December 2003 - cypherpunks-legacy

test2
by habs＠cmyk.warwick.com 17 Dec '03

17 Dec '03

Test. Please ignore

1 0

Re: An Attempt to Hobble SAFE Crypto Bill (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 25 Jul 1997 18:22:48 -0400 From: Alan Davidson <abd(a)cdt.org> To: "--Todd Lappin-->" <telstar(a)wired.com>, fight-censorship(a)vorlon.mit.edu Subject: Re: An Attempt to Hobble SAFE Crypto Bill At 11:03 AM -0800 7/25/97, --Todd Lappin--> wrote: > >An Attempt to Hobble House Crypto Bill > > by Rebecca Vesely ... > The amendment, by Representative Benjamin Gilman > (R-New York), who chairs the International Relations > Committee, would make it unlawful to "manufacture, > distribute, sell, or import any product within the United > States that can be used to encrypt communications or > information if the product does not permit the real-time > decryption of such encrypted communications or > information." The full text of this very frightening amendment is now available on CDT's Web site at: http://www.cdt.org/crypto/legis_105/SAFE/index.shtml#970725 It's a chilling glimpse at the Administration's view of a mandatory-domestic-key-recovery world. This is the first time I've seen anyone put such a provision through the House Legislative Counsel process. -- Alan Alan Davidson, Staff Counsel 202.637.9800 (v) Center for Democracy and Technology 202.637.0968 (f) 1634 Eye St. NW, Suite 1100 <abd(a)cdt.org> Washington, DC 20006 PGP key via finger

1 0

c'punks top 5
by Andrew Lowenstern 17 Dec '03

17 Dec '03

What, IMHO, are the top 5 most important things the cypherpunks should be concentrating on? No doubt everyone else has their own ideas of what the "cypherpunks top 5" (or top 10) is, so please tell us your suggestions. 1. anonymous http proxy servers ("re-webbers") 2. PGP compatible crypto library 3. reply-able remailers that are secure and easier for the recipient 4. better remailer security (dc-nets) 5. socket-based keyserver interface for real-time automagic key fetches andrew <btw, this is a top 5 rather than a top 10 because I couldn't think of 10 good things to concentrate on when I wrote this>

2 1

(fwd) Newt says Clipper Chip is Dead
by jamesd＠netcom.com 17 Dec '03

17 Dec '03

Xref: netcom.com alt.culture.usenet:6563 alt.rave:37968 Newsgroups: alt.culture.usenet,alt.rave Path: netcom.com!ix.netcom.com!howland.reston.ans.net!usc!bloom-beacon.mit.edu!crl.dec.com!crl.dec.com!pa.dec.com!mtshasta.snowcrest.net!ken From: ken(a)snowcrest.net ("Ken Stuart") Message-ID: <82739.ken(a)mtshasta.snowcrest.net> Reply-To: ken(a)snowcrest.net Subject: Newt says Clipper Chip is Dead Date: Tue, 13 Dec 94 20:09:25 PDT X-Received: by usenet.pa.dec.com; id AA29312; Tue, 13 Dec 94 20:15:43 -0800 X-Received: by pobox1.pa.dec.com; id AA20213; Tue, 13 Dec 94 20:15:37 -0800 X-Received: from mtshasta.snowcrest.net by inet-gw-1.pa.dec.com (5.65/10Aug94) id AA16575; Tue, 13 Dec 94 20:14:24 -0800 X-Received: from [204.94.225.49] (sl1.mtshasta.snowcrest.net [204.94.225.49]) by mtshasta.snowcrest.net (8.6.5/8.6.5) with SMTP id UAA15046; Tue, 13 Dec 1994 20:13:23 -0800 X-Minuet-Version: Minuet1.0_Beta_16 X-Popmail-Charset: English X-To: alt.rave.usenet(a)decwrl.dec.com, alt.culture.usenet.usenet(a)decwrl.dec.com Lines: 16 Hello, On his weekly call-in TV show on National Empowerment Television tonight, Newt received a call asking about his opinion on the Clipper Chip, and he replied that it was a moot point, in that the Clipper chip concept was designed for a condition that no longer exists. So, paranoiacs, lighten up! :-) - respect to all, Ken ken(a)snowcrest.net (primary address) (if no answer, try ken.stuart(a)tigerteam.org ) -- --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we James A. Donald are. True law derives from this right, not from the arbitrary power of the omnipotent state. jamesd(a)netcom.com

1 0

the idiot spamming people who post to alt.2600 through my remailer
by Erich von Hollander 17 Dec '03

17 Dec '03

:: Post-To: alt.2600 has been squished. e

1 0

Re: Doomsaying, development, and deployment
by Adam Shostack 17 Dec '03

17 Dec '03

Why use the PGP libs? Would it be easier to use swIPe as an engine for encryption? If you do use swIPe, name the package link IP encryption. Adam Steve wrote: | > | How about starting a todo list so we can reach a consensus on a | > | prioritized list of goals. This may help us come up with projects | > | we can work together on. I'm itching to do some coding... | > | > Some projects worth doing: | > | > a link encryptor | | If someone would recommend the best version of the pgp libs, | I'll think about adding it to plug-gw (from TIS). That would | provide a ready made transparent shell for connecting | systems. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: McCoy is Right! New Mail Format to Start Now.
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Oh, get real, Lucky! My mail reader here is neither inadequate nor (particularly) buggy - it's good old "Mail", and when somebody posts MIME mail, it quite accurately shows me the real ASCII the mail is made of - I wish my other mail reader would do that. (It's Microsoft Mail, a closed, buggy, really appalling system that chokes on messages with more than 64K of non-attachment message body, and chokes badly on >132K.) If there were a convenient MIME viewer to pop in as my PAGER, I might have mail use it rather than less -sc, my current preference. But meanwhile, a MIME is a terrible thing to waste.....

1 0

Re: properties of FV
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

In the www-buyinfo discussion on crypto, > From research!nsb.fv.com!nsb Sat Dec 17 09:36:40 1994 >Eric > "If and When" is Yes and Today. Anybody who can autosign their > > The risk analysis is absolutely true. However, I have the impression > you missed the phrase "deployed widely enough to have penetrated a > meaningful portion of our market". I suspect that the cypherbunks and > www-buyinfo communities are not the best place to get a feel for the > extent to which crypto is widely deployed. Pick some random other list > or newsgroup, however, and I'll be surprised if you find 1% market > penetration for crypto. Obviously, from reading Cypherpunks you'd get the idea that everybody has PGP and all but a few old fogies have MIME :-) However, one of the reasons that few people actually are using PGP signatures on all their messages is that there's no real need - most of us realistically aren't trying to overthrow our governments, except through obsolescence and ridicule, and there isn't much problem with forging postings on the net. On the other hand, if my credit card were involved, I'd certainly be happy to start signing all my fv payment confirmations, especially if there were a convenient tool for doing so that got distributed free.... bILL

1 0

Re: IPSP
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 11:51 AM 12/19/94, Perry E. Metzger wrote: .... >I'll send sections of my draft if anyone wants to hear more on the >topic. .... I would very much like to see the IPSP stuff. I have searched several MB of new and old mail and found no references to a source. Thanks

1 0

Re: c'punks top 5
by Andrew Lowenstern 17 Dec '03

17 Dec '03

Adam Shostack <adam(a)bwh.harvard.edu> writes: > Whats wrong with PGPtools? (A lack of documentation. Been > a while since I looked, but I think it lacked a high level > interface. The low level stuff is great, but on the mac, I can > send an Appleevent "Encrypt *file recipient" and, some extended > period later, get a response. It has been a while since I looked too, does it work with the 'new' format messages generated by MIT pgp? Does anyone actually USE pgptools for any available applications? As far as I know, nobody uses it. If nobody uses PGPtools, then what is the reason? Either nobody really wants a PGP library (which isn't true judging from the inquiries on cypherpunks), or something is wrong with PGPTools. Is it the documentation like you said? Maybe some of us should pick up where pr0duct cypher left off and enhance PGPTools. This brings me to another point: Isn't the file format for PGP supposed to change (I think I remember Colin telling me this quite a long time ago)? If it is, should we bother with PGPtools? What really is the status of PGP 3.0? Assuming the file-format has changed, shouldn't it have been decided by now? If PGP 3.0 is being written on top of a portable generic crypto-library, don't you think this, the foundation of the new PGP, would be ready (after a year+ of working on it and rumors from developers of PGP 3.0 being out in 6 months?). There was a quick thread on this last week and not a peep was heard... I really wish somebody who had a clue would fill us in on where PGP 3.0 really stands. I have the suspicion that it is not nearly as far as we would like to think. If this is the case we should probably get cracking on PGPtools. > | 5. socket-based keyserver interface for real-time automagic key > | fetches > > Who needs real time? The servers are often bogged down > and don't respond in real time anyway. The following > procmail works fine. Theres also a short shell script at the end. When I am checking a signature, I want to be able to check that signature right now! By the time an e-mail request gets back, I'm a 100 articles down the line and not interested in checking that signature anymore. For personal mail, or REALLY important news articles, I am willing to wait, of course. The finger-for-keys server at Illuminati Online is an example of real-time key fetching (although last I tried it didn't work... either it's no longer there, or it has moved from wasabi.io.com and I don't know the generic hostname for their pgp-keyserver), but to access it programatically would require some parsing and such... A keyserver that watched a TCP port and had a very simple protocol (maybe Simple Key Transfer Protocol - SKTP) for requesting keys, would be keen. Maybe auto-key fetching isn't something we need to concentrate on... I was just throwing out some ideas... andrew

1 0

Hiding strings in objects code
by Jonathon Fletcher 17 Dec '03

17 Dec '03

I'm looking for a way of concealing the text strings in an object file so that they can't be seen. I'd like to use something a little more complicated than rot13 :-), but something that's freely usable for non-profit use. Any suggestions as to which I should use ? -Jon -- Jonathon Fletcher, j.fletcher(a)stirling.ac.uk

2 1

Re: c'punks top 5
by Jonathon Fletcher 17 Dec '03

17 Dec '03

> > 1. anonymous http proxy servers ("re-webbers") > What is wanted/meant for these ? -Jon -- Jonathon Fletcher, j.fletcher(a)stirling.ac.uk

4 4

Physical location of a machine
by Jonathon Fletcher 17 Dec '03

17 Dec '03

>From David Harvey's list of places holding pgp outside the us: ftp://ftp.uu.net/pub/security/virus/crypt/pgp where, physically, is this machine (country). -Jon -- Jonathon Fletcher, j.fletcher(a)stirling.ac.uk

3 2

Name that phone
by Mark Rogaski 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Why not a little recursion? PGP --> Phones Get PGP :) - ----- Mark Rogaski a.k.a. Doc "I used to think that my brain was the rogaski(a)phobos.lib.iup.edu best part of my body ... but then I http://www.lib.iup.edu/~rogaski/ remembered who was telling me this." 100,000 lemmings can't be wrong! - Emo Phillips >>>>>finger fllevta(a)oak.grove.iup.edu for PGP Public Key and Geek Code v2.1<<<<< Disclaimer: You would probably be hard-pressed to find ANYONE who agrees with me, much less my university or employer... -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLvYrYx0c4/pqJauBAQFzQQP7BlBpOAFpAwVUPo605Z4nxw+qRpNGWKwm 4JgcUpv559z50X3sPy01XQidTV+Cye8+63iVD1vgKyFZllRC6kUkF3r6RiDD7I1P u0Vi4VOb32OBozlXX+DORfn9m9aUP106RPmpe8PtWmO5B6FogxqYH/SBjzaxbuMq IfMq37DW5Jc= =tdgH -----END PGP SIGNATURE-----

1 0

Re: Hiding strings in objects code
by Jef Poskanzer 17 Dec '03

17 Dec '03

>I assume you mean so that running "strings" on the binary will not >lead you to anything, right? You can use an XOR with some weird value >to hide the strings. Just make sure the value you use will, for >example, set the high bit on the string bytes... > >Its is a cheap, free way to hide strings. It is, by no means, secure. When rtm used this technique in his worm I'm sure a lot of people, such as myself, spent the five minutes necessary to hack up a program that tries XORing the input with all 256 possible bytes. I had the program pipe the output of each try through strings and wc, to check whether any significant text was uncovered. Only 0x00 and the single now-forgotten value he used got hits - no second XOR value. Anyway the point is it's *really* by no means secure, and you can do much better with a few minutes thought. Set up a basic framework using a Makefile that takes a file of MNEMONIC "text string" and runs it through an encoding program to produce a .h file of static char* text[] = { ... #define MNEMONIC 17 "vb4hv7789sd", Then in your actual program you just call decode(text[MNEMONIC]); Given that simple framework you can experiment with lots of different encoding and decoding functions. --- Jef

2 1

hiding strings in binaries
by Alex Strasheim 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I didn't write this program and I don't know how it works. It was posted on the nyx freenet by kstern(a)nyx.cs.du.edu. When you compile and run it, it prints out the lyrics to "The Twelve Days of Christmas". As you might imagine from looking at the code, strings doesn't find anything in it. #include <stdio.h> main(t,_,a) char *a; { return!0<t?t<3?main(-79,-13,a+main(-87,1-_,main(-86,0,a+1)+a)): 1,t<_?main(t+1,_,a):3,main(-94,-27+t,a)&&t==2?_<13? main(2,_+1,"%s %d %d\n"):9:16:t<0?t<-72?main(_,t, "@n'+,#'/*{}w+/w#cdnr/+,{}r/*de}+,/*{*+,/w{%+,/w#q#n+,/#{l,+,/n{n+,/+#n+,/#\ ;#q#n+,/+k#;*+,/'r :'d*'3,}{w+K w'K:'+}e#';dq#'l \ q#'+d'K#!/+k#;q#'r}eKK#}w'r}eKK{nl]'/#;#q#n'){)#}w'){){nl]'/+#n';d}rw' i;# \ ){nl]!/n{n#'; r{#w'r nc{nl]'/#{l,+'K {rw' iK{;[{nl]'/w#q#n'wk nw' \ iwk{KK{nl]!/w{%'l##w#' i; :{nl]'/*{q#'ld;r#n'}{nlwb!/*de}'c \ ;;{nl'-{}rw]'/+,}##'*}#nc,',#nw]'/+kd'+e}+;#'rdq#w! nr'/ ') }+}{rl#'{n' ')# \ }'+}##(!!/") :t<-50?_==*a?putchar(31[a]):main(-65,_,a+1):main((*a=='/')+t,_,a+1) :0<t?main(2,2,"%s"):*a=='/'||main(0,main(-61,*a, "!ek;dc i@bK'(q)-[w]*%n+r3#l,{}:\nuwloca-O;m .vpbks,fxntdCeghiry"),a+1); } == Alex Strasheim | finger astrashe(a)nyx.cs.du.edu alex(a)omaha.com | for my PGP 2.6.1. public key -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLvY1qxEpP7+baaPtAQHXLQP/Te/ttVPR7Ig6pV5Cq7imPZlHZ9pZZPpj NxVwdN7dlv1uUh7TYdqasTw4RunKe0Iip2zMDU1x6g8+Eg4XErc5pHLPICXDweGC hBBmMQeXcmCNrwL4w/d7G+6zoy3wkrwjo0pXsUYsPeGiOEDTAdNipoOL4NsCbZdK p5fzbCd7QAA= =0zOd -----END PGP SIGNATURE-----

1 0

Re: (fwd) Newt says Clipper Chip is Dead
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 5:44 PM 12/19/94, James A. Donald wrote: >On his weekly call-in TV show on National Empowerment Television tonight, >Newt received a call asking about his opinion on the Clipper Chip, and he >replied that it was a moot point, in that the Clipper chip concept was >designed for a condition that no longer exists. Eh? What condition is that? I don't understand. What condition used to exist that required the deployment of the Clipper Chip, that no longer exists? What was he talking about?

2 1

Re: hiding strings in binaries
by elton＠sybase.com 17 Dec '03

17 Dec '03

>I didn't write this program and I don't know how it works. It was posted >on the nyx freenet by kstern(a)nyx.cs.du.edu. When you compile and run it, >it prints out the lyrics to "The Twelve Days of Christmas". I didn't write it either, but a friend asked how the hell it did that, so I hacked on it for a couple hours and now I _do_ know how it works: it's a substitution cipher just like rot-13, coupled with a selector to print phrases in a predetermined order. This string: >"!ek;dc i@bK'(q)-[w]*%n+r3#l,{}:\nuwloca-O;m .vpbks,fxntdCeghiry" contains the substitution cipher. All the letters of the song are in the 2nd half of the string, starting at '\n'. The substitutions are the first half of the string. The program searches for a match in the index section; when it finds a match, it adds a constant to that character's array index to get the index of the character to print. Thus, searching for '!' causes '\n' to print; searching for 'e' gets 'u'. This string: >"@n'+,#'/*{}w+/w#cdnr/+,{}r/*de}+,/*{*+,/w{%+,/w#q#n+,/#{l,+,/n{n+,/+#n+,/#\ >;#q#n+,/+k#;*+,/'r :'d*'3,}{w+K w'K:'+}e#';dq#'l \ >q#'+d'K#!/+k#;q#'r}eKK#}w'r}eKK{nl]'/#;#q#n'){)#}w'){){nl]'/+#n';d}rw' i;# \ >){nl]!/n{n#'; r{#w'r nc{nl]'/#{l,+'K {rw' iK{;[{nl]'/w#q#n'wk nw' \ >iwk{KK{nl]!/w{%'l##w#' i; :{nl]'/*{q#'ld;r#n'}{nlwb!/*de}'c \ >;;{nl'-{}rw]'/+,}##'*}#nc,',#nw]'/+kd'+e}+;#'rdq#w! nr'/ ') }+}{rl#'{n' ')# \ >}'+}##(!!/" is the phrases of the song. Each '/' character is the end of a phrase: "@n'+,#'" == "On the "; "*{}w+" == "first"; "w#cdnr" == "second"; etc. The rest of the program is a selector to choose which phrase to print next. It doesn't run everywhere (it presumes its character set is 7-bit ASCII), and it depends on being invoked with no arguments. (Try it with one or two arguments -- see what happens! It redefines the standard main() argument 'argv' as an integer purely so that it can be 100% recursive, and depends on 'argc' being zero in the outermost level.) It's one busy s.o.b., too, because _every_ increment of the lookup index is a separate function call, as is the phrase selector and character printer. I gather that this was one of the entries in the "obfuscated 'C'" programming contests that used to be held some years ago. (Are they still held?) -- Elton

2 1

Re: Anon remailer on new ISP ?
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Dave Merriman writes: > Does anyone know if any of the 'standard' CP tools (remailers, etc) would > run on a Windows NT machine (server edition 3.5)? A couple friends and I are > under serious contemplation of setting up an ISP in a town of 100K+, and if > it's possible, I'd like to put an anon remailer on it. Great ! Two quick reactions: [] Would it be possible to run an anon-http server on it ? [] If you start a remailer-friendly site, I'd be very surprised if no-one here wanted to get an account there and establish a Windows NT remailer, written from scratch if necessary.... -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvd8tmf7YYibNzjpAQEJGgP+NmDO/UKwXGPC2XcuEJLUQ78T4auvna+l ia5RNXEUVpXVlRrXgARxwN+gnh7AMxBLNNGBZUbawrlwcef8/olb5D7+y5tGp2ja RSbWhwmrOzl2dc/dCJ7fxlsvDc0r0z3/5v0TvYEU+ju3HOP2NoJ5pEl7uVttndqY eyPzdoZTfL8= =KrKW - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvd92CoZzwIn1bdtAQF3mgGAmf8CJP9LyBVJZnWjCq/PFDtEdneMM6kn 4u8pR09jRndd7g/LWf6NaJFnMJCTzsA4 =BKMk -----END PGP SIGNATURE-----

1 0

No Subject
by nobody＠jpunix.com 17 Dec '03

17 Dec '03

Perry, shut up already! What a fuckin' geek...

2 1

C code contest
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

Elton(a)sybase.com wrote: >I gather that this was one of the entries in the "obfuscated 'C'" >programming contests that used to be held some years ago. >(Are they still held?) Yep, Mail chongo(a)TOAD.COM, co-incedentally T

1 0

Re: c'punks top 5
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Adam Shostack <adam(a)bwh.harvard.edu> writes: >> Whats wrong with PGPtools? (A lack of documentation. Been >> a while since I looked, but I think it lacked a high level >> interface. The low level stuff is great, but on the mac, I can >> send an Appleevent "Encrypt *file recipient" and, some extended >> period later, get a response. > >It has been a while since I looked too, does it work with the 'new' format >messages generated by MIT pgp? Does anyone actually USE pgptools for any >available applications? As far as I know, nobody uses it. If nobody uses >PGPtools, then what is the reason? Either nobody really wants a PGP library >(which isn't true judging from the inquiries on cypherpunks), or something is >wrong with PGPTools. Is it the documentation like you said? Maybe some of >us should pick up where pr0duct cypher left off and enhance PGPTools. This >brings me to another point: > I use PGPTools. It is the crypto engine for Mixmaster. I have been having problems with it though. It works fine with PGP2.6 messages. > <BIG SNIP> >andrew -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCUAwUBLvZ0SVVkk3dax7hlAQG6AwP42xb6cPFWhMMPY83Vv/Q6akWBCuccbEqP RaAaz/iVJHdP6WLdItPSvpZQsp0KL6+pfqAwH3IMZd0a/ixJyFAEGOQ1gr/OQjCC fKYVfH5K6C1j5GMy9dLFKbWCxKk7n/3e1is3nNtoV6kqMsJxlo3WBWgtEWOz+WrE 8EZv9EwmdA== =Wg/K -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

SSL server experiment
by Hal 17 Dec '03

17 Dec '03

Here is a perl script which connects to a netscape-style "https" server. The results of running it with "https.pl home1.mcom.com 443" is: Attempting connection to 198.93.93.10 Connected Sent message, length 40 Received length = 502 Message type = 4 Session ID Hit flag = 0 Certificate type = 1 Server version = 2 Certificate length = 472 Cipher specs length = 3 Conn ID length = 16 Supported ciphers: RC4_EXPORT40, 128 bits This way you can see which of the 5 cipher options (RC4 or RC2 in full and export versions, plus IDEA) are supported by any given server. You always use port 443 and just specify the machine name. I was a little surprised that Netscape's own server is only running the 40 bit version. I hope the export restrictions will not prevent the use of full strength ciphers. Here is the script, which I call https.pl: #!/usr/local/bin/perl # Perl script to test connection to http ssl port # Usage: https machine port # Standard internet stuff $AF_INET = 2; $SOCK_STREAM = 1; ($name, $aliases, $proto) = getprotobyname('tcp'); $sockaddr = 'S n a4 x8'; # Parse if (@ARGV == 2) { ($them, $port) = @ARGV; } else { die "Usage: $0 machine port\n"; } select (S); $| = 1; select (STDOUT); socket (S, $AF_INET, $SOCK_STREAM, $proto) || die "socket: $!"; ($name, $aliases, $type, $len, $thataddr) = gethostbyname($them); $that = pack ($sockaddr, $AF_INET, $port, $thataddr); @thataddr = unpack('C4', $thataddr); $thataddr = join('.', @thataddr); print "Attempting connection to $thataddr\n"; die $! unless connect (S, $that); print "Connected\n"; $cli_hello = 1; $vers = 2; $msg = pack ("C n4", $cli_hello, $vers, 5*3, 0, 16); $challenge = pack ("d2", rand, rand); #16 bytes $cspecs = pack ("Cn"x5, 1, 128, 2, 128, 3, 128, 4, 128, 5, 128); $len = 1+8+5*3+0+16 + 32768; $h = pack("n", $len); $totmsg = pack("a2 a9 a15 a16", $h, $msg, $cspecs, $challenge); print S $totmsg; print "Sent message, length ", $len-32768, "\n"; # Now for the interesting part read (S, $phd, 2); ($slen) = unpack ("n", $phd); print "Received length = ", $slen-32768, "\n"; read (S, $pm1, 11); ($smsg, $ssess, $scert, $sver, $sclen, $scspeclen, $scidlen) = unpack ("C3 n4", $pm1); print "Message type = $smsg\n"; print "Session ID Hit flag = $ssess\n"; print "Certificate type = $scert\n"; print "Server version = $sver\n"; print "Certificate length = $sclen\n"; print "Cipher specs length = $scspeclen\n"; print "Conn ID length = $scidlen\n"; if ($sclen) { read (S, $scert, $sclen); } read (S, $pspecs, $scspeclen); $nscspecs = $scspeclen / 3; @scspecs = unpack ("Cn" x $nscspecs, $pspecs); @ciphernames = ( "(undefined)", "RC4", "RC4_EXPORT40", "RC2", "RC2_EXPORT40", "IDEA" ); print "Supported ciphers:\n"; for ($i=0; $i<$nscspecs; ++$i) { printf ("\t%s, %d bits\n", @ciphernames[@scspecs[2*$i]], @scspecs[2*$i+1]); } read (S, $scid, $scidlen); close S; exit 0;

1 0

Mac PGPTools
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have a Magic Money client for the Mac, so PGPTools MUST have been ported to the Mac. Does anyone know where I might find the source for Mac PGPTools? I am starting to think about porting the Mixmaster front end to the Mac. Thanks. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLvaQflVkk3dax7hlAQHwcQP+IQrZMS05Vtw/hNJKoR9hv61joYlv2CtP pyOzWMFW5gHopc29UR1lI311MJnnj3/vDRLhVtN3hDNGl4LsS6s6xNIRPpKdeoaT 0ESSGaWq7ddmVmFmhcta9b1sX8GsoHrJbjjDXTcOEKICo+0qZlHzgtGvLfArl0or /MI7guanhH0= =FqTm -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

scripts, recipes and things of that ilk
by skaplin＠skypoint.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Has anyone put together a compilation of all the perl and procmail scripts for integrating PGP into various mail readers? If so could you please forward a copy to me. Thanks, Sam ============================================================================== Bore, n: a person who talks when you wish him to listen. - Ambrose Bierce, "The Devil's Dictionary" 1911 ============================================================================== skaplin(a)skypoint.com | "...vidi vici veni" - Overheard | outside a Roman brothel. PGP encrypted mail is accepted and | preferred. | Change is the only constant in the | Universe..."Four quarters, please." E-mail key(a)four11.com for PGP Key or | Finger skaplin(a)mirage.skypoint.com | Smile!! Big brother is watching. ============================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: This message digitally signed to verify the identity of the sender iQEVAwUBLvaRVclnXxBRSgfNAQFy5gf7BrK3LAKSWvAF6kJY+vbvcjsp/xuq+Voc khzmyouW9i1JFVm5xq8htXIqcazz6Vd51y9rSqQhUpMHZqA9IsT+oom1ifpD16v4 GGv/jGDYJWq8Zz1MRO7xnCqKL0jT9kWSbkGqC/flssE5xlyI2OxTh73S+jHnj7Qh YQoDWjZ2SZVBskjkLEUFnfqARY/ExQ5PghA39ZqGQfrFAoTLPz6XxAO5l3L5oGRv cEiUpvux8lUNM2Te727HjXtnwvcf3xseBqN5ncWwfb3ftDSJX8+FyIG+i2GVKnXS pt1cYmm3jWJLxbm3OSrOrxzHQj3gXo8Ulw3Uib7rkuszNYsEnJf/SA== =d6jk -----END PGP SIGNATURE-----

1 0