December 2003 - cypherpunks-legacy

Re: Plea for information
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, On 12 07 95 you sent a Plea for information to cypherpunks- @toad.com. You said: I would be interested in learning more about the politics and mathematics of cryptography.... [snip] ...I would like to know how best to understand cryptography - I have a textbook on the basic mathematical concepts under- lying the techniques but it is too advanced for my current knowledge in this field (A-level - ie. end of high school), please can you suggest a good starting place for me. I suggest you lay aside the maths for a time and buy a copy of: Bruce Schneier E-Mail Security. How to Keep Your Electronic Messages Private John Wiley & Sons, Inc 1995 I enquired this morning at Wiley's NY office and was told: (a) the book is available in the UK (b) the phone number of Wiley's Chichester office is 44 1243 779 777 Here's the book's Contents in Brief: Part I: Privacy and Electronic Mail Chapter 1: The Problem Chapter 2: Encryption Chapter 3: Key Management Chapter 4: Authentication Chapter 5: Certificates Chapter 6: Keeping Your Private Key Private Chapter 7: Odds and Ends Chapter 8: Patents, Governments, and Export Laws Part II: Achieving Electronic-Mail Privacy Chapter 9: Requirements and Features Chapter 10: Privacy Enhanced Mail (PEM) Chapter 11: Pretty Good Privacy (PGP) Chapter 12: Comparing PGP and PEM Chapter 13: Attacks Against PGP and PEM Appendix A: Pretty Good Privacy Appendix B: Privacy Enhanced Mail Index Appendix A = PGP User's Guide. Volume I: Essential Topics. Appendix B = Request for Comments: 1421. To study the book --not the same thing as just reading it-- you will need PGP to experiment with. An ingenious lad should have little trouble... After you have some concrete experience, it'll be easier to see the relevance of the maths. As regards "the politics...of cryptography," this excerpt from the book's Foreward by William Murray should pique your interest: To the extent that E-mail proves to be important, we can expect to see many attempts on the part of government to coopt it in much the same way that they have coopted the paper mail system. The excuses that it will use to do so will be related to security. It will repeat the claim of Cromwell's government ["many dangerous and wick- ed designs...are daily contrived against the welfare of this Commonwealth"] and will create whatever evidence is required to convince the people of the validity of the claim. Arguments to the contrary notwithstanding, the real motive will be to maintain political control and influence. Oklahoma? Whatever... Cordially, Jim

1 0

KOC_her
by John Young 17 Dec '03

17 Dec '03

12-11-95. NYPaper Page One: John Markoff reports on Paul Kocher's paper on the timing attack vulnerability of public-key encryption. Quotes Matt Blaze, Bruce Scheiner, Ron Rivest, Martin Hellman, James Bidzos. KOC_her (11 kb)

1 0

Re: sooner or later
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

> --------------------------------------------------------------------- > This mail is brought to you by the e$pam mailing list > --------------------------------------------------------------------- Tim May wrote: > By contrast, drug use has typically been confined to the lower classes or > the rebellious young. Not a lot of pols are dope smokers [snip] Well, at least not inhalers... Ciao jfa

1 0

Thursday noon, SF: Meatspace rally against cyberspace censorship
by John Gilmore 17 Dec '03

17 Dec '03

Monday's rally was canceled on account of rain. There is now a backup location in case of rain on Thursday. Check the web page before you leave, or come to South Park, and the backup location will be close by. See you there! -- John Date: Tue, 12 Dec 1995 18:15:44 -0800 (PST) From: protest(a)wired.com (--Todd Lappin-->) Subject: SF RALLY -- THURSDAY This is an updated announcement for Thursday's Rally Against Censorship, with the current list of speakers. The rally will take place rain or shine, so hope for the best, bring an umbrella, and spread the word. Thanks! *** NETIZENS!! RALLY AGAINST CENSORSHIP *** Thursday, December 14, 1995 at South Park, 12:00 - 1:00 PM San Francisco, California -- Rain or Shine! -- **PROTEST ** PROTEST ** PROTEST ** PROTEST ** PROTEST ** PROTEST ** Amendment I: "Congress shall make no law ... abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble." **PROTEST ** PROTEST ** PROTEST ** PROTEST ** PROTEST ** PROTEST ** It's like illiterates telling you what to read. On December 6 members of the House Conference Committee on Telecommunications Reform approved a proposal to censor free speech in cyberspace. If the measures are adopted, the Net and online media will become the most heavily regulated media in the United States. They *will not* enjoy the First Amendment freedoms now afforded to print media. Instead, online publishers and users will be held to a vague and patently un-Constitutional "indecency" standard. "Violators" will be subject to fines of up to $100,000 and prison terms of up to five years. In response, ALL members of the Bay Area media, online, Internet, new media, and telecommunications communities are invited to participate in a protest rally to express our outrage that the politicians in Congress (which is not even connected to the Internet!) are attempting to destroy our First Amendment rights in cyberspace, and directly attack our livelihoods. Help stop the demagogues in Washington! There is nothing "decent" about denying free speech to us, our children, and our children's children. Preserve our Constitutional rights! Join us! WHEN: Thursday, December 14, 1995 12:00 - 1:00 PM WHERE: South Park (between 2nd and 3rd, Bryant and Brannan) San Francisco. (In the event of rain, an indoor location will be announced) SPEAKERS:Mike Godwin, EFF; John Gilmore, co-founder, EFF; Denise Caruso, New York Times columnist; Jim Warren, online activist; Howard Rheingold, author; Dave Winer, essayist and software developer; Audrie Krause, Executive Director, CPSR; Jonathan Steuer, CEO, Cyborganic Corp; Michael Goldberg, Publisher, Addicted To Noise. BRING: Attention-grabbing posters, signs, and banners that demonstrate your committment to free speech and expression, and your feelings about Congress. FOR UPDATED INFORMATION: http://www.hotwired.com/staff/digaman (Although this event is being organized in the offices of Wired magazine and HotWired, we are *actively* seeking participation and support from all members of the local community. Please forward this message to anyone you think should attend, and to all relevant news groups.) CONTACT: Todd Lappin -- 415-222-6241 -- protest(a)wired.com

1 0

Using quantum cryptography to effect covert channels
by Jas 17 Dec '03

17 Dec '03

B2,3 and A1 system (Orange book), use covert channel analysis to prevent leakages of information (intentional or otherwise). This forms a part of enforcing MAC on such systems. well recently i thought of a method to overcome these barriers so covert channels can again be used to transmit and receive from such machines. this method involves using quantum cryptography. "randomization" is one method used to prevent covert channels, however it is this "randomization" that can be used with quantum crypto to not only make covert channels, but also makes the covert channels secure as well as authenticated! basically quantum crypto uses the fact that observing a system modifies the system. this works on machines that use "randomization" as a method of detering covert channels. ObExample, if an admin gets suspicious of certain behaviour on a machine, the machine behaves differently if he tries to investigate it (as a result of "poking around" the machine to see what is going on). this can be used with quatum crypto methods to covertly communicate data (with security and authentification), and if someone attempts to "observe" the behaviour on the said machines, it will break the communication (because the machine behaviour changes, hence breaks the message) rendering the message unreadable. this may slow down communication some, and will need self-synchronization of some sort, but at least you can communicate. this idea is very rough however, and there may be gaping holes in my arguments, but i think it might be an area someone may wish to look into (especially the high assurance types). i really should write a draft paper on this, but i dont really have a good enough understanding of the formal methods to pull it off. however i have got a coining name for this method, "covert quantum channels". just a random thought to throw around... Matt -- #!/bin/sh echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D3F204445524F42snlbxq'|dc;exit Matthew Keenan Systems Programmer Information Technology Division University of Technology Sydney Australia It's nice to be in a position where people apologize because they assume there's humor in your work, based on past experience, but they're not sure where it is. -- Rob Pike

1 0

InfoWar 15 (Part III of 'The True Story of the InterNet')
by Bianca 17 Dec '03

17 Dec '03

1 0

Computers, Freedom, and Privacy Conference -- Registration Open
by Hal Abelson 17 Dec '03

17 Dec '03

Please redistribute widely **************************************** The Sixth Conference on Computers, Freedom, and Privacy will take place at the Massachusetts Institute of Technology on March 27-30, 1996. CFP96 is hosted by MIT and by the World Wide Web Consortium. You can register for CFP96 by US Mail, by fax, or via the World Wide Web. Conference attendance will be limited. Due to the enormous public interest in CFP issues over the past year, we encourage you to register early. SPECIAL NOTE TO STUDENTS: There are a limited number of places available at a special student rate. These will be allotted on a first-come first-served basis, so register as soon as possible. For more information, see the CFP96 Web page at http://web.mit.edu/cfp96 or send a blank email message to cfp96-info(a)mit.edu Since its inception in 1991, the series of CFP conferences has brought together experts and advocates from the fields of computer science, law, business, public policy, law enforcement, government, and many other areas to explore how computer and telecommunications technologies are affecting freedom and privacy. Events planned for this year's conference include: - Federal prosecutors square off against civil-liberties lawyers in a mock Supreme Court test of the "Cryptography Control Act of 1996", which criminalizes non-escrowed encryption. - Authors Pat Cadigan, Tom Maddox, Bruce Sterling, and Vernor Vinge divine the future of privacy. - College administrators, students, lawyers, and journalists role-play scenarios that plumb the limits of on-line expression on campus networks. - Panels on international issues in privacy and encryption; on the struggle to control controversial content on the Internet; on tensions between copyright of digital information and freedom of expression; on threats posed by electronic money to law enforcement, privacy, and freedom; on mass communication versus mass media.

1 0

NT Password Security Update. Registry values changed!
by Ted Cabeen 17 Dec '03

17 Dec '03

Well, I did some more research into the NT password security issue and I discovered that I can get access to the Security section of the registry and there are some VERY interesting values there, stored as raw hex. I created a test user and checked the values of these registry keys with two different passwords and iterestingly enough the data in the keys changed when I changed the password. I plan on doing some more work, including changing the values and seeing if the password change, but I've been somewhat busy lately. I've st up a web page at http://shadowland.rh.uchicago.edu/ntcrypto.html that has the password I used and the data in the two registry values that changed when I changed the password. I invite people to look at it and speculate what the change means. Also, I can provide a few more plaintext/cyphertext pairs if necessary. The change in the values could be something like update time, but I don't think that they'd store that as raw hex, espically hex as long as the stuff I got. Good luck figuring it out. _____________________________________________________________________________ Ted Cabeen cabeen(a)netcom.com Finger for PGP Public Key secabeen(a)midway.uchicago.edu "I have taken all knowledge to be my province." cococabeen(a)aol.com

2 1

Have Your Bills Paid For You WITHOUT Paying the Funds Back! EVER!!
by libeiqia＠aol.com 17 Dec '03

17 Dec '03

BEYOND EXPECTATIONS Have your bills paid for you WITHOUT paying the funds back!!! Debt Management Club Pay off your mortgage, car, credit cards, doctor bills, loans, electric bill, phone bill, judgements, boats, child support, and MUCH MUCH MORE!!! PULL THE FAX ON DEMAND FIRST!!!!! 1-888-231-5741 Next - sign non-disclosure then fax to company Company fax 1-818-769-7358 Then call the company to set up phone appointment where you call them back. Company phone 1-818-783-1000 THIS WILL BLOW YOU AWAY Yes, they'll pay your debts, and you don't have to pay then back EVER!!! Debt Management Club makes it easy. They explain everything. You are invited to join by: Thomas M. Baron #663 Phone 704-837-5154 Fax 704-837-1020 If you would like to be removed from future mailings, please click reply and type remove. ----------------------- Headers -------------------------------- >From respond(a)mailhost.com Mon Sep 15 11:16:24 1997 Return-Path: respond(a)mailhost.com Received: from mailhost.com (mailhost.mailhost.com [191.207.01.09]) by emin99.mail.aol.com (99.6.12/8.6.12) with ESMTP id LAAD05346 for <respond(a)mailhost.com>; Mon, 15 Sep 1997 11:16:23 -0500 From: respond(a)mailhost.com Received: from mailhost.com (99.8.5/8.6.50) with SMTP id GAAS08874; Mon, 15 Sep 1997 11:04:35 -0600 (EST) To: Members(a)aol.com Message-ID: <199702170025.GAAG08056(a)mailhost.com> Date: Mon, 15 Sep 97

1 0

PGP/PINE integration
by Tod McQuillin 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've modified PINE 3.91 to support PGP encryption from within its message editor. I did the same thing for pine 3.89 a year and a half ago; I finally got around to updating my changes for 3.91. It's relatively seamless but provides no convenient means of decryption from within PINE. diffs available from: ftp://ftp.foxholly.com/pub/pine-pgp-patch - -- Tod McQuillin -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMM5Rs3hYKXs9uIwxAQHDlAP/Rku0lbeaVPfTwZsfFxjbov0KZ5PAcLkJ emrE9vpr0pMSESuy0jIp7VRMHSUGA0Q0y7VFhinDxbsLT4FdVsCk5uxwieerzT/g pnI7N8yNzVgM1IDXGL9lzGMyidULRoSnfSePT9AAjJxaIHOOK8+rw2bT4Cv1vDPw JZFOFxhqW/U= =osQC -----END PGP SIGNATURE-----

3 2