December 2003 - cypherpunks-legacy

Anguilla surpasses US military in code breaking challenge.
by Vincent Cate 17 Dec '03

17 Dec '03

Press Release Anguilla, June 16, 1997 Anguilla surpasses US military in code breaking challenge. The Caribbean country of Anguilla has searched through more than 2,380,000,000,000 code keys as part of the Deschall effort to break a DES encrypted message. This is in response to a challenge by RSA Inc to show that DES 56 bit keys are not large enough given the rapid advances in computing technology. As of June 16th, the entire US military effort, represented by Internet machine names ending in ".mil" in the Deschall statistics pages, has searched fewer keys. Anguilla host names end in ".com.ai". Anguilla is a free and democratic country, that does not limit key lengths. Offshore Information Services organized the Anguilla effort. OIS also hosted a conference in Anguilla called "Financial Cryptography 97" in February of this year. Deschall: http://www.frii.com/~rcv/deschall.htm RSA: http://www.rsa.com/rsalabs/97challenge/ Offshore: http://www.offshore.com.ai/ Statistics: http://www.frii.com/~rcv/krstat/ FC97: http://www.offshore.com.ai/fc97/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Vincent Cate Offshore Information Services Vince(a)Offshore.com.ai http://www.offshore.com.ai/ Anguilla, BWI http://www.offshore.com.ai/vince ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Need Your Immediate Help To Stop Censorship by FCC's Reed Hundt
by constitution99＠hotmail.com 17 Dec '03

17 Dec '03

TO THE INTERNET COMMUNITY Need your help before June 19th Rogue FCC (AKA FEDERAL CENSORSHIP COMMISSION) -- Chairman Hundt has put his sights on the 1st Amendment. Seems free speech is inconvenient for him. Hundt trying to ban liquor, a legal product, advertising on TV.Makes no sense. Commissioners Quello and Chong telling Hundt to get lost. Give them your support. Need to hear from you by June 19th. Copy E-mails to the addresses listed below: rhundt(a)fcc.gov rchong(a)fcc.gov jquello(a)fcc.gov president(a)whitehouse.gov vice.president(a)whitehouse.gov stopcensorship(a)juno.com Censorship is alive-and-well in the good ol' U.S. of A. Reed Hundt, Chairman of the Federal Communications Commission wants to make it the FEDERAL CENSORSHIP COMMISSION. Hundt wants to ban liquor, a legal product, advertising on TV. Only good Americans can reign in Hundt. Help us to stop censorship. Let the Hundt and other FCC Commissioners and the White House know your concerns. Copy E-mails to the addresses listed below: rhundt(a)fcc.gov rchong(a)fcc.gov jquello(a)fcc.gov president(a)whitehouse.gov vice.president(a)whitehouse.gov freespeech1(a)juno.com Renegade federal regulator - FCC's Reed Hundt - trying to ban liquor advertising on TV. What's the difference between beer, wine and liquor? None. Let Hundt and other FCC Commissioners and White House know what you think - copy e-mail to: rhundt(a)fcc.gov rchong(a)fcc.gov jquello(a)fcc.gov president(a)whitehouse.gov vice.president(a)whitehouse.gov stopcensorship(a)juno.com Right to free speech? Renegade federal regulator - FCC's Reed Hundt - says only beer and wine companies have right to advertise on TV. Hundt is trying to ban liquor advertising on TV. Protect free speech, let FCC and White House know what you think - copy e-mail to: rhundt(a)fcc.gov rchong(a)fcc.gov jquello(a)fcc.gov president(a)whitehouse.gov vice.president(a)whitehouse.gov freespeech1(a)juno.com ymr - massmail

1 0

DREI 97: Cryptography and Network Security
by John Young 17 Dec '03

17 Dec '03

http://dimacs.rutgers.edu/drei/1997/schedule/DREI97_ad_Research.htm DIMACS Research & Education Institute DREI 97 Cryptography and Network Security July 28 - August 15, 1997 Rutgers University, NJ Speakers and papers (abstracts available at the site): Martin Abadi, Digital Systems Research Center, DEC "Strengthening Passwords" Ross Anderson, Cambridge University, "Medical Records Security" and "Steganography" Alex Biryukov, Technion "Cryptanalysis of the Portz Interconnection-Network Block-Cipher" and "Cryptanalysis of RC5" Daniel Bleichenbacher, Bell Labs "Comparing RSA and RSA-Type Cryptosystems Over Elliptic Curves" Gilles Brassard, University of Montreal "The Impact of Quantum Mechanics on Cryptology" Ran Canetti, IBM "Towards Realizing Random Oracles: Hash Functions That Hide All Partial Information" and "On the Adaptive Security of Multiparty Protocols" Benny Chor, Technion "Private Information Retrieval" Claude Crepeau, Universite de Montreal "Cryptographic Power of Noisy Channel" Cynthia Dwork, IBM "Positive Applications to Lattices of Cryptography" Carl Ellison, Cybercash, Working Cryptanalysis of the German Enigma" and Key Management in the Post-Identity Era" Yair Frankel, Sandia "New Techniques for Sharing Cryptographic Functions" Matthew Franklin, AT&T Labs - Research, "Ecash and the Power of Positive Paranoia" Rosario Gennaro, IBM "How to Sign Digital Streams" Stuart Haber, Surety Technologies, "Ensuring the Integrity of Records On Line: How to Time-Stamp a Digital Document" Jack Lacey, AT&T Labs - Research, "Music on the Internet and the Intellectual Property Protection Problem" Susan Landau, University of Massachusetts at Amherst "Cryptology, Technology and Policy" David P. Maher, AT&T Labs - Research "Security Models for Partially Accounted E-Cash Systems" Dalia Malkhi, AT&T Labs - Research "Auditable Metering with Lightweight Security" Moni Naor, The Weizmann Institute "A Formal Teatment of Remotely Keyed Encryption" Hilaire Orman, DARPA "The Imperfection of Secrecy in Real Network Protocols" Pino Persiano, University of Salerno "A Transparent Distributed Cryptographic Filesystem" and "Randomness-Efficient Non-Interactive Zero-Knowledge Proofs" Marcus Ranum, Network Flight Recorder, Inc., "Hacking and Networked Terrorism" and "Problems with the Firewall Concept" Mike Reiter, AT&T Labs - Research "Toward Acceptable Metrics of Authentication" Fred Schneider, Cornell University "Mobile Code Security Issues" Rich Schroeppel, University of Arizona "Fast Arithmetic in GF[2^156]" Adi Shamir, The Weizmann Institute "A New Paradigm for Massively Parallel Random Search" and "Cryptanalytic Fault Attacks" Martin Strauss, AT&T Labs - Research "Proxy Cryptography" and "A Formal Teatment of Transactional Trust Management" Edlyn Teske, University of Manitoba "Space Efficient Group Structure Computation Using Pollard's $\rho$-Method"

1 0

Congratulations! We found your site!
by PR.Dept.at.SUBMITKING＠keepmailing.com 17 Dec '03

17 Dec '03

Greetings from SUBMITKING, the leader in automated URL submissions! We found your website using our high-technology, specially designed, "web crawling" software. Unfortunately, most people don't have access to this type of technology. But we can help! As you're aware, most people find websites using any number of popular (and sometimes not so popular) search engines and other marketing resources (like "Site of the Day" (Week, Month, etc.)). But who has the hours and hours to spend searching the Web to find these resources and THEN submit the information to each one? We did it for you! SUBMITKING has taken thousands of man hours to research the top resources people use to find what they need on the Internet. With even more hours we have written special software for each individual resource so that with the information from one form you fill out we can register YOUR site with each of these resources as well as you could do it yourself...if you had 20 or so hours on your hands. Sure, we charge for this service. It's $19.95 for submission to all 200 resources. Which works out to less than a dime each. If you COULD do each site in just 5 minutes (paying yourself .10 each) you'd do 12 an hour (thus earning a whopping $1.20 per hour). Probably 50 or 100 visitors to your site is all it would take to see a huge return on your investment. It's a logical thing to do when you consider all the benefits you stand to gain from being listed in 200 places. That being said we can say no more. We simply invite you to visit the site at http://www.submitking.com and Thank-you for your time. Kind regards, SUBMITKING

1 0

Netscape Bug Reproduced
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Subject: Netscape privacy problem reproduced at EIFIST Date: 6/16/97 5:34 PM Netscape privacy problem: Using information gleaned from the web site of the Danish company that first reported the problem, Keith Woodard and Dave Humphrey at EIFIST have built a web page which reproduces the privacy problem in Netscape Navigator and Communicator web browsers. From that effort they have developed a better understanding of how the Netscape bug works, and what defensive measures users can take until a bugfix is available from Netscape. First, the problem is indeed read-only, and involves only files to which the explicit path name is known. Second, all file systems accessible from the Netscape user's system are reachable -- that means mapped network drives as well as the local hard disk. Third, JavaScript can be used by a web site to automate reading a user's file so that it is invisible to the user. However, the bug does not involve use of Java at all. The demo website can be visited at the following URL: http://eifist.frb.org/hacker/fileupload.html Please urge all Internet web users to take the following interim steps until a permanent fix is available from Netscape: * In Navigator 3.x and 2.x, go to the Options menu and select Security Preferences. Select the "Submitting a Form Insecurely" preference to enable that warning dialog box. This will generate a warning box whenever a site tries to upload a form, giving the user a chance to decide whether to allow it. * Also, in Navigator 3.x and 2.x, go to the Options menu and select Network Preferences. Turn OFF the "Enable JavaScript" preference. This will block execution of JavaScript code which might try to perform an invisible file upload, while permitting display of the rest of the page. These measures are temporary until a full bug fix is made available by Netscape and proven against the EIFIST demo page. Regards

1 0

Re: [IMPORTANT] Accounts payable
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Timmy C. May styles his facial hair to look more like pubic hair. .oooO Oooo. ( ) _ _ ( ) \ ( / ) ( \ ) / ----\_)-/ (---) \-(_/---- Timmy C. May ( ) ( ) oooO Oooo

2 1

[ANNOUNCE] PGP 5.0 Freeware is available from MIT
by Jeffrey I. Schiller 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: The PGP Community From: Jeffrey I. Schiller <jis(a)mit.edu> Subject: PGP 5.0 Freeware is available from MIT I am pleased to announce the availability of PGP 5.0 Freeware from the MIT Web Site. PGP 5.0 Freeware is available for non-commercial use under license from MIT, PGP Inc. It uses the RSAREF toolkit licensed from RSA Data Security. This new version is a long awaited major upgrade and improvement to PGP 2.6.2. It has a native Windows '95, Windows NT and Macintosh interface. It supports additional ciphers, as well as new key types and message formats. Internally it is much improved as well. This release marks a major transition to a new public key infrastructure based on the Diffie-Hellman (DH) public key algorithm for privacy and the Digital Signature Standard (DSS) for digital signatures. The RSA algorithm is still supported and this version will work with the old RSA keys you may already have. However all new keys generated by this version will be DH/DSS keys. Many of the internal performance improvements are only available when used exclusively with DH/DSS keys (this is because using RSA keys requires PGP 5.0 to be backward compatible with PGP 2.6.2 which requires PGP 5.0 to use less efficient message formats). This version also includes automated keyserver support. It can automatically fetch PGP keys from the MIT keyserver (and other keyservers) as well as offer to upload any newly created keys. It also comes with plug-ins for Eudora and other major mail utilities. At the moment it is only available for Windows '95, NT and MacOS. A Unix (Linux) version is in the works but isn't ready yet, but we hope to have it ready within a week or two. Source code for this version was distributed at last weekend's cypherpunks meeting in hard copy form. Source will eventually be made available electronically, but isn't ready yet. You can find the Freeware PGP at either the PGP Home Page at: http://web.mit.edu/network/pgp.html or directly at: http://web.mit.edu/network/pgp-form.html Note: We anticipate a significant amount of traffic while people throughout the U.S. and Canada download PGP. Please be patient with the server (and with us)! -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQCVAwUBM6V9psUtR20Nv5BtAQE9IgP+OuB+wHml5C47s3YJjfbNq+3FWmql+DrG AE5Dag8aahKGf73SYHByhCZXowCzE0g8QeAx9VYpXy9CHp5GiSE8Iks1/U0AKz1h cxcQ2Etp7x2js9GAfP8ueD01RlIguQsh2hIP0cU9ymy8Fn1b7OscWk9hhmDjgBpv O36Lt5gPBwM= =+zQC -----END PGP SIGNATURE-----

2 1

Re: Declan as a Crime Beat Reporter
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 17 Jun 1997 14:38:49 -0700 (PDT) From: Joe Shea <joeshea(a)netcom.com> To: Declan McCullagh <declan(a)well.com> As a real Hollywood reporter, I'm sorry to tell you both Chasen's and the Brown Derby are long shuttered. So is Scandia and Cock 'n Bull. About the only old-line place of that type left is Tam O'Shanter. Best, Joe Shea Editor-in-Chief The American Reporter joeshea(a)netcom.com http://www.newshare.com:9999

1 0

Re: Homer on Terrorism
by John Young 17 Dec '03

17 Dec '03

Steve Schear wrote: >I agree. It seems a bit like blackmail to me. These 'consultants' would >have better off having friends buy put options on Netscape stock prior to >the phone call. Then if Netscape won't pay their price they get the money >from the market when they make the information public, including the source >code. Spare me the insider trading rants. Good point. Perhaps CNNfn and PC Rag insiders did just that. Maybe even got a few for CaboComm's account. Maybe the insiders at NSCP dumped a few after the negotiations tanked. Screaming "terrorism" for smoke. Isn't it conventional wisdom that the market is churned with with blackmail, greenmail, "terrorist" slaughter of W&O and such, laying down "free market" smoke. Story from Federal pen here is that the WTC bomb aimed to topple the pile onto World Financial Center across the road where the plushest players squat on gold but job-lock TLAs running the op said no-no, just terrify the fats into upping our CT-consulting fees and budgets, like IRA @ London City. Inmate Ian was heard to warn, "Worked like a charm, din it: now shut your hole Youseff about that salted laptop fabbed up St Andrews, Great Malvern."

1 0

Re: Flag Burning...
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 09:52 AM 6/13/97 -6, Peter Trei wrote: ... >Think about this: > >Would you rather people did not burn the flag because: > >1. They'll be thrown in the slammer if they do. >2. The[y] revere the values for which it stands, and will not descrate a > meaningful symbol of these values. > >In (2), we can look at the (very rare) individuals who *do* burn the >flag, and determine for ourselves if they have a valid point to >convey. > >In (1), we'll never know. > >For Congress to deny the freedom to burn the flag is a desecration of what >the flag stands for - a descration of the flag by the government itself. (I'm on Ray's FCPUNKS, please cc me directly, my replies may be delayed and this may have already been covered anyway. Probably was.) 1. Burning is a proper way to dispose of old flags, according to my old boyscout handbook, so I guess this is thoughtcrime. 2. Why not outlaw desecrating the Bill of Rights? (Oh, yeah. Congress does that daily right now...) 3. Since when was "the flag" sacred, anyway? Doesn't something have to be sacred for it to be desecrated? Isn't this a secular country? 4. Doesn't this seem like a way _not_ to discuss the sea of red ink that this country is currently drowning in, and just stir up folks' emotions instead? Sure does to me...I wish veterans and others who get hot under the collar about this would get 1/8 as pissed about the national debt. 5. Burn my flag (or copy of the Bill of Rights) and you'll probably wind up shot. Burn your own flag/copy and watch me yawn. This law is a *particularly* stupid one. JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBM6Y7IjUhsGSn1j2pAQFLCwfQyJd1lPvX/TJOu6draMvMuZW9fBSHQI09 vflL8+Po+Y8KS6v12qi8wsUsVSINYOL2SS+/BSu87GbqExLxgqDji5H3imH9lKmO v7ipjyg8T9ybrKWinpkFGh/SWXNsJt6vsLltbRQgzurHRKVXAAs4KhCeHFUrwdQT 5GYh9CQkWsiyRW15/7iR2gkn3wcnZdnQBemFrTAIwswwuS9McyyluX+NO6a/nS27 HDU7aqlVtJ12i9eXY1yg60BGRK66fa4a/52XkIRe92mhWDp7soxDaeWTE4akCIiG Hd2APfyVI+CAnaUlocgbg0o6j6nCe5ZKKB3JbX9sevA8Pw== =Cytc -----END PGP SIGNATURE----- Regards, Jim Ray <jmr(a)shopmiami.com> DNRC Minister of Encryption Advocacy One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me http://shopmiami.com/prs/jimray/ PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71

1 0