- cypherpunks-legacy - lists.cpunks.org

info requested
by urbr4kan＠rto.dec.com 17 Dec '03

17 Dec '03

UNIVERSITY DEGREE PROGRAMS Increase your personal prestige and money earning power through an advanced university degree. Eminent, non-accredited universities will award you a degree for only $200. Degree granted based on your present knowledge and experience. No further effort necessary on your part. Just a short phone call is all that is required for a BA, MA, MBA, or PhD diploma in the field of your choice. For details, call 602-230-4252

1 0

politics of topology (was On the LAM--Local Area Mixes)
by Rishab Aiyer Ghosh 17 Dec '03

17 Dec '03

m k gandhi used to say that it was good india was colonised by the _british_ - the poor fools were vulnerable to non-violent rational argument and (relatively) concerned about such oddities as human rights. one problem with tim may's idea for local area mixes is just that: relying on US stickliness on wimpy rules for search/interception is all very well, but wouldn't fly in china. i won't get into the argument over how awful the US state is here, but if all cypherpunk technology can fight is the "tyrannical" democracies of the west, it's not much good, IMNSHO. besides, if such technology becomes widespread in, say, the US, then it's inevitable that the authorities will tend towards more _real_ tyrannical behaviour, diluting search/seizure protections and taking you closer to china. a weak vaccine _strengthens_ the microbe it is supposed to kill. today your tech may let you plan stink-bomb attacks on the IRS in peace; tomorrow it may not be sufficient to let you publish articles critical of the goverment. i always thought the cypherpunk idea ("write code" etc) was to develop tech that is _independent_ of political protections. technology will not undermine the power of governments, if it is based on (incorrect) assumptions that governments will continue to restrain themselves (e.g. search & seizure) when faced by increasing use of such tech. i should think that LAMs would be excellent test-beds for larger-scale systems, but it is larger-scale systems, where you don't assume the government's _not_ snooping because it's squeamish, that matter more. best, -rishab First Monday - The Peer-Reviewed Journal on the Internet http://www.firstmonday.dk/ Munksgaard International Publishers, Copenhagen Intl & Managing Editor - Rishab Aiyer Ghosh (ghosh(a)firstmonday.dk) Mobile +91 98110 14574; Fax +91 11 2209608; Tel +91 11 2454717 A4/204 Ekta Apts., 9 Indraprastha Extn, New Delhi 110092 INDIA

1 0

Two Turntables and a Clipper Chip
by Anonymous 17 Dec '03

17 Dec '03

Two turntables and a Clipper chip By Skinny DuBaud January 15, 1998 SAN FRANCISCO--In what certainly was not a hacker's delight, RSA Data Security CEO Jim Bidzos stunned the crowd at his company's annual conference this week as he joined old-school rappers The Sugar Hill Gang for a detourned version of da Gang's classic, "Rapper's Delight." Well aware that he's no Kool Moe Dee, Bidzos hip-hopped his way through the modified lyrics, which contained such sparkling couplets as... "They once proposed a thing called Clipper Now there's something new that ain't much hipper Key recovery won't work, so the experts say But the government wants to push it on us anyway" and "I like hip hip hop I like to online shop I trust RSA To keep the hackers at bay" ...then promised never to pull such a stunt again. The RSA conference audience of crypto-math geeks, cyberlibertarians, and snoop-dogs cheered, of course. They'd throw their hands in the air (and wave them like they just don't care) for a wet sponge if it smelled antiauthoritarian, but many breathed a sigh of relief. Despite the awkward moments, Bidzos, who's made quite a name for himself as a public enemy of the federal government's restrictions on the export of encryption software, looked mahvelous sporting a fresh Van Dyke facial-hair arrangement on his prizefighter's mug. He apparently grew the ensemble to match the Sugar Hill Gang--in appearance at least, if not in dope MC talent. Always the suave host, Jim will be back among his tribe at the end-of-conference gala, for which the company has rented out the California Academy of Sciences in Golden Gate Park. The Skintelligentsia certainly will be there looking out for any representatives of Pretty Good Privacy, the crypto company enmeshed in legal battles with RSA. The PGP-brains don't have a booth at the RSA conference this year, but in celebration of their merger with Network Associates--the newly formed utility software company, that is, not the PR agency--they managed to throw a soiree last night at the Marky-Mark Hopkins Hotel, right across the street from the RSA proceedings at the equally fly Fairmont. Speaking of snubs, crypto rivals VeriSign and GTE, whose booths at the Fairmont were practically alongside one another, have been playing a bit of one-upmanship recently. Certificate authority (CA) VeriSign uses hardware storage from BBN to safeguard software encryption keys at its Silicon Valley offices. The hardware--which looks like small blue boxes about the size of a desktop telephone set--is the crypto equivalent of a strong box, ostensibly impervious to hackers. But BBN was recently bought by GTE, which owns rival CA Cybertrust Solutions, and all of a sudden, VeriSign isn't satisfied with the "performance" of those little blue boxes. The company has started looking elsewhere for its strong-box solutions, according to a Skinside source. How will users of encryption trust the "trusted third parties" if the trusted third parties don't trust each other? Staying in Baghdad by the Bay, the conspiracy birds are clacking their beaks over the latest public transportation developments. S.F.'s Municipal Railway (or "Muni," as the local posse calls it) has just opened an extension from the end of Market Street down to Willie Mays Plaza, now just a gaping pit where the new baseball stadium will spring up by the year 2000. The shorthand for the new rail spur? "MMX," short for Muni Metro Extension. Sure, the project's gone over budget, but I swear it fixed that floating-point problem years ago... Speaking of Big Willie Style, San Fran's mayor Willie Brown--who looks great in a fedora, I must say--may be second only to Bill Gates when it comes to haughty treatment of minions, but do Willie's employees sit on Thai temples and proclaim their divinity? That's apparently what happened to a Microsoft programmer on vacation. According to email making the rounds among MSN and WebTV employees, the young fellow (who didn't answer his Redmond phone when my agents rang him up) overheated his circuits, perched himself atop an ancient Thai temple for 10 hours, and told the authorities he was God. It took scaffolding and a special police neck-hold to bring him down, according to the report. Brutal, Juice, brutal! Whether the item is true or not, it produced some amusing comments as it made its way through the outer provinces of Lawrence Lessig's favorite evil empire. "So, um, how closely are we supposed to try to blend into the Microsoft culture?" mused one WebTV employee as the tidbit made its way around the company. "I'm sure that each of us, at one time or another, has had the experience of waking up in some God-forsaken tropical paradise and feeling that horrible falling sensation that comes from being separated from your desk and workstation," wrote another Webhead.

1 0

Jan. 23 column - Horiuchi
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Tue, 20 Jan 1998 23:59:33 -0700 X-Sender: vin(a)dali.lvrj.com Mime-Version: 1.0 Date: Tue, 20 Jan 1998 23:00:37 -0800 To: cathy(a)engr.colostate.edu From: Vin_Suprynowicz(a)lvrj.com (Vin Suprynowicz) Subject: Jan. 23 column - Horiuchi Resent-From: vinsends(a)ezlink.com X-Mailing-List: <vinsends(a)ezlink.com> archive/latest/424 X-Loop: vinsends(a)ezlink.com Precedence: list Resent-Sender: vinsends-request(a)ezlink.com FROM MOUNTAIN MEDIA FOR IMMEDIATE RELEASE DATED JAN. 23, 1998 THE LIBERTARIAN, By Vin Suprynowicz 'Protecting him, by a mock Trial, from Punishment for any Murders ...' What does the Declaration of Independence actually consist of? Sure, from our school days, we may remember that "these United Colonies are, and of Right ought to be, Free and Independent States." But that's only the last paragraph. Prior to that, Mr. Jefferson and his co-signers spent 29 paragraphs doing ... what? "Declaring their causes," of course! We did this -- anyone would have the right to do this -- because of a "long train of Abuses and Usurpations," remember? "He has erected a Multitude of new Offices, and sent hither Swarms of Officers to harrass our People, and eat out their Substance." Remember? "He has kept among us, in Times of Peace, Standing Armies, without the consent of our Legislatures. "He has affected to render the Military independent of and superior to the Civil Power. "He has combined with others to subject us to a Jurisdiction foreign to our Constitution, and unacknowledged by our Laws; giving his Assent to their Acts of Pretended Legislation: "For quartering large Bodies of Armed Troops among us: "For protecting them, by a mock Trial, from Punishment for any Murders which they should commit on the Inhabitants of these States. ..." This is not just schoolboy stuff. A message etched in fire from our patrimony, these words tell us how Americans shall know when they are again justified in declaring themselves free of a parasitical tyrant. Fast forward 216 years, to the late summer of 1992. Part-time gunsmith Randy Weaver had failed to show up for a court date, after being entrapped by ATF agents hoping to turn him into a snitch, to spy on a nearby CHURCH. Federal marshals now trespass on the Weaver family's private Idaho property (the marshals carry no warrant this day and are not there to make an arrest), and open fire when they're spotted by the family dog, killing the dog, and also Weaver's 14-year-old son, Sammy. A federal marshal is also killed, either in self defense or by fratricidal fire. (The federals never release any shell casings or autopsy results for independent review -- but a jury acquits Weaver and family friend Kevin Harris in the death.) The federal government answers by flooding the property with hundreds more trespassers in full combat gear. FBI sniper Lon Horiuchi then shoots at Weaver and Harris as the pair races back to his front door, after paying their respects to young Sammy's body in an outbuilding. One of Horiuchi's shots passes through the window of the kitchen door, shooting away much of the brain of Weaver's wife Vicky, for whom there are no warrants outstanding. At the moment prior to her death (which comes after 30 seconds of blood-curdling screams), Vicki Weaver was holding her baby in her arms in her own kitchen, threatening no one. Unaware they have murdered Vicky Weaver, federal agents continue to shout taunting remarks at her dead body, in the full hearing of her children, for days. The federal government eventually pays Weaver -- acquitted of murder and all other major charges -- and his children $3.1 million in damages for these wrongful actions. After a year-long review, the U.S. Justice Department decides in 1994 not to charge sniper Lon Horiuchi with any crime. Like the Germans at Nuremberg, they declare he was "just following orders." But, just before the five-year statute of limitations is due to toll, in August of 1997, Boundary County (Idaho) Prosecutor Denise Woodbury bravely files a charge of involuntary manslaughter against this armed trooper, who has long been quartered among us as part of the 60,000-strong federal "standing army" of FBI, DEA, ATF and other Einsatzgruppen troopers. Here now is the vital test. Will this "king's officer" be allowed to stand trial on the evidence, before a randomly selected jury of Idahoans, in their own state court? Or will the new king "protect him, by a mock Trial, from Punishment for any Murders which he has committed on the Inhabitants of these States"? Jan. 7, 1998: The Associated Press informs us: "BONNERS FERRY, Idaho (AP) -- A judge today ordered an FBI sharpshooter to stand trial on a state manslaughter charge for the death of white separatist Randy Weaver's wife in the 1992 siege at Ruby Ridge. ... "Magistrate Judge Quentin Harden ... scheduled a Feb. 13 arraignment before state Judge James Michaud." So far so good. But now the inevitable: Jan. 12, 1998: "BOISE, Idaho (AP) -- FBI sharpshooter Lon Horiuchi won his bid today to be tried in federal court on the state charge brought against him in the death of white separatist Randy Weaver's wife in the 1992 siege at Ruby Ridge. ... "Horiuchi, supported by the U.S. Justice Department, petitioned the federal court to take over the case on grounds that the transfer is allowed when federal agents are prosecuted for conduct in their official capacity. "U.S. District Judge Edward Lodge agreed. ... Neither murder nor manslaughter, of course, is a federal crime. State courts have sole jurisdiction to try such cases. Clearly, the federals want jurisdiction here so they can either dismiss the case, or (if a public outcry renders that unwise) so limit the evidence admitted that the question to be decided ends up nothing more than "Was Agent Horiuchi obeying what he believed was a lawful order at the time?" Sort of like letting Martin Borman set the ground rules for the Nuremberg trials. Modern federal judges -- like Judge Smith in the trial of the Waco survivors -- are famous for declaring "The United States government isn't going to be put on trial in my courtroom." As one of my e-mail correspondents puts it: "The test for whether one is living in a police state is that those who are charged with enforcing the law are allowed to break the laws with impunity." This -- along with Janet Reno and her Waco Killers still roaming free, of course -- is the great modern test of whether this Union can long endure. If Lon Horiuchi walks (or even if some untimely "accident" allows him to escape justice) while the surviving VICTIMS of the federal assault at Waco are still serving long prison terms, after being found INNOCENT of all major charges, then what shall we say to the patriot who advises: "If you see a federal agent committing a crime, don't bother turning him in, just shoot him down like a dog. Kill him on the spot, and walk away without giving it a moment's thought." Showing our respect for due process, do we continue to say: "Oh no, that would be wrong. Just turn him in to the proper authorities, and justice will be done"? Do we, really? Vin Suprynowicz is the assistant editorial page editor of the Las Vegas Review-Journal. Readers may contact him via e-mail at vin(a)lvrj.com. *** Vin Suprynowicz, vin(a)lvrj.com "If ye love wealth greater than liberty, the tranquility of servitude greater than the animating contest for freedom, go home from us in peace. We seek not your counsel, nor your arms. Crouch down and lick the hand that feeds you. May your chains set lightly upon you; and may posterity forget that ye were our countrymen." -- Samuel Adams --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Fwd: Confiscation is here, Make the most of it. (fwd)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Tue, 20 Jan 1998 10:06:17 -0800 To: Robert Hettinga <rah(a)shipwright.com> From: <snip> Subject: Fwd: Confiscation is here, Make the most of it. (fwd) Status: U >Date: Tue, 20 Jan 1998 07:45:01 -0800 (PST) >From: <snip><snip> >Subject: Confiscation is here, Make the most of it. (fwd) >Mime-Version: 1.0 >To: <snip> > >Daryl Davis, author of the letter forwarded by Schrader, is the range- >master for the Santa Clara County Corrections Department and <snip> > >---------- Forwarded message ---------- >Date: Mon, 19 Jan 1998 09:46:37 -0800 >From: Mike Schrader <bay2a(a)webnexus.com> >To: ca-firearms(a)lists.best.com >Subject: Confiscation is here, Make the most of it. > >The following text was written to be presented to our (Santa Clara >County's) Republican Central Committee, to wake up the moderates, that bad >laws have unintentended consequences. Feel free to use it to do similar >work. > > Also see the advice at the end, and add my own that now is the time to >turn the heat up on both Lungren the candidate and your local >representatives to the state houses that voting for more bad laws will >never get them reelected. Neither party will be safe from the backlash on >this one. Neither party can distance themselves from those consequences. > >Don't let them. > >Yours, >Mike Schrader > > > > >Confiscation Comes to California >Lungren fulfills Feinstein's fantasy > > >By Daryl N. Davis > > > They said it would never happen. Any suggestion that it would was >derided >as "NRA paranoia." They told us they only wanted "reasonable controls." > > Well, it has happened. Gun confiscation is now the law in California. >Thank you, Dan Lungren! > > In a letter dated November 24, 1997, The Man Who Would Be Governor >declared that SKS rifles with detachable magazines, unless the owners can >prove they acquired the rifles prior to June 1, 1989, are illegal "and must >be relinquished to a local police or sheriff's department." This is a >reversal of the opinion held by Mr. Lungren from the time he took office in >January 1991, and which has been conveyed in numerous training sessions for >peace officers, criminalists and prosecutors during the past four years. > >When the Roberti-Roos Assault Weapons Control Act (AWCA) became law in >January 1989, it included "SKS with detachable magazine." At that time, >there were two distinct models-one with a fixed magazine (Type 56) and one >with a detachable, AK-47 magazine (Type 84). President Bush banned >importation of the Type 84 in 1990. Later that year, aftermarket detachable >magazines (which are not interchangeable with the AK-47 magazine) became >available for SKS rifles originally designed to use only a fixed magazine. > > Until September 1997, Mr. Lungren's position had been that only the >Type >84 was an "assault weapon." He allowed the sale of the aftermarket >detachable magazines and of SKS rifles equipped with them. He also allowed >the sale of the SKS Sporter, basically a Type 84 that, in compliance with >the import restrictions imposed by President Bush, had its bayonet lug >ground off and was fitted to a sporting stock rather than a military stock. > > In September 1996, the Attorney General's office asked the state >Supreme >Court to "on its own motion order review of the Court of Appeals >decision..." in the Dingman case. James Dingman had been convicted of >possession of an unregistered assault weapon (Type 56 with detachable >magazine) and his conviction was upheld by the Court of Appeals for the >Sixth District. Chief Deputy Attorney General (now candidate for Attorney >General) David Stirling wrote: > >"The impact of the court's opinion cannot be over stated because of the >millions of SKS rifles and after-market magazines currently in circulation. >Tens of thousands of California citizens may become criminals simply by >using a perfectly lawful rifle with a lawfully purchased magazine without >adequate notice that such activity brings them within the proscriptions of >the AWCA." > >In October 1996, in response to the "unprecedented" request by the Attorney >General, the Supreme Court granted review of the Dingman case. In February >1997, the Attorney General's office filed an amicus brief with the Supreme >Court in support of Dingman; they asked that the opinion of the Court of >Appeals be "reversed." > > In September 1997, in response to a series of blatantly biased and >aggressively uninformed hit pieces in the Los Angeles Times, Mr. Lungren >reversed himself. He withdrew his amicus brief in the Dingman case, stating >that it "inaccurately reflects the view of the Attorney General." Deputy >Attorney General Paul Bishop, who had worked on the AWCA project since >1989, was transferred. > > Thanks to Mr. Lungren, "tens of thousands of California citizens" must >either surrender their lawfully acquired property without compensation or >become felons. Gun dealers throughout the state face felony prosecution, on >individual counts, for each detachable magazine SKS they sold during the >six years Mr. Lungren assured them it was legal to do so. Furthermore, the >opinion does nothing to clarify what constitutes a "SKS with detachable >magazine." Must the magazine be affixed to the rifle? With the rifle? The >rifle in the owner's gun safe and the magazine buried somewhere in a box of >miscellaneous parts in his/her garage? > > On CBS's "60 Minutes" on February 5, 1995, Senator Dianne Feinstein >declared, "If I could have gotten 51 votes in the Senate of the United >States for an outright [firearms] ban, picking up every one of them, Mr. >and Mrs. America turn them all in, I would have done it." Thanks to Dan >Lungren, Feinstein's fantasy is well on its way to becoming reality. >Whether Mr. Lungren's fantasy of currying favor with the loony Left at the >Los Angeles Times becomes reality, remains to be seen. > > > > >What Should I Do? > >1. If a law enforcement officer attempts to confiscate your SKS, live to >fight another day. DO NOT RESIST! Do get a receipt, though. > >2. Contact Governor Wilson and firmly but politely express your outrage at >this situation. In addition to infringing the Second Amendment, the AG's >position creates a taking of private property without just compensation >(Fifth Amendment) and an ex post facto application of the Assault Weapons >Control Act (Article I, Section 9, Paragraph 3). >Gov. Pete Wilson >State Capitol >Sacramento, CA 95814 >Phone: 916-445-2864 >FAX: 916-445-4633 > >3. Become active in your local NRA Members Council. You may call the >Silicon Valley Members Council at 408-235-9175, 24 hours a day, for up to >date legislative information or for information on contacting a Members >Council in your area. > <snip> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Revenge on the Nerds -Maureen on a rampage
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- and everyone thought I have been blowing smoke over the few years over the need to dismember Micro$haft. More aye-sayers than naysayers have joined the fray, some even eloquently. even the opinion polls are against BadBillyG: bubba is more trusted! as is the government... Mickey$lop no longer generates terror in the hearts of everyone --just the OEMs who can not afford to even testify for fear of retaliation --and it is a real fear. keep your fire extinguisher handy. Maureen is really smoking! January 21, 1998 NYTimes OpEd Columnist LIBERTIES / By MAUREEN DOWD Revenge on the Nerds WASHINGTON -- I figured things were way out of perspective in the Other Washington when I heard that Bill Gates had put an inscription from "The Great Gatsby" around the domed ceiling of the library in his new $100 million pad: "He had come a long way to this blue lawn and his dream must have seemed so close that he could hardly fail to grasp it." Bill Gates was obviously unaware of the magnitude of the truth that he had unwittingly admitted. When he read about the blue lawn, he must have imagined computers with glowing blue screens stretching to infinity. And he must certainly have liked the proximity of the words "dream" and "grasp." With a judge who is likely soon to hold Microsoft in contempt for petulantly defying an order designed to give its rivals any chance, Mr. Gates's dream may at last have exceeded his grasp. The Justice Department never came down on Gatsby. This Washington has disabused that Washington of its arrogant presumption that what's good for Microsoft is good for America. This Washington has stripped that Washington of its image as warm, tender, flannel-and-soyburger pioneers of the new economy, and properly pegged Microsoft as an egomaniacal, dangerous giant that has cut off the air supply of competitors in a bid to control cyberspace. "The only thing the robber barons did that Bill Gates hasn't done is use dynamite against their competitors," Gary Reback, a Silicon Valley antitrust lawyer, told John Heilemann of The New Yorker. The disheveled college dropout who used to get adoring headlines like "A Regular Guy Who's a Legend: Bill Gates Puts a New Face on the American Dream" now looks like a spoiled rich brat. When they treated the Justice Department and the judge with the same contempt with which they treat competitors, the masters of the virtual universe got hit with a grim truth: People hate Microsoft even more than they hate the Government. Mr. Gates has gone from Horatio Alger similes to virus similes. Frederick Warren-Boulton, another antitrust expert, told The New Yorker: "Gates is like smallpox. You have to go in there and you have to nail it. If you leave it lying around, it will just come back." When asked who they thought had done more good for the future of America, Bill Gates or Bill Clinton, more Americans chose Mr. Clinton. (Even though portfolio-obsessed Americans would still rather have their children grow up to be more like Mr. Gates than Mr. Clinton, by 47 to 24 percent.) As Jacob Weisberg plaintively wrote in Slate, Microsoft's on-line magazine: "A few months ago, everyone I met seemed to think that working for Microsoft was a pretty cool thing to do. Now, strangers treat us like we work for Philip Morris." The Times's Timothy Egan explored the angst that has gripped the Redmond campus since Microsoft lost its sheen. Some fret that the fate of the entire Pacific Northwest is at stake. All the instant millionaires in thermal shirts, droopy drawers and sandals with wool socks are suddenly Wondering If It's All Worth It. They have staggered out of the Seattle fog long enough to listen to their inner browsers. This has been a rude shock to them because they honestly believed that our Washington was full of anti-business, careerist bureaucrats, and their Washington was full of imaginative idealists and entrepreneurs who buy and sell to the beat of a different drum. They didn't reckon smokestack laws could apply to high technology. As Mr. Gates's lawyer, William Neukom, told Steve Lohr of The Times, "We sincerely believe that we are a force for good in the economy." Actually, Microsoft has been a force for greed in the economy, more brilliant at marketing and purloining and crushing than it has been at innovating. The company saw the fight with the Justice Department as a defense of its way of life. And that way was hardball on software; anything it decided was a core threat to Microsoft was sucked into the operating system. These are Darwinian nerds. Besides, Microsoft couldn't even save the universe in "Independence Day." It took an Apple to do that. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQBVAwUBNMZSQ7R8UA6T6u61AQH2fgH+OQT3p1cE1lRxSzMvhyt9AvvH2N3jFUmO UZzpqRbrn9pB1VPxZLKG2lgBwOW4hPIlpFRWg8Fp+Uu6KoL6kKObuw== =n+/c -----END PGP SIGNATURE-----

18 23

State of the Union Address
by bubbabill＠whitehouse.gov 17 Dec '03

17 Dec '03

Hear that the State of the Union next Monday has a section on Internet - networks - critical infrastructure protection et al. Anyone have any details?

1 0

Re: Latest smartcard software
by Secret Squirrel 17 Dec '03

17 Dec '03

>They'll say hey, you've already surrendered your biometric number >during fingerprinting for driver's licenses. > >It will be too late. > >The high-tech American Leviathan will be in place. Sounds like Microsoft. No, really. I'm dead serious. Like it or not, people have to use Mickeysoft crap sooner or later. Want to read that document? Read that email? Run that program? Purchase things (software which runs)? It's garbage. I know it's garbage. Many of us here know it's garbage. But we have to use it anyway. Compare this to the smartcard as proposed like this: I know it's garbage. Many of us here know it's garbage. But we have to use it anyway. Want to read that document? Read that email? Access that computer system? Drive your car? Get in your house? Get through a toll booth? Enter or leave the country? Better make sure your papers are in order. The high-tech American Leviathan is already in place. The problem is that it'll just get worse because the sheeple are, by definition, naked, stupid, and blind.

2 1

Cybersitter censors code
by Secret Squirrel 17 Dec '03

17 Dec '03

>>Turns out, someone had inadvertly installed this piece of garbage >>called CyberSitter, which purports to protect you from nasty internet >>content. Turns out that it does this by patching the TCP drivers and >>watching the data flow over EVERY TCP STREAM. Can you spot the offense >>word in my example? It's "NUDE". Seems that cybersitter doesn't care if >>there are other characters in between. So it blanks out "nu */ #de" >>without blanking out the punctuation and line breaks. Very strange and >>stupid. Find out who it is and fire his ass for sabotage of the company computer systems.

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium
by John Kelsey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [ To: cypherpunks ## Date: 01/21/98 ## Subject: Re: (eternity) Eternity as a secure filesystem/backup medium ] >Subject: Re: (eternity) Eternity as a secure filesystem/backup medium >From: Adam Back <aba(a)dcs.ex.ac.uk> >Date: 1998/01/18 >1. communications crypto used by the author in submitting > the document is broken This is only a threat if the authorities have a good idea who submitted the data, and want to prove it. Otherwise, you end up with billions of encrypted documents, each encrypted with a moderately weak cipher. (Even assuming that the cipher turns out to have only 40 bits of strength, this is too expensive to do for more than a handful of documents.) >2. the eternity architecture contains encrypted documents to > frustrate attempts to locate documents, and to hide the > contents of documents from individual servers Again, this won't be too economical unless the eternity service is rarely used. >3. communications crypto used to request and deliver > documents is broken thus revealing the readers identity >So it is useful to design upgrade paths for ciphers into the >protocols where possible. Definitely--this is always a good idea, right? >Other approaches we could take are to use very conservative >cipher key sizes and protocols combining multiple ciphers in >ways which gives us the security of the best of the ciphers. >For example: > R = random, C = 5DES( R ) || blowfish-484( M xor R ) >Where 5DES is say E-D-E-D-E with 5 independent DES keys. >Constructs to combine in strong ways hash functions, macs, >symmetric and asymmetric ciphers would be useful. Is there >much research in this area? Yes. Massey and Maurer did a Journal of Cryptography paper titled ``The Importance of Being First,'' which says that in any chain of encryptions with different ciphers and independent keys, such as E_1(E_2(E_3(data))), the whole thing is provably as strong as the first cipher used on the data (E_3, in my example above). This is really obvious, when you reflect that an attacker can always try to break data encrypted with E_3 by superencrypting it with E_1 and E_2, and then mounting his attack on E_1(E_2(E_3(data))). Of course, if keys aren't independent among the three ciphers, then you don't get any guarantee of this kind. The other thing to note is that if you're just generating keystream sequences, as you would with RC4 or SEAL, then all ciphers are ``first.'' Rivest and Sherman also did some work on randomized encryption, of the kind you discuss, in the Crypto '82 proceedings. Your construction is very similar to one of theirs. Let M = message and R = a message-sized random number, then in E_1(R), E_2(R XOR M) both E_1 and E_2 must be broken to learn M. (Imagine this isn't the case, then either E_1 or E_2 wasn't broken. If you didn't break E_2 but broke E_1, then you only learn R, which is useless to you--it's random and uncorrelated with M. If you broke E_2 but not E_1, you would have a message encrypted with a one-time pad.) This generalizes nicely to E_1(R1), E_2(R2), ..., E_N(RN), E_{N+1}(R1 XOR R2 XOR ... XOR M). If those random numbers are really random, then if any one of those ciphers resists your attacks, the message can't be recovered. Now, you can also do this with things that approximate random functions, which they also discuss. Thus, you might use: f_1(),f_2(), ..., f_n() are N independently-keyed different cryptographic functions that approximate random functions. The funny thing is, if you instantiate this intelligently, you get a message encrypted by N different stream ciphers, perhaps with a random parameter per message thrown in during keying of those ciphers. Thus, suppose s_1(K1) = RC4(K1) s_2(K2) = 3DES-OFB(K2) s_3(K3) = SHA1-Counter-Mode(K3) s_4(K4) = Blowfish-OFB(K4) s_5(K5) = SAFER-SK128(K5). and that these keys are different per message and are all independent. Then, you get the result that M XOR s_1(K1) XOR S_2(k2) XOR ... XOR s_5(k5). leaves no way to recover M unless all five s_i() can be guessed. Note that, in practice, this isn't likely to be useful unless you've done the same kind of thing for symmetric key distribution, random number generation, etc. Otherwise, your attacker in 2050 will bypass the symmetric encryption entirely and factor your RSA modulus, or guess all the entropy sources used for your PRNG, or whatever else you can think of. The good news, though, is that active attacks (like chosen input attacks) and many side-channel attacks (e.g., timing attacks) turn out not to be possible if you are trying to mount them after the encryption has been carried out. >Adam - --John Kelsey, kelsey(a)counterpane.com / kelsey(a)plnet.net NEW PGP print = 5D91 6F57 2646 83F9 6D7F 9C87 886D 88AF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNMeCqSZv+/Ry/LrBAQGxpgQAloxNjdZMf6l/7U520ZSIVuk7lFZcu0+J 5tUyQgHtS4EAplC1OBnYc8B3pzCir6VCXinmNbClgalXhrRFfmV7vTQLZySaVv/+ 0T44TFkJ0Ldu4cTsA2ertL0jcCXiBp38mhVK2IFbPtN+04B+een8jrUYtzx/qIj5 ztBpBb4yil8= =wBTR -----END PGP SIGNATURE-----

4 3