December 2003 - cypherpunks-legacy

Patel decision page 9 handled
by landon_dyer＠wayfarer.com 17 Dec '03

17 Dec '03

1 0

(Fwd) CFP: Workshop on Information Hiding
by Peter Trei 17 Dec '03

17 Dec '03

This was on the www-security list. ------- Forwarded Message Follows ------- Date: Mon, 28 Aug 95 12:11:06 EDT From: allegra!slow(a)uunet.uu.net (Steven H. Low) There's a www version on http://www.cl.cam.ac.uk/users/rja14/ihws.html ================================================================= Workshop on Information Hiding First Call for Papers 30 May - 1 June 1996 Isaac Newton Institute, University of Cambridge, UK Many researchers are interested in hiding information or in stopping other people doing this. Until now, their efforts have been fragmented, with different groups interested in copyright marking of digital objects, covert channels in computer systems, subliminal channels in cryptographic protocols, broadcast encryption schemes, low-probability-of-intercept communications such as spread spectrum and meteor scatter, and various kinds of anonymity services ranging from steganography through location security to digital elections. However these areas of study are closely linked, and we wish to create an opportunity for a fruitful exchange of ideas. We are therefore organising a workshop on information hiding, which will form part of a six month research programme being held at the Isaac Newton Institute on Computer Security, Cryptography and Coding Theory. Given a positive response from the research community, it is hoped that this will become a regular event. Instructions for authors: Interested parties are invited to submit papers on research and practice which are related to these areas of interest. Submissions can be made electronically (latex or postscript; preferred format is latex using llncs.sty) or in paper form; in the latter case, send eight copies suitable for blind refereeing (the authors' names should be on a separate cover sheet and there should be no obvious references). Papers should not exceed fifteen pages in length. Addresses for submission: ross.anderson(a)cl.cam.ac.uk Ross Anderson, Cambridge University Computer Laboratory, Pembroke Street, Cambridge CB2 3QG, England Deadlines: Paper submission: 31st December 1995 Notification of acceptance: 29th February 1996 Camera-ready copy due: 31st March 1996 Program committee: Ross Anderson (Cambridge University) Steve Low (AT&T Bell Laboratories) Ira Moskowitz (US Naval Research Laboratory) Andreas Pfitzmann (Technical University of Dresden) Gus Simmons (University of New Mexico) Michael Waidner (IBM, Zuerich) Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

Re: Hacking banking (fwd)
by Andrew Loewenstern 17 Dec '03

17 Dec '03

David Weisner writes, in a message forwarded by Brad Dolan: > "Already, Fuentes said, federal authorities in New York are > investigating whether programmers hired to write software for a > financial institution may have left a 'back door' open in the > program, one through which money may have been diverted to foreign > bank accounts." > Does anyone know what this federal investigation in New York is > about? How about copying this note around and seeing what people > can find out? Perhaps this is related to the recent Citicorp (Citibank? I have trouble keeping up...) job done by the people in Russia? andrew

1 0

64-bit GAK && 128-bit hashes
by Andrew Loewenstern 17 Dec '03

17 Dec '03

The recent guidelines for proposed export regulations from NIST include 64-bit keys and several people here have commented that this implies NSA ability to brute-force 64-bit keys now or in the near future ("belt and suspenders"). How does this bode for 128-bit hash functions such as MD5? If 64-bit encryption algorithms can be brute-forced, could birthday attacks and the like on 128-bit hashes be feasable as well? Perhaps the crypto community should start serously considering moving away from MD5 and towards 160-bit hashes such as SHA or even 256-bits... andrew

1 0

Patel decision page 17 handled
by landon_dyer＠wayfarer.com 17 Dec '03

17 Dec '03

1 0

Privacy book list
by SINCLAIR DOUGLAS N 17 Dec '03

17 Dec '03

I got a letter in the mail today from Plenum Publishing Corp in NY, advertising a book called _Mind Your Own Business: The Battle for Personal Privacy_ by Gini Graham Scott. It seems I am on a mailing list for privacy freaks. Oh the irony! They must have gotten my name from somewhere. The only two sources that I can think of are the lists for CFP '94 and '95, and a revolver club that I used to be a member of. Has anyone else on the list gotten this ad?

1 0

Commercial Speech over Internet product
by baldwin 17 Dec '03

17 Dec '03

Here's an article about a commercial company that is doing speech over the Internet. Maybe someone would like to help them add encryption. --Bob Baldwin, speaking for myself only. ------------------------ TrueSpeech Player enables real-time audio over Internet SANTA CLARA, CALIFORNIA, U.S.A., 1995 SEP 1 (NB) -- DSP Group Inc. (NASDAQ:DSPG) announced a new Windows product, TrueSpeech Player, that is freely available on the Internet. The TrueSpeech Player enables TrueSpeech- encoded speech to be played in real-time over the Internet. Kurt Magdanz, director of business development at DSP, told Newsbytes, "The TrueSpeech Player utilizes the TrueSpeech compression technology bundled in Microsoft's Windows 95 and Windows NT. True Speech is a very high quality algorithm which compresses speech. TrueSpeech Player allows users to decompress TrueSpeech in real time." With the TrueSpeech compression algorithm, speech is communicated in real- time over standard telephone lines to computers capable of communicating at data rates of 14.4kbps (kilobits per second) or above, Newsbytes was told. Because the TrueSpeech Player converts compressed speech data in real-time, World Wide Web site visitors have access to high-quality speech over the Internet in real time, said Magdanz. "The TrueSpeech Player is our first step in enabling high-quality speech communication in real-time over the Internet," said Yuval Cohen, vice president of business development with the DSP Group. "World Wide Web site and content developers can immediately begin developing TrueSpeech Player- compatible content without paying fees." "Content developers who wish to create TrueSpeech Player-compatible speech content should visit our World Wide Web site for detailed instructions on how to use this new product," said Cohen. DSP Group is currently developing an advanced TrueSpeech Server software package which will offer content developers tools, interaction with the TrueSpeech Player to enable advanced features, live broadcasting capability and enhanced server control with diagnostics, said Magdanz. The TrueSpeech Player can be downloaded freely from DSP Group's World Wide Web site, http://www.dspg.com . DSP is headquartered in Santa Clara, California. (Richard Bowers/19950831/Press Contact: Kurt Magdanz, DSP, 408- 986-4300)

4 3

cryptography eliminates lawyers?
by Cortland D. Starrett 17 Dec '03

17 Dec '03

As a follow-up to the article reference I posted, I pose the following question: Will cryptographic technology and information (communication) technology reduce the need for legal services in the future? (especially regarding contracts, buying/selling, patent law, etc.) Will legal services just look different? Will they be more efficient (cheaper)? Put bluntly, will cryptography put lawyers out of business? Any comments would be appreciated. Cort.

4 3

Looking for IETF old-timers (and others)
by Michael Froomkin 17 Dec '03

17 Dec '03

I've put up on a web page some parts of a paper I am writing on Internet jurisprudence. I'd welcome comments from anyone (this is a very early draft), but especially from any IETF old-timers, as the paper has a lot about the early days of internet standardmaking. The URL is http://www.law.miami.edu/~mfroomki/ils/ils.htm A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | mfroomki(a)umiami.ir.miami.edu U. Miami School of Law | P.O. Box 248087 | It's hot here. And humid. Coral Gables, FL 33124 USA | See (soon to move to its real home): http://www.law.miami.edu/~mfroomki

1 0

Patel decision page 12 handled
by landon_dyer＠wayfarer.com 17 Dec '03

17 Dec '03

1 0