- cypherpunks-legacy - lists.cpunks.org

Re: BIX musings on Zimmermann
by walter kehowski 17 Dec '03

17 Dec '03

################################# peace(a)BIX.com muses on Zimmerman: I think about that, it was Isaac Asimov in his story about an invention which allowed people to see back into time. Suppressed by the Government, it was independently re-invented by a professor who only got curious about the topic when he realised it was classified. The catch; when does time begin? one second ago?, one nano-second ago?. With the invention, privacy became a thing of the past; you could go anywhere, see anything. Its kind of a neat twist on this issue. The government would have us believe encryption is a *bad thing* because bad guys will use it to hide their activities. ################################# You've joggled my memory. The Isaac Asimov story referred to in "BIX musings on Zimmermann" is "The Dead Past". Another twist on this issue is that the government was cast as the good guys actually protecting the rest of the world from the wide spread use of the "neutrino-gravitic" time-viewing technology whereas the scientists were acting out of "misguided" notions of freedom of access to the information and technology. When the scientists are finally apprehended they gloat over the fact that the technology is now freely available. The gov't failed to stop them. (The time-viewing apparatus is easy to build.) When the official makes clear what the consequences are (the past is now dead - anybody with a TV set can now monitor anybody anywhere anywhen), the scientists are ashamed of themselves. However, it's important to note that the government was not above using the technology to suppress the spread of the technology. What such a monitoring agency would become in twenty years or so is clear. Just how paranoid could it get? ("Crisis and Leviathan" - When the crisis has passed, the institutions set up to deal with it remain.) It is interesting to speculate on the analogy between Zimmerman's PGP and Clipper and the "neutrino-gravitic" time-viewing technology which the government is not above using for ostensibly noble ends. Walter A. Kehowski <wak(a)next0.math.pitt.edu>

1 0

MacPGP help
by fhalper＠pilot.njin.net 17 Dec '03

17 Dec '03

Would anyone with fair knowledge of MacPGP help me out. I mean I REALLY need help. Thanks, Reuben Halper

1 0

New mailing list?
by Alan (Miburi-san) Wexelblat 17 Dec '03

17 Dec '03

I am interested in starting a mailing list (digest, moderated) on encryption uses/abuses and possibilities in the real world. It would be like RISKS, but would concentrate on cases where encryption is currently being used and cases where it should but isn't. No discussions of this-asshole-actually-asked-for-my-SSN or the like. The idea is to expose to the public where crypto is useful and hopefully get more people to understand what will be lost if the gov't succeeds in keeping crypto tech under its thumb. However, a list is only as good as the material submitted to it. So, I ask the members of this list whether you would be interested in: (a) reading such a list and (b) contributing to it. --Alan Wexelblat, Reality Hacker, Author, and Cyberspace Bard Media Lab - Advanced Human Interface Group wex(a)media.mit.edu Voice: 617-258-9168 Page: 617-945-1842 an53607(a)anon.penet.fi We are Chaos Boys. We are coming to a paradigm near you.

2 1

Re: Net restructure
by drzaphod＠brewmeister.xstablu.com 17 Dec '03

17 Dec '03

> . . . I think > our biggest concern when it happens will be that Clipper like encryption > and monitoring will be implmented as a standard. Who knows maybe the net > will be run by the government. > Reuben Halper > -anger is a gift- rage aginst the machine/Freedom This doesn't stop ordinary [or extraordinary] people from running their own net. This net, with in and out ports to other nets, would follow none of the rules enforced upon our current net. If they try to cut us out we simply change our logical location. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - DrZaphod #Don't Come Any Closer Or I'll Encrypt! - - [AC/DC] / [DnA][HP] #Xcitement thru Technology and Creativity - - [drzaphod(a)brewmeister.xstablu.com] [MindPolice Censored This Bit] - - 50 19 1C F3 5F 34 53 B7 B9 BB 7A 40 37 67 09 5B - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

1 0

New Security/Encryption Corporation - INFORMATION INSIDE (long)
by Matthew J Miszewski 17 Dec '03

17 Dec '03

THIS IS NOT AN ADVERTISEMENT BUT INFORMATION OF GENERAL INTEREST TO CYPHERPUNKS. IF YOU HAVE NO INTEREST IN DATA SECURITY THROUGH APPLIED CRYPTOGRAPHY PLEASE DELETE THIS MESSAGE NOW. SORRY FOR ANY CROSS POSTING. -------------------------------------------------------------------------------- Information Defense Strategies (IDS) Information Security Services Developed for the World And Applied to Your Office Hello All, You might be wondering, "Who is this Information Defense Strategies"? And, "Why is this in my mailbox"? And I would say, "Well, that's a good question". About three months ago I announced that a new data security corporation would be started soon. Its emphasis would be in the application of cryptographic protocols already in existence and the possible development of new ones. Well, that idea has been born into IDS. Why have you received this note? The reasons are varied. Either you contacted me with interest in getting involved, or I have been exposed to your interests in data security through public exposition of such, or a member of the security community referred you to me as an entity interested in what we are doing. Regardless, you have received this note because you are qualified in one or many ways to get involved. Many of you are already related to some sort of computer profession right now. This note is to let you know we are out there, and are interested in building bridges to your organization. Please read through the information provided below and provide feedback if you can. Many people have been anxious to see this get started, as of course I have been also. Finally, a description has been put together. Through the next round of feedback, we will be ready to begin. It is exciting to be starting out and applying ideas that have floated around for some time. This might be one of the first virtual corporations to have been born as such. I would like that sort of cutting edge to remain our vanguard at IDS. And I would like all of you to be a part of it. Matthew J. Miszewski Information Defense Strategies (IDS) -----------------------8<-------------------------8<------------- Please Distribute To Qualified Parties of Interest Direct all electronic correspondence to: mjmiski(a)macc.wisc.edu Snail Mail to: Matthew J. Miszewski 509 N. Lake Street, Suite 504 Madison, WI 53703 608-255-9871 Applied Cryptography No not the book (although I highly recommend it). IDS will base most of its robust security strategies upon encryption. Being well aware of ITAR we will be careful and yet aggressive in our application. I have targeted two areas for immediate concentration, Smart Card technology and encrypted challenge/response access systems. I am, of course, interested in much research and future development in other areas. These two are merely the most immediate opportunity. To remain on the cutting edge, IDS will need to be very active in Research and Development. Many people are moving towards applied cryptography. It is personally important to me that IDS be there at the same time if not before others. Security Services We will basically provide four security services. Consultation, evaluation, Tiger Teams, and IDS Custom Installs. We will consult for firms with a general interest in security as well as those that are well established in the field. This consultation will be general in nature and very affordable. IDS will also evaluate a firm's current security status. This service will offer our clients the opportunity to have a third party objectively review their security. A report of weaknesses will be generated from our evaluation. IDS may offer clients a Tiger Team ongoing contract. This will consist of teams actively attempting to covertly breach security in order to actively discover and immediately close undiscovered security holes. The insurance provisions of this area are tentative and pending and therefore this aspect of IDS is still tentative. Finally, we will offer IDS Custom Installs. These will vary from unique IDS developed Strategies to already developed strategies. Our custom security front ends will be constantly updated and evaluated. Third party product partnerships will increase our viability as well as increase the availability of robust security products. Platforms The data related operating system platforms we will deal with will attempt to be comprehensive if not exhaustive. In order to tap our targeted market we must be diverse. While I personally would love a concentration in Unix work, the reality is that many of our clients will be LAN based machines of the personal variety. We will therefore need specialists in lower level systems (PC, MAC, etc). Telephony Toll fraud can be devastating to smaller businesses. The days of "blue boxing" exploration appears to be over in this country. Unfortunately, the replacement, at least to a certain extent, is PBX and VMS abuse. In fact most people in business have been told that it is not a matter of if your PBX will be hit, but rather when. In addition Voice Mail Systems (VMS) are being utilized across the country without authorization. While some unauthorized users might mean no harm, there is no way to assure that malicious abuse does not occur. Valuable information may be left to the conscience of the underground community. Applying cryptography to this problem will be part of our charge. From front ends to challenge/response, there are many opportunities in this market. Making this security affordable will be our answer to this dilemma. IDS Basic Philosophy Data Security is VERY important. It is no longer just important to huge corporations, but to everyone. Affordable security consulting and products will help make small business information more secure. While CERT attempts much, it is slow to respond and many questions are still unanswered about its funding and allegiances. It is time to not only make security available but accessible. That is why IDS will exist. An incredibly large market is being overlooked by the elite of security professionals. IDS will address this void in the market. All people deserve good data protection. We can offer it. The plan is that IDS will actively pursue the myriads of offices around the nation with data to protect. From every small law firm with a voice mail system to an accounting firm with several LANs to a sales force that needs easy access but is still concerned with protecting its data, we can offer tailor made security strategies. Our profit (future) will be based on horizontal integration, in other words we will not profit by selling high price tickets to the few that can afford it but rather massive application of moderate priced strategies to everyone we can contact. There are a number of other points I will make in future communications. I plan on having a virtual office that may offer digital cash sales in the future. We may develop a low level net for our own communications. Partnerships will need to be developed as well as some manufacturing research. But I wanted to give those interested an introduction. If you are still interested I will send you the next update. Please respond either way so I know whom to keep on the list. More details to come.... Matthew J. Miszewski IDS ______________________________________________________________________________ In defense of liberty, encrypt for all purposes, civil and professional. In defense of privacy, encrypt all correspondence, personal and professional. In defense of sanity, do not encrypt your dry cleaning invoice! ++++++++--------mjmiski(a)macc.wisc.edu (c)1993

1 0

Re: RATINGS: Subject tags
by doug＠netcom.com 17 Dec '03

17 Dec '03

hughes(a)ah.com (Eric Hughes) said: >One of the goals of this arrangement I've proposed is that it can be >used to rate _any_ existing mailing list. This kind of thing was discussed quite exhaustively in news.future last year, and one of the spinoffs was an actual software implementation which is currently available via ftp. I haven't kept up on it so I don't know whether it can be used for mailing lists at the moment, or just for "virtual" newsgroups, but in any case I include three items of info below. The first is a finger message from last summer that gives an overview, the second is an equally old alpha-test message from the primary author that gives more info, and the third is a recent ftp site announcement from him. Between the three you should get some notion of what strn is all about and whether it's worthwhile following up on. If it does not currently support email lists, perhaps the authors could be persuaded to add such support. There's also a mention of public key cryptography below which is somewhat interesting. Since his address changed over the last 6 months, I took the liberty of changing references from his old to his new address in the older two items, to avoid confusion. Doug -- Doug Merritt doug(a)netcom.com Professional Wild-eyed Visionary Member, Crusaders for a Better Tomorrow Unicode Novis Cypherpunks Gutenberg Wavelets Conlang Logli Alife HC_III Computational linguistics Fundamental physics Cogsci SF GA VR CASE TLAs ---------------------------- item one ------------------------ Login name: caadams In real life: Clifford A Adams Directory: /nfs/pavo/u3/caadams Shell: /bin/csh Last login Mon Jul 5 16:59 on ttyp2 from b153_csasm_03.un Plan: STRN/USENET Interface Project. The strn (Scan/Scoring Threaded ReadNews) program will be the first software release of the USENET Interface Project. Strn consists of two major (and some minor) additions to the trn program (version 3.0) by Wayne Davison/Stan Barber/Larry Wall. The additions are over 10000 lines of C code which implement newsgroup selection menus by user-defined "topics", an interactive article selection mode, and fast methods of scoring articles with prioritized display and commands similar to KILLfiles. An interactive multi-level documentation browser is also being developed. USENET Interface Project: ------------------------- The purpose of the USENET Interface Project is to identify and implement methods of dealing with "human bandwidth" problems of USENET. Its goal is to allow users to be presented with the articles they wish to read in the order they wish to read them, without restricting the posters of articles. There are currently three stages planned: 1. Filtering/Prioritizing Given the articles which currently exist, delete the articles which the user is unlikely to read and present the remaining articles in the order of their priority (score). This builds on and enhances the currently existing mechanisms such as separate hierarchical newsgroups and KILLfiles. 2. Suggestion/Addition Adds more information to make the filtering/prioritizing process more accurate (accuracy is measured by how well the presented order matches the user's wishes). Rating services may replace moderated newsgroups, where individuals decide which rating services to follow and what level of quality is acceptable. Summarizing and keywording services can also be made available to allow better selection and prioritizing. This stage will introduce problems in distributing the additional information and security (especially since the reputation of moderators may become much more important). 3. Alteration/Change The basic idea of this stage is that what the contents of the original posting are only a suggestion of what the reader will eventually view. While the original text would be propagated unaltered, various people would propagate their suggested editorial changes (such as hypertext links, spelling or factual corrections, moderator's notes, or summaries). What a reader finally views would be the combination of the original text with the changes of trusted editors. Another possibility at this stage would be the "virtual newsgroup" which is simply a collection of articles chosen by moderator(s). Send me email for more information on any of these projects. --Cliff -- Clifford A. Adams ----------------------- | USENET Interface Project: 457 Ash St. NE Albuquerque, NM 87106 | Tools for advanced newsreading STRN (Scan TRN) now in testing: trn 3.0 plus flexible newsgroup menus, fast article scoring with score ordered display, and merged/virtual newsgroups. ---------------------------- item two ------------------------ >From netcomsv!decwrl!concert!news-feed-1.peachnet.edu!umn.edu!lynx.unm.edu!carina.unm.edu!caadams Mon Jul 5 17:18:39 PDT 1993 From: caadams(a)access.digex.net (Clifford A Adams) Newsgroups: news.future Subject: Virtual newsgroups, ratings, indexes--coming soon? Date: 23 Jun 1993 03:35:57 GMT Organization: University of New Mexico, Albuquerque Message-ID: <208j2tINN342(a)lynx.unm.edu> The recent discussions on news.future have been very interesting. I'd just like to add that I'm working on several ideas similar to some recent posts, and I hope to have some useful results in the near future. For instance, strn is very close to supporting "virtual newsgroups" consisting of arbitrary articles from arbitrary newsgroups. These could be things like "top 20 thread" lists, indexes similar to alt.sources.index, or moderated subsets of existing groups. In the next release strn (Scan TRN) will have merged newsgroups consisting of all the articles from a set of newsgroups presented together. (The code works well, but it needs documenting before release.) Virtual newsgroups are a fairly easy addition to this which I hope to add next week. Distributing virtual newsgroup lists is going to be the hard part. For now I'm looking at a mailing-list approach. (Ick--I hate mail filters.) (Distributing the information using an alt.group with public key authentication would be easy. Unfortunately, that doesn't seem possible in the current political environment. Anyone who knows differently is *welcomed* to correct me. Even weak authentication would be welcome if unpatented and exportable.) In short, some of these schemes might be implemented a few months from now. I hope to release strn 0.9.0 (beta) in a "few" weeks--right now the alpha testing list is semi-closed. (You *might* be able to convince me if you try really hard.) I'd like to talk to people about new ideas, but I believe that the implementations are more important--USENET isn't about to run out of new ideas anytime soon. ;) --Cliff P.S. For more information on strn and the USENET Interface Project, finger my account: caadams(a)access.digex.net. I'll email more information on request. -- Clifford A. Adams caadams(a)access.digex.net | USENET Interface Project: 457 Ash St. NE Albuquerque, NM 87106 | Tools for advanced newsreading Scan/Scoring trn (strn) now in alpha testing: a trn 3.0-based reader with flexible newsgroup menus and fast article scoring with prioritized display. ---------------------------- item three ------------------------ >From netcomsv!amd!decwrl!decwrl!nic.hookup.net!swrinde!cs.utexas.edu!uunet!digex.net!digex.net!not-for-mail Thu Feb 24 09:39:16 PST 1994 From: caadams(a)access.digex.net (Clifford A. Adams) Newsgroups: news.software.readers,news.future Subject: Strn version 0.9.2 is now available. Date: 21 Jan 1994 15:45:57 -0500 Organization: Express Access Online Communications, Greenbelt, MD USA Keywords: strn, newsreader, filtering, prioritizing [I thought some of the news.future crowd might be interested in some of the new developments, especially Internet-sharable virtual newsgroups.] Strn (Scan TRN) version 0.9.2 is now available. See below for FTP sites. [Some of the uunet mirrors might take a day or two to get a copy.] Strn is based on trn (version 3.4.1 by Wayne Davison), and contains all of the trn commands and features. It adds many new capabilities to trn, such as a newsgroup browser, virtual newsgroups, scoring/rating of articles, and easy configuration menus. Strn has been developed and tested over the past year with the help of more than 50 alpha testers. The beta release is intended to make the current version more widely available, test out some of the new concepts (such as index-moderation using virtual newsgroups), and gather suggestions for improvement. Strn is still under development, although most of its planned features are implemented. Future versions of strn will mainly improve the documentation, scoring ease-of-use, and configurability of the program. Version 1.0 release is expected in a finite amount of time. Outline of major strn features: * The "scan mode" interface o A consistent full-screen interface for the four scan modes. . Implements many common commands such as movement, shell escapes, and searching. . Common code allows quick development of new scan modes. o Uses arrow keys for movement (trn-style 'n' and 'p' are also allowed). o X windows mouse selection (when strn is run under "xterm"). * Group scan mode o Full-screen interface for newsgroup selection. o Can replace the trn newsgroup selector for most purposes. o Easy subscription/unsubscription to newsgroups. o User-definable and sharable topic hierarchies. . Example: one could have an "IBM PC" topic containing the groups in comp.sys.ibm.pc.*, comp.os.msdos.*, comp.os.os2, and comp.os.ms-windows.* o Topic hierarchies can be easily shared: . Locally, by adding a link to another user's topics. . Remotely, by sending the topic files to other users. . Via Internet using Uniform Resource Locators (URLs). * Virtual scan mode o Supports "virtual groups" consisting of articles from any newsgroup. o Supports an easy-to-use "hotlist" of selected articles. o Merged groups, such as rec.arts.sf.* (all articles in those groups) o Virtual group files can be mailed to other users, and (with some setup) automatically added to a user's virtual group files. o Posted virtual group files can be used directly, allowing easy "index-moderated" newsgroups. o Virtual newsgroups can be shared via Internet and URLs. * Article scan mode o Subject-based "threading" available. . All articles with the same subject can be displayed as one line. o Summaries and keywords can be displayed. o Articles can be marked and read as a group. o Displays articles in either arrival or score order. (See below for more information on scoring.) * Scoring o Articles are assigned a score by scoring rules consisting of: . Header matching: either exact text or regular expressions. . (optional) NewsClip programs. o Scoring allows high scoring (interesting) articles to be presented before non-scored (ordinary) or negative-scoring (uninteresting) ones. For instance, in sci.space, one could give higher scores to postings from NASA or JPL, and easily read only those articles. o Articles are graded on a continuous scale, rather than a binary keep/junk distinction. (Articles scoring below a threshold value can be junked automatically.) o Scoring is *fast*, typically limited by I/O times to fetch article headers. o Scoring rules can be entered with an easy-to-use menu. o Scoring can be done from a shell script run by cron/at. o Scores are saved to a file so they don't need to be recalculated. * Online help (help scan mode) o Typing 'H' at almost any prompt enters help scan mode. o Help scan mode presents menus of documentation, containing: . The complete trn manual, broken into sections. . Full strn documentation. . Introductory USENET documents (such as "What is USENET?"). o Help files can be easily edited by the local administrator. * Online configuration o Easy menu-based configuration of almost all strn options. o Accessible from the newsgroup selector or group scan mode. o Configuration changes are automatically saved for the next strn run. o Site-wide configuration Strn version 0.9.2 is available from the following FTP sites: (North America, Eastern US) ftp.uu.net /news/trn/strn ftp.digex.net /pub/news (North America, Southwest US) perseus.unm.edu /pub/strn (United Kingdom) src.doc.ic.ac.uk:computing/news/software/readers/trn/strn (Europe, Netherlands) ftp.twi.tudelft.nl /pub/news (South Africa) ftp.ee.und.ac.za /pub/news/strn Sample displays [edited to reduce number of lines]: Article scan mode: [authors not shown in this sample to protect the guilty :-]: ---------- cut ---------- sci.physics | 790 unread Fold +.... [ 18] ( 9) > Some physics questions +....> [ 14] ( 10) > The size of electrons, and Fanciful misc SAGA +.... [ 11] ( 4) > Massive Photons Tomorrow (was Scientists Plan...) +.... [ 8] ( 47) > NASA Coverup Keys: Moon Neutral Point calculation +...x [ 7] ( 8) > Gravitation & massless particles (was Re: Some physics qu +..+. [ 3] ( 5) > Question on Hawking radiation Summary: Why don't extremal black holes radiate? +.... [ 3] ( 10) > Background Radiation and Olber's Paradox +.... [ 1] ( 1) Covariant vs. Lie Derivative in Gen. Rel.? -TOP-(score (old>new) order, 100% scored) ---------- cut ---------- Group scan mode: [Here is the "top" level:] ---------- cut ---------- Top Level | Unread Newsgroups | Top Level file> Favorites virt Hotlist file Americast (USA Today) file USENET file Networks file Computers file Amiga! file Social file Games file Recreational file Science file Misc file Hierarchies list All groups in .newsrc -ALL- ---------- cut ---------- [After selecting the "USENET" entry the screen displays:] ---------- cut ---------- Level 2 | Unread Newsgroups | USENET +.... 31> news.software.readers +M... 4 news.announce.newgroups +.... 7 news.misc +.... 33 news.software.nn +.... 27 news.future +.... 139 alt.config +.... 201 alt.fan.warlord +.... 2259 control list foreign news -ALL- ---------- cut ---------- Virtual scan mode: ---------- cut ---------- Virtual 1 | unread+read | Hotlist -.... [ 33] >Newsreader authors: Would article replacement break your reader < -.... [ 18] FAQ use of replaces: <news.software.readers> -.... [ 6] >Using NNRP for something like "nngrab" <news.software.readers> -.... [ 6] rn KILL file FAQ <news.software.readers> -.... [ -1] Future USENET projections, statistical <news.future> -.... [ -1] Need more best-of-usenet groups/subj scan <news.misc> -.... [ -1] More group-related intelligence for Pnews wanted. <news.software.r -ALL-(score order) ---------- cut ---------- Help scan mode: ---------- cut ---------- Top Level | (type 'h' for help) help> Help on help scan mode topic Introductory USENET documents topic Trn manual information help Strn Quickstart topic Introductory strn documentation topic Group scan mode topic Article scan mode topic Virtual scan mode (merged/virtual newsgroups) topic Scoring topic Digital signatures, cryptography, and USENET topic Misc (coding style, troubleshooting, quotes) topic Configuration (user and site-wide) topic Installation topic Version-related information help Credits -ALL- ---------- cut ---------- Configuration menus: ---------- cut ---------- Strn configuration menu: 0) Exit. 1) Group scan mode. 2) Article scan mode. 3) Virtual scan mode. 4) Scoring. 5) Miscellaneous. Enter your choice: 2 Article scan configuration menu: 0) Exit. 1) Change the displayed fields. (Author, threadcount, summary, etc...) 2) Change ordering and misc. flags. (score ordering, fold, follow, etc...) Enter your choice: 1 Article scan display: 0) Exit. 1) Article number (OFF) 2) Score (ON) 3) Number of articles with same subject (ON) 4) Author (ON) 5) Summary (OFF) 6) Keywords (OFF) An article will look like this: +.... [ 26] (17) John Q. Public Subject of the article Enter your choice: ---------- cut ---------- Authors: (See the strn credits for more information) STRN Clifford A. Adams <caadams(a)access.digex.net> TRN Wayne Davison <davison(a)borland.com> RN Stan Barber (current maintainer) RN Larry Wall (original author of rn) --Cliff -- Clifford A. Adams caadams(a)access.digex.net | Author of "strn" (scan trn): 457 Ash St. NE Albuquerque, NM 87106 | Trn 3.4.1 + virtual newsgroups, scoring (articles sorted by score), newsgroup menus, online help, and more. See ftp.uu.net:/news/trn/strn/strn-0.9.2.tar.gz

3 2

Re: Digitally Signing Physical Objects
by baum＠newton.apple.com 17 Dec '03

17 Dec '03

>> 3. The shop or customer wishing to authenticate the part takes the >> number stamped on the part, runs it through the *public* key of the >> manufacturer (widely available, not kept secret, of course) and gets >> back the feature vector, which he can then compare to what he actually >> sees on the object. .... >This seems to have a tricky dependence on the tolerance. The forger can >get a valid plaintext and signed feature vector. So, if the tolerance >for error is too low, you get false positives, but if it's too high, a >forger could create something starting from the feature vector. An >interesting CAD/CAM problem. To keep black market forgery part off the market, a 30% tolerance is way more than enough. There should be no false negatives (making a real part look fake), but if 1/3 of the forgeries slip through (i.e. 2/3 don't), this has the affect of driving the forgery price up by a factor of 3, effectively pricing them out of the market. (Unless the real goods are overpriced a factor of 3...:-) ************************************************** * Allen J. Baum tel. (408)974-3385 * * Apple Computer, 20525 Mariani Ave, MS 305-3B * * Cupertino, CA 95014 baum(a)apple.com * **************************************************

1 0

No Subject
by Ophir Ronen 17 Dec '03

17 Dec '03

hmmmmm, The meeting was not too interesting, we did not get into Clipper or the FBI wiretap proposal. That will be discussed in a few weeks. -Ophir

1 0

Re: Clipper
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Clipper is currently only rated for non-classified use. It could be done securely, assuming there aren't any unannounced backdoors, by simply using chips for which the keys are not escrowed, or are only held by the military and protected with certain classification levels, but they'd have to do a couple of things to use it. The most important is making sure that a secure Clipperphone is only used to talk to other secure Clipperphones, and in addition you'd probably want to make sure the users have some way of knowing they're talking to appropirately cleared users, since it's sometimes hard to tell if the voice on teh other end of the phone really has the authorization it claims it does. Features like these are built into STU-II and other classified-use approved phones, but aren't likely to be built into vanilla Clipperphones. It may be possible to do that with Tessera, though; I'd have to see more information than they're likely to give out.... Bill # Bill Stewart AT&T Global Information Solutions, aka NCR Corp # 6870 Koll Center Parkway, Pleasanton CA, 94566 Phone 1-510-484-6204 fax-6399 # email bill.stewart(a)pleasantonca.ncr.com billstewart(a)attmail.com # ViaCrypt PGP Key IDs 384/C2AFCD 1024/9D6465

2 1

No Subject
by cort＠ecn.purdue.edu 17 Dec '03

17 Dec '03

Kinda-Fair-Secret Message Passing -OR- Self-Decrypting Messages I have an IDEA. It may have already been thought of.... Problem: - PGP is great, but like so many infant technologies, encryption programs are not quite "turnkey". - Many people do not have PGP installed. I want to send messages to some of these people. (Oh, I know, a true geek doesn't bother to communicate with PlaintextPunks!) Solution: - Securely encrypted messages with programmable "key question" and "response key" for self-decryption. Scenario: Fred wants to send a message to Ida. Fred is a cypherpunk and is quite proficient with PGP. However, Ida is not set up with PGP and does not desire to learn PK cryptography. Fred and Ida know each other (or something about each other). Fred sends a self-decrypting message to Ida in an executable file. Ida simply receives the file and executes it. (This is analogous to self-extracting zip files.) When the file is executed, it will ask Ida a question that Fred has set up (with her in mind). This question will ideally be answerable only by Ida. If Ida answers correctly, her response will form a key to decrypt the message. I have thought a bit about the implementation. It seems that it may be pretty simple to do using PGP Tools. The passphrase recognition could use a one-way function (MD5?). IDEA could be the encryption algorithm. RSA is not needed. The tricky part is providing an executable file while providing a little bit of instruction at the front of this file (to instruct the recipient to down-load and execute). Also, it seems that an assumption of recipient platform (e.g. DOS, Unix, etc.) may be necessary. Uuencoding or similar ASCII/binary conversion may be required. Comments? Would someone do this? Does it already exist? It would be a nice augmentation to the PGP package! Cort. -- cort(a)cc.purdue.edu

5 7