December 2003 - cypherpunks-legacy

Re: KRAP
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 05:21 PM 3/26/97 -0600, Toto wrote: >Jeremey Barrett wrote: > >> > Key Recovery Agents Plan > >> I dunno, but they couldn't have picked a better acronym :-) > > Good eye. I read about it and never noticed their >truth-in-advertising acronym. > > You are hereby awarded 50,000,000 Toto Eca$h credits. > (1,000,000,000,000,000,000 = 1 peso) Actually the anacronym was posted a couple of months ago. (Check the archives, if they still exist.) In the original posting, I pointed out that if they are the Key Recovery Alliance, then what they produce mut be Key Recovery Alliance Products (aka KRAP). But then that was on a parellel universe/listserv. -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMzqe2OQCP3v30CeZAQGK1Qf9HTYic3rKPZMVqd2uyfUbGTIP9J1vXF1X h4ikOzKUR5gf3vhRDzxdViEA/KcE/4neXgZZe2tpB/H5XEiPhxMg5IksyXhSTgDx hC+9kpRMlO7hj8JxHA3dtsqzZjUSdt3ws8YjfmXaz/76HBG9FpAYNyYg7xBheYd/ 5J4mfSQS5cn2libq0B1gAnDxWROJ6NxywpD8fVq46JoxE+vJdUtR2CRkOe4HOvbr Zh98FBx6VH1i1xUo6LDlrqI3YLm6VfAjrhOU6wTImiSnuZdh276cbR1FtqQxdz8o X01W2Agug/UaEtnXYnzXxkFuIU8AB46z4nDTj3ZTlKw7fmJCYAWIXw== =skFo -----END PGP SIGNATURE----- --- | "Mi Tio es infermo, pero la carretera es verde!" | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Higher Sources / Index
by Bubba Rom Dos 17 Dec '03

17 Dec '03

1 0

Heaven's Gate / Main
by Bubba Rom Dos 17 Dec '03

17 Dec '03

1 0

[NTSEC] CIFS Authentication Protocol Errata (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

=====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "If you're gonna die, die with your|./|\. ..\|/..|sunder(a)sundernet.com|boots on; If you're gonna try, just |/\|/\ <--*-->| ------------------ |stick around; Gonna cry? Just move along|\/|\/ ../|\..| "A toast to Odin, |you're gonna die, you're gonna die!" |.\|/. .+.v.+.|God of screwdrivers"| --Iron Maiden "Die With Your Boots on"|..... ======================== http://www.sundernet.com ========================= For with those which eternal lie, with strange eons even death may die. ---------- Forwarded message ---------- Date: Wed, 26 Mar 1997 23:21:52 -0800 From: Paul Leach <paulle(a)microsoft.com> To: "'cifs(a)listserv.msn.com'" <cifs(a)listserv.msn.com>, "'WWW-SECURITY(a)ns2.rutgers.edu'" <WWW-SECURITY(a)ns2.rutgers.edu>, "'NTBUGTRAQ(a)RC.ON.CA'" <NTBUGTRAQ(a)rc.on.ca>, "'ntsecurity(a)iss.net'" <ntsecurity(a)iss.net> Subject: [NTSEC] CIFS Authentication Protocol Errata Sharp eyed reviewers have already caught the following errors in CIFS-Auth (CIFS Authentication Protocol), draft 3. A new version will be forthcoming shortly. In paragraph 2 of section 1.1, it should say: The response is computed by DES encrypting a challenge (a nonce) selected by the server with three keys derived from the user's password. In section 1.2, [s]<n:m> be the "n" bytes of s starting at byte "m". should be clarified to be: [s]<n:m> be the "n" bytes of s starting at byte "m" (the first byte is numbered 0). In step 1 of section 1.4, was: Kb = [Ks]<7:8> Kc = [Ks]<15:2>, Z(5) should be: Kb = [Ks]<7:7> Kc = [Ks]<14:2>, Z(5) In step 4 of section 1.4 was: Kb' = [Ks']<7:8> Kc' = [Ks']<14:2>, Z(5) should be: Kb' = [Ks']<7:7> Kc' = [Ks']<14:2>, Z(5) and Km' = Ks, R should be Km' = Ks', R In step 6 of section 1.4, C: MS' = [MD5(Km, SN, Msessr, CC, CS)]<8> should be C: MS' = [MD5(Km, SN, Msessr,)]<8> In step 2 of section 1.5, there is a missing right bracket: S->C: Mrsp, [MD5(Km', SN', Mrsp)<8> should be: S->C: Mrsp, [MD5(Km', SN', Mrsp)]<8> > ---------- > From: Paul Leach > Sent: Tuesday, March 25, 1997 1:18 PM > To: 'cifs(a)listserv.msn.com'; 'WWW-SECURITY(a)ns2.rutgers.edu'; > 'NTBUGTRAQ(a)RC.ON.CA'; 'ntsecurity(a)iss.net' > Subject: CIFS Authentication Protocol Review > > We are releasing preliminary drafts of the proposed fixes to the > CIFS/SMB authentication protocols for widespread public review. If > they pass review, they will be in Service Pack 3 for NT 4.0. > > The original protocol from which the new version descends was designed > more than a decade ago; recently, quite a few weaknesses have been > found in those previous versions. This latest revision is an attempt > to repair those weaknesses with as small a change to the protocol as > possible, so that it can be incrementally and rapidly deployed. > > All three documents are available in .doc, .txt and postscript. > > Information on how to get them is available from: > ftp://ftp.microsoft.com/developr/drg/cifs/sec.htm > > All followup discussion should be on the CIFS mailing list at > CIFS(a)listserv.msn.com. > > Your comments are actively solicited. > ------------------------------ > Paul J. Leach > paulle(a)microsoft.com >

1 0

ZDNet Members-Only: JavaOne Discount!
by announce＠lists.zdnet.com 17 Dec '03

17 Dec '03

----------------------------------------------------------------------------- ZDNET ANNOUNCEMENT 3/26/97 ----------------------------------------------------------------------------- Greetings from ZDNet! Ziff-Davis, a Silver co-sponsor of JavaOne(sm) has an exclusive offer for ZDNet Members: Attend JavaOne(sm) on April 2-4 for a *SPECIAL* low rate of $995, a $200 discount! What: JavaOne, Sun's 1997 Worldwide Java Developer Conference Where: Moscone Convention Center, San Francisco, California When: April 2-4, 1997 Here's your chance to get in-depth technical knowledge directly from the source: Sun's Java Development Team. JavaOne(sm) is three very full days of intensive Java learning from the people who invented Java. If you are an Internet developer or want to be one, you won't want to miss it! Keynotes will be delivered by Scott McNealy, James Gosling, Alan Baratz, Vinton Cerf, Eric Schmidt, and Jeff Johnson. In addition to the three day conference, there will be loads of extracurricular activities that will further your opportunity to learn about Java and to meet other Java developers. For complete information on the conference, visit the JavaOne web site at http://java.sun.com/javaone/ To register at this special rate of $995, please call 800-668-2741 (US & Canada), or 415-372-7077 (International) before March 28, and refer to source code "JAVAZIFF." If space is still available, you can register at this special rate on-site too, but you will have to mention source code "JAVAZIFF." For more Information: http://java.sun.com/javaone/ 800-668-2741 (US & Canada) 415-372-7077 (International) _______________________________________________________________ ZDNet Announcements are periodic notices of new features, special events and free offers available to members of ZDNet. --To subscribe to ZDNet Announcements, please send mail to: announce-on(a)lists.zdnet.com You can leave the subject and body blank. --To unsubscribe to ZDNet Announcements, please send mail to: announce-off(a)lists.zdnet.com You can leave the subject and body blank. _______________________________________________________________ Powered by Mercury Mail: http://www.merc.com

1 0

heavensgate.com?
by Declan McCullagh 17 Dec '03

17 Dec '03

Does anyone have a copy of the heavensgate.com web pages? I've found a couple mirrors of Higher Source already. (If you don't know what I'm talking about, look at http://www.yahoo.com/headlines/970327/news/stories/suicides_7.html) If you want to send something anonymously, finger -l declan(a)eff.org for my PGP public key. -Declan

4 4

Microsoft ammunition
by Toto 17 Dec '03

17 Dec '03

>From Infoworld: March 24, 1997 Coda dependency may contribute to the fall of the great Gates empire Last week's column demonstrated that Microsoft is unable to respond to the network computer in its usual "co-opt the technology" manner -- a fact that may signal the turning point in the company's history. (Why am I leaving Intel out of this prediction, you ask? Because it is in a far more flexible position than Microsoft. Its chips can run anything. Microsoft needs them to run Windows.) Add to this NC threat the mounting troubles for Microsoft, and it's no wonder there's no joy in Redmond tonight. Look at the trends. According to International Data Corp., Microsoft SQL Server for Windows NT has been losing significant market share for two years to competing products that run on multiple platforms. Microsoft's Wolfpack clustering technology is turning out to be a Chihuahuapack. (See "Toothless Wolfpack," March 17.) Seemingly endless rapid-fire announcements by ISVs to support standards such as Java, JDBC, LDAP, IMAP4, and CORBA are shoving Microsoft's TAPI, MAPI, ISAPI, "SLAP-HAPI," and a host of other Microsoft-centric specifications right out of the limelight. By now you have undoubtedly heard more than you want to hear about the fellow in Germany who demonstrated that a malicious ActiveX control can secretly empty your bank account. Leaks, bugs, and hastily cobbled service packs have been drawing attention to the immaturity of Windows NT. And, most recently, college kids have found more holes in Internet Explorer than it takes to fill the Albert Hall. (My apologies to those outside the Beatles generation who don't get the reference.) Meanwhile, Microsoft has crushed or alienated practically every potential partner that might otherwise have helped it out of its current fix. Network hanky panky This latest Microsoft Internet Explorer security dustup really isn't a bug, it's a feature. Internet Explorer was built to make it easy to launch a file, whether that file is on your hard drive or sitting on a server somewhere in Freedonia. Unfortunately, it took someone outside Microsoft to realize last August that the file one launches from Explorer could be a Word for Windows document packing a malevolent macro. Then, in the past few weeks, .URL, .LNK, and .ISP files were added to the danger list. Then it surfaced that Microsoft's Common Internet File System opens the door to network hanky panky. This is clearly a company that isn't used to thinking outside of the universe of the local LAN. The Microsoft patches configure Explorer to ask your permission before launching a potentially dangerous file type (similar to Netscape Navigator). OK, but this solution makes it virtually impossible for Microsoft or anyone else to integrate a browser seamlessly into the Windows desktop. If seamless, safe desktop access to remote files on the Internet is the goal, Microsoft is spinning its wheels. There is really only one way to provide these features without introducing a local security risk. You have to eliminate the possibility that anything you run can affect your local drives. Better still, get rid of your local drives. In short, a Java-based browser is a good way to do it, but a Java-based network computer is best. Which brings us back to the conclusion of last week's column. But, if you're tired of the repetition, here's a reason you should sit through another sermon: RandomNoise's Coda. Coda lets you design entire Web pages in Java rather than use a mixture of HTML content, tags, and Java applets. Most pundits seem to be fixated on the fact that Coda gives you a way to display fancy fonts that HTML can't handle. Our own Bob Metcalfe is the only one I know of who addressed the bigger picture. (See From the Ether, March 10). He pointed out that Coda may lead the way toward replacing HTML with Java. A Java-based Web page removes the distinction between application and data. It presents data just as an HTML page would, but every element on the screen has the potential to be an interactive part of a sophisticated application. In other words, the Web page becomes both powerful and safe enough to earn the right to be the new desktop user interface to the world. But Internet Explorer and Windows are nowhere in that equation. So is Microsoft in a batting slump, or is this the beginning of the end? Personally, I think Microsoft can pull out of this one. All it would have to do to fully recover is turn Windows NT into Unix, drop Distributed Component Object Model for CORBA, phase out its Windows-centric protocols for platform-independent standards, adopt NetWare's Novell Directory Services, kill ActiveX, port SQL Server to several different platforms, and abandon the idea of integrating Internet Explorer into the desktop. Well, I'm going to take a nap. Wake me when all that happens.

3 2

Re: PSYOPS/infowar
by Robert Hettinga 17 Dec '03

17 Dec '03

This is surely going to piss some people off, but let's some fun with this, shall we? At 9:30 pm -0500 on 3/29/97, Greg Broiles wrote: > According to Ronald Duchin, graduate of the US Army War College and > former special assistant to the Secy of Defense and director of the > Veterans of Foreign Wars, activists fall into one of four categories: > radicals, opportunists, idealists, and realists. He recommends a > three-step strategy to neutralize activists: > > 1. isolate the radicals Tim May Kelly Goen Phil Zimmermann (then) Belize, say > 2. "cultivate" the idealists CFP (a virtual terrarium :-)) EFF (agrabiz!) Phil Zimmermann (now) Eric Hughes Michael Froomkin Any cypherpunk who's actually making money on this stuff :-). Anguilla Vanuatu Me ;-) > 3. co-opt the realists into agreeing with industry RSA Mondex (a little hand-biting here, on my part) x.blabla SET-folk David Chaum Hong Kong Indonesia The Phillipenes Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA Lesley Stahl: "You mean *anyone* can set up a web site and compete with the New York Times?" Andrew Kantor: "Yes." Stahl: "Isn't that dangerous?" The e$ Home Page: http://www.shipwright.com/

1 0

FCC Internet Paper
by John Young 17 Dec '03

17 Dec '03

As summarized below the FCC has issued a long paper: "Digital Tornado: The Internet and Telecommunications Policy." To supplement the FCC's PDF and WordPerfect versions we've converted it to HTML: http://jya.com/oppwp29.htm (270K; 189K images) ------- From: Robert Cannon <cannon(a)DC.NET> Subject: FCC Releases staff Working Paper on Internet policy To: CYBERIA-L(a)LISTSERV.AOL.COM News Release -- March 27, 1997 DIGITAL TORNADO: THE INTERNET AND TELECOMMUNICATIONS POLICY FCC Staff Working Paper on Internet Policy The FCC's Office of Plans and Policy (OPP) today released a staff working paper analyzing the implications of the Internet for the FCC and telecommunications policy. OPP Working Paper No. 29, "Digital Tornado: The Internet and Telecommunications Policy," was written by Kevin Werbach, Counsel for New Technology Policy. OPP periodically issues working papers on emerging areas in communications; these papers represent individual views and are not an official statement by the FCC or any FCC commissioner. "Digital Tornado" represents the first comprehensive assessment of the questions the Internet poses for traditional communications policy. A central theme running through the paper is that the FCC, and other government agencies, should seek to limit regulation of Internet services. In framing his approach, Werbach states: "Because it is not tied to traditional models or regulatory environments, the Internet holds the potential to dramatically change the communications landscape. The Internet creates new forms of competition, valuable services for end users, and benefits to the economy. Government policy approaches toward the Internet should therefore start from two premises: avoid unnecessary regulation, and question the applicability of traditional rules." After providing an analytical framework to understand the forces driving Internet growth, and describing the Internet's development and architecture, the paper addresses three primary areas: CATEGORY DIFFICULTIES Policy and legal questions arising from the fact that Internet- based services do not fit easily into the existing classifications for communications services under federal law or FCC regulations. PRICING AND USAGE Policy questions arising from the economics of Internet access, including assertions by local telephone companies that current Internet pricing structures result in network congestion, and arguments by Internet service providers that telephone companies have not upgraded their networks to facilitate efficient transport of data services. AVAILABILITY OF BANDWIDTH Regulatory and technical issues affecting the deployment of technologies promising to enable high-speed Internet access to the home and to businesses, including the implications for the Internet of the FCC's role in promoting universal service. The paper is available on the FCC World Wide Web site, <http://www.fcc.gov/>. The file is available for online viewing in PDF (Adobe Acrobat) format at http://www.fcc.gov/Bureaus/OPP/working_papers/oppwp29.pdf or for downloading in WordPerfect format at http://www.fcc.gov/Bureaus/OPP/working_papers/oppwp29.wp Copies may also be purchased from International Transcription Services, Inc., 1919 M Street, NW, Room 246, Washington, DC 20554, (202) 857-3800. -FCC-

1 0

WebWorld 19
by Bubba Rom Dos 17 Dec '03

17 Dec '03

1 0