July 1993 - cypherpunks-legacy

Hmm...hardware secure phone?
by technopagan priest 10 Jul '93

10 Jul '93

I've been reading up on Codecs. Motorola has the MC145505 PCM Codec which samples at 8khz and the PCM output is at 64kbps. We can then use the MC145532 ADPCM Transcoder to reduce the data stream to 16kbps. With the breaks in spoken languages, perhaps we could get this to compress just enough to go through a 14.4 kbps modem. Anyway, who knows of a DES or RSA chip which will do 16kbps? Then all we need is a microcontroller to run the show, and perform D-H or RSA key exchange. -Thomas

4 3

Subject
by Duncan Frissell 10 Jul '93

10 Jul '93

(Tim May) >>>more and more universities are using the "sexual harassment" laws/codes to stop certain newsgroups, to halt the distribution of sexually oriented images, and to take disciplinary action against students (mostly male) who have put GIFs on their computers or workstations (apparently female students who walk past an office in which female models are used as startup screens have decided they are being "sexually assaulted" or "harassed").<<< Here is a free sample of my legal drafting skills. Post this notice and you will be immune: ***************************************************************************** NOTICE All speeches, writings, representations, or actions constituting symbolic speech; made, produced, or performed by me which are believed by anyone to be; or which are held by any person or organization to be; RACIAL, SEXUAL, OR ANY OTHER FORM OF HARASSMENT were made, produced, or performed by me with the specific intent to return the legal status of the person to whom they were directed to that legal status which they would have enjoyed prior to the year 1900. Such speech, writing, representation, or action constituting symbolic speech; is thus POLITICAL SPEECH and is absolutely protected by the First Amendment to the United States Constitution. Therefore, No government agency or private institution acting under the orders of any government agency can legally punish me for such speech, writing, representation, or action constituting 8 symbolic speech. ****************************************************************************** Make it clear that any move against you will cause you to wheel on in to federal court and sue their rear ends. Also if your attacker is "of the Left" say: "Look thousands of American boys died to save the world from commie scum like you. If I have to put up with persons of *your* ilk, then you have to put up with *my* personal peculiarities as well." They tend to leave you alone after that. <G> "Kids don't try this until you've been to law school." In any case, net censorship is ridiculous when I can open 25 accounts per day with Email access to Internet. Duncan Frissell ******************************************************************** * DUNCAN FRISSELL Attorney at Law, Writer, and Privacy * * CIS 76630,3577 Consultant since the Nixon * * Internet: Administration * * 76630.3577(a)compuserve.com * * or frissell(a)panix.com * * Easylink 62853962 * * Attmail !dfrissell * * TLX: 402231 FRISSELL NYK * * * * Privacy Checkup still only $29.95. Buy today before price * * controls force me to raise my prices. * * * * In 1870, a German couple registered the birth of their * * little girl with the town clerk. 70 years later, the * * woman that that little girl had become was executed * * because of her parent's actions. Don't let this happen * * to you or your children. Give a gift of privacy this year. * * * ******************************************************************** -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQCNAirtsUkAAAEEAN4wvnp5CE1ZUyqq8HnBDk78WP9WpyIFbINw/qvDxRGHPK4e JFR7XBaMnd3Ek0x8c20syHwPVNrDUpdgRmJzperbNTeaS1lof4npfR8kPnGJ3wvv wJtIXSM+4ePDy+pfGQkyY+Y0qJEbBTxYNW01ciMrVS2Uac5C3YVO4r4sgSPhAAUR tCtEdW5jYW4gRnJpc3NlbGwgPDc2NjMwLjM1NzdAY29tcHVzZXJ2ZS5jb20+ =I88k -----END PGP PUBLIC KEY BLOCK-----

1 0

Politically Incorrect Sheep
by Duncan Frissell 10 Jul '93

10 Jul '93

(Sneal) >>>a chance to work a PGP angle into some sensational story that creates a lot of public outcry. Linking PGP to terrorism, drug dealing, or kiddie porn would be a great first step towards getting some laws against "unlicensed cryptography" on the books.<<< Too late. Open systems are beyond the point of no return. Worriers forget the "tipping factor". Once half of the mass of an object is above its center of gravity, it starts to fall over fast. The unsexy bits of the digital revolution - EDI, electronic trading, the quants, the ISO reference model have already worked their wonders and started the tipping process. Perestroika (restructuring) is here to stay. Without PGP, without cypherpunks, without UUNET, without any of it governments would still see their mechanisms of control crumble. Cheap computing and telecoms by themselves are enough to render the nation state technologically obsolete. Read from the bottom up: Anarchists Application Communists or Communication Socialists System Trust Transport Never Network Departments Datalink Police Physical Duncan Frissell ******************************************************************** * DUNCAN FRISSELL Attorney at Law, Writer, and Privacy * * CIS 76630,3577 Consultant since the Nixon * * Internet: Administration * * 76630.3577(a)compuserve.com * * or frissell(a)panix.com * * Easylink 62853962 * * Attmail !dfrissell * * TLX: 402231 FRISSELL NYK * * * * Privacy Checkup still only $29.95. Buy today before price * * controls force me to raise my prices. * * * * Rebecca Schaefer was shot to death on her own doorstep * * because she told the State of California where she lived. * * Don't make her mistake. Hire me to teach you to guard * * your privacy. * * * ******************************************************************** -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQCNAirtsUkAAAEEAN4wvnp5CE1ZUyqq8HnBDk78WP9WpyIFbINw/qvDxRGHPK4e JFR7XBaMnd3Ek0x8c20syHwPVNrDUpdgRmJzperbNTeaS1lof4npfR8kPnGJ3wvv wJtIXSM+4ePDy+pfGQkyY+Y0qJEbBTxYNW01ciMrVS2Uac5C3YVO4r4sgSPhAAUR tCtEdW5jYW4gRnJpc3NlbGwgPDc2NjMwLjM1NzdAY29tcHVzZXJ2ZS5jb20+ =I88k -----END PGP PUBLIC KEY BLOCK-----

1 0

UNSUBSCRIBE !
by ab357＠freenet.carleton.ca 10 Jul '93

10 Jul '93

Please unsubscribe me. Thanks. -- --------------------------------------------------------------------- | HELENA DANG | hdang(a)math.carleton.ca | | =)8-> | ab357(a)freenet.carleton.ca | ---------------------------------------------------------------------

1 0

No Subject
by Peter shipley 10 Jul '93

10 Jul '93

-----BEGIN PGP SIGNED MESSAGE----- I suppose this should be added to the the ftp site on soda. -Pete -----BEGIN PGP SIGNATURE----- Version: 2.3 iQBVAgUBLDyRNHynuL1gkffFAQGWigH6A6/aLAoAtJElN++r0qyMyD+aWQTVr7FH gGb8C+4wNozzPAmr+wIpN0oBW7Cti7U1+G4oOW+FMQKdOljAyLJxQA== =cinp -----END PGP SIGNATURE----- ;; ;; ;; From: mpf(a)theory.lcs.mit.edu (Michael P. Frank) ;; A quick summary: ;; ;; Key Command name Notes ;; ------- ------------------ ---------------- ;; C-c p e pgp-encrypt-region Prompts for recipient's ID. ;; C-c p d pgp-decrypt-region The first time, prompts for your pass phrase. ;; C-c p s pgp-sign-region Ditto. Uses CLEARSIG. ;; C-c p S pgp-sign-and-encrypt-region Doesn't use CLEARSIG. Encrypts also. ;; C-c p v pgp-verify-region Checks signature (in a new window). ;; C-c p p pgp-set-passphrase Sets or changes PGP pass phrase. ;; C-c p c pgp-clear-passphrase Erases pass phrase. ;; ;; Thanks are due to Bob Anderson <bs891(a)cleveland.Freenet.Edu> for ;; writing a very helpful explanation of how to do the guts of these ;; commands. However, any bugs are my own. ;; ;; Enjoy! ;; ;; -Mike ;; ;;; ;;; Emacs Support for PGP ;;; ;;; People can see your PGP passphrase if: ;;; * They watch over your shoulder as you type it. (It's not invisible.) ;;; * They do "ps auxww" (SunOS) on your machine while you're ;;; decrypting/signing. ;;; * They type C-h v *pgp-passphrase* in your emacs after you've ;;; entered your passphrase. ;;; ;;; Plus the system suffers from all the normal Unix and X-windows ;;; security holes. ;;; (defun pgp-set-passphrase (arg) "Prompts for PGP pass phrase." (interactive "sPGP pass phrase: ") (setq *pgp-passphrase* arg)) (defun pgp-clear-passphrase () "Clears the PGP pass phrase." (interactive) (makunbound '*pgp-passphrase*)) (defun pgp-encrypt-region (start end pgp-user-id &optional flag) "Encrypt the region using PGP. Prompts for a PGP user ID. With prefix arg, puts result in serparate window. Noninteractive args are START, END, PGP-USER-ID, and optional FLAG." (interactive "r\nsUser ID to encrypt to: \nP") (shell-command-on-region start end (concat "pgp -fea " pgp-user-id) (not flag))) (defun pgp-decrypt-region (start end &optional flag) "Decrypt the region using PGP. Prompts for the user's pass phrase, if not already known. With prefix arg, puts result in separate window. Noninteractive args are START and END and optional FLAG." (interactive "r\nP") (if (not (boundp '*pgp-passphrase*)) (call-interactively 'pgp-set-passphrase)) (shell-command-on-region start end (concat "pgp -f -z \"" *pgp-passphrase* "\"") (not flag))) (defun pgp-sign-and-encrypt-region (start end pgp-user-id &optional flag) "Sign and encrypt the region using PGP. Prompts for a user to encrypt to and a pass phrase, if not already known. With prefix arg puts result in separate window. Noninteractive args are START, END, and PGP-USER-ID, and optional FLAG." (interactive "r\nsUser ID to encrypt to: \nP") (if (not (boundp '*pgp-passphrase*)) (call-interactively 'pgp-set-passphrase)) (shell-command-on-region start end (concat "pgp -safe " pgp-user-id " -z \"" *pgp-passphrase* "\"") (not flag))) (defun pgp-sign-region (start end &optional flag) "Sign the region using PGP. Prompts for a pass phrase, if not already Known. With prefix arg puts result in separate window. Noninteractive args are START and END and optional FLAG." (interactive "r\nP") (if (not (boundp '*pgp-passphrase*)) (call-interactively 'pgp-set-passphrase)) (shell-command-on-region start end (concat "pgp -saft +clearsig=on" " -z \"" *pgp-passphrase* "\"") (not flag))) (defun pgp-verify-region (start end) "Verify the signature on the text in the given region using PGP." (interactive "r") (shell-command-on-region start end "pgp -f")) (global-set-key "\C-cpp" 'pgp-set-passphrase) (global-set-key "\C-cpc" 'pgp-clear-passphrase) (global-set-key "\C-cpe" 'pgp-encrypt-region) (global-set-key "\C-cpd" 'pgp-decrypt-region) (global-set-key "\C-cps" 'pgp-sign-region) (global-set-key "\C-cpS" 'pgp-sign-and-encrypt-region) (global-set-key "\C-cpv" 'pgp-verify-region)

2 1

IETF
by Marc Horowitz 10 Jul '93

10 Jul '93

Is anyone else on this list going to be there? Marc

1 0

Re: If the cypherpunks list gets this, the loop is at pro-sol.cts.com
by mdavis＠pro-sol.cts.com 09 Jul '93

09 Jul '93

gnu(a)toad.com writes: >There's been a message loop running in cypherpunks today. Did you guys >add cypherpunks(a)toad.com to your local list or something? Please remove >it, if so! > > John Gilmore > postmaster(a)toad.com No. Our local list alias is "cypherpunks-list" and the only recipient is an incoming news processor that posts messages in a local newsgroup (pro.cypherpunks). The only transmissions to the cypherpunks(a)toad.com address are when posts are made in our local newsgroup. I will double-check everything though. /\/\ Morgan Davis Group (619/670-0563) / /__\ Internet: mdavis(a)pro-sol.cts.com

1 0

USENET newsreaders and cryptography: features/suggestions/questions
by Clifford A Adams 09 Jul '93

09 Jul '93

Hello out there! The current version of strn (see below) contains a signature verification command (control-V). It looks for either a RIPEM or PGP signature line and passes the article to the appropriate command for verification. (Strn leaves it up to the user to interpret the output of the command.) I have a few questions/requests that I hope the cypherpunks list can help me with: 1. Does anyone know if including code like system("pgp -m foobar") might cause legal problems? Strn doesn't implement any cryptographic techniques. 2. What's the status on a USA-legal PGP (using RSAREF)? I would like to greatly expand strn's cryptographic features, but I'd rather not implement features that many of strn's users can't use. (That includes me--I won't use PGP until/unless the legal issues are cleared up.) 3. It would be greatly convenient if someone would implement a "verify signature only" switch for PGP. Most of the applications I would like to use don't involve data hiding--just signature verification. I'm also lobbying the RIPEM author to include a similar feature. Also, if anyone has any comments or suggestions about newsreader cryptographic features feel free to send mail. I hope to do some work later with things like remote reconfiguration, trusted ratings, suggested reading lists, and the like. --Cliff P.S. Strn is about 10K lines of C code added to trn. It is (probably) just a few weeks away from a public beta test. If anyone really wants to test strn, let me know and I'll consider it. More information is also available via finger or mail. -- Clifford A. Adams caadams(a)polaris.unm.edu | USENET Interface Project: 457 Ash St. NE Albuquerque, NM 87106 | Tools for advanced newsreading STRN (Scan TRN) now in testing: trn 3.0 plus flexible newsgroup menus, fast article scoring with score ordered display, and merged/virtual newsgroups.

3 3

Phiber Optik pleads guilty
by L. Detweiler 09 Jul '93

09 Jul '93

From: farber(a)central.cis.upenn.edu (David Farber) Subject: Two messages that may interest you re: "Phiber Optik," Date: Tue, 6 Jul 1993 17:31:39 -0500 The following appears on Newsbytes today. Newsbytes is a copyrighted commercial service which appears on GEnie, Compuserve, America OnLine, Newsnet, DIALOG, Clarinet and other networks. This story is posted here with the permission of the authors. ========================================================================== Phiber Optik Pleads Guilty 07/06/93 NEW YORK, NEW YORK, U.S.A., 1993 JUL 6 (NB) -- Mark Abene, better known throughout the computer world by the hacker handle "Phiber Optik," plead guilty on July 2 in Federal Court to felony charges of conspiracy and unauthorized access to computers. Abene had been due to go to trial on these counts today. The plea by Abene, entered before Judge Louis Stanton in the Southern District of New York, admitted intrusion into computers owned by NYNEX, BellSouth, and Southwestern Bell. In his statement, Abene said that he had, in his actions, "never tried to damage any computer systems and, to my knowledge, I never have." In the course of the proceedings, Judge Stanton asked Abene a series of questions including: whether he understood the charges; whether he realized that, by pleading guilty to felony charges, he was exposing himself to possible loss of civil liberties such as the right to vote, sit on jury or hold public office; whether he realized that he could face a maximum sentence of 10 years imprisonment and a maximum fine of $500,000; whether he understood that he could be required to make restitution for damages; and whether he was satisfied that he had received adequate legal counsel. He replied yes to all the above, but no to the question of whether he had been threatened or coerced by the United States Attorney's office to change his plea. Following the questioning, the judge asked Abene to say what he did. Abene responded by admitting that he had conspired with others to gain access to various computer systems, including those belonging NYNEX, BellSouth and Southwestern Bell; he had intercepted data on networks belonging to British Telcom and Tymnet; and that he had misrepresented himself to employees of phone companies to gain access to their systems. It was during these admissions that Abene said that he had never, to his knowledge, damaged any systems. At the end of Abene's statement, Assistant US Attorney Fishbein stated that Abene had fraudulently used computer accounts at New York University to access the remote computer systems. When asked by the judge to confirm Fishbein's assertion, Abene did. Judge Stanton then stated, "Mr. Abene is fully competent to make an informed plea in this case. He is knowledgeable of the charges against him and is aware of the possible consequences. I accept his guilty pleas." Judge Stanton then set sentencing for 9:30AM Wednesday, November 3rd. He asked Abene's attorney, Paul Ruskin, to insure that he do everything possible to cooperate with the probation staff in its development of a background of Abene for the sentencing procedure. Abene was then released on his own recognizance. Abene, together with Elias Ladopoulpos, a/k/a "Acid Phreak;" Paul Stira, "Scorpion;" John Lee, "Corrupt;" and Julio Fernandez, "Outlaw," were indicted on July 8, 1992. Ladopulous, Stira, Lee, and Fernandez previously plead guilty to charges relating to the indictment. Lee, the only one sentenced to date, has received a year and a day. Stira and Ladopoulos are scheduled for sentencing on July 23. In a prepared statement after court adjournment, United States Attorney Mary Jo White said that the investigation leading to the indictment was performed jointly by the United Secret Service and the Federal Bureau of Investigation. She praised both the Secret Service and FBI and thanked the Department of Justice Computer Crime Unit for "their important assistance in the investigation." Ruskin, Abene's attorney, told Newsbytes, "My personal opinion is that Mark has outgrown the phase in his life in which he performed the activities to which he confessed. He wants to use his considerable computer talents in manners that will be productive to society." Fishbein told Newsbytes, "The government is satisfied with the successful end to an important case. We hope that other people involved in illegal computer activities recognize that the Federal Government takes these cases very seriously." (Barbara E. McMullen & John F. McMullen/19930706) John F. McMullen mcmullen(a)mindvox.phantom.com Consultant, knxd(a)maristb.bitnet mcmullen(a)well.sf.ca.us Writer, 70210.172(a)compuserve.com mcmullen(a)panix.com Student, GEnie - nb.nyc mcmullen(a)eff.org Teacher Subject: Perhaps you could help From: mcmullen (John F. McMullen) Comments: Message-ID: <N3006B7w165w(a)mindvox.phantom.com> Date: Tue, 06 Jul 93 16:43:10 EDT Organization: [Phantom Access] / the MindVox system I received this from Mark and, with his permission, am sending it to you in the hope that you might write something. John ========================================================================== >From panix.com!mark Tue Jul 6 15:31:07 1993 Return-Path: <mark(a)panix.com> Received: from panix.com by mindvox.phantom.com with smtp (Smail3.1.28.1 #5) id m0oDIjD-0009STC; Tue, 6 Jul 93 15:30 EDT Received: by panix.com id AA14749 (5.65c/IDA-1.4.4 for mcmullen); Tue, 6 Jul 1993 15:25:42 -0400 From: Phiber Optik <mark(a)panix.com> Subject: Personal request... Friends and fellow netters: I regret to inform you all that after much stress and anxiety, I decided the risk of loss to be too great, and have accepted a guilty plea in my case. All things considered, it seemed the only thing to do in order to avoid the possibility of a much harsher sentence in the event things did not go well during trial. I entered my plea on Friday, July 2nd, and am to be sentenced this November. I'm sending this letter to those who were under consideration for testifying in my favor as character/expert witnesses, and I would greatly appreciate if you could put together letters of recommendation attesting to my character. These letters would be considered by the judge and the probation department and would help me in my review for sentencing. If there are any questions, feel free to reply, or you can contact my lawyers, Paul Ruskin and Carl Hartmann, at 212/223-3330. Thank you, - -Mark. ------- End of Forwarded Message

1 0

Clipper committee: open meetings required by law?
by L. Detweiler 09 Jul '93

09 Jul '93

Subject: Clipper review committee must hold open meetings, etc! Date: Tue, 06 Jul 93 15:48:18 -0700 From: gnu(a)cygnus.com According to the Federal Advisory Committee Act (5 USC app. 2), the panel of cryptographers who are reviewing the Skipjack algorithm qualify as an advisory committee, and must hold open meetings, announce the location and duration of meetings, make transcripts available under FOIA, etc. 5 U.S.C app. 2 (sec. 3) (2) The term "advisory committee" means any committee, board, commission, council, conference, panel, task force, or other similar group, or any subcommittee or other subgroup thereof (hereafter in this paragraph referred to as "committee"), which is: (A) established by statute or reorganization plan, or (B) established or utilized by the President, or (C) established or utilized by one or more agencies, in the interest of obtaining advice or recommendations for the President or one or more agencies or officers of the Federal Government, except that such term excludes (i) the Advisory Commission on Intergovernmental Relations, (ii) the Commission on Government Procurement, and (iii) any committee which is composed wholly of full-time officers or employees of the Federal Government. (3) The term "agency" has the same meaning as in section 551(1) of Title 5. ... (sec 10) (a) (1) Each advisory committee meeting shall be open to the public. (2) Except when the President tdetermines otherwise for reasons of national security, timely notice of each such meeting shall be published in the Federal Registers, and the Administrator shall proescribe regulations to provide for other types of public notice to insure that all interested persons are notified of such meeting prior thereto. [Administrator = Administrator of General Services] (3) Interested persons shall be permitted to attend, appear before, or file statements with any advisory committee, subject to such reasonable rules or regulations as the Administrator may prescribe. (b) Subject to section 552 of Title 5, United States Code [the FOIA], the records, reports, transcripts, minutes, appendixes, working papers, drafts, studies, agenda, or other documents which were made available to or prepared for or by each advisory committee shall be available for public inspection and copying at a single location in the offices of the advisory committee or the agency to which the advisory committee reports until the advisory committee ceases to exist. (c) Detailed minutes of each meeting...shall be kept... (d) Subsections (a)(1) and (a)(3) of this section shall not apply to any portion of an advisory committee meeting where the President, or the head of the agency to which the advisory committee reports, determines that such portion of such meeting may be closed to the public in accordance with subsection (c) of section 552b of Title 5, United States Code [the Government in the Sunshine Act]. Any such determination shall be in writing and shall contain the reasons for such determination... [This lets them close portions of the meeting that are classified. But they must hold an open meeting anytime their discussion is not classified. And they must vote publicly about what portions of the meeting to close.] ... (sec 11) (a) Except where prohibited by contractural agreements entered into prior to the effective date of this Act, agencies and advisory committees shall make available to any person, at actual cost of duplication, copies of transcripts of agency proceedings or advisory committee meetings. Read over the whole act (it's in the annual Justice Dept. "FOIA Case List" publication) and then let's find out whether NIST is following the rules here... The Sept 91 case list has about 40 FACA cases listed. The recent controversy over Hilary's health care advisory task force is also an FACA case. Thanks to Whit Diffie for thinking of this. John ------- End of Forwarded Message

1 0