December 2003 - cypherpunks-legacy

Re: Weaknesses in Smart Cards? (Re: FLA_wed)
by Hallam-Baker 17 Dec '03

17 Dec '03

Its worse than that. The Bellcore piece was presented as being about a possible weakness in MONDEX. In fact MONDEX does not use the cryptographic technique investigated. Its a symmetric key (DES) based system. I would immagine they would keep a symmetric component even if they go for a public key system. BTW if you think carefully about MONDEX you will note that a public key system does not improve security. The system depends on private keys embedded in the devices. There is no value in having the devices use public key signatures over symetric ones. Phill PS whats the betting that anyone at a high profile site who happens to be offline for a few hours to (say) change service providers will be reported as having been "hacked"?

1 0

Re: Tamper-Resistant Software from INTEL
by Alan Olsen 17 Dec '03

17 Dec '03

At 07:57 PM 9/26/96 -0500, snow wrote: >Mr. Guthery >> Has anybody heard of tamper-resistant software in general or a method >> for tamper-resistant software from Intel in particular? > > What do you mean by "tamper resistant"? It means that if you do *ANYTHING* to try and adjust, modify, and/or configure the software, it no longer functions. Sadly, Microsoft has beat them to the punch on this technology. --- | "Remember: You can't have BSDM without BSD." - alan(a)ctrl-alt-del.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

2 1

Call for Papers
by Enzo Michelangeli 17 Dec '03

17 Dec '03

FYI... ---------- Forwarded message ---------- Date: Tue, 24 Sep 96 09:49:03 EDT From: Nick Maxemchuk <nfm(a)research.bell-labs.com> To: apc(a)ee.nthu.edu.tw, apc_members(a)hornbill.ee.nus.sg, commsoft(a)cc.bellcore.com, enternet(a)bbn.com, ietf(a)CNRI.Reston.VA.US, itc(a)fokus.gmd.de, multicomm(a)cc.bellcore.com, tccc(a)cs.umass.edu Subject: Call for Papers CALL FOR PAPERS IEEE Journal on Selected Areas in Communications COPYRIGHT AND PRIVACY PROTECTION Significant investments are now being made worldwide to develop an infrastructure for on-line services and electronic commerce. A major impediment is the lack of effective protection of copyright for content owners and of privacy for users. Digital data can be easily copied and redistributed widely without any loss of fidelity. One promising idea is to discourage illicit distribution by watermarking digital objects with hidden copyright messages to proclaim ownership and unique identifiers to help trace pirates. The techniques of information hiding are in many ways related to mechanisms that can be used to protect the anonymity of system users by concealing address, location and routing information. The problem becomes even more interesting when privacy protection and copyright protection must be combined in the same system. We seek fundamental papers on watermarking of digital data, on techniques for anonymous communications, and design and analysis of systems that protect copyright and/or privacy. A partial list of topics is as follows: + watermarking of digital data + anonymous communications + steganography + covert and subliminal channels in networks protocols + combining copyright and privacy protection + experiments and attacks + tradeoffs between performance and security Prospective authors should email their manuscripts (PostScript format only) or send six hard copies to one of the Guest Editors listed below, according to the following schedule. Please direct all email enquiries to slow(a)ee.mu.oz.au. Manuscript Due: March 1, 1997 Acceptance Notification: August 1, 1997 Final Manuscript Due: November 1, 1997 Publication Date: 2nd Quarter 1998 Ross Anderson Ingemar Cox Cambridge University Computer Lab NEC Research Pembroke Street 4 Independence Way Cambridge CB2 3QG, U.K. Princeton NJ 08540, USA Tel: +44 1223 33 47 33 Tel: +1 609 951 2722 Fax: +44 1223 33 46 78 Fax: +1 609 951 2482 Email: ross.anderson(a)cl.cam.ac.uk Email: ingemar(a)research.nj.nec.com Steven Low Nicholas Maxemchuk Dept. of Electrical Electronic Engr. ATT Laborataries University of Melbourne 600 Mountain Ave. Parkville, Vic 3052, Australia Murray Hill NJ 07974, USA Tel: +6 13 9287 9205 Tel: +1 908 582 6240 Fax: +6 13 9287 9188 Fax: +1 908 582 5807 Email: slow(a)ee.mu.oz.au Email: nfm(a)research.att.com

1 0

radikal-mirror list as of 27-9-1996
by tank 17 Dec '03

17 Dec '03

Receive Radikal 154 by email: Send a empty message to radikal(a)xs4all.nl and you receive issue 154 by mail. http: http://www.xs4all.nl/~bslash/radikal/radikal.tar.gz Radikal-site unix http://www.xs4all.nl/~bslash/radikal/radi.zip Radikal-site dos-zip ftp: ftp://utopia.hacktic.nl/pub/replay/pub/incoming Radikal 154 in plaintext ASCII http://www.xs4all.nl/~radikal/radi154.tgz Radikal 154 unix archive http://www.xs4all.nl/~radikal/radi154.zip Radikal 154 dos-zip archive If you got your mirror up and running let us know <tank(a)xs4all.nl> Special mirror: de.soc.zensur de.org.politik.spd Radikal-sites: 1.BACK ONLINE http://www.xs4all.nl/~radikal 2.BACK ONLINE http://www.xs4all.nl/~tank/radikal 3.http://huizen.dds.nl/~tank/radikal 4.http://burn.ucsd.edu/%7Eats/RADIKAL/ 5.http://www.jca.or.jp/~taratta/mirror/radikal/ 6.http://www.serve.com/~spg/ 7.http://huizen.dds.nl/~radikal 8.http://www.canucksoup.net/radikal/index.html 9.http://www.ecn.org/radikal 10.http://www.well.com/~declan/mirrors/ 11.http://www.connix.com/~harry/radikal/index.htm 12.http://www.ganesa.com/radikal/ 13.http://www.denhaag.org/~radikal 14.http://www.knooppunt.be/~daniel/radikal 15.http://emma.unm.edu/radikal 16.http://www.tacacs.com/radikal/" 17.http://www.dsvenlo.nl/~vvd/radikal/ 18.http://www.why.net/home/static/radi 19.http://users.abcs.com/dockmstr/mirror/radikal/index.htm 20.http://home.ipr.nl/~radikal/ 21.http://www.dreamy.demon.co.uk/occam/ 22.http://www.ibmpcug.co.uk/~irdial/live_free/ 23.http://zero.tolerance.org/radi/index.htm 24.http://www.meaning.com/library/radikal/ 25.http://www.walli.uwasa.fi/~tviemero/radikal 26.http://www.sko.it/~sfede/radi/index.htm 27.http://www.bart.nl/~sz/index.html 28.http://bellp.med.yale.edu/index.htm 29.http://www.euronet.nl/users/funest/radi/index.htm 30.http://fine.com/~rsr/radikal 31.http://www.lab.net/radikal 32.http://www.charm.net/~gbarren/radikal 33.http://login.datashopper.dk/~pethern/radikal/ 34.http://www.interlaw.com 35.http://hyperreal.com/~rich/radikal/index.html 36.http://www.citinv.it/iniziative/info/radikal/ 37.http://radikal.autono.net./rad 38.http://www.digiforest.com/~richards/radikal/ 39.http://brazil.nbn.com/radikal/ 40.http://pitel-lnx.ibk.fnt.hvu.nl/~madcat 41.http://www.hongo.ecc.u-tokyo.ac.jp/~ss56012/radikal/ 42.http://web.inter.nl.net/users/E.P.van.der.Vlis/radikal/ 43.http://www.threeweb.ad.jp/~fubuki71/mirror/radikal/ 44.http://mars.let.uva.nl/~bram/radikal/ 45.http://www.design.nl/~bram/radikal/ 46.http://www.eskimo.com/~quawk/radikal/ 47.http://www.luc.ac.be/~2sbs0 a passtrue page to xs4all and the radikal pages. 48.http://www.calyx.com/~refuse/radikal/ 49.http://www.altair.it/xxv 50.http://www.c2.net/radikal 51.http://www.grfn.org/~rtwo 52.http://www.grfn.org:4380 xs4all port mirror 53.http://www.cyberpass.net/radikal 54.http://www.xs4all.nl/~jeroenw/radikal/ 55.http://catalog.com/jamesd/radikal/ 56.http://www.islandnet.com/~hendrik/RADIKAL.html

1 0

Re: ssh - How widely used?
by Chris Wedgwood 17 Dec '03

17 Dec '03

:From: martin hamilton <M.T.Hamilton(a)lboro.ac.uk> :To: cypherpunks(a)toad.com :cc: ssh(a)clinet.fi :Subject: Re: ssh - How widely used? : :On Thu, 26 Sep 1996, Adam Shostack wrote: : :> Theres a windows version, mac is under vauge development. SSH :> is pretty cool, but the code base is somewhat messy, and its shows :> signs of its origins in things like systems calls not having their :> return values checked. : :Shame it costs $$$, though I appreciate that Tatu needs to eat... ;-) : :Perhaps Cedomir Igaly could be persuaded to release the source code to the :Windows port he did ? Anyone else interested in getting a little group :together to hack on this ? (under GPL or BSD style copyright) : :Martin I have a hackery botch job that I have done to make ssh run in a Windows NT console session (untested under '95, but should work). The trouble is it contains a mix of commercial code (which I do not own and cannot distribute) and GNU code. Thus, I can use it myself - but not distribute it. I was speaking to someone yesterday about this, as I was at one stage thinking I may get the code cleaned up as much as possible (ie. only contain GNU code) and release it to the masses to play with. Eventually it might turn out to be something of use... Doing this would, perhaps, undermine Datafellows and Tatu somewhat. As someone who writes code to put food on the table, I wouldn't really feel comfortable doing this. Tatu has spent a whole heap of time on this, doing so wouldn't be fair this early. A freely available, albeit with no guarantee or support and fewer features version of ssh would surely effect sales to a reasonable extent? I would recommend people buy the product. If you fell it too expensive, then complain to datafellows about this. Eventually the make take some notice of these complaints, or have alternate pricing structures that make the product more attractive for your needs. IMO its not terribly expensive. Chris P.S. (Any replies to this please cc to me of ssh(a)clinet.fi as I don't read CP very often)

1 0

Public Schools
by ronsimpson 17 Dec '03

17 Dec '03

I hate to burst any bubbles but, the school with the highest number of National Merit Finalists and highest number of 1600 SATs is a Public High School (Jefferson High in Fairfax, VA)

9 8

The daily reminder regarding Timothy C. May, the licenced fellatiologist
by Dustbin Freedom Remailer 17 Dec '03

17 Dec '03

Embedded in Timothy C. May's babblings are preposterous lies, wild distortions, child pornography (both as graphic descriptions and in JPEG format), ethnic slurs, and bomb- making recipes. No wonder he encrypts them.

1 0

RE: LivePGP (fwd)
by Adam Shostack 17 Dec '03

17 Dec '03

----- Edited message from Ming-Ching Tiew ----- >From mctiew(a)csi.po.my Thu Sep 26 22:36:39 1996 Message-ID: <01BBAC57.C7351E60@minuet> From: Ming-Ching Tiew <mctiew(a)csi.po.my> To: "'Adam Shostack'" <adam(a)homeport.org> Subject: RE: LivePGP Date: Fri, 27 Sep 1996 09:39:21 +-800 Encoding: 38 TEXT Do you already have this information ? http://www.vv.com.au/vv/resources/security/livepgp/README.html The copy is expiring soon. I will soon be releasing a new copy which is much for polished. I am not releasing the source. ----- End of forwarded message from Ming-Ching Tiew -----

2 1

HBO_ped Phill's AP Op-Ed
by jya＠pipeline.com 17 Dec '03

17 Dec '03

9-27-96. NYP: "Unnoticed but Deadly, the I.R.A.'s Secret 'Sleeper' " Members of a counterterrorism force stormed the building where Mr. O'Neill lived, threw tear-gas canisters into his second-floor back apartment and shot him six times as he stood in the doorway. The police said Mr. O'Neill made a threatening gesture at them, but he was later found to have been unarmed. An intelligence officer said, "The sleeper is totally committed, aware of all the surveillance techniques and our ability to penetrate the organization. He knows when to keep his mouth shut. He stays as anonymous as possible." "South African Links Top Spy To the Slaying Of Olof Palme" The commander of a police hit squad testified today that the assassination, by a lone gunman who shot Mr. Palme in the back of the head, had been the work of Operation Long Reach, a secret apartheid-era program intended to harass, silence and gather information about opponents of South Africa's white-led Government abroad. "It was one of Craig Williamson's Operation Long Reach projects," he said. Officially, Mr. Williamson left the police department in 1985, ostensibly to go into business with an Italian millionaire operating from the Seychelles. In reality, he then started Long Reach, a company that did some legitimate international security work, but which was largely created to give him the cover to do whatever he pleased around the world. ----- http://jya.hboped.txt HBO_ped

1 0

Re: Public Schools
by Robert Hettinga 17 Dec '03

17 Dec '03

I forwarded this to someone, who said: --- begin forwarded text From: somebody Date: Fri, 27 Sep 1996 00:26:28 -0400 To: rah(a)shipwright.com Subject: Re: Public Schools Bob, I'm not sure I want to get my name on this particular set of info, but the story on IQ and SAT scores is, to a certain extent, spelled out in "The Bell Curve." The simple, short version is for IQ where the distribution is nearly normal with a mean of 100 and a standard deviation of 15. (Recall that, in a normal distribution, two standard deviations above the mean (2-sigma) is achieved by only 1-2%, and 3-sigma, by a factor of 10 fewer.) There used to be a simple (public) answer for the SAT: mean of 500 and standard deviation of 100. So 500 = 100 and 800 = 145? Well, maybe. The answer for SAT (verbal) scores (1961 data only, sorry) is neither short nor simple. The distribution is decidely non-normal. The peak is at 280-ish, and the high side looks kind of like a normal distribution. If it were, the standard deviation would be 170 or so. Because of this, the average is 475-ish. Oh, well. Thus, maybe, an SAT of 800 = an IQ of 145. But 475 = 100? Or is it 280 = 100? And of course, the populations aren't even close to the same. Only those who might go to college take the SAT. And in 1961 that was even more so. Maybe that's why they call them social scientists. --- end forwarded text Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/

1 0