December 2003 - cypherpunks-legacy

Re: Netscape 3.0B US version MD5 (was: Re: overseas PGPfone and Netscape)
by Bill Stewart 17 Dec '03

17 Dec '03

At 03:27 AM 7/19/96 -0700, you wrote: >Roy M. Silvernail wrote: >> Anyone sniffing the link >> knows the filename from previous forms submissions, anyway. > You can't sniff the link, since the form submission and the > file download are via SSL. Presumably 40-bit RC4 for most users? :-) (It is still strong enought to reduce casual eavesdropping....) # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Confuse Authority!

1 0

Firewall Penetration
by Jerome Tan 17 Dec '03

17 Dec '03

Is it possible to penetrate a firewall?

4 3

WORD Mail: A Part of Our Lives...
by Your_Pal＠IConNet.COM 17 Dec '03

17 Dec '03

It's our birthday. Come blow out the candles at <URL:http://www.word.com>. Love, The Word Staff

1 0

RE: NSA response to key length report
by geeman＠best.com 17 Dec '03

17 Dec '03

What I don't get is why the "report" is so semi-literate? The grammar errors are curious given the supposed source; it even makes me a little skeptical as to the source. My take on the bit about "high processing speeds -> I/O bound" isn't that they're talking IPC, but bus timing (??) I don't have the original paper handy and I don't recall what the proposed processor speeds are. "Total exhaust time" --- is this truly as meaningless as it sounds? ---------- From: Matt Blaze[SMTP:mab@crypto.com] Sent: Friday, July 19, 1996 2:10 PM To: Ernest Hua Cc: cypherpunks(a)toad.com Subject: Re: NSA response to key length report Ernest Hua <hua(a)xenon.chromatic.com> writes: > > It sounds like most of their "counter-arguments" are just stalling tactics. > > If you are a lawyer for someone you know is guilty, you still would choose > to find every reason in the book to attack the prosecution's case. Here we > have precisely the same effect with the NSA. Any tactical manuveur to keep > stalling the impending collapse of ITAR. > > (It is human .. er .. rather .. bureaucrat-esque to claim innocence in the > face of overwhelming evidence of guilt.) Particularly impressive is that our key length report was hardly above criticism from several angles, but their rebuttal managed somehow to avoid them. What I find most disturbing about this is that their report was provided secretly to policymakers in the administration and in Congress, without independent technical review that would have quickly exposed the fallacy of the arguments. I never would have seen it had several of the recipients not faxed it to me. This is the first hard evidence I've seen of NSA providing anything less than the highest quality technical analysis to other parts of the government. A non-specialist reader would be easily misled by the technically dense, but completely irrelevant, "rebuttal". It smacks of either ill-informed sloppiness, or, perhaps worse, self-serving disingenuous cynicism. Either conclusion is scary, and, to me in fact, quite surprising. -matt

1 0

Re: MSNBC and cookies
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-=> Quoting In:tcmay@got.net to Harka <=- In> patrons, the Web Awareness Program tracks user interests at Web sites. In> The WAP has already allowed the FBI and other intelligence agencies to In> check up on several people who appeared to have an unusual interest in In> the TWA 800 case. In> (Don't spend too much time in certain sites, friends.) Or be there 'anonymized'... (http://www.anonymizer.com) Harka ___ Blue Wave/386 v2.30 [NR]

1 0

take the pledge
by Perry E. Metzger 17 Dec '03

17 Dec '03

Look, folks, we all know that 99% of what David Sternlight posts is garbage. Why don't we all pledge not to answer any of his posts, and then he'll go away. If necessary, someone can be appointed to post a weekly "the views expressed by David are junk and we are deliberately not replying to them directly" message. David has plenty of places to argue with the wind. We don't need to add this one. I'd like to ask people to publically pledge that they will not reply to David's messages. This is such a pledge. Perry

8 7

Government = Obscenity?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:00 PM 7/19/96, Declan McCullagh wrote: >This move by Singapore to censor a newsgroup posting is a good example of >the overbreadth of government censorship. It's a bait-and-switch maneuver: >say you're going after porn but censor "offensive" speech. I'm surprised Duncan has not come forth with one of his patented "My Dad says..." comments, so I will emulate his style. Imagine a child refusing in school to do an assignment that involves connecting to various government Web sites... "My Dad says government is obscene, and that I'm not old enough yet to look at obscenity." --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

High Voltage Management
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:34 AM 7/20/96, Igor Chudov @ home wrote: >jim bell wrote: ... >> I've had a substantially better idea. Hang carbon-fiber bundles from the >> ceiling, which are charged to about 10,000 volts when an intrusion is >> detected. They'll glom onto anything conductive within their range, and >> anyone with the bad fortune to be breaking into the house at that moment >> _might_ live to regret it. (resistors could be added to limit the current >> to non-fatal but exceedingly painful levels. > >It the voltage is 10000 volts, it is always fatal, right? And if you set >good enough resistors, then the voltage for the human body itself would >be much less than 10000V -- most of the voltage will be taken by resistors >themselves. > >Right? Right! 10,000 volts is always fatal. In fact, I died many times during my high school days, playing with 20,000 volt neon sign transformers, 100,000 volt Tesla coils, and (gasp) 250,000 volt Van de Graaf generators. (By the way, the neon sign transformer was actually pretty dangerous, and my handling of it was careless, I now see. Be careful when you convert one of these into a Jacob's Ladder, or use it for plasma studies.) However, maybe the a.c. nature of some of these voltage sources revived me on the "reverse" cycle. (The V.D.G. is not a.c....so this blows this theory.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

BIG_dif (fwd)
by gimonca＠skypoint.com 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 19 Jul 1996 12:59:14 GMT > From: jya(a)pipeline.com (John Young) > > 7-19-96. NYP: > > "AT&T and Wells Fargo Investing in an Electronic Cash > Card." > [etc.] > Because of these concerns, Mondex has been modified in > the United States so that banks will be able to track > card use. That will allow them to audit for fraud, if > not recreate every transaction. Data from Mondex cards > will be used for various product marketing. > In other words, they took a bad product and made it worse.

1 0

The PGP keyserver at jpunix.com
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The PGP keyserver at jpunix.com is temporarily shut down due to technical difficulties. For some reason, it won't process keys without failing. I suspect a corrupted keyring. I'm expecting to FTP a new master keyring shortly. Please be patient and I apologize for any inconvenience. John Perry - perry(a)alpha.jpunix.com - PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMfBasVOTpEThrthvAQGffwP/f1PuovMRixg58kFedhDQ8+ioX4MMgYo+ AKi0wK2TW10iswaqLm6Q2CV0rh+D2p2Ao8SgYaxoCV8qNgF+qssx8B84zKeq8xWI gGtX3qPhW1VCcyv6czCP+F2QOtmxPquHDhis62XMeI4RoFMj20fdcmTycHEQAZZp CflWX30YH5Q= =ZX9n -----END PGP SIGNATURE-----

1 0