December 2003 - cypherpunks-legacy

WARNING: IGNORE ANY RECENT POSTINGS FROM MY SITE
by gtoal＠gtoal.com 17 Dec '03

17 Dec '03

I've just caught someone logged on to Matthew Ghio's account mg5n(a)glenn.res. andrew.cmu.edu abusing my system to post mail purportedly from "anon(a)detweiler.com". I suspect it was aimed at cypherpunks though since I'm now no longer subscribed, I don't know what he posted. I can't tell the recipient from the minimal logs here. I've notified the andrew.cmu.edu postmaster that someone may have abused Ghio's account and be using it to hack from. Graham

1 0

SecureDrive 1.1 & 1.2
by W. Kinney 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hal <hfinney(a)shell.portal.com> writes: >Mike wants to protect himself against a PGP-style investigation into >export of software. But if 1.2 is put up for FTP, it could conceivably >lead to such an investigation. And Mike would presumably be a >potential target. > >This is a confusing situation. What rights does Mike have to control a >derivative product like 1.2, given that he is releasing it under the >Gnu Public License? Legal questions aside, one might hope that within the Cypherpunks at least there might be more of an ethic of respecting the wishes of an author. Edgar seems awfully casual about exposing other people to legal difficulties without their consent, and justifying that by some bullshit technicality doesn't change the reality of it one bit. I for one am most unimpressed. -- Will -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLTfaV/fv4TpIg2PxAQG8TgP7B1RCFmNquI1ctKdLqVutIcWy8S8ycM3F wjZXGuCRiDZnRQh6q+WTp7aG5p07suF0qmVCFZnvAmrLBZx/PfsFxRPuSZML5J4R b+Clw9uq2rADxUbClgekp7oL4MXmOuXjYCiXdc2CoogME2s4fZRdT9cdteS6hieW kQOWTzfGQzw= =CQtw -----END PGP SIGNATURE-----

1 0

Using the tools we have
by VACCINIA＠UNCVX1.OIT.UNC.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The detman has been blathering for weeks about how he will subvert the list and we now see all sorts of rants impugning the reputations of certain cypherpunks. Postings are reiterated with the message that so and so said this or that and this person is a nazi, or some such drivel. I have no idea who said what because many of the technowizards don't avail themselves of the technology which they themselves have made available and promote as a powerful new tool for the future. Positive reputations? Without an electronic sig, you don't have one. Future? It's here. If even we don't use the available tools, then they are indeed worthless. Expect a long campaign of det-rants if people don't take steps to negate this bullshit now. I personally don't want to see the list go back to the way it was in the days of an12070. Many of you have been hard at work developing NET tools for the future, I applaud you for it but it seems that you will soon need them-like now. It's a pain in the ass for me to sign stuff and I am probably the least techno-capable of all of you. I do it because I see the writing on the wall, you see it too. The time is now punks. Scott G. Morham !The First, Vaccinia(a)uncvx1.oit.unc.edu ! Second PGP23a Public key by request! and Third Levels ! of Information Storage and Retrieval !DNA, ! Biological Neural Nets, ! Cyberspace -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLTefRz2paOMjHHAhAQFhfwP9EKM24d0ha4jktJhykLiIRU31MjJ5ne8q V7YDgKFfYnaj5SmwcSCDSDyeKfEBlKdEW32MJlNRmE+OpgINv/+IlZivJzof3bCx Qqr/FS2erUHGRTcDo1D164PEMaNbqAwCgSfVaaW1EnzNbGqv/4q0aVV17IlOl7Zq gPmbueEPfrs= =nTSc -----END PGP SIGNATURE-----

1 0

Detweiler is really losing it...
by remail＠tamsun.tamu.edu 17 Dec '03

17 Dec '03

Question: has anybody actually had any contact with Detweiler recently? I know he used to be a rational and respectable Usetter; keeper of the Privacy FAQ, runner of an autoposter service for other people's FAQs, etc. I'd like to think this is all somebody's research project or piece of performance art, but otherwise... it's pretty ugly to watch this disintegration happen. The deterioration has been marked even within the last few weeks. The RISKS posting was coherent enough, and no more paranoid than say, the average talk.politics.guns poster. My opinion is just from his language, logic, reaction to other people - whether his conspiracy theories are true are not is pretty irrelevant. Multiple identites mapping to one person is hardly unusual in electronic spaces, but most people regard tracking them down as a challenge or an entertainment, not as the cause for desperate rage and paranoia. Cf. the netsport of hunting down John Palmer identities. Is he actually a student at Colorado State? If so, and he's genuinely sending out death threats, the recipients might seriously consider forwarding them there. Not to get him in trouble, but perhaps to get someone to look into the situation before this accelerating downward curve gets where ever it is going. There's plenty of nuts on the net, but the level of their nuttiness is stable enough. I don't think I've ever seen someone fall apart like this before. Of course, maybe it *is* just performance art... Laura -- -------------- Laura Burchard / burchard(a)digex.net ---------------- "It didn't take very much reductio to get right down to absurdium from where you started." ------------------------------------------------------------------------- To find out more about this anonymous remail service, send mail to remail(a)tamsun.tamu.edu with the word "remail help" as the only words in the subject field.

1 0

On leaving the list; and forgeries
by gtoal＠gtoal.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Ah. Now I see why Matthew was forging mail from my site. Thanks for your concern Matthew, but the mail was indeed from me, and pizzabox is quite secure since I run home-brew fingerwarz and pidentwarz daemons. I'll pgp-sign this confirmation just to keep everyone happy. Yes, I have unsubscribed from cypherpunks because I don't want to be part of a list which is advertised elsewhere on the net as being sympathetic to people who don't want their tax money going to coloured people. If he'd said he didn't want his tax money going to unemployed people or poor people, I could have understood his viewpoint (though not sypmathised with it), but to explicitly single out coloured people in a posting soliciting like-minded people for cypherpunks tells me its time to move on. And as for doug@netcom's rant, I'm not even going to dignify it with an answer. G : Note that pizzabox.demon.co.uk [158.152.8.236] doesn't tell where it got : the message from. Could it have been longs.lance.colostate.edu? I : liked Detweiler better when he just used anon.penet.fi. : : : P.S. I sent myself a test email by telnetting to pizzabox.demon.co.uk : 25, but it identified the IP address I telnetted from... hopefully the : site administrators at demon.co.uk have recognized the problem and taken : steps to prevent further detweiling. But be on your lookout, this will : only hold him off until he can find another SMTP port to spoof from. -----BEGIN PGP SIGNATURE----- Version: 2.2 iQCVAgUBLThdO3CRCOmNcN2dAQG80QP/aWyl1C2AsVpxtR/Jvtaj2egf+CAtXtZq KSYzmo2xLe/8iTJdD495Ttjrsp/hSB9Z630EU0bTfPQ7o82uf75JE3F1oz+tzRiq LlNjpUwaEX3PVZNQkyiSrZ7dEALWbkaGVZgCsrXWXcvuGjdf/BSZpCSNtgj0O39h ZENhzUN+dfM= =X/Zc -----END PGP SIGNATURE----- PS Matthew - I'll mail the andrew.cmu.edu postmaster and tell him it was a misunderstanding.

1 0

Apology to Graham Toal & Cypherpunks
by Matthew J Ghio 17 Dec '03

17 Dec '03

I'd like to apologize for stating that the post made by Graham Toal <gtoal(a)pizzabox.demon.co.uk> was a forgery. It has now come to my attention that it was not. Graham Toal had always posted from <gtoal(a)an-teallach.com> until today, when he suddenly posted from: "gtoal(a)gtoal.com" <gtoal(a)pizzabox.demon.co.uk>, talking about a racist post by TC May that I had never seen, and asking to be removed from the list. Naturally, I got suspicious. I still don't know what's going on with the email address switching, but I guess the recent events on cypherpunks have made me a bit overly paranoid. Hopefully, I haven't made a complete fool out of myself over this misunderstanding. I guess we have another good reason to sign with PGP...

1 0

update noon
by hkhenson＠cup.portal.com 17 Dec '03

17 Dec '03

Update Saturday noon. Back from seeing Robert's sons and friend pick up his computer equipment and a 10 minute chat with Postal Inspector Dirmeyer, and a San Jose Police officer by the name of Weidner. At least one point is clear, David Dirmeyer and Lance White are the same person, I simply asked him, and he admitted it. I also found out why he was willing to talk to me during the search. He figured that anybody who starts quoting chapter and section from the Federal Code is a lawyer. [Dirmeyer reminds me somewhat of one of my cousins when he was about 18. My cousin was tall and gangly, and given to putting on a hick act.] Dirmeyer/White seemed completely unconcerned with having generated any liability for the government under the ECPA or the Newspaper Privacy Protection Act (2000aa). He backed this up by being very proud of getting the system (well, most of it anyway) back to the sysop in under a week. [The EFF *has* had a positive effect, this is the first time I ever heard of any LEA's caring how long they take to return a computer.] He was very confident that a judge would dismiss any civil lawsuit brought by the users because of what he perceived as criminal obscenity activities by the sysop. How actions, criminal or not, of one person (the sysop) cancels the rights of others (email customers) to recover from those who block access to their email is beyond me. If that did not get them off the hook, they would get out of civil liability claims because they interrupted people's email access for such a short time, as opposed to the lengthy time the Secret Service kept Steve Jackson's BBS. I can almost quote the relevant sections of the ECPA, and *I* don't remember any time limits under which the civil penalties of law do not apply, "But Judge, I only exceeded the speed limit for a *few* miles!" I wonder how the Postal Service would react to locking *their* patrons out of a local office and away from their mail boxes for a week? I expressed my hope (as a San Jose resident and taxpayer) to Officer Weidner that the Post Office had agreed to take responsibility for any civil liability arising out of the case. He was close to uncivil in stating that I had no standing in the case, and it was none of my concern. He advised me to butt out of being involved in any way. He asked if I had ever *seen* the material on that BBS, (my answer was no) and expressed the opinion that I would be smeared by it and greatly regret getting involved. Back to Dirmeyer, I asked him about the warrant. He said what he did is ordinary investigation practice, including sending people unsolicited material and then picking it up under a warrant. I asked him if the Judge knew, and he assured me the Judge was fully aware that the person getting a warrant for "Lance White's" correspondence was also Lance White. He also said the Judge was aware of the 2000aa and ECPA issues, and that they were under orders not to look at anything labeled email. For some reason, this did not reassure me. Robert's sons and a friend got the last pieces of the computer down to the lobby and we parted company with a few comments on my part about Postal Service agents legally sending kiddy porn through the mail, like the Nebraska case recently ruled entrapment by the Supreme Court. Just one minor thing to add. Because of a persistent back injury, I am on crutches most of the time. I was making my way across the lobby of the old Post office nearing the doors. Dirmeyer and Weidner passed me, opened the doors, went through and let them swing shut in my face. I guess scum like me is below their notice. Keith Henson

1 0

Secure Drive versions
by Mike Ingle 17 Dec '03

17 Dec '03

My only problem with Secure Drive 1.2 is that it doesn't include the bug fixes which needed to be included. If Edgar wants to use my 1.1 code to make 1.3, great. But the two-drives bug needs fixing, and I wrote a cracker which tests 1000 passphrases per second on the 1.0 version. The 1.1 version iterates the passphrase hash to prevent this. As for how it's distributed, I've always requested that it not be exported, and there is a message in the new distribution asking that foreign sites not carry it if they somehow obtain a copy. --- Mike P.S. All these forged messages are becoming a problem. Detweiler may succeed in his effort to make us not know who's real and who's a tentacle. Ignore anything from a remailer, which (a) has a name at the bottom, or (b) sounds like Detweiler. As for what to do about SMTP spoofing, any ideas? Next he will start posting denials of real messages. That way we won't know what messages are real and falsely denied, and which ones are false and the denials are real.

1 0

Re: Using the tools we have
by Jeremy Porter 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <2h9gen$55r(a)uudell.us.dell.com> you write: > >From owner-cypherpunks(a)toad.com Sat Jan 15 19:33:39 1994 >From: VACCINIA(a)UNCVX1.OIT.UNC.EDU >Subject: Using the tools we have >To: cypherpunks(a)toad.com >-----BEGIN PGP SIGNED MESSAGE----- > >The detman has been blathering for weeks about how he will subvert the list >and we now see all sorts of rants impugning the reputations of certain >cypherpunks. Postings are reiterated with the message that so and so said >this or that and this person is a nazi, or some such drivel. I have no idea >who said what because many of the technowizards don't avail themselves of the >technology which they themselves have made available and promote as a >powerful new tool for the future. Positive reputations? Without an electronic >sig, you don't have one. Future? It's here. If even we don't use the available >tools, then they are indeed worthless. One usefull thing that could be done, is to design a list, that will only post pgp-signed messages. To subscribe to the list, you send your pgp public key, and it sends back its private key. In order to for a recieved message to get sent out, it must be signed by the author. In order to make anonymous posting possible a person would need to create a "anonymous" key, with the anonymous remailer address in it. The annonymous account would still have to sign the messages so and identity could be track through this method. In order to prevent some kinds of abuses, the list server could send a password back to you encrypted with the private key you sent it. You would have to send it the password back encrypted with the server's public key. This would verify that the key was created by a particular users at a specific site. (OK, it would be possible to subvert this, but it is significantly more difficult.) The person that runs the list server can sign the list server's key to vouch for the listserver. For added security you could do something even better. The list server only posts messages that are "trusted" at a specified level, or it adds a trust factor to the message. If the list maintainer has met you and has signed his key, the list server will believe you are real. With the web of trust and introducers, the list server will quickly be able to identify most of the people on the list as being real or "pseudo". In particular this will cut down on the number of forgeries posted to the list. There are some technical problems with this, due to the hassel of signing and or encrypting the messages. Lack of anonyminity, etc. This could even convince most SANE people that there is no conspiracy, i.e. someone you trust to act as an introducer, believes that the other person you are talking with is real. Of course if there really is a conspiracy it doesn't really help. One of the things I've been thinking about recently, is about excerpt of messages and signatures. When you reply to a message and copy part of it there is nothing that prevents someone from editing the text. And of course the digitial signature is not longer valid because of the >'s or other characters in the body, plus you probably don't want to quote the whole message. Duplicating the entire message to prove that two or three lines were actually writen by a particular user id, is pretty wasteful. I suppose someone could write a signing program that signs each line idividually, but that does not sound like a good idea either. A 128bit hash would eat nearly 10% of each line. The hashes can be signed in the signature section at the end. After rereading some of Schneir book, it looks like you can't generate a MD5 hash for less than 64 bytes. You would need to pad lines or generate a hash for every two lines. It would still require some fancy software to handle the extracts and preserve the signature information. Currently most peoples software doesn't even easily support normal PGP/RSA signatures, much less anything so fancy. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLThtW3NeM/yj7Ik1AQEWgAQAh5tqTP1YvTQy09GhqlX85tkt8yH55Lz1 TRcZA5mJ8k9OXqgVLwkIHVUPViX+m+iSLuLR+QWbgUV04uPS/V8wzrnDNWRKvkQE qmYR3ZSr3agouXQygmFMtPgHzQpkzHNxV6rVSM6Wq7hEj/2lga7+lptHRW9Zy0tC SLL+0C6Jcpc= =rKLG -----END PGP SIGNATURE----- -- Jeremy Porter ----------------- Systems Enginneering ---- Dell Computer Corp. --- jerry(a)terminus.us.dell.com -------- ------------------------------------------------------------ Support your Second Amendment rights to encryption technology.

3 2

Planting Evidence
by Mike Ingle 17 Dec '03

17 Dec '03

>Back to Dirmeyer, I asked him about the warrant. He said what he did >is ordinary investigation practice, including sending people >unsolicited material and then picking it up under a warrant. I asked >him if the Judge knew, and he assured me the Judge was fully aware >that the person getting a warrant for "Lance White's" correspondence >was also Lance White. He also said the Judge was aware of the 2000aa >and ECPA issues, and that they were under orders not to look at >anything labeled email. For some reason, this did not reassure me. This reminds me of a description in "LA Secret Police" of how the LAPD used to avoid the requirement for a search warrant. A cop would go to a payphone, call 911, and report a rape or assault in progress at the location they wanted to search. The cops would go in, arrest everyone, and ransack the place. Anything they found, they could use, claiming it was out in the open and discovered incidentally. Along with the common practice of piling on outrageous charges, such as "conspiracy to ..." in addition to the actual charge, this allows the police to circumvent most of the person's rights and force him or her to plead guilty or risk a very unjust sentence. When did sending someone illegal material and then raiding the place become standard investigative practice? That used to be called "planting evidence". --- Mike

1 0

What is Real?
by Fred Cooper 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Folks, The quickest way for us to imapir detweiler's spoofing ability (if it is detweiler, and not someone else...) is for those ppl that say PGP signing everything is too much hassle to bite the bullet and generate secondary keys to use on the systems where they read and write mail... Once all mail is being signed, we can at least tell when a piece of mail is from a given id regardless of whether or not the ID is a True Name. The distrinutioni of known good keys still remains a problem... In a lot of ways because CP seem to be split into several regional groups between which real-life contact or contigiuous trusts seem to be few... If i'm not mistaken, there seems to be a california group, a colorado group, a texas group, and a boston group... Am I the only 'punk in Pennsylvania? egads.... nope, there is Matt Ghio. Are all the keyservers dead? I seem to remember a new one going up as the one at MIT died.. but i dont have the address for it... Anyone got a btter idea? FRC - -- #include <hdrs/disclaim.std> /* Neural Nets catch only dreaming fish. */ - ----- Paranoia... More than a state of mind. It's a way of Life. ----- -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLTh42bbAlE4AqlTZAQH0LAQAtI3ddTX9hiyf9e9G+eXxutxLmvd3l/tp sYMbDYB9orCULv3vwwvlMw54bPEXjd3f5kQsbu5RfZMKIwNT16jY9gVK4XiXsP9p +TachWEt+sOH1C0o5fX08PAnzjAtN5eSEUfjPK2olj/2G76NLOzwLdWNPsqcww7B oORKpOSn4H0= =OAOe -----END PGP SIGNATURE-----

1 0

A modest proposal
by greg＠ideath.goldenbear.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I suggest that remailer operators might find it useful to redirect remailing requests originating from Detweiler directly to postmaster(a)lance.colostate.edu. - -- Greg Broiles "Sometimes you're the windshield, greg(a)goldenbear.com sometimes you're the bug." -- Mark Knopfler -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLToPH33YhjZY3fMNAQE8RAQAoMv09y0bEdUWvmSFYwW7UhTaNjpE7Nkf q0PxA0QiT+xK3tRTvzSxzFVpUnDuERW9GwiySnPp/9XekdmKA6lP3oLMafwHbE8+ LkKHnZGJYhtYzE24dqgyW60GyMvqVWAnBlyivtkmn4zrsOIDQKolFBde5jt/cEi1 e1r3g3ilMZU= =B/s/ -----END PGP SIGNATURE-----

1 0

Re: What is Real?
by m＠BlueRose.com 17 Dec '03

17 Dec '03

Fred Cooper writes: >The distrinutioni of known good keys still remains a problem... In a >lot of ways because CP seem to be split into several regional groups >between which real-life contact or contigiuous trusts seem to be >few... >If i'm not mistaken, there seems to be a california group, a >colorado group, a texas group, and a boston group... I'm normally in California, but will be in Washington City the 25th through the 27th, and then in Houston the 28th and 29th (of January). My key has been signed by Castor Fu, whose key was signed by Phil Zimmerman. I would be happy to meet with anyone in Washington or Houston to sign keys. Anyone who is interested should feel free to email me. M Carling -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAizzqB8AAAEEAMP3n2PtfBfvcLhnu2U2X/1Acq0J+8GtCYe1F72jIglewU+C fSfD2DZdrem97bhMF0pr52SlU0BgmxLlPfCJ9HhsKp0wzOAOA8fC9vC86pAk0pFc G9HTVtmtUQ/RJELPzYUd5qIloyFCQ2PSgJke9wHgAwjzpbvuTtW1EdSEoj8pAAUR tBpNIENhcmxpbmcgPG1AQmx1ZVJvc2UuY29tPokAlQIFEC0gh0BITmU1mAl/jwEB gF4EALnodYMUkuHx93hPgb57aNklinvzJe74QN652JoOAzxvcVgEMNkGpB1E8oDA qbkCWs48FCCVTi/TXlqzjDoEvX840x8+Dc2SEg2OQf2CGyHTSt0HmnzuudFd+I3J bXqO6HfFQ8ofayWjVP0VZ7qvE1zwYhIGeQ4ccfJPiGT/aCNviQCVAgUQLQy8Qp23 mkTW0CxBAQHMnAP/aYShEy9fWjAW63f/BKCtzuAh5GNLEVCdx7ydmddQ/cNJMJfX 4EVC6wxETqRgGVZzvopjNGGBizzrYXZ/tadIiLDZqsV+VAGt08tPCyn19dLhhFLn VPSCTjlNTB76YxBiX4gySJ1OCKRbFFScMIaR+44EpDcIxeklixL3bR98VlaJAJUC BRAtDUT51bUR1ISiPykBAcNMBACvxiB5MALQ1hhFWe82yVSs0NZIvbEtfD0wMtJq c/jQmEuvWT+jTdDbRJV3Df32kN2oJ2cVc0OtfuRxjDBDkMiaXTiHT5PTArJvT/Yx yvg6ugj9RIP997DQ3QixzNywzvsP1r/7dqIGPnXHMSmxU2tsSW8iNcwDwRzuHJDI w4RR1IkAlQIFEC0JC6ZBMZN3EgN9QQEBa3kD/j4vu4pQ6Idb2ZlEqZ3idK1z3vrl PgOmTQfmeSLoxfIw99Vlq+1/3gvJ9TZTzqcwEPEEEbWGWleGcvPiiJqe3hpevo/r cvLYdKhg1R79IlSwVc8HeAH7GOpz33BdeTR4g2A5vZpWzaQDZrOIatu28J/T4/9o Gc/IMAUstQXAf1gMiQBVAgUQLP4eI8xOF0itgirrAQFeWwH/dU7bwP2Kp8vOrtks SJtxPS7d5exemI+xnsQznFQxOb2RRS22JojrPoUjLcu5GK9P8JDKQolxCIDz4A0/ sLpnn4kAlQIFECz0JQT2XAZlQR0DNwEBQ2EEAKDSLJt9HdgWkXBfcXqqWE0Jyvel 6KHWD7nYh898Ti/U4SCyetBCXd7bIJX9mAoxGKp+B60VoYSrnJnRSggNxxp07cUF 8CTcFjOuJtXQpb4wq8bmbfZnuR6dHyrtNna68bW55Df2PHuuFYO/F9hOEJbJHrlD tKeibyG2wQTAC5cz =/VLG -----END PGP PUBLIC KEY BLOCK-----

1 0

the bitter end
by nobody＠pmantis.berkeley.edu 17 Dec '03

17 Dec '03

oh, how the noise hurts my ears, oh how the fires burn my eyes, oh how my body quakes and shivers. i, the glorious memetic warrior, lie bleeding on the rocks, the enemy has vanquished us, we have been trampled 'neath their onslaught. i hear my fellow men groaning with spasms around me, they call each other's names and cry out, the noxious stench of death oppresses my nostrils. the eve grows cool, it is twilight, and the bitter cold infiltrates my body like fog through the grass. we were ambushed, we thought we knew the enemy's numbers, we thought our intelligence sound. but they had tricked us in the blackest of betrayals, all our spies were double agents, and they had stabbed us in the back. they laughed as they crushed us. the enemy was so numerous, his location so ubiquitous, that we could not help but be massacred in the hot sun. there was white fear and red terror everywhere as they came from every direction to slay us. all our operations were useless and ineffective, our carefully crafted future plans aborted, the enemy had infected our own nervous system with his poison, and our grisly, grotesque failures haunt my mind like shrieking phantoms. oh, my trusted friends! my fellow warriors! my noble generals! all are dead and dying, bleeding and weeping, lying and crying. my consciousness flits between moments like a thief in the shadows, i am bewildered and dazed, as fragmentary hallucinations of my youth flash before my eyes. oh, the horror of their weaponry! they assailed us with their bombs, their grenades, their tanks, their planes, the machine guns pumped bullets into our fragile flesh, our limbs scatter the battlefield, our blood lies in pools in the trenches. we went deaf with the onslaught, our ears bleeding, our eyes blinded by the horrid wrath of fire. their blitzkrieg trampled us like bewildered ants 'neath the stamp of soldier's feet. the earth is scarred with holes and pits, and hideous shapes of artillery and shrapnel surround me like monsters looming in my nightmares. oh, that fearsome face of mine enemy, how it glowered and glared and burned with fire in my eyes, i saw the venemous hatred cutting and mowing me down. their hate surpassed ours, their deadliness crushed us unmercifully, wretchedly, horribly beneath their iron wrath. they were monsters from beyond our nightmares but from our own reality, and they ripped our bodies apart to feed their chiseled jaws. the moon shines down at me now, i see the reflection in the pools of water around me, and i am the only one left alive. i hear my rasps, i feel my chest heave, i feel my feeble heart pump, i can feel the gentle trickle of oozing blood at my sides, my life slowly, silently, inevitably, inextricably leaking from my body. there is only utter cold and pitch blackness, as i hear the rats scurrying through my hair and gnawing at my flesh. / / / / / / / / / / / / / / / / / / . : _________ _________ _________ . / / \ \ / / \ \ / / \ \ /'/ / / / / / / / / ______ / / / / / / / ~~~~ / / / / / __ \ / / / / \~~~~~~~~/~~~/~~~~~~~~~~~/~~~~~~~~__/~~~~~ ~~~_/~~/~~~~~/~~~~~~~~~~/ ~~ \,\ / / ____ / /~\ \ /~~~~_ / / /~~~~~~~ :' \ \ / / / / \ \ \ ~~~ _ \ / / ; ~~~~~~~~~ ~~~~ ~~~~ ~~~~~ ~~ ~~~~ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \

1 0

PGP's e exponent too small?
by Mike Ingle 17 Dec '03

17 Dec '03

Is the e exponent in PGP too small? It's usually 17 decimal. Applied Cryptography pp. 287-288 says: "Low Exponent Attack Against RSA Another suggestion to 'improve' RSA is to use low values for e, the public key. This makes encryption fast and easy to perform. Unfortunately, it is also insecure. Hastad demonstrated a successful attack against RSA with a low encryption key [417]. Another attack by Michael Wiener will recover e, when e is up to one quarter the size of n [878]. A low decryption key, d, is just as serious a problem. Moral: Choose large values for e and d." --- Mike P.S. Anyone know where to get a Capstone chip?

1 0

PGP posting validation
by Philippe Nave 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- As I recall, the PGP-filtered mail list idea was proposed to the list a while back and semi-informally put to a vote. At the time, I 'voted' against the idea, because I did not perceive the spoofing problem to be serious enough to warrant that sort of response. Times change, I guess - it's easy to filter certain names and anon ids out of my mail, but more complex spoofs involving SMTP ports and so on call for more involved filtering procedures. Here's my two cents' worth- how about a filter on incoming mail to the list that performs these functions: 1) check the incoming post for a PGP signature 2) If a sig is found, check it against the list's public keyring 3) If the key matches, pop a line like "X-PGP-Keycheck: user so-and-so" into the posting 4) If the incoming message already has a "X-PGP-Keycheck:" line in it, drop that line off - somebody's trying to spoof us For those 'punks who can/will sign their messages, this would provide a simple 'reputation check' visible to all recipients. For others, postings would flow through the system exactly like they do today, vulnerable to spoofs and so on. My main concern is that we get a filter online that is secure but simple. Programmers (myself included) will want to launch off and devise some horrendously complex PGP empire right away, but it would probably be smarter to start small. - -- ........................................................................ Philippe D. Nave, Jr. | The person who does not use message encryption pdn(a)dwroll.dw.att.com | will soon be at the mercy of those who DO... Denver, Colorado USA | PGP public key: by arrangement. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLTjTAwvlW1K2YdE1AQGEdAP8DY8KAK7EU9HkPxuuqMwApwTB7hMP+k1i WGzHgq6RLQvHpZAbzywAbLvxVayzbPd+oCAfF8rSuf7NgFiz8TSqIDyMxM7dGh8Q 8KkEUbEyMQG4//M1Y0HrxhZXemq0a98umtAEQmyyFUFFuvrR95q5iJ1BtGqqF+oH fNXp2UIqfIw= =cXHA -----END PGP SIGNATURE-----

2 1

Detweiler == Rotweiler
by remail＠tamsun.tamu.edu 17 Dec '03

17 Dec '03

I may have missed responses to my last post on the subject, but I am wondering: what makes Detweiler think that T.C. May and Mayor Szabo are the same person? How is this so critical to his argument that he needs to spend half his waking hours ranting about it? I'm still trying to figure out why it's critical to his argument. The one time I started getting mail/flamage from someone who (from writing patterns, nicknames, etc.) I thought was someone else, I was pretty livid about it (Eric Hughes). I've since cooled down, after he apologized, somewhat... but it doesn't change a thing about the argument itself. (Of course, I knew his argument was bunk to begin with). But is Rotweiler so unable to address issues that he has to attribute everyone with a roughly similar belief to be one person? "It didn't take very much reductio to get right down to absurdium from where you started." --Mike Jones, jonesmd(a)crd.ge.com I think we're in the situation of trying to get *up* to absurdium. Either Detweiler's a disturbed individual with some sort of multiple personality disorder, or he's impersonating one. Or, of course, the GRAND CYPHERPUNK CONSPIRACY has been FORGING messages to LOOK like they've come from L. Detweiler! UN-altered REPRODUCTION and DISSEMINATION of this IMPORTANT information is ENCOURAGED! -- +-----------------------+---------------------------------------+ |Phil Fraering | "...drag them, kicking and screaming, | |pgf(a)srl03.cacs.usl.edu | into the Century of the Fruitbat." | +-----------------------+-Terry Pratchett, _Reaper Man_---------+ ------------------------------------------------------------------------- To find out more about this anonymous remail service, send mail to remail(a)tamsun.tamu.edu with the word "remail help" as the only words in the subject field.

1 0

is this for real?
by sdouglas%hartford.edu＠uhasun.hartford.edu 17 Dec '03

17 Dec '03

So, Queen Umbish Is Still Here. But is this SQUISH for real? Where are those POTS (POinters To Snakes) and PANS (Poison Agents Needing SQUISHing) mentioned? >QUESTIONS >=== > > Address further questions to cypherpunks(a)toad.com, gnu(a)toad.com, > tcmay(a)netcom.com, or hughes(a)ah.com. Some additional information is > available in RISKS 15.25, 15.27, 15.28x: ftp CRVAX.SRI.COM, login > anonymous, directory RISKS: (include the colon), file RISKS-i.j > >=== > > ///// //// // // //// ///// // // > /// // // // // // /// // // > //// // // // // // //// ////// > /// // // // // // /// // // > ///// ///\\ //// //// ///// // // > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >Introducing the SUGGESTIVELY QUESTIONABLE UNIFIED INTERNET SNAKE HUNT! Scott Douglass *My joys, my griefs, my passions, and * ->sdouglas(a)hartford.edu<- * my powers, * dithyramb(a)pan.com *Made me a stranger. Byron* scott(a)pumpkin.uucp http://www.hartford.edu/UofHWelcome.html finger me for my public key! MIME spoken here!

1 0

Re: PGP's e exponent too small?
by smb＠research.att.com 17 Dec '03

17 Dec '03

Is the e exponent in PGP too small? It's usually 17 decimal. Applied Cryptography pp. 287-288 says: "Low Exponent Attack Against RSA Another suggestion to 'improve' RSA is to use low values for e, the public key. This makes encryption fast and easy to perform. Unfortunately, it is also insecure. Hastad demonstrated a successful attack against RSA with a low encryption key [417]. Another attack by Michael Wiener will recover e, when e is up to one quarter the size of n [878]. A low decryption key, d, is just as serious a problem. Moral: Choose large values for e and d." There was some discussion on this on sci.crypt. Briefly, the folks from RSA don't agree that it's a problem in practice. If you always include some random padding in the message, you're safe, if I remember what Kaliski posted.

2 1

No Subject
by Lt. Donald F. Sullivan Campus Safety Department 17 Dec '03

17 Dec '03

Saw your add on one of my listserve boards. Could you send me information on this,"Snake Hunt" thing your talking about. How do I join and play. Would like to know more... Don ___ (o O) =============uuu(U)uuu============== | M i l l s a p s C o l l e g e | | -------------------------------- | | CAMPUS SAFETY DEPARTMENT | |__________________________________| \ Lt. Donald F. Sullivan / / FAX:(601)-974-1173 \ \ PHONE:(601)-974-1181 / / InterNet Address \ | Sullidf(a)Okra.Millsaps.Edu | |________________________________|

1 0

The Detweiler Saga
by remailer＠merde.dis.org 17 Dec '03

17 Dec '03

once again, I am getting tired of trying to convince people that don't really give a damn and would rather amuse themselves by inventing new ways of calling me insane. I am tired of hearing the deafening silence of thousands of lurkers saying, quite eloquently, <SHRUG>. How Wrong I Have Been. So wrong. We always took Detweiler for granted. Our rock. Our knight. Will now our beloved Atlas shrug? Yea, will our prophet fall? You presence filled the heavens. You were without beginning middle or end. no one and a star stand am to am flaming dream to dreaming flame millionary wherewhens distant as reckoned by the unimmortal mind Those words come back to me as I reflect on our salad days, together in Prague, before the revolution. All, zorn. All, zorn. And I remember what you wrote, that dark day, and I remember the sound of the T-62's as if we were there again... the sunlight in the garden hardens and grows cold we cannot cage the minute within its nets of gold when all is *told* we cannot BEG for PARDON THE SKY WAS GOOD FOR FLYING DEFYING THE CHURCH BELLS! AND EVERY _EVIL_ _IRON_ _SIREN_ AND WHAT IT TELLS THE EARTH compells... (How those words haunt me now. How they haunt me.) I may focus on more damaging counterrevolutionary tactics soon and just give up on the BrainDead out here. I have tried to start a fire but get nothing but wet drizzle. soon I will wash my hands of it all completely, having done all I can, and the cyberanarchists will advance unhindered to an internet site near you. Every word burns like a knife across raw nerves. His radiance is blinding now! (o deliver me deliver me) O Lance, I can see your eyes shining; with an open mouth you glitter in an array of colors, and your body touches the sky. I look at you and my heart trembles; I have lost all courage and all peace of mind. When I see your mouths with their fearful teeth, mouths burning like fires at the end of time, I forget where I am and I have no place to go. I see our warriors and all the cryptonihilists who are here to fight. All are rushing into your awful jaws! I see some of them crushed by your teeth. As rivers flow into the ocean, all the warriors of the world are passing into your fiery jaws; all creatures rush to their destruction like moths into a flame. Filled with your terrible radiance, the whole of creation bursts into flame!! You have murdered me. murdered me murdered me murdered me murdered me murdered george william herbert gwh(a)crl.com Work: System / Net Administrator, CR Labs Home/Play: Retro Aerospace KD6WUQ gwh(a)crl.com gwh(a)soda.berkeley.edu gwh(a){isu,exec}.isunet.edu deltaV = g * Isp * ln(Mr) ... it's not just a good idea, it's the Law ----------------------------------------------------------------------------

1 0

PGP question
by Anonymous 17 Dec '03

17 Dec '03

This may sound like a question that I should probably already know, but it would appear not. How do I change my key ID to reflect my current ID? For instance: If my key ID now reads <me(a)here.net> also known as <me(a)there.com> and I wanted to change both of these a different, singular address; <me(a)where.edu> Is there an easy way to do this? Many thanks in advance!

1 0

SQUISH
by Chris "Strunoph" Norman 17 Dec '03

17 Dec '03

Please put me on the mailing list, if there is one, for SQUISH. I don't have the time to participate, but it looks interesting.

1 0

Libertarian FTP site
by jdblair＠nextsrv.cas.muohio.EDU 17 Dec '03

17 Dec '03

I know that there's a Libertatarian Literature ftp site- I've downloaded stuff from there, but I've lost the address. Could someone in the know pass it my way? Thanks in advance, -john jdblair(a)nextsrv.cas.muohio.edu

1 0

Applied Cryptography
by jdblair＠nextsrv.cas.muohio.EDU 17 Dec '03

17 Dec '03

Would somebody please pass on an ISBN number, publisher info, and the best placed to order "Applied Cryptography"? I would appreciate this greatly. Thanks in advance, -john.

1 0