- cypherpunks-legacy - lists.cpunks.org

macworld crypto articles
by steven ryan 17 Dec '03

17 Dec '03

The current (11/95) issue of MACWORLD magazine has two good crypto articles in it. 1 - Protect your E-Mail by Bruce Schneier Good introduction for neophytes, the basic how and why. Get some reprints and give them away with PGP to your nonCypherpunk computer friends. 2 - False Security by Gene Steinberg They searched for an applications programmer *UN*skilled at cryptography to try and crack the password protection of the 8 best selling Mac programs. Quicken 5.0 was cracked in 5 minutes. Adobe Acrobat in 2 hours. Steven Ryan sryan(a)reading.com

1 0

Re: rejection of CJR
by Peter D. Junger 17 Dec '03

17 Dec '03

I happened to speak to Mr. Capilino at the Office of Defense Trade Controls this morning, and mentioned that the Commodity Jurisdiction Request for the T-Shirt had been returned and read him the message to that effect. He told me that that was the wrong address for mail, since it was used only for currier deliveries, and that they have stopped accepting even currier deliveries there since the Oklahoma city bombing. He suggested that those who want to apply for the Commodity Jurisdiction determination should call him at 703-875-7396. He will fax the current information on how to submit a CJR to anyone upon request. He did not say so, but I rather think he looks forward to getting the T-Shirt request. -- Peter D. Junger--Case Western Reserve University Law School--Cleveland, OH Internet: junger(a)pdj2-ra.f-remote.cwru.edu junger(a)samsara.law.cwru.edu

2 1

Usenet: pseudonymity's killer app
by pjm＠ionia.engr.sgi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Risks Digest 17.42 contains a Boston Globe story by Simson L. Garfinkel detailing the risks of the DejaNews (http://dejanew.com) Usenet archiving service. Not only does this service archive Usenet postings, it provides a "sophisticated system for retrieving 'author profiles' of the individuals who have posted messages." Many people are upset at what they view as an invasion of privacy. The article notes that: > But Usenet has actually been archived for a long time. Many schools, > for example, have backup tapes containing Usenet messages dating back > many years. Furthermore, says Madere, the National Security Agency and > possibly other law enforcement or intelligence organizations has been > cross-referencing and indexing Usenet for quite some time. "I know for > a fact that they do have a text retrieval database which contains > Usenet," says Madere. Creating a searchable index of Usenet " was > already done for what people might consider to be sinister purposes," > says Madere. "What we have done is made it searchable for useful > purposes." DejaNews will be archiving the alt, talk, and soc groups beginning later this year. That could result in many more people becoming upset at the service. It would appear that ISPs could make money from offering anonymous or pseudonymous accounts to their customers who would rather not have their postings used by marketers, employers, or neighbors. Providing protection from junk mailers is also more politically defensible in this society than providing protection from the government. This could be the catalyst for widely used and accepted pseudonymity on the net. Patrick May -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMI/tze5Yg08fDKehAQHUiwP/ePOJeQ5+R0+h0QQVJEziWFZvz0qCMooA 6jQXjDxWpxydas+KYCe9dt2yekjsh3Lr/bc+VHDtuTuE4l+m3HIFqk7uWxYk7iB6 fjIhuPMcmVSIg+lPOTFIlhfypmwE/6c4FHXiGb6N02Pc5E22BJFjECOdx1RNlJwv A8DbV/lAyGI= =FjnE -----END PGP SIGNATURE-----

2 1

Diane Rehm Show just ended
by Carl Ellison 17 Dec '03

17 Dec '03

You just finished a show on terrorism (WAMU, 10-11am, 10/26/95). Thank you. Some of your callers said most of what I would have said and I found that pleasing, since I wasn't able to call in. However, there was a theme which kept coming up and which wasn't addressed specifically. You might hold it in mind for future shows on terrorism: The FBI representative was saying that the goal is to *prevent* terrorism, not just to investigate and prosecute crimes after the fact. I heard Director Freeh (on 10/19 on All Things Considered) say something similar -- that the FBI's job was to protect the people (which can be be translated into "prevent terrorism"). This seems to be a major problem and perhaps the source of the concern about civil liberties. Terrorism might be a product of an organized, identified group and infiltration of that group might enable the FBI to prevent acts of violence. Of course, the permission to infiltrate suspicious groups has been used in the past to justify infiltration of non-violent but unpopular groups like the Sanctuary Movement. However, many of our recent terrorist acts appear to be the result of individual actions -- not those of organized groups. [Unabomber, OK City, train derailment] Infiltration is out of the question in such cases. The only way to prevent such acts is to put the entire population of the US under surveillance -- an authentic instance of Big Brother from 1984. The conclusion to me is that we can not task the FBI with the job of prevention of terrorism. I suspect that we must insure that the FBI is formally and carefully restricted to the job of investigating and prosecuting crimes once they occur -- allowing the threat of almost certain prosecution to serve as a prevention -- rather than with the impossible job of prevention of such crimes. ------------------------------ Meanwhile, there was one question I had that no one answered: I didn't like history much as a student, but I vaguely remember other periods of domestic terrorism: bombings in the early 1900s, acts of violence associated with the labor movement, sabotage during WW-I conducted by German agents. There may have been many others. This seems to be a feature of life -- nothing recent, nothing special, frightening from its news coverage but not a serious threat to any one individual (because of the actual statistics around the threat -- comparing my chance of injury due to auto accident, plane flight or terrorist act (for example)). It would be interesting to know why we had the pause in terrorism during the Cold War -- or, for that matter, if we actually did. Could it be that the apparent return of terrorism is actually a perception rather than a fact -- as a result of shift in focus of the news media? - Carl +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +---------------------------------------------- Jean Ellison (aka Mother) -+

1 0

MD5 and ITAR questions
by Simon Spero 17 Dec '03

17 Dec '03

I can't remember the exact details, so could someone give me a quick refresher- which of the following are considered ok under ITAR? MD5 as a checksum keyed MD5 for authentication keyed MD5 as a stream cypher Thanks Simon --- (defun modexpt (x y n) "computes (x^y) mod n" (cond ((= y 0) 1) ((= y 1) (mod x n)) ((evenp y) (mod (expt (modexpt x (/ y 2) n) 2) n)) (t (mod (* x (modexpt x (1- y) n)) n))))

1 0

Hello
by Xavier Naveira 17 Dec '03

17 Dec '03

Hello!!!!

1 0

Cypherpunks Lite
by hshubs＠BIX.com 17 Dec '03

17 Dec '03

Would the person who does this, or someone who can point me at him, contact me via e-mail please?

4 3

Re: Need a "warning" graphic of some kind for CDA
by tomservo＠access.digex.net 17 Dec '03

17 Dec '03

>At 01:48 PM 2/4/96 EST, Greg Broiles wrote: >How about the circle-slash "no" symbol superimposed on the Constitution? Hmm, I kind of went the other way. I have a gif of a baby carriage in the standard red circle and slash. Anyone who wants it, feel free to use it. Resize it, reshape it, share it with your friends. (I feel much better about buying all that clip art now.) It's at: http://www.access.digex.net/~tomservo/gif/no_kids.gif Other suggestions? Feel free to e-mail me. I'll dig up what I can. (Next up: the "PGP-friendly" logo. . .) Scott -- Scott Fabbri tomservo(a)access.digex.net Later. Later. I'm watching hockey. Finger for PGP key.

1 0

Apology to Netscape.
by carolann＠censored.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jeff Weintstein corrected me with: > This is what our press release said: > > An updated version of Netscape Navigator 1.1 for Mac OS > and Unix and Netscape Navigator 1.2 for Windows 3.1 and > Windows 95 will be available for downloading by existing > customers on the Internet next week. My apologies for the misquote. It only then makes the trading facts worse. Love Always, Carol Anne ps On the asides kind of things, do you realize the Netscape stock base of 5,000,000 shares is not a big sharebase? Coca-Cola's is 1,300,000,000. And by standards, your stock is really unstable. If Coca-Cola moves 3 points there'll be a trading halt, for the buying/selling imbalance will be too much. Even if only for 1 min. The trading halt gets the good or bad news onto "The Street". -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMGUCaYrpjEWs1wBlAQF9ZAP6AkMCsveSU/E8KFDi84urnAR2KlXT42rS l+9tHh33ZWbM6VmHUMkqelM11vc7zU1eWLhXlYHaoOqwGuTef9irQigbnr+HwYKL Px9480/Chm59RWCG6j4pp4d0xUQO9Pj0lbpIecn72eDYReRIgh5+MU0jOCNdUNLe RvP7XvYI570= =Nb9y -----END PGP SIGNATURE----- -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

Re: Netscape for Linux?
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:42 PM 9/23/95 -0400, you wrote: >It seems to me that you folks are going out of your way to deny the >fact that the Linux market exists. I think that its because you are >embarassed that all these people with a $20 operating system are >throwing money at you while all the folks with $10K operating systems >aren't talking to you at all. > >While you may WANT to have all your sales be for OSF/1 machines or >solaris, but refusing to support Linux and ignoring the demand for >your products by the Linux community just because you don't think it >would sound as impressive, is actually quite childish and doesn't make >any financial sense. Foo. Supporting applications in a professional way on Linux is _tough_; everybody's got their own self-hacked copy that may have started out as SlackOS 4.1.3 but has the TooManyNotes Sound Widget replacement and has the XBrokenX video driver instead of the original one that didn't work on the TiltedSquareSneakyVideoCard and a way-cool new Obfuscated File System. It's like supporting things on "Unix" was back when everybody had source and a different flavor of M680x0 box. You can't just ask "Have you changed the AUTOEXEC.BAT since the machine came from the factory?" like Windoze app-vendors. Netscape may not have ever been _compiled_ with the compiler version the user has, much less tested on that kernel version, and the user may or may not know if their X Window System really is installed right or the TCP/IP connection works well and has working DNS support. Sure, it's easy to charge money for shipping the stuff with a diskette and a manual, but not doing so until they're ready to provide high-quality support isn't childishness, it's ethics (well, and/or bad-reputation-avoidance.) Now, I haven't checked whether they've trained all their people who answer phone calls from the public to acknowledge that there is an unsupported Linux version for folks who don't mind dealing with unsupported software, or if they've even got it on their Web site; the current version is there for ftp. #--- # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

5 5