- cypherpunks-legacy - lists.cpunks.org

Re:FOR WHOM THE BELL TOLLS
by mccoy＠communities.com 17 Dec '03

17 Dec '03

Sandy writes: > > In a recent exchange, Carl Ellison wrote: > > >After the meeting ended it hit me what the problem is and I > >mentioned it to PRZ. We're complaining that the Executive > >has gone rogue -- is disobeying the will of the people. > >PRZ likened it to Nixon's war in Cambodia. > > To which Jim Bell replied: Hmmm... time to fix my Jim Bell filter, this message seemed to have gotten around it. > > >I have a solution to that problem. Yes, I am sure Jim does. Expect a few Treasury agents to visit him in the near future regarding threats against the president, they seem to be a little overzealous about this statute... (a felony I believe...) > My question for member of this list is: When Bell finally > goes too far and they arrest or shoot him, how can we best > capitalize on his martyrdom? Or in a more negative light, > what damage control will we need to do in that case? A movement is not complete until it has a few nuts who claim you are not going far enough, only then does it have a chance of being incorporated into the mainstream. I would suggest just ignoring him, and once he is arrested claim he was a plant by the IRS :) jim

1 0

Re: MELP: 2400 baud speech coding
by jim bell 17 Dec '03

17 Dec '03

At 01:31 PM 6/4/96 -0700, John Gilmore wrote: >Mixed-Excitation Linear Predictive encoding gives better speech >quality than CELP at half the data rate. Encoding and decoding >together burn up more than 100% of a TMS320C3x digital signal >processor at 33MHz -- 64% to encode and 53% to decode. Does this mean to convert to compressed data AND encrypt, or just converting to compressed bits? > I don't know >how it does on a Pentium or an Alpha. If you have the MIPS at both >ends, this enables very robust encrypted speech across modem links to >the Internet. I'd rather see thousands of Internet-phone users transmitting at 2400 bps than 28.8 kbps... This is going to add to the telephone companies' woes: They obviously don't want people to have access to nearly-free Internet-LD phone service, but their arguments for its regulation will be weaker when it is pointed out that the bit rate for compressed, encrypted Internet phone are 2400 bps as opposed to 64,000 bps for POTS. Which raises another question: When are Internet ISP's going to start acting as Internet-phone gateways? Currently, you can't call somebody on POTS with Internet phone. This would be solved if ISP's could install modems and software which did audio-synthesis/digitization on an outbound call, driven by the data received on the Internet, and sending the data back to the calling end. Any guesses as to when this will be real? Jim Bell jimbell(a)pacifier.com

1 0

[SF Bay Area] Steganography -- Peter Wayner Ph.D.
by stevenw＠best.com 17 Dec '03

17 Dec '03

Seen on the net: AN EVENT AT COMPUTER LITERACY BOOKSHOPS ---------------------------------------------------------------------- CAN SECRETS BE STOPPED? ---------------------------------------------------------------------- A free presentation by Peter Wayner Ph.D. Date: Wednesday, June 19, 1996 Time: 6:30 p.m. - 8:00 p.m. Location: Computer Literacy Bookshops 2590 North First Street (at Trimble) San Jose (408) 435-1118 "Steganography" is the art and science of making information disappear. If you don't know where it is, you won't even know it exists. If you can't find it, you can't censor it. Dr. Wayner will explore some of the basic ways that people are hiding information by making it look like something else; such as innocent ramblings or flames from a newsgroup or background noise in a digitized image or sound file. Dr. Peter Wayner has a Ph.D. in Computer Science. He has worked at Xerox PARC and consulted widely on various topics, including computer security. His writing has appeared in popular fora like "BYTE" magazine and the "New York Times". He is the author of "Agents Unleashed: A Public Domain Look at Agent Technology" and "Digital Cash: Commerce on the Net" and "Disappearing Cryptography". DID YOU KNOW THAT OUR EVENTS ARE ALSO POSTED ON OUR WEB PAGE? http://www.clbooks.com/ Stay tuned. There are more events to come. July 23 Programming Windows 95 with MFC by Jeff Prosise Events at our stores are always free. Have suggestions about event topics? Email them to: eventca_info(a)clbooks.com ------------------------------------------------------------------------ If you would like to receive e-mail announcements for upcoming store events, simply write to: events_ca-request(a)clbooks.com (for events held at our California stores) events_va-request(a)clbooks.com (for events held at our Virginia store) ------------------------------------------------------------------------ If you have signed up for email announcements but have not received any, or wish to be removed from this list, please contact us. We add names by request only. **************************************************** Computer Literacy Bookshops, Inc. Cherrie C. Chiu eventinfo_ca(a)clbooks.com (408) 435-5015 x116 ------------------------------------------------------------------------- Steven Weller | Technology (n): | | A substitute for adulthood. stevenw(a)best.com | Popular with middle-aged men.

1 0

On the Hill: Child Porn "Morphing"
by Black Unicorn 17 Dec '03

17 Dec '03

Hearings on the hill over the child pornographer horseman: "Morphing" seems to be the latest buzzword for putting childrens faces on the bodies of adult models in sexually explicit poses and seems to have attracted enough attention to warrant congressional attention. Interesting that the media is playing this up as a "net" deal. (As if somehow it were impossible to do without the all powerful and evil internet. I'd like to see exactly how they word the proposed prohibitons. What constitutes "child" when the face painted on is pure artistry? Will we see a simple and strict prohibition over modifiying sexually explicit pictures to make them appear to be of younger models (whatever their apparent age may be)? Will we see a subjective test as to what is "child looking" enough? Silliness. All silliness. Prediction: Some manner of law will be on the books (Or perhaps passed, but unsigned) before the election attempting to prohibit some form of this activity. Certainly Clinton is not going to veto such a bill before the election, which is doubtlessly when the right is going to try to push it through. (Can they streamline it enough to get a vote in time?) --- My preferred and soon to be permanent e-mail address:unicorn@schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information Opp. Counsel: For all your expert testimony needs: jimbell(a)pacifier.com

8 13

Re: Java
by Deranged Mutant 17 Dec '03

17 Dec '03

I'll add a few comments about the "Java hype monster"... it seems a good way for people to make money off of computing in ways they haven't before (and in ways which probably won't work anyhow). A lot of the Java hype has been how one only needs a "network appliance" that logs in and uses remote applets which are instantly updated. Less risk of software piracy, more phone bills and network membership fees, of course. (Nevermind other risks added in this sort of system). It seems like a kind of cable-tv-for-the-internet. People will join a service that provides an array of applications. Network membership fees and phonebills... or maybe they'll use cable modems and it will be included with the cable bill on their JavaVision (tm) boxes? On the plud side, though: C never did standardize graphical interfaces. Notice most of the demos in the JDK are graphical? Rob. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: FOR WHOM THE BELL TOLLS
by Bruce Baugh 17 Dec '03

17 Dec '03

At 12:30 PM 6/4/96 -0700, Sandy Sandfort wrote: >My question for member of this list is: When Bell finally >goes too far and they arrest or shoot him, how can we best >capitalize on his martyrdom? Or in a more negative light, >what damage control will we need to do in that case? I think there's a non-trivial chance that this list could be shut down and anyone who's made interested sounds in the idea brought in to assist the police in their inquiries. Damage control will probably be a doomed cause. The media will end up with selected quotes advocating crypto-anarchy and speaking in a disparaging tone of those heroic men and women who keep nuts like us reined in, and the only people who will hear a balanced account will be those who are already wholly or partially immune to the propaganda mills. Did I mention I've been feeling pessimistic about a bunch of this stuff lately? -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

Re: Markoff in NYT on NTT/RSA chip
by jim bell 17 Dec '03

17 Dec '03

At 03:46 AM 6/5/96 +0000, jonathon wrote: > paul: > >On Tue, 4 Jun 1996, Paul Robichaux wrote: >> the NTT chipset for use, say, in a Motorola cell switch (made in IL) would >> seem to be problematic. Buying chips in Japan for shipment to Moto's phone >> factories in Singapore and Malaysia, however, would appear to be OK. Under > > So the companies simply ship their _entire_ production > facility offshore, to whichever country has no crypto > export regulations. > > << Any guesses on just how long ITAR stays around, once > several companies announce they are terminating the employment > of 1000+ people, for work overseas, because of ITAR? >> > > And doing all of their manufacturing offshore means they could > use Triple-DES, or BlowFish, or any other crypto algorithm. I seem to recall an announcement recently that Senator Burns is going to have a hearing "soon" on his crypto bill. If that's true, I think it would make a good publicity scene if somebody (if possible someone giving testimony) were to show up with one of these NTT encryption chips, wave it around a bit, and say "I can bring this chip into the country, why can't I take it out again?" Even if you can't get ahold of the real chip, any multi-pin bug will probably do for the sound/video-bite. Jim Bell jimbell(a)pacifier.com

1 0

Re: Java
by Gary Howland 17 Dec '03

17 Dec '03

Clay Olbon II wrote: > > Has anyone written a Java app to implement the Chinese Lottery? Seems like > a natural way to do it. A small cash prize might entice lots of folks to > let it run in the background... We have plenty of Java code that does crypto. If anyone can think of a suitable target (and perhaps a suitable prize for the winner), we'll help knock up some code. Click this if you're interested http://systemics.com:79/ (alternatively finger @systemics.com) The only targets I can think of are the Sun/Microsoft crypto API keys (but I would guess that these keys are too large for an attack to be feasible), and the unix password of David Sternlight (which was posted to sci.crypt last summer). Gary -- pub 1024/C001D00D 1996/01/22 Gary Howland <gary(a)systemics.com> Key fingerprint = 0C FB 60 61 4D 3B 24 7D 1C 89 1D BE 1F EE 09 06

1 0

Re: Richard Stallman on RSA, Zimmermann, crypto
by Deranged Mutant 17 Dec '03

17 Dec '03

Not to defend or condemn RSA folx or patents, etc., but sometime ago (recently) I read or was told or perhaps hallucinated that PGP3 was going to include non-RSA algorithms that didn't suffer the patent stickiness (El Gammel based on DSA?) Derek? On 4 Jun 96 at 18:00, Declan McCullagh wrote: [..] > Richard's comments below are very much worth reading. Also check out the [..] > The version of PGP used outside the US is free software, but if you > use it within the US, RSA Inc. can sue you. > > This is very bad for people who would like to use PGP. But it is > worse than that. It affects the political battle too. > > PGP had a chance to create a constituency of Americans who demand the > right to use encryption. If PGP had been allowed for use in business, > not just by hobbyists, we would have far more Americans who care > enough to fight against Clipper--and they would include businesses > which have the funds to influence legislators. RSA Inc. prevented > this from happening, and did so for no reason except money. [..] --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: Crack for DOS
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:17 PM 6/27/96 -0700, you wrote: >2. If you were looking to compare single key block ciphers like Blowfish, >DES, 3xDES etc. Which one would be considered the best for implementation in >a software security package, assuming maximal key lengths irreverant of the >governmental restrictions. "Best" really depends on your criteria for goodness.... DES has been thoroughly explored, and people have a good idea of how strong it is and how easy it is to implement well in software. It's not strong enough (you can do a bit better than 2**55 brute force tries, and 2**55 isn't enough given modern computers), but you can take care of that by using Triple DES, preferably the 3-key form, which is strong enough for the forseeable future. It's also annoyingly slow in software form, having been designed for bit-twiddling hardware, but there are well-optimized versions on the usual archive servers. Blowfish is new, so perhaps there are flaws that 10-20 years of analysis will find. But it's pretty good - it's small, fast in software, and has an annoyingly slow key-schedule which makes it difficult to use brute-force crackers on. It's got variable key lengths. RC4 and RC5 are also new, fast, have variable key lengths, and appear to be quite strong if used with adequate choices of parameters. RC5 is patented; RC4 was a trade secret, since leaked, and you may get flak for using the _name_ RC4 in a commercial product. 40-bit keys make it exportable but easily brute-forced; 128-bit keys are quite strong. # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Distract Authority!

1 0