December 2003 - cypherpunks-legacy

Fw: The Ostrich Security Principle
by Charley Sparks 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Fri Aug 09 17:42:15 1996 OK Tim, I looked up Ontology.. how did you get your license ? - -----Begin Included Message ----- - ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." - ---- End of forwarded message ---- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCXAwUBMguwuOJ+JZd/Y4yVAQE+/wQMDMNJ7XIrI+VkTaNKQDdLkzUT9v8aEQzG x9/8aFFbw5/jVJQjd3TwWjuRut3L+mc+/2GOqJwQHf1z9vakVDSdnMzIKKB68FfP NtzU92MoqHip5D/R37cVACcAnXkoaSKvwy+m+V6Rxk2ffOlLoKLEUd9xK91hNFvs 2WymcjvaLC+MLQ== =owbR -----END PGP SIGNATURE-----

1 0

Pronto Mailer
by Charley Sparks 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: provos(a)wserver.physnet.uni-hamburg.de, cypherpunks(a)toad.com Date: Fri Aug 09 17:42:06 1996 I use Pronto Mail also. I just started using it yesterday. I can honestly say that it makes things simpler... no cutting, pasting, decrypting, encrypting...and on and on. It is the sweetest mailer since Ishmail ( UNIX / Linux ). Not even Ishmail did key management and fetching, sending, etc.... I will be able to use Pronto in my effort to proselytize the cause. The only thing I see that will prevent a lot of folks from getting it ( and paying for it ) is the price. $300 US seems a bit steep to some. I am going to pay for it because of the time it saves me. I would like to see a few things added, though. Multiple address books, keyed and non-keyed ( this might speed up the address book or add a search ( I have several hundred members of my firm listed in my Eudora mailer ). I'd also like to see some sort of IMAP address book support ( like Simeon or Z Mail ), These would also be accessable seperately in the interest of spped, since the pubring would be on each users machine. With the C2 option in the NT Resource kit, I'd like an explanation on using Pronto with NT 4. I tried all sorts of things and had no luck after installing.. Pronto kept telling me the pifs were no good, couldn't find keys, etc... None the less, I love it so far.. Just have to get the MC down a bit to pay for it (<GRIN> That;s why it's a 60 day demo ) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCXAwUBMguwsOJ+JZd/Y4yVAQGeJgQJAU+SB/cl48Jhmu1khb/7p0xG24ruL4cI av4myCELKV2GgOFfX+u48BLwCkTwRNaMIMdzBkNrQYQdofeSO0WrKJoDQVzMLeas IK6OUCI3uELqMjtJs1TK2qrDcSKue9COpbPe4D9MzyieuObZ0CDLXhWgWGmA72Up zFUPMrvd7swEIQ== =c/6c -----END PGP SIGNATURE-----

1 0

Fun with M$
by Jeremey Barrett 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Some guy has written an ActiveX control which crashes windoze95... I don't use windoze so can't try it, but if someone else is brave, I'd love to know if it works... Information page with a link to a page which loads the control: http://www.halcyon.com/mclain/ActiveX/ Quote from the page: Exploder is an Active X control which demonstrates security problems with Microsoft's Internet Explorer. Exploder performs a clean shutdown of Win95 and will turn off the power on machines that have a power conservation BIOS (green machines). - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Jeremey Barrett Senior Software Engineer jeremey(a)forequest.com The ForeQuest Company http://www.forequest.com/ "less is more." -- Mies van de Rohe. Ken Thompson has an automobile which he helped design. Unlike most automobiles, it has neither speedometer, nor gas gage, nor any of the numerous idiot lights which plague the modern driver. Rather, if the driver makes any mistake, a giant "?" lights up in the center of the dashboard. "The experienced driver", he says, "will usually know what's wrong." -- 'fortune` output -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMgujTi/fy+vkqMxNAQFikwP+LbLwibqKcp4FcLncenF44ptcp01j02M8 QwVbx0R+ept5jFea+R5Jhbypy+C2wvLh1hs4fjC0d2lrAQkfqiJxDAu8dblXYejy hS1hmuzflIEcat2p0qbomKDf+Iba2fz2kXtcu5CSsmwvqWwZf9XSFiC0Gx9JJ0Nh c/zVv9GcMIs= =1j1L -----END PGP SIGNATURE-----

2 1

Fw: SafE Mail Corporation
by unknown＠example.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable To: cypherpunks(a)toad.com Date: Fri Aug 09 15:09:02 1996 Finally -- a 22 character public key that's "invulnerable to attack." - -----Begin Included Message ----- Date: Fri, 9 Aug 1996 14:42:56 -0400 From: safemail(a)ntrnet.net (M.Wagoner (1)) To: law-office(a)felix.org Cc: FINALLY, SOFTWARE THAT COMPLETELY ENSURES THE CONFIDENTIALITY OF PRIVILEGED ATTORNEY/CLIENT INFORMATION OVER THE INTERNET! If you are at all concerned about the security of documents that your firm regularly sends via e-mail, or about the confidentiality, integrity and size of documents currently affecting your transmission speeds, please read the following.......... SafE Mail=AE is a new, proprietary software product that provides information security through encryption, compression, error correction, INTERNET compatibility and, it is compatible with ANY electronic mailing system. Comparisons of SafE Mail's encryption against leading competitors revealed that SafE Mail's encryption key was longer and compression greater than any similar product available today and that SafE Mail offers error correction (also not available with similar products) of up to 30% which can typically occur during transmissions. SafE Mail's proprietary technology is based on the concepts of private, public key and signature authentication and, it is supplied on a single diskette. SafE Mail utilizes a short 22 character public key (invulnerable to attack) which makes exchanging data secure and simple to do. This information security software is the most secure and easiest to use on the market today. I have included some information that describes the features of SafE Mail I think will be of most interest to you. If you would like more information, a copy of our "Frequently Asked Questions", or are interested in obtaining a nominal cost "demo" to evaluate the software yourself, please call us today. Thank you, Randy Estridge SafE Mail Corporation 1-800-252-9938 http://www.sfmc.com SafE Mail FEATURES =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D SafE Mail proprietary encryption and decryption of data, includes virtually any kind of computer generated information: text, video, audio, executable files, databases, spreadsheets, pictures, or any other kind of ASCII or binary files * Superior proprietary compression algorithm for fastest and most cost effective data transmission * Powerful proprietary algorithmic control for error correction during transmission over noisy networks * Public Key distribution algorithm for exchanging presigned encrypted data over open networks * Electronic Signature protocol for exchanging presigned mail * User defined variable level of distortion protection that can be applied when using low quality transmission facilities * Long cryptographic key with a nearly infinite number of output codes * Multiple encryptions for extra security * Universal Secure Envelope format * Internet compatible output format * Easy procedure for use under Windows=AE P.S. Special, introductory pricing is only available this month! Randy Estridge SafE Mail Corporation http://www.sfmc.com 1-800-252-9938 - ---- End of forwarded message ---- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMgu3Ai1djiVVpb+9AQGeewP/Q4jm/RA5HBm7IK4n6DnaQhiv6uA3OYuc VulJtyBsV00TfcBT1FkNT/8fpr5LjIVb5PWh8WYrsoB912YnwDLi2H052jNpP1lv DJQxq2oAQAB3VHqUFqXLVJb21iAKcaBNthObsQm1Fe6NJdH4xnNF2xX0aIBwlqNi X6xGS24cJAk= =IzPn -----END PGP SIGNATURE-----

6 5

Re: Suit filed to enjoin crypto provisions of the ITAR
by Peter.C.M.M.Terporten＠Inter.NL.net 17 Dec '03

17 Dec '03

I am just such a simpe foreigner trying to understand this. I thought that the International Traffic in Arms Regulations (ITAR) had in the meantime been replaced with the Defense Trade Regulations (TDR). If not, is this still in the planning? And is the latest ITAR text somewhere on the net? TIA, Peter Advokatenkantoor Terporten Computer law Peter C.M.M. Terporten Media- and information law Paulus Potterlaan 28 e-mail: terporte(a)inter.nl.net NL-3723 EZ Bilthoven tel 31-30-2251892 The Netherlands fax 31-30-2251889 *** Waar Recht En Techniek Samenkomen ***

1 0

Re: Drive the SF Central Freeway, have your license plate photo'ed.
by Frank E. Terhaar-Yonkers 17 Dec '03

17 Dec '03

It's been doable and afforadable for years. 7 years ago when I lived in Knoxville TN there was(still is?) a firm there called Perceptics. One of their products was an imaging system to OCR license plates. I understood the system was/is in use or being tested at US border crossings. >Date: Fri, 09 Aug 1996 11:56:34 -0700 Bill Stewart wrote: >At 10:45 PM 8/8/96 -0700, Lucky wrote: >>At 21:55 8/8/96, i am not a number! wrote: >>>CBS radio news this morning: 80,000 commuters traveling the central >>>f'way in SF will have information mailed to them regarding the quake retrofit >>>How? Their license plates have been photographed. > >>You *are* making this up, right? Please say you did. > >It's possible today, and probably affordable. If not, it will be in 1-2 years, >as Moore's law cranks down processing costs and video technology improves. >For this application, they don't have to photograph every car, or read every >plate successfully, or do it in real time. The objective is to get lots of >drivers to take other routes or mass transit so they don't have to dump all >the traffic onto surface streets right around the construction. > >Besides, this is nice friendly San Francisco. Imagine New York City doing it: > Yo! Mr. E. Koch, 1234 E. 89th St. - > We saw you takin' the West Side Highway last week. > You better stop that as of next Friday. > We know where you live. > You got a problem wit' that? > Rudy. > ># Thanks; Bill ># Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com ># <A HREF="http://idiom.com/~wcs"> Defuse Authority! > \\\\////\\\\////\\\\\////\\\\\////\\\\////\\\\////\\\\////\\\\////\\\\////\\\\ Frank Terhaar-Yonkers, Manager High Performance Computing and Communications Research MCNC PO Box 12889 3021 Cornwallis Road Research Triangle Park, North Carolina 27709-2889 fty(a)mcnc.org voice (919)248-1417 FAX (919)248-1455 http://www.mcnc.org/hpcc.html

1 0

Electronic Cash System Based On The Representation
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

Interesting paper I had not heard of, but was recently referred to... http://www.cwi.nl/~brands/cash.html Electronic Cash System Based On The Representation Problem Stefan Brands CWI P.O. Box 4079, 1009 AB Amsterdam The Netherlands e-mail: brands(a)cwi.nl Abstract: We present a new on-line electronic cash system based on a problem, called the representation problem, of which little use has been made in literature thus far. Our system is the first to be based entirely on discrete logarithms. Using the representation problem as a basic concept, some techniques are introduced that enable us to construct protocols for withdrawal and payment that do not use the cut and choose methodology of earlier systems. As a consequence, our cash system is much more efficient in both computation and communication complexity than previously proposed systems. Another important aspect of our system concerns its provability . Contrary to previously proposed systems, its correctness can be mathematically proven to a very great extent. Specifically , if we make one plausible assumption concerning a single hash-function, the ability to break the system seems to imply that one can break the Diffie-Hellman problem. Our system offers a number of extensions that are hard to achieve in previously known systems. In our opinion the most interesting of these is that the entire cash system (including all the extensions) can be incorporated straight forwardly in a setting based on wallets with observers, which has the important advantage that double- spending can be prevented in the \014rst place, rather than detecting the identity of a double-spender after the fact. In particular, it can be incorporated even under the most stringent requirements conceivable about the privacy of the user, which seems to b e impossible to do with previously proposed systems. Another benefit of our system is that framing attempts by a bank have negligible probability of success (independent of computing power) by a simple mechanism from within the system, which is something that p previous solutions lack entirely . Furthermore, the basic cash system can be extended to checks, multi-show cash and divisibility , while retaining its computational efficiency. Although in this paper we only make use of the representation problem in groups of prime order, similar intractable problems hold in RSA-groups (with computational equivalence to facto ring and computing RSA- roots). We discuss how one can use these problems to construct an efficient cash system with security related to factoring or computation of RSA-roots, in an analogous way to the discrete log based system. Finally , we discuss a decision problem (the decision variant of the Diffie-Hellman problem) that is strongly related to undeniable signatures, which to our knowledge has never been stated in literature and of which we do not know whether it is in BPP. A p roof of its status would be of interest to discrete log based cryptography in general. Using the representation problem, we show in the appendix how to batch the confirmation protocol of undeniable signatures such that polynomially many undeniable signatures can be verified in four moves. AMS Subject Classification (1991) : 94A60 CR Subject Classification (1991) : D.4.6 Keywords and Phrases : Cryptography , Electronic Cash, Representation Problem _______________________ Regards, It is not because things are difficult that we do not dare; it is because we do not dare that they are difficult. -Seneca Joseph Reagle http://rpcp.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

Re: Oregon License Plate Site in the News Tonight!
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:24 AM 8/9/96 -0700, Rich Graves wrote: >It might be fun to make the database open for a couple weeks, without a >caveat about logging, and then publish the logs. Allow reverse lookups, >i.e., who looked up my record. A nice little dragnet of people who are >interested in invading your privacy. This is impractical for one reason. In most cases it will show the address of the service provider, but will report nothing beyond that. You will just see which IP address you were assigned when you logged on. The logs would be true is some sense, flase in some sense and meaningless in most sense. >For the near-medium term, I am resigned to the fact that government is going >to collect personal information, and that it is going to leak out. I'm just >interested in full disclosure of the leaks, and who is benefiting from them. This brings up an interesting point. Is it poosible to obtain the list of all the individuals/corporations that have purchaced the list of DMV information and post *THAT* information to the net. I think that people would be surprised just who uses that information and for what... --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Re: photographed license plates
by Alan Olsen 17 Dec '03

17 Dec '03

At 08:23 AM 8/9/96 -0700, i am not a number! wrote: >O, and I think they're talking more about putting up cameras at some >troubling intersections to take pictures of cars running red-lights. > >And cameras on transit vehicles (buses primarily). They already have cameras on Tri-Met busses in Portland Oregon. (Not all of them, yet... But many of them have two cameras. One at the front and one at the middle.) It occured during one of the media inspired panics about people with guns on busses. >Gee, I am starting to feel so warm and safe! Remember: A Paranoid constabulary is an effiecient constabulary. (Just because you got caught in the crossfire of a cop shooting at a suspected jay walker does not make it any less effiecient.) Support your local police for a more efficient police state! --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Re: Massively parallel carbon-unit-based voice pattern matching
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:54 PM 8/9/96, Ernest Hua wrote: >Also, the FBI, no doubt, has voice analysis systems much more >capable of detecting subtleties. 100,000 enthusiastic people But the FBI presumably has no data base of voices to compare the voice on the 911 tape to! They can have the most sophisticated voice analysis system in the world and it useless, except in comparing the voice to previously-recorded samples. (This is presumably how the NSA's capabilities are used, as they have the voice patterns of Boris Yeltsin, Yassir Arafat, Saddam Hussein, Bob Dole and other previously-recorded voices. Plus, they can use COMINT at will outside the U.S. (and maybe in the U.S....) and can acquire new voice patterns for their libraries.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0