December 2003 - cypherpunks-legacy

Re: UCENET II and Peter duh Silva
by Charlie Comsec 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- politas(a)dynamite.com.au (Politas) wrote: > Surely that isn't the important thing. More important is that the > person really has an email address of "john_smith(a)hotmail.com". Then > it's up to Hotmail to be able to trace that email address back to the > previous step, assuming that they are being forced to do so by a > warrant or some other legal reason. > > Personally, I think that all messages should be able to be traced to a > real person, although this tracing should not be possible without > legal action. Are you saying that Hotmail should be made a guarantor of the identity of its accountholders, or merely that they could be required, under certain circumstances, to divulge what information (if any) it possesses, regardless of its accuracy? AFAIK, the latter case is currently operative, since Hotmail's records are presumably already subject to subpoena (in the USA, at least -- I just realized you're posting from an Aussie domain). IOW, when you sign up for a hotmail.com account, you're presumably required to give them a "name". If I signed up as "John Smith", should they be required to verify that I'm really John Smith, or merely disclose that the account belongs to someone who identified him/herself as "John Smith"? If you're saying what I hope you're NOT saying, it would amount to a form of "identity escrow", and I suspect that Hotmail would probably choose to discontinue offering free e-mail accounts rather than take on that sort of responsibility. - --- Finger <comsec(a)nym.alias.net> for PGP public key (Key ID=19BE8B0D) -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBNJaaXwbp0h8ZvosNAQHqtQf+LGGPWLQFPGfGgwKIHKOTAXQ74S08rGqt i8yiuSY2RgC+CXzbXJaMmDQ9gAcPMmCKJqzc2O4bkresg+hz6/Cl6d+m+3FO4Nz+ HKeaEMlg3EXHuxTnhsx4vSAWubdbpC+OfkU6kQHf1YU1zWZnIV9c7SbWmSNeaYhq sXLl6+YlPFwwZ0N5bUBqNkOsAQQveNFd/91mYGAZBi2R6P95F+RDV3/Jv3elhXgu egBb2Igf7imK/U6zFhgm6+jCdFdpGOfJ030UAMulezFi/czaiNdLNR3jE4nnfrwQ 4qexxqUkwzNrNWX0M9T/YQ7wl+jIWi3KKj4s4QLHTKXhoHNDY7hPsw== =W6Zl -----END PGP SIGNATURE-----

1 0

Clinton announces NEW GVT PROGRAMS to develop technology
by Declan McCullagh 17 Dec '03

17 Dec '03

WASHINGTON (AP) - Honoring 14 American scientists' "passion for discovery," President Clinton today announced $96 million in new government-assisted programs to develop chip-sized supercomputers, hand-held video phones and radio-transmitting ID cards to locate lost children. "Who knows what will be known in only 25 years," Clinton marveled, pointing to recent innovations on the Internet and human genome research. "We must rise to master the forces of change and progress as we move forward." The $96 million already provided by Congress for this budget year, combined with industry funds, would leverage roughly $200 million for research and development, Clinton said. "The discoveries of tomorrow will be made possible by the scientists of today and by our continued commitment to their passionate quest," Clinton said. The Defense Department and semiconductor industry are teaming up to pay for long-term university projects meant to eventually allow U.S. companies to manufacture fingernail-sized silicon chips containing billions of transistors. A Commerce Department initiative offers, through competitions, funds to small companies working on breakthroughs in areas such as portable video communications, radio transmitters to keep track of children and affordable DNA diagnostics. [...]

1 0

NIST IPsec-WIT (Web-based Interoperability Tester) on-line
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Tue, 16 Dec 1997 07:48:46 -0500 (EST) To: ipsec(a)tis.com Cc: rob.glenn(a)nist.gov From: rob.glenn(a)nist.gov Subject: NIST IPsec-WIT (Web-based Interoperability Tester) on-line MIME-Version: 1.0 Sender: owner-ipsec(a)ex.tis.com Precedence: bulk The NIST IPsec-WIT (Web-based Interoperability Tester) is on-line and ready for use. IPsec-WIT is an interoperability test system built around the NIST Cerberus IPsec reference implementation and commonly available WWW technology. IPsec-WIT allows its users to remotely control and execute series of interoperability tests with the Cerberus prototype. Test case selection, configuration, execution and results analysis are all controlled remotely by WWW browser. IPsec-WIT is currently operational for IPv4 IPsec protocols (with over 60 test cases) and will soon support IPv6 as well as key management protocol testing. For access to IPsec-wit and additional information see: http://ipsec-wit.antd.nist.gov. It is recommended that you read through the tutorial before testing for the first time. Comments and recommendations can be sent to ipsec-wit-dev(a)mail.antd.nist.gov. Best Regards, Rob G. rob.glenn(a)nist.gov PS - Sorry if you have already seen this once. I sent it out yesterday afternoon and haven't seen it yet. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

A gauntlet thrown down by PC-Magic?
by Alex Woolfson 17 Dec '03

17 Dec '03

Hey guys Just FYI here is the response I got from PC-Magic. -----Original Message----- From: Scott Chaney <scott(a)pc-magic.com> To: Alex Woolfson <abdiel(a)worldnet.att.net> Date: Monday, December 15, 1997 4:02 PM Subject: Re: Encrypted Magic Folders >Thanks for the feedback. We are considering an established standard. > >BTW, for all the "crap" we get from supposed crypto experts no one has >come close to breaking our method. It does make for humorous reading >tho. > >Scott > > Anyone care to take him up on his challenge? Please say yes. :-) Alex

3 2

Re: Identity, Persistence, Anonymity, and Accountability--Part I of II
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 12/14/97 6:54 PM, Tim May (tcmay(a)got.net) passed this wisdom: >But note that there absolutely is no requirement in the United >States for ageneral form of identification. Non-drivers need not >have any form of I.D. And as we have seen in court cases, a la >Lawson v. Kolender (where a blackman in dreadlocks used to like to >walk the streets of San Diego...the copsstopped him many times and >jailed him for not having I.D. on him...the court ruled that people >don't have to present credentials issued by the state to walk the >public streets). In New Jersey there is a criminal offense called "failure to properly identify" ... I don't know if its ever been tested, or if it is still on the books, but as of ten years ago it was there. I think it was a misdemeanor (in NJ the term is "petty disorderly persons offense) I cannot imagine it as a felony. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNJXIij7r4fUXwraZAQEMvAf9FzhcodfycwA3BSV4cB5nPAqyR+6+hguK 9VG1/b7CEvEyZleD1HzRbB7i8+ycwxvtZr959FPpume5LW3eWhSsVGLEb8A9EzW3 FQXqmxa6X6LLUcPIrhfSaO8JQdPV0LXOfXwW7ZZh7s02pUmTRgpXOuM5MdHSf0nG kKTGntI5JbaEmDgvyANXETV4EomZ/0Zm3zJiGw3M9G4aZpFl3LIgFPcOUSY1MwJI TMGbNCS/DveeAhmM2J+oa8DbUwqVYGGhA27YHNve5rtxqkDbobsF9OMY8ssU70D0 K0uHEq+ZoobSlNHHrFP+I52RxXiKtP4blGxn8riYmjBp8H4ih6Hsbw== =41Ml -----END PGP SIGNATURE----- Brian B. Riley --> http://members.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "to be yourself in a world that tries, night and day, to make you just like everybody else - is to fight the greatest battle there ever is to fight and keep on fighting" - e.e. cummings

3 2

Could you please PGP sign this MD5 sum?
by ichudov＠Algebra.COM 17 Dec '03

17 Dec '03

I would like to kindly ask you to sign this md5 sum with your PGP keys, and return it to me signed. I would also appreciate a copy of your PGP key. Thank you very much. ``I testify that I did see this MD5 checksum around Dec 16, 1997. f3bffc327bf88846bc1d790c56da0ffb caleidoscope.fixed.txt. '' Signed, -

2 1

The Joys of Being Canadian
by Anonymous 17 Dec '03

17 Dec '03

>Phone Company Rep: "What's your Social Security number? >Answer: "I don't have one. I'm Canadian." > >Power Company Rep: "What's your Social Security number? >Answer: "I don't have one. I'm Canadian." > >Cable Company Rep: "What's your Social Security number? >Answer: "I don't have one. I'm Canadian." > >Doctor to Seasoned Citizen: "I can't treat you privately or I'll be barred >from taking Medicare patients for two years." >Answer: "Sure you can. I'm Canadian." Now the question is: When they find out you lied will they care?

3 2

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The main french PGP HomePage is now here : http://www.geocities.com/SiliconValley/Bay/9648 The page is called "PGP POUR LES FRANCAIS" ("PGP for the french people") and is wholly in french language. You can find here a lot of informations about PGP 2.x and 5.x and a detailed PGP history. A bientot :) ----------------------------------------------- PGP pour les français http://www.geocities.com/SiliconValley/Bay/9648

1 0

Biometrics for the Masses
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Tue, 16 Dec 1997 16:05:08 -0800 From: jmuller(a)brobeck.com (John D. Muller) Subject: Biometrics for the Masses To: dcsb(a)ai.mit.edu Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: jmuller(a)brobeck.com (John D. Muller) December 13, 1997 Bank of America, Kroger, Mr. Payroll Agree To Test Automated Check Cashing Consumers and Retailers Benefit From Facial Biometric Technology <Picture> (Fort Worth, Texas) - Fort Worth-based Mr. Payroll Corporation , a wholly owned subsidiary of Cash America International (NYSE:PWN), along with Bank of America and The Kroger Company announced today they have entered into an agreement to test the Mr. Payroll automated check-cashing machine. The machines will be installed on December 16 in three Dallas area Kroger locations. Mr. Payroll, the world's first self-service check-cashing and automated teller machine, uses facial biometrics (the same technology now used to authenticate identity in the Pentagon) to identify users. This technology allows people with and without a bank account or photo identification to cash their payroll, government or personal check. "We're excited to have Bank of America and Kroger join us in providing consumers with 24-hour access to check-cashing services. This is a milestone for Mr. Payroll," said Mr. Payroll President Mike Stinson. "We're looking forward to testing this new check cashing technology in these Kroger locations," said Bank of America Vice President David McCary. "Providing financial services at popular retail locations enhances convenience for consumers." According to Manager, Store Services and Technology Jim Gehling, Kroger expects automated check cashing provided by Mr. Payroll to set a new standard in customer service in select stores. "To help introduce our shoppers to the machine, we're going to offer free check cashing through January 31, 1998," Gehling said. Consumers can look for the new machines in Texas at the Kroger stores located at 536 Centennial in Richardson, 235 E. FM 1382 in Cedar Hill, and 4142 Cedar Springs in Dallas. Mr. Payroll, which guarantees 100 percent of every check, has successfully cashed more than 25,000 checks since June 1997, when the first machine was installed at a convenience store in Fort Worth, Texas. To date, Mr. Payroll machines are operating in 18 convenience store locations in Arkansas, California, Colorado, Georgia, Nevada, Oklahoma, South Carolina and Texas. Bank of America Texas is a subsidiary of BankAmerica Corporation (NYSE:BAC), which has nearly 2,000 branches in 11 states. At September 30, 1197, BankAmerica had assets of $258 billion and deposits of $171 billion. Mr. Payroll is a registered trademark of Mr. Payroll Corp. All products or service names mentioned are the trademarks of their respective owners. For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

A gauntlet thrown down by PC-Magic?
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

On Tue, 16 Dec 1997 at 00:02:27 -0800, "Alex Woolfson" <abdiel(a)worldnet.att.net> wrote: > Hey guys > > Just FYI here is the response I got from PC-Magic. >> Thanks for the feedback. We are considering an established >> standard. >> >> BTW, for all the "crap" we get from supposed crypto experts >> no one has come close to breaking our method. It does make >> for humorous reading tho. >> >> Scott > Anyone care to take him up on his challenge? > Please say yes. :-) > > Alex What fucking challenge? Is he or are you so dimwitted as to think that people have nothing better to do than provide Scott and his cretinous friends with a first-hand education? A "challenge" would be something like: "PC-Magic has encrypted a [file/message/whatever] containing ecash in the amount of $50,000, has deposited with [an arm's-length third party] the original text, the encrypted [file/message/whatever], the software that decrypts it and the [password or passphrase], and hereby agrees to leave the ecash prize current and unrepudiated until [deadline date], after which we will re-deposit the ecash and instruct the [third party] to reveal the message and demonstrate its decryption as a proof that the challenge was genuine." The prize amount would have to be relatively high since these people have not published technical information and no one has any real interest in investing time and money to demonstrate that people who appear to be idiots are, in fact, idiots. The $10K and lower challenges that have been issued in the past have mostly come from known entities with published algorithms. Scott's characterization, "the 'crap' we get from supposed crypto experts." is indicative that he really didn't read and understand much of the criticism. It is typical of the ignorant who have embarked on a flawed course to become annoyed at well-founded criticism and to belittle their critics. "...no one has come close to breaking our method" is indicative only of the lack of motivation on the part of qualified cryptanalysts, most of whom have much better things to do. It is the responsibility of the advocate of a cryptographic technique to raise the level of interest in testing it sufficiently high that it will in fact be thoroughly tested. To claim that a technique has never been compromised is to claim nothing at all. I have a message I encrypted when I was 16 that no one has yet cracked. I could challenge PC-Magic to crack it. If they were sufficiently introspective to be able to examine their reasons for ignoring my "challenge" they would understand why theirs is not a challenge. OTOH if they had that many brain cells to rub together they would already have understood the logic of the criticisms they so glibly dismiss. Perhaps a more satisfying exercise would be if PC-Magic were to encrypt a ton of the worst child pornography, hate literature and conspiratorial assassination plans imaginable, then present themselves and the computer containing the encrypted goodies to the office of the Bavarian prosecutor. CryptoMongerII

1 0