- cypherpunks-legacy - lists.cpunks.org

Re: National Research Council
by Anonymous User 17 Dec '03

17 Dec '03

Mr. Karn said: /From: Phil Karn <karn(a)qualcomm.com> /To: SAMUEL.KAPLIN(a)warehouse.mn.org />Is it me or are there a disproportionate amount of legal/government/military/ />types on this list? Keeping this in mind, do you really think any of our />comments will go anywhere but in the old circular file? /My thoughts exactly. The committee's classification/clearance policy /was undoubtedly intended to skew its membership much more than to /protect any legitimate government secret. After all, they're supposed /to be discussing openly available civilian encryption technologies. /Funny how the most obvious, no-brainer public policy questions always /seem to generate the most controversy... And what, pray tell, is per se wrong with "legal types"? Why do you think Bollinger, Hellman, Neumann, Patel are knee-jerk non-liberals? (Or even Civiletti for that matter, he's reasonable). OK there are no *radicals* but what do you expect from the establishment? I think you will get a respectful hearing if you make sensible comments. I have no doubt that you personallly will do the latter. SOLONg

1 0

RE: IBM-Led Consortium. Any thoughts?
by merriman＠metronet.com 17 Dec '03

17 Dec '03

---------------Original Message--------------- This just in. I haven't seen it posted so I thought I would. ===========================begin forwarded message========================= .. <snip> ... As overall Program Manager, IBM will manage the system design, development, and integration, as well as the establishment of commercial channels for delivery of the project's resultant software products, planned for completion in 1998. IBM also will be responsible for skills transfer through its CIM in Higher Education Alliance, a nationwide IBM-sponsored organization consisting of 97 U.S. colleges, universities and technical institutions. ----------End of Original Message---------- Whether or not it works depends on how much IBM is willing/able to let the other players do what they're good at without sticking more than 2 or 3 of it's thumbs in everything. >From a C'punk perspective, I notice there isn't any specific mention of security or privacy in it. >From a "consumer" view, they don't seem to be bothering to ask anyone what they want - looks like "Here's what we're gonna do, like it or lump it." :-( I wonder how much good it would do to email some folks on the list with a list of concerns about the project? Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

2 1

CPs write Bumper Stickers
by merriman＠metronet.com 17 Dec '03

17 Dec '03

Got my samples of bumper sticker stock from Williams & Macias today, and it looks *real* good. Nice, heavy paper, feels like some kind of plastic coating on it to make it weather-resistant. The description sheet that came with it says that it can also be run through copiers and offset presses, that it can be drawn on directly, and takes color (dry-toner). W&M is calling them SlapSticks. The 2041 (3 stickers/sheet) has 3 short (but full-width) areas; the 2042 has 2 full-height areas. The stuff also comes with two different adhesives: "temporary" and "removable". The "temporary" is to allow washing off with soap and water; the "removable" is more durable. From the descriptions, it sounds like the difference between a post-it note, and adhesive tape (roughly). Each sticker is on it's own little die-cut area, and the areas are separated with perfs to make separation easier. Prices are $19.95 for 20 sheets, with Bumper Sticker Remover fluid for the "removeable" stickers at $2.75 for 11 oz. can. 2x41 is 3 stickers/sheet, 2x42 is 2 stickers/sheet. Replace x with 0 for removable adhesive, use 1 for "temporary". The number (again) is 1-800-310-0890; Williams & Macias 3707 South Godfrey Blvd. Spokane, WA 99204-5753 (509) 624-5170 Only got sampled one sheet of each kind, though :-( Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

1 0

Re: Fast Modular Factorial?
by Jim choate 17 Dec '03

17 Dec '03

> > >If x>n and x is not a prime then the result will again always be 0 since > >we can break x down into factors smaller than n and the previous argument > >removes the various factors. > > Unless I misunderstand you, this isn't true. Any non-prime containing > more prime factors than n! doesn't satisfy this test; nor does any > non-prime containing factors > n. > Will think on this. It seems to me that if you have a even number of prime factors you can multiply them out and get an even number which you should be able to remove easily. Do you mean that the number of prime factors is greater than n! or greater than the number of prime factors of n!? Also, consider that in the case of a x>>n you might actually run out of enough factors smaller than n to remove. This is one case I didn't have time to look at earlier. Right now I am looking at behaviour where x>(n)^1/2 and also when x>(n!)^1/2. > 6! == 2 * 3 * (2*2) * 5 * (2*3) == 720 > 116 == 2 * 2 * 29 > 27 == 3 * 3 * 3 > > 720 mod 116 == 24 > 720 mod 27 == 18 > > 6!= 2 * 3 * 4 * 5 * 6 = 720 116 is > 6 so this does not disprove my assertion. The factor which is left over, ie 29, is prime. 27 is > 6 so this does not seem to disprove it either since in 6! there is a 3 * 3 which removes one of the factors and you are left with 3 which is prime. Consider x=n again, this means that n! is really n(n-1)! and the mod of (n!)modx is equivalent to n(n-1)!modx which leave us with a multiplicitive factor of (n-1)! and a remainder of 0. One other point that may be irrelevant is that n! is always an even number. The reason is that the very last multiplier is 2.

1 0

SlapSticks
by merriman＠metronet.com 17 Dec '03

17 Dec '03

Okay, I've printed my first set of bumper stickers, using the W&M bumper sticker stock for laser printers. It prints out *great*, and the "removeable" adhesive seems to have enough holding power to keep in on a car, but not so much as to become a permanent fixture (anyone seen a Bush in '92 bumper sticker of late? :-). I guess I'll find out this winter how well the SlapSticks withstand wind, rain, etc. here in north Texas... Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

1 0

Re: kerberosV telnet
by Jef Poskanzer 17 Dec '03

17 Dec '03

>> Anyone have any fun diffs for kerberized telnet/telnetd that I could >> play with? An IDEA encryption module? A Diffie-Hellman module? >> Standards not necessary, we're just experimenting here. > >The Cygnus release of Kerberos v4 contains much of what you want. The >4.4 BSD version of Telnet also contains much of what you want. "That turns out not to be the case." The version of CNS that we have doesn't have any encryption beyond DES. 4.4BSD telnet is basically identical to kerberosV telnet, and the only encryption it has is DES. You may have misunderstood my message, assuming I was looking for patches to some random unspecified version of telnet to make it kerberized and give it IDEA and DH capabilities. That would have been a stupid request to make. Thanks for the compliment. Let me be crystal clear this time. We have kerberosV telnet. It has DES encryption, and a few authentication options that do not include Diffie-Hellman. I am curious whether anyone has already started playing with adding new encryption and authentication modules, for example IDEA and DH. --- Jef

2 1

Fwd: Anonymous Long Distance Phone Calling
by Matthew J Ghio 17 Dec '03

17 Dec '03

I thought this might be of interest to cypherpunks. Especially the part about encryption... I would also be interested to know if anyone has dealt with this company (reputation and so on). ---------- Forwarded message begins here ---------- Return-path: <LeslieR2(a)aol.com> From: LeslieR2(a)aol.com X-Mailer: America Online Mailer Sender: "LeslieR2" <LeslieR2(a)aol.com> Message-Id: <9409241357.tn28073(a)aol.com> Date: Sat, 24 Sep 94 13:57:47 EDT Subject: Re: Anonymous Long Distance Phone Calling TRACELESS CALLS. Call the U.S. and most of the world withoutmaking a permanent record on your telephone bill of whom you are calling. When you utilize these phone cards (debit calling cards), you take the first step in achieving complete privacy in your long distance phone or fax calling. OVERVIEW: The phone card is used like any other phone cards, instead of making a permanent record of your call with either a calling card or charged to your home phone, you use a pre-paid debit card. Useage is very simple:You first call a toll-free 800 number, and then you will be instructed by the computer to enter your PIN number. The computer will notify you of how many $ worth of calls you have left. Then you will be able to call your long distance number (U.S. or worldwide) with complete anonymity. The card can be used from any touch-tone phone, at home, the office or on the road from any pay phone without needing any coins. The computer will notify you when you have only one minute left on your card. HOW TO PURCHASE YOUR CALLING CARD: You send a $50 or $100 blank Cashier's check, or cash, to the address stated below. I have purchased a pile of PIN cards and I randomly select one and send it to you. The company I buy these cards from, keeps no records, if they did, all records of sales are to me in my name unfortunately. I keep no records of addresses or PIN numbers who I am sending to. After you receive your card you go about making your calls and then when you want to add more time to your calling card (recharge the card), This is where you gain another level of privacy, because I step out of the loop and you will communicate with Traceless, the providing company, directly. You send a money order or cash and your PIN number to the address provided on the card and they will recharge the anonyous PIN number with the amount sent. You put no name or return address on the envelope. Since all they did was send a pile of cards to me and I sent them out they have no way of knowing who what or where the cards went to. Alternatively, for those who have an offshore Visa, MasterCard or American Express accounts, you can set it up so that your PIN account can be credited by certain amounts when you hit a certain key while making phone calls to the special 800 number. If this option is appealing to you, let me know and I can send some more information. Also for those that need voice encryption that option is available. Again if you want more info on this let me know. THE COST: When making long distance calls the charge will be 35 cents per minute anywhere in the United States. If you make calls to Canada the charge is 70 cents. Prices to other parts of the world depend on where. If you need the list of the countries and their charges let me know, most countries of the world except some third world countries. If you have anymore questions please let E-mail me and I will try to answer them.Otherwise mail your checks and take your first step towards greater telecommunications privacy. Reach out and call without your telephone bill reaching back and haunting you. R & L PO Box 1492 Yakima, Wa. 98901

2 1

Re: kerberosV telnet
by Jef Poskanzer 17 Dec '03

17 Dec '03

<yawn> >I used to have a good deal of respect for Jef Poskanzer. He's written >a buch of good software over the years, especially his portable bitmap >manipulation stuff, and I found much of his other software to be >useful. I'd never dealt with him before, and I was suprised to >discover that he doesn't know how to behave in a civilized manner, and >doesn't deserve the respect. It always saddens me to find this sort of >thing out, but I suppose thats the way life is. > >Perhaps someone more gentle than I can explain to Jef that when people >try to help you and answer a question, even if you don't think their >answer is useful, that screaming obsenities at them (in private mail >he's called my information to him "bullshit", among other things) >isn't likely to serve your real interests. > >Perry > >Jef Poskanzer says: >> >Normally I like to answer inquiries, but it seems that Jef meets >> >answers with insults, so I don't see any reason to give him further >> >information. >> >> Not at all, Perry. It's only when a loudmouth gives *incorrect* >> answers multiple times that I start getting pissed. >> >> And I thank you for sparing the list any more of your "information", >> if it's of similar quality to what you've posted so far. >> --- >> Jef

1 0

Secret evidence in judicial hearings
by Brad Dolan 17 Dec '03

17 Dec '03

Links to crypto are weak (maybe!) but I think this may be of interest to some on the list: Associated Press reported yesterday: "A former NASA researcher has been ordered deported as a suspected North Korean agent following a hearing at which he was not allowed to see all the evidence against him. [...] Lee was ordered [deported] on Friday by federal immigration Judge Michael Suarez, partly on the basis of classified FBI information that Suarez refused to divulge to either Lee or his attorney, Herbert Gee. Lee said neither he nor his lawyer was allowed to attend the government's closing statements Wednesday."

1 0

Upgrade to Betsi
by rubin＠faline.bellcore.com 17 Dec '03

17 Dec '03

Update on Bellcore's Trusted Software Integrity System ------------------------------------------------------ The format of Betsi certificates has now been upgraded to accomodate multiple files. The md5sum program, which is included in the contrib directory of the pgp 2.6.1 distribution, takes a list of files or wildcards as arguments and produces a list of md5 hash sums followed by file names. The format of a request for certificate message is the same as before for one file, and as follows for multiple files: To: certify(a)bellcore.com Subject: certify -----BEGIN PGP SIGNED MESSAGE----- Bebeto J. Romario thumper.bellcore.com MD5 2ee29998b334297dcc32102eb857fbc3 Fontmap Version 2.1 c3e5704be89c4d4807d5fec11b1752e6 Great.Program.zip dc3a8031d65db8bb0ec3de046abe79b2 README 012ffa34521f97ae381fb5f11f837016 Trusted.Dist.tar.Z -----BEGIN PGP SIGNATURE----- Version: 2.6 iQB1AwUBLoGbvJti/eSkC5bZAQFudQL/W4u7zOE9yp8rTXsSQK2L9pfHIYNzOkRB g4lNKTHzFXgbEdN8+DzpB2mKCYYTNw+k/qP/Hui0yaG0oeksNYnqJN1zzB0vWhgG TyFzJqVop/QlYIlrItFr+LD1ebDBOYon =UGQZ -----END PGP SIGNATURE----- The paper at thumper.bellcore.com in /pub/certify/Betsi.ps has been updated to reflect this upgrade, and it is further explained there. I am currently working on writing mosaic pages to facilitate the process of sending various messages to Betsi. For more information on Betsi send a message to certify(a)bellcore.com with the subject: help. ********************************************************************* Aviel D. Rubin Email: rubin(a)faline.bellcore.com Bellcore (MRE-2M354) http://www.citi.umich.edu/users/rubin/ 445 South St. Morristown, NJ 07960 Voice: +1 201 829 4105 USA FAX: +1 201 829 5889

1 0