December 2003 - cypherpunks-legacy

Re: Laptop TEMPEST (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 09 Feb 1998 16:36:16 -0800 > From: Bill Stewart <bill.stewart(a)pobox.com> > Subject: Re: Laptop TEMPEST (fwd) > At 08:30 AM 2/9/98 -0600, Jim Choate wrote: > >> FCC RF/EMC testing is well nigh useless for TEMPEST protection. > > > >I disagree, it would give you a gross baseline on the total emissions > FCC specs aren't real tight. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

What Jim Choate doesn't know
by Anonymous 17 Dec '03

17 Dec '03

When Jim Choate writes about something that I know about, he is usually wrong. Look at the hash he made of quantum mechanics recently. And don't get me started on his blunders regarding cryptography. So when he writes about something I don't know about, like the EM emissions of video tubes, I tend to assume the same thing. He's probably all messed up. Anybody else have the same experience? And how about his countless off-topic posts, forwarding all kinds of pointless crap? Is anyone else sick of that, too?

2 1

Re: the best justice money can buy --Lessig (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 09 Feb 1998 14:22:40 -0800 > From: Bill Stewart <bill.stewart(a)pobox.com> > Subject: Re: the best justice money can buy --Lessig (fwd) > Gates got rich not by selling good software, but by selling software > very well. His original money was made by being the first company to sell a CP/M compliant BASIC. It was very heavily pirated and Microsoft became a de facto standard for S-100 using CP/M. Then because of Digital Research's failure to treat IBM with respect he was selected as the supplier for their basic OS. This decision was made because of his reputation with CP/M software. Because of this connection Microsoft was in a position such that Gates couldn't help but make money as long as IBM was selling pc's. And considering nobody ever lost their job buying IBM it was a shoe in that IBM was going to sell machines. His first versions of Windows didn't sell. He looked at what was selling which was a GUI with more features and better looks. He hired the right people to impliment those changes and wallah he had a winner. All those pc's running his old os no longer had to go to Desqview and DR to get a GUI that was acceptable to their users. From their they have used various marketing and licensing tricks to increase his market share. > Copyright is part of the process, but it's possible to > sell your product to computer manufacturers with any customization > they need using contracts instead of copyright to make your money. But a company doesn't make money from selling software to computer manufacturers, they make money by having their software on pc's that the users use. > It's also possible to do copy protection in your software; > games makers do this because they're widely pirated by non-point-source > attacks (kids, mostly) who are hard to track down and sue, > unlike major computer manufacturers who are easier to find, > both to sue if needed or to provide support for. > Copy protection was one of the things people hated about Lotus 123; > I don't remember Excel or MS-DOS ever having it. And in the long run non-copyrighted software has a significant market advantage. It's smaller, it is more stable, and people don't get as pissed off when they want to make their backups. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: What's the latest in factoring? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 09 Feb 1998 13:40:03 -0800 > From: Bill Stewart <bill.stewart(a)pobox.com> > Subject: Re: What's the latest in factoring? > Remember that factoring difficulty is roughly exponential; > adding logn bits about doubles the cracking workload > (depending on which factoring method is being used). > Factoring a 1024-bit number is _much_ harder than factoring a 512-bit > number, and factoring a 2048-bit number is well into age-of-the-universe > difficulty level. The practical level of factoring right now > is about 512 bits, for either a distributed internet effort or > an NSA internal one; in the unlikely event that Moore's law lets > us double processing power 100 times in the next 150 years, > that means a 1500-bit key could be crackable. So 2048 bits > is certainly more than enough for _your_ lifetime. That depends on what current and near-future medical technology can do to extend the lifespan of humans. If your assumption is that most folks younger than about 50 will be dead in 75 years I suspect that you're in for a nasty surprise. The reason I posted those cc:'s regarding such research is enough that current estimates of key strength based on human life times need to be re-evaluated. It is my suspicion that within 10-15 years it will be possible, as a matter of course in regards employer medical insurance, to have ones biological clock reset such that the lifespan will be extended 3-4 times with the main limiting factor being cancers. Under those conditions key strength lifetime computations need to be re-evaluated. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: Driver Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 10 Feb 1998 02:12:05 +0100 (CET) > From: Lucky Green <shamrock(a)cypherpunks.to> > Subject: Re: Driver Licenses > On Mon, 9 Feb 1998, Tim May wrote: > > If a U.S. Passport is not considered enough I.D., because it doesn't have > > the Big Brother Inside magstripe, one walks away from the transaction. > > Just as a data point, in the State of Oregon, an US passport is *not* > valid ID for alcohol purchases. Magstripe or no magstripe. You can add Texas to that list. You can use a passport to get a Tx DL or ID card but it in and of itself is worthless for personal ID in most cases. Most places here specificaly require a valid drivers license from some state, they don't seem too interested in if Big Brother certifies your identity. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

The Wit and Wisdom of Tim May
by Anonymous 17 Dec '03

17 Dec '03

1 0

Re: Washington on the verge of being nuked?
by David Honig 17 Dec '03

17 Dec '03

At 06:34 PM 2/9/98 EST, Dr.Dimitri Vulis KOTM wrote: >One can "disrupt" the water supply by just making a credible assertion that >it's been poisoned - but it won't kill nearly as many people as actual >poison (or virus/bacteria). > Psychops? That doesn't work when you have sufficient health-orgs and telecomm to get the word out that the water's ok. Actually, a lot of people drink bottled water here :-) but the 10 million kilos of shit excreted by LA every day would build up pretty fast. Electric power is probably as vunerable as waterways, despite conscious efforts to make the grid redundant. Of course both are controlled by computers, as uncle sam is realizing. In LA, all it takes to create a looting riot is to cut electricity to the city's alarm systems... .... Major freeway intersections are closed down 2-3 times a year in LA due to bomb threats, which are usually just threats -no bombs are found. You can snarl the roads very easily at the right time of day, since the roads' bandwidth is already exceeded and congestion persists after the clog is removed. At *least* once a month a major piece of freeway is shut down for an hour or so for "police activity", one hears on traffic reports, often around rush hour. Crypto relevance: traffic signals can be controlled by modem, a Civ-E friend tells me. They are built to be fail-safe (blinking red), but ever seen rush hour commuters deal with all blinking red? Even tanks can't get through a gridlocked city (a factor in Korean invasion planning). ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu Lewinsky for President '2012

2 1

RYNO Seminar -- 18 February
by sbcom＠wainfleet.ids.on.ca 17 Dec '03

17 Dec '03

GETTING ELECTRONIC MEDICAL RECORDS INTO THE EXAM ROOM You are cordially invited to join RYNO, 4MD, Citrix and Symbol Technologies for a FREE seminar on a cost-effective method of getting electronic medical records into the exam room. At this half-day event you will hear several success stories on how other Health Care Institutions have implemented this program and benefited from innovative technology to increase profitability and efficiency. If you are interested in this technology, but cannot make it to the seminar, please contact RYNO's Healthcare Vertical Manager, Veronica Henderson at vhenderson(a)ryno.com or call her at 1-800-366-7966, xt 265 to learn more. Date: Wednesday, Feb. 18th, 1998 Time: Registration & Breakfast 9:00am* Seminar: 9:30am Adjourn and Hosted Lunch: 12:00pm* Location: Marriott Hotel, Walnut Creek 2355 North Main St. Walnut Creek, CA 94596 510-934-2000 RSVP: 707-746-6252 x262 or email - jramirez(a)ryno.com Please respond by February 13th *Breakfast and Lunch are complimentary Please feel free to RSVP anyone else who may be interested in attending. We look forward to seeing you there! Joy Ramirez RYNO 4271 Park Road Benicia CA 94510 707-746-6252 x262 jramirez(a)ryno.com SYMBOL TECHNOLOGIES AND 4MD CORPORATION: Healthcare provider needs can finally be addressed electronically. Symbol Technologies and 4MD Corporation provide a complete point-of-care solution for healthcare providers using a Winframe Server. 4MD Corporation has developed a simple, yet powerful, browser-based, Clinical Decision Support (CDS) application that runs on the Symbol wireless thin client over a Citrix Winframe. Healthcare providers can now pull up patient records, review electronic medical records, lab reports, radiology reports and other patient information as well as clinical guidelines all at a patient's bedside, or in the exam room on a handheld, flatscreen, mobile thin client. Symbol Technologies and 4MD Corporation solutions are designed for high-performance data management, and for satisfying the unique demands of healthcare applications where mobility, durability and ease of operations are a must. WINFRAME: Is the only software that allows you to access a single server with virtually any Windows application from across any type of network connection by any desktop without the software being installed on the desktop! Allows you to use existing hardware (old 386, 486 PC's) and still use advanced software applications, thus getting longer use out of the hardware and saving money. Gives IS departments more control and manageability over the network. Allows remote offices to access information easily from the main headquarters. Saves in maintenance costs. WHY WINFRAME? Today, more than ever, I/S professionals are pursuing cost-effective and efficient solutions to enterprise-wide application deployment. Deploying business-critical Windows-based application?s across the enterprise is a monumental task for today?s I/S professionals. They?re faced with huge obstacles including manageability requirements, multiple desktop computing platforms, clogged networks on heavily trafficked LAN?s, inadequate application performance for remote users, and poor security. And, if that?s not enough, they?re expected to solve these problems faster, with fewer people and a smaller budget! RYNO: RYNO is an award winning Bay Area VAR with top level expertise in both networking and software development. We serve healthcare institutions from building the network to developing the GroupWare applications that make a network function efficiently as a whole. RYNO?s mission is to provide our customers with increased profitability and efficiency by providing superior technology solutions. RYNO in partnership with Citrix Solutions is offering you a free seminar introducing WinFrame, a new paradigm in information management systems! DIRECTIONS TO WALNUT CREEK MARRIOTT: DRIVING FROM SAN FRANCISCO: I-101 North - follow signs to Bay Bridge (right lanes) to I-580 East. One mile to Highway 24 Concord/Walnut Creek. Highway 24 East to I-680 North. Continue I-680 North to North Main Street exit. Turn left on North Main Street and right on Parkside Drive. Hotel is located on the corner of Parkside Drive and North Main Street. DRIVING FROM OAKLAND: Follow signs to I-880 Freeway North (towards Oakland). Take I-880 to I-980 - Walnut Creek. This turns into Highway 24. Drive East on Highway 24 (use left lanes) to I-680 Interchange.Drive North to I-680 for 1.5 miles to North Main Street Exit. Turn left on North Main Street and right on parkside Drive. Hotel is located on the corner of Parkside Drive and North Main Street. DRIVING FROM SACRAMENTO: Follow the signs to I-680 South Concord and Walnut Creek. Cross the Benicia Bridge and proceed to Walnut Creek, exiting on North Main Street. (Approx. 5 miles). Stay in the right lane and turn right after exiting North main. The hotel is one block East on the right side of the street. DRIVING FROM SAN JOSE: Follow the signs to I-680. As you approach Walnut Creek, stay to the right and exit at North Main Street. Turn left on North Main Street and right on Parkside Drive. Hotel is located on the corner of Parkside Drive and North Main Street. /////////////////////////////////////////////////////////////////////////////// This Message was Composed using Extractor Pro Bulk E- Mail Software. If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings. ////////////////////////////////////////////////////////////////////////////////

1 0

Financial Cryptography 1998 Workshop UPDATE
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Mon, 9 Feb 1998 14:37:24 -0400 X-Authentication-Warning: online.offshore.com.ai: list set sender to fc98-request(a)offshore.com.ai using -f Subject: Financial Cryptography 1998 Workshop UPDATE To: fc98(a)offshore.com.ai Date: Mon, 09 Feb 1998 10:20:13 -0800 From: Ian Goldberg <iang(a)cs.berkeley.edu> Resent-From: fc98(a)offshore.com.ai X-Mailing-List: <fc98(a)offshore.com.ai> archive/latest X-Loop: fc98(a)offshore.com.ai Precedence: list Resent-Sender: fc98-request(a)offshore.com.ai CALL FOR PARTICIPANTS - UPDATE The Financial Cryptography 1998 (FC98) Workshop for Senior Managers and IS Professionals March 2-6, 1998 The InterIsland Hotel Anguilla, BWI <http://fc98.ai/> FC98 is sponsored by: * RSA Data Security Inc. <http://www.rsa.com/> * C2NET, Inc. <http://www.c2.net/> * Hansa Bank & Trust Company Limited, Anguilla <http://www.hansa.net/> * Sicherheit und Privat- International Bank * Offshore Information Services <http://www.offshore.com.ai/> * e$ <http://www.shipwright.com/> FC98 Conference and Exhibition February 23-27, 1998 FC98 Workshop for Senior Managers and IS Professionals March 2-6, 1998 The Inter-Island Hotel Anguilla, BWI Workshop and Conference Reservations: <http://fc98.ai/> Last year, the Financial Cryptography '97 (FC97) Workshop was the world's first intensive financial cryptography workshop for senior managers and IS professionals. This year, the Financial Cryptography '98 (FC98) Workshop will be held Monday through Friday, March 2-6, 1998, at the Inter-Island Hotel on the Carribbean island of Anguilla. This workshop will follow the peer-reviewed financial cryptography conference and commercial exhibition, Financial Cryptography 1998 (FC98), which will be held the preceding week, February 23-27, 1998. The goals of the combined workshop, conference and exhibition are: * to give senior managers and IS professionals a solid understanding of the fundamentals of strong cryptgraphy as applied to financial operations on public networks, * to provide a peer-reviewed forum for important research in financial cryptography and the effects it will have on society, and, * to showcase the newest products in financial cryptography. The Workshop Ian Goldberg, the Workshop chair, has picked an outstanding team of instructors in financial cryptography and internet financial system security to teach the courses in this workshop. The Workshop will consist of 40 hours of intensive instruction and lab time over 5 days. Students will have access to Internet-connected workstations. Who Should Attend The Workshop is intended for senior IS managers and technical professionals who want to get completely up to speed on the design, development, and implementation of financial cryptography systems, the core technology of internet commerce. After the workshop, senior managers will have a hands-on understanding the strengths and liabilities of currently available financial cryptography and internet transaction security software and hardware, and thus be able to make better asset allocation decisions in this area of explosive technology growth. Senior technical professionals with strong IS experience will be able to implement those technologies and to pass on what they've learned to their clients and colleagues when they return home. The Workshop will be held in a casual but intensive atmosphere at the very cutting edge of financial technology on the internet. Someone has likened the experience to a financial cryptography bootcamp. At the end, Workshop attendees should be utterly conversant in cryptography as it applies to finance. Workshop participants will not only know what everyone else is doing now in internet commerce, but, more important, because they understand the implications of strong financial cryptography on ubiquitous public networks, they will be able to know what to do *next*. The Workshop Leader Ian Goldberg is a Ph.D. student in security and cryptography at the University of California, Berkeley. He was the first winner of RSA Data Security Inc.'s Secret-Key Challenge, breaking a 40-bit cipher in just 3.5 hours. In late 1995, he discovered what became a much-publicized flaw in Netscape's implementation of SSL. He is a recognized expert in electronic payment systems, and in DigiCash's ecash digital bearer certificate protocol in particular. He has produced several ecash clients for Unix and Windows, as well as an ecash module for the Stronghold web server, which has extended the existing ecash system for better security, privacy, and ease-of-use. The Principal Instructors Gary Howland has spent the last four years with several companies that are primarily working with secure electronic commerce (including Digicash), where he has been involved with the design and development of secure payment protocols, and the application of these protocols to such tasks as electronic cash, bond trading, loyalty systems, and online gambling. He is also responsible for the development of the a freely available cryptographic library for java and perl. John Kelsey is an experienced cryptographer, cryptanalyst, and programmer who has designed several algorithms and protocols. He pioneered research on secure random number generators, differential related-key cryptanalysis on block ciphers, and the chosen-protocol attack against cryptographic protocols. His research has been presented at several international conferences, and he has broken many proposed commercial cryptographic algorithm, protocol, and system designs. Kelsey has a degree in Computer Science and Economics from the University of Missouri Columbia. Adam Shostack is Director of Technology for Netect, Inc, a Boston based startup building state of the art server security management applications. He has extensive background in designing, implementing and testing secure systems for clients in the medical, computer, and financial industries. His recent public work includes 'Apparent Weaknesses in the Security Dynamics Client Server Protocol,' 'Source Code Review Guidelines,' and comparisons of freely available cryptographic libraries. Workshop Topics * Security on the Internet o Internet Protocols: IP, TCP, UDP o Higher-level Protocols: Telnet, FTP, HTTP, SSL o Solid Foundations for Cryptographic Systems o A History of Internet Attacks o Building Internet Firewalls o Building a Bastion Host o Turning your Bastion Host into a Web Server o Non-internet Internet Security * Cryptography o The Need for Cryptography o History of Cryptography o Classical Methods o Modern Methods o Private and Public Key Cryptography o Authentication vs. Security o Certification and Public Key Infrastructures o Cryptographic Protocols o Engineering a Cryptographically Secure System o Why Cryptography is Harder than it Looks o Security Through Obscurity and How to Recognize Snake Oil * Internet Payment Systems o Payment models: coin-based, cheque-based, account-based o Security Issues o Privacy and Anonymity Issues o Smartcards vs. Software o Existing Payment Schemes + credit cards + First Virtual + CyberCash + DigiCash o Forthcoming Payment Schemes + SET + Mondex + Millicent + micropayments * Setting Up an ecash-Enabled Web Server o Setting up the Web Server o Signing up for ecash o Installing the ecash Module o Setting Prices o Logging o Advanced Methods + ecashiers + moneychangers The price of the workshop is $5,000 U.S. You can pay for your FC98 workshop ticket with Visa or MasterCard, with ecash, or with any of a number of other internet commerce payment protocols, at the regstriation site: <http://fc98.ai/>. Please register and make your plane and hotel reservations as soon as possible; workshop space is extremely limited. The workshop price includes meals (but not lodging) at the InterIsland Hotel and lab space, plus the delivery and installation of hardware, network access, internet commerce software, all to a location like Anguilla. And, of course, 40 hours of instruction and structured lab activity. We have priced the workshop to be competitive with other comprehensive business and professional technology workshops of similar total session length. In addition, the first ten FC98 workshop participants will receive a 50% reduction in their FC98 Conference and Exhibition fee, for a savings of $500 off the $1,000 conference admission. You can register, and pay for, your workshop ticket at <http://fc98.ai/>. Air Transportation and Hotels Air travel to Anguilla is typically done through San Juan or St. Maarten/Martin. There are several non-stop flights a day from various US and European locations. Connection through to Anguilla can be made through American Eagle, or through LIAT, or in the case of St. Maarten, with a short ferry ride to Anguilla. See your travel agent for details. Anguilla's runway is 3600 feet, with a displaced threshold of 600 feet, and can accomodate business jets. Obviously, you should talk to your aviation staff for details about your own aircraft's capabilities in this regard. Anguilla import duties are not imposed on hardware or software which will leave the island again, so, as long as you take it with you when you leave, you won't pay import duties. Please Note: Your FC98 Workshop fee only covers meals at the InterIsland Hotel. The InterIsland is actually a small guesthouse attached to a large conference facility, and so rooms there are in short supply. Fortunately, there are lots of small hotels and guesthouses nearby. For more information on these hotels, please see <http://fc98.ai/> for more information. Other hotels on Anguilla range from spartan to luxurious, all within easy walking or driving distance of the Workshop at the InterIsland. More information about Anguillan hotels can be obtained from your travel agent, or at <http://fc98.ai/>. Registration and Information for Other FC98 Events To register and pay for your ticket to the FC98 conference itself, see: <http://fc98.ai/> For information the selection of papers for the FC98 conference see: <http://www.cwi.nl/conferences/FC98> If you're interested in Exhibition space, please contact Blanc Weber: <blancw(a)cnw.com> If you're interested in sponsoring FC98, also contact Blanc Weber: <blancw(a)cnw.com> Financial Cryptography '98 is held in cooperation with the International Association for Cryptologic Research. The conference proceedings will be published by Springer Verlag in their Lecture Notes in Computer Science (LNCS) series. The FC98 Organizing Committee: * Vince Cate and Bob Hettinga, General Chairs * Ray Hirschfeld, Conference Chair * Matt Franklin, Conference Co-Chair * Ian Goldberg, Workshop Chair * Blanc Weber, Exhibit and Sponsorship Manager And our sponsors... * RSA Data Security Inc. <http://www.rsa.com/> * C2NET, Inc. <http://www.c2.net/> * Hansa Bank & Trust Company Limited, Anguilla <http://www.hansa.net/> * Sicherheit und Privat- International Bank * Offshore Information Services <http://www.offshore.com.ai/> * e$ <http://www.shipwright.com/> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: Drivers Licenses
by David Miller 17 Dec '03

17 Dec '03

Anonymous (remailer(a)htp.org) wrote: > My question is, how much information can be stored on these strips? The data that's stored on most of the cards (credit cards, hotel keys, gym cards, etc.) are encoded with 5 bits per character. I believe that this is also known as Baudot encoding. You can store somewhere around 80 characters per track on "normal" cards, and most cards contain a 1/2" magnetic stripe that can hold 4, 1/8" tracks. So, I would estimate that your drivers license would hold a total of about 320 characters on all four tracks with standard encoding techniques. If you are interested in rendering only individual tracks unreadable, it can be done. I have done it by scratching off the magnetic material as you described. Of course, all tracks run horizontally across the card, with track 1 being the track closest to the edge of the card. So, if you wanted to destroy track 1, you could scrape off the 1/8" of the strip closest to the long edge of the license. Have fun. --David Miller middle rival devil rim lad

1 0