December 2003 - cypherpunks-legacy

DH in IE and NT
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Microsoft will use Diffie-Hellman in Internet Explorer 4.0 and Windows NT. See: http://www.cylink.com/html/microsoft.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNBbQejltEBIEF0MBAQFqowf+MnienInvTNqib8YfVxKXLQMpw17yymA2 YRlXalaClmwMnE2LzMwBKqwC9wFm+FPNWIAz8q5O36+k9IEDepCVazZpyar64/En HhUZ+7F8ZGnuxvNScDBhexxUFkSAU/fuPRcqETZIMwE1kHIBGkVO/28KBF+MJ8Aj engwErZi6lFHMqiS8378/iyJ01wxRmMqI2sMTeF7Ub8kWMh7bEq24y9xF8mRVwsg DAguXZsagGapgB/pIqT/L4xP2uBIxYCKrqCJw6KtB9tsffraw9NHBzvkaZn1d7bo c2V7GF4adk6BE4oFmdjRa03o6j0nr8sKpHPlHlxo1hmslZ8fjPxTWQ== =LXf8 -----END PGP SIGNATURE-----

1 0

Anyone for testing MOSS?
by Raph Levien 17 Dec '03

17 Dec '03

I've just gotten TISMOSS 7.1 running (whew!) and wondered if there was anyone else out there who could exchange encrypted email with me. Here is my public key: alias:raph@cs.berkeley.edu public-key:MFkwCgYEVQgBAQICAgADSwAwSAJBAKQ2qG5eZDa58HpVxM9fpru2hDVVkw0iK GC3BMhagHpio7XlGydpkbY3iSV08U92VVbkyTeB2aWhSe2xUUaONPsCAwEAAQ== I guess I'll probably wait until next week to test S/MIME. Raph

1 0

XDM has the same problem as netscape ?!
by iagoldbe＠csclub.uwaterloo.ca 17 Dec '03

17 Dec '03

In article <9509210631.AA18308(a)sfi.santafe.edu>, Nelson Minar <nelson(a)santafe.edu> wrote: >Last time I looked, the MIT-MAGIC-COOKIE-1 scheme used in X11R4 had >the same problem: the random seed was based on the current time to the >microsecond, modulo the granularity of the system clock. I think I >figured that on my hardware, if I could figure out which minute the X >server started (easy with finger), I'd only have to try a few >thousand keys or so. Caveat: I never actually proved the idea. Wow. I just checked, and Nelson's right. The seed is this: #ifdef ITIMER_REAL { struct timeval now; X_GETTIMEOFDAY (&now); ldata[0] = now.tv_sec; ldata[1] = now.tv_usec; } #else { long time (); ldata[0] = time ((long *) 0); ldata[1] = getpid (); } #endif and if you don't have XDMAUTH defined, the auth value is this: seed = (ldata[0]) + (ldata[1] << 16); srand (seed); for (i = 0; i < len; i++) { value = rand (); auth[i] = value & 0xff; } Oh, well. We knew X didn't have much in the way of security, anyway... - Ian

2 1

Is Your Web Site A Secret?
by owl＠owlsnest.com 17 Dec '03

17 Dec '03

Is your web site the best kept secret on the Internet? We'll promote it to 50 search engines and indexes for $85 and complete the job in 2 business days. Satisfaction is guaranteed! If you have a great product, but are not getting many inquiries from your Web site, you may not be adequately listed on the Web's search engines and indexes. Millions of viewers daily use these facilities to find the products and services they are looking for. But if your site is not listed, no one will see it. Listings on most of these services are free. However, locating and filling out the forms required to get a listing can take several days, and most people just don't have the time to do it. That is why we offer a web site promotion service. WHAT'S THE DEAL? We will submit your site to 50 indexes and search engines for $85. We will accept the return of this E-mail, with the form below filled out, as an order. We will bill you upon completion of the promotion. Our terms are net 15 days from date of invoice. Satisfaction guaranteed! HOW LONG WILL IT TAKE? Generally, we complete the submissions within 48 hours of receiving your order. It can take any individual search engine or index up to three weeks to process your submission, although most are much faster. WHAT SEARCH ENGINES AND INDEXES ARE INCLUDED IN THE PROMOTION? The list changes from time to time. This is our current list: Abaweb!, Alta Vista, Been There, BizWeb, Central Source Yellow Pages, Enterpreneurs on the Web, Excite, Four11, Galaxy, I-Network I-Systems Spiral Business Directory, I-World Web Pointer, Infoseek, Inktomi, Innovator's Network Yellow Pages, Internet Mall, Jayde Online Directory, Jumpcity, Jumper Hot Links, Linkmaster, Lycos, Magellan, Mega Mall, Net-Happenings, Net Navigator, Net Mall, NTG's List, NYNEX Big Yellow, One World Plaza, OnLine's WWWeb Index, Rex, Starting Point, Truenorth, URL Tree, Virtual Lynx, Web Point, WebCentral, Web Venture Hotlist, Webcrawler, Websurf, Win Mag/NetGuide Hotspots, WhatUSeek, Worldwide Announce Archive, WWW Business Yellow Pages, World Wide Yellow Pages, WWW Worm, YelloWWWeb. HOW WILL I KNOW THAT YOU HAVE PROMOTED MY SITE? When we have completed the promotion, we will send you an HTML file as an attachment to your E-mail bill. Save this file to your disk, and view it through your Web browser. It provides links to the search engine we submitted your site to, plus any comments we received from them when we did it. ARE THERE ANY GUARANTEES? We do not require prepayment. Your satisfaction is guaranteed or you don't pay the bill. WHO IS OWL'S EYE PRODUCTIONS? We are a web site promotion company located at: Owl's Eye Productions, Inc. 260 E. Main Street Brewster, NY 10509 Phone: (914) 278-4933 Fax: (914) 278-4507 Email: owl(a)owlsnest.com HOW DO I ORDER? The easiest way to order is by e-mail. Just hit the REPLY button on your e-mail program and fill out the following information. (This information will be posted to the search engines/indexes): Your name: Company Name: Address: City: State/Prov: Zip/Postal Code: Telephone: Fax: Email address: URL: http:// Site Title: Description (about 25 words): Key words (maximum of 25, in descending order of importance): Proofs (Where shall we e-mail proofs): If billing a different address, please complete the following: Addressee: Company Name: Address: City: State/Prov: Zip/Postal Code: Telephone: Fax: Email address: We will bill via Email. (7519) Terms: By returning this document via Email, you agree as follows: You have the authority to purchase this service on behalf of your company. Terms are net 15 days. Accounts sent to collections will be liable for collection costs. You agree to protect and indemnify Owl's Eye Productions, Inc. in any claim for libel, copyright violations, plagiarism, or privacy and other suits or claims based on the content or subject matter of your site. WHAT HAPPENS NEXT? When we receive your order, we will input the information into our system, and send you a proof. After we process any corrections, we will run your promotion, capturing any comments from search engines as we go. We will incorporate these into an HTML-formatted report to you, which we will attach to your bill. ===Web Promotions=====Press Releases=====Link Exchanges========= Owl's Eye Productions, Inc. 260 E. Main Street Brewster, NY 10509 Ph: 914-278-4933 Fx: 914-278-4507 E-mail: owlseye(a)owlsnest.com

1 0

Re: economic espionage (@#$%^&*)
by tcmay＠got.net 17 Dec '03

17 Dec '03

Vlad writes: >I would *die* to see an op-ed in the NYT with the subject: >"economic espionage: the new bogeyman decoy after the cold war" You might want to prepare your memorial service, then, as I recall reading editorials along these lines back around 1990, when "should the NSA be used for economic espionage?" was in the news. Not the exact title of their editorial, but the gist was that turning the NSA into a spy agency at the beck and call of Ford and Motorola is a bad idea. But if you die, Vlad, "the vznuri," at least you have seven other functioning tentacles. --Tim May Notice: Don't expect me to reply to trivial questions and complaints. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Pitfall in producing random numbers
by norm＠netcom.com 17 Dec '03

17 Dec '03

I think that it was on the cypherpunks list that I learned of how PGP for the IBM PC, running under emulation on the Mac failed to produce good random numbers. The virtual PC clock proceeded forward by very predictable manner. Perhaps the details were different but the nature of the pitfall is clear. I did not notice that pitfall mentioned in RFC 1750. (Its the only hazard that I know of that they missed.) The only thing I can think of protecting against this is to do some simple checks against more obvious ways that virtual clocks might produce times. Low order bits should not always be zero. The differences between successive readings should not be constant. Two clock readings separated by a computation of known length should be within a factor of a few of the expected value. If not try again once or twice. Such tests are imperfect but I think that they would have noticed the virtual clock on the virtual PC. If they fail the program can require the user to enter the seed, with all that that entails.

1 0

Seeds which depend on machine states
by MIGUELDIAZ＠megaweb.com 17 Dec '03

17 Dec '03

It is my suspicion that seeds which depend on machine states(ie state of your computer at a specific instance of time) would always be subject to scrutiny and de-cryption. As long as the software used to encrypt is not self-modifying, the machine state can (through careful manipulation involving temperature, clocks, processes etc)always be replicated and fixed to an acceptable degree. This allows you to look into the heart of the encryption method and then create a plan to decode based on a brute-force attack. Time is the only friend then of the encryptor and unfortunately in the case of credit cards this typically is measured in years. Plenty of time for brute force attacks to yield fruit. I'll be gone for two days. will respond to any comments Saturday.

2 1

THE COSMOS THE UNIVERSE 2
by RBL＠cosmos.com 17 Dec '03

17 Dec '03

E=MC The equation for the atom bomb. It says that matter and energy are the same thing. So then what is that? Matter, look at a brick. Its in a three dimensional form. Its made of electrons, protons and neutrons (atoms) and they are moving so the brick is moving. Energy, sunlight. Its in a three dimensional form. It comes to us from the sun therefore it is moving. 3D and moving Both matter and energy are 3D and moving. I outproduce Einstein. We already know all matter has gravity. The bending of light shows that energy has gravity also. So matter and energy are 3D moving with gravity. The universe is made of matter, energy, time and space. That just stated is the matter and energy part. Time and space. Take everything in the universe and stop it. Does time progress? No. Therefore time is the motion and the understanding of all the motion is the understanding of all of time. Space, it ends. Space does not go on forever. Space is in a three dimensional form. It moves but does not have gravity. Space moves like this. O /\ + \/ O And that is the understanding of all of time. O This is what was first in the beginning. /\ This is the old kings and queens. + This is democracy. \/ This is socialism. O This is when the Lord Jesus Christ returns. And that is the understanding of the universe. Glory be to the Father the Son and the Holy Ghost. Revelation chapter 10 & 11; 15-19. It is very important the people receive this information. You may tell someone about this. Thank You Robert Lavelle

1 0

Re: Netscape closes up 1 3/8 today!
by dmandl＠panix.com 17 Dec '03

17 Dec '03

At 1:30 PM 9/21/95, sameer wrote: > The only bad publicity is no publicity. This assumes that you're trying to sell something. Some people actually have no use or desire for publicity. Publicity has caused a quick and painful death to many scenes, movements, cabals, and "temporary autonomous zones." --Dave. -- Dave Mandl dmandl(a)panix.com http://wfmu.org/~davem

2 1

Re: Munitions shirt (again)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:02 PM 9/21/95, Michael Shields wrote: >> There is nothing in the ITAR that refers to ``machine-readable'' so >> there is no need to interpret that term. > >The issue is that it has been formally used as the criterion that >distinguishes "technical data" from "defense articles". See Phil Karn's >CJ requests on the _Applied Crypography_ book and floppy. Hear, hear! Michael is correct in pointing out that the "machine-readable" part has indeed been a criterion...if the ITARs in general are unlikely to withstand scrutiny, then trying to get books banned would really cause problems. Also, one of the criteria I recollect is that "systems" were barred from export, not just algorithms. Algorithms are very widely discussed, even described in detail in patents. "Cryptographic systems," embodied in systems, circuits, and specific programs, are not the same as what gets published in textbooks. (BTW, I'm glad I can now read the posts of Michael Shields. His MIME PGP was admirable, in intent, but many of us (from comments here and that were sent to me) just can't handle whatever MIME configuration he was previously using.) --Tim May Notice: Don't expect me to reply to trivial questions and complaints. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0