December 2003 - cypherpunks-legacy

Re: Merc: PacBell predicts imminent death of the net; film at 11
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 10:47 PM 10/26/96 -0500, Roger Williams <roger(a)coelacanth.com> wrote: >I caught an interview on the BBC last night with a representative from >PacBell, who claimed that this subsidy resulted in ISPs actively >discouraging customers from using data service (ISDN) instead of POTS. For those of you not in PacBell territory, PacBell really misunderstood the Internet access market when they set their current rates. ISDN costs $X/month (about 2-3 x POTS) plus (daytime) per-minute charges of 4 cents, (nighttime 7pm-7am) free. (This probably requires that your ISP have Centrex access in your local calling area.) What they didn't realize was that computer people think "It's free at night" means "It's free at night", so they dial up and stay on. (Many of us non-ISDN users do the same with POTS, of course.) ISDN call setup times are fast enough that it's possible to do IP support that tears down calls after X seconds of non-use and sets them up again when there's traffic, which is practical since you don't have 30 seconds of modem retraining time per setup. If PacBell's really bugged enough about usage patterns, they could go write a good Winsock package to support it themselves and give it away free to ISDN customers.... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

HIT_key
by John Young 17 Dec '03

17 Dec '03

10-24-96: "Hitachi, Fujitsu to develop key-code data security system." They will cooperate to develop "hack-proof" encryption for telecommunications networks. Planning for the system includes formation of a "bank" to maintain duplicates of decoding keys, an aspect which has raised some concern over potential invasions of privacy. The U.S. has been lobbying other nations to adopt such a system. "Singapore devises system to combat Internet business fraud." The new technology, known as the Singapore Enterprise Security Architecture (SESA), could be applied over the Internet "within the next few months" in Singapore. It may begin in Singapore first and then, depending on the response from those outside, overseas." Patent: "Computerized theme park information management system utilizing partitioned smart cards and biometric verification." Abstract: A computerized theme park information system to automatically process and issue a multi-service guest card, control and monitor admission, *perform value-added manipulation of the guest card's contents and to analyze the visitor's buying behavior*. "U.S. Attorney Gen. Janet Reno offered to "set the record straight" on encryption policy and key recovery at FCBA lunch Oct. 17." RFI: Anybody know of a transcript of the AG's talk? ----- http://jya.com/hitkey.txt (7 kb for 4) ftp://jya.com/pub/incoming/hitkey.txt HIT_key ---------- We have put Quisquater's "short cut for exhaustive key search using fault analysis" at: http://jya.com/quikey.htm

1 0

considering internet/privacy periodical
by Greg Broiles 17 Dec '03

17 Dec '03

I'm considering putting together a periodic publication about the technical and legal aspects of privacy and the Internet. My "business model" would feature free WWW/email access with a charge for fax or postal delivery. I'm curious to know if this strikes people as interesting or just Yet Another Email Newsletter Of No Real Consequence. (no offense taken if it's the latter.) Any feedback is appreciated. -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

4 4

Hey! Dr. Vuilis!
by se7en 17 Dec '03

17 Dec '03

SHUT THE FUCK UP, BITCH!!! You think we can have at least one fucking week with having to listen to your clueless bullshit? Or am I gonna have to put the slap down on you? Rant like a bitch, get slapped like a bitch! se7en

3 3

No Subject
by azur＠netcom.com 17 Dec '03

17 Dec '03

I came across some interesting passages in the RAND Corp. study, An Exploration of Cyberspace Security R&D Investment Strategies for DARPA: "The Day After ... in Cyberspace II", MR-797-DARPA. http://www.rand.org/publications/MR/MR797 The report describes the results of an exercise sponsored by the Defense Advanced Research Projects Agency (DARPA) using the RAND "The Day After..." methodology to elicit the views of participants on research and investment strategies addressing the security and safety of systems and networks supporting various U.S. physical and functional infrastructures. The exercise was held on March 23, 1996 in Washington D.C., and involved approximately 60 participants from government, universities, and commercial industries involved with the U.S. information infrastructure. Has this report been discussed on the list? ---------------- Is it possible to "sterilize" data passing through our telecommunications systems? Billions of bits of data pass through our national information infrastructure each second. Some of those bits represent information about individual citizens' login and password combinations, social security and credit card numbers, account information, health status, and innumerable other sensitive information items. Our nation has superb communications monitoring tools, housed primarily in the National Security Agency. However, the NSA is precluded by law from collecting information about U.S. citizens. When incidents of "information warfare" are being waged against U.S. systems, could key data flows be "sterilized" or "sanitized" by computer hardware and/or software in such a manner that the NSA could help monitor and track perpetrators in cyberspace without violating these laws? This topic was raised during exercise discussions. We have not studied all the relevant laws and regulations to assess whether such sterilization measures would allow the power of NSA's analyses to be brought to bear on telecommunications involving U.S. citizens, but perhaps the topic merits further investigation. If so, what kinds of pattern detection and replacement algorithms would suffice to accomplish this goal? Sponsor development of an aircraft-like "black box" recording device When a cyberspace security incident happens, it is often not detected in real time, and the trail back to the perpetrator becomes lost. Could a "black box" recording device be developed, to be attached to key nodes or links of cyberspace systems, that would record every transaction passing through that node or link during the last n minutes (where n=5 or 10, for example)? If so, that record would be invaluable in tracing the source of incidents, whether they are accidental or deliberately perpetrated. Thousands of such systems would be required to cover key links or nodes; could they be made robust, inexpensive, and ultra-reliable? PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Sacred Cow Meat Co. | --------------------------------------------------------------------- Hacker Opportunities (Let's Make Lots Of Money) I've got the brains, you've got the tricks Let's make lots of money You've got the code, I've got the hacks Let's make lots of ... I've had enough of scheming and messing `round with jerks My crypto code's compiled, I'm afraid it doesn't work I'm looking for a partner, someone who gets things fixed Ask yourself this question: do you want to be rich? I've got the brains, you've got the tricks Let's make lots of money You've got the code, I've got the hacks Let's make lots of money You can tell I'm educated, I studied at CalTech Doctored in mathematics, I could've been set I can program a computer, choose the perfect time If you've got the inclination, I have got the crime Ooooh, there's a lot of opportunities If you know when to take them, you know There's a lot of opportunities If there aren't, you can make them (Make or break them) I've got the brains, you've got the tricks Let's make lots of money Let's make lots of ... You can see I'm single-minded, I know what I could be How do you feel about it? Come, take a walk with me I'm looking for a partner regardless of expense Think about it seriously, you know it makes sense Let's (Got the brains) Make (Got the tricks) Let's make lots of money (Money) Let's (You've got the code) Make (I've got the hacks) Let's make lots of money (Money) I've got the brains (Got the brains) You've got the code (Got the hacks) Let's make lots of money (Money) Money!

2 1

Re: considering internet/privacy periodical
by Greg Broiles 17 Dec '03

17 Dec '03

At 07:31 PM 10/27/96 -0800, Tim May wrote: >But Greg probably already knows about all these things. If he thinks >there's a market, maybe there is. Actually, I don't think there's enough of a market to justify a real business; I don't see any serious $ here (in fact, there's probably very little $ here). As far as I can tell, most of the money being made with the Internet so far comes from selling things to people who think they can make money on the Internet. My mention of a price comes from my impression that there may be some folks who'd be interested - mostly law-oriented folks but this is likely true of other "serious professionals/academics" - but who have organized their information gathering practices around paper, such that an electronic-only publication isn't "real" to them. But given my relatively poor cash flow situation and the tendency of human beings to sign up for anything that's free, I don't think it's a good idea to offer free FAX or paper distribution, since those media choices would cost me per subscriber. Mostly I see a hole right now in between the one-shot web pages/FAQs people build which explain remailers (and other privacy technologies) and Raph's remailer list, which is pretty tightly focused on the technical/reliability aspects of cypherpunk-style remailers without providing a lot of historical or technical context. (To clarify, I think both the FAQ's and Raph's remailer reliability tracking are valuable, and I see them as inspirations to also do something useful.) Also, the privacy/remailer market is fragmenting (evolving), with pro-privacy (or faux pro-privacy, or anti-privacy) mail receiving/forwarding services, viz c2.org, netbox.com, pobox.com, thebook.com, mailmasher.com, hotmail.com, etc. I see it not as a business but more like a way of organizing what I'm thinking about already in a way that might be interesting to others. -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

1 0

LIQ_uor
by John Young 17 Dec '03

17 Dec '03

10-25-96: "Litronic Releases the Fast and Powerful CipherServer." Litronic announced the release of a hardware-based add-on device for high speed processing of cryptographic functions. The newly released CipherServer holds up to eight cryptologic PC Cards which may concurrently process the same or different algorithms including RSA, DES, and FORTEZZA. CSI Explains Countermeasures to Cyberspace Attacks Authored by an eminent authority, Dr. Dorothy E. Denning of Georgetown University (Washington, D.C.), CSI's "Manager's Guide to Cyberspace Attacks and Countermeasures" assists information technology professionals in keeping abreast of dizzying developments on the dark side of the virtual world. Target/ Electronic spies The FBI is expanding the Awareness of National Security Issues and Response (ANSIR) program, its public voice in national security matters, espionage, counterintelligence, economic espionage and physical- and cyber-infrastructure protection. ----- http://jya.com/liquor.txt (10 kb for 3) ftp://jya.com/pub/incoming/liquor.txt LIQ_uor

1 0

Re: considering internet/privacy periodical
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:31 PM 10/27/96 -0800, Timothy C. May wrote: >The article somewhat longwindedly gets into the problems these "hot sites" >are having. The lack of loyalty, the lack of _payment_, etc. I would like to report that even though the WSJ site supposedly started charging at Midnight on 20 September, I can still log on using my old free account (and I'm not using the MS browser). Haven't been charged yet. DCF

1 0

No Subject
by almika 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

1 0

Re: considering internet/privacy periodical
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Sun, 27 Oct 1996 16:36:14 -0800, Greg Broiles wrote: >I'm considering putting together a periodic publication about the technical >and legal aspects of privacy and the Internet. My "business model" would >feature free WWW/email access with a charge for fax or postal delivery. I'm >curious to know if this strikes people as interesting or just Yet Another >Email Newsletter Of No Real Consequence. (no offense taken if it's the >latter.) If you did a real noise-removal job, this could be very useful. Sort of a privacy-RISKs digest, if you will. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

2 1