December 2003 - cypherpunks-legacy

Pipeline Down
by jyy＠gnn.com 17 Dec '03

17 Dec '03

Pipeline appears to be down. Maybe a SYN sin, maybe just a Sunday sin. If any unanswered messages to jya(a)pipeline.com, try jyy(a)gnn.com

1 0

ISR on the web
by research＠isr.net 17 Dec '03

17 Dec '03

Internet Security Review is now available on the web. Have a look at http://www.isr.net ==

1 0

Re: 56 kbps modems
by craigw＠dg.ce.com.au 17 Dec '03

17 Dec '03

well here in Australia Telstra our national carrier only "garantees" 2400 baud to work. I live within 2km of the exchange and the best I have ever achieved was 22k/sec over the lines (usually about 18k). This is not what the modem tells you it is doing....but what you get as a result of testing the ACTUAL modem speed using a line analizer program. What a modem manufacturer says you get and what the line gives you are Totaly separate. > People who seemed to know used to say that 'the Shannon limit' >set an absolute upper limit around 40 kbps. Has Shannon been >proven wrong, or what? ,'~``. \|/ ,'``~. (-o=o-) (@ @) ,(-o=o-), +--.oooO--(_)--Ooo-----oOO-(_)-OOo-------oooO--(_)--Oooo.------+ | | | Soon, we may all be staring at our computers, wondering | | whether they're staring back. | | | | [Network Admin For WPA Business Products. aka doshai >;-) ] | | .oooO http://pip.com.au/~doshai/ Oooo. | | ( ) Oooo. .oooO ( ) | +-----\ (----( )-------oooO-Oooo--------( )--- ) /---------+ \_) ) / \ ( (_/ (_/ \_) Key fingerprint = 2D F4 54 BB B4 EA F1 E7 B6 DE 48 92 FC 8D FF 49 Send a message with the subject "send pgp-key" for a copy of my key. (if I want to give it to you)

3 2

IBM_gak
by jya＠pipeline.com 17 Dec '03

17 Dec '03

9-15-96. PcWe: "IBM Boosts Encryption Initiative " IBM security initiatives next month will include a new way to build encryption into software and technology that could enable U.S. companies to export products with strong encryption algorithms. IBM also will introduce several "key-recovery" technologies that could enable businesses to satisfy the requirement imposed by the U.S. government that it be able to access encrypted data on demand. IBM is attempting to garner industry support for the new key-recovery technology and is expected to license the technology to Netscape and Sun. 9-13-96. BuWi: "Revolutionary Intranet security product to be demonstrated at Interop DotCom " DSN's NetFortress fully automates hardware-based authentication, encryption and key exchange into a plug and play solution. It completely eliminates the possibility of IP spoofing, eavesdropping and break-ins. "After installing it, I couldn't even tell which service a given packet was from - everything but the packet header itself was rendered undecipherable as it traversed the Internet." DSN Technology was founded by Dr. Aharon Friedman and Andy Savas. ----- http://jya.com/ibmgak.txt (6 kb for 2) IBM_gak

5 4

Re: Juno Newbies are Great!
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"stewarts(a)ix.netcom.com" "Bill Stewart" 14-SEP-1996 07:37:07.81 >- it's free. Anybody can get on it. Easily. Anonymously, more or less, > since they don't need to have your whole credit history > to be able to charge you money. At most you need a maildrop. As has been previously pointed out, this also makes it nice for disposable remailer front ends. Is anyone currently working on this project? -Allen

1 0

Re: What is best policy paper on crypto?
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 7:18 PM 9/12/96, Gregg Cooke wrote: .... > > I'm gonna stick my neck out here and ask a naive question: where > can I find "the NAS report" mentioned in this thread? Note that > I'm new to this list (2 days) so please be kind if this paper is > extremely well known (it's not known to me but it sounds like > something I need to read). > > -Gregg I think that they meant the NRC (National Research Council) report. It is at: <http://pwp.usa.pipeline.com/~jya/nrcindex.htm>.

1 0

Mobile IP URL typo
by John Gilmore 17 Dec '03

17 Dec '03

> >locations. See http://www.ietf.org/html-charters/mobileip-charter.html, > >or search for "Mobile IP" in a web search engine. > That URL got 404-NotFound... s/-/. http://www.ietf.org/html.charters/mobileip-charter.html John

1 0

Pipeline Up
by jya＠pipeline.com 17 Dec '03

17 Dec '03

Cancel that poop about Pipeline being down. Seems only NYC is down. Access is OK through PSInet. jyy(a)gnn.com is for top secret black SIGINT only, okay?

1 0

Cryptography of a sort - redux
by Dale Thorn 17 Dec '03

17 Dec '03

If anyone remembers my original postings from a couple weeks ago (my first-ever on The Net), I described a method to "shuffle" bits in a text-stream, using simple random-number generators, to insure that the text cannot be descrambled by brute-force methods. It has occurred to me only after this time that there was significant misinterpretation of what I proposed. I do not change any bits of text, I merely reposition them, therefore there is no applicability of standard analysis techniques (XOR masking, whatever) to the decoding process. The result file contains the same number of zero and one bits as it started with, through any number of encryption layers. The only way to recover the original text is to reposition the shuffled bits correctly, which requires brute-force guessing of the pseudo-random-number output. This guess is very simple for the first encoding layer, but compounds exponentially in subsequent encodings, so that after half a dozen or a dozen passes, where the executable program(s) is called from scratch for each pass, the shuffling rapidly approaches true randomness, and cannot be decrypted in practice except through the exact mirror-image reversal of the encryption passes. An example: How long would it take for you to guess the number (between 0 and 32000) I'm thinking of, if you could guess 16 billion numbers per second? Would it be .000001 second, on average? If you had to guess the ten different numbers I'm thinking of, and get all ten correct sequentially, it should take an essentially infinite amount of time, yes? And remember, since computer bits have such low differentiation (ones and zeros), looking for "patterns" and so forth just doesn't apply in this type of encryption. As to the Public Key part of the argument, once there is general understanding on the above points at large, it might then be worthwhile to discuss the advantages and disadvantages of how to make/distribute Private keys, etc. One gentleman on this forum made an argument recently, something to the effect that it wouldn't be worthwhile for Hacker X to try to break into datastream Y, assuming datastream Y is encoded with such-and-such a key, that datastream Y is sufficiently unimportant, and motive for such a breakin would not be great enough to justify the expected effort. To such arguments, all I can say is, this is the computer age, and enough mundane transactions can add up to something significant, or, one could lower the expected-effort ratio, you get the picture.

2 1

Re: Workers Paradise. /Political rant.
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:43 PM 9/15/96, attila wrote: > NO, it does not need to be or do either, BUT, it means > that everybody independently attempts to succeed and the > 'community' takes care of itself --and in the standard > sense, the ne'er do wells fall off the path of *their own > free choice.* There will always be sickness and calamity, > but that is what the community is for. > > BTW, it still works today; I live in one of 'em. And lest there be any doubt, I _do_ support certain kinds of charities, and will not of course stop anyone from practicing charity. While I have no religious beliefs to speak of, I strongly support the mechanisms some churches have for taking care of their own members, recruits from the street, etc. (Including Salvation Army and "mission" sorts of inner city things--note of course that most such entities also insist on prayer and/or Bible readings as part of the deal...I wonder how long it will be before a class action lawsuit is filed to stop the prayer part? This would effectively shut the missions down, of course.) The thing about _traditional_ charity, of the religious or community sort, was that it was not treated as an "entitlement," as something the resentful masses could "demand" as part of their "human rights." A parish priest, for example, might extend charity to a poor person, or a widow, or whatever, but not to an able-bodied person who simply decided to not work. Nor to an unmarried woman who kept getting pregnant and having more mouths to feed. (I surmise that most such women either died of diseases related to sexual promiscuity, died in childbirth, died of disease brought on by malnutrition, or ended up in convents (Catholic birth control).) The point is that even in an "age of charity," strings have to be attached by the givers of charity. People will simply not give 40-60% of what they earn to support a growing population of people who say it's their "right" to welfare, AFDC (Aid to Families with Dependent Children), WIC (Women, Infants, and Children), food stamps (*), and suchlike. (At certain supermarkets I sometimes shop in on the way back to my town, people in front of me in line put their nice cuts of meat down, their fine loaves of bread, their frozen dinner entrees, their "Ben and Jerry's Ice Cream," and then pay for it with books of blue "Department of Agriculture" food stamps. They use their own cash (perhaps gotten by cashing their welfare and "disability" checks) to buy their smokes and booze, as food stamps are not allowed to be spent on this stuff. My impression is that they eat more expensive food than I do, perhaps because they're buying the food with "play money," whereas I'm buying my food with money that's what's left after I had to pay 40-50 taxes, so I seek to economize when I can!) > Now, I don't intend to be Scrooge, but I'll fight for my > rights to cut off at the knees the knee-jerk liberals and > government slavemeisters who want to tell me that I, and > 2 others are required to support 100 freeloaders. And speaking of Scrooge, I like "A Christmas Carol" about as much as anyone I know, and try to take the lesson of what Scrooge learned as a general lesson about life and living it. (As with "Robin Hood," the message is often confused. Robin Hood was not "stealing from the rich," he was taking back what was stolen from the peasants and farmers by the King and his tax collectors, notably the Sheriff of Notingham. At least this is how I read the myth.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

6 10