December 2003 - cypherpunks-legacy

ssn hack
by Jazzmin Belle Sommers 17 Dec '03

17 Dec '03

heh. This was so simple, it still confounds me. I was asked for my social security number whilst writing a check last night (my driver license doesn't have it on there). I just said, "oh, I don't have one, I'm not a citizen." She bought it! I got asked where I belonged to, so I said Germany (not actually a lie, it's my heritage). Next time I think I'll say Belgium. What's that itty bitty country between France and Spain? Angorra? Yeah. That's it. I still find that the best line of defense regarding privacy is a complete second identity. Does anyone know how to apply for proper papers (taxpayer ID#, checking account, picture ID of some sort) for a second identity? As far as I know, it is not illegal to have one, as long as it is not used for fraud. I'm an artist, yeah, that's it. What, you really think someone's actual name is Jazzmin Belle Sommers? Get outta town! Jazz

2 1

Java compilation
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

hi there was a discussion on this mailing list on whether java to native code compilers are available now. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ todd(a)cs.arizona.edu Todd A. Proebsting at University of Arizona CS Department, SUBJECT "Toba," A Robust Java-to-C Translation System New Beta Release of Toba for Linux! URL http://www.cs.arizona.edu/sumatra/toba/ DESCRIPTION "Toba" translates Java bytecodes to C. After being compiled, the generated routines link with Toba's run-time system, which includes a complete garbage collector, threads interface (Solaris version only), and core Java API. Toba translates applications (e.g., javac), not applets. Toba-translated applications typically run 3-5 times faster than those interpreted by Sun's JDK 1.0.2. Toba's API does not currently include AWT or dynamic linking. The Solaris version of Toba has thread support; the Linux version does not. (Thread support is not needed for many popular Java applications like javac.) PLATFORM Solaris, Linux BODY Our freely-available distribution includes source code for all of Toba---we encourage outside porting efforts. Toba (the translator) is written in Java. The run-time system is in C. Toba uses the freely- available Boehm-Weiser garbage collector. The Solaris version uses the native Solaris threads package. (We have not used any of Sun's source code--in any way--to develop Toba. Toba source code is free of all of Sun's licensing restrictions.) While this is a beta distribution, Toba appears robust. Because of their significantly improved performance, we run Toba-compiled versions of javac (and Toba itself) exclusively for development purposes and have done so for the last four months. For more information please visit our website, http://www.cs.arizona.edu/sumatra/toba/ Or, simply fetch our distribution and enjoy running your java applications many times faster: ftp://ftp.cs.arizona.edu/sumatra/toba/toba.tar.Z Toba is part of the larger, on-going "Sumatra" research project at the Department of Computer Science of The University of Arizona. The Sumatra project explores the issues surrounding efficient execution of mobile code. For more information about the Sumatra Project, visit our website, http://www.cs.arizona.edu/sumatra/ Members of the Sumatra Project: Todd A. Proebsting (project leader) John H. Hartman Gregg M. Townsend Patrick Bridges Tim Newsham Scott A. Watterson - Igor.

1 0

New crypto regs outlaw financing non-US development
by Lucky Green 17 Dec '03

17 Dec '03

As you know, the President has transferred most crypto from State to Commerce. We were all waiting in anticipation for the text of new regulations to take effect on 12/30/96. Not because we thought that the new regs will be more favorable to industry and the individual (we know better), but so we could assess the damage. I will try to give a brief look at some interesting provisions in the new regs. I assume the reader is familiar with the carrot and stick (export of single DES and key escrow) provision of the new regs. IANAL. This post refers to the text of the regulations available at http://jya.com/bxa123096.txt and http://jya.com/itar123096.txt The above URL's mirror [Federal Register: December 30, 1996 (Volume 61, Number 251)], also available via http://www.access.gpo.gov/su_docs/aces/aces140.html First the good news: the export controls mentioned in the draft of the regs on any kind of data security software, regardless if it uses crypto or not did not carry into the final version. Now to the rest of the news. >equests for one-time review of recoverable >products which allow government officials to obtain, under proper legal >authority and without the cooperation or knowledge of the user, the >plaintext of the encrypted data and communications will also receive >favorable consideration. The GAK provisions require that the keys are made available without knowledge of the user. This disqualifies some of the suggested key recovery schemes alerting the user to the fact that keys are being requested. >A >printed book or other printed material setting forth encryption source >code is not itself subject to the EAR (see Sec. 734.3(b)(2)). However, >notwithstanding Sec. 734.3(b)(2), encryption source code in electronic >form or media (e.g., computer diskette or CD ROM) remains subject to >the EAR (see Sec. 734.3(b)(3)). The administration continues to review >whether and to what extent scannable encryption source or object code >in printed form should be subject to the EAR and reserves the option to >impose export controls on such software for national security and >foreign policy reasons. Printed source can still be exported. Source printed in special OCR fonts will eventually be banned. Finally, to the big one: >Sec. 736.2 General prohibitions and determination of applicability. > >* * * * * > (7) General Prohibition Seven--Support of Certain Activities by >U.S. persons--(i) Support of Proliferation Activities (U.S. Person >Proliferation Activity). If you are a U.S. Person as that term is >defined in Sec. 744.6(c) of the EAR, you may not engage in any >activities prohibited by Sec. 744.6 (a) or (b) of the EAR which >prohibits the performance, without a license from BXA, of certain >financing, contracting, service, support, transportation, freight >forwarding, or employment that you know will assist in certain >proliferation activities described further in part 744 of the EAR. >There are no License Exceptions to this General Prohibition Seven in >part 740 of the EAR unless specifically authorized in that part. IMHO, this closes the door on the foreign contracting loophole used by C2 and others. It is now illegal for US persons to finance or contract out overseas crypto development, since doing so will obviously assist in proliferation. While not unexpected (I offered a bet on Cypherpunks that this would happen. Nobody took the bet.), this provision sets a dangerous precedence. The technical assistance prohibitions of the past have been transformed into general prohibitions against "financing, contracting, service, support, transportation, freight forwarding, or employment". Again, IANAL. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

5 5

CAVE Dig Out
by John Young 17 Dec '03

17 Dec '03

I just re-read John Perry Barlow's 1992 article, "Decrypting the Puzzle Palace," and was knocked over by his attack on TIA's TR45.3 committee and the CAVE algorithm. If you've not seen it lately (and Whit Diffie's comments on CAVE), I've put it at: http://jya.com/puzzle.htm Inspired by this and John Gilmore's similar attack on TIA and the TR45.3 gang in a message to me, I've put notices on my Web site that I will provide the CAVE algorithm to anyone who asks (and the TR45.3 document): http://jya.com/cave.htm Analysis of it will determine whether CAVE is as deliberately NSA-crippled as Gilmore, Barlow and Diffie claim, and that the TIA and the TR45.3 "wannabe spooks" committee cravenly caved (but, hey, it's never too late to dig out). Thanks to those who upbraded me for caving too. Digging now.

1 0

Test Only/6:37 AM
by Toto 17 Dec '03

17 Dec '03

1 0

Re: ssn hack
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:10 PM 12/28/96 -0600, Jazzmin Belle Sommers wrote: >heh. > >This was so simple, it still confounds me. > >I was asked for my social security number whilst writing a check last night >(my driver license doesn't have it on there). I just said, "oh, I don't >have one, I'm not a citizen." > >She bought it! I got asked where I belonged to, so I said Germany (not >actually a lie, it's my heritage). Next time I think I'll say Belgium. Those with straight American accents might like to claim to be Canadians. DCF

1 0

WinSock temporarily going down
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: remailer-operators(a)c2.net, cypherpunks(a)toad.com, jgrasty(a)gate.net Date: Sun Dec 29 11:10:08 1996 Due to a glitch that could potentially open the way to serious abuse of the remailer, the WinSock remailer is temporarily ceasing operation. We will return to seminormal operation when Joey returns to town, probably in a day or two. My apologies if this inconveniences anyone. JMR WinSock admins Regards, Jim Ray <jmr(a)shopmiami.com> DNRC Minister of Encryption Advocacy "In local news, the city of Miami discovered that it was $68 million short and was forced to seriously consider cutting back such municipal operations as the City Hall Drive-Thru Bribe Window." -- Dave Barry, 12/29/96 PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMsaX5jUhsGSn1j2pAQHAcQfQxWeTzFsNBnzK3582Tz4Yopq4zzsTL4E2 BIYs0ipNDE9lXxx3ITpHswHJh6W5ueMFrUshGmu7dvkA/NVyib3RxMGZTQi6v3Wt qBb+89Q6pUJOi9PRC9cuBdHJ+jIP962klkGZ5ir19VWzQ2+R6tel7oMq0zlIJap1 U6bw0xQbxf9hg3RayFvISw0u0xWsHbj0d1oDhE7flihR/8CKAqgmRwtn/1h24EJY Tpxou04PWVgvDkuciIlYbEgyHtRA/qQj6BSTpa/uL8BfYYvhQ60ZZYDpStnN0FRo 6v92BW7ESvhDg9A3re6KHraMPWFkM8Yt2EO4NLw8ShE2Hg== =diu+ -----END PGP SIGNATURE-----

1 0

www.af.mil
by Adam Shostack 17 Dec '03

17 Dec '03

Has been, um, revised. You can learn all about gov't corruption here. Learn the secrets that they don't know want you to know. Well not really, I don't have time for that. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: John Gilmore, 58, dead of AIDS
by aga 17 Dec '03

17 Dec '03

On Sun, 29 Dec 1996, Anonymous wrote: > John Gilmore died of AIDS today in his San Francisco bathhouse, Toad Hall. > He was 58. > Is this true, or just some bullshit?

2 1

anon.penet.fi...
by jlucas4＠capital.edu 17 Dec '03

17 Dec '03

Can anyone tell me the story of the demise of penet.fi? I came on the scene right after it shutdown and never got to use the service, or see the site. oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo o )\ _. - ._.) = Jesse Lucas - jlucas4(a)capital.edu o 1 /. `- ' ( `--' : http://www.geocites.com/collegepark/7332 1 1 `- , ) - > ) \ : "I cut off their heads and, like heaps of grain,1 o (.' \) (.' -. = I piled them up." - Assyrian Ruler o oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo oo1oo

1 0