- cypherpunks-legacy - lists.cpunks.org

No Subject
by Dave Ross 17 Dec '03

17 Dec '03

RAF does not work in this area. If any of you are interested (I have no idea what this is about), please feel free to say I suggested you contact her. -dave ross davros(a)raf.com ---------- Forwarded message ---------- Date: Sun, 21 Jul 1996 14:20:06 -0700 (PDT) From: June Peoples <june@dang> To: davros(a)raf.com dave, someone called me with a request last week for people who have a good background in internet security, "firewalls" and encryption etc. I thought Jim Bennett and perhaps some of your other contacts would work. Could you e-mail Jim's phone and e-mail to Sandra Huie (Jonathon's wife) at shuie(a)masterteam.com Thanks, JP

1 0

Re: Netscape
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:23 PM 7/22/96, Vladimir Z. Nuri wrote: >David suggests that Netscape will be royally screwed if the gov't >cracks down on them because of "monkeywrenchers". but quite the >opposite is possible. as TCM fondly points out, sometimes you win >by losing and lose by winning (not necessarily in those words). > >by creating a very large, glaring, and visceral >public spectacle of the government cracking down on crypto, the >resulting outcry could be absolutely enormous and resonate throughout >the entire population. it would be a vivid portrayal of what the >government has been doing quietly and secretly for decades, and >perhaps the public might finally understand what is going on. By the way, I certainly don't want to be seen as a main promulagator of "monkeywrenching" Netscape's system! I made a few snide/droll/obvious points that the software will likely leak out fairly quickly, but I was not _advocating_ such a thing, nor was I suggesting that someone be pinned up on the wall as a decoy (;-}). I don't think Netscape is misbehaving. I do have some concerns about a method to control leakage that requires data bases of names and addresses of persons accessing a site. One can imagine this concept extended to requiring data bases of names and addresses to be accessed before Web sites may be connected to. (Especially when such "verifications" are so easily spoofed or the results subverted. For example, if the results reported here are valid, the Netscape downloads are not serialized, so any of the millions who download it could be the exporters...essentially nothing is gained, but the precedent is set for demanding identity before downloading...note that retail software purchases do not as yet require identification--you pay your money and that's that. Even if some dirty furriner could buy his software and take it home in his luggage.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Responding to Pre-dawn Unannounced Ninja Raids
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 21:55 7/21/96, Igor Chudov @ home wrote: >As I said, the kid who hit me in the head with a stick was 3-4 years >younger than me. You skipped that part. Correspondently, I could beat >him easily (I did, but his mother soon interrupted me), which was >obvious to him. So he had plenty of information that would deter a >rational person. He had all the reasons to "to curb his impulse", as >you said, and he could have thought about his punishment. Yes, he hit you. But the question relevant to this discussion is: would he have hit you had you been carrying a firearm, risking not just being beat up, but death itself? I sincerely doubt it. In fact, one could say that you were hit *because* you didn't carry a firearm. The truth is, an armed society is a polite society. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President.

2 1

Re: Responding to Pre-dawn Unannounced Ninja Raids
by Vinnie Moscaritolo 17 Dec '03

17 Dec '03

> You pop a claymore in a building with any substance up to the level of >concrete re-enforced, and you _will_ be going with them. booby traping your home is a really stupid idea, I promise that your dog/child/spouse will be theone to accidentally set it off. besides for this you can get sued.. every hear the one about the case of a guy who constantly had his radar detector stolen out his his car, he decides to set a trap and rigs his next one with exposive. The perp steals the box, sells it. someclown powers it up on his dash board and BANG!.. well you'd figure justice is served, but the NYC judges awarded the mass of flesh damages and charged the guy with manslaughter. only in Amerika.. Vinnie Moscaritolo "Law - Samoan Style" http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A

3 2

Re: Netscape
by jim bell 17 Dec '03

17 Dec '03

At 07:41 AM 7/22/96 GMT, Dan Weinstein wrote: >On Sat, 20 Jul 1996 18:13:45 -0800, jim bell <jimbell(a)pacifier.com> >wrote: > >>At 03:27 PM 7/20/96 -0700, Tom Weinstein wrote: >> >>>> Do you Seriously Believe that Netscape would prefer foreigners >>>> to develop and use competing products? Of course not. They are >>>> probably secretly applauding the brave exporters. >>> >>>You are wrong. We are worried that our permission to provide these >>>products will be withdrawn. >> >>As far as I can tell, you need no "permission" to "provide these products", >>at least domestically. The only restrictions that have been implied have >>been over the delivery of encryption over the 'net, and even that is >>questionable. >> > >Then you need to read the license agreement: > >1. Netscape Communications Corporation ("Netscape") grants to you a >non-exclusive, non-sublicensable, license to use this Beta version of >the Netscape network navigator (the "Software"), in binary executable >form for evaluation and trial use purposes only. THIS SOFTWARE >CONTAINS CODE THAT DISABLES MOST OF ITS FEATURES AFTER SEPTEMBER 17, >1996. I don't know why you're quoting your own licensing agreement to me. When I said, "you need no permission to provide these products," by "you" I was referring to your company, Netscape. As in, you don't need the NSA's permission to write and sell good crypto domestically, even if (arguably) they can limit export. Jim Bell jimbell(a)pacifier.com

2 1

Brute Force DES
by Duncan Frissell 17 Dec '03

17 Dec '03

At 10:32 AM 7/22/96 -6, Peter Trei wrote: >Any one up for a distributed brute force attack on single DES? My >back-of-the-envelope calculations and guesstimates put this on the >hairy edge of doability (the critical factor is how many machines can >be recruited - a non-trivial cash prize would help). I volunteer my 120 MHZ Pentium. A lot more Pentiums are out there now than a year ago. That makes it more feasible. A lot more people with full net connections. Like most Americans, I have a flat rate net connection and a flat rate local phone connection so could run a cracking session permanently (as long as no one tells my ISP). We need a full test of the Winsock cracking client in any case. It wasn't working very well last time. DCF

2 1

Re: Responding to Pre-dawn Unannounced Ninja Raids
by Hallam-Baker 17 Dec '03

17 Dec '03

Perry E. Metzger wrote: > > There are surely alternatives to the extremes of unilateral > > disarmament and an arms race? For instance, slowing down the > > race? > > Don't ask the question as though it is theoretical. Don't try > answering it as though your personal values have any bearing, because > there is indeed an objective answer here. Try doing some game theory > simulations and see how well unilateral disarmament works. Perry, just out of curiosity which type of game theory system are you refering to, the standard, single shot game thoery or the communicative model of Alker, Hurwitz and Rothkin? As a computer scientist I would have thought you would have been up on the idea of adding memory to game theory interactions. In such cases the optimal outcome can turn out very differently than in the standard model. Claiming certainty from theoretical results is in general not a good idea. Unless you can explain the relevance of the theory to a situation and explain why the assumptions in the model are justified you are not saying very much. The fact that the US and the USSR did manage to negotiate disarmament despite the standard game theory predictions shows that the system is somewhat more complex than Perry's ideological view. Briefly stated in Alker-Hurwitz a "memory" component was added into the model. The prisoner's dilema was repeated on many occasisons in a variety of contexts, including computer simulation and in practice. In practice the prisoner's chose the joint optimal solution the majority of the time. >Oh, and don't give us stuff about how humans are above evolutionary >pressures or nonsense like that, because we aren't any more above such >pressures than we are above the laws of physics. The "laws" of social scienst are not the "laws of physics". The "laws of physics" aren't so constant either. Theoretical results should inform the intellect not serve as a substitute for it. If you apply genetic programming techniques to the system the strategy that evolves is typically a cooperative one. The facts is that the theory applied in an evolutionary context disproves Perry. Phill

4 3

9107 U.S. Government Unveils New Encryption Policy Recommendations 07.19.96 (fwd)
by pj ponder 17 Dec '03

17 Dec '03

The High Performance Computing newsletter (HPCWire) just ran this article. Looks like Government Access to Export Keys (GAEK) or Government Access to Keys - Export (GAKE) or just plain GAK, for simplicity's sake. ObNetscape- I can run a web browser, like Netscape, over T1 link through firewall, but Netscape can't reverse DNS the address, so I can't get the more secure version; I can run Lynx from my account at the university, but Netscape doesn't like lynx, so I am back to dial-up PPP, at 14.4 .... Frustrating... any news on funet, or other 'export' sites? -- pj ---------- Forwarded message ---------- Date: Mon, 22 Jul 96 11:29:34 -0700 From: HPCwire <hpcwire(a)newsmaster.tgc.com> To: ponder(a)mail.irm.state.fl.us Subject: 9107 U.S. Government Unveils New Encryption Policy Recommendations 07.19.96 U.S. Government Unveils New Encryption Policy Recommendations 07.19.96 NEWS BRIEFS HPCwire ============================================================================= Washington, DC -- U.S. Vice President Al Gore recently unveiled new recommendations to relax encryption export restrictions. The recommendations come with the caveat that restrictions will be eased only if the "keys" are escrowed to permit U.S. government access. Under the proposed key escrow, government officials could gain access to software keys with a court order, undergoing a process similar to that required to obtain wire taps. "These recommendations will protect individuals' transactions and communications on the Internet nationally and internationally while maintaining U.S. security," Gore said. Under the plan discussed by Gore, no restrictions of any kind would be imposed on encryption software for use within the United States. But software programs could only be exported with key escrow features allowing the U.S. government access to the keys. Private companies would be established to hold software keys and government could gain access with a court order. The administration abandoned earlier proposals that would have required the government hold copies of all keys. The new proposal would also give the Commerce Department authority currently held by the State Department over encryption export decisions. Software industry analysts estimate that current export restrictions will cost U.S. companies up to $60 billion in lost sales over the next few years. According to press reports from Reuters, Netscape has noted that it is already losing tens of millions of dollars in overseas sales because of encryption export limits. The limits also impact to some degree the growth of Internet commerce. Whitehouse officials are reluctant to recognize the claims of the software industry. "There are a lot of myths about the nature of the imminent commercial threat," Gore said, adding that officials at some companies, such as International Business Machines, are supportive of the administration's approach. According to press reports, another White House official said other countries would ban the import of U.S. software if controls on encryption were eased. "They will put up import barriers," the official said, adding the United States is trying to craft an international consensus on encryption policy, including use of key escrow, under the auspices of the Organization for Economic Cooperation and Development. The talks are "very far down the tracks," the White House official said. An administration cabinet committee is continuing to address details of the proposal, and expects to send its recommendations to President Clinton by early September. Administration officials continue to hold talks with industry executives, civil liberties groups and others. ******************************************************************************** HPCwire has released all copyright restrictions for this item. Please feel free to distribute this article to your friends and colleagues. For a free trial subscription, send e-mail to trial(a)hpcwire.tgc.com.

1 0

Re: Digital Watermarks for copy protection in recent Billboard
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:19 AM 7/22/96, Alex F wrote: >This is probably yet another case of people not thinking ahead. As >usual. People buying CDs at a garage sale & getting arrested for >piracy. Wonderful. Arrests like this are uncommon. Even buying "cheap bikes" and other "cheap" (= probably stolen and fenced) merchandise almost never subjects the purchaser to criminal sanctions. I think the legal types would call it "scienter" (direct knowledge of the act), with a dollop of "provenance" (the paper trail) thrown in. For example, finding a piece of paper with my name on it by the side of the road does not prove I littered, as the paper could've gotten there by blowing off a trash truck, by being thrown there with others who found it (perhaps at the trash site), and so on. Scienter, provenance, etc. ("Alice's Restaurant" not to the contrary; the confession to Officer Obie cinched his fate.) So, purchasers from garage sales need have no fear that the Copyright Police will arrest them. If anything, the garage sale folks might get a visit, assuming they were dealing in large enough volumes to indicate they were links in a chain of pirates. This is in fact what most of the "piracy" cases have involved. >Actually, this would be quite easy. The "watermark" would be a >signal that plays inband, but out of our hearing range during the >entire CD. The human ear can only hear in the 20-20,000 (Hz, KHZ?, >whatever) range. It would be trivial to add a digital ID signal at, >say 30,000 or 15 or something like that. This could then be decoded, Doubtful. The existing CD standard tops out at a Nyquist limit of about 20KHz, with the actual sampling at 44 KHz--but there is simply "nothing" at above 20-22KHz. Putting a signal in at "30 KHz" is simply not possible, given the Nyquist Theorem and the CD sampling rate. Placing a nominally "inaudible" signal in at, say, 15 KHz, was in fact the first proposal for the DAT market, circa 1986-88. The signal was in fact detectable by many, and was dropped in favor of SCMS (pronounced "Scums," but standing for Serial Copy Management System). SCMS does not involve actual changes to the audio stream. It is easily defeated--I have access to one for making DAT-to-DAT transfers. The larger issue of watermarks in digital data is an interesting one. Some of the proposals people talk about have actually been spoofs (esp. the Bart Nagel "announcement" in "Mondo 2000" a couple of years ago, which still gets cited as an actual technique, about the same way the "Infoworld" spoof about how the NSA got viruses planted in equipment bound for Iraq got picked up by some as an example of "infowar.") --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Bare fibers
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

* Carbons sent to: In: jimbell(a)pacifier.com -=> Quoting In:jimbell@pacifier.com to Harka <=- In> The fiber is usually coated with a very thin layer of clear plastic to In> protect against moisture and abrasion, and the diameter is around 0.5 In> to 1.0 millimeters in diameter. Doesn't that make it vulnerable (detectable) to Tempest attacks? Harka ___ Blue Wave/386 v2.30 [NR]

3 2