December 2003 - cypherpunks-legacy

Appointment Verification
by linda wilson 17 Dec '03

17 Dec '03

Suck_My_Big_Juicy_Cock, We would like to ask for your help with a survey for a service bureau we are considering developing software for in voice communications. This software will be used to remind patients of their upcoming appointments, allow them to confirm or reschedule. After confirming which patients will not be able to make their appointment the system will contact all individuals that are on a waiting list to schedule them for open time slots..... For assisting us we will mail you a FREE certificate for 100 rolls of Kodak film and a 35 mm camera. NO ONE WIll CALL YOU! 1. Do you feel doctors would use a service which calls patients for them using a personalized Voice system reminding them of their appointments? ____yes ____NO 2. How important do you feel it is to doctors to eliminate the drudgery of staff calling patients reminding them of appointments. not important ______ somewhat important ______ Very important ______ 3. What's do you feel would be a fair price or doctors would be willing to pay for such a service? 100-$200 per month _____ 200-$300 per month _____ 300- $400 per month _____ Other ____________ Please email your answers to advance(a)ns.net If you have any suggestions on any additional automated voice service you would like to see someone develop please let us know. Thanks again for your participation.

1 0

Re: Which list am I on?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- antimod (nym): no way to tell what list your receiving from; the software Sandy and John installed to facilitate their un-American activities is hosed. in most cases it fails to apply the correct sender name, defaulting to the main, supposedly censored list. -attila on or about 970207:0930 Against Moderation <antimod(a)nym.alias.net> said: +I thought I was on the cypherpunks edited list. However, I appear to +have seen some of the messages that Tim says got lost. Moreover, I +keep getting ASCII art messages flaming someone with the initials DLV +(though I haven't seen any more of the TCM flames [I haven't looked too +hard, either]). My mail headers have: +>From cypherpunks-errors(a)toad.com <date> +>Sender: owner-cypherpunks(a)toad.com +Now I'm really confused. Which list am I on? -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBMvt0Tb04kQrCC2kFAQHU3wP+IJE5n2Ypp6WLgxIHX1u0YfFah6fNP+Pz UmToaW0C+mVZLM9S7VpBjwhiyqFCWWpZMbrqAnpkU9/yGCnHnhfjZ1P8I9SZZc0n FmcomIS5BwcDC+Zd+5t4YeOOhqHZPDlqKMsZ/UuKfOeQainfedlvTmNJI2fIqTsy t9jLSuDKWEE= =s+Wc -----END PGP SIGNATURE-----

1 0

Re: WANTED: Tolerant, anonymity-friendly news admins
by lcs Remailer Administrator 17 Dec '03

17 Dec '03

aga <aga(a)dhp.com> writes: > Who attacked the network and for what reason? Well, as best I can tell I've gotten caught in the crossfire of a spam/"anti-spam" spam war. People are forging articles through anonymous remailers to solicit spam to non-spamming customers of "spam-friendly" ISPs, in the hopes of driving those customers away. In other words, a lot of articles are being posted to groups like alt.make.money.fast with headers like: From: customer(a)isp.under.attack (My^ISP^spams^I^should^switch) Then the spam bots collect the addresses, and send lots of mail like To: customer(a)isp.under.attack (My^ISP^spams^I^should^switch) Subject: Great opportunity!!! My^ISP^spams^I^should^switch, I saw your post the other day, and have an oportunity for you that's so good you can't miss it... It would be amusing if it weren't causing me hassles. Ultimately, however, the person doing this is clearly trying to get ISPs to set more restrictive policies about what mail/news customers can send, while knocking off a few anonymous remailers and mail2news gateways in the process. > Well, just who is cutting you off and for what reason? > And what is their telephone number? At issue here are a number of complicated high-level administrative issues. It's not just that someone is trying to pull the plug on me. I've been asked by someone who is not the one getting the phone calls or exerting anti-mail2news pressure if I would stop using MIT news servers. The reason is that that person needs to maintain good relations with the people who are being harassed over the fogery. I don't really want to go into details. The point is that this situation is a lot more subtle than whether the pro-mail2news people can "out-harrass" the people complaining about forgeries. Therefore, I would sincerely appreciate it if you did not try to make any phone calls or do anything to use up any more of these people's time. I fully intend to keep mail2news running, and am just trying to get more news servers (after having lost one) to maintain reliability and strengthen my position. > Just what is your definition of "abuse?" This got answered in a separate message.

1 0

censorship and headers/example of ascii art which passed filters
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- the "message" example which follows is obviously a message which should have been destinated for owner-cypherpunks-flame. there is absolutely no indication of the differentation and the header shows: Sender: owner-cypherpunks(a)toad.com when it should have shown: Sender: owner-cypherpunks-edited(a)toad.com let's put it this way, if cp is to be censored, might as well do the job correctly as this message was dumped into the main list. regardless, censoring what is supposed to be the free speech defenders of the online world is a poor example of our toleration for differing viewpoints, regardless of their alledged stupidity or off-topic value, or lack of value. So far, cypherpunks is showing less tolerance for freedom of speech that the United State Supreme Court. You all know something I dont? or do I need to start cleaning and oiling real soon? --attila +Received: from toad.com (toad.com [140.174.2.1]) + by primenet.com (8.8.5/8.8.5) with ESMTP id FAA10780 + for <attila(a)primenet.com>; Fri, 7 Feb 1997 05:23:55 -0700 (MST) +Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id +EAA21727; Fri, 7 Feb 1997 04:19:54 -0800 (PST) Received: from +sirius.infonex.com (root(a)sirius.infonex.com [206.170.114.2]) by +toad.com (8.7.5/8.7.3) with ESMTP id EAA21718; Fri, 7 Feb 1997 +04:19:47 -0800 (PST) Received: from mail.infonex.net +(dfbfl4-37.gate.net [199.227.103.228]) by sirius.infonex.com +(8.7.3/8.7.3) with SMTP id EAA26850 for cypherpunks(a)toad.com; Fri, 7 +Feb 1997 04:19:33 -0800 (PST) Message-Id: +<199702071219.EAA26850(a)sirius.infonex.com> Date: Friday, 07 Feb 97 +07:19:25 EST +To: cypherpunks(a)toad.com +From: winsock(a)rigel.cyberpass.net (WinSock Remailer) +X-Mailer: WinSock Remailer Version ALPHA1.3 +X-Comments: - +X-Comments: This message is NOT from winsock(a)rigel.cyberpass.net. It +was X-Comments: remailed by an automated anonymous remailer. +X-Comments: - +X-Comments: SEND ALL COMPLAINTS AND BLOCKING REQUESTS DIRECTLY TO: +X-Comments: REOP-L(a)cornell.edu <Remailer Operator's Network> +X-Comments: - +X-Comments: WinSock Remailer (winsock(a)rigel.cyberpass.net) +X-Comments: http://www.cyberpass.net/~winsock/ X-Comments: - +X-Remailer-Setup: Maximum Message Size -- None +X-Remailer-Setup: Reordering is ON, Mail Poolsize is 3 +X-Remailer-Setup: News Posting DISABLED +X-Remailer-Setup: Subject Header KILLED +X-Remailer-Setup: Logging OFF +X-Remailer-Setup: All messages must be PGP encrypted +Subject: Re: Sphere packings +Sender: owner-cypherpunks(a)toad.com +Precedence: bulk +X-UIDL: e2bae6a70f8b97f156939d711ba124ba +Dickhead Vermin K[ondom]OTM has been a source of endless +embarassments to his sympathizers on and off the net. + _ O O _ + \-|-\_/-|-/ Dickhead Vermin K[ondom]OTM + /^\ /^\ + ^^ ^^ ^^ ^^ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBMvtzDL04kQrCC2kFAQF8UwQAi2uqgh2IX8zy9BgXmuBK5hI0yza9XeJ1 +o/aa6KXnKA5+aBuFF5VFufijsJgMQ+2TI+OVi1oPy9OpWofZ1mHzzzNDndypfv6 Bnb05Yrz3ikJXitr7zs26+f8ImeC++5hrkNanPUVBuwa09l2NMYjvGRf+980XLIA 3TIkjAlpcrk= =1Izr -----END PGP SIGNATURE-----

1 0

Metzger, Denninger square off
by Damaged Justice 17 Dec '03

17 Dec '03

[Forwarded from Wired news. Let's cut to the chase: Which side is in the right? Who can tell me, in plain and simple language, who is fighting for individual freedom and property rights, and who is not?] [LINK] Foes Vow to Take Domain Name Fight to FCC by Gene Koprowski 5:01 pm PST 6 Feb 97 - A proposal by the International Ad Hoc Committee (IAHC) to expand the number of Internet top-level domain names is stirring opposition among alternative domain name providers. Opponents call the plan "unenforceable," and are considering filing a protest with the Federal Communications Commission, indicating that the IAHC policy might violate the 1996 Telecommunication Act's open access provisions. "We didn't want to have to get my guns, rifles, and bombs out - but now we have to," Carl Denninger, president of Macro Computer Solutions, Chicago, a long-time opponent of IACH, tells Wired News. "If someone doesn't point a revolver at them, they will be able to do whatever they want to do." On Tuesday, the intergovernmental body issued a proposal to expand the number of generic top-level domains (GTLDs), adding seven new listings in addition to the existing ones, which include the familiar .com, .net, and .org. The new GTLDs would include .firm, for businesses; .store, for retail businesses; .web, for Web-related companies; .arts, for cultural organizations; .rec, for recreation and entertainment facilities; .info, for information services; and .nom, for individuals. Perry Metzger, a member of the IAHC board, said that the organization, whose members include the International Telecommunications Union and the World Intellectual Property Organization, will likely formally approval the proposal very quickly. "This is not a done deal. The paperwork needs to be signed. An association to handle this has to be set up," says Metzger. "But it will go forward very soon. I'm sure plenty of people will not be in favor of it. But the question is: What can they do to stop it?" The answer is plenty, says Denninger. He and others, like Eugene Kashpureff of Alternic, have long fought the IAHC's attempts to expand the number of GTLDs. They think the creation of these new categories may lead to trademark infringement and other intellectual property problems. They also think the new domain names will "fragment" the Internet, leaving some users unable to communicate with others, if a server does not recognize the name request. Denninger said he received a leaked copy of the IACH proposal earlier this week, and he and his colleagues are considering bringing their protests to the FCC. "We're given open access under the telecom law," says Denninger. "We might talk to the FCC or the Clinton administration about this." Barring that, Denninger will lobby Internet service providers around the country, asking them not to recognize the new GTLDs. "There is no reason to support it. We will do everything in our power to convince ISPs not to go along," he says. As part of that, he is launching a national public relations and lobbying campaign to alert the Internet community about the IACH proposal. [LINK] Copyright ) 1993-97 Wired Ventures, Inc. and affiliated companies. All rights reserved.

2 1

faulty moderation software: duplicate messages
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Virtually all list postings to the cypherpunks main list are doubled; the first, which is a standard pass through with the message ID of the sender, the second with the message ID of toad.com. Obviously, the first is destined for the unedited list --which did _not_ receive the message. The second has been re-IDd, which I presume is your censorhip mark. I happen to subscribe to all three lists, even though main + flames == unedited is supposedly the intention, it is not. In order to divide the output stream from toad.com, sorting on "Sender: " is the only reasonable differentation (when toad's filters are working): Sender: owner-cypherpunks(a)toad.com Sender: owner-cypherpunks-flames(a)toad.com Sender: owner-cypherpunks-unedited(a)toad.com Sender: owner-coderpunks(a)toad.com in the case cited below, the only differentation between the destinations is that the censored message has a "Message-ID: " from toad.com, while the one intended for unedited has a "Message-ID: " not from toad.com. was either of these destinated from flames? --the main list with duplicated messages has contained any number of messages, including ones from the ASCII art series which should have gone to flames. so, why is the pass through message not being reliably re-headered at toad.com to mark "Sender: owner-cypherpunks-unedited(a)toad.com" --but if it is, why is unedited receiving a duplicate --obviously the duplicate should have gone to flames. BOTTOM LINE: your software is inadequate. my neighbors' kids write better filters than you have installed. +Received: from toad.com (toad.com [140.174.2.1]) + by primenet.com (8.8.5/8.8.5) with ESMTP id EAA05103 + for <attila(a)primenet.com>; Fri, 7 Feb 1997 04:24:48 -0700 (MST) +Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id +DAA20391; Fri, 7 Feb 1997 03:21:24 -0800 (PST) Received: from +hermes.ex.ac.uk (hermes.ex.ac.uk [194.83.11.25]) by toad.com +(8.7.5/8.7.3) with SMTP id DAA20386; Fri, 7 Feb 1997 03:21:20 -0800 +(PST) Received: from aba(a)p28-dove-gui.tch.virgin.net [194.168.60.88] +by hermes via ESMTP (LAA22615); Fri, 7 Feb 1997 11:21:06 GMT Received: +(from aba@localhost) by server.test.net (8.6.12/8.6.12) id LAA00460; +Fri, 7 Feb 1997 11:15:30 GMT Date: Fri, 7 Feb 1997 11:15:30 GMT +Message-Id: <199702071115.LAA00460(a)server.test.net> +From: Adam Back <aba(a)dcs.ex.ac.uk> +To: mark(a)infolawalert.com +Cc: cypherpunks(a)toad.com, mclow(a)owl.csusm.edu +In-reply-to: <199702052256.OAA06322(a)toad.com> (message from Mark + Voorhees on Wed, 05 Feb 97 17:05:51 -0400) +Subject: Re: Deloitte-Touche? +Sender: owner-cypherpunks(a)toad.com +Precedence: bulk +X-UIDL: 5456a9a45ccaf4617ae176a63b26efb4 +Received: from toad.com (toad.com [140.174.2.1]) + by primenet.com (8.8.5/8.8.5) with ESMTP id JAA26045; + Fri, 7 Feb 1997 09:00:01 -0700 (MST) +Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id +HAA24892; Fri, 7 Feb 1997 07:12:54 -0800 (PST) Message-Id: + <199702071512.HAA24892(a)toad.com> +Date: Fri, 7 Feb 1997 11:15:30 GMT +From: Adam Back <aba(a)dcs.ex.ac.uk> +To: mark(a)infolawalert.com +Cc: cypherpunks(a)toad.com, mclow(a)owl.csusm.edu +Subject: Re: Deloitte-Touche? +Sender: owner-cypherpunks(a)toad.com +Precedence: bulk +X-UIDL: 83079c59aea2b28dc5ded2dc73c5219a -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBMvtvF704kQrCC2kFAQEFAwP/RyyZswe9GznJt4TAEMPnhKcgA9pUsf+k mw+pDcjaJyUfKttoaVz0qRM2hIe33igoPtBDXWf5VD9r+Gz+gry6K+UK7rYCNNE9 MMdYHRV51hYuLKJAY4LNU6j5hoqf5q2Btt/m3F9SFQtD0ellsi4QH/vseJC1YNYh tq3TA+hny/U= =v3sl -----END PGP SIGNATURE-----

2 2

Re: 40-bit RC5 crack meaningless?
by Peter Trei 17 Dec '03

17 Dec '03

Subject: Re: 40-bit RC5 crack meaningless?? From: Peter Trei <ptrei(a)acm.org> > Subject: 40-bit RC5 crack meaningless?? Mr. Strassman allegedly sent the quoted letter to Winn Schwartaus' "infowar" mailing list, and it was then posted by persons unknown to the sci.crypt usenet group. Identity on the internet being the fluid thing it is, I apologize in advance if he never sent this letter, or if it has been modified before it reached me. The quoted letter attempts to minimize the importance of Ian Goldberg's recent bruteforce decryption of export-strength RC5 encryption. In my opinon, as described below, Mr. Strassman's arguments are without merit when applied to the situation the RSA challenges are intended to model - the security of encrypted Internet protocols. As such, I feel that his letter may lull some people into an unjustified and dangerous sense of security. > >Date: Thu, 30 Jan 1997 20:10:36 -0500 > >From: "Paul A. Strassmann" <paul(a)strassmann.com> > >Subject: Further to Goldberg's Cracking Accomplishments > >Gentlemen: > > > >As I suspected (see earlier private comment), the > >highly promoted RSA cracking contest offered > >a number of clues that ordinarly would not be > >volunteered by info-terrorists or info-criminals to > >IW Defense teams. > >These clues made the cracking significantly easier, > >because it made it possible to eliminate an enormous > >range of possible searches. What's the target, and who is doing the encrypting? These "clues" _are_ available to adversaries engaged in industrial and economic espionage; a important part of a covert infowar. It's certainly true that "info-terrorists or info-criminals" will not be so easy to tap, but the absence of these 'clues' is a red herring. They will be secure because they will use good encryption, which is not what US firms can export today. The challenges are realistic models of encrypted Internet protocols, for example IPSEC with ESP data encryption. As such, they accurately display the vulnerability of data on the Internet to espionage. > >The following was extracted verbatim from the > ><The RSA Data Security Secret-Key Challenge> > >posted on <http://www.rsa.com/rsalabs/97challenge/>: > > > >Clue #1: > > > > " ...all the RC5 contests posted as part of the RSA Secret-Key Challenge > >will use 12-round RC5 with a 32-bit word size. " > > > >Clue #2: > > > > " ...The first RC5 contest will consist of some unknown plaintext > >encrypted using a 40-bit key;." Clues #1 and #2 are absolutely reasonable - in an open standard, it is absolutely normal to know the cipher being used, it's mode, and the length of the key. See the SSL specification, or IPSEC's RFCs. > >Clue #3: (a giveway!) > > > > " ... For each contest, the unknown plaintext message is preceded by three > > known blocks of text that contain the 24-character phrase "The > > unknown message is: .....". To those who are unfamiliar with Internet protocols, this would appear to give the cryptanalyst an unrealistic head-start. This is not the case. Most Internet protocols have highly stereotyped packet headers; for example, _every_ normal return packet from a web server starts out with the string "HTTP/1.0" (servers using something other than version 1.0 are rare as hen's teeth at the moment). When you consider that such a packet may contain a firm's confidential earnings predictions or trade secrets (hopefully encrypted), the economic importance of such data is clear. Similar stereotyped headers exist for many other protocols, such as NNTP and SMTP. As such, a known-plaintext attack, as modeled by RSADSI's symmetric key challange, is quite realistic. Even if a full known plaintext for the first block is unavailable, a knowlegable cryptanalyst can usually make some very reasonable assumptions which will greatly speed his or her task. (I'm assuming DES here - which has a 64 bit block, but the argument extends easily to other block sizes). For example, if we know that the data contains only printable ASCII characters (true for the headers of most Internet protocols), then for a 64 bit block, there are 8 bits which we _know_ will be zero in the decrypted block. This lets us dispose of 255 out of every 256 incorrect trial decryptions immediately, and we will have to perform more extensive tests on less then 0.4% of candidate keys. Similar intelligent guesses can be made about the headers of other protocols, for example IPSEC-secured IPv6 packet headers in tunneling mode. Some people have noted that the challenges include the IV, or 'initialization vector' used in CBC (cipher-block-chaining) modes of encryption, and argue that this would not be available to an adversary. Once again, this assertion falls when examined in the light of actual usage. The purpose of an IV is to make dictionary and replay attacks more difficult. It is not intended to prevent brute force attacks, and so is _normally_ included in the clear in communications protocols (for example, see RFC 1827 for it's clear transmission in IPSEC). If it is not included, it is effectively part of the keying material, and thus adds it's bits to the strength of the key. As such, its value would have to be transmitted and protected as carefully as the rest of the key. > >In summary: The claim of exportable cryptography being totally > >insecure, because it can be cracked in 3.5 hours is not > >realistic. The three clues announced in the contest > >would not apply under infowar conditions. As I have shown above, Mr. Strassman's optimism is misplaced in the case of actual, fielded use of encryption on the Internet. It may apply to some classified systems, but they don't use exportable cryptography anyway. A covert inforwar against commercial and private targets is _quite_ plausible. > >What other clues may have been provided to Goldberg > >to support private agendas and gain shrill headlines > >is also a matter of speculation, but I rest my case. What exactly is he hinting at here? > >I certainly cannot assert that a 40 bit key cannot be decyphered. Of course he can't. 40 bits of RC4 encryption (as used in the exportable version of Netscape) was brute-forced not once, but three separate times in the fall of 1995, the fastest effort taking about 28 hours. Today it could be done much more quickly, as Ian demonstrated with RC5 (an algorithm of similar complexity). > >However, I do not think that the RSA unqualified claims > >offer full and appropriate disclosure. I disagree. The RSA challenges accurately model the use of encryption on the unclassified Internet. Ian's decryption of 40-bit RC5 is of considerable importance in demonstrating the insecurity of American citizens caused by Administration efforts to compromise exportable encryption. In my opinon, Mr. Strassman's assertions as to the strength of exportable encryption are too dangerous to be left unchallenged. > >Paul A. Strassmann > >55 Talmadge Hill Road, New Canaan, CT. 06840 > >Telephone: 203-966-5505; Fax: 203-966-5506 > >INTERNET: paul(a)strassmann.com > >WorldwideWeb: http://www.strassmann.com Peter Trei ptrei(a)acm.org Disclaimer: I am speaking as a knowlegable private citizen, not as a representative of my employer. This posting represents my opinon only.

2 1

Re: Waiting for Mac version [was Re: Full strength Email Clients]
by Timothy N. Hill 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02:19 -0500 97-02-07, Steve Schear wrote: >>... PGPMail 4.5 ... > >Its too bad there isn't a Mac version contemplated. They appear to think >that existing PGP versions, paired with Eudora, are sufficient. I think a >better integrated approach for the Mac would be appreciated as the >available AppleScripts are buggy and awkward. I agree completely about the need. PGP, Inc., does claim to be working on a Mac version, but their promises are beginning to sound a little hollow. They now promise a "1997 release of PGPmail for the Macintosh" and "more specific information on when PGPmail will be available on the Macintosh" "during the second half of February." I bought ViaCrypt PGP for Macintosh 2.7.1 in October. (2.7.1 is nearly identical to the free 2.6.2, with the same abysmal user interface that earned a rare one-star rating from Macworld <http://www.macworld.com/pages/star/starratings.Utilities.html>, but 2.7.1 is licensed for commercial use.) At the time, PGP Inc. promised a free upgrade to version 4.0 for Mac, which was already considerably overdue. (According to <http://www.pgp.com/products/viacrypt-tbr.cgi>, 4.0 is still "To Be Released Soon.") When PGP, Inc., announced PGPmail 4.5 in December <http://www.pgp.com/newsroom/prel8.cgi>, they wrote "PGPmail 4.5 ... supports ... Mac OS." I called and asked if this implied they were bypassing 4.0 for Mac and when 4.5 would be available for Mac. The support person didn't know, said she'd find out and call me back, and never called back. A few days ago, I received this via US mail: >PRETTY GOOD PRIVACY, INC. > >Wednesday, January 22, 1997 > >Dear Valued Customer: > >Thank you for being patient regarding your order for an updated version >of PGP for the Macintosh. The last year has involved many changes for >our company. As a customer, we know the changes have caused delays in >the product you expected sooner. I would like to explain recent events >and extend a special offer in appreciation of your business. > >First, an explanation of recent events. As you may already know, Pretty >Good Privacy, Inc. purchased Lemcom Systems and its wholly owned >subsidiary, ViaCrypt, last year. ViaCrypt had previously announced >ViaCrypt PGP 4.0 for the Macintosh. Pretty Good Privacy is fully >committed to the Macintosh platform, and we have plans to release a >rich set of products for the Macintosh in 1997. We have already doubled >the size of our Macintosh group with engineers who have extensive Apple >experience. > >We are currently working on a new version of PGPmail designed >specifically for the Macintosh, adding new features and revising the >graphical user interface, making it significantly easier to use. > >After much serious consideration, we decided to dedicate the Macintosh >PGPmail team to deliver this new product as quickly as possible, and to >cancel the port of ViaCrypt PGP 4.0 to the Macintosh. We apologize for >any inconvenience this delay may have caused, but we believe that you >will agree that the new version of PGPmail designed specifically for >the Macintosh will meet your needs better than a port from the Windows >platform. > >In recognition of the delay, we would like to offer you the forthcoming >1997 release of PGPmail for the Macintosh free of charge. We hope you >will take advantage of this special offer. When ordering, please >indicate the following code #0811 to process your order, so please >retain this letter. Please check the PGPmail section of our website at >http://www.pgp.com/products/PGPmail-faq.cgi during the second half of >February with more specific information on when PGPmail will be >available on the Macintosh. > >Please accept our sincere apologies for the delay. If you have any >questions, please contact us at fyi(a)pgp.com. > >Sincerely, > >Tom Steding >President & CEO >Pretty Good Privacy, Inc. We shall see. Meanwhile, a beta version of "Pretty Safe Mail" <http://www.highware.com/highware/PSM/safemail.htm> is available from Highware in Belgium. It's PGP compatible, and its user interface is a great leap forward from any Mac PGP front end I've seen. But, it still has some deficiencies, it's very slow (25 seconds to sign this message on a 25 MHz 68040 vs. 4 seconds for ViaCrypt PGP 2.7.1), and (as was recently discussed on a couple of these lists) its source code hasn't been published or externally audited. - Tim -----BEGIN PGP SIGNATURE----- Version: 2.7.1 iQCVAwUBMvtiAi62DQeAyFc9AQG5tAQAigsa5/Ygb9PqHHLA/QD+HSpBWFRpRjGW bWfg8Zq0PCi5AyMPAwYagxYo5/m4Sm3OA6u2urq5IDzxVaYOGFIgKGRxaFgWivFN dYfwFRR9WO7NkoigKsOc3ZHAK2UPPWYsFkjbVkbINyke5NmFkwEI0/oPguoMWdXH WMpnOGDut5Q= =kWrX -----END PGP SIGNATURE----- Timothy N. Hill <tnh(a)acm.org> "We all love to instruct, Wellesley, Massachusetts though we can teach only <http://www.ma.ultranet.com/~tnh/> what is not worth knowing." PGP F058F75D 99C5122F 21C5BEF5 620C1D3C - Elizabeth Bennet

1 0

Re: anonymous remailers
by Andrew Loewenstern 17 Dec '03

17 Dec '03

Charley Musselman writes: > Does anyone know the answer? Specifically, how can we choose > a trusted remailer? The answer is to run your own remailer. Make sure your chain includes your remailer at least once. If you can't trust yourself, who can you trust? andrew

1 0

Project 25 Radio
by John Young 17 Dec '03

17 Dec '03

The National Communications Systems published in the Federal Register of February 6, a notice of FTR1024 covering Land Mobile Radio, Project 25. The recommentation specifies encryption: DES (Type 3) and Type 1 for classified use. The specifications are based on seven public TIA documents and one classified NSA document. "This recommendation is intended to facilitate interoperability among telecommunication facilities and systems of the Federal Government." The official document is available in PDF format at: http://members.aol.com/Project25/1024.pdf We've prepared a hypertext version: http://jya.com/ftr1024.htm

1 0

Re: Cypherpunks FOIA request
by John Pearson 17 Dec '03

17 Dec '03

> On 1/18/97, I sent freedom of information act requests to the FBI (main and > San Francisco offices), CIA, NSA, and Secret Service, asking them for copies > of information in their files relating to or referring to the cypherpunks > list, the cypherpunks meetings, and copies of any messages sent from or to > "cypherpunks(a)toad.com". [...] > I'm not sure what I think about the response from the SF FBI branch - it > seems unlikely that they'd never have paid any attention to the list, given > the media coverage in Wired and other places. On the other hand, maybe the > FBI doesn't read Wired. :) While they're not supposed to be monitoring > noncriminal domestic activity, I figured they'd at least have something about > the Mykotronix stuff. > If you think so, you may wish to consider filing an FOIA request for the Mykotronix stuff, and see if it mentions cypherpunks; it could provide an interesting perspective on their response. John P. john(a)huiac.apana.org.au

1 0

Re: My Departure, Moderation, and "Ownership of the List"
by Mark Grant 17 Dec '03

17 Dec '03

On Mon, 3 Feb 1997, Adam Back wrote: > My vote is for renaming: > `cypherpunks-unedited' -> `cypherpunks' > and `cypherpunks' -> `cypherpunks-edited' I have to agree. I'm only a 'cypherpunk' in the sense of setting up various crypto-related Web sites and writing and giving away thousands of lines of cryptography code rather than regularly posting to the list, but my main concern is that the default for the list has gone from anarchy to moderation. If the users of the list truly believe in anarchistic solutions to problems then the moderated list should exist *in addition* to the unmoderated list, rather than replacing it. In a truly anarchistic society the cypherpunks list would be an unmoderated forum full of spam and opinions related in some way to the list topics and numerous moderators would charge us for their versions of the list in which they simply pass on the messages they like. We could then choose a moderator whose interests are similar to ours and pay them for providing us with apropriate information. IMHO this is the way that mailing lists and Usenet are likely to evolve as they become too large for us to read and react to all posts; we should be in the vanguard of creating appropriate solutions to the problems. Providing a moderated list which saves me from dowloading spam is a worthwhile exercise which is potentially valuable to me (and I'm grateful to Sandy for offering such a service for free), but I do not believe that it should be the default for new subscribers. Mark |-----------------------------------------------------------------------| |Mark Grant M.A., U.L.C. EMAIL: mark(a)unicorn.com | |WWW: http://www.unicorn.com/ MAILBOT: bot(a)unicorn.com | |-----------------------------------------------------------------------|

1 0

Hello, Duncan
by Gr8SClaus＠aol.com 17 Dec '03

17 Dec '03

I saw your listing for accessing senior citizens newsgroups through compuserve. Do you think, by chance, that the same would be possible through america online? I'm a senior citizen of 59 but find myself liking middle age to older and find the only source on line (that i can locate as am anateur) is netpics.com and you have to pay for this service. But I do enjoy looking at older GUYS and find mostly girls--even on netpics. Thanks. Dave

1 0

Re: lead remailer is shut down
by Ed.Falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

Can't remailers be written with basic spam safeguards? I.e. no mass crossposts, limited # of posts by each individual client per day, etc.?

3 2

No Subject
by Huge Cajones Remailer 17 Dec '03

17 Dec '03

Date: Fri, 07 Feb 1997 07:13:18 -0800 From: Dale Thorn <dthorn(a)gte.net> :When I was in the Perot camp Gotta be Dale! A measure of my health; I admit preferring the invective of Tim and Dr. V. to this purile nonsense. Pablum for the c'punk masses. Ciao

1 0

[IMPORTANT] Zero-knowledge interactive proofs
by Huge Cajones Remailer 17 Dec '03

17 Dec '03

Many forgeries are traceable with mathematical certainty to feebleminded Timmy C. May's poison keyboard. .oooO Oooo. ( ) _ _ ( ) \ ( / ) ( \ ) / ----\_)-/ (---) \-(_/---- ( ) ( ) oooO Oooo

1 0

Cool Names, Lost in Flames
by Otto Matic 17 Dec '03

17 Dec '03

Some time ago Human Gus-Peter wrote something that went like this: > I still think that you should just let your kids run your machine or > just pick the guy with the coolest name, like Attila the Hun or > Genocide or OttOmatic. Thanks, Human Gus-peter. I think my name is cool also. I am only suscribeed to the flames list, because my uncle (a secret guy) reads the CENSORED list. This way we can see what the other secret guys are up to, and what kind of KewL StUfF they throw into the Flames Trashcan. Human Gus-peter, I think you should be very careful. They throw everything you write into the trash. That could mean they are watching you. That could be VERY bad for you. We will see where this message goes. otto =-=-=-=-=- Otto Matic "Fuckin' A, Miller!" Bud, Repo Man --------------------------------------------------------- Get Your *Web-Based* Free Email at http://www.hotmail.com ---------------------------------------------------------

1 0

Re: My messages not appearing on either of the lists?
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, On Fri, 7 Feb 1997, Mike Duvos wrote: > ...Messages apparently do not get moderated in the order in > which they are received... All messages are filtered and posted in the order in which I receive them. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Hello, Duncan
by Gr8SClaus＠aol.com 17 Dec '03

17 Dec '03

I saw your listing for accessing senior citizens newsgroups through compuserve. Do you think, by chance, that the same would be possible through america online? I'm a senior citizen of 59 but find myself liking middle age to older and find the only source on line (that i can locate as am anateur) is netpics.com and you have to pay for this service. But I do enjoy looking at older GUYS and find mostly girls--even on netpics. Thanks. Dave

1 0

Re: Which list am I on?
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, On Fri, 7 Feb 1997, Attila T. Hun wrote: > no way to tell what list your receiving from; the software Sandy > and John installed to facilitate their un-American activities is > hosed. in most cases it fails to apply the correct sender name, > defaulting to the main, supposedly censored list. That's why we call it a test. I have no software. Everything I'm doing is manual. Whatever John has done is probably jerry rigged just for the test. If list members opt for moderation, more effort will be put into the moderation infrastructure. The idea right now is to see how well a first aproximation of moderation works. If it seems like a step in the right direction, great. If everyone thinks it sucks, well that's great too. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: Anyone have the complete info on CP list alternatives?
by Alan Barrett 17 Dec '03

17 Dec '03

On 18 Feb 1997, Bryan Reece wrote: > Filtering out other gateways' messages will reduce load at > the possible expense of delay (assuming a smallish network of news > servers that feed each other the list; obviously the message will > flood the majordomo net before it floods the real usenet unless > something is seriously broken). Why is it obvious that mail propagation will be faster than news propagation? News propagation times of small numbers of seconds are not at all uncommon. --apb (Alan Barrett)

1 0

Any more like www.anonymizer.com ??
by Edgar W Swank 17 Dec '03

17 Dec '03

Does anyone have a list of web proxies for anonymous surfing? I already know about www.anonymizer.com, and there was a "canadianizer" that would alter text to make it more "Canadian", but that is now apparently defunct. Reason I need to know, a friend in a foreign country has to deal with a web proxy that blocks "objectionable" sites including www.anonymizer, so some alternates that might not be blocked would be welcome. Edgar W. Swank <EdgarSwank(a)Juno.com> (preferred) Edgar W. Swank <Edgar_W._Swank(a)ilanet.org> (for files/msgs >50K) Home Page: http://members.tripod.com/~EdgarS/index.html

1 0

Re: DES and RSA crypto hardware from the free world
by Dan Geer 17 Dec '03

17 Dec '03

These chips look *very* promising. Who needs Clipper, or HP's Clipper-under-another-name, when you can get triple DES from the free world at prices like this? The critical thing is to get the horse out of the barn before the door is barred. Each and every one of these sorts of vendors has to establish use and distribution on a wide basis before governments of any stripe start locking down on domestic use. There is little time and, yes, I am a paranoid who hopes thereby to survive. --dan

1 0

Re: Anyone have the complete info on CP list alternatives?
by Alan Barrett 17 Dec '03

17 Dec '03

> >Why is it obvious that mail propagation will be faster than news > >propagation? News propagation times of small numbers of seconds are not > >at all uncommon. > > News propagation in seconds to your _local server_, or to _distant_ > servers? To some (perhaps many, certainly not all) distant servers, provided all the news servers in the path run appropriate software (designed for low latency propagation) and have reasonably high bandwidth Internet links. Disk to disk delays smaller than 1 second have been measured between news servers that use software such as nntplink or innfeed to send outgoing articles immediately. > The Usenet is thousands of news servers, maybe tens of thousands, and > news feeds take a while...small articles are mixed in with hundreds of > megabytes a day of binaries. A percolation process, as opposed to a > point-to-point process for e-mail. Right. And some of those news links are fast, while others are slow. If two sites happen to be connected by fast news links, it's quite possible for news between those sites to be faster than mail. --apb (Alan Barrett)

1 0

Re: Anyone have the complete info on CP list alternatives?
by Alan Barrett 17 Dec '03

17 Dec '03

Bryan Reece wrote: >> obviously the message will flood the majordomo net before it floods >> the real usenet unless something is seriously broken). I replied: > Why is it obvious that mail propagation will be faster than news > propagation? News propagation times of small numbers of seconds are > not at all uncommon. Sorry, I misunderstood the earlier message. I thought that it referred to news propagation between a small set of hosts versus mail propagation between the same small set of mail/news hosts, and I did not see why it was obvious that mail would be faster than news. But actually the earlier message refered to news propagation over the whole planet versus mail propagation between a small set of hosts, in which case of course news will be slower. --apb (Alan Barrett)

1 0