- cypherpunks-legacy - lists.cpunks.org

Re:
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 04:42 AM 03/28/96 -0800, Anonymous wrote: >At 12:21 AM 3/28/96, Syed Yusuf wrote: >>If a person who speaks three languages is tri-lingual >>If a person who speaks two languages is bi-lingual >> >>What do you call a person who only speaks one language? >> >>---------------------answer follows: >> >>An American. > >Or our version: > >What do you call a person who has to learn English as a second language in order to compete in the world? > >A foreigner. > >(Sorry for the insult, but it seems that this thread is bringing out insults from foreigners of all sorts.) > >--Tim > > >Dont be sorry! > >Foreigner can atleast speak broken English. Can American speak broken foreign language? As a matter of fact, I speak broken Tagalog, broken Japanese, pidgin Korean, and and can generally make myself understood in Chinese, Thai, Vietnamese, Spanish, and French. Oh, yes, I'm also fluent in Aussie :-) Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMVoK/8VrTvyYOzAZAQHrXAP/ZMOgx+VkqHXCQHBFXIdVVHzlCcJIo3L6 2LyqMnY0cJ5ZFD8mCNsBTTe2DAXFpN1WV03JFym/JIxAuL0TQuN0WKZ2HFSuk997 AZPo21whZbXVQlRGrr6JjiR8p2nqHMMBpNC2bfr2r/rny7UmnGGp8C1e6crPtrQF PiyDbd20zbM= =Swae -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

DES or RSA on a PIC
by MeRC 17 Dec '03

17 Dec '03

Does anyone have ANY code for DES or RSA encryption for use on a PIC microcontroler? A friend and I are developing an ASCII terminal (dumb term) that encrypts data going to the serial port and decrypts data coming from the serial port, so you could successfully send a message over a modem and have it automatically encrypted\decrypted. We have all the hardware almost done, but we are having a hell of a time writing the code for the encryption... Thanx in advance... l8r, -MeRC merc(a)redrose.net -or- merc(a)success.net -----BEGIN PGP MESSAGE----- Version: 2.6.2 iQCVAwUAMUC05tnn3Dsf47p5AQE6AAP9E/JebLn1UtkOk41IGw/i4XHKckVcI6RH ptBMucqx01sSTxaR8tXPmmkKjz5f3xndxepbbs6nKfoNuSaODWSirOlNvt3i1DWL iUmB9+rUYmwwlpD7t6qyy2XzsAxO/M/nFT4ZxO8wi96nR/Rmp00LvCoK+YcjgQnj HReyQrIl4X+ZAI0DMUCzOgAAAQQAv6IH+OnLeP+chsgwymSVKqsXHO1xwJLxs657 Cf3miDM3mNBB/qmRziQ1zHeC/nXgaGhR7eAdidL6MngDXl6+cw4Z5xXvenu5MpEW zpZpwDK5/XwuvCIexQP2eHIb2Ms6vna7fUoaHGrrV4844KIVg+E36ZgWT1ZP2efc Ox/junkABRGwAYe0I01pY2hhZWwgRC4gV2hpdGUgPG1lcmNAc3VjY2Vzcy5uZXQ+ sAED =ZbPJ -----END PGP MESSAGE-----

1 0

Re: So, what crypto legislation (if any) is necessary?
by shabbir＠vtw.org 17 Dec '03

17 Dec '03

Lucky Green writes: >At 2:08 3/26/96, Shabbir J. Safdar wrote: > >It is a widespread myth that wiretaps require warrants. Court ordered >warrants are not required for a wiretap. They have not been required since >the Digital Telephony Bill passed. (see below) >That the net, the media, and even >attorneys are so blissfully unaware of this, even years after the provision >doing away with requiring warrants became law, is one of the finest >examples of cognitive dissonance you are ever likely to find. It is too >disturbing to believe it, so the mind ignores the facts. When everyone in the world seems to disagree with you, isn't it a good idea to check the facts? >Excerpt from the Digital Telephony Bill (deleted) [..] >"My supervisor approved it" may well suffice. Your misunderstanding of how interceptions are done is dangerous to what is otherwise a rational, intelligent argument. Indeed, there are ways to conduct a wiretap without a judge. They require dispensations from people like the Attorney General, for example. And this is certainly not a normal practice. There are a lot of reasons to object to DT, but this is not one of them. -Shabbir J. Safdar * Online Representative * Voters Telecomm. Watch (VTW) http://www.vtw.org/ * Defending Your Rights In Cyberspace

1 0

Re: Let's *NOT* "Raise their Awareness"
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 12:23 AM 03/27/96 -0800, Charles Bell wrote: >On Tue, 26 Mar 1996, David K. Merriman wrote: > > >Yes, and some years ago a State legislature (I forget which) passed a >resolution setting the value of pi at exactly 3. I'm not sure how they >planned to enforce their will. Do you know how the Texas judge means to >enforce his? Frankly, no. I would suspect some kind of visits from Child Welfare, or somesuch - fruitless though it may be. Dave -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMVjxCsVrTvyYOzAZAQFWfAP7BQTesPRwoK+ubvFxLg36tq634FdFAlue 5sMZO1D2yBfHEHsHyfpR7RBB2DrP8vqTjrcZjz9ctxg7ph5/sqYUWf37xkKbyLu2 byJMWfZhZDXIwDyhWU3RmJOUL+loisDzP7uNZtjoodJLro/QceSR4sqdgWa4xl59 eiPapVoaXdU= =1+fS -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

Readme
by jic 17 Dec '03

17 Dec '03

<HTML><PRE><A HREF="http://www.wh0re.net/"> Click here!!</A></PRE></HTML>

1 0

y2k: 37% govt computers
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

------- Forwarded Message Date: Thu, 05 Mar 1998 07:04:43 -0600 To: believer(a)telepath.com From: believer(a)telepath.com Subject: IP: Y2K-37% of most critical gov't computers will not be updated in time Source: Los Angeles Times Thursday, March 5, 1998 House Panel Warns of Year 2000 Computer Crisis By RALPH VARTABEDIAN, Times Staff Writer WASHINGTON--In the most dramatic warning yet of an impending computer crisis in the government, a congressional panel said Wednesday that 37% of the most critical computers used by federal agencies will not be updated in time to handle dates in the year 2000 and will be subject to widespread failure. The estimate calls into sharp question past assurances by the Clinton administration that it is moving quickly enough to avert serious outages that could undermine military forces, benefit payments to the public and the nation's air transportation system, among much else. With just 666 days left until the year 2000, a slew of reports and investigations in recent weeks have raised serious concerns that the government is not acting fast enough to avoid serious problems. The executive branch has almost 8,000 computer systems that are considered critical to government operations, and nearly 3,000 of them will not be able to read dates in 2000, according to the report issued by the subcommittee on government management, information and technology of the House Government Operations and Oversight Committee. The computers will either shut down or spew out erroneous data. California Rep. Steve Horn (R-Long Beach), the subcommittee chairman who has taken the lead in Congress in solving the problem, issued a "report card" along with the new report that gave the federal government a D-minus in its efforts to avoid a crisis. "Failure is intolerable," Horn said. The year 2000 problem results from widespread use of two digits in software to designate years. Computers assume that every year starts with "19," so when 2000 arrives, they will interpret "00" as the year 1900. President Clinton created a White House panel on Feb. 4 to lead the government's efforts in solving the problem and appointed John A. Koskinen, former deputy director at the Office of Management and Budget, to lead the effort. But Koskinen has not yet started his work, and his panel has hardly gotten off the ground after 28 days, according to Horn's staff. White House press officials did not respond to queries about Horn's report. As the scope of the government's problems become clearer, the cost to avert a crisis is also growing. The Office of Management and Budget had long insisted that the problem would cost a little more than $2.3 billion to fix, but that figure has been growing over the last year. Its most recent estimate pegged the cost at $4 billion. Horn estimated that the government is facing a cost of $10 billion. Copyright Los Angeles Times ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: subscribe ignition-point email@address or unsubscribe ignition-point email@address ********************************************** ------- End of Forwarded Message

1 0

Your Web Site's Findability
by poc＠search-engine-help.com 17 Dec '03

17 Dec '03

Would you like to improve your website's "find-ability" in the Search Engines? During the past two years, my company has been placing hundreds of webpages into the Top Ten -- the front page -- of the major search engines... and, for about $8 a month, I will show you how we do it... and I'll share with you our ongoing research -- every month! My name is Stephen Mahaney. I am the president of Planet Ocean Communications. My web marketing company has literally "written the book" on how to position your website on the front page -- the Top Ten -- of each of the major search engines... guaranteed! Our 65 page manual identifies every trick & technique that is being used on the Internet to gain an almost "unfair" advantage in landing websites at the top of the search engine lists -- right where you need to be so that potential customers who are seeking your services or products can find you. Our monthly Newsletter keeps you abreast of the latest techniques and frequent changes that take place in the dynamic world of "search engine" science. However, understanding the process does not require a degree in "rocket" science -- nor do you need to be "technically oriented". Whether your website is a "do-it-yourself" project or you are paying someone to maintain your site, you (or your webmaster) need to know the tricks in this book in order to compete with the professionals who are dominating the front pages of the various search categories. To learn more about how you can obtain this essential information and receive a free subscription to our Newsletter -- SEARCH ENGINE SECRETS UPDATE, go to.... http://www.search-engine-help.com/advantage/ You'll be glad you did. Sincerely, Stephen Mahaney - President Planet Ocean Communications *************************************************** Note: We have contacted you based on information that we gathered while visiting your website - If you would prefer not to receive mail from us in the future, simply reply with the word "remove" in the subject line and you will be automatically excluded from future correspondence. Thanks *************************************************** Thought for the day... "The only thing a man can take beyond this lifetime is his ethics"

1 0

Random Number Testing
by Fred 17 Dec '03

17 Dec '03

JonWienke(a)aol.com writes: > > The "randomness" of the output of my sieve is obviously not perfect. > > However, it will remove bytes from a data stream that "randomness" tests > > describe as "nonrandom". And Perry writes: > You are displaying a profound ignorance of the notion of "random" > here. An individual byte cannot be random or nonrandom. Random is a > statistical property, and therefore can only apply to a mass of > data. The limitation seems to be in the testing process. An inviolable rule of test and measurement is that the testing process must have a higher degree of accuracy and precision than is expected from the item under test. If all you have is a non-graduated stick one meter long, you can't measure increments of less than one meter unless you add some additional resolution to the system (such as a human's judgment that the object is four sticks, plus about another third of a stick, long). Our ability to synthesize pseudo-random data, and the degree to which it approaches true random data, is limited by our ability to discern between the two. If the best testing process available yields the same results for the output of a true RNG and a particular PRNG, what can be done to improve the randomness of the PRNG? How could we tell the difference based on the data itself? About all you could do would be to critique the PRNG or sieving process from an empirical perspective and hope that you weren't introducing some other non-random bias to the system. I'm sure that some perfectly random data would be discarded as being non-random, especially for a small sample size. The sequence HHHHTTTT doesn't look random, but this outcome of 8 flips is equally probable for a "perfect" coin. Do you keep this data or toss it because it doesn't "look" random? If you toss it, aren't you removing entropy from the sample? It may be (relatively) easy to say that radioactive decay is a truly random process and a sieve which discards certain re-occuring values is not. Improving the testing process, and increasing the size of the data used for that testing, will improve the sieve output. However, it looks like an asymptotic situation: the PRNG can approach, but never quite reach, the true RNG case. As long as human analysis and discretion is involved, there will always be a certain amount of non-randomness in the output of a PRNG. My question: if you don't know the source of the data, how can you _really_ determine if it's random enough for crypto use? Given any PRNG string of a certain length, does the fact that I might be able to find that exact same data string buried in a mountain of truly random data mean that it's suitable for crypto use? If you knew that I created the data from the clock of my workstation, then maybe not. But otherwise? Fred <admin(a)dcwill.com>

1 0

Barry Smith (FBI) speaks today 3:30pm at UMBC
by Dr. Alan Sherman 17 Dec '03

17 Dec '03

The UMBC Security Technology Research Group presents A Law-Enforcement Perspective on Encryption Policy Barry Smith Supervisory Special Agent, FBI moderated by journalist Peter Wayner 3:30pm - 5:00pm Friday, March 6, 1998 Lecture Hall III University of Maryland, Baltimore County http://www.cs.umbc.edu/events/spring98/crypto.shtml The second lecture and discussion in a two-part forum on encryption policy. Journalist Peter Wayner will introduce and moderate the event, which is free and open to the public. In Part I, freedom activist John Gilmore and Fritz Fielding (Ex-Associate General Councel, NSA) gave their divergent views, focusing on the Burnstein case. Barry Smith will articulate the needs of law enforcement to conduct lawful wiretaps; he will advocate the use of key-recovery techniques to achieve this end as a way that provides adequate privacy to law-abiding citizens. Schedule: The event will begin with a brief (10 minute) introduction by Peter Wayner. Following Barry Smith's talk, which will last approximately 45 minutes, there will be an opportunity to ask questions for approximately 20-30 minutes. Questions: Attendees are encouraged to ask questions in advance by sending email to sherman(a)cs.umbc.edu Directions: Take Exit #47B off interstate I-95 and follow signs to UMBC. LH III is in the Administration Building, adjacent visitor's parking lot near the I-95 entrance to UMBC. Host: Dr. Alan T. Sherman Associate Professor, Computer Science sherman(a)cs.umbc.edu http://www.umbc.edu (410) 455-2666 This event is held in cooperation with the UMBC Intellectual Sports Council Honors College Phi Beta Kappa honors society CMSC Council of Majors IFSM Council of Majors ACM Student Chapter at UMCP

1 0

Edited Edupage, 24 March 1996
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"educom(a)elanor.oit.unc.edu" 26-MAR-1996 19:24:26.78 To: IN%"edupage(a)elanor.oit.unc.edu" "EDUCOM Edupage Mailing List" CC: Subj: Edupage, 24 March 1996 ***************************************************************** Edupage, 24 March 1996. Edupage, a summary of news items on information technology, is provided three times each week as a service by Educom, a Washington, D.C.-based consortium of leading colleges and universities seeking to transform education through the use of information technology. ***************************************************************** >ONLINE TRADING >Lombard International Brokerage in San Francisco and Pawws Financial Network >in New Jersey are two brokerage houses that have opened Internet trading >services, allowing customers to monitor their portfolios and retrieve >corporate and financial information from brokerage databases or through >links to other Web sites. "You're seeing the culmination of the information >brokerage -- with customer service, advanced analytical tools, and news >available at one place and one time on the most incredibly productive medium >that ever existed, the Internet," says Lombard's CEO. By incorporating a >Java applet into their Web design, Lombard's Web site refreshes its >information every 30 seconds so that intra-day trading charts are >automatically updated. The Pawws trading system, a tailored version of the >Security APL cash-management system, is used by several other investment >houses to display their wares. "Why should we spend time and money to tell >people how to get a modem to work? We provide brokerage -- not technical -- >services," says one user. (Information Week 11 Mar 96 p64) And discount >broker Charles Schwab & Co. will begin this May to allow its customers to >trade listed and over-the-counter stocks, get real-time quotes, and access >account information using the Schwab site on the World Wide Web. (Atlanta >Journal-Constitution 22 Mar 96 F3) They're using _Java_ to do this? >PORN IS A GOLD MINE FOR IDT >Tiny IDT Corp. has found a way to differentiate itself from the >run-of-the-mill Internet access provider. It pitches its service to porn >aficionados, with ads like: "With IDT, I access *all* Internet services. I >said *all* Internet services -- get that smirk off your face." In fact, its >service and pricing are similar to everyone else's, but its subscriber base >has grown six-fold to 65,000 in the past six months using this approach. >"IDT is looking for a marketing niche, and given how we think the primary >Internet audience is -- lonely 20-something and 30-something males -- why >not aim that niche at them?" says Gary Arlen, an Internet consultant. (Wall >Street Journal 22 Mar 96 B4) An interesting way to differentiate oneself. I would suggest that anonymnity (i.e., C2) would be a logical add-on. >NETSCAPE TO GET IN ON THE PHONE-BY-INTERNET ACTION >Netscape co-founder Mark Andreessen says that within six months the company >will build into its Navigator program voice software (which it calls Insoft) >for making low-cost long distance calls via the Internet into its Navigator >program and that long-distance phone companies increasingly won't be able to >justify their rates for telephone service. (Sydney Morning Herald 13 Mar 96 >via Individual Inc.) Any possibility that Netscape might build in some form of cryptography? I realize ITAR rules would make this problematic, but perhaps some sort of out-of-country deal for putting in the hooks for PGPhone could be done. -Allen >Edupage is written by John Gehl (gehl(a)educom.edu) & Suzanne Douglas >(douglas(a)educom.edu) Voice: 404-371-1853, Fax: 404-371-8057. >Technical support is provided by the Office of Information Technology, >University of North Carolina at Chapel Hill. >*************************************************************** >EDUPAGE is what you've just finished reading. To subscribe to Edupage: send >a message to: listproc(a)educom.unc.edu and in the body of the message type: >subscribe edupage Graham Greene (assuming that your name is Graham Greene; >if it's not, substitute your own name). ... To cancel, send a message to: >listproc(a)educom.unc.edu and in the body of the message type: unsubscribe >edupage. (Subscription problems? Send mail to educom(a)educom.unc.edu.)

9 13