December 2003 - cypherpunks-legacy

[ANNOUNCEMENT] Firewalls
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

When Timothy C. May's mother gave birth to him after fucking with a bunch of sailors, she didn't know who the father was but decided to tell him that he was a Russian as the Russian sailor was the one who satisfied her the most. \\/// |O O| Timothy C. May | ( | |_@_| H

2 1

Re: SSL weakness affecting links from pa
by Phillip M. Hallam-Baker 17 Dec '03

17 Dec '03

As the person who invented (and mispelt) the referer link I don't agree with the arguments made against it. The purpose of the referer link is to allow servers to collate pages of backlinks. This would make the Web browsable in both directions. I could never understand why Netscape supported the facility in the browser without also supporting the capture functionality in the server. Its a simple matter to add support but they seem uninterested. Of course there should be a toggle to allow users to turn off the referer field. I tried to get a recomendation to do this put into the spec. People then started shouting at me saying that it was impossible to enforce and so the recomendation shouldn't be there. Quite what the relevance of 'encforcement' is I don't know. Then they started jamming stupid ideas like cookies into the spec, ideas that showed all of five minutes thought. >Which was my original point. I'd even be willing to *pay* for a cert, but >not more than about $15. I just find it odd that I can get SSL server >software for cheaper than I can get a license to operate said software. >Hey Verisign, why don't you offer a Class 1 server certificate? The manner in which SSL is designed means that it requires a degree of trust in the certificate. Allowing the browser to automatically accept a class 1 cert would be somewhat foolhardy. Because someone put that damn key on the bottom of the browser some people expect there to be security. Instead they get encryption which ain'tquite the same thing. There is nothing to stop you using a non standard cert with SSL however. I use Apache with a cert I wrote myself. Phill

9 11

Re: Advocating Violence
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

>From: paul(a)fatmans.demon.co.uk >To: Kent Crispin <kent(a)songbird.com> >Date: Fri, 18 Apr 1997 15:17:29 +0000 >Subject: Re: Advocating Violence Paul said: > > You may well argue that my idea of rights is a misinterpretation, I > > could give you a number of examples of why this is not so. Kent said: > > More likely I would argue that your idea of rights is simply a > religious belief, and, like many zealots, you confuse your beliefs > with reality and reason. Kent, you smug and arrogant pampered child! To denigrate another because he _may_ have ideas based on religious beliefs is a typical of your ad hominem style of argument. Nothing Paul has said would mark him as a zealot, which term you use too loosely and unwittingly. "Reality and reason?" You who have recently implied that the death camps of Europe are not a part of the reality of the 20th century. Previously I had pitied you for continuing to bash your head into a wall with your specious arguments thinking it was mere stupidity! Not stupidity honestly come by, but abysmal ignorance nurtured by one who sits isolated and ignorant on his ivory tower. With a certain satisfaction I see now that all the dung heaped upon you and your vacuuous logic is honestly earned and completely deserved. If I did not weep for the educational system which _produced_ you, I would laugh at you. TruthMonger #20

2 1

Web Tools and Resource Download
by Web FormPAL 17 Dec '03

17 Dec '03

Greetings From Munica!(http://www.munica.com) If this message is unwanted, we appologize for sending it. Please reply the message with the word "REMOVE" and we will no longer send you further information. Munica Corporation is offering web related tools and resources for your business. With dozens of pre-built web utilities and an innovative CGI script generator(FormPAL), you can easily create powerful web solutions without programming. All our software products come with 30-day money back guarantee. If any of our software does not satisfy you within 30-day period, simply destroy all the copies of the product to get full refund. Among several of our products, FormPAL is the most popular one. Over 20,000 copies are currently being used by webmasters world wide. FormPAL 2.5 is a versatile tool for producing and publishing forms for corporate or personal web sites. This product generates CGI scripts for creating and handling virtually any type of form, and makes it possible to satisfy one of the important prerequisites of a good web site: obtaining customer input or feedback. FormPAL 2.5 is compatible with any Web Authoring product. Users with no programming experience can design and program professional web forms and create the controlling CGI scripts. FormPAL 2.5 is compatible with any web server running any operating system that supports PERL scripts. Currently available in two editions, i.e., standard and professional Edition, FormPAL 2.5 can both satisfy the need of web designers of all levels. FormPAL standard is targeted at designers whose primary need is email forms and data log forms. FormPAL professional edition offers powerful cross platform database access capabilities for developing data-driven web sites. FormPAL standard edition costs US$99. FormPAL professional costs US$286 . Secure on-line order is available. We accept VISA, MASTER CARD or Money Order. To order please click http://www.munica.com/products.htm Thanks for reading, Daini Xie Marketing Dept. Munica Corporation Web: http://www.munica.com EMAIL: sale(a)munica.com Tel: 1-514-3621032 Fax: 1-514-7620778

1 0

Liberal party: definitely no crypto ban in Germany
by 3umoelle＠informatik.uni-hamburg.de 17 Dec '03

17 Dec '03

Germany's liberal party FDP, which forms the government together with the larger Christian Democrats (CDU), has announced that they will not accept any restrictions to the use of cryptography. Yesterday the German Bundestag began to debate the draft Information and Communication Services Law (see http://ourworld.compuserve.com/homepages/ckuner/homepage.htm for information about that draft). Both Minister of Justice Schmidt-Jortzig and FDP research politics speaker Laermann said that cryptography must not be banned. Laermann said the FDP will definitely not accept any crypto law that restricts or bans using cryptography. "I say this in the knowledge that what is desired herewith firstly is technically impossible, and secondly it cannot be allowed to give up protection of private, economic and - I say this from personal first hand, I may say bitter experience - scientific data from unauthorized, unfair and even criminal doings. The FDP will not allow that." The FDP supports the draft Digital Signature Law, but will resist any attempts to abuse the security infrascture as an entry into crypto regulation. Until recently, the FDP position on cryptography has been indifferent. Early this year FDP politicians have begun to verbosely contradict those in the CDU that want to restrict cryptography. In March, Minister of Justice Schmidt-Jortzig said at a North German FDP convention: "Currently there exist demands to ban cryptography or to deposit all keys with a central authority that can then arbitrarily decrypt messages. Those demands are deeply illiberal." The convention passed a resolution saying that "Nobody may restrict the citicens' right to use encryption to protect their data from unauthorized access by third parties." The Bundestag vice president Burkhard Hirsch published a statement on the FDP web server, saying that banning cryptography clearly is pointless, and precisely for that reason not even the Third Reich or East Germany had tried to do so. In a letter to the newsmagazine Spiegel, he wrote: "You could laugh your head off, if you didn't know that they really mean it."

1 0

Proposed Addendum to International Standards
by Eric Hughes 17 Dec '03

17 Dec '03

I was, for some reason, browsing ISO two letter country codes today and came upon such oddities as EM Office for Harmonization in the Internal Market (Trademarks and Designs) (OHIM) So I decided we needed some new ones, since it wasn't just for countries anymore. CB Cyberspace CP Cypherspace Cyberspace, the domain of electronic communication. Cypherspace, the domain of encrypted and untraceable electronic communication. Do you think we can get ISO to approve it? Better yet, do you think we could get some of those oval stickers like you see on European cars? I'm sure Ian will want some little ones for his Pilot. And now all we need is an ISO 639 natural language identifier for ciphertext. How about "xx"? Eric

1 0

Re: Meeting Report: "Developing the Advanced Encryption Standard"
by Phillip M. Hallam-Baker 17 Dec '03

17 Dec '03

> Regarding computational efficiency, NIST will favor >efficiency on 32-bit processors and short key-setup time, will test >efficiency on a little endian processor, and will publish the specs of the >test system. This seems misguided IMHO. The current trend is towards 64 bit processors and the inefficiency of using only half of a 64 bit processor seems to me to be somewhat more serious than the hassle of having to kludge up 64 bit operations on a 32 bit processor. The most likely platforms are 64 bit and 8 bit (embedded systems such as cellular). > They also encourage two submissions: reference (possibly in >Java) and optimized (in C). Regarding memory requirements, NIST will >measure memory requirements for C implementation on a single reference >platform (presumably a Pentium Pro), although submitters are welcome to >provide results for other platforms. Thats also a somewhat limited approach. The x86 familly is getting long in the tooth. Intel themselves have it scheduled for replacement in 1999. The architecture is very much compromised by backwards compatibility with the CISC instruction set. A mixed bag of AXP, Pentium PRO and commodity embedded processors popular in VLSI cell form such as Z-80, 6502 and 680x would be more reasonable. >It was pretty much >universally thought that this schedule is wildly optimistic. Like design a new cypher in 6 months? >NIST has a hard time figuring out how to measure hardware efficiency. >They'd like to have definitive metrics (like there will be for software) >but are unwilling to force submitters to provide VHDL code, or gate counts, >or whatever. Hardware is likely to cover a wide range of uses. The number of gates for DES in an ultra fast, `unwound' implementation is many more than a n iterator using the same gates for each round. >NIST talked about what to do about "tweaking" algorithms after submission. >What if a break is found, but a simple fix prevents the attack? What if >someone submits an algorithm and someone else proposes a tweak? These >questions were not answered. Surely this just menas that the tweakers get credit? >But is there enough time for people to invent strong 128-bit block ciphers? >Probably not. One alternative is to take existing 64-bit block ciphers, >and then use a 4-round Luby-Rackoff construction to create a 128-bit block >variant. Another is to give people more time. Both were talked about. I >would like them to approve triple-DES as an interim standard, and then take >all the time they need for a secure 128-bit block cipher. I suspect the assumption made is that the time table will slip. My concern is however that the starting gate closes too soon. 6 months is too little time to start something entirely new. But I would not be suprised if there was an extension. But unless people know in advance there will be one it means that they find out in six months time that they have six months to sumbit and algorithm. I've seen this type of delay a lot in the IETF standards arena. The working group starts by assuming it has too little time to do something new then spends far longer plugging up holes in a broken plan. Phill

2 1

Re: InterNet Free Terra
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Here are some more mirror-sites of the anarchist "Radikal"-magazine: > http://huizen.dds.nl/~tank/radikal > http://burn.ucsd.edu/%7Eats/RADIKAL/ > http://www.jca.or.jp/~taratta/mirror/radikal/ > http://huizen.dds.nl/~radikal/154/ > http://www.canucksoup.net/radikal/index.html > http://www.ecn.org/radikal > http://www.well.com/~declan/mirrors/ > http://www.connix.com/~harry/radikal/index.htm > http://www.anok4u2.org/radikal/ > http://www.denhaag.org/~radikal > http://emma.unm.edu/radikal > http://www.tacacs.com/radikal/" > http://users.abcs.com/dockmstr/mirror/radikal/index.htm > http://home.ipr.nl/~radikal/ > http://www.ibmpcug.co.uk/~irdial/live_free/ > http://zero.tolerance.org/radi/index.htm > http://www.meaning.com/library/radikal/ > http://www.wfmusic.fi/~toni/radikal > http://www.euronet.nl/users/funest/radi/index.htm > http://www.lab.net/radikal > http://www.charm.net/~gbarren/radikal > http://login.datashopper.dk/~pethern/not_by_me_not_my_views/radikal/ > http://radikal.autono.net./rad > http://brazil.nbn.com/radikal/ > http://www.threeweb.ad.jp/~fubuki71/mirror/radikal/ > http://www.design.nl/~bram/radikal/ > http://www.eskimo.com/~quawk/radikal/ > http://www.calyx.com/~refuse/radikal/ > http://www.grfn.org/~rtwo > http://www.grfn.org:4380 xs4all port mirror > http://www.cyberpass.net/radikal > http://www.xs4all.nl/~jeroenw/radikal/ > http://catalog.com/jamesd/radikal/ > http://www.islandnet.com/freedom/radikal/ > http://www.binary.net/mishania/radikal/ > http://www.io.com/~gbroiles/radikal.html > http://inet.uni-c.dk/~pethern/radikal.154.txt radikal 154 in plaintext > ascii. > http://www.moebius.com.au/radikal/ > http://www.moebius.net/radikal/ > http://interpia.net/~baldodum/radikal/index.htm > http://www.firstfloor.org/~vaclav/radikal > http://www.nyct.net/~malba/radikal/ Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! -> http://www.epic.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBM1gWtTltEBIEF0MBAQHBkgf+LHnES8nwFltcynOJk3sbJBD4QtSAVHX0 H/7VFA+v1deRfcKzC9ZtcOYJdrTwDPHsbzZZgCrwTyQn4/BYoZuX8Lvvpi0VwL5b r6N9auGMQCzOqIPAjkvTwEP+qR3aP56rEWHKzCPGzIgP/bojhelMujTxvhBjPRFC Bt5M6soavEwXboYv8lSla4QBvYpJsk5FFdbALCsZxibp3iceLwZ6T3zX/BWaxAN0 P8GazaluyXDc87ZKEk9fvZM5bN6jAHNC58n7g9A6PbJ6Bbk+hkdP0auQCGqVBbT0 gNOgbSG3u0YqbAlXvei5kAT2lCkBGm0HubTHhhpysoVC2scdWW0mlg== =riVf -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

State of the Nation
by Shift Control 17 Dec '03

17 Dec '03

Introducing.... The State of the Nation Issue of Shift Control If aliens landed in Britain with the aim of finding out what's up these days, they'd be in for a confusing time. Politicians - our leaders - are being chased by headless chickens and hacks on smack, while other hacks rage against "sleaze" and try to be politicians themselves. Unemployment figures are down, though they might be up. Ministers disagree with their parties while simultaneously agreeing with their parties. When we think we're eating lamb we might be eating beef. And millions of people buy Spice Girls records. It'll take more than a fancy spaceship to figure out the state of the nation these days. Undaunted, we decided to have a go anyway in this week's issue of Shift Control. We've asked Johnny Foreigner to give us an outsider's view of Britain; citizens of Middle Britain send us postcards profiling life in their home towns; Robin Hunt tries the statistical approach in the hope of finding some coherent indications as to where the country's heading; and Rada Petrovic explores her local haunt - Kentish Town, London - as a microcosm of the nation. Plus our quiz asks: how wild are you about Britain? Also this week: the usual mountain of humour and perspicacity, including more memoirs from Freebee (our resident rock historian), new fiction from Miles Gregory, and, if you're quick, details on how to obtain free tickets to the fourth annual Unconvention in London. Shift Control: in a fine state and waiting for you at: http://www.shiftcontrol.com Shift Control is produced by the Guardian's New Media Lab with help from Boddingtons and Stella Artois Dry. To unsubscribe from this mailing list send e-mail to shiftcontrol-request(a)nml.guardian.co.uk with the following text in the body of the mail message: unsubscribe

1 0

Re: Xs4all website censored by German academic network (fwd)
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Bill Stewart <stewarts(a)ix.netcom.com> writes: > At 03:17 PM 4/18/97 +0000, paul(a)fatmans.demon.co.uk wrote: > >This comes as rather topical actually as I believe, if memory serves, > >that Radikal is a right wing racist publication? - > > Actually, it's a far-left anti-racist group's publication. > > > Does anybody know if Germany has a tradition of "academic freedom" > which could be waved at the network administration that's doing > the censorship? Germany has a tradition of hounding Jews out of their universities, for which the U.S. Universities were most thankful in the 1930s. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0