December 2003 - cypherpunks-legacy

Re: a comment of Vulis's
by Sean Roach 17 Dec '03

17 Dec '03

Dr Vulis made a comment that there was the threat of persons in favor of the moderator being able to get away with slander while those victims being unable to respond. I assume that the moderator will refrain from such action, but if something were actually cut, I could get it through anyway. At least until majordomo is secured against such intrusion. The list won't be truly secure until no one can request the subscription list. If I felt that I needed to get my message past the moderator, I would just request the complete listing of cypherpunks subscribers, copy that into the Bcc: field of eudora, and forge an address. Now my message would get through, my computer would probably be tied up for an hour or so distributing my statement, but my message would get through. The security necessary to counteract this would be to either make the subscription list unavailable, or delete the actual addresses from the list. For instance Sean Roach <roach_s(a)alph.swosu.edu> would become Sean Roach. Now people could still see who was on the list, but couldn't use it to negate the established distribution system.

1 0

A Prayer For Swiss Banks
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This happened a year ago but I couldn't resist posting it in light of the current political attacks on the privacy of Swiss banks. MANILA, Philippines (Feb 24, 1996 9:45 p.m. EST) - Former Philippine first lady Imelda Marcos presided over a bizarre ceremony on Sunday to mark the 10th anniversary of the People's Power revolution that forced her and her corrupt husband into ignominious exile. Marcos -- notorious shopaholic, convicted criminal and now a legally elected member of the Philippine Congress -- asked God to bless Corazon Aquino and other leaders of the 1986 revolt. But she also asked the Almighty to enlighten Swiss bankers holding some of the estimated $5 billion the Marcoses and their cronies are accused of looting from the national economy. "May the Lord enlighten ... the Swiss banks -- that they might uphold justice and preserve the integrity of their own laws and the laws of confidentiality, trust and basic decency between the banks and their clients," she said in a speech. Two Swiss banks holding some $475 million linked to the Marcoses are currently embroiled in a row over what to do with the money. The Philippine government wants it back but a U.S. court has ordered it distributed to victims of human rights abuses during the late Ferdinand Marcos's 20 years in power. ***** DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMuPAIIVO4r4sgSPhAQFhSQQAiLrFwcvR0CxiZDrG1f6RSysX8ypxe2y4 Az2MejxFj4ACZIw9lCN98pxRwM8QwEQnCo+RKpMEchurk1bx0EEK749+kxpccsw2 qi+VW1lhBLV38YyzAm0vRwK1pwsKuW/E0UjMOvfTfQynRljohiLvLxQDMJ4DQLHi qi+R9K2Gpr0= =wmjK -----END PGP SIGNATURE-----

1 0

"Technical data" exemptions in new crypto regs
by Declan McCullagh 17 Dec '03

17 Dec '03

[Can anyone who knows more than I do answer this? --Declan] --- Date: Mon, 20 Jan 1997 14:45:44 -0500 (EST) To: declan(a)well.com (Declan McCullagh) From: Solveig Bernstein <sberns(a)cato.org> What have the new crypto regs done to the "technical data" and the "public domain" exemptions from ITAR? The problem is this: as I understand it, the Commerce Dept. regs exempt teaching and print presentations generally, but these exemptions do not apply to "encryption software." Does this mean that the exemptions do not apply to *teaching about* encryption software or *publications about* encryption software? Or *only* that the exemptions do not apply to diskette-contained source code or object code. In other words, the new regs might completely decontrol teaching and publication of something like Professor Bernstein's Snuffle. On the other hand, the new regs might, like ITAR, restrict teaching and publication of Snuffle (as well as publication of source code in diskette format). The purpose of the question is to understand whether a First Amendment challenge to the new regs is a First Amendment challenge to a restriction on *teaching, publication, and program distribution* or just a challenge to a restriction on *program distribution.* Solveig Bernstein, Esq. (202) 789-5274 (202) 842-3490 (fax) Assistant Director of Telecommunications & Technology Studies Cato Institute 1000 Mass. Ave. NW Washington, DC 20001 ------------------------- The Netly News Network http://netlynews.com/

1 0

Re: Question on Diffie-Hellman patent
by Andrew Loewenstern 17 Dec '03

17 Dec '03

Tim Dierks writes: > Here's a summary of some relevant crypto patents: > > Name Number Filed Issued Expires > > Diffie-Hellman 4,200,770 Sept. 6, 1977 Apr. 29, 1980 Sept. 6, 1997 > Hellman-Merkle 4,218,582 Oct. 6, 1977 Aug. 19, 1980 Oct. 6, 1997 > RSA 4,405,829 Dec. 14, 1977 Sept. 20, 1983 Sept. 20, 2000 So who's planning on throwing a big party on Sept. 6th? Will Jim Bizos be celebrating? :-) andrew

1 0

Re: GSM technology
by Lucky Green 17 Dec '03

17 Dec '03

At 09:43 AM 1/20/97 -0500, Nurdane Oksas wrote: > Does anyone use ADSL lines? or are they still very expensive? I just had a very interesting talk with somebody from Northern Telecom (Canada's Phone Company). NorTel has apparently skipped ISDN and is now deploying ADSL. Some areas already have access to ADSL at, can you believe this, $60/month. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

1 0

Re: Question on Diffie-Hellman patent
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, On Mon, 20 Jan 1997, Andrew Loewenstern wrote: > Tim Dierks writes: > > Here's a summary of some relevant crypto patents: > > > > Name Number Filed Issued Expires > > > > Diffie-Hellman 4,200,770 Sept. 6, 1977 Apr. 29, 1980 Sept. 6, 1997 > > Hellman-Merkle 4,218,582 Oct. 6, 1977 Aug. 19, 1980 Oct. 6, 1997 > > RSA 4,405,829 Dec. 14, 1977 Sept. 20, 1983 Sept. 20, 2000 > > So who's planning on throwing a big party on Sept. 6th? Will Jim Bizos be > celebrating? :-) I'll call dibs on that. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Server Authentication
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: Forwarded message: > Date: Mon, 20 Jan 1997 09:26:05 -0800 (PST) > From: Eric Murray <ericm(a)lne.com> > Subject: Re: Server Authentication > > I think that you can get access to the server's certificate. > I know you can from the CGI interface. Unfortunately it's the > raw ASN.1 encoded certificate, so you would have to ASN.1 decode it. > Bleah. > > If the SSL handshake completes, then you can assume that the client > has verified and authenticated the server certificate. The only problem > would be that the authentication might not be up to the plugin's standards- > i.e. a connection to www.foo.com is somehow intercepted by > www.ripoff-plugins.com. The server www.ripoff-plugins.com presents a cert > who's name is www.foo.com. The browser correctly presents a pop-up dialog > noting the discrepancy, and the luser operating the client clicks > on the 'OK' button, allowing the SSL handshake to finish. Oops. Isn't LDAP v3 supposed to answer some of these questions related to server authentication as well anonymity of the users site (if desired)? Jim Choate CyberTects ravage(a)ssz.com

1 0

Re: GSM technology
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Steve Shear <azur(a)netcom.com> writes: >> [very useful explanation of GSM TDMA, and the new HSCSD] > >64 kbit/s tied to ISDN is very nice technology. > >> ENCRYPTED GSM LINKS >> If the GSM phone includes a data port, as some already do, just connect >> your laptop, dial your ISP and 'push' the encrypted traffic over that link >> (e.g., using TCP/IP and PGPfone). > >This would obviously be possible, but to my mind reduces the appeal of >the system. Not every one has a laptop. [snip] Retrofitting the stonger encryption (e.g., IDEA) to some existing GSM phones may be practical (as I've discussed in previous postings), but unless the service providers support the stonger crypto (seems very unlikely at the moment)parties at the other end of the line will need an Eric Blossom-like device or a laptop running PGPfone. I can see no way around this. > >Also, the cell phone tarriffs may be higher if you need higher >bandwidth to get the software only voice codec implementations in >PGPfone to produce equivalent full-duplex voice quality to that >expected from a digital mobile phone. I may be wrong, but the faster laptops are already able to support the GSM codes and rates in PGPfone (or could). However, most of the service providers may only be offering 9.6kb/s GSM data links at this time, and this would surely impact voice quality. If or when 28.8kb/s data is common via GSM voice links via PGPfone should be better than the default GSM coded voice. --Steve PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear (N7ZEZ) | Internet: azur(a)netcom.com Lamarr Labs | Voice: 1-702-658-2654 7075 West Gowan Road | Fax: 1-702-658-2673 Suite 2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Internet, electronic currency and wireless development 1935 will go down in history! For the first time a civilized nation has full gun registration! Our streets will be safer, our police more efficient, and the world will follow our lead in the future! --Adolf Hitler

1 0

Server Authentication
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: Forwarded message: > Date: Mon, 20 Jan 1997 09:26:05 -0800 (PST) > From: Eric Murray <ericm(a)lne.com> > Subject: Re: Server Authentication > > I think that you can get access to the server's certificate. > I know you can from the CGI interface. Unfortunately it's the > raw ASN.1 encoded certificate, so you would have to ASN.1 decode it. > Bleah. > > If the SSL handshake completes, then you can assume that the client > has verified and authenticated the server certificate. The only problem > would be that the authentication might not be up to the plugin's standards- > i.e. a connection to www.foo.com is somehow intercepted by > www.ripoff-plugins.com. The server www.ripoff-plugins.com presents a cert > who's name is www.foo.com. The browser correctly presents a pop-up dialog > noting the discrepancy, and the luser operating the client clicks > on the 'OK' button, allowing the SSL handshake to finish. Oops. Isn't LDAP v3 supposed to answer some of these questions related to server authentication as well anonymity of the users site (if desired)? Jim Choate CyberTects ravage(a)ssz.com

1 0

Re: GSM technology
by Steve Schear 17 Dec '03

17 Dec '03

>Steve Shear <azur(a)netcom.com> writes: >> [very useful explanation of GSM TDMA, and the new HSCSD] > >64 kbit/s tied to ISDN is very nice technology. > >> ENCRYPTED GSM LINKS >> If the GSM phone includes a data port, as some already do, just connect >> your laptop, dial your ISP and 'push' the encrypted traffic over that link >> (e.g., using TCP/IP and PGPfone). > >This would obviously be possible, but to my mind reduces the appeal of >the system. Not every one has a laptop. [snip] Retrofitting the stonger encryption (e.g., IDEA) to some existing GSM phones may be practical (as I've discussed in previous postings), but unless the service providers support the stonger crypto (seems very unlikely at the moment)parties at the other end of the line will need an Eric Blossom-like device or a laptop running PGPfone. I can see no way around this. > >Also, the cell phone tarriffs may be higher if you need higher >bandwidth to get the software only voice codec implementations in >PGPfone to produce equivalent full-duplex voice quality to that >expected from a digital mobile phone. I may be wrong, but the faster laptops are already able to support the GSM codes and rates in PGPfone (or could). However, most of the service providers may only be offering 9.6kb/s GSM data links at this time, and this would surely impact voice quality. If or when 28.8kb/s data is common via GSM voice links via PGPfone should be better than the default GSM coded voice. --Steve PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear (N7ZEZ) | Internet: azur(a)netcom.com Lamarr Labs | Voice: 1-702-658-2654 7075 West Gowan Road | Fax: 1-702-658-2673 Suite 2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Internet, electronic currency and wireless development 1935 will go down in history! For the first time a civilized nation has full gun registration! Our streets will be safer, our police more efficient, and the world will follow our lead in the future! --Adolf Hitler

1 0