December 2003 - cypherpunks-legacy

WORK ONLINE...PART TIME
by Success 17 Dec '03

17 Dec '03

WORK ONLINE...PART TIME! National Software Company is currently seeking independent agents for marketing their services. If you're reading this, you have what it takes, (a computer and modem), to start your own business, work part-time or full-time. The commissions are great, the products are great, and it sells itself. You will be sent all the materials it takes to take orders in the convenience of your own home,-manual, order forms, software, etc. This is a real company, desiring real people worldwide who want in on the ground floor. With all the people getting online via AOL, Compuserve, Netscape, the marketing and need is great. You must be a self-starter, ready to handle in-bound calls, and make between $700-to-$1000 per week to start. Our average agents yearly salary is six figures. Be your own boss! Join us and become an independent sales agent. For more information and signing up contact: DOWNLOAD YOUR FREE INFORMATION DISK FROM THIS WEB SITE. http://www.geocities.com/WallStreet/3151/ You simply point and click - just like you do in windows. It is a breeze to work with. See for yourself what all the excitement is about... download it! Please note: This is a one time mailing only and you have NOT been added to any lists for future mailings.

1 0

Another animal isolation idea ...
by Ernest Hua 17 Dec '03

17 Dec '03

How about putting the list o' bad animals in a separate list where the list server will specially recognize and will not broadcast messages except back to the sender? This will be an effective stealth censorship mechanism, which some of us would like to see happen to the few "animals" contributing the trash. Ern

1 0

Oh fun ... another mass spam mailer ...
by Ernest Hua 17 Dec '03

17 Dec '03

Why don't these people take a hint? Ern ------- Forwarded Message Return-Path: name(a)worldnet.att.net Received: from mtigwc02.worldnet.att.net (mailhost.worldnet.att.net [204.127.129.4]) by xenon.chromatic.com (8.7.5/8.7.3) with ESMTP id NAA24359 for <hua(a)chromatic.com>; Fri, 22 Nov 1996 13:52:28 -0800 (PST) Received: from Default ([153.35.19.61]) by mtigwc02.worldnet.att.net (post.office MTA v2.0 0613 ) with SMTP id ANQ13190; Fri, 22 Nov 1996 19:35:25 +0000 From: removenow(a)hotmail.com Date: Fri, 22 Nov 1996 14:36:56 PST Subject: As featured in Business Week Message-ID: <19961122174156.ANQ13190@Default> Press reply for removal As Featured in BUSINESS WEEK MAGAZINE & ENTREPENURE MAGAZINE ..December issue. xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx SPECIAL OFFER GOOD UNTIL DECEMBER 26th 1996 ONLY xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx free free free free free free free free free free free free free free free E-MAIL WORKS v3.1a FREE!! WITH PURCHACE OF SECURE BULK E-MAILING AND WEB SITE HOSTING SERVICES!!!!!!!!!!!!! free free free free free free free free free free free free free free free That's Right!! When you order our secure bulk e mail hosting services you get the best & most advanced bulk e-mail package for FREE. This product sold for $499 is now free!!!!. Not just a demo, the fully functional version!!! Just e mail your request to 1webguy(a)slip.net E Mail Works v3.1 is by far the most advanced bulk e-mail software available on the market. It's power and depth are only matched by it' s ease of use. Features I Sends at 13000 to 15000 per hour with 14.4 modem II Posts to thousands of news groups automatically III Collects at 75000 per 24 hours Collect from Aol, Comp-U-Serve, Prodigy & all others IV Works while your computer is-surfing-getting e mail or word processing. V Easy to use remove name feature. VI Parsing table 45000 to 100,000 per hour VII Stand alone - NO Pegasus-Eudora-Freedom- or other email program needed VIII Sends & Gathers & Parsing at the same time! IX Marketing Tables X Time & date stamp on all mailings XI Filtering system XII Send live links XIII Repair data base XIV Merge data base XV View data base XVI Pull down help menu's xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx THE FIRST WEB SITE HOSTING SERVICE FOR PROFESSIONAL BULK E-MAIL MARKETERS!!!! Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ONLY $149 per month With this unique service you send mail using your local dial-up through our secure SMTP port. The mail you send is first filtered through our remove name list and then sent. I SECURE T3 CONNECTION WEB SITE HOSTING When SoftCell becomes you postmaster you will never have your site ripped down again or have you e mail address change II 10 MG WEB DOMAIN We transfer or register your domain with internic III POP ACCOUNT REMOVE NAMES All mail is parsed against several large remove name lists as you mail IV 5 MG FLAME PROOF E-MAIL BOX We will not except multiple message or unmarked attachments from any user. V FIRE WALL Over 70,000 e mail addresses that can not access our server VI AUTO RESPONDER Easy and fast responder ------- End of Forwarded Message

1 0

Constraining the Program Counter
by ph＠netcom.com 17 Dec '03

17 Dec '03

You could build a fairly secure system if all of the executable code were confined to ROMs. Is there a way to confine the PC of any popular processors so that it can only execute code in the ROM? Ideally, it would be possible to do this with cheap off the shelf hardware. Peter Hendrickson ph(a)netcom.com

1 0

Re: Mass-market crypto phones
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:50 AM 11/22/96 -0800, Sean Roach wrote: >At 09:10 AM 11/21/96 -0500, Clay Olbon II wrote: >>A while back, Eric Blossom posted a URL for a mass-market, phone encyrption >>device (http://www.comsec.com/) >At first this seemed to be a challenging goal as public key encryption (at >least the type of which I am aware) requires a public key ring, but then I >thought, what would be the point in real time communitation? Both Eric's product and PGPhone use Diffie-Hellman key exchange. They protect against man-in-the-middle attacks by displaying (part of) the resulting symmetric key and having the phone's users verify they are both working with the same key in the conversation. Until the AIs/eavesdroppers get good enough to imitate a person on the phone, this verification technique is good enough. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

1 0

FAQ on legalities SSLeay, &c.
by P. J. Ponder 17 Dec '03

17 Dec '03

the recently posted FAQ on crytpo patent expiration dates etc. stated that MD5 and SHA were not export-restricted anywhere. The FIPS Pub for SHA (which I think is numbered 180-1) specifically states that SHA is export controlled (by ITAR). I asked this list why it would be controlled, since it was a signature function, and Perry Metzger replied that crypto hash functions make good starting points for building a block cipher program. there is a section in Schneier's _Applied Crypto_ on this, too. anybody heard from the old Perry-grammer on his list project? I miss him. He would be having a field day with all this noise. surprised there hasn't been more chatter about the improved differential fault analysis (IDFA). That is pretty powerful stuff. They just don't make tamper-proof like they used to. Forget chomping on the keyspace, read the modulus and divide by the public key. I like the reference to the 'Mafia EFT/POS'. ObSciFi: Go back and read the Preface (by Bruce Sterling) to Gibson's _Burning Chrome_ collection. He talks about the sorry state of SF in the 1980's and how Gibson, among others, was turning out something new. Hmph.

1 0

Software distribution the cypherpunks way? Was: Patent Fight Could Add to Cost of Inter
by Phillip M Hallam-Baker 17 Dec '03

17 Dec '03

This turned into a long article on software distribution. > NEW YORK (AP) _ A little-known patent could raise the cost of > doing business over the Internet for companies selling software, > video or other digital products delivered online. > > E-Data Corp. of Secaucus, N.J., is suing 17 companies, including > McGraw-Hill and CompuServe, to collect licensing fees on the > patent, which protects downloading of encrypted digital > information. A court hearing is scheduled Dec. 6 in New York on the > company's claims. Although this is one of the most bogus and indefensible patent claims about I don't think it has any material bearing on the Web. Any that it does have is likely to be beneficial since the Freeny model is inherently broken and non-Web. What Freeny does is to claim the idea of encrypting an information product, delivering it through a computer network (though not a physical medium, there is another patent that claims that), and selling the decryption key rather than the product. It is a hot idea if you are trapped in traditional, pre-Web thinking but not if you understand the dynamics of the net. The problem is that encryption is not such a great barrier to preventing proliferation of software. If encryption is free than you might as well add it in, if there are patent costs then you have to ask what precisely you gain from encryption. The problem is that the information good has to be decrypted before use. Since it is very difficult to prevent copying after the decryption has occurred all that the encryption is really doing is to slow down the process of proliferation. A more important question is what if anything one gains from preventing proliferation. Microsoft has not been hurt by the massive bootleg copying of its software, far from it. Many business users are keen to buy non copy protected software because they can then obtain a "free" copy for their home machine at no cost to themselves. This minor peculation is in my view the principle reason for the dominance of the PC in the home market. There is no good reason why a person would buy a $2000 business machine rather than a $500 home machine when the latter plays much better games. But add the idea that one can use the software bought by one's employer and the PC looks the better buy. I believe that the success of Netscape demonstrates that copy protection is a bad idea. If you believe in free markets then the price of any given product is going to come down to the marginal cost of production. For software sold via the net the marginal cost is pretty close to zero. The price of the various "Office" bundles sold via the stores is astonishingly low. $200 for MSOffice or Corel Office is a silly price. If the product is bundled with the machine the price gets even sillier - a few dollars. I expect that before long we will see machines coming bundled with more than one office suite because the prices are just too low to make the choice irrelevant. An important fact to bear in mind is that companies are in general interested in being honest. There is little incentive for an employee to cheat the software vendor. The cost of lawsuits is a good deterrence since the type of company where management are likely to encourage software theft is also the type of company that is likely to have disgruntled ex-employees willing to inform. As a system manager my principle interest in net O/S such as WNT and VMS is that they have good, centralized and standardized licensing mechanisms that allow me to make sure that the software has been paid for. Its another reason why site licenses are useful! The price of net software is likely to be close to the price the OEM pays, a few dollars. This is likely to be structured somewhat differently however. I expect to see growth of two trends, software rental and componentware. Componentware, selling the package in small increments is a poor proposition if selling via physical media. The cost of a CDROM is low, (few cents), but the cost of post and packing is high. Selling componentware via the net is considerably more interesting. Just as I paid a few bucks for my XV program, I'm willing to pay a couple of bucks for additional input filters. I'd certainly be willing to pay a couple of bucks for specialized document tools or specialized canned document formats (e.g. IDEF0, ESA-Requirements whatever). I see the potential for componentware being primarily low cost, high volume. Componentware is now on the brink of being practical for three reasons. First as previously stated the net makes distribution costs lower. Second modern software applications are considerably more "open" to extension than previously. In the past most software houses attempted to produce products that satisfied every need. Today the large software houses realize that they cannot hope to satisfy every need but that if they can cover 95% of a persons needs in a way that allows them to add in the remaining 5% everyone is happy. Finally, Java has legitimized the componentware idea. Its worth noting that the technical suitability of Java to the task is irrelevant. What is important is the fact that several hundred startup companies have been created to do nothing else than make Java applets. Such companies are effectively committed to make componentware work and it is inevitable that at least one will succeed in establishing a paradigm for the others to copy. The second interesting development is software rental. To an extent this already occurs since the rapid rate of software development means that software rapidly becomes obsolete. Anyone who is using WordPerfect 3.1 for more than a few hours a year should probably upgrade to the latest version simply because it offers so much more functionality. The recent move by Microsoft to incorporate the year into their products is intended to encourage frequent software upgrades. It is a small step from this model to one in which software is "leased" for a period of a year or more at a time. Of course both componentware and rental strategies have been around before the net existed. What the net does is to change the economics so that low cost, high volume is the mainstream strategy. Software rental traditionally involves expensive agreements, typically brokered by lawyers on both sides. The network means that it will become economic to rent software in low volume and for short periods. Joining the componentware and rental strategies together would point to a distribution strategy in which a corporation would lease a certain number of seats worth of fully updated packages. The seats would be continuously updated on a daily basis as additional components passed the supplier's QA. In this model the purchaser is buying the up-todateness of the package. There would be little value in bootlegging the software since its unlikely that the bootleg version would be anything like as convenient. There would also be scope for different levels of uptodateness. Just as the Microsoft developer network delivers a bulging binder full of CDs to my desk each quarter there will inevitably be a large number of developers willing to risk buggy software to have access to the cutting edge technology. On the other hand there will be people who prefer to wait until others have found the bugs, waiting a judicious length of time before updating unless a patch is a response to a known bug. Encrypting the distribution process might be worthwhile to reduce fraud but the main vulnerability is probably unauthorized copying after distribution. What the Freeny patent covers is thus the old model of software distribution in the new sales paradigm. There is little point in taking costly measures to protect the copyright of products being sold for small dollar amounts. First Virtual proves this. Where more expensive software is concerned it would ideally be best to use the net. But here the price of the patent is simply too much. The 1% extorted under the patent would easily pay an intern to stuff a CD in an envelope and send it. The role for encryption in the software distribution process is in authenticating the delivered goods. The role of encryption is to provide privacy. It is very hard to keep a secret that every one knows about, still harder to sell information that is public knowledge. The net is not an information economy, it is an access to information technology. Nobody will profit from merely selling information, they will have to sell the ability to access information in better ways, better indexing, faster access, lower publication delays and so on. comments? Phill PS in checking this document Microsoft's spellchecker suggested "Mosaic" when checking the word MSOffice!

1 0

Re: Why I Don't Read SF Much Anymore
by Sean Roach 17 Dec '03

17 Dec '03

At 11:00 PM 11/20/96 -0500, Robert Hettinga wrote: >At 9:09 pm -0500 11/20/96, Hal Finney wrote: >>What fiction can people recommend which presents crypto/privacy issues >>realistically? How about this new book that Neal Stephenson is working >>on, does anyone know what it's about? His short story, "Hack the Spew", >>a few months ago (in Wired, I think?) had a strong crypto flavor. > >His, "Great Samolean Caper" for Time/Pathfinder was pure cryptoanarchy... > >I don't know if it's still around though. > I saved the whole magazine, I can copy it for you if you like. I thought that I had the magazine in the dorm room but I can't seem to find it.

3 3

HP-48G is a perfect toy, thanks to all
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Thanks to all who recommended me to buy an HP-48G calculator. It is one of the most perfect toys that an adult can play with. I used a programmable stack calculator when I was in high school and it is a true pleasure. - Igor.

2 1

RE: Mass-market crypto phones
by Mullen Patrick 17 Dec '03

17 Dec '03

_______________________________________________________________________________ From: Lucky Green on Fri, Nov 22, 1996 14:52 <snip> >quality is fine. Note that a fast IP connection may or may not suffice. ^^^^^^^^^^^^^ <snip> >sending UDP packets over the Internet new problems arise. One packet ^^^^^^^^^^^ ^^^^^^^^ <snip> >--Lucky I was going to just listen to the way this thread is going because I find it fascinating, but now that it has been spelled out, I must make a very important distinction between my idea and PGPFone, WebPhone, etc. -- These are Web-based programs designed to speak over very long distances for "free" (neglecting ISP charges, etc.), adding the extra functionality of encrypting your data along the way so sniffers, etc can't listen in on your conversation. My encryptophone(tm) :-) is purely a modem-modem protocol. This way, even at 14.4k you get all of your throughput. No TCP/IP overhead. No busy Net. No "Why won't my ISP hold a connection longer than TWO MINUTES!?!?". The idea I was tossing around was a simple modem program which takes digitized voice, encrypts it, pumps it through the phone line directly to the modem on the other side which undoes it all. (Yes, I know this is a simplified view.) I also know it may not be as useful as the web-based products, but I also know you don't have to worry about the aforementioned problems and neither party has to have a Net account. This eliminates some of the problems which have been sent to me. Of course, some of the problems still apply and must be addressed. I guess now's the time to admit that the first and foremost problem is that I have never programmed my soundcard... I appreciate the tips and pointers everyone has been giving me tremendously. Hopefully, this thread doesn't do a complete reversal, because I am storing all hints/suggestions/tips to be used when I can finally get this project going. (I'm stubborn. I need to at least try it, if for no other reason than to get the knowledge... :-) Thanks! PM

3 2