December 2003 - cypherpunks-legacy

Encryption policy challenged
by C Matthew Curtin 17 Dec '03

17 Dec '03

http://www.news.com/News/Item/0,4,5909,00.html?dtn.head "The Business Software Alliance, a powerful Washington trade organization, warned the White House that its encryption policy will fail if the government does not turn to the industry for guidance." blah blah blah ... Interesting how these polite requests from the SBA, et al, are going for such ridiculously low goals. Being able to export 56-bit symmetric cipher products... Why in the world go for such a low number when that is the absolute *best* that you can possibly get? And with such a small difference between 56 and 40 bits, there isn't really any room to haggle. Duh. -- Matt Curtin cmcurtin(a)research.megasoft.com Megasoft, Inc Chief Scientist http://www.research.megasoft.com/people/cmcurtin/ I speak only for myself. Hacker Security Firewall Crypto PGP Privacy Unix Perl Java Internet Intranet

1 0

Fan mail from John Gilmore and his cronies
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Apparently I'm not the only one not believing that "Logos" did not misspell both my first name and my last name just "accidentally". >Received: (from bin@localhost) by zifi.genetics.utah.edu (8.8.3/8.6.9) id AAA02080 for dlv(a)bwalk.dm.com; Thu, 5 Dec 1996 00:04:58 -0700 >Date: Thu, 5 Dec 1996 00:04:58 -0700 >Message-Id: <199612050704.AAA02080(a)zifi.genetics.utah.edu> >To: dlv(a)bwalk.dm.com >From: nobody(a)zifi.genetics.utah.edu (Anonymous) >Comments: Please report misuse of this automated remailing service to <complaints(a)zifi.genetics.utah.edu> > >You wrote: > >>logos <logos(a)c2.net> writes: >>> I have been unfailingly polite to you. Do you have it >>> within your character to respond to me in kind? >> >>Do you think spelling my last name "Vilus" is polite? > >Polite, no. Accurate, and perhaps a "freudian typo"? YES. > >Let me guess, O proud (if irony impaired) kook: > >You're now an authority on on-line manners? > > > No. Logos thinks s/he is. :-)

1 0

No Subject
by Clark E. Satter 17 Dec '03

17 Dec '03

unsuscribe cypherpunks >X48186 >NC-ITG When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.

1 0

PGP in Russia
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

Hi there, it's been asked before but I don't know the current answer: Is the use of PGP legal in Russia? And if it's not, how are the chances of a foreigner in Russia using it anyway to get away with it? Please reply privately as I am currently not subscribed to the list... Thanks in advance, Harka(a)nycmetro.com

4 3

FW: Intellectual dishonesty
by Butler, Scott 17 Dec '03

17 Dec '03

>Timmy May wrote: > >>P.S. I certainly hope this "Logos" nym is not who I suspect it is, as this >>will surely end our Real World friendship. A fucking bozo. > ^^^^^^^^^^^^^^^^ >^^^ > >Now ... now Timothy. If there is anyone reading this message in the U.K..... Can you remember a television series featuring Ronnie Corbet.. "SORRY" TIMOTHY ! Cheers Scott :-D > > > >

1 0

Re: [crypto] Avatar Protection?
by AJ Barrett 17 Dec '03

17 Dec '03

At 09:13 PM 12/4/96 -0500, e$pam wrote: <snip> This sounds like a good argument for the crypto "watermark" idea that was discussed a few times earlier on the list. I think it goes something like this: The document/avatar/code/whatever has a crypto identifier embedded in it that can be extracted to verify ownership. Perhaps a good analogy might be a steganographic application. > The problem is this: Is there a way for a user to "view" the client's > avatar (and in this sense, the user usually has to receive a copy > of the code to render the avatar and render it on the local machine) > but not save a copy? Assume that a client with no save feature > is not a viable option...too easy to work around. Yep. Even the "eyes only" setting in PGP is no good if the recipient is savvy enough to cut and paste the plaintext to the clipboard. -- Sincerely, AJ Barrett <abarrett(a)checkfree.com> Product Analyst CheckFree Corporation: The Way Money Moves http://www.checkfree.com

1 0

Bank Of America To Launch Internet Banking System 12/02/96
by reagle＠rpcp.mit.edu 17 Dec '03

17 Dec '03

TOKYO, JAPAN, 1996 DEC 2 (NB) -- By Martyn Williams. Bank of America is due to offer its credit card customers the ability to perform basic account transactions via the Internet next year. The bank will be using a system currently under development by Hitachi Ltd. and Bank of America subsidiary Concorde Solutions, a Hitachi spokeswoman confirmed to Newsbytes today. "The new system will enable credit card transactions via the Internet," said Hitachi's Emi Takase. "Bank of America is aiming to market the system from August, 1997." Customers should be able to check credit card balances and account details, apply for credit limit increases, and many of the other actions that a telephone is currently used for. Concorde Solutions, a company 70 percent owned by Bank of America, will develop the application for users with Hitachi. It will run on top of the Japanese company's TP Broker system, an object request broker that was developed with Visigenic Software Inc. Launch customer for the system will be Concorde parent Bank of America, but plans are for the system to be marketed to other banks. "The product will be sold by both companies afterwards," said Takase. (19961202/Press contact: Emi Takase, Hitachi Ltd., +81-3-3258-2055, fax +81-3-3258-5480, e-mail emi(a)cm.head.hitachi.co.jp; Reported By Newsbytes News Network: http://www.newsbytes.com) -- C O P Y R I G H T * R E M I N D E R This article is Copyright 1996 by Newsbytes News Network. All articles in the clari.* news hierarchy are Copyrighted and licensed to ClariNet Communications Corp. for distribution. Except for articles in the biz.clarinet.sample newsgroup, only paid subscribers may access these articles. Any unauthorized access, reproduction or transmission is strictly prohibited. We offer a reward to the person who first provides us with information that helps stop those who distribute or receive our news feeds without authorization. Please send reports to reward(a)clari.net. [Use info(a)clari.net for sales or other inquiries.] Details on use of ClariNet material and other info can be found in the user documentation section of our web page: <http://www.clari.net>. You can also read ClariNet news from your Web browser.

1 0

Re: [crypto] Avatar Protection?
by Ryan Russell/SYBASE 17 Dec '03

17 Dec '03

Even with a custom client, I suppose there's always a chance of pulling things out of RAM. How about a slightly different question: Is there a way to sign it such that it wouldn't work if the signature was removed, so there would be no question of who created it? I suppose this is analogous to: Is there a way to sign plaintext such that the plaintext can't be seen without the signature attached? I suppose not.. Is there a way to embed the signature as part of the code so it can't be removed? Ryan ---------- Previous Message ---------- To: Ryan.Russell cc: cypherpunks From: deviant @ pooh-corner.com (The Deviant) @ smtp Date: 12/05/96 04:24:15 AM Subject: Re: [crypto] Avatar Protection? -----BEGIN PGP SIGNED MESSAGE----- On 4 Dec 1996, Ryan Russell/SYBASE wrote: > A graphic-designer friend of mine and I were talking > about VRML avatars, and custom design work, and > could he offer a service designing them etc... > > His worry is that since everyone in the same virtual > environment as his customer would see the designer > avatar, wouldn't they also be able to easily rip off > his work? (or his customer's property, take your pick.) > > I wasn't sure...it seems to me that I read something vaguely > along these lines for a cryptography protocol of some sort.. > The problem is this: Is there a way for a user to "view" the client's > avatar (and in this sense, the user usually has to receive a copy > of the code to render the avatar and render it on the local machine) > but not save a copy? Assume that a client with no save feature > is not a viable option...too easy to work around. Well, its concievable to write your own client, and make the code such that it only works with that client... I know, it kindof sucks, doesn't it? > > I suppose an analogy would be: Is there a way for a person to > see the plaintext, but not record it? I think that question really > answers itself - no. How about alternatives? If the server > of the environment only renders "views" (say, certain angles, or > a bitmap) of the avatar, rather than sending the description file? > > Any other thoughts? > > Ryan > --Deviant PGP KeyID = E820F015 Fingerprint = 3D6AAB628E3DFAA9 F7D35736ABC56D39 "First things first -- but not necessarily in that order" -- The Doctor, "Doctor Who" -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMqZOczCdEh3oIPAVAQHEAwf+IZ4KzMjcmb8t/HTMBvp83ChZ0VLS6xa3 +OwtpvkVGnuD4AJ+ayvDS10u4oAx78OillYDPolz6Gpnv0L+KDseo0sz7Yhgvepp HwUw4UqMDBu9BMfkITFs6IS773EIgC8JmIf8/u6xEH/tvUjl44RQlgX+YE1Ybhvq cGo3dF60fdiYzmoYvYESrMo9ldr97bImSjUE46bd4ZrtHjVTqDB75r9Uhb38SPWD SdEi6rdC4sX1dY9zdJHIruhIM5BBpZcHX9Vo8cOSvzZY1s7rHXVQgb34rIcUcx7T 2GJTeJsTS2boi9O0urkKW8FIZtq82AnBk5WsavRtEIw0O5pC0jhR2g== =aWWo -----END PGP SIGNATURE-----

1 0

HP
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

> HP UNVEILS NEW CRYPTO CONTROL FRAMEWORK > > Hewlett-Packard announced a new framework technology designed to let > governments enable and disable strong cryptography products. The > framework is independent of the method used in a given product. The > heart of the system is a small, tamper-resistant module with the > cryptographic algorithms that remain dormant until activated. A policy > activation token (basically some key bits) can be used to choose > between the various crypto algorithms stored on the module. The HP > press release makes this sound like the greatest thing since public > key encryption, but in reality it appears to be just another attempt > to insert government control into private data exchanges. Look for > legislative attempts to make this technology mandatory on all > encryption products. Technology details are at the site. > <URL:http://www.dmo.hp.com/gsy/security/icf/main.html> > > > > NETSURFER DIGEST (c)1996 Netsurfer Communications, Inc. > All rights reserved. > > NETSURFER DIGEST is a trademark of Netsurfer Communications, Inc. > -- Vipul Ved Prakash | - Electronic Security & Crypto vipul(a)pobox.com | - Internet & Intranets 91 11 2233328 | - Web Development & PERL 198 Madhuban IP Extension | - Linux & Open Systems Delhi, INDIA 110 092 | - (Networked) Multimedia

1 0

Nice use of crypto...
by Adam philipp 17 Dec '03

17 Dec '03

While browsing for some JAVA material I can across the following article that seems like a real nice application of crypto. What is it? Oh, you can just click on the URL and find out... its 4am and I'm too tired to give a precis. http://www.javaworld.com/javaworld/jw-12-1996/jw-12-int.property.html Adam, Esq. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\ | My PGP key is available on my |Unauthorized interception violates | | home page: http://www.rosa.com |federal law (18 USC Section 2700 et| |=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-|seq.). In any case, PGP encrypted | |SUB ROSA...see home page... |communications are preferred for | | -=[ FUCK THE CDA]=- |sensitive materials. | \=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-/ If A is a success in life, then A = x + y + z. Work is x; y is play; and z is keeping your mouth shut. Albert Einstein (1879-1955)

1 0