- cypherpunks-legacy - lists.cpunks.org

Re: Usability of Cryptography (was Re: More FUD from First Virtual)
by James A. Donald 17 Dec '03

17 Dec '03

At 01:06 PM 12/11/95 -0700, Bryce wrote: > To get to the point, I want to know if this "fundamental > tradeoff" that you refer to is in fact *fundamental*. That is > to say: is the product of the "security factor" and the > "usability factor" a constant? Or are there methods which can > be practically implemented to make strong cryptography easier > for Joe Average to use without exposing Joe to unnecessary > risks? Web of trust is a mess because it attempts to link keys to physical people, which in general cannot be done. If we stick to a lesser goal -- constancy of identity -- this is not so hard. In general it is impossible to prove that Bryce is the "real" Bryce, but it is trivial to prove that Bryce is the same Bryce who has a certain Web page, and the same Bryce who posted a certain article in archives. We should blow off this attempt to do the impossible. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

NT Password Security Update. Registry values changed!
by Ted Cabeen 17 Dec '03

17 Dec '03

Well, I did some more research into the NT password security issue and I discovered that I can get access to the Security section of the registry and there are some VERY interesting values there, stored as raw hex. I created a test user and checked the values of these registry keys with two different passwords and iterestingly enough the data in the keys changed when I changed the password. I plan on doing some more work, including changing the values and seeing if the password change, but I've been somewhat busy lately. I've st up a web page at http://shadowland.rh.uchicago.edu/ntcrypto.html that has the password I used and the data in the two registry values that changed when I changed the password. I invite people to look at it and speculate what the change means. Also, I can provide a few more plaintext/cyphertext pairs if necessary. The change in the values could be something like update time, but I don't think that they'd store that as raw hex, espically hex as long as the stuff I got. Good luck figuring it out. _____________________________________________________________________________ Ted Cabeen cabeen(a)netcom.com Finger for PGP Public Key secabeen(a)midway.uchicago.edu "I have taken all knowledge to be my province." cococabeen(a)aol.com

2 1

Major Launch
by dean＠intergal.com 17 Dec '03

17 Dec '03

THIS EMAIL IS INTENDED FOR ADULT WEBMASTERS WHO HAVE SIGNED UP FOR OUR MAILING LIST Hi from Dean at Playgal, I have sent this email to advise you of a major change and opportunity. As you may be aware both Intertain ( the nets first paysite ) and Playgal have formed a partnership. Together we form one of the largest adult networks on the Internet - our newly formed operation is Intergal. We have now combined our click through programs and launched the new Intergal advertising programs. We have a unique hit based click through which will guarantee a minimum payout http://www.intergal.com/nfa and offers huge conversion rate bonuses which means you can earn up to $5 a unique hit. Or we have the no frills NO FUCKING ABOUT campaign IN THE RAW - the click through which pays you 5.5 cents a raw hit - no conversion rates, just good old RAW hits. http://www.intergal.com/nfa/nfa.html You can select from our banner farm or use your own banners - we allow text links. It is up to you to send us as much traffic as possible - we encourage you to do it. Please feel free to use any marketing initiative you wish to maximize traffic sent to our sites - we understand the fact that you know your sites better than us . ( virtually the only thing we dont approve of is cheating ). We have one of the highest raw hit counts of any click through on the net - undisputed. We dont filter hits ! A great suppliment to your Intergal program is to advertise the nets newest and freshest site http://www.unfaithful.com you can sign up for the click through at http://www.unfaithful.com/easycash . Thanks for taking the time to read our announcement i have outlined below some services available to adult webmasters. Paysite Operators We have a few deals for you and offers for you. It will be worthwhile your time reading below. 1. FREE VIDEO FEEDS 10 rotating feeds an hour - 240 new feeds a day for FREE Check it out at http://www.virtualgirlz.com or for Gay go to http://www.virtualgirlz.com/freeholio/gay.html (YOU CAN EVEN PUT IT IN A FRAME!!!) and it works with AOL , IE and Netscape to sign up for free for 240 Free feeds each day. Go to: http://www.zanepix.com/240free.html 2. PASSWORD PROTECTOR Does your site get hit with password traders - we have the solution - if you run a unix operating system then you can stop password sites crashing your servers. The answer is Pennywize and it is only 99.95 - if you have a password posted on a big password site it will cost you much more than that in bandwidth. http://www.pennywize.com . Download it now - free tech support always available and you get all future updates. The best thing is it is so easy to install. 3. FREE TRAFFIC TO YOUR SITE AND GROWING EVERYDAY - NO LINK BANK REQUIRED Sign up for this today - surfers dont leave your site but you will get traffic back every day in return. http://eureka.abc-web.com/eureka/ This is the most innovative product to hit adult webmasters in years. 4. More Free Traffic Intergal have just recently bought Picturepost http://www.picturepost.com - it is ranked at number 7 on websidestory with about 90,000 uniques a day . Add a picture post text link to your front page and you are eligible to submitt a pic and get back about 10,000 hits in a week - for FREE. 5. We also highly recommend some of our feed suppliers 1. http://www.ibroadcast.net email - joey(a)ibroadcast.net and add 1,300 feeds to your site 2. http://www.megahardcore.com email andy(a)wd.com and add streaming videos with sound and they have a fantastic new virtual world package available. 3. Live fucking with sound email opm(a)pusi.com 4. 1,200 searchable feeds email davidk(a)xtv.com works with AOL , IE and Netscape 6. For cc processing we have had a very successful relationship with Ibill http://www.ibill.com or email the VP kmiller(a)ibill.com 7. For bandwidth we thoroughly recommend exodus.net contact jennifer(a)exodus.net for special attention and pricing. If you have received this email in error please put remove in the subject field and reply. Thanks for your time and for supporting our group of sites. regards Dean

1 0

Re: the best justice money can buy --Lessig (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: the best justice money can buy --Lessig (fwd) > From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) > Date: Thu, 05 Feb 98 16:26:45 EST > > > Of course there's a free-market remedy for Microsoft; eliminate copyright. > > > anyone can copy Microsoft software for free, it would be forced to compete > > > on real benefits rather than installed base. > > > > If there were no copyright nobody would have any reason to market software > > or much else for that matter. I would predict that much of the technology > > and infrastructure we have now wouldn't exist. It would also stiffle > > creativity and new methodologies because there would be no profit in it to > > recoup development costs. Those who would survive in such a market would be > > the 800-lb gorillas because only they would have the resources to squash the > > smaller companies. > > Software development seems to be thriving in countries that aren't very keen > on enforcing copyright laws - do you care to explain why? Oh yeah... Software development is a long way from selling software, not the same animal at all. I mean when I go down to the dozen computer stores within a mile or so of my house I am truly deluged by software from countries outside of the US and Canada. I mean we have all heard of the Indian and Bulgarian software billionares haven't we? And all those folks in Turkey just rolling in cash... Further, who do the majority of these folks who actualy make a reasonable living work for either directly or under contract? Large US and Eurpean countries thats who. That's why those folks can make a living developing (not selling) software. > > Free markets monopolize. > Hmm... There's no copyright on perfumes. There are market leaders in perfumes, > but no monopoly; hardly even an olygopoly. I can tell how often you buy perfume, the ones I buy for my girlfriend certainly have a little 'c' on them... And as to the number of companies that are actualy developing perfume versus reselling it under their own house brands...there might be a couple dozen succesful (say stay in business more than 5 years) in the whole world and I would go so far as to hypothesize that if one were motivated to plot the number of companies per year over the last say 50 years you would see the number go *down*. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

e-mail forwarding, for-pay remailers
by Greg Broiles 17 Dec '03

17 Dec '03

I don't have much faith that the people who are currently doing the DNS for my domain name (goldenbear.com) are going to do anything about the current bouncing-messages phenomenon anytime soon, so I'm looking into other ways to get & send E-mail (e.g., more persistent than this address which will disappear when I'm done with school in ~ 6 months). I've found a few services which may be of interest to C-punks because they're useful for creating/maintaining persistent cyberspace identities with no necessary connection to a "real name". I'm not listing the alpha-style alias servers because they depend on underlying remailers which I think makes them likely to be slower & less reliable; also, they won't store E-mail for you, such that you could connect every day or two or [...] to pick it up. I'm also ignoring the zillions of ISP's because I think that the market is separating (or ought to) into service/storage providers and connectivity providers. My hunch is that in the next year or so it's going to become easy to get nationwide dialups for IP connectivity the way it was done for X.25 10 years ago, so you won't care *where* you are, you'll be able to get an IP connection back to the folks that hold your mail, and you won't give a shit where *they* are. Then again, if the Exon stuff passes, I suspect that all we'll be left with in the US are service providers who deal with us at the level of IP packets and get (quasi-)common carrier status, acting just like Sprintnet/Tymnet/Telenet/CPN, but with IP not X.25. We'll all connect to offshore providers to pick up our E-mail and read our newsgroups, the control freaks will hate it, and we won't care. netbox.com ( http://www.netbox.com ) provides web pages and E-mail storage or forwarding for people; they let you sign up for a trial month for free. They ask for name/address/phone (which could easily be a Mailboxes Etc address and a voicemail from Mailboxes Etc or whatever) and accept payment by check or credit card. They'll store incoming email or forward it to another account. They'll do header rewriting (similar to the anonymous remailers) so that outgoing mail looks like it came from this address. thebook.com ( http://www.thebook.com ) provides web pages and E-mail storage or forwarding or E-mail -> FAX conversion, and also let you sign up for a free month to try things out. They also ask for name/address/phone. You can send incoming Emails to different places depending on wildcard-based filter criteria. The ACM ( http://www.acm.org ) provides e-mail forwarding and web pages to ACM members ($25 for students or ~$80 for professionals) for ~ $25/year. Hiway Technologies ( http://www.hway.com ) provides web pages and will accept/forward mail sent to your own domain name for pretty cheap. I'm planning to make a wee FAQ on this for my home page, please send along comments re these folks or suggestions about others. -- "The anchored mind screwed into me by the psycho- Greg Broiles lubricious thrust of heaven is the one that thinks every temptation, every desire, every inhibition." greg(a)goldenbear.com -- Antonin Artaud gbroiles(a)darkwing.uoregon.edu

1 0

The Elevator Problem (a.k.a. build a private key in public)
by fc＠all.net 17 Dec '03

17 Dec '03

Alice: tell Bob your public key Bob: use Alice's public key to encrypt a random number and tell it to everyone Now: start communicating using the random number as a private key. -> See: Info-Sec Heaven at URL http://all.net/ Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236

2 1

"feudal" states and national destiny
by attila 17 Dec '03

17 Dec '03

I don't wish to get this one going on c-punks, but you will see shortly just how quickly the "feudal" national powers are going to be able to erect national firewalls. We are entirely dependent on AT&T, Sprint, MCI, British Telcom, and so on for nation to nation or region to region communications --and they in turn are entriely dependent on the various national governments for the _franchise_ to "enter" or operate within the country. telephone lines are a trickle of information --the old uucp when I complained when the daily _total_ traffic exceed 2 megabyte and the heydey of TrailBlazers. today it's 154 Mb/sec trunks, and they are bogging down. the governments regulate these lines and outside the U.S. most governments own these lines. satellites are another perfect example; the governments control the franchises for the up and down links and the allocation of frequencies. and, who controls the satellite launches? Even the European consortium is controlled --forget the Chinese and the Russians! Is the government doing something illegal vis a vis communications policy (other than the obliteration of free speech with CDA)? No, but it is obvious they will, since the CDA or whatever is their intent and they have the power to enforce their intent --if nothing else by invoking FEMA, which a cornered Clinton might do. the extremists are almost always ignored. we are certainly viewed as extremists. nobody took the Libertarian party seriously until Howard Stern ran for governor of NY --and that was the circus of Will Rogers, not a political platform. Years of cooperative political graft (the interest in the status quo) has made the two party system the only __succeedable__ political system in the U.S. eventually, only violent revolution of the masses succeeds --men of rational thoughts and wise counsel are easily suppressed, if not eliminated. As for the dreamers who believe the government is or will NOT do (be doing) something illegal, the line forms to the right for reeducation. __________________________________________________________________________ go not unto usenet for advice, for the inhabitants thereof will say: yes, and no, and maybe, and I don't know, and fuck-off. _________________________________________________________________ attila__ To be a ruler of men, you need at least 12 inches.... There is no safety this side of the grave. Never was; never will be.

1 0

Re: Timing Cryptanalysis Attack
by Armadillo Remailer 17 Dec '03

17 Dec '03

Simon Spero <ses(a)tipper.oit.unc.edu> writes: >My gut & scribble-on-the-back-of-a-napkin feeling about this class of >attack is that it could be a problem for smartcards (almost certainly) Is it a problem to create smartcards that do their calculations in fixed time? I'd guess it should be easier than on multi-purpose hardware. Does the attack work for existing smartcards?

2 1

"The Internet needs a chastity chip." ---James Traficant, Dem-Ohio
by David Honig 17 Dec '03

17 Dec '03

http://www.yahoo.com/headlines/980206/wired/stories/cybersex_1.html Friday February 6 10:07 AM EST Lawmaker warns of cybersex "pregnancy danger" WASHINGTON (Reuters) - Citing the case of a woman who claims she got pregnant from e-mail, an Ohio Democrat called Wednesday for a "chastity chip" for the Internet. Rep. James Traficant, known for his flamboyant rhetoric, gave a brief floor speech about a woman named Frances who claimed to have gotten pregnant through an e-mail exchange with a paramour 1,500 miles away. "That's right -- pregnant," the Congressman proclaimed, warning of the dangers of "immaculate reception." He called on Congress to go beyond "v-chips" that would protect kids from sexual content on the Internet, saying: "Its time for Congress to act. The computers do not need a v-chip. The Internet needs a chastity chip." Although Traficant did not say whether he believed the woman's account, he did say it was "enough to crash your hard drive." ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu Lewinsky for President '2012

1 0

RebaNews
by mail 17 Dec '03

17 Dec '03

Reba will join Rosie O'Donnell as her special co-host February 16, as The Rosie O'Donnell Show continues its broadcasts from Los Angeles. In addition to pulling co-hosting duties, Reba will also perform "What If," her tribute song to the Salvation Army. Fresh off her wins at both the Peoples Choice Awards (which she hosted and won Favorite Female Musical Performer) and the American Music Awards (Favorite Female Country Artist), the February 16th appearance marks the second time Reba has appeared on The Rosie O'Donnell Show. Later this month, Reba will begin work on the CBS-TV movie, "Forever and Always," tentatively scheduled to air in May.

1 0