December 2003 - cypherpunks-legacy

IPSP
by bshantz＠spry.com 17 Dec '03

17 Dec '03

For the sake of a friend, I'm trying to explain the basics of IPSP. And I've choked!!! Could someone please explain it. What is it, how does it work. ETC. -- Brad

2 1

Re: Any suggestions for additions to this?
by skaplin＠skypoint.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > [BEGIN PGP SIGNED MESSAGE] > To: skaplin(a)skypoint.com > >All binary files are UUENCODED with PGP signatures. > > Hmm, what about using PGP instead of UUENCODE, if they're going > to be signed anyway? > I'm working on the lowest common denominator theory. Maybe they have PGP set up...maybe they don't. If they do then they can verify the signature. If they don't they still will have uudecode on their system and can access the file. Nothing frustrates me more than trying to get a file only to find out unexpectedly I need something else to access it. Sam ============================================================================== Laughter is the shortest distance between two people. - Victor Borge ============================================================================== skaplin(a)skypoint.com | "...vidi vici veni" - Overheard | outside a Roman brothel. PGP encrypted mail is accepted and | preferred. | Change is the only constant in the | Universe..."Four quarters, please." E-mail key(a)four11.com for PGP Key or | Finger skaplin(a)mirage.skypoint.com | Smile!! Big brother is watching. ============================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: This message digitally signed to verify the identity of the sender iQEVAwUBLvWadMlnXxBRSgfNAQESogf+LeRglKrHlcZFSJh5FFt9L2tB+aG2lZe2 MeIgQUN7rzTlxupVECB2wmV7N8a3ep6rw04VGif32sVBLXaY3H0J6fbNklYultu8 TEuSVfVEwVCOVXvIZzR1Mtze1YzAXxXKhBomWHsBc+wGa4N4cXqYsbbouPZhI2P4 osyxEr8z/bNVT0T2g1EIl/fBN4l1TUqKrEZoxh51bXU2UcKG1oXbqtdStz6+tFii DF3IssZABiG5sNbWu8/QAcyWrzngitRs1R5W6nCeHxUMbK4mqRj1t6sgBvs/gVLy IedQ2AjoPeTkQCQH2/EzRWx+0bdKs0BfsMkZKxGlsxxDSNsFuZNW0Q== =szlp -----END PGP SIGNATURE-----

1 0

Pgp in Europe
by Karl Lundkvist 17 Dec '03

17 Dec '03

Does anyone know a way to get Pgp 2.6.2 by ftp, mail or something in Europe? All I can find that I'm allowed to download from the net is 2.3... I suppose this is because of those silly american crypto-laws, but but I've seen europeans using the later versions, so they can't be that hard to get. Karl Lundkvist

2 1

FTP: qwerty site gone, crypto files needed
by ddt＠lsd.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Michael Paul Johnson <mpj(a)netcom.com> and I are wondering what happened to <qwerty(a)netcom.com>. He's apparently dropped his Netcom account and thus the handy Crypto-related files he used to keep there are not available to the world. If anyone has any idea of the whereabouts of Mr. Qwerty and/or his files, please contact me at <ddt(a)lsd.com> and fill me in, so I can arrange to put the files back up in my FTP directory as a public service and so Mike can update his "Where to get PGP" FAQ to reflect the new site. Thanks, dave -----BEGIN PGP SIGNATURE----- Version: 2.6ui iQCVAgUBLvWIHaHBOF9KrwDlAQHWnQP8CNryjUdBdMhPH8BtHEyH/DKVJYhMM/eT 1l8XfuXWXmcLnp5V669h+jeVM5sRU460Px/2KuCqs5uVdeMhsLnkH0A63213OcxK HSyaHMReHG8XKMaByd+q7mdc4+d6X4637yionJDLCCDduODVKTY/rTxu88l3OtJ/ 5YFjsqK1oa4= =1jkK -----END PGP SIGNATURE-----

1 0

FW: The NEXUS-Berkeley Presents: a New Years Party
by SCOTT STADELI 17 Dec '03

17 Dec '03

---------- From: owner-cypherpunks To: nexus-berkeley Subject: The NEXUS-Berkeley Presents: a New Years Party Date: Sunday, December 18, 1994 5:18 >around the continent. (I would include here the Australian sites but >that would require that the party start approx. 7 AM on the 31st...) You say that like it would be a _bad_ thing.

1 0

(fwd) Re: Content-Type of application/pgp
by jamesd＠netcom.com 17 Dec '03

17 Dec '03

Xref: netcom.com comp.mail.mime:5131 Path: netcom.com!ix.netcom.com!howland.reston.ans.net!agate!library.ucla.edu!csulb.edu!paris.ics.uci.edu!ucivax!gateway From: nsb(a)nsb.fv.com (Nathaniel Borenstein) Subject: Re: Content-Type of application/pgp Message-ID: <0iv6J0H0Eyt5I2gP0o(a)nsb.fv.com> In-Reply-To: <3blaqd$fgn(a)wegener.ems.psu.edu> Newsgroups: comp.mail.mime Lines: 17 References: <3blaqd$fgn(a)wegener.ems.psu.edu> Date: 12 Dec 94 15:01:06 GMT After several discussions over the last few weeks -- with Phil Zimmerman, Jim Galvin, Ned Freed, and others at Email World and IETF -- I have reached the conclusion that the application/pgp type should be ABANDONED in favor of an approach based on multipart/security. My application/pgp Internet Draft is expiring shortly & will not be renewed. By using multipart/security, we can work towards a greater level of harmony between the PEM and PGP communities. It also now appears that there's a chance that PEM and PGP keys can be made interoperable, which would be a huge win. I don't want anyone to think I'm standing in the way of this convergence, so I wanted to publicly state that I have abandoned my application/pgp Internet Draft. What we need now is for someone to work up a new draft on how to use PGP inside of multipart/security. I'm swamped. Any volunteers? -- Nathaniel -- --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we James A. Donald are. True law derives from this right, not from the arbitrary power of the omnipotent state. jamesd(a)netcom.com

1 0

Re: Name that phone
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I like: "Pretty Good Phone". Keep the "PGP" motif. - -- Todd Masco | "'When _I_ use a word,' Humpty-Dumpty said, in a rather cactus(a)hks.net | scornful tone, 'it means just what I choose it to mean - cactus(a)bb.com | neither more nor less.'" - Lewis Carroll - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvXmjyoZzwIn1bdtAQHtMQF/eHqzFBvL1rVgDuuZQ7DbjA3Suwpe8FDF oXhwHxwgP/uiJFr/cNV+ovOrkZ5Zzg+m =9aqH -----END PGP SIGNATURE-----

1 0

Re: List of reliable remailers
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 9:50 AM 12/19/94, Raph Levien wrote: > eric > A variant of the cpunk style. Uses Anon-Send-To: instead. Question: Are there in fact any remailers out there that _don't_ take Request-Remailing-To:, but only Anon-Send-To:? That is, are there in fact any "eric" remailers, according to Raph's criteria? I've used at least one of the remailers that's labled as "eric" on Raph's list, and used "Request-Remailing-To:" with it, and been succesful. I'm wondering if this is the case for all of them.

2 1

Re: Pgp in Europe
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Karl Lundkvist writes: > Does anyone know a way to get Pgp 2.6.2 by ftp, mail or something in > Europe? All I can find that I'm allowed to download from the net is > 2.3... The U.S. govt. doesn't want you to get PGP from the U.S., but you are (presumably) not a U.S. resident or citizen, so U.S. laws don't apply to you. As long as _Swedish_ law doesn't bar you from importing strong cryptography into Sweden, you can grab PGP from wherever you like. -L. Futplex McCarthy - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvXyIWf7YYibNzjpAQGY+gP/ZxIH2glPB4RVz+kDjQj4FvxLGxTd3qMk mMbaFyMS5sfDV8tcmkSK4Ll5FWZwT2jede4JYXov/nbr8gIAjcTAvD0ejtJzyYxK FQx+nf9JUr2wViLU+6gm86ea1y7sH/wHjMNhnfwLxh50G9KenZZW+Od5Jzw/t8tR +qcaUwNGDfg= =OUBK - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvXzayoZzwIn1bdtAQGDZQGAlQQ3P9X513paHxgmDwh84u1KmNJR9aUZ 3XMHg0Jl08FELed6hI8XJUUXep1y4DK8 =MATE -----END PGP SIGNATURE-----

2 1

Envelopes speak - tracking information flow
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Re traffic analysis, cpunk remailers, DC-nets. Electric Dreams Weekly column for The Asian Age by Rishab Aiyer Ghosh #41, 19/December/1994: Envelopes speak - tracking information flow Digital communication is extremely vulnerable to interception, sorting and archival. Current electronic mail systems offer less privacy than open messages on postcards - at least it's impractical to keep copies of enormous quantities of paper mail. Encryption, which is slowly gaining popularity as a means of ensuring a degree of privacy of e-mail and eventually voice communication, is analogous to letters in sealed envelopes. This protects against one invasion of privacy - of communication content, or what you write and read. However there is at present little protection against a possibly more serious invasion of privacy, that of communication context, or to whom you send and from whom you receive messages. As such messages can include anything from New Year greetings to a friend to contract negotiations to CD purchases, there is a lot that can be known about you from addressing details on the most secure, encrypted mail - the tale the envelopes tell. Currently, whether you make a phone call or send an e- mail, your communication is routed through a host of different sites - telephone exchanges or computers around the world. It may not be technically possible for these sites to extract the content of your message because of encryption. It is not feasible, and usually illegal, for them to archive traffic. But it is very easy to archive routing information, and such logs are routinely kept by computers on the e-mail network as well as telephone exchanges. The legal process of getting access to addressing information is much simpler than for intercepting communication content itself, because it is often assumed that such information is, on its own, useless. Actually it is probably more useful than interception. Such traffic analysis helped track Iranian assassins in France earlier this year, using records of 20,000 phone calls from public booths. It could also be used for intrusive monitoring of your income or hospital visits, or for that matter to crack down on Tibetan human rights activists. Cypherpunks - the assorted citizens of cyberspace who try to protect privacy through the use of technology - may have a solution. Elated by the success of anonymous remailers - special e-mail addresses that repost messages after removing any traces of the original sender, especially favoured in discussion forums for victims of sexual abuse - they are now working on methods to reduce, if not eliminate altogether, the menace of traffic analysis. Without these, it would be possible to associate anonymous messages with their original senders by carefully matching arrival times in various system logs. Remailers and their users resort to several countermeasures. They collect incoming mail and repost anonymized versions in batches of random sizes, to avoid a correlation between mail arrival times. They route mail through random groups of remailers, often in different countries, to make tracing posts back to the source harder. And of course, they encrypt as much traffic as possible. Although remailers prevent reverse traffic analysis - tracking mail from the recipient to the sender - they don't protect against traffic analysis from source - tracking the output of a specific site or individual. Dining Cryptographer networks, or DC-Nets were developed almost a decade ago as a networking protocol allowing a group of people to broadcast messages, while making it impossible to identify the specific source from within the group. Unfortunately DC-Nets have not yet gone beyond the early experiments; but there is hope that they will soon silence the electronic envelopes of traffic analysis. Privacy and freedom of expression are basic human rights. Where laws and international treaties have failed to protect them, it looks increasingly likely that in a borderless world of digital signals, technology will. Rishab Aiyer Ghosh is a freelance technology consultant and writer. You can reach him through voice mail (+91 11 3760335) or e-mail (rishab(a)dxm.ernet.in) --====(C) Copyright 1994 Rishab Aiyer Ghosh. ALL RIGHTS RESERVED====-- This article may be redistributed in electronic form only, PROVIDED THAT THE ARTICLE AND THIS NOTICE REMAIN INTACT. This article MAY NOT UNDER ANY CIRCUMSTANCES be redistributed in any non-electronic form, or redistributed in any form for compensation of any kind, WITHOUT PRIOR WRITTEN PERMISSION from Rishab Aiyer Ghosh (rishab(a)dxm.ernet.in) --==================================================================--

1 0

The Economist follows my Electric Dreams!
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

The December 12th episode of my column, Electric Dreams #40, discussed the relative success in text processing using statistical methods over conventional natural language processing. The latest issue of The Economist (Dec 17-24th) has this as its lead science story. I congratulate myself on having one over my favourite periodical! Of course my article was 500 words, so the larger Economist story was more detailed. While I mentioned technology developed by the US National Security Agency and Architext, The Economist referred to research undertaken at BT (formerly British Telecom) and Cornell University, especially the work on automated text-summarization programs. If you'd like a copy of my original article, please send a blank message to rishab(a)arbornet.org with "get dreams-40" (without the quotes) as the Subject: field. For an index, send "get index"; to automatically receive future episodes of this 5kbyte/week column, send "subscribe". Happy Christmas and New Year! Rishab ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "In between the breaths is rishab(a)dxm.ernet.in the space where we live" rishab(a)arbornet.org - Lawrence Durrell Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0

NSA's text search algorithm
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

"Ian Farquhar" <ianf(a)sydney.sgi.com>: > I always imagined that the development of [NSA's text scanning] > algorithm itself predated email, and started back with cable and > telex traffic. Stat text scanning is ancient, but has probably not been used on the scale and efficiency that the NSA would require for net traffic. > > Earlier this year, the agency began soliciting collaborations from > > business to develop commercial applications of their technique. > > Has anyone got any further information about how this algorithm works? > It sounds like Rishab has somewhat better info than was publicly > available months ago when we last discussed this particular NSA > "technology transfer". Actually my 'info' about NSA's thing was mainly deduction put together with some (limited) specs on Architext (http://www.atext.com graham(a)atext.com) If you read NSA's note carefully, you easily rule out NLP ("independent of...language") and sophisticated neural nets ("very fast"). The Economist story I mentioned in my last post (on the fact that I beat them to the story!) goes into some detail on BT and Cornell's programs that summarize textual matter. These are apparently successful (included is an pretty good example of a computer-generated summary of the article), but also quite different from NSA's. BT uses basic NLP to get past articles, conjunctions etc (making it language-dependent), and stems (removes -ing, -ed, -s etc, unlike NSA which denies stemming, dictionaries etc; obviously language-dependent), before creating statistical table of word frequencies which are used to determine the subject of a sentence or the similarities between texts. Cornell can search "gigabytes of data ... in a few seconds [for] a subject" or similarity to an example text. It can figure out which sentences are 'important' (by comparing frequency tables). I suspect NSA's is much more pattern-oriented, as its USP is document clustering; maybe it uses some NN at some level. Of course you don't really need to know grammar to filter out articles and pronouns; you could do that statistically too. Rishab ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "In between the breaths is rishab(a)dxm.ernet.in the space where we live" rishab(a)arbornet.org - Lawrence Durrell Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

2 1

Re: rehash of fbi v. weaver, or 'freeh is a jerk'
by RGRIFFITH＠sfasu.edu 17 Dec '03

17 Dec '03

It was announced (I think last week) that there would be no prosecution of the sniper who shot Vicki Weaver as she stood in the cabin door holding her baby. It's good to see an editorial like that in a major newspaper. >i happen to be on the road in tennessee, and read this editorial in the >knoxville new-sentinel. i don't remember seeing anything about this when it >happened...but since freeh and the fbi seem to be disliked these days, >here's some more fodder for the fire. > >-avi > >ps - hopefully this isn't a repeat, but being on the road, i'm mail-delayed >at least 24 hours. > >The Knoxville News-Sentinel, Dec 16, 1994, pA16 > >DISTURBING SILENCE >-FBI chief taking his time acting on report about Idaho shootout > >All eyes are on Louis Freeh, director of the Federal Bureau of >Investigation, as he ponders disciplinary action in the infamous shootout at >Ruby Ridge, Idaho, in 1992. This being the end of 1994, one starts to wonder >what is taking the director so long. > >Excessive use of force by the FBI is no trivial matter. Citizens might >gather from the Idaho case that the government claims special license to >abuse the rights of loners with extremist views. >

1 0

test1
by Harry S. Hawk 17 Dec '03

17 Dec '03

Test.. Please ignore.. /hawk -- Harry S. Hawk habs(a)panix.com Product Marketing Manager PowerMail, Inc. Producers of MailWeir(tm) & PowerServ(tm)

1 0

test2
by habs＠cmyk.warwick.com 17 Dec '03

17 Dec '03

Test. Please ignore

1 0

Re: An Attempt to Hobble SAFE Crypto Bill (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 25 Jul 1997 18:22:48 -0400 From: Alan Davidson <abd(a)cdt.org> To: "--Todd Lappin-->" <telstar(a)wired.com>, fight-censorship(a)vorlon.mit.edu Subject: Re: An Attempt to Hobble SAFE Crypto Bill At 11:03 AM -0800 7/25/97, --Todd Lappin--> wrote: > >An Attempt to Hobble House Crypto Bill > > by Rebecca Vesely ... > The amendment, by Representative Benjamin Gilman > (R-New York), who chairs the International Relations > Committee, would make it unlawful to "manufacture, > distribute, sell, or import any product within the United > States that can be used to encrypt communications or > information if the product does not permit the real-time > decryption of such encrypted communications or > information." The full text of this very frightening amendment is now available on CDT's Web site at: http://www.cdt.org/crypto/legis_105/SAFE/index.shtml#970725 It's a chilling glimpse at the Administration's view of a mandatory-domestic-key-recovery world. This is the first time I've seen anyone put such a provision through the House Legislative Counsel process. -- Alan Alan Davidson, Staff Counsel 202.637.9800 (v) Center for Democracy and Technology 202.637.0968 (f) 1634 Eye St. NW, Suite 1100 <abd(a)cdt.org> Washington, DC 20006 PGP key via finger

1 0

c'punks top 5
by Andrew Lowenstern 17 Dec '03

17 Dec '03

What, IMHO, are the top 5 most important things the cypherpunks should be concentrating on? No doubt everyone else has their own ideas of what the "cypherpunks top 5" (or top 10) is, so please tell us your suggestions. 1. anonymous http proxy servers ("re-webbers") 2. PGP compatible crypto library 3. reply-able remailers that are secure and easier for the recipient 4. better remailer security (dc-nets) 5. socket-based keyserver interface for real-time automagic key fetches andrew <btw, this is a top 5 rather than a top 10 because I couldn't think of 10 good things to concentrate on when I wrote this>

2 1

(fwd) Newt says Clipper Chip is Dead
by jamesd＠netcom.com 17 Dec '03

17 Dec '03

Xref: netcom.com alt.culture.usenet:6563 alt.rave:37968 Newsgroups: alt.culture.usenet,alt.rave Path: netcom.com!ix.netcom.com!howland.reston.ans.net!usc!bloom-beacon.mit.edu!crl.dec.com!crl.dec.com!pa.dec.com!mtshasta.snowcrest.net!ken From: ken(a)snowcrest.net ("Ken Stuart") Message-ID: <82739.ken(a)mtshasta.snowcrest.net> Reply-To: ken(a)snowcrest.net Subject: Newt says Clipper Chip is Dead Date: Tue, 13 Dec 94 20:09:25 PDT X-Received: by usenet.pa.dec.com; id AA29312; Tue, 13 Dec 94 20:15:43 -0800 X-Received: by pobox1.pa.dec.com; id AA20213; Tue, 13 Dec 94 20:15:37 -0800 X-Received: from mtshasta.snowcrest.net by inet-gw-1.pa.dec.com (5.65/10Aug94) id AA16575; Tue, 13 Dec 94 20:14:24 -0800 X-Received: from [204.94.225.49] (sl1.mtshasta.snowcrest.net [204.94.225.49]) by mtshasta.snowcrest.net (8.6.5/8.6.5) with SMTP id UAA15046; Tue, 13 Dec 1994 20:13:23 -0800 X-Minuet-Version: Minuet1.0_Beta_16 X-Popmail-Charset: English X-To: alt.rave.usenet(a)decwrl.dec.com, alt.culture.usenet.usenet(a)decwrl.dec.com Lines: 16 Hello, On his weekly call-in TV show on National Empowerment Television tonight, Newt received a call asking about his opinion on the Clipper Chip, and he replied that it was a moot point, in that the Clipper chip concept was designed for a condition that no longer exists. So, paranoiacs, lighten up! :-) - respect to all, Ken ken(a)snowcrest.net (primary address) (if no answer, try ken.stuart(a)tigerteam.org ) -- --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we James A. Donald are. True law derives from this right, not from the arbitrary power of the omnipotent state. jamesd(a)netcom.com

1 0

the idiot spamming people who post to alt.2600 through my remailer
by Erich von Hollander 17 Dec '03

17 Dec '03

:: Post-To: alt.2600 has been squished. e

1 0

Re: Doomsaying, development, and deployment
by Adam Shostack 17 Dec '03

17 Dec '03

Why use the PGP libs? Would it be easier to use swIPe as an engine for encryption? If you do use swIPe, name the package link IP encryption. Adam Steve wrote: | > | How about starting a todo list so we can reach a consensus on a | > | prioritized list of goals. This may help us come up with projects | > | we can work together on. I'm itching to do some coding... | > | > Some projects worth doing: | > | > a link encryptor | | If someone would recommend the best version of the pgp libs, | I'll think about adding it to plug-gw (from TIS). That would | provide a ready made transparent shell for connecting | systems. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: McCoy is Right! New Mail Format to Start Now.
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Oh, get real, Lucky! My mail reader here is neither inadequate nor (particularly) buggy - it's good old "Mail", and when somebody posts MIME mail, it quite accurately shows me the real ASCII the mail is made of - I wish my other mail reader would do that. (It's Microsoft Mail, a closed, buggy, really appalling system that chokes on messages with more than 64K of non-attachment message body, and chokes badly on >132K.) If there were a convenient MIME viewer to pop in as my PAGER, I might have mail use it rather than less -sc, my current preference. But meanwhile, a MIME is a terrible thing to waste.....

1 0

Re: properties of FV
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

In the www-buyinfo discussion on crypto, > From research!nsb.fv.com!nsb Sat Dec 17 09:36:40 1994 >Eric > "If and When" is Yes and Today. Anybody who can autosign their > > The risk analysis is absolutely true. However, I have the impression > you missed the phrase "deployed widely enough to have penetrated a > meaningful portion of our market". I suspect that the cypherbunks and > www-buyinfo communities are not the best place to get a feel for the > extent to which crypto is widely deployed. Pick some random other list > or newsgroup, however, and I'll be surprised if you find 1% market > penetration for crypto. Obviously, from reading Cypherpunks you'd get the idea that everybody has PGP and all but a few old fogies have MIME :-) However, one of the reasons that few people actually are using PGP signatures on all their messages is that there's no real need - most of us realistically aren't trying to overthrow our governments, except through obsolescence and ridicule, and there isn't much problem with forging postings on the net. On the other hand, if my credit card were involved, I'd certainly be happy to start signing all my fv payment confirmations, especially if there were a convenient tool for doing so that got distributed free.... bILL

1 0

Re: IPSP
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 11:51 AM 12/19/94, Perry E. Metzger wrote: .... >I'll send sections of my draft if anyone wants to hear more on the >topic. .... I would very much like to see the IPSP stuff. I have searched several MB of new and old mail and found no references to a source. Thanks

1 0

Re: c'punks top 5
by Andrew Lowenstern 17 Dec '03

17 Dec '03

Adam Shostack <adam(a)bwh.harvard.edu> writes: > Whats wrong with PGPtools? (A lack of documentation. Been > a while since I looked, but I think it lacked a high level > interface. The low level stuff is great, but on the mac, I can > send an Appleevent "Encrypt *file recipient" and, some extended > period later, get a response. It has been a while since I looked too, does it work with the 'new' format messages generated by MIT pgp? Does anyone actually USE pgptools for any available applications? As far as I know, nobody uses it. If nobody uses PGPtools, then what is the reason? Either nobody really wants a PGP library (which isn't true judging from the inquiries on cypherpunks), or something is wrong with PGPTools. Is it the documentation like you said? Maybe some of us should pick up where pr0duct cypher left off and enhance PGPTools. This brings me to another point: Isn't the file format for PGP supposed to change (I think I remember Colin telling me this quite a long time ago)? If it is, should we bother with PGPtools? What really is the status of PGP 3.0? Assuming the file-format has changed, shouldn't it have been decided by now? If PGP 3.0 is being written on top of a portable generic crypto-library, don't you think this, the foundation of the new PGP, would be ready (after a year+ of working on it and rumors from developers of PGP 3.0 being out in 6 months?). There was a quick thread on this last week and not a peep was heard... I really wish somebody who had a clue would fill us in on where PGP 3.0 really stands. I have the suspicion that it is not nearly as far as we would like to think. If this is the case we should probably get cracking on PGPtools. > | 5. socket-based keyserver interface for real-time automagic key > | fetches > > Who needs real time? The servers are often bogged down > and don't respond in real time anyway. The following > procmail works fine. Theres also a short shell script at the end. When I am checking a signature, I want to be able to check that signature right now! By the time an e-mail request gets back, I'm a 100 articles down the line and not interested in checking that signature anymore. For personal mail, or REALLY important news articles, I am willing to wait, of course. The finger-for-keys server at Illuminati Online is an example of real-time key fetching (although last I tried it didn't work... either it's no longer there, or it has moved from wasabi.io.com and I don't know the generic hostname for their pgp-keyserver), but to access it programatically would require some parsing and such... A keyserver that watched a TCP port and had a very simple protocol (maybe Simple Key Transfer Protocol - SKTP) for requesting keys, would be keen. Maybe auto-key fetching isn't something we need to concentrate on... I was just throwing out some ideas... andrew

1 0

Hiding strings in objects code
by Jonathon Fletcher 17 Dec '03

17 Dec '03

I'm looking for a way of concealing the text strings in an object file so that they can't be seen. I'd like to use something a little more complicated than rot13 :-), but something that's freely usable for non-profit use. Any suggestions as to which I should use ? -Jon -- Jonathon Fletcher, j.fletcher(a)stirling.ac.uk

2 1