December 2003 - cypherpunks-legacy

Dale on a tear (again)
by mixmaster＠remail.obscura.com 17 Dec '03

17 Dec '03

At 06:04 PM 1/5/97 -0800, Dale obviously wrote: :I'll bet Hitler was disenchanted by the declaration against him by the World Jewish Congress. : :I'll bet Andrew Jackson was disenchanted with the decisions of the :Seminole Indian leaders to not just lay down and die. : :And now Sandy is disenchanted. What a hypocritical asshole. What can one make of this fellow Dale? Either he is Dr. V's mouthpiece or he has gone off the deep end. A pity in either case -- a mind is a terrible thing to waste.

1 0

Re: Relative Strength of 40-bit Crypto Implementations
by Rick Smith 17 Dec '03

17 Dec '03

: A client asked me today about where he could find evidence of the : relative strength of different encryption algorithms, when all are : restricted to 40-bit keys. He assumed dot-Gov was going to restrict his : export product to the 40-bit limit, but he wanted to provide the strongest : security he could within that limitation. There is a tiny technical wrinkle here -- the simpleminded approach is to use a 40 bit secret key appended to a constant, the smarter approach is to use some disclosed random data that, combined with 40 secret bits, produces a much longer key. It's like the salt in Unix passwords. The simple approach can allow an attacker to use a dictionary attack. The smarter approach means that the algorithm's full key length gets used. So, for example, you have 128 bit RC4 in which 88 bits are random but disclosed while the remaining 40 bits are still secret. The only practical problem is disclosure of the extra random bits, which the government expects the software to do. This is one of the uses of the big chunks of random data that host exchange in SSL V3. In earler SSLs they built the disclosed bits right into the protocol, an explicit field for disclosing part of the key. Rick. smith(a)sctc.com secure computing corporation

1 0

Re: At the risk of getting flamed :)
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

[CC'd to 2 mailing lists] Kelly G. <cypherpunks(a)count04.mry.scruznet.com> writes: > Hi Dimitri, > did the freon tape cleaner work out on those > papers that had gotten soaked?? you hadnt let me know the results.. Thanks - I passed on your advice, but I think they decided to get rid of almost everything... It's better to keep stuff on optical storage anyway. > I caught your article in phrack. Hmm you do indeed know how > to abuse mail and news protocols... I made the cancelbot publicly available because I don't believe in "security by obscurity". Usenet cancels are broken and should be ignored. I find it indicative that what I call outing a well-known and widely abused security hole, you call abuse. > have you any got any > ideas of how to get cypherpunks back on track and at least > eliminate the commercial spamming of the list that is occurring Cypherpunks have been forging Usenet posts from "freedom-knights(a)jetcafe.org" to alt.business.* et al, asking for business opps in e-mail. I'm thinking of forwarding the resulting spam on f-k back to cypherpunks. In this case, the best way to prevent unsolicited junk e-mail is not to forge solicitations for such e-mail in the names of the people you disagree with in the first place. > n.b. I still class you as a cypherpunk even though you have a private > war going on with most of the rest of the list.. You're wrong. I happen to advocate absolute freedom of speech, privacy, anonymity for everyone, including those I don't agree with. These principles are totally alien to "cypher punks". I also happen to have done a lot to bring computer networks and privacy technology to places and people who still wouldn't have had it otherwise - perhaps more than any "cypher punk". "Cypher punks" are a primarily gay social club who advocate privacy for themselves, but not to their many enemies. Do you read the traffic on their mailing list? "Crypto is only for the elite." "Freedom of speech is only for those who use it responsibly." I think Dale Thorn hit the nail right on the head when he described "cypher punks" as security people. Their interest is not the wide deployment crypto technology (that's my agenda). They're more interested in silencing the "homophobes" (meaning, anyone disagreeing with a "cypher punk", irrespective of whether it has anything to do with homosexuality). They want privacy technology only for their paying customers, and only if the customers use it "responsibly", i.e. don't say something the 'punks find objectionable. Take a look at Sameer's net.scum web page for some examples. When he got sued by SPA because his customers pirated software, he claimed that he doesn't censor based on content. At the same time he pulled a plug on an account used to display a web page critical of Tim May, calling it "libel". No wonder Sandy now whores for this pimp. John Gilmore complaint to the upstream sites of his many "enemies" when he's outed as a cocksucker (clearly content-based), while claiming (through his mouthpiece Timmy May) that he only censors based on volume, not content. > also note that sandys offer earlier of flying you out here to meet us > was quite real and your safety was assured..(I would have guarenteed > your safety myself) , we just often find out here on the west coast that > conflict resolution happens best face-to face in quiet discussion. > After all you know me face to face and personally! Re-read some of the shit Sameer's whore has been posting to c-punks. People who voluntarily submit to censorship by Sandy deserve pity. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1

infowar - defense - DOD
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

DoD Information Warfare (IW) Department of Defense Topic(s): Government BPR Project Reports [Home] Document Listing by: [Title] [Author] [Topic] [Coverage] [Source] Abstract: Lead Agency: OASD (C31) Functional Area: Command and Control Project Title: DoD Information Warfare (IW) Functional Area: Command & Control Lead Agency: OASD(C3I) Summary: To achieve information superiority in support of national military strategy, a joint DoD team reengineered DoD Information Warfare processes. A high-level model was developed to provide a consensus view of key processes and data. This evaluation will lead to the development of a national IW policy, an assessment of IW vulnerability, and a standard risk management process. Description: The mission of this project was to develop a baseline activity model for current IW processes, identify improvement opportunities, and recommend a plan for the application of Business Process Reengineering to IW. Representatives from the Joint Chiefs of Staff (JCS), Army, Navy, Air Force, Marines, Defense Intelligence Agency, National Security Agency, and the Defense Information Systems Agency participated in the project. Improvements: Nine specific improvements were identified including: Development of a joint, coordinated effort to identify and assess the vulnerabilities of military operations and systems and the defense information infrastructure. Development of a standardized process for risk management. Development of a national policy for the conduct of IW. Benefit: The improvements will provide an improved ability to achieve information superiority in support of national military strategy by affecting adversary information, information systems, and information processes while leveraging and defending U.S. information, information systems, and information processes. Predicted Savings: Not reported Investment: Not reported Point of Contact: LCOL Liz Anderson OASD (C3I) IW 6000 Defense Pentagon Washington, D.C. 20301-6000 (703)614-0624 DSN: 224-0624 INFOWAR.WPD 3252D.html

1 0

RSA and Cylink settle
by Bruce Schneier 17 Dec '03

17 Dec '03

Subj: Cylink and RSA Data Security Reach Legal Settlement; Public Key Encryption Compa Date: Tue, Jan 7, 1997 7:52 AM EST From: AOLNewsProfiles(a)aol.net REDWOOD CITY, Calif.--(BUSINESS WIRE)--Jan. 7, 1997--RSA Data Security, Inc., a wholly-owned subsidiary of Security Dynamics Technologies, Inc. (NASDAQ:SDTI), and Cylink Corporation (NASDAQ:CYLK), today announced a comprehensive global settlement of their long-standing legal disputes. The settlement ends all outstanding litigation between Cylink and RSA. The two companies reached an amicable resolution of their disputes. As part of the settlement, Cylink granted to RSA all necessary rights to Cylink's Stanford patents, and RSA granted to Cylink a license to RSA's cryptographic software toolkits. For both parties, the settlement ends further prolongation of a legal dispute that has been costly and distracting. RSA is fulfilling the promise made to its customers to resolve the disputes with Cylink. Cylink, under its new president and chief executive, is refocusing all of its energies on providing end-to-end data security products and solutions, and has the ability to incorporate RSA or other technologies to meet customer requirements. "We are very pleased that what had so long seemed to be an intractable problem has, within the space of 10 days, now been resolved by the new management at Cylink," said James Bidzos, president of RSA. "I worked well with Fernand Sarrat while he was at IBM, and that working relationship helped us reach this agreement so swiftly. This agreement turns long-time antagonists into companies that are already exploring ways of working together constructively, to the benefit of the industry as a whole." Fernand Sarrat, president and chief executive officer of Cylink, said, "We are setting out on an aggressive new course at Cylink in which old disputes are an unnecessary distraction. RSA will be one of our strategic suppliers and we anticipate focusing totally on the needs of our customers and the enormous market opportunity before us." RSA Data Security, Inc. RSA Data Security, Inc., a wholly-owned subsidiary of Security Dynamics Technologies, Inc. (NASDAQ: SDTI), is the world's brand name for cryptography, with more than 75 million copies of RSA encryption and authentication technologies installed and in use worldwide. RSA technologies are part of existing and proposed standards for the Internet and World Wide Web, IT4, ISO, ANSI, IEEE, business, financial and electronic commerce networks around the globe. The company develops and markets platform-independent developer's kits and end-user products and provides comprehensive cryptographic consulting services. Founded in 1982 by the inventors of the RSA Public Key Cryptosystem, the company is headquartered in Redwood City, Calif. Cylink Corporation Cylink Corporation (NASDAQ: CYLK) is a leading worldwide supplier of information security solutions, providing the most comprehensive portfolio of public key cryptographic hardware and software products available today. Cylink's products enable secure transmissions over local area networks (LANs), wide area networks (WANs), public packet switched networks such as the Internet, asynchronous transfer mode (ATM) and frame relay networks. Cylink, headquartered in Sunnyvale, Calif., is also the leader in outdoor spread spectrum microwave radio communications. Cylink's customers include national and multinational corporations, financial institutions and government organizations. For more information about Cylink and its products, call the fax-on-demand number 800/735-6614, or visit the company's Web site at http://www.cylink.com. --30--mg/sf* eh CONTACT: Cylink Paula Contos Dunne, 408/523-5993 pdunne(a)cylink.com or Edelman Worldwide Ina McGuinness, 415/433-5381 x 213 imcguinn(a)edelman.com or Patrick Corman Patrick Corman, 415/326-9648 Corman(a)cerfnet.com ************************************************************************ * Bruce Schneier 2,000,000,000,000,000,000,000,000,002,000, * Counterpane Systems 000,000,000,000,000,000,002,000,000,002,293 * schneier(a)counterpane.com The last prime number...alphabetically! * (612) 823-1098 Two vigintillion, two undecillion, two * 101 E Minnehaha Pkwy trillion, two thousand, two hundred and * Minneapolis, MN 55419 ninety three. * http://www.counterpane.com ************************************************************************

2 1

Re: The Upcoming DES Challenge
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

Orbital mind control lasers made mpd(a)netcom.com (Mike Duvos) write: >Peter Trei (trei(a)process.com) writes: >>1. I'm astonished at the low level of reaction RSA's announcement that they >>will be sponsoring a DES Challenge, with a $10,000 cash prize. >I'm certainly jumping up and down and cheering. I said a while back that the >life expectancy of DES would be about two weeks if anyone forked over serious >cash. I'm still a bit nervous about what the reaction will be though - won't the US government (and anyone else pushing DES) be able to say "It took 10,000 Pentiums several weeks, noone would bother doing that, so it's safe" (with a possible side order of "Safer-SK64 is 256 times as secure, anyone we really like can use that provided they hand over the keys in advance"). Peter.

4 3

Re: IWD_ism
by Thaddeus J. Beier 17 Dec '03

17 Dec '03

John Young wrote: > > 1-6-96. > > "Information-Warfare Defense Is Urged" > > The Defense Science Board said the Pentagon should > launch counterattacks against computer hackers by > injecting the attackers' computers with "a polymorphic > virus that wipes out the system, takes it down for weeks." > This is completely unbelievable, who are these people? I believe that the polymorphic virus is originally from the classic "Shockwave Rider" and was seen as an impossible fiction even in that book of improbable fiction. -- Thaddeus Beier thad(a)hammerhead.com Visual Effects Supervisor 408) 287-6770 Hammerhead Productions http://www.got.net/people/thad

3 2

[CRYPTO] Quadratic residues
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Timothy May's family tree goes straight up. All of his ancestors were siblings, to dumb to recognize each other in the dark. /\ o-/\ Timothy May ///\|/\\\ / /|\ \

1 0

Great Opportunity!
by AllTheCash＠aol.com 17 Dec '03

17 Dec '03

I thought this may be of interst to you! I recently researched a company who has all the traits of becoming a key player in the Health & Nutrition industry. The companies name is I.D.E.A. Concepts and They are Steamrolling the competition! ...FREE Multi-Page Custom Website Does All The Work For You! ...No Sign Up Fees! ...Incredible Pay Structure..You recieve your checks every 2 weeks! ...Top Notch support from Doctors and Biotech News letters! It's hard to really sum up all the benefits of this outfit in one short letter so please take a look for yourself at what they have to offer... .....What Do You Have To Lose! http://www.multi-level.com/millennium/quickmoney.html Best Of Luck, D.M.C.

1 0

Re: Modified Token Posting Scheme
by ed.falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

> > > How about this simple policy scheme: > > > > > > 1) posts from known list members forwarded to list automatically > > > 2) posts with "approval cookie" also forwarded automatically > > > 3) otherwise, forwarded only after approval by moderator, > > > > I.e., libel from Timmy May, Ray Arachelian, and the rest of the gang > > is approved automatically, and when a victim tries to defend himself > > and to point out that Timmy May is a liar, the response is delayed > > and probably rejected by the moderator. > > > > It's been said that the best response to speech one doesn't like > > is more speech. "Cypher punks" want to take away the victim's > > ability to respond to the lies being posted on their mailing list. > > You are far from being the victim of anything. If anything you're a big > huge thug who spams the list, posts racist flames, posts homophobic > flames, uses social engineering to find out info on his "enemies" and > then posts that info online with requests that others send flames to that > person's employers. Besides, in my scheme, the first two options are explicitly there to avoid moderation. Just post under your real name or generate an authentication cookie.

1 0