December 2003 - cypherpunks-legacy

Re: Patent Fight Could Add to Cost of Inter
by jim bell 17 Dec '03

17 Dec '03

At 05:06 AM 11/21/96 CST, Alan Pugh wrote: > >By KATHLEEN SAMPEY >Associated Press Writer > >NEW YORK (AP) _ A little-known patent could raise the cost of >doing business over the Internet for companies selling software, >video or other digital products delivered online. > >E-Data Corp. of Secaucus, N.J., is suing 17 companies, including >McGraw-Hill and CompuServe, to collect licensing fees on the >patent, which protects downloading of encrypted digital >information. A court hearing is scheduled Dec. 6 in New York on the >company's claims. Notice, as usual, the Orwellian use of the word "protects" in the paragraph above. While apparently written by a journalist, it echoes the usage of lawyers. Nothing is really being "protected," it is being monopolized. Jim Bell jimbell(a)pacifier.com

1 0

Re: Anderson & Kuhn's "Improved DFA" paper
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

HP just announced their big new plans for international exportable crypto using tamperproof PCM-CIA smartcards with multiple tamperproof GAK plugins. Anderson&Kuhn just announced the latest in a series of attacks on "tamperproof" hardware crypto modules by Israeli, UK, and US cryptographers. Obviously it must be a conspiracy :-) It's also an opportunity for some well-timed press releases. Clipper 1's reputation was severely damaged by Matt's attack. Anybody know if HP's giving out samples, and if there are real or test GAK plugins for them? HP URL http://www.dmo.hp.com/gsy/security/icf/main.html The paper was posted to coderpunks, and it's on ftp://ftp.cl.cam.ac.uk/users/rja14/dfa Here's the intro: --------------------------------------------------------------------- Improved Differential Fault Analysis Ross J Anderson, Markus G Kuhn In [1], Biham and Shamir announce an attack on DES based on 200 ciphertexts in which one-bit errors have been induced by environmental stress. Here we show an attack that requires less than ten ciphertexts. Furthermore, our attack is practical in that it uses a fault model that has been implemented in attacks on real smartcards. In [2], Biham and Shamir show how their method can be extended to reverse engineer algorithms whose structure is unknown. Our attack can also be extended to such cases and is more efficient there too. In [3], Boneh, De Millo and Lipton discuss how such techniques can be used to attack RSA. Again, their attack is theoretical only, We show how to do it in practice. -------------------------------------------------------------------------- # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk # (If this is posted to cypherpunks, I'm currently lurking from fcpunx, # so please Cc: me on replies. Thanks.)

3 2

killfiling aga@dhp.com
by Greg Broiles 17 Dec '03

17 Dec '03

At 06:45 AM 11/21/96 -0800, nobody(a)cypherpunks.ca (John Anonymous MacDonald) wrote: [discussing aga(a)dhp.com] >I should'a kill-filed this sicko long ago. Agreed. But if you (and other anonymous posters) are going to continue to reply to him or other unproductive kooks, would you please put their addresses somewhere in the headers of your messages (perhaps in the To: or Cc: or Subject:) headers so that the rest of us who are using killfiles won't have to read your replies? -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

3 2

CNET News Dispatch November 21st, 1996
by The CNET newsletter 17 Dec '03

17 Dec '03

************************************* CNET NEWS DISPATCH/SPECIAL COMDEX ISSUE Thursday, November 21, 1996 San Francisco, California, USA ************************************* Welcome to the fifth in a series of SPECIAL COMDEX ISSUES of the CNET NEWS DISPATCH, bringing you the latest on the people, products, and parties at this exciting event. Check out our Comdex page at: http://www.news.com/Categories/Index/0%2C3%2C38%2C00.html?nd ************************************* CNET NEWS DISPATCH is a daily newsletter that summarizes the up-to-the minute technology news presented by CNET's NEWS.COM. It tempts readers with coverage of today's hottest stories, news in the making, (in)credible rumors, and other indispensable information. For complete versions of the stories updated all day long, head over to: http://www.news.com/?nd ************************************* CONTENTS SCOOPS AND TOP STORIES Push comes to shove as Netscape leads tech parade CompuServe gets back to basics PowerPC not overshadowed at Comdex Treasury against Net taxes Compaq looks beyond the desktop Where do you want to go today? Home. Hot products seen at Comdex ANNOUNCEMENTS An easy way for you to customize NEWS.COM Search the site for particular topics and articles Send us your questions, comments, flotsam, and jetsam How to subscribe and unsubscribe Late-breaking stories just a click away with Desk Top News ************************************* PUSH COMES TO SHOVE AS NETSCAPE LEADS TECH PARADE As more and more people are pulled onto the Internet, more and more of the Internet is being pushed back to people. This week at Comdex, a type of Web publishing generically referred to as "push" technology received its most significant endorsement to date with the introduction of Constellation, the code name for a new technology from Netscape Communications. (November 21, 1996, 12:15 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5641%2C00.html?nd COMPUSERVE GETS BACK TO BASICS CompuServe's announcement today that it is closing down its flagging Wow service by January 31 marks the end of the company's failed attempts to get a foot in the door of the potentially lucrative consumer online service business. "They're throwing in the towel in the consumer market," said Mark Mooradian of Jupiter Communications. Instead, CompuServe, the second-largest online service with 5 million users worldwide, plans to refocus itself on its original mission: serving business customers. (November 21, 1996, 1:15 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5608%2C00.html?nd POWERPC NOT OVERSHADOWED AT COMDEX While Microsoft Windows CE devices may have grabbed most of the attention at Comdex, important developments in the Mac clone market surfaced, including new PowerPC reference design platforms from Motorola and IBM and the debut of a 533-MHz PowerPC prototype system using an Exponential processor. Motorola this week revealed its Yellowknife PowerPC Platform Reference Design motherboard that supports the PCI bus and 603e, 604, and 604e PowerPC microprocessors at clock speeds of up to 240 MHz. (November 21, 1996, 12 p.m. PT) http://www.news.com/News/Item/0%2C4%2C5642%2C00.html?nd TREASURY AGAINST NET TAXES In a report released today, the U.S. Treasury Department opposed new taxes on electronic transactions via the Internet, saying income should be taxed the same whether it comes through existing channels or electronic means. The report, which makes no formal policy recommendations, also expresses concern that the Internet may become a tax haven for those who use anonymous electronic money that cannot be traced and therefore cannot be taxed. (November 21, 1996, 11:30 a.m. PT) http://www.news.com/News/Item/0%2C4%2C5628%2C00.html?nd COMPAQ LOOKS BEYOND THE DESKTOP Compaq has expanded its core desktop product lineup to include new efforts such as NetPCs, network computers (NCs), portable PCs, and handheld devices. Mike Winkler, the head of Compaq's PC products group, bared the company's plans for NCs and laid out the future strategy for Windows CE devices in an interview with CNET at Comdex. (November 21, 1996, 11:15 a.m. PT) http://www.news.com/News/Item/0%2C4%2C5645%2C00.html?nd WHERE DO YOU WANT TO GO TODAY? HOME Bill Gates must like Comdex. While other CEOs will fly in to deliver a speech and fly back out the same day, the Microsoft captain has been in Las Vegas for at least two days, maybe more. "I've seen him in the hotel bar; he comes in and has a beer all by himself, and everyone's looking at him," said one attendee. But like sightings of the Other King, rumors of Gates's unattended wanderings are probably just that. (November 21, 12:09 a.m. PT) http://www.news.com/SpecialFeatures/0%2C%2C5624%2C00.html?nd HOT PRODUCTS SEEN AT COMDEX Here are some of the hottest new products we found as we wandered the floor of Fall Comdex. (November 21, 3:00 p.m. PT) http://www.cnet.com/Content/Reviews/Hot/contents.html?nd ************************************* ANNOUNCEMENTS AN EASY WAY FOR YOU TO CUSTOMIZE NEWS.COM So many bits, so little time? Sounds like you need Custom News. Identify the topics, keywords, or sections you're most interested in, and Custom News will a create a page of headlines and summaries for all stories that match your criteria. Check it out at: http://www.news.com/Personalization/Entry/1%2C21%2C%2C00.html?nocache=1 SEARCH THE SITE FOR PARTICULAR TOPICS AND ARTICLES Search the entire NEWS.COM database for stories you saw in News Dispatch, or track any story we've run. http://www.news.com/Searching/Entry/0%2C17%2C0%2C00.html?nd SEND US QUESTIONS, COMMENTS, FLOTSAM, AND JETSAM If you have any questions, suggestions or remarks, send us a message: newsdispatch(a)cnet.com HOW TO SUBSCRIBE AND TO UNSUBSCRIBE To subscribe to News Dispatch: Send mail to listserv(a)dispatch.cnet.com with the message: subscribe news-dispatch (your name) in the message body. To unsubscribe send the message: unsubscribe news-dispatch LATE-BREAKING STORIES JUST A CLICK AWAY WITH DESK TOP NEWS How would you like having split-second access to the very latest news on the Net? Our Desk Top News feature puts our 20 most recent stories right there on your desktop for you to review at any time. Here's how it works: 1. From any story, click Desk Top News in the top right. 2. A window will open showing our last 20 stories. 3. Click on a headline to display the story. 4. Desk Top News updates itself every 30 minutes. 5. You become known as Ms./Mr. Cyber-Info. It feels good. http://www.news.com/Help/Item/0%2C24%2C12%2C00.html?nd ************************************* CNET: The Computer Network http://www.cnet.com/ http://www.news.com/ http://www.gamecenter.com/ http://www.download.com/ http://www.search.com/ http://www.shareware.com/

1 0

RE: Mass-market crypto phones
by Mullen Patrick 17 Dec '03

17 Dec '03

_______________________________________________________________________________ From: Clay Olbon II on Thu, Nov 21, 1996 15:20 >A while back, Eric Blossom posted a URL for a mass-market, phone encyrption >device (http://www.comsec.com/) The point of this post is to posit a The above mentioned crypto phone was incredibly expensive, if I remember correctly. What it basically was (Please keep in mind I may be thinking of a different product) a box containing a modem and a crypto-crunching CPU. Phone in one end, processed by said CPU, and send out other end. I have/had a similar idea, but I want to try make it a totally software product (assuming you have the necessary hw requirements on your computer) where you talk in through a microphone (can something be wired so you can use a regular phone plugged into your computer/modem/soundcard???) your CPU crunches code, and spits out the encrypted data. Obviously, the complementing steps would be done on the receiving end. Has anyone ever tried anything like this? >I think we need to keep a couple of goals in mind. The first, is to get >encrypting phones (or phone add-ons) into Wal-mart, K-mart, etc (where >probably most Americans now buy their phones). The prices need to be low >enough that people will want to buy them (<$100?). Is this technically >feasible? The comsec device from the above URL already demonstrates the >needed capability. Is the cost target possible? My guess is soon, given >the lowering costs and increasing capabilities of current processors. Goals sound good. I feel it *definately* has to be below $100. Personally, I use a phone bought at K-Mart that cost $12 _after_ tax... I wouldn't mind paying $50 for a techno gizmo that made my conversations, inane as they may be, private. The price would also have to be low to assure the other end has a similar techno-gizmo, or I would have wasted my money. Anyone else see the *immediate* need for a standard? >The second goal needs to be to push a similar product for cell-phones. If I'm not mistaken (and I've been known to be from time to time :-), cell phones are already encrypted between the phone and cell tower. That way, they are no less private than a regular phone. Of course, you may be referring to further end-to-end encryption built into the phone in addition to this, but as far as they being less secure than a house phone, I'm not sure about that one. >Given that these goals are met, I think widespread use of crypto over phone >lines would become almost inevitable. However, the fun part would be the >introduction of such products. The FUD coming from police, the government, >etc. would be amazing to behold. Agreed! > Clay >******************************************************* >Clay Olbon olbon(a)ix.netcom.com >engineer, programmer, statistitian, etc. >**********************************************tanstaafl PM USER ERROR: REPLACE AND STRIKE ANY KEY WHEN READY

3 2

Finjan "SurfinGate"
by Mike McNally 17 Dec '03

17 Dec '03

Check out http://www.finjan.com and the stuff about "SurfinGate". The software supposedly can perform an on-the-fly inspection of a Java applet or ActiveX control, and then apply a signature to it along with a "safety" level qualifier to feed into a configurable policy mechanism. Any ideas as to how you can look at an ActiveX control and determine whether it's safe or not? -- ______c_________________________________________________________________ Mike M Nally * IBM % Tivoli * Austin TX * How quickly we forget that mailto:m5@tivoli.com mailto:m101@io.com * "deer processing" and "data http://www.io.com/~m101/ * processing" are different!

2 3

Database law... silver lining??
by Richard L. Field 17 Dec '03

17 Dec '03

Should a database protection law such as HT 3531 be enacted in the U.S., it just may turn out to be the best weapon yet for the protection of personal data. Why shouldn't a "database" be interpreted to include an individual's personal data? All that is required is that it be "arranged in a systematic or methodical way". Heck, that's not so hard. And a "database maker" isn't necessarily Lexis (the compiler of P-TRAK) and friends, it is each individual who originally made a "substantive" (i.e., lifetime) investment in the collection of the contents of his personal database. Based on this reasoning, P-TRAK, etc. would be considered an infringing use, subject to civil and possible criminal actions, injunctions, impoundment, and monetary relief. Hmmm... - Richard Field

1 0

Re: wealth and property rights
by Dave Hayes 17 Dec '03

17 Dec '03

> Btw, people of your mentality (communists/socialists) already make it > very difficult for me to accumulate, due to the exhorbitant tax rates > to support those who chose to blow their money as soon as they have > it I don't necessarily want to support "socialism" nor "capitalism". Both are extremes of a situation which does no one any good to exist. However, I would question the implication that "socialists" are responsible for the higher tax rates you currently experience. For example, I could make a strong case that you really have some clever "capitalists" who have learned how to express their "capitalism" quite effectively across the space of all people in a "country". 8-) ------ Dave Hayes - Altadena CA, USA - dave(a)jetcafe.org Freedom Knight of Usenet - http://www.jetcafe.org/~dave/usenet It is the wise bird who builds his nest in a tree.

2 1

Computer CPU chips with built-in crypto?
by Norman Hardy 17 Dec '03

17 Dec '03

An important paper on tamper-proof hardware, discusses CPUs that cypher their memory bus. html: www.cl.cam.ac.uk/users/rja14/tamper.html postscript ftp.cl.cam.ac.uk/users/rja14/tamper.ps.gz Has special relevance to smart cards.

1 0

Re: Why I Don't Read SF Much Anymore
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Thu, 21 Nov 1996 00:14:49 -0800, Timothy C. May wrote: >On the issue of why many of us don't read as much SF as we once did... >1. I'm a lot older. The stuff that I thought was really great back when I >was 14-22, or so, and even "pretty good" until I was about 25 or so, now >really looks like dreck. (Not all of it, but more than I thought was dreck >at the time.) >Partly this is age and life experience, partly just increased sophistication. Remember Sturgen's (sp?) law: 90% of everything is crap - I think most of us just take awhile before we agree. The SF genre could be characterized by a couple diamonds buried in a manure pit... >(Vernor V. claimed to a friend of mine that the day he spent talking to >several of us was the most fruitful day he'd spent in a long time...I take >this as evidence that folks like us are to the new generation of SF writers >what folks like members of the British Interplanetary Society were to >writers of past generations.) I'd agree 100%. A community as small as the SF writers *needs* outside influence. Must be neat, though, to read a book and go "I *did* that!" >(Interestingly, Eric Drexler says he cannot enjoy it because Simmons does >not give nanotechnology a central enough role. This echoes the point Duncan nanotech (and other things) can spoil a good story by making things too easy. Take most (all?) of Forward's books - great ideas, but it reads like a press release. >- Orson Scott Card, "Ender's Game." A good fictional exploration of online >anony mity. In many ways, Cypherpunks was explicity a kind of combination >of "Ender's Game," "True Names," "The Shockwave Rider," and "Atlas >Shrugged." I think those books are partly responsible for getting a great many people interested in this sort of thing... >- and of course Heinlein, though his best stuff is 30-45 years old now Always a mark of a great SF author: his stuff is still good even if the science is outdated... Ditto EE smith - it's funny, when you read things like the lensmen series it seems cliched until you realize it *is* cliched - because so many others copied him. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0