December 2003 - cypherpunks-legacy

Re: Rethinking the utility of netnews "cancel" control messages
by Rich Salz 17 Dec '03

17 Dec '03

I would like to put my corporate legal infrastructe on an internal secure conferencing system. News (with crypto-signed articles) is ideal. Without a "destroy all copies" concept I cannot do this. /r$

2 1

AEgis Windoze PGP Shell (with location...sorry)
by Adam Philipp 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Aegis can be reached at: http://iquest.com/~aegisrc/ sorry for leaving that out las time.... -Adam -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMHOOA2/ZTaRmpgTFAQFioQf/WYR7o5SACijZpdZ1XZHtP4X/BXprVkVV /GX/eB8jbkDaCffuIWoz34dxN5PpSXQPAbE53ZGcJEiIuYdl9CLloJj12yZFS3Bx wa0988Fz374xmgL2VA6HllQwTBjab7v6vk565RG+Rtf7t7DWGIORP5WFDbDKJ4FR yhxnPhFi/LA20aBrBjY9bfPMuFdUm+teBVjzNsgGmsTQov72iosuMh0IYhqcaBpR ndaRdpp1ntcD6A2xPn+wfEYLcLUR34YbJVHmYwN3WJuhbNbhS4x4Aa0KFE9Sbi5W bYt9wnqE0+uywTJb2Z8WUaH+0UfgeE/GNZvDe8jEp6oSUhaBs0R0LA== =9ZIj -----END PGP SIGNATURE----- --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\ |PGP key available on my home page|Unauthorized interception violates | | http://www.rosa.com/~adam |federal law (18 USC Section 2700 et| |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-|seq.). In any case, PGP encrypted | |SUB ROSA: Confidential, |communications are preferred for | |secret, not for publication. |sensitive materials. | \-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-/

1 0

Re: Crypto APIs
by James A. Donald 17 Dec '03

17 Dec '03

At 04:29 PM 10/2/95 -0400, Matt Blaze wrote: > It seems best to encourage the realistic > side of NSA as much as possible... Why? Surely the realists are more dangerous than the nuts. > [...] > > In other > words, the parts of the military that are concerned with actually > securing communications want exactly what we want, and are just > starting to realize it. This does not necessarily protect our right to cryptography, any more than it protects our right to full auto guns. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

Re: NSA Realists v. Nuts (Was: Re: Crypto APIs)
by James A. Donald 17 Dec '03

17 Dec '03

Matt Blaze writes: > > > It seems best to encourage the realistic side of NSA as much as > > > possible... James Donald writes: > > Why? Surely the realists are more dangerous than the nuts. At 03:57 AM 10/5/95 -0400, Futplex wrote: > (I'm assuming that a Realistic Agenda has at least as good a chance > of success as a Nutty Agenda. [...] ) Language problem: If that is the case, then the "Nutty Agenda" is perfectly sane. They want to rule over us. There is nothing crazy about that. Evil yes. Crazy no. Their objective is to create a surveillance state, where all actions are known and recorded by the state, in order to facilitate detailed state control over every aspect of our lives. Our agenda is the opposite. There is no commonality of purpose, hence no possibility of cooperation. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

is this a bug of Netscape
by John Cheng 17 Dec '03

17 Dec '03

If you go to http://c.gp.cs.cmu.edu:5103/prog/webster, you will get a input textbox and two buttons, leave textbox blank and push Look Up Definition button, you will get a GPF? I am using Netscape V1.2N for windows. Sorry if you have knew it. J

1 0

Oct 14 mtg - focus on java
by mrm＠netcom.com 17 Dec '03

17 Dec '03

Hi - The Oct 14 cypherpunks meeting will be focussing on Java topics. I'm putting together an agenda, and finalizing the meeting location. It looks like we'll have someone from the Java group at Sun to talk about what the current Java security policy is, and about Java and HotJava security mechanisms. Doug Barnes and Amanda Chou will talk about JCrypt, which is a set of Java wrappers for existing C encryption routines. If you'd like to talk at the Oct 14 meeting, please send me email with a description of your project, and I'll schedule you in. I'll send out mail early next week with the agenda, and letting you know where the meeting will be held. I'm trying to get a large conference room at one of the Sun facilities. Marianne mrm(a)netcom.com mrm(a)eng.sun.com

1 0

NetManage & Cylink Crypto
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

NetManage & Cylink In Internet Encryption Deal Guildford, Surrey, England, Oct 5 -- NetManage, a TCP/IP specialist company, has signed a licensing deal with Cylink Corporation. NetManage says the Cylink public key cryptography technology will be incorporated in future editions of NetManage's Internet applications software. The move is significant since it marks the beginnings of a competitor to the Netscape "secure" Web browsing software, which has had two security flaws identified in recent weeks. Initially, NetManage's Chameleon Enterprise TCP/IP applications suite will incorporate the Cylink public key encryption technology, and later will include encryption facilities in Internet Chameleon, a UKP139 PC-Windows access suite designed for dial-up access to the Internet. Both NetManage and Cylink plan to support an open interface for Internet security which addresses the flaws found in Netscape. The idea is to establish an open set of standards to which Internet access packages of all types will adhere to, and so ensure that companies developing Internet software do not "re-invent the wheel" when writing their software, and possibly open their applications up to flaws. According to NetManage, establishing a secure Internet connection requires an Internet application to perform two functions: authenticating the user, and encrypting the data flow. The link with Cylink will allow NetManage to license and include the Cylink public key encryption technology in its applications with a variety of ciphering systems to be used in the NetManage suite, including: DES, Triple DES, Safer, IDEA, Skipjack, RC-2, and RC-4. NetManage claims the current implementations of security proposed as standards by Netscape and RSA Data Security are flawed, and fail to fully accommodate "open and interoperable secure communications" between computers which use different bulk encryption ciphers. These problems, the company claims, have limited the adoption of Internet security as a widespread interoperable feature of all Internet software and hardware products, including end-user applications, servers, firewalls, and secure routers. Later this month, NetManage and Cylink plan to announce a next-generation "plug and play" Internet encryption system. The implementation will be open and will not lock software or hardware developers into the use of encryption technology from any one vendor, as is the case with Netscape, say the companies. The related APIs, key exchange technology, and encryption, will be made publicly available to other software and hardware vendors. Licensing will include source code and no per-copy royalty fees. Further information can be downloaded from NetManage's World Wide Web site at <http://www.netmanage.com>. Contact: NetManage Europe, +44-1483-302333; NetManage US, 408-973-7171.

1 0

Re: Comments on STT Spec Implementation Details
by anonymous＠robo.remailer 17 Dec '03

17 Dec '03

Responding to msg by perry(a)piermont.com: [snip] >The belief that companies can make more money by >following proprietary solutions and imposing them on >the world as standards is falling away. It is in >Microsoft's interest that the standard that is adopted >for commerce be open, publically discussed at length, >and brutally critiqued. Losing a bit of control in >exchange for actually getting something that works out >for you and your customers is in your interest. The spew through the proprietary dike on this is swelling: MasterCard's consortium yesterday and the NetManage/Cylink today both emphasize public availability of specs in counter-response to the flaws helpfully discovered in Netscape by the ever public spirited cypherpunks. Whether any of these vaunted "superior" systems respond to attacks as constructively as Netscape will be the challenge. BTW, has anyone reviewed the promised MasterCard specs supposedly released on Tuesday?

1 0

SSL telnet vs. SSH. Comparison?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would somebody please compare for me SSL telnet vs. SSH in terms of security, advantages, and disadvantages? Thanks, - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMHQbESoZzwIn1bdtAQFgxgF/bx0sbAWQ2mFbwaSqcKSolepKNCC/kiNm 22gizTztznICXRPxh17VxkpiWwzcRZPv =QD3j -----END PGP SIGNATURE-----

2 1

Secure Drive questions...
by Ray Arachelian 17 Dec '03

17 Dec '03

Hi, I recently got me a much larger hard drive and would like to encrypt more than one partition using SecureDrive. I'm using an old 1.1 version which, when I log into one partition, the others vanish. I'm using the same passphrase on both paritions. I've never upgraded because the previous version did what I wanted it to do very well and I have never had a problem with it. I've noticed that on some machines SecureDevice failed where SecureDrive 1.1 worked perfectly... So I've stuck with that... but now, I'd rather not join the two partitions together if I can help it... too much work to copy everything off, repartition, restore, etc... (This is a 1.2Gb WD Caviar drive using the Disk Manager crud that makes the drive visible to DOS by loading some DMDRVR.BIN driver only - my BIOS only sees 550Mb or so without it...) Is this a question of upgrading, if so, what's the latest version? And are there any catches, snags, or problems to watch out for before I potentially kill my drives? :-) A few more questions, I've left a bit of space for me to experiment with something like OS/2Warp or Win95 or even Netware 4.1 (got a cool 2 user license for $50 from Novell I'd like to install.) Now while OS/2 and Win95 can see FAT partitions, what will stop them from trying to run something like chkdsk on it? Can I load the secure drive tsr to keep the encrypted drive safe with those operating systems? (I know Netware will keep its mits off non-Netware partitions, so that's a safe bet - but then I don't have another PC to use as a host so this will be a clientless server. Just want to experiment with it I guess... :-) I'd also consider messing with NT, I have enough RAM and space, but anyone know a place I can get a good price for it? $400 is a bit steep for an OS I probably won't do much with. And YES, I will install Linux - soon as I can get it to recognize my I/O-less FutureDomain clone SCSI controller. (It's based on the 950 chip, no I/O address, uses int 15 and DMA for transfers..) Works okay under Coherent - then again, I'm using the IDE controller under Coherent... :-) The SCSI FD controller is for the CDROM drive... ========================================================================== + ^ + | Ray Arachelian | Amerika: The land of the Freeh. | _ |> \|/ |sunder(a)dorsai.org| Where day by day, yet another | \ | <--+-->| | Constitutional right vanishes. | \| /|\ | Just Say | | <|\ + v + | "No" to the NSA!| Jail the censor, not the author!| <| n ==========================================================================

1 0