December 2003 - cypherpunks-legacy

Re: Crypto Policy Variant
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:17 PM 8/14/96, Frank Stuart wrote: >Here's my key, your honor. I used a one-time pad to do the encryption. As >you can plainly see, the encrypted file that the prosecution made such a big >deal about contains nothing but some of my favorite verses from the King James >Bible. You shouldn't infer anything from the fact that another key would >make the file contain the evil stuff that was alleged (even though it is a bit >strange that the last verse ends in the middle of a word). Frank presents a cogent example of how the Staelin plan is a nonstarter. That is, it's a nonstarter *if* we remove any formal evidence of which crypto method is attached to a program. Cycles are cheap (compared to prison terms or a bullet in the head). Therefore, it's cheaper to let folks either make their own guesses at the crypto involved, or try several, than it is to unambigiously narrow down the searches to one particular algorithm, which the State can then insist on a decryption key for. Let the Staelin Plan be warning for us to prepare for an era in which the particular crypto method should not be revealed. (Cryptographically, any of the various algorithms are "polynomially equivalent," but, practically, the "King James Defense" used by Frank, brilliantly, will probably work. It's hard to argue with Scripture.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

BlackNet Bids $350 M for a DAT tape
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:38 PM 8/14/96, Douglas R. Floyd wrote: >Most foreign powers would pay someone a handsome sum to hand over these >keys. I would bet that France or Iran would offer a billion dollars to >someone who would turn over the part of the database they preside over. > >I bet that France/Iran/etc. would be able to pool together 3 billion >dollars and a nice getaway for the stooges who can grab a tape with the >escrowed keys on it. Heck, Ames turned traitor for less. (I am assuming >the keys as small, 1K bytes each... an 8mm Exabyte mammoth tape would be >able to carry 30 million keys.) Even an "el cheapo" Travan TR3 tape would >be able to snarf 1.6 million keys... and that's a lot of people >compromised! Sure, the going bid is $350 million on BlackNet. I expect the price to go higher, as more keys are involved. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: National Socio-Economic Security Need for Encryption Technology
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:23 AM 8/15/96, Bart Croughs wrote: >Bart's error lies in his confusion of the terms "captial" and >"capital investment." While capital may be used to make capital >investments, there are other things it can be spent for as well >(wages, taxes, supplies, etc.). > >If Bart were to use the term "infrastructure" then it would be >clear that the ebb and flow of mere capital would have relatively >little to do with infrastructure influenced wages.< I agree. (On the other hand, Bart might want to find ways to make the material he is quoting more distinct from his own comments. I find it very hard to tell which comments are Bart's and which are those he is quoting.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Fw: Re: Free Pronto Secure Offer
by Lou Zirko 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: unicorn(a)schloss.li, cypherpunks(a)toad.com, geoff(a)commtouch.co.il Date: Wed Aug 14 21:52:47 1996 Personally I enjoyed helping to bring to market a full-featured PGP-aware mail package. It was a product that I was interested in seeing and was able to participate in making suggestions as to features, etc. It particular, Geoff was most help full in making sure that if performed under NT which was not initially supported, but is my platform (along with Linux). It is a good product and will help to ease usability of PGP for people that are afraid of the steps required by many mailers to utilize PGP. If I remember, your platform in Linux and you should not be so quick to criticize what you may have not seen. for > On Tue, 13 Aug 1996, geoff wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > "Do all the work I should be doing or have done in the first place > discover the critical flaws in my new-keen-o-ka-jive-o crypto system and > I > will give you a free copy of a critically flawed crypto system (a > $99.00 > value) ABSOLUTELY FREE. Wait, don't order yet. Included you also get > to > actually whitewash my fence and then mow my lawn. All at NO COST to > you." > > -- > I hate lightning - finger for public key - Vote Monarchist > unicorn(a)schloss.li > > > Lou Zirko (502)383-2175 Zystems lzirko(a)c2.org "We're all bozos on this bus" - Nick Danger, Third Eye -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 iQEVAwUBMhKREMtPRTNbb5z9AQEyywgAwvmF9zh46X6KpgprzbTEWsl2v8MFCOU0 s5LVvO8gt3IN3GRWAGaMsmsAuDhP7KdyG7UGSuJlstPd0sJWO+7vw6XDn4kZhsZH /3aN0FVwYJJOf51rEmHOYc0JagNRUlRIMtkiRr019JRmb+7s+6uO6B6r1ojT0SCe NOS8lHOGUOqD2OaYX8vhg2nH18AwNn+WRPsURCkcp3xhF9T3PiDasvYVCsirizqL ePk8NcOIrTR9eEp1rfTkOpx5jfG/2Q5epOrwx0a4UD/6AWebnrX0bPQC1mXtTU1P BDVDtYtgJo0YIDtDjoLqsjnSeni4ZjyVLoTc80dQgrXJN9V7g+PiFQ== =pU+b -----END PGP SIGNATURE-----

2 1

Burden of proof
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:53 AM 8/15/96, Alan Horowitz wrote: >In the USA, we have a system that ensures that the burden of proof is on >the accuser. Which explains why in the U.S. the tax authorities take the money first and then require the citizen to be the "accuser" in Tax Court, pleading to get his seized assets back. (To outsiders, the U.S. tax authorities have broad powers to seize properties without any court process, to attach wages, to deputize employers and banks as unpaid tax collectors, and to harass citizens. Citizen-units may sue, of course, but the burden of proof is on them to prove that they are owed a refund. A man who saves money and puts it in his mattress can have it seized and taken from him. He must produce proof that it is his money, never mind that he already paid taxes on it and never mind that there is no way someone who saves currency can have a proper paper trail. So much for "burdens of proof.") --Tim May HOW TO MAKE A PIPE BOMB: "Buy a section of metal water pipe 1/2 by 6 inches long, threaded on both ends. Buy two metal caps to fit. These are standard items in hardware stores. Drill a 1/16th hole in the center of the pipe. This is easy with a good drill bit. Hanson is a good brand to use. Screw a metal cap tightly on one end. Fill the pipe to within 1/2 inch of the top with black powder. Do not pack the powder. Don't even tap the bottom of the pipe to make it settle. You want the powder loose. For maximum explosive effect, you need dry, fine powder sitting loose in a very rigid container." (more information at http://sdcc13.ucsd.edu/~m1lopez/pipe.html, or by using search engines)

5 4

Re: [off-topic] Locating cell phones with power off?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP MESSAGE----- Version: 2.6.3 hQEMAy1onm9OaF05AQf9HrOT3gvf+p/v9oNWcClCrgNPxHqR3Ro+Ai3OdYJOgmPK neIs5I7bQ0g4vfdN/T1daZRXMhmwIBD0JUZeZqjNGYHczBT5poxQSgrruHx3dHa6 hvZDRkH4YV2nynRWpQ3tGcsMPiEU2yHIfG8ts8XGF4AoikCPSAy4rJaZl856V5KM 1K5lLZA+kL5meAGaN4o0HxTnNU3KxPctKd1UJUruZvDSBx03rYYGGLIlI6i0JCA8 3lCPcIGFhEehV8UWy9xdoinM5oF23hB80gIEtrV//dpXk9aKE6OfKs0d6lTO1Gq/ EDIxgKnwOvX+zGd6UjubvomfH1Z+GOVtQi7oFHlvaqYAAAGQj8eyiz0s8Sgq3c7a eIxcUZ5TwMgFnfCFTuJrXZ5K4/pVdPAMvDZzGXI6J/1Fry89NQ3zup34RbR2HxTz E64QgkF+mzrWu18SaVgggHAwxhpje56ahbolX4E72l/LN3y/FiDhiBL33jxcBwuD DztcLr/4wbE3Van+luAvYBKJ7tueEiv0JGcl0jHFo3DOAyC+11qeouSir36SlBKs Aj3oBhYwaC9op/RAZlzXyq3wqnnrqHKG7MGOrIRjJdId2i8QTGVtATKDQwn9eZ+U AQftEaIEyzxo/IKeCiLjFFTeGFYDg9F7vwJbYNA14T5RBqmom6XsHvRVpfiHmhxn YnD0ULKGl2VNX+E/v2uacpjIWglULaWARO4pjbPHl8YNryGbYfTt3LOYCZVtfwM2 li8ZJjuaJuoXultzBIkAsDes0JTIW929gsWPjnTsMn9yPb0fy1Ia1W3czF0v/Fwx MpYbUalRKqi7Tg1WlkBDra4AEW60oUBpHbQaccSZ5xDrCu/HzlPAaeloQAwdLFF+ MDX2vg== =jH3M -----END PGP MESSAGE----- -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President.

1 0

Re: photographed license plates
by Erle Greer 17 Dec '03

17 Dec '03

At 07:51 PM 8/10/96 -0400, you wrote: >In the UK they now use cameras to deter speeding; the cameras are >triggered by vehicles passing by which exceed the speed-limit, so in >theory it's only naughty people who get photographed. Interestingly >enough, there are far more places with camera warning signs than there >are actual cameras; the actual cameras are moved around at random. Even >though most of the time there isn't a camera there, almost everbody >seemed to slow down in the marked areas; probably because there's almost >100% chance of being caught if there is a camera there. I speed a lot, but I wouldn't mind seeing an automated system !!! AS LONG AS TAXES THAT PAY SPEED COPS' SALARIES GO DOWN !!! This system would free up the police force's time so greatly that they would have time to make our neigborhoods safe. hehe Vagab0nd<br> <a href="http://ww2.sd.cybernex.net/~vagab0nd/index.html">Visit web page for public key.</a>

1 0

forget photographing license plates!
by The Prisoner 17 Dec '03

17 Dec '03

from comp.risks: Date: Tue, 13 Aug 96 15:52:22 PDT From: Greg Dolkas <greg(a)core.rose.hp.com> Subject: RISKy cars coming! "In the 22 Jul 1996 issue of Fortune was an interesting look into the future of automobile electronics, "Soon Your Dashboard Will Do Everything (Except Steer)". " >>> Does that include reporting your movements to the Central Bureau? "The topic of steering has already been discussed in this forum, but what caught my eye was a review of the "OnStar" product from GM. Besides being a navigation aid, it also contains "some anti-bonehead features". " >>> Thank God people keep trying to save me from myself. "These include the ability for you to call GM's "control center" for help if you lock your keys in the car, or forget where you parked it. >From the control center, they can "electronically reach into the car" to unlock the doors, or honk the horn and flash its lights." >>> It is extremely comforting to me -- I don't know about you -- to think that GM will maintain a control center able to communicate with my auto electronics. Shit, why not TRW?

1 0

Re: Stealth Buildings Was Re: "X-Ray Gun" for imperceptible searches
by Bill Stewart 17 Dec '03

17 Dec '03

At 09:08 PM 8/13/96 -0400, Alan Horowitz wrote: >> If foil or metal mesh would block it, then many recently built houses >> would be already set. Usually that 1/2 - 1 inch styrofoam used >> on almost all exterior walls has a reflective layer of foil to help >> keep the heat/cold out. >Take a course in Tempest practices. Casual residential practice >implemented by construction workers do not a vault make. The context of the discussion wasn't TEMPEST (as you say, it's not enough for that), but new high-frequency hand-held radar imaging, which ostensibly uses radio emissions from human skin or some technique to create images. Foil-backed insulation ought to do a good job stopping that, as well as making infared snooping less useful. Now, the police _claim_ that the product that lets you see the shape of objects under people's clothes has the resolution to find guns and knives and non-naughty-bits of human flesh, but not enough to let those dirty-minded privacy-invaders leer at their victims. Uh huh. At least they probably don't come with printers or data links, so they'll just have to leer at the screen and not save and distribute copies.... Somebody ought to complain to Phyllis Schlafly about this! [less serious material follows:] [Not only will you need the tinfoil lining to your hat, you'll have to get some metallic-lined underwear to avoid being entrapped into aiding and abetting police pornographers. Maybe Erik's gold-lame' suggestion will catch on, at least here in San Francisco....] # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> Defuse Authority!

3 2

Re: Fun with M$
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:07 AM 8/12/96 -0400, Dan Siemon wrote: >> > Exploder is an Active X control which demonstrates security problems with >> > Microsoft's Internet Explorer. Exploder performs a clean shutdown of >> > Win95 and will turn off the power on machines that have a power >> > conservation BIOS (green machines). > >I don't see how anyone can call this a bug. If somebody can write a web page that, when you view it, turns off your PC, the only way I can see calling it a positive feature is to say "it's easy to make people stop using really insecure products like MSIE!" or "Turning off Win95 is a Kind Thing to do!" >Microsoft has chosen what Sun should have: leave the security to the user, >don't take it away from everyone. Java has been severely crippled by the User? What user? The poor unsuspecting fool who hits the web page? The kind friendly person who writes web pages that turn off Win95? Executing signed code from web pages is semi-ok, if the default is to trust no one and make the user explicitly grant permission to code authors. Executing anything that comes down the wire is foolish, and writing software to do so is rabidly negligent. The Java approach is to define a security model that _should_ let you safely execute code if you implement it correctly, do some academic-style analysis to validate the security model, document the level of trust you can expect from the system, and then put out a mildly buggy implementation of the system so grad students can rip it to shreds :-) So far the security problems that have been discovered have been with the implementation, not with the underlying security model. And then add a similar-looking language called Javascript with no underlying security model, make it impossible to turn off, and get taunted mercilessly until you add a "Turn it off" checkbox. The Microsoft approach was to take a hacked-up word-processor gluon, from the folks who brought you the Word Prank Virus Propagation Tool, hack it up some more, add Internet hooks, and replace a few bugs with different bugs while trying to catch up with the market leader on features. Yes, some of the removed bugs were security bugs, but it's nothing near secure, and there's no reason to expect it ever can be. (Brought to you by the folks who added features to Winsock so that their PowerPoint disk-hogging-and-slideshow system chokes to death if you install standards-based networking software, even if you don't use the network features....) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> Defuse Authority!

1 0