- cypherpunks-legacy - lists.cpunks.org

LIQ_uor
by John Young 17 Dec '03

17 Dec '03

10-25-96: "Litronic Releases the Fast and Powerful CipherServer." Litronic announced the release of a hardware-based add-on device for high speed processing of cryptographic functions. The newly released CipherServer holds up to eight cryptologic PC Cards which may concurrently process the same or different algorithms including RSA, DES, and FORTEZZA. CSI Explains Countermeasures to Cyberspace Attacks Authored by an eminent authority, Dr. Dorothy E. Denning of Georgetown University (Washington, D.C.), CSI's "Manager's Guide to Cyberspace Attacks and Countermeasures" assists information technology professionals in keeping abreast of dizzying developments on the dark side of the virtual world. Target/ Electronic spies The FBI is expanding the Awareness of National Security Issues and Response (ANSIR) program, its public voice in national security matters, espionage, counterintelligence, economic espionage and physical- and cyber-infrastructure protection. ----- http://jya.com/liquor.txt (10 kb for 3) ftp://jya.com/pub/incoming/liquor.txt LIQ_uor

1 0

Re: considering internet/privacy periodical
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:31 PM 10/27/96 -0800, Timothy C. May wrote: >The article somewhat longwindedly gets into the problems these "hot sites" >are having. The lack of loyalty, the lack of _payment_, etc. I would like to report that even though the WSJ site supposedly started charging at Midnight on 20 September, I can still log on using my old free account (and I'm not using the MS browser). Haven't been charged yet. DCF

1 0

No Subject
by almika 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

1 0

Re: considering internet/privacy periodical
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Sun, 27 Oct 1996 16:36:14 -0800, Greg Broiles wrote: >I'm considering putting together a periodic publication about the technical >and legal aspects of privacy and the Internet. My "business model" would >feature free WWW/email access with a charge for fax or postal delivery. I'm >curious to know if this strikes people as interesting or just Yet Another >Email Newsletter Of No Real Consequence. (no offense taken if it's the >latter.) If you did a real noise-removal job, this could be very useful. Sort of a privacy-RISKs digest, if you will. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

2 1

RE: considering internet/privacy periodical
by blanc 17 Dec '03

17 Dec '03

From: Greg Broiles I see it not as a business but more like a way of organizing what I'm thinking about already in a way that might be interesting to others. ................................................................................... Once you create your web newsletter and see how many hits you get, you can better gauge the interest. In any case, you will have your thoughts and references organized and can always use it in your communications to others on mailing lists or newsgroups, etc. Since there's so much info on the net, one of the most valuable elements to introduce into it, besides search engines, is the organization of all that data in ways which make sense and speeds up the time involved in grasping the issues. Plus, of course, if you give it a libertarian/anarchist slant, it would be an added "feature" for certain people. Like Cpunks. .. Blanc

1 0

One-time password logic/code/information?
by Mike 17 Dec '03

17 Dec '03

I am looking to write a sort of password server replacement for NIS, and I am curious as to white papers, or otherwise information on authorization scheme's for this type of application. Regards, - Mike

1 0

Secure Internet-based Electronic Commerce: The View from Outside the US
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

I've just made a draft copy of this paper available for comment as http://www.cs.auckland.ac.nz/~pgut01/paper.htm, a copy of the introduction is given below. The whole thing is around 170K long (40 A4 pages when printed). If anyone has any comments to make on it, please let me know. Peter. Introduction ------------ The creation of a global electronic commerce system will provide an extremely powerful magnet for hackers, criminals, disgruntled employees, and hostile (but also "friendly") governments intelligence agencies. This problem is magnified by the nature of the Internet, which allows attackers to quickly disseminate technical details on performing attacks and software to exploit vulnerabilities. A single skilled attacker willing to share their knowledge can enable hordes of dilletantes around the world to exploit a security hole in an operating system or application software within a matter of hours. The Internet also enables an attacker to perform an attack over long distances with little chance of detection and even less chance of apprehension. The ability to carry this out more or less anonymously, at low cost, and with little chance of being caught, encourages attackers. Because of well-publicized break-ins there has been a steadily increasing demand for encryption and related security measures to be included in software products. Unfortunately these measures often consist either of "voodoo security" techniques where security is treated as a marketing checkbox only, or are rendered ineffective by the US governments refusal to allow non-americans access to the same security measures which it allows its own citizens. Organisations employing such (in)security systems may make themselves liable for damages or losses incurred when they are compromised. This paper covers the issues of using weak, US government-approved security as well as problems with flawed security measures, examines some of the measures necessary to provide an adequate level of security, and then suggests several possible solutions.

4 3

MASTERCARD TO TEST IBM DIGITAL WALLET;
by amp＠pobox.com 17 Dec '03

17 Dec '03

Date: Mon, 28 Oct 1996 09:35:00 -0500 (EST) MASTERCARD TO TEST IBM DIGITAL WALLET; Software Will Open Market to Electronic Commerce MasterCard International Inc. this week expects to begin testing its digital wallet developed by IBM Corp. and will offer some of its customers incentives to use the product. The move is expected to advance widespread acceptance of electronic commerce and increase opportunities for Internet service providers (ISPs) and software developers looking to capitalize on what analysts say will be a huge market. The digital wallet, containing a digital ID card, should be available to the mass market in the second half to end of 1997, said Steve Mott, senior vice president of electronic commerce/new ventures at MasterCard. After the IBM test, MasterCard will work with another set of vendors and continue testing through the first half of '97, he said. The other vendors probably will be CyberCash Inc., Netscape Communications Corp., VeriFone Inc., Fujitsu, and Open Market, Mott said. In the first quarter of '97, testing will involve five to 10 merchants and 1,000 card holders, he said. The IBM digital wallet, part of IBM's CommercePOINT family of products, is used with Netscape Navigator and incorporates the SET (Secure Electronic Transaction) protocol. Mott said MasterCard wants to seed the market with the IBM product. "They're going to be our guinea pigs," he said. In the next few weeks, Mott said, MasterCard will announce agreements with U.S. banks, but declined to name them. Next month, MasterCard expects to release from its Web site the SET Reference Implementation Code, which will show developers how to build SET applications, he said. The implementation code, being developed by Terisa Systems Inc., offers "an unambiguous application of the code" to be used to build interoperable software, he said. SET will make credit card transactions more secure because it provides confidentiality for payment information, insures integrity for transmitted data and provides authentication. Ken Mohr, product marketing manager at Terisa Systems, said Visa International Inc. and MasterCard are reviewing the first beta version of the implementation code. The company is scheduled to deliver the second beta version next month, he said. Terisa Systems hopes the second beta will be the last version and that Visa and MasterCard will accept the implementation code in the first quarter of '97, Mohr said. Visa Testing in Europe Visa also is moving forward with efforts to implement SET. Last week, it announced a pilot launch in Europe involving 38 Visa members in 16 countries. A number of banks will be able to offer secure electronic commerce within six months; full implementation of the project will begin in the first quarter of 1998. "Electronic commerce will be global in nature, so it is important we begin work on an international basis," Visa EU President Hans van der Velde said in a prepared release. "SET is now robust enough to go to the single worldwide market offered by the Internet and other networks," he said. Some vendors already have SET-ready products available. VeriFone has its Internet Payment Solution that includes vPOS, vGATE and vWallet to cover the three parts of an electronic transaction. Wells Fargo Bank is one of VeriFone's initial customers. The bank is implementing vPOS and expects to launch the service to merchants in mid-November, spokeswoman Janet Otsuki said. CyberCash has a Secure Internet Payment System with a CyberCash Wallet, Secure Merchant Payment System and CyberCash Gateway Servers. The system has been operational since April 1995. GTE has CyberTrust, which provides digital certificates that are issued over the Internet to consumers with credit cards, Internet merchants and institutions processing transactions. Terisa Systems is working on an as-yet-unnamed product to implement SET into its SecureWeb Toolkit. A beta version will be ready by year's end, Mohr said. Michael Goulde, an analyst with the Patricia Seybold Group, predicted that the SET protocol will greatly lessen the perceived risk of doing retail business over the Internet in 12 to 18 months. But, in a report written this month, he cautioned that there are barriers to electronic commerce. "Consumers won't install the software until it is seen as providing benefits, there won't be benefits until merchants support SET, and merchants won't support SET until consumers have the software. "This vicious cycle probably won't be broken unless Microsoft provides SET-compliant software as an integral part of Windows in 1997," Goulde said. James Miller, a research scientist at the World Wide Web Consortium (W3C), predicted SET won't be widely available until Christmas '97. He said consumers will take to electronic commerce when one or two large companies figure out that security isn't such a huge issue for consumers and go ahead with electronic commerce. In the meantime, W3C and CommerceNet have completed specifications for the Joint Electronic Payments Initiative (JEPI). JEPI provides a universal payment platform to allow merchants and consumers to do business over the Internet using different forms of payment. The SET protocol was scheduled to be included in the first phase of JEPI, but work on SET was not completed in time, said Daniel Dardailler, JEPI project manager. A second phase should begin by the end of the year, and several companies, including VeriFone, have agreed to participate, he said. The second phase, which is not publicly available, will set out to validate the Universal Payment Preamble (UPP) logic put forward in the first phase and add more payment systems, such as SET, and micropayments, such as CyberCoin, Ecash and Digital Millicent, Dardailler said. JEPI is a standard mechanism for Web clients and servers to negotiate payment instrument, protocol and transport between one another. It has two parts -- Protocol Extensions Protocol (PEP), an extension layer that sits on top of http, and UPP, which identifies the appropriate payment methodology. More information is available at (http://www.w3.org/pub/WWW/Payments) For more information, contact MasterCard at (914) 249-4606, IBM at (914) 766-1162 or Terisa Systems at (415) 919-1776. =30 30 30= ------------------------ Name: amp E-mail: amp(a)pobox.com Date: 10/28/96 Time: 23:03:26 Visit http://www.public-action.com/SkyWriter/WacoMuseum EARTH FIRST! We'll strip mine the other planets later. ------------------------

1 0

BankAmerica, First USA to Use Net Software From Verifone
by se7en 17 Dec '03

17 Dec '03

BankAmerica Corp. and First USA Paymentech have bought Verifone Inc.'s payment software for the Internet. They will use VGate and VPos, Verifone's Internet commerce gateway and merchant software. Terms of the deals were not disclosed. A third piece of Verifone's electronic commerce offering, VWallet, will be available once the MasterCard-Visa Secure Electronic Transactions protocol for credit card payments on the Net is adopted. Banks can use the Verifone technology to deliver private-labeled Internet commerce services to merchant customers. BankAmerica and First USA Paymentech join a user list that includes Wells Fargo & Co., Royal Bank of Canada, and Hitechniaga/MBf Group of Malaysia. BankAmerica's merchant services unit, which recently announced an initial public offering as a stand-alone business, processes credit and debit card sales for more than 150,000 merchants. First USA Paymentech ranks third in the merchant business. Its credit card issuing affiliate, First USA Bank, is one of the largest. Roger Bertman, a vice president at Verifone, said the reason these banks "are investing heavily in building the infrastructure" is because "the credit card will be the preeminent [on-line] payment instrument." se7en -------------------------- Majordomo list for Lam3rz: email majordomo(a)edm.net subscribe happyhacker MUWAHAHAHAHAHAHAHAHA! --------------------------

1 0

RE: tcmay in favour of redistribution of wealth? NFW/ROTFL
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

attila(a)primenet.com wrote: >et tu, Brute? I thought I was the only one who deliberately >stiffed the United Way, I treated it as a generic example, not a specific one. For the record, I have never donated to the United Way either. >Tim redistributing the wealth?!? I'll be ROTFL for days >over the "insult." >Come on, James, get with the program. I liked Zaid Hassan's response better. In general, I try not to "get with the program" (c.f. Two Roads Diverged in a Yellow Wood" by Robert Frost). But in spite of my best efforts, I still find myself in a well defined demographic group. ;-) >in Canada, you call [redistribution of wealth] National Health >Services which supposedly provides cradle to the grave >social services (which is bankrupting Canada). In spite of these services the spread between Canadian and U.S. Bonds is in favour of Canada out as far as ten years. Interest rates this morning for 90 Day T-Bills: Canada 3.23%; U.S. 5.02%. Remember: correlation is not causation. >=There is naivete and then there is complicity. >=jbugden(a)alis.com >so where do you draw the line? Aye, there's the rub. So far I haven't *explicitly* drawn one. And the line I may draw now is probably different from the line I might have drawn 5 years ago or 5 years from now. Ambiguity I can accept, its ambivalence, apathy and agnosticism that annoy me more. Tim's occasional combination of justifiable apathy tends to be the best combination to trigger a response. Ciao, James The rules of the game: learn everything, read everything, inquire into everything... When two texts, or two assertions, or perhaps two ideas are in contradiction, be ready to reconcile them rather than cancel one by the other; regard them as two different facets, or two successive stages, of the same reality, a reality convincingly human just because it is complex. Marguerite Yourcenar quoted in Complexification by John L. Casti. Les regles du jeu: tout apprendre, tout lire, s'informer de tout... Lorsque deux textes, deux affirmations, deux idees s'opposent, se plaire a les concilier plutot qu'a les annuler l'un par l'autre; voir en eux deux facettes differentes, deux etats successifs du meme fait, une realite convaincante parce qu'elle est complexe, humaine parce qu'elle est multiple. Margueite Yourcenar, Memoires d'Hadrien

2 1