December 2003 - cypherpunks-legacy

Remailer postage
by jpb＠gate.net 17 Dec '03

17 Dec '03

Russ, Where can I get the Magic Money software? I'm also interested in a combination FV/MM approach to anonymous postage. I'm still waiting to get my linux box set up (hassle with client paying the bill and all that fun stuff) but am considering starting a remailer once I get the site set up. I am concerned about the ethics of having a paymailer feed into the free remailer soup - how would their operators react if I'm effectively making money (no matter how little) off of them? In the interest of preserving anonymity, perhaps their should be a set postage rate - that way someone could use a digital stamp anywhere, helping to confuse the audit trail. I'm not sure if I want to get involved in the hassles of redemption though. It would probably become a major hassle for all the operators to have to do that much accounting on a regular basis. jpb(a)gate.net finger for pgp and ripem keys

5 6

All I did was properly crosspost!
by Carol Anne Braddock 17 Dec '03

17 Dec '03

I first saw the Dubois Letter in alt.security.pgp the 28th. PRZ posted it here the next day. I "crossposted" it to my favorite 10 newsgroups. Just 10. Some creep complained. (we'll get to him a bit later). I didn't get a chance to get back on-line for 3 1/2 days. I was lied to. I am hurt. My mail has been stolen. I haven't read any of you for four days now. My web pages are vulnerable. Is there somebody who can please help me get my 2 megs of mail? I can't get at your keys. http://www.winternet.com/~carolann/coffee.html has the cypherpunk rant links on the page. I'm proud of them, and proud to be on this list. But to take my account away for crossposting to 10 groups is not right. I'll be back with a better chronology. Love Always, Carol Anne ps Hope you like (and feel free to use) my new .sig

2 2

Re: Are 2048-bit pgp keys really secure ?
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> A somewhat disturbing trend has appeared in the low-end cost-sensitive PC > SIMM market. Some supposedly 9-bit SIMMs are actually 8-bit SIMMs plus > a parity generator. This means that the parity checking is essentially > subverted, because the parity bit is generated from the stored contents > of memory at read time, rather than the stored contents when it was > written to. As such, NO bit errors are detected. So why not do a cheap trick: After the small primes check calculate a CRC checksum over the number. Then do the primality check. If it is a prime, store it together with the CRC. The CRC can be checked for every use of the number. (PGP encrypts the secret key and therefore it generates a CRC for the encrypted packet. But this CRC is generate after the primality check.) We already had some SIMM modules with bit errors. They were detected by a parity check. If cheap pc simms don't have a real parity bit, the probability of having such a bug isn't as low as 10^-40. If cheap parity-less simms are available they get sold (cheap and expensive). Hadmut BTW: Some weeks ago they found motherbords with falsified cache rams: They had just the normal DIL-ICs and the normal pins, but the plastic of the ICs didn't contain a chip. The BIOS was modified to give out a message about a good cache ram check at boot time.

1 0

Re: public vs. private replies
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Tim May writes: > [...] has asked that we reply in e-mail to him, to avoid > "cluttering the list more than I already have...," but the logic of > this is faulty. The few lines of a response such as this one, or even > of several such responses, are as nothing compared to dozens or more > people sifting their own archives so they can each independently send > [...] what they find. Hence my public reply. I'd like to amplify this point, which is missed all too often on Usenet and mailing lists. Replies to requests for fairly widely-known factual information should be directed to the forum (i.e. the mailing list, newsgroup, or what have you). This practice not only prevents duplication of effort by the repliers, as Tim mentioned, but also prevents duplication of effort by others interested in the same answer. I try to make a point of replying to the whole list when someone asks for a list of remailers, mail-news gateways, etc. for precisely this reason. As I see it the basic principle rests on a simple comparison of the number of replies desired with the likely number of replies. If you anticipate getting many more replies than you want, you should ask for replies to the entire forum in which you place the query. Otherwise, seek private email. This is certainly not a perfect heuristic, but it's an excellent starting point IMHO. For example, a few months back I wanted to give away an old AM/FM/ shortwave radio, so I posted to a local newsgroup. I asked for initial public replies, so that I wouldn't be flooded with mail before I had the chance to announce that a recipient had been selected (first-come first-served). After the initial expression of interest, further correspondence continued in private. [...] > In my opinion, having personal access > to past posts is several orders of magnitude more important than > having MIDI-MIME JPEG-II TeX players [...] It takes more disk space from one's personal quota, though (for those who suffer under such restrictions). :[ Let's not head down this road again.... "You've gotta keep `em separated !" -Offspring -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLwz5Mmf7YYibNzjpAQEooAQAlj93pc1CuSMTdApaRTg06ONgPkeyqUfY KhdcqzDmEnuWBDdwgO+YtHOHFsOGlPhoFhOijajJzTh97G1TBYn5plBECaZXs1RJ Au9g1uqEAKtFLFYB/jKDaDA/Xzf13irCKb846IAhttKICwQJ8HfLfgPWLHMa1/f1 ldkXYq7DfY8= =7KNc - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLwz6PCoZzwIn1bdtAQGpbwGAqY6tLm7TAN2TluCpD1WOTsR6kMgI2R27 CMExwcLopwSapiPNO0u/IHnzHUq5ij2C =TyKQ -----END PGP SIGNATURE-----

1 0

True Names
by Angus Patterson 17 Dec '03

17 Dec '03

I've been trying to get True Names by Vernor Vinge, and have been told it's out of print (like most good cypunk ), does anybody have it scanned? I realize this is without permission, so does anybody have Vinge's address? (e-mail or otherwise) or could anybody ask him? Btw, does he have any other crypto/anonymity related stories? Thanks in advance.

4 3

Re: Remailer Abuse
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Russ Nelson writes: > Heh. An anonymous remailer paid for by credit card... > Sure, I'll know who used it, but I'm not going to keep that > information. (Yes, yes, FV says that I have to keep records of who > bought what, but I'll label all my information with a random number, > that simply says that X bought information worth Y, not *what* > information.) And if you don't trust a remailer operator, then you > won't use it. I'd be worried about a couple of issues - one is just the transaction cost - can you successfully market remailer use at a buck a shot or whatever you'd be charging beyond FV's 29c stamp, or would you have some convenient way to aggregate bill? Beyond that, though, are some traffic analysis problems - remailers require a fair bit of traffic to be useful, and unless you receive a reasonable amount of encrypted traffic, and support encrypted email for purchasing remailer service and other merchandise, an eavesdropper would have a fairly good source of traffic data on your remailer users, especially since buying and using remailer service requires two messages within an hour or so. An alternative billing mechanism, which wouldn't use Chaum-patented cash, would be to sell a bunch of one-shot random-number tokens. When you sell the tokens, you add them to the database of valid tokens, and when one comes in on a message you delete it. This allows you to sell more than one message or service-period per FV transaction, and separates the purchase and use by a longer time, without adding the need for record-keeping based on the user's ID. It obviously does require encrypted reply messages. Another variant is for the user to send you a bunch of tokens along with the purchase, which you store. Blind signatures would improve the security of this process, but require more computation and may involve Chaum's patents. In this case, the message from the client to you would be encrypted, but you wouldn't have to send a reply, so the request could come in anonymously. Bill

1 0

Re: All I did was properly crosspost!
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- [I'm cc:ing this to C. A. Braddock's new address and her ex-sysadmin, in addition to the cypherpunks list. --L. Futplex McCarthy] Carol Anne Braddock writes: > I first saw the Dubois Letter in alt.security.pgp the 28th. > PRZ posted it here the next day. > > I "crossposted" it to my favorite 10 newsgroups. Just 10. Posting letters asking for $$$ is of course a risky venture on Usenet. We see the PRZ Appeal as a Worthy Cause (tm), but that's just what all the MAKE.MONEY.FAST posters think of their garbage too. If you go sticking out your hand, you'd better be doing it in the right place. My frank reaction as a veteran Usenetter is that 10 newsgroups sounds like rather a lot, especially when that presumably excludes the groups like a.s.pgp to which the letter was originally posted. To which 10 newsgroups did you repost the letter ? [...] > Is there somebody who can please help me get my 2 megs of mail? I believe it's questionable whether your old system is under any legal obligation to provide access to your accumulated mail there. As I recall, Netcom ended up deleting most of the deluge of mail Canter & Siegel received after their infamous spam. However, in this instance it does seem that it would be polite (and good P.R.) to give you access to the mail your account has received. Apologize and ask your former admin nicely, and you might well get it. He could move it to an anon-ftp directory, perhaps encrypted with some public key of yours :) [...] > But to take my account away for crossposting to 10 groups is not right. Well, it depends greatly upon what you posted and where. If I posted the PRZ Appeal to *my* ten favorite newsgroups (including alt.config, alt.religion. kibology, and alt.sexual.abuse.recovery), I'd certainly expect to face trouble and perhaps lose posting privileges. [...] > Login name: carolann In real life: CarolAnne Braddock > Directory: /usr2/carolann Shell: /etc/scripts/tcsh-susp > Last login Thu Jan 5 21:38 on ttyq5 from annex3-1.wintern > New mail received Thu Jan 5 21:16:23 1995; > unread since Mon Jan 2 13:18:25 1995 > Plan: > This account has been disabled permanently. > > Mike Horwath - Admin - Winternet - drechsau(a)winternet.com -L. Futplex McCarthy - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLw0Fu2f7YYibNzjpAQGwoAP/RrXUl3vguSSJSvGDNKsXIMek61Ay5Cvy xFO/NWcyZpzXkqwF3w19DOtke1EQ1NuPP7Z9luN6zF/QkqNwS6Z0mAMc8hcI0kLg F3ESx06UABPJMQoVY63BtaDYuj6Dualjs903koAliIUhpITZ+qsf7jaj3qT1FtMa d3SzHqOWGYM= =876P - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLw0G3CoZzwIn1bdtAQHTCQGAgs4itNl5sAZMFjgMIx4Gef52o49+4q3k m36gnACMfYDMThQyhcOS8udSMFw3YM4Q =uty3 -----END PGP SIGNATURE-----

1 0

GIF_nip
by rah＠shipwright.com 17 Dec '03

17 Dec '03

----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0

available NNTP posting sites?
by erc＠s116.slcslip.indirect.com 17 Dec '03

17 Dec '03

Does anyone have a list of NNTP sites that take connections from anyone for posting? My regular NNTP site seems to be hosed, or something, and I have a post that needs to get out, but also needs to originate from this site. Thanks in advance :) -- Ed Carp, N7EKG Ed.Carp(a)linux.org, ecarp(a)netcom.com 801/534-8857 voicemail 801/460-1883 digital pager Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi ** PGP encrypted email preferred! ** "What's the use of distant travel if only to discover - you're homeless in your heart." --Basia, "Yearning"

1 0

Vinge reference in Moving Mars
by Hal 17 Dec '03

17 Dec '03

Greg Bear's novel Moving Mars, now out in paperback, has a cute reference to Vernor Vinge's ideas from True Names. p.208: "'Don't stick on the names,' Orianna said, shaping the living room into more Regency. 'All my friends are into Vernoring. They work and play with fake names. I don't know their true ones. Not even their parents know.' "'Why?' "'It's a game. Two rules - nobody knows what you're doing, and you do nothing illegal.' "'Doesn't that take the fun out of doin crypto?' I asked. "'Wow - crypto! Hide in the tomb. Sorry. I shy from two-edged words. We call it Vernoring.' "'Doesn't it?' I persisted. "'No,' Oriana said thoughtfully. 'Illegal is harm. Harm is stupid. Stupid is its own game, and none of my friends play it. Here's Kite.'" The book is pretty good, lots of nano and other hot tech, but not much crypto (sorry, Vernoring)... A little slow in places, though. Hal

1 0

Anonymity in Donating
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Some nice examples of the preservation of anonymity in charitable donations, both for the donor and for the recipient, caught my attention today. An article by Clare Ulrich in the December 1994 Communique (Vol.18 No.3), published by The Cornell Campaign, pays tribute to an anonymous donor to Cornell U.: "While some acts of generosity are marked by a name on a building or a plaque on a wall, others, so to speak, can be counted among the philanthropic `whodunits.' These are the anonymous gifts, and Communique would like to profile several innovative projects that one anonymous donor helped launch this year. According to the donor, anonymity provides greater freedom to `pick and choose' projects that are personally interesting. This donor is particularly attracted to programs that involve computer technology or promise to generate benefits beyond the scope of the immediate project. [...] The same donor who declined recognition for these high-tech projects also provided support for 24 high school juniors from Boys Harbor in Harlem to attend the six-week Cornell Summer College Program in 1994, as well as the two previous summers. [...] Although this anonymous donor may not be interested in getting a name on something, he certainly leaves an indelible mark on the quality of education at Cornell." Closer to home, our dept. chair Dave Stemple broadcast a request for donations to an anonymous recipient: "One of our undergrad majors lived in Amherst Crossings, which burned down last week. As a result this student, a senior who had planned to graduate this spring, is destitute and needs help or he will be unable to complete his degree. If you would like, you can contribute clothes or money (cash only please in order to maintain the student's anonymity) to him. [...]" Incidentally, I received my B&W C'punks shirt from Kevin Prigge a few weeks ago, and consider myself a very satisfied customer. I made a point of wearing it on the flights both ways for a recent vacation I took in California. On the return trip, I was delayed at O'Hare for over an hour due to a leaky window on the airplane. A man in his 50s or 60s approached me and asked, with a smirk, what a Cypherpunk was. I explained a bit, mentioning the passage of the DT bill. Noting the mention of the NSA on the shirt, the man mentioned that his son is working at Apple "with the NSA".... -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLwyA6mf7YYibNzjpAQFENAQA09JTWr501ZJliFWK4efY8py2OhgBq8gy rqYvrGX+EZ49Uq+IDU2DjiiPBHuYPOE23wb/QfouhmKaSSUMqifYTd+uau247Cot CC+CYceBvH3oK35oTr7CahSqb4JLUNs4atOkoYtpbYPG5qrR8yJkAGBKbVzQZHKt ioUFB5xhYKA= =QD4b - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLwyB+CoZzwIn1bdtAQEgkAF+OBkRShMO+Et/Kr8AkPXPz564xgNnhzfP WPSO0W0UCpkg/e7bQIliMCXiyzp7nHQr =1IBd -----END PGP SIGNATURE-----

1 0

RSADSI Conference - Extra Passes?
by chen＠intuit.com 17 Dec '03

17 Dec '03

A cohort of mine is in need of a pass to next week's RSADSI conference, which, unfortunately, is sold out. So if anyone has a pass that they're not planning to use for a half-day or so, please drop me an e-mail and I will be in your debt. Thanks! -- Mark Chen chen(a)intuit.com 415/329-6913 finger for PGP public key D4 99 54 2A 98 B1 48 0C CF 95 A5 B0 6E E0 1E 1D

1 0

C-LIT: Vernor Vinge's "A Fire Upon the Deep" (was: Re: True Names)
by ddt＠lsd.com 17 Dec '03

17 Dec '03

At 1:48 pm 1/5/95, Angus Patterson wrote: >I've been trying to get True Names by Vernor Vinge, and have been told it's >out of print (like most good cypunk ), does anybody have it scanned? >I realize this is without permission, so does anybody have Vinge's address? >(e-mail or otherwise) or could anybody ask him? Btw, does he have any other >crypto/anonymity related stories? Thanks in advance. Amazing that you should mention this, Angus: I *just* finished reading "A Fire Upon the Deep" and it is not only exeedingly gnarly, but also features a universal net, galactic-wide relays and Netscum-like service providers and associated user kvetching, a sinister-billions-of-years-old-AI-virus, newsgroups, lists populated by aliens - and even _crypto_ as the key to the whole shebang. There's also a great futuristic "dig" on pub key encryption buried in it. Neural net stuff. A possible explanation for the existence of both God and Newt Gingrich...and I could go on. Great read, true anus-clenching adventure... and this from one who does NOT normally read anything more sci-fi than certain software manuals. :) Strongly recommended for c-punks who can last 600 pages (after the first ten, you're hopelessly hooked if you have half a brain left afdter reading this list for a year or two). I _WISH_ I had VV's email address! I'd like to send the guy a big thank-you and ask if he's writing a sequel (yet). If anyone does know it, puh-LEEze mail me. First book of his I've read, first of it's kind I've enjoyed in a very long time. I'll scan my favorite crypto-related (legal-length) excerpt and post it next week, howzat? dave _________________________ Big books small Books high books tall Just give me a good Little book, That's all. -Truman Capote (age 11) C-LIT = Cypherpunk LITerature. Gitcher mind outta the gutter there, Lancelot.

4 3

Re: ecash trial issues explained
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> From: Wolfgang Roeckelein <wolfgang(a)wi.WHU-Koblenz.de> > > >-> Digital cash should not be "anonymous" -- paper currency isn't. Serial > > There seems to be a misconception here what is meant with anonymous. Paper cash > is anonymous: I can't derive the person I got the note from from the note > itself. So if I meet a guy in the street, he gives me a pack of cigarettes and > I give him cash, this transaction is anonymous. It isn't difficult to make paper cash less anonymous, though, by tracking serial numbers. This is occasionally done in "law enforcement" situations - recording the notes used to pay ransom or bribes. It wouldn't be difficult to add serial-number recording equipment/mechanisms to automatic bank-teller machines, to record what serial numbers would be given out to whom. (This can be done either by adding scanners to the ATMs themselves, or by scanning the money before putting it into the ATM, and having the ATM record that transaction #43 dispensed the 105th-110th bills in the stack. Scanning can either be done by OCRs, or by replacing the human-readable numbers with bar-codes, as some of the paranoids periodically suggest the US Treasury is about to do as part of some heinous plan. However, the original posters' assertion that digital cash should not be anonymous is not a technical statement, it's a value judgement, and in my opinion it's a bad one. There are a lot of genuine social needs that anonymity can support, and a lot of bad things that can be done with traceable money. Aside from that, traceability costs money. Original gold and silver money didn't need to be traceable, though coiner's and assayer's marks were useful, and it is easier to keep track of your pile of gold bars if they're numbered. But paper money has serial numbers largely to prevent easy copying; gold is a lot harder to counterfeit, unless you've got a king who insists that coins with his face on them should be worth N times as much as anonymous coins. Bill

1 0

Re: GIF_nip
by rah＠shipwright.com 17 Dec '03

17 Dec '03

> Watch your Cc: headers, s'vous plait? AAK! Eudora's "reply-to-all" strikes again! Grovelling in your general direction, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0

Re: True Names
by Blanc Weber 17 Dec '03

17 Dec '03

From: Timothy C. May I see copies in used bookstores often. It's in the collection "True Names and Something-or-other" and was in print until recenly. I also have the Bluejay edition, with an afterward by Marvin Minsky. .............................................................. I bought one at Half-Price Books. I don't know what edition it is, it's a dingy little paperback with a signature in it of some stranger that I wouldn't know. I keep it with my "previously owned" collection. Blanc

3 2

DES for HP48
by SINCLAIR DOUGLAS N 17 Dec '03

17 Dec '03

There used to be some code on soda to do DES on an HP48 palmtop/calculator. I looked this afternoon, on ftp.csua.berkeley.edu, and I couldn't find it. Anyone know where it got to?

2 1

Re: True Names
by Blanc Weber 17 Dec '03

17 Dec '03

From: Jim Gillogly > Blanc Weber <blancw(a)microsoft.com> writes: > I see copies in used bookstores often. It's in the collection "True > Names and Something-or-other" and was in print until recenly. I also ............................................................. No, No, Jim, that wasn't me saying that - that statement was made by a cpunkgod. Mine was beneath it. Blanc

1 0

floating point crypto?
by rah＠shipwright.com 17 Dec '03

17 Dec '03

I'm incensed. I casually mentioned somewhere else that I saw something on this list about floating-point math being used in crypto, contrary to popular belief, and somebody had the *timerity* to call me on it. ;-). I think it had to do with factoring, but maybe even in key-generation, though that doesn't sound right at all... So, are there c-punk archives I could look in? I remember hearing something about that, too. However, if someone remembers off the top of their head, or if they have an actual copy of the posting, that would be great, too. Please send me whatever it is by e-mail. No point cluttering the list more than I already have... Of all the nerve.... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

2 1

No Subject
by Carol Anne Braddock 17 Dec '03

17 Dec '03

[icicle.winternet.com] Login name: carolann In real life: CarolAnne Braddock Directory: /usr2/carolann Shell: /etc/scripts/tcsh-susp Last login Thu Jan 5 21:38 on ttyq5 from annex3-1.wintern New mail received Thu Jan 5 21:16:23 1995; unread since Mon Jan 2 13:18:25 1995 Plan: This account has been disabled permanently. Mike Horwath - Admin - Winternet - drechsau(a)winternet.com

1 0

sniff passwords on PC (DOS)
by m00012＠KANGA.STCLOUD.MSUS.EDU 17 Dec '03

17 Dec '03

As a demonstration of concept, I wrote a small, simple program that replaces the keyboard interrupt and stores all keystrokes in a buffer. It was very very easy to write. It works while using pgp and windows\net. It does not work after starting windows. Not sure, but it seems obvious that MS windows installs it's own keyboard interrupt. I suppose it would be easy to enhance this simple program (I bet it's been done by others) to store passwords into a secret file on a hard drive unbeknownest to the user. I first suspected that such a program already existed after hearing, two days after his arrest, that the CIA had cracked Aldrich Aim's encrypted files. (sorry if I spelled his name incorrectly.) Think about it, the govt. could spend 50,000 to 100,000 to create a freeware gif viewer, for example, that installed such a tsr. Mike P.S. If the guy who wanted to see his gf's files writes me, I'll send you this keyboard sniffer program.

1 0

Re: sniff passwords on PC (DOS)
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Mike writes: > days after his arrest, that the CIA had cracked Aldrich Aim's encrypted > files. (sorry if I spelled his name incorrectly.) FYI, I'm fairly sure it's "Aldrich Ames". > Think about it, the govt. could spend 50,000 to 100,000 to create a > freeware gif viewer, for example, that installed such a tsr. ...most of that going to Compu$erve/Uni$y$... > P.S. If the guy who wanted to see his gf's files writes me, I'll send you > this keyboard sniffer program. Just to clarify slightly, the person who originally asked the question (Adam Gerstein aka THE MAC GURU) said he had a _friend_ who wanted to see his (the friend's) gf's files. - - -L. Futplex McCarthy - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLw0I8mf7YYibNzjpAQEF/wP9GPKLX7KifBFRenzmbvsCdbOQ7Narlm8/ qiW/nSLRr7jZUtjAyhYM71eI9GsQbO6lADfV9ncoPIATNB/eJNCqa2O0cmNa67O/ KuUSQl0NQPiUQyevkLRldllEb9hSuTNeHyJZ4SFDpMbFrGYXX4Iu/w9RYcn9ssNS 29qFs0vNK30= =Z0ZM - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLw0J9ioZzwIn1bdtAQHXVgF8CVyuTHInzoYDUZmZZXwksIosAuiP4TSh pfZJLbRcoPPP9sJ63CTfnexZXenEzhLf =zrNo -----END PGP SIGNATURE-----

1 0

We still don't have the mailbox.
by Carol Anne Braddock 17 Dec '03

17 Dec '03

Thanks Doc. Wrote Phil Dubois, Zimmy's Lawyer. It's something I'll show you a copy of when I get back to playing "catch-up". Love Always, Carol Anne On Fri, 6 Jan 1995, Thaddeus Ozone wrote: > Carol, > I DL'd the whole thang. If it was world-readable, I've got it locked up on > my hard drive. I'll have to wait until I can get my hands on some 800k > disks, it takes up 1776k on my hard drive, but should fit on 2 - 800k's > once it gets transferred. I took the liberty of taking EVERYTHING that was > readable, including what was in the main directory. Talk to you over the > weekend. > Your pal, -doc- > > >I tried again, even from my pages. > >I do believe it's the local server that's gotta do the job. > >Anyway, I'm bookmarking all the links. > >And downloading all the pages. > >Will go ftp here in a minute. > > > >Love Always, > > > >Carol Anne > >more in about an hour. > > >

1 0

Chain letter bounced (fwd)
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- A small advisory: since na166182(a)anon.penet.fi is subscribed to the c'punks list, and anon.penet.fi attempts to filter out instances of Make Money Fast, any mention of "MAKE.MONEY.FAST" on the list will likely generate an autoreply like the one below. It appears that a copy of the MAKE.MONEY.FAST FAQ (there, I've said it again :) included in the autoreply will even trigger this mechanism, which is awfully ironic at best. At worst, this self-referential property seems liable to allow some nasty email feedback loops. Offhand it appears that a message with an address @anon.penet.fi (preferably forged) in the From: line, and "MAKE.MONEY.FAST" as the message body, would launch an automatic recursive bounce process as anon.penet.fi attempts to send itself a message it considers illegal. Presumably this would crash when the disk quota on some mail spool somewhere is exceeded. If the message was forged to come From: cypherpunks(a)toad.com or another list to which an anon.penet.fi user is subscribed, I imagine the list would have the dubious privilege of witnessing all the recursive bounce messages along the way. I'm not volunteering to try to write a better MMF-recognizer for a.p.f, though.... Forwarded message: > From daemon(a)anon.penet.fi Fri Jan 6 04:22:39 1995 > To: lmccarth(a)ducie.cs.umass.edu > Subject: Chain letter bounced > > You, lmccarth(a)ducie.cs.umass.edu, have sent a message that seems to contain yet another > copy of the infamous Make Money Fast chain letter. > > If you want to make a complaint, please send just the headers of the > message to admin(a)anon.penet.fi - albeit as the messages have been blocked > (as you can see), the message probably *didn't* go through anon.penet.fi > but was faked (using NNTP faking or something similar). > [...] > To: cypherpunks(a)toad.com > From: "L. McCarthy" <lmccarth(a)ducie.cs.umass.edu> [...] > Posting letters asking for $$$ is of course a risky venture on Usenet. We > see the PRZ Appeal as a Worthy Cause (tm), but that's just what all the > MAKE.MONEY.FAST posters think of their garbage too. If you go sticking out [...] -L. Futplex McCarthy - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLw0WJGf7YYibNzjpAQEfxAQAiA70W8v7saU4TU+0yJL4XC44uhV50Q34 rX5T1A1ADbPgKeIEX/nImyRP2h6T+V2GdYBWPMJjlVYV1Nyqpxb2kHToocQCbtjd ILyNYew0zHfpZAPeYYM4Y35ru1LoQeg9+COo9RElkS3daMB2gtUjmY2EtfPF6h4V tDei1OHtdl0= =vxjA - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLw0XKioZzwIn1bdtAQE2egF/Z5Tjg/dzt8cc/lkFXA/LMd17nNNGYv8N 7E7qlnWAhdz82+cILCVHmfVpHNIfdTUH =xtDg -----END PGP SIGNATURE-----

2 1

Re: C'punks Economist Fan Club
by frissell＠panix.com 17 Dec '03

17 Dec '03

>It's witty, politically >aware, relatively technically savvy. The articles exhibit a healthy (IMHO) >cynicism about what happens and why, yet maintain some idealism about what >should happen. It's not perfect, but it's difficult to imagine surpassing it. The Economist is fully informed and funny. What domestic news magazine would include the following in one of *their* leads (editorials): Circa 1987 "It is unlikely that Gorbachev has included an invasion of Western Europe in his next Five Year Plan but his generals *have* made their preparations. Lucky Britain is in the *Polish* Army's Zone of Occupation." DCF -- Have you registered a domain today. My template worked first time and I have since registered nine domain names. Send for a free copy.

2 1