of our local event calendars, features and resources, provided by over 100 regional parenting publications in the U.S. and Canada. Come to http://www.family.com and enjoy the entire site for free! Here's just some of what's happening on Family.com this week : ~~~~~~~~~~~~~~~~~~PARENTING EXPERTS~~~~~~~~~~~~~~~~ * Penelope Leach helps you deal with a clingy toddler * Jan Faull tells how to get big kids to do their chores * Barton Schmitt explains how to handle the five kinds of temper tantrums. You can also find advice about your own specific parenting problems in our vast database, which includes past columns from these experts. Read it all at: http://www.family.com ~~~~~~~~~~~~~~~~~~~ACTIVITIES~~~~~~~~~~~~~~~~~~~~~ * Ideas for games that will keep kids cool on hot summer days Search the database for age-appropriate ideas using supplies you already have on hand. Find it at http://www.family.com. ~~~~~~~~~~~~~~~~~~~~TRAVEL~~~~~~~~~~~~~~~~~~~~~~ * Ideas for games in the car from Penny Whistle, a popular feature that originally ran in Family Planet. ~~~~~~~~~~~~~~~~~~~~~FOOD~~~~~~~~~~~~~~~~~~~~~~~ * Quick hot weather meals using just a can of tuna Plus unlimited access to our Recipe Express, an interactive cookbook that will find a recipe for you, make the shopping list, and even help plan your meals. Check out how easy it is at: http://www.family.com ~~~~~~~~~~~~~~~~~~~~LEARNING~~~~~~~~~~~~~~~~~~~~ * A guide to teaching your kids how to handle (and appreciate) money Search the database for ideas to help your children keep learning all summer long. ~~~~~~~~~~~~~~~~~~~D-CARDS~~~~~~~~~~~~~~~~~~~~~~~~ * You get unlimited free access to D-Cards, our library of electronic greeting cards. We've got one for every occasion. Nothing says "Happy Birthday" or "I'm thinking of you" like a D-Card. To send your message today, visit: http://www.family.com ~~~~~~~~~~~~~~~~~~~ALL THIS PLUS~~~~~~~~~~~~~~~~~ **EVERY WEEK DAY** --a different special travel deal and --a different project to keep kids busy and interested And these **NEW FEATURES**, provided by YOU, our guests: --WE WERE THERE, stories from real families all across the country about where they went on vacation -- and what they liked and didn't like and --FAVORITE RECIPES -, appetizers, main dishes, side dishes and desserts from your recipe files. FINALLY, we put it all together for you on our Bulletin Boards. Find even more ideas, and exchange information, help and advice with other parents just like you. It's all at http://www.family.com. =================================================== We've sent you this note because of your previous interest in family-related material. If you no longer wish to receive news about Family.com, please go to http://www.family.com/News and we'll promptly remove you from the list.

1 0

RE: Netscape the Big Win
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

At 3:45 AM 7/21/95, Robert A. Rosenberg wrote: >At 10:39 7/20/95, Timothy C. May wrote: >>To state an obvious non-crypto use of such "modules," why do all major word >>processing and page layout apps have their own "dictionaries"? Why do I >>have to train the dictionaries of Word, Nisus, FrameMaker, MORE, etc.? That >>there have not been "dictionary modules," for many and sundry reasons, is >>telling. (Before anyone mentions it, one can on the Mac use things like >>"Thunder" instead of the local dictionaries...this is not the same as a >>module usable by all programs, but instead is a user choice to bypass the >>local dictionaries. We could quibble for hours about whether this is in >>fact a universal module or not. > > >Since the support that Thunder 7 provides (with Wordprocessing and >Wordprocessing-Like Programs that it supports) is indistinguishable from >that provided by each program's integrated SpellChecker (along with T7 >providing a common set of "extra" User-Extendable Dictionaries as well as a >Glossary/Mis-Spelling/Words-to-Replace Dictionary [ie: Pre-Prime the list >of incorrectly spelled words for "Replace All" so the user's personal >misspellings are automatically corrected without any interaction on his/her >part]), I think the ball is initially in the court of those who claim it is >not a universal module (admittedly only for those WPs it supports) to >explain why is does not function as one would function if it existed. Yes, I was the one who mentioned "Thunder." Should I justify why it is "not a universal module"? I won't waste our time. The essence, though, of having "parts" is that the suppliers of _other_ programs would not then have to supply the overlapping functions. In the case of Thunder, it may be useful and all (which is what I said when I mentioned it), but it's sufficiently obscure/unavailable that the makers of my various word processing programs and page preparation programs supply their own (and incompatible) dictionaries. This was my point. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Satellite Tool Kit available FREE! (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From owner-traveller(a)Phaser.ShowCase.MPGN.COM Sat Jul 26 12:43:45 1997 Message-Id: <3.0.2.32.19970726103449.032c3494(a)mail.pcisys.net> X-Sender: goldendj(a)mail.pcisys.net X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.2 (32) Date: Sat, 26 Jul 1997 10:34:49 -0600 To: traveller(a)MPGN.COM, tne-rces(a)tower.clark.net, gdw-beta(a)qrc.com From: "David J. Golden" <goldendj(a)pcisys.net> Subject: Satellite Tool Kit available FREE! Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-traveller(a)Phaser.ShowCase.MPGN.COM Reply-To: traveller(a)MPGN.COM For those who haven't heard, Analytical Graphics, Inc. is releasing version 4.0 of their Satellite Tool Kit (STK) program, absolutely free. Their web site says they've decided it's the best way to introduce engineers to its power; the way I heard it, they lost a lawsuit claiming it was developed with government money and hence _can't_ legally sell it. At any rate, the add-on modules still cost large quantities of filthy lucre, but the basic program is quite impressive for anybody wanting to model satellite orbits, sensor and communicator field-of-view, etc., etc. Check it out at www.stk.com. -- Dave Golden http://www.pcisys.net/~goldendj -- goldendj(a)pcisys.net finger for PGP key *** USE OF THE ABOVE EMAIL FOR SOLICITATION PROHIBITED *** "He that would make his own liberty secure must guard even his enemy from oppression; for if he violates this duty, he establishes a precedent that will reach to himself" -- Thomas Paine

1 0

Government Access to Safes
by Martin Minow 17 Dec '03

17 Dec '03

You may have been following the recent murder of Gianni Versace and the subsequent suicide of his alleged murderer. One minor footnote that popped up in the news is a small safe located in the houseboat where the suicide was found. This safe uses a keypad lock (rather than a mechanical combination or physical key). Is this more secure than a regular safe lock? Does the government have an access key that would premit a law enforcement officer (with appropriate authority) to open any such lock? Should I be required to deposit the secret key to my safe with a government-mandated "escrow" agent? Martin Minow minow(a)apple.com

2 1