- cypherpunks-legacy - lists.cpunks.org

Re: SCHWA - New Web Search Engine!!
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:18 PM 3/14/96 -0600, Jim Thompson wrote: > >(Alan Olsen forwards something of the FringeWare list to cypherpunks.) > >> Something of interest... >> >> >X-Www-Page: http://www.fringeware.com/MSG/index.html#digest >> >Keywords: pleashes heorg horizona disabili freques inspecurs >> >Subject: SCHWA - New Web Search Engine!! > >Oh sweet Jesus in the morning, it was a JOKE! Yes. And your point...? | Remember: Life is not always champagne. Sometimes it is REAL pain. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

Re: recent ( 3 months ) software developements?
by Kent Briggs 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- gjeffers(a)ns.htc.net (Gary Lee Jeffers) wrote: >Dear Cypherpunks, > > Due to really lousey circumstances, I have been unable to monitor my >mail for the last 3 months. Also, last 3 months mail currently unavailble >to me. I am interested in finding out if there have been any new soft- >ware offerings or software upgrades in that time. My particular interest >is Dos/Windows. Also, locations where software can be downloaded. Note >that a brief description of recent software developements maybe helpful >to other Cypherpunks with little time to monitor Cypherpunks list. > > Beat State, > Gary Jeffers > I released version 2.0 of Puffer, my symmetric encryption program for Windows last month. The exportable shareware version (40-bit RC4, uh, I mean PC1) is available from my web site (http://execpc.com/~kbriggs) The registered version uses 160-bit Blowfish. Both versions have a secure wipe feature and a built-in editor for on-the-fly e-mail encryption. Kent - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMUh4QioZzwIn1bdtAQGUDQF+OlQQTGvyfuzAJahBAXIc09V82QDc4IGj 3TUEyrU8Y9n0GAEWwZw+mDRaSSEXbqlc =7HdD -----END PGP SIGNATURE-----

1 0

Re: e$ and markets and meta-markets. quote with little comment
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 12:42 3/14/96, bryce(a)digicash.com wrote: >I just thought I would re-print this extract from the recent >press release regarding the EUNet/Merita ecash roll-out. > > >Favorite phrase: "interesting new possibilities." > > >Follow-ups directed toward e$. If you post to cpunks without >Cc'ing me I probably won't see it. > > > >Bryce > > >******* begin quote from the "companies that accept ecash" section > >SOM -- SOM, the Finnish Securities and Derivatives Exchange >and Clearing House, established in 1987, serves as a >neutral integrated securities and derivatives exchange and >clearing house. SOM offers real-time financial market >information on stocks, options and futures via the >Internet, with invoices payable in ecash. Somtel for >Windows -the application that offers real-time feed, as >well as simulation and position-analysis functions-, is >already available via leased line. > "The use of money makes stock trading less complicated, >with money acting as a practical intermediary between the >transactions." states Asko Schrey, President of SOM. >"However, since stock trades, as well as the shares >themselves, are electronic nowadays, this conventional >transmission of money has actually become a bottleneck and >a threat to the development of the financial world. >Therefore, SOM actively participates in projects to promote >and improve the efficiency of payment traffic. We believe >that electronic money will offer interesting new >possibilities." As mentioned before, one Ecash "currency" per ticker symbol would be a Very Interesting Possibility. No, I am not aware of any plans by DigiCash to implement this. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

Internet Security Worskhop Call for Papers
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

------- Forwarded Message From: papers(a)rpcp.mit.edu (Richard J. Solomon) Date: Fri, 15 Mar 1996 12:17:23 -0500 To: {Recipient List Suppressed} Cc: reagle(a)rpcp.mit.edu, execdir(a)fnc.gov Reply-To: papers(a)rpcp.mit.edu Subject: Internet Security Call for Papers CALL FOR PAPERS INTERNET PRIVACY AND SECURITY WORKSHOP Haystack Observatory, MA May 20-21, 1996 Privacy and Security Working Group Federal Networking Council Research Program on Communications Policy Center for Technology, Policy, and Industrial Development Massachusetts Institute of Technology INVITATION The Privacy and Security Working Group (PSWG) of the Federal Networking Council (FNC) and the Research Program on Communications Policy of the Center for Technology, Policy, and Industrial Development at the Massachusetts Institute of Technology will hold an invitational workshop at the Haystack Observatory outside of Boston, MA, on May 20-21, 1996. This workshop is intended to bring Federal, academic and private sector participants together in collaboration to develop strategies and potential solutions related to Internet privacy and security. Though a principal focus of the workshop will be on the Federal portion of the Internet, the FNC recognizes that the Federal Internet is tightly coupled with the Global Internet, whose security policies, practices, and goals are complementary to those of the Federal Government. To define those practices, procedures and goals, the PSWG has undertaken two major initiatives: - The Federal Internet Security Plan (FISP), which was developed as a scalable, continual improvement process, based on common principles and mechanisms compatible with Internet community values and needs; and - The Collaborations in Internet Security (CIS) project, an effort aimed at testing the strength of agency approaches to security and moving these technologies beyond individual agency networking environments and into both inter-agency and agency-commercial sector communications. The CIS will result in the development of a new and sustainable process for developing, integrating, and deploying security technologies that are interoperable at all levels of the Federal government and within the commercial and academic sectors. These initiatives are intended to highlight the critical interface between Federal and commercial users and developers of Internet services and technologies. OBJECTIVES This workshop will bring together principal players in the Federal and overall Internet community to discuss the problems and challenges of privacy and security on the Internet, and will: - Identify critical issues, requirements, and recommendations related to future Internet privacy and security research and development efforts; - Describe "best practice" approaches to Internet privacy and security; - Develop specific strategies for implementing Internet Security programs involving all sectors of the Internet community; - Extend the Federal Internet Security Plan (FISP) by defining specific implementations; and finally, - Develop specific strategies for the migration of technologies from the individual RFC unit test stage to the integration of a complete functional managed system in the CIS test/demonstration/pilot projects. SUBMISSIONS Abstracts or complete paper drafts related to the topics listed above are welcome. Accepted papers will be a part of the published record of the workshop. All points of view on Federal policies affecting Internet privacy and security are welcome. Please make all electronic submissions in ASCII format. For further information or to submit an abstract or paper contact: Internet Security and Privacy Workshop c/o Joseph Reagle Research Program on Communications Policy Massachusetts Institute of Technology One Amherst St. (E40-218) Cambridge, MA 02139 Voice: (617) 253-4138. Fax: (617) 253-7326 papers(a)rpcp.mit.edu SCHEDULE and DEADLINES Call for papers - March 14, 1996 Abstracts Due - April 14, 1996 Invitations to Participants - April 20, 1996 Revised/Completed papers due - May 19, 1996 Workshop - May 20-21, 1996 PARTICIPANTS Participation in the workshop is by invitation, based primarily on submitted papers and abstracts. Additional individuals may be invited to ensure that participation reflects a broad cross-section of the Internet community. PROGRAM COMMITTEE Dennis Branstad - Trusted Information Systems (TIS) Rich Pethia - Computer Emergency Response Team (CERT) Jeffrey Schiller - Massachusetts Institute of Technology (MIT) Richard Solomon - Massachusetts Institute of Technology (MIT) Rick Stevens - Department of Energy /Argonne National Labs (DOE) STEERING COMMITTEE Stephen Squires, Defense Advanced Research Projects Agency (FNC/PSWG Co-Chair) Dennis Steinauer, National Institute of Standards and Technology (FNC/PSWG Co-Chair) Tice DeYoung, National Aeronautics and Space Administration (NASA) Phillip Dykstra, Army Research Laboratory (ARL) Mike Green, National Security Agency (NSA) George Seweryniak, Department of Energy (DOE) Walter Wiebe, Federal Networking Council (FNC) ********************* BACKGROUND Federal Internet Security Plan: In September 1995, the PSWG published the draft Federal Internet Security Plan (FISP). The FISP is oriented toward a scalable, continual improvement process, based on common principles and mechanisms compatible with Internet community values and needs. See <http://www.fnc.gov/SWG.html>. The plan addresses Internet security requirements, including interoperability, from the perspective of the goals and objectives outlined in the National Performance Review (NPR), http://www.npr.gov/. The Federal Networking Council developed this framework in conjunction with its Advisory Committee which represents industry, academia, and non-profit sectors. Action Items, from the FISP, to be addressed during the Workshop: Internet Security Policy and Policy Support Activities * Establish overall Internet security policies * Address security in all Federally supported NII pilots * Coordinate Internet community involvement * Establish an ongoing Internet threat database and assessment capability * Identify legal and law enforcement issues Internet Security and Technology Development * Develop an Internet security maturity model * Develop Internet security architecture * Enhance Internet security services and protocols * Develop a "Secure-Out-of-the-Box" endorsement * Enhance application security Internet Security Infrastructure * Establish a set of Internet security interoperability testbeds * Support privacy, authentication, certificate, and security services pilots * Establish Internet security testing and evaluation capabilities * Improve security incident handling capabilities * Develop security self-assessment capabilities * Establish effective secure software and document distribution mechanisms Education and Awareness * Compile Internet user and site profiles * Encourage use of available security technologies * Establish an Internet security information server * Establish an Internet security symposium/workshop series * Establish an Internet security fellowship program Collaborations in Internet Security: With the Federal government's ever-increasing dependency on computers and distributed systems, there is great urgency for it to develop and employ enhanced information system security technologies and practices. At the same time, these Federal technologies must interoperate with those of the broader Internet community (encompassing the private and academic sectors, along with the Federal sector). In recognition of these needs, the Federal Networking Council's Privacy & Security Working Group (FNC/PSWG) has been awarded a National Performance Review (NPR) Innovation Fund grant to compare and validate agency approaches to security. This Collaborations in Internet Security (CIS) project aims to test the strength of these technologies beyond individual agency networking environments, emphasizing the inter-agency and agency-commercial sector communications. The CIS will result in the development of a new and sustainable process for developing, integrating, and deploying security technology that is interoperable at all levels of the Federal Government and within the commercial and academic sectors. The governing principles behind the Security Testbeds include: employment of an open process (with the activities and results open to participation and comment by both public and private sector participants); a focus on multivendor technologies; an emphasis on testing and experimentally deploying security technologies emerging from research and private sectors as well as security technologies currently in use in the commercial environment; and an underlying objective to ensure interoperability among the broad Internet community (federal, private, and academic). Initial tests will include demonstrations of Kerberos v.5, testing of single-use passwords, and digital signatures. For more information, please see (http://www.fnc.gov/cis_page.html)

1 0

RE: Tim's friend's mildly retarded son
by Blanc Weber 17 Dec '03

17 Dec '03

>From: Asgaard > >The reason FDA has not approved this drug is most probably because >it does not make mildly retarded boys less retarded. But of course, >it's not up to the state to protect people from wasting their money >on snake oil. It becomes more difficult to uphold a pure market >philosophy when it comes to poisonous snake oil or, as is often the >case with potent drugs, effective oil but which will kill you from >side effects after a delay. [. . . . . ] >................................................. > >In reference to the "pure" market: > >The point is not simply that the State should protect people from >snake-oil salesmen. > >There are many "private" agencies whom one can pay to do the work of >research on the actual benefits of a drug; companies which which can, >if one does not have the time or the expert knowledge, perform tests >and such to establish whether there is any danger involved in taking >it. This would be the same kind of work that anyone would need to do >in any case (information that they would need to have), whether as an >individual or a private group or a government agency. > >They, too, can do all the work of checking on the safety of the >product, ensuring that it is good, guaranteeing the reality of any >positive effects, then handing it over to the their client and saying, >"there - now, we are satisfied in our judgement that it is not >dangerous to use it." > >The point is that it is not right to prevent, stifle, suffocate, the >liberty to use one's own resources, to act at one's own discretion and >make one's own choices in regard of one's own particular circumstance, >to make independently the judgements necessary to determine the truth >or falsehood of a statement, or the efficacy of a drug - i.e., it is >not right to have to "give it up" to the State, allowing no one else to >engage in the mental exercise and follow-through. > > .. >Blanc >I hope I'm not the only one here who thinks so. > > > > >

1 0

Re: Interesting Egghead freebee
by Peter Trei 17 Dec '03

17 Dec '03

> From: Alan Olsen <alano(a)teleport.com> > Subject: Interesting Egghead freebee > While at Egghead today, I found out that they are giving away copies of Spry > Mosaic in a Box. (You have to buy something, but that was why I was there > anyways...) So far, it seems to be worth about what you pay for it. It is > designed to connect you to Compu$lave. > What has this to do with this list you ask? The product actually claims to > support S-HTTP! (No export warnings on the package and no real info as to > how it is implemented... I suspect brand-name snake oil here.) For those > of you who do web development and are interested in a client that actually > supports S-Http (I do not believe the d/lable version does), take a look. > (It does install alot of crap, like a new Winsock, so be warned.) Spry Mosaic really does support SHTTP - you can use it to connect to the SHTTP test pages at Terisa and Commercenet without difficulty, once you've doped out how to generate and get signed a low-assurance RSA persona certificate. I just performed an altavista search for references to "shttp://" (the SHTTP prefix) and "https://" (the SSL prefix). The results were 1,000 SHTTP hits, and 20,000 SSL hits. SHTTP may be technicly superior to SSL level 2.0, but as a commercial software developer, I know on which side my bread is buttered. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

Re: Interesting Egghead freebee
by Alan Olsen 17 Dec '03

17 Dec '03

At 10:37 AM 3/15/96 -6, Peter Trei wrote: >Spry Mosaic really does support SHTTP - you can use it to connect to the >SHTTP test pages at Terisa and Commercenet without difficulty, once you've >doped out how to generate and get signed a low-assurance RSA persona >certificate. After I posted about it, I did a little more digging and checked out the S-HTTP portion of the code. Seems to work pretty well. (I was a bit surprised to see that the Personna cert generation saved the information off in a text file, instead of using the bundled e-mail client. The docs on this process were pretty sketchy as well...) >I just performed an altavista search for references to "shttp://" (the SHTTP >prefix) and "https://" (the SSL prefix). The results were 1,000 SHTTP >hits, and 20,000 SSL hits. > >SHTTP may be technicly superior to SSL level 2.0, but as a commercial >software developer, I know on which side my bread is buttered. My reasons for installing it had little to do with S-HTTP (but it was a nice bonus) and more to do with the lack of table support. (I needed something to check out how pages would look on non-table supporting browsers.) My concerns with S-HTTP are with the lack of server (and browser) software support for it, as well as the difficulty of maintaining a site that uses it. (Having to change every single page on a site can become a bit of a chore, as well as introduce unintended security holes due to in improperly updated page.) --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon

1 0

Re: FCC-type Regulation of Cyberspace
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

Timothy C. May wrote: >>Mr. Frantz, unless you can prove your claims here, forthwith, I must inform >>you that they are in violation of the Truth in Speech Act of 1996. Please >>retract them, now. Bill Frantz wrote: >Political speech, not commercial speech. The act doesn't apply or is >unconstitutional. I see: The bill of rights reads: "Congress shall make no law [...] abridging the freedom of *political* speech". Never knew that until now. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

Source of Cryptanalysis Materials
by Mark Aldrich 17 Dec '03

17 Dec '03

Some folks (this was awhile back) were looking for texts on cryptanalysis and related cryptographic topics. Today, I ran across some stuff published by an outfit called "Aegean Park Press." With such titles as "Manual for the Solution of Military Ciphers," "Elementary Military Cryptography," and "Cryptanalysis of Shift-Register Generated Stream Cipher Systems," they sound like a source of potentially interesting material. A lot of what they are publishing are now-declassified military manuscripts, and they specialize in military-related historical stuff and crypto-related mathematics, etc. A Web resource for them is at http://www.halcyon.com/books/ Otherwise, contact them at: Aegean Park Press P. O. Box 2837 Laguna Hills, CA 92654 VOX 714.586.8811 TF 800.736.3587 (US & Canada only) FAX 714.586.8269 ------------------------------------------------------------------------- | Liberty is truly dead |Mark Aldrich | | when the slaves are willing |GRCI INFOSEC Engineering | | to forge their own chains. |maldrich(a)grci.com | | STOP THE CDA NOW! |MAldrich(a)dockmaster.ncsc.mil | |_______________________________________________________________________| |The author is PGP Empowered. Public key at: finger maldrich(a)grci.com | | The opinions expressed herein are strictly those of the author | | and my employer gets no credit for them whatsoever. | -------------------------------------------------------------------------

1 0

RE: Tim's friend's mildly retarded son
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:16 AM 3/16/96, Timothy C. May wrote: >(I'll spare the usual stuff about how the Founders smoke a pipe of cannabis >now and then, how "canvas" comes from the Dutch word for this herb, how >special interests got hemp and "reefer" outlawed, and how the effects fell >mainly on the poor and inner-city folks.) I meant "and how the effects of criminalization fell mainly on the poor and inner-city folks." Just thought I should make this clear, because many who advocate drug laws do so out of some notion that by illegalizing some drug they are _helping_ the poor folks. In fact, they are helping to destroy inner cities by making illegal drugs a profitable thing to trade. And since people living in cities are more likely to come in contact with police than are folks living in suburban areas, the implications of illegality are even more strongly felt. Far removed from crypto, except the the sort of thinking that says the FDA and DEA know best what people ought to be allowed to buy and ingest is very similar to the thinking that government agencies know best what codes and ciphers people ought to be allowed to use. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0