- cypherpunks-legacy - lists.cpunks.org

Denning questions/reverses her position?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm too old for this! I never thought I would see the day that Dorothy Denning would terminate her star role as a shill for the Clinton/LEA encryption ban! from: http://www.news.com/News/Item/0%2C4%2C13000%2C00.html?nd Two supporters of Clinton administration's stance on encryption released a report today finding that encryption has not inhibited law enforcement efforts, with at least one author questioning her belief in the administration's position. The authors--Dorothy Denning, a Georgetown University computer science professor, and William Baugh Jr., vice president of Science Application International Corporation-- ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBM+Eh5L04kQrCC2kFAQF9wwP+INGEAnc+1akKc+dP7re8fleX4PJrmsYU UKzxgBZAsWcZC7L5WkaOygckHznOc+a37iHzDFtt3sr86DP0D/4j675qJdt/O4B+ jbxXumJ8EXmTN9bOvXK8x9JRGjR9aWzjeaJKN3X+fH4Bjbw76FR9xIFkhhNvZqnM ahBzZyL2cZ4= =MlQZ -----END PGP SIGNATURE-----

1 0

Re: Random Hiss from Mac mike
by Carl Ellison 17 Dec '03

17 Dec '03

>Date: Wed, 23 Aug 1995 19:09:35 +0100 >From: Andrew.Spring(a)ping.be (Andrew Spring) >I've been looking at using the Mac's Sound Input Manager for hardware RNG. [...] >I suspect there's much less entropy in that signal than even this estimate, [...] >Does anybody have any experience/advice in this area? I would try injecting noise and seeing how well you can control the output signal. I would also do a Fourier transform of the output and look for cyclic behavior -- then see how the frequency spectrum can be modified by turning machinery on and off, turning radios on and off, .... You can also try various compression algorithms to see how much entropy they claim to see. When that's done, you can then use some of my ranno conditioning code, free on the net (although written for UNIX, for now): http://www.clark.net/pub/cme/html/ranno.html I especially like running a pseudo-random stream through ranM and then a hash, to obliterate any patterns which might sneak past your analysis. - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme/home.html | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +----------------------------------------------------------- Jean Ellison -+

1 0

Re: O.J. ObCrypto: Fuhrman's Folly Fans Fakery Fears...
by Bill Stewart 17 Dec '03

17 Dec '03

>I do not think that PGP 2.x can easily (ie: Automatically) use one key for >Signing and another for Encrypting a Message (it does both at the same time >if you ask). If I "Clear Sign" a message and then Encrypt it, then I get >the result but I'm not sure if doing the decrypt on such a message will >automatically spot the signature and verify it (as would occur with a E+S >pass). PGP identifies the key for decryption and signature checking from the message. When you're signing a message or key, you can pick which of your keys to use with the -u option. The difficulty is getting people to use your encryption key instead of your signature key when encrypting stuff for you. Derek mentioned one approach (get people to load the encryption key first); unfortunately, you can't predict their behavior, and if you change encryption keys more often than signature keys, they'll load the newest encryption key last. Another approach is to identify them in the names - my key certification key says "KeyCert-only" in the text. For the problem that started this discussion, though, there's no good solution. Since the Bad Guys _can_ encrypt a message to you with your signature key, and send it to you by anonymous remailer, they can plant a reason to suspect that you may have evidence encrypted with that key. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

2 1

Web of Trust
by don＠cs.byu.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I am current sorting through the PGP keyserver keyfile to extract a limited web of trust. I believe that current servers would be best to limit their keys in a similar fashon. Since we can't all have what we want without coding it ourselves, I'm doing the next best crappy imitation. Anyways, I am trying to find keys that are actually relevant and inter-connected with signatures. Naturally, it won't be anywhere near complete or extensive, and will be a dog to update, but 5 meg keyfiles take a long time to search... I am requesting that all "active" cypherpunks/cyphergroupies please send me their key number, IF it's already on the keyservers. If it's recently put there, be sure to tell me or I will be annoyed. If it's not there at all, I'll be annoyed. Personally annoyed, not I-ran-some-scriptfile annoyed. If you searched any of the RC4 or SSL keyspace, for example, I'm interested. If you post messages occasionally, [conspiracypunks need not apply] I'm interested. If you generated a key because your neighbor taught you how, don't bother. If anyone wants the keynumbers/script/entirekeyfile I could put it on ftp or something. Naturally, I'll be forwarding all results to the NSA quantum crack-o-matic. Have a nice day. :) Don -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMEb1A8La+QKZS485AQGMKwL/Qzf67QSnn3iLZ7gCumfPcC/KqSyYSM0s OknMHhGDLb74qSWBDRyM6pPdwIHOg+Pjpl53ruMSu9YhXQrjMHgZZUjFh6c7vhi2 c+j3BYQ87us0BRuoj9pu8/d89gG3vsv3 =3qRz -----END PGP SIGNATURE----- <don(a)cs.byu.edu> fRee cRyPTo! jOin the hUnt or BE tHe PrEY PGP key - http://bert.cs.byu.edu/~don or PubKey servers (0x994b8f39) June 7&14, 1995: 1st amendment repealed. Death threats ALWAYS pgp signed * This user insured by the Smith, Wesson, & Zimmermann insurance company *

2 1

Re: CIA & Espionage
by syrinx＠c2.org 17 Dec '03

17 Dec '03

'Tatu Ylonen' was reported to have written: > I do find it rather shocking that the most powerful country in the > world sets industrial espionage as the primary task of their > intelligence services. Well, I have a letter from a United States Senator which was received last year in response to my phone call in opposition to the Digital Telephone Act of 1994 (S. 2375). Here's the interesting part: "According to the director of the Federal Bureau of Investigations (FBI), Louis Freeh, the number one law enforcement, public safety, and national security issue facing us today is preserving the ability to conduct court approved wiretaps." In other words, retaining the ability to monitor citizen communications is their greatest concern. This should be more than shocking to anyone who cares about privacy. It appears as though the primary function of the FBI and the "intelligence services" are similarly directed. One significant distinction is that the FBI's stated mission is directed toward the "owners of the country" (to borrow a term from Perot).

1 0

RSA v. PGP Docs
by John Young 17 Dec '03

17 Dec '03

We've added three docs on the RSA v. PGP suit: A June 4 Stipulation and Order to drop (postpone) a PGP motion to compel RSA/PGP arbitration pending arbitration between RSA and Caro-Kann on the rights to terminate the Lemcom license inherited by PGP: http://jya.com/rsavpgp3.htm The arbitration was scheduled to begin June 18 but no documentation on its status is yet available in court files. Two other procedural docs have been added to the earlier package of PGP's responses to RSA at: http://jya.com/rsavpgp2.htm We've created an index to the case's docs and will make items as they arrives, which helpful parties from all sides have promised: http://jya.com/rsavpgp-files.htm

1 0

Info on Visiting Jim Bell
by Blanc 17 Dec '03

17 Dec '03

I placed several calls searching for info on Jim's location: . There are two phone numbers under James Bell in Vancouver, WA - one of these was not his family, the other one (360/696-3911) is no longer in service. . He is not in the Tacoma jail, but was moved to the custody of the U.S. Marshall, physically being held at Kitsap County Correction Center 614 Division Street Port Orchard, WA 98366 (360) 876-7108 . Visiting hours are Sat & Sun, and it is up to the inmate to place you on their "visiting authorization list", providing the days/hours one can visit. Then the visitor must make an appointment during the week, 8-12 a.m or 1-4 pm. . Visitors must bring a photo ID (drivers license, passport, etc.), and they must sign-in 15 minutes prior to the actual visit. . I don't know yet if more than one person at a time can visit; I expect each person there can take their 30 minute turn. The next step will be for me to write to Jim and have him put myself & others on his visitors list. .. Blanc .. Blanc

1 0

[Fwd: Your newsgroup post ...]
by David D.W.Downey 17 Dec '03

17 Dec '03

blackjack(a)hotmail.com wrote: > Saw your post in the newsgroups. > > Check this out! > > http://www.geocities.com/Eureka/Plaza/1022 Ya know, this shit really pisses me off. I understand that we have to protect everyone's rights if we wish are own to be protected. This is a classic case of what is causing the mainstream public to hash so hard about porn and such. I did nothing to solicit this beyond posting to a news group. This troller comes along, scarfs my email address and then sends me this email. If you click on the link it sends you to a place to sign up for accessing a hard porn site. This is what feeds the initiated Johnnie Q.Public's desire to control the net, and endangers all of our rights on the net. I understand that we have to protect the enemies' rights too, but can't we just shoo a few of them first? Lowers the numbers needing protection and might help us out in the end. Grrrrrrr!!!! David Downey [ If we, as humans, are so omnipotent how come we scurry like rats when a tornado hits? ]

5 5

first y2k lawsuit hits in london
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

------- Forwarded Message Millennium bomb: Supplier sued over cash registers MONDAY AUGUST 18 1997 By Christopher Adams in London A small supermarket owner in the US is suing a cash register supplier for allegedly providing computerised tills that cannot recognise the year 2000. The lawsuit is believed to be the first of its kind. If it is successful, it could set a precedent with dangerous consequences for the insurance industry. Mark Yarsike, a supermarket owner in Detroit, is suing Tec-America, the Atlanta-based supplier of cash registers, because he says credit cards that expire after 2000 cause the tills to shut down. The lawsuit has wide implications for the insurance industry as suppliers may be forced to make claims on insurance policies covering them against the failure of their products to cope with the date change. Legal experts say insurers might be inundated with claims over the so-called "millennium bomb", leaving them vulnerable to losses that could run to billions of pounds. The millennium bomb is expected to cause widespread chaos because most computers recognise only the last two digits of a year and will treat dates beyond 1999 as referring to the 1900s. Should litigation escalate, the cost of claims could be inflated by damages and legal fees. Mr Yarsike owns three Produce Paradise supermarkets in Detroit. He says the cash registers have failed more than 150 times in two years, causing chaos in his stores and losing him hundreds of thousands of dollars. Mr Yarsike says his patience with Tec-America finally snapped two weeks ago. He says that each time credit cards expiring after 2000 cause cash resisters to shut down, Tec-America comes to fix the problem. But within hours, the registers fail again. "It's gotten pretty wild in here. A lot of customers walk out upset and embarrassed. When the card zips through and the modem packs up, everybody looks at that one customer and says, 'Wow! What did she do?'. "How would you like to have 300 people in your store and the cash registers don't work with a 10-hour day ahead of you?" Mr Yarsike wants Tec-America to put in a replacement system. He spent $150,000 on the fleet of registers for his stores and says it would cost him another $35,000 for new equipment. Tec-America denied it was to blame for the shutdown of the cash registers. It said responsibility lay with the credit card industry, which was forced several years ago to establish a format for swapping data that would recognise the year 2000. The industry's efforts, however, were not completed until April. - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Status of Cypherpunks list sites?
by Tim May 17 Dec '03

17 Dec '03

I've noticed that the list site name, "cypherpunks(a)toad.com", is still in use by many posters. I find it on most of the posts I reply to, and I have to manually change to one of the three current lists. Not too long ago I was subscribed to the "cypherpunks(a)algebra.com" address, and the list stopped flowing to me for a day or so. I resubbed under "cypherpunks(a)cyberpass.net." I noticed that Igor Chudov said he was taking a hiatus from the Net and lists, so I wondered if this meant his support for his site was either being dropped or might be subject to more frequent outages. Anyway, has anybody been doing any pings of the various lists to see which ones are most available and have the lowest latencies for redistribution to subscribers? And shouldn't we all be making a more serious effort to drop the use of the "cypherpunks(a)toad.com" address, as John said some months back that he would support forwarding stuff for a while, but not necessarily forever. As it is, it just adds another hop and another potential weak link. --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 2