December 2003 - cypherpunks-legacy

Re: encryption program
by ed.falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

> > I ran a quick Kappa test on it. ... I had a blast with this one. I was up until 4:30 last night working on Pierre van Rooyen's "Here follows a example..." cryptogram. It's like doing a jigsaw puzzle; there's a hump you cross over near the end where everything just falls into place. Jim Gillogly broke it in only a few hours, whereas I must have put in a whole day cumulatively (half of that writing software), but it was my first real cryptogram. It was a hell of a learning experience. They say that you can't design a crypto system until you've broken someone else's first, and this really drove it home.

1 0

No Subject
by T. O'Brien 17 Dec '03

17 Dec '03

Unsubcribe

1 0

(U.S.) National Cryptography Policy (paper and report)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 17 Jan 1997 14:09:24 CST Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Lyonette Louis-Jacques <llou(a)MIDWAY.UCHICAGO.EDU> Subject: (U.S.) National Cryptography Policy (paper and report) Comments: To: net-lawyers(a)eva.dc.LSOFT.COM To: CYBERIA-L(a)LISTSERV.AOL.COM I'm forwarding this post to the CYBERIA-L and NET-LAWYERS lists as I think subscribers might be interested in these documents (include discussion of export controls), and their implication for international communications. Cheers, Lyo (Lyonette Louis-Jacques at llou(a)midway.uchicago.edu) Cryptography and the National Resource Council: The Role of Private Groups in Public Policy, by Kenneth W. Dam, is now available on the Web. http://www.law.uchicago.edu/Publications/Occasional/ The Role of Private Groups in Public Policy is adapted from a presentation made to the Presidents' Circle of the National Academy of Sciences and the Institute of Medicine, Washington, D.C., November 21, 1996. It was recently issued as Occasional Paper No. 38 by the University of Chicago Law School. Kenneth W. Dam, Max Pam Professor of American and Foreign Law, University of Chicago Law School, was the Chair of the National Research Council's Committee to Study National Cryptography Policy. The Committee unanimously recommended eliminating restrictions on domestic use of encryption, and progressively relaxing restrictions on export. The government's concerns that national security and law enforcement agencies would be unable to eavesdrop on criminals and terrorists must be balanced against the dangers that American firms would be unable to lawfully use encryption strong enough to protect electronic commerce, and that American software developers, forced to use key escrow/key recovery encryption in their products ("a Maginot Line of defense against hackers") would find no market for their products. A late draft of the Committee's Report, "Cryptography's Role in Securing the Information Society," is available at their home page: http://www2.nas.edu/cstbweb/2646.html ----------- Paradise is exactly like + where you are right now .&______~*@*~______&. m only much, much, better "w/%%%%%%%%%%%%%%%%%%%\w" mmm*** ------------------------ `Y""Y""Y"""""Y""Y""Y' mm***** Language -- it's a shipwreck, p-p_|__|__|_____|__|__|_q-q mm**Y** it's a job - Laurie Anderson _-[EEEEM==M==MM===MM==M==MEEEE]-_.|..|.... (two .sigs sighted on the Net) --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

Albuquerque, Anyone?: Hettinga goes on the road...
by Robert Hettinga 17 Dec '03

17 Dec '03

I'm going to be in Albuquerque seeing family for a week starting tomorrow. Any cypherpunks/e$/technomads folks out there wanna quaff a few, I'd be up for it. Also, I'm looking a temporary PPP dial-up in the Albuquerque for the week I'm there. No mail or news, just PPP, so I can hit my POPserver and run e$pam in remote-mode. Neither rain, nor snow, nor altitude, etc. can keep the e$pamster from his appointed rounds... Thanks! Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

Re: UNSUBSCRIBE
by ed.falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

Could someone help this luser? Is he responding like this to every post on the list? ----- Begin Included Message ----- >From spooke(a)ita.flashnet.it Fri Jan 17 12:44:24 1997 X-Sender: rm02129(a)ita.flashnet.it Mime-Version: 1.0 Date: Fri, 17 Jan 1997 21:45:00 +0100 To: ed.falk@Eng (Ed Falk) From: Spooke <spooke(a)ita.flashnet.it> Subject: UNSUBSCRIBE globalkos.org >> >> Hi, my name is Tod, and I really want to be a cool hacker, ... > >This has *got* to be a troll. Nobody could be this clueless. > > >Well, actually, they could. > > ----- End Included Message -----

2 1

Telecomm Act Reference (Was Re: Newt's phone calls)
by Sarah L. Green 17 Dec '03

17 Dec '03

>From Damien Thorn's 'A CELLULAR COMMUNICATIONS PRIMER' (at http://www.l0pht.com/~drwho/cell/texts/thorn1192.txt) To calm fears that cellular calls were not private, the cellular industry lobbied congress into passing legislation known today as the Electronic Communication Privacy Act (ECPA) of 1986 which makes it a crime to monitor cellular phone calls and a host of other transmissions like digital pagers. This law is used by cellular equipment dealers and service providers to reassure customers that their conversations will remain private. Sarah. ============================================================================== Sarah L. Green Hey, I never claimed to be >>osprey<< Madison, AL (USA) a genius nor a typist greens(a)hiwaay.net ==============================================================================

1 0

Re: Forgery detection
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Timmy C. May's reheated, refurbished, and regurgitated cud is completely inappropriate for the mailing lists into which it is cross-ruminated. |||~ (0 0) _ooO_(_)_Ooo__ Timmy C. May

1 0

Enough is Never Enough -- pro-CDA alliances, from TNNN
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 17 Jan 1997 18:04:35 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: Enough is Never Enough -- pro-CDA alliances, from TNNN [Attached are two excerpts from the article. For the rest, check out: http://cgi.pathfinder.com/netly/textonly/1,1035,549,00.html --Declan] ******** The Netly News Network http://netlynews.com/ Enough Is Never Enough By Declan McCullagh (declan(a)well.com) January 17, 1997 A broad coalition of conservative and anti-pornography groups and individuals will file legal briefs next Tuesday in the Supreme Court supporting the government's defense of the Communications Decency Act, The Netly News has learned. The alliance includes longtime supporters of the act, such as Enough is Enough, Focus on the Family, and the National Association of Evangelicals. Members of Congress will join a separate brief that the National Law Center for Children and Families is preparing. But a letter from the attorney representing the coalition asked the ACLU for permission to file a brief "on behalf of" 59 plaintiffs, including such unlikely participants as the National Association for the Advancement of Colored People, PBS, SafeSurf... and Netscape. Netscape? The company that lobbied against the CDA? A firm with a reputation of putting their balls on the chopping block when fighting for Net-issues on Capitol Hill? Netscape was as shocked as I was to learn about their participation. "It wasn't authorized by me or my office. This is flabbergasting," Peter Harter, public policy counsel for Netscape, said. "I'd be crucified if this happened." [...] In their brief, which argues sociological rather than legal points, the groups hope to highlight the "dangers" of pornography online. They plan to supply the court with "legislative facts" to support the position Congress took when crafting the bill. The document also will include statistics discussing the effects of the Internet on children and the availability of material covered by the law. (Marty Rimm, where are you now?) Donna Rice-Hughes from Enough is Enough says: "It discusses three primary areas of our concern: letting the court know the problems on the Internet. Adult pornography, indecency, and child porn as well. A section on the harms of pornography. And a section dealing with the compliance issues: Is it feasible technically to comply with the CDA?" [...] Chris Stamper and Noah Robischon contributed to this report.

1 0

cash machine PINheads (fwd)
by Petro 17 Dec '03

17 Dec '03

------- start of forwarded message ------- Path: news.suba.com!feeder.chicago.cic.net!wolverine.hq.cic.net!news.neca.com!news.shkoo.com!news1.mpcs.com!hammer.uoregon.edu!arclight.uoregon.edu!news.bbnplanet.com!su-news-hub1.bbnplanet.com!csn!nntp-xfer-1.csn.net!news.hemi.com!news From: Tkil <tkil(a)scrye.com> Newsgroups: alt.sysadmin.recovery Subject: cash machine PINheads Date: 16 Jan 1997 11:27:04 -0700 Organization: Scrye.com Lines: 59 Sender: tkil(a)creepy.scrye.com Approved: yup. Message-ID: <m3680xfpc7.fsf_-_(a)creepy.scrye.com> References: <E3KH0p.55F(a)xcski.com> <5bh6ke$5rr(a)illuin.demon.co.uk> <5bhhd5$dfv$1(a)comet3.magicnet.net> <spberry.853431573(a)endeavor.ansci.iastate.edu> NNTP-Posting-Host: ppp2.hemi.com X-Attribution: Tkil X-Newsreader: Red Gnus v0.80/Emacs 19.34 found in <URL: http://axion.physics.ubc.ca/atm.html>: A number of security systems were developed, of which two captured most of the market. These were the IBM system, launched in 1979; and the VISA system, which extended it and was introduced shortly afterwards. These systems relate the PIN to the account number in a secret way. The idea is to avoid having a file of PINs, which might be stolen or copied. and to make it possible to check PINs in the ATM itself so as to allow transactions when it is not online to the bank's central computer site. The definitive reference is Meyer and Matyas' huge book Cryptography: a new dimension in computer data security; there is a shorter account in Davies and Price Security for Computer Networks. PINs are calculated as follows. Take the last five significant digits of the account number, and prefix them by eleven digits of validation data. These are often the first eleven digits of the account number; they could also be a function of the card issue date. In any case, the resulting sixteen digit value is input to an encryption algorithm (which for IBM and VISA systems is DES, the US Data Encryption Standard algorithm), and encrypted using a sixteen digit key called the PIN key. The first four digits of the result are decimalised, and the result is called the `Natural PIN'. Many banks just issued the natural PIN to their customers. However, some of them decided that they wished to let their customers choose their own PINs, or to change a PIN if it became known to somebody else. There is therefore a four digit number, called the offset, which is added to the natural PIN to give the PIN which the cusomer must enter at the ATM keyboard. and from <URL: http://catless.ncl.ac.uk/Risks/14.76.html>: *The Risks Digest Volume 14: Issue 76* [...] How is it possible to use an EXPIRED card to make $8000 in cash advances? It's possible because the ATM's verification center ONLY checks if the card number is on a list of STOLEN/LOST cards. If the card is not stolen/lost, the verification center then performs a verification check of the information FROM THE CARD ITSELF, not from some other database. So the perpetrators just wrote a new expiration date on the magnetic stripe of their fake card; the ATM verification center verified that the date hadn't yet passed and that was that. my apologies for the useful info, but the "yes it is" "no it isn't" bit was getting even more irritating. both of these items have quite a bit more text to them that makes for interesting reading -- i just excerpted the bits that dealt with where the PIN was verified. t. -- Tkil <tkil(a)scrye.com> emacs evangelist, hopelessly hopeless romantic "Like brittle things that break before they bend" -- The Sisters Of Mercy, _Floodland_, "Driven Like The Snow" [1987] ------- end of forwarded message ------- -- ***************** PLEASE TAKE NOTE: In an effort to reduce the amount of junk mail that I receive, I am no longer reading email sent to petro(a)suba.com. send email to login(a)encodex.com where login = petro. You send unsoliciated commercial email, and I will kill you.

1 0

RE: Newt's phone calls
by Internaut 17 Dec '03

17 Dec '03

>What does concern me is personal privacy. I don't want people tracking >my movements or purchasing patterns, so I prefer to use cash or >pseudonymous debit cards. How pseudonymous are debit cards? Don't they go through visa before they debit your account? --Internaut

8 18