- cypherpunks-legacy - lists.cpunks.org

Re: Mind-Altering Drugs
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:48 PM 7/10/96, Asgaard wrote: >Thinking of T. Leary in memoriam I looked around for the >present psychedelic scene. Alta Vista sent me to where >'everything' seems to connect ... Santa Cruz, Ca. Guess where I live? Leary came to a Cypherpunks party, a little over a year ago, at the home of Doug Barnes. He was pretty frail-looking. I talked a bit to him, mostly about "Gravity's Rainbow." (Whose author lived anonymously near Santa Cruz, just over a ridge from me, for almost 10 years.) --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: July Freedom Forum Meeting
by Deranged Mutant 17 Dec '03

17 Dec '03

On 10 Jul 96 at 7:06, The Deviant wrote: [..] > this SHOULD never happen, for the same reason that money cards (the one's > with the chip embedded in the plastic) should never happen. [..] > ok, say I DID get a money card... here's the process that makes the > encryption, and/or any other security, useless. > > 1) get a bank loan, and transfer the $$ onto the card.. lets say > $100,000... > > 2) copy the chip. Number (2) is not so easy with smartcard tech. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: MSoft crypto API's
by Deranged Mutant 17 Dec '03

17 Dec '03

On 10 Jul 96 at 12:10, David Mazieres wrote: > What I don't underastand about this arangement is how other people are > supposed to develop crypto software under capi. I mean, how is it > possible to develop a software package if you need to go get it signed > by microsoft every time you want to test it? There would be a development kit or version of the OS for developers that doesn't require signatures. Problems are that forgeign developers will want this, and they'll cry foul if they can't get ahold of it. Another problem is that it might be bootlegged or pirated if enough people do not trust the system, or if adequate software if not available. Rob --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

ANNOUNCEMENT: PGPfone Beta 7 Now Available for Download
by Will Price 17 Dec '03

17 Dec '03

ANNOUNCEMENT: PGPfone Beta 7 Now Available for Download _______________________________________________________ MIT has released Philip Zimmermann's PGPfone 1.0b7 for Macintosh and 1.0b2 for Windows95 or NT. This new secure telephone product is now available for download at the MIT PGP distribution web site: http://web.mit.edu/pgp or: http://web.mit.edu/network/pgpfone Using PGPfone is like using a telephone, except no one else can eavesdrop on your conversation. PGPfone lets you whisper in someone's ear, even if their ear is a thousand miles away. Secure voice calls are supported over the Internet, or through a direct modem-to-modem connection, or even over AppleTalk networks. PGPfone uses Diffie-Hellman public-key technology to provide encryption keys for the user's selection of CAST, TripleDES, or Blowfish encryption algorithms. A unique biometric authentication feature uses spoken words to authenticate the Diffie-Hellman key exchange allowing easy authentication of secure calls. This new version introduces CAST, a fast and well-designed new encryption algorithm from Northern Telecom. The use of Diffie-Hellman in PGPfone allows secure calls to parties that are not previously known to the caller -- no prior key exchange over other channels is necessary. PGPfone 1.0b2 for Windows is an improved version which is now on par with the Macintosh version. It now supports silence detection, much improved sound quality, significantly reduced latency, completely new interface, faster call negotiation, and some important bug fixes. A commercial version of PGPfone will be available in the fall from Phil's new company, Pretty Good Privacy, Inc. The company may be contacted at 415 631-1747, or at http://www.pgp.com.

2 1

Re: Can the inevitability of Software privacy be used to defeat the ITAR?
by jim bell 17 Dec '03

17 Dec '03

At 01:03 PM 7/11/96 -0400, Mark M. wrote: >> What is to prevent a U.S company to licence a foreign company >> to sublicence and distribute a Crypto product abroad, if that >> foreign company obtains that product on the pirate market? > >Just because the company didn't break any laws doesn't mean that they aren't >going to be harassed by the government. This is similar to the Philip >Zimmermann case. A grand jury investigation could be carried on for as long >as the statute of limitations dictates and then the prosecutor of the case >decided at the last minute not to indict. This is the reason that Netscape >has not yet made a browser with 128-bit encryption available on the Internet. I think the government's ability to "harass" writers of good crypto software has been severely limited by their failure to indict Zimmermann. Remember, today they pretty much have to accept the fact that anybody can write any software, DOMESTICALLY, without any sort of legal impediment by the laws including ITAR. This is particularly true of a company like Netscape, which presumably has the bucks and/or the political clout to make it a difficult target. Any case against Netscape would probably take years if not decades to resolve, and long before this happened the world would have adopted good encryption regardless. Look what happened when MIT put PGP on the Web: "Nothing." Jim Bell jimbell(a)pacifier.com

1 0

Re: "White 'Punks on Dope" (w apologies to The Tubes)
by mike＠fionn.lbl.gov 17 Dec '03

17 Dec '03

On Jul 10, 10:12pm, Timothy C. May wrote: > And perhaps worse, _parents_, such as the example I provided, are using it [Ritalin] > to control children. Where once they would've paddled the kid for using > obscene language, or refusing to get dressed for school, now they pop a > pill in the child's mouth. There are certainly legitimate arguments about the level of use of Ritalin or other drugs, their benefits & their costs, but this straw man is just ridiculous, & betrays the author's lack of knowledge. Unfortunately a similar misunderstanding is reflected in the writings of 1 or 2 others on this topic too. Parental (or other) control is not at issue at all with add; self control is the main problem.

2 1

Re: rsync and md4
by Bill Stewart 17 Dec '03

17 Dec '03

At 02:05 AM 7/1/96 -0400, "David F. Ogren" <ogren(a)cris.com> wrote: >Irregardless, this argument is moot. This thread is titled "rsync and >md4". It is a discussion about which hash function suits this particular >purpose and he is not particularly concerned with resistance to deliberate >attack. In this case MD4 will function adequately. There are three issues with MD4/5 relevant to rsync 1) Collision probability - if you're concerned that a damaged packet will have the same hash as the original correct packet, that's 2^-128. If you're concerned that you may find a damaged packet with the same hash as _some_ correct packet out there, that's a birthday problem, and approaches 2^-64 if you've really got lots of packets that you can keep track of at once, but in reality the probability is much lower since you won't be keeping 2^64 packets around to collide with. 2) Deliberate collisions, and 3) speed - If I understand the description of rsync, it needs a checksum to detect packets with different values so it can determine whether to send an update packet. It's concerned with people changing _data_ in non-malicious ways that you want to detect, so the security issues about MD4 and MD5 aren't relevant, though systematic changes to data resonating with the hash function are. You can use _much_ simpler hash functions than MD5 - go check out a book on error correcting codes and related math. Most error detection applications these days use 32-bit polynomials, since they're good detectors and can be implemented very efficiently on 32-bit hardware. They're useless for security, since you can invert them, but that's irrelevant. If that's not reliable enough for you (and it may not be), there are polymomials in lengths like 64 bits or 128 bits that should have good change detection, not be too sensitive to patterns in data, and be _far_ faster than MD4 or MD5. If I remember right, rsync was looking at using 16- and 32-bit checksums to get a quick probable result and MD4 as a backup; you can save yourself work by just calculating the 128-bit function and using the first 32 bits as a quick check. If you're _sure_ you're not worried about birthday problems in your collisions, a 64-bit checksum is fine, and will be even faster. # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Re-delegate Authority!

1 0

Re: Net and Terrorism.
by Remo Pini 17 Dec '03

17 Dec '03

>While the guys fighting the Israelis in Lebanon are more or >less honorable men who fight according to the laws of war, >the Islamic fundamentalists in Algeria are simply vicious subhuman >monsters who deserve to die, each and every one, and their pals in >Egypt and the Sudan are not much better. I hope you're not serious. In case you are: It seems to be typical of American beliefs that Israelis are good, and everybody else "down there" is bad. On the other hand, Israel wouldn't stand a chance if US weren't having them as a pet. They are getting more and more fundamentalistic (yes, there are zionistic fundamentalists, big surprise) and they are not one bit better than anyone around. It seems to me, that a few hothead terrorists create the image of all arabic people in western heads. Consider this: Islam is a lot younger then Christianity. If the Islamic people act like the Christian people we will have a huge problem. A few hundred years ago everybody who didn't agree with the pope was killed (Earth is flat after all). Now, according to my timekeeping, Islam should reach that state around 2100. So there is plenty of time for them to get nastier. (I don't think they will, because Islam is a bit more tolerant than christianity ever was). ps: I'm not Islamic, nor will I ever be, but I don't like fundamentalists, and your views, should they be serious, sound *VERY* fundamentalist to me. ----------< fate favors the prepared mind >---------- Remo Pini Fon 1: +41 1 350 28 82 mailto:rp@rpini.com Fon 2: +41 1 465 31 90 http://www.rpini.com/remopini/ Fax: +41 1 350 28 84 --------< words are what reality is made of >--------

1 0

Re: Word lists for passphrases
by Remo Pini 17 Dec '03

17 Dec '03

At 03:51 PM 7/6/96 -0400, you wrote: > > AwakenToMe(a)aol.com writes: > > > I have a util that will create a word list starting from > > > aaaaaaaaaaa on up to anythingggggggg basically you could do every > > > combination. Let me know if ya want it. > > > > That would really be of great use for doing wordlist crack runs. It > > must have taken you a long time to write -- generous of you to offer > > it. I don't think any decent programmer has never tried such an aproach to crack for example PKZIP archives (the one on CD-ROMs, where you have to pay to get the passwords). I certainly did back in 1991. I don't want to put down the usefullness of such a program, but since probably more than 50% of all passwords are vulnerable to dictionary attacks, such a utility has not too much value. (have you ever tried all combinations from "aaaaaa" to "zzzzzz" (there are around 2'176'782'336 <36^6> if you concider all umlauts like the German auml;, uuml;, ouml;, ...). On the other hand, there won't be much more than 10'000 6-letter words in any dictionary. So it seems, a wordlist generator and a wordlist using cracker works a lot better (and is almost as trivial to do - if you keep aside nice features) ----------< fate favors the prepared mind >---------- Remo Pini Fon 1: +41 1 350 28 82 mailto:rp@rpini.com Fon 2: +41 1 465 31 90 http://www.rpini.com/remopini/ Fax: +41 1 350 28 84 --------< words are what reality is made of >--------

1 0

Re: CCC Crypto Lock
by Remo Pini 17 Dec '03

17 Dec '03

At 04:10 AM 7/6/96 -0700, you wrote: >MicroPatent, 4 July 96 > > >Systems and methods for protecting software from >unlicensed copying and use (Assignee -- Convex Computer >Corporation) > >... > >Assignee: Convex Computer Corporation > >Patent Number: 5530752 > >Issue Date: 1996 06 25 > >Inventor(s): Rubin, Robert J. > >If you would like to purchase a copy of this patent, >please call MicroPatent at 800-984-9800. > >Copyright 1996, MicroPatent I think there are already such algorithms in use in Europe. (Why buy the patent, if it's already around?) ----------< fate favors the prepared mind >---------- Remo Pini Fon 1: +41 1 350 28 82 mailto:rp@rpini.com Fon 2: +41 1 465 31 90 http://www.rpini.com/remopini/ Fax: +41 1 350 28 84 --------< words are what reality is made of >--------

1 0