December 2003 - cypherpunks-legacy

Re: (fwd) Import restrictions for crypto code
by alexlh＠xs4all.nl 17 Dec '03

17 Dec '03

On Fri, 17 Oct 1997, Alex Le Heux wrote: [snip] > ps. Lucky - what became of the "Brain"? Brian didn't come back to the US with Lucky as he wanted to develop strong crypto applications and did not want to have to contend with export restrictions. He currently has a desk in the offices of a major Dutch ISP, XS4ALL, so he is nice and close to the backbone and thus has great connectivity. Cheerio, Alex --- I dabble in techno-house and sometimes, I do that badass hip-hop thang... But the F U N K gets me every time!

1 0

Make 6 cents per click!!
by web-promotions＠nevwest.com 17 Dec '03

17 Dec '03

/////////////////////////////////////////////////////////////////////////////// This message is intended for ADULT WEBMASTERS ONLY. If you would like to be removed from future mailings simply click REPLY and type the word REMOVE in the subject line. //////////////////////////////////////////////////////////////////////////////// Pure Hardcore is now paying 6 cents per unique click!! - Get paid weekly!! - Make up to 6 cents per unique click. - Sign-up automatically, start sending hits immediately. - Track raw and unique hits in real time. - Shows current pay rate in real time. - Shows total $$ made in real time. - High quality uncensored banners. - Track an unlimited number of banners. Go to this URL for all the details and to sign-up: http://www.purehardcore.com/webmasters We are now selling our click-thru system!! If you are a pay-site webmaster and you would like to have your very own click-thru program with very little money up front, visit our page for details. Sign-up tracking available!! --------------------------------------------- Other Great Services We Offer: - Free Phone Sex Numbers - Live Sex Commission Programs - Streaming Live Video for Pay Sites - Extremely High Quality Images for Pay Sites http://www.purehardcore.com/webmasters

1 0

Marutukku - cryptographic filing system
by Julian Assange 17 Dec '03

17 Dec '03

Marutukku (my cryptographic file system/block device) is due for first beta sometime next week. Before release, I'd like some (strong!) criticism of the sub key generation / chaining techniques I'm using. But first, for those who haven't a frigging clue what Marutukku is, here is a hastily drawn non-cryptographic (more about that later) features list: o OS independent (excepting two files pertaining only to the kernel drivers) o Currently implemented as a 4.4bsd (Free/Net/OpenBSD) loadable kernel module, and client (I have someone working on the Linux port, but no promises). o The BSD implementation turns a file (even an NFS mounted file) into a device, on which any number of file systems types can be created in the regular manner (or even a swap partition ;) o Endian independent - Marutukku extents (the ciphertext regions) can be mailed around like .tar files o various backup/recovery/whole extent encryption/decrypt functions built into the client Marutukku supports a variety of ciphers, and the cipher used for the lattice (which is used to generate sub-keys for each file-system block) generation is independent from the cipher used for block functions. At the moment it only makes sense to talk of the lattice generator in terms of a stream cipher or a block cipher/hash algorithm in OFB. My design principles along the way have attempted as far as possible to cover as yet unknown vulnerabilities in the under-laying ciphers used with good management of IV's, salts, sub-keys, chaining etc. Some of these steps may pose no additional security in relation to certain attacks (i.e secret vs public IV's) on particular ciphers but most come at little cost compared to the encryption itself. Primary key/salt generation walk though: A pass-phrase of size (l) is requested from the user. max_keysize (256) public random key saltation bytes are generated and [saved]. (l) of these bytes then salt the key (XOR) (we don't use more than (l) to avoid any potential issues with key-correlation attacks as the salt is public). max_keysize cryptographically random bytes are produced to form the "master key". The salted pass-phrase is used to encrypt the master key, which is [saved]. The (unencrypted) master key is used to key a stream cipher (in this case that's rc4 or rc16) which is used for further key generation. Bytes [0] and [1] of the key stream output are saved for later use in creating a pass-phrase checksum (more about that later). Bytes [2] and [3] of the key stream are saved for later use in encrypting the number of stream-cipher key-generator iterations. The stream cipher is then set to stir its internal state for (t) seconds (a user supplied value). The number of iterations (i) is counted, the two LSBytes's from which are encrypted with [2] and [3] and [saved]. The reason we don't encrypt the MSB's is that they are are likely to be known-plain-text (all 0 bits to the left) which can be used for key-scanning checks. This has the annoying effect of reducing the uncertainty in the iteration count to 2^16, but I can't fathom a way around it without exposing bits of the stream output. Stream bytes [3+i] and [3+i+1] are XOR-ed with bytes [0] and [1] to provide a 16 bit key checksum and [saved]. The distance here serves to obfuscate any predictability in the key-stream generator and force the attacker though all (i) iterations to test each key (or if they are attacking directly on the internal state of the stream cipher at (i) to generate guesses at [0] as well). A public random key-salt for the two primary lattice keys are generated and [saved]. n * 2 (n=32 for a 4G file-system-block maru extent) public random sub-key lattice IV's are generated and [saved]. The public master block IV array salt is randomly generated and [saved]. Instance/Lattice generation: The saved maru saltation/IV header (above) is loaded, and the the pass-phrase is salted as before. The master key is decrypted and the key stream cipher is initialised, half the checksum is generated, the number of iterations decrypted, the generator stired, the other half of the checksum is generated and the checksum verified. The two primary lattice salts are encrypted with the key stream stream and form the primary lattice keys for the lattice fs-block sub-key generating block cipher. The n*2 lattice sub-key IV's are encrypted with the stream and form the lattice sub key array. The master block IV salt array is encrypted with the stream and forms the master block IV array. This ends the primary initialisation stage. Block key generation: The problem here is to turn a block number into a unique "sub-key" for each fs-block in such a way that frustrates possible key (or other) correlation attacks. i.e discovering the key for one block should not help the cryptanalyst in discovering the key for any other block. It is simple to generate a sub-key key-stream with a stream cipher or a block cipher operating in OFB, but storing such a construct is untenable and it is not efficient to generate on the fly (for instance, the first fs-block accessed might be the last in the maru extent, which would correlate to the last sub-key generated by the key-stream). The solution designed and employed is a binary tree based key generation approach, that can generate a cryptographically-unique block key in log2(max_blocks) steps. The author has thought of various variations on this scheme (e.g with two different cryptographic hashes, one moving left, one moving right), but see below for the variant used in Marutukku. It is simpler to visualise the sub-key generator tree "turned inside out" as a 2d lattice, two columns across and n rows down (this is also how it is implemented in Marutukku). i.e ______________________ |LEFT | RIGHT| |----------+----------| |L-SUBKEY 0|L-SUBKEY 1| |----------+----------| |L-SUBKEY 1|L-SUBKEY 2| |----------+----------| | .... | .... | |----------+----------| |L-SUBKEY n|L-SUBKEY n| |__________|__________| The journey from fs-block number to fs-block-key starts with the msb of the block number and the top of the lattice (we use the msb rather than the lsb for caching reasons. Using the lsb naively seems more secure but uncacheable, yet on closer examination, neither of theses claims are true (however the Marutukku lattice sub-key cache *performance* using lsb is poor due to the inverted clustering)). As each bit slides off the left of the block number, key material is picked up from the left or right of the lattice according to whether the bit is on or off. Each lattice sub-key chosen is encrypted with the next (CBC wise, but lattice sub-key size, rather than cipher block size) at the top of the lattice and twines it's way down to the end, collecting key-material as it goes. The result is a unique compressed (i.e its the CBC chaining performing the compression) "necklace" of key material which forms the appropriate fs-block key. FS block encryption: Each plain text block in the fs-block is XOR-ed with the corresponding entry in the master block IV array and then CBC encrypted. In effect, each cipher block has two IV's. The first block, which lacks any cipher text from previous blocks to chain with, uses the block number XOR-ed with its master block IV entry. The rational behind this is that we have the benefits of CBC's error-recovering abilities without it's major drawback (and it is certainly not alone here among major block cipher modes) - that is, find the key for (cipher) block 0 and the attacker can successfully decrypt every other block that (CBC wise) follows it. Comments? -- Prof. Julian Assange |If you want to build a ship, don't drum up people |together to collect wood and don't assign them tasks proff(a)iq.org |and work, but rather teach them to long for the endless proff(a)gnu.ai.mit.edu |immensity of the sea. -- Antoine de Saint Exupery

1 0

STOP Bad Breath Causing BACTERIA!!!
by biqa＠uspacmall.com 17 Dec '03

17 Dec '03

====================================================== We honor all remove requests; reply with REMOVE in the subject. ====================================================== EXPERIENCE!!! AN INCREDIBLY FRESH, CLEAN, SWEET AND ODOR FREE BREATH!!! ================================== KISS YOUR BAD BREATH GOODBYE NOW AND FOREVER!!! ================================== Also ELIMINATE the bitter taste and foul odor of MORNING BREATH!!! IMAGINE YOUR BREATH.....so CLEAN, FRESH, KISSING SWEET and ODOR FREE that you are EAGER to approach people anytime, anywhere with the FULLEST CONFIDENCE! AT LAST!!! An immediate, effective, tangible, economical and permanent SOLUTION for the CLEANEST, FRESHEST, SWEETEST AND ODOR-FREE BREATH you've ever experienced... ========================================== WHEN SWEET BREATH MEANS EVERYTHING!!! ========================================== For more about the causes and instant cures of bad breath, latest medical research, and the NEW and INCREDIBLY EFFECTIVE Oral Hygiene product, BAD BREATH TERMINATOR, visit our FULL-COLOR ANIMATED WEB SITE now at: http://www.uspacmall.com/breath ================================= If this site is busy, email us at uspac(a)uspacmall.com for the location of our other web site. OR SCROLL DOWN FOR MORE INFO... ======================= HOW IS YOUR BREATH? ======================= --> Do you shy away from meeting people because of your breath? --> Do you experience isolation and a diminished quality of life? --> Does bad breath still persist even after you've tried every known breath spray, breath mint, mouthwash or internal capsule on the market? Bad breath is no joke to those who have it. In fact, it can be a source of EMBARRASSMENT and SHAME. ================= THE GOOD NEWS ================= Doctors and Dentists used to believe the source of bad breath was the digestive system. Research has shown this is SIMPLY NOT TRUE! Actually, the good news about bad breath is that -- in 9 out of 10 cases -- it originates in the mouth, and this type of bad breath is CURABLE! AT LAST!!! One of life's more embarrassing problems has THE PERFECT SOLUTION!!! ========================================== INTRODUCING THE BAD BREATH TERMINATOR: THE PERFECT SOLUTION!!! ========================================== IMMEDIATE...cleans bad breath away completely STARTING FROM YOUR VERY FIRST USE! EFFECTIVE....completely different from any spray, mouthwash or capsule because it doesn't cover your breath, IT EFFECTIVELY ELIMINATES THE VERY SOURCE OF YOUR BAD BREATH!!! * It effectively SCRAPES AWAY and terminates the offensive FOUL ODOR generating EVIL BACTERIA, the coating of WHITE PLAQUE and DECAYING FOOD PARTICLES from the ridges and valleys on the back of the tongue. * YOU MAY NEVER HAVE BAD BREATH AGAIN!!! ECONOMICAL...use it over and over. Lasts for months. NOTHING MORE TO BUY! It COSTS you ONLY $9.98 per set of 2! PERMANENT...use daily as part of your regular oral care for CONTINUOUS FRESH, CLEAN BREATH ALL DAY! This NEW and INCREDIBLY EFFECTIVE Oral Hygiene Product, BAD BREATH TERMINATOR provides an Immediate, Effective, Tangible, Economical and Permanent SOLUTION for the CLEANEST, FRESHEST, SWEETEST breath you've ever experienced!!! ========================================================== For more about the causes and instant cures of bad breath, latest medical research, and the Incredible BAD BREATH TERMINATOR, visit our FULL-COLOR ANIMATED WEB SITE NOW at: http://www.uspacmall.com/breath ================================= If this site is busy, email us at uspac(a)uspacmall.com for the location of our other web site. Thank you for your time. Susan #

1 0

Non-conventional
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May implied that Cpunx should develop non-conventional email. Crypto has been declared to be munitions. Nukes are non-conventional weapons. Should we be developing nuclear email? Should we 'email-nuke DC?" Prespiring minds want to know...

3 2

Import restrictions for crypto code
by Jerry R. Brady 17 Dec '03

17 Dec '03

First, I was at hip, met some of you, camped behind the cypherpunks tent and had a blast. I'm not on the list anymore (couldn't keep up) but have a quick question which I know someone can post a quick answer back to me directly. I'd appreciate it. We have an RC540/RSA512/MD5 crypto package our customers use for the secure exchange of CAD data files with some of the automotive industry OEMs - It is a very lucrative store-and-forward system. We have a customer in Italy and I need to know if there are any import restrictions for sending the software there. We already have a GSN exemption because the international code is whimpy. Perhaps there is also an on-line resource that covers what countries have import restrictions? Any help would be appreciated, please mail directly to me. Regards, Jerry ps. Lucky - what became of the "Brain"? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Jerry R. Brady jrb(a)autoweb.net Technical Director (v) 248.967.3738 AutoWeb Communications, Inc. (f) 248.967.3739 -=- PGP5 key at pgpkeys.mit.edu or via e-mail -=-

1 0

Left Brain / Right Brain QUESTIONAIRE
by stargazer＠force2.net 17 Dec '03

17 Dec '03

_________________________________________________ L E F T B R A I N / R I G H T B R A I N - QUESTIONAIRE _________________________________________________ My name is Gregory Raymond and I believe you are someone who is interested in a successful lifestyle. By this I mean a balance of physical, mental, spiritual and financial success. If we are of a like mind, I thought you might be interested in taking the following brief, revealing quiz. Simply [hit reply] then place an "X" in the appropriate boxes where applicable, and send it to us. I know and understand there are two parts to my mind, conscious and sub-conscious (aka unconscious) Yes [ ] - No [ ] - Maybe [ ] - Didn't Know [ ] I know the sub-conscious part of my mind labors 24 hours a day (without sleeping) for my success or failure, without making any moral judgements. Yes [ ] - No [ ] - Maybe [ ] - Didn't Know [ ] I realize that by taking control of my subconscious mind, it's energy can be harnessed to accomplish whatever I desire. Yes [ ] - No [ ] - Maybe [ ] - Didn't Know [ ] I might be interested learning more about using my subconscious mind to attain a successful balance of physical, mental, and financial success. Yes [ ] - No [ ] - Maybe [ ] [ ] You have piqued my curiosity, and without any obligation, I would like to learn more about achieving mental, physical and financial success. [ ] I'm not interested in this ridiculous survey, and with my CONSCIOUS MIND, I think that you're "Full Of It". Take me off your list and never darken my E-Door again. Thank you for your time. Regards, Gregory Raymond P.S. You may visit our site at: http://www.savoynet.com/carrmond/esoteric/master.htm to check on survey stats, they are updated after each mailing.

1 0

Freeh letter to NYT
by Roger Schlafly 17 Dec '03

17 Dec '03

[From www.nytimes.com, Oct. 16, 1997] To the Editor: "An Attack on Privacy Rights" (editorial, Oct. 3) argues that the approach to encryption that the law enforcement community is advocating has somehow "put the need to eavesdrop on criminals above the privacy rights of ordinary Americans." Nothing could be further from the truth. You fail to mention that the same court-ordered, judicially approved procedures that now apply to wiretaps and electronic data searches would also apply to our ability to obtain decryption keys or information. In fact, what we proposed requires two orders from a judge before we proceed, not just one as now required. There is another issue that, if unaddressed, will have public safety ramifications. Encryption that cannot be deciphered regardless of the number of court orders or new technologies obtained by the police will devastate our ability to fight crime and prevent terrorism. It will nullify the ability to carry out court-authorized searches and seizures of criminal communication and electronic evidence. Policy decisions about encryption should not be left solely to market forces. Congress, the computer industry and law enforcement can work together to craft legislation that balances the public safety with the commercial and private needs of law-abiding Americans. We are not wedded to any particular solution, but feel that some workable solution can be found to insure that law enforcement can gain immediate access to the plaintext of encrypted criminal communication or electronic data that we have lawfully seized. LOUIS J. FREEH Dir., Federal Bureau of Investigation Washington, Oct. 10, 1997 ---------------------------------------------------------------- How can he say this with a straight face? >In fact, what we proposed requires two orders from a judge >before we proceed, not just one as now required. The DOJ proposal, sect 302, says: (A) A Key Recovery Agent, whether or not registered by the Secretary under this Act, shall disclose recovery information stored by a person: (1) ...; or (2) to a law enforcement or national security government agency upon receipt of written authorization in a form to be specified by the Attorney General. It also contradicts his final sentence: >... some workable solution can be found to insure that law enforcement can >gain immediate access to the plaintext of encrypted criminal communication >or electronic data that we have lawfully seized. The term "immediate access" means without having to goto a judge. Roger

2 1

what is purpose of CMR?
by Adam Back 17 Dec '03

17 Dec '03

This is a question which I am unclear on about PGP Inc's design goals in using the CMR method. Is the CMR field to allow the company to recover from the user forgetting his password? (recover his mail folder full of encrypted email). or Is the CMR field to allow the company to read the email in transit This seems like a fairly important distinction. Adam

2 2

SSZ Down hard today... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From ravage(a)ssz.com Fri Oct 17 20:10:35 1997 From: Jim Choate <ravage(a)ssz.com> Message-Id: <199710180110.UAA00156(a)einstein.ssz.com> Subject: SSZ Down hard today... To: users(a)ssz.com (SSZ User Mail List) Date: Fri, 17 Oct 1997 20:10:34 -0500 (CDT) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 1389 Hi Folks, Not shure exactly why, doesn't seem to be related to the OS or hardware, but you obviously are aware that SSZ had some serious problems this afternoon. I suspect (wild guess at best) that it was power related in some way. Anyway, I'll be watching it all weekend. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Deliverable Mail
by 74916810＠juno.com 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000"><FONT COLOR="#00FFFF" SIZE=3> ///////////////////////////////////////////////////////////////// CREDIT CENTER***CREDIT CENTER***CREDIT CENTER***CREDIT CENTER \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ If you received this electronic mailing by mistake, please pardon the intrusion. Dear Friend; Are you or somebody you know experiencing credit problems? If the answer is yes, our special offer might be just the cure you have been looking for. No longer will you have to live like a second class citizen due to a bad credit report. Bad credit can happen due to a variety of reasons and can happen to anybody. There is no profile of a person with credit problems, it can happen to anybody. In fact, one in three Americans live with some form of bad credit. Fortunately, the United States Government has passed many laws under the Fair Credit Reporting Act, all of which protect your rights as a consumer. Our manuals will show you how to use these Federal Laws to your advantage to repair your credit, obtain a new credit report or add good credit to your credit report! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ ***** 'THE FRESH START PROGRAM II' (TM) ***** Have you recently been denied credit due to a bad credit report? Have you seen your credit report lately? If your answered yes, then you need to take advantage of the 'FRESH START PROGRAM II' (TM) NOW! This manual is unique in that it shows you how to obtain a brand new Social Security number which will allow you to open a brand new, fresh credit report. Using guidelines set forth by the Social Security Administration, this easy-to-follow manual will guide you through the steps necessary to obtaining your new Social Security Number. Regardless of your present credit, you can open a new credit file free of ANY judgements, charge-off's, foreclosures, bankruptcies, bad credit, tax liens's, garnishments, late pays and inquiries. //////////////////////////////////////////////////////////////// ***** THE 'WorldCard' (TM) INSTANT CREDIT Credit Card ***** This program is very simple. It extends to you a $5,000 instant line of credit in the exclusive 'WorldCard' (TM) Wholesale Purchasing Club. This credit card comes to you with absolutely NO credit checks! You will receive the 'WorldCard' (TM) Wholesale Purchasing Club catalogs with over 5,000 items to choose from. Jewelry, toys, tools, gift items, housewares and much more are available. After your first purchase, each quarter you will receive updated catalogs with brand new items available. You will be required to make a small down-payment with your orders and then make a monthly payment of 10% of the unpaid balance. It's just that simple! Your good credit with WorldCard will be reported to the credit bureau's, which will show your excellent credit! As a special BONUS, if you take advantage of this offer within the next 24 hours, you will be given $200 in cash certificates! $100 may be used on the first $300 unpaid balance and the other $100 may be used after you have charged $600 on your new account. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ ***** 'STOP COLLECTION AGENCIES COLD' (TM) ***** If you have ever experienced the humiliation of a collection agency calling you at home or at work, then this hard-hitting manual will put an IMMEDIATE stop to those calls! Millions of collection agency telephone calls and letters are made or sent each week to those who owe money. Consumers have been helpless to stop the harassment of these predators, UNTIL NOW! This manual will show you how to put an end to these telephone calls and letters, INSTANTLY! At the same time, these collection agencies will be forbidden to EVER call or write you again!! This manual has the inside secrets the credit world does not want you to have! Gain back your self-esteem and piece-of-mind by ordering 'Stop Collection Agencies Cold' (TM) TODAY!!! ///////////////////////////////////////////////////////////////// ***** 'THE COMPLETE CREDIT REPAIR KIT' (TM) ***** Good credit empowers you to qualify for personal loans, automobile loans, business loans, credit cards, home loans and other types of credit you may apply for at the very best interest rate. As you know, if you don't have excellent credit, lenders will NOT extend credit to you! The Fair Credit Reporting Act will allow you to legally and permanently ERASE the negative information on your credit bureau file. Anything damaging to your credit, such as bankruptcies, judgements, tax liens, slow pays, repossessions, charge off's, foreclosures, late payments, student loans and inquiries may be permanently and legally REMOVED from your credit report! If bad credit on your credit file is standing in the way of your achieving the American dream, then order 'The Complete Credit Repair Kit'(TM) NOW!!! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ IMS 5201 Kingston Pike, Suite 6-216 Knoxville, Tennessee 37919 YES, please rush the manuals checked below: _____ 'The Fresh Start Program II' (TM) $34.95 _____ 'WorldCard' (TM) Credit Card $34.95 _____ 'Stop Collection Agencies Cold' (TM) $34.95 _____ 'The Complete Credit repair Kit' (TM) $34.95 _____ TAKE ALL FOUR (SAVE over $39) $99.95 $____________ Sub-Total $4.95 Shipping & Handling for each manual ordered $15.00 RUSH Delivery (Optional) $____________ TOTAL ENCLOSED I Have Enclosed (Check One): _____ Cashiers Check _____ Money Order _____ Personal Check _____ FAX ORDER SHIPPING INFORMATION: Name:__________________________________________________ Address:________________________________________________ City:_______________________State:________Zip Code:_________ Telephone Number:___________________ Your E-Mail Address (For order confirmation):___________________ //////////////////////////////////////////////////////////////// FREE - FREE - FREE - FREE - FREE - FREE - FREE - FREE Fax your order within 24 hours and receive a special Kodak film book entitling you to 100 rolls of Kodak film as well as five 6X10 and ten 4X5 enlargements FREE! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Please tape your signed personal check in the space below and fax to IMS. The 24 hour facsimile number is 1-423-681-6520. ****************************************************** FAX 1-423-681-6520 Please TAPE Your Check Here Please SIGN Your Check ****************************************************** THANK YOU For Your Order!!! </FONT><FONT COLOR="#000000" SIZE=3>

1 0

MonkeyWrenching Monitoring
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I share and/or swap my email accounts with others on a regular basis, particularly at times when I can verify I was somewhere other than where the account was logged onto. I do the same with non-essential crypto keys, etc. This sharing, in many legal jurisdictions, turns your accounts into a 'public street', so to speak, meaning that any 'tracks' left behind don't necessarily lead to your own doorstep in a legalistic sense. A word of caution: If you don't have access to *good* legal services, the above methods may work against you, if push comes to shove. MonkeyMonger

1 0

CMR Monkeywrenching Itself
by Anonymous 17 Dec '03

17 Dec '03

a0a1a2a3a4a5a6a7a8a9 b0b1b2b3b4b5b6b7b8b9 ... z0z1z2z3z4z5z6z7z8z9 If you send the above message repeatedly, changing a single character at a time, in increments (X0a1a2.../aXa1a2...) some interesting things happen to messages encrypted to two keys, especially if they share a one-time pad. These 'interesting things' are wonderful tools for prying open the secrets of a foreign key, using what you already know about the key you are in possession of. If you happen to be working with an encryption program that unwitting allows you to access the one-time pad it is using (or to *supply* the one-time pad it uses), then you can crack secret keys during your lunch breaks and still have time to complete a level of Doom before it is time to get back to work.

1 0

Free Adult Content For Your Web Site!
by IP-Administrator＠sexlink.net 17 Dec '03

17 Dec '03

Pardon our intrusion, this is a message for adult webmasters. to be removed from this list send a blank e-mail to mailto:remove@sexlink.net ***************************************************************************** ----------ADD FREE CONTENT TO YOUR ADULT WEBSITE TODAY---------- Sex Link Network has just turned on the FREE web content site! You now have the opportunity to add new and exciting content to your adult website. Offer your visitors the following FREE services: Digital Postcards - Both Straight & Gay Available Personals On-line - Both Straight & Gay Available Chatterbox Hotel "The best Chat on the net" - Both Straight & Gay Available Just register with us and you can provide your visitors with new dynamic content. All content programs are served from Sex Link Networks fast computers on T3 dedicated backbones. There is no bandwidth usage on your side. Check out our content and register today! http://services.sexlink.net

1 0

index.html
by Jim Choate 17 Dec '03

17 Dec '03

CNN logo Navigation Infoseek/Big Yellow Pathfinder/Warner Bros Tech banner IBM Reinventing Education rule GOVERNORS WARN COLLECTING INTERNET TAXES WOULDN'T BE EASY Internet taxes October 17, 1997 Web posted at: 11:12 p.m. EDT (0312 GMT) WASHINGTON (AP) -- The nation's governors and local officials, already having difficulty collecting taxes on catalog sales, said Friday a bill aimed at restricting new taxes on the Internet would worsen their problems. "It's very similar," Republican Gov. George V. Voinovich of Ohio said at a press briefing. "We've had an ongoing problem in terms of how to handle that. We've been continuing to try and work that out with those businesses in the states that have the large mail-order catalogs." The National Governors' Association estimates states lose $4 billion in sales taxes annually from catalog sales. That's because states, cities and counties generally lack the authority to capture sales taxes on such sales if the catalog business is headquartered out of state. That problem could only intensify based on the projected growth of electronic commerce. Voinovich cited one estimate of $1.5 trillion in sales on the Internet by 2002. "I don't think this is the time for the federal Congress to rush into something that will have such a huge impact on state and local government," he said. Joining Voinovich to oppose the Internet tax bill were leaders from the National Association of Counties, National League of Cities and U.S. Conference of Mayors. Rep. Chris Cox, a Republican from California, and Sen. Ron Wyden, an Oregon Democrat, have sponsored similar bills that would bar any new taxes on computer transactions -- such as taxes on Internet access or online services -- for an unspecified time while Congress studies the whole issue. The bill would make an exception to the moratorium for income earned through an Internet service; local business license taxes, if the Internet provider is located within the appropriate jurisdiction; and sales or use taxes, so long as they are the same as charged for mail or telephone orders. "We would love to have the bill say what the sponsors say it says," said Brian J. O'Neill, a Philadelphia city councilman, representing the National League of Cities. But O'Neill and others say the technical language of the bill contains a broad pre-emption of state and local taxes. Wyden spokesman David Seldin strongly disagrees. "We have bent over backwards to clarify language of the bill so there can be no questions" that local governments retain authority to levy the same taxes on the Internet that are assessed on catalog sales, Seldin said. The bill seeks to halt new local taxes aimed specifically at Internet businesses. One National Governors' Association official said the bill's wording would worsen the states' problem of collecting sales taxes on catalog sales. "We know that we have to sit down with the industry and make the sales tax work on Main Street, on catalogs and on Internet, in some simplified, clear and technologically neutral way," said Tim Masanz of the association's economic development group. "If Congress goes on record and says that Internet sales are the equivalent of catalog mail-order sales, those talks are doomed," he added. "I can understand their desire to fight that battle but it would certainly not do much good to create a situation where you are favoring one at-home purchase over another," said Seldin. Copyright 1997 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed. rule Related story: * House panels back Internet taxation bill - October 9, 1997 Related sites: Note: Pages will open in a new browser window * THOMAS - Legislative Information on the Internet + HR 1054 - Internet Tax Freedom Act * U.S. House of Representatives + Commerce Committee + Judiciary Committee * National Governors' Association * National League of Cities External sites are not endorsed by CNN Interactive. _________________________________________________________________ Infoseek search ____________________ ____ ____ _________________________________________________________________ rule Watch these shows on CNN for more sci-tech stories: CNN Computer Connection | Future Watch | Science & Technology Week rule Message Boards Sound off on our message boards You said it... [INLINE] IBM Reinventing Education rule To the top © 1997 Cable News Network, Inc. All Rights Reserved. Terms under which this service is provided to you.

1 0

A quote...
by Jim Choate 17 Dec '03

17 Dec '03

The politics of those whose goal is beyond time are always pacific; it is the idolaters of past and future, of reactionary memory and utopian dream, who do the persecuting and make the wars. Perennial Philosophy Aldous Huxley ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

LJFLJF
by Six 17 Dec '03

17 Dec '03

Lying Nazi Fuck Freeh wrote: > Subject: Freeh letter to NYT > [From www.nytimes.com, Oct. 16, 1997] > > To the Editor: > > "An Attack on Privacy Rights" > (editorial, Oct. 3) > argues that the approach to encryption that the law enforcement > community is advocating has somehow "put the need to eavesdrop > on criminals above the privacy rights of ordinary Americans." > Nothing could be further from the truth. How about the fact that you are the director of an organization that actively sought to sabatoge the civil rights movement by, among other things, encouraging Martin Luther King to commit suicide? Is that close enough to the truth for you? > You fail to mention that the same court-ordered, judicially > approved procedures that now apply to wiretaps and electronic > data searches would also apply to our ability to obtain > decryption keys or information. No they wouldn't you lying, scumbag, Nazi piece of shit. You are *already* doing these things without *any* type of legal authority to justify your criminal actions, and will continue to do so? > Encryption that cannot be deciphered > regardless of the number of court orders or new technologies > obtained by the police will devastate our ability to fight crime > and prevent terrorism. Right. You can't find airplanes containing tons of drugs, you can't keep drugs from being sold on the streets and in schoolyards, you claim to have a list of all of these *known* pedophiles, but yet they are all running free, even though you know about them. This, despite all of the fascist, unconstitutional powers you have stolen from the citizen's right to freedom and privacy. Yet you have the fucking nerve to suggest that giving LEA's the ability to monitor all of our private communications, at will, is going to stop crime. Buy a fucking clue, shit for brains. All of the parts of the Constituion you have trampled underfoot, claiming you needed this to fight drug dealers, has resulted in the lowest street prices for heroin in decades. I'll make you a deal. If you can get the street price of a gram of cocaine up to $300.00 a gram, using your current fascist, unconstitutional powers, I'll support you getting the rest of the citizens' rights under your jackboots. > It will nullify the ability to carry out > court-authorized searches and seizures of criminal communication > and electronic evidence. No. It will nullify the ability to carry out UN-authorized searches and seizures of non-criminal communications. > We are not wedded to any particular > solution, but feel that some workable solution can be found to > insure that law enforcement can gain immediate access to the > plaintext of encrypted criminal communication or electronic data > that we have lawfully seized. Are the keys to the privacy of every living being on earth going to be kept on the FBI computer system that was hacked, the CIA computer system that was hacked, the DOJ computer system that was hacked...? So that corporations know whether to support your plans for Government Access to Korporate bungholes, would you please publicize a list of *which* corporations you have defrauded and brought to financial ruin by accessing and manipulating their financial data and assets because you disagree with their actions? How about a list of the corporations that you plan to do this to in the future? Oh...never mind. I forgot that today's allies are tomorrow's enemies, and vice-versa, so I guess that *any* corporation could be a future target of government attack. How do you brazen, Nazi cocksuckers find the audacity to announce to God and everybody that you are fucking over people and nations around the world by inserting bad mechanical parts into the supply system, trashing the finances of individuals and companies around the world that you have a hard-on for (today), that Swinestein has put the vote on encryption issues that the citizens gave her, into *your* hands, and then tell the citizens they can expect to be more 'secure' if they give you dictatorial powers over all of their communications and data? Who will be in control of access to the whole world's communications and data? Will it be the FBI guy who just went to jail for destroying evidence and perverting justice? Will it be the DOJ people who ruined the INSLAW corporation in order to STEAL their software? Or the DOJ people who subverted justice by defying our elected leaders in Congress during their investigation? Tell us, Lying Jackoff Fuck Louis J. Freeh... *Which* of the LEA officials who commit criminal acts and subvert justice in the US will be in charge of access to the citizen's right to privacy and freedom from fascist search and seizure. Bonus Question: "How many bodies does it take to spell, 'I *TOLD* you I was crazy!" Bonus Prize: 1 Freeh Bullet 6ualdv8 ~~~~~~~ > LOUIS J. FREEH > Dir., Federal Bureau of Investigation > Washington, Oct. 10, 1997 > > ---------------------------------------------------------------- > > How can he say this with a straight face? > > >In fact, what we proposed requires two orders from a judge > >before we proceed, not just one as now required. > > The DOJ proposal, sect 302, says: > > (A) A Key Recovery Agent, whether or not registered by the Secretary > under this Act, shall disclose recovery information stored by a person: > (1) ...; or > (2) to a law enforcement or national security government agency > upon receipt of written authorization in a form to be specified by > the Attorney General. > > It also contradicts his final sentence: > > >... some workable solution can be found to insure that law enforcement can > >gain immediate access to the plaintext of encrypted criminal communication > >or electronic data that we have lawfully seized. > > The term "immediate access" means without having to goto a judge. > > Roger

1 0

Been tried before?
by Andrew Wiggin 17 Dec '03

17 Dec '03

I had an idea for a key system using graphics files. Has that been tried before? The basic idea was to use a graphics file with a color depth of 24-bit or higher. Then, using the rgb values of, say, every prime pixel (i.e. the first pixel, then the second....then the seventh, then the eleventh) or something like that to create a stream of numbers the feed into the cipher which would be highly erratic. A similar looking picture would not work, as the rgb values would be (I assume) hard to guess, and even if you came close, you would have to get the right order. If you used a graphics file format similar to PNG, for instance, you could even include alpha channels. Am I just shooting my mouth off, or does this sound like something that would work? I'm wondering if this has been tried before and if it would be worth programming out. --Drew ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Re: Security flaws introduced by "other readers" in CMR
by Greg Broiles 17 Dec '03

17 Dec '03

Adam Back writes: >You have a dual concern: you are trying to protect against big brother >and against little brother. At the technical level, is there a meaningful difference between the brothers? Aren't we really talking about third-party access to communications, and second-party access to stored data ... with the "brother" distinction being one made at a social/political level, as a judgement about the legitimacy of the access or the size of the actor, rather than the character of the access? -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

6 10

No Subject
by Mix 17 Dec '03

17 Dec '03

Timmy C. Mayonnaise carries a turd in his wallet for identification purposes. n ___ n H /. .\ H Timmy C. Mayonnaise nHnn . nnHn <U U/ o \U U> / /\___/\ \

1 0

Re: OUBAKAYAROU!! (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 17 Oct 1997 18:25:39 -0700 > From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: Re: OUBAKAYAROU!! > > Meanwhile, there is a cypherpunks-j(a)htp.org, in Japanese, > and there's probably still a cypherpunks-e(a)htp.org in English, > though the last time I checked it, it had been > mostly a mirror for the cypherpunks list with almost no independent content, > and its mail gateway broke badly and splattered all over its subscribers. What is your problem Bill regarding cypherpunks-e you've made accussatory comments regarding that list a couple of times now? It is simply another member of the CDR just like SSZ or algebra.com - is your claim that each of these has their own indipendant content? If so, catch a clue and realize they don't unless their broke somehow and quit forwarding. If somebody on cypherpunks-e submits something it gets gatewayed through SSZ (and hopefuly others by now) just like traffic from one of the other member remailers. I wanted to gateway cypherpunks-j as well but we decided folks might get confused if there were something other than english on here. And considering both the -e and -j are in Japan, new, and relatively unadvertised does it really suprise you that they don't have a lot of English based traffic from that end? You must be the one(s) who keeps subscribing and unsubscribing to the 3 US remailers from a variety of (forged?) aliases in the hopes of carrying on the 'moderation experiment' meme. Or perhaps your hope is to catch one of us down and claim we're filtering because the traffic didn't show up from three different sources. I can't speak for the other CDR operators but I can say that SSZ cache's all mail originating on this end and sends it out to the other remailer sites as soon as we come back online. So nothing gets missed from SSZ. My internet provider is supposed to be cache'ing incoming mail to SSZ if we go down and I hope the other remailers also cache their mail as well. If not, oh well, I 'm not going to miss any sleep over it. Just in case you missed it the other day, I believe Igor has started gatewaying a new remailer as well because I saw a 'Test' message from a cypherpunks mailing list I didn't recognize as one of the known remailer hosts. If so that means we're at 5 remailers in the network. One of them in Japan, which meets at least one of our goals to get a remailer node outside the US. This is a GOOD thing. My offer to gateway the CDR to any site that requests the subscription stands. So, if you are operating a remailer with only a single feed point and that point is not currently SSZ please send me email and I'll add your site to my re-send list. As to cypherpunks-e, one of the other CDR sites should consider adding them to their re-send/subscription list. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| ps Regarding SSZ's downtime yesterday, at this point don't have a clue why the system crashed without warning and then cored when it came back up. Once I got home and did a hard reboot it has worked without a glitch. Though we still have intermittent droppages of the ISDN link lasting 1-5 minutes. I have turned in another trouble call to SWBT in the hopes of them fixing it. That makes the 5th ISDN trouble ticket in 4 weeks. I think SWBT gets lonely if I don't call them at least once a week or else their field folks really have forgotten how to write...

4 4

$1,000,000 For Christmas
by emailing＠tnlb.com 17 Dec '03

17 Dec '03

Just in Time For Christmas - $1-Million Dollar Bills - Look Like The Real McCoy Super Gift For the Hard-To-Shop-For on Your Christmas Shopping List Great Stocking Stuffer Only $5.00 each - Three For $10.00 To Order, Call 317-885-1357 Visa & MC Accepted. *Dealer Inquiries Welcome If you wish to be removed from future mailings, please reply with the subject "Remove".

1 0

ISDN status - Intermittent (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From ravage(a)ssz.com Sat Oct 18 09:57:09 1997 From: Jim Choate <ravage(a)ssz.com> Message-Id: <199710181457.JAA02252(a)einstein.ssz.com> Subject: ISDN status - Intermittent To: users(a)ssz.com (SSZ User Mail List) Date: Sat, 18 Oct 1997 09:57:08 -0500 (CDT) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 1548 Hi, Just talked to SWBT and they apparently show the ISDN line as disconnected. Upon further digging at my request they determined that indeed there had been some sort of cable throw yesterday. They issued me a trouble ticket number and will check the line. Considering the intermittent nature of the drop my suspicion is a bad punch-down. If this is so we should see the line stabalize sometime this afternoon. More as I learn it. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Very important ! global minutes?
by newsglob＠tnlb.com 17 Dec '03

17 Dec '03

MAKE SURE YOU ARE GETTING ALL THE MINUTES BEING GENERATED TO YOUR NUMBERS NOT JUST U.S. TRAFFIC!! CHAT LINES FOR YOUR SITE OR ADVERTISE IN NEWSPRINT Best customer service for your audiotext advertising needs. Fill out the form here: http://www.stsim.com/mdc/info/home.html Don't just stick with one service bureau ! you might not be getting paid for all your global minutes ,most service bureaus are paying you just for your U.S. traffic and keeping the rest this is how service providers make the most of their profit. PAYOUTS ARE ON THE 1st AND ON THE 15th OF EVERY MONTH..... NUMBERS MUST BE DISPLAYED ON YOUR FRONT PAGE FOR BEST RESULTS!!!! Top rates for 011- 592 / 1- 664 / 1- 809 / the international pay-per-call industry is bringing in millions upon millions each year. Get in on the the 1+ dialing prefixes and watch your revenue increase. Advertise by mass emailing, tv, web site, newsprint, magazine in any country!!!! You the advertiser will get a flat rate paid to you for every minute generated on your line(s). Your ad could look something like this. -------------------------------------------------------------------------------------------------------------- The internet's all new interactive date line talk to people live or just listen in call now! 1-664-410-3348 Regular Long Distance Only. --------------------------------------------------------------------------------------------------------------- Talk to Hot Ladies Now! 1-644-410-3349. --------------------------------------------------------------------------------------------------------------- People looking to meet people call now 1-664-410-3350. ---------------------------------------------------------------------------------------------------------------

1 0

Re: Is PGP still private?
by Kent Crispin 17 Dec '03

17 Dec '03

On Sat, Oct 18, 1997 at 08:48:56AM +0100, Adam Back wrote: > > Jon Callas <jon(a)pgp.com> writes: [...] > > My reasoning is this: as PGP Inc can not justify expense on such > developments, my CDR proposal would be much safer for them to > implement because it requires no steganography support, or other > privacy patches to provide protection against abuse of the software > for uses other than PGP Inc's designers intentions. You keep talking as if your CDR proposal is other than vaporware. So far as I have seen you don't have a proposal, you have a wish. [...] > > You are in error. The only time that you are forced to use CMR is when (1) > > you share the CMRK with the other party AND (2) the strict flag is set. In > > all other cases, you can opt-out, on a message-by-message basis. [...] > However I simply posit that if you live in a scenario where everyone > you would like to communicate is forced to operate under your > combination: for example the local laws state all businesses and ISPs > insisting that they use pgp5.5 policy enforcer and turn on strict > flag. > > This possibility seems to be being discounted as unrealistic, or at > least as being optional, because you can by pass it. It does seem rather unrealistic. It would essentially involve replacing the entire email infrastructure, at a significant cost, and a rather sweeping suite of further laws that restrict the use of encryption to only PGP, forbid me running sendmail on my linux box, etc, etc > I can not see that being able to by pass it helps you in my scenario > if a) you will be detected when you do bypass it because the law > enforcers will discover they can't recover plaintext; This implies a law against using any other form of crypto, period. If such a law is passable the exemption for PGP's protocol will really be immaterial. That is, Yes, under an extremely draconian regieme, extremely draconian things are possible. "Tinpotdictatorsville" is not a useful counterexample, because the TPD can mandate anything, including no use of crypto at all. > and b) you have > a "choice" of not being able to communicate with anyone, because in > practical terms you have a need to communicate. Implies that *all* other forms of communication have been outlawed. Completely unrealistic. Adam, it is a complete and utter waste of time to debate this. What would *not* be a waste of time would be more concrete proposals. Whether PGP implements something is a separate question -- I would like to get back to the question of designing a better email encryption system. Your reencryption scheme fails because of the management of the short term encryption keys, among other things. Here's another approach I will toss out, without thinking through: How about formalizing superencryption, or tunneling? That is, treat CMR traffic as a transport medium for messages that are themselves already encrypted. The "key" idea here is to allow layering of non CMR traffic over CMR traffic. All the code for both is obviously already in PGP, with a little glue and perhaps some minor protocol mods... -- Kent Crispin "No reason to get excited", kent(a)songbird.com the thief he kindly spoke... PGP fingerprint: B1 8B 72 ED 55 21 5E 44 61 F4 58 0F 72 10 65 55 http://songbird.com/kent/pgp_key.html

3 3