December 2003 - cypherpunks-legacy

Di and Dodi Run Over A Land Mine
by Toto 17 Dec '03

17 Dec '03

Vin Suprynowicz wrote: > The campaign to ban land mines Vin, I have long held to the "80/20 Asshole Theory." There are many people in life whose circumstances of birth, heredity, environmental influences and social status would, with everything being equal, be destined to turn out 80% Asshole and 20% Decent Person, or vice-versa. Since we can never really know what the life and circumstances of another person has truly encompassed, we can never be certain, upon meeting someone who is 60% Asshole, whether they were destined to be 80% Asshole, and raised themself, or whether they were destined to be 20% Asshole, and lost major ground, becoming 80% Asshole, instead. I understand the perspective from which you write about Princess Diana, but I cannot help but view her from the perspective of an upper class young woman who was subjected to the anal-retentive mind-programming-control of the monarchy and still managed to raise her children in a wider world than their predecessors had been exposed to. I consider myself to be an anarchist, libertarian free-thinker and a man of reason, but I also realize that if I were crowned King of England tomorrow, that I might be offended if you didn't bow three times when you entered a room where my divine presence was present. I truly believe that the best one can hope for in life is to raise their children to go beyond the boundaries that limit their parents. Diana's destiny within the monarchy was to become programmed to fit into the narrow confines of the role prepared for her. Perhaps if her Puppet Masters had been more patient, she may have become enslaved according to the wishes of her superiors, but the fact is that she was buffeted by trials and tribulations that resulted from her not going quietly into the dark night that the monarchy had planned for her. Diana used the position that was bestowed upon her to give comfort and hope to the halt, the lame, and the downtrodden. Did she do it out of self-serving egoism, or an attempt to gain recognition and fame as a humanitarian? I don't know, I don't care, and it is really none of my business. What *is* my business is to view my fellow man/woman and perceive if they are lifted up or further downtrodden by their interactions with myself and others. I have seen the faces of the AIDS children that she touched, when no one else would, and the lepers whom she shook hands with, when others were afraid to do so, and I have seen the light that she spread among those whom society had cast aside. You said: "They are, after all, born into a society where a person with the wrong accent, or skin color, can never hope to do more than dream of a royal marriage, and dinner at the Ritz." You are wrong. Even the peasant and the imprisoned can dream the dreams that come from the fairy tales that uplift us and give us hope, however unrealistic it may be. And, even if it is one in a million, someone will have that dream come true. Yes, in reality, the story of Diana, the commoner turned Princess, was overblown. No, you are doing the downtrodden no favor by trying to point that out to them. Why? Because no one will grasp the golden ring if no one tries. No one will rise above their predestined station in life if no one believes that it is indeed possible to do so. Perhaps Diana was a priveleged, rich cunt who had it 'better' than those whom she condescended to 'bless' with her presence and her attention. But she touched the untouchables and she lifted those who had been held down, and those whose lives she touched benefitted from her presence, no matter what her motivations or intentions. You write that Diana's campaign against the use of land mines is an unrealistic attempt to negate the cheap and effective defense of the poorer countries. Perhaps what was needed was for her to have the input of someone such as yourself who understands the need for cheap and effective self-defence, so that she could concentrate her efforts on removing landmines that are no longer needed, and preventing the dispersal of landmines which are not truly needed for self-defence, but are only serving as 'toys for boys' who want to play soldier. As far as I am concerned, you and Diana both have something very important in common--the world is a better place for your being here. We need more Vin's, so that there is someone to remind the bleeding hearts that weakness and capitulation can cost more lives and loss of freedom than are gained by seeking an unbalanced 'peace'. We need more Diana's, so that there is someone to remind the warriors that indiscriminate use of weaponry that is not essential may result in the loss of lives of the innocent, rather than the elimination of the threat that must be defended against. I guess what I am saying is that it no more matter to me whether Diana is a fraudulent invention of the media, than it matters to me whether you are a carpetbagger riding on the coat tails of the libertarian movement. What matters to me is that Diana inspires others to treat the untouchables as fellow human beings, and that you remind me to carry a big stick to beat the fuckers with if I find them sneaking up behind me. Besides, anyone who gets whacked out by the monarchy can't be all that bad... {:>}------< (Help! They knocked me down, and cut off my arms!) Toto "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix "WebWorld & the Mythical Circle of Eunuchs" http://bureau42.base.org/public/webworld "The Final Frontier" http://www3.sk.sympatico.ca/carljohn

1 0

NYT on Netscape Crack
by John Young 17 Dec '03

17 Dec '03

The New York Times, September 19, 1995, pp. A1, D21. Security Flaw Is Discovered In Software Used in Shopping By John Markoff San Francisco, Sept. 18 -- A serious security flaw has been discovered in Netscape, the most popular software used for computer transactions over the Internet's World Wide Web, threatening to cast a chill over the emerging market for electronic commerce. The flaw, which could enable a knowledgeable criminal to use a computer to break Netscape's security coding system in less than a minute, means that no one using the software can be certain of protecting credit card information, bank account numbers or other types of information that Netscape is supposed to keep private during on-line transactions. The weakness was identified by two first-year graduate students in computer science at the University of California at Berkeley, who published their findings on an Internet mailing list Sunday evening. Although the Netscape Communications Corporation, which produces the software, said today that the flaw could be fixed and that new copies of the software would be distributed as early as next week, Internet experts said the discovery underscored the danger of assuming that any computer security system was safe. "There needs to be much more public auditability in the way these financial security systems are designed and implemented," said Eric Hughes, president of Open Financial Networks, a company in Berkeley that is developing Internet commerce systems. The Netscape software is already used by an estimated eight million people for navigating the World Wide Web portion of the Internet. On the Web, thousands of companies offer text, images, video and audio information, much of it as a way of advertising or directly selling goods and services. Because the Netscape software is not only easy to use but has also been promoted as a secure way of dealing with personal and financial information, it has been seen as the emerging de facto standard for on-line commerce. Already, a diverse group of companies -- including Wells Fargo Bank, MCI Communications, Internet Shopping Network and Virtual Vineyards -- have adopted Netscape as the vehicle for checking bank balances, catalogue shopping or buying wine on line. Although Internet experts agreed with the company's assessment that the flaw could be fixed and that it posed no risk to people who use the World Wide Web only to retrieve nonsensitive data, the security problem's disclosure may represent a public relations setback for Netscape Communications and an inconvenience to millions of people who may feel a need to replace the version of Netscape installed on their computers. Last month the company's shares began public trading and had one of the most successful first days in Wall Street's history, largely on the resounding popularity of the Netscape software. Today, as word of the security flaw circulated only within fairly small circles of Internet users, Netscape's stock closed with a slight loss, down 75 cents, to $52.50, in low Nasdaq trading volume. The company said it would release a repaired version of the software within a week. Users will be able to download it free over the Internet, through the Netscape site on the World Wide Web (http://home.netscape.com) The company had previously announced a next-generation version of Netscape that it said would be more secure than the original, and it said today that it would release this updated version within the next few weeks. But first it will remove the newly disclosed flaw, which is currently in the new version. "The good news and the bad news of the Internet is that when you put something up there, many more people can test it," said Mike Homer, the vice president of marketing at Netscape. "You also give yourself the opportunity of having people point things out which you can fix quickly." The company so far has distributed most copies of its program free over the Internet, under a strategy of making its money from commercial customers who use Netscape to provide services or for other business applications over the World Wide Web. So replacing the copies will not be an expensive undertaking. Instead, for Netscape Communications and for other companies betting their futures on the Internet, the real cost of this disclosure may be in the public's shaken confidence in the ability of computer companies to insure privacy and security for on-line commerce. The weakness in Netscape's security was discovered by Ian Goldberg, 22, and David Wagner, 21, two computer science students who share an office at the university and who also share an interest in the arcane science of cryptography, which is becoming increasingly important for business as companies begin to explore electronic commerce. The two students said they had decided to put the software to a test in an effort to raise public concern about placing too much trust in unproved electronic security systems. Netscape's security is based on a type of coding technology known generically as public key cryptography in which users exchange mathematically generated numbers -- or keys -- to encode or decode information. In such systems, a new key is created for each information exchange, based on a mathematical formula that is combined with numbers supposedly known only to the sender or recipient. The students found that by determining how Netscape's formula generated the number used as a starting point for creating a key, they were able to greatly reduce the potential combinations that would unlock the code. The starting-point number turned out to be based on the time and date of the transaction, combined with several other unique bits of information taken from a user's computer system -- bits of information that an electronic intruder could determine, if he were intent on intercepting a Netscape user's transactions. Knowing how the starting-point number was created greatly reduced the other possible components of the formula -- and the students found they were able to break the code in a matter of seconds using a standard computer work station. Netscape officials said today that they would strengthen the system, by making it significantly harder to determine the random number at the heart of their coding system. They said they would no longer disclose what data would be used to generate the random numbers. The announcement of the flaw was posted Sunday night on a computer network mailing list maintained by an informal group known as Cypherpunks. The group, which is made up of mathematicians, computer experts and privacy advocates, has been campaigning for more effective electronic security systems. The discovery is the second reported security weakness in the Netscape program to be posted on the Cypherpunks list in the last month. In August, Damien Doligez, a student at the Ecole Polytechnique in Paris, used a network of 120 computers, running for eight days, to generate a Netscape secret key. But his was a "brute force" attack, requiring the computers to sample a vast range of numbers before coming up with a key that would break the code. The Berkeley students, in contrast, by identifying a basic flaw in the way Netscape set up its security system, were able to narrowly focus their attack to quickly break the code, with far less computer power. [End]

13 23

CDT on "useless crypto legislation"
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Sat, 6 Sep 1997 11:53:34 -0400 From: Jonah Seiger <jseiger(a)cdt.org> To: declan(a)well.com, tbetz(a)pobox.com Cc: fight-censorship(a)vorlon.mit.edu Subject: Re: Useless Crypto Legislation -- NYT reference (Was: Radical Crypto At 12:57 AM -0400 9/6/97, Declan McCullagh wrote: >> This is a surprise? >> >> To whom? > >To be fair, I was going through my crypto-history this evening and noted >Brock wrote about a similar proposal two and a half years ago... Hardly a >surprise to any of us. Not a surprise in the sense that we all knew the FBI would propose something like this sooner or later. None-the-less, this is a significant new threat and it would be a very very dangerous for us to underestimate it. The House Intelligence and National Security Committees are voting on SAFE next week. The FBI's draft is no doubt part of the Administration's effort to gut the bill. We should expect that this language will be offered at one or both of those committee votes, and that it stands a good chance of being adopted. That sets up an all out fight on the House floor, and a very tough fight. The debate has changed -- it's now about defeating mandatory key recovery. VTW and CDT have issued an ALERT and are urging Internet users to contact their Representatives on the Intelligence and National Security Committees. Visit http://www.crypto.com/adopt for details. Kudos to Brock for a great piece. Jonah * Value Your Privacy? The Government Doesn't. Say 'No' to Key Escrow! * Adopt Your Legislator - http://www.crypto.com/adopt -- Jonah Seiger, Communications Director (v) +1.202.637.9800 Center for Democracy and Technology pager: +1.202.859.2151 <jseiger(a)cdt.org> http://www.cdt.org PGP Key via finger http://www.cdt.org/homes/jseiger/

1 0

Re: Netscape sub rosa?
by stevenw＠iglou.com 17 Dec '03

17 Dec '03

>Gee, where's that "Cypherpunks logo" when you really need it? >From a PR standpoint, this is the best idea of the year. >A rose covering the Netscape "N" logo? A crypto eagle swooping down and >pecking at weak keys? How about a big 200 pin PGA chip with a jagged crack right across it? Implications of "broken" or "cracked", obviously technical/electronic, and echoes of Clipper. Throw some streams of ones and zeroes in the background for good measure. ------------------------------------------------------------------------- Steven Weller | "The Internet, of course, is more +1 415 390 9732 | than just a place to find pictures | of people having sex with dogs." stevenw(a)iglou.com | -- Time Magazine, 3 July 1995

1 0

Banks and Netscape InSec
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Financial Times, September 20, 1995, p. 12. Banks' Security Chains Failed The Citibank case has highlighted weaknesses in corporate security measures. By John Mason Could it happen to us? Banks have been soul-searching about their security systems in response to the alleged computer hacking fraud on Citibank, in which $10m (6.49m pounds) is said to have been removed from client accounts by a young Russian based in St Petersburg. In public, banks express confidence in their computer security. "It's a shame what happened at Citibank, but it couldn't happen here," is a typical response. However, some industry insiders are concerned that many banks and other commercial organisations are still leaving themselves dangerously open to attack by hackers. Rumours of some banks not admitting to similar breaches only increase doubts. The full technical picture of what allegedly happened at Citibank is unclear. The largest US bank, unsurprisingly, is reluctant to reveal precisely how Mr Vladimir Levin -- apparently without inside help -- allegedly breached its Wall Street security system from his personal computer in St Petersburg. A UK court will today decide whether to extradite Mr Levin to the US to face trial. It seems that Citibank was caught out by its technology, which could not match recent developments available to hackers. Citibank's main weakness is known to have been its use of "fixed passwords" to guard its computerised cash management system. This system, dubbed Citicorp Cash Manager, handles transactions totalling $5OObn every day. Cash management systems which provide customers with access to their accounts so that they can make transfers, are inherently vulnerable to hackers because by definition they allow third-party access. In the case of Citibank, access to the cash management system could be made via telephone lines from anywhere in the world using a computer. Until the incident, Citibank's system used fixed or permanent passwords where the customer has only to enter a name and regular password to gain entry to the system. However, security experts now agree that this technology has been rendered ineffective at guarding high-risk systems by the proliferation of modem communications devices attached to powerful PCs providing access to the Internet. Hackers now have ready access to sophisticated software including "sniffers" -- programs used by network managers which allow them to look at and capture information on networks. These give hackers access to huge quantities of information -- including directories of passwords. The hackers can then take their pick of which password to use. With bank cash management systems, this virtually amounts to giving a hacker the choice of which client account to loot. There are a number of steps banks and other security-conscious computer network operators can take to defend themselves against unauthorised intruders. The main option -- and that introduced by Citibank since the Levin incident -- involves the use of encrypted passwords that can be used only once. A "smart card" issued to each customer contains a sequence of passwords so that a different one is used each time. This password is then encrypted or scrambled into a form that is, its manufacturers claim unreadable to anyone "surfing" the Internet. The main computer then deciphers the signal and, able to recognise the sequence of changing passwords, lets the genuine user into the system. The chances of someone guessing one of Citibanks's passwords are now one in 11m, says Mr Tom Brady of Enigma Logic of Concord, California, which supplies this technology to Citibank. The bank's previous fixed password technology, by contrast, meant breaking the password system was relatively straightforward, he says. Concern centres on how quickly banks and others have reacted to technological change. Although encryption technology has been available for more than 10 years, it is only now being generally introduced, and usually only for systems with external access. Barclays Bank introduced encryption for computer systems with external access before the Citibank incident occured. Barclays now feels "fairly comfortable" about the state of its security, says Mr Philip Severs, deputy director of operational risk. However, it is clear that not every bank has closed the door yet. Mr Severs says the business world is just "on the cusp" of introducing encryption technology. Another security adviser says the measures of one leading US bank, based on both fixed and encrypted passwords, are still considered weak by experts. Another security specialist employed by a leading international bank says that senior management throughout the industry has sometimes been slow to react to change. "Sometimes people think that their security is adequate simply because it has not been breached in the past. At other times, head offices are warned of the dangers, but fail to act because of cost factors." Whatever the state of bank security, their experts agree that their customers' awareness of the problem is lower. "Whenever payments are made or orders placed electronically, then a threat exists. The banks are leading on this. Companies are some way behind," says Mr Severs. But encryption remains only one way of improving security. The alleged hacking incident at Citibank involved more than simply breaching the bank's password system. The US government claims Mr Levin was able to watch corporate clients making numerous transactions before deciding which account to take money from. He also allegedly spotted one security precaution in place and limited each of his withdrawals to under 200,000 pounds ($310,540). Citibank will not comment on its security measures other than to point to its "smart cards". Huwever, the bank agrees that there was only partiai use of another well-established. security system -- "predefined" transfer routes. These allow customers to make transfers only to specific bank accounts making it impossible for a hacker to remove funds for himself. Citibank offers such an option. However, it is only useful to some customers. The average corporate customer might find it suitable because the number of destination accounts they need is limited. However, for financial institutions making transfers to many accounts, such a system is too cumbersome. Perhaps significantly, one of Mr Levin's alleged nctims was an investment company. Citibank investigators say Mr Levin gave himself away by making a number of "amateurish" mistakes, but admit he was a very sophisticated computer operator, allegedly attempting a particularly elegant fraud. The bank concedes that it still does not fully understand all the technical aspects of how Mr Levin allegedly managed to break in. If and when he is extradited to the US and introduced to that country's plea bargaining system, he will be invited to explain further. Banking security experts agree that the Citibank episode shows that effective detection systems to track unusual transactions remain essential. In the Citibank case these worked well, enabling the attempted fraud to be nipped in the bud, monitored and losses kept to $400,000. But they agree that even if new technology is introduced, keeping one step ahead of the hackers all the time is just not possible. One with knowledge of the Citibank case comments: "At the end of the day it cannot be done. Essentially, security is about being reactive, not pro-dctive." Meanwhile, the Citibank episode provides the most public example yet of how hackers can threaten the integrity of the international banking system. And just as the Barings collapse prompted other banks to review their internal management controls, so Mr Levin's case is having a similar effect on computer security. But as one bank security expert says: "It takes an incident like this to prompt people to review their systems. Whether they take action however is a different matter." ----- Financial Times, September 20, 1995, p. 20. Netscape flaw may deal blow to Internet security By Louise Kehoe in San Francisco A security flaw in Netscape Communications' popular Internet software could deal a serious blow to companies planning to transact business on the Internet, the global computer network. The flaw, discovered by two computer science students at the University of California at Berkeley, means that financially sensitive data, such as credit card numbers, sent over the Internet using Netscape software could be vulnerable to computer hackers. "Security is the number one issue" that needs to be resolved if the Internet is to become a medium for largescale electronic commerce, according to Ms Cathy Medich, executive director of CommerceNet, a consortium of companies that is developing standards and protocols for conducting business on the Internet with backing from the US government. The security breach is a setback for Netscape, raising concerns about the company's ability to produce reliable secure software. Netscape's so-called secure browsers are used by an estimated 66 per cent of people accessing the World Wide Web, the segment of the Internet where thousands of companies have set up electronic displays of their products. The software had been seen as a breakthrough for electronic commerce, enabling people to buy and sell goods online without fear of their messages being intercepted. Netscape confirmed that a security loophole has been identified, but said it would offer a free security "patch" by the end of this week on its World Wide Web page (http://home.netscape.com) No losses have been reported as a result of the security breach, Netscape said. This is the second time that Netscape's encryption has been "cracked". Last month, a computer expert in France was able to decode the weaker version of Netscape's cyphers, which the company is allowed to export. The security flaw found by the Berkeley students affects all current versions of Netscape soMware, including its browsers and server software, the company said. However, next week the company will begin trials of a new version of its browser, which will contain the security patch. -----

1 0

Re: Cylink
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

Paul Robichaux <paul(a)poboy.b17c.ingr.com> writes: > Andrew Loewenstern writes: > > Any ideas on how this will change the legal status of RSAREF and PGP? > > Then Perry Metzger replied: > > I'm much more interested in how this changes the legal status of the > > D-H derived encryption systems like ElGamal, and how it alters the > > patent status on the DSS, which is basically also derived from the > > same root. > > What I'm waiting to see is who sues RSADSI for recovery of royalties > paid to Cylink. Imagine how Apple, Lotus, and all of the other > bigcorps using RSA must feel right about now: they licensed a patent > from the wrong people, and it appears that RSADSI may have known that > their rights had expired. It's sooo gratifying seeing the err, ever so slightly litigious folks from RSADSI get a dose of their own medicine. :-) Does it apply to RSA and hence PGP by way of RSAREF, and a claimed general patent on PK, or was this court decision on specific DH patents only? If so I hope the proud new owners have better marketing sense than to stomp on their huge advertisment of RSA, PGP. Adam

1 0

Pauline Hanson's One Nation news letter
by Global Web Builders 17 Dec '03

17 Dec '03

IF YOU WISH TO BE REMOVED FROM THE MAILING LIST PLEASE RESPOND WITH "PLEASE REMOVE" IN THE SUBJECT LINE. NO NEWSLETTERS ARE SENT OUT WITHOUR A PRIOR REQUEST BEING RECEIVED. ____________________________________________________________________________ _________ Issue 1.2 6th September 1997 nsw Dear supporter, Firstly I would like to thank you all for the excellent feedback that I have been getting through the Internet. For your information nearly 150,000 visits have been recorded on One Nation web sites since April this year - that is over 1,000 a day! Secondly, a very big thank you for those who have offered to make donations through email. We have had donations of up to $1,000 to Pauline Hanson's One Nation through the Internet this month - a very big help as we move towards the next federal election. For those who have requested advice on how to offer financial support please send your cheque made out to Pauline Hanson's One Nation and post your cheque with your details to: National Director, Pauline Hanson's One Nation, P.O. Box 2000, Manly, NSW, 2095 The Internet is proving to be a very valuable tool in communicating what I say, not what the media would have you believe that I say. It is also your opportunity to communicate your concerns to me. Pauline Hanson's One Nation branches are now opening at the phenomenal rate of ten a week. For all those involved a big thank you. We are starting to get things moving for the future of our Australia - One Nation. For those of you who are not aware I will not be standing for a Senate seat, even though the Australian Electoral Commission cut my federal seat of Oxley in half - right through the middle of Ipswich. I believe that the only way that can I continue to play a leading role for the party and for Australia is by staying on as a federal member of parliament. As yet, I have not decided whether to stand in the revised seat of Oxley or to stand for the seat of Blair. For those of you wanting to join your local branch, I will shortly be putting up the URL for key contact details on-line on a state by state basis. I apologise for the delay in providing these details, because of our phenomenal growth, in the meantime please feel free to contact the national headquarters of Pauline Hanson's One Nation in Sydney at (02) 9976 0283 for information. Key Internet addresses: The Hanson Phenomenon: http://www.gwb.com.au/hanson.html Pauline Hanson's One Nation press releases: http://www.gwb.com.au/onenation/press Here is a small extract from some words by a Canberra supporter: One nation uniting the continent, One nation, proud and free, One nation for all of Australia, One nation for you and me. Pauline Hanson's One Nation Pauline Hanson

1 0

USA Today on Fear of Credit Cards over Net
by futplex＠pseudonym.com 17 Dec '03

17 Dec '03

USA Today reports in its 9/20/95 edition, on the front of the Money section, that "Few Feel Safe Making On-Line Transactions". A survey of 427 "computer users" by USA Today and Intelliquest yielded the results below. [The article doesn't say whether the survey was conducted before or after news of the bad seeds hit. <sigh>. I only bought USA Today because my best friend gets her 15 minutes of fame below the fold on page 7D of the Life section today.] I'm not sure exactly what "sending a credit-card number to a commercial on- line service" means. Apparently it's seen as slightly safer than phoning it in, but much riskier than snail-mailing it in to an ISP. How much do PC users trust: Automatic teller machines 77% Banking by phone 62% Banking by computer 57% Using a credit card or calling card at a public phone 57% Writing a credit-card number on a catalog order form 43% Sending a credit-card number to a commercial on-line service 34% Giving a credit-card number over the phone 31% Sending a credit-card number over the Internet 5% (margin of error = +/- 4.7%) Raph also gets mentioned, mainly for "human interest" I'm afraid :/ Even those familiar with the Internet do not routinely use it for financial transactions. Raph Levien -- a computer science Ph.D. candidate reached via Internet -- says he has only used his credit card once over the Internet. About a year ago, he bought three CDs: Best of Alan Parsons Project, Enya and Beethoven's Ninth. Levien is a member of the group cypherpunks, which announced on-line Sunday night that hackers found the security flaw in Netscape's software. Still, Levien says Netscape's system "is among the safest that there is." -Futplex <futplex(a)pseudonym.com>

1 0

Freeh Testimony
by John Young 17 Dec '03

17 Dec '03

Thanks to Declan McCullagh we offer FBI Director Freeh's September 3 testimony to the Judiciary subcommittee chaired by Senator Kyl: http://jya.com/fbi-gak.txt (58K)

1 0

Junger v. DoC Docs
by John Young 17 Dec '03

17 Dec '03

We offer recent exchanges between Peter Junger's attorney and BXA on the several encryption classification requests Peter described here a few days ago, including "twiddle," "fiddle," non-US PGP, ROT13, Adam Back's 3-line of Perl RSA, Paul Leyland's one-time pad, RC2 and RC4, and crypto links to foreign sites: http://jya.com/pdj2.htm Peter's message on this is at: http://jya.com/pdj-update.htm And the original Junger v. DoS (now Junger v. DoC) case filings: http://jya.com/pdj.htm

1 0