December 2003 - cypherpunks-legacy

Remailer list needed
by skaplin＠skypoint.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Does anyone have a current listing of all the remailers? If so could you please send it to me as I would like to put it up on the auto-responder. Thanks, Sam ============================================================================== We love your adherence to democratic principles. - George Bush speaking to Ferdinand Marcos, June 1981 ============================================================================== skaplin(a)skypoint.com | "...vidi vici veni" - Overheard | outside a Roman brothel. PGP encrypted mail is accepted and | preferred. | Change is the only constant in the | Universe..."Four quarters, please." E-mail key(a)four11.com for PGP Key or | Finger skaplin(a)mirage.skypoint.com | Smile!! Big brother is watching. ============================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: This message digitally signed to verify the identity of the sender iQEVAwUBLvfooMlnXxBRSgfNAQGLlQf/TzjZCzrZhMYWgs7XqGeV9+35XXmrjy+f jqVseykiY3n3iEVDALIJobRCPATS962N1k2EinVHea0dKt+F6NA4xsrGStFdoneT bVeoPwSgXGqghVyy88gRwiSHHFincIztHnV4A/r59B/Nz/4hawmYD0vo9SZeHhrv ruBhWSJH6Cw/4Xh+17PgreLfpLCILFF0EFmXiiXrZ5dSsQZJ2aOD5LqN0TTbdxyN uakm0WPao1WTCx2yT+SiLLex55lTzHrgfvP/gINwDbUA1TUl64OEYGsjxyl7gHWw mCQrLFX0XxvAunB223aTBYNiGDyhy9P8BCN3yf95yYkxoCzq4pre6w== =YR7W -----END PGP SIGNATURE-----

1 0

Why I do what I do.
by skaplin＠skypoint.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I had a very telling conversation with my wife today. I was working on some procmail stuff while she thought I should be doing something else. After about a ten minute diatribe, she said "I don't know why you spend all that time messing around with that crypto stuff. What point does it have?" I responded, "Do you remember when you were a little girl, and you told your best friend a secret?" She replied with a testy "YES." "All I'm trying to do is make sure our children will be able to do the same, because with all the developments lately this may not be possible." After about ten minutes of silence, I got a very soft "I understand." The reason I have brought this conversation up is to make a point. You can have the best technology around, but if people can't relate to the general concepts involved as it relates to them, the war is lost. Sam ============================================================================== Television is the first truly democratic culture - the first culture available to everybody and entirely governed by what the people want. The most terrifying thing is what people do want. - Clive Barnes, in "New York Times", 1969 ============================================================================== skaplin(a)skypoint.com | "...vidi vici veni" - Overheard | outside a Roman brothel. PGP encrypted mail is accepted and | preferred. | Change is the only constant in the | Universe..."Four quarters, please." E-mail key(a)four11.com for PGP Key or | Finger skaplin(a)mirage.skypoint.com | Smile!! Big brother is watching. ============================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: This message digitally signed to verify the identity of the sender iQEVAwUBLvfouslnXxBRSgfNAQGMOgf9Er7usAgpi1H9PgTDQ6Sp6wvy3F9KL5Ly 8SxYO8wkIybIWcLTjuvC18MUQNe9dUTpLqSmjOsZqxIFvlkLna0HEwyO5d53Vta6 1yhLByTWoEiBuP2xfnSDWG19/uEivOGyZdlTjtJ0w6aquDlGepkGuWUFGEuhY0ee +45NjzSoCluQhn5elzA79bNvp4OkQMnbCdzk6ZXD6uO1w0iGXyEKRd8V9TXig5Ir 2QXbZDqayW2B6TJP7m+kyPgdJAOxJia3LLZe0icBW7Et9jdys0lolAIGfHHe9LLL dRMQnstSfxcvzDrhxEmZze/Jj9uP2S6WY3fKANO9IwwAugxrp92R8Q== =Iyk6 -----END PGP SIGNATURE-----

1 0

CFS for Linux
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- FYI: Forwarded message: > To: cypherpunks(a)toad.com > Subject: New version (1.2) of CFS now available > Date: Fri, 02 Dec 94 18:05:00 -0500 > From: Matt Blaze <mab(a)research.att.com> > > Source code for the latest version of CFS (release 1.2), the Cryptographic > File System, is now available upon request for research and experimental > use in the US and Canada. [...] > The software was developed under > SunOS and BSDI, and there are also unsupported user-contributed ports > available for AIX, HP/UX, Irix, Linux, Solaris and Ultrix. We really > can't promise to provide any technical support at all, beyond the > source code itself. We also maintain a mailing list for CFS users and > developers; subscription information is included with the source code. [...] > * Copyright (c) 1992, 1993, 1994 by AT&T. > * Permission to use, copy, and modify this software without fee > * is hereby granted, provided that this entire notice is included in > * all copies of any software which is or includes a copy or > * modification of this software and in all copies of the supporting > * documentation for such software. > * > * This software is subject to United States export controls. You may > * not export it, in whole or in part, or cause or allow such export, > * through act or omission, without prior authorization from the United > * States government and written permission from AT&T. In particular, > * you may not make any part of this software available for general or > * unrestricted distribution to others, nor may you disclose this software > * to persons other than citizens and permanent residents of the United > * States and Canada. > * > * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED > * WARRANTY. IN PARTICULAR, NEITHER THE AUTHORS NOR AT&T MAKE ANY > * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY > * OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE. > > If you would like a copy of the CFS source code, please send email to: > > cfs(a)research.att.com > > DO NOT REPLY DIRECTLY TO THE SENDER OF MESSAGE. You must include a > statement that you are in the US or Canada, are a citizen or legal > permanent resident of the US or Canada, and have read and understand > the license conditions stated above. Also include an email address in > a US or Canada-registered domain. The code will be sent to you via > email in a uuencoded compressed tarfile. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvfrsSoZzwIn1bdtAQHvcwGAn9qkYDbPDazGCM9Pg/8CDyTAgxm10Nj2 LB/Ek/NnzOTG8ywki0CEbF8B9ei2pxWH =bPdS -----END PGP SIGNATURE-----

1 0

Re: Remailer list needed
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- > Does anyone have a current listing of all the remailers? If so could you > please send it to me as I would like to put it up on the auto-responder. This seems to be the most popular question on c'punks lately. Raph posts his list periodically (weekly ?), but perhaps he should move it to every other day or daily. I think it would be worth posting more frequently here. I never tire of answering this one, though.... :) Anyway, the standard ways of accessing the latest list are: finger remailer-list(a)kiwi.cs.berkeley.edu http://www.cs.berkeley.edu/~raph/remailer-list.html I don't know of a way to get it automatically via mail. Since, short of Web access, Internet mail access is a necessary condition for using a remailer, I've been meaning to hack something together for Raph to handle this lowest- common-denominator means of access. So I think it would be great to see you set it up for autoreply, Sam, if you can hook it in to the source for regular updates. The list (from finger) as of just after I typed this follows: $remailer{"vox"} = "<remail(a)vox.xs4all.nl> cpunk pgp. post"; $remailer{"avox"} = "<anon(a)vox.hacktic.nl> cpunk pgp post"; $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"rebma"} = "<remailer(a)rebma.mn.org> cpunk pgp hash"; $remailer{"jpunix"} = "<remailer(a)jpunix.com> cpunk pgp hash latent cut post ek"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash"; $remailer{"soda"} = "<remailer(a)csua.berkeley.edu> eric post"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub"; $remailer{"usura"} = "<usura(a)replay.com> cpunk pgp. hash latent cut post"; $remailer{"desert"} = "<remail(a)desert.xs4all.nl> cpunk pgp. post"; $remailer{"nately"} = "<remailer(a)nately.ucsd.edu> cpunk pgp hash latent cut"; $remailer{"xs4all"} = "<remailer(a)xs4all.nl> cpunk pgp hash latent cut post ek"; $remailer{"flame"} = "<tomaz(a)flame.sinet.org> cpunk pgp hash latent cut post ek" ; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk"; $remailer{"mix"} = "<mixmaster(a)nately.ucsd.edu> cpunk hash latent cut ek"; $remailer{"q"} = "<q(a)c2.org> cpunk hash latent cut ek"; catalyst(a)netcom.com is _not_ a remailer. Last ping: Wed 21 Dec 94 2:00:01 PST remailer email address history latency uptime - - ----------------------------------------------------------------------- usura usura(a)replay.com **++*+*****# 6:59 99.99% alumni hal(a)alumni.caltech.edu *****+*****# 4:05 99.99% nately remailer(a)nately.ucsd.edu ++++.+++++++ 1:08:49 99.99% penet anon(a)anon.penet.fi ***+*+****** 32:46 99.99% portal hfinney(a)shell.portal.com ***********# 2:13 99.99% c2 remail(a)c2.org +-+++++-++ + 39:26 99.99% ideath remailer(a)ideath.goldenbear.com *++**+****** 9:35 99.98% bsu-cs nowhere(a)bsu-cs.bsu.edu *++********# 4:43 99.97% mix mixmaster(a)nately.ucsd.edu +++*.++++++- 1:17:13 99.97% vox remail(a)vox.xs4all.nl ..-----...-+ 15:20:51 99.99% q q(a)c2.org *-+--++- 3:46:16 99.88% rahul homer(a)rahul.net **** ****--# 27:49 99.67% soda remailer(a)csua.berkeley.edu .......... 9:50:58 99.61% desert remail(a)desert.xs4all.nl -------.-. 16:26:44 99.99% xs4all remailer(a)xs4all.nl **+ +**** # 7:14 99.41% flame tomaz(a)flame.sinet.org *+-++**+* +* 8:51 98.09% jpunix remailer(a)jpunix.com +-++**+* +# 8:25 97.96% rebma remailer(a)rebma.mn.org --___..-.--+ 21:50:14 90.15% extropia remail(a)extropia.wimsey.com -+ 5:00:06 17.69% -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvf9+Gf7YYibNzjpAQF+FwQAiqHC78uctkIG5vX+YF+H/EN8RodOLt6s EZjJW3BGbFitC20++3MfPJ2wUVFXLcNxUpXY1gEcbxMttNPaMayK4VrKNWFzZ7BT p1iKeb82Im+GYyL0EHvhtS8eDiyuPAyBSibQYjPppY/wfl5qW70FpxJ6hWc/4Avf twIJ5XYXFcU= =MO7e - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvf/oSoZzwIn1bdtAQE+jwF/RcW6oTb23KEqrgDUfVeB0p6KMPGaL6hF 5/I3/BqjqvAY0FrsHkdPTTvI9LDNjyOc =YjJG -----END PGP SIGNATURE-----

2 1

Making sure a program gets to the receiver intact
by an169306＠anon.penet.fi 17 Dec '03

17 Dec '03

How can I insure a program, once put on FTP sites stays untampered with? I have done the following, but I still find holes: 1: PGP signed each file with a seperate .sig file. 2: Made a MD5 list, using 2-3 seperate programs (making sure they agree), PGP signing the list, and asking friends to sign the list, leaving seperate .sigs in the directory. 3: Encrypting a copy of the MD5 list with a passphrase (if all keys are fragged, then in front of trusted witnesses, I can decrypt the key, show them that the MD5 list is authentic.) 4: PKZIPPING it using my AV key. (Yes, I am aware that this is a joke, but since I am a registered user, why not use it?) (Side note, if one uses PKZIP, please register it. I have seen so many unregistered copies of this, that it makes my eyes water.) The holes: 1: Someone hacking the keyservers, substituting a key for all the people who signed, and modifing the archive to show that. 2: Someone breaking into my apt, sticking a keyboard monitor on, getting my passphrase and key. Most of this is theoritical, as it is hard to hack _all_ keyservers to nuke my PGP key, then hack AOL, compuserve, and other FTP sites to modify the binary, but I would like to make _sure_ this program gets into user's hands without getting modified. (Not for paranoia reasons, but just to see how well one can make a package resistant to tampering.) Pardon the anonymous ID, as my reputation with my REAL user id is not so great. (No, I am not Lance, but not that better off due to tons of dumb mistakes with my regular ID on this list.) ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

3 2

Re: GUI: PGP vs novices
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Thomas Grant Edwards Writes: >PGP has made me more crypto aware, but at this point neither I nor most of >the crypto aware people I personally know feel there is a need to either >encrypt or sign messages on a regular basis. It is my own personal opinion that in order for crypto to truly become mainframe, the software manufacturers of internet connectivity packages must integrate crypto into the applications. Look at the past threads here on Cypherpunks..."How do I write a script to put PGP into ELM?" "PGP DLL modularity" etc. In order to bring crypto to the masses, we have got to convince people that it is necessary. We also must make it "second nature". It sure is nice to have a menu option or a toolbar button that will encrypt plaintext automatically. Key management and some of the "high tech" (I know, for us it's nothing, but for my dad who just bought a computer and doesn't understand the difference between click, double click, and drag, crypto is a really high tech thing just in itself.) things of crypto should not be directly handled by the user. (Optional of course. On a privacy level, the user should have full control. But give the user a break...if the software is secure..as such...so is the user's privacy.) You will notice that this message is not signed. That's because in order to sign it, I would need to save my message, hop out to a DOS box, PGP encrypt it, hop back to my mail program and insert the encrypted mail as a text file. That's enough to discourage the average user. This is pretty much what Tim May was talking about when he discussed why he doesn't sign his messages. It's not that he couldn't... it's just not practical for him. It's not really practical for me either, but I do it when I feel it's necessary. The only way to make crypto practical is to basicalloy hide the technical side from the user and make it easy. That's my two cents. >>>>>>>>>>>>>>>>>>>>>INTERNETWORKING THE DESKTOP<<<<<<<<<<<<<<<<<<<<<<< Brad Shantz bshantz(a)spry.com Senior Software Engineer SPRY Inc. Direct #: (206)-442-8251 316 Occidental Ave. S. Main #: (206)-447-0300 Suite 316 Fax #: (206)-447-9008 Seattle, WA 98104 WWW URL: http://WWW.SPRY.COM ---------------------------------------------------------------------- PGP Public Key at: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or email: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET bshantz >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

2 1

Re: c'punks top 5
by Rich Salz 17 Dec '03

17 Dec '03

> I was reading about socks last night, and it does seem to be very close > to what is needed for this. Somebody, I forget who, had a hospitality suite at a Usenix LISA conference. They have a commercial version of socks. I don't remember if it was bundled or an option. At any rate, kinda neat that someone is providing privacy tools rather then the other way round. /r$

1 0

Have 2.6.2 but cant gen 2048 bits
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

All, Following is the output from pgp2.6.2 and me trying to generate 2048 bit keys. What am i doing rong? ;pgp -kg Pretty Good Privacy(tm) 2.6.2 - Public-key encryption for the masses. (c) 1990-1994 Philip Zimmermann, Phil's Pretty Good Software. 11 Oct 94 Uses the RSAREF(tm) Toolkit, which is copyright RSA Data Security, Inc. Distributed by the Massachusetts Institute of Technology. Export of this software may be restricted by the U.S. government. Current time: 1994/12/22 07:47 GMT Pick your RSA key size: 1) 512 bits- Low commercial grade, fast but less secure 2) 768 bits- High commercial grade, medium speed, good security 3) 1024 bits- "Military" grade, slow, highest security Choose 1, 2, or 3, or enter desired number of bits: 2048 Generating an RSA key with a 1024-bit modulus. You need a user ID for your public key. The desired form for this user ID is your name, followed by your E-mail address enclosed in <angle brackets>, if you have an E-mail address. For example: John Q. Smith <12345.6789(a)compuserve.com> Enter a user ID for your public key: Thanks T

2 1

Kiwi cypherpunks
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

Lads (and lasses), I seem to be having a bit of troub communicating we the kiwis on this list directly, but no probs if I send to the list. Has there been and communication on this topic in the last 3 or so days??? We cant organise anything if we cant talk to each other! T

3 2

Re: GUI: PGP vs novices
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Jeff Licquia writes: >>You will notice that this message is not signed. That's because in order to >>sign it, I would need to save my message, hop out to a DOS box, PGP encrypt >>it, hop back to my mail program and insert the encrypted mail as a text file. >>That's enough to discourage the average user. This is pretty much what Tim >>May was talking about when he discussed why he doesn't sign his messages. >>It's not that he couldn't... it's just not practical for him. It's not really >>practical for me either, but I do it when I feel it's necessary. >Just a small nit, but it appears that you're running something >Windows-compatible on your desk (the DOS box and all that). Are you aware >of the good Windows tools for PGP? The particular one I use (PGPClip by >Mike Meyer) uses the clipboard, and is very nice and simple. Exactly my point Jeff. Thank you for justifying what I said....**WINK**, **GRIN**. In order to even use PGPClip, it involves something OUTSIDE the mail application. (Although, it does sound intriguing to me.) Anyway, this is yet another example of the user needing to be fully conscious that they are signing or encrypting. It should be second nature. In order for it to become second nature, it MUST be included in the design of the mail package. (Or News reader, or FTP software, whatever.) Third party utilities make a piece of software harder to use. That's a given. Now, don't get me wrong, there are some nice thrid party vendor products out there. But, I have yet to see a crypto product that merges (cross platform) into a mail package smoothly. >Not a flame, or even a spark. Just wanting to make life easier for crypto >enthusiasts. Didn't see any sparks at all, Jeff. I am interested in PGPClip (at least to look at) does anyone have an FTP site pointer where I could find it? -- Brad >>>>>>>>>>>>>>>>>>>>>INTERNETWORKING THE DESKTOP<<<<<<<<<<<<<<<<<<<<<<< Brad Shantz bshantz(a)spry.com Senior Software Engineer SPRY Inc. Direct #: (206)-442-8251 316 Occidental Ave. S. Main #: (206)-447-0300 Suite 316 Fax #: (206)-447-9008 Seattle, WA 98104 WWW URL: http://WWW.SPRY.COM ---------------------------------------------------------------------- PGP Public Key at: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or email: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET bshantz >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

1 0

procmail
by cort 17 Dec '03

17 Dec '03

I just installed procmail (on my Linux system at work). The installation (readme, makefile, hand-holding along the way) was _very_ nice. It earns my hearty endorsement. Please advertise crypto enhancements to procmail to me (in email if not of general list interest). Who has the procmail integrated PGP (signing, etc.)? Cort.

1 0

RE: Have 2.6.2 but cant gen 2048 bits
by Johnathan Corgan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Following is the output from pgp2.6.2 and me trying to generate >2048 bit keys. What am i doing rong? You'll probably get multiple answers for this. The code in PGP that allows you to enter 2048 bit keys isn't enabled until 12/25/94, so you need to set your clock ahead to try this (and don't forget to set it back--I spent three days sending people "Christmas" mail :) Also, though I'm not sure why, it seems that the generated keys are only 2047 bits in length. This was my experience, and has been reported in alt.security.pgp by a number of others as well. Expect about a 15-20 minute key generation time on a 486/66 PC. ======================================================================= Johnathan Corgan "Violence is the last refuge of the incompetent" jcorgan(a)netcom.com -Isaac Asimov PGP Public Key: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or send email to: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET jcorgan ======================================================================= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLvifok1Diok8GKihAQG7ggP/SNuz/n0njIuB2NQ7iIqPH3IWQ4dzOoP0 AlBTiq80CZjVAhTR80d8ckID36cKLRjRKq3kafKqzWoDfevL8UwxXbORIs0kyo6h qnQAg98qOOQMkSh8yxYHOfYL612VMKDMuBlXDSC4dNnItkmCwex780TnZRuq9Hc/ SmkiusdPEFQ= =GFPO -----END PGP SIGNATURE-----

1 0

Re: GUI: PGP vs novices
by Johnathan Corgan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >I just think (boy I feel repetitive) that there should be something inside the >software so the user has the option to sign, or sign on the fly. If I type up >a message and think, "hey, I really want people to know this is from me", It >would be really cool to just hit a button on the toolbar, or grab a menu >option to sign automatically before sending. You don't have to sign >everything. But, you don't have to go out to another application (of any >sort) in order to sign. It's right there in front of you. To add to this thread: I'm working on a Windows based product that, while not achieving the level of integration that you describe, does enable one to assign signature, remailing, and encryption options from within the email message itself. The product works at the Windows Sockets layer, intercepting mail as it is sent from the mail application to the SMTP host, and performing the above crypto related functions based on text placed at the top of the mail message. - From the user perspective, I plan to make the product look just like the (excellent) Unix based PGP front end, premail. So, while you're typing your mail, if you want to add a signature, just add the line Signature: <userid> to the top (where userid is something that identifies the secret key to use). Features will include automatic signing, encryption, or remailing based upon destination address of the outgoing email. Incoming mail will be handled similarly, though there are some security issues surrounding automated access to your secret keyring that I haven't thought through yet. A major complication that I've come up against is installation. Somehow I've got to provide a painless way of discovering the Winsock stack in use on a machine, and installing my WINSOCK.DLL so that it gets loaded instead of the real one (which my software then loads on its own and intercepts calls to.) This is really easy to do manually when one has knowledge of such things; it is a major pain in the ass to come up with a way of doing this that doesn't require the user to know anything about Windows Sockets or DLL's or path variables, etc. On the other hand, the pain of installation only occurs once. For actual use, adding control lines to the top of one's mail is pretty simple. Not as good as having, say, "Encrypt", "Sign", and "Remail" buttons or menu items, but it should do for now. I may or may not have something to show at the next Cpunks meeting--depends on how frustrated I get with dealing with Windows' programming paradigm :) ======================================================================= Johnathan Corgan "Violence is the last refuge of the incompetent" jcorgan(a)netcom.com -Isaac Asimov PGP Public Key: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or send email to: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET jcorgan ======================================================================= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLviluE1Diok8GKihAQEGfAP/TRvp2ulO5MZJplYhwoFl5hvOmvSj1nNg N25aNm4++xzdywZ7ffPhIW6v2euk27eZLJS3p+CLcZ2JWQglmqWube3lQfg9mYsB cTf+w5Jyg+lDwvXExJ+9Fqe1mZLSIS+f2jeuAi6nJ5nFyeyYWTiWBmXP0gK7YQhC 5mCFzczhP8Q= =A9RZ -----END PGP SIGNATURE-----

1 0

Kiwi cypherpunks
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

storm(a)marlin.ssnet.com said on 22-dec-1994 >The wise _DNA_ is known to have said... >> >> Lads (and lasses), >> I seem to be having a bit of troub communicating >> we the kiwis on this list directly, but no probs if I send to the >> list. Has there been and communication on this topic in the last >> 3 or so days??? We cant organise anything if we cant talk to each >> other! > >Now who says the Aussie intelligence services aren't any good? :-) Um, using the words aussie & intelligence in the same sentence is a bit of an contridiction in terms! @:)> I just dosent happen! T

1 0

Re: NYT Potpurri and Econo-cash
by Bass Wastelan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- ECO_do - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvi2uSoZzwIn1bdtAQHOiQGAmRUcHy1wI/BkqpRQYj+ocztm4Go6YBBw pKzj1nY6PhcWz1pGYHNvolPFhF4hcN1L =nxS9 -----END PGP SIGNATURE-----

1 0

Re: Remailer list needed
by Anonymous User 17 Dec '03

17 Dec '03

"L. McCarthy" <lmccarth(a)ducie.cs.umass.edu> wrote: > Anyway, the standard ways of accessing the latest list are: > finger remailer-list(a)kiwi.cs.berkeley.edu > http://www.cs.berkeley.edu/~raph/remailer-list.html > > I don't know of a way to get it automatically via mail. I think the address to get finger via email is mg5n+finger(a)andrew.cmu.edu

1 0

Re: NONE
by ghio＠c2.org 17 Dec '03

17 Dec '03

nobody(a)rebma.rebma.mn.org wrote: > Matthew Ghio, > You've done a great job in the past and continue to do so, but for > the past week some (all?) of your users have not been getting any mail. > What happened? Post to cypherpunks, remailer-operators, alt.privacy > or alt.anonymous.messages, alt.abuse.recovery (either one. You choose). > > Thanks. Well, I finally got a chance to catch up on a lot of email that I hadn't had time to read recently. I had to take myriad.pc.cc.cmu.edu down for awhile. It should be back up in a few weeks. My alias-based remailers, alias(a)alpha.c2.org and mg5n+alias(a)andrew.cmu.edu are still up. c2.org has been having network connection problems lately and some messages may have been delayed, but to my knowledge nothing has been lost. For those who have been asking, help files are available by sending mail to help(a)alpha.c2.org, mg5n+remailer-help(a)andrew.cmu.edu, and a list of remailers and mail to usenet gateways is available from mg5n+remailers(a)andrew.cmu.edu

1 0

alpha.c2.org software upgrade
by admin＠alpha.c2.org 17 Dec '03

17 Dec '03

It is now possible to send outgoing mail via the alias remailer at alpha.c2.org. To send a message, create a message of the following format: From: me(a)alpha.c2.org (My Nym) Password: mypass Subject: test To: alt.test(a)demon.co.uk This is my message. Encrypt this with the public key for the remailer and send it to alias(a)alpha.c2.org. It will decrypt it and send your message (after verifying and removing the password line.)

2 1

'brief' macro for invoking pgp
by Alan Pugh 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- hello all, does anyone out there have a macro for the editor _brief_ by borland (last time i checked) that will invoke pgp to sign a message in the buffer. i've been using _brief_ as my primary editor since they were owned by _underware_, (no joke), and would like to be able to sign messages by pressing a hot key. i've been trying to do this off and on for some time, but my programming skills are almost nonexistant. preferably it would be filename independant. that is, it would work on the current buffer. the package was written to be able to compile files while within it, so it should be possible. any help would be greatly appreciated. thanks, amp <0003701548(a)mcimail.com> December 21, 1995 20:27 -----BEGIN PGP SIGNATURE----- Version: 2.61 iQEVAwUBMNnfligP1O9KJoPBAQHtEgf/TV8OeTFBpKhufmbIJqBpoj2Gt6dTjtH/ o3z1ExLFSYols4YAOAJbquqnUariSNrnqV1Ap2IjtNFM08eEAeAOBykjlKfjXWBt ZudoDlRfVoKmGnGVpn4Njo6wrlolpU0rezFls+4Zdx2sA7cLkBuTUBMNN0yq3oBw Yws2rfpKW8SGoj6gyDtkGKisDQtHUotmHTiIPVYI9FbTPa2Fs0Q5RnvAidl0i47m dDuWmfoP3VpiyAbPH9PMnI19Ax3U+n5MFKK0B8zUWIonUdv4px4u7eRo3b0kNCKl qETMZtoNB1Um3o7oZUZvjLAlKEEBOEmDweT4OVyxNt5q9thOO53wKA== =YlLN -----END PGP SIGNATURE-----

1 0

Is it possible to break Norton Encrypt??
by ADAM GERSTEIN, _THE_ MACGURU 17 Dec '03

17 Dec '03

Howdy fellow 'punks- A friend of mine thinks his girlfriend has been cheating on him, and thinks the proof may be in a few Norton Encrypt files. Is there anyway to get the password with a data/resource editor, or is he shit-out-of-luck and looking for a new girl-friend? Please reply via private mail, since I had to leave the list for my christmas break. Adam Gerstein -=- "Practice safe HEX - always use a keyboard condom" - anon PGP Key available bye finger or mail with the sub: PGPKEY +=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+ |(e)Mail me: | | Gerstein(a)scsu.ctstateu.edu | AGerstein(a)aol.com | | MacGeek(a)scsu.ctstateu.edu | MacGeek(a)eWorld.com | | an41389(a)anon.penet.fi (for anonymity) | +-------------------------------------------------------+ EWWWWW! - Betsy -----BEGIN PGP SIGNATURE----- Version: 2.6 iQBWAwUBLq/fYbXVc2UFUOWNAQHu4QIBAQzD1aOCh4DV3Dg4DSJPmNu+1xGDRxND 0PavaUaBFP7GGT6EneTBwVX1ddL1PFFKdeMf8qo9FgWfG0EOHuHJTkY= =6rlg -----END PGP SIGNATURE-----

9 18

Hash functions & Physical Analogies
by mikepb＠freke.lerctr.org 17 Dec '03

17 Dec '03

I seem to remember someone mentioning that a hash function, like the one used in signatures in PGP, would show a large change for a small change in the file, and a small change for a large change in the file. I was digging through some of my old stuff last weekend with my kids and found my old Rubik's Cube. I set it aside until last night. Here is the connection. It was late, but I decided to try and figure out some "move" sequences that would move small numbers of blocks on the Rubik's cude, without changing the location or orientation of the rest. In doing this, I (re)noticed that simple "move" sequences resulted in a large number of displacements (translation and/or rotation) of the blocks in the cube. And that very large sequences of "moves" had the opposite effect (if it was the correct sequence). This, in my sleep deprived state, brought hash functions to mind. It also brought several questions to mind. First question: I think I have seen references to topology in discussions of cryptography. I have never had a topography class, so I was wondering, is Rubik's cube is a topology problem? Second question: If Rubik's cube is a topo prob, is it a good analogy for trying to describe hash functions to people? Third question: If there is an analogy, how do you convince the lay person that the hash is a one-way function? By demonstrating that it maps many to one, and the Rubik's Cude maps one to one? Fourth question: To sign a post with PGP (from within vi, under trn) Do I include the header in the lines to be run through 'pgp -fast' or not? (I have the cp list go into a news gateway on my home machine so that threads are easier to follow) ---------------------------------------------------------------| | #include "std/disclaimer.h" Michael P. Brininstool | | mikepb(a)freke.lerctr.org OR mikepb(a)netcom.com | | (408)251-3222(Home) (415)253-0853(Pager) (415)694-1882(Work) | |---------------------------------------------------------------

1 0

Re: Hash functions & Physical Analogies
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Michael P. Brininstool wrote: > I seem to remember someone mentioning that a hash function, like the > one used in signatures in PGP, would show a large change for a small > change in the file, and a small change for a large change in the file. More important is that it is difficult (infeasible) to find a file for a given hash value. (This implies that small file changes result in large hash value changes.) > First question: > I think I have seen references to topology in discussions of > cryptography. I have never had a topography class, so I was > wondering, is Rubik's cube is a topology problem? No, it is a permutation group. Use the Schreier-Sims-Algorithm to find solutions. > Second question: > If Rubik's cube is a topo prob, is it a good analogy for trying > to describe hash functions to people? No. It is a simple thing to find a turn which fits to a given state of the cube. When the cube came out a german newspaper published a simple method for solving the cube. This means everyone can easily find a "message" which fits to a given "hash value". This must not be possible for a cryptographic hash function. The hash-function must be a one-way function, but the cube isn't one-way. Further more, the cube allows some kind of differential analysis. Since turning the front side only affects the front side, you can see what to do to turn the front side back. That's also not good for cryptographic context. > Third question: > If there is an analogy, how do you convince the lay person that the > hash is a one-way function? By demonstrating that it maps many to > one, and the Rubik's Cude maps one to one? It is still a problem to convince experts that a hash function is a one-way function... > Fourth question: > To sign a post with PGP (from within vi, under trn) Do I include > the header in the lines to be run through 'pgp -fast' or not? > (I have the cp list go into a news gateway on my home machine so > that threads are easier to follow) Should not do this. The header is modified by transport agents, e.g. paths and date are added. Hadmut

1 0

BYTE on Netscape
by John Young 17 Dec '03

17 Dec '03

Ben Smith writes supportively in the January 1995 issue on Netscape's products -- freebie and commerical. See pp.197-200. Two excerpts: "Netsite Commerce Server is Netscape Communications' most important product because it offers the basic requirements for secure transactions over the otherwise open-for-snooping-and-spoofing Internet." [Brief discussion of crypto system -- RSA, PGP similarity and difference.] "Netscape Communications may not be able to clean out the loose threads and cobwebs of the Internet, but its client and servers are the kinds of products the Internet needs to make the transition from being a cobweb of experimental projects to a serious commercial marketplace."

1 0

MEETING NOTICE: IEEE RSA/Diffie-Hellman Working Group
by eric＠remailer.net 17 Dec '03

17 Dec '03

The following is the notice for the IEEE P1363 working group. The official title includes RSA and Diffie-Hellman, but these two algorithms are on hold because of patent issues. The committee is going forward on elliptic curve systems. Here's how this committee works. The working group is composed of individuals, not representatives of companies. Anybody can show up and participate. The voting rules are as follows. If you've shown up at two of the last three meetings, you can vote. That's it. The next meeting is typically set at the current one. The meetings are held in conjunction with various security conferences, typically, to make it easier for everyone to attend. The last two meetings were at CRYPTO in mid August in Santa Barbara, CA and at the Fairfax, VA security conference in early November. The next one will be possibly at the Oakland, CA conference held in May at the Claremont Hotel. I'd urge all interested parties to make an effort to attend. Eric ----------------------------------------------------------------------------- Date: Wed, 21 Dec 94 11:35:47 PST From: burt(a)RSA.COM (Burt Kaliski) To: p1363(a)RSA.COM Subject: MEETING NOTICE: IEEE RSA/Diffie-Hellman Working Group IEEE P1363: Standard for RSA, Diffie-Hellman and Related Public-Key Cryptography MEETING NOTICE Thursday, January 12, 1995, 9:00-4:00pm Hotel Sofitel, Redwood Shores, California This fifth meeting of the P1363 working group, open to the public, will review draft sections of a standard for RSA, Diffie-Hellman and related public-key cryptography. The meeting follows the 1995 RSA Data Security Conference, held January 9-11 at the same location. AGENDA 1. Approval of Agenda 2. Approval of Minutes from November Meeting 3. Officers' Reports 4. Review of Draft Standard a. General material b. Elliptic curves c. Hardware support d. Random number generation 5. Proposals for New Sections 6. New Work Assignments 7. Meeting Schedule If you'd like to participate, contact Burt Kaliski, the working group's chair, at RSA Laboratories, 100 Marine Parkway, Redwood City, CA 94065. Phone: (415) 595-7703, FAX: (415) 595-4126, E-mail: <burt(a)rsa.com>. Draft sections and copies of previous minutes are available via anonymous ftp to rsa.com in the "pub/p1363" directory. The working group's electronic mailing list is <p1363(a)rsa.com>; to join, send e-mail to <p1363-request(a)rsa.com>. There is no meeting fee this time. Hotel Sofitel is at 223 Twin Dolphin Drive in Redwood Shores, California, about 12 miles south of San Francisco International Airport. From U.S. 101, take the Redwood Shores Parkway exit, and turn left at the second traffic light. Phone: (415) 598-9000.

1 0

Merry Cryptmas
by bart＠netcom.com 17 Dec '03

17 Dec '03

For the holidays I recommend Tim's latest essay, available from ftp.netcom.com:/pub/tc/tcmay/Anarchy for your reading pleasure. This is a reasoned, balanced presentation that will surely propagate the memes of cypherpunk interest to the broader public. Pass it on.

1 0