December 2003 - cypherpunks-legacy

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The main french PGP HomePage is now here : http://www.geocities.com/SiliconValley/Bay/9648 The page is called "PGP POUR LES FRANCAIS" ("PGP for the french people") and is wholly in french language. You can find here a lot of informations about PGP 2.x and 5.x and a detailed PGP history. A bientot :) ----------------------------------------------- PGP pour les français http://www.geocities.com/SiliconValley/Bay/9648

1 0

Biometrics for the Masses
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Tue, 16 Dec 1997 16:05:08 -0800 From: jmuller(a)brobeck.com (John D. Muller) Subject: Biometrics for the Masses To: dcsb(a)ai.mit.edu Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: jmuller(a)brobeck.com (John D. Muller) December 13, 1997 Bank of America, Kroger, Mr. Payroll Agree To Test Automated Check Cashing Consumers and Retailers Benefit From Facial Biometric Technology <Picture> (Fort Worth, Texas) - Fort Worth-based Mr. Payroll Corporation , a wholly owned subsidiary of Cash America International (NYSE:PWN), along with Bank of America and The Kroger Company announced today they have entered into an agreement to test the Mr. Payroll automated check-cashing machine. The machines will be installed on December 16 in three Dallas area Kroger locations. Mr. Payroll, the world's first self-service check-cashing and automated teller machine, uses facial biometrics (the same technology now used to authenticate identity in the Pentagon) to identify users. This technology allows people with and without a bank account or photo identification to cash their payroll, government or personal check. "We're excited to have Bank of America and Kroger join us in providing consumers with 24-hour access to check-cashing services. This is a milestone for Mr. Payroll," said Mr. Payroll President Mike Stinson. "We're looking forward to testing this new check cashing technology in these Kroger locations," said Bank of America Vice President David McCary. "Providing financial services at popular retail locations enhances convenience for consumers." According to Manager, Store Services and Technology Jim Gehling, Kroger expects automated check cashing provided by Mr. Payroll to set a new standard in customer service in select stores. "To help introduce our shoppers to the machine, we're going to offer free check cashing through January 31, 1998," Gehling said. Consumers can look for the new machines in Texas at the Kroger stores located at 536 Centennial in Richardson, 235 E. FM 1382 in Cedar Hill, and 4142 Cedar Springs in Dallas. Mr. Payroll, which guarantees 100 percent of every check, has successfully cashed more than 25,000 checks since June 1997, when the first machine was installed at a convenience store in Fort Worth, Texas. To date, Mr. Payroll machines are operating in 18 convenience store locations in Arkansas, California, Colorado, Georgia, Nevada, Oklahoma, South Carolina and Texas. Bank of America Texas is a subsidiary of BankAmerica Corporation (NYSE:BAC), which has nearly 2,000 branches in 11 states. At September 30, 1197, BankAmerica had assets of $258 billion and deposits of $171 billion. Mr. Payroll is a registered trademark of Mr. Payroll Corp. All products or service names mentioned are the trademarks of their respective owners. For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

A gauntlet thrown down by PC-Magic?
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

On Tue, 16 Dec 1997 at 00:02:27 -0800, "Alex Woolfson" <abdiel(a)worldnet.att.net> wrote: > Hey guys > > Just FYI here is the response I got from PC-Magic. >> Thanks for the feedback. We are considering an established >> standard. >> >> BTW, for all the "crap" we get from supposed crypto experts >> no one has come close to breaking our method. It does make >> for humorous reading tho. >> >> Scott > Anyone care to take him up on his challenge? > Please say yes. :-) > > Alex What fucking challenge? Is he or are you so dimwitted as to think that people have nothing better to do than provide Scott and his cretinous friends with a first-hand education? A "challenge" would be something like: "PC-Magic has encrypted a [file/message/whatever] containing ecash in the amount of $50,000, has deposited with [an arm's-length third party] the original text, the encrypted [file/message/whatever], the software that decrypts it and the [password or passphrase], and hereby agrees to leave the ecash prize current and unrepudiated until [deadline date], after which we will re-deposit the ecash and instruct the [third party] to reveal the message and demonstrate its decryption as a proof that the challenge was genuine." The prize amount would have to be relatively high since these people have not published technical information and no one has any real interest in investing time and money to demonstrate that people who appear to be idiots are, in fact, idiots. The $10K and lower challenges that have been issued in the past have mostly come from known entities with published algorithms. Scott's characterization, "the 'crap' we get from supposed crypto experts." is indicative that he really didn't read and understand much of the criticism. It is typical of the ignorant who have embarked on a flawed course to become annoyed at well-founded criticism and to belittle their critics. "...no one has come close to breaking our method" is indicative only of the lack of motivation on the part of qualified cryptanalysts, most of whom have much better things to do. It is the responsibility of the advocate of a cryptographic technique to raise the level of interest in testing it sufficiently high that it will in fact be thoroughly tested. To claim that a technique has never been compromised is to claim nothing at all. I have a message I encrypted when I was 16 that no one has yet cracked. I could challenge PC-Magic to crack it. If they were sufficiently introspective to be able to examine their reasons for ignoring my "challenge" they would understand why theirs is not a challenge. OTOH if they had that many brain cells to rub together they would already have understood the logic of the criticisms they so glibly dismiss. Perhaps a more satisfying exercise would be if PC-Magic were to encrypt a ton of the worst child pornography, hate literature and conspiratorial assassination plans imaginable, then present themselves and the computer containing the encrypted goodies to the office of the Bavarian prosecutor. CryptoMongerII

1 0

Kremlin 2.0
by Mark Rosen 17 Dec '03

17 Dec '03

What's the use of encrypting your files if they remain unencrypted, lying around on your hard drive, reported as "deleted" space, ready for anyone to steal? And why bother to encrypt your sensitive documents if your word processor leaves scraps of these documents floating around your hard drive? Security in the Windows environment seems to be a futile effort. Kremlin 2.0 offers an easy-to-use solution to the problem of Windows data leakage. When you log off your computer, Kremlin can clear your computer's memory (both the RAM and the swapfile), wipe the unused portions of your hard drives (where temporary word processing files most often lurk), and erase all records of your Windows access (such as the most recent documents accessed, your Internet history, etc). And to securely delete a file or folder, just drag it to the Kremlin Secure Recycle Bin. Of course, the encryption in Kremlin is also first rate. You can encrypt a file with one of six algorithms (including IDEA, Blowfish, and RC4), just by right-clicking and choosing "Encrypt". And Kremlin can automatically encrypt your sensitive documents when you log off and decrypt them when you log back on, preventing unwanted access to your files. Kremlin has been peer reviewed by the best in the business: Chris Hall, from Counterpane Systems (Bruce Schneier's company), and Alexander Pukall have both examined the Kremlin source code. Kremlin is fast, easy-to-use, and secure; it's the right choice to protect your data. You can download Kremlin from: http://www.mach5.com/kremlin/ Mark Rosen Mach5 Software http://www.mach5.com/

1 0

freeh/crypto/reno
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

------- Forwarded Message Date: Wed, 10 Dec 1997 15:36:21 -0800 From: "J. Orlin Grabbe" <kalliste(a)aci.net> To: snetnews(a)world.std.com Subject: SNET: [Fwd: FREEH SPEECH (repost)] - -> SearchNet's SNETNEWS Mailing List This is a multi-part message in MIME format. - --------------F4A2244C1A5A763B01795119 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit - --------------F4A2244C1A5A763B01795119 Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: inline From: softwar(a)us.net Subject: FREEH SPEECH (repost) Date: Wed, 10 Dec 1997 14:11:51 -0600 Reply-To: softwar(a)us.net Message-ID: <881784054.228196354(a)dejanews.com> Newsgroups: alt.politics.clinton,alt.politics.org.cia,alt.politics.org.fbi,alt.politics.org.nsa,talk.politics.crypto Organization: Deja News Posting Service Path: news.alt.net!wnfeed!worldnet.att.net!128.230.129.106!news.maxwell.syr.edu!nntp2.dejanews.com!grunt.dejanews.com!not-for-mail X-Article-Creation-Date: Wed Dec 10 20:00:55 1997 GMT X-Authenticated-Sender: softwar(a)us.net X-Http-User-Agent: Mozilla/3.0 (Win16; I) X-Originating-IP-Addr: 198.240.101.30 (host30.richmond.us.net) Xref: news.alt.net alt.politics.clinton:375281 alt.politics.org.cia:25294 alt.politics.org.fbi:13697 alt.politics.org.nsa:10505 talk.politics.crypto:20929 General Reno has declined to appoint an Independent Counsel to investigate campaign abuses by the Clinton White House. Several Congressional leaders have sputtered they are concerned about Ms. Reno's conflict of interest in the matter. Of course, the Republican specifics of her "conflict" never go past the fact that she was appointed by Clinton. However, the connections between Ms. Reno and the Clinton scandals are well known to at least one person inside the Beltway. One example of Reno's conflict is the Clinton China Crypto Scam. It was Reno's Justice Anti-Trust Division that authorized the merger of a major company backed by a big donor to the DNC. The companies, RSA and Security Dynamics, sought the merger in 1996 just after RSA Chairman James Bidzos signed a memo of understanding to perform "encryption research" with China. The donor, Sanford Robertson, paid $100,000 to the DNC just prior to the merger. Furthermore, Mr. Robertson was on the list of those called by Al Gore from the White House and the MONEY arrived just after Gore's call. In fact, $20,000 of Robertson's donation was split into a HARD money account by the DNC. Of course, Mr. Robertson's investment firm made a cool two million dollars on the merger deal, spurred in part by the lucrative RSA contract with the PRC. Yet, Ms. Reno was also directed officially by President Clinton to oversee the "encryption problem" and enforce policy. For example, according to recently declassified documents from the Clinton National Security Council, Ms. Reno was tasked by President Clinton in 1993 to oversee the Clipper project. Ms. Reno was directed by Clinton to purchase 9,000 Clipper phones for the FBI. In addition, Clinton directed Ms. Reno to prepare Clipper for export. Finally, Reno was tasked to convince the US communications and computer industry to voluntarily implement the Clipper "key escrow" back door into all US made products. Simply put, Ms. Reno was, and is still, in charge of bugging America's telephones. Yet, how far can Ms. Reno go? According to the Presidential Directive, "Should (US) industry fail to fully assist the government in meeting its requirements within a reasonable period of time, the Attorney General will recommend legislation which would compel manufacturers to meet government requirements." Thus, if we do not voluntarily give up our rights to privacy, Ms. Reno is tasked by President Clinton with drawing up the laws for "mandatory" government phone bugs. Yet, there is overwhelming evidence that Ms. Reno quietly turned her head as a major DNC backer managed a deal involving the Communist Chinese and advanced encryption technology. Other than approving the lucrative RSA merger/export, Ms Reno and the Justice Department are also major players in export policy. They are part of an Inter-Agency Working group specifically tasked to cover crypto and exports. As proof, Reno's Justice Department has written most of the Clinton encryption policy papers. In fact, some of the secret documents written by Reno's Justice Department on crypto policy were compromised by former DNC fund-raiser Ira Sockowitz. Sockowitz walked out of the Commerce Department with over 2,000 pages of secrets in 1996. Ironically, included in the Sockowitz papers are secret documents covering the 1996 RSA/China deal. Curiously, Ms. Reno has chosen NOT to look into the matter. The connections between Ms. Reno and the Clinton scandals are also well known to at least one person inside the Beltway. FBI Director Louie Freeh knows. He is aware of that advanced technology was being shipped to China while draconian laws banning the same technology were considered here. Director Freeh also knows that his boss, Ms. Reno, is deeply involved in criminal obstruction involving high tech exports, DNC donors, and her own Justice Department. He knows she is covering for crimes that she and her Department were charged to prevent. The question now is... Does Freeh have the guts to tell America? 1 if by land, 2 if by sea. Paul Revere - encryption 1775 Charles R. Smith SOFTWAR http://www.us.net/softwar Pcyphered SIGNATURE: 3B766150F4B90D30688C657BB44EE7016793781A184F584E7C129D2A8A03F3F5 0B833ABFCE759CC129AF6A33B104406F19EB68AF61050087B65A66C94EA8B0B9 1D70D66883BCA304 - -------------------==== Posted via Deja News ====----------------------- http://www.dejanews.com/ Search, Read, Post to Usenet - --------------F4A2244C1A5A763B01795119-- - -> Send "subscribe snetnews " to majordomo(a)world.std.com - -> Posted by: "J. Orlin Grabbe" <kalliste(a)aci.net> ------- End of Forwarded Message

1 0

Dr. Dobbs Crypto CD
by Mike Gurski 17 Dec '03

17 Dec '03

Has anyone received their DDJ crypto CD that's been advertised for the past half year? -- Michael Gurski mailto:gurski@solipsys.com Solipsys Corporation http://www.solipsys.com 6100 Chevy Chase Drive, Suite 200 phone:(301)483-0423 Laurel, MD 20707-2929 fax:(301)483-8901

6 5

NYT Account Request
by forgot＠nytimes.com 17 Dec '03

17 Dec '03

You have requested your ID and password for The New York Times on the Web. Please follow the instructions below. 1. Please make a note of your subscriber ID: nifft 2. Next, to get the password for this account, using your Web browser go to this unique URL: http://www1.nytimes.com/forgot/snp.cgi?ul=nifft~475280 This page will allow you to choose a new password. Make sure you have copied the address EXACTLY as it appears here. (If you're getting an "Error" page, the address was probably entered incorrectly. See "Help With Copying and Pasting" at the bottom of this e-mail.) 3. Follow the instructions on the screen to choose a new password. After you have entered a password you will automatically enter our Web site. The New York Times on the Web Customer Service forgot(a)nytimes.com ******************** Help With Copying and Pasting 1. Using the mouse, highlight the entire Web address, (e.g. http://www1.nytimes.com/forgot/snp.cgi?ul=nifft~475280) shown above in step 2. It's essential to highlight the entire address, even if it extends over two lines. 2. Under the Edit menu at the top of your screen, select "Copy". 3. Go into your Web browser (open it if it's not already opened). 4. Click in the "Netsite" or "Address" bar -- the place in your Web browser where it says what Web address you're currently looking at -- and delete the address that's currently there. 5. In the blank "Netsite" or "Address" bar, paste the address by selecting the "Edit" menu at the top of your screen and choosing "Paste". 6. Press Enter. 7. Follow the instructions to choose a new password. ******************** If you did not request your ID and password for your NYT Web registration, someone has mistakenly entered your e-mail address when requesting their password. Please simply ignore this message, or, if you wish, you may go to the address above to select a new password for your account.

1 0

Re: UK spooks invent RSA, DH in 1973
by John Young 17 Dec '03

17 Dec '03

Peter Gutmann wrote: >There's an interesting paper at http://www.cesg.gov.uk/ellisint.htm which >claims that UK spooks invented both RSA and DH in 1973 and 1974 respectively. We've converted the Ellis Postscript doc to HTML: http://jya.com/ellisdoc.htm

10 12

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Hotmail, Juno, Aol... > > How about using the email address as the hostage info? The goods are sent to > the email address, so the sender knows that the email address is good. On > breach of contract, the sender has the option of selling the email address of > the reciever to a bunch of known spammers. > > More rambling... ;) > > -- > Steve > > P.S. If this particular contribution to your idea goes anywhere, I want credit. :) > --

1 0

No Subject
by David Honig 17 Dec '03

17 Dec '03

You will note that you are reading prima facie evidence of violation of this new law. Wednesday December 17 11:58 AM EST New Law Crack Down on Internet Theft WASHINGTON (Reuters) - President Clinton signed into law on Tuesday a controversial bill imposing criminal penalties on copyright violators even if they do not profit from their actions, the White House executive clerk's office said Wednesday. The No Electronic Theft Act, passed by Congress last month, was strongly backed by the software and entertainment industries but opposed by science and academic groups. Under the law, a person who "willfully" infringes on copyrighted material worth at least $1,000 could be subject to criminal prosecution even if he does not make money. Under current law, copyright violators cannot be charged with criminal misconduct unless they profit from the violations. Software and entertainment groups, including the Business Software Alliance, the Motion Picture Association and the Association of American Publishers, said the change was essential to protect software, music recordings and other creative products easily pirated over the Internet. They cited a 1994 court case dismissing criminal copyright charges against an Massachusetts Institute of Technology student who posted on the Internet for free downloading copies of popular software programs. But last month a leading group of scientists, the Association for Computing, wrote to Clinton asking him to veto the bill because it might inadvertently criminalize many scientific publications available over the Internet, and might limit the "fair use" doctrine. The new law includes a sliding scale of penalties depending on the severity of the copyright infringement. For making one or more copies with a total retail value of at least $1,000 but less than $2,500, the violator could be imprisoned for up to one year and fined up to $100,000. For copies with a retail value of $2,500 or more, the violator could imprisoned for up to three years and fined up to $250,000. A second offense could lead to a prison term of up to six years. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu M-16 : Don Quixote :: PGP : Louis Freeh Let freedom ring (or screech at 28.8)

1 0