December 2003 - cypherpunks-legacy

noise pollution, conspiracy theory, Perry's pet peeve
by Bryce Wilcox 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > You have become an impediment -- a lump of rock in the highway. You aren't > part of the solution -- you are part of the problem. I have to concur on this point. Posting conspiracy tracts to cypherpunks, or posting algorithm ideas to the conspiracy list, only serves to dilute the primary function of the list in question. J. Orlin Grabbe's actions in this respect are harmful (though of course I don't think they are malicious.) Bryce signatures follow: + /. island Life in a chaos sea / bryce.wilcox(a)colorado.edu ---* -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed with Bryce's Auto-PGP v1.0beta iQCVAwUBMCosBvWZSllhfG25AQFWlQQAocyn68Ehj6S2gGvPnhnMglrWdKFsw3s8 +eJWlMMVsXfV7NVAezoxVaia5Uw0kXCc0liQRmXz/T5jJQHI/ko2PxQQ7PI2TeRa RiEM327boHr87WrtJO+3jInqjGDgjKkiBXW07QNZjvZudlEdm05XLGtJeVSRmIFJ xKvbLVj5v5M= =B1KZ -----END PGP SIGNATURE-----

1 0

Re: Why DES in IPSEC ESP?
by Marc Horowitz 17 Dec '03

17 Dec '03

>> | Why was (single) DES chosen as the algorithm for the ESP part of IPSEC? Because people were going completely nuts about mandating something not easily specifiable at all. DES was an easier case to make than 3DES. >> So, in order to ship sooner rather than later, DES was chosen. >> 3DES will probably be available soon afterwards. Shipping is irrelevant. Perry is busily coding 3DES support into NetBSD. Once it's in the bsd network stack, it will spread everywhere. Presumably, someone will implement it outside the US as well. As Perry put it succinctly at a recent IETF meeting, people will not necessarily use what is mandated. They will use what is available. If 3DES is in the freely available reference implementation (which it will be), and it performs adequately, that is what will get used. Marc

1 0

where to get RFCs and internet drafts
by Perry E. Metzger 17 Dec '03

17 Dec '03

A couple of people have asked, so I'm posting... RFCs and internet drafts are both available for anonymous FTP from ds.internic.net. Phil Karn's photuris stuff is still in the early draft phase. Help speed up development by playing with it! .pm

1 0

questions/info on premail
by mhobbs＠rad.rpslmc.edu 17 Dec '03

17 Dec '03

To all. Is there anyone out there that has incorporated premail into another script? Like a mail script or cgi script. I'm trying to expand the idea of integrating anon-mailers into web pages for more ease of use. If anyone has directly linked premail to a page, please let me know. I am having some problems calling it from a script and I thought someone might have solved this problem already. I wrote to Raph about this, but as you might know, his page states that he got married on Aug 5, so I don't expect the speediest of replies :) Michael Hobbs dochobbs(a)wwa.com mhobbs(a)rad.rpslmc.edu p.s. As to the cpremailer page that I posted here last week; -I have removed the hardwired remailer and now allow simple of choosing of remailers. I also think I have the news instructions up to date. http://miso.wwa.com/~dochobbs/cpremailer.html

1 0

Conspiracies
by John Young 17 Dec '03

17 Dec '03

I respect the view that sound crypto requires skeptical review and testing outside closed rooms. Conspiracies live or die by the same process. Crypto would die if there was no belief in conspiracies. Conspiracy theory drives the cypherpunk agenda, I surmised from the welcoming statement. Note the caution about "S1," and any other crypto offering. Perry's sharp statements on the urgent need for crypto deployment are motivated, it seems to me, by a view of a believable, if not wholly proveable, threat that crypto is believed to counter. I choose to believe him; Orlin's got my skeptical interest -- put up or shut up -- and he's not out of line. But who knows more than what we read in the conspiracy- driven media and hear from our respected leaders? Take your pick of them, or believe your own home-grown, they're unavoidable, on cypherpunks or elsewhere -- they're the crippling religion of the ages. My mouth waters to hear the latest conspiracies about cypherpunks' evil spread of demon crypto.

1 0

Re: "S1" encryption system (was: this looked like it might be interesting)
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

>Jon writes: >> Two other possibilities: (1) It's merely an independently produced >> cryptosystem disguised as a "leak" to save its creator the trouble of >> asking experts to analyze it for him/her. >It strikes me as rather foolish to mail off anonymous copies to several >individual recipients (Matt, Perry, Tim, ...) in addition to the list, if >S1 is a real leak. Why aid the traffic analysts by firing off multiple >messages through the remailers ? A third possibility comes to mind, that person or persons associated with the list are using the post to focus on cryptographic efforts in lieu of political or apocalyptic diatribes.

1 0

Conspiracies and "Ciphergroupies"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:57 PM 8/10/95, John Young wrote: > I respect the view that sound crypto requires skeptical > review and testing outside closed rooms. Conspiracies live > or die by the same process. Crypto would die if there was > no belief in conspiracies. > > Conspiracy theory drives the cypherpunk agenda, I surmised > from the welcoming statement. Note the caution about "S1," > and any other crypto offering. I think a better, and less loaded, tern than "conspiracies" is "threat models." It has always been important to many of us that the policies and plans of potential threats be discussed, analyzed, etc. Thus, our recurring focus on the activities of the NSA, GCHQ, FinCEN, and so on. For example, all folks on this list should almost certainly read "The Puzzle Palace," even though it does not _directly_ help with the latest project in writing code. And like Orlin Grabbe, whose "End of Money" article I posted a pointer to last winter, I closely follow the recent developments involving the intelligence agencies, the plans to limit crypto, etc. (By the way, it was my close following of the NSA and related organizations, and my monitoring of what Dorothy Denning was saying, that led to my "A Trial Balloon to Ban Crypto?" article in this group and in sci.crypt three years ago. This warning, which generated much discussion on sci.crypt and here, prepared us for the Clipper announcement six months later.) Is this wasted time? Shouldn't I be using my time to write Trumpet Winsocks--whatever they are!--for WinCypherHyperPhone? Well, we all decide what our interests are, and exhortations by others that we are not working on what is "really" important are not very useful. There are probably a dozen different sorts of interests here, ranging from a bunch of folks interested in popularizing crypto to several law professors and lawyers interested in legal aspects to Internet programming experts. Even some pure mathematicians. Even some novices. > Perry's sharp statements on the urgent need for crypto > deployment are motivated, it seems to me, by a view of a > believable, if not wholly proveable, threat that crypto is > believed to counter. I choose to believe him; Orlin's got my > skeptical interest -- put up or shut up -- and he's not out > of line. Perry is Perry. He has certainly written his share of rants and "off-topic" posts, as have we all. Literally thousands of his posts over the past 3 years reside on my disk drives, and certainly until recently most of them were not about writing code. Ironically, just a few weeks ago, Perry was sharply criticizing me for my "Crisis Overload" post and was urging me to join him in a serious lobbying effort to undermine the Grassley bill. I declined, thinking it unlikely to succeed and preferring to concentrate on my other project (including a new release of SmalltalkAgents, just arrived). When I preferred to work on more technical things than launching a grassroots political campaign, he got abusive and insulting in e-mail and I told him I would no longer accept this sort of abuse. You may recall he chose to post this private message here in public, without of course the messages that preceeded this (and without my permission, needless to say). Again, Perry is Perry. People work on what interests them. It is nice for Perry, and maybe for all of us if his efforts work out, that he has thrown himself into this new programming project, but it is wrong for him to automatically dismiss the interests and efforts of others. There's also a certain "control freak" attitude that creeps into this list (and other lists, of course) at times, wherein people say that their current interest is vastly more important than anything else and that anyone who does not drop their frivolous other interests and begin work immediately on the One True Project are fools and knaves, and are probably secretly working for the NSA! (:-}). People should write about what interests them. Those who wish to program, should program. Those who wish to explore number theory, should explore number theory. And so on. Attempting to control what gets posted on this list is pointless. If you don't like a particular topic, or an author, use filters and kill files. This can be done in many ways, including mail programs, procmail, and even the "MailWeir" service that Harry Hawk offers. And many people dump the list traffic into local newsgroups, allowing threadified reading. Also, various digestified versions of the list exist--Eric Blossom has one. Insulting people as "ciphergroupies" because they are not working on one's current interest seems needlessly counterproductive. Just my views. If you don't like 'em, ignore them or filter them. That's the Cypherpunk way of doing things. --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

5 4

Re: PRZ encrypted voice software release imminent
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199508110254.TAA02204(a)netcom14.netcom.com>, vznuri(a)netcom.com ("Vladimir Z. Nuri") wrote: >as if PRZ is not already enough of a folk hero.... >BTW, he has been beat by Nautilus, right? Nautilus >is public domain, right? (I'm thinking of that public >domain voice encryption released a few mos ago). >I wonder if he is going to try to put a "spin" on this >one to differentiate it from the other one. on the >other hand, just having his name on it is plenty of >"spin"... I can't violate my NDA, but PGPFone will be a *major* revolution for communication security. I would not be surprised to see several hundred thousands of users. PGP will plale in comparison. - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCr8YioZzwIn1bdtAQH+qQF/bA4povjtixKhIxak+M7aCYmbdMjj9U3r azryqeapO4A2vYc4qEnP1zLmp83ceMUV =W9y9 -----END PGP SIGNATURE-----

8 8

More "S-1" foolishness
by Matt Blaze 17 Dec '03

17 Dec '03

Yesterday I mentioned that I'd noticed that "S-1" has a non-uniform distribution of F (Sbox?) outputs - some values appear far more often than others. This means that some values are more likely to be XORed against the cleartext than others. Needless to say, this is a very unusual (and presumably very bad) property - in DES, for example, the Sbox outputs are completely flat. I've been avoiding real work today, so here's a breakdown of the distribution of output values for F0-F3 by value and by bit position, as well as the total for all four. (The expected numbers are 16 for the outputs by value and 128 for the outputs by bit). If I get more time, I'll try to figure out how to do a structure a differential attack (which will be a little bit tricky given the G function). I'm not sure this is worth putting much effort into, however, given that the closer I look the more hoax-like this seems. Much as I'd like to think this is a version of Skipjack, it's getting pretty hard to suspend disbelief. I might be willing to believe, however, that this is some kind of proprietary industrial cipher; perhaps the poster added the "TOP SECRET" stuff to attract additional attention to it. All in all, this is a most unusual cipher. On the surface at least, it has many elements of a really bad design. On the other hand, some of the other ideas are novel enough that I wonder why its inventors wouldn't want to be associated with them. -matt ---F0 output distribution--- F0:0 = 18 (1.12) ****************** F0:1 = 10 (0.62) ********** F0:2 = 17 (1.06) ***************** F0:3 = 15 (0.94) *************** F0:4 = 13 (0.81) ************* F0:5 = 12 (0.75) ************ F0:6 = 18 (1.12) ****************** F0:7 = 14 (0.88) ************** F0:8 = 17 (1.06) ***************** F0:9 = 18 (1.12) ****************** F0:a = 14 (0.88) ************** F0:b = 17 (1.06) ***************** F0:c = 18 (1.12) ****************** F0:d = 12 (0.75) ************ F0:e = 19 (1.19) ******************* F0:f = 24 (1.50) ************************ ---by bit--- F0:1 = 122 (0.95) *************** F0:2 = 138 (1.08) ***************** F0:4 = 130 (1.02) **************** F0:8 = 139 (1.09) ***************** ---F1 output distribution--- F1:0 = 21 (1.31) ********************* F1:1 = 13 (0.81) ************* F1:2 = 15 (0.94) *************** F1:3 = 20 (1.25) ******************** F1:4 = 22 (1.38) ********************** F1:5 = 15 (0.94) *************** F1:6 = 8 (0.50) ******** F1:7 = 22 (1.38) ********************** F1:8 = 19 (1.19) ******************* F1:9 = 18 (1.12) ****************** F1:a = 15 (0.94) *************** F1:b = 13 (0.81) ************* F1:c = 10 (0.62) ********** F1:d = 12 (0.75) ************ F1:e = 9 (0.56) ********* F1:f = 24 (1.50) ************************ ---by bit--- F1:1 = 137 (1.07) ***************** F1:2 = 126 (0.98) *************** F1:4 = 122 (0.95) *************** F1:8 = 120 (0.94) *************** ---F2 output distribution--- F2:0 = 16 (1.00) **************** F2:1 = 13 (0.81) ************* F2:2 = 16 (1.00) **************** F2:3 = 13 (0.81) ************* F2:4 = 12 (0.75) ************ F2:5 = 17 (1.06) ***************** F2:6 = 16 (1.00) **************** F2:7 = 16 (1.00) **************** F2:8 = 14 (0.88) ************** F2:9 = 22 (1.38) ********************** F2:a = 27 (1.69) *************************** F2:b = 19 (1.19) ******************* F2:c = 14 (0.88) ************** F2:d = 16 (1.00) **************** F2:e = 11 (0.69) *********** F2:f = 14 (0.88) ************** ---by bit--- F2:1 = 130 (1.02) **************** F2:2 = 132 (1.03) **************** F2:4 = 116 (0.91) ************** F2:8 = 137 (1.07) ***************** ---F3 output distribution--- F3:0 = 23 (1.44) *********************** F3:1 = 20 (1.25) ******************** F3:2 = 11 (0.69) *********** F3:3 = 23 (1.44) *********************** F3:4 = 17 (1.06) ***************** F3:5 = 15 (0.94) *************** F3:6 = 13 (0.81) ************* F3:7 = 17 (1.06) ***************** F3:8 = 15 (0.94) *************** F3:9 = 11 (0.69) *********** F3:a = 9 (0.56) ********* F3:b = 19 (1.19) ******************* F3:c = 14 (0.88) ************** F3:d = 16 (1.00) **************** F3:e = 14 (0.88) ************** F3:f = 19 (1.19) ******************* ---by bit--- F3:1 = 140 (1.09) ***************** F3:2 = 125 (0.98) *************** F3:4 = 125 (0.98) *************** F3:8 = 117 (0.91) ************** ===overall sum=== ---F* output distribution--- F:0 = 78 (1.22) ******************* F:1 = 56 (0.88) ************** F:2 = 59 (0.92) ************** F:3 = 71 (1.11) ***************** F:4 = 64 (1.00) **************** F:5 = 59 (0.92) ************** F:6 = 55 (0.86) ************* F:7 = 69 (1.08) ***************** F:8 = 65 (1.02) **************** F:9 = 69 (1.08) ***************** F:a = 65 (1.02) **************** F:b = 68 (1.06) ***************** F:c = 56 (0.88) ************** F:d = 56 (0.88) ************** F:e = 53 (0.83) ************* F:f = 81 (1.27) ******************** ---by bit--- F:1 = 529 (1.03) **************** F:2 = 521 (1.02) **************** F:4 = 493 (0.96) *************** F:8 = 513 (1.00) ****************

2 1

Re: Nym Server Development....
by tcmay＠got.net 17 Dec '03

17 Dec '03

(I've removed these from this folllow-up: remailer-operators(a)c2.org, nyms(a)sephiroth.org, alt.privacy.anon-server(a)canaima.ME.berkeley.edu) At 2:04 AM 8/12/95, Bryan Strawser wrote: >John Fleming, along with a bit of support help from myself, is developing >a nym server that he is intending to release to the public once we are >satisfied with the performance and the state of the code. What is your working definition of "nym server"? >At this point and time, John has pushed the code to the point where we >have am experimental nym server operating that is being constantly >refined and features added. Along the same lines, I am presently >working on solid documentation for when the nymserver is ready for >public use, and for the later public release of the code. > >John created a mailing list for those interesting in contributing to the >development of his nymserver and as a forum for discussion of nymserver >related issues. So far, there have been few folks subscribed, and no >answer from those that are presently subscribed to the list. I find >this rather disappointing. Maye there's little interest because I can't find any threads that discuss just what a "nym server" is. I can make some guesses as to what _I_ might call a nym server, but there are some important issues (of who keeps the records, and why a nym server is better than just using unforgeable sigs, etc.) that need discussing. >that are running today. Just like the other types of anonymity out >there, a nymserver has many viable reasons for existance. The lack of >publically available code for such a server, as there is for remailers, >should motivate us to get behind John and his efforts. Why should we get behind an effort that has not been spelled out or discussed here? Maybe I'm missing the debate in the groups I deleted (see above), but I really don't know what it's about. >To subscribe to the nymserver development & discussion forum, send >a message to majordomo(a)sephiroth.org with the line "subscribe nyms ><your name>" in the body of the message. Questions about the >nymserver should be directed to that list so that all can be involved >in the development. Sorry, Bryan, but I don't typically join mailing lists so I can find out what the subject of a mailing list is! :-} Describe for us what you have in mind for "nym servers" and why they are important, then maybe more folks will get involved. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

2 1

DED_hed
by John Young 17 Dec '03

17 Dec '03

8-10-95. NYPaper Page-Oner: "Jerry Garcia of Grateful Dead, Icon of 60's Spirit, Dies at 53." By Jon Pareles, Music Critic. [With] "Sadness From the Streets to High Offices." By John Markoff. DED_hed

1 0

Re: "S1" encryption system (was: this looked like it might be interesting)
by corondan＠eng.eds.com 17 Dec '03

17 Dec '03

On Aug 10, 12:02pm, David G. Koontz wrote: > Subject: Re: "S1" encryption system (was: this looked like it might be int > >Jon writes: > >> Two other possibilities: (1) It's merely an independently produced > >> cryptosystem disguised as a "leak" to save its creator the trouble of > >> asking experts to analyze it for him/her. > > >It strikes me as rather foolish to mail off anonymous copies to several > >individual recipients (Matt, Perry, Tim, ...) in addition to the list, if > >S1 is a real leak. Why aid the traffic analysts by firing off multiple > >messages through the remailers ? > > A third possibility comes to mind, that person or persons associated with > the list are using the post to focus on cryptographic efforts in lieu of > political or apocalyptic diatribes. how about a fourth possibility: the government ___ agency did it. this was done to achieve two goals: 1) make cypherpunks easy to villify (look at all of the nasty crypto stuff being passed to foreign nationals) 2) a quick estimate of cypherpunks' ability to analyze an algorithm am i being too paranoid? probably, but you tell me :-). -- George A. Corondan Inet: corondan(a)eng.eds.com E.D.S. Mail Stop 4251 Voice: (810)265-2937 800 Tower Drive FAX: (810)265-3432 Troy, MI 48098-7019

2 1

Legislative One-Liners
by J. Kent Hastings 17 Dec '03

17 Dec '03

-- [ From: J. Kent Hastings * EMC.Ver #2.5.02 ] -- -----BEGIN PGP SIGNED MESSAGE----- DANGER: Legislature In Session! "One-Liners" List of 104th Congress privacy legislation. Latest update: 8/1/95. The overview compiled by the Electronic Privacy Information Center (EPIC), info(a)epic.org, http://www.epic.org is edited here into single line entries by J. Kent Hastings, zeus(a)pinsight.com, Assistant Director of the Agorist Institute, http://www.pinsight.com/~zeus/agorist/ The full text of pending bills, and other legislative materials is available from cpsr.org /cpsr/privacy/epic/104th_congress_bills/ - -- House Bills -- Taking Back Our Streets (HR 3). Limits sanctions for illegal searches. Personal Responsibility (HR 4). Databases of new hires and child support. Risk Assessment (HR 9). Government Information Locator Service (GILS). FBI Counterintelligence (HR 68). Easier access to credit reports by FBI. Electronic Anti-Stalking (HR 112). Electronic harassing a federal crime. Obscenity and Computers (HR 121). Network obscenity 10-year fed penalty. Quality Assurance in Drug Testing (HR 153). Requirements for drug testing. Individual Privacy Protection (HR 184). New national privacy commission. Interstate Child Support (HR 195). New hires database, IRS collection. Export Administration (HR 361). Studies software encryption overseas. Antitrust Reform (HR 411). Orders FCC privacy survey, limits CPNI. Postal Privacy (HR 434). Prohibits P.O. selling info to direct marketers. Fair Health Information Practices (HR 435). Health care privacy bill. Restricted Explosives Control (HR 488). Federal permits, even black powder. Social Security Anti-Fraud (HR 502). Telephone verification of applicants. Immigration Reform (HR 560). Tamperproof ID cards for immigrants. Consumer Reporting Reform (HR 561). Limits cost and use of credit reports. Enforce Employer Sanctions (HR 570). SS card w/fingerprint, barcode, photo. Exclusionary Rule Reform (HR 666). Violates 4th Amendment, except IRS/BATF. Criminal Alien Deportation (HR 668). Wiretaps OK for illegal immigration. Illegal Immigration Control (HR 756). Wiretaps, machine SSN I.D., databases. Child Support Responsibility (HR 785). Parents SSN birth/marriage documents. Paperwork Reduction (HR 830). Coordinates federal information policy. Comprehensive Antiterrorism (HR 896). "Terrorist organization" fund raising. Child Support Enforcement (HR 906). Allows access to all financial records. Communications Decency Act (HR 1004). Same as Exon bill in Senate (S 314). Illegal Immigration Control (HR 1018). Tamper proof Social Security cards. Welfare Transformation (HR 1157). Database of new employees, parent locator. American Health Security (HR 1200). Health records database for research. Food Stamp Simplification (HR 1214). Increases SSN use. Electronic benefits. Basic Health Care (HR 1234). Weak limits on medical information access. Sexual Crimes Against Children (HR 1240). New penalties, computer networks. DNA Identification (HR 1241). Revises funding authorized for Violent Crime. Family Stability (HR 1250). Database of employees, parents, more SSN use. Family Privacy Protection (HR 1271). Prohibits questionnaires of minors. Revise Aliens and Nationality laws (HR 1292). Employment verification card. Children's Media Protection (HR 1390). "V-Chip" TV filtering, ratings. Communications Act of 1995 (HR 1555). Privacy of customer info, except CDA. Antiterrorism Amendments (HR 1635). Eases wiretaps, credit report evidence. Quality Assurance in Drug Testing (HR 1706). Standards for drug testing. Comprehensive Antiterrorism (HR 1710). Eases wiretaps, credit evidence. Constitutional Rights Oversight (HR 1738). Creates inspector general review. Prevent Fraud in Health Care (HR 1758). Sharing of medical information. Health Information Modernization (HR 1766). Health Information Network. Counterterrorism Research (HR 1847). New DOJ surveillance and tracking. High Risk Drivers (HR 1866). SSN as common identifier for drivers liscenses. Health Care and Paperwork Reduction (HR 1912). Magnetic ID, SSN/health plan. Immigration in the National Interest (HR 1915). More wiretaps, bank records. Internet Freedom and Family Empowerment (HR 1978). On-line srvc screening. Parental Control Inappropriate Programming(-ed.) (HR 2030). Another V-Chip. -- Senate Bills -- Violent Crime Control (S 3). OK's illegal search, wiretaps by foreign govts. Family Health Insurance Protection (S 7). Democratic health care bill. Exclusionary Rule Limitation (S 54). OK's violations of 4th Amendment. Paperwork Reduction Act (S 244). Government Information Locator Svc (GILS). Immigrant Control (S 269). National registry for workplace verification. Private Long-Term Care (S 294). Creates "health information network". Communications Decency Act (S 314). Outlaws sexual and anonymous messages. High-risk Drivers Act (S 387). National system of driving records, uses SSN. Marking of Plastic Explosives (S 390). Wiretaps terror "material support." Interstate Child Support (S 456). Databank of new hires, SSA link. Illegal Immigration Control (S 580). Wiretaps immigration and smuggling. Child Custody Reform (S 632). Database of all child custody cases. Telecommunications Competition (S 652). Restricts indecent Internet speech. Taxpayer Browsing Protection (S 670). Stops unauthorized tax data viewing. Child Support (S 687). Support obligation database. SSNs related documents. Amend Fair Credit Reporting (S 709). Limits employment credit reports. Study of Internet Pornography (S 714). Replacement for Comm Decency (S.314). Comprehensive Terrorism (S 735). "Roving" wiretaps, Internet bomb info. Economic Opportunity (S 746). Expands National Parent Locator Service. Immigration Enforcement (S 754). Telephone verification for applicant SSNs. Illegal Immigration (S 759). Database non-immigrants' entrance/exit dates. Omnibus Counterterrorism (S 761). Pays for Digital Telephony and wiretaps. Interstate Child Support (S 828). Both parents' SSNs birth/marriage/driver. Real Welfare Reform (S 834). "Designated industries" support obligations. Work and Gainful Employment (S 840). Child support, new hire, SSN documents. Health Information Modernization (S 872). National health info network. Protection of Children (S 892). Criminalizes indecent computer data. Intelligence Authorization (S 922). Credit info, FBI "counterintelligence." Interstate Child Support (S 926). Database of W-4 forms and child support. Healthy Mothers, Healthy Children (S 933). Children's immunization database. Information Technology Management (S 946). Chief Information Officer of OMB. Anti-Electronic Racketeering (S 974). Bans encryption software distribution. National Information Infrastructure (S 982) Newly defined computer crimes. Illegal Immigration Control (S 999). Internal passport for all citizens. - --- End of Listing --- ANNOUNCING: The "MIND YOUR 0WN BUSINESS" audiotext program. 1 - 9 0 0 - C A N - M Y 0 B (1-900-226-6902) Notice the zero digit, not the letter "O." The Feds say you can't have privacy, but we say you CAN "Mind Your 0wn Business!" And now we have a 900 number to reveal new methods to defend your privacy from criminals and tyrants. Sponsored by The Agorist Institute. The cost of each call is just 99 cents per minute, average cost $2.97, average length 3 minutes (August 1995 only. Future messages will be longer.) You must be at least 18 to call or have parental permission. This is a much better deal than you'll get from most psychic or sex lines ;^) The line will be updated by the 1st of each month. By September 1, 1995, our message will be recorded by a professional audio producer, but for now, you get to hear me read the first script. Don't be surprised if we update it during August. Kent J. Kent Hastings, Assistant Director of The Agorist Institute zeus(a)pinsight.com -- http://www.pinsight.com/~zeus/agorist/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMCqAeDTxxI221vktAQEaTAQAitl0r9d6nii64lfdIszWvnePURR0ti9h JsL3pMk+CYwz3CweuVvCXXJKp3TX6P+hkL6kdjt2zJ6axQFAfRcLcl6BqpQcxI7p MnHQbkLFQgI/4t9nM3RxieX5/a4idYtEAZuZh+y3ca160ftxCFLUaP6kordg/KI2 YgvAqrljkOA= =SQWP -----END PGP SIGNATURE-----

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

will someone just CUT THE @#$%^&* FOSTER CONSPIRACY THEORIES?? I'm getting F---ING SICK AND TIRED of all the BULL**** that is being posted to this F---ING LIST!!!! does anyone give a flying f--- whether Foster was killed or suicided or hit by a bus?!?!?! WHAT DOES THIS HAVE TO DO WITH CYPHERPUNKS? WHAT DOES THIS HAVE TO DO WITH CODE??? PARRY IS RIGHT. everyone else who disagrees can KISS MY ASS. sign up for the PLAN TO ENCRYPT CYBERSPACE. parry is the man to start with. he will get you started on his campaign like any good drill instructer. oh yes, so many of you pansies need to get into a serious digital BOOT camp. learn some real manly things for a change!!! besides gossiping and tittering like grizzled grandmothers who haven't a clue or a life!!! he's right, little TIMMY MAY hasn't done one @#$%^&* productive thing in the last 5 years after he quit Intel. oh yeah, he is raking in cash off all his little darling stocks, but what the hell does he have to say that is even slightly relevant to coding? my god, here is a guy that barely even knows what linux IS, let alone how to install it. I bet he thinks that "bash" is something you do to the NSA!!! oh yeah, he goes to his silly little "mind masturbating and drug fondling" parties every few days with all the Hoi Poilloi Holier-Than-Thou pricks of the world, the "cum of the net" ejaculating all over each other, hehehehehehe what a bunch of effeminate nobodies... PARRY is the premiere cypherpunk. he should be worshipped by everyone. he has written dozens of RFCS which have made cyberspace a far better place as we know it. if you don't contribute to his solution, YOU ARE PART OF THE PROBLEM. PARRY is part of the solution. HINT FOR THE CLUELESS: GET WITH THE PROGRAM. don't you think that you are being the most scurrilous swine for taking up PARRY's time with your filling up this mailing list with GARBAGE? TRASH? EXCREMENT? ODIOUS EFFLUVIA??? don't you know that it cuts into his insanely precious programming time by hours to have to monitor this list closely to see if anyone posted some boneheaded conspiracy theory or insulted him??? that TAKES PRECIOUS TIME THAT HE COULD BE SPENDING TRADING PROGRAMMING TECHNIQUES WITH BRILLIANT PEOPLE WHO KNOW UNIX SOFTWARE AND HOW TO WRITE A CORRECT DNS LOOKUP VIA SOCKET LIBRARIES. are we cypherpunks, or cypherprogrammers? GET A CLUE, PEOPLE. I SWEAR if I see one more FORWARDED ARTICLE TO THIS GROUP, I'M GOING TO MAILBOMB THE WHOLE LIST. that'll teach the @#$^%^&* bastards to mess with MY VALUABLE TIME.

3 2

PERRY METZGER: YOUR MOMMY IS CALLING YOU HOME
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I'm tired of Perry. he's always ranting and stirring the shit. he's always setting himself up as the savior of the list signal. what the hell has he really written? oh, the poor bastard has holed himself in his apartment to write crypto code or the world is going to die tomorrow. thank you, mr. Jesus Christ, Nailed to a Cybercross. WHY HATH WE FORSAKEN HIM??? oh, I can see the blood oozing from the gaping flesh wounds. poor Perry, having to bear this horrible cross while everyone else stands around and gawks and remarks about Foster conspiracy theories... yes, we are being utterly inconsiderate of his splendor and selflessness. has anyone seen Mathew, Mark, John, or Luke around??? Perry has something to say to them. oh, and Perry has become Mr. Cyberlobbyist. yes, just what we NEED, is another person to be sucked up and ground up in the oozing washington slime regurgitator. well, if it would swallow him up and never spit him out, perhaps we should encourage him in his newfound political passions. I have seen an awful lot of noise on the list, and I'm pretty f***ing amazed at how much of it is due to PM and his BLACKBOARD FINGERNAIL SCREECHING. he's worse than detweiler. actually, I think he may be a detweiler tentacle. he's certainly doing a fantastic impression of it. mr. holier than thou Protector of the Cypherpunks. perry, just go stay in your dark apartment and write your code. we'll be happy to hear from you in a year when you have all your little tinkertoy prototypes put together with threads and bubblegum. TCM is not the first person you have violated by posting private mail. you are the lowest cypherscum for violating privacy, perry. you know that if anything is sacred to cypherpunks, it is Tim May and privacy, and frankly I think you have been doing just a little to much pissing on both of them lately. oh, violate Tim May's privacy? well, stab two sacred cows with one bazooka, why don't you, you little bastard... do we have any need for you? maybe tim may is a weenie, but I'd rather have a weenie around then YOU, and I think virtually EVERYONE HERE concurs on that point... why don't you take a vacation from the list? TCM has the guts to do this, and has done so in the past. but you are just a bloated buffoon who cannot tell when he is not wanted somewhere even as people spit in your face. hee, hee, reminds me of someone else I know. but frankly, perry, I don't think you have the balls to go away. if you are a real programmer, and all the real programmers have left, what does that make you? stupid, I'd say. we would not miss you one whit if you left, Perry. in fact I think it's safe to say that we'd be quite delighted if you would take your constant shit-stirring somewhere else and get a life. TCM may have a pathetic excuse for a hobby, but you have a pathetic excuse for a LIFE. I know you personally Perry, and you couldn't conduct yourself in a meeting of civilized people if you had your tongue chopped off, and I think there's plenty of meetings you've been to when your peers were wishing exactly that.... xxxxxxooooo <- hugs and kisses, darling perry puppy

5 5

Re: Crypto = Competitive Advantage?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:30 PM 8/10/95, sameer wrote: >> >> It seems that anything involving the Internet, the Web, and digital >> commerce is really, really hot. > > The fire that burns twice as hot burns half as long. It may be >a cliche but it is quite applicable here I think. Indeed. Who now recalls Jaron Lanier's virtual reality company? (In retrospect, Jaron's error was in not finding a way to take VPL public. VPL was the Netscape of 1990. But will Netscape be the VPL of 1992?) Let the record show that I was not one of the tens of thousands of people calling their brokers trying to get in on the Netscape IPO. (Though getting in at the IPO price and selling out the same day was obviously lucrative for a lot of folks.) --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

F*** FOSTER
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

this vince foster thing is BS. total bs. Perry is right. there's not a single smidgeon of honest reporting going on. its just slime being stirred up by internet thugs and rapscallions. let foster rest in peace. multiple people have ruled it was a suicide. perry can attest that it was a suicide. perry can attest that the NSA was not involved. he has seen everything, and if he has an opinion on something, you can take his word that it was based on the FACTS. the FACTS of the case are that FOSTER was fed up with his nothing life, and pulled the trigger and blew his brains out in a park. so what if they couldn't find the brains anywhere? or they are missing a few here and there??? they were splattered on the grass. when there is that much splatter all over the place, you can be sure that the people showing up with the spatula are not going to be that meticulous. they probably did about 5 minutes of scrape, scrape, scaping and then vomited and passed the spatula to the next guy. I mean, cut these guys some slack. the NSA stuff is total, utter poppycock. the NSA has absolutely nothing to do with vince foster. Clinton has nothing to do with foster. Hillary has nothing to do with foster. why, the way people are ranting you'd think there is a major political scandal going on. NOTHING IS GOING ON HERE. please step aside, and move along. PLEASE MOVE ALONG FOLKS, THERE'S NOTHING MORE TO SEE HERE. the fact that foster may have had access to intelligence secrets such as cryptography is IRRELEVANT to the cypherpunks. the fact that a scandal may have taken place is IMMATERIAL to our goals. our goals are to WRITE CODE. FOR GOD'S SAKE, WRITE THAT CODE. I don't care if you have to create code generators. CODE, CODE, CODE. post the code to the cypherpunks list. talk about the code. critique the code. study the code. salvation for all humanity lies in finding the magic formula. and we can't find it, UNLESS WE CODE, DAMMIT. perry understands this. some people think that there is a magic government program that will solve poverty, give freedom to everyone in the US, and solve P=NP. they're WRONG. the government cannot do any of this. BUT PROGRAMMERS CAN!!!! put your programming hats on. if you haven't banged a keyboard a half million times, fired up VI to edit a C file for the ten zillionth time, NO PROGRESS IS BEING MADE. ITS AS SIMPLE AS THAT. if you haven't compiled something recently, RECOMPILE IT JUST TO BE SAFE. we just aren't making any progress without CODE, CODE, CODE. we have an utter shortage of code. the problem is not politics, but LACK OF CODE. anyone can look at the net today and see there is a HORRENDOUS SHORTAGE OF CODE IN CYBERSPACE. we have to train everyone to program NOW or the future is lost to the incompetent. we will be back to Vic 64's if people don't keep up the constant programming. software is the key to salvation. every second devoted to the vince foster thing is a precious second taken away from code. NOTHING POSITIVE CAN COME OF PREOCCUPATION WITH CONSPIRACY THEORIES. PERRY CAN ATTEST TO THAT. remember when PRZ was getting indicted? perry was right on then too. some people were scared shitless and raving out of their minds, saying the world would end tomorrow, but NOT PERRY. perry has NO FEAR. he said that we should CODE, CODE, CODE. and you know what??? HE'S RIGHT. if people followed PERRY, we would not be in this @#$%^&* predicament we are in. if we could just get it so that every person who signed up to the internet could CODE, we would be home free. salvation. utopia!!! then we could rest a little. but only a little, otherwise the NSA will beat us again at the code race. once again: forget Foster. nothing, absolutely nothing about this scandal could possibly help our cause of trying to expose corruption in government to the mainstream populace, to keep them better informed, to put limits on the NSA, to show that they have been involved in horrendous abuses, that there is something utterly smelly in our government. FORGET IT. NOTHING LIKE THIS WILL EVER BE PROVEN OR ESTABLISHED. IT'S IMPOSSIBLE, JUST LIKE PERRY SAYS SO. when anything new comes of this foster stuff, just remember that perry predicted way ahead of time that it would amount to NOTHING, NOTHING, NOTHING. and the more you preoccupy your brains with this TOTAL MINUTIA, the less you are coding. STOP IT RIGHT NOW. just remember, if you don't, you will be SORRY, and when you come crying back to Perry that nothing of value came of all your conspiracy mongering, he will have NO SYMPATHY, in fact if he had a gun around he'd probably be tempted to blow your brains out. and you can just FORGET about the spatula.

3 2

Is there a 12 step group in the house?
by Censored Girls Anonymous 17 Dec '03

17 Dec '03

Sounds like someone needs a meeting. There are groups for obsessive/compulsive activity. Member Internet Society - Certified BETSI Programmer - WWW Page Creation ------------------------------------------------------------------------- Carol Anne Braddock <--now running linux 1.0.9 for your pleasure carolann(a)censored.org __ __ ____ ___ ___ ____ carolab(a)primenet.com /__)/__) / / / / /_ /\ / /_ / carolb(a)spring.com / / \ / / / / /__ / \/ /___ / ------------------------------------------------------------------------- A great place to start My Cyber Doc...

1 0

Re: PERRY METZGER: YOUR MOMMY IS CALLING YOU HOME
by bshantz＠nwlink.com 17 Dec '03

17 Dec '03

>I'm tired of Perry. <REST DELETED> I think that any Perry bashing can be taken offline. I don't think that 700 people subscribed to the "I Hate Perry Metzger" list; they subscribed to cypherpunks. If you have anything to say to Perry, tell him in private e-mail. Don't post a milion lines of shit to the list. Get a clue folks... Brad

1 0

It may be time to electrify the floor...
by rah＠shipwright.com 17 Dec '03

17 Dec '03

... because we seem to be in the throes of a listwide piss-fight. Unless we're the victim of duelling rant generators -- but I don't think this is the case, as they all happened too fast. It's a nice night. Maybe I'll go sit on the back porch and smoke the base-ball-bat Macanudo (cigar) I bought at Erlich's today... See you all in the morning. Don't forget to insulate yourselves, everyone... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

"Protect the children" as passphrase to Constitution
by tcmay＠got.net 17 Dec '03

17 Dec '03

I was reminded the other night by someone of the "'National security' is the root passphrase of the Constitution." The idea being that the normal Constitutional protections are bypassed by invocation of "national security." But it occurs to me that we are seeing a new variant of this: "Protect the children." Some recent examples: - Clinton's Executive Order today which limits advertising of cigarettes, limits the display of tobacco-related symbols and words on t-shirts, baseball caps, billboards, and publically-visible signs at sports events. (There were all kinds of details, most of them blatantly in violation of the First Amendment. I half-watched the Clinton announcement, but didn't take notes...consult your newspaper or the Web.) The critical phrase: "We have to protect the children." (Oh, and one amazing detail: the possible issuance of I.D. cards to all of those under the age of 18. Besides being useful for things like curfews, video tape rental prohibitions, and the cigarette ban, it would lead to I.D. cards for those over 18. naturally (if those over 18 don't have to carry them, then all a child less than 18 has to do is to claim not to have to carry one because he's 18!) - The whole Exon and V-chip debates, now likely to be passed by Congress, are about "protecting children." - and the Oklahoma City bombing, not that I supported it in any way, was seen as especially horrific because of the children that were killed. This means that restrictive legislation, such as bans on explosives information, guns, etc., can be justified as measures to "protect children." And so on. Now clearly this strategy will be welcomed by many. It's hard to argue against children and against the "protection of children." Arguing the Constitutional side is tough when "the children" are at issue. More speculatively, I think Clinton has hit on this strategy as a way to line up support from the Republican majority in Congress on many key issues. There may even be repercussions for welfare and health care issues (which Clinton can also cast as "protect the children" issues). The potential crypto relevance? Look for arguments about limiting access to strong crypto to be more heavily focussed on "pedophiles" and "pornographers." Look for calls to have a national I.D. card--which serves many State-needed purposes (and I don't mean in terms of Revelations). A national I.D. card could then be tied in to GAK/escrow systems. "We have to protect the children." --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

SSL bruting progress (was: Crypto-relevant flame interruption)
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

Fred <admin(a)dcwill.com> wrote on cpunks: > Would someone be so kind as to provide a status report on the > planned SSL attack? Last word was that codework was still underway, > but I might have missed something relevant to this project amidst > all of the noise about excessive list noise. There has been no public announce. This is due to a desire to make real sure it's going to work before announcing. So, we're working on it. Software is basically all there, but we're experiencing difficulties, like during a trial run no key for Hal's challenge seems to be being found, even though the same software finds test keys. We've not managed to isolate the cause of it, as (two people) have nearly swept the entire keyspace (heh they had a bit of spare compute) and no key has been forthcoming so far. Give it a few more days - until monday - and if no key is found we've got problems, 3 possible outcomes looming: a) we find the key to Hal's challenge and go whoopee! Request a 2nd challenge from Hal? and announce a public sweep to see how fast it can be done. b) something is wrong with the interpretation or the gathering of the SSL session data Hal based his challenge on (difficult to see as there are numerous fixed fields which tally with the SSL spec.) c) software problems (also difficult to see, the software in all cases (3 separate versions) finds the keys of examples provided by Andrew Roos (ie he generated a key manually, so we know where to start for testing purposes)). The likelihood of a) happening is receding, as the last key space gets ticked off. More news next week. Adam

2 1

Re: PERRY METZGER: YOUR MOMMY IS CALLING YOU HOME
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

Brad Shantz writes: > >I'm tired of Perry. > > <REST DELETED> > > I think that any Perry bashing can be taken offline. I don't think that 700 > people subscribed to the "I Hate Perry Metzger" list; Nah, that list is way bigger than cypherpunks.

1 0

Re: "Protect the children" as passphrase to Constitution
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Every time I hear some porker say, "Protect the children," the BS translator that resides in my brain replaces the word "Protect" with the words, "Treat adults like." Probably a mental defect. JMR PS RIP Jerry G. Let's cease the flamewar for 24 hours, in memory. - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCq1/m1lp8bpvW01AQGg8gQAiq+kzyQopCLFQtzPhr4WIN42I41ZDPyh 1qH1/DBHAS8BaNqK8f9jObEvG4a5dlpbzp5c0FdJ2cbcZtG/GZIG3clUPNd0cqtf hR1abL8pTgoj7WMclOMF6iclzRn/fcHY9VawZHT10At3I11eyjOq3hBsfIU1c1IG 9pjlPeEW/IE= =Ci1C - -----END PGP SIGNATURE----- Regards, Jim Ray PGPsign all your cleartext messages! [Makes the statists nervous.] - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCq3ESoZzwIn1bdtAQGfFQF9FL9ptx5QVfg6nGL+NePHg6cuq3B2fa/U 9Ir2SmI6NZQPgjvFtCPO9ZmepaLBkEqs =+nDm -----END PGP SIGNATURE-----

1 0

UHS encoding
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

has anyone heard of UHS ? ? its universal hint system . . its for game hints . . its data files are encrypted and a decoder decodes only the hints you need . . anyone know what encryption is used ? ? its probably very weak but a good idea . . i wonder if this is export - restricted too ! ! --

1 0