- cypherpunks-legacy - lists.cpunks.org

Forming a multinational
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

Hi, I am physically located in India and want to start up a US firm that will operate in India. Basically the firm will be a multonational with regional offices in couple of countries, to start with India and prolly one somewhere in Europe sometime later. The business involves a tie up with another US firm. These people will obviosly require USD payements, while most of the money we'll make will be in Indian rupees, since initially we'll be _actually_ operating only in India. The problems here are : x. Can I, an Indian citizen start a US firm? x. Is it _legal_ to transfer Rupees funds to our root US firm and buy dollars with it to pay our partners there? x. Who will sell us USDs? Foreign Exchange offices? Firms like Accu-Rate? x. What is the tax situation in US for non-citizens? x. Is US the best place to start such a firm, primary need is to be able to pay dollars to US partner, while earning in rupees, without any legal hassles. Any help will be appreiciated, Best, Vipul -- Vipul Ved Prakash | - Electronic Security & Crypto vipul(a)pobox.com | - Internet & Intranets 91 11 2233328 | - Web Development & PERL 198 Madhuban IP Extension | - Linux & Open Systems Delhi, INDIA 110 092 | - (Networked) Multimedia

1 0

Where do I send this to get them stopped?
by Lile Elam 17 Dec '03

17 Dec '03

Hi all, How can we stop such aweful programs? Is there a group I can send this to who trouble shoots spam? thanks, -lile (a webmaster(a)art.net) ----- Begin Included Message ----- >From 10ehnmugs6l6(a)MAIL-CLUSTER.PCY.MCI.NET Sun Nov 24 11:40:48 1996 Date: Sun, 24 Nov 1996 12:45:02 +0000 From: Emerald(a)earthstar.com Subject: FREE demo To: Emerald11249601(a)MAIL-CLUSTER.PCY.MCI.NET Reply-to: Emerald(a)earthstar.com MIME-version: 1.0 X-Mailer: Pegasus Mail for Windows (v2.32) Content-Type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Priority: normal Comments: Authenticated sender is <10ehnmugs6l6(a)mail14.MCI2000.com> Content-Length: 175 Are you interested in sending bulk e-mails? I know of a great new program! You can even test out the demo for FREE! Send me an e-mail for more details. Emerald(a)earthstar.com ----- End Included Message -----

1 0

A source of entropy?
by inssdl＠dstn21.dct.ac.uk 17 Dec '03

17 Dec '03

Last weekend I spent time formatting a little over 100 new floppies. When I was staring at the monitor between changes, I started looking at the volume serial number that was being thrown up for each disk. These *appeared* to be unpredictable from the previous serial number given. If the serial number is represented as xxxx-yyyy then sometimes yyyy would be one less than the previous yyyy but xxxx always seemed to be "random". The disks were all brand new, no errors (from a couple of boxes of 50 and some odd ones), formatted at the Win95 DOS prompt with 'format a: /u' no volume labels and pressing 'y' to format the next disk. Would anyone like to comment on the possible entropy from these serial numbers, even if it's only to say "Don't be daft, DOS derives the numbers like this..." I'll probably be doing a similar number next weekend. If any interest is generated from this post, I could always record the serial numbers given to the next batch to look for correlations. (Please don't reply with 'invest in a bulk-formatter' - I can't afford one right now.) ********************************************************************** David Lucas PGDip Software Engineering @@ BEng(Hons) Civil Engineering Postgraduate Software Engineer, University of Abertay Dundee, SCOTLAND @ E-mail: inssdl(a)dstn21.dct.ac.uk @ 2+2 = 5 for large values of two @ If you're not living on the edge, then you're taking up too much space Organisations can't have opinions, only people can and these are mine. Dave's Doorstep is back!!!! - http://river.tay.ac.uk/~i95dl/index.html **********************************************************************

2 1

Skipjack patent and GATT
by Mark M. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Since Skipjack is protected by a secrecy order, the NSA can patent the algorithm without disclosing it. As soon as it is reverse-engineered, the patent is officially issued and expires 17 years from the time it was issued. GATT now changes the patent laws so that a patent expires 20 years after application. Does anyone know how this will affect the Skipjack patent? If the secrecy order is considered application, then that would shorten the lifetime of the patent considerably (assuming it isn't disclosed or reverse- engineered any time soon). I doubt this is the case, and I suspect that either the 17 year lifetime will still apply or the patent will expire 20 years after the patent is issued. TIA. Mark - -- finger -l for PGP key PGP encrypted mail prefered. 0xf9b22ba5 now revoked -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQEVAwUBMpoTWyzIPc7jvyFpAQFHywf8Do9Fni5GC0kfL0XR7FGM6yLhVwLNgf4h XJZlpMMML46MWmmqwjfJnCgi+ktMQMHxTT2mCYA2eIzEBq0FbAc8M9340Xkx0KPH L1qi2tQ1ZCKnUdVWYENYL65uJAk4dB3lgsnmBJwNb80GD3tP6LVSq5wFSa2pz/Pu 3HO5YNUHmTfvrtZE2wt/7CMwJNxEPTKpTGAbDnwkri6y2u2aDrUD1nhnlfzqUz86 85TNTIpqPo06d3g1wKSKmddwqYeu3kpyu0khdUzS5rjj/7sJAECLQi2IlXkXOLjo OsaKG+sl9UNSYn9wrU+HvE9BbhlmC4B1sfOHPBqJDQ405QWurQHSZg== =sRxa -----END PGP SIGNATURE-----

1 0

Re: Smart card attacks vs. clipper?
by Matthew J. Miszewski 17 Dec '03

17 Dec '03

(snip) > Seems like it's a bit of a different story, since in the Clipper's > case the algorithm is (ostensibly) unknown, but I'm just curious as > to whether there is some compromise of its security-through-obscurity. Actually, in a more recent attack to be published at USENIX (if i remember correctly) the attack being performed can also be utilized to help determine unknown algorithms. I will try to dig up the reference (unless someone gets to it first). Matt > -- > ______c_________________________________________________________________ > Mike M Nally * IBM % Tivoli * Austin TX * How quickly we forget that > mailto:m5@tivoli.com mailto:m101@io.com * "deer processing" and "data > http://www.io.com/~m101/ * processing" are different! > >

1 0

Donate your spare cycles to a good cause
by Lucky Green 17 Dec '03

17 Dec '03

It's that time of year. Please donate the spare cycles on your Pentium or PowerPC to a good cause and help find a new Mersenne prime while you sleep. See http://ourworld.compuserve.com/homepages/justforfun/range.htm for details. Seriously, folks, what is your PC's CPU doing half the time? I thought so. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred

1 0

[CRYPTO] Bank Cards, Interac, Bank Machines, etc
by C Kuethe 17 Dec '03

17 Dec '03

I'd like to hear what everyone knows about security holes in bank machines. I don't believe in that little bank machine cracker they used in Terminator 2, but I'm interested in the algorithms and protocols the ABM uses to communicate w/ the home bank. My bank says they have some special chip inside the ABM to secure the transfer, and that's all they told me. I also heard that the magnetic stripe on the back contains your card number (the shiny metallized numbers on the front) encrypted using DES using your PIN as the key. Way out to lunch? Too close for comfort? Any knowledge...heck, even rumors.... would be appreciated. That way we can see what kind of FUD is out there. My bet is that the magstrip with DES'd card number on it theory is FUD. But my bank did say that there were some fraudulent transfers (read successful hits) in Europe. I bank with Alberta Treasury Branches, and they said their hardware is immune to the attack that was performed in Europe.... I will have to dig a bit on that one. Anyway, I hope I hear something from all of you soon... -- Chris Kuethe <ckuethe(a)gpu.srv.ualberta.ca> LPGV Electronics and Controls http://www.ualberta.ca/~ckuethe/ RSA in 2 lines of PERL: http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Re: KILL cypherpunks !!!
by Eric Wilson 17 Dec '03

17 Dec '03

At 07:28 PM 11/25/96 -0500, you wrote: >On Mon, 25 Nov 1996, aga wrote: < whole bunch of stuff > >> This is a world-wide internet problem that you are about to get >> taken care of. You will be among the first locations to be >> eliminated. And just remember that your termination is your own >> doing. You had your chance to keep the fucking cypherpunks list >> OFF of your e-mail to me, and blew it. > >Oops, now what will I ever do? Wow, I'm going to miss cypherpunks. I didn't post much, but I've always been an avid reader (sniff). If I only had it to do all over again... Oh, by the way, since you're planning on doing away with things, could you get rid of some of these outfits that do the mass e-mails, thanks in advance. >> I pump iron and run three times a week. And as a Tae Kwon Do >> black belt holder, I get lots of physical activity. I am in >> better physical shape than any other man that you know. > >I have a date this weekend already, thanks. I find you're martial arts reference very interesting. But if you were truly any good, you wouldn't be waving it in everyones face like a banner. I find your demeanor to be that of someone that has never practiced the warrior arts. If you had, you'd have developed more respect for your fellow human beings. I'm guessing you're a very lonely person, whos only way of getting attention is to try and cause a conflict. Share your pain with us, and together we'll grow stronger ( Star Trek reference ;)). But if you can't do that, shut off your computer ( or leave your terminal), and go find someone to talk to, like a counselor. Eric Wilson ----------------------------------------------------------------- Join the BugList! "How many times?" The Blind Man http://case.cioe.com/~serw30

1 0

Re: Another Nutty Idea about SPAM
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Steven Garman wrote: > I have had yet another twisted idea. I would be interested in your thoughts. > > Once method of combatting the spammers is to use disinformation. For example > we use new addresses for their "remove" lists to check on their honesty. > > What about attacking the lists themselves with false data? Say you run a site. > You can make and delete accounts as you please. So, make a whole bunch of > new accounts, and submit them by various means to places that will probably > use them in bulk e-mail lists. Then, delete the accounts. Viola, the lists > have some worthless addresses. Another nutty idea: to create a database of people who do NOT want to receive unsolicited advertisements, and make it widely available. The obvious problem is that some very uncsrupulous spammers would want to grab this database and use it as a source of email addresses. This problem has a solution, however: instead of distributing people's email addresses, distribute MD5 checksums of their addresses. For example, an entry for ichudov(a)algebra.com would be b51175dae78f25427351d5e3ff43de30 There is no way to guess the original text from an MD5 checksum. Spammers should be advised to exclude all addresses with MD5 checksums from that database from the recipient list, and include instructions on how to get one added to the database into their spams. Database maintainers could even provide a email filter-bot that would accept recipient lists by email and send back the same lists, but WITHOUT addresses that wish not to receive spam. This way stupid low-tech spammers (who make up the majority) will be able to process their email lists quickly and easily. This database may be maintained centrally. Users may be able to sign up for inclusion into that database by email or by filling out a Web-based form. Identity verifications may be done by using cookie protocol. - Igor.

2 1

market for hardware RNG?
by jim bell 17 Dec '03

17 Dec '03

I'm considering building a PCB to make a hardware random number generator. My first impression is that it will consist of a reverse-biased zener (for a broadband source of uncorrelated white noise) driving one of those one-chip FM recivers, with the audio output driving an 8-10 bit flash A/D convertor. Fairly simple. For cryptologic applications, the output would have to be hashed down to a somewhat smaller output of bits since not all outputs are equally probable, but I suppose after such massaging it could produce at least 2 bits of randomness per sample at a 10 kilosamples per second or so, possibly much more with a wideband receiver chip. But on thinking about this a little more, I began to wonder if anybody really wants this. Pessimistically, it occurs to me that: 1. Many if not most people don't even understand why a hardware RNG is desirable. 2. Users of programs like PGP today already get at least a fairly decent RNG already. Would they want better? (I'm not suggesting a total replacement; I assume that the output of any hardware RNG would be hashed with more "traditional" PC sources, like disk timings, keyboard timings, etc, which should deter attempts to attack just the hardware part.) 3. Even hardware RNG's aren't "perfect": they could be subverted, replaced, or perhaps influenced. Would someone who was sufficiently sophisticated as to recognize the need for it actually accept a real, functioning device? On the other hand... if this kind of pessimism had infected Phil Zimmermann before he wrote PGP 1.0, he might have deleted the first 50 lines of code, erased the file, and said, "fuck it!" Jim Bell jimbell(a)pacifier.com

2 1