December 2003 - cypherpunks-legacy

Re: Applied Cryptography, 2nd Edition -- Errata version 1.2
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Timothy C. May wrote: > > At 1:49 AM 2/9/96, Bruce Schneier wrote: > > APPLIED CRYPTOGRAPHY, Second Edition > > > > ERRATA > > Version 1.2 - 1 February 1996 > > > ... > > Wow. Does this mean the Third Edition will be coming out soon? > > (Not to sound harsh, but that's a *lot* of errors still in the book...I > thought a lot of reviewers were going to squish out these sorts of > things?) That would depend on hw long you'd want to delay releasing a book. When I finished reading 1st ed., I decided I was going to try coding the MMB cipher, got ahold of the erratta which read "MMB has been cracked. Don't use it" or something like that. Had nothing to do with a typo. Rob. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMRr8GioZzwIn1bdtAQH+XAGAjFImro/S6WQYJpmuGEA8L0eQAWw21ECT AE0+m81jRK9AtXlbFLkg24ou6mU8N357 =noJq -----END PGP SIGNATURE-----

1 0

bullshit (was: Re: Fair Credit Reporting Act and Privacy Act)
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 10:18 PM 2/8/96, Bill Stewart wrote: >The parts of the Privacy Act that I remember are all restrictions >on _government_ actions, not private actions. It's an important >distinction; even though TRW may know way too much about you, it's all information that >you voluntarily released to somebody, unlike data that >the government requires you to give them. And, yes, it's out-of-date >and toothless. It's important to distinguish between information that you've voluntarily released as such (e.g., giving someone your SSN) and information derived from analysis of your actions (e.g., repayment patterns, value-added with a proprietary scoring system) and/or consolidated from small releases of info here and there--and most of the material in a typical TRW or Equifax dossier is of the latter kind. ObCrypto? Vaguely. I've been thinking about the possibilities of "bullshit generators"--simple programs that would generate names and various kinds of facts about people who don't exist and "make this info available": email addresses to SSNs, addresses, credit histories, medical records, you name it. If "bullshit bots" became generally available and easy to implement, "information markets"--a phrase that's far too general to capture the complexity of the dynamics it refers to--would stratify pretty fast: groundfeeders like the fine folks who're now grepping newsfeeds for email addresses + interests could be laid waste to pretty fast by a handful of dormant newsgroups systematically flooded with posts from gjhfkj(a)opihk.com or poipoh(a)axsx.org. Who'd pay for a DB that's half bogus? Alternatively: who'd pay to prevent their DB from being corrupted? Companies like Equifax would be harder to penetrate, but by no means beyond reach: there are so many people out there who they don't have files on yet--in ghettoes, in Eastern Europe--that they could be duped. We tend to think of information markets as markets for _true_ information; but as those markets mature, they'll breed parallel "counterweight" markets--markets, in essence, for _false_ information. Equifax and TRW got the goods on you? How much would you pay to vanish into a crowd of newly created people with excellent credit ratings who are all just a few diddled digits away from you, your SSN, your address, your phone number, your mother's maiden name...? The latest issue of RISKS (2/8/96, 17:70) has a kvetch about <http://www.graviton.com/red/>, "The Red Herring Home Page": > A little experimentation revealed that almost ANY obscure search >would match "The information source", often as the only matching >document found. As near as I could figure out, his site recognized >probes by web robots and then threw a dictionary at them! Congress would be hard pressed to illegalize fiction. ;) Ted -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMRsCX3Shd2boiy7BAQGS1gf+KK/VG9EGHkHBE/zaH2saf2Kb1Qgq4Ez1 wUABgo5JFAwbYFMY4aPZJIOcU2gPlVSDEHZtRMRI/JW2FTqGD8BwMneBjEFI9uHs K9jUhT3sSyzWgwW/9H8rb/mO8gHJig9jcWseyK/z3Cyk8MFbP5h0nLcougTIhRFr f2X/i4y3JNajtUYfkWQVUbDr0yS/5NesiMX79KB560clhPgXqTVgfU15DJOytWGZ aRSfUU7Fu05BypfylcqW2nltgnvkAVrI+4Scf/nolZEqBT3PJ3MmWXNetbULxd4A Jr3IRG/E3CVwBcOAhFLyw48c5Qseu7pSs6OA5VqgmGD/0SEdI1raWA== =8XnL -----END PGP SIGNATURE-----

1 0

Re: Forgery--wasUnknown address
by Gordon Campbell 17 Dec '03

17 Dec '03

At 10:38 AM 09/02/96 -0800, David Sternlight wrote: > >I send this to you for your amusement and delectation. The core message >below, about plonking, is a crude forgery--I did not write it nor did I >send it. > I got one of these, too. My assumption was/is that somebody forgot to sign off the list before their account was closed down. ----- Gordon R. Campbell, Owner - Mowat Woods Graphics P.O. Box 1902, Kingston, Ontario, Canada K7L 5J7 Ph: (613) 542-4087 Fax: (613) 542-1139 2048-bit PGP key available on request.

1 0

V-chips, CC, and Motorcycle Helmets
by A. Padgett Peterson, P.E. Information Security 17 Dec '03

17 Dec '03

Tim rites: >The viewer sets her preferences: a 5-5-5 would let everything through, etc. >The developer of the chip claimed he could mass produce the chip for a buck, >and this may be where all those estimates of "$1-2 per set" have come from. Am in favor of this since it puts the control in the hands of the property owner. One question would be "how often is the V-rating code transmitted ?" (are the kiddies protected from channel-surfing ?) Do suspect that the $1-$2 cost could be met *at the manufacturing level*. Do also see the need for regulation to put it in. It was required for UHF channels else no one would try to build one. I am also thankful that is was required for closed-captioning even though my TVs are not new enough (have a $99 discount-house box on the TV in the family room. Makes many shows more relaxing. Only annoyance is that we have to be even faster on Jeopardy since the caption appears before the players speak. Motorcycle helmets (required in Florida as is seat belt use) are another matter. Requiring the lights to be on is different - that makes the bike easier for others to see. Helmet and seat belt laws are purely economic in nature: the state wants them to reduce the load on the state supported medical structure, motorcycle manufacturers (and auto manufacturers) support them to keep insurance rates low (high insurance rates affect sales). In this case the laws are "special interest" and have nothing to do with the individual though the rationale is often "for your own good" (have been wearing seat belts and helmets for many years - have a scar on my forehead that took fourteen stitches where the Snell approved Bell Magnum helemet *split* under the impact - sudder to think what the effect would have been without it. Similarly, I do not like air bags since I worry about second and side impacts. Still was an easy way out for the manufacturers to appease the insurance companies (see above). Getting a bit far afield from cyphers though. Bottom line is that the V-chip seems like a good idea to me so long as the 5-5-5 setting is the default and there are no "backdoors". Warmly, Padgett

1 0

Re: PLONK
by David Sternlight 17 Dec '03

17 Dec '03

Plonking is an outrageous abuse of net courtesy. Shame on you! David

1 0

Kill Files and Plonking
by tcmay＠got.net 17 Dec '03

17 Dec '03

A predictable round of "Public Plonkings" and "You're in my kill file, nyah, nyah, nyah!" postings. Personally, I regret ever mentioning adding anyone to my filter file, as it then generated the expected "But Tim won't see this...." nonsense. I shouldn't have done it. Public plonkings rarely accomplish anything. I move names and topics in and out of my filter files as the mood strikes me. I have the option of looking at the mail that's ended up in one of my various filter files, and deciding to move someone out of that file and back into the main list file. (With Eudora, I filter _every_ incoming message into one of a dozen or so files. It's just a question of which one. For a few really obnoxious people, I filter their stuff into Eudora's "Trash" file; when I empty the trash (Macintosh TM), their message is irretrievably gone.) I think it's best _not_ to publicize who is in one's filter or kill file for a couple of reasons: 1. It cuts down on the acrimonious plonkings and couter-plonkings. 2. It leaves open the door for gracefully reversing the process. 3. The filtered or killfiled person never really knows if he's being filtered, so there's a "random reinforcement" element which may, I am guessing, have an effect on posts. To satisfy any curiousity aroused, at this moment there are 12 names which I filter into a file called "Kill File" (but which is persistent, and can be looked at by me at any time) and only 2 names which I filter into "Trash" (which gets emptied fairly often, usually without my having looked to see what went into it). (No name I have ever mentioned publically in this context is in this Trash file.) Some people who write to me and get no response may of course be left wondering....this is the beauty of random reinforcement. --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

The V-Chip glass is half full
by frantz＠netcom.com 17 Dec '03

17 Dec '03

As a incurable optimist, I would like to offer a view contrary to all the V-Chip doom and gloom. Consider the Movie rating system as a precedent. In the old days there was a rating system in Hollywood which made it impossible to show a married couple sleeping in the same bed. This situation is analogous to modern TV where George Carlin's 7 naughty words may not be spoken. Contrast that with today's movies. There is a much wider latitude about the movies you can make and distribute. All you have to do is label them NC-17, R. or X and you are clean. Of course, there are newspapers which will not allow you to advertise and theaters which will not show the X/NC-17 movies, but that's the way the market works. With some luck, we will be able to see on TV what we can now see in the movie theater, and the prudes will screen it out with the V-Chip the same way they now screen it out with the movie rating. Everyone is (more or less) happy. Panglossianly yours - Bill

2 1

"Rights"
by A. Padgett Peterson, P.E. Information Security 17 Dec '03

17 Dec '03

>A day or so ago, I reasoned incorrectly that university students and >employees were free to encrypt mail they sent through their student or work >accounts. This was in response to a statement that the govt could retain >at least some control of internet traffic through the universities and >businesses. I would credit the person who called me on it, by I do not >remember who it was. It seems that, at least for employees, it is totally >up to the employer. Is something I have been saying for years & has nothing to do with "free speech", rather it is "property rights" and in the USA they always *must* win because when you get down to it the US is based on property rights. One of the most basic is that "citizens are not the property of the state". "We hold these truths...all men are created equal" referred to the separation of nobility from the "common man". Is part of the reason Amurricns may not be titled. However computers and networks are not people, they are property. All are owned by someone who exercises control over them. To say "you must let me use yours as I wish" is to deny "all men are created equal" (and coporations enjoy the legal fiction of being an entity. Some time in the future we may have to consider other beings (porposes ?) but not yet just as at one time slaves and "injuns" were conveniently denied. Now if an employer/university choses not to exert any control, that is their decision but does not mean they have given up anything (AFAIK "adverse possesion" has never been applied to a computer or network) so why be surprised when some exercise those rights ? I agree that proper notice should be given but that is only to stay out of court in the first place. *Every court case I know of has been decided in favour of the property owner*. Remedy exists. If you do not like the rules at one site, choose another. In most places you can find a PPP provider for $20/month unmetered who will let you do what you will. True, if you want to use the web properly, the price of a PC has gone up from $25 since Windoze and a 256 colour display is needed, but not much. Sorry for being a bit off topic but once this is understood (and am open to argument on the issue but expect to prevail), I suspect that a lot of the noise level on this list will go down. Warmly, Padgett

2 1

Yeah, Yeah But what are we gonna do!
by Richard Harris 17 Dec '03

17 Dec '03

It may just be me but ... i) This in-fighting and bickering doesn't seem very productive ii) What are we gonna do about the CDA? The bikers fought the helmet law and won (in places) We should do the same. "It is better to have tried and failed than never have tried at all" Our strength is in our numbers and our abilities we should use them to ensure our freedom. Science fiction has become our reality and their paranoia. All we have to lose is our freedom.

3 2

Re: Req. for soundbites
by Joe Zychik 17 Dec '03

17 Dec '03

At 07:08 PM 2/9/96 +0600, you wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >A local TV station has asked me for an interview, after I sent a graphic of a mono-digital hand gesture with the phrase "censor this!" to the Prez, Veep, and the area congresscritters (cc'd to 2 TV stations and a radio station), accompanied by a 'confession' and demand for swift prosecution. > >Anyone got any nifty sound bites I can try to toss in? This guy has some Congressional Soundbites on his site: Damon Lust http://www.lust.org/~damon/ I didn't stay around to listen to them. But, his head seems to be in the right place. He refers to Congress as Corporate Pyscho Criminals. jz Publisher of the Zychik Chronicle. To subscribe send e-mail with sub-cy in the header

2 1