December 2003 - cypherpunks-legacy

Re: Forged addresses
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 27 Dec 1996 15:46:18 -0800 From: Chuq Von Rospach <chuqui(a)plaidworks.com> Subject: Re: Forged addresses To: listmom-talk(a)skyweyr.com Mime-Version: 1.0 Precedence: Bulk Reply-To: listmom-talk(a)skyweyr.com At 2:20 AM -0800 12/27/96, Joshua D. Baer wrote: >What I was concerned about was when I was sending a message with a From >adress of shaddar+(a)cmu.edu but a Sender of josh(a)grinch.res.cmu.edu and with >an outgoing mail server of skyweyr.com. I think from your later comments >that this would still be OK, wouldn't it? Hmm. (rubbing forehead. God, it's been a long 24 hours...). Hmm. My gut feel is the answer is "maybe". If someone's attempting to post a message to a list, I'd have no trouble accepting it if either the From or Sender matches a known subscriber. That'd be reasonable. I'm not particularly worried about the mail server in that case. If we end up with someone forging mail in someone else's name, we deal with it when it happens and can probably backtrack or otherwise limit it. If they're trying to subscribe to a list, I have a problem with this, because the person admits they're subscribing an address not from who they say they are. I'd want validation of this in some way before trusting it. This is where the mailback subscription verifiction starts becoming moreimportant. Once a person has verified they want on the list, I can relax a lot more about hard-core validation. It's verifying the address being subscribed wants to be subscribed that's the nasty piece. I spent most of last night cleaning up after the spammers, and a good chunk of this morning. I also rewrote my cgi's to close a bunch of the loophole and add a few toys to see if they'd trip, and a couple of hours, the spammer did, so I now know where he's coming from and how they're doing it (he's spoofing through the ANONYMIZER on top of everything else...) -- and left a little reminder there, so he now knows I know. Heh. And I'm in process of closing the loopholes further. Not what I'd planned on doing, but obviously, it can't wait any longer. It's not that they can't be closed to a great degree, only that until this last round, it wasn't really needed. One idiot screwing it up for a lot of folks... -- Chuq Von Rospach (chuq(a)solutions.apple.com) Software Gnome Apple Server Marketing Webmaster <http://www.solutions.apple.com/> Plaidworks Consulting (chuqui(a)plaidworks.com) <http://www.plaidworks.com/> (<http://www.plaidworks.com/hockey/> +-+ The home for Hockey on the net) I got no name or number/ I just hand out the lumber. But if I get a chance to play/ I'm going to show 'em. -- Stick Boy (The Hanson Brothers, SUDDEN DEATH) --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Re: cryptoanarchy
by jim bell 17 Dec '03

17 Dec '03

At 09:18 PM 12/26/96 -0800, Vladimir Z. Nuri wrote: >omegaman taunts me to rant about cryptoanarchy. frankly I find >it tiresome given its originator repeatedly refuses to answer >point-blank questions about key aspects of it. maybe you just don't like the answers? > lacking this, I >fail to take it seriously, given nobody else has a similar idea. You must be kidding. Jim Bell jimbell(a)pacifier.com

1 0

Mo' Better Mail Shenanegans?
by Robert Hettinga 17 Dec '03

17 Dec '03

crypto(a)uhf.wireless.net was subscribed to dcsb(a)ai.mit.edu, and seems to be directly zinging messages, sans any identification as forwarded material, straight off of dcsb to cypherpunks(a)toad.com. I went in and killed this address from dcsb, but I don't know how long that's going to last. I forwarded a story to cypherpunks a while ago from Netly News about a rash of denial of service attacks that're happening on email accounts around the net. It looks like cypherpunks is part of that attack, and it looks like crypto(a)uhf.wireless.net may be involved. Or not. Anyway, I'll send a copy of the Netly article to dcsb in another message, for everyone's entertainment on dcsb. Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Airline travel ID, was: Credentials without Identity--Race Bits
by azur＠netcom.com 17 Dec '03

17 Dec '03

>>Bill Stewart wrote: >> I've heard that in less civilized parts of the world you're actually >> required to carry government-issued ID cards to walk down the street >> or fly on airplanes. > >Umm.. tried to get on a flight without having ID lately? Doesn't work - >against policy. Anti-terrorism policy and all.. it's for your own >safety, of course. >-- >Vangelis <vangelis(a)qnis.net> /\oo/\ Ever wonder whether the airport counter people know a valid ID from a phoney (or a Law Enforcement ID for that matter)? Take my word for it, they don't. Just scan your current ID, change the name/address fields output on your handy-dandy dye-sublimation printer and laminate with a kit from Price-Costco. If you pay for your ticket in cash be prepared for a search of your carry-on luggage. -- Steve

1 0

Cypherpunks list spam, down, etc.
by John Gilmore 17 Dec '03

17 Dec '03

Toad.com filled itself up with email due to the spam attack in the last few days. While I was on holiday, Hugh took down the list to stop the mail loop and restore some sanity. It worked. He left it in a slightly broken state which I'm working to clean up. If you sent something useful to the list during that time and received a bounce message, see if your posting comes through by Monday morning. I'll be excavating and forwarding the posts that I can find. If I miss yours, please re-send it (once)! John Gilmore [continuing to contribute work, in order that you-all may use or abuse the resulting forum]

2 1

Crypto Rules (Resend)
by John Young 17 Dec '03

17 Dec '03

Federal Register: December 30, 1996: Page 68572-68587 Bureau of Export Administration Encryption Items Transferred From the U.S. Munitions List to the Commerce Control List Summary: This interim rule amends the Export Administration Regulations (EAR) by exercising jurisdiction over, and imposing new combined national security and foreign policy controls on, certain encryption items that were on the United States Munitions List, consistent with Executive Order 13026 and pursuant to the Presidential Memorandum of that date, both issued by President Clinton on November 15, 1996. ----- For full document: http://jya.com/bxa123096.txt (111K) ---------- Federal Register: December 30, 1996: Page 68633 Amendment to the International Traffic In Arms Regulations Department of State. Action: Final rule. Summary: This rule amends the International Traffic in Arms Regulations by removing from the U.S. Munitions List (USML), for transfer to the Department of Commerce's Commerce Control List (CCL), all cryptographic items except those specifically designed, developed, configured, adapted, or modified for military applications (including command, control and intelligence applications). ----- For full document: http://jya.com/itar123096.txt (6K) ----- Or for both, the Federal Register: http://www.access.gpo.gov/su_docs/aces/aces140.html Enter search term: "munitions"

1 0

Electronic Surveillance (Resend)
by John Young 17 Dec '03

17 Dec '03

We've prepared a list of 122 documents on electronic surveillance selected from the late Office of Technology Assessment's impressive online archive, 1972-96, with links for downloading: http://jya.com/esnoop.htm The selection traces the ascendancy of information technology over a 25-year period, paralleled by governmental surveillance technology. A full listing of the nearly 800 publications of the OTA archives is at: http://jya.com/otapub.htm

1 0

With my deepest regards....
by admin＠veracruz.net 17 Dec '03

17 Dec '03

I am withdrawing from this list. Not because of the volume of email...that I can deal with...but what I cannot deal with is the volume of garbage and egotistical ranting that seems so prevalent in what should for all sakes and purposes be a discussion of cyphering and security. Apparently the name of this list is designed to mislead...because of all the posts, a grand total of 5% proved worth reading at all. Thank you and good day. --- Adam Breaux admin(a)veracruz.net http://www.veracruz.net {Corporate Page } http://www.abyss.com {Extracurricular} http://www.iso-america.com {In Search Of...} "Violence is a cruel world doing what it does best...break the habit...BE NICE" --- me.

3 2

Advanced cryptography course
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Sat, 28 Dec 1996 12:24:41 -0500 (EST) From: Christof Paar <christof(a)ece.WPI.EDU> To: DCSB <dcsb(a)ai.mit.edu> Subject: Advanced cryptography course MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Christof Paar <christof(a)ece.WPI.EDU> This is an announcment for an advanced cryptography course in the greater Boston area: Here comes the syllabus for the course EE 589R, Advanced Topics in Cryptography and Data Security. The first class will be held on Monday, January 20, at Worcester Polytechnic Institute. The course is a continuation of EE 578/CS 578, Cryptography and Data Security. It will provide a deeper insight into several areas of cryptology which are of great practical and theoretical importance. The three main areas treated are: Detailed analysis and implementation of public key algorithms, advanced protocols, and modern attacks against cryptographic schemes. We will address many topics which are usually only treated in the research literature. Please feel free to get in touch with me any time if you have further questions about the course. Regards, Christof Paar **************************************************************************** Christof Paar http://ee.wpi.edu/People/faculty/cxp.html Assistant Professor email: christof(a)ece.wpi.edu ECE Department phone: (508) 831 5061 Worcester Polytechnic Institute fax: (508) 831 5491 100 Institute Road Worcester, MA 01609, USA *************************************************************************** EE 579R, ADVANCED TOPICS IN CRYPTOGRAPHY AND DATA SECURITY Spring `97 WPI, Monday 5:30-8:30 SYLLABUS Week 1 Efficient implementation of RSA: The Chinese Remainder Theorem. Week 2 Efficient implementation of public-key systems over finite fields: Galois fields theory. Week 3 Implementation of Galois field arithmetic. Week 4 Efficient arithmetic with long numbers: Montgomery and Karatsuba-Ofman algorithm. Week 5 Efficient exponentiation algorithms. Week 6 Attacks against the discrete logarithms: Shank's algorithm and Pollard's-rho method. Week 7 Midterm Exam Week 8 Attacks against the discrete logarithms: Index calculus method. Week 9 Attacks against block ciphers: Differential cryptanalysis. Week 10 Block ciphers from arithmetic operations: IDEA. Week 11 Secret sharing and threshold schemes. Week 12 Zero knowledge identification schemes. Week 13 Selected topics, depending on class interest. Week 14 Final Exam. TEXTBOOK Menezes, van Oorschot, Vanstone: Handbook of Applied Cryptography. CRC Press, October 96, ISBN 0-8493-8523-7, $80 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from this list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Access fees idea dropped for ISPs?
by jim bell 17 Dec '03

17 Dec '03

>Date: Sat, 28 Dec 1996 02:35:29 -0500 (EST) >From: "James M. Cobb" <jcobb(a)ahcbsd1.ovnet.com> >To: jcobb(a)ahcbsd1.ovnet.com >Subject: DAVID AWAKES! 12 28 96 > > Friend, > > 12 27 96 San Francisco Examiner distributes a newsstory > headlined: > > INTERNET SERVICE COMPANIES WIN VICTORY > WHEN FEDS DROP ACCESS FEES > > > The story reports: > > The FCC is in the process of making sweeping changes > to connection, or access, fees that could result in > a huge drop in phone rates for residential and busi- > ness customers. > > > The FCC's counsel for new technology, Kevin Werbach, says > that as part of that process: > > "The commission raised the specific question of wheth- > er [ISPs] should pay access charges.... [The FCC] ten- > tatively concluded that the answer is 'no'." > > > That tentative conclusion tallies with FCC past practice: > > In 1983, the FCC exempted Internet providers from pay- > ing the same kind of per-minute access charges that > long-distance companies pay to connect to local cus- > tomers. > > > The story reports the Internet Access Coalition has: > > ...assiduously pressed the FCC for weeks to ensure > that Internet users have access to a low, flat month- > ly rate. > > > Who are some of these IAC good guys? > > ...Intel, Apple Computer, Netscape Communications, A- > merica Online, IBM, AT&T, Digital Equipment and Compaq > Computer.... > > > The story reports that the FCC connection-fees process: > > ...to trim the $23.4 billion in annual fees that long- > distance carriers pay local phone companies...is expec- > ted to be formally approved in the spring following > public hearings. > > > We'll see what happens when the tentatives roll around! > > The tentatives? > > This latest FCC decision and the PROMISE of "a low, flat > monthly rate" --maybe even for end-users. > > > > Cordially, > > Jim > > > > NOTE. The newsstory's URL: > > http://www.nando.net/newsroom/ntn/info/122796 > /info3_20620.html > > > Wire services contributed to the Examiner's story. > > This critical essay was composed 12 27 96. > Jim Bell jimbell(a)pacifier.com

1 0