December 2003 - cypherpunks-legacy

PGP's Response
by Steve Orrin 17 Dec '03

17 Dec '03

The following is PGP's official response (from there web site) to the TIS acquisition by NETA. What it infers is that while PGP for Personal use won't (at least until NETA decides otherwise) incorporate TIS technology, it leaves the door wide open for PGP for Business use.... Network Associates and Key Recovery With the acquisition of Trusted Information Systems (TIS) by Network Associates, NAI has added a new technology to its product portfolio -- key recovery. This TIS-developed technology addresses the market needs for encryption key recovery and management. NAI will continue to provide this technology to the market. NAI's PGP product group already provides the capability for corporations to recover information from PGP products deployed in corporate environments. The requirement for this capability from corporations has been evident and well-known for quite sometime. However, NAI does not believe there is a need for key recovery in PGP products for the individual. NAI will develop and market products that its customers need and want but will not include any technology that is not required by its customers. A Picture Tells A Thousand Words. STEGO

1 0

Valentine Suprise
by celeste＠seeme.net 17 Dec '03

17 Dec '03

Me and my friends are so lonely!! I wish that you would come and see me. With Valentines day coming I don't want to be alone. I will do anything to make you happy, if you want me to I'll even invite a friend over to join us. Just PLEASE don't let me be alone! I'll be awaiting for you every night. I'll be at: http://www.cyber-fantasy.com/

1 0

DDJ Crypto CD has arrived!
by Peter Trei 17 Dec '03

17 Dec '03

Well, it's finally here. Frankly, I'm a little disapointed with the presentation. It's based around a program called Hyper Reader, from Intergaid. This seems a bit out of date - the copyright runs from 1987-1994. While this may have been driven by a desire to support Win 3.1 without extra software, an HTML based approach would have been my preference. I've encountered a few minor bugs in the few minutes I've played with it; not all of the buttons work properly, and the color maps go to hell when the program's window is not selected. While the book data is stored in some proprietary format with an *.hw4 extension, chapters can be easily exported to flat text files. They can also be exported in WP format, but diagrams don't seem to come out (at least when I export them to MS Word) - figures seem to be scanned bitmaps from the books. Here's the copyright data, which lists the books present: >Applied Cryptography, Cryptographic Protocols, and Computer Security >Models by Richard Demillo. Copyright 1983, American Mathematical >Society. All rights reserved. >Applied Cryptography: Protocols, Algorithms, and Source Code in C, >Second Edition, by Bruce Schneier. Copyright 1995, John Wiley & Sons, >Inc. All rights reserved. >Contemporary Cryptology: The Science of Information Integrity, edited >by Gustavus J. Simmons, Copyright 1992, IEEE. All rights reserved. No >part of this book may be reproduced or transmitted in any form or by >any means, electronic or mechanical, including photocopying, recording >or by any information storage and retrieval system, without permission >in writing from the IEEE. >Cryptography and Data Security by Dorothy Denning. Copyright 1982, >Addison-Wesley Publishing Co., Inc. All rights reserved. No part of >this book may be reproduced or transmitted in any form or by any means, >electronic or mechanical, including photocopying, recording, or by any >information storage and retrieval system, without permission in writing >from Addison-Wesley Longman, Inc. Use of this licensed CD-ROM version >is subject to the terms of the individual, noncommercial license >granted the purchaser of this CD-ROM version. >Cryptography: A New Dimension in Computer Data Security, by Carl Meyer. >Copyright 1982, John Wiley &Sons. All rights reserved. >Cryptography: Theory and Practice, by Douglas Stinson., Copyright 1995, >CRC Press. All rights reserved. >Handbook of Applied Cryptography, by Paul C. Van Oorschot, Scott A. >Vanstone, and Alfred Menezes. Copyright 1996, CRC Press. All rights >reserved. >Military Cryptanalysis, Volume I, by William Friedman, Aegean Park >Press. All rights reserved > Military Cryptanalysis, Volumes II, by William Friedman, Aegean Park >Press. All rights reserved. >Military Cryptanalysis, Volumes III, by William Friedman, Aegean Park >Press. All rights reserved. >Military Cryptanalysis, Volumes IV, by William Friedman, Aegean Park >Press. All rights reserved. >"RSA Laboratories FAQ on Cryptography," "RSA Laboratories Technical >Reports," "RSA Laboratories Security Bulletins," and "CrytoBytes >Newsletter" Copyright 1997 RSA Data Security, Inc. All rights >reserved. For those wondering: Applied Cryptography includes the source code appendix. I have not checked if it has the 5th printing corrections. Peter Trei ptrei(a)securitydynamics.com

3 2

return.C -- performance tracking tool (fwd)
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

I have been using this program for a while and decided to share it with the other readers. It is written in C++. /*********************************************************************** This program calculates the total portfolio return. It may be used to find out an individual's stock picking performance and compare it to some benchmark. Right now it compiles under Unix, but I would expect it to work under DOS and Win32 console interface. To compile it, type gcc -lm -lg++ -o return return.C This program was written because I was not satisfied with the existing portfolio tracking websites due to their extremely limited and incorrect functionality. It works by treating your investments as a "mutual fund". It tracks the number of "shares" held. It means that additional cash infusions, withdrawals, stock splits, sales of securities do not affect the per share value. This is done so that the changing size of the portfolio would not skew the estimate of the true performance of the stock picker. However, dividends, fees and recorded capital appreciation do affect the per share value. Short sales are allowed by specifying a negative stock amount. I strongly suggest that investors regularly record stock prices into their transaction files (using the VAL operator) to monitor how they are doing. USAGE: portfolio-return transaction-file-name TICKER=price TICKER=price ... EXAMPLE portfolio-return MYSTOCKS.TXT MSFT=130 T=65.56 It reads a text file that contains the record of transactions, and prices, and requests to print out the portfolio value. # This is a typical file used to calculate total return. # This file contains comments, marked by "#" characters, # and transaction info. # # Transaction info consists of records of the following form: # # INV Amount -- tells how much was invested in Category # PUR Ticker numshares share_price -- stock purchase info # SAL Ticker numshares share_price -- stock sale # DIV Ticker Amount -- how much dividend was received # WDR Amount -- cash withdrawal # VAL Ticker Amount -- Value per share # SPL Ticker new_to_old -- stock split # FEE amount -- various fees (like margin loan # interest, commission etc) # (negative FEE means incoming cash, from e.g interest on the cash held # by the broker) # PRN Comment -- Print portfolio with Comment # Happy investing. Copyright (c) Igor Chudov 1997. ichudov(a)algebra.com http://www.algebra.com/~ichudov GNU Copyright applies. There is NO WARRANTY WHATSOEVER. By using this program you agree to indemnify and hold it author harmless from any liabilities resulting in connection with your use of the program. You are allowed to copy this program freely provided that the copyright notice remains intact. */ #include <stdio.h> #include <iostream.h> #include <string.h> #include <stdlib.h> #include <ctype.h> #define Money double #define StockTicker char * #define Date int class Stock { public: Stock( const StockTicker theTicker, int theQuantity = 0, Money theValue = 0.0 ) : Ticker( strdup( theTicker ) ), Quantity( theQuantity ), Value( theValue ) { // nothing } ~Stock( void ) { delete[] Ticker; } void Purchase( int theQuantity ) { Quantity += theQuantity; } int GetQuantity( void ) const { return Quantity; }; void SetValue( Money theValue ) { Value = theValue; } Money GetValue( void ) const { return Value; } const StockTicker GetTicker( void ) const { return Ticker; } void Split( Money factor ) { Quantity *= factor, Value /= factor; } private: Money Value; StockTicker Ticker; int Quantity; }; typedef Stock * PStock; class Portfolio { public: Portfolio( void ); ~Portfolio( void ); // What can happen to the portfolios: // Add cash to the portfolio void Invest( Money Cash ); // Purchase (or sell (even short) if Quantity is negative) void Purchase( const StockTicker Ticker, int Quantity, Money Value ); // Dividend received, 1 success, 0 failure int Dividend( const StockTicker Ticker, Money DividendPerShare ); // Split, factor is new # of shares to old # of shares, 1 success, 0 failure int Split( const StockTicker Ticker, Money factor ); // Withdrawal void Withdraw( Money Amount ); // Fee -- margin interest, commission etc void Fee( Money amount ); // Change in Stock valuation int Valuation( StockTicker Ticker, Money theValue ); ///////////////////////////// // Equity = Cash + StockValue Money Equity( void ) const; Money EquityPerShare( void ) const { return Equity()/NumShares; } int GetNumShares( void ) const { return NumShares; } void Print( ostream & os, const char * comment = 0 ); protected: void Revaluate( void ); int FindStock( const StockTicker Ticker ); private: Stock ** Stocks; int NumberStocks; int MaxNumberStocks; Money Return; Money LastDate; Money Cash; Money NumShares; }; Portfolio::Portfolio( void ) : NumberStocks( 0 ), MaxNumberStocks( 100 ), Cash( 0.0 ), NumShares( 0 ), Return( 0.0 ), LastDate( 0 ) { Stocks = new PStock[ MaxNumberStocks ]; } Portfolio::~Portfolio( void ) { delete[] Stocks; } void Portfolio::Invest( Money theCash ) { //cout << "investing " << theCash << endl; if( NumShares != 0 ) { NumShares += theCash/EquityPerShare(); Cash += theCash; } else { Cash = theCash; NumShares = Cash; } } void Portfolio::Withdraw( Money Amount ) { Invest( -Amount ); } void Portfolio::Fee( Money Amount ) { Cash -= Amount; } int Portfolio::FindStock( const StockTicker Ticker ) { for( int i = 0; i < NumberStocks; i++ ) if( !strcmp( Ticker, Stocks[i]->GetTicker() ) ) { return i; break; } return -1; } void Portfolio::Purchase( const StockTicker Ticker, int Quantity, Money Value ) { int found = FindStock( Ticker ); if( found == -1 ) // need to add a stock { if( NumberStocks == MaxNumberStocks ) // need to resize { Stock ** NewStocks = new PStock[ MaxNumberStocks * 2 ]; memcpy( NewStocks, Stocks, sizeof( Stock ) * MaxNumberStocks ); delete[] Stocks; Stocks = NewStocks; MaxNumberStocks *= 2; } found = NumberStocks++; Stocks[found] = new Stock( Ticker, Quantity, Value ); } else { Stocks[found]->Purchase( Quantity ); Stocks[found]->SetValue( Value ); } Cash -= Quantity * Value; } int Portfolio::Dividend( const StockTicker Ticker, Money DividendPerShare ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; Cash += DividendPerShare * Stocks[found]->GetQuantity(); } int Portfolio::Split( const StockTicker Ticker, Money Factor ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; Stocks[found]->Split( Factor ); } int Portfolio::Valuation( StockTicker Ticker, Money theValue ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; // failure Stocks[found]->SetValue( theValue ); return 1; // success } Money Portfolio::Equity( void ) const { Money e = Cash; for( int i =0; i < NumberStocks; i++ ) e += Stocks[i]->GetQuantity() * Stocks[i]->GetValue(); return e ; } void Portfolio::Print( ostream & os, const char * comment ) { os << endl << "Portfolio: " << (comment ? comment : "" ) << endl; for( int i = 0; i < NumberStocks; i++ ) os << Stocks[i]->GetTicker() << " " << Stocks[i]->GetQuantity() << " " << Stocks[i]->GetValue() << ", Total = " << Stocks[i]->GetValue() * Stocks[i]->GetQuantity() << endl; os << "Cash: " << Cash << endl; cout << "Equity = " << Equity() << endl; cout << "Number of Shares = " << GetNumShares() << endl; cout << "Share Value = " << EquityPerShare() << endl; } void ReadHistory( Portfolio & portfolio, FILE * f ) { while( !feof( f ) ) { char buf[2048]; buf[0] = 0; fgets( buf, sizeof( buf ), f ); //cout << buf; char * p = strchr( buf, '#' ); if( p != 0 ) *p = 0; // Comment # for( p = buf; *p; p++ ) *p = toupper( *p ); if( !strncmp( buf, "INV", 3 ) ) { //cout << "investing" << endl; float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Invest( amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "WDR", 3 ) ) { float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Invest( -amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "PUR", 3 ) ) { float price; int numshares; char ticker[2048]; if( sscanf( buf+4, "%s %d %f", &ticker, &numshares, &price ) == 3 ) portfolio.Purchase( ticker, numshares, price ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "FEE", 3 ) ) { float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Fee( amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "SAL", 3 ) ) { float price; int numshares; char ticker[2048]; if( sscanf( buf+4, "%s %d %f", &ticker, &numshares, &price ) == 3 ) portfolio.Purchase( ticker, -numshares, price ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "DIV", 3 ) ) { float div; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &div ) == 2 ) portfolio.Dividend( ticker, div ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "VAL", 3 ) ) { float val; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &val ) == 2 ) portfolio.Valuation( ticker, val ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "SPL", 3 ) ) { float factor; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &factor ) == 2 ) portfolio.Split( ticker, factor ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "PRN", 3 ) ) { portfolio.Print( cout, buf + 4 ); } } } int main( int argc, char *argv[] ) { Portfolio portfolio; FILE * input; if( argc >= 2 ) { if( (input = fopen( argv[1], "r" )) == 0 ) { fprintf( stderr, "Can't open %s.\n" "Usage: %s activity-file TICK=val TICK1=val ...\n", argv[1], argv[0] ); exit( 1 ); } } else { input = stdin; } ReadHistory( portfolio, input ); for( argc--; argc > 1; argc-- ) // process arguments of form "TICKER=value" { char buf[ 2048 ]; strcpy( buf, argv[argc] ); for( char * p = buf; *p; p++ ) *p = toupper( *p ); char * pvalue = strchr( buf, '=' ); if( pvalue == 0 ) { cerr << "Wrong argument: " << argv[argc] << ". Must be of form TICKER=value" << endl; continue; } *pvalue++=0; float value; if( sscanf( pvalue, "%f", &value ) != 1 ) { cerr << "Wrong argument: " << argv[argc] << ". Must be of form TICKER=value" << endl; continue; } if( !portfolio.Valuation( buf, value ) ) { cerr << "Ticker " << buf << " not found in the portfolio!" << endl; } } portfolio.Print( cout, "Final Result" ); printf( "\n\n" "Copyright (C) Igor Chudov, ichudov(a)algebra.com,\n" " http://www.algebra.com/~ichudov\n\n" "No warranty is provided with this free program. GNU Copyright applies.\n" ); }

3 4

IRC CHAT Terrorism and Desert Thunder
by Betty G.O'Hearn 17 Dec '03

17 Dec '03

Come join us and chat with Clark Staten, Senior Analyst, Emergency Response & Research Institute Date: Tuesday, February 24, 1998 Time: 7:30 pm EST, 6:30 pm CST, 5:30pm MST, and 4:30pm PST (US) Topic: "Terrorism and Desert Thunder" If you're interested in attending, please reply with a request for a password and instructions to enter the chat room. Betty O'Hearn Assistant to Mr. Winn Schwartau 813-360-6256 Voice 813-363-7277 FAX http://www.infowar.com http://www.info-sec.com "Air Power is an unusually seductive form of military strength because, like modern courtship, it appears to offer the pleasures of gratification without the burdens of commitment." Eliot A. Cohen

1 0

Re: Valentine Suprise
by William R. Butler 17 Dec '03

17 Dec '03

FUCK-OFF!!!!!!!!!!!!!!!! ************************ ----Original Message Follows---- From: celeste(a)seeme.net Date: Mon, 23 Feb 1998 17:57:41 -0800 (PST) To: <cypherpunks(a)toad.com> Subject: Valentine Suprise Reply-To: celeste(a)seeme.com Me and my friends are so lonely!! I wish that you would come and see me. With Valentines day coming I don't want to be alone. I will do anything to make you happy, if you want me to I'll even invite a friend over to join us. Just PLEASE don't let me be alone! I'll be awaiting for you every night. I'll be at: http://www.cyber-fantasy.com/ ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Re: Group to Attack Clinton on Crypto
by Information Security 17 Dec '03

17 Dec '03

> From cypherpunks-errors(a)toad.com Tue Feb 24 21:27:15 1998 > To: ukcrypto(a)maillist.ox.ac.uk > Subject: Group to Attack Clinton on Crypto > > >From http://www.news.com/News/Item/0,4,19388,00.html > > Group to Attack Clinton on Crypto > By Courtney Macavinta > Staff Writer, CNET NEWS.COM > February 23, 1998, 2:40 p.m. PT > > A bipartisan group of politicos, high-tech companies, > and privacy advocates will announce a broad coalition > next week to overturn the White House's current > encryption policy through a million-dollar media blitz > and lobbying campaign, CNET's NEWS.COM has > learned. # # ####### # ### # # # # # ### # # # # # ### # ##### # # # # # ####### # # # # ### # ####### # # ### ---guy Poor grumpy William H. Geiger III, odd-man-out.

2 1

In todays CyberTimes--"European Study Paints a Chilling Portrai
by Charles Anthony 17 Dec '03

17 Dec '03

FYI - In today's CyberTimes: "European Study Paints a Chilling Portrait of Technology's Uses" By BRUNO GIUSSANI " A massive telecommunications interception network operates within Europe and, according to a new study circulating on the Internet, "targets the telephone, fax and e-mail messages of private citizens, politicians, trade unionists and companies alike." The article can be found at: http://www.nytimes.com/library/cyber/euro/022498euro.html

1 0

Re: In todays CyberTimes--"European Study Paints a Chilling Portrai
by Information Security 17 Dec '03

17 Dec '03

> From: "Charles Anthony" <canthony(a)info-nation.com> > The article can be found at: > > http://www.nytimes.com/library/cyber/euro/022498euro.html "The network, dubbed Echelon, is described in a new study by the European Parliament titled 'An Appraisal of Technologies of Political Control.'" It's high time Don Mclean (sic) or someone took the extensive documentation collected in the Cryptography Manifesto regarding this, which includes massive USA domestic spying, and started writing news stories about it, and get other news organizations interested in the questions raised. Questions to be put to Senators. Why? Because it is ECHELON, not pedophiles, not drug dealers, that is not only the hold-up for freely exportable software, but also for why the FBI has openly moved to regulate all domestic cryptography into oblivion. The story of massive spying is one "the American people" can understand. Cryptography is too distant. Go for it, someone, please. ---guy No one listens to me.

2 1

NYT on Crypto Smoke
by John Young 17 Dec '03

17 Dec '03

The New York Times, February 27, 1998, p. D1. Clinton Continues to Stumble Over the 'E' Word (Encryption) By John Markoff San Francisco, Feb. 26 -- President Clinton described the economic impact of the Internet today in glowing terms to an audience of technology investors here, but he failed to touch on the issue that increasingly appears to matter most to Silicon Valley: the fiery debate over the Administration's policy on data scrambling. The Clinton Administration has endeared itself to the nation's high-technology center by cutting capital gains taxes and by calling today for a bill that would bar state and local governments from enacting taxes on the Internet until 2004. But encryption may prove to be the Administration's Achilles' heel in its otherwise friendly ties with Silicon Valley. The debate over encryption -- which has pitted industry and civil liberties groups against law enforcement and intelligence agencies -- has sharpened in recent weeks. New legislation that would restrict the unlimited use of encryption is about to be introduced on Capitol Hill. A series of intense behind-the-scenes negotiations over a compromise solution between the Clinton Administration and a small group of high-technology executives suggests that no simple resolution is in sight. Encryption policy has become a flash point because it is both essential for the growth of Internet commerce and vital for the protection of privacy. Techniques that use mathematical formulas permit computers to scramble data so they cannot be read without access to a special "key," usually a large number that permits a user to unscramble the information. Law enforcement officials want to force users to put such keys in escrow with independent authorities to allow for electronic surveillance in criminal investigations. President Clinton has told Silicon Valley executives in private meetings that he is sympathetic with their viewpoint but that he is under great pressure from law enforcement and national security officials to put even greater controls in place on encryption technology. "To us this is really important, but it's just an irritant to him," said one Silicon Valley executive who met with the President before his speech today and asked not be identified further. "His basic message to us was, 'Can we get this thing done?' " Senators John McCain, Republican of Arizona, and Bob Kerrey, Democrat of Nebraska, are circulating a revised version of their encryption bill, which includes several changes in response to industry and privacy concerns but it has so far won few adherents outside of the law-enforcement community. Critics say the legislation is simply a placeholder for future laws that would restrict the use of the technology. "Everyone who is looking at the export issue is looking at it as a prelude to domestic controls," said Mark Rasch, a former Federal prosecutor who is now a specialist in encryption and computer security issues at the Science Applications International Corporation in McLean, Va. Industry opponents of encryption controls, heavily financed by high-technology companies, are preparing to announce on Wednesday a new coalition, Americans for Privacy, aimed at ending restrictions on encryption technology exports. At the same time Hewlett Packard plans to announce on Friday a new set of encryption technologies, with endorsements from the Department of Commerce and companies like I.B.M.. These technologies known as the International Cryptographic Framework, would let individual governments establish potentially conflicting encryption policies -- or even place no restrictions. Silicon Valley executives argue that the law-enforcement demand for the continued ability to wiretap in the information age is wishful thinking at best. The easy availability of powerful encryption software has made it possible for any two people, anywhere in the world to hold a secret conversation beyond the prying of even the most powerful code-breaking computer, they say. The White House is now considering several other industry proposals intent on finding a compromise between industry and law enforcement interests. Another approach that is now being raised in negotiations between industry executives and the White House has been put forth by executives from Cisco Systems, the company that is the dominate provider of Internet routing equipment. The Cisco proposal, known as Clearzone, would place encryption in the network instead of from personal computer to personal computer. Then, if a law-enforcement agency had a warrant to wiretap, it would be possible to go to an Internet provider that could then turn off encryption. But this proposal makes no provision for retrieving stored information also sought by law-enforcement agents. [Photo] President Clinton and Sandy Robertson of BancAmerica Robertson Stephens, at a conference of technology executives and investors in San Francisco yesterday. [End]

1 0