- cypherpunks-legacy - lists.cpunks.org

S.F. judge to rule on encoding software
by Jeff Weinstein 17 Dec '03

17 Dec '03

http://www.sfgate.com/net/abate/1021.html FYI. The above URL points to a SF Examiner article about the Bernstein case, including friday's proceedings. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.

1 0

Re: NYT on Internet Flaws
by MDresser＠aol.com 17 Dec '03

17 Dec '03

In article <199510120347.UAA27336(a)infinity.c2.org>, sameer wrote: > > I completely agree that the reporters on this list make things > very difficult and people do need to be very careful about posting > things which will get misinterpreated by reporters.. etc.< FYI, the day after the Markoff piece ran in the NYT, The Baltimore Sun ran an article debunking it, based on independent reporting. Generalizing about reporters is about as intellectually valid as generalizing about hackers. Michael Dresser, who wrote it (speaking for myself, not my employer)

1 0

Re: Irono-troll (was: Re: The Utility of Privacy)
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:58 PM 11/18/96 -0600, Roy M. Silvernail wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >A troll using nobody(a)huge.cajones.com writes in reply to Sandy Sanfort a >lot of dismissal of past tragedies resulting from privacy violations. >Hir consistent viewpoint seems to be that protecting ones privacy has no >value. Then sie has the temerity to ask > >> BTW, are you operating under your True Name? > >My ironometer is absolutely pegged. Mine did too. It is the most amusing exchange I've seen in a long while. An extremely stable nym arguing for privacy against an anonymous remailer arguing that it isn't important. It makes up for all the trash talk and references to sexual orientation that the juveniles have been posting. ------------------------------------------------------------------------- Bill Frantz | The lottery is a tax on | Periwinkle -- Consulting (408)356-8506 | those who can't do math. | 16345 Englewood Ave. frantz(a)netcom.com | - Who 1st said this? | Los Gatos, CA 95032, USA

1 0

Re: Anonymity: A Modest Proposal
by James A. Donald 17 Dec '03

17 Dec '03

At 12:59 PM 10/19/95 -0400, Thomas Grant Edwards wrote: >This would require the remailer to examine entropy of messages passing >through. Anything not random enough gets tossed. A simple entropy measuring algorithm: Generate N random pointers into a file. (or extract N random short strings from the file) Sort them into order of the strings, Find the number of bits in common between one string and the next string. Total up S, the number of bits in common Calculate (N * lg N)/S For an encrypted file, this quantity should be close to unity, because the order in an encrypted file should not be easily detectable. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

No Subject
by ibg＠oro.net 17 Dec '03

17 Dec '03

Very interesting article on offshore banking. Can you suggest a reading list or source of additional information?

1 0

Re: Lotus Notes RSA Implementation Question
by Charlie Kaufman/Iris 17 Dec '03

17 Dec '03

>If anyone on the list has knowledge of the following items, I would be >very gratefull. > >1) What is the key size used by the USA licensed version? > Notes V3 (the one currently deployed) uses 512 bit RSA keys in both the USA and exportable versions. Notes V4 (currently in Beta) uses 512 bit RSA keys for encryption in the exportable version and bigger keys for signatures in all versions and for encryption in the USA version. I'm not sure I'm allowed to say what the key size will be ahead of the product shipping. >2) Considering RC4 is a proprietary scheme, have there been any >concerted efforts to validate it's strength or lack of? If so, could >you give a pointer to any documents I could review. > There has been considerable discussion of the security of RC4 on this list, and some subtle (i.e. worrisome but not disasterous) weaknesses have been found. Lotus Notes' use of RC4 is not subject to the weaknesses disclosed to date because it does not encrypt recognizable plaintext with the first few bytes of the RC4 stream. >...Bob Glassley > --Charlie Kaufman (charlie_kaufman(a)iris.com)

3 2

Re: Who needs time vaults anyway?
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>An application that I've seen is financial data, more specifically >MBS payment info. In the real world, there's a trustee/nominee of some sort who does this. What's that to keep that from happening on the net, just like our much maligned (guy's gotta make a living, fer chrissake!) assassination-payoff escrow agent... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

5 4

Hakim Bey mention of gvm't crypto policy
by Jon Lasser 17 Dec '03

17 Dec '03

This is a very brief excerpt from a Hakim Bey piece available at http://www.t0.or.at/hakimbey/boundary.htm, dealing with... well... lots of stuff, actually. Including stuff talked about on the list. I recommend the entire piece highly. Jon -------------------------------------------- Knowledge itself can be seen as a kind of virus. On the psychological level this perception manifested recently as a panic about "computer viruses", and more generally about computer hacking -- boundary violations in cyberspace, so to speak. The government wants access to all computer cypher-codes in order to control the "Net", the InterNet, which might otherwise spread everywhere, transmitting secrets, even secrets about "abuse" and kiddy porn -- as if the Net were a disease, rather than simply a free exchange of information. America's immune system can't take "too much knowing" (or whatever T.S. Eliot's lame-ass phrase was); America must be "protected" from penetration by foreign chaos cabals of evil hackers (who might look just like you and me) -- borders must be imposed. ---------------------------------------------- ------------------------------------------------------------------------------ Jon Lasser <jlasser(a)rwd.goucher.edu> (410)494-3072 Visit my home page at http://www.goucher.edu/~jlasser/ You have a friend at the NSA: Big Brother is watching. Finger for PGP key.

1 0

Re: credit card conventional wisdom
by Rich Salz 17 Dec '03

17 Dec '03

>There is in fact a distinction between "card present" and "card not present" >transactions. AMEX cards for example have an extra group of four digits which >are not part of the embossed card number. They are used as additional >verification to prove that a card is present. So the run-it-through-the-mechanical-device is treated as card not present? /r$

4 5

REMINDER: PARTY! Nov. 18th, sponsored by Community ConneXion
by sameer 17 Dec '03

17 Dec '03

Subject: REMINDER: PARTY! Nov. 18th, sponsored by Community ConneXion Here's a little reminder: We're having a party in a little over a week. I hope you can make it. Community ConneXion: the Internet Privacy Provider is having a party! We're partying to celebrate the spread of privacy on the net, through the increased security of internet products, as well as the growth of our services. (Many new services and new features on existing services will likely be announced before the party. Stay tuned.) We're inviting all our customers and other potentially interested parties, which includes you, if you've received this note. So please join us, and send a copy of this invitation to anyone else you may know who would be interested in attending. Where: Icon Byte Bar & Grill 299 9th Street (at Folsom) SF CA 94103 When: Sat. Nov. 18 1995 7:00 PM This is a good chance to meet and network with the people who are making privacy on the internet a reality. Find out more about the HackNetscape and HackMicrosoft contests. Learn about our specialized web services, found nowhere else but at Community ConneXion. Hear about the anonymous and psuedonymous servers here and what we're doing to improve them. There will be catered snacks and a no-host bar.

1 0