December 2003 - cypherpunks-legacy

POINTERS: 02 08 96 Edupage
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, 02 08 96 Edupage includes-- COPYRIGHT IN THE DIGITAL AGE (European Film Companies Alliance: "It's mine!") INTERNET USAGE POLICIES (Employees' rights: NOT!) Cordially, Jim NOTE. Archives: http://www.educom.edu Edupage dated 02 08 96 is archived under date 02 09 96.

1 0

Re: China
by Bill Stewart 17 Dec '03

17 Dec '03

At 07:18 PM 2/10/96 +0530, you wrote: > Remember that starting this year, satellites of Iridium and other >LEO satellite projects will start to go up, spreading bandwidth around >the world. How will the Chinese government build a firewall against >satellites? Say, for instance orbiting anonymous remailers with pgp? Will >happen some day. Remember that much of censorship, as with cryptography, is economics. With Iridium satellite time at $3/minute, charged to the recipient, it's well within the financial means of a Banned Pharmaceutical Wholesaler, and well outside the financial means of an average Chinese university student, partly because the Chinese economy has much lower price and wage structures than the major Western economies do. On the other hand, renting a few gigabytes per day of satellite broadcast time to broadcast isn't out of the question, or at least renting a few tens of megabytes per day wasn't out of the question a couple years ago :-) On the other hand, as you say, if the Chinese government tries a Tien-an-men in cyberspace, the students _will_ have better tanks. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0

Re: American Reporter on CDA 2/8/96 (fwd)
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:28 AM 2/10/96 +0000, Sean Gabb. wrote: >What a splendid article! I will keep it on disk forever. Congratulations! You're now an Unindicted Co-Conspirator! #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0

Re: Privacy Without Tears
by Bill Stewart 17 Dec '03

17 Dec '03

>>If everyone not only has a link to these pages in text, but also has their >>"PGP secured!", or similar little graphic on their pages, linked to these >>sites as well, it would save a lot of people a lot of redundant explaining >>and it would help spread the word about PGP like wildfire to the masses. > >I like that a lot! A nifty graphic would be the old-fashioned engraving of a >padlock on the O'Reilly book about PGP. ViaCrypt's PGP version for Windows has a more modern-looking padlock; the icon I use for the Program Manager group I keep PGP, Private Idaho, etc. in is the Safe icon that's one of Program Manager's builtins. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0

No Subject
by Julian Assange 17 Dec '03

17 Dec '03

>From proff Sat Feb 10 18:09:57 1996 Subject: new zip cracking code To: cypherpunks(a)toad.com Date: Sat, 10 Feb 1996 18:09:57 +1100 (EST) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 3806 Does anyone have any pointers to cryptanalysis papers on the Zip encryption scheme (presented below)? I've seen a few MSDOS executeables which used some sort of brute force attack, which didn't seem particularly intelligent or effective for long passwords. If anyone has some pointers, or source I'd be glad to hear of it. From what I can see of Schlafly's algorithm a bute force attack could be speed up a great deal by pre-compution and expansaion of elements of the first 3 or so rounds at the very least. Ideas anyone? Decryption ---------- The encryption used in PKZIP was generously supplied by Roger Schlafly. PKWARE is grateful to Mr. Schlafly for his expert help and advice in the field of data encryption. PKZIP encrypts the compressed data stream. Encrypted files must be decrypted before they can be extracted. Each encrypted file has an extra 12 bytes stored at the start of the data area defining the encryption header for that file. The encryption header is originally set to random values, and then itself encrypted, using 3, 32-bit keys. The key values are initialized using the supplied encryption password. After each byte is encrypted, the keys are then updated using psuedo-random number generation techniques in combination with the same CRC-32 algorithm used in PKZIP and described elsewhere in this document. The following is the basic steps required to decrypt a file: 1) Initialize the three 32-bit keys with the password. 2) Read and decrypt the 12-byte encryption header, further initializing the encryption keys. 3) Read and decrypt the compressed data stream using the encryption keys. Step 1 - Initializing the encryption keys ----------------------------------------- Key(0) <- 305419896 Key(1) <- 591751049 Key(2) <- 878082192 loop for i <- 0 to length(password)-1 update_keys(password(i)) end loop Where update_keys() is defined as: update_keys(char): Key(0) <- crc32(key(0),char) Key(1) <- Key(1) + (Key(0) & 000000ffH) Key(1) <- Key(1) * 134775813 + 1 Key(2) <- crc32(key(2),key(1) >> 24) end update_keys Where crc32(old_crc,char) is a routine that given a CRC value and a character, returns an updated CRC value after applying the CRC-32 algorithm described elsewhere in this document. Step 2 - Decrypting the encryption header ----------------------------------------- The purpose of this step is to further initialize the encryption keys, based on random data, to render a plaintext attack on the data ineffective. Read the 12-byte encryption header into Buffer, in locations Buffer(0) thru Buffer(11). loop for i <- 0 to 11 C <- buffer(i) ^ decrypt_byte() update_keys(C) buffer(i) <- C end loop Where decrypt_byte() is defined as: unsigned char decrypt_byte() local unsigned short temp temp <- Key(2) | 2 decrypt_byte <- (temp * (temp ^ 1)) >> 8 end decrypt_byte After the header is decrypted, the last two bytes in Buffer should be the high-order word of the CRC for the file being decrypted, stored in Intel low-byte/high-byte order. This can be used to test if the password supplied is correct or not. Step 3 - Decrypting the compressed data stream ---------------------------------------------- The compressed data stream can be decrypted as follows: loop until done read a charcter into C Temp <- C ^ decrypt_byte() update_keys(temp) output Temp end loop -- +----------------------------------+-----------------------------------------+ |Julian Assange | "if you think the United States has | |FAX: +61-3-9819-9066 | stood still, who built the largest | |EMAIL: proff(a)suburbia.net | shopping centre in the world?" - Nixon | +----------------------------------+-----------------------------------------+

1 0

WIT_nes
by John Young 17 Dec '03

17 Dec '03

The NYT Web site does not seem to offer today's Sunday magazine article on the federal Witness Security Program, as revealed through one family's trauma of official death and rebirth: WIT_nes (38k in 2 parts)

1 0

Re: Reasons in support of crypto-anarchy WAS Re: Why am I (fwd)
by John Young 17 Dec '03

17 Dec '03

It's hard to tell the difference between "Assasination Politics" and government-sponsored provocateurism, a well-documented practice to stigmatize anarchical and anti-authoritarian ventures. However, it takes guts and thick skin to advocate overthrow of authority, knowing that reasonable people will think you're a nut seeking celebrity martyrdom. Happily for the careers of agent-and-anarchist back-stabbing back-scratchers, there is no easy way to know for sure which is which, or even if there's any difference when the media juggernauts are provocateuring both roles for melodramatic infotainment.

1 0

URLs for Anon remailers?
by lunaslide＠loop.com 17 Dec '03

17 Dec '03

Anybody got some good URLs for info on anonymous remailers for novices and experienced users alike? I need to know which are which so I can hand them out like candy to my .edu friends who aren't _as_ net savvy, but aren't dumb as dirt clods either. Much appreciated. lunaslide "Prohibition... goes beyond the bounds of reason in that it attempts to control a man's appetite by legislation and makes a crime out of things that are not crimes... A prohibition law strikes a blow at the very principles upon which our government was founded." - -- Abraham Lincoln On the meridian of time there is no injustice, only the poetry of motion creating the illusion of truth and drama. Henry Miller ________________________________________________________________ -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCPAzEX3QEAAAEEAOGQjhnqGH29pO1WDaXs5GFOVPhCBWyYEk9XEwRmscjveWzH AhA6DeOA480zWNqQURyqE2yPmR8WzT+OXYqmeiQiycKyFA41Vs/Ruf+gXXxe7uXS L5BK3K8oKbfoH0D5/TAkMT4r6BprXFQz4pFc3gY2SSaSPElpMjKHaKBsRsyRABEB AAG0HUplZmYgQ29ubiA8bHVuYXNsaWRlQGxvb3AuY29tiQCVAwUQMRffHzKHaKBs RsyRAQGNhwP9E9xEZ9/LCKnhgtnrqgD7pDoXG2pCy8FoyfFjoImGkG+jF1wELXmB Z0mf8F8CgYkys0mif1XeGDMelr1gzlZAm6LgQt4kcvztMW/aRLn18QP+iwltVT/L p8D37mitOjvuk46sWgAChIaPPPIeg/EaYQjQkmlpWKsEYIoTRy+E8mU= =4Gku -----END PGP PUBLIC KEY BLOCK-----

2 1

Re: China
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Bill Stewart <stewarts(a)ix.netcom.com> writes: > At 01:54 PM 2/10/96 EST, you wrote: > >It's not difficult to imagine that governments will seek to regulate the > >possession of modems again. Some may recall that in the U.S. it used to be > >technically illegal to connect a modem to the phone jack without a permissio > >from AT&T. > > Actually, permission from the local phone companies, who owned the system, > I assume? (Though I don't actually remember which parts of The Phone Company > were involved in the Carterphone decision.) Nope. I used modems back when the local phone company _was AT&T. :-) --- Dr. Dimitri Vulis Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: Encryption and Backups
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- GNU-Zip (GZip) format has encryption defined, but (AFAIK) not yet implemented. The probably won't use the vile PKZip method... and they probably will implement an unpatented method, if ever. Mark C. Henderson wrote: > GNU tar is not the commercial backup solution many folks will be > looking for, but it works, and has nice built-in hooks which are > intended to call a compression program. > > One can also use these options to call an encryption program, as long > as the encryption program takes stdin as input, stdout as output, > encrypts by default, and decrypts when given the -d option. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMR4ebyoZzwIn1bdtAQE9gwF/cDRa2Ke0i1LoezO68du4VnaR9oQmrRdS qzAQ4mM3zNsiYVRDtDrz3yqlWwtUcse3 =DQKs -----END PGP SIGNATURE-----

1 0

Re: "Rights"
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 10:15 AM 2/10/96 -0600, Ed Carp wrote: >What happens when there *is* no remedy, when there are no other sites to >go to, when there are no employers who would refrain from violating an >employee's privacy? What then? Then start your own business, as many of the people on this list have done at one time or another. And that is why, under real capitalism, unlike socialism, there will always be employers horrified by the idea of invading their employees privacy. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

cypherpunks, digital cash, and my doctoral research
by David J. Phillips 17 Dec '03

17 Dec '03

I'm a PhD student at the Annenberg School for Communication at the University of Pennsylvania. My research is on the ways that various groups influence the development of "digital cash" systems. I'd like to work with cypherpunks for part of this research. Right now, I expect this work to include reviewing the list's archives, participating in the list and in physical meetings, and interviewing some people. If you have any thoughts on this (or feelings: revulsion, intrigue, pique perhaps), please drop me a line. Thanks. djp David J. Phillips, Annenberg School, University of Pennsylvania I'm researching cultural, economic, legal, and technical aspects of the development of digital cash systems. Let me know if you're interested.

1 0

Re: PGP & Seamless Pegasus
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- JNPGP also has problems when you're encrypting to an address that isn't on the keyring. It'll barf and send the plaintext message out. A really bad flaw. It'd be nice to see it or another utility incorporate support for anonymous remailers, etc. IMO, all this will be made much easier when PGP 3.0 exists as a Windows or OS/2 DLL. PGP will probably take off beautifully then. Rob. Tripp Hardy wrote: > > Let's not celebrate just yet. While it is a great improvement, it still = > causes errors if you try to encrypt an attached file and conventional = > encryption still doesn't work here. The only one that is working all = > around for me is Private Idaho. We are moving in right direction = > though. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMR4cbCoZzwIn1bdtAQGi0wF/X9JB0tJU5H0JNf141u+F7Zf1uDNSUnXx H6STdM5urkwtWvvZCxM9v0lt03D+ro7r =CSSL -----END PGP SIGNATURE-----

1 0

Re: Media: FV story makes ClariNet
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I caught the last few seconds of a CNN story on FVs FUD this morning. It followed with the RSA selling crypto to China story, where they clearly opted for soundbytes... the cut Phil Z's words short when he was talking about the benefits of crypto... they asked him something about why crypto is good for national security and you hear him say a few economic things but then he's cut off (probably before he can mention personal freedom as benefitting national security... but that's only a guess). Joseph M. Reagle Jr. wrote: > > >SAN DIEGO, CALIFORNIA, U.S.A., 1996 FEB 7 (NB) -- First Virtual Holdings, > >a company offering an Internet commerce system, has demonstrated a > >program which, it says, makes all existing software systems that > >encrypt credit card numbers and transmit them over the Internet > >vulnerable to security breaches. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMR4dqCoZzwIn1bdtAQGZjgGAgg71SCvlia7qcZ0aGGhURlsr3jLx9SDr vezyWWts8apZ2QFVWw9rIuWPC5t9wMrr =CRFm -----END PGP SIGNATURE-----

1 0

YOU SHOULDA BEEN THERE!
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, I easily had 100+ people at my party last night. Attendees on this list are invited to share there impressions, but as far as I could tell it was a resounding success for crypto-anarchy solidarity. There will will be some great pictures on the Web site sometime this week (http://www.c2.org/party/masquerade.html) Amond them will be a picture of Sameer dancing like a madman, Annette Haven, the movie star I promised you (a legend of X-rated films) and your's truly, driving home a point about the CDA during an discussion with Romana Machado, plus many others. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: V-chips, CC, and Motorcycle Helmets
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The V-Chip is a political kluge, nothing more. It's a useless technology that at best will encourage lax parents to further surrender their kids to the neon-nanny. And besides... why rate program just on violence? Why not "quality" from a variety of orgs? Other content ratings, from various organizations. And why limit it to ratings... why not a special subband of broadcast used for sending out schedule updates? Subtitles (in other languages, or English for foreign films...)? etc.? etc.? Chances are the V-Chip will interfere with any such expansions of TV capabilities in the future... Then again, the heck with TV. I rarely watch it. I prefer the radio myself... at least they didn't require V-Chips for that. And with the Internet "expanding", chances are in a generation or two TV will be a dead technology. Rob. Timothy C. May wrote: > ObCypherpunks: A truly surprising number of people on this list are on the > one hand lambasting the government for thievery, incompetence, corruption, > and violation of their rights, while on the other hand explaining why they > think some particular intrusion is justified. We have people arguing for > mandatory V-Chips, for Data Privacy Inspection Services, for > anti-discrimination laws, and for government key signing services. > > It's not a far jump from arguing any of these points to talking about the > "legitimate" (their term) needs of the government to ensure that encryption > is not used for criminal purposes, for kidnapping and extortion, for tax > evasion, etc. > > People need to think about the powerful implications of strong crypto, and > decide if they are _for_ access to strong crypto by citizens, or _against_ > it. All things follow from this decision. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMR4ixSoZzwIn1bdtAQEEzgGAnj773pwYGJvLo3FYE7JnZ+1+sejbdvCc ymgeXlua8+0KF46o0ylLCHyhAS/IhasI =jzi4 -----END PGP SIGNATURE-----

1 0

A Cyberspace Independence Declaration
by Stephan Mohr 17 Dec '03

17 Dec '03

Hi, I just put J.P. Barlow's 'A Cyberspace Independence Declaration' on my homepage: http://www.uni-tuebingen.de/uni/sii/sm/indep.htm. There is a little introduction by M.S. Bilk too. Stephan

1 0

Re: Regulation of citizen-alien communications (Was: Choices)
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 10:24 AM 02/11/96 +0000, Ed Carp <erc(a)dal1820.computek.net> wrote: >On Sun, 11 Feb 1996, Dr. Dimitri Vulis wrote: > ... deletia ... > >Oh? You mean that I can get busted for giving my Canadian spouse a copy >of PGP? > Nah - Canada is America's 51st state :-) Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMR1idcVrTvyYOzAZAQFBDgP+MoIrY5OpRnLTBxpvsgTlHbkoEl5yHkYz JbRr64DV/y0daD5iVI0uSOLDWXHVza+CBdgvZDzI4NF9ShDp3PGheEi/fa5uKD0O SfkwWAv9vcqNC4fPUCP7A/+eUuVPPSZff8Iy29hnb/JzxHZLyqQiHaOZK7wtNVnw XZha0gw6LYs= =6Fh+ -----END PGP SIGNATURE----- ------------------------------------------------------------- "It is not the function of our Government to keep the citizen from falling into error; it is the function of the citizen to keep the Government from falling into error." Robert H. Jackson (1892-1954), U.S. Judge <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geocities.com/CapitolHill/1148

1 0

...OR IF NOT, you shoulda been here.
by gimonca＠skypoint.com 17 Dec '03

17 Dec '03

While people in the Bay Area were taking part in Naked Jello Wrestling and other dubious pursuits, the best 'n the brightest of Minnesota were pestering the waitstaff at an Applebee's franchise overlooking frozen Lake Calhoun in Minneapolis, where yet another good time (though maybe not as spicy a time) was had by all. If you want to know more, you'll have to ask: we didn't have a hot tub, so none of us expect a book deal anytime soon.

1 0

Re: Regulation of citizen-alien communications (Was: Choices)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:01 PM 2/11/96, Dr. Dimitri Vulis wrote: >As I read it, a college professor might get busted for explaining his own new >crypto research to a class where some students happen not to be U.S. citizens. Considering that most engineering and computer science classses are approaching 50 percent non-U.S.-citizen, and considering that no such professors have yet been busted, I'm inclined to think this is a non-threat. (Indeed, it's a _potential_ threat, and one we should bear in mind, but it seems likely that no such prosecutions have occurred or will occur.) What we talk about every day on this list and the non-prosecution of any of us should be evidence about where the real emphasis is. (The investigation of Zimmermann and Goen was related to the appearance on foreign shores of a real chunk of code, PGP 1.0, and not simple communication with aliens.) >Of course we all know this already. Just some U.S. people prefer to ignore the >mote in their own eye and to fight censorship in exotic remote developing >countries. Do you remember how U.S. Gov't tried to prevent the publications of >research papers on zero-knowledge proofs? No, could you provide some details? Who was pressured? Micali? Goldwasser? Rackoff? Please share the details. There has been an ineffective "voluntary review" process for academic researchers, and perhaps this is what Dimitri is referring to. But this did not stop the publication of the ZKIPS work a decade or so ago. --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Public Key
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've gotten a couple of requests for my public key (which is also available via my CDA-violating home page), so thought I'd go ahead and post it here, as well. My apologies for the loss of bandwidth :-) Dave Merriman - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAi3uZ2MAAAEEALWQtxX77SZSaFls6cVbPp+fZS4MNyKK3ZFYQo0qWyj+0tMq YgRTPRJRaCQixo63RttknogfPp514qdVMZw5iPeOXmD+RxrmTTwlbGqA7QUiG1x5 LG2Zims5zk4U6/rt8hwLh0/8E4lIb9r5d31qc8L1A9Twk/cmN8VrTvyYOzAZAAUR tCpEYXZpZCBLLiBNZXJyaW1hbiA8bWVycmltYW5AYXJuZXQuYXJuLm5ldD60KURh dmlkIEsuIE1lcnJpbWFuIDxtZXJyaW1hbkBtZXRyb25ldC5jb20+iQCVAwUQLqwC X5IDOImWiDcFAQHFfwP/Tm5v3zoijU9oYmAO1WVsw4+HamN0HdBKkDxPtuGeCmxN uiDPsucVjqctMfbh1WzCfNEbNfZdg3YVdDNgsQqlu4k8XznrbQSoQm3t5ySQNKvQ x0KisJnee0caVpEgQ4bwSfuv81TG08lJt4A0fIpXSllMnRkXenvXIBmgJTUklaiJ AJUDBRAupxG0qWOYkEirxV0BAUUJBACJ0FYXTlR9ncd0tNnYGOGSLO1scgt8IxUD MyQ2htEsfSNxD6jg303LuAA/Zset5p0JhACLLHbgtZlpYH4uQbjy9Ve9JrVm/6Sy sSnX1TfSNF5NoMcxGDYgNDRLtP/5jKRZ/hzH8vjHSWXnnN9Pb1MdYdWql4DjDQ+d IEm5sywbqIkAlQIFEC3uaE3Fa078mDswGQEBbI8D/0FiwDcbfeNyDVJ+7EIWHjIx VkIGu+ArYUEllR3GSBHVZ9Vh7n8bNXeNHMnG5cZ23TLMVvweyhxFS+cDi+I7omeD Nr6x65z500LxfUvLK5bSuSiBVkTp2z+/iojY/662JwKHzEEunuJ4CO8Yhxy11Cde szEX7DpXzRxLL92rEmO2 =nZak - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMR1jecVrTvyYOzAZAQFRJAQAl+yTpIMFJ1hzUzpsIywNu6jHNEe/bTSi 6DXftJPJlHM/6Wjf28z54M0RswZUiS2g4B4Eg5qqTgpWPrk6XtCQzYVF+lDNm9/3 UEGOqIlS4cf3iY40dkHj1S2jN5/WYew1UM0rgL07fObCryaBsXHCe8uHhfDu+VAn YGEB8L7yglI= =mevq -----END PGP SIGNATURE----- ------------------------------------------------------------- "It is not the function of our Government to keep the citizen from falling into error; it is the function of the citizen to keep the Government from falling into error." Robert H. Jackson (1892-1954), U.S. Judge <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geocities.com/CapitolHill/1148

1 0

Selling the Sizzle of Crypto
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:47 PM 2/11/96, Deranged Mutant wrote: >I caught the last few seconds of a CNN story on FVs FUD this morning. It >followed with the RSA selling crypto to China story, where they clearly >opted for soundbytes... the cut Phil Z's words short when he was talking >about the benefits of crypto... they asked him something about why crypto >is good for national security and you hear him say a few economic things >but then he's cut off (probably before he can mention personal freedom as >benefitting national security... but that's only a guess). I'm just about giving up on the "infotainment" media for ever getting the facts straight. Just not enough time, and they go for the most provocative statements to make the story "interesting." Even a longer format such as on the Newshour with Jim Lehrer (formerly the MacNeil-Lehrer Newshour) can barely get a coherent story on crypto and cyberspace issues out. If they interview several people, then maybe Mike Godwin will get 60 seconds, Kathy Cleaver will get 60 seconds, and then some rebuttal. No way to get the key ideas across. Ironically, there is some hope. I just got an "academic" paper to review, and one of the main URLs cited was Steven Levy's "Crypto Rebels" piece (the URL is http://www.hotwired.com/wired/1.2/features/crypto.rebels.html) I may be biased about this article, but I still think it to be the best introductory article on the crypto controversy. Academics citing popular articles! Well, Levy's article is a very good, and insightful, exposition of the issues and the coming battle between the two opposing points of view. (And it shows that popular-oriented articles need not be solely devoted to flash, sizzle, and outrageous comments, that ideas can be explored and positions contrasted.) Just thought I'd say something positive about journalism. --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

I decrypted Windows 95 share passwords...
by David R. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I just posted the following message to a few usenet groups. I thought it might be of interest here too. Note: I know nothing about cryptography, and I didn't have to know anything about cryptography in order to break this pitiful Microsoft 'code'. David Ross snakey(a)cs.umd.edu Here's the message I posted: I recently was fiddling around with my Windows 95 registry and decided to see just how "encrypted" passwords for shared items _really_ are. Well, after some experimentation, I was able to break the code! This was rather surprising to me, considering I'm just a college student with absolutely no background in encryption. I have submitted my findings to "Hack Microsoft" contest. =) The implications of this discovery are not extremely apparent. It would seem that anyone with access to your registry would already have access to anything else on your computer. Nevertheless, the flawed belief that an encrypted password stored in your registry is actually encrypted to a degree expected from a company such as Microsoft could lead to potential security holes. At least the fact that Microsoft _attempted_ to encrypt these passwords might indicate that they saw some reason themselves to have them inaccessable. The included C code (with a description of the Microsoft 'encryption' included) will decode a password for a shared item from its byte code in the registry. David Ross snakey(a)cs.umd.edu Here's the program: /* This program takes an 'encrypted' Windows 95 share password and decrypts it. * Look at: * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan * to find a machine's shares. Within the data for each share are two * registry entries, Parm1enc and Parm2enc. Parm1enc is the "Full access" * password. Parm2enc is the "Read only" password. * * David Ross 2/9/96 * snakey(a)cs.umd.edu * * Do not distribute this program for any commercial purpose without first * contacting me for permission. * * DO NOT USE THIS PROGRAM FOR ILLEGAL OR UNETHICAL PURPOSES! * * A technical description of the 'code' can be found later on in this * document. * * Oh yeah... a totally unsolicited self promotion here... If anyone has * a job for a junior year Computer Science student for summer '96, please * let me know! I'm familiar with Windows and Mac networking (especially * involving TCP/IP), fluent in C and C++, and working on becoming a * proficient Windows programmer. * */ #include <stdio.h> #include <string.h> #define BUFFER 30 int DecodeCharOne(unsigned char *); int DecodeCharTwo(unsigned char *); int DecodeCharThree(unsigned char *); int DecodeCharFour(unsigned char *); int DecodeCharFive(unsigned char *); int DecodeCharSix(unsigned char *); int DecodeCharSeven(unsigned char *); int DecodeCharEight(unsigned char *); main() { int i; /* Generic counter */ int eocc = 0; /* Records if there has been an error */ /* The following structure stores the encoded bytes. Decoded values * replace the encoded values as the decoding process moves along * The initial values show here are not used and are unimportant */ unsigned char mybytes[] = { 0x15, 0xba, 0x6d, 0x86, 0x73, 0x89, 0xf4, 0x4a }; unsigned short tempshort; /* Used as a go-between from sscanf() to mybytes[] so unaligned data accesses don't occur */ int goupto = 0; /* Records how many characters there are to be decoded */ /* The following code handles input */ char inpt[BUFFER]; char *inptptr; printf("Input the byte code in hex (ex: 76 d5 09 e3): "); fgets(inpt, BUFFER, stdin); inptptr = strtok(inpt, " "); if (inpt[0] != '\n') while ((inptptr != NULL) && (goupto < 8)) { sscanf(inptptr, "%hx", &tempshort); mybytes[goupto++] = tempshort; inptptr = strtok(NULL, " "); } /* Decode all the characters. I could have made this stop immediately * after an error has been found, but it really doesn't matter */ if (!DecodeCharOne(&mybytes[0])) eocc = 1; if (!DecodeCharTwo(&mybytes[1])) eocc = 1; if (!DecodeCharThree(&mybytes[2])) eocc = 1; if (!DecodeCharFour(&mybytes[3])) eocc = 1; if (!DecodeCharFive(&mybytes[4])) eocc = 1; if (!DecodeCharSix(&mybytes[5])) eocc = 1; if (!DecodeCharSeven(&mybytes[6])) eocc = 1; if (!DecodeCharEight(&mybytes[7])) eocc = 1; /* If the password could be decoded, print it */ if (eocc) printf("The encrypted password is invalid.\n"); else { printf("The decoded password is: \""); for (i = 0; i < goupto; i++) printf("%c",mybytes[i]); printf("\"\n"); } } /* End of main() */ /* * I will document this function, but not the seven other functions * which decode the subsequent seven characters. All of these functions * are essentially the same. Multiple functions are necessary though * because each column of the password has a different set of encoding * patterns. * * The following section will attempt to explain the encoding scheme * for share passwords as stored in the Windows 95 registry. I will * try to explain this as clearly as I can, however I really have no * background in encryption. If you have any questions, please feel * free to send them to me at snakey(a)cs.umd.edu. * * First off, share passwords can be anywhere from one character to * eight. "Read only" passwords and "Full access" passwords both use * the same encoding scheme, and so they both can be decoded by this * program. There is a one-to-one relationship between the number of * characters in a password and the number of bytes in the encoded * password stored in the registry. In fact, each encoded byte directly * corresponds to the letter in the corresponding column of the * unencoded password! Ie: If I change a password "passwd" to "masswd", * only the first byte of the encrypted password will change. Knowing * this, it is easy to see that all that needs to be done to decode * the password is to find a mapping from an encoded byte to a decoded * letter. That's what this program does. Unfortunately, things get * a little tricky because a letter in the first column of a password * is encoded using a slightly different algorithm than a letter * in the second column, and so on. * * There is another complexity which we do not really need to worry * about to a great extent, but we still need to be aware of. Many * characters, when entered into a password, map to the same encoded * byte. The best example of this is that both 'A' and 'a' are the * same as far as share passwords are concerned. There are numerous * other examples of this, and this allows us to effectively limit the * range of characters we need to be able to decode. The range of * ASCII values we will have to be able to decode turns out to be * from 32 to 159. ASCII values higher than 159 tend to map to * encoded bytes which also represent more normal ASCII values. So * if a user manages to create a password with high ASCII values * in it, that password will still be decoded by this program. * Although the decoded password won't look the same as the original, * it will work just as well. * * With all of the preliminaries out of the way, I can now move on * to describing the mapping from an encoded byte to it's corresponding * ASCII value. I think the best way to describe this would be through * a picture of exactly how the characters from 32 to 63 are mapped * out in the code for the first letter in a password. This table goes * beyond the 80 column format maintained in the rest of this document, * but it is really the best solution. If the table below doesn't look * right, load this file up in a text editor that supports greater than * 80 columns. * * Encoded byte (hex) - 1F 1E 1D 1C 1B 1A 19 18 17 16 15 14 13 14 11 10 0F OE 0D 0C 0B 0A 09 08 07 06 05 04 03 02 01 00 * ASCII value (decimal) - 42 43 40 41 46 47 44 45 34 35 32 33 38 39 36 37 58 59 56 57 62 63 60 61 50 51 48 49 54 55 52 53 * Pair # - |_6_| |_5_| |_8_| |_7_| |_2_| |_1_| |_4_| |_3_| |14_| |13_| |16_| |15_| |10_| |_9_| |12_| |11_| * Quad # - |__________2__________| |__________1__________| |__________3__________| |__________4__________| * 32 byte block # - |______________________________________________1______________________________________________| * * The "Pair #", "Quad #", and "32 byte block #" rows each are there to * make the general ordering of the code more visible. The first thing to * note is that the range of encoded byte values runs from 00 to 1f. This * will not always be the case for the first set of 32 characters. In * fact, the next set of 32 characters (ASCII 64 to ASCII 95) is not in * the range of 20 to 3f in encoded form. I never concerned myself with * predicting exactly where each of the four 32 byte ranges are aligned * within the range of 0 to 256. In my decoding scheme, I simply specify * the location of the first character in a 32 byte block (which I have * pre-determined via experimentation) and determine the locations of the * rest of the characters in the block relative to the inital value. This * amounts to a total of four hand-decoded characters for the entire code. * * From a starting point which is given (in this case the fact that ASCII * 32 is encoded as 0x15), my decoding scheme follows a pattern that is * probably already apparent to you if you have examined the above table * closely. First, if the encoded byte number is odd, it simple subtracts * one from this byte number to get the byte number of the encoded form of * the subsequent character. This is much more simple than it sounds. * As an example, given that the code for ASCII 32 is 0x15, the program * knows that the code for ASCII 33 must be 0x14. The tricky part is that * this is not always true for every code. Recall that there is a different * coding scheme for each of the 8 columns in a password, and that the above * table only describes the coding scheme for the first column. Other columns * reverse this relationship between the two ASCII values of a certain pair. * * Pairs are grouped into units of four, appearing in a predefined pattern. * In this case, the first pair (by first I mean the pair with the lowest * set of ASCII values) is put in the second slot of a quad (which contains * four pairs). The second pair is put in the first slot, the third is put * in the fourth quad, and the fourth is put in the third quad. This changes * depending on the specific code used (of the 8 possible). * * Quads also fill a block in the same manner, however the ordering is NOT * necessarily the same as the way pairs fit into quads! As I described * above, there are four blocks, and they fit into the entire range of * 128 values just as pairs fit into quads and quads fit into blocks, * via a pattern determined by whoever invented this encoding scheme. It * is important to realize that the range of 128 possible encoded * values can be anywhere within the range of 0 to 256. Ie: One block can * be positioned from 0x00 to 0x1f, while another block in the same code * can be positioned from 0xa0 to 0xbf. * * I realize that the above description is a bit complex, and it doesn't * really cover much of _how_ my program decodes the the encoded values. * If you honestly can't understand a word I've said, just go back to * the table and really take a long look at it. Print it out, put it * under your pillow when you go to sleep. Sooner or later the order * of it all will dawn on you and you should be able to step through * my code and see how it derives its answer, at least for the * DecodeCharOne() routine. Seven other tables (which I have rough * copies of here on notebook paper) were needed to come up with * the seven other decoders for the seven other character places. * */ int DecodeCharOne(unsigned char *mychar) { int i = 0; /* Keeps track of the decoded character # minus 32 */ int cletter = 1; /* Sets the current letter of the 8 char quad */ int blockl1 = 1; /* Sets the current quad */ int blockl2 = 1; /* Sets the current 32 char block */ int retval = 1; /* We are on this col of the table: */ unsigned char code = 0x15; /* The code for a space */ /* This is the main loop. It walks through each decoded character, finds * its corresponding encoded value, and looks to see if that's the same as * the encoded value we are looking for. If it is, we have found our * decoded character! */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code--; cletter++; break; case 2: code += 3; cletter++; break; case 3: code--; cletter++; break; case 4: code -= 5; cletter++; break; case 5: code--; cletter++; break; case 6: code+=3; cletter++; break; case 7: code--; cletter++; break; case 8: cletter = 1; switch (blockl1) { /* After we hit character number 8, we have */ case 1: /* to do a relative jump to the next quad */ code += 11; blockl1++; break; case 2: code -= 21; blockl1++; break; case 3: code += 11; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { /* After we hit the last quad, we have to */ case 1: /* jump to the next 32 character block. */ code = 0x75; blockl2++; break; case 2: code = 0x55; blockl2++; break; case 3: code = 0xb5; blockl2++; break; case 4: code = 0x15; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharOne() */ int DecodeCharTwo(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0xba; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code++; cletter++; break; case 2: code -= 3; cletter++; break; case 3: code++; cletter++; break; case 4: code += 5; cletter++; break; case 5: code++; cletter++; break; case 6: code -= 3; cletter++; break; case 7: code++; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code -= 11; blockl1++; break; case 2: code -= 11; blockl1++; break; case 3: code -= 11; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0xda; blockl2++; break; case 2: code = 0xfa; blockl2++; break; case 3: code = 0x1a; blockl2++; break; case 4: code = 0xba; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharTwo() */ int DecodeCharThree(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0x6d; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code--; cletter++; break; case 2: code += 3; cletter++; break; case 3: code--; cletter++; break; case 4: code -= 5; cletter++; break; case 5: code--; cletter++; break; case 6: code += 3; cletter++; break; case 7: code--; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code -= 5; blockl1++; break; case 2: code += 27; blockl1++; break; case 3: code -= 5; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0x0d; blockl2++; break; case 2: code = 0x2d; blockl2++; break; case 3: code = 0xcd; blockl2++; break; case 4: code = 0x6d; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharThree() */ int DecodeCharFour(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0x86; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code++; cletter++; break; case 2: code -= 3; cletter++; break; case 3: code++; cletter++; break; case 4: code -= 3; cletter++; break; case 5: code++; cletter++; break; case 6: code -= 3; cletter++; break; case 7: code++; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code += 13; blockl1++; break; case 2: code += 13; blockl1++; break; case 3: code += 13; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0xe6; blockl2++; break; case 2: code = 0xc6; blockl2++; break; case 3: code = 0x26; blockl2++; break; case 4: code = 0x86; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharFour() */ int DecodeCharFive(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0x73; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code--; cletter++; break; case 2: code--; cletter++; break; case 3: code--; cletter++; break; case 4: code += 7; cletter++; break; case 5: code--; cletter++; break; case 6: code--; cletter++; break; case 7: code--; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code += 7; blockl1++; break; case 2: code -= 25; blockl1++; break; case 3: code += 7; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0x13; blockl2++; break; case 2: code = 0x33; blockl2++; break; case 3: code = 0x23; blockl2++; break; case 4: code = 0x73; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharFive() */ int DecodeCharSix(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0x89; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code--; cletter++; break; case 2: code += 3; cletter++; break; case 3: code--; cletter++; break; case 4: code += 3; cletter++; break; case 5: code--; cletter++; break; case 6: code += 3; cletter++; break; case 7: code--; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code -= 13; blockl1++; break; case 2: code += 19; blockl1++; break; case 3: code -= 13; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0xe9; blockl2++; break; case 2: code = 0xc9; blockl2++; break; case 3: code = 0x29; blockl2++; break; case 4: code = 0x89; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharSix() */ int DecodeCharSeven(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0xf4; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code++; cletter++; break; case 2: code++; cletter++; break; case 3: code++; cletter++; break; case 4: code -= 7; cletter++; break; case 5: code++; cletter++; break; case 6: code++; cletter++; break; case 7: code++; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code += 9; blockl1++; break; case 2: code -= 23; blockl1++; break; case 3: code += 9; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0x94; blockl2++; break; case 2: code = 0xb4; blockl2++; break; case 3: code = 0x54; blockl2++; break; case 4: code = 0xf4; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharSeven() */ int DecodeCharEight(unsigned char *mychar) { int i = 0; int cletter = 1; int blockl1 = 1; int blockl2 = 1; int retval = 1; unsigned char code = 0x4a; /* The code for a space */ while((i<256) && (code != *mychar)) { switch (cletter) { case 1: code++; cletter++; break; case 2: code -= 3; cletter++; break; case 3: code++; cletter++; break; case 4: code += 5; cletter++; break; case 5: code++; cletter++; break; case 6: code -= 3; cletter++; break; case 7: code++; cletter++; break; case 8: cletter = 1; switch (blockl1) { case 1: code -= 11; blockl1++; break; case 2: code += 21; blockl1++; break; case 3: code -= 11; blockl1++; break; case 4: blockl1 = 1; switch (blockl2) { case 1: code = 0x2a; blockl2++; break; case 2: code = 0x0a; blockl2++; break; case 3: code = 0xea; blockl2++; break; case 4: code = 0x4a; blockl2 = 1; break; } break; } break; } i++; } if (i == 256) retval = 0; else *mychar = i + 32; return retval; } /* End of DecodeCharEight() */ /* End of program */ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMR4peyoZzwIn1bdtAQE0dQF9GzqfuxYsYp+x7nVKG0Kz3de74E4HBHxf IleTsbVrWWQWkV09WU7AVkvVlsajnhsC =r6cs -----END PGP SIGNATURE-----

1 0

Digital Rights...Management
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, You may download a copy of the 118-page report, "Digital Rights Management Technologies," prepared for the Committee On New Technologies of the International Federation of Reproduction Rights Organizations at: http://www.ncri.com Go to page 2 of home page. Link to "Articles." Go to p 3 of "Articles." Voila! Cordially, Jim

1 0

NON_ice
by John Young 17 Dec '03

17 Dec '03

Fueling Asia-phobia of techno-insurrection, The Wash Post today offers opposing views of Singapore: "City of the Future: What American Can Learn form Post- Liberal Singapore;" and, "Big Brother's Hometown: The Country is a Model, All Right -- of Dressed-Up Dictatorship." The first sets out the virtues of paternalism, and quotes eminently powerful Lee Kuan Yew, "The ideas of individual supremacy and the right to free expression, when carried to excess, have not worked. They have made it difficult to keep American society cohesive. Asia can see it is not working. ... The top 3 to 5 percent of a society can handle this free-for-all, this clash of ideas. If you do this with the whole mass, you'll have a mess. In this vein, I say, let them have the Internet." In the second, Lee's own OCAF Agincourt Project is detailed, "I would isolate the leaders, the trouble-makers, get them exposed, cut them down to size, ridicule them, so that everybody understands that it's not such a clever thing to do. Governing does not mean just being pleasant. If you want a pleasant result, just as with children, you cannot just be pleasant and nice." Then there is "Angry, White Rebels are Homeless by Choice," a Page One jaw-dropper about "gutter punks," scion Okies of all America's families: Their appearance and their life-style seem like a nightmare to many of their parents and much of society, as if all the promise of youth in America had been turned inside out, producing these nihilistic, angry, ironic spawn all dressed in black, the end result -- perhaps a bill coming due -- of decades of family disintegration, suburban boredom and national cynicism. Filth has stitched the anarchist patch into the palm of his hand. "Crusty punks" never bathe and say the police cannot make an arrest because of body odor. "I'm a paint head," said Riff Raff, inhaling spray paint. Becca said, "People are afraid of us, but we're not the ones who are scary." Only for the beyond-Singapore, truly loving parent. NON_ice (for all)

1 0