December 2003 - cypherpunks-legacy

[NOISE] Re: Basically F-C-ed
by Alex de Joode 18 Dec '03

18 Dec '03

I wrote earlier: [..] : : Orlando, Fla., August 20 (AP) -- Two explosives were : : planted in a professor's suitcase to test airport : : security measures in Amsterdam, The Netherlands, and were : : discovered when he arrived in Orlando, officials said : : Saturday. : [..] : : Kensel said such security measures were normal for : : Europe. : : "Particularly in Europe, there are grave concerns about : : security issues," he said. "As a result, they do conduct : : various security programs regularly. This was part of a : : routine check of their own security systems. : : "The bag got away from them basically," he said. : Airport police was very quick to point out that such practices : were legal, now when they do that ...... The Dutch Department of Justice stated that there was no legal basis for such practises, Airport Police are forbidden to use 'innocent travelers' as decoy. -- Alex de Joode Fear Uncertainty Confusion and Kaos, Inc.

1 0

NEXT CHALLENGE: plan of action?
by fc＠all.net 18 Dec '03

18 Dec '03

I would like to offer all.net as a repository for the sources and executables for all platforms. We can put them in the gopher server for all to access. -- -> See: Info-Sec Heaven at URL http://all.net Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236

1 0

Re: Netscape security
by Damien.Doligez＠inria.fr 18 Dec '03

18 Dec '03

>From: altitude(a)cic.net (Alex Tang) >It seems that one of the problems with Damien's >cracking job was that it was "not sanctioned". Actually, INRIA's PR people are quite pleased with the publicity. They asked me to prepare an official press release to counteract the Wall Street Journal's "evil hacker" story, which was unfortunately reprinted by some papers. The Herald Tribune is particularly bad in this respect. If some media insist on this "evil hacker" thing, they will look more ridiculous than anything else (I hope). The press release will be out as soon as it gets through the red tape (the official opinion of a French administration is not something to be taken lightly, even though it's mostly facts :-) I'll put it on my web page when it's official (which is likely to be too late). -- Damien

2 1

Netly's Walter Miller talks crypto with President Clinton
by Declan McCullagh 18 Dec '03

18 Dec '03

************* Date: Wed, 30 Jul 1997 13:04:35 -0400 To: fight-censorship-announce(a)vorlon.mit.edu From: Declan McCullagh <declan(a)well.com> Subject: FC: Netly's Walter Miller talks crypto with President Clinton X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ ReSent-Date: Wed, 30 Jul 1997 13:12:16 -0400 (EDT) Walter Miller is Netly's roving, raving, and notoriously misspelling columnist. He's recently been keeping on top of cyber-rights issues. Not long ago, Walter Miller had brunch with the Supreme Court justices, and told them the dos and don'ts of web site design. "I also made sure to sugest that the US Supreme Court get a password- protected Intranet too -- to post stuff like cafateria specials, snow days, even forums where they coud flame eachother. Or maybe secretly play network Diablo on laptops right there on the bench during boring testimony": http://pathfinder.com/netly/editorial/0,1012,1125,00.html Then he took on the University of Memphis, which tried to wipe out a student's "Old People" site. "Sections on the site include Geezer News, (mostly newswire acounts of elderly motoring mishaps), and a humor page the likes of this: Q: What's 1,000 feet long and smells like urine? A: The conga line at Century Village": http://pathfinder.com/netly/editorial/0,1012,1196,00.html Now Walter Miller writes about encryption, and his Granfather's long history of crypto-talk with President Clinton (who apparently goes by the alias BUBBA1)... -Declan *********** http://pathfinder.com/netly/editorial/0,1012,1227,00.html The Netly News Network Walter Miller (http://pathfinder.com/netly/wmiller/) Trailer Trash on the Infobahn for the week starting July 30, 1997 An Encrypted Freindship by Walter Miller (thenetlynews(a)pathfinder.com) My Granfather isnt just a crankey old S.O.B. he's also a longtime F.O.B., or 'Freind Of Bill'; No, not Bill Gates--the slightley less inportant one: Bill Clinton. (The othor Bill probly HAS no freinds...Sorry, that was mean spirrited of me, and inspired out of jealousy--but atleast i can ADMIT it.) But Gramps and Bill Clinton realy ARE freinds. They met during the '72 Presidential race. Clinton was 26 and George McGovorn's Texas campaign chair. Granfather was a low-ranking precinct leador. The two were tossin back coldies one night after a rubber chicken event at a motel out onthe I-10. Eyeing 2 bellbottomed chicks at the bar, Bill winked at Gramps; he winked back, scribbling with a pen on a napkin: "YOU TAKE THE YOUNG CUTIE. ILL TAKE THE OL' UGLY ONE". Both men nodded. Unable to read Grampy's scrawl, the gals never cought on. Thus began a 25-year freindship based on encryption which contineus to this day. Well, neithor man got lucky that night, and McGovern lost Texas in a 49-state landslide. (Granfather, a conservotive Democrat, ended up votting for Nixon). But encryption has come along way since. And so has the mop-topped boy from Hope. Not only did Granps let him keep his favvorite ballpoint pen, they both kept in touch. Last week they were in toutch allot. It was about the new Encryption bill that just passed Congress. Granps suported it while the President was agianst it. They hotly discussed it by e-mail for a few days, till this mesage arrived: Return-Path: whitehouse.gov Received: from (ENCRYPTED) Message-ID: (ENCRYPTED) X-Mailer: (ENCRYPTED) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Trans-Encod: 7bit : From: "Bubba1" To: "Granpy" Subject: (ENCRYPTED) Date: Sun, 27 Jul 97 09:36:55 -0400 : Dear Sir: POTUS suggests e-mail is not the best forum for this discussion. Please meet POTUS tonite, 8PM, EDT in (ENCRYPTED) Chat. The regular place. : On behalf of POTUS, Your pal, : "VPOTUS" : P.S. Don't worry, POTUS tells me it won't take so long as to cut into the X-Files, which my (ENCRYPTED) sources tell me is a repeat anyway. : =-=-=-=-=-=-=-=-=-=-=-= This is my sig. tHIs iS mY SIg ON dRUGs =-=-=-=-=-=-=-=-=-=-=-= Of cuorse, "POTUS" is President of the United States and 'VPOTUS' is Mr. Gore. (Just like most big inportant exetcutives in the private sector, there's always some low-level lacky handling the adminostrative end of his E-mail.) Later that evening, their convorsation contineud, but this time in chat: Granpy: YOU OUT THERE, BUBBA? Bubba1: Right here, Gramps. Sweet4U: Who else is out there? Prowler: I'm here. Whos there? Granpy: I TELL YUH, BUBBA I AIN'T GLOATING, BUT I'M GLAD ABOUT THET THAR NEW ENCRYPTION BILL. Bubba1: Well, Gramps, I did have reason to oppose it. Prowler: Hey Granpy--ALL CAPS are for SHOUTING ONLY Granpy: I AM SHOUTING Sweet4U: Bubba, age, M/F? Bubba1: Um...uh, well, Shucks... Prowler: Prowler here. (((BURP!))) Who's out there? Needless to say, this chat thread, like most, soon descended into the ininteligible drivol of a dozen voices saying nothing to no one in particulor. So Gramps and the Presidant took it private. Bubba1: Geez, that garbled chatroom drivel sounded like my last cabinet meeting. Granpy: NO WONDER REAGAN USED TO FALL ASLEEP IN HIS, HUH? Bubba1: LOL! Who needs encryption when you've got IRC chat! Granpy: LEVITY ASIDE MR. PREZ, BUT WHO NEEDS ENCRYPTION WHEN THE GOVORMINT HAS THE SOFTWARE KEYS? Bubba1: Oooh. That was cold, Granps. Yes, Granfather had hit a nerve with that one. The gist of the encryption bill was to allow US companies to export encryption technollogy. Right now America's ass is getting kicked in the world market cause we're not allowed to sell encyprtion software while foriegn competittors are alredy doing it. Mr. Clinton had opposed the bill, but would of alowed it only if the US Govorment--yes, the US Goverment was given access to the software keys to be able to crack the codes. Granpy: WHY DON'T WE ALL JUST SURRENDER OUR NET PASSWORDS, HUH? HOW 'BOUT OUR BANK ATM PASSWORDS, AND CREDIT CARD PINS? Bubba1: Come on, Gramps. I had the FBI and the DEA on my side on this, not to mention members of both parties. What about international spies? What about drug kingpins? They use encrypted technology. Uh, ecxuse me Mr. President, but spies and druglords also use the telephone and the U.S. Mail. And when you need to put badguys under survellance, you simply get a court ordor, and you do it. I have to agree with Granfather on this. And I cant help but think that mabye a little of the high-profile hand- wringing abbout encryptoin exports might be just some old fashionned low-tech fear of computers. And besides. Nothin personal, but I use my conputer for private corespondence. My browsing logs, purchasing habbits and credit card numbers are here too, and I dont want them falling into the wrong hands. Or, perhaps, falling onto the desk of some fat guy in the White House basement in charge of 'security' who no one remmemmbers hiring. Granfather relayed my concerns to the Prez. Bubba1: Is that what your grandson said? I feel his pain. Granpy: HE'LL BE FEELIN MINE ON HIS SKINNY ASS IF HE DONT GIT ME A BEER, LIKE I DONE ASKED HIM TO. Bubba1: LOL! In any case, their disagreement on this one isseu hasnt hurt Granfather's and Clinton's freindship any. Funny thing is, theyve relied on encryption to maintain it in secrecy. (A close freindship with Granfather is bound to be a politicol liability, if you think abbout it). And somhow I think the president is better at 'encryption' than he thinks--Ive ben readin in the papers about Whitewater for 5 years now: The president seems unscaithed, and I still dont know what the hell is going on. Bubba1: Do you think my loss on the encryption bill will hurt my approval rating? Granpy: YOU KIDDING? WHAT'RE YOU AT, 68 PERCENT? HELL, TWO MORE POINTS, YOU KIN START DATING AGINN, BOY. Bubba1: ROTFL! Seriously--you think this chatroom is secure? Granpy: YUP. UNLESS NEWT OR AL ARE HACKIN' IN. Bubba1: Those guys? Everything Al knows about computers he learned from his kids. And Newt still goes to Newsgroups for news. Granpy: YEH, THE NEWS IN BINARIES, I'D BETCHA. Bubba1: LOL! Hey, BTW, speaking of 'non-family fare' I accidentally erased that gross .wav file from last week. Can you send it again? Granpy: SEND IT? GIMME A MINUTE AND I'LL BE ABLE TO MAKE IT AGINN FOR YOU, LIVE. Bubba1: HAH! I'll leave you Newt's private phonemail; you can leave it for him there. Granpy: SO, BUBBA--D'YOU STILL LIKE ENCRYPTION? Bubba1: Know what, Grampy? I like privacy better. Handing over encryption keys to the government sucks. Granpy: HERE IT COMES...NOW, BUBBA, NOW Bubba1: OH! Hold that, er "thought" another second, I'll give you Newt's secret number...typing...Got a pencil? area code (202) (ENCRYPTED)... ...And this is where the convorsation seemed to end. Or at least, it was the last I got of it that wasnt garboled. ### ------------------------- Declan McCullagh Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/ -------------------------------------------------------------------------- This list is public. To join fight-censorship-announce, send "subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. More information is at http://www.eff.org/~declan/fc/

1 0

Re: Third World Man
by tcmay＠got.net 18 Dec '03

18 Dec '03

At 9:41 PM 8/21/95, Adam Shostack wrote: > Strong cryptography is needed for a secure information >infrastructure. If American companies aren't allowed to build secure >infrastrucure, then parts of the infrastrucure will move overseas, as >insurance, liability, and deployment costs rise for a badly secured >network. > > This issue will not cause the USA to become a third world >nation, but it will contribute to large institutions moving their data >processing out. Tim, you've talked a lot about how companies will >move data centers out of the US to avoid 'expensive' laws; do you see >the ITARs as being in a different catagory, than say, the laws on >reporting a bankruptcy? Sure, they will move some parts of their operations to other jurisdictions. They already are, for various reasons. Most large U.S. companies are of course "multinationals." I didn't cite examples, and won't now. (But you can imagine a few of the many successful U.S. companies: Sun, Intel, Microsoft, SGI, Qualcomm, Altera, Merck, and on and on.) I am not saying that things are as they should be. And I am not a U.S. chauvinist. I really don't care which countries do well, so long as my investments continue to do well. My point was that hyperbole about the U.S. being on the verge of becoming a Third World nation is wrong. As Sternlight might put it, "arrant nonsense." --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Quantum Computers for the 12th Time
by tcmay＠got.net 18 Dec '03

18 Dec '03

At 7:00 PM 8/21/95, J. Kent Hastings wrote: >Doesn't quantum coherence require molecular precision if it >is to work on 1024 bit PGP keys? If it works, such keys can >be instantly factorized. It would be nice to follow that progress. > >If human engineered molecular nano works, we'll have much >more than PGP to worry about. Copies of copies of >replicating disassemblers could rip the Earth apart in three >days, assuming doubling every 20 minutes like bacteria, >but not limited to proteins. > >That would have a big impact on digital cash networks! I urge all those interested in quantum computers to consult the CP archives. Also, my FAQ has a couple of pages on it. Grep for the main topic, or for Shor. This comes up every 3-4 months and produces the same speculations. I think nanotech and quantum computers have even less to do with real concerns than Waco and Foster do. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Re: Certificates/Anonymity/Policy/True Names
by Carl Ellison 18 Dec '03

18 Dec '03

>Date: Fri, 18 Aug 1995 14:47:55 -0400 (EDT) >From: Michael Froomkin <mfroomki(a)umiami.ir.miami.edu> >You have decided to allow the private CAs to issue certificates of varying >degrees of corroberation so long as the degree of verification used is >deducible from the certificate. E.g. a certificate might say "we check >the passport"; or "we check driver's license" or "we took blood, hair, >fingprint, retinal scan and first-born child". It might even say "we >checked nothing". You have also decided that a CA may issue a certificate >in the name of a pseudonym, so long as the CA retains information about >the True Name. Now the issue arises as to whether one should allow the CA >to issue certificates to pseudonyms where it has *no record* of the real >identity of the person proffering the key pair. > >Is there any reason why a person would want such a certificate? I see several reasons, but I don't see a reason for a CA in this case. The key being signed can serve in place of the CA's key. That is, the key can be self-signed. All that needs to be proved in this case is that someone owns the private key which goes with the public key. As for what good that key is -- Prior to our meeting in person this year, all you knew about me was by my postings. If I had signed all of them with the same self-signed key, then you would know that all of those postings came from one "person" (the set of people, presumably only one person, with access to the private key). The postings define the person, in your mind, and you are absolutely certain that they came from that person (defined as I did above). You don't need any further certification to attest to that fact. No economic impact, you say? My postings could have been S/W. You could have tried my S/W and liked it -- hiring me to do work for you privately. In all this process, we need never meet. If we don't meet, it doesn't matter what my blood type is or if I have a driver's license or a passport. I could even be a small, silver-skinned alien who is perpetually in hiding. No money transfer, you say? Wells Fargo bank (an innovator) could initiate public-key bank accounts. I would open the account by sending them a self-signed public key. They would use that key as my bank account number. Anyone would be allowed to deposit money into that account (e.g., using CyberCash transfers). Only I, the person holding the private key, would be permitted to transfer funds out. Again, in the Internet, nobody knows you're a dog-faced alien sea creature. - Carl

3 4

KNOCK KNOCK
by MCE 18 Dec '03

18 Dec '03

I apologize for intruding on your mailbox. No need to respond to a remove list, this is the only email you will receive from me unless I hear from you. I thought that you might just like to take a look at this VERY REAL opportunity. If you have no interest in MAKING A LOT OF MONEY WITH YOUR COMPUTER! Stop now! I only want to provide this special offer to people who know theres no such thing as get rich quick! But people who are looking for a legitimate honest way to make good money starting today, in exchange for some actual work! If thats who you are, PLEASE READ ON! AS PART OF MCE MARKETINGS 5.5 MILLION EMAIL ADDRESS PROMOTIONAL GIVEAWAY, I AM GOING TO GIVE YOU 25,000 , FRESH, NEW, AND RESPONSIVE EMAIL ADDRESSS UNIQUE TO MY INVOLVEMENT IN THE FOLLOWING PROGRAM AND THE TOOLS TO DELIVER THIS PROGRAM AS SOON AS I HEAR FROM YOU!!!!!!!!!!!!!!!!!!! FREE!!!!!!!!!!!!!!!!!!!!!!!!!!!THATS RIGHT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!FREE!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! THIS IS AN EXCLUSIVE OFFER FROM MCE MARKETING ONLY. THIS INDEPENDENT PROMOTION IS NOT A PART OF, OR AN ADDITION TO, THE CONTENTS OF THE FOLLOWING ORIGINAL PROGRAM. FOR DETAILS ON HOW TO RECEIVE YOUR EMAIL ADDRESSS AND INSTRUCTIONS PLEASE READ THROUGH THE FOLLOWING PROGRAM AND THEN RE-READ THE ATTACHED ENDING SECTION TITLED "MCE MARKETINGS 5.5 MILLION EMAIL ADDRESS PROMOTIONAL GIVEAWAY!!!!!!" THE FOLLOWING IS THE PROGRAM INFORMATION JUST AS I RECEIVED IT, IT HAS CHANGED MY LIFE, IT IS ALSO WHAT YOU NEED TO SEND OUT -JUST AS IT IS!!!!!! IT WORKS!!!!!! DONT CHANGE ANYTHING BELOW THIS LINE!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> The following income opportunity is one that you may be interested in taking a REAL CLOSE LOOK at. It can be started with MINIMAL outlay and the income is TREMENDOUS! REALISTICALLY! YOU are about to make AT LEAST $50,000- in less than 90 days. PRINT and READ the enclosed program... THEN READ IT AGAIN!... THEN READ IT AGAIN! The enclosed information is something that I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave it some thought and study. TESTIMONIALS: My name is Christopher Erickson. Two years ago, the corporation that I worked at for 12 years down-sized and my position was eliminated. After unproductive job interviews, I decided to start my own business. Over the past year, I incurred many unforeseen financial problems. I owed family, friends and creditors over $35,000. The economy was taking its toll on my business and I just couldnt seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. I truly believed that it was wrong for me in debt like this. AT THAT MOMENT something significant happened in my life and I am writing to share my experience in hopes it will change your life Financially Forever!!!!!!:). I had been sending away for information on various business opportunities on the Internet. All of the programs I received, in my opinion were not cost effective or simply too complicated for me to understand and required too much risk for me to see if they would work out. One claimed to make me 1 million bucks in the first year.... it failed to mention that I would have to write best selling book to get there! In December 1995 I received this program via e-mail. I didnt send for it, or ask for it. They just got my name off of a mailing list somewhere. THANK GOD FOR THAT!!! After reading it several times to make sure I was reading it correctly I couldnt believe my eyes. Here was a MONEY MAKING PHENOMENON!!! I could invest as much as " wanted to, without going further into debt. I got out my calculator and figured out that I would at the very LEAST make my money back!!!!!! After confirming that the letter was NOT A CHAIN LETTER I decided WHY NOT GO FOR IT!!!!!!! I initially sent out 10,000 emails, it cost me about $15.00 for my online time and with e-mail I avoided the cost of printing and stamps!!! Only the cost of fulfilling my orders. Im telling you like it is! I hope it doesnt turn you off, but I promised my self that I would not RIP OFF anyone no matter the cost! In less than one week I started to receive orders for Report #1. By January 13th, I had received 26 orders for Report #1. When you read the GUARANTEE in the program you will see that "YOU MUST RECEIVE 15 to 25 ORDERS FOR REPORT #1 WITHIN 2 WEEKS", IF YOU DONT, THEN SEND OUT MORE PROGRAMS UNTIL YOU DO. My first step in making $50,000 was done. By January 30th, I had received 136 orders for Report#2. If you go back to the GUARANTEE , "YOU MUST RECEIVE 100 OR MORE ORDERS FOR REPORT #2 WITHIN 2 WEEKS. IF NOT SEND OUT MORE PROGRAMS UNTIL YOU DO! ONCE YOU HAVE 100 ORDERS FOR REPORT #2 RELAX, THE REST IS EASY, YOU WILL MAKE YOUR $50,000 GOAL. We had 196 orders for report #2, 96 more than my goal, so I sat back and relaxed. By March 19th 1997, of my 10,000 mailing I had received $58,000 with more coming in every day. I paid off all my debts and bought myself a much needed new car. Please take the time to read the following program, It will change your LIFE too. Remember, It wont work, if you dont try it! This program does work but you must follow it EXACTLY!, Especially the rules regarding not putting your name in a different place on the Reports List. It doesnt work and youll lose out in a lot of money! Report #2 explains this. Always follow the guarantee, 15 to 20 orders for Report #1, and 100 or more for Report #2 and you will make over $50,000 or more in 20 to 90 days, I AM LIVING PROOF THAT IT WORKS!!! Sincerely, Christopher Erickson PS. Do you have any Idea what 11,700 $5.00 bills ($58,000) looks like piled up on the kitchen table! Its AWESOME!!!!!!! "THREW IT AWAY" "I had received this program before. I threw it away, but later wondered if I should have tried it out. Of course I had no idea who to contact for a copy, so I waited for another email copy of it. 11 months passed, then it came. I didnt throw this one away. I made $41,000 on the first try." Dawn W. Evansville, IN - - - - - - - - - - - - - - - - - - - - - - - - - - "NO FREE LUNCH" "My late father always told me, Remember Alan, there is no such thing as a free lunch in life. You get out of life what you put into it. Through trial and error and a somewhat slow and frustrating start, I finally figured it out! IF YOU WORK THIS PROGRAM THIS PROGRAM WILL WORK FOR YOU!!!!!! Once I found the right TARGET list the program worked great! I made over $68,000 using this program. I know my father would be proud of me. Alan B., Philadelphia, Pa. - - - - - - - - - - - - - - - - - - - - - - - - - A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM By the time you have read the enclosed information and looked over the enclosed program and reports, you should have concluded that such a program and one that is legal, could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for 10 years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it was not working. Finally I figured it out. It wasnt me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I dont have to tell you what happened to the unemployment rate... many of you have first hand experience. There were more bankruptcies and business failure than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who didnt, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes "THE RICH GET RICHER AND THE POOR GET POORER". The traditional ways of making money will never allow you to "move up" or "get rich", inflation will see to that. You have just received information that can give you the financial for the rest of your life, with "NO RISK" and "A LITTLE BIT OF EFFORT". You can make more money in the next few months than you have ever imagined. I should also point out that I will not see a penny of your money, nor will anyone else who has provided a testimonial for this program. I have already made over 4 MILLION DOLLARS!!!!! I have Retired form the program after sending out 16,000 programs. I have several offices that market this and other programs here in the US and overseas. By the spring we hope to market the Internet by a partnership with America Online. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now! Remember to email this program to everyone that you can think of. One of the people you email it to might send it out to 50,000 or more! And your name will be on all of them! Remember, the more you send out the more potential customers you will reach!!! So my friend I have given you ideas, information, materials and opportunity to become financially independent. ITS ALL UP TO YOU NOW!!!!!!!!!!!! - - - - - - - - - - - - - - - - - - - - - - - - "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you figure it you will make a lot of money.! Definetly get back what you invest. Any doubts you may have will vanish when your first orders come rolling in. "IT WORKS"!!!! !!!! !!!! Paul Johnson, Raleigh, NC. - - - - - - - - - - - - - - - - - - - - - - - "HERE IS HOW THIS AMAZING PROGRAM WILL MAKE YOU MONEY $$$$$$$$" Lets say that you want to start small, just see how it goes, and well assume that you and all involved send out 2,000 programs each, (extremely conservative) Lets assume that the mailing receives a LOW response of .5%. A good list will make the response much better! Many people will send out hundreds of thousands of programs instead of 2,000. But continuing with the example, you send out 2,000 programs. With a .5% response, thats only 10 orders for REPORT#1. Those 10 people send out 2,000 each, for a total of 20,000, out of those .5% respond. 100 people order Report #2. Those 100 mail out 2,000, for a total of 200,000. The .5% response for that is 1,000 orders for Report # 3. Those 1,000 send out 2,000 for a total of 2,000,000. The .5% response to that is 10,000 orders for Report#4. Thats 10,000 $5 dollar bills to you. CASH!!!!!! Your total Income from this program run is $50 +$500+$5000+$50,000 for a grand total of a totally amazing $55,550.00.!!!!!!!!!!! REMEMBER FRIEND, THIS IS ASSUMING 1,990 OUT OF 2,000 PEOPLE YOU MAIL TO WILL DO ABSOLUTELY NOTHING.... AND TRASH THIS PROGRAM. DARE TO THINK WHAT MIGHT HAPPEN IF EVEN HALF OF THE DOWNLINE DISTRIBUTORS EMAILED 100,000. THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY!!! It does not require that you come in contact with people, do any hard work, and best of all, youll never have to leave the house except to get the mail. If you believe that one day you are going to get that BIG BREAK, Well HERE IT IS!!!!!!. Simply follow the instructions and your financial dreams will come true. This Multi level Marketing email order program works perfectly 100% of the time. Email is the sales tool of the future. Take advantage of this non- commercialized advertising medium of advertising NOW!!! The longer you wait the more people will be doing business using email, Get in on a piece of the action!!!!!!!! MULTI- LEVEL- MARKETING (MLM) has finally gained respectability, It is now taught in the Harvard Business School, and both Stanford Research and The Wall Street Journal have stated that between 50% and 65% of all goods sold will be through MLM by the late 1990s This is a Multi Billion Dollar industry and of the 500,000 millionaires in the US, 20% made their fortune in the last several years in MLM. Moreover, statistics show that 45 people a day become millionaires every day through MLM. - - - - - - - - - - - - - - - - - - - - - - - GETTING STARTED This is the greatest Mult-level Mail Order Marketing anywhere: Step(1) Order all 4 Reports listed by name and number. Do this by ordering the Report from each of the four (4) names listed below. For each Report you will need to send $5 US dollars CASH and a self addressed stamped envelope (BUSINESS SIZE #10)to the person listed for the SPECIFIC REPORT. International orders: should include an extra $1 US dollar for postage. IT IS ESSENTIAL- That you specify the full NAME and NUMBER of the REPORT requested to the person you are ordering from. You will need ALL 4 REPORTS because you will be REPRINTING and RESELLING them. DO NOT alter the names or sequence other than what the instruction say. IMPORTANT: ALWAYS provide "SAME DAY" service on all return orders. REQUIRED REPORTS *** Order each REPORT by NUMBER and NAME*** ALWAYS SEND A SELF ADDRESSED STAMPED ENVELOPE AND $5 DOLLARS cash FOR EACH ORDER REQUESTING THE SPECIFIC REPORT BY NAME AND NUMBER ====================================================== REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 SEND $5.00 CASH AND A SELF ADDRESSED ENVELOPE TO: MCE Marketing P.O. BOX 0647 Folsom , Ca. 95763-0647 ====================================================== REPORT#2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT#2 SEND $5.00 CASH AND SEND SELF ADDRESSED ENVELOPE TO: E. E. KAMPER 10501NW 66TH ST PARKLAND, FL 33076 ====================================================== REPORT#3 "SOURCES OF THE BEST EMAILING LISTS" ORDER REPORT#3 SEND $5.00 CASH AND A SELF ADDRESSED STAMPED ENVELOPE TO: R.M. MILLS 5030 CHAMPION BLVD. SUITE #6-441 BOCA RATON, FL 33496 v ====================================================== REPORT#4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT#4 SEND $5.00 CASH AND A SELF ADDRESSED STAMPED ENVELOPE TO: E.H. HARP 10693 WILES RD. SUITE 303 CORAL SPRINGS, FL 33076 ====================================================== VERY IMPORTANT !!!!!!!!!!!!!!!!!!!!! INSTRUCTIONS WHICH MUST BE FOLLOWED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! DO THE FOLLOWING NUMBERED STEPS ONLY AFTER RECEIVING ALL (4) REPORTS FROM THE ABOVE LISTED DISTRIBUTORS. STEP (2) Replace the name and address under REPORT#1 with yours, moving the name and address that was there DOWN to REPORT#2. Drop the previous name and address under REPORT #2 to REPORT#3 Drop the previous name and address under REPORT #3 to REPORT#4 The name and address that was in the REPORT#4 position is now removed from the list and discarded, this party is no doubt on the way to the bank! WHEN YOU ARE DOING THIS MAKE SURE YOU TAKE SPECIAL CARE IN TYPING ALL NAMES AND ADDRESSES CORRECTLY. DONT MIX UP THE PROCEDURE/REPORT POSITIONS. STEP(3) Having made the required changes to this document save it as a text (*.TXT) file in its own directory to be used with whatever email program you use. REPORT #3 will tell you the best bulk emailing methods and how to acquire email lists. STEP (4) Email a copy of the entire program (all of this is very important) to everyones address that you can get your hands on. If you like start with friends and relatives since you can encourage them to take advantage of this fabulous money-making program. READ the FOUR REPORTS for where to get email lists. Search the Internet for the best prices. IMPORTANT: YOU WONT GET A GOOD RESPONSE WITH AN OLD EMAIL LIST. SO, ALWAYS REQUEST A FRESH NEW LIST!!! ALWAYS PROVIDE "SAME DAY" SERVICE ON ALL ORDERS!!!!!!! - - - - - - - - - - - - - - - - - - - - - - - - - - CONCLUSION: I am enjoying the future that I made by sending out this program, You too will be making money in 20 to 90 days, if you follow the simple steps outlined in this program. To be financially independent to be FREE! Free to make financial decisions as never before. Go into business, get into investments retire or take a vacation. No longer will the lack of money hold you back. However, very few people reach financial independence, because when opportunity knocks, they choose to ignore it. Its much easier to say "NO" than "YES", and this is the question that you must answer. Will YOU ignore this amazing opportunity or will you take full advantage of it? If you do nothing you have indeed missed something and nothing will change. Please re-read this material this is a special opportunity. If you have any questions regarding this program, please feel free to write the sender of this information. You will get a prompt and informative reply. My method is simple. I sell thousands of people a product for $5.00 that cost me pennies to produce and email. I should also point out that this program is legal and everyone who participates WILL make money. This is not a chain letter or pyramid scam. You may have received chain letters in the past asking you to send money , on faith, but getting nothing in return, NO product whatsoever! Not only are chain letters illegal but the risk of someone breaking the chain makes them quite unattractive. You are offering a legitimate product to your down line distributors. After they purchase from you they reproduce it and sell it to others. Its simply free enterprise at its best! As you have learned from the enclosed material, the PRODUCT is a series of 4 FINANCIAL AND BUSINESS REPORTS. The information contained in these reports will not only help you in making your participation in this program more rewarding, but will be useful to you in any other business decisions that you make in the years ahead. You are also buying the rights to reprint all of the REPORTS, which will be ordered from you by those whom you mail this program. The concise one and two page REPORTS you will be buying are easily reproduced at a local copier center for an average cost of 3 cents a copy. Best wishes with the program and good luck! - - - - - - - - - - - - - - - - - - - - - - - - - - - "IT WAS TRULY AMAZING" Not being the gambling type. It took me several weeks to make up my mind to participate in this program. But Conservative as I am, I decided that initial investment was so little that there was no way that I could NOT get enough orders to get my small investment back. BOY, was I ever surprised when I found my medium sized post office box crammed with orders. I will make more money this year than I have in the past 10 years of my life, before I started this program. Mary Riceland, Lansing. MI - - - - - - - - - - - - - - - - - - - - - - - - TIPS FOR SUCCESS Send for your 4 REPORTS immediately so you will have them when the order start rolling in. When you receive your $5 dollar order you MUST send out the Product/service in order to comply with US Postal and Lottery Laws. Title 18 Sections 1302 and 1341 specifically state that: "A PRODUCT OR SERVICE MUST BE EXCHANGED FOR MONEY RECEIVED". - - - - - - - - - - - - - - - - - - - - - - - - WHILE YOU WAIT FOR YOUR REPORTS TO ARRIVE: 1. Name your company, File for a fictitious business license at your county clerks office (+/- $15.00) if you dont use your name as the companies name. 2. Get a post office box (preferred). 3. Edit the names and addresss on the program. You must remember that your name or your business name and address goes next to REPORT#1. And all the others move DOWN 1, with the fourth being drooped off the list all together. 4. OBTAIN AS MANY EMAIL ADDRESS AS YOU CAN GET YOUR HANDS ON, Read REPORT #3 for information on mailing list companies. 5. Decide on the Number of PROGRAMS you need to send out to meet your financial goal. The more you send and the quicker you send them, the more money you will make. 6. After mailing the programs get ready to fill the orders. 7. Copy the 4 REPORTS so that you can send them out AS SOON as you receive an order. IMPORTANT: ALWAYS PROVIDE SAME DAY SERVICE ON THE ORDERS YOU RECEIVE.! 8. Make certain all letters and reports are neat and legible. - - - - - - - - - - - - - - - - - - - - - - - - - YOUR GUARANTEE The check point that GUARANTEES your success is simply this: you must receive 15 to 20 orders for report #1. This is a must. If you dont with in 2 weeks email out more programs. Then a couple of weeks later you should receive 100 or more orders for report #2. (Take a deep breath) you can now sit back and relax , Because YOU ARE GOING TO MAKE AT LEAST $50,000!!!!!!, Mathematically it is a proven guarantee. Of those who have participated in the program and reached the above GUARANTEES-ALL have reached their $50,000 goal. Also, remember, every time that your name is moved down the list you are in front of a different REPORT. You can keep track of your status in the program by which REPORT people are ordering from you. ITS THAT EASY!!!REALLY, IT IS!!!!!!!!!! REMEMBER: "HE WHO DARES NOTHING, NEED NOT HOPE FOR ANYTHING." "INVEST A LITTLE TIME, ENERGY , MONEY NOW OR SEARCH FOR IT THE REST OF YOUR LIFE" - - - - - - - - - - - - - - - - - - - - - - - - - end of program <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> DO NOT INCLUDE THE FOLLOWING INFORMATION IN THE REPLICATION OF THIS PROGRAM!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - "MCE MARKETING" PROUDLY PRESENTS-> MCE MARKETINGS 5.5 MILLION EMAIL ADDRESS PROMOTIONAL GIVEAWAY!! As a immediate DOWNLINE DISTRIBUTOR, MCE MARKETING will provide you with 25,000 freshly compiled and targeted email addresss and step by step instructions on how implement your distribution. Including Instructions on Pegasus Email download/ installation and operation. (YOUR ADDRESSs ARE FORMATTED AS PEGASUS EMAIL DISTRIBUTION LISTS.) You will receive all the information in easy to read and follow instructions on how to participate in this exciting promotion. This is an exclusive offer to the first 220 immediate DOWNLINE DISTRIBUTORS who purchase REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES from MCE MARKETING, for this program offer only.!!!!!!!!!!!!!!!!!! THATS A 5.5 MILLION EMAIL ADDRESS PROMOTIONAL GIVE AWAY!!!!!!!!!!!!!!!! DONT MISS OUT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! THIS OFFER IS GOOD ONLY AS LONG AS SUPPLIES LAST. MCE WILL NOT SEND OUT DUPLICATE ADDRESS LISTS AND THIS LIST IS NOT FOR SALE, AS THIS WOULD DEFEAT THE PURPOSE OF THIS UNIQUE MLM PROMOTION.

1 0

Newsweek on PGPfone
by John Young 18 Dec '03

18 Dec '03

Newsweek, August 28, 1995, p. 10. Encryption: Pretty Good Phone Privacy [Photo] 'This is what I do': Cryptomaster Zimmermann In the wake of reports that the Clinton Administration is considering another Clipper-like scheme to ensure government access to encrypted conversations and e-mail, Phil Zimmermann is striking again. The 41-year-old author of the notorious PGP (Pretty Good Privacy) software program that scrambles e-mail so snoops can't read it is about to release a sequel: PGPfone, which allows people to use their computers as secure telephones. If you have a recent Macintosh (a Windows verson comes next month) and a fast modem, you and a friend can speak in total privacy. As with its predecessor, Zimmermann is giving the software away, via MIT's Internet sites. Meanwhile, he's still waiting to hear whether the Feds will indict him for export violations in the distribution of PGP. Does Zimmermann worry that releasing PGPfone -- which can theoretically frustrate law- enforcement wiretaps -- will further inflame those who wish him arrested? "I'm a cryptographer, " he says. "This is what I do." [End]

1 0

No Subject
by Bryce Wilcox 18 Dec '03

18 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Here is an article that I just posted to alt.security.pgp and sci.crypt. Having had a couple of hours to calm down, it seems a little frenetic, but there is enough truth in it that I will now repost it to cypherpunks. Context: Someone was asking how he could go about verifying the identity of an anonymous interlocutor, so that he could sign his public key. - -----BEGIN PGP SIGNED MESSAGE----- Look, I don't have a lot of time here, but I need to say that this whole "certifying anonymous keys" idea is misled. The fact is, *I* *don't* *care* what your True Name is. I can only think of two reasons why you would need a person's True Name, and I doubt that anybody here can apply either of these reasons to anyone else here. Reason Number Uno, why you might want a person's True Name: Because you want to physically hurt them, or effectively threaten to hurt them. (Or send someone else to do it, like a hit man, policeman, etc.) Reason Number Dos, why you might want a person's True Name: Because you want to have sex with them. (Or as above, if you prefer to do it through proxies...) Okay now does anyone want to do any of the above two things to me? If not then *don't* *worry* about whether my public key is signed by anyone or not. It makes zero difference to you until such a time as one of the above motivations acquires. Zimmermann et al. were/are naive to emphasize the Web of Trust as a means of introducing strangers. With very few exceptions, strangers don't *need* to verify each other's physical identities! This fact is central to some of the more interesting social evolutions that information technology promises to cause. In retrospect, the emphasis in "pgpdoc1.txt" on verifying True Names via mutually trusted introducers will seem quaint. Bryce Announcement: I have had technical difficulties. If you sent me e-mail between Aug 5 and Aug 20 and didn't receive a response, please re-send. signatures follow: + public key on keyservers /. island Life in a chaos sea or via finger 0x617c6db9 / bryce.wilcox(a)colorado.edu ---* - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed with Bryce's Auto-PGP v1.0beta iQCVAwUBMDkLf/WZSllhfG25AQFhxwP6AzS0nus2QK8UEF5rvyqhFrwpzeAEE/Vr BwRXJtstk5ln2f3SRh7BSYfda/TQDJe2VRt0qMF1xNCt1VLP+QCyr06LqZ0i/qv0 /CpC85/QRAgpQtrgyFKR6v3Ryi3MbeiUQuEOSgU+OelvZ5XcoRP3o5WDp18N4+Pv 5ddGzIVXQEk= =5rxb - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed with Bryce's Auto-PGP v1.0beta iQCVAwUBMDk3AfWZSllhfG25AQGQCgQAld0FFtRVZgDKZ1ofok4pK9zAAqlJHCiO A+eLsSolfIvvfpTiE0viJUOuXIywnWzBT50js4LodwsQI4cKSVfnHdYNI4aoyQJf G2P7dy7BaryOj8C74U2gYYq8Lys6Mh/i640KEa77EV4ZEDpLhSi25R+LB58qjvwJ l705Z8I/Bhs= =+xrs -----END PGP SIGNATURE-----

1 0

Partial Key Escrow
by Ted_Anderson＠transarc.com 18 Dec '03

18 Dec '03

The recent discussion of the SSL Challenge and the revival of the Software Key Escrow issue brought the following idea to mind. For the purposes of this suggestion let's just assume that the goal is to provide some kind of Government Access to Keys (GAK) for a widely deployed crypto system such as clipper phones. How about if instead of escrowing the whole key with the goverment/escrow agent you only save some of the bits of the key? I am thinking that the goverment would insist that at a minimum all key bits in excess of some N be escrowed. Where N is aournd 48. So if I was using IDEA with 128-bit keys, I'd need to escrow at least 80 bits and reveal all 128 bits only to the receiver. The export version of RC4 is similar except that 40 bits are hidden and 88 bits are "escrowed" as plaintext. I see the advantage of this is that it might just be palatable to the government. In particular, 48 bits wouldn't be any significant burden on the NSA or FBI for legally authorized wiretaps (I recall that something like 1000 were performed in some recent year). It would be a simple matter for the FBI to budget enough hardware to do brute force attacks on a few thousand keys a year with a time-to-crack of a few hours (I doubt most wiretaps are obtained with more time urgency than this). The big advantage to the user is that this provides are well defined limit on the effort required to violate their privacy. The biggest problem with the clipper-type GAK system is that everyone assumes that in the worst case keys could be obtained illegally with essentially zero cost. There are numerous scenarios where the administrative controls that protect keys break down and the public is left with no privacy at all. In this case, however, there is a significant, well-known, and quantitative (but, unfortunately, time-variable) cost in obtaining a key even if the adminstrative controls are completely compromised. While this doesn't make the privacy of any particular target much safer it seems it would significantly improve the safety of the public privacy in aggregate. Ted Anderson

3 2

Re: Entrust Technologies's Solo - free download
by Dave Hayes 18 Dec '03

18 Dec '03

Sandy Harris writes: > Cypherpunks & Freedom Knights. Both should be very happy to > see strong encryption becoming more widely available. Yes, we are. > >as long they continue to employ the child-molesting > >pedophile Chris R. Lewis - the biggest forger on Usenet. > What this scum is actually upset about is Chris Lewis cancelling > spam. He calls that "forgery" because the spammer's name goes > in the sender field of the cancel message. Nonsense. According to RFC 1036 forging cancels for articles that do not originate from your news site is not allowed. He is clearly in violation of the RFCs. Spam jihads are not sufficient reason to ignore internet protocols. > Dimitri, the "forgeries" are going to continue until someone comes > up with a better way of dealing with spam. There -is- a better way. It's called the delete key. Few seem to want to use it, which fits with humanity's general lack of personal responsibility. > The crap about pedophilia is also, of course, nonsense. It seems > to be a favorite slur lately with several grossly misguided people > who think calling people they dislike pedophiles is a way to > "defend freedom of speech". You have a better way to demonstrate free speech? ------ Dave Hayes - Altadena CA, USA - dave(a)jetcafe.org Freedom Knight of Usenet - http://www.jetcafe.org/~dave/usenet If trees could scream, would we be so cavalier about cutting them down? We might, if they screamed all the time, for no good reason.

3 2

Crack some code...
by Frank Knobbe 18 Dec '03

18 Dec '03

Howdy folks. Who would be willing to try to crack a code that I implemented in one of my programs? The file is a simple index file containing ASCII characters besides pointers. If someone is interested in cracking that agorithm, simply send me a mail. I'm curious of how good that algorithm is... Greetings from Tennessee, Frank ----------------------------------------------------------------------------- Frank Knobbe: FKnobbe(a)ix.netcom.com (preferred), Frank(a)TechEx.com PGP 1024/26639025 fingerprint=7A EA FF 87 BF EA 00 CD 83 B1 89 81 7E D2 69 96 http://www.techex.com/~frank/home.html (<- Under Construction!) IPhone: Elwood(a)iphone.vocaltec.com, Ch: Tennessee ----------------------------------------------------------------------------- Signature Space for Rent! Imagine your signature here. For more info contact: Don(a)twr.ite.us

1 0

Eric Hughes?
by sw＠tiac.net 18 Dec '03

18 Dec '03

Eric Hughes, if you're listening, please send me a note so I can update my address file. I don't receive cypherpunks right now. --Steve Witham <sw(a)tiac.net> :o)-: -

1 0

DES & RC4-48 Challenges
by hallam＠w3.org 18 Dec '03

18 Dec '03

Hello all, Lets face it the real challenge is DES, but those 56 bits are quite a bit harder than 40. 65536 times harder in fact. But if people broke 48 bits then maybe they might start to see 56 as being in reach. After all everyone wants to be in for the biggie. So before the NSA fobs us off with 48 bits can we crack it? Wind up the 40 bit code a tad and set to work. It sounds as if it is comparable to the RSA-129 prime that was cracked (OK its probably a touch harder but machines are faster now). So who wants to make an RC-48 and a DES challenge? Phill.

1 0

Re: Yet another self-labeling system
by Kurt Starsinic 18 Dec '03

18 Dec '03

I'm in favor of a ratings system; not one which indicates for whom a given page is suitable, but rather one which identifies the subject matter. The Dewey Decimal System is a primitive example of such a system. It seems to me that, if the USG is in the business of encouraging or endorsing morally normative ratings systems (which, of course, they've done for years), they're discouraging free discourse regarding child-rearing. It's important that parents can protect their children from content which _they_ believe to be inappropriate, but providing boilerplate (such as "adult"/"non-adult") turns parents into sheeple. I could write a book, but I think I've made my point. Peace, *---- Kurt Starsinic (kstar(a)isinet.com) ------ Senior Programmer/Analyst ---* | Institute for Scientific Information (215) 386-0100 x1108 | | "It seems every politician in the country wants to enact a minute for | | school prayer these days. I'd be happy if somebody could just | | legislate a minute of science in school." -- Dennis Miller | *------------------------ http://www.isinet.com ------------------------*

4 3

Re: signing keys for nyms
by Bill Stewart 18 Dec '03

18 Dec '03

At 07:46 PM 8/21/95 -0600, Bryce Wilcox wrote: >Look, I don't have a lot of time here, but I need to say that this whole >"certifying anonymous keys" idea is misled. The fact is, *I* *don't* *care* >what your True Name is. > >I can only think of two reasons why you would need a person's True Name, >and I doubt that anybody here can apply either of these reasons to anyone >else here. > >Reason Number Uno, why you might want a person's True Name: > >Because you want to physically hurt them, or effectively threaten to hurt >them. (Or send someone else to do it, like a hit man, policeman, etc.) > >Reason Number Dos, why you might want a person's True Name: >Because you want to have sex with them. (Or as above, if you prefer to do it >through proxies...) > >Zimmermann et al. were/are naive to emphasize the Web of Trust as a means of >introducing strangers. With very few exceptions, strangers don't *need* >to verify each other's physical identities! This fact is central to some of >the more interesting social evolutions that information technology promises >to cause. In retrospect, the emphasis in "pgpdoc1.txt" on verifying True >Names via mutually trusted introducers will seem quaint. Reason number 0 why you'd want someone's True Nym - Because you've met them in person, or are a friend of a friend, and want to make sure that the key you think is for Mr. X isn't really the key for an imposter - if you've done Lefty Politics over the last few decades, this is not unrealistic. COINTELPRO may have been unreal and UnAmerican, but it happened. Now, trusting people based on mutually trusted introducers may have seemed quaint back in the 60s, and it certainly wasn't foolproof, and planting the suspicion that someone _might_ be a cop was almost as destructive as if they actually _were_ a cop. But it's what there was. (Ok, you had some extra sources of information, like whether the person actually paid all their organization dues (COP!) or smoked dope with you (and inhaled) or started advocating unreasonable violence (probable cop)...) That doesn't mean you checked government-issue ID from people or necessarily even used True Names; you could be dealing with people in person who you only knew as "Bill from Delaware" or "Bear" or "Jeanie from the Sierra Club", but at least if you only trust keys from introducers who know people in person, you're limiting your electronic conspiracy to people you would have conspired with in person as well. (Now, _I_ never bought drugs from Bear, and at this point I don't even remember his True Name - but I didn't turn him in, either...) #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #--- "The fat man rocks out Hinges fall off Heaven's door "Come on in," says Bill" Wavy Gravy's haiku for Jerry

1 0

Divide and Conquer
by monty.harder＠famend.com 18 Dec '03

18 Dec '03

O > As you may have surmised Hal has given us another challenge to satisfy O > the people who want to do a challenge to see *how fast* they can do it O > by involving as many people and their computers as possible. Here's a thought or twelve: Precompute the divsion-of-keyspace problem, in advance of the actual issue of challenge. Use whatever criteria of estimating spare mips (idle_percentage * mips_rate) and allocating slices, then issue each participant a [start..end] space (and a direction flag. More on this later). That way, when the challenge is issued, there is no fumbling about, but rather a simple: "Gentlemen, start your programs." Divide the participants into two roughly equal groups of total spare mips, so as to address reliability and trust issues. Then allocate the entire keyspace twice. Later... For more fun, if the cracker can be coded to read a direction flag from the config file, so that the main loop can go ++ or --, the lists of keyspace could alternate thusly: Red Team Blue Team 0000++ 0000++ --iiii --jjjj This method of allocating keyspace iiii++ jjjj++ puts the key in the space of 4 --kkkk --mmmm different people at once, but only kkkk++ mmmm++ increases average search time by a . . . factor of 2 to protect against holes. / --0000 --0000 since the direction flag is independent of / \ (FFFF--) (FFFF--) team, it reveals nothing to a Bad Guy. / Two ways of saying the same thing. In effect, the ranges computed by the allocator are paired up, and the two people who share the range play "meet in the middle". If there are n participants in the group, and b of them are Bad Guys, the probablity of failure would be roughly (b/n)**4. * On a clear disk you can seek forever --- * Monster(a)FAmend.Com *

1 0

Re: Third World Man
by Peter Trei 18 Dec '03

18 Dec '03

> The US is slipping into the second world as we > speak, with no signs of a turnaround ahead. Only the sheer size of > the economy keeps people from believing it. Just a nomenclature peeve - I'm not sure of the precise time and place the (first|second|third) world meme originated, but it seems to predate 1970, and until very recently it's meaning was clear: First world: Western (and Westernized) nations - mainly the US, Canada, Western Europe, Japan, Australia, & New Zealand Second world: Communist bloc (I can still remember the Cultural Revolution. Prior to that, the Communists seemed a monolithic force, marching in lockstep.) Third world: The rest, mostly poor nations. Back then, the world was a simpler place. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

3 2

Re: DES & RC4-48 Challenges
by dan＠milliways.org 18 Dec '03

18 Dec '03

On Mon, 21 Aug 95 23:13:06 -0400 you wrote: > >Hello all, > > Lets face it the real challenge is DES, but those 56 bits are quite a >bit harder than 40. 65536 times harder in fact. > >40 bit code a tad and set to work. It sounds as if it is comparable to the >RSA-129 prime that was cracked (OK its probably a touch harder but machines are >faster now). > > So who wants to make an RC-48 and a DES challenge? Not having my copy of The Differential Cryptanalysis of the Data Encryption Standard handy, I'd like to know about the distributability of this type of DES attack. Done right, we could significantly reduce the time complexity. The main problem, of course, would be coordinating such an effort. I seem to recall this attack requiring lots of known plaintexts. Time to review the text, I suppose.... Does the Federal Reserve still use single-key DES? Dan ****************************************************************************** "I think, therefore I am" - Descartes Dan Bailey "I don't think, therefore I'm a moustache." - Sartre dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ******************************************************************************

3 2

Re: Entrust Technologies's Solo - free download
by Dave Hayes 18 Dec '03

18 Dec '03

Martin Pool writes: > Dave Hayes wrote: > > Sandy Harris writes: > > > What this scum is actually upset about is Chris Lewis cancelling > > > spam. He calls that "forgery" because the spammer's name goes > > > in the sender field of the cancel message. Nonsense. > > According to RFC 1036 forging cancels for articles that do not > > originate from your news site is not allowed. He is clearly in > > violation of the RFCs. Spam jihads are not sufficient reason > > to ignore internet protocols. > Spamming is a crime (theft of computer resources) I don't know that I can agree with that and still be for freedom. By that standard, so is posting or mailing "non spam" articles containing a topic that the owner of a recipient machine is not interested in. The magnitude of the theft is not relavent. > and sometimes such acts may be justifiable self-defense, such as > when I steal from my employer because they don't pay me enough, or > when I lie on my income tax forms because I want to keep my money > for myself. My point of focus is freedom. Deleting others' messages is not justifiable for -any- reason, IMO. If you have a problem with what is sent, you should take it up with the source of the transmission. The carriers of that transmission cannot care about the content and still profess to be "free" in any way. ------ Dave Hayes - Altadena CA, USA - dave(a)jetcafe.org Freedom Knight of Usenet - http://www.jetcafe.org/~dave/usenet A person was frighteningly ugly. Once he was asked how could he go on living with such a terrible face. "Why should I be unhappy?", answered the man. "I never see my own face; let others worry."

2 1

Don't copy that floppy! Copyright bill roundup (7/30/97)
by Declan McCullagh 18 Dec '03

18 Dec '03

If you give your dad a "free" copy of Microsoft Word, you'll be guilty of a Federal felony, at least under some of the bills that have recently been introduced in Congress. I'm still reading through them, but here's what I've gleaned... Much of the debate will center around the so-called "LaMacchia Exemption," which basically means that non-profit copyright infringing is not a crime. It is, however, already a civil offense -- as the SPA is always eager to demonstrate. I wrote about this recently: http://cgi.pathfinder.com/netly/opinion/0,1042,1107,00.html HR2265: Introduced by Rep. Bob Goodlatte on July 25, the "No Electronic Theft Act" would eliminate the LaMacchia Exemption. If you give pirated software to a friend (exchanging "anything of value" including "other copyright works"), beware. For the first offense, assuming the software is worth at least $5,000, you get three years in the Federal pen. If you make more than ten total pirated copies, you get six years: http://thomas.loc.gov/cgi-bin/query/z?c105:H.R.2265: HR2180: Internet services generally would not be liable for their customers' copyright infringements, under this bill introduced on July 17 by Rep. Coble and Rep. Henry Hyde. Called the "On-Line Copyright Liability Limitation Act," it's what ISPs have been demanding for years. Watch major copyright owners like Microsoft frown at this one. Nobody in the Senate has introduced companion legislation yet; the Judiciary Committee had a hearing on ISP liability scheduled for yesterday but it was cancelled due to Justice Brennan's death. http://thomas.loc.gov/cgi-bin/query/z?c105:H.R.2180: HR2281: Arguably the most controversial of the copyright bills introduced so far, this legislation that was introduced yesterday would enact the World Intellectual Property Organization copyright treaty the U.S. signed last December. Problem is, it may go far beyond what the treaty requires. The bill bans "technology" (including both hardware and software) that has few uses other than "circumventing a technological protection measure." It could impact encryption. "Circumvention" is defined as "to descramble a scrambled work, to decrypt an encrypted work." (What does this mean for cryptanalysts?) It also restricts removing "copyright management information" that includes titles, author's name, and copyright notice. Violators would be subject to civil penalties or criminal prosecution. If you "circumvent" protection or remove copyright info "for purposes of private financial gain," you'll face up to a $1,000,000 fine and 10 years in Federal prison. That's serious stuff. And it raises some interesting questions: what if I include a Reuters article in a newsletter I sell, and delete the copyright notice? Am I a Federal felon? Do I have a million dollars? Hmm... "They have criminalized conduct that is legal under the current copyright act," says Adam Eisgrau of the American Library Association. "They have created a new crime that is completely divorced from copyright infringement." Eisgrau says this bill isn't required by the WIPO treaty, which only mandates that countries punish *actions* that infringe, not *devices* that do. This legislation has hefty backing: Rep. Henry Hyde (full committee chair), Rep. Howard Cobel (subcommittee chair), and Rep. Barney Frank (ranking Democrat on the subcommittee). Sen. Patrick Leahy, who likely will endorse this approach, said yesterday that he was studying similar legislation. The SPA, naturally, is also supporting this bill. I've attached their press release below. The text of HR2281 isn't online yet -Declan --- SPA press release WIPO Treaty Implementation Bill Introduced in House Copyright Protections for Software Greatly Enhanced (Washington, D.C. -- July 30, 1997) Rep. Howard Coble (R-N.C.), chairman of the House Judiciary Subcommittee on Courts and Intellectual Property, introduced late yesterday the WIPO Copyright and Performances and Phonograms Treaty Implementation Act (H.R. 2281). The bill will make necessary amendments to U.S. law to enable the Senate to ratify new international intellectual property treaties negotiated last year in Geneva. The legislation is largely based on a Clinton administration proposal delivered by Commerce Secretary William Daley. SPA was a leading participant in the diplomatic conference last December that drafted the WIPO copyright treaty, and considers copyright protection for the Internet to be a major priority. "SPA supports the objectives of H.R. 2281 and, while further analysis must be done, believes that the Clinton administration and Rep. Coble have achieved a workable balance," said Ken Wasch, SPA president. "H.R. 2281 represents significant accommodations to guard against inadvertent liability for multi-purpose computers, software and other concerns. We hope Congress understands that further concessions would undermine the measures needed to make gains in the war against software piracy." "We commend Secretary Daley and his senior advisers for their perseverance in forging the administration's legislative proposal, Rep. Coble and his staff for their determined effort to introduce the measure and the bill's co-sponsors, Reps. Henry Hyde (R-Il.), Barney Frank (D-Mass.) and John Conyers (D-Mich.). In putting this bill before Congress, they have reached an important milestone in establishing the legal framework needed to protect electronic commerce in computer software." H.R. 2281 would also prohibit knowingly provide false copyright management information with intent to induce or conceal software piracy and other copyright infringement, and make technical changes to bring U.S. law into accord with the WIPO treaties. Circumvention of technological copyright protection measures for purposes of software piracy is a serious problem. Today, copyright law cannot be used to stop all kinds of unauthorized circumvention, nor can the making and selling of technology designed specifically to do so. These access and copy control technologies, such as scrambling, encryption and electronic locks, supplement legal protection in fighting software piracy but do not solve the problem. In fact, new problems are emerging on a consistent basis. For example, last May Chico-based SciTech Software, Inc. received ransom demands for $25,000 from an on-line extortionist who threatened to publicize on the Internet the instructions for disabling technology that controls the 21-day evaluation period for its graphics utility program, "Display Doctor." "The scary thing is not that our protection could be circumvented. Dedicated pirates always find a way," said Kendall Bennett, SciTech engineering director. What's scary is that they can get the information on how to circumvent into the hands of millions of casual users who would normally license our software." The immediate threat to SciTech has passed, but the blackmailer is still at large. Other SPA members have received ransom demands for as much as $1 million. That problem would be addressed by the new WIPO Copyright Treaty, which requires the U.S. and other countries to make sure that software companies have effective remedies against circumvention of technical protection for copyrighted works. SPA has spent months building consensus among industry and government on how to do so, and Rep. Coble's bill has put the issues before Congress. SPA is the principal trade association for the computer software industry, representing the leading publishers as well as start-up firms in the business, home office, consumer entertainment and educational markets. SPA supports companies that develop and publish software applications and tools for use on the desktop, client-server networks and the Internet. SPA's 1,200 member companies account for 85 percent of U.S. revenue for packaged and online software. Contact: Mark Traphagen, Vice President for Intellectual Property and Trade Policy, SPA, (202) 452-1600, ext. 322. Steve Bowers, Media Relations Specialist, SPA, (202) 452-1600, ext. 365. ### www.spa.org ------------------------- Declan McCullagh Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/

1 0

Re: your mail
by Will French 18 Dec '03

18 Dec '03

> Thanks again, and I hope you go ahead and start PGP-clearsigning your posts > so that my high opinion of you can become more firmly fixed. > :-) > Regards, > Bryce If I don't PGP-sign my message, you can't prove I sent it. But if you don't put your name and e-mail address at the bottom of your message, I don't even know who you are! (Your message was hit by the "three screens of Apparently-To: headers" bug, and the From: line says "owner-cypherpunks(a)toad.com". The Subject: line also got lost.) Let's get the basics straight first, okay? This has been part of netiquette since before there was a net! Will French <wfrench(a)interport.net>

1 0

Re: Third World Man
by tcmay＠got.net 18 Dec '03

18 Dec '03

At 3:46 AM 8/22/95, Jon Lasser wrote: >On Mon, 21 Aug 1995, Peter Trei wrote: > >> > The US is slipping into the second world as we >> > speak, with no signs of a turnaround ahead. Only the sheer size of >> > the economy keeps people from believing it. >> >> Just a nomenclature peeve - I'm not sure of the precise time and >> place the (first|second|third) world meme originated, but it seems to >> predate 1970, and until very recently it's meaning was clear: >> >> First world: Western (and Westernized) nations - mainly the US, Canada, >>Western Europe, >> Japan, Australia, & New Zealand >> >> Second world: Communist bloc (I can still remember the Cultural >> Revolution. Prior to that, the Communists seemed a monolithic force, >> marching in lockstep.) >> >> Third world: The rest, mostly poor nations. > >Erm, nope. The "First World" (or old world) was Europe and Asia; the "New >World" (not frequently referrred to as the second world, but hey...) The >third world was the developing nations. THAT (as far as I was taught in >history class, so it MIGHT be a lie...) was how the terms originated... Then you should sue your history teacher for giving you a defective education :-}. Perhaps she or he was of my generation and was at Woodstock when she should've been doing her homework. By convention, the First World is the set of "Western" nations, the democratic, capitalist nations. The Second World, though not often used as a term, is the set of Communist bloc nations. The Third World, by far the most commonly used term here, is the set of nations not formally affiliated with either the First or Second Worlds. These nations are often poor, though not necessarily poor, and so the "Third World" is often (incorrectly) associated with poverty. And, to confuse things further, the "lesser-developed countries," or LDCs, are often equated to the Third World. When a certain character in a television show referred to "Third World mutants," he was also referring to "your basic brown types." (His words, not mine. Ten credits to anyone who can identify the t.v. show and the character.) The term "Fourth World" has in the last 20 years come to refer to the countries which are so impoverished as to be almost hopeless. Bangla Desh is the canonical Fourth World nation. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Netly News Fan Mail
by Mike Duvos 18 Dec '03

18 Dec '03

It appears that the CPAC/Sewer folks have read the recent Netly News article on their activities and were not pleased. This little blurb healines the "Sewer List" this morning. -----Begin Officer Paladino Rant----- July 29, 1997, I was told of an article that appeared on the Net. It appeared on a Netly News site. Of course, its good reading if you are a Boylover. Apparently the writer, like many reporters I have known, likes to keep the pot stirring with coin phrases like war, net.vigilantes and so on. To give the article credibility he interviewed CPAC, NAMBLA, ACLU. He also mention this writer but forgot to get a statement from me and 100's of other groups that feel that child porn, molesters and such have no place on the web. In the article he links to a few sites showing young boys but he forgot to link to the 1000's of sites showing young boys in the nude. Why is that I ask. Well to keep the pot stirring. He claims their is gay bashing going on, look on this site and others that link here and you'll find no gay bashing. You will see sites exposing young boys, as young as 4 years old, nude. I, for one, can't not justify nude pictures of 4yr old boys and girls. But the Boylovers insist this is their way of showing love. AND, of course, we always get back to the Freedom of Speech arguement. You know that gigantic excuse for expression. We still have Freedom of Speech in this counrty, while every other liberty is falling by the wayside. As I read the article, I could see the bias and I wonder why???? Maybe the reporter also has an agenda. If he writes another article on this subject, it would be interesting to see which Boylovers will be interviewed. Apparently he has never been to the Sewer or maybe he has? Freedom is a great thing and this is the greatest country in the world. I wonder how many soldiers that gave their lifes fighting for that freedom, had pictures of nude boys in their wallets, instead of their families. Think about that....................... -----End Officer Paladino Rant----- Will someone please buy this poor man a spell-checker? :) -- Mike Duvos $ PGP 2.6 Public Key available $ enoch(a)zipcon.com $ via Finger $ {Free Cypherpunk Political Prisoner Jim Bell}

1 0