December 2003 - cypherpunks-legacy

MEDIA RELEASE: DATA FELLOWS SHIPS F-SECURE FILECRYPTO
by Marita N�sman-Repo 17 Dec '03

17 Dec '03

Data Fellows Ltd. Media Release PL 24 FIN-02231 ESPOO FOR IMMEDIATE RELEASE Tel. +358 9 859 900 Fax. +358 9 8599 0599 http://www.DataFellows.com Crypto-Sales(a)DataFellows.com DATA FELLOWS SHIPS F-SECURE FILECRYPTO New Product Provides On-the-Fly Protection For Sensitive Data on Personal Computers HELSINKI, FINLAND, October 9, 1998 -- Data Fellows, a leading developer of data security software has started to ship F-Secure FileCrypto. The new product provides strong, on-the-fly encryption for confidential data in the Microsoft Windows NT 4.0 environment. "F-Secure FileCrypto is the only file encryption product on the market designed for companies with thousands of PCs," says Mr. Camillo Sars, Product Development Manager, Data Fellows. "The protection of confidential files has never been this easy. F-Secure FileCrypto is installed over the entire network, and automatically encrypts all files, including temporary files created by programs and the operating system during running. The process is completely transparent to end-users, requiring no action from them at all." The administrator can define a security policy for all installed copies of F-Secure FileCrypto. F-Secure FileCrypto will have a full support for centralized policy-based management later this fall. The program also features a key retrieval function. If a user forgets the password that allows access to encrypted files, the Administrative Key Recovery function manages the situation safely and easily. According to Mr. Sars, "F-Secure FileCrypto is one of the first products to integrate strong real-time encryption into the Windows file system. It automatically encrypts data before it gets stored on the hard disk, protecting sensitive information even in the most demanding situations. If a PC is improperly turned off, or if a laptop computers batteries go dead, any open or temporary files will be encrypted and safe." F-Secure FileCrypto also has a feature which allows users to send encrypted e-mail to other users. Encrypted e-mail can be decrypted with a password. F-Secure FileCrypto uses well-known fast block cipher algorithms. Either the three-key 3DES or the Blowfish algorithm can be selected. Both algorithms have been analyzed by the worlds leading cryptographers and are known to be strong and safe. "Files protected by F-Secure FileCrypto are not accessible to computer freaks, hackers, or even cryptography experts. Each file is encrypted with a random session key. Breaking a single key would give someone access to only one file, and the job would consume trillions of years of computer time," says Mr. Sars. F-Secure FileCrypto for Windows NT 4.0 is now available from the Data Fellows resellers around the world. Central installation and management features will be implemented in the next release of the product. F-Secure FileCrypto for Windows 95/98 will be available next year. About Data Fellows Data Fellows is one of the worlds leading developers of data security software. The companys groundbreaking F-Secure products provide a unique combination of globally available strong encryption and revolutionary anti-virus software. The integrated F-Secure software family provides complete security solutions for enterprises of any size. It includes file encryption and IPsec communication encryption products, VPN gateways, SSH-based secure remote management software, easy-to-use solutions for distributed DNS management, and a full range of anti-virus products for workstations, servers and gateways. Data Fellows is also the developer of the award-winning F-PROT Professional anti-virus product, the scanning engine which is now an integral part of the multiple engine structure of F-Secure Anti-Virus. Data Fellows head offices are in San Jose, California, and Helsinki, Finland. In addition, its offices, partners and VARs offer worldwide technical support, training and distribution from over 80 countries. Since the company was founded in 1988, its annual net sales growth has consistently been nearly 100%. Data Fellows belongs to an elite group of companies with a triple-A rating from Dun&Bradstreet. The company is privately owned. For further information, please contact USA: Data Fellows Inc. Mr. Pirkka Palomäki, Product Manager Tel. +1 408 938 6700, fax +1 408 938 6701E-mail: Pirkka.Palomaki(a)DataFellows.com Finland: Data Fellows Ltd. Mr. Tom Helenius, Product Marketing Manager Tel. +358 9 859 900, Fax. +358 9 8599 0599 E-Mail: Tom.Helenius(a)DataFellows.com Visit our web site at http://www.DataFellows.com -- Marita.Nasman-Repo(a)DataFellows.com, World-Wide Web http://www.DataFellows.com

1 0

Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code) > Date: Thu, 08 Oct 1998 21:02:23 -0400 > From: "Perry E. Metzger" <perry(a)piermont.com> > As entertaining as literary deconstruction can be, what is > interesting here is not what Juliet meant, but what Perry Metzger > meant in quoting Juliet. Which to have *any* impact implicity requires a commen understanding of what Juliet was saying within the context of human society and *not* personal ego. From that point it's only a question of what literary technique (eg irony or allegory) was Perry the person using. That technique will define the constraints on what Perry can say, not Perry's desire to say anything in particular. It will always come back to what the base definitions of a word are in a given language-culture milieu. Yes you can play with it but *only* within the context of that language. To do otherwise breaks the syntax-symantics connection and creates another language entirely (or more likely gibberish). ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: I thought of an initialy regulated industry!... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 09 Oct 1998 01:39:08 +0000 > From: Michael Hohensee <mah248(a)is9.nyu.edu> > Subject: Re: I thought of an initialy regulated industry!... (fwd) > > > Absolutely nothing. That's my point, not yours --or at least not the > > > point you made in your previous post. > > > > It is *exactly* the point I have made from day 1. > > It would appear that Jim either cannot read his own posts (and this may > well be, as I had a hard time deciphering the exact meaning of that last > paragraph-sized sentence), or simply cannot remember them. He certainly > seems to have a problem with reading the posts of others. Here is my position. I am pro nuke. Even given the lethality of the compound and the costs related to disposal it still represents a better investment of resources and human lives than natural oil, gas, etc. Yes coal plants use and put out heated water, and yes it effects the environment. Yes nuclear plants put out as much water as coal plants. It still represents the major constituecy efluent from a nuclear plant in regards environmental hazard. The only real question I had regarding nuclear plants versus coal was the water retention process and the manner in which nuclear plants process it (there is a question related to comparing coal to nukes that takes this into account). I was under the (now apparently mistaken) impression there was a regulation that seperated the core cooling water from the energy regeneration system driving the turbines (which drive the generators). The actual process is to release that water slowly over time into the normaly non-radioactive effluent. Coal plants on the other hand do put out over 300,000 tons of solid waster per year for a 1000MW plant. This posses a much higher health hazard (irrespective of some parts per billion contaminant that is the most toxic substance known to man) than the .5 tons of solid waste a nuclear plant puts out. Yes there are stupid laws regarding private processing of nuclear fuel. No, I don't support them and *nothing* I ever said can be construed that way. > I'm being to him --flaming him for no good reason! (it's true, there > isn't a good reason for flaming one such as Jim, they have no effect > --but it is somewhat cathartic). While being certain to avoid > responding to anything in my previous two posts --or at least not in a > way that makes any sense. Um, to be absolutely accurate, I have only 'flamed' a few people on this list ever. Tim May, Perry Metzger, Micheal Frumkin, Adam, a couple of others I don't remember at the moment. I did it in only one or two instances (Hi Timmy!) toward any one person. I think the most offensive statement was calling Perry Metzger a son-of-a-bitch one time because of a particular self-centered comment he'd made. That was '93 I think, check the archives. I don't believe I've ever flamed you. And don't intend to now. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

readme.txt
by Anonymous 17 Dec '03

17 Dec '03

lets not sit here breeding hatred amongst ourselves over software licenses, for god's sake. we have more important things to do. we need to try and implement more different --kinds-- of crypto applications, like tim says in a recent post. we have to work together on this, not spread hard feelings amongst our little group. (really i think the number of people who can write this kind of code and who understand the political part is miniscule.) coopration is key. fucking smash the state. In a closed-door manuever, controversial "roving wiretap" provisions have been added to a major Intelligence authorization bill and passed by the House. Current wiretapping law allows tapping of a particular person's phones. The new provisions would dramatically expand current authority by allowing taps on any phone used by, or "proximate" to, the person being tapped -- no matter whose phone it is. http://www.cdt.org/legislation/calea/roving.html

1 0

Re: Another potential flaw in current economic theory... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 08 Oct 1998 21:13:04 -0700 > From: Bill Stewart <bill.stewart(a)pobox.com> > Subject: Re: Another potential flaw in current economic theory... (fwd) > Choate, who's never tried large-scale free markets, says that Actualy it's how I make my living, supporting those large scale markets (I won't argue the free part). > free markets don't work, and lead inevitably to monopoly, > and therefore we ought to use governments monopolies on force to prevent Where do I *ever* say we need 'government' monopolies. Not once, not ever. I have said, and stand by it now, that what is needed is an *impartial* 3rd party. That does *NOT* equate to 'the government'. What is important to my thesis is that the regulator is impartial. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Welcome to The New York Times on the Web
by announce＠inbox.nytimes.com 17 Dec '03

17 Dec '03

Welcome cypher11, Thank you for registering for The New York Times on the Web! Your ID is cypher11 You selected your password at registration. Your e-mail address is cypherpunks(a)toad.com The Times on the Web brings you the authority and integrity of The New York Times, with the immediacy, utility and depth of the Internet. You'll find the daily contents of The Times, along with news updates every 10 minutes from the Associated Press and throughout the day from New York Times editors. You'll also find reports and features exclusive to the Web in our Technology and Books areas. You can explore a 365-day archive of The New York Times for free, and download articles at a small charge. The site also features: == Up-to-the-minute sports scores and statistics == Breaking market news and custom stock portfolios == Current weather conditions and five-day forecasts for more than 1,500 cities worldwide == A free, searchable library of more than 50,000 New York Times book reviews == A searchable database of help wanted listings == The crossword puzzle, bridge and chess columns, available by subscription Thanks again for registering. Please visit us again soon at http://www.nytimes.com Sincerely, Rich Meislin Editor in Chief The New York Times Electronic Media company ***************************************** Please do not reply to this message. If you did not authorize this registration, someone has mistakenly registered using your e-mail address. We regret the inconvenience; please see http://www.nytimes.com/subscribe/help/cancel.html for instructions. For more information about The New York Times on the Web and your registration, please visit the Help Center at: http://www.nytimes.com/subscribe/help/

1 0

Free Keynote Webcasts from Symposium/ITxpo 98!
by GartnerGroup 17 Dec '03

17 Dec '03

************************************************************************ GartnerGroup periodically sends e-mail updates to registered users of GartnerGroup Interactive about specially available research, upcoming conferences and announcements. If you received this message, you registered on GartnerGroup Interactive (http://www.gartner.com) To unsubscribe from all future e-mail updates, send an e-mail to: unsubscribe.updates(a)gartner.com with the word "unsubscribe" in the subject line. ************************************************************************ In this e-mail: 1) Symposium/ITxpo Online -- free keynote webcasts from Orlando 2) GartnerGroup analyst presentation webcasts 3) Symposium/ITxpo 98 - Europe, Japan and Australia still to come 1) Symposium/ITxpo Online - Free keynote webcasts from Symposium/ITxpo ------------------------------------------------------------------------ At Symposium/ITxpo 98, in Orlando, Florida October 12-16, the largest, most strategic event in the industry, the greatest minds in Information Technology come together to cure confusion about IT issues and clarify the vision of the future. GartnerGroup is bringing Symposium/ITxpo to the Internet. Mark your calendar and visit Symposium/ITxpo Online at http://www.gartner.com/symposium between October 12 and 16, 1998. As a registered user of GartnerGroup Interactive, we are providing special notice to you of the valuable information that will be available for free on GartnerGroup Interactive including: Keynote interview webcasts Select analyst presentation webcasts Daily conference highlights ITxpo Online - the virtual tradeshow Product Education Sessions from leading vendors Breaking news and announcements Special analysis of hot IT topics & trends The keynote presentations feature GartnerGroup analysts interviewing industry leaders such as Bill Gates, Larry Ellison and John Chambers. They will be presented live and on-demand on GartnerGroup Interactive, using video webcasting technology (viewed with the Windows Media Player or RealPlayer). For a complete schedule of the dates and times visit http://www.gartner.com/symposium 2) GartnerGroup analyst presentation webcasts ------------------------------------------------------------------------ Select GartnerGroup analyst presentations will be made available free from Symposium/ITxpo Online. These presentations combine audio webcasting technology and the analyst slide presentations. (Windows Media Player or Real Player with the slides in .pdf format) Free session highlights: Developing an E-Business Strategy Networking Vendor Evaluations: A Magic Quadrant Compendium Collaboration and Groupware Applications Network and Systems Management: Risk vs. Reward Visit http://www.gartner.com/symposium for the complete list of free GartnerGroup analyst session webcasts. In addition to the free webcasts, over 215 GartnerGroup analyst sessions from Symposium/ITxpo in Orlando are available for purchase individually or in packages. 3) Symposium/ITxpo 98 -- Europe, Japan and Australia still to come! ------------------------------------------------------------------------ Symposium/ITxpo will take place in other locations as well: Tokyo, Japan 21-23 October, 1998 Brisbane, Australia 28-30 October, 1998 Cannes, France 2-5 November, 1998 To find out more or to register for Symposium/ITxpo 98 in your corner of the world, visit http://www.gartner.com/symposium GartnerGroup's Symposium/ITxpo 98 promises to be the best ever. Visit GartnerGroup Interactive starting October 12, 1998 and get front row seats to the event at Symposium/ITxpo Online!

1 0

RE: GPL & commercial software, the critical distinction (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

Not really, the state holds a monopoly on "legal" force, whereas the Mafia and other black-market organizations do not. What is interesting is they use force often because they cannot use the government legal system to arbitrate their disputes. Matt > -----Original Message----- > From: Steve Mynott [mailto:stevem@tightrope.demon.co.uk] > On Thu, Oct 08, 1998 at 04:14:32PM -0700, Matthew James Gering wrote: > > > > The Mafia has had two primary characteristics: > > > > a) the use of force > > wouldn't this characteristic define the mafia as a "state" to some > degree?

2 1

RE: Another potential flaw in current economic theory... (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

> > free markets don't work, and lead inevitably to monopoly, > > and therefore we ought to use governments monopolies on > force to prevent > > Where do I *ever* say we need 'government' monopolies. Not > once, not ever. No, I believe he said (meant) government's monopoly on force (i.e. regulation, not anarchism), not government monopolies. > I have said, and stand by it now, that what is needed is an > *impartial* 3rd party. That does *NOT* equate to 'the > government'. Wow, I happen to agree, people need on objective framework in which to take their disputes. The only such framework though that need be a monopoly is one that deals with force as the dispute or where force is the end retribution (i.e. you cannot have regulatory arbitrage with force). The problem is the assumption that any such regulator could be impartial. The need for such arbiter needs to be minimized (hence minimal/limited government = laissez faire != anarcho-capitalism). Matt

1 0

IP: Navy's Open Source Security Project Shines
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com Date: Thu, 08 Oct 1998 23:28:13 -0400 From: Richard Sampson <rjsa(a)sprintmail.com> Organization: Unknown Organization MIME-Version: 1.0 To: "ignition-point(a)majordomo.pobox.com" <ignition-point(a)majordomo.pobox.com> Subject: IP: Navy's Open Source Security Project Shines Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: Richard Sampson <rjsa(a)sprintmail.com> Navy's Open Source Security Project Shines Oct 08, 1998 (Tech Web - CMP via COMTEX) -- An open source security program created by a team of Navy programmers is proving to be one of the most successful high-tech network burglar alarms online. Late last month, the Navy released an unusual warning -- attackers were probing military computers in ways that had previously gone unnoticed, coordinating efforts around the world to keep any individual series of probes virtually invisible. Analysts had finally noticed the potential crackers' coordinated probes using the Navy's SHADOW, or Secondary Heuristic Analysis System for Defensive Online Warfare, intrusion-detection program. "It was partly dumb luck," said Stephen Northcutt, the Navy's lead analyst and programmer on the SHADOW team. But the software's sensitivity to subtle attacks, combined with the number-crunching power of statisticians associated with the project, let Northcutt and his team of analysts tease evidence of the probes out of a mass of apparently innocuous network logs, he said. The SHADOW software is one of a growing number of intrusion-detection tools on the market, designed to pick up and help analyze attempts to break into computer networks instead of simply functioning as a passive firewall-style siege wall. Most of the major commercial-security vendors, such as Axent, Internet Security Systems, or Network Associates, all provide intrusion-detection programs, with support and service teams that can help analyze possible attacks. SHADOW is different in this respect. It is freely distributed online. Like most open source programs, there is some documentation, but no official support -- although there is a huge community of programmers who have looked at the code and have written improvements and continue to tinker with the way it functions. The software itself is the product of more than two years of work by a team led by Northcutt. The code was initially released to the public last May, and revised later in the summer after a slew of comments and criticism from outside developers. It consists of two parts. Sensors sit outside a network firewall, monitoring normal and potentially illicit attempts to enter the network. An analysis system sits inside the firewall keeping a log of activity, and periodically putting this information in front of a human security analyst. In the months since its release, the program has been picked up and used by several major financial institutions, universities, local government systems, and divisions of large companies that don't have budgets for commercial intrusion-detection programs, Northcutt said. "It's very good at doing some things and not so good at others," said Allen Paller, chief researcher at the SANS Institute, a network-security research and education organization. The program can be initially difficult to use, since it requires users to program their own filters to recognize attacks or probes not included in the original documentation. But the program's open source birth and evolution has made it strong and extremely sensitive, Paller said. "The real strength of this process is [the program] has been beaten on." Northcutt is a proponent of pushing the open source model even beyond the development of code, at least in the security field. Most intrusion-detection programs function by picking up unusual events -- malformed TCP or domain name system queries, handshakes between servers and clients that don't look quite right, or other signs of computer probes and attacks. SHADOW and other commercial trip-wire programs do a good job of picking up things they recognize, Northcutt and other security analysts said. But new attacks -- such as the coordinated probes spotlighted by the Navy last month -- require considerable expert analysis to spot. "Attackers have been sharing very well inside their community," we have no equivalent to the underground magazines and other communication channels." -- Stephen Northcutt U.S. Navy That's where the open source model comes in, Northcutt said. Intrusion-detection analysts can function best if information about different attacks is widely and freely distributed. The Navy site that distributes SHADOW publishes much of the information it uncovers, and distributes new filters that recognize new attacks and probes. This kind of open, widely shared information is critical for stopping crackers, but must happen on a wide scale, he said. "Attackers have been sharing very well inside their community," Northcutt said. "We have no equivalent to the underground magazines and other communication channels." Paller agreed. His organization is one of several that sponsor workshops where security professionals can share their experiences with their peers. SANS also runs a security-oriented mailing list with nearly 55,000 subscribers, many of whom served as SHADOW reviewers. "Unless we get communication lines going, we can't keep up," Paller said. "Otherwise, we don't have a chance." -0- Copyright (C) 1998 CMP Media Inc. News provided by COMTEX. [!HIGHTECH] [!INFOTECH] [COMMUNITY] [COMPUTER] [EDUCATION] [GOVERNMENT] [INTERNET] [MARKET] [MILITARY] [NAVY] [NEWS] [NEWSGRID] [ONLINE] [RESEARCH] [SOFTWARE] [TWB] -- ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0