December 2003 - cypherpunks-legacy

Re: Cypherpunk Certification Authority
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Sat, 25 Nov 1995, Aleph One wrote: > On Sat, 25 Nov 1995, Perry E. Metzger wrote: > > > Hmmm. If someone is willing to find out what is needed to become a > > C.A. and to run one, and it turns out not to be particularly onerous, > > I or one of my corporate alter egos might be willing. I must say, > > though, that being an anti-fan of X.509 the situation would be ironic... > > > > Perry > > Well from Netscape perspetive as far as I know you need nothing. Basicly > when the browser finds a new CA that it does know about it promts > the user and through a series of dialog boxes the user chooses to trust > it or not. Gee, wasn't that clever of Netscape?? Lilies that fester smell worse than weeds ... people should remember that. (I think Shakespeare first wrote that in one of his sonnets ...) > (Well that is theory, and what netscape release notes say, since > I dont have access to an SSL server right now, and would need to figure > out how to make my own certificate, I havent tried it). Bingo. *theory* ... right ... I mean what would be the point?? Installing Netscape degrades your inherent system security. No ifs, ands, or buts. Netscape Navigator basically destroys whatever sense of privacy or security, any person ever had the illusion of having. And that pretty well rules out CA. Alice de 'nonymous ... ...just another one of those... ...hunters... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1

Re: Cypherpunk Certification Authority
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Sat, 25 Nov 1995, Adam Shostack wrote: > Does X.509 version 3 fix the problem that Ross Anderson points > out in his 'Robustness Principles' paper? (Crypto '95 proceedings, or > ftp.cl.cam.ac.uk/users/rja14/robustness.ps.Z) > > Its an excellent paper, well worth reading, but the basic > problem is that X.509 encrypts before signing. You'd rather sign before encryption?? Doesn't that give you "known plain-text" to attack? i.e. the signature. I'm not sure whether it would or wouldn't, but I'm sure some cryptographers here might clear that up mighty quick -- before any more harm is allowed, I mean. > Adam > > -- > "It is seldom that liberty of any kind is lost all at once." > -Hume Alice de 'nonymous ... ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1

BOS_nya
by John Young 17 Dec '03

17 Dec '03

11-26-95. Washrag: "Seeking the Government That Governs Best." Book review. What Comes Next: The End of Big Government And the New Paradigm Ahead By James P. Pinkerton Hyperion. 404 pp. $24.95 In Pinkerton's account, bureaucracy survives today only because no one has yet developed a coherent replacement model." Instead we have deluded ourselves into thinking that periodic upgrading of what Pinkerton calls the "Bureaucratic Operating System" (BOS) -- in the same way that computer software is upgraded -- will enable us to avoid the gloomy prospect of life in the "Cyber Future," his term for the horrific predicament of extreme inequality and hypercrime to which we are headed. At one point Pinkerton suggests that a parallel for Bill Clinton may be found in Mikhail Gorbachev. Both leaders "shrank from genuine perestroika" after their peoples had come to the realization that the system itself was the problem. Displaying a sure grasp of popular culture, technology and political history, Pinkerton writes engagingly and insightfully about the defects and malfunctionings of the American bureaucratic state. His refreshing analyses of the flaws in bureaucratic thinking are among the best that we have on the subject and, surely, the wittiest. BOS_nya (7 kb)

1 0

[NOISE] Re: crypto for porno users
by Rev. Mark Grant 17 Dec '03

17 Dec '03

On Fri, 24 Nov 1995, E. ALLEN SMITH wrote: > consent. For instance, Britain's age for consent depends on the > type of sexuality involved; heterosexual sex receives a more > lenient age (18) than homosexual (21). This is getting distinctly off-topic, but Britain's age of consent is actually 16 for heterosexual sex, 18 for male homosexuals (unless the government have changed it back again, they reduced it from 21 a few months ago), and I think 16 for lesbians. But it's all terribly complicated, as you pointed out... Incidentally, the "Sun" newspaper, one of the most popular in the UK (sells 3,000,000-4,000,000 copies daily, AFAIR), has often printed half-page erotic pictures of topless sixteen-year-old girls. Would this be "kiddie porn" in the US ? OBCrypto: Did anyone ever find out which version of A5 is in Applied Cryptography ? Mark

1 0

Re: Cypherpunk Certification Authority
by Jeff Hupp 17 Dec '03

17 Dec '03

On 25 Nov 95 at 15:35, Alex Strasheim wrote: : > Basicly when the browser finds a new CA that it does know about it promts : > the user and through a series of dialog boxes the user chooses to trust it : > or not. : : Is anyone running an ssl web server that would let us see how this works? : : A 'how to' on rolling your own can be found at: http://fiasco.snre.umich.edu/~altitude/ssl/ssl.saga.html While that one is using a certificate from VaraSign, as mentioned earlier you can create your own authority and certificate with tools you find at: http://bond.edu.au/External/Misc/Crypto/ -- JHupp(a)gensys.com |For PGP Public Key: http://gensys.com |finger jhupp(a)gensys.com The difference between science and the fuzzy subjects is that science requires reasoning, while those other subjects merely require scholarship

1 0

Re: Cypherpunk Certification Authority
by James A. Donald 17 Dec '03

17 Dec '03

At 01:53 AM 11/26/95 -0800, anonymous-remailer(a)shell.portal.com wrote: >You'd rather sign before encryption?? > >Doesn't that give you "known plain-text" to attack? The signature is not known unless the whole message being signed is known. And any encryption scheme that is vulnerable to known plaintext attack where only a part of the message is known, is worthless anyway. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: [NOISE] Re: crypto for porno users
by James A. Donald 17 Dec '03

17 Dec '03

At 03:42 PM 11/26/95 +0000, Rev. Mark Grant wrote: > Incidentally, the "Sun" newspaper, one of the most popular in the UK > (sells 3,000,000-4,000,000 copies daily, AFAIR), has often printed > half-page erotic pictures of topless sixteen-year-old girls. Would this be > "kiddie porn" in the US ? Yes --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Elliptic curves, current status?
by James A. Donald 17 Dec '03

17 Dec '03

I have read: That public key cryptography using elliptic curves is much faster than using integers, for comparable security. That public key cryptography using elliptic curves is much slower than using integers, for comparable security. That the numbers required have many more bits. That the numbers required have somewhat less bits. That elliptic curves are about the same, but the programs are a lot nastier. Can someone tell me the true story? --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: BOS_nya
by rah＠shipwright.com 17 Dec '03

17 Dec '03

> What Comes Next: > The End of Big Government And the New Paradigm Ahead > By James P. Pinkerton > Hyperion. 404 pp. $24.95 I read a review of this book in the Standard <ducking rotten tomatoes> with in the last week or so. If you think *I'm* hyperjargonate, you should see how this guy does it. Hear tell he practically invents his own language... May be worth a read if the local library has it, though. Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The e$ Home Page: http://www.webstuff.apple.com/~vinnie/Rah >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Re: Cypherpunk Certification Authority
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>Is this another one of those LD tentacles? ;) Must that or a spoof of somekind... "She" didn't sign it, and "she" claims to have issued a signature... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The e$ Home Page: http://www.webstuff.apple.com/~vinnie/Rah >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0