- cypherpunks-legacy - lists.cpunks.org

Re: Markoff in NYT on NTT/RSA chip
by jim bell 17 Dec '03

17 Dec '03

At 03:46 AM 6/5/96 +0000, jonathon wrote: > paul: > >On Tue, 4 Jun 1996, Paul Robichaux wrote: >> the NTT chipset for use, say, in a Motorola cell switch (made in IL) would >> seem to be problematic. Buying chips in Japan for shipment to Moto's phone >> factories in Singapore and Malaysia, however, would appear to be OK. Under > > So the companies simply ship their _entire_ production > facility offshore, to whichever country has no crypto > export regulations. > > << Any guesses on just how long ITAR stays around, once > several companies announce they are terminating the employment > of 1000+ people, for work overseas, because of ITAR? >> > > And doing all of their manufacturing offshore means they could > use Triple-DES, or BlowFish, or any other crypto algorithm. I seem to recall an announcement recently that Senator Burns is going to have a hearing "soon" on his crypto bill. If that's true, I think it would make a good publicity scene if somebody (if possible someone giving testimony) were to show up with one of these NTT encryption chips, wave it around a bit, and say "I can bring this chip into the country, why can't I take it out again?" Even if you can't get ahold of the real chip, any multi-pin bug will probably do for the sound/video-bite. Jim Bell jimbell(a)pacifier.com

1 0

Re: Java
by Gary Howland 17 Dec '03

17 Dec '03

Clay Olbon II wrote: > > Has anyone written a Java app to implement the Chinese Lottery? Seems like > a natural way to do it. A small cash prize might entice lots of folks to > let it run in the background... We have plenty of Java code that does crypto. If anyone can think of a suitable target (and perhaps a suitable prize for the winner), we'll help knock up some code. Click this if you're interested http://systemics.com:79/ (alternatively finger @systemics.com) The only targets I can think of are the Sun/Microsoft crypto API keys (but I would guess that these keys are too large for an attack to be feasible), and the unix password of David Sternlight (which was posted to sci.crypt last summer). Gary -- pub 1024/C001D00D 1996/01/22 Gary Howland <gary(a)systemics.com> Key fingerprint = 0C FB 60 61 4D 3B 24 7D 1C 89 1D BE 1F EE 09 06

1 0

Re: Richard Stallman on RSA, Zimmermann, crypto
by Deranged Mutant 17 Dec '03

17 Dec '03

Not to defend or condemn RSA folx or patents, etc., but sometime ago (recently) I read or was told or perhaps hallucinated that PGP3 was going to include non-RSA algorithms that didn't suffer the patent stickiness (El Gammel based on DSA?) Derek? On 4 Jun 96 at 18:00, Declan McCullagh wrote: [..] > Richard's comments below are very much worth reading. Also check out the [..] > The version of PGP used outside the US is free software, but if you > use it within the US, RSA Inc. can sue you. > > This is very bad for people who would like to use PGP. But it is > worse than that. It affects the political battle too. > > PGP had a chance to create a constituency of Americans who demand the > right to use encryption. If PGP had been allowed for use in business, > not just by hobbyists, we would have far more Americans who care > enough to fight against Clipper--and they would include businesses > which have the funds to influence legislators. RSA Inc. prevented > this from happening, and did so for no reason except money. [..] --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: Lack of PGP signatures
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 12:15 PM 7/3/96 -0700, Bill Frantz wrote: >On my Mac I just entered this answer, cut it to the clipboard, launched >PGP, clearsigned it, and pasted the result back into the Eudora window for >the new mail. But of course the signature doesn't check. (I suspect Eudora line wrapping.) >Pretty Good Privacy(tm) 2.6 - Public-key encryption for the masses. >(c) 1990-1994 Philip Zimmermann, Phil's Pretty Good Software. 9 Jun 94 >Distributed by the Massachusetts Institute of Technology. Uses RSAREF. >Export of this software may be restricted by the U.S. government. >Current time: 1996/07/03 21:04 GMT >pgp PGPTmpClipboardFile.tmp > >File has signature. Public key is required to check signature. . >WARNING: Bad signature, doesn't match file contents! > >Bad signature from user "Bill Frantz <frantz(a)netcom.com>". >Signature made 1996/07/03 17:48 GMT > >Plaintext filename: PGPTmpClipboardFile ------------------------------------------------------------------------- Bill Frantz | The Internet may fairly be | Periwinkle -- Consulting (408)356-8506 | regarded as a never-ending | 16345 Englewood Ave. frantz(a)netcom.com | worldwide conversation. | Los Gatos, CA 95032, USA

1 0

Re: Computer-Aided Revolution
by Lou Zirko 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: jimbell(a)pacifier.com, cypherpunks(a)toad.com Date: Wed Jul 03 18:24:47 1996 You could have all 1000 sync with the same time server. There are plenty of standard time servers available on the net and timer daemons are available for most platforms. Lou Zirko > I've thought of an application for a "revolutionary" program for > peaceful > protest, but one that requires that a substantial number (1000) of > people > have access to computer time synchronized to 1 second, ideally 0.1 > second. > How good would a time sync over the net typically be? > > Jim Bell > jimbell(a)pacifier.com > > Lou Zirko (502)383-2175 Zystems lzirko(a)c2.org "We're all bozos on this bus" - Nick Danger, Third Eye -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 iQEVAwUBMdsBT8tPRTNbb5z9AQFtmQf/bSl4oZ/TGz9jzPcEk6pCrJISQrIkpwc4 3ycIuRTkAk71BxyWllpquaFvc4LYxSha1KgjF4WKLE8luVEhLYNiK+MZxUQmd6Sn 26eagt3r470dppK6w6Ahzf8Nrm6SwYO7J0xHAxh5j/dDkvtGm9S5s+c4cgzbyvzR fOmz48UJYfcnQ5TmllOmqDHQ2YTbLcgBDZmG154KeSx/9AaU8hOw2WpWsCZAhVY5 By06kqTm12JBt1ERE63juPgf9AQpOY7ssGLRfTNttlZayd/UeTDmB0coD3rJnM1R egbl7hdoqNmkic9SMHF7TS5p+pq4WphGkxUqmvyI9wBy2YC+Luqgnw== =t8a2 -----END PGP SIGNATURE-----

1 0

Re: CWD -- Jacking in from the "Keys to the Kingdom" Port
by Deranged Mutant 17 Dec '03

17 Dec '03

On 3 Jul 96 at 18:58, Mark M. wrote: [..] > If the child is creative enough, he will be able to boot DOS from a bootdisk > and remove the line from config.sys that starts up the filtering software. Who bother using a boot disk. Remove it from the config.sys and then reboot. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Wanted: NNTP posting access for remailers
by lcs Remailer Administrator 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would anyone out there be willing to give NNTP posting or transfer privileges to anon.lcs.mit.edu? Because of recent spams through mail2news(a)anon.lcs.mit.edu, I may loose my news posting privileges to the news server I have been using. Though I try to resolve all complaints I receive, other complaints have been sent to other postmasters in the domain, who don't seem to want to hear about these problems. If you run a news server and would like to help people posting anonymous messages, please consider allowing posts from mail2news(a)anon.lcs.mit.edu. Ideally you would also be in a position to receive mail at some of the relevant postmaster aliases in your domain, and would not mind forwarding misdirected complaints to me so that I can deal with them. Alternatively, if you are willing to give me "IHAVE" priviliges, I can possibly set things up with an initial "Path:" header that guarantees most complaints will go directly to me. Thanks, - -mix-admin(a)anon.lcs.mit.edu -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMdsT70TBtHVi58fRAQHQ0QP/U3Jn7sL9+k3aUr+qw4WdDxef/lIeu3xO BwdO8zlNPavJgbxuunR81n011jGy80l7qnc+DpvtuEEQqszLMcMO/4zHw/VfVOY8 08nxE8+IkF/FE66vJdnU7O3I1mIjtbF8ixcm9FOwqoehSLJB40tXy6wu6KV663TQ fmy/Gz5XDe8= =Gp4D -----END PGP SIGNATURE-----

1 0

Re: CWD -- Jacking in from the "Keys to the Kingdom" Port
by David Rosoff 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 05.30 PM 7/3/96 -0700, Alan Olsen wrote: >At 06:58 PM 7/3/96 -0400, Mark M. wrote: >>If the child is creative enough, he will be able to boot DOS from a bootdisk >>and remove the line from config.sys that starts up the filtering software. >Or just remark it out and reboot. Or does the filtering software make it so >they cannot use an editor as well...? > >Sounds like a pretty easy thing to bypass given a small amount of clues. >(Makes me wonder how the usually clueless parents are going to block access >to their kids who usually understand the technology better than they do.) It would not have stopped me. =============================================================================== David Rosoff (nihongo o sukoshi dekiru) ----------------> drosoff(a)arc.unm.edu For PGP key 0xD37692F9, finger drosoff(a)acoma.arc.unm.edu 0xD37692F9 Key fingerprint = 25 7D AA 01 85 41 43 89 50 5A 33 76 F1 F1 99 67 Do you know who's reading your email? ---> http://www.arc.unm.edu/~drosoff/pgp/ Anonymous ok, PGP ok. If it's not PGP-signed, you know that I didn't write it. === === === === === === === === === === === === === === === === === === === === "Truth is stranger than fiction, especially when truth is being defined by the O.J. Simpson Defense Team." -Dave Barry -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMdsleRguzHDTdpL5AQGYYQQAirqoel38eJrNBo17WKYlKZ5SYT8n+4dM Uil2vBHosxIOdGo8vmarHoxVALF7L31wXbFJ6pdv7p/qHAMvzDW3RetJQhDAc42P lZY0qMnRonoA6tKQbTcx8zkoRevGBEzTjxkVUyfRDHJCez7U42Mlvif728Faj4Dg 9ceqFYutAjU= =/cfm -----END PGP SIGNATURE-----

1 0

Re: Lack of PGP signatures
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:45 PM 7/3/96 -0400, David Lesher wrote: >> I am wondering why there is not a signing option that ignores all >> non-printing characters. Might fix some of these problems... (Can anyone >> think of a reason this would be a "Bad Thing(tm)"?) > >Moving spaces could change meaning on a legal doc. > >A nonsense example is the alt.folklore.urbane "cow orker" tag... I was thinking of carriage return/line feed combinations... Spaces are obvious and print. I was thinking of non-printing characters that are non-obivious when inserted. --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Re: blocking software & brock meeks
by Erik E. Fair 17 Dec '03

17 Dec '03

Vladimir, I agree with you in general, however, Brock and Declan have a point to make too: these companies need to differentiate themselves based on two things: 1. basic philosophy of filtering (why they filter what they filter). 2. diligence in keeping up their databases. Brock & Declan are right to expose the basic filtering philosophies of the different companies, so that those of us who may wish to avail ourselves their services know exactly what we're getting (or rather, not getting). In the end, the market will choose between the simple "no porn" philosophy (for whatever your definition is of that), and the "christian family values approved by the christian coalition" philosophy (with, one hopes, a whole lot of other points on the spectrum in the middle). However, the consumers cannot make this choice absent the information; Brock & Declan have done everyone a service by shining some light on this. What I'm surprised about is that these companies apparently aren't already trumpeting their philosophies of filtering themselves. The principle differentiator for this market is not the software - there really aren't that many ways to filter this stuff, and these companies ought to share their techniques in that area so that they can all be more effective and thus serve their customers better. The real differentiator is what's in their databases, which (one presumes) is driven by each of their philosophies of what is "harmful" to minors. One wonders if these companies might be embarassed to actually take a public position on this burning issue: just exactly what *is* "harmful" to minors? Personally, I fail to see how they can avoid it - it is the essence of their entire business. Erik Fair <fair(a)apple.com>

1 0