August 2002 - cypherpunks-legacy

rebuttal in ongoing APster stoush
by Matthew X 29 Aug '02

29 Aug '02

http://www.anti-state.com/murphy/murphy18.html "We have always lived in slums and holes in the wall. We will know how to accommodate ourselves for a time. For you must not forget, we can also build. It is we who built those palaces and cities here in Spain and America and everywhere. We, the workers, can build others to take their place. And better ones. We are not in the least afraid of ruins. WE are going to inherit the earth. There is not the slightest doubt about that. The bourgeoisie might blast and ruin its own world before it leaves the stage of history. We carry a new world, here in our hearts. That world is growing this minute." Buenaventura Durruti:

1 0

Norton AntiVirus detected and quarantined a virus in a message yo u sent.
by NAV for Microsoft Exchange-IRASERVER 29 Aug '02

29 Aug '02

Recipient of the infected attachment: Moira O'Brien\Inbox Subject of the message: Rights reserved. One or more attachments were quarantined. Attachment dirsearch[1].bat was Quarantined for the following reasons: Virus UNAUTHORIZED FILE was found.

1 0

Re: PROTECT YOUR COMPUTER AND YOUR VALUABLE INFORMATION! PRSEZUNYJ
by cmobm＠hotmail.com 29 Aug '02

29 Aug '02

1 0

Fwd: EFFector 15.26: EFF Share-In 2002, EFF Panels at DragonCon
by Steve Schear 29 Aug '02

29 Aug '02

>* Electronic Frontier Foundation Holds Second Annual Share-In > >John Perry Barlow, Mountain Girl Garcia Host Free Music Fest > >San Francisco - Join the Electronic Frontier Foundation and five Bay >Area bands for an afternoon of live music and outdoor fun at EFF's >second annual Share In. The festival will be held in Golden Gate >Park's Music Concourse Bandshell on Saturday, September 14th from noon >- 5pm. The celebration of independent music will be hosted by Grateful >Dead lyricist and EFF co-founder John Perry Barlow, and former wife of >the late great Jerry Garcia, Mountain Girl Garcia. Bummer, its the same day as the 10th Anniversary Bay Area CP meeting. steve

1 0

RE: RIAA: Feeling Burn of Ripped CDs
by Eugen Leitl 29 Aug '02

29 Aug '02

On Wed, 28 Aug 2002, Sunder wrote: > http://www.wired.com/news/print/0,1294,54773,00.html > > claims: > > "Shipments of CDs dropped 7 percent in the first six months of this year, > a fact attributed to an increase in music downloads through file-trading > services, according to a report issued Monday by the Recording Industry > Association of America (RIAA). " They had to produce a lie to counter Forrester Research and Jupiter Media Metrix' study (caveat, engage dekrauting device of choice before viewing): http://www.heise.de/newsticker/data/jk-14.08.02-005/ http://www.heise.de/newsticker/data/anw-05.05.02-003/

1 0

Re: right MTA for crypto support
by pgut001＠cs.auckland.ac.nz 29 Aug '02

29 Aug '02

Eugen Leitl <eugen(a)leitl.org> writes: >It's relatively easy to turn on TLS in sendmail. It's not secure against >active attackers that can modify the data in the TCP stream but it's better >than nothing. Actually it's better than any other mail security out there. See the slides for my talk at Usenix Security (http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02_slides.pdf) for more details (the StartTLS stuff is about halfway through). Peter.

2 1

Re: Cryptographic privacy protection in TCPA
by Nomen Nescio 29 Aug '02

29 Aug '02

Carl Ellison suggested an alternate way that TCPA could work to allow for revoking virtualized TPMs without the privacy problems associated with the present systems, and the technical problems of the elaborate cryptographic methods. Consider first the simplest possible method, which is just to put a single signature key in each TPM and allow the TPM to use that to sign its messages on the net. This is reliable and allows TPM keys to be revoked, but it obviously offers no privacy. Every usage of a TPM key can be correlated as coming from a single system. TCPA fixed this by adding a trusted third party, the "Identity CA" who would be the only one to see the TPM key. But Carl offers a different solution. Instead of burning only one key into the TPM, burn several. Maybe even a hundred. And let these keys be shared with other TPMs. Each TPM has many keys, and each key has copies in many TPMs. Now let the TPMs use their various keys to identify themselves in transactions on the net. Because each key belongs to many different TPMs, and the set of TPMs varies for each key, this protects privacy. Any given usage of a key can be narrowed down only to a large set of TPMs that possess that key. If a key is misused, i.e. "scraped" out of the TPM and used to create a virtualized, rule-breaking software TPM, it can be revoked. This means that all the TPMs that share that one key lose the use of that key. But it doesn't matter much, because they each have many more they can use. Since it is expected that only a small percentage of TPMs will ever need their keys revoked, most TPMs should always have plenty of keys to use. One problem is that a virtualized TPM which loses one of its keys will still have others that it can use. Eventually those keys will also be recognized as being mis-used and be revoked as well. But it may take quite a while before all the keys on its list are exhausted. To fix this, Carl suggests that the TPM manufacturer keep a list of all the public keys that are in each TPM. Then when a particular TPM has some substantial fraction of its keys revoked, that would be a sign that the TPM itself had been virtualized and all the rest of the keys could be immediately revoked. The precise threshold for this would depend on the details of the system, the number of keys per TPM, the number of TPMs that share a key, the percentage of revoked keys, etc. But it should not be necessary to allow each TPM to go through its entire repertoire of keys, one at a time, before a virtualized TPM can be removed from the system. Carl indicated that he suggested this alternative early in the TCPA planning process, but it was not accepted. It does seem that while the system has advantages, in some ways it shares the problems of the alternatives. It provides privacy, but not complete privacy, not as much as the cryptographic schemes. And it provides security to the TPM issuers, but not complete security, not as much as the Privacy CA method. In this way it can be seen as a compromise. Often, compromise solutions are perceived more in terms of their disadvantages than their benefits. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

RE: RIAA: Feeling Burn of Ripped CDs
by Sunder 29 Aug '02

29 Aug '02

http://www.wired.com/news/print/0,1294,54773,00.html claims: "Shipments of CDs dropped 7 percent in the first six months of this year, a fact attributed to an increase in music downloads through file-trading services, according to a report issued Monday by the Recording Industry Association of America (RIAA). " Hmmm, that's interesting, gee, we were having a really great economy the first six months of this year. What, with the aftermath of the terrorist attacks, and the bursting of the dot com bubble, the fall of so many telecoms, and all the thousands upon thousands of layoffs.. I really can't see why people wouldn't be buying CD's in droves with all their disposable income... Gee, it must be the mp3 pirates, yeah, that's the ticket... yeah, it's that napster thing that did it... yeah, that's why the buttstreet boys and the other cocksucking boy and girl bands have had little cd sales, it's not because their music is overpromoted shit that's far less useful than the billions of giveaway AOL coaster cd's, who get less than a penny per sold album anyway and have such great incentive to put-out (tee hee) more of the same... No! It's because they're so popular that every gnutella poppin' teenage fiend who gets thousands of dollars a day in allowance decided to priate their precious unique, creative, and wonderful songs which never sound anything like, and deprive the poor RIAA executives! Oh, poor RIAA, their executives won't be able to support their cocaine habbits anymore, waaa, they'll have to go back to smoking ganja again, Oh, poor, poor bastards, no more personal jets and hookers^H^H^H^H^H^H^H personal massage therapists. Oh, the poor starving RIAA executives! My heart just bleeds for their plight! We must act now to stop the pirates. I know, I know, I'll call my congressman right now, and get all my friends to do the same! We must end this carnage right now! ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :NSA got $20Bil/year |Passwords are like underwear. You don't /|\ \|/ :and didn't stop 9-11|share them, you don't hang them on your/\|/\ <--*-->:Instead of rewarding|monitor, or under your keyboard, you \/|\/ /|\ :their failures, we |don't email them, or put them on a web \|/ + v + :should get refunds! |site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0

nosex Registration
by Coollist Subscription 29 Aug '02

29 Aug '02

Hello This is the automatic list management system for the nosex(a)coollist.com mailing list. This is a FREE service. Before you can participate in discussions or receive postings to this group, we must confirm that you actually want to receive them. A short description of the nosex list: ---------------------------------------------------------------------------- Over 5000+ Electronic / Computer Products and Supplies ---------------------------------------------------------------------------- If you would like to participate in this mailing list, please visit the following web page on the web: http://28.nu/vrfy/?1030479123.nosex.847705 If you would like more information about this mailing list, please visit the following URL: http://www.coollist.com/group.cgi?l=nosex ################################################################### You have not been added to this list until you have confirmed your subscription by visiting the above webpage. If you do not wish to accept his/her invitation or if this email has been sent to you in error, please disregard this email. If you feel that this email is an abuse of our network/services, please email support(a)coollist.com. ################################################################### Thank you. This mailing list is managed FREE by: Coollist - The FREE Mailing List (http://www.coollist.com) [63.164.179.98 ]

1 0

An opportunity for you. It is an advert, but well worth reading! <adv>
by ted 29 Aug '02

29 Aug '02

Hi there You get emails every day, offering to show you how to make money. Most of these emails are from people who are NOT making any money. And they expect you to listen to them? If you want to make money with your computer, then you should hook up with a group that is actually DOING it. We are making a large, continuing income every month. What's more - we will show YOU how to do the same thing. This business can be done completely by internet and email, and you can even join for free to check it out first. If you can send an email, you can do this. No special "skills" are required. How much are we making? Below are a few examples. These are real people, and most of them work at this business part-time. But keep in mind, they do WORK at it - I am not going to insult your intelligence by saying you can sign up, do no work, and rake in the cash. That kind of job does not exist. But if you are willing to put in 10-12 hours per week, this might be just the thing you are looking for. N. Gallagher: $3000 per month T. Hopkins: $1000 per month S. Johnson: $6000 -$7000 per month V. Patalano: $2000 per month M. South: $5000 per month J. Henslin: $7000 per month This is not income that is determined by luck, or work that is done FOR you - it is all based on your effort. But, as I said, there are no special skills required. And this income is RESIDUAL - meaning that it continues each month (and it tends to increase each month also). Interested? I invite you to find out more. You can get in as a free member, at no cost, and no obligation to continue if you decide it is not for you. We are just looking for people who still have that "burning desire" to find an opportunity that will reward them incredibly well, if they work at it. To grab a FREE ID#, simply sign up at http://www.geocities.com/bizted/ or reply to this email. subject line "Give me a FREE ID #" and write this phrase: "Email me details about the club's business and consumer opportunities" Be sure to include your: 1. First name 2. Last name 3. Email address (if different from above) We will confirm your position and send you a special report as soon as possible, and also Your free Member Number. That's all there's to it. We'll then send you info, and you can make up your own mind. Looking forward to hearing from you! Sincerely, Ted P.S. After having negative experiences with network marketing companies I had pretty much given up on them. This is different - there is value, integrity, and a REAL opportunity to have your own home-based business... and finally make real money on the internet. Don't pass this up..you can sign up and test-drive the program for FREE. All you need to do is get your free membership. **************************************************************** This e-mail is sent in compliance with strict anti- abuse and NO SPAM regulations. Your address was collected as a result of either posting to a link, a free classified ad, or you have sent me your business proposition by e-mail in the past. You may remove your e-mail address at no cost to you whatsoever by simply clicking on the Reply button and typing "Remove" in the subject line. ********************************************************************

1 0