December 2003 - cypherpunks-legacy

Reply to anonymous ping.
by daemon＠anon.penet.fi 17 Dec '03

17 Dec '03

Your code name is: an611909(a)anon.penet.fi.

1 0

Anonymous code name allocated.
by daemon＠anon.penet.fi 17 Dec '03

17 Dec '03

You have sent a message using the anon.penet.fi anonymous forwarding service. You have been allocated the code name an611909. You can be reached anonymously using the address an611909(a)anon.penet.fi. If you want to use a nickname, please send a message to nick(a)anon.penet.fi, with a Subject: field containing your nickname. For instructions, send a message to help(a)anon.penet.fi.

1 0

[hrdware] Is Tempest detecting only video?
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 11 May 96 at 20:35, jim bell wrote: > I'm waiting for cheap flat-panel displays for desktop computers > to arrive, because they will probably be almost impossible to > detect usably by Tempest systems. Does Tempest detects only the emission from the electron gun in the monitor or can it get a usable "lock" on some other signals generated within a computer? As an example, can it grab the keystrokes? If the answer is yes, can it do it: a) rarely b) occasionally c) most of the time d) almost all of the time e) never Could somebody knowledgeable in Tempest can rate the various emissions from a computer? (such as: keyboard, COM port, modem, lpt, video signal(from the card), disk write, monitor emission, network comms, etc) Ciao JFA Just curious... PGP key ID# C58ADD0D at: http://w3.citenet.net/users/jf_avon Key Fingerprint: 529645E8205A8A5E F87CC86FAEFEF891 Unsollicited commercial e-mail will be proofread at US165 $/h Any sender of such material will be considered as to have ac- cepted the above mentionned terms.

1 0

Re: Again: [hrdware] anti-Tempest video settings
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 12 May 96 at 13:51, Julian Assange wrote: <technical tips snipped> > Equipment > capable of the latter would be extremely complicated and expensive > to design and produce; Even too expensive for entities with the power of taxation? > I suspect there has been no call for it to > date, given that if you are dealing with a target who understands > the risks of van-eck they usually have shielding and or a faraday > cage. You have a point for big outfits. But for small companies or cypherpunks on a restricted budget, they also know that there is most likely *no* shielding of any sort... Regards jfa Why is it that govt employees makes the best spouses? Because after they come back from work, they are not tired and they already read the newspapers. PGP key ID# C58ADD0D at: http://w3.citenet.net/users/jf_avon Key Fingerprint: 529645E8205A8A5E F87CC86FAEFEF891 Unsollicited commercial e-mail will be proofread at US165 $/h Any sender of such material will be considered as to have ac- cepted the above mentionned terms.

1 0

Re: Again: [hrdware] anti-Tempest video settings
by jim bell 17 Dec '03

17 Dec '03

At 08:02 PM 5/11/96 +0000, Jean-Francois Avon wrote: >Or, to the contrary, is it reasonable to assume that modern Tempest equipment can >work around theses impediments almost all of the time, therefore >making any attempts at this futile? It's probably worth investigating. Chances are good that as long as the total beam current remains as constant as possible, the signal will be much harder to interpret. One way to investigate this comparatively easily is to measure the total power consumption of a monitor when the screen is filled with different colors at different saturations, etc. Supply the AC to the monitor through a 1-ohm resistor, measure the AC voltage across the resistor to 1 mv accuracy or better, and you have a pretty good way to distinguish different beam currents. I'm waiting for cheap flat-panel displays for desktop computers to arrive, because they will probably be almost impossible to detect usably by Tempest systems. Jim Bell jimbell(a)pacifier.com

1 0

Crypto++ 2.1
by Wei Dai 17 Dec '03

17 Dec '03

Crypto++ 2.1 has just been released. You can find download instructions on the Crypto++ home page at http://www.eskimo.com/~weidai/cryptlib.html. Crypto++ is a free C++ class library of cryptographic primitives. Changes made in version 2.1 include: - added Tiger, HMAC, GOST, RIPE-MD160, LUCELG, LUCDIF, XOR-MAC, OAEP, PSSR, SHARK - added precomputation to DH, ElGamal, DSA, and elliptic curve algorithms - optimizations in elliptic curves over GF(p) - changed Rabin to use OAEP and PSSR - changed many classes to allow copy constructors to work correctly - improved exception generation and handling This is likely to be the last major revision of Crypto++. Future versions will probably only be released for bug fixes and compliance to new standards. Wei Dai P.S. A new set of benchmarks done using Crypto++ 2.1 is available at http://www.eskimo.com/~weidai/benchmarks.txt.

1 0

Re: Remailer in a box
by Matts Kallioniemi 17 Dec '03

17 Dec '03

At 00:24 1996-05-12 -0700, Lucky Green wrote: >May I suggest convincing that Swedish ISP to offer up a signup form >accepting Ecash? They probably will once the Post Bank gets going with ecash. Until then there are legal difficulties. Swedish online merchants can't even accept credit cards. They need an order in hand writing or voice before they can charge the card. My offer was to open an account with any ISP, whether they accept ecash or not. I think that improves the anonymity of the account. Matts

1 0

Re: found nym-differentiation! Still need perpetual motion, FTL travel, coldfusion
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 19:02 5/11/96, Perry E. Metzger wrote: >I doubt that will work even were it implemented. Every phone on the >planet and terminal would need to constantly do biometric analysis of >every user, and even then people could program their terminals to lie. Telling your terminal to lie will be rather difficult once the CPU refuses to run an OS with out propper signatures. The OS in turn won't run applications without such signatures. All commercial software has to undergo code review by CAs. Your machine won't even run anything but approved software. Should you think about keeping an old machine around that does, my advice would be: don't. At least not unless you are willing to face the ten years prison term mandatory for such a computer crime. Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

3 2

Re: distinctive properties of ecash, netbill, cybercash and iKP
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 16:40 5/11/96, Jüri Kaljundi wrote: >This is one question why the central bank in Estonia (I am not sure about >other countries) does not allow issuing e-cash here in Estonia. While the >banks issue e-cash to people, they get some real cash from people. This >leads to actually doubleing the money in circulation, each monetary unit, >either dollar or kroon, can at the same time be used by owner of e-cash >and at the same time by the bank. The central banks are afraid that when >the amount of e-cash in circulation gets big, this could lead to >devalvation of money, especially a small country like Estonia is afraid of >such development. That's simply silly. The same argument would hold true for travelers checks. Are Estonian banks allowed to issue them? I thought so. Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

Re: Remailer in a box
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 12:52 5/11/96, Matts Kallioniemi wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >At 17:39 1996-05-10 EDT, E. ALLEN SMITH wrote: >>Yes, for the cryptographic purposes. It doesn't make much difference >>on the juristictional end of things - I'd need to locate a UNIX account >>in another country for that. Hmm... possible. >> -Allen > >Anybody who want's an anonymous shell account in Sweden, send me MTB ecash >and I'll get an account opened for you with a local ISP. Sweden has the best >Internet access outside North America. A 34 Mbps line to the US, soon to be >upgraded to 155 Mbps! May I suggest convincing that Swedish ISP to offer up a signup form accepting Ecash? Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0