- cypherpunks-legacy - lists.cpunks.org

Re: Playing Cards - Caution!
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 6:59 PM 11/19/1996, Ian Goldberg wrote: > I studied the "imperfect shuffle" thing in my Randomized Algorithms class > last year. If I remember correctly, an "imperfect shuffle" is something like > this: > Cut the deck into two piles, left and right. The number of cards in > (say) the left pile is distributed binomially. > Drop one card at a time to form the new deck. A card is dropped from the > left or right pile, with probability proportional to the number of cards > remaining in that pile. > - Ian "someone else can figure out the entropy of this..." This is the approach described by Diaconis. I think his book will show you how to calculate the entropy, too. (It's a cool book. The same section shows how to do a magic trick using three riffle shuffles. A member of the audience inserts the mystery card in the deck after the three riffle shuffles. Then the magician spreads the cards on the table and looks for one which does not line up with one of the several interleaved sequences in the deck.) However, it is not obvious to me that this is how it works every time, for sure, guaranteed, no doubt at all, in the real world. Diaconis mentions that the amount of entropy varies very substantially by shuffler. I also judged his experimental data to be limited. Furthermore, I am suspicious of the model itself. A binomial distribution is convenient to use, but I don't think that's how people cut cards in practice. I think that it is a much more "pointy" distribution with lower entropy. When I cut the deck there are less than 4 bits of entropy. But, I have to admit that if I worked my way through the book and learned a little related math, I might be convinced. But, even then I would probably judge it to be too tenuous for security applications. Incidentally, some big names have worked on this problem, like Graham and Shannon. Peter Hendrickson ph(a)netcom.com

1 0

Customer Service?
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Veracity suspect, but an interesting crypto story nonetheless... >Subject: Tech support story (fwd) > >---------- Forwarded message ---------- > [Urban legend of the day...] > > Subject: Stressful tech call > To: Customer Service; TechSports > > This falls into the "Why did it have to happen on *MY* shift?" category. > > A friend of mine is a chief engineer at SuperMac, and he related this > story to me. > > SuperMac records a certain number of technical support calls at random, > to keep tabs on customer satisfaction. By wild "luck", they managed to > catch the following conversation on tape. > > Some poor SuperMac TechSport got a call from some middle level official > from the legitimate government of Trinidad. The fellow spoke very good > English, and fairly calmly described the problem. > > It seemed there was a coup attempt in progress at that moment. However, > the national armoury for that city was kept in the same building as the > Legislature, and it seems that there was a combination lock on the door > to the armoury. Of the people in the capitol city that day, only the > Chief of the Capitol Guard and the Chief Armourer knew the combination to > the lock, and they had already been killed. > > So, this officer of the government of Trinidad continued, the problem is > this. The combination to the lock is stored in a file on the Macintosh, > but the file has been encrypted with the SuperMac product called Sentinel. > Was there any chance, he asked, that there was a "back door" to the > application, so they could get the combination, open the armoury door, > and defend the Capitol Building and the legitimately elected government > of Trinidad against the insurgents? > > All the while he is asking this in a very calm voice, there is the sound > of gunfire in the background. The Technical Support guy put the person on > hold. A phone call to the phone company verified that the origin of the > call was in fact Trinidad. Meanwhile, there was this mad scramble to see > if anybody knew of any "back doors" in the Sentinel program. > > As it turned out, Sentinel uses DES to encrypt the files, and there was > no known back door. The Tech Support fellow told the customer that aside > from trying to guess the password, there was no way through Sentinel, and > that they'd be better off trying to physically destroy the lock. > > The official was very polite, thanked him for the effort, and hung up. > That night, the legitimate government of Trinidad fell. One of the BBC > reporters mentioned that the casualties seemed heaviest in the capitol, > where for some reason, there seemed to be little return fire from the > government forces. > > O.K., so they shouldn't have kept the combination in so precarious a > fashion. But it does place, "I can't see my Microsoft Mail server" > complaints in a different sort of perspective, does it not? > Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Britannica Online Subscription Offer
by beta＠eb.com 17 Dec '03

17 Dec '03

Dear Pathfinder Free Trial Participant, Thank you for participating in this special free trial subscription offer of Britannica Online exclusively for Time Warner's Pathfinder users. This free trial will be ending soon, and I would like to extend you a special discount to encourage you to become a Britannica Online subscriber. I hope you have had ample opportunity to sample all Britannica has to offer, and if you haven't used our service recently, I encourage you to take these *final weeks* to experience the only information resource offering this degree of depth, breadth, and interactivity. As a Pathfinder reader you know that NASA recently sent a Mars probe to begin a 10-month interplanetary voyage. Read our "Mars" article to find out what scientists have already discovered about the Red Planet, then follow an Internet link to the Los Alamos National Laboratory to view craters on Mars. Are you interested in health and nutrition? Review the extensive "Nutrition" article in Britannica Online, and look for the nutrient content in what you had for breakfast. Planning a trip over the holidays? Visit our "Nations of the World" feature to review the history, map, flag, and national statistics of the country you're considering before you finalize those travel plans. So whether you're interested in learning more about Mars, troubles in Iraq, or the latest hurricane, Britannica Online is regularly updated to give you access to articles on people, places, and events around the world. It includes the text of the entire 32-volume Encyclopaedia Britannica, plus more than 2100 articles not available anywhere else. Articles are written by notable scholars in their fields of expertise, including more Nobel Prize winners than any other encyclopedia. For about 50 cents a day you'll have access to the only reference source that combines the information power of the world's premier encyclopedia with thousands of direct links to related information. To sign-up for Britannica Online -- * Access the registration form at http://www.eb.com:195/bol/ by selecting either the monthly or annual subscription option * Enter PTF149A in the promotion code box for an annual subscription of $149 (our normal $25 registration fee will be waived for you as a Pathfinder user) Enter PTF149M in the promotion code box for a monthly subscription of $14.95 * Review to make sure information is complete and accurate, then submit Every day you and your family can learn something new about the events that are making history now. Your free trial will end in two weeks, so please don't let this opportunity pass you by. I'm positive you'll discover that finding quality information has never been easier. Sincerely, Lisa Girolimetti Marketing Manager, Online Products Encyclopaedia Britannica, Inc.

1 0

Re: Bounty Server, Revisited.
by Ian Grigg 17 Dec '03

17 Dec '03

Hi, Snow, > I have started drafting a proposal statement for the Bounty server. Wow, you've gotta move fast in this game :)) > Bounty Server, The proposal: > Version 0.1 > > Abstract: [chop where agreed or not disagreed] > Background: > It is the "Copylefted" software that interests me at this point. OK, although for my model, I am assuming that all forms are covered. > The proposal: > > What I am going to attempt to do is to set up a "Bounty Server" where > someone can iniate a "bounty" on a peice of technology. The initator > will write up a set of specifications for the technology, and an initial > award to be paid to the developer. They then post it on the server and > send their initial "bid" to the organization. Separate this out, for clarity of model. The initiator (I used Proposer, and called her Alice coz Alice always initiates) proposes the specification, or task. There is no need for Alice to submit an initial bid, although they have that option, as a buyer. BTW, bid to do what? Using market terminology, I have assumed thay bid is to buy, that is provide cash. Offer is to sell, that is provide software. Ah, yes, bid is add to bounty. > This is the "bounty". Other people can add to this bounty, allowing the > totals to add until someone claims that bounty by providing proof of > development to the initiator of the bounty. In software terms they would > upload the software to the server and notify the originator of the bounty, > and the server operators. Other technology will be figured out as it > becomes necessary. This is where I have put most of my efforts, because I need to design the microstructure that is built into our market. > Originally I was going to put the stipulation in that the software written > must be Copylefted. I decided that that wasn't really necessary, but > rather simply desired. To aid in that desire, I am going to build in > an initative to releaseing the software "copylefted". Absolutely - let the market decide. Some of us, for example, do not like copyleft. > To get more specific: [chop] > The first developer to upload a _working_ package to the server will > be awarded the total bounty, ... This worries me. If I, as a junior programmer, am looking to enter the market, I will have the daunting task of beating everyone else. Real life doesn't work that way - there are ways in which I can pick up some newbie tasks for low money, so as to build up experience and/or reputation. I guess the notion of bounty is just that - first one takes all. However, I think that the solution might be a bit limited in the long run. Interesting in that my proposal leads to task distribution by awarding contracts, your proposal leads to task incentives by rewarding speed. > "First" will be soley determined by the time stamp of the server. As soon > as the package is uploaded, the initiator and the server adminstrator > will be notifed, and the bounty marked "claimed". If the package is > accepted by the initiator, the bounty will be marked "closed", the > package moved to an FTP site for distribution (if Copylefted) or > moved offline if not (archived copies will be kept for legal reasons-- > more on that later). At that point a check for the developer will > be cut (or ecash mailed if that works out). OK, my proposals specifically assume no need for a "decision" by Alice. That's not to say either is right, it's just that I prefer to design something that eliminates the individual decision rather than cope with the complexities. I believe it will result, in the end, in a more efficient market. > The Server Adminstrator will also do an cursory check to make sure that > there are no obvious copyright violations. > > In the event that there is a conflict between the initiator and the > developer, the claim will go into adjudication. The server adminstrators > decesion is final, and he will make every effort to settle the claim > fairly. Adjudication will incur an additional fee (see the fees section). Same as above, no adjudication in my system. Although, it is possible to add underwriters, by simply making the task offerers (Bob and Carol) into bond writers who front for programmers. > Status: > > At this point in time I am (obviously) still in the process of developing > the procedures. I have registered a Domain Name (bounty.org) and I have > a couple promises off assistance in certain areas. As well, I have > a server to start off with. Wow, *gotta* move fast. As I say, our stuff is based on a lot of pre-existing software, so we make a lot of assumptions. Given our different approaches we may end up with competing systems rather than one, but that's fine, indeed highly valuable as an experimental approach. What's financing you in this? Or should I say, monetarily enthusing? I have started writing (last night :)) this all up as a paper for presentation to FC97. If you want, we could collaborate, or I will just document your efforts, and concentrate on presenting mine. My efforts are now at http://www.systemics.com/docs/papers/task_market.html TTFN iang.

1 0

List membership
by Robert Barnes 17 Dec '03

17 Dec '03

Is cypherpunks subscribed to some CNET new service list by design or accident? I looks like SPAM to me. </enter confession mode> I must admit that in my frenzy to unsubscribe I attempted to unsubscribe cypherpunks. </exit confession mode> RAB -------------------------------------------------------------- Robert Barnes Phone: +61 7 32529722 Engineering Manager Fax: +61 7 32571403 Tritronics (Australia) Pty Ltd Email: robertb(a)tritro.com.au PGP Key fingerprint = 02 A6 22 5E 26 D3 7C 4D E2 91 9E 15 AC EA B1 58 Send e-mail with "get key" in the "Subject:" field to get a copy of my public key

1 0

test new web site
by Phiberelic Phreaker 17 Dec '03

17 Dec '03

look at my page and tell me how you like it if you dont like it please tell Mr.Angry , just click on the un happy face on that page for a quicker reply PhReAkInG iS a ViOlEnT pOiSoN. iT cAnNoT Be ApPlIeD eXtErNaLlY tO aNiMaL oR hUmAn TiSsUe WiThOuT sErIoUs InJuRiOuS rEsUlTs. It CaNnOt Be TaKeN iNtErNaLlY wItHoUt InDuCiNg VoMiTtInG, bLiNdNeSs, AnD GeNeRaL pHySiCaLlY uLtImAtElLy ReSuLtInG iN dEaTh. PhReAk ThE pLaNeT--http://www.angelfire.com/ne/PhreakThePlanet/index.html PhIbErDeLiC PhReAkEr

1 0

testing
by Phiberelic Phreaker 17 Dec '03

17 Dec '03

PhReAkInG iS a ViOlEnT pOiSoN. iT cAnNoT Be ApPlIeD eXtErNaLlY tO aNiMaL oR hUmAn TiSsUe WiThOuT sErIoUs InJuRiOuS rEsUlTs. It CaNnOt Be TaKeN iNtErNaLlY wItHoUt InDuCiNg VoMiTtInG, bLiNdNeSs, AnD GeNeRaL pHySiCaLlY uLtImAtElLy ReSuLtInG iN dEaTh. PhReAk ThE pLaNeT--http://www.angelfire.com/ne/PhreakThePlanet/index.html PhIbErDeLiC PhReAkEr

1 0

testing new Home Web site
by Phiberelic Phreaker 17 Dec '03

17 Dec '03

try this site and tell me how you like it if you dont like it then message Mr.Angry on that page PhReAkInG iS a ViOlEnT pOiSoN. iT cAnNoT Be ApPlIeD eXtErNaLlY tO aNiMaL oR hUmAn TiSsUe WiThOuT sErIoUs InJuRiOuS rEsUlTs. It CaNnOt Be TaKeN iNtErNaLlY wItHoUt InDuCiNg VoMiTtInG, bLiNdNeSs, AnD GeNeRaL pHySiCaLlY uLtImAtElLy ReSuLtInG iN dEaTh. PhReAk ThE pLaNeT--http://www.angelfire.com/ne/PhreakThePlanet/index.html PhIbErDeLiC PhReAkEr

1 0

test new web site
by Phiberelic Phreaker 17 Dec '03

17 Dec '03

look at my page and tell me how you like it if you dont like it please tell Mr.Angry , just click on the un happy face on that page for a quicker reply PhReAkInG iS a ViOlEnT pOiSoN. iT cAnNoT Be ApPlIeD eXtErNaLlY tO aNiMaL oR hUmAn TiSsUe WiThOuT sErIoUs InJuRiOuS rEsUlTs. It CaNnOt Be TaKeN iNtErNaLlY wItHoUt InDuCiNg VoMiTtInG, bLiNdNeSs, AnD GeNeRaL pHySiCaLlY uLtImAtElLy ReSuLtInG iN dEaTh. PhReAk ThE pLaNeT--http://www.angelfire.com/ne/PhreakThePlanet/index.html PhIbErDeLiC PhReAkEr

1 0

Re: Remailer Musings
by trestrab＠GVSU.EDU 17 Dec '03

17 Dec '03

Lefty writes: >There is not, to the best of my knowledge, any such thing as "a legal >pseudonym". DBAs (doing business as) registrations are "legal psuedonyms", although they don't have any bearing on the discussion at hand. (Just a FYI.) Jeff trestrab(a)gvsu.edu

1 0