December 2003 - cypherpunks-legacy

RNG method
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I thought of that for a long time. - Use a microphone on your sound card and locate it close to the computer fan. - generate a (relatively short) set of random number, maybe using the PRNG of the computer. - Use the LSB of the sampled sound, the sampling being done at intervals fixed by the serie of numbers generated by the PRNG. - when the numbers generated by the prng are exausted, re-use part of the output stream as a random source of numbers for the sampling interval. - keep doing this up until: 1) you are fed up of looking at RND numbers on your screen 2) you have no use for rnd numbers anymore 3) your hard disk is full 4) your computer cpu is so mixed up that it starts outputting all your PGP encrypted files in Serbo-Croatian cleartext 5) any other reasons deemed reasonable by the computer operator 6) none of the above Whaddyathink of it? Regards to almost all Cyphering Punksters JFA Please note, my new key signature is: 2048 bits key Id: C58ADD0D 1996/03/01 Jean-Francois Avon <jf_avon(a)citenet.net> fingerprint = 52 96 45 E8 20 5A 8A 5E F8 7C C8 6F AE FE F8 91 But I'll still use my old key for signing for a while. -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQCVAwUBMTi0fwOWptJXIUrtAQE2DgP/S8VRX3PbrKHMKl6JJrFvZgZhdhzOk8Am 8qLJzvwjGZ7ll1gZTYT5iLfAEw+03wpy0eS/ohYdlgQ0Xu9AI418uLP6dReQbsjg ndz9/LIaQeOmrZgL1BlAtk9119QmtCdzx59gwwngz1qNYUZNhJ4l10UGz2EWksXI 51Lve+FjKE0= =zdM0 -----END PGP SIGNATURE----- **** OLD KEY: USE ONLY FOR VERIFYING SIGNATURES **** 1024 bits Key ID:57214AED 1995/10/04 Jean-Francois Avon <jf_avon(a)citenet.net> 84 96 76 AE EB 7C AB 15 88 47 87 B0 18 31 74 9F

1 0

PGP PRNG seeds?
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

Hi! I tinkered with the switch pgp +makerandom=size output.fil Is there a way to "seed" the PRNG with another file, say , part of an encrypted text file? Thanks JFA

1 0

Re: RNG method
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jean-Francois Avon (JFA Technologies, QC, Canada) wrote: > > I thought of that for a long time. > > - Use a microphone on your sound card and locate it close to the > computer fan. It's been thought of before, along with scraping the microphone against the desk. I've been told this works best when first turning the gain up on the soundcard and setting it for stereo input. The raw data and be processed cryptographically (with a cipher or run through a hash). This method will be an option for the NOISE.SYS driver eventually. - --Rob PS - noise049.zip has been uploaded to a few sites today. When I get confirmation I'll announce it... - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTke4SoZzwIn1bdtAQHQ3wF9GsZjk+jbtWrap8sKcSXDQ3n8GVksofBX CaVPqXKiE7CxB41hbo2ftSFqQ+P3XhFX =gdTO -----END PGP SIGNATURE-----

1 0

Re: RNG method (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sat, 2 Mar 1996 23:24:04 -0500 > Subject: Re: RNG method > > > > - Use a microphone on your sound card and locate it close to the > > computer fan. > > It's been thought of before, along with scraping the microphone against > the desk. I've been told this works best when first turning the gain up > on the soundcard and setting it for stereo input. > If you use the fan remember in your power supply remember that many of them run directly off the 120 VAC. As a consequence the sound it makes will have a strong 60Hz componant. If you are using a DC bearing fan then there will be a componant in the noise related to the number of balls in the bearing. DC bearingless fans should provide the best white noise provided the bushings are not worn. Once they wear you will be a harmonic related to shaft diameter, shaft length, and the gap between main shaft and bushing.

1 0

Jefferson Wheels?
by Adam Shostack 17 Dec '03

17 Dec '03

Does anyone know where I might buy a Jefferson Wheel cipher? The army version (M-118?) would be fine. Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: M A F_i o s
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart wrote: [..] > The title does remind me somewhat of > "Buckaroo Banzai against the World Crime League".... Hm. Remember the scene where one of his buddies in the film could just decode some military crypto just by staring at it... *sigh* Back to the regularly scheduled noise. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTkIRCoZzwIn1bdtAQFvxAGAyVKXhD4fV6CE0ivluAJTLrAmbimmrzo3 v0MDgt0SYpt29XcV77uiaRMIXSkqtx+o =wlQb -----END PGP SIGNATURE-----

1 0

Re: Problems with certificates.
by Greg Rose 17 Dec '03

17 Dec '03

[Apologies if this appears twice -- I had a posting problem.] A. Padgett Peterson wrote: Next rage might well be "vanity" PGP keys. While at the moment it is not known how to create a specific match key to a sequence, if you generate enough keys, there will be some interesting sequences found. Possibly some PGP signatures will even be in violation of the CDA (now that should start a rush 8*). That's not quite correct. The part about it not being known, I mean. I created a key: Type bits/keyID Date User ID sec 1024/DEADBEEF 1995/09/28 Prime Rib Lovers sig DEADBEEF Prime Rib Lovers (note: DEADBEEF seems about the most interesting 8-character hex word -- CAFE doesn't seem to go with anything...) And Christopher Drake (http://pobox.com/~netsafe) has mailed out a key which has a company advertisement in its ASCII armor. Hmmm. I thought I kept it around, but I can't find it. Ahhh. There it is. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.i mQCNAjD/mQAAAAEEAP/////NetSafe+PGP+key////We+provide+inexpensive AntiFraud/theft+etc+Security+Software5tGfKREuINIWsQqsLNS+uAneN9M SuMu37f+NU/U2djtxE/b9h4bJ4wb8h3QkBiuTAS1QjpxpxryQzZ10zzGQe8VAAUR tChDaHJpc3RvcGhlciBOLiBEcmFrZSA8TmV0U2FmZUBQb2JveC5jb20+ =SGC/ -----END PGP PUBLIC KEY BLOCK----- Type bits/keyID Date User ID pub 1024/C641EF15 1996/01/19 Christopher N. Drake <NetSafe(a)Pobox.com> I still assert there are a bunch of attacks related to producing on-demand keyid's. Greg. Greg Rose INTERNET: greg_rose(a)sydney.sterling.com Sterling Software VOICE: +61-2-9975 4777 FAX: +61-2-9975 2921 28 Rodborough Rd. http://www.sydney.sterling.com:8080/~ggr/ French's Forest 35 0A 79 7D 5E 21 8D 47 E3 53 75 66 AC FB D9 45 NSW 2086 Australia. co-mod sci.crypt.research, USENIX Director.

1 0

(fwd) USA / Australia - Civil Liberty
by unknown＠example.com 17 Dec '03

17 Dec '03

Path: news.aus.world.net!news.us.world.net!usenet From: tomk(a)world.net Newsgroups: aus.legal Subject: USA / Australia - Civil Liberty Date: Sun, 03 Mar 96 01:59:02 PDT Organization: (none) Lines: 78 Message-ID: <4hbcu6$jco(a)news.i.net> NNTP-Posting-Host: portland04.world.net Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Newsreader: NEWTNews & Chameleon -- TCP/IP for MS Windows from NetManage 1 March, 1996 At 1:50 pm today PST in the Federal Court of the USA in the State of Oregon, an Australian national Ms. Amanda Wilson was unfairly incarcerated by Justice Haggerty of the US Federal Court. During her incaceration, she was denied legal counsel, her request to have her embassy contacted was refused and she was informed by the Sherrif of Oregon, that she had no rights until she was transferred to a Federal Jail. This individual was a witness in a civil case and was neither named as the plaintiff nor the defendant. Work that she had performed for the plaintiff under contract was not being paid for by the Plaintiff and Ms. Wilson was not inclined to provide the information without her agreed remuneration. Justice Haggerty then claimed that Ms. Wilson was an agent of Koltai Inc and Thomas P. Kotlai and that her work was not Intellectual Property owned by herself until remunerated. Ms. Wilson claimed that she had evidence that she was acting as an independent agent. Justice Haggertys' response was that "I'm not interested in your evidence". Justice Haggerty ordered the Sherriff to detain Ms. Wilson for Contempt of court. Ms. Wilson then informed the court that she had done nothing wrong and that she was an Australian resident. The sherriff and his assistant then handcuffed and removed Ms. Wilson to the holding cells on level four of the Federal Courthouse in Portland. She requested leave to contact her embassy. This was refused. She requested the right to counsel, this also was refused. She then requested that the sherriffs office contact her parents in Australia to notify them of her arrest. The sherriff refused this request. She was then photographed, finger printed and informed that she would be removed to a jail later that afternoon if she did not comply with the courts order to divulge the passwords giving Ausnet Services Pty. Ltd. free access to her Intelectual Property. Justice Haggerty then visited Ms. Wilson in the holding cells to counsel her. Ms. Wilson requested from Judge Haggerty that she be allowed to contact her father and/or the Australian Embassy. Justice Haggerty declined this request. Ms. Wilson then gave into the pressure applied and gave the passwords required by Justice Haggerty. During her three hours and fifteen minutes of incarceration Ms. Wilson was humiliated with a personal body search. Threatened with transport to a jail in California. Informed that she had no rights and was generally verbally and mentally abused. Under USC 28, 1603, (B)(3) Ms. Wilson is an alien and the US Federal court has no jurisdiction over her. It is the opinion of this individual that the US Federal Court has exceeded its authority and has failed to recognise the civil rights of an Australian National. This file was posted by: Thomas P. Koltai Ex Managing Director of Ausnet Services Pty. Ltd. (http://www/world.net) Mobile: 1-503-260-3666 -- "I mean, after all; you have to consider we're only made out of dust. That's admittedly not much to go on and we shouldn't forget that. But even considering, I mean it's sort of a bad beginning, we're not doing too bad. So I personally have faith that even in this lousy situation we're faced with we can make it. You get me?" - Leo Burlero/PKD +---------------------+--------------------+----------------------------------+ |Julian Assange RSO | PO Box 2031 BARKER | Secret Analytic Guy Union | |proff(a)suburbia.net | VIC 3122 AUSTRALIA | finger for PGP key hash ID = | |proff(a)gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 | +---------------------+--------------------+----------------------------------+

2 1

(fwd) Re: The police came knocking
by unknown＠example.com 17 Dec '03

17 Dec '03

Path: news.aus.world.net!news.us.world.net!news.inc.net!trellis.wwnet.com!nntp.coast.net!howland.reston.ans.net!newsfeed.internetmci.com!news.mel.aone.net.au!newshost.pcug.org.au!blchupin!blchupin From: blchupin(a)pcug.org.au (Basil Chupin) Newsgroups: tip.general,aus.org.efa,aus.legal Subject: Re: The police came knocking Message-ID: <09A420598905(a)pcug.org.au> X-Mailer: Osiris v4.1 Registered To Basil Chupin References: <4gisqm$s4c(a)wabbit.its.uow.edu.au> Date: Sun, 25 Feb 96 17:06:59 +1000 Organization: Back To The Future CBIS, Canberra, Australia Lines: 223 Xref: news.aus.world.net aus.org.efa:1808 aus.legal:2660 In article <4gisqm$s4c(a)wabbit.its.uow.edu.au> Phil Herring <revdoc(a)uow.edu.au> writes: > In article <312beb37.18538395(a)newshost.pcug.org.au> Owen Cook, > rcook(a)pcug.org.au writes: >1. All traffic into and out of Australia passes thru this >building at St Leonards >2. Xty millions of dollars were spent by Telecom and ASIO to >install, secretly, computers in the site. >3. The purpose of the facility was to monitor all traffic thru >keyword searches, originator and destination addressees. > > Erm, no. It's just a version of the "NSA line eater" myth. Aside > from > the fact that there are international links all over the place, > including satellite uplinks and leased phone lines, the plain > truth of > the matter is that the government just doesn't care about the > Internet > all that much. Politically it's of little consequence, and law > enforcement and "intelligence" services have small budgets that > just > don't stretch to this kind of conspiracy. > > On the other hand, the insecurity of email is legendary. ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ Date : 10 Mar 94 13:11:46 From : Relay To : All Subject : Government Eavesdropping In New Zealand ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ * Message originally : From: Relay To : All Date: 10 Mar 94 11:42:35 Area: alt.dcom.telcom * Forwarded by Tech Support using Sphinx! 2.0 The following article was posted to the Student Journalists mailing list (STUMEDIA(a)UABDPO.BITNET) by Malcolm Hutchinson (malcolmh(a)waikato.ac.nz) This is an article that appears as the centre feature in our first issue for the year. as the token NZ representative on this list, i thought i would post it to show that the US is not the only country experiencing problems keeping their govt in line when it comes to digital privacy & secure comms. NZ is known around the world for it's anti-nuke stand in the mid- eighties, yet we allow this sort of thing to continue. the waihopai spy base feeds information *directly* to the NSA. it is because of the existance of installations like this that i encourage all my digital friends to take control of their own information and start using strong cryptographic software. PGP is available from any number of anon FTP sites around the world. get it, use it. i apologise if posting an article like this is considered wasting bandwith on this list y'all stay safe mal title: The Biggest Sour Grape in Marlborough At a predetermined signal the two groups of protesters split apart. The group I was in went round the fence to the main gates and started pushing them back and forward making a hell of a racket. The gate was secured in three places. We broke the top padlock and the steel rod holding the gate in the ground. We heard a shout from the other group. They were through the fence. Nine people arrested and many more if we didn't stop our vigorous attack on the main gates. This was it, we were there to do something radical, to make our protest well and truly heard. No-one had breached the huge inner fence of the Waihopai Spybase for years. It was my first protest at Waihopai but not the last. The Waihopai protest just South of Blenheim is an annual event organised by the Anti-Bases Campaign (ABC). Ever since the first survey pegs were planted in the ground in 1987, New Zealand women (originally) and men have protested against the existence of the secretive Waihopai Spybase. Yet despite its colourful history the vast majority of people still don't know it exists. Held from January 27-29 this year's protest was larger than usual. About 80 people (including an unspecified number of university students) from Dunedin to Auckland converged on a makeshift campsite nestled beside the Wairau River to plan what action they would take against the Spybase and all it stands for. The word "spybase" conjures images of undercover cops, secrecy, high security, mystery and murder. While this is a bit dramatic there are similarities. The Waihopai base is run by the Government Communications Security Bureau (GCSB), a discrete organisation which only reports to the prime minister. Hidden in a barren valley deep in the Marlborough outback, the Waihopai base is not something the GCSB wants New Zealanders to know about. Workers at the base aren't allowed to talk about what they do and even their spouses don't know how much they earn. The base has a secret budget and secret objectives. Secrecy is the aim and so far 'they' have been successful. That is until 6.00pm Sunday night of the protest when on TV3 thousands of viewers saw the Waihopai Spybase for the first time. The next day articles were published in Sunday papers, with further articles in major daily papers on the Monday. Supportive comments by Nelson MP John Blincoe added to the debate on a topic usually considered closed. For the first time many New Zealanders became aware that a government agency was spying on our neighbours in the South Pacific and giving that information straight to the United States. What is a Spybase? A more official name for the Spybase is Satellite Communications Station. This sounds very innocent but there's no escaping the fact the base invades the privacy of thousands of people, businesses governments and other organisations throughout the South Pacific without their consent. The information gleamed is not meant for the GCSB or the US, that's why it's called spying. The base consists of an 18 metre receiving dish covered by a huge white dome, an operations building and workshop, all protected by a 14ft security fence backed by another electric fence, security cameras and floodlights. The base monitors communications transmitted via satellite: private and commercial telephone, fax, e-mail, telex and telegrams. These messages are scanned for key words by computer. The information collected is then relayed to the GCSB headquarters in the Freyberg building in Wellington. Useful information is then sent to the United States National Security Agency or the larger Spybase in Geraldton, Australia. Why protest? "The Waihopai Spybase uses your money to invade your privacy for other countries' benefit?" This statement taken from an Anti-Bases Campaign pamphlet about the base sums up the general reason why people are motivated enough to protest, and to be arrested. In the past, politicians like David Lange claimed the Waihopai base will give New Zealand more independence in intelligence matters and that the information would be under New Zealand control. However a document obtained from the US Navy by peace researchers last year has confirmed long held suspicions that the GCSB passes the intelligence collected at Waihopai to the powerful US National Security Agency. This evidence completely contradicts the claims made by New Zealand politicians. What's more, according to British investigative journalist, Duncan Campbell, the Waihopai Spybase is part of a world wide network of spybases monitoring satellite communications for the benefit of the NSA. What really sticks in the throats of those who know about the Waihopai Spybase is that despite the fact that the information is given to the US, New Zealand pays for it. Based on the costs of similar bases in other countries, the Anti-Bases Campaign estimates that the base cost $20 million to set up and up to $100 million so far. Protesters ask why should we be paying for this 'service' especially when we weren't even told about it. The Waihopai Spybase was established without the consent of the New Zealand people and operates without the permission of the Pacific countries who's sovereignty it intrudes on. The Spybase is part of a reliance on military power and cold war politics which reinforces the nuclear powers domination of the globe. Instead of building relationships with our neighbours based on trust, cooperation and peace we are furthering the interests of oppressive military alliances by the world super powers. Under international law it is in fact illegal to intercept international communications. The activities of the Waihopai Spybase contravene the International Tele-Communications Convention to which NZ has agreed. It is also illegal under NZ law to act on such information. The question we must ask ourselves is "Do we want New Zealand to participate in this misuse of technology?" "Do we want to be consulted before we enter into secret military alliances with the super powers? Would we rather the money spent on spying was spent on education or health? Protesters at Waihopai demand a Parliamentary inquiry into the activities of the GCSB, and that the activities of this organisation be subject to review by the judicial system. We also demand the closure of the Waihopai Spybase and the redirection of the money spent on its operations to be put toward a peaceful future. Until this happens we will continue to protest at Waihopai. I didn't try to be unbiased in this article. For a start I was actively protesting the base myself. It is also difficult to get another side to the story when politicians won't talk about it. The head of the GCSB even refused to answer MP's questions in Parliament about the Spybase. But secrets never last forever and thanks to the New Zealand peace movement at least some of the truth is becoming public. The more people who demand knowledge of the Spybase and accountability for its operations, the more likely politicians will take notice. Already Nelson MP John Blincoe (Labour) has come out in support of the Waihopai protest. In the Christchurch Press Blincoe said international circumstances had changed and it was time for the "cloud of secrecy" over the base to be lifted. "The public is entitled to know what is being done from its own soil," said Blincoe. "At the very least there should be Parliamentary scrutiny of Waihopai and the other listening station, Tangimoana, near Palmerston North." Yes there are other spybases, of different sorts, but did you know about them? I find it unnerving to think people could be listening to my phone conversations, that foreign spy networks are operating through New Zealand and I am helping finance something I don't believe in. But then we don't have to like it and nor do we have to accept it. It is our right to question and protest. To find out more information about Waihopai and other bases in New Zealand write to the Anti-Bases Campaign, PO Box 9314, Wellington. [NEW ZEALAND] Paul Smith wc 1345 ********************************************************* Malcolm Hutchinson internet: malcolmh(a)waikato.ac.nz Editor: NEXUS 1994 The Waikato Students' Union Te Wharae Wananga O Waikato Hamilton, New Zealand PGP Public Key available on request ********************************************************* -- Nigel Allen ae446(a)freenet.carleton.ca ---------------------------------------------------------- Basil Chupin Internet: blchupin(a)pcug.org.au Fidonet: 3.620.269.0 +61-6-285-2353 XLTNet: 370.100.1.0 +61-6-285-2353 ---------------------------------------------------------- -- "I mean, after all; you have to consider we're only made out of dust. That's admittedly not much to go on and we shouldn't forget that. But even considering, I mean it's sort of a bad beginning, we're not doing too bad. So I personally have faith that even in this lousy situation we're faced with we can make it. You get me?" - Leo Burlero/PKD +---------------------+--------------------+----------------------------------+ |Julian Assange RSO | PO Box 2031 BARKER | Secret Analytic Guy Union | |proff(a)suburbia.net | VIC 3122 AUSTRALIA | finger for PGP key hash ID = | |proff(a)gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 | +---------------------+--------------------+----------------------------------+

1 0

Re: Cypherpunk remailer
by johan＠eniac.campus.luth.se 17 Dec '03

17 Dec '03

>At 07:24 PM 2/29/96 +0100, you wrote: >>>The mixmaster remailers require special client software on your machine. >> >>What special software? What will the client do? >It's "The Mixmaster Client Software". Mixmaster is a relatively complex >system that breaks up the message into encrypted pieces that get sent >separately to a destination mixmaster, which decrypts and reassembles the >pieces and sends the message on to the final destination. It's more secure, >partly because all the transmissions are encyrpted, and partly because it's >much harder to do traffic analysis on a network of indentical-sized chunks >floating around than on messages with distinct sizes that you can watch. >I think the client only runs on Unix, or at least doesn't run on DOS, >though there's some porting work being done, and you can probably find >it on one of the Netherlands remailer sites. Ok.. that explains it! But If I really need to be that sure of not being tracked down I could use the Mixmaster on my unix shell account!

1 0

NYT login
by David Lesher 17 Dec '03

17 Dec '03

At one point, some kind souls were entering "username: cypherpunks" logins for all the various "free" www sites. Did anyone catch the www.nytimes.com one? If so, what password? -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

2 1

Re: Win a free Apache-SSL-US Commercial license
by Steve Gibbons 17 Dec '03

17 Dec '03

In Article: <Pine.SOL.3.91.960301204634.8380C-100000@chivalry>, Simon Spero <ses(a)tipper.oit.unc.edu> wrote: # On Fri, 1 Mar 1996 sameer(a)atropos.c2.org wrote: # > See http://apachessl.c2.org/ for more details. # Not quite an entry, but am I the only one to pronounce SSL "Cecil" # (SEcure Socket layer), to go along with SHTTP as "Shit-p" (nil)? # Cecil The C2 Web server? The word that always springs to my mind is "sessile." (Granted, I'm a pessimist, at heart... ;) -- Steve(a)AZTech.Net

1 0

Re: PGP PRNG seeds?
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jean-Francois Avon (JFA Technologies, QC, Canada) wrote: > I tinkered with the switch > pgp +makerandom=size output.fil > > Is there a way to "seed" the PRNG with another file, say , part of an > encrypted text file? Copy the first 408 bytes of that file to the randseed.bin file in your pgp directory. (I'd save the original randseed.bin file or use a good RNG to generate a new one when you're done). - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTf8qyoZzwIn1bdtAQHrZQF/dM8RgYDEB+pTSmdy9HSIi38YKy9LG9FE yBZtka9z28A2UyVvi37ijP8DrcOYg4zI =duUA -----END PGP SIGNATURE-----

1 0

Re: Anonymous Web Browsing
by Mark Grant, M.A. (Oxon) 17 Dec '03

17 Dec '03

On Fri, 1 Mar 1996, Timothy C. May wrote: > These are "web proxies," and searching on this should produce some > information to answer your questions. There's a problem with that. I've noticed several pages recently with hidden mailto: links that aren't marked as such. So you can be happily browsing away through a web proxy only to click on a link and have your real id mailed to the site's owners. As people have mentioned, this is even worse with Javascript. Note to Netscape people: Is it possible to have an option that will *always* pop up a mail window and request confirmation before mail is sent out? Or disable mailto altogether? It would be a lot easier than binary editing the executable to remove all the mailto strings... Or does it exist? I can't find it. Mark

1 0

Re: Problems with certificates.
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 08:35 AM 3/1/96 -0500, A. Padgett Peterson P.E. Information Security wrote: >Today, each person generates their own PGP key. While it is unlikely that >any two will match, it is likely that at some point some two will match >(see matching birthdays in a bar - number is less than you would think). If if we colonized every planet in the galaxy, and every planet had a trillion people, and every single person on every planet generated a billion keys a second for a billion billion years, not one pair would match, assuming they were generated from truly random seeds. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

New PRNG method!
by Olcay Cirit 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello, All! I was just thinking about how to generate random numbers, when I hit upon an interesting idea: If the internet is so huge and complex, why not, say, use the least significant bits of ping times from random internet hosts as seeds for a PRNG? (Practical Random Number Gen.) You could then break the resulting binary value into 128-bit blocks and modulus/xor each with a stream of random numbers taken from a keyboard timing. After all this, you could wash it with a secure symmetric cryptosystem such as idea in CBC mode. Any thoughts, comments? -olcay - -- "For he who lives more lives than one, |) Olcay Cirit -- olcay(a)libtech.com more deaths than one must die" (| http://www.libtech.com/olo2.html - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTh9pCoZzwIn1bdtAQGuDAGA1QM1KyGQ2i6n9LLF00HrVn7OvBftesA9 +Jsu4W3yZothdL1pFQLt2v5l9mjgTspW =2x/g -----END PGP SIGNATURE-----

3 2

Re: Anonymous Web Browsing
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:24 AM 3/2/96, dwhite(a)pris.bc.ca wrote: > Hi guys..... I'm new here and I don't have the same technical >expertise as I am witnessing with most of the other posters here. > My question is this: Would it be possible to create a web site that >would function along the same lines as remailers do? Something that would >allow a person to browse anonymously. So lets say I surfed into a These are "web proxies," and searching on this should produce some information to answer your questions. Most of us, I think, are not using them. Your intuitions are correct, that protection steps are needed. The technology is developing, but the perceived need (anonymous browsing) is probably less than the perceived need for anonymous e-mail. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Cryptanalysis
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:44 AM 3/2/96, Alan Olsen wrote: >My mistake... The publication I was thinking of was "the Journal of >Cryptology". They reference Springer-Verlag New York Inc. as the source for >back issues, but there is no listing on the linked web page for that journal >and the search engine returns nothing for that journal. (They do have a few >other things of interest however...) One gets the "Journal of Cryptology" automatically by attending the Crypto Conference (at least this was so in the past). I can't see that it carries much that the "Crypto" and "Eurocrypt" Proceedings carry (though Chaum's "Dining Cryptographers" paper was in Volume I, Number 1, circa 1988-89). "Cryptologia" is a much different thing. Neither is necessary for the disposing of snake oil products, however. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Cryptanalysis
by Alan Olsen 17 Dec '03

17 Dec '03

At 11:11 PM 3/1/96 -0800, Timothy C. May wrote: >At 6:52 AM 3/2/96, Alan Olsen wrote: > >>The author has failed to call me back. I do have some serious concerns >>about the code. (There is not a single XOR used, except to clear >>registers!) I am starting to suspect that it is based on a mathematical >>progression based on the numbers 40, 28, 36. I need to spend a bit of time > ^^^^^^^^^^ >Ah, note that the magic key, 42, is not included. Coincidence, or stupidity? Actually it is an obscure reference to a movie called "Our Man Flint". It was the basis of the code used in the movie. >Alan, there is not enough time in the universe to waste it on those who >will not learn even the basics. The "author," who I had understood to be a >friend of yours (though apparently a more distant relationship is >involved), is apparently developing something John Dee would have been >proud of. He is more aquaintence than friend... Someone who is a close friend asked me to get involved. As for the other reasons for asking for the references, it is more a matter of personal curiosity. I expect his project to fail anyways for reasons i have already stated... --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "I, Caligula Clinton... In the name of the Senate and the people of Rome!" - Bill Clinton signing the CDA with the First Amendment bent over.

1 0

Re: Cryptanalysis
by Alan Olsen 17 Dec '03

17 Dec '03

At 11:11 PM 3/1/96 -0800, Timothy C. May wrote: >>>* The journal "Cryptologia" is largely devoted to amateur cryptanalysis. >> >>The web info for back issues listed a web page from a publisher that had no >>listing for them on the server. I will be sending mail to get more info... > >Last I checked, Tony Patti was still the editor. Not all things are on the >Web in serious ways, obviously. I had no problems finding copies in my >local university library (UC Santa Cruz), but it was several years ago that >I last checked (conventional cryptanalysis not being very germane and all). >Reed College might have copies. My mistake... The publication I was thinking of was "the Journal of Cryptology". They reference Springer-Verlag New York Inc. as the source for back issues, but there is no listing on the linked web page for that journal and the search engine returns nothing for that journal. (They do have a few other things of interest however...) The time spent was not a loss... I found a number of interesting things on the web and recieved a number of pointers to books I was not aware of and are not listed in any of the FAQs. The best site I found was at: http://mnementh.cs.adfa.oz.au/htbin/bib_lpb It is for Lawries Cryptography Bibliography. It contains a search engine to a large listing of crypto articles. Worth checking out. --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "I, Caligula Clinton... In the name of the Senate and the people of Rome!" - Bill Clinton signing the CDA with the First Amendment bent over.

1 0

Re: Cryptanalysis
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:55 PM 2/29/96 -0800, Timothy C. May wrote: >There are several places to look: Thanks for the sources. More money is going to get dumped into cryptobooks soon. (I am amazed how little exists on the web on the topic.) I had seen a few of the books at a local bookstore, but I was uncertain of their quality. (They also had a number of snake-oil crypto books.) >However, these books are based on work done in WWII and the following >decade(s), so the stuff is pretty dated. Still, nearly any "snake oil >crypto" system, such as it sounds like your friend is building, will likely >be far weaker than the ciphers the NSA was attacking back in the early >days. The author has failed to call me back. I do have some serious concerns about the code. (There is not a single XOR used, except to clear registers!) I am starting to suspect that it is based on a mathematical progression based on the numbers 40, 28, 36. I need to spend a bit of time on the code with a debugger to find out just where that segment of code is located. (Should not take too long... Just have to make the time.) >* The journal "Cryptologia" is largely devoted to amateur cryptanalysis. The web info for back issues listed a web page from a publisher that had no listing for them on the server. I will be sending mail to get more info... >>The Cyphernomicon has a couple of paragraphs, but nothing on >>techniques or pointers to other references. RSA's FAQ has >>little to nothing as well. A web search turned up little >>useful. Most of the other references I have found have been for >>current cyphers, but next to nothing about breaking them. > >There are very good reasons to say little about "conventional >cryptanalysis": it just doesn't matter much with modern ciphers, such as >public key systems. Modern ciphers don't fall to conventional attacks based >on word frequency, pattern analysis, etc. Still an interesting topic... >Your friend is on a hopeless task. If he doesn't understand just how >hopeless it is to develop a homegrown, conventional cipher then he's >certainly not likely to take the time to become a skilled amateur >cryptanalyst. I am trying to convince him of the futility of the task. (It is hard as his ego keeps getting in the way.) I just want to give him reasons why it is weak and not just glittering generalities. Thanks again for the book references! --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "I, Caligula Clinton... In the name of the Senate and the people of Rome!" - Bill Clinton signing the CDA with the First Amendment bent over.

1 0

Re: Netcom and Credit Cards
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > The "credit card numbers were stolen" point, that I believe Ed Carp was > referring to, had to do with the Mitnick affair, and is very old news. The fact that they had been stolen was mentioned in an edition of 2600 6 months before the Mitnick saga. Netcom had been told about the security breaches many times, but refused to acknowledge that their site was insecure. It was this arrogance that pissed people off more than their insecurity. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTm0vyoZzwIn1bdtAQFHgQGA2lxrjz1dzFmNmveG6yIhdc9xC3ghDr4h Q12sN3g9/s7uof66Q+bVBpIxsqbeJM0s =JckI -----END PGP SIGNATURE-----

1 0

Re: Truelly Random Numbers
by Gary Howland 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Timothy C May wrote: > In some PK code I did several years ago in Mathematica, the primes for the > RSA modulus were found by picking a "random" (more on this later) starting > point and then counting up from there, testing for primality (actually, > pseudoprimality, technically). As one would expect, primes are found fairly > quickly. Surely the process of counting up until you get a prime means that the chances of getting certain primes are greater than others (eg. 17 is more likely than 19) ? Gary - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTm2jCoZzwIn1bdtAQEIOwGAg9YkxQXKKS07ZVBvEfzTRaNcxMnZDUYa sfyzl2mr7UZ94AEoVyWgcsYQXvuFG1QK =fOGq -----END PGP SIGNATURE-----

1 0

Re: Assassination Politics 9!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Sun Mar 3 1996, Just Rich wrote: : On Sat, 2 Mar 1996, Black Unicorn wrote: : : > On Wed, 28 Feb 1996, jim bell wrote: : > : > > "Assassination Politics" Part 9, by Jim Bell, February 27, 1996 : > > : > > For about a year I have been considering the implications of "Assassination : > > Politics," and for more than six months I've been sharing the subject and : > > my musings with you, the interested reader. : > ^^^^^^^^^^^^^^^^^^^^^^^^^^ : > You're pushing it here. : : No he's not. "Reader" is singular, and Jim is on cypherpunks. Just because you two aren't interested, doesn't mean others aren't. Work is actually in progress in implementing such a system. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTnBWSoZzwIn1bdtAQF1zQF7BuwNLQ+C6ql4gUQi5FIaPmdpudvVHKjE K+HLZRrkUm7ziPXq0tGWecuBJ3ucD6lw =628g -----END PGP SIGNATURE-----

1 0

MTM_moi
by jya＠pipeline.com 17 Dec '03

17 Dec '03

EcoMist, March 2, 1996: "Many people believe that the Internet will make middlemen extinct. It is more likely to help them thrive." The Net's fans argue that it allows consumers to bypass intermediaries while increasing their choices and finding better bargains. One influential proponent of this idea is Bill Gates. Compelling as they seem, however, these arguments do not prove their case. Hal Varian, an economist at the UC Berkeley, claims there will be greater competition among intermediaries, and maybe many more of them. Instead of competing on the basis of inside information, those agents will compete by adding value in other ways. The Internet will put some intermediaries out of business, but it will create more work for others. And among these will be not only suppliers of familiar services, but also a new breed monitoring Internet sites, collecting news and information, and repackaging it -- folk, in other words, like Mr Gates. MTM_moi

1 0