December 2003 - cypherpunks-legacy

strange posts
by Mok-Kong Shen 17 Dec '03

17 Dec '03

I obtained a bunch of totally EMPTY posts from owner-cypherpunks(a)Algebra.COM in intervals of about half an hour. Does anyone have the same experience and know what's the matter? (Further it appears that a couple of posts of mine have been delayed and have not yet appreared after the usual waiting time.) M. K. Shen

1 0

MEDIA RELEASE: Data Fellows� F-Secure VPN+ demo; An easy way to test strong Internet encryption
by Marita N�sman-Repo 17 Dec '03

17 Dec '03

Press Release For immediate release Data Fellows F-Secure VPN+ demo An easy way to test strong Internet encryption Espoo, Finland, December 11, 1998. - Data Fellows, one of the worlds leading developers of anti-virus and encryption software, has set up a demo of the commercial version of F-Secure VPN+, whereby companies can test an encrypted IPSec connection between their own machine and a VPN+ Server at the Data Fellows site. The supported platform is Windows NT 4.0 (Intel) with an Ethernet network adapter. The release works on both single and multi-processor machines. An encrypted IPSec connection can be set up by downloading and installing the F-Secure VPN+ Demo Client, available at the Data Fellows web site (http://www.DataFellows.com/f-secure/vpn-plus/demo/) and connecting through it to the F-Secure VPN+ server. This set-up in no way affects a companys other network traffic; all other hosts and network services may be accessed as usual. Unlike the commercial version of VPN+, it is not possible to create encrypted connections to hosts other than VPNPlus.DataFellows.com. This server cannot be contacted without the VPN+ demo client. The demo client has been configured to establish an IPSec encrypted (3des) connection to VPNPlus.DataFellows.com (IP:194.252.6.42). A random session key will be negotiated for each connection. Host authentication is performed using a shared secret 0x462D534543555245 (i.e. "F-SECURE" in hex). Access to all other networks (local/Internet) is provided without additional IPSec security. In the commercial version of F-Secure VPN+, the network administrator determines which connections are permitted and which connections need to be encrypted. The commercial version of the product features F-Secure Administrator for central management, network wide security policy distribution and F-Secure VPN+ Certificate Wizard for a complete VPN Certificate Authority service. In addition to F-Secure VPN+ Demo Client, a Lotus ScreenCam presentation of F-Secure Administrator can be downloaded, as well as the users manual of the commercial version. The presentation shows how easily the network administrator can create and maintain a security policy for the whole Virtual Private Network. End-user installation of the commercial version can be done using AUTOINST network-wide deployment tools and it provides a fully transparent network security solution to the user. No user-interfaces are left to the user to stumble with. About Data Fellows Data Fellows is one of the worlds leading developers of data security products. The Company develops, markets and supports anti-virus, data security and cryptography software products for corporate computer networks. It has principal offices in San Jose, California, and Espoo, Finland, with regional offices and corporate partners, VARs and other distributors in over 80 countries around the world. Data Fellows has customers in more than 100 countries, including many of the worlds largest industrial corporations and best-known telecommunications companies, major international airlines, European governments, post offices and defense forces, and several of the worlds largest banks. The Company was named one of the Top 100 Technology companies in the world by Red Herring magazine in its September 1998 issue. Other commendations include Hot Product of the Year 1997 (Data Communications Magazine); Best Anti-Virus product (SVM Magazine, May 1997); Editors Choice (SECURE Computing Magazine); and the 1996 European Information Technology Prize. About F-Secure products All F-Secure products are integrated into the F-Secure Framework management architecture, which provides a three-tier, scaleable, policy-based management infrastructure to minimize the costs of security management. F-Secure Workstation Suite consists of malicious code detection and removal as well as unobtrusive file and network encryption, all integrated into a policy-based management architecture. F-Secure Anti-Virus, with multiple scanning engines (including F-PROT and AVP), is the most comprehensive, real-time virus scanning and protection system for all Windows platforms. F-Secure VPN+ provides a software-based, IPSec-compliant Virtual Private Network solution for large corporate networks as well as remote and small office networks. F-Secure FileCrypto is the first and only product to integrate strong real-time encryption directly into the Windows file system. F-Secure SSH provides secure remote login, terminal, and other connections over unsecured networks. It is the most widely used secure remote administration tool. F-Secure NameSurfer is the solution for remote Internet and Intranet DNS administration. Its easy-to-use WWW user interface automates and simplifies DNS administration. For more information, please contact: USA: Data Fellows Inc. Mr. Pirkka Palomäki, Product Manager Tel. +1 408 938 6700, fax +1 408 938 6701 E-mail: Pirkka.Palomäki(a)DataFellows.com Europe: Data Fellows Oy Mr. Topi Hautanen, Product Manager PL 24 FIN-02231 ESPOO Tel. +358 9 859 900, fax. +358 9 8599 0599 E-mail: Topi.Hautanen(a)DataFellows.com or visit our web site at http://www.DataFellows.com -- Marita.Nasman-Repo(a)DataFellows.com, World-Wide Web http://www.DataFellows.com

1 0

A URL to the Monday strike?
by Jim Choate 17 Dec '03

17 Dec '03

Hi all, Just wondering if there is a URL that describes the proposed strike on Monday? ____________________________________________________________________ If I can put in one word what has always infuriated me in any person, any group, any movement, or any nation, it is: bullying Howard Zinn The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re:
by Anonymous 17 Dec '03

17 Dec '03

So you'd be happy to staple a check or money order for a bill to a postcard and send it off? Are you trying to be obtuse, or is it just a natural phenomenon with you? At 06:39 PM 12/9/98 -0500, Robert Wenzler wrote: > > >HaB wrote: ><snip> >> That's a good place to begin, though. "Would you send a letter to >> someone without an envelope?" "Then why not put your email in the >> electronic equivalent of one?" >> >> balance. > >Would I send a letter to someone without an envelope? >One word: postcard.

1 0

Re: Global Strike to protest Wassenaar
by Richard.Bragg＠ssa.co.uk 17 Dec '03

17 Dec '03

Ever played Mornington Crescent? Try the same thing with e-mail. The idea is that only those in the game know "the rules". These rules can change at any time in any way and all "real players" can tell about the new "rules" and adjust accordingly. The idea would be to exchange nothing while make it appear to be exchanging information of real importance. OK so this will be just like any managment memo but you must get my drift. Hack together a proggy to "encrypt" a message but really just generates garbage, just like politicians. Leave patterns in it so it looks real.

1 0

Wassenaar summary (and a funny new loophole)
by ulf＠fitug.de 17 Dec '03

17 Dec '03

> The Wassenaar Arrangement has put up the Dec. 3 lists > agreed to by members: To summarize the crypto rules: Software is freely exportable if it has been made available without restrictions upon its further dissemination. Copyright restrictions do not count. Mass market cryto software is no longer covered by the General Software Note, but by a Cryptography Note. Under that note, mass market software and hardware is not controlled if it does not use symmetric keys longer than 64 bits and the cryptographic functionality cannot easily changed by the user. Systems that do not meet those conditions are export-controlled if they use symmetric encryption with more than 56 bit keys, algorithms based on factorization or on logarithms in finite fields with more than 512 bit keys (e.g. RSA, DH) or on discrete logarithms in other groups (such as elliptic curves) with more than 112 bits. They may be exported for personal use. There are exceptions for execution of copy-protected software and read-only media and for phones without end-to-end encryption. The list contains an amusing editorial error which would for the first time allow the export of strong crypto hardware. "Symmetric algorithm" is defined to mean 'a cryptographic algorithm using an identical key for both encryption and decryption', whereas an algorithm using 'different mathematically-related keys for encryption and decryption' is an "asymmetric algorithm". Since the definition differentiates algorithms by symmetry rather than by their cryptographic properties, there is no restriction whatsoever on asymmetric secret-key encryption algorithms. Those algorithms typically are not based on factorization or discrete logarithms. That is, they are no longer controlled by the Wassenaar arrangement. Better yet, mass-market crypto systems are not controlled if they 'do not contain a "symmetric algorithm" employing a key length exceeding 64 bits'. So you can use, say, 2048 bit RSA with an asymmetric secret-key algorithm of 128 bit key length (so the system does not contain a symmetric algorithm), and you're free to export it.

4 3

RE: Global Strike to protest Wassenaar
by Brown, R Ken 17 Dec '03

17 Dec '03

Richard Bragg wrote: > Ever played Mornington Crescent? Try the same thing with > e-mail. The idea is that only those in the game know "the rules". > These rules can change at any time in any way and all > "real players" can tell about the new "rules" and adjust accordingly. showing of course that he either doesn't know the *real* rules of Mornington Crescent or else (more likely) doesn't want to reveal them! Oh, and this posting quite clearly wins this round - even with the new DLR extensions and the Elverson Road footbridge:-) Ken

1 0

test2
by Igor Chudov 17 Dec '03

17 Dec '03

test

1 0

test4
by Igor Chudov 17 Dec '03

17 Dec '03

test4

1 0

test4
by Igor Chudov 17 Dec '03

17 Dec '03

test4

1 0