- cypherpunks-legacy - lists.cpunks.org

Re: Relative Strength of 40-bit Crypto Implementations
by Lucky Green 17 Dec '03

17 Dec '03

At 01:29 AM 1/7/97 -0500, Vin McLellan wrote: > A client asked me today about where he could find evidence of the >relative strength of different encryption algorithms, when all are >restricted to 40-bit keys. He assumed dot-Gov was going to restrict his >export product to the 40-bit limit, but he wanted to provide the strongest >security he could within that limitation. The best answer you can possibly give him is to move production overseas. Any 40 bit cipher is garbage. Period. It is easy to produce crypto overseas. Many medium sized companies are doing so today. Insiders claim that larger companies, such as Netscape, are in the process of setting up shop abroad as well. Clearly, one can't produce software containing crypto in the US and stay competitive at the same time. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

2 1

RE: Thoughts on moderation
by Blanc Weber 17 Dec '03

17 Dec '03

From: Douglas Barnes I don't see this move as censorship of any sort -- cleaning the Augean stables is more like it. I am profoundly tired of wading through completely worthless and vapid trash accusing Tim and John of various sexual perversions. .................................................. So what about determining the lowest parameter of tolerance for style & content - how low you can go before your messages are transferred to the "flames" division? Then, for instance, Uni could say to Dale: "you will find my detailed retort to your deluded accusations on the other list" (which Dale would, of course, go over there and read <g>). In any case, everyone would know what that sensitive, low point of intolerance is such that if they descend to it they will be sifted out and recategorized. .. Blanc

1 0

Copyright loophole?
by azur＠netcom.com 17 Dec '03

17 Dec '03

While doing research at a law library, I came across what appears to be a legal loop-hole in the copyright law. It seems a famous author's publisher had a substantial number of unbound and unsold copies of his works sitting around. Another publisher purchased them from his publisher, without the author's knowledge, and printed an anthology which included an index which was not part of the purchased (copyrighted) items. In Kipling vs. G.P. Putnam & Sons (1903, CA2 NY) 120 F 631, the 2nd circuit found that (from 17 USCS § 501) "Publication of an index to accompany copyrighted volume of author's work although containing words and phrases found in text, does not constitute infringement." From the original opinion: "They were also at liberty to make and publish an index contained in their volumes even though the index, as necessary must, contain words and phrases found in the text." Q1: Could this decision (which has stood since 1903) support the creation, storage and distribution of "standalone" on-line indicies to copyrighted works without infringement? (I could not find a direct reference to "fair-use" in the portion of the opinion referencing the index nor a related ruling, using the 1976 Copyright Act, which overturned the "index' provision.) Q2: How much content can an index contain and still not infringe? Q3: What would be the legal standing of these indicies, or several unrelated "indexes", if they can jointly (but not separately) be used to reconstitute the original copyright work by a private citizen? (Anonymous index posting, especially via a Ross Anderson style Eternity Service, might "practically" circumvent government enforcement.) -- Steve

1 0

sig. files with PGP
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi there, I have a question reg. PGP: If certain parts of an encrypted message are known, does that compromise the security of the rest of the message? Example: If I always use a signature file, in plaintext messages as well as in encrypted messages, could an attacker knowing that signature file to be part of my encrypted message crack the rest too? Please copy replies to my private e-mail, for I am currently not subscribed to the CP list... Thanks in advance for your help, Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE * */ /* and PRIVATE ONLINE COMMUNICATIONS! * * */ /* * * */ /* E-mail: harka(a)nycmetro.com * * */ /* * */ /* Finger or E-Mail for PGP public key. * * */ /* Key Size: 2047 / KeyID: 04174301 * * */ /* Fingerprint: FD E4 F8 6D C1 6A 44 F5 http://www.eff.org */ /* 28 9C 40 6E B8 94 78 E8 */ /* Note: My old key (KeyID: B2728495) has been revoked. */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ ___ Blue Wave/386 v2.30 [NR] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMtN8SjltEBIEF0MBAQEEoQf/TVZO2Z9gr8Jik0SnbfE7VbrORETlD7q3 nqIsU5FY6iCJKmXy9Us/VW6LOyuRr0qAMbM8IAdMaX96P1FFFGoZ+6QAH1txV+xs i6+w6TKtHmLZDyMaa40hH5F3/sUUECT5MyW59McO2+seX3gYDwi+jLp6XVZq8BFs uLymgoDmh+NsDXBcOUs9ULCQy8rsu/nYmbwQxlWqhUnPw1o1nnuUGuBZaEfU6xJj gthebIpjCPh9YAthdI/XxE4bmYmS1AVhL4Fz6cwR9yMQ4JC3eEoZnhIUvFd16w6i eOo1Og9sD241ksJTjH7lT0qaRAQFh0ccEQoFoCP/7dAesVjwXKjRhg== =3u9n -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

SSL Insecurity
by Rick Osborne 17 Dec '03

17 Dec '03

A while back, someone posted an article on the insecurity of Netscape's implementation of SSL. Can someone send me back that article, or a few pointers as to where I can find related information? Thanks, Rick Rick Osborne / osborne(a)gateway.grumman.com / Northrop Grumman Corporation ------------------------------------------------------------------------- "Get that finger out of your ear! You don't know where that finger's been!"

3 2

Trade secret liabilty [Was Re: Sandy and I will]
by Michael Froomkin - U.Miami School of Law 17 Dec '03

17 Dec '03

a reliable friend wrote to me to say ... <quote> The Uniform Trade Secrets Act (which has been adopted by a majority of jurisdiction) provides for liability of a third party who knows or has reason to know that information he recieves or discloses was acquired by improper means or under circumstances giving rise to a fiduciary duty OR that he knows to be proprietary but which he recieved by accident or mistake. Depending on the facts, the language could encompass a moderator who knew about or turned a blind eye to distribution of trade secrets on his list. </quote> A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | U. Miami School of Law | froomkin(a)law.miami.edu P.O. Box 248087 | http://www.law.miami.edu/~froomkin Coral Gables, FL 33124 USA | It's warm here.

1 0

FREE LIFE SAVING MESSAGE
by gemery＠earthlink.net 17 Dec '03

17 Dec '03

I_Love_SPAM, To get your free life saving audio cassette called " Dead Doctors Don't Lie " please go to this URL, http://home.earthlink.net/~grbon/index.html This tape has 2 minutes that most companies leave out!!! We have what the Doctor ordered. Doctor Joel Wallach-past nominee for the Nobel Prize-Medicine explains why the average age of an M.D. is only 58 yrs. Please call or e-mail us for our families personal testimonies.Reading this message was not a waste of your time as this advice - in all likelyhood saved two members of my family from losing thier lives. Thanks for your time and may God Bless You all. p.s. Please use e-mail on web page-thank you! Business opportunity also available. To be removed from our free offers mailing list please put remove in the subject box and return to author and of course we are sorry for any inconvenience. We also have a free 888# for your home offer, no monthly charge-one time set up $9.95

1 0

RE: The FAGGOT list
by Robert Barnes 17 Dec '03

17 Dec '03

Dr.Dimitri Vulis KOTM wrote: >Brett Carswell <brettc(a)tritro.com.au> writes: >> Could someone please forward me the URL of the FAGGOT (are the caps >> manditory?) detecting software for mailing lists. I feel pretty left out >> as almost everyone else know who the FAGGOTS are. Is this the same >> software that detects Cocksuckers or does Dr Dimitri have something of >> his own. Maybe we could all band together and come up with something >> that detects Nazi moderators as well. > >Everyone who spoke up in favor of moderation is a faggot tentacle. So does this mean that when you say "faggot" you mean "a person with views different to your own" rather than "a male homosexual" or "a bundle of wood, used for fuel"? > >I hope this helps. I think not, a code sample from a "faggbot" would be more helpful than a rule of thumb. >Rob Barnes

1 0

IBM Key Recovery Propaganda on United Airlines
by Bill Stewart 17 Dec '03

17 Dec '03

The commercials between the movie and news show on the airline include an IBM spot on their new Key Recovery software. Sigh. The explanations they gave were mixed; one person was talking about making sure that if you lose the key that people with a legitimate need to access the material can do it. The other example they gave, with pictures, was along the lines of "Suppose you're going on vacation and you want to leave a key with a neighbor to feed the dog. A safe way to do it would be to put your house key in a lockbox that needs several keys to open it, and give those keys to people you trust." Yeah, right - cops can get in, but Dog's gonna get pretty hungry.... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

5 5

Re: PGP Key Preview...
by falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

> is there a way to preview the contents of a received public key, > without adding it automatically to the public key ring? Trivial. Just have pgp look at the file without giving it any commands. I.e. instead of pgp -ka <filename> do pgp <filename> Pgp will examine the file, tell you it contains keys, show them to you and then ask if you want to add them to your keyring. This is the way I normally add keys, just because I like to look at *any* file before I add it to any system.

1 0