- cypherpunks-legacy - lists.cpunks.org

A new website
by jon 01 Feb '03

01 Feb '03

1 0

Life Sentence for Medical Marijuana?
by Eric Cordian 31 Jan '03

31 Jan '03

http://www.foxnews.com/story/0,2933,77234,00.html The Feebs are crowing over their latest victory, having just obtained a conviction against a medical marijuana grower for the city of Oakland. The individual was of course prohibited from any mention at his trial of medical marijuana, that he was growing the stuff legally under a 1996 state law, or any other mitigating factors. "There is no such thing as medical marijuana," said Richard Meyer, a DEA spokesman. "We're Americans first, Californians second." Actually, I think that should be "Assholes First." -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

3 2

Sovereignty issues and Palladium/TCPA
by pgut001＠cs.auckland.ac.nz 31 Jan '03

31 Jan '03

It looks like Palladium (or whatever it's called this week) is of concern not just to individuals but to governments as well (the following text forwarded from elsewhere): -- Snip -- Governments would want to explore the implications of the use and retention of government-held information and use of software for government business. More particularly, governments are likely to want to explore the issues related to potential foreign control/influence over domestic governmental use/access to domestic government held data. In other words, what are the practical and policy implications for a government if a party external to the government may have the potential power to turn off our access to its own information and that of its citizens. -- Snip -- Unlike China, not everyone can address this problem by building their own systems from the silicon on up. Peter. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

3 2

Re: Attack Is a Matter of Vulnerability
by Mike Rosing 31 Jan '03

31 Jan '03

On Fri, 31 Jan 2003, Steve Schear wrote: > http://www.lewrockwell.com/orig3/khan4.html Thanks, that was a fun read. Won't change anything, but I liked it. Patience, persistence, truth, Dr. mike

1 0

Re: punk and free markets
by Tim May 31 Jan '03

31 Jan '03

On Friday, January 31, 2003, at 09:05 AM, Michael Motyka wrote: > Jim Choate wrote : > >>> This list, at least in the Fraunhoffer region, does on some level >>> emanate a >>> Punk attitude, and tolerating the presence of a crypto-fascist or >>> two is >>> something of a consequence. But I'm sick of seeing the Tim May cops >>> come out >>> every time someone suggests a different political notion. >> >> 'Tim May cops'? Not a very punk attitude you have there. You give Tim >> way! >> too much credit. >> > I don't see much apart from anarchy and capitalism - the system is in > place and running > WOT ( Wide Open Throttle ). Tim just doesn't like some of the players. Silliness. The name "cypherpunks" was a pun on "cyberpunks," a pun suggested by Jude Milhon, a woman writer for "Mondo 2000" at the time. Being that there is no body which "decides" what our group is called, or even that it _is_ a group, saying that someone's pun on top of someone else's pun means some political ideology attached to degenerates like Sid Vicious, the Dead Kennedy's, etc., is pure silliness. Whether even "cyberpunks" had anything substantive to do with the so-called punk music scene is debatable, but cypherpunks certainly did not. The political ideology of all musical "punks" I have met is decidedly leftist, and not in the way libertarians often like. Rather, the leftists of British socialism, of American Democrat statists, and of Trotskyites in general. It was a pun on a pun, so to speak. Had someone come up with a funnier pun, something better than officious names like "Crypto Rights," that's probably what the loose association of folks would have been called. But no one did, so Jude's name stuck. That Jim Choate is carrying the banner for leftie punkism is not at all surprising. --Tim May "Ben Franklin warned us that those who would trade liberty for a little bit of temporary security deserve neither. This is the path we are now racing down, with American flags fluttering."-- Tim May, on events following 9/11/2001

1 0

CrimethInc. Agent Subversion Kit 72a.v2 (This Phone Is Tapped)
by R. A. Hettinga 31 Jan '03

31 Jan '03

<http://www.buyolympia.com/crimethinc/sid=316686336/misc.html> CrimethInc. Cyberian Market CrimethInc. Agent Subversion Kit 72a.v2 /miscellany/ 1 pack is $5.50 2-4/$4.50 each 5-10/$4 each One pack of 25 postcard-stickers (4 stickers to each card. so one pack = 100 stickers) CrimethInc. Agent Subversion Kit 72a.v2 (This Phone Is Tapped) The first in what will be a continuing series, this tidy little unit contains everything one needs to get one's subversive-action groove on-gloss sticker front with four stickers, and a printed back with application instructions, among other things. Made to be deployed on payphones across the world, the stickers fit precisely on the back handle of the telephone receiver. Order a pack to put a hundred stickers up yourself, reveling in petty vandalism that will educate and motivate others, or take the cards and give them away at shows, protests, or english class for others to have the experience. Each card is a little thought-bomb waiting to bet set off by whoever holds it in their hands-and the collateral damage is everyone who sees the sticker on the phone. Click on the picture to the left for a larger view, or download these PDFs [ front &back ] and print them yourself. [We know these prices might seem expensive and possibly even excessive-in fact, we cringed when typing them-but we assure you that we are charging almost exactly cost for these.] One single card-sticker is automatically included for free in every paid order. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

SSL to replace IPSec in VPNs
by Tyler Durden 31 Jan '03

31 Jan '03

>From the Lightreading newswire feed... Any comments? Impact statement anyone? -TD SOMERSET, N.J. -- More than 75 percent of survey respondents believe that browser-based SSL (secure sockets layer) VPN (virtual private network) technology is somewhat to highly likely to replace IPSec-based VPNs for remote access to enterprise resources over the next two years, according to the latest survey on enterprise network security trends from The Tolly Group, a premier IT testing and consulting firm. Netilla® Networks, Inc., a leading provider of SSL VPN solutions for secure Web-based access to any corporate application, co-sponsored the survey along with Check Point Software, Nortel Networks, Ingrian Networks and Enterasys Networks. Survey respondents also projected that the most likely future uses for SSL VPNs will be for securing Web services (67 percent), followed by securing extranets and e-business services (54 percent), providing remote access for business partners (50 percent) and enabling remote access by mobile and teleworking employees (48 percent). SSL-based VPN appliances use the Secure Sockets Layer (SSL) encryption engineered into todays Web browsers to provide simple, browser-based remote access to centrally hosted corporate applications. Unlike traditional remote access solutions based on the IPSec standard, SSL-based VPNs do not require application or VPN client software to be configured and maintained on remote PCs, which reduces IT support costs while increasing usability. Overall, respondents demonstrated a significant surge in the usage of SSL-based VPNs, said Kevin Tolly, president and chief executive officer of The Tolly Group. Just two years ago, SSL VPNs were nowhere on the map, but now interest in the technology is starting to mature. However, these same users also cited a lack of general understanding on how to deploy SSL VPNs as a potential roadblock. Vendors must step up SSL education to help users better understand the benefits of this technology. Tolly Group _________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

1 0

RE: Meeting notice
by Collins, Senator (Collins) 31 Jan '03

31 Jan '03

Thank you for your e-mail message. I appreciate having the benefit of your views. This response is an acknowledgement that we received your message and will make note of your comments. If you are from Maine and included a postal address in your message, you will receive a reply via U.S. mail as soon as possible. If you are from Maine and have not included your postal address, please resend your original message and include your complete mailing address with zip code. If you are interested in more information about me or the State of Maine, please visit my Web site at: www.senate.gov/~collins Thank you again for contacting me. Sincerely, Susan M. Collins United States Senator

1 0

Re: Palm Pilot Handshake
by Steve Mynott 30 Jan '03

30 Jan '03

From: "Tyler Durden" <camera_lumina(a)hotmail.com> > I'd like to be able digitally "shake hands" using a Palm Pilot. Is this > possible? I think you mean public key based authentication. > Is this possible within the memory constraints of a Palm device? What about > with a booster pack of memory? If not, is some sort of "Public Key Masking" > possible so that a 'less secure' handshake is possible using a subset of the > public key? I doubt memory is likely to be an issue with this since decade old DOS handhelds ran PGP 2.x fine and if you google for "palm pilot crypto" you will find 2000 vintage ports of OpenPGP and OpenSSL. The Palms do have fairly slow processors so checking keys may take a while and generating them probably quite a long time. More modern PDAs such as the Zaurus or iPaq have processors which are an order of magnitude faster and run linux so PGP (or GPG or whatever) should work. Also the new generation of mobiles which run Java are probably the future once the standards settle down and the phones become more reliable. I can see little point in trying to use shorter keys which would be a very broken solution to a probably non-existent problem. People should be using longer keys rather than shorter ones, since most of the news about short key lengths isn't good (google "DJB RSA"). > And for extra credit, when might the chipsets be available for incorporating > this functionality into, say, a wristwatch so that the protocol runs > automatically (giving you a beep, for instance, only if there's a mismatch)? It's more a software issue than a hardware issue. It's not much of a software problem since RSA can be written in a few lines of code. If you have a high level language running on (or compiler) for the hardware then you can easily port open source crypto. This is probably a safer solution from a security aspect than relying on potentially backdoored or legally restricted chipsets. Suitable hardware has been available for 10 years or longer with a lot of publicity for the Java ring and iButtons about 5 years back. > (This I'm sure the feds must already have.) It's possible the US Govt. uses iButtoms but I would very much doubt it's used much in production. State agencies tend to be *very* conservative with authentication and rely on physical identity cards, individually issued (and revocable) PIN numbers and the like. They are run by grey men rather than techno-fetishist computer geeks. -- 1024/D9C69DF9 Steve Mynott <steve(a)tightrope.demon.co.uk>

2 1

Re: the news from bush's speech...H-power
by Mike Rosing 30 Jan '03

30 Jan '03

On Thu, 30 Jan 2003, Harmon Seaver wrote: > Actually, VW has a plant making synfuel out of biomass. And we won't have to > wait long before oil is $50-100 a barrel, it's at $35 right now and world oil > production will peak this decade. In the '80's it was "obvious" that oil production would peak around 1995. We've already burned up all the solar energy collected from 140 to 250 million years ago - the dinosaur model does not fit the amount of oil we're actually finding. There's a lot more oil in the ground (most of it may be under the oceans) so the price isn't going to rise that much for the next 100 years. That doesn't make "biomass" a bad fuel, but if it's gonna compete it will have to get down to $20/barrel to be a clear winner. > That's a pretty easy decision to make, eh? Ethanol is renewable, oil isn't. > Ethanol doesn't pollute, oil does. Ethanol doesn't require troops in the Middle > East, wars, and resultant terror attacks, oil does. Quite simple. Ethanol pollutes, any hydrocarbon is going to be mixed with N2 and make NOx, there's no getting around it with any kind of Otto engine. Oil doesn't *need* to make wars either. It's just that people with guns also happen to be oil sellers, and stealing oil is cheaper than buying it. We could just buy Iraqi oil and solve a lot of problems all around. > Yes, but importing sugar isn't the answer either. Sugar beets and sorghum > grow fine in the US. The best crop, however, is cattails. However, diesels are > still a better solution, running on a biodiesel/ethanol mix, perhaps. > The main problem is corporate welfare. Farm subsidies and oil > subsidies. Until that problem is solved, I don't think we'll see any real > solutions, and, unfortunately, the way the world is going, I don't think that > will happen in any of our lifetimes. Like I've said before, the key to corruption is to make it work in your favor. The Romans, Spanish, French and American empires are all the same, corruption eventually causes them to collapse. But people still live there, with entrenched corruption. I think our best solution is to escape. Mars might be far enough away that we can start a nice civilazation. But it'll turn corrupt eventually because that's how humans work. So we'll need to leave the keys for future escapes :-) Patience, persistence, truth, Dr. mike

1 0