- cypherpunks-legacy - lists.cpunks.org

Customer Service?
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Veracity suspect, but an interesting crypto story nonetheless... >Subject: Tech support story (fwd) > >---------- Forwarded message ---------- > [Urban legend of the day...] > > Subject: Stressful tech call > To: Customer Service; TechSports > > This falls into the "Why did it have to happen on *MY* shift?" category. > > A friend of mine is a chief engineer at SuperMac, and he related this > story to me. > > SuperMac records a certain number of technical support calls at random, > to keep tabs on customer satisfaction. By wild "luck", they managed to > catch the following conversation on tape. > > Some poor SuperMac TechSport got a call from some middle level official > from the legitimate government of Trinidad. The fellow spoke very good > English, and fairly calmly described the problem. > > It seemed there was a coup attempt in progress at that moment. However, > the national armoury for that city was kept in the same building as the > Legislature, and it seems that there was a combination lock on the door > to the armoury. Of the people in the capitol city that day, only the > Chief of the Capitol Guard and the Chief Armourer knew the combination to > the lock, and they had already been killed. > > So, this officer of the government of Trinidad continued, the problem is > this. The combination to the lock is stored in a file on the Macintosh, > but the file has been encrypted with the SuperMac product called Sentinel. > Was there any chance, he asked, that there was a "back door" to the > application, so they could get the combination, open the armoury door, > and defend the Capitol Building and the legitimately elected government > of Trinidad against the insurgents? > > All the while he is asking this in a very calm voice, there is the sound > of gunfire in the background. The Technical Support guy put the person on > hold. A phone call to the phone company verified that the origin of the > call was in fact Trinidad. Meanwhile, there was this mad scramble to see > if anybody knew of any "back doors" in the Sentinel program. > > As it turned out, Sentinel uses DES to encrypt the files, and there was > no known back door. The Tech Support fellow told the customer that aside > from trying to guess the password, there was no way through Sentinel, and > that they'd be better off trying to physically destroy the lock. > > The official was very polite, thanked him for the effort, and hung up. > That night, the legitimate government of Trinidad fell. One of the BBC > reporters mentioned that the casualties seemed heaviest in the capitol, > where for some reason, there seemed to be little return fire from the > government forces. > > O.K., so they shouldn't have kept the combination in so precarious a > fashion. But it does place, "I can't see my Microsoft Mail server" > complaints in a different sort of perspective, does it not? > Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Britannica Online Subscription Offer
by beta＠eb.com 17 Dec '03

17 Dec '03

Dear Pathfinder Free Trial Participant, Thank you for participating in this special free trial subscription offer of Britannica Online exclusively for Time Warner's Pathfinder users. This free trial will be ending soon, and I would like to extend you a special discount to encourage you to become a Britannica Online subscriber. I hope you have had ample opportunity to sample all Britannica has to offer, and if you haven't used our service recently, I encourage you to take these *final weeks* to experience the only information resource offering this degree of depth, breadth, and interactivity. As a Pathfinder reader you know that NASA recently sent a Mars probe to begin a 10-month interplanetary voyage. Read our "Mars" article to find out what scientists have already discovered about the Red Planet, then follow an Internet link to the Los Alamos National Laboratory to view craters on Mars. Are you interested in health and nutrition? Review the extensive "Nutrition" article in Britannica Online, and look for the nutrient content in what you had for breakfast. Planning a trip over the holidays? Visit our "Nations of the World" feature to review the history, map, flag, and national statistics of the country you're considering before you finalize those travel plans. So whether you're interested in learning more about Mars, troubles in Iraq, or the latest hurricane, Britannica Online is regularly updated to give you access to articles on people, places, and events around the world. It includes the text of the entire 32-volume Encyclopaedia Britannica, plus more than 2100 articles not available anywhere else. Articles are written by notable scholars in their fields of expertise, including more Nobel Prize winners than any other encyclopedia. For about 50 cents a day you'll have access to the only reference source that combines the information power of the world's premier encyclopedia with thousands of direct links to related information. To sign-up for Britannica Online -- * Access the registration form at http://www.eb.com:195/bol/ by selecting either the monthly or annual subscription option * Enter PTF149A in the promotion code box for an annual subscription of $149 (our normal $25 registration fee will be waived for you as a Pathfinder user) Enter PTF149M in the promotion code box for a monthly subscription of $14.95 * Review to make sure information is complete and accurate, then submit Every day you and your family can learn something new about the events that are making history now. Your free trial will end in two weeks, so please don't let this opportunity pass you by. I'm positive you'll discover that finding quality information has never been easier. Sincerely, Lisa Girolimetti Marketing Manager, Online Products Encyclopaedia Britannica, Inc.

1 0

Secure Phone: Making man in the middle audible.
by James A. Donald 17 Dec '03

17 Dec '03

Here is a method to render Man in the Middle audible on a telephone connection. Before speech can be encrypted, it is digitized and compressed. It is turned into digital packets. There is some choice in the size and other properties of the digital packets. Suppose that Bob's computer from time to time formulates a plan to do groups of a particular size and form, and sends Ann's computer a hash of that plan and the DH negotiated shared secret. Malloc (the man in the middle) cannot send this hash to Ann's computer for Ann would discover the shared secret she is using is not the same as the shared Bob is using. So his computer must formulate its own plan, and send its own hash, which will not agree with Bob's plan, because Bob's computer does not reveal the plan except by actually sending the packets. So malloc must decompress Bob's speech packets, repacketize them, and recompress them, Often he will not be able to send off a packet, until he has received two of Bob's packets. So this triples the delay, and increases the speech degradation. This should quite noticeable, noticeable enough to provoke Bob and Ann into verifying their connection by reading the hash digits of their shared secret. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

Re: Bounty Server, Revisited.
by Ian Grigg 17 Dec '03

17 Dec '03

Hi, Snow, > I have started drafting a proposal statement for the Bounty server. Wow, you've gotta move fast in this game :)) > Bounty Server, The proposal: > Version 0.1 > > Abstract: [chop where agreed or not disagreed] > Background: > It is the "Copylefted" software that interests me at this point. OK, although for my model, I am assuming that all forms are covered. > The proposal: > > What I am going to attempt to do is to set up a "Bounty Server" where > someone can iniate a "bounty" on a peice of technology. The initator > will write up a set of specifications for the technology, and an initial > award to be paid to the developer. They then post it on the server and > send their initial "bid" to the organization. Separate this out, for clarity of model. The initiator (I used Proposer, and called her Alice coz Alice always initiates) proposes the specification, or task. There is no need for Alice to submit an initial bid, although they have that option, as a buyer. BTW, bid to do what? Using market terminology, I have assumed thay bid is to buy, that is provide cash. Offer is to sell, that is provide software. Ah, yes, bid is add to bounty. > This is the "bounty". Other people can add to this bounty, allowing the > totals to add until someone claims that bounty by providing proof of > development to the initiator of the bounty. In software terms they would > upload the software to the server and notify the originator of the bounty, > and the server operators. Other technology will be figured out as it > becomes necessary. This is where I have put most of my efforts, because I need to design the microstructure that is built into our market. > Originally I was going to put the stipulation in that the software written > must be Copylefted. I decided that that wasn't really necessary, but > rather simply desired. To aid in that desire, I am going to build in > an initative to releaseing the software "copylefted". Absolutely - let the market decide. Some of us, for example, do not like copyleft. > To get more specific: [chop] > The first developer to upload a _working_ package to the server will > be awarded the total bounty, ... This worries me. If I, as a junior programmer, am looking to enter the market, I will have the daunting task of beating everyone else. Real life doesn't work that way - there are ways in which I can pick up some newbie tasks for low money, so as to build up experience and/or reputation. I guess the notion of bounty is just that - first one takes all. However, I think that the solution might be a bit limited in the long run. Interesting in that my proposal leads to task distribution by awarding contracts, your proposal leads to task incentives by rewarding speed. > "First" will be soley determined by the time stamp of the server. As soon > as the package is uploaded, the initiator and the server adminstrator > will be notifed, and the bounty marked "claimed". If the package is > accepted by the initiator, the bounty will be marked "closed", the > package moved to an FTP site for distribution (if Copylefted) or > moved offline if not (archived copies will be kept for legal reasons-- > more on that later). At that point a check for the developer will > be cut (or ecash mailed if that works out). OK, my proposals specifically assume no need for a "decision" by Alice. That's not to say either is right, it's just that I prefer to design something that eliminates the individual decision rather than cope with the complexities. I believe it will result, in the end, in a more efficient market. > The Server Adminstrator will also do an cursory check to make sure that > there are no obvious copyright violations. > > In the event that there is a conflict between the initiator and the > developer, the claim will go into adjudication. The server adminstrators > decesion is final, and he will make every effort to settle the claim > fairly. Adjudication will incur an additional fee (see the fees section). Same as above, no adjudication in my system. Although, it is possible to add underwriters, by simply making the task offerers (Bob and Carol) into bond writers who front for programmers. > Status: > > At this point in time I am (obviously) still in the process of developing > the procedures. I have registered a Domain Name (bounty.org) and I have > a couple promises off assistance in certain areas. As well, I have > a server to start off with. Wow, *gotta* move fast. As I say, our stuff is based on a lot of pre-existing software, so we make a lot of assumptions. Given our different approaches we may end up with competing systems rather than one, but that's fine, indeed highly valuable as an experimental approach. What's financing you in this? Or should I say, monetarily enthusing? I have started writing (last night :)) this all up as a paper for presentation to FC97. If you want, we could collaborate, or I will just document your efforts, and concentrate on presenting mine. My efforts are now at http://www.systemics.com/docs/papers/task_market.html TTFN iang.

1 0

List membership
by Robert Barnes 17 Dec '03

17 Dec '03

Is cypherpunks subscribed to some CNET new service list by design or accident? I looks like SPAM to me. </enter confession mode> I must admit that in my frenzy to unsubscribe I attempted to unsubscribe cypherpunks. </exit confession mode> RAB -------------------------------------------------------------- Robert Barnes Phone: +61 7 32529722 Engineering Manager Fax: +61 7 32571403 Tritronics (Australia) Pty Ltd Email: robertb(a)tritro.com.au PGP Key fingerprint = 02 A6 22 5E 26 D3 7C 4D E2 91 9E 15 AC EA B1 58 Send e-mail with "get key" in the "Subject:" field to get a copy of my public key

1 0

Re: What's really in PGP 5.5?
by Anonymous 17 Dec '03

17 Dec '03

The danger with the PGP system is that it could be easily perverted into a British style trusted-third-party system for GAK. The government would set up a key management infrastructure to provide an official repository and CA to register keys. It could even be "voluntary" if only government-approved CAs had liability protection which private CAs didn't have, making it hard for the privates to compete. However the price to use the government registry is that each key has to use the PGP features to specify a TTP as an additional recipient. Every message encrypted to that key should also be encrypted to the TTP key. Only government-approved TTPs may be used, and although there are many to choose from, all have to provide easy and secret GAK. The PGP 5 software will then automatically encrypt to the TTP key. Yes, this can be defeated using superencryption or faking the additional-recipient block in the message. But we know any scheme can be defeated. It still satisfies the government's requirement to get routine access to most email communications, and to allow criminals who use standard email packages to be watched.

1 0

Re: anonymous poster quality up
by jimg＠mentat.com 17 Dec '03

17 Dec '03

Tim May wrote: > - --Tim May (I'll sign this with my new PGP 5.0 key, which has also been > signed with my 1992 PGP 2.0 key) So what <is> your new PGP 5.0 public key? I checked for the key ID 0xDF02DF6A on the key server at www.pgp.com and didn't see it. I <do> believe your claim that it's a 5.0 key, though, since it ends in the even nibble 'A', and all RSA key IDs are odd. :) Jim Gillogly jim(a)acm.org

1 0

Re: 6502 ML programming (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 9 Oct 1997 02:32:27 -0400 > From: ghio(a)temp0133.myriad.ml.org (Matthew Ghio) > Subject: Re: 6502 ML programming > Jim Choate <ravage(a)ssz.com> wrote: > > > > There in no 'DATA' construct in 6502 assembly. > > > > This is some sort of macro that either the assembler or programmer > > defined. All official Rockwell/Commodore [1] 6502 assembly mnemonics are > > three letter. > > True, but most assemblers would let you insert static data into the object > file using various pseudo-ops like that. > > > > Idealy a jump table was created that had the various target addresses for > > your routines. > > Oh, those were fun to debug too... > > > > The most efficient way to store data in 6502 is to put it in the first 256 > > bytes of ram, then it could be called in no more than 2 clock cycles. > > Actually that took three cycles. One to fetch the opcode, one to fetch the > target address, and one to fetch the data byte. If you wanted to do it in > two cycles, you had to write the data into the operand of the instruction > that loaded it (self-modifying code). Wow, we actualy agree on all points...that has to be a first. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

index.html
by Jim Choate 17 Dec '03

17 Dec '03

CNN logo Navigation Infoseek/Big Yellow Pathfinder/Warner Bros Main banner SAMSUNG Meet the Challenge rule WOMAN ADMITS SLAPPING ADOPTED CHILD ON FLIGHT FROM RUSSIA October 8, 1997 Web posted at: 10:30 p.m. EDT (0230 GMT) NEW YORK (AP) -- A Phoenix woman testified Wednesday that on a 12-hour flight from Moscow she may have slapped one of the two Russian girls she and her husband adopted. Karen Thorne said she was "very frustrated" in her attempts to calm the young girl on the crowded jet. She said difficulties began when she and her husband, Richard, met the 4-year-olds at an orphanage in Voronezh, about 12 hours north of Moscow by train. She said one child cried frequently and the other was initially warm, but then became aggressive and hard to manage. She said the children were difficult to control on a shopping trip in Moscow and while waiting to board the plane to New York. Three Texas men who were on the flight with their own newly adopted children said they saw the Thornes hit the girls. The Thornes were arrested upon landing and the girls were placed in foster homes, first in New York and now in Arizona, where the Thornes are permitted supervised visits. The Thornes have been charged with assault, harassment and endangering the welfare of the children. The Thornes speak only English; the children only Russian. Copyright 1997 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed. _________________________________________________________________ Infoseek search ____________________ ____ ____ _________________________________________________________________ rule Message Boards Sound off on our message boards You said it... [INLINE] SAMSUNG Meet the Challenge rule To the top © 1997 Cable News Network, Inc. All Rights Reserved. Terms under which this service is provided to you.

1 0

The 5th Horseman: Cryptoanarchist doctors.
by Peter Trei 17 Dec '03

17 Dec '03

I don't often get Forbes, but the Oct 6 issue caught my eye. Leafing through it, I found something fun in the letters column. It's in response to a 'fact & comment' column in the Sept 22 issue, the core of which is: ---------------- Here's how this basic attack on our personal freedom will work: A doctor who provides medical services to a Medicare-eligible patient without billing Medicare must sign an affidavit to the Secretary of Health and Human Services that he or she will not treat a single Medicare patient for the next two years. Any doctor found treating both Medicare patients and Medicare-eligible private patients will be subject to fines and perhaps prison. As Moffit points out, Section 4507 is "deliberately designed to make private contracting and medicine all but impossible except for physicians who reside in very wealthy communities." Senator Jon Kyl (R-Ariz.) correctly observes that this prohibition is the equivalent of Social Security's barring retirees from dealing with stockbrokers: "Surely, a law that made it illegal to supplement with private funds the amount received from Social Security would be met with disbelief and derision." Yet that is the equivalent of what this Medicare regulation does. ------------------ The letter reads: SIR: I have been treating Medicare patients for cash without filing Medicare claims for years. I do not intend to stop. If the government receives no forms, how will it know that a beneficiary received care from me? And the feds can't seize my records. They are all computerized and encrypted. Anthony A. Cassens, M.D Los Angeles, Calif. --------------------- Peter Trei trei(a)process.com

1 0