- cypherpunks-legacy - lists.cpunks.org

Re: e$: The Demographic "Transaction" (was Re: Schelling Points...)
by Arun Mehta 17 Dec '03

17 Dec '03

At 19:37 29/07/96 +-200, Bart Croughs wrote: >The only effect of more stringent enforcement of anti child-labor legislation is to harm the children involved. You may think that the millions of families in Third World countries who are too poor to provide for their children, will be magically become rich enough to send their children to school once the anti child-labor legislation will be enforced. < This is getting off-topic, if there is such a thing on this list, but anyway... of course legislation alone is no good. Typically, it is accompanied by efforts to provide alternate livelihood to the older children or parents, free schooling, etc. > Child labour in the West didn't stop because of anti child-labour laws; it stopped the moment the people became rich enough to provide for their children, thanks to the capitalist revolution in the 18th & 19th century. The same path will have to be followed by the Third World countries today.< Take your point, though we may be talking chicken and egg here. If you have lots of children, you and your children never will become rich enough to change... >Instead of posting to the net to increase outrage about the violations of harmful child labour laws, you better begin posting to the net to increase outrage about the socialist governments in the Third World that keep their populations in poverty.< Socialism as an economic philosophy is fairly discredited, and is on its way out without my expressions of outrage needed to help it along. Yet, the capitalist economy seems to be no better at dealing with extreme poverty. Arun Mehta Phone +91-11-6841172, 6849103 amehta(a)cpsr.org http://www.cerfnet.com/~amehta/ finger amehta(a)cerfnet.com for public key

1 0

"Filter"software for money laundering
by tcmay＠got.net 17 Dec '03

17 Dec '03

(Apparently the Poles are seeking tools for controlling the economic transactions of its citizen-units. Thanks to Bob for forwarding this to us. I am copying Andrzej Adamski on my response.) At 2:59 PM 7/29/96, Robert Hettinga wrote: >--- begin forwarded text >Date: Mon, 29 Jul 1996 16:06:53 +-200 >Reply-To: Law & Policy of Computer Communications > <CYBERIA-L(a)LISTSERV.AOL.COM> >Sender: Law & Policy of Computer Communications > <CYBERIA-L(a)LISTSERV.AOL.COM> >From: Andrzej Adamski <aadamski(a)CC.UNI.TORUN.PL> >Subject: "Filter"software for money laundering >Comments: cc: "comcri-l(a)man.torun.pl" <comcri-l(a)man.torun.pl>, > "lacc(a)suburbia.net" <lacc(a)suburbia.net> >To: Multiple recipients of list CYBERIA-L <CYBERIA-L(a)LISTSERV.AOL.COM> > >Sorry for cross-posting this message: > >Dear All, > > Are you familiar with any > software or any listing of producers of software to be used in > tracking money-laundering? > > If so, let me know. Yes, the Cypherpunks mailing list (send a request as described below) has software to defeat methods of tracking money-laundering. In particular, anonymous remailers, unbreakable cryptography, offshore data havens, digital cash, information markets, and a large body of thought about methods to defeat attempts by Central States to control and track the economic transactions of individuals and corporations. I realize our Polish correspondent may be seeking tools to _assist_ the Police of his country in stopping his countrymen from moving funds around without the approval and control of the apparatchniks who control such things in command economies, but I think he needs to know just how hopeless the task really is. The Polish state will crumble, though it may take a couple of generations. --Tim May, Crypto Anarchist Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: e$: The Demographic "Transaction" (was Re: Schelling Points...)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:36 AM 7/30/96, Arun Mehta wrote: >Socialism as an economic philosophy is fairly discredited, and is >on its way out without my expressions of outrage needed to help >it along. Yet, the capitalist economy seems to be no better at >dealing with extreme poverty. Really? Extreme poverty seems to be its own reward. So, I think market economies are dealing with the incompetent and/or the lazy very well. (This may sound harsh to many of you, but think about a world of seven billion souls, many of them living at the margins of survival. Not much more could be expected, no matter the economic system. In particular, command economies have not been more effective. Think about it this way: in 100 years, who cares if a billion or so folks lived only an average of 38.37 years instead of 41.91 years?) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Source Codes in C or Pascal
by Bill Stewart 17 Dec '03

17 Dec '03

At 03:42 PM 7/28/96 +0800, you wrote: >Does anyone knows where to find source codes of sample encryption >programs? I just wanted to know how they work... Thanks in advance! The best archives are outside the US and not subject to its export laws. Some popular locations are ftp.funet.fi (in Finland), ftp.ox.ac.uk (at Oxford University in England), and ftp.dsi.unimi.it (in Italy.) You can also use AltaVista to look for Ron Rivest's home page, and look at his reference lists. The Cypherpunks home page is on www.csua.berkeley.edu . If you're somewhere that US technical books are readily available, Bruce Schneier's book "Applied Cryptography" is very good. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # Dispel Authority!

1 0

Some Questions RE: Nortons For Your Eyes Only
by David F. Ogren 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Tue Jul 30 06:40:47 1996 For those of you who have not heard it, Norton's For Your Eyes Only is a piece of software designed to integrate several encryption functions into Win95. Among its features (as I understand it) are automatically encrypting/decrypting on the fly (ala Secure Drive), encryption of the HD boot info, Command auditing, and a hybrid crypto system based on RSA. Several symmetric algorithms are available including RC4, 3DES and Blowfish. Non-US versions do not include the strong crypto algorithms. I only have second-hand information about this program and have a few questions regarding it. 1. Apparently, For Your Eyes Only (FYEO for short) encrypts files using a user-selectable symmetric algorithm and then encrypts the session key with RSA. Does FYEO store this encrypted session key with the rest of the file (like PGP does), or does it keep a central database of encrypted session keys? Keeping the session keys centrally would obviously prevent sharing files across machines, so I imagine that they must be appended (or prepended) to the ciphertext. 2. From what I understand, FYEO prompts you to enter your passphrase when logging in and this passphrase unlocks your RSA key. What algorithm is used to encrypt the RSA key? I am concerned that an exportable (and therefore weak) algorithm is used to protect the RSA key. This would mean that the RSA key could be readily hacked. And if the RSA secret key can be hacked easily, it will do no good at all to have strong encryption on the files themselves. 3. Does FYEO include any kind of authentication system. If so, what signature and message digest algorithms does it use? Thanks. - -- David F. Ogren | ogren(a)concentric.net | "A man without religion is like a fish PGP Key ID: 0x6458EB29 | without a bicycle" - ------------------------------|---------------------------------------- Don't know what PGP is? | Need my public key? It's available Send a message to me with the | by server or by sending me a message subject GETPGPINFO | with the subject GETPGPKEY -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMf3msOSLhCBkWOspAQHN4gf9HeVeJ6a6oKwdmtwcHhFT0cnMjdFIjP4V zcc7Is7qPSMFTZy+1+IwITiXPUugHdxeJbI2JvUyfptbjllfqvacNGy54iIqRZhz DPqaQkeZ8hjj843kZQB1/tmcA+np3jR6C3p3s5PC8np8Ld36J8rQZ6DVNi3XSoSh 6rOXlQKpmxZgq2gtCK+wydG39rvMsKDYo+ATqHZbX+0lryi3+4RI6Yi4185rrMW4 8iMwZs7VHFnl7sicaIro101Gc3xmrMzj+lRfa0kR1G3Ek2x9I7TArKRmcz2qonZM dUJivrjf52rUK+9Mi95HzeI6Sakb6iSIBaP7OO3w/IIIV1W6ufiqIg== =M3JW -----END PGP SIGNATURE-----

1 0

DESZIP
by Julian Assange 17 Dec '03

17 Dec '03

I am writing an historical piece on crypt(3) optimisation and password guessing heuristics. This naturally enough envolves tracking down and analysing various code/papers that have been seen as significant and/or infulential in those areas. In the late 80's Matt Bishop while at NASA, wrote DESZIP, which for a while was the seminal work. Matt has pointed me to a US summer 1987 article which describes some of the DES optimisations, however as I am an Australian national, Matt can not legally send me the actual implimentation to me due to idiotic ITAR restrictions. If someone not as constrained could address the problem described, I should be delighted. -- "Of all tyrannies a tyranny sincerely exercised for the good of its victims may be the most oppressive. It may be better to live under robber barons than under omnipotent moral busybodies, The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated; but those who torment us for own good will torment us without end, for they do so with the approval of their own conscience." - C.S. Lewis, _God in the Dock_ +---------------------+--------------------+----------------------------------+ |Julian Assange RSO | PO Box 2031 BARKER | Secret Analytic Guy Union | |proff(a)suburbia.net | VIC 3122 AUSTRALIA | finger for PGP key hash ID = | |proff(a)gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 | +---------------------+--------------------+----------------------------------+

1 0

Re: DESZIP
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 22:01 7/30/96, Julian Assange wrote: >In the late 80's Matt Bishop while at NASA, wrote DESZIP, which for a >while was the seminal work. Matt has pointed me to a US summer 1987 >article which describes some of the DES optimisations, however as I am >an Australian national, Matt can not legally send me the actual >implimentation to me due to idiotic ITAR restrictions. Did you try the Usual Suspects? There are numerous crypto sites in Europe. If none of them has DESZIP, would someone outside the US please upload it... -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President.

1 0

Netscape Security Lies
by source＠iaccess.za 17 Dec '03

17 Dec '03

We have just tested Netscape's security page and it seems they are either lying or have a major bug. All you have to do to confirm this is to go to their page http://home.netscape.com/newsref/ref/netscape-security.html#test and click on the link under the heading Testing the Secure Server link "Here is a secure server you can visit. Do an iptrace and analyse of the interaction between the server and their browser version 3.05bgold and 3.05b, of which both reports that they are not even running a secure version of the server there. We decided to test further and found that the RSA secure server is only SSL 2 and SSL 3 which is what Netscape seems to be touting to the resting of the world saying they have it NOW. Later, if not much later seems far more realistic. I do not like being lied to, mislead or steam rolled by, how about you?

3 2

Re: A Libertine Question
by Arun Mehta 17 Dec '03

17 Dec '03

At 16:42 29/07/96 CST, Roy M. Silvernail wrote: >typical 'liberal' solutions to social problems seem (at least to me) all >centered around disallowing failure. ... >I like to point out that evolution always requires multiple generations, >and that when nothing dies, nothing evolves. Just a thought... Evolution also works better with a rich, diverse gene pool. If we define "failure" by the narrow standards of today's needs, and allow those who fail to die, we may be left with people completely unequipped to cope with the radically changed environments that future generations might face. "The first ones now may later be last, for the times, they are a-changing." BTW, have you read "Watership Down" by (forgot the first name) Adams? It illustrates what I am trying to say rather well. Arun Mehta Phone +91-11-6841172, 6849103 amehta(a)cpsr.org http://www.cerfnet.com/~amehta/ finger amehta(a)cerfnet.com for public key

1 0

RE: Let's Say "No!" to Single, World Versions of Software
by Blanc Weber 17 Dec '03

17 Dec '03

>From: tcmay(a)got.net > >Such an international deal would almost certainly mean that even >fully-domestic versions of software would have to be GAKked. > >Hence the need for us to pressure Netscape, Microsoft, Qualcomm, Novell, >etc. *not* to play ball on this. This would then "marginalize" the European >and Asian customers of a special "NSA-readable" version of their products, >and would likely derail the whole thing. .......................................................... Deja-vu. Not to take away from the importance of this subject or any of the fine points which Tim has made, but it looks like it's time for the CPunk Annual August GAK Discussion on back-door deals, the NSA, and the Big Software Companies. :>) .. >Blanc >

1 0