December 2003 - cypherpunks-legacy

Re: Drive the SF Central
by pjn＠nworks.com 17 Dec '03

17 Dec '03

>>CBS radio news this morning: 80,000 commuters traveling the central >>f'way in SF will have information mailed to them regarding the quake retrofit >>How? Their license plates have been photographed. >You *are* making this up, right? Please say you did. In> It's possible today, and probably affordable. If not, it will be in In> 1-2 years, as Moore's law cranks down processing costs and video In> technology improves. For this application, they don't have to In> photograph every car, or read every plate successfully, or do it in In> real time. The objective is to get lots of drivers to take other In> routes or mass transit so they don't have to dump all the traffic onto In> surface streets right around the construction. Wasn't there something about these cameras in the latest 2600? (BTW, there was also alot of information on encryption in the issue, too.) P.J. pjn(a)nworks.com ... TagX Pro of Borg - "Your tagline will be assimilated." ___ Blue Wave/QWK v2.20 [NR]

1 0

Re: editorial: information havenots already have not
by an366601＠anon.penet.fi 17 Dec '03

17 Dec '03

--****ATTENTION****--****ATTENTION****--****ATTENTION****--***ATTENTION*** Your e-mail reply to this message WILL be *automatically* ANONYMIZED. Please, report inappropriate use to abuse(a)anon.penet.fi For information (incl. non-anon reply) write to help(a)anon.penet.fi If you have any problems, address them to admin(a)anon.penet.fi

1 0

Nyms I'd vote for
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Rich Graves <rich(a)c2.org> wrote: >On Fri, 9 Aug 1996, John F. Fricker wrote: > >> #3) The goal is the anonymous citizen. The first step it to secure >> #the data >> currently exposed. Can this be done _without_ legislation? > >I disagree with this goal. The anonymous consumer/worker, yes; the >public has no business knowing what I as an economic actor buy, read, >and think. If I choose to participate fully in the political system, >though, in ways that go beyond votes and petty contributions to >others' campaigns, the public has an interest in my identity and >biases. Anonymous voices can and should be heard, and they can and >should be influential at times, but they don't get to run for office. [Rant -- you touched a sore spot here, Rich.] And I disagree with Rich, at least in regard to the present system. My "representative," is Ileanna Ros Lehtinen (R.). No Democrats have chosen to run against her, and the Demopublican's beloved ballot laws prevent me from running and actually getting on the ballot. I would GLADLY vote for either Lucky Green or Black Unicorn if these nyms were running against this statist woman, but I am not given that (or any other) choice by the state. She has already "won" the "election," and thus will NOT APPEAR on the ballot. The state of Florida assumes that I would rather not vote for None Of The Above [NOTA], and my state is, once again, wrong. The Florida Supreme Court is carefully ignoring the Constitution(s) they all swore to uphold in these cases, and I am trying to use any medium I can to trumpet this fact, so that solutions like Mr. Bell's (yes, Jim, I know you have one for this, too) don't start sounding better and better. <sigh> :( [End Rant] P.S. Lucky & Uni: don't worry, I plan to [try to] write in "Jim Ray." JMR Regards, Jim Ray -- DNRC Minister of Encryption Advocacy "Ray's corrolary to Murphy's Law: 'You will be spared NOTHING.'" -- P. C. Ray (my dad) Defeat the Duopoly! Vote "NOTA," not Slick/Dull in November. Harry Browne for President. Jo Jorgensen for Vice-president. http://www.HarryBrowne96.org/ ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 <mailto:liberty@gate.net> http://www.shopmiami.com/prs/jimray Coming soon, the "Pennies For Perot" page. Keep billionaires off welfare! ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMgxaBW1lp8bpvW01AQGRIQP+OZebKXfGgsKTdzIzld1vomnVqnB4nQ3L C0iDcTPqsEuEN/39nb+BinccCvjM3vvdxTVOYhs9QS1Gdf4TwkUE8+k3oWc1X7hy AtLcemGGQ+pwyMwfqd6gAboLM9oeg/QeRtaa+MXSdrl8WU/KCTWxeIQTH1/LPKLq 9KiTlgHH+2U= =tBZy -----END PGP SIGNATURE-----

1 0

Re: Fw: SafE Mail Corporation
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 23:58 8/9/96, Bryan Reece wrote: >Afraid so. But they do challenge hackers to break it (the old `here's >some ciphertext, doesn't this look secure?' thing). They also offer a >`free demo version', but due to federal law they can't make it >available over the net so they do this: We showed their software to be worthless a few months ago. I am surprised they are still selling it. They are opening themselves up for some very nasty litigation. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President.

1 0

RLR_lsl
by jya＠pipeline.com 17 Dec '03

17 Dec '03

8-10-96, NYP: Peter Steinfels, religion columnist, compares the "religious right" with the "life-style left," and examines how the perjoratives are employed to oversimplify and stigmatize -- an example of the pitfall A. Mehta has critiqued on Cypherpunks: "binary thinking." The real opposite number to the religious right is the life-style left, which includes people who are religious and people who are not. It includes some welfare-state liberals and some anti-government libertarians. What unites the life-style left is the belief that In regard to the widest possible range of basic choices about how to live, the state should refrain from exerting its influence. The more basic the question, the less the role of the state. ----- http://jya.com/rlrlsl.txt (7 kb) RLR_lsl

1 0

Re: Drive the SF Central Freeway, have your license plate photo'ed.
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 11:56 8/9/96, Bill Stewart wrote: >At 10:45 PM 8/8/96 -0700, Lucky wrote: >>At 21:55 8/8/96, i am not a number! wrote: >>>CBS radio news this morning: 80,000 commuters traveling the central >>>f'way in SF will have information mailed to them regarding the quake retrofit >>>How? Their license plates have been photographed. > >>You *are* making this up, right? Please say you did. > >It's possible today, and probably affordable. If not, it will be in 1-2 years, I know that there are video cameras on the freeway. I also know that reading license plate must be trivial, since I saw such systems abroad years ago. In fact, in Europe, where cameras are ubiquitous in inner cities, face recognition is the latest fad. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President.

1 0

Email Bombing
by se7en 17 Dec '03

17 Dec '03

Two messages were sent from my account to dc-stuff having me taking credit for email bombs against certain people, namely: Jeff Slaton, Captain Crunch and the Cyberangels. I first became aware of these emails after receiving a message from Emmanuel Goldstein asking about who was doing this, as his email box was being slaughtered at that very moment. I *DID NOT* email bomb anyone. This is going to be hard to believe since those mentioned as targets of annihilation were people I have fucked with in the past very openly on dc-stuff. This combined with the current "blame everything on se7en" attitude makes it very hard for anyone to take this professed innocence seriously. I called my SysAdmin this morning at 4:00 AM PST and he ran through the logs of my account. The emails did in fact come from my account, but, the logs show unusual activity which can't be accounted for by either side. Fortunately, the logs show that the actual bombing was not done from my account. I was on IRC for several hours talking to trusted friends while this all happened. Whoever penetrated my account knew what the hell they were doing in respects to log modification. A re-install is in process as well as a tightening of overall site security, especially my account. I am not really upset other than my email account was used to take credit for something I didn't do. My account could have been used for more nefarious purposes; it wasn't. Veterans of dc-stuff know I am not afraid to take credit for the things I do. I did not do this. But I will also not lose any sleep over the Spam King being hit. Captain Crunch: well, after all is said and done, he is harmless. Same with the CyberAngels: they can talk the talk, but can't walk the walk. I have proved that many times. In the end, they are harmless also. Hitting them wouldn't accomplish anything tangible. At this time, the initial mail headers show the attack was launched via sun.dmci.com from either a netcom.com or an io.* domain. No doubt the account used to launch the attack was hacked. The identity of the bomber may never be known. All I know is that it wasn't me. Take it for what's it worth. Time will vindicate me, as time always does. I just hope it's sooner than later. Hold your judgement of me until such time. And while dis.org has been recently compromised, I wouldn't be so quick to blame this on the same people. I have had intermediary contact with Galf sufficient for me to believe he made his point and has moved on, having not been responsible for this latest wave of email impersonation. Recent logs have shown that a kind of "open season" has been declared upon dis.org by every newbie out there that has heard of recent events. I say newbie because none of the recent attempts to gain access have proved successful. I used to laugh about email bombing. But when it happens and you are caught up in it, it is not funny. If any of you out there think it is, wait until you find tens of thousands of messages in your inbox and an incoming rate of 750 per minute, every minute. Scripts will not save you. se7en

1 0

cryptography course at WPI
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 9 Aug 1996 19:19:10 -0400 (EDT) From: Christof Paar <christof(a)ece.wpi.edu> To: dcsb(a)ai.mit.edu Subject: cryptography course at WPI Mime-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Christof Paar <christof(a)ece.wpi.edu> Status: U (I hope this mail is appropriate for this mailing list :) This announcment is probably mainly of interest to people in the greater Boston area. I will offer a graduate course in crypto and data security in the fall at Worcester Polytechnic Institute. The focus group are on-campus students as well as people in industry. Last year, I taught exactly the same course in industry and it was a big success. I am sure that it serves industry needs very well. I will be gone for one week but promise to answer all questions about the course immediately when I return. Regards, Christof Paar PS: There will be an advanced crypto course in the spring. ________________________________________________ Christof Paar Assistant Professor ECE Department Worcester Polytechnic Institute 100 Institute Road Worcester, MA 01609 email: christof(a)ece.wpi.edu www: http://ee.wpi.edu/People/faculty/cxp.html tel: (508) 831 5061 fax: (508) 831 5491 ============================================================================ WPI EE 578/CS 578: CRYPTOGRAPHY AND DATA SECURITY Fall '96, Monday, 5:30-8:15 pm INTRODUCTION It is well known that we are in the midst of a shift towards an information society. The upcoming generation of digital information systems will provide services such as: - wireless LAN and WAN computer networks - multi-media services (e.g., high quality video-on-demand) - smart cards (e.g., for network identification of electronic purse) - electronic banking/digital commerce These and other new information-based applications will have far reaching consequences. As this happens, security aspects of communication systems are of growing commercial and public interest. Unfortunately, these aspects have been widely underestimated or ignored in the past. Today, however, there is high demand for expertise and high quality products in the field of information security and cryptography. WPI's graduate course EE 578/CS 578 provides a solid and broad foundation in the area of cryptography and data security. After taking the course students should have an overview of state-of-the-art cryptography. In industry, they should be able to carefully choose and design a security scheme for a given application. The course also serves as an introduction for students who are interested in pursuing research in cryptography. There are several opportunities for Master's and PhD theses in the field of cryptography. COURSE DESCRIPTION This course gives a comprehensive introduction into the field of cryptography and data security. We begin with the introduction of the concepts of data security. Different attacks on cryptographic systems are classified. Some pseudo-random generators are introduced. The concepts of public and private key cryptography is developed. As important representatives for secret key schemes, DES, IDEA, and other private key algorithms are described. The public key schemes RSA, ElGamal, and elliptic curve crypto systems are developed. As important tools for authentication and integrity, digital signatures and hash functions are introduced. Advanced protocols for key distribution in networks are developed. Identification schemes are treated as advanced topics. Some mathematical algorithms for attacking cryptographic schemes are discussed. Application examples will include a protocol for security in a LAN and identification with smart cards. Special consideration will be given to schemes which are relevant for network environments. For all schemes, implementation aspects and up-to-date security estimations will be discussed. PREREQUISITES Working knowledge of ``C''. An interest in discrete mathematics and algorithms is highly desirable. TEXTBOOK D.R. Stinson, Cryptography: Theory and Practice. CRC Press, 1995 SYLLABUS EE 578/CS 578 An important part of the course is an independent project. The project topic can freely be chosen by the student. Possible topics include (but are not limited to) implementation of a real-size cryptographic algorithm or protocol, a literature study on new cryptographic schemes or on legal aspects of cryptography, or implementation of an algorithm for attacking a cryptographic scheme. WEEK 1: Introduction: Principals of cryptography. Classical algorithms. Attacks on cryptographic systems. WEEK 2: Stream ciphers and pseudo-random generators. Some information theoretical results on cryptography. WEEK 3: Private key cryptography: The Data Encryption Standard DES. Brief history, function and performance. WEEK 4: Private key cryptography: Recent results on successful attacks on DES. Operation modes of symmetric ciphers. IDEA and other alternatives to DES. WEEK 5: Public key cryptography: Introduction. Some Number Theory and Algebra. WEEK 6: Public key cryptography: RSA. Function and security. Recent results on successful attacks on RSA. WEEK 7: Midterm exam. WEEK 8: Public key cryptography: The discrete logarithm problem. ElGamal crypto system. Function and security. Security estimations. WEEK 9: Public key cryptography: Elliptic curve systems. Mathematical background, function and security. WEEK 10: Digital Signatures: The ElGamal signature scheme. Message Authentication Codes (MAC). WEEK 11: Hash functions: Principals. Block cipher based hash functions. Protocols: Attacks against protocols, protocols for privacy, authentication, and integrity. WEEK 12: Key distribution in networks: Private key approaches, certificates, and authenticated key agreement. WEEK 13: Identification schemes: Challenge-and-response protocols. The Schnorr identification scheme for smart cards. WEEK 14: Final exam. ****************************************************************************** Christof Paar http://ee.wpi.edu/People/faculty/cxp.html Assistant Professor email: christof(a)ece.wpi.edu ECE Department phone: (508) 831 5061 Worcester Polytechnic Institute fax: (508) 831 5491 100 Institute Road Worcester, MA 01609, USA ****************************************************************************** ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from this list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/

1 0

National Socio-Economic Security Need for Encryption Technology
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

I was watched CBS reports a couple nights ago about how all these blue collar and now white collar jobs are going across seas. How programmers in India are taking jobs away from us, programmers and engineerss, the people pioneering them. (Actually I know some Indian based programmers and they are worked very hard, even being locked in a building until they meet some deadline. This is not conducive to quality work, just enough to get ya back home to family.) (Hmmm, the Pioneer Crypto-System, I think I like that name and it has a specific purpose....) So I was thinking, boy am I glad I am in a rather esoteric part of software development where there is not much knowledge and how we, in this particular field, have an unwritten rule about sharing knowledge with others - even those trying to get a foot into the door. (I'm a contractor and there is a supply and demand thing going on - I like low supply and high demand for my particular skill sets.) White collar jobs are basically knowledge worker jobs, and if one does not know how to do something, one cannot do it. So a possible way to protect jobs is to protect the knowledge on how to do them. >From who could be an interesting question. Obviously some companies would be interested in sharing the knowledge amongst the non-US tax paying population of the world, thereby reducing income and taxes collected and thus needing to raise taxes once again to pay for "rights" and entitlements the government "gives" away to the citizens and non-citizens of this country.... but, I am beginning to rant and rave. Perhaps there is a larger picture in the world that the cyperpunks mailing list is missing. That cryptography is not just for personal privacy, but could involve job security also - as a matter of fact, the income base for this whole country. In essence, knowledge is money, cuz that is what we usually want for it now-a-days. "Oh you want me to do that for you, hmmmm, lets see...." Maybe a discussion could happen on protection of knowledge in a socio-economic realm.

1 0

Re: secret sharing protocol: FLUFFED
by peter.allan＠aeat.co.uk 17 Dec '03

17 Dec '03

OK, before you rush to tell me... Generating random shares doesn't work. Different selections of 10 out of 15 shareholders will arrive at different secrets. I've got a fix in mind, and I'll chew it over for at least a week before it reaches a keyboard. Peter Allan peter.allan(a)aeat.co.uk

1 0