December 2003 - cypherpunks-legacy

Re: FCC & Internet phones
by Peter Monta 17 Dec '03

17 Dec '03

Allen Smith writes: > I believe the companies are mainly worried about other companies doing > such phone service, not about the individual. However, they may also > go after those selling equipment (inc. programs) for such competition. Perhaps, but free software, for example, does not offer much of a target. Internet<->PSTN gateways sound more like a commercial venture, but even here we may start to see "free" services, such as the fax service that's been around for some time. Cheers, Peter Monta pmonta(a)qualcomm.com Qualcomm, Inc./Globalstar

1 0

Cryptanalysis
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:32 PM 2/29/96, Alan Olsen wrote: >Here is the problem... I am looking for texts on the breaking >of cyphers. (I want to show him WHY the cypher is insecure and >not just say "<scottish accent>It's crap!</Scottish accent>".) >I have done a couple of searches and have come up fairly dry. There are several places to look: * The Aegean Park Press line of books on military cryptanalysis, mostly the books by Friedman and his associates. Computer Literacy (on the Web) carries most of them. (Also mentioned in various crypto FAQs, as I recall.) However, these books are based on work done in WWII and the following decade(s), so the stuff is pretty dated. Still, nearly any "snake oil crypto" system, such as it sounds like your friend is building, will likely be far weaker than the ciphers the NSA was attacking back in the early days. (I just noticed that Bill Frantz made the same comments about the Friedman books. By the way, our own John Gilmore was instrumental in getting one of the last ones out into print; as I recall, he found one of them in a public library, and thus Aegean Park Press was able to republish it without the NSA stopping them.) * Several textbooks have good chapters on cryptanalysis, often buried in the "problems" section. I think Denning's book has a good chapter on the methods. * The journal "Cryptologia" is largely devoted to amateur cryptanalysis. >The Cyphernomicon has a couple of paragraphs, but nothing on >techniques or pointers to other references. RSA's FAQ has >little to nothing as well. A web search turned up little >useful. Most of the other references I have found have been for >current cyphers, but next to nothing about breaking them. There are very good reasons to say little about "conventional cryptanalysis": it just doesn't matter much with modern ciphers, such as public key systems. Modern ciphers don't fall to conventional attacks based on word frequency, pattern analysis, etc. Your friend is on a hopeless task. If he doesn't understand just how hopeless it is to develop a homegrown, conventional cipher then he's certainly not likely to take the time to become a skilled amateur cryptanalyst. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Chaff in the Channel (Stealth PGP work)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:32 PM 2/29/96, Bruce Zambini wrote: >Well, that's what I want to avoid; I think the issue is that as long as >stego is predictable, there's a problem, ie a message to a certain party >can be shown to exist, even if it's not readable. This might prove more >than ample evidence in certain circumstances. > >You shouldn't be able to recover the stego'd message without special >knowledge. This isn't addressed by current software, to my knowledge. Sorry if I haven't been following the latest "stego" messages too closely. If it is desired that an image, say, carry a steganographic message that is "undetectable" to adversaries, then much more than just stripping off the PGP markers (headers, identifying bits, whatever) must be done: the LSB bit plane, if this is the stego channel, must have statistics which are indistinguishable from "normal" LSB bit planes of images. (Not an easy thing to define or to implement, but there you go.) So, when the Khmer Rouge People's Enforcement Division looks at the image they have confiscated from your computer and examines the LSB bit plane for evidence of human rights files encrypted steganographically, that bit plane had better not have unusual statistics...it had better not look "too" random, as real life LSB randomness may not have nearly the entropy of PGP randomness, say. What can be done? One emergent standard could be to the following: - when images are sent, or stored, replace the true LSB bit plane (I say "true" to distinguish the actual "grey levels" of one or more of the color bit planes from RGB encodings in which the nominal LSB is not at all the minimum brightness changes) with a "PGP chaff image." - this PGP chaff image could be randomly generated, or chosen from a library, or (surprise, surprise) actually be an encoded message. - the point is that some percentage of all images would have this chaff present, so that mere possession of an image with the offending statistics would not ipso facto be proof of possession of an encrypted/stegoized message. (Of course, the Khmer Rouge People's Enforcement Division might simply kill you anyway, but then they might kill you for merely having a computer. One would hope that Reno's Raiders would not do likewise, and that the existence of multiple images with "chaff" image planes would be sufficient to confuse things.) - the adversary may know you have an image with a chaff plane, but he doesn't know that you actually know how to decode that chaff, that that chaff is not chaff to you. [How is this any different from simply sending chaff messages conventionally, without using steganography? Why not use the full bandwidth? Answer: Stego provides some plausible deniability, more important in court cases in the U.S. than to the Khmer Rouge, of course. Having random messages filling up one's hard disk is suspicious, but having images of the Mona Lisa which _may_ contain stego bits and which _may_ be readable by the owner is considerably less suspicion-arousing.] This is my take on fixing the stego situation. Instead of worrying about a "stealth PGP version," which is likely to be only a slight speed bump (because of the statistics), think about flooding the detection channels. Longterm, however, I certainly think that cryptographic messages can be made virtually indistinguishable from low-order bit noise. (I have argued this since the late 1980s, so I'm not changing my views now.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

5 4

Re: rhetorical trickery
by jim bell 17 Dec '03

17 Dec '03

At 09:15 PM 3/9/96 +0000, Deranged Mutant wrote: >"Vladimir Z. Nuri" <vznuri(a)netcom.com> wrote: > >> >> but I have a question: how did they know it was his diary? >> > >> >If I remember some earlier discussion about that case from a few years >> >ago, the file was called "diary.pgp". >> >> how did they know it was *his* diary? > >Well, nobody *knows*. But if you've got a file called diary.pgp on >your hard drive, chances are it's a diary of some sort. It's a >reasonable guess. Or it's the list of local dairies, and the guy can't spel.... Jim Bell jimbell(a)pacifier.com

1 0

Re: Vexatious Litigants (was: SurfWatch)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"janzen(a)idacom.hp.com" "Martin Janzen" 9-MAR-1996 09:48:42.59 >ObCrypto, sort of: What if the page were retrieved through an HTTP >proxy which, unbeknownst to the author (and the filtering service/SW), >deliberately removes or alters the PICS-Label or other rating >information? The author did, after all, _provide_ the "undesirable" >material.... To what extent does the author's intent matter? Must Web >authors now add a digital signature to each page (including its rating >info), to prevent tampering? Good idea, and one that I should have remembered thinking of before with my comments on a "rating-searching" search engine. If it's providing web proxying on such links, including removal of potentially-exclusive ratings would be a good idea. (Running the system on a secure server would also be a good idea). -Allen

1 0

Re: Leslie Fish address?
by Simon Spero 17 Dec '03

17 Dec '03

On Sun, 3 Mar 1996, Marianne Mueller wrote: > That's a wonderful notion - I think a Zappa tune would fit - > > (Pretty Good Music, the CD...) .. "RSA can you see, By the DN's early light" .. "People try to put us down Modular Exponentiation" .. "Well we squared the accum And halved the exponent And people could see I was a proponent of Big Nums Big Bad Nums" ... --- They say in online country So which side are you on boys There is no middle way Which side are you on You'll either be a Usenet man Which side are you on boys Or a thug for the CDA Which side are you on? National Union of Computer Operatives; Hackers, local 37 APL-CPIO

1 0

No Subject
by frantz＠netcom.com 17 Dec '03

17 Dec '03

Date: Fri, 1 Mar 1996 10:26:14 -0800 (PST) Errors-To: gklein(a)willamette.edu Reply-To: cda96-l(a)willamette.edu Originator: cda96-l(a)willamette.edu Sender: cda96-l(a)willamette.edu Precedence: bulk From: Peter Saint James <peterstj(a)ix.netcom.com> To: Multiple recipients of list <cda96-l(a)willamette.edu> Subject: Fwd: Freedom to Read Week (CA) and "Black Thursday" WWW page X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas This appeared on another list I'm on. Besides giving you a view of a (bad) future, it is an example of an HTTP proxy which could also be used for anonymous browsing. - Bill > ELECTRONIC FRONTIER CANADA (EFC) --- PRESS RELEASE > >(For immediate release --- February 27, 1996) > > > "Freedom to Read" in Cyberspace > > A few members of Electronic Frontier Canada have > developed an amusing and interactive Web page > to celebrate 'Freedom to Read Week'. > >The Internet, some people say, is out of control and in need >of strict government regulation. But just what might a censored >Internet look like? > >One possible answer to that question is given by the "Black Thursday Machine", >an interactive Web page that was the brainchild of three multimedia designers: >Brian Hall, Andrew Chak, and Rob Stanley. Stanley is also a member of the >online civil-liberties organization Electronic Frontier Canada. > >"Black Thursday Machine" Web pages: http://www.vex.net/~brian/Censored > http://www.hyperactive.net/censored > >The "Black Thursday Machine" invites Internet surfers who visit the site >to type in the address of their favourite Web page, to see what it might >look like if a Canadian version of the new and controversial American >"Communications Decency Act" were put into effect. > >The "Black Thursday Machine" will fetch any page you request, but it >presents you with a censored version. The algorithm it uses is simple >and unsophisticated -- but these are the same kinds of rules recently >used by America Online and CompuServe when they blocked access to >discussions including the words "gay", "sex", or "breasts". > >"Any naughty word is replaced by the word 'CENSORED' in bright red," >says Rob Stanley, who was the chief programmer. Which words are on >the forbidden list? "It works just like government censorship," >says Stanley, "you don't get to choose. It's an arbitrary process." > >The Web site has links to a few representative examples, including pages >about "Breast Feeding", "Safe Sex", "Planned Parenthood", and help for >troubled "Gay Youth", that are rendered almost unintelligible by the >crude censorship. > >"Despite well-intentioned desires to protect children," >says Jeffrey Shallit, vice-president of Electronic Frontier Canada, >"adults need to be able to communicate freely about controversial issues. >Otherwise, we'll reduce the level of discussion on the Net to >Winnie-the-Pooh." Paraphrasing a U.S. Supreme Court Justice, >Shallit said that censoring the net to protect children is >like "burning down your house in order to roast a pig". > >"The 'Black Thursday Machine' demonstrates the ravages of censorship >in an amusing and provocative manner", says David Jones, president of EFC. >"I hope people will take a moment during 'Freedom to Read Week' to visit >the web site because it illustrates what the wired world might look like >if artistic expression, vigourous debate, and all the subtley of human >communication and interaction were subjected to the cold, calculating, >and heartless scrutiny of a machine that filters out what the government >might deem as controversial, offensive, or just plain inappropriate for >the eyes of its citizens." > > > * Why "Black Thursday" ? > >New and harsh restrictions on what can be communicated through American >computer networks were signed into law on Thursday, February 8th, 1996 >-- "Black Thursday". "This sent a shock wave through the Internet, >where concerned individuals around the world "Painted the Web Black" >for 48 hours as a sign of protest," says David Jones, EFC president. > > > * About "Freedom to Read Week" in Canada (February 26 to March 3) > >"The purpose of 'Freedom to Read Week'," says Sandra Bernstein, >"is to encourage Canadians to think about and reaffirm their commitment >to intellectual freedom, as guaranteed under the Charter of Rights and >Freedoms." Sandra Bernstein, also a member of Electronic Frontier Canada, >represents the Periodical Writers Association of Canada on the >Book and Periodical Council's Freedom of Expression Committee, >which sponsors 'Freedom to Read Week' each year. > >Bernstein also maintains an online "Chronicle" which documents challenges >to Freedom of Expression in Canada: > > http://www.efc.ca/pages/chronicle > >-30- > >- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - >EFC Contact Information: > > >Electronic Frontier Canada > > Dr. David Jones phone: (905) 525-9140 x24689 fax: (905) 546-9995 > email: djones(a)efc.ca > > Dr. Jeff Shallit phone: (519) 888-4804 fax: (519) 885-1208 > email: shallit(a)efc.ca > > Dr. Richard Rosenberg phone: (604) 822-4142 fax: (604) 822-5485 > email: rosen(a)efc.ca > > >Electronic Frontier Canada, online archives: > > URL: http://www.efc.ca/ > > >- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - >Other Contact Information: > >- - - - - > >Multimedia designers who dreamed up the "Black Thursday Machine": > > -- programming, engine development. >Rob Stanley, phone: (416) 928-9503 (home), (416) 960-8400 (work) > email: themaxx(a)io.org > > -- graphical look, interface, design, and copy >Andrew Chak, phone: (416) 469-4154 (home), (416) 448-2403 (work) > email: chak(a)magic.ca fax: (416) 469-0914 > > -- concept development, design >Brian Hall, phone: (416) 504-0908 (home), (416) 351-1040 (work) > email: brian(a)hyperactive.net, pager: (416) 337-3377 > >These fellows also dreamed up the award-winning "Canadianizer" >at the following URL: http://www.io.org/~themaxx/canada/can.html > >- - - - - > >Additional sponsors of the "Black Thursday Machine: > > >HyperActive NetMedia http://www.hyperactive.net >Vex.Net http://www.vex.net >Passport Online http://www.passport.ca > >- - - - - > >Further Contact Information for 'Freedom to Read Week' in general > > >Freedom to Read Week -- Web page URL: http://www.cycor.ca/pwac/freeweek.htm > >Freedom to Read Week -- Publicist, Sarah Thring >phone: (416) 480-2533, fax: (416) 480-2434. > >Sandra Bernstein, phone: (416) 465-0798 >email: sandrab(a)inforamp.net, URL: http://www.inforamp.net/~sandrab/home.htm > >Book and Periodical Council, 35 Spadina Road Toronto, ON Canada M5R 2S9 >email: bkper(a)interlog.com >phone: (416) 975 9366, fax: (416) 975 1839 > >Periodical Writers Assoc. of Canada, 54 Wolseley St, 2nd Floor, Toronto M5T 1A5 >email: pwac(a)cycor.ca URL: http://www.cycor.ca/PWAC/Words.htm >phone: (416) 504-1645, fax: (416) 703-0059

1 0

Re: If yer a fan of Matt Meow Meow Bruce, Pee Pee Herman, Rush Limbaugh, Grillo, Mark Staloff, Charles Nelson Reilly, Meg Tilly, Naomi Judd, Larry Storch, O. J. Simpson, Liberace, Judy Garland, or George Kirby, you won't want to miss this!
by uunet!in1.uu.net!gwu.edu!dazed＠warwick.com 17 Dec '03

17 Dec '03

: If it is some college prank, I think that the people responsible should : make an apology to Dr. Alan Keyes, who is a candidate for the presidency : of the United states and a rare vioce of sanity in a world of braying : jackasses like Slick Willie Clinton and his boss. I say impeach them both : and kick wiesenheimers like the idiot who started this thread into jail : where they belong and let them work for a living. Uh...this seems to be x-posted to my group as well...but I couldn't let this slip by... Alan Keyes associated with sanity?!?!?? Bwahahahahahahahahahahhahahahahahahahahahaahhahahahahahahahaha Please, a theocratic moron who thinks we should all live in accordance with his little monotone view of the world? You may now return to your normal lives. ------------------------------------------------------------------------- John Nowicki (dazed(a)gwis2.circ.gwu) : "There's one way to find out if a 1818 Kalorama N.W. #23 : man is honest- ask him. If he says Washington D.C. 20009 : yes, you know he is crooked"- GM ----------------------------------(7x1)----------------------------------

1 0

Re: Another Motivation for the CDA (Federal Sentencing Guid
by Bill Stewart 17 Dec '03

17 Dec '03

At 07:33 PM 3/8/96 -0800, jamesd wrote: >Also he did not steal the pizza. He destroyed it in the course of >intimidating some kids who were eating pizza. > >In theory one would expect the law to have this unjust effect, >but in practice most of the poster boys that people give as >examples of the injustice of this law are folk that one would >like to see taken behind a barn and shot out of hand. The pizza guy was a thug, but twice as many third-strikers got their third strike for marijuana as for all violent crimes combined. I assume most of these had large quantities, possibly intended for sale, and a number of them had real crimes as their previous felonies rather than Prohibition-related offenses. But you can get legally serious quantities of marijuana by just growing a couple of plants. >Perhaps the prosecutors are exercising prosecutorial discretion? Not much - Government Radio said tonight that they're not allowed to plea-bargain third strike felonies down to misdemeanors. The LA public defender's office is absolutely swamped, partly because third-strike cases are supposed to get diligent support, and partly because they have to go to trial rather than plea-bargaining a guilty, which is less work. The county jails are also having serious crowding problems, because prospective third-strikers are being kept in them pending trial to avoid risk of flight, so non-third-strike jailees are getting out early (especially drug violators.) And the guys who just got busted for having fertilizer, diesel oil, and drugs on their farm had a whole three ounces of marijuana and personal-use quantities of crank. Maybe they were planning to blow up buildings rather than stumps; but the Feds are trying to paint them as max evil just to build up their case. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 pager 408-787-1281 # "At year's end, however, new government limits on Internet access threatened # to halt the growth of Internet use. [...] Government control of news media # generally continues to depend on self-censorship to regulate political and # social content, but the authorities also consistently penalize those who # exceed the permissable." - US government statement on China...

2 1

Re: FCC & Internet phones
by Deranged Mutant 17 Dec '03

17 Dec '03

Simon Spero <ses(a)tipper.oit.unc.edu> wrote: > The real complaint of the telephone companies seems to be not that the > calls are free, but that the 'whatevers' are not subject to the same > tariff regulation that they are. I'm sure it's because they want to be > able to lower their fees to the same level to compete. Quit sure. How can one compare the fees, though? You buy the software (or use a free version of similar software) and get an account with an ISP, and maybe an IRC-type network devoted to Internet phone. Telephone/conferencing over the 'net is different technology than standard telephone. How can they be compared? (The exception maybe if one can route an Internet phone call to regular phone switches.) I notice it's the small LD companies too. The biggies like AT&T and MCI are getting into the ISP business, so they probably don't feel threatened by it. ObCrypto: I don't know. I'm wondering how the FCC or DT Bill will affect the use of uch technologies, since it's pretty easy to plug in good crypto. Rob. --- Send a blank message with the subject "send pgp-key" (not in quotes) to <WlkngOwl(a)unix.asb.com> for a copy of my PGP key.

1 0