December 2003 - cypherpunks-legacy

Re: FBI calls for mandatory key escrow; Denning on export ctrls
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Thu, 4 Sep 1997 09:58:00 -0400 (EDT) From: Peter F Cassidy <pcassidy(a)world.std.com> To: dcsb(a)ai.mit.edu Subject: Re: FBI calls for mandatory key escrow; Denning on export ctrls Mime-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Peter F Cassidy <pcassidy(a)world.std.com> Friends, The campaign to bring all communications technologies under state/military control is progressing almost exactly as planned. On my desk is the Jan. 1992 memorandum from Brent Scowcroft, former national security advisor to Bush, outlining the digital telephony/crypto control strategy. The president, Scowcroft wrote in the memorandum, had advised: "Justice should go ahead now to seek a legislative fix to the digital telephony problem, and all parties should prepare to follow through on the encryption problem in about a year. Success with digital telephony will lock in one major objective; we will have a beachhead we can exploit for the encryption fix; and the encryption access options can be developed more thoroughly in the meantime." Digital Telephony legislation was passed in October of 1994 - after the directors of the NSA and FBI visisted senators who were sitting on it and placed holds on it - one for idealogical reasons, the other for horsetrading later in the session. Within days the holds were removed, the legislation flew through both houses in voice votes, if memory serves, and Clinton, a war protester who has become a virtual puppet of the military intelligence system in communications policy, signed it about a week later. Everyone has a telephone yet the opposition couldn't muster enough popular dissent to crush the legislation. This makes me fear for the future of crypto, the conscious users of which define a much smaller universe than telephone users. Most interestingly, the FBI didn't even have real facts on wiretaps to prove its case. A recent academic study indicates that the wiretapping stats that the FBI used to "prove" its case - the absolute necessity of wiretapping - were in large part falsified. (Starting in the early 90s, requests for wiretapping suddenly shot up, while, if you check later, the numbers of executions of the orders and subsequent arrests and prosecutions stayed flat.) PFC > > All encryption products sold or distributed in the U.S. > must have a key escrow backdoor "like an airbag in a car," > law enforcement agents advised a Senate panel this > afternoon. > > FBI Director Louis Freeh also told a Senate Judiciary > subcommittee that "network service providers should be > required to have some immediate decryption ability > available" permitting agents to readily descramble > encrypted messages that pass through their system. > > This marks the most aggressive push to date for > mandatory domestic key escrow (or "key recovery"), > which means someone else other than the recipient can > decipher messages you send out. Now, the easiest way > to win such a political tussle in Washington is to > control the terms of the debate. And nobody > understands that rule better than Sen. Jon Kyl > (R-Arizona), chair of the Judiciary subcommittee on > technology, terrorism, and government information. > > Kyl opened today's hearing not by saying its purpose > was to discuss crypto in a balanced manner, but that > he wanted "to explore how encryption is affecting the > way we deal with criminals, terrorists, and the > security needs of business." Then he talked at length > about "criminals and terrorists" using crypto, and > child pornographers "using encryption to hide > pornographic images of children that they transmit > across the Internet." > > Kyl also stacked the three panels. Out of seven > witnesses, five were current or former law enforcement > agents. No privacy or civil liberties advocates > testified. Some companies including FedEx apparently > dropped out when told they'd have to pay lip service > to key escrow if they wanted to speak. > > Dorothy Denning, a Georgetown University professor of > computer science, did testify. Kyl made a point of > asking her if she still supported key escrow systems > (two recent articles by Will Rodger and Simson > Garfinkel said she was changing her mind). "I think > key recovery offers a very attractive approach," > Denning said. What about export controls? "In the > absence of any controls, the problem for law > enforcement would get worse," she replied. > > But when Sen. Dianne Feinstein (D-Calif) asked if > Denning would support a *mandatory* key escrow system, > the computer scientist said she wouldn't. "No, because > we don't have a lot of experience we key recovery > systems... a lot of people are legitimately nervous." > > (Keep in mind that although Feinstein supposedly > represents Silicon Valley, she's no friend of high > tech firms. She opposes lifting export controls; in > fact, she says that "nothing other than some form of > mandatory key recovery really does the job" of > preventing crime. Of course, Feinstein doesn't have a > clue. She talks about whether businesses would want "a > hard key or digital key or a key infrastructure." Yes, > folks, this is in fact meaningless blather.) > > Marc Rotenberg, director of the Electronic Privacy > Information Center in Washington, DC, says, "Simply > stated, the Senate train is headed in the wrong > direction. But of course this doesn't answer the > question of what will ultimately be resolved by > Congress? There's a very popular measure in the House > right now that's heading in a different direction." > > Rotenberg is talking about Rep. Bob Goodlatte's SAFE > bill, which is much more pro-business than S.909, > the McCain-Kerrey Senate bill that Kyl supports. Now, > S.909 doesn't mandate key recovery; it only strongly > encourages it by wielding the federal government's > purchasing power to jumpstart a key recovery > infrastructure. > > But Kyl would go further. At a recent Heritage > Foundation roundtable on encryption, I asked him, "Why > not make key recovery technology mandatory -- after > all, terrorists, drug kingpins and other criminals > won't use it otherwise. Kyl's response? Not that it > would be a violation of Constitutional due process and > search and seizure protections or a bad idea. Instead, > he told me he simply didn't have enough votes... > > -Declan > > --- end forwarded text > > > > ----------------- > Robert Hettinga (rah(a)shipwright.com) Philodox > e$, 44 Farquhar Street, Boston, MA 02131 USA > "... however it may deserve respect for its usefulness and antiquity, > [predicting the end of the world] has not been found agreeable to > experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' > The e$ Home Page: http://www.shipwright.com/ > > > > For help on using this list (especially unsubscribing), send a message to > "dcsb-request(a)ai.mit.edu" with one line of text: "help". > For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: Time release crypto
by Bill Stewart 17 Dec '03

17 Dec '03

>>What minimal requirements would be needed to support encrypted packets/files >>that a holder could only decrypt after a certain date/time? Technology can't solve the problem, only help a bit; algorithms aren't timebound. In particular, true security depends on only being able to decrypt if you have the correct information, and there's no way to create decryption information in the future from encryption pieces you have now without being able to create the same information now. Tim's 1993 article suggests spreading data around with > independent escrow agents who handle large volumes of messages > and agree to hold them for various amounts of time. and depending on reputations and market forces to ensure honesty. > The decryption key to the original message is itself broken >up into several or many pieces and scattered to a network of >"remailer"-like agents (they are essentially "remailers into the future," >by agreeing as part of their protocol to hold messages for some amount of time). What Tim almost, but not quite, mentions here is Shamir Secret Sharing - you can split messages into N pieces, of which any M can reconstruct the message and any M-1 don't contain enough information to resolve their equations uniquely, leaving you with _no_ known correct bits. Tim's message also talked about having lots of data flowing around in a remailer-like fashion, but that may not be untraceable by subpoenas, #--- # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

2 1

Read This Twice!!
by List1 17 Dec '03

17 Dec '03

Read This Twice!! The following opportunity is one you may be interested in taking a look at. It can be started with VERY MINIMAL outlay! Read the enclosed program...THEN READ IT AGAIN!... The enclosed information is something I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave some thought and study to it. My name is Christopher Erickson. Two years ago, the corporation I worked at for the past twelve years down-sized and my position was eliminated. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends, and creditors over $35,000. The economy was taking a toll on my business and I just couldn't seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. I truly believe it was wrong for me to be in debt like this. AT THAT MOMENT something significant happened in my life and I am writing to share my experience in hopes that this will change your life FOREVER....FINANCIALLY!!! In mid-December, I received this program via email. Six months prior to receiving this program I had been sending away for information on various business opportunities. All of the programs I received, in my opinion, were not cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk to see if they worked or not. One claimed I'd make a million dollars in one year...it didn't tell me I'd have to write a book to make it. But like I was saying, in December of '96 I received this program. I didn't send for it, or ask for it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After reading it several times, to make sure I was reading it correctly, I couldn't believe my eyes. I could invest as much as I wanted to start, without putting me further in debt. After I got a pencil and paper and figured it out, I would at least get my money back. After determining that the program is LEGAL and NOT A CHAIN LETTER, I decided "WHY NOT". Initially I sent out 10,000 emails. It only cost me about $15.00 for my time on-line. The great thing about email is that I didn't need any money for printing to send out the program, only the cost to fulfill my orders. I am telling you like it is, I hope it doesn't turn you off. A good email extracting and mass mail program can be found at: http://www.colba.net I paid off ALL my debts and bought a much needed new car. Please take time to read the attached program, IT WILL CHANGE YOUR LIFE FOREVER! Remember, it wont work if you don't try it. This program does work, but you must follow it EXACTLY! Especially the rules of not trying to place your name in a different place. It doesn't work, you'll lose out on a lot of money! REPORT #2 explains this. Always follow the guarantee, 15 to 20 orders for REPORT #1, and 100 or more orders for REPORT #2 and you will make $50,000 or more in 20 to 90 days. I AM LIVING PROOF THAT IT WORKS !!! If you are a fellow business owner and you are in financial trouble like I was, or you want to start your own business, consider this a sign. I DID! Sincerely, Christopher Erickson "THREW IT AWAY" "I had received this program before. I threw it away, but later wondered if I shouldn't have given it a try. Of course, I had no idea who to contact to get a copy, so I had to wait until I was emailed another copy of the program. Eleven months passed, then it came. I DIDN'T throw this one away. I made $41,000 on the first try." Dawn W., Evansville, IN A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM You have just received information that can give you financial freedom for the rest of your life, with "NO RISK" and "JUST A LITTLE BIT OF EFFORT." You can make more money in the next few months than you have ever imagined. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now. Remember to email a copy of this exciting program to everyone that you can think of. One of the people you send this to may send out 50,000...and your name will be on every one of them!. Remember though, the more you send out, the more potential customers you will reach. HERE'S HOW THIS PROGRAM WILL MAKE YOU $$$$$$ Let's say that you decide to start small, just to see how it goes, and we'll assume you and all those involved send out 2,000 programs each. Let's also assume that the mailing receives a .5% response. Using a good list the response could be much better. Also many people will send out hundreds of thousands of programs instead of 2,000. But continuing with this example, you send out only 2,000 programs. With a 5% response, that is only 10 orders for REPORT #1. Those 10 people respond by sending out 2,000 programs each for a total of 20,000. Out of those .5%, 100 people respond and order REPORT #2. Those 100 mail out 2,000 programs each for a total of 200,000. The .5% response to that is 1,000 orders for REPORT #3. Those 1,000 send out 2,000 programs each for a 2,000,000 total. The .5% response to that is 10,000 orders for REPORT #4. That's 10,000 five dollar bills for you. CASH!!!! Your total income in this example is $50 + $500 + $5000 + $50,000 for a total of $55,550!!!! REMEMBER, THIS IS ASSUMING 1,990 OUT OF 2,000 PEOPLE YOU MAIL TO WILL DO ABSOLUTELY NOTHING... AND TRASH THIS PROGRAM! DARE TO THINK FOR A MOMENT WHAT WOULD HAPPEN IF EVERYONE OR HALF SENT OUT 100,000 PROGRAMS INSTEAD OF ONLY 2,000. Believe me, many people will do that and more! By the way, your cost to participate in this is practically nothing. You obviously already have an Internet connection and email is FREE!!! REPORT#3 will show you the best methods for bulk emailing and purchasing email lists. THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY It does not require you to come in contact with people, do any hard work, and best of all, you never have to leave the house except to get the mail. If you believe that someday you'll get that big break that you've been waiting for, THIS IS IT! Simply follow the instructions, and your dream will come true. This multi-level email order marketing program works perfectly...100% EVERY TIME. Email is the sales tool of the future. Take advantage of this non-commercialized method of advertising NOW!! MULTI-LEVEL MARKETING (MLM) has finally gained respectability. It is being taught in the Harvard Business School, and both Stanford Research and The Wall Street Journal have stated that between 50% and 65% of all goods and services will be sold throughout Multi-level Methods by the mid to late 1990's. This is a Multi-Billion Dollar industry and of the 500,000 millionaires in the US, 20% (100,000) made their fortune in the last several years in MLM. Moreover, statistics show 45 people become millionaires everyday through Multi-Level Marketing. This is the GREATEST Multi-level Mail Order Marketing anywhere: Order all four 4 REPORTS listed by NAME AND NUMBER. Do this by ordering the REPORT from each of the four 4 names listed on the next page. For each REPORT, send $5 CASH and a SELF- ADDRESSED, STAMPED envelope (BUSINESS SIZE #10) to the person listed for the SPECIFIC REPORT. International orders should also include $1 extra for postage. It is essential that you specify the NAME and NUMBER of the report requested to the person you are ordering from. You will need ALL FOUR 4 REPORTS because you will be REPRINTING and RESELLING them. DO NOT alter the names or sequence other than what the instructions say. IMPORTANT: Always provide same-day service on all orders. Replace the name and address under REPORT #1 with yours, moving the one that was there down to REPORT #2. Drop the name and address under REPORT #2 to REPORT #3, moving the one that was there to REPORT #4. The name and address that was under REPORT #4 is dropped from the list and this party is no doubt on the way to the bank. When doing this, make certain you type the names and addresses ACCURATELY! DO NOT MIX UP MOVING PRODUCT/REPORT POSITIONS!!! Having made the required changes in the NAME list, save it as a text (.txt) file in it's own directory to be used with whatever email program you like. Again, REPORT #3 will tell you the best methods of bulk emailing and acquiring email lists. Email a copy of the entire program (all of this is very important) to everyone whose address you can get your hands on. Start with friends and relatives since you can encourage them to take advantage of this fabulous money-making opportunity. That's what I did. And they love me now, more than ever. Then, email to anyone and everyone! Use your imagination! You can get email addresses from companies on the Internet who specialize in email mailing lists. These are very cheap, 100,000 addresses for around $35.00. IMPORTANT: You won't get a good response if you use an old list, so always request a FRESH, NEW list. You will find out where to purchase these lists when you order the four 4 REPORTS. REQUIRED REPORTS ***Order each REPORT by NUMBER and NAME*** ALWAYS SEND A SELF-ADDRESSED, STAMPED ENVELOPE AND $5 CASH FOR EACH ORDER REQUESTING THE SPECIFIC REPORT BY NAME AND NUMBER ________________________________________________________ REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 FROM: MaxPol.com C.P. 503 St-Jean-sur-Richelieu QC, Canada J3B 6Z8 ________________________________________________________ REPORT #2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT #2 FROM: ESB Comm 1213 D University Terrace Blacksburg, VA 24060 ________________________________________________________ "SOURCES FOR THE BEST MAILING LISTS" ORDER REPORT #3 FROM: Generation X Communications 216 Janie Lane Blacksburg, VA 24060 ________________________________________________________ REPORT #4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT #4 FROM: LaChance Information Systems PO Box 308 Placida, FL 33946-0308 ________________________________________________________ Very few people reach financial independence, because when opportunity knocks, they choose to ignore it. It is much easier to say "NO" than "YES", and this is the question that you must answer. Will YOU ignore this amazing opportunity or will you take advantage of it? If you do nothing, you have indeed missed something and nothing will change. Please re-read this material, this is a special opportunity. If you have any questions, please feel free to write to the sender of this information. You will get a prompt and informative reply. My method is simple. I sell thousands of people a product for $5 that costs me pennies to produce and email. I should also point out that this program is legal and everyone who participates WILL make money. This is not a chain letter or pyramid scam. At times you have probably received chain letters, asking you to send money, on faith, but getting NOTHING in return, NO product what-so-ever! Not only are chain letters illegal, but the risk of someone breaking the chain makes them quite unattractive. You are offering a legitimate product to your people. After they purchase the product from you, they reproduce more and resell them. It's simple free enterprise. As you learned from the enclosed material, the PRODUCT is a series of four 4 FINANCIAL AND BUSINESS REPORTS. The information contained in these REPORTS will not only help you in making your participation in this program more rewarding, but will be useful to you in any other business decisions you make in the years ahead. You are also buying the rights to reprint all of the REPORTS, which will be ordered from you by those to whom you mail this program. The concise one and two page REPORTS you will be buying can easily be reproduced at a local copy center for a cost off about 3 cents a copy. Best wishes with the program and Good Luck! Send for your four 4 REPORTS immediately so you will have them when the orders start coming in. When you receive a $5 order, you MUST send out the product/service to comply with US Postal and Lottery laws. Title 18 Sections 1302 and 1341 specifically state that: "A PRODUCT OR SERVICE MUST BE EXCHANGED FOR MONEY RECEIVED." WHILE YOU WAIT FOR THE REPORTS TO ARRIVE: 1. Name your new company. You can use your own name if you desire. 2. Get a post office box (preferred). 3. Edit the names and addresses on the program. You must remember, your name and address go next to REPORT #1 and the others all move down one, with the fourth one being bumped OFF the list. 4. Obtain as many email addresses as possible to send until you receive the information on mailing list companies in REPORT #3. 5. Decide on the number of programs you intend to send out. The more you send, and the quicker you send them, the more money you will make. 6. After mailing the programs, get ready to fill the orders. 7. Copy the four 4 REPORTS so you are able to send them out as soon as you receive an order. IMPORTANT: ALWAYS PROVIDE SAME-DAY SERVICE ON ORDERS YOU RECEIVE! YOUR GUARANTEE The check point which GUARANTEES your success is simply this: you must receive 15 to 20 orders for REPORT #1. This is a must!!! If you don't within two weeks, email out more programs until you do. Then a couple of weeks later you should receive at least 100 orders for REPORT #2, if you don't, send out more programs until you do. Once you have received 100 or more orders for REPORT #2, (take a deep breath) you can sit back and relax, because YOU ARE GOING TO MAKE AT LEAST $50,000. Mathematically it is a proven guarantee. Of those who have participated in the program and reached the above GUARANTEES-ALL have reached their $50,000 goal. Also, remember, every time your name is moved down the list you are in front of a different REPORT, so you can keep track of your program by knowing what people are ordering from you. IT'S THAT EASY, REALLY, IT IS!!!

1 0

RSA Prevails In Arbitration Against Cylink
by baldwin 17 Dec '03

17 Dec '03

Here's an article on the RSA-Cylink arbitration from the business wire. --Bob Baldwin - ----------------------------- RSA Prevails In Arbitration Against Cylink REDWOOD CITY, Calif.--(BUSINESS WIRE)--Sept. 19, 1995--An Arbitration Panel recently ruled that Cylink does not have a license to RSA patented technology, that RSA's software licensing practices do not breach any agreement with Cylink or its wholly owned subsidiary Caro-Kann and that RSA now has the exclusive right to license the RSA patent. In a Sept. 6, 1995 ruling, an Arbitration Panel, formed by agreement of the parties, and after nearly a month of testimony, ruled in favor of RSA on every significant issue. The Panel held that neither Cylink nor Caro-Kann had a license to practice RSA patented technology. Cylink admittedly incorporates this technology in its Secure X.25 product line, without any license to do so. The Panel also found that RSA's software licensing practices did not materially breach any of Cylink's rights. The Panel did not rule that anyone, (specifically including RSA and its software customers) infringed any existing patent rights of anyone - including Cylink. As a result of the Panel's ruling, RSA now has the exclusive right to license the patented RSA technology. According to Jim Bidzos, the President of RSA, `RSA will continue to conduct its software business in exactly the same way that it has for the past ten years. `In addition, RSA anticipates that licenses to the RSA Patent will now be much more readily available, because they now can now be granted without Cylink interference. RSA has all of the intellectual property rights which it needs to license its software. RSA will vigorously defend against any claim to the contrary.` A recent Cylink press release on the Ruling of the Arbitration Panel is wildly inaccurate. The same Robert Fougner (Cylink's General Counsel) who is cited in the Cylink press release has repeatedly made express representations to third parties that the Stanford Patents do not cover, and are not infringed by, the manufacture, use or sale of products incorporating RSA's TIPEM software developer's toolkit. As noted by Mr. Bidzos: `Cylink lost every single significant issue in the Arbitration. Their press release was simply an attempt to cover up what has been a crushing defeat.` Questions regarding the Arbitration Panel Ruling or RSA licenses should be directed to Kurt Stammberger, RSA Technology Marketing Manager, or Paul Livesay, RSA Director of Legal Affairs. CONTACT: RSA Kurt Stammberger, 415/595-8782 kurt(a)rsa.com

1 0

Stupid Senate Tricks, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 5 Sep 1997 07:50:39 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: Stupid Senate Tricks, from The Netly News ********** http://cgi.pathfinder.com/netly/opinion/0,1042,1344,00.html The Netly News Network (http://netlynews.com/) September 5, 1997 Stupid Senate Tricks by Declan McCullagh (declan(a)well.com) What do you get when you mix discussions of high technology and the Internet with the weak minds of the aging techno-half-wits in the U.S. Congress? Answer: a screwball dialogue that veers haphazardly between the idiotic and inane. From the infamous father of the Communications Decency Act to the California senator who confuses computer mice with real rodents, Washington lawmakers rarely have a clue about the technology they try to regulate. Now that Congress is back in session, the lawmakers will once again be muddling through press conferences and briefings with the help of hovering aides. But sometimes they try to make a go of it on their own -- and then the results aren't pretty. [...] Both houses of Congress have their share of boobs. Rep. Sonny Bono (R-Calif.) -- once dubbed the dumbest member of Congress by Washingtonian magazine -- showed up at the National Press Club in July 1996 ostensibly to talk about copyright and the Net. Instead, he rambled incoherently about Cher ("I hope she doesn't put on any more tattoos") and sang "I've Got You, Babe" to the audience. Bono's public relations director once told the Los Angeles Times that when her boss was mayor of Palm Springs, she had to rewrite his agendas into script form: "For call to order, I wrote 'sit.' For salute the flag, I wrote 'stand up, face flag, mouth words.'" (Yet Bono was the only member of Congress with the balls to challenge FBI opposition to pro-privacy legislation at a hearing earlier this year. Go figure.) [...]

2 1

Silly NetScape RND tricks...
by Deranged Mutant 17 Dec '03

17 Dec '03

I've only been skimming the NetScape-related posts lately, but I've yet to see anyone mention using a keyboard-timing sampler as a source for some random bits... I believe this is still a workable solution even in Windows, though probably not as 'precise' as if it were run from DOS. Any comments?

1 0

Re: netscape's response
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> This is not to say that I think *you* are bad at this, Mr. Weinstein, > but you certainly have colleagues with the worst possible track record. > > Perry > How can you say worst possible...have you forgotten Eric Allman? Wouldn't it be fun to try to come up with the 5 worst programmers (as far as sloppy security holes go). Eric completely revamped sendmail to make V8 and put in new holes in some of the same categories as some of the well known old holes:( I'm glad my code isn't held up to such public scrutiny after it's released! I'm doing some security/crypto stuff soon for my current employer and I'll run my design by some of you. I'll run the code by as well if I can get my bosses to agree. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

EMP & Cars (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

Found this on the seclist: 10)From: Duece6x6(a)aol.com Subject: EMP There has been quite an interest in EMP. Very simply EMP is a broadband electrical pulse. A friend of mine worked for the GOV on EMP test projects. I have some of the wooden nuts and bolts from the antenna towers and the wooden runways used to taxi aircraft for testing. He related EMP pulses to a near miss lightning strike. As far as vehicle disabling, There are claims that auto manufactures have built in a shut down frequency into the computers in certain vehicles. We wound a large coil on a carpet paper tube and put an oscillator on it and it would flood a vehicles electrical system to shut it down, but it was huge. The easiest way to learn about EMP is to find the International TESLA society web site and interpret the information there. He was the pioneer of EMP. THE DUECE

1 0

Re: MIME
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> : Content-Type: application/pgp > : Content-Transfer-Encoding: 7bit > : Sender: owner-cypherpunks(a)toad.com > : Precedence: bulk > : Content-Length: 1092 > > I think that it must be the content-type that is causing problems, as > the rest of the message is completely standard. To the people whose > mailers broke out in hives at that message: Do you get the same behavior > with any message having an unknown content-type? > -- > Shields. > I've only ever seen the problem with Content-Type: application/pgp using Sun's mailtool. I don't know that I've ever gotten mail with unknown Content-Type though...wait let me whip some up... Mailtool assumes anything with a content type is an attachment. The type is used as the name of the attachment. A Content-Type: of application/foo or of just foo both yeild an attachment named foo. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: Please send me SSL problems...
by Rich Salz 17 Dec '03

17 Dec '03

> Jeff, the SSL specification has a severe *architectural* problem - it > assumes that Internet Protocols are APIs ... > The IETF quite explicitly doesn't care about APIs With one exception so important that it might blow away your whole complaint... ...GSSAPI. /r$

1 0