December 2003 - cypherpunks-legacy

Re: fingerd
by Peter M Allan 17 Dec '03

17 Dec '03

Hi, These messages have been sent about fingerd. My preference for fiddling with remote fingers is to leave fingerd as supplied by the vendor (run by "nobody") and replace the finger program itself. It can be made to recognise when it is being run by "nobody" and behave differently from when run by another user. Source at the end of this file. (Bashed out fairly quickly starting from a utmp-eraser I made for a luser who wouldn't tolerate wall messages from shutdown.) I have (among other things) an extension to TCP-wrappers (a new hosts_access.c file), and a prog to find disk space wasted by duplicated files. (mail me with Subject: "send goodies" for these.) -- Peter Allan peter.allan(a)aeat.co.uk Date: 23 Jan 1997 17:22:10 -0800 From: Steven L Baur <steve(a)miranova.com> > cfingerd is not a safe program. It must run as root, and has some big > problems. > On Tue, 17 Sep 1996, Administrador da Rede wrote: > > I use the newest version of cfinger, setted to not allow general finger, just > > specific ones. Does anyone knows how this person did that ? I hope I can > > find out, otherwise, bye bye finger service. > Badly. > I have sent the author a letter, but never got any reply back (it's 3 > months later now!), so I just take the opportunity to warn the public > against its use. /* * * compile and test myfinger * * cc -C -o myfinger myfinger.c * * * (assuming the standard finger is /usr/ucb/finger) * cp /usr/ucb/finger /usr/ucb/finger.real * cp myfinger /usr/ucb/finger * * * (if using TCP wrapper reverse-fingers, make them NOT nobody, * but another id such as nobody2.) * * I disclaim any disasters........ * */ /* * * my finger program - local only, to be less informative than /usr/ucb/finger * */ #undef _utmp_h #define TRUE 1 #define FALSE 0 #define FAKE 1 #define WIPE 2 #define UTMP "/etc/utmp" #include <stdio.h> #include <pwd.h> #include "utmp.h" #include <lastlog.h> main(argc, argv, env) int argc; char **argv; char **env; { int i, listed; struct passwd *pwent; if (argc < 1) exit(0); /* beat sneaks */ /* If run by "nobody" (uid=65534) assume this is a remote finger */ /* otherwise run the standard finger command */ if (65534!=getuid()) { execv("/usr/ucb/finger.real", argv); /** if we get here exec failed, so we default to my finger **/ } printf("Login Name Where\n"); listed = 1; while ((pwent = getpwent()) != NULL) { if (argc > 1) { /* * if there are args, and name is NOT one of them, we skip * it */ listed = 0; for (i = 1; (!listed) && (i < argc); i++) { if (!strcmp(argv[i], pwent->pw_name)) listed = 1; } } if (listed) info(pwent); } } info(pwent) struct passwd *pwent; { long lpos; FILE *fp; int i; struct utmp *sp; struct utmp utmpentry; char *login,*gecos; login=pwent->pw_name; gecos=pwent->pw_gecos; sp = &utmpentry; if ((fp = fopen(UTMP, "r")) == NULL) { fprintf(stderr, "failed to open utmp for reading\n"); exit(1); } i = fseek(fp, 0, 0); if (i) { puts("failed to fseek start of file"); exit(2); } do { /* get current pos in file using ftell */ lpos = ftell(fp); /* fread the struct */ fread(sp, sizeof utmpentry, 1, fp); if (!feof(fp)) { if (!strcmp(login, sp->ut_name)) { if (!nonuser(utmpentry)) { utmpentry.ut_host[15]='\0'; printf("%s\t%s\t%s\t%s\n",login,gecos,sp->ut_line,sp->ut_host); } } } /* on error we close & exit */ if (ferror(fp)) { fprintf(stderr, " file error! so failed to find our session in utmp\n"); fclose(fp); exit(3); } } while (!feof(fp)); fclose(fp); } /* end */

1 0

Re: THE NEW YORKER on the V-Chip
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 08:23 AM 1/24/97 -0500, Alan Bostick wrote: >Gladwell makes an analogy between V-Chipped TV content and >air-conditioned cars in the New York City subway system in summertime: >" . . . we need air-conditioners on subway cars because air-conditioners >on subway cars have made stations so hot that subway cars need to be >air-conditioned." Great analogy except that it's wrong. Subway tunnels were hot before the cars ever had air conditioning. The traditional method of controlling the amount of power delivered to an electric traction motor was to run the juice through a resistor array. As the motorman moved the controller up and down, the current would pass through fewer and more banks on the grid of resistors and the amount delivered to the motors would change. Well you might guess that at 600 V DC and I don't know how many Watts, those resistor grids had to dump a lot of heat. They were/are located on the tops or bottoms of cars and are quite apparent when the cars pass you on a winter morning. DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMujKnYVO4r4sgSPhAQHgmAQAh82IvjwPXFdDchT1JvOuwf0pHGyO1xzY FsuPo2ig696dnWfXEyRhAcCvK6MKpXyaXPwtsPvJD6o8VUY2kU9UB5oddPBG7Q65 KAEwF/CBAtk3qyGmbfsd1ax65vjSkqm/+D675g/kHjAgOfaNFoRdlEXi4TLFjZZO ocj3IrSqZSE= =U0/n -----END PGP SIGNATURE-----

1 0

No Subject
by satan_is_a_hacker＠juno.com 17 Dec '03

17 Dec '03

Are their any H/ P/ V/ A/ C ers on this list??

1 0

Re: THE NEW YORKER on the V-Chip
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 08:23 AM 1/24/97 -0500, Alan Bostick wrote: >Gladwell makes an analogy between V-Chipped TV content and >air-conditioned cars in the New York City subway system in summertime: >" . . . we need air-conditioners on subway cars because air-conditioners >on subway cars have made stations so hot that subway cars need to be >air-conditioned." Great analogy except that it's wrong. Subway tunnels were hot before the cars ever had air conditioning. The traditional method of controlling the amount of power delivered to an electric traction motor was to run the juice through a resistor array. As the motorman moved the controller up and down, the current would pass through fewer and more banks on the grid of resistors and the amount delivered to the motors would change. Well you might guess that at 600 V DC and I don't know how many Watts, those resistor grids had to dump a lot of heat. They were/are located on the tops or bottoms of cars and are quite apparent when the cars pass you on a winter morning. DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMujKnYVO4r4sgSPhAQHgmAQAh82IvjwPXFdDchT1JvOuwf0pHGyO1xzY FsuPo2ig696dnWfXEyRhAcCvK6MKpXyaXPwtsPvJD6o8VUY2kU9UB5oddPBG7Q65 KAEwF/CBAtk3qyGmbfsd1ax65vjSkqm/+D675g/kHjAgOfaNFoRdlEXi4TLFjZZO ocj3IrSqZSE= =U0/n -----END PGP SIGNATURE-----

1 0

No Subject
by fuck you 17 Dec '03

17 Dec '03

Are their any H/ P/ V/ A/ C ers on this list??

2 1

Re: seeds of our own destruction
by Dale Thorn 17 Dec '03

17 Dec '03

Attila T. Hun wrote: > at 01:13 AM, Kevin Stephenson <cts(a)deltanet.com> said: > +You wrote some very interesting articles. It is the UN. > if you want a real scare, read the UN "world constitution" on > human rights and privacy --their idea of a Bill of Rights. It just > happens that it is virtually word for word equivalent to the > mainland Chinese "rights" -in other words: rights as long as they > are consistent with the aims of the state (UN) and the security > needs of the state at the given moment. [snip] > +Read Revelations (if you haven't). > the best general reference on symbology, at least of what I > have seen so far: Opening the Seven Seals (The Visions of John the Revelator) > Richard D. Draper, Desert Books, Salt Lake City, ISBN 087579-547-1, SKU 2142298 Wendy Wallace (I think) has written something about the 4 horsemen of the Apocalypse, and they've been running excerpts in Paranoia magazine. I really like Paranoia mag, check it out. If you like heavy-duty scary symbology writing (can't vouch for the exact content), check out Texe Marrs who has a recent book on the subject (can't remember the title, but pictures of the symbols on the cover, in paperback).

1 0

Re: fingerd
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Peter M Allan wrote: > > These messages have been sent about fingerd. > My preference for fiddling with remote fingers is to > leave fingerd as supplied by the vendor (run by "nobody") and > replace the finger program itself. It can be made to recognise > when it is being run by "nobody" and behave differently > from when run by another user. > > Source at the end of this file. (Bashed out fairly quickly > starting from a utmp-eraser I made for a luser who wouldn't > tolerate wall messages from shutdown.) > > I have (among other things) an extension to TCP-wrappers > (a new hosts_access.c file), and a prog to find disk space wasted by duplicated files. > (mail me with Subject: "send goodies" for these.) > /* > * > * compile and test myfinger > * > * cc -C -o myfinger myfinger.c > * > * > * (assuming the standard finger is /usr/ucb/finger) > * cp /usr/ucb/finger /usr/ucb/finger.real > * cp myfinger /usr/ucb/finger > * > * > * (if using TCP wrapper reverse-fingers, make them NOT nobody, > * but another id such as nobody2.) > * > * I disclaim any disasters........ > * > */ > > /* > * > * my finger program - local only, to be less informative than /usr/ucb/finger > * > */ > > > #undef _utmp_h > #define TRUE 1 > #define FALSE 0 > #define FAKE 1 > #define WIPE 2 > #define UTMP "/etc/utmp" > > > #include <stdio.h> > #include <pwd.h> > #include "utmp.h" > #include <lastlog.h> > > main(argc, argv, env) > int argc; > char **argv; > char **env; > { > int i, listed; > struct passwd *pwent; > > if (argc < 1) > exit(0); /* beat sneaks */ argc is never less than one. > /* If run by "nobody" (uid=65534) assume this is a remote finger */ > /* otherwise run the standard finger command */ > if (65534!=getuid()) { > execv("/usr/ucb/finger.real", argv); > /** if we get here exec failed, so we default to my finger **/ igor

1 0

Re: seeds of our own destruction
by Lou Zer 17 Dec '03

17 Dec '03

Very soon humans will not have any purpose in life but to replicate themselves. At least before the computer came along we kept ourselves busy. But now we are getting computers to do the jobs that make up life. We already precluded the need for math a long time ago.But know their are spell checkers and even applications that check your spelling as you write. I just saw on "The Site" how computers will be in shoes, in milk cartons and in door mats. The human bodies salinity will act as a conductor for the binary information. You pick up the milk carton which then tells your your shoes that its not fresh. Then when your foot touches the door mat in Publix it tells your watch to beep and say "You DONT Got Milk" Then their will be that the floor in your apartment tells the coffee pot to make coffee because it found a low caffeine level in your body. You can shake hands with someone and automatically transmit their business card to the hard drive in your shoe. The pay phone will know exactly who to bill the second the receiver is touched. But what if I bump into you, now I have your business card. What if I steal your shoe! Oh but dont worry, all this information will be ENCRYPTED.As we all know once something is encrypted its perfectly safe.Yeah right, And Bill Gates still uses a 310 baud modem. If someone really needs to know what's on your shoeputer then they will set their 1586 700Mhz (or whatever they have by then) do do just that. So what if it takes 2 weeks or 2 months. They will have every single aspect of your life from your medical records to credit card numbers to phone number(will they even USE phone numbers by then) to your shoe size. But wait theirs more. If you haven't been crawling through a cave for the past few months you will see that Intel boasts that their chips will be able to perform 2 gigaflops or 2 billion calculations per second.Can you imagine that. If you did one mathematical calculation per second it would take you 31 thousand years. It did it in a second, don't you feel dumb. Now imagine had one of these bad boys and your shoes. How long would it take? Two hours, three or maybe, if its really dragging, a day.Thats just the good old steal it and use it technique. I don't even want to go into how people could intercept information, copy it, or make their own.Well , I think I caused you enough cranial burden for today, so remember technology is like drugs, there are always more and they keep getting more effective but you do not need them. They need you. Jonathan Leto

1 0

No Subject
by Lou Zer 17 Dec '03

17 Dec '03

Does any one know of any other good mailing Lists either with crypto or anything underground

2 1

2 Questions
by privsoft＠ix.netcom.com 17 Dec '03

17 Dec '03

Hey guys, 2 quick questions: Are there any known hacks or weaknesses in S/Key? Has Anyone heard of a new product called SecureWin from Cipher Logics Corp. It looks like vaporware but is a little more sophisticated than the usual product spams (like IPG, POTP, Encrypt-it, WinKrypt etc.) [I checked there web page some interesting fuctions, , No software available yet and Phone numbers are either busy or not in service, go figure] thanks Steveo

1 0

PSS_sst
by John Young 17 Dec '03

17 Dec '03

New Scientist of 25 January reviews the Bernstein's case against crypto export, US global seduction of foreign goverrments to suppress domestic calls for privacy, and therewith deftly alerts British leaders and readers to undermining the "secretive bureaucratic" Uncle Sam scam, says the deft-underminer cpunkers quoted. ----- PSS_sst

1 0

RE: Rejection policy of the Cypherpunks maiing list
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

ichudov(a)algebra.com wrote> >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. > >I would like to hear your opinions as to whether such policies >satisfy the current readership. > > - Igor. I am not enthused about the perceived need for moderation. But neither was I enthused with the state of the list. However, I will reserve judgement as to the success or failure of the experiment for a while yet. The question for me is how much the moderation improves the S/N ratio v.s. how much it impedes dialogue. I expect Sandy to make mistakes, even by his own criterion. But anyone who will publicly admit to shaving his eyebrows is probably not swayed by popular opinion. James

1 0

[DES] DES Key Recovery Project, Progress Report #7
by Peter Trei 17 Dec '03

17 Dec '03

DES Key Recovery Project, Progress Report #7 Friday, Jan 23 1997 Peter Trei Next Tuesday morning, 9AM, RSA is scheduled to release the 'real' $10,000 DES challenge data. My software is in a state where it can be used for the challenge, though there is room for improvement. It currently tests about 185,000 keys/sec on my 90MHz machine. This translates to about 205,000 keys/sec on a 100 MHz machine. I still have to replace my DES round, which takes 25 clock cycles, with Svend Mikkelsen's, which takes only 18. Since the DES rounds are well over 80% of the work, this should boost the speed to over 250,000 keys/sec at 100 MHz. If I'm lucky, I'll perform this conversion over the weekend. I've sent out early betas to a few people for porting, but have had no feedback yet. I've approached several restricted FTP sites as possible distribution sites, and have had some positive responses, but nothing definitive yet. I'm being pretty strict in my interpretation of EAR for this purpose. In advance of the challenge, I'm willing to email copies as a ~100k uuencoded zip file to people, but to do so, you must comply with the following: 1. Send the request to ptrei(a)acm.org, NOT trei(a)process.com. I won't be able to read the latter for the next 10 days. 2. Include your 'true name' and residence address, as well as the email address to which it should be sent, . 3. A statement of your nationality. I'll mail it only to US Citizens, Canadian citizens, and US Green Card holders, residing in the US or Canada. 4. A statement to the effect that you understand that this is restricted code, and that cannot be exported or given to non-US/Canadian citizens I'm going to hold this information in strict confidence, and will surrender it only to a valid court order. It's similar to what you have to go through to download the domestic version of Netscape Navigator or PGP from MIT. You are free to distribute the software further. If you've complied with the requirements above, I believe that at that point I've done more than due diligence under ITAR/EAR. My software gets it's challenge data either from a text file cut-and-pasted from the RSA page, or from internally stored data. Tuesday night, I'll recompile the program with the real challenge data, and redistribute. My version runs on WinNT or Win95, on 486's and above. It's set up as a console app, which can run in background. I don't yet have a version for Win 3.1 or below 486, but may do in the future. The software is set up in such a way that it can be used either on a standalone system, or in a LAN environment with shared disks. The latter has a slightly more complex setup, but will allow many machines to share one executable and results file. I envisage people installing one copy on a shared disk in their workplace, and then adding the appropriate commands to the autoexec.bat file of every machine they can, so the program will start running whenever the machine is booted. (I HOPE you get permission!). The distribution includes both source and the Win32 executable. The source includes both fast Intel assembler, and much slower generic 'C'. There's nothing that's really Microsoft specific in the code - it should be easy to port to other systems with 32 bit or better processors. I'm attempting to do a 'PGP style' distribution with a signed, nested zip file. The signing key I'm using is available at http://www.ziplink.net/users/trei/crypto.html (I hope I've done this right). I'm only going to send out signed archives. If you get one where the signature fails, or one lacking a signature, I repudiate it - and you should be suspicous of it. I'll be trying to set up that URL as a page describing the project, with info on other efforts, and FAQs. Once the challenge starts, I hope you'll all evangelize it to your friends and acquaintences. I'd like to see 100,000 machines trying for the $10,000. All next week I'm in the San Francisco area (I'm flying out in a couple hours). I'll be attending the Verisign Partner's Day on Monday, and I'll be at the RSA Data Security Conference Tuesday through Friday. I'll be trying to read cypherpunks and coderpunks at least once a day, along with checking mail to ptrei(a)acm.org. I can't read cryptography(a)c2.net from an archive, so I will not see it unless it cc's ptrei(a)acm.org (Perry, could you temporarily subscribe ptrei(a)acm.org?) Happy hunting! Peter Trei ptrei(a)acm.org

1 0

Sandy dumps Igor but allows KOTM
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Sandy Sandfort, our Leader, Moderator, Guidance Counselor, Censor, and Speaker-to-Gilmour said: "By the way, contrary to what Dimitri has alleged, I have posted every message from him in which he was able to restrain himself with regard to gratuitous insults and/or spam. In other words, the set of Dimitri posts that have appeared on the moderated list is not the null set." However, KOTM wrote: "Anything? My good friend TRRCJ3 reports from San Francisco that the city is much nicer now that so many homosexuals are 6 feet under. "Thank God for AIDS." (end quote from KOTM) Nice to know Sandy is doing such an efficient job of moderating out the "flames," such as by kicking Igor's crypto-relevant article on denial of service attacks to the flame bucket while bending over backwards to appear to be "fair" to KOTM. Face it, it's a bad idea. The Cypherpunks community is not the private sandbox of Gilmour and Sandfort, and we don't need Sandy's "guidance" to keep us from being straying sheep. The list may currently be hosted on Gilmour's computer, but having Sandy decide what's right for us to read is inconsistent with Cypherpunks ideals. GenX --

3 2

Re: THE NEW YORKER on the V-Chip
by Sean Roach 17 Dec '03

17 Dec '03

At 04:57 PM 1/23/97 -0800, Alan Bostick wrote: >In the Jan. 20, 1997, issue of THE NEW YORKER, the "Comment", written by >Malcolm Gladwell, makes a powerful arguement about the unintended >consequences of the V-Chip, the programmable device to be included in >next-generation television sets sold in the US that supposedly will >allow parents to control their children's access to sex and violence on >TV. > >Gladwell makes an analogy between V-Chipped TV content and >air-conditioned cars in the New York City subway system in summertime: >" . . . we need air-conditioners on subway cars because air-conditioners >on subway cars have made stations so hot that subway cars need to be >air-conditioned." Similarly, he argues, "the V-chip is likely to >increase the amount of sex and violence on television, not decrease it" >because when viewers can block offensive programming, there is far less >pressure on broadcasters and cable operators to avoid offending. > >This is just the sort of thing that John Young is given to scanning and >putting up on his Web site or sending out to people who send him email >with FUN_nie subject lines. If I were him, I'd put it up. > >And, for the benefit of those people who don't think the V-Chip isn't in >itself on-topic for cypherpunks, I might point out that Gladwell's >argument applies equally well to mail filtering with procmail recipes -- >or Sandy's and John's list moderation experiment. If the noise level on >the unmoderated list jumps to even higher than we were seeing before >the moderation began, that would provide observational support to >Gladwell's argument. You forgot about one thing, TV is one way. The V-chip will have dueling results. On the one hand, advertisers will only pay for shows that will have a large viewership. If that means that a rather objectionable show, which would traditionally draw a large population of pre-teens, can't be seen by its largest body of fans, it will probably be cut. On the other hand, TV execs won't have to worry about objections any longer and thus can broadcast what they want, assuming that they can find a decently large group of closet viewers. (Not a misstype, I meant people who are in the closet about their preferences, such as the minister with the playboy channel.) And TV is mostly one way. This net is two way, many of the shock posts were put here to draw fire. If the audience of these shock posts can not be reach to be outraged, the vile spewer will first raise the stakes, spewing even more garbage and then, finally, giving up. Just like the old argument, don't encourage them, just ignore them. Plus, a number of reply posts to the garbage will never be written because thier authors will have never seen the trash that they would have replied to.

1 0

PSS_sst
by John Young 17 Dec '03

17 Dec '03

New Scientist of 25 January reviews the Bernstein's case against crypto export, US global seduction of foreign goverrments to suppress domestic calls for privacy, and therewith deftly alerts British leaders and readers to undermining the "secretive bureaucratic" Uncle Sam scam, says the deft-underminer cpunkers quoted. ----- PSS_sst

1 0

2 Questions
by Steven M Orrin 17 Dec '03

17 Dec '03

Hey guys, 2 quick questions: Are there any known hacks or weaknesses in S/Key? Has Anyone heard of a new product called SecureWin from Cipher Logics Corp. It looks like vaporware but is a little more sophisticated than the usual product spams (like IPG, POTP, Encrypt-it, WinKrypt etc.) [I checked there web page some interesting fuctions, , No software available yet and Phone numbers are either busy or not in service, go figure] thanks Steveo

1 0

Vulis posting on the moderated list
by E. Allen Smith 17 Dec '03

17 Dec '03

Umm... is something going wrong with the moderation routines? Sandy also had a posting that he specifically _said_ was going to the flames & unedited lists _only_ that got to me. -Allen From: IN%"dlv(a)bwalk.dm.com" "Dr.Dimitri Vulis KOTM" 24-JAN-1997 12:43:05.89 To: IN%"cypherpunks(a)toad.com" CC: Subj: Homosexuals Received: from toad.com by mbcl.rutgers.edu (PMDF #12194) id <01IELB4M5E1C94FEIV(a)mbcl.rutgers.edu>; Fri, 24 Jan 1997 12:42 EDT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id GAA25350; Fri, 24 Jan 1997 06:14:13 -0800 (PST) Date: Fri, 24 Jan 97 07:17:13 EST From: "Dr.Dimitri Vulis KOTM" <dlv(a)bwalk.dm.com> Subject: Homosexuals Sender: owner-cypherpunks(a)toad.com To: cypherpunks(a)toad.com Message-id: <199701241414.GAA25350(a)toad.com> X-Envelope-to: EALLENSMITH Precedence: bulk fuck you <satan_is_a_hacker(a)juno.com> writes in the censored list: > If anyone has any text files on the following topics please send them. ... > Anything underground Anything? My good friend TRRCJ3 reports from San Francisco that the city is much nicer now that so many homosexuals are 6 feet under. Thank God for AIDS. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

RE: Rejection policy of the Cypherpunks maiing list
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

ichudov(a)algebra.com wrote> >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. > >I would like to hear your opinions as to whether such policies >satisfy the current readership. > > - Igor. I am not enthused about the perceived need for moderation. But neither was I enthused with the state of the list. However, I will reserve judgement as to the success or failure of the experiment for a while yet. The question for me is how much the moderation improves the S/N ratio v.s. how much it impedes dialogue. I expect Sandy to make mistakes, even by his own criterion. But anyone who will publicly admit to shaving his eyebrows is probably not swayed by popular opinion. James

1 0

Re: THE NEW YORKER on the V-Chip
by Sean Roach 17 Dec '03

17 Dec '03

At 04:57 PM 1/23/97 -0800, Alan Bostick wrote: >In the Jan. 20, 1997, issue of THE NEW YORKER, the "Comment", written by >Malcolm Gladwell, makes a powerful arguement about the unintended >consequences of the V-Chip, the programmable device to be included in >next-generation television sets sold in the US that supposedly will >allow parents to control their children's access to sex and violence on >TV. > >Gladwell makes an analogy between V-Chipped TV content and >air-conditioned cars in the New York City subway system in summertime: >" . . . we need air-conditioners on subway cars because air-conditioners >on subway cars have made stations so hot that subway cars need to be >air-conditioned." Similarly, he argues, "the V-chip is likely to >increase the amount of sex and violence on television, not decrease it" >because when viewers can block offensive programming, there is far less >pressure on broadcasters and cable operators to avoid offending. > >This is just the sort of thing that John Young is given to scanning and >putting up on his Web site or sending out to people who send him email >with FUN_nie subject lines. If I were him, I'd put it up. > >And, for the benefit of those people who don't think the V-Chip isn't in >itself on-topic for cypherpunks, I might point out that Gladwell's >argument applies equally well to mail filtering with procmail recipes -- >or Sandy's and John's list moderation experiment. If the noise level on >the unmoderated list jumps to even higher than we were seeing before >the moderation began, that would provide observational support to >Gladwell's argument. You forgot about one thing, TV is one way. The V-chip will have dueling results. On the one hand, advertisers will only pay for shows that will have a large viewership. If that means that a rather objectionable show, which would traditionally draw a large population of pre-teens, can't be seen by its largest body of fans, it will probably be cut. On the other hand, TV execs won't have to worry about objections any longer and thus can broadcast what they want, assuming that they can find a decently large group of closet viewers. (Not a misstype, I meant people who are in the closet about their preferences, such as the minister with the playboy channel.) And TV is mostly one way. This net is two way, many of the shock posts were put here to draw fire. If the audience of these shock posts can not be reach to be outraged, the vile spewer will first raise the stakes, spewing even more garbage and then, finally, giving up. Just like the old argument, don't encourage them, just ignore them. Plus, a number of reply posts to the garbage will never be written because thier authors will have never seen the trash that they would have replied to.

1 0

[DES] DES Key Recovery Project, Progress Report #7
by Peter Trei 17 Dec '03

17 Dec '03

DES Key Recovery Project, Progress Report #7 Friday, Jan 23 1997 Peter Trei Next Tuesday morning, 9AM, RSA is scheduled to release the 'real' $10,000 DES challenge data. My software is in a state where it can be used for the challenge, though there is room for improvement. It currently tests about 185,000 keys/sec on my 90MHz machine. This translates to about 205,000 keys/sec on a 100 MHz machine. I still have to replace my DES round, which takes 25 clock cycles, with Svend Mikkelsen's, which takes only 18. Since the DES rounds are well over 80% of the work, this should boost the speed to over 250,000 keys/sec at 100 MHz. If I'm lucky, I'll perform this conversion over the weekend. I've sent out early betas to a few people for porting, but have had no feedback yet. I've approached several restricted FTP sites as possible distribution sites, and have had some positive responses, but nothing definitive yet. I'm being pretty strict in my interpretation of EAR for this purpose. In advance of the challenge, I'm willing to email copies as a ~100k uuencoded zip file to people, but to do so, you must comply with the following: 1. Send the request to ptrei(a)acm.org, NOT trei(a)process.com. I won't be able to read the latter for the next 10 days. 2. Include your 'true name' and residence address, as well as the email address to which it should be sent, . 3. A statement of your nationality. I'll mail it only to US Citizens, Canadian citizens, and US Green Card holders, residing in the US or Canada. 4. A statement to the effect that you understand that this is restricted code, and that cannot be exported or given to non-US/Canadian citizens I'm going to hold this information in strict confidence, and will surrender it only to a valid court order. It's similar to what you have to go through to download the domestic version of Netscape Navigator or PGP from MIT. You are free to distribute the software further. If you've complied with the requirements above, I believe that at that point I've done more than due diligence under ITAR/EAR. My software gets it's challenge data either from a text file cut-and-pasted from the RSA page, or from internally stored data. Tuesday night, I'll recompile the program with the real challenge data, and redistribute. My version runs on WinNT or Win95, on 486's and above. It's set up as a console app, which can run in background. I don't yet have a version for Win 3.1 or below 486, but may do in the future. The software is set up in such a way that it can be used either on a standalone system, or in a LAN environment with shared disks. The latter has a slightly more complex setup, but will allow many machines to share one executable and results file. I envisage people installing one copy on a shared disk in their workplace, and then adding the appropriate commands to the autoexec.bat file of every machine they can, so the program will start running whenever the machine is booted. (I HOPE you get permission!). The distribution includes both source and the Win32 executable. The source includes both fast Intel assembler, and much slower generic 'C'. There's nothing that's really Microsoft specific in the code - it should be easy to port to other systems with 32 bit or better processors. I'm attempting to do a 'PGP style' distribution with a signed, nested zip file. The signing key I'm using is available at http://www.ziplink.net/users/trei/crypto.html (I hope I've done this right). I'm only going to send out signed archives. If you get one where the signature fails, or one lacking a signature, I repudiate it - and you should be suspicous of it. I'll be trying to set up that URL as a page describing the project, with info on other efforts, and FAQs. Once the challenge starts, I hope you'll all evangelize it to your friends and acquaintences. I'd like to see 100,000 machines trying for the $10,000. All next week I'm in the San Francisco area (I'm flying out in a couple hours). I'll be attending the Verisign Partner's Day on Monday, and I'll be at the RSA Data Security Conference Tuesday through Friday. I'll be trying to read cypherpunks and coderpunks at least once a day, along with checking mail to ptrei(a)acm.org. I can't read cryptography(a)c2.net from an archive, so I will not see it unless it cc's ptrei(a)acm.org (Perry, could you temporarily subscribe ptrei(a)acm.org?) Happy hunting! Peter Trei ptrei(a)acm.org

1 0

Just drop you a note
by biz25＠prodigy.net 17 Dec '03

17 Dec '03

Hi, Just thought I would drop you a note letting you know of an opportunity that I came across lately. I have been amazed at the success I have had with this product. Please email me for URL (more details) if you are interested. Type "URL" in the subject line. Regards Sonia

1 0

Re: your mail
by Genocide 17 Dec '03

17 Dec '03

On Fri, 24 Jan 1997, fuck you wrote: > Are their any H/ P/ V/ A/ C ers on this list?? Yes. Genocide Head of the Genocide2600 Group ============================================================================ **Coming soon! www.Genocide2600.com! ____________________ *---===| |===---* *---===| Genocide |===---* "You can be a king or a street *---===| 2600 |===---* sweeper, but everyone dances with the *---===|__________________|===---* Grim Reaper." Email: gen2600(a)aracnet.com Web: http://www.aracnet.com/~gen2600 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ It is by caffeine alone that I set my mind in motion. It is by the Mountain Dew that the thoughts acquire speed, the lips acquire stains, the stains become a warning. It is by caffeine alone that I set my mind in motion. ================================================================================

1 0

Mondex
by nobody＠zifi.genetics.utah.edu 17 Dec '03

17 Dec '03

Timothy C. May has been fired from Intel for stealing office supplies. o \ o / _ o __| \ / |__ o _ \ o / o /|\ | /\ ___\o \o | o/ o/__ /\ | /|\ Timothy C. May / \ / \ | \ /) | ( \ /o\ / ) | (\ / | / \ / \

1 0

[DES] DES Key Recovery Project, Progress Report #7
by Peter Trei 17 Dec '03

17 Dec '03

DES Key Recovery Project, Progress Report #7 Friday, Jan 23 1997 Peter Trei Next Tuesday morning, 9AM, RSA is scheduled to release the 'real' $10,000 DES challenge data. My software is in a state where it can be used for the challenge, though there is room for improvement. It currently tests about 185,000 keys/sec on my 90MHz machine. This translates to about 205,000 keys/sec on a 100 MHz machine. I still have to replace my DES round, which takes 25 clock cycles, with Svend Mikkelsen's, which takes only 18. Since the DES rounds are well over 80% of the work, this should boost the speed to over 250,000 keys/sec at 100 MHz. If I'm lucky, I'll perform this conversion over the weekend. I've sent out early betas to a few people for porting, but have had no feedback yet. I've approached several restricted FTP sites as possible distribution sites, and have had some positive responses, but nothing definitive yet. I'm being pretty strict in my interpretation of EAR for this purpose. In advance of the challenge, I'm willing to email copies as a ~100k uuencoded zip file to people, but to do so, you must comply with the following: 1. Send the request to ptrei(a)acm.org, NOT trei(a)process.com. I won't be able to read the latter for the next 10 days. 2. Include your 'true name' and residence address, as well as the email address to which it should be sent, . 3. A statement of your nationality. I'll mail it only to US Citizens, Canadian citizens, and US Green Card holders, residing in the US or Canada. 4. A statement to the effect that you understand that this is restricted code, and that cannot be exported or given to non-US/Canadian citizens I'm going to hold this information in strict confidence, and will surrender it only to a valid court order. It's similar to what you have to go through to download the domestic version of Netscape Navigator or PGP from MIT. You are free to distribute the software further. If you've complied with the requirements above, I believe that at that point I've done more than due diligence under ITAR/EAR. My software gets it's challenge data either from a text file cut-and-pasted from the RSA page, or from internally stored data. Tuesday night, I'll recompile the program with the real challenge data, and redistribute. My version runs on WinNT or Win95, on 486's and above. It's set up as a console app, which can run in background. I don't yet have a version for Win 3.1 or below 486, but may do in the future. The software is set up in such a way that it can be used either on a standalone system, or in a LAN environment with shared disks. The latter has a slightly more complex setup, but will allow many machines to share one executable and results file. I envisage people installing one copy on a shared disk in their workplace, and then adding the appropriate commands to the autoexec.bat file of every machine they can, so the program will start running whenever the machine is booted. (I HOPE you get permission!). The distribution includes both source and the Win32 executable. The source includes both fast Intel assembler, and much slower generic 'C'. There's nothing that's really Microsoft specific in the code - it should be easy to port to other systems with 32 bit or better processors. I'm attempting to do a 'PGP style' distribution with a signed, nested zip file. The signing key I'm using is available at http://www.ziplink.net/users/trei/crypto.html (I hope I've done this right). I'm only going to send out signed archives. If you get one where the signature fails, or one lacking a signature, I repudiate it - and you should be suspicous of it. I'll be trying to set up that URL as a page describing the project, with info on other efforts, and FAQs. Once the challenge starts, I hope you'll all evangelize it to your friends and acquaintences. I'd like to see 100,000 machines trying for the $10,000. All next week I'm in the San Francisco area (I'm flying out in a couple hours). I'll be attending the Verisign Partner's Day on Monday, and I'll be at the RSA Data Security Conference Tuesday through Friday. I'll be trying to read cypherpunks and coderpunks at least once a day, along with checking mail to ptrei(a)acm.org. I can't read cryptography(a)c2.net from an archive, so I will not see it unless it cc's ptrei(a)acm.org (Perry, could you temporarily subscribe ptrei(a)acm.org?) Happy hunting! Peter Trei ptrei(a)acm.org

1 0

Re: Encrypting ZIP disks
by David E. Smith 17 Dec '03

17 Dec '03

I'm playing with SecureDrive; the problem is not with using it with a Zip disk so much as it is trying to get it to play nice with Windows 95. ObCrypto: Check this out (from the readme.txt that comes on every Zip disk before you delete it) 7. Secure sensitive files. To keep sensitive or confidential information safe, store it on a Zip disk and use your Zip Tools software to assign a password that must be used in order to read from or write to the disk. At work, you can protect sensitive information such as personnel files, company directories, and product plans and designs. At home, you can secure personal information such as tax records, budgets, and computerized checkbooks. Iomega hasn't been willing to tell me how the password is stored, so this looks like a big boiling pot of snake oil. Anyone out there played with Zip drive/disk internals and know how it works? dave

2 1

Online Spending with Smart Cards and E.Cash to To US$3.5bn byyear 2000
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 24 Jan 97 00:04:40 +0100 To: dcsb(a)ai.mit.edu Subject: Online Spending with Smart Cards and E.Cash to To US$3.5bn by year 2000 Cc: nelson@media.mit.edu.geer@OpenMarket.com From: a9050756(a)unet.univie.ac.at (Mike Alexander) Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: a9050756(a)unet.univie.ac.at (Mike Alexander) >>[some Fed reserve guy's] argument for stored value cards is that the >>business costs of handling cash are so substantial that there is room >>for merchants to discount purchases when made by a means that does >>not require that handling cost. > >Does anyone know of a source for information on the overhead of >accepting various forms of payment? I assume the cost of cash is >smaller than credit cards for purchases under, say, $500. Any >estimates on smart cards? On pure digital cash (delivered via a >browser)? > >I'm particularly interested in micropayments, but the larger question >is interesting as well. I've worked on this topic extensively in the past months (writing a doctoral thesis on efficiency and risk in the payment system). I can assure you this: cash in is still and will remain one of the most efficient payment instruments. This holds looking at it from a private as well as social cost perspective with sufficient empirical support. Best Regards, Michael Alexander Doctoral Student at the University of Vienna -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzIhxYwAAAEEALtfkL/X6GuZpEECWnmkmbqqtGwNalb94Om82VUiBE8iU1OX 2e5WXQGsq1oManSqVQn3TpVo7VE9pMJr5vITAmkEA6szGRt5zbK5u/dIqhLnJnRE sVpiY61Xw6RvQKoXX7LSqOYSCqvIiY8GJ5gRpiKQNPZVuJRqbLipmU0fPqylAAUR tDFNaWNoYWVsIEYuIEFsZXhhbmRlciA8YTkwNTA3NTZAdW5ldC51bml2aWUuYWMu YXQ+iQCVAwUQMiHFjbipmU0fPqylAQGy4QP+LjB6lZXVYFZDpoVB7j8AGvkghSsr XicZapXPmsFX6xpt+S29EF4DGoDJIDq6VLJMZ2rQ1gFfEvvWzL7ekZ3orhLSpJoO WWRZF1MNZVWBNhzxBcdK2T6yrx4cBwQX7t299Ho0y1Go69VE9e3LN8YInIXoQYp5 bc4M0u16GqmV5eI= =5l49 -----END PGP PUBLIC KEY BLOCK----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from the dcsb list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

RE: Rejection policy of the Cypherpunks maiing list
by Mullen, Patrick 17 Dec '03

17 Dec '03

Igor sez: >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. I question this, too. What, exactly, is the criterion? Cypherpunks charter sez: The cypherpunks list is a forum for discussing personal defenses for privacy in the digital domain. <Keep in mind I didn't read the described article> How does personal attacks through forged and anonymous mail not fit this topic? However, I _do_ have to say such a topic would have to keep with a descriptive attitude, rather than demonstrative... :-) On another note, even though some messages which may be of interest may get lost in the shuffle, I do like the reduced volume, esp. since I get listmail at work. Unfortunately, the reduced mail is a result of censorship... :-( ~ Patrick >---------- >From: ichudov@algebra.com[SMTP:ichudov@algebra.com] >Sent: Friday, January 24, 1997 2:33 AM >To: Cypherpunks >Subject: Rejection policy of the Cypherpunks maiing list > >I would like to start a thread to discuss the moderation and rejection >policy. > >My perfectly crypto-relevant article regarding possible attacks >on human relationships with the use of forged mail and anonymous >remailers, has been tossed out (sorted) into cypherpunks-flames >mailing list. > >You can receive a copy of my article by an email request. > >The explanation that Sandy Sandfort gave me mentioned that he rejected >my message because it continued a thread where Sandy noticed instances >of "flaming". Note that my message was free of any flames, including >its quoted part. > >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. > >I would like to hear your opinions as to whether such policies satisfy >the current readership. > > - Igor. > >

1 0

Re: Encrypting ZIP disks
by Toto 17 Dec '03

17 Dec '03

David E. Smith wrote: > I'm playing with SecureDrive; the problem is not with using it > with a Zip disk so much as it is trying to get it to play nice > with Windows 95. > Iomega hasn't been willing to tell me how the password is stored, > so this looks like a big boiling pot of snake oil. Anyone out > there played with Zip drive/disk internals and know how it works? > Dave, I came across a 'cracker' program that claims to be able to hack the SecureDrive encryption system. Off the top of my head, I think it was called ZipCracker, or something similar in name to one of the PKZip encryption cracking programs. I found it on one of the hacker websites, and there was a text file regarding SecureDrive which went into some detail re: both the hardware and software aspects of the Zip drives and the encryption itself. Toto

1 0

RE: Rejection policy of the Cypherpunks maiing list
by Mullen 17 Dec '03

17 Dec '03

Igor sez: >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. I question this, too. What, exactly, is the criterion? Cypherpunks charter sez: The cypherpunks list is a forum for discussing personal defenses for privacy in the digital domain. <Keep in mind I didn't read the described article> How does personal attacks through forged and anonymous mail not fit this topic? However, I _do_ have to say such a topic would have to keep with a descriptive attitude, rather than demonstrative... :-) On another note, even though some messages which may be of interest may get lost in the shuffle, I do like the reduced volume, esp. since I get listmail at work. Unfortunately, the reduced mail is a result of censorship... :-( ~ Patrick >---------- >From: ichudov@algebra.com[SMTP:ichudov@algebra.com] >Sent: Friday, January 24, 1997 2:33 AM >To: Cypherpunks >Subject: Rejection policy of the Cypherpunks maiing list > >I would like to start a thread to discuss the moderation and rejection >policy. > >My perfectly crypto-relevant article regarding possible attacks >on human relationships with the use of forged mail and anonymous >remailers, has been tossed out (sorted) into cypherpunks-flames >mailing list. > >You can receive a copy of my article by an email request. > >The explanation that Sandy Sandfort gave me mentioned that he rejected >my message because it continued a thread where Sandy noticed instances >of "flaming". Note that my message was free of any flames, including >its quoted part. > >Sandy also states rather plainly that crypto-relevance is not the >criterion by which he moderates this list. I question this policy. > >I would like to hear your opinions as to whether such policies satisfy >the current readership. > > - Igor. > >

1 0

Re: Homosexuals
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <199701241414.GAA25350(a)toad.com>, on 01/24/97 at 07:17 AM, "Dr.Dimitri Vulis KOTM" <dlv(a)bwalk.dm.com> said: +Anything? My good friend TRRCJ3 reports from San Francisco that the +city is much nicer now that so many homosexuals are 6 feet under. +Thank God for AIDS. when AIDS was relatively obscure, I always dismissed AIDS as God's response to homosexuality (and other crimes against nature); i.e. -settlement by a just God. Unfortunately, some of these boy-girls could not keep it among themselves, and the closet queens brought it home. AIDS replicates asexually, knowing no boundaries. I would not wish the disease upon anyone, but if you play, you just might pay --as in "...reap what thy hath sown." One of the saddest commentaries on the entire problem is the man, a Pan-American flight steward, who was identified as carrier #1 by the Communicable Disease Center (CDC) in Atlanta; he died protesting he did not have the disease, nor was he a carrier. The flight steward was still sexually active until his impending death removed even his ability to passively participate. Unfortunately, he was not only in total denial as to the disease and its communicability, but he was also immensely profligate, having surrendered to total licentiousnous. To be strongly opposed to homosexuality has nothing to do with bigotry, political correctness, or aberrationist apologists; it is an exposition of the natural order among the species. and for those who deny God, read Darwin as to the relative rate of survival for deviant and/or abnormal species. == "eschewing my enmity is exemplary, even transcending my fraternity. --attila -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: Encrypted with 2.6.3i. Requires 2.6 or later. iQCVAwUBMukZO704kQrCC2kFAQHdVgP+K5WJPhgPDY3DJerIYHmz4PbsItrSQCF0 eoS2wyYVTG3PZ5YDhk+dRfn2OuhEE0n/vLiDlXakAjqQBtncyIF74pfE4mxn3DWC 1xLMJr9vFI7x0soX6sPIzSD9Yh0CyKHIk75r/RQk2T4doVoGSxJWbe0YKCItiGz4 PvH9hGh6F7E= =A2up -----END PGP SIGNATURE-----

2 1

Re: Encrypting ZIP disks
by David E. Smith 17 Dec '03

17 Dec '03

I'm playing with SecureDrive; the problem is not with using it with a Zip disk so much as it is trying to get it to play nice with Windows 95. ObCrypto: Check this out (from the readme.txt that comes on every Zip disk before you delete it) 7. Secure sensitive files. To keep sensitive or confidential information safe, store it on a Zip disk and use your Zip Tools software to assign a password that must be used in order to read from or write to the disk. At work, you can protect sensitive information such as personnel files, company directories, and product plans and designs. At home, you can secure personal information such as tax records, budgets, and computerized checkbooks. Iomega hasn't been willing to tell me how the password is stored, so this looks like a big boiling pot of snake oil. Anyone out there played with Zip drive/disk internals and know how it works? dave

2 1

Online Spending with Smart Cards and E.Cash to To US$3.5bn by year 2000
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 24 Jan 97 00:04:40 +0100 To: dcsb(a)ai.mit.edu Subject: Online Spending with Smart Cards and E.Cash to To US$3.5bn by year 2000 Cc: nelson@media.mit.edu.geer@OpenMarket.com From: a9050756(a)unet.univie.ac.at (Mike Alexander) Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: a9050756(a)unet.univie.ac.at (Mike Alexander) >>[some Fed reserve guy's] argument for stored value cards is that the >>business costs of handling cash are so substantial that there is room >>for merchants to discount purchases when made by a means that does >>not require that handling cost. > >Does anyone know of a source for information on the overhead of >accepting various forms of payment? I assume the cost of cash is >smaller than credit cards for purchases under, say, $500. Any >estimates on smart cards? On pure digital cash (delivered via a >browser)? > >I'm particularly interested in micropayments, but the larger question >is interesting as well. I've worked on this topic extensively in the past months (writing a doctoral thesis on efficiency and risk in the payment system). I can assure you this: cash in is still and will remain one of the most efficient payment instruments. This holds looking at it from a private as well as social cost perspective with sufficient empirical support. Best Regards, Michael Alexander Doctoral Student at the University of Vienna -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzIhxYwAAAEEALtfkL/X6GuZpEECWnmkmbqqtGwNalb94Om82VUiBE8iU1OX 2e5WXQGsq1oManSqVQn3TpVo7VE9pMJr5vITAmkEA6szGRt5zbK5u/dIqhLnJnRE sVpiY61Xw6RvQKoXX7LSqOYSCqvIiY8GJ5gRpiKQNPZVuJRqbLipmU0fPqylAAUR tDFNaWNoYWVsIEYuIEFsZXhhbmRlciA8YTkwNTA3NTZAdW5ldC51bml2aWUuYWMu YXQ+iQCVAwUQMiHFjbipmU0fPqylAQGy4QP+LjB6lZXVYFZDpoVB7j8AGvkghSsr XicZapXPmsFX6xpt+S29EF4DGoDJIDq6VLJMZ2rQ1gFfEvvWzL7ekZ3orhLSpJoO WWRZF1MNZVWBNhzxBcdK2T6yrx4cBwQX7t299Ho0y1Go69VE9e3LN8YInIXoQYp5 bc4M0u16GqmV5eI= =5l49 -----END PGP PUBLIC KEY BLOCK----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from the dcsb list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

CPSR President Aki Namioka Interviewed on "Real Time" Monday
by ISP-TV Main Contact 17 Dec '03

17 Dec '03

*** ISP-TV Program Announcement: CPSR President Aki Namioka Interviewed on "Real Time" *** *** Monday, Jan. 27 *** *** 9 PM ET / 6 PM PT *** Aki Namioka is President of the Computer Professionals for Social Responsibility (CPSR), a non-profit, public-interest group which advocates for civil rights with respect to electronic information. Netizens may remember Namioka's speech against the CDA at Seattle's "Internet Day of Protest" Rally. We'll ask Ms. Namioka about the history of the CPSR, and current issues CPSR follows in cyber rights, civil liberties, and technology education. She will be interviewed remotely over CU-SeeMe from the Speakeasy Cafe in Seattle, Washington (http://www.speakeasy.org/) Call-in questions will be taken during the show at (301) 847-6571. **** This video interview can be viewed on the ISP-TV main CU-SeeMe reflector at IP 205.197.248.54, or other ISP-TV affiliate reflectors listed at http://www.digex.net/isptv/members.html. See URL http://www.digex.net/isptv for more information about the ISP-TV Network To get email about future programming on ISP-TV, email the word "subscribe" to isptv-prog-request(a)isptv.digex.net. To obtain Enhanced CU-SeeMe software, go to: http://goliath.wpine.com/cudownload.htm

1 0

Re: Homo/bi/sexuals Most Destructive
by Attila T. Hun 17 Dec '03

17 Dec '03

aga's original message follows pgp----- -----BEGIN PGP SIGNED MESSAGE----- when AIDS was relatively obscure, I always dismissed AIDS as God's response to homosexuality (and other crimes against nature); i.e. -settlement by a just God. Unfortunately, some of these boy-girls could not keep it among themselves, and the closet queens brought it home. AIDS replicates asexually, knowing no boundaries. I would not wish the disease upon anyone, but if you play, you just might pay --as in "...reap what thy hath sown." One of the saddest commentaries on the entire problem is the man, a Pan-American flight steward, who was identified as carrier #1 by the Communicable Disease Center (CDC) in Atlanta; he died protesting he did not have the disease, nor was he a carrier. The flight steward was still sexually active until his impending death removed even his ability to passively participate. Unfortunately, he was not only in total denial as to the disease and its communicability, but he was also immensely profligate, having surrendered to total licentiousnous. To be strongly opposed to homosexuality has nothing to do with bigotry, political correctness, or aberrationist apologists; it is an exposition of the natural order among the species. and for those who deny God, read Darwin as to the relative rate of survival for deviant and/or abnormal species. == "eschewing my enmity is exemplary, even transcending my fraternity. --attila -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: Encrypted with 2.6.3i. Requires 2.6 or later. iQCVAwUBMukqX704kQrCC2kFAQGsDAQAxAMLt2JwaKqfz1Kw5IMf+EAQnQaoxpzR LtyTbCEvwhZRymfFwLZPj3P9Ph074ufOv0r/EmntvF2KmTETWM7k8ol5EySGjCbf 2mytxMy5VQiy5TBJWCvnxwdp/UjACtBM1sY8X16UyMLSE0tyzy4k3sF0TmPPkKdG FUQZzjXwYfQ= =TNlj -----END PGP SIGNATURE----- In <Pine.LNX.3.95.970116062523.30623C-100000(a)dhp.com>, on 01/16/97 at 06:28 AM, aga <aga(a)dhp.com> said: +> "Who Are The Patients? +> "In the United States, homosexual and bisexual males make up > +approximately 62 percent of the total patients. The other major group > +afflicted with AIDS are intravenous drug abusers -- both men and women +-- +> who constitute 20 percent of the total. . . ." +> +> "ADULTS AND ADOLESCENTS WITH AIDS, 1981-87 +> ================================== Males % Females % Both sexes +% > Homosexual/bisexual males 50,325 68 0 +50,325 62 > Intravenous (IV) drug abusers 12,529 17 3,622 52 +16,151 20 > Homosexual male an IV drug abusers 5,874 8 +5,874 7 > Hemophilia/coagulation disorder 751 1 22 0 +773 1 > Heterosexuals 1,516 2 2,073 30 +3,589 4 > Blood transfusion 1,297 2 747 11 +2,044 3 > Undetermined (1) 2,143 3 519 7 +2,662 3 > TOTAL 74,435 91 6,983 9 +81,418 100 > +========================================================================= +> "Note: Provisional data. Cases with more than one risk factor than +the > combinations listed are tabulated only in the category listed +first. > (1) Includes patients on whom risk information is incomplete, +patients > still under investigation, men reported only to have had +heterosexual > contact with a prostitute, and patients for whom no +specific risk was > identified; also includes one health care worker +who developed AIDS after > a documented needle-stick to blood. Source: +Centers for Disease Control." > +========================================================================= +> Cited in "The Universal Almanac 1990", Andrews and McMeel, 1989. > +=========================================================================

2 1

Re: Rejection policy of the Cypherpunks maiing list
by Cynthia H. Brown 17 Dec '03

17 Dec '03

On Fri, 24 Jan 1997, Toto wrote: > Igor Chudov @ home wrote: <snip> > > The explanation that Sandy Sandfort gave me mentioned that he rejected > > my message because it continued a thread where Sandy noticed instances > > of "flaming". Note that my message was free of any flames, including > > its quoted part. > > The standard of what constitutes a 'flame' seems to rest very much > upon whom a comment is directed at, or merely 'vaguely toward'. Beauty, flames and censorship are all in the eyes of the beholder. However, by providing both "raw" and "cooked" versions of the list, Sandy is allowing readers to choose for themselves whether or not they want someone else's filters applied to their mailbox. Personally, I choose to press the "Delete" key myself. <snip> > > Sandy also states rather plainly that crypto-relevance is not the > > criterion by which he moderates this list. > > This was more than obvious to anyone who cared to cast an objective > eye on the process, but their input was pooh-paah'd by the 'washed > masses'. Note that Sandy also stated that the post in question would not be sent to the 'washed masses'. > > I would like to hear your opinions as to whether such policies satisfy > > the current readership. > > Like all of the 'opinions' that were expressed prior to the censorship > of the list? I haven't seen any indication that these opinions were > given the slightest consideration. This is not the readership's list. > It is a private individual's list. Agreed, and said private individual can do as s/he sees fit. My only objection is that the moderated version has the same name as the original list (sounds like Rogers Cable's recent attempt at "Costs More Unless You Speak Up Now" channels). <snip> > In short, I don't see the moderation as being 'fair', and I don't > think it was ever meant to be. Again, fairness is in the eyes of the beholder. I don't object to the list being filtered, as long as everyone understands that this is happening. What will happen, I wonder, if at the end of the trial period the number of subscribers to the "raw" list outnumbers those who get the "cooked" list, or vice versa? Is that one of the criteria for determining the "success" of the experiment? Cynthia =============================================================== Cynthia H. Brown, P.Eng. Ottawa, Ontario, Canada E-mail: cynthb(a)sonetis.com Home Page: http://www.sonetis.com/~cynthb/ PGP Key: See Home Page Junk mail will be ignored in the order in which it is received. Klein bottle for rent; enquire within.

1 0

(fwd) Re: PGP implementation source code
by frogfarm＠yakko.cs.wmich.edu 17 Dec '03

17 Dec '03

[The discussion started with Pretty Safe Mail, the recent "PGP-compatible" Mac program, and whether or not it was safe. Source code is not available. Some authors noted that PSM was much slower than PGP, but so far lives up to its promise of user-friendliness. A Win95 version is in the works.] >From: Ian_Miller(a)bifroest.demon.co.uk (Ian Miller) Newsgroups: comp.security.pgp.discuss,comp.security.pgp.resources Subject: Re: PGP implementation source code (was "Imminent Death of PGP?" revisited) Date: Fri, 24 Jan 1997 19:55:46 +0000 Lines: 66 Message-ID: <AF0EC44296683DACD(a)bifroest.demon.co.uk> In article <5c2kap$1tu(a)topcat.uk.gdscorp.com>, Steve Gilham <steveg(a)uk.gdscorp.com> wrote: >PGP defines, but, IIRC does not inspect, a comment packet type. This >packet type could be added to a .pgp file and contain anything the >implementor wished (your plaintext secret key if it has been used in >this instance of the program, any IDEA key used, your passphrase, if >given) without any standard PGP implementation being aware of it The IDEA initialisation vector could also be used as a subliminal channel, it is only 8 bytes but it could (for example) leak a random 60 bits of one prime in your secret key with the remain 4 bits saying which set of 60 bits. Worse is the possibility that the program could put a back door into RSA key generation to make the modulus trivially factorisable by someone in the know. There are a number of mechanisms for this of varying detectability up to detectable only by reverse-engineering. Here are some of the (endless) possibilities in order of increasing sophistication:- 1) Make one of the primes a constant. Factorise by dividing by this number. Detectable by inspection of public keys alone. (For more details, see my article "There are no common factors in the Public keyring", 13th Jan in comp.security.pgp.announce.) 2) Select the first prime P at random but make second prime Q the smallest prime larger than PK where K is a constant. Factorise by searching from root(N/K). Probably detectable by suitable inspection of several secret keys generated by the product, but (I think) undetectable from public keys alone. 3) Select a random seed and using a good PRNG, make the rest of generation process deterministic based on the seed. Use the "deadbeef" technique to select a modulus that has this seed as its least significant bytes. Factorise by extracting the seed from the modulus and repeating the deterministic key generation. This is detectable only by reverse engineering. 4) Select a random seed and use a short key PKE key exchange system (e.g. Elliptic curve) to generate a session key and a key exchange cyphertext. Use a key generation similar to (3) except that you seed the PRNG with the session key and deadbeef to make a key ending in the key exchange cyphertext. Factorise by extracting and decrypting the session key (requires a secret key), and repeating the key generation. Again this is only detectable by reverse engineering, but even after executing the reverse engineering you still cannot factor the keys generated because the program only contains the public key not the secret key. Method (4) is an interesting example of a "locked back-door". There is often an unstated assumption that back-doors have to be open. i.e. If you can find them you can get in. It isn't always true. Whereas it seems intuitively unlikely, it is not inconceivable that there is a way of putting a locked back-door into some forms of Feistel ciphers. The NSA would have been reluctant to put an open back-door into DES, but they would not have hesitated to put in a locked back-door. In my opinion the only safe assumption is that they could and they did. In cryptography you shouldn't trust your intuition, code with source or unexplained algorithm components. Ian Ian_Miller(a)bifroest.demon.co.uk FAI-D10204 PGP key 1024/FCE97719 FP: 2A 20 46 10 E5 96 27 40 91 B1 95 BA CA D3 BC 14 Antworten auf Deutsch waeren mir angenehm. -- http://yakko.cs.wmich.edu/~frogfarm ...for the best in unapproved information Tell your friends 'n neighbors you read this on the evil pornographic Internet "Where one burns books, one will also burn people eventually." -Heinrich Heine People and books aren't for burning. No more Alexandrias, Auschwitzs or Wacos.

1 0

Extra Income
by pal＠king.cts.com 17 Dec '03

17 Dec '03

*********************************************************************** Our Research Has Indicated That The Following Message Will Be Of Interest To You. *********************************************************************** Imagine what you can do with... UP TO $800.00 A WEEK EXTRA INCOME! Here's How To Get Started Let me tell you which companies to contact so you can start to receive your checks. They can be $200.00, $400.00, even $800.00 per week, depending on what you do. You can earn this excellent income right at home. And you work only when you want to. My name is Henry Summers. I investigate income opportunities that are advertised in magazines or by mail or are listed in home work directories and other sources. Then I talk to people who are actually using these opportunities. I ask how much money they make... and whether they enjoy the work. This helps me direct you to the best opportunities that are available today. Ones that people are using right now to earn all the money they want. Get Paid For Stuffing Envelopes. No Fees. Nothing To Buy. This easy work is very appealing, but most people do not know how to get it. That's because so many of the envelope stuffing programs being advertised are not what you expect. And you don't find that out until after you send in your money. Let me tell you the real facts. With true envelope stuffing... * You do not need to pay any fee or buy any materials to get started. * You do not do any advertising or handle any orders. * All printing, postage, and mailing lists are supplied free by the companies that pay you. * Your pay is based entirely on how many envelopes you complete. Rosie Martinez is an example of someone who earns money stuffing envelopes. The company delivers all the materials right to her door. She stuffs the envelopes, seals them, and applies the mailing labels and postage stamps that are supplied. Then she gets paid for every envelope completed. Rosie says, "I'm retired, and I enjoy having something to do. I usually watch television while I work. The home shopping shows are much more fun now that I have money to spend." If you'd like to do this kind of work, just follow the directions in Chapter 3 of my book "Real Home Income". Or try any of the other opportunities covered. Hundreds of companies are ready to help you make money. I'll tell you what each one has available now. Choose the kind of work you like and write to the companies who offer it. Pick any you want. You can work as an independent contractor for as many companies as you have time for. There are no qualifications to meet, so you will not be turned down. I guarantee it. If you don't like one company or you want to make more money, there are plenty of others you can try. Get Paid For Assembling Miniatures Gina Walker of Texas likes to assemble miniature furniture for doll houses. All the necessary materials are supplied by the company that pays her. She puts them together and sends them back to the company. Everything is conveniently handled by mail and UPS. The company sends her a nice pay check for each batch she completes. Gina says: "I really like the work, and the extra money helps pay my bills. I'm glad I found out about these companies." You can get paid the same way. And you don't have to make miniatures. You can choose from many other types of work. You can sew baby bonnets, assemble beaded jewelry, crochet doll clothes, make wooden items, assemble stuffed animals, paint figurines, weave rattan reed, and many more. You get the names and addresses of over 50 companies that will pay for things you make or assemble at home. No experience is required, and it makes no difference where you live. Almost all the companies supply the needed materials. Just do the work and get paid for each batch you send back. Wouldn't you like to get those pay checks? I'll show you how to get started fast. How I Made $800.00 Per Week After Losing My Job I became interested in home income opportunities several years ago when I lost my job. I sent for dozens of money making offers. Most were totally worthless. Others did not appeal to me. But circular mailing caught my interest... and it actually worked. In just six weeks, I was making over $800.00 a week working part time at home. It was better than my previous job. I soon paid off my bills and bought a new car. Yet that was only the beginning. As I learned more about it and tried different things, the money poured in even faster. It made a huge difference when I applied certain secrets that are used by the experts. I was amazed at how profitable it could be. In "Real Home Income" you'll learn how to use those secrets yourself. I'll tell you which companies to contact to get started. I'll show you some simple steps you can take to double your income without doing any more work. If you want, you can do all of this without handling any orders. Your name and address does not have to appear on anything you mail. You just mail circulars for companies and receive nice fat checks from them. With my proven methods, you can soon be earning more money than you ever imagined. Just follow my directions, and you can start receiving checks from the same companies I do. Receive One Dollar For Each Envelope You Stuff. Envelopes Come To You Already Stamped And Addressed. This easy work is advertised by over thirty- five companies. But they require that you pay $25.00 to $45.00 to register in their program. And then the program seldom turns out to be what you'd expect. That's where my book can help out. I describe the three kinds of mail programs that pay one dollar per envelope. But there is only ONE that I recommend. Not only is it more profitable overall, but you don't have to pay any fee to do it. Not even a dollar. Read about "The World's Best Dollar- Per- Envelope Program" in Chapter 4. How To Avoid Disappointment So many worthless offers are commonly advertised that many people give up before they come across a good one. That won't happen to you when you have my book. It tells you exactly how to recognize and avoid worthless offers. The most common ripoffs are covered in detail. This knowledge can save you a great deal of time and money. You can then take advantage of the many practical, down- to- earth opportunities that are described. Ones that enable you to start making money fast. Even just one extra source of income can make a big difference in your standard of living. Start To Earn Money In 48 Hours When you get the book, look over the many excellent opportunities. Each listing includes a brief description of what is offered. Write to the companies you like and request an application form. They have openings right now, and they'll be happy to get you started. You can begin to make money even faster if you choose one of the programs or plans that the book describes in detail. I'll tell you everything you need to know to get started. By taking a few simple steps, you can already be making money just 48 hours after you receive the book. Unlimited No Nonsense Guarantee "Real Home Income" costs just $29.95 plus $3.00 for postage and handling. I'm so confident you can make the money I've talked about that I back it with a lifetime, money- back guarantee. If at any time you feel the book has not helped you make all the money you want, just send it back. I'll promptly send you a full refund of everything you paid, including postage and tax. Start to enjoy more income and a better life as soon as possible. Please complete the order form and mail it today. Everything will be rushed to you by first class mail. Sincerely, Henry Summers P.S. I've recently discovered an amazingly profitable opportunity. One person I talked to made $20,000 in his first six weeks... working right at home in his spare time. It is not multi- level marketing. I've never seen anything like it before. I'l give you a toll free number to call so you can get started. Please Print and Mail This Order Form ----------------------------------------------------------------------------------------------- SUMMERS PUBLICATIONS # 30516 1010 Calle Cordillera, P.O. Box 3127 San Clemente, CA 92672 ( ) Yes, I would like to get started. Please rush me "Real Home Income" under your lifetime money- back guarantee. Enclosed is $29.95 plus $3.00 for postage and handling. $32.95 total. (If you live in California, please send $34.95) Name____________________________________________ Address___________________________________________ City, State, Zip_____________________________________ -------------------------------------------------------------------------------------------------

1 0

(fwd) New keyserver available
by frogfarm＠yakko.cs.wmich.edu 17 Dec '03

17 Dec '03

>From: tage(a)cc.uit.no (Tage Stabell-Kulo) Newsgroups: comp.security.pgp.tech Subject: New keyserver available Date: 24 Jan 1997 16:11:26 GMT Lines: 12 Message-ID: <5camve$3d4(a)news.uit.no> A new PGP keyserver, still _very_ experimental, is available at host dslab1.cs.uit.no at port 24162, use telnet(1). In general it will find a key in a few seconds. Your comments and suggestions are solicited. -- //// Tage Stabell-Kuloe | e-mail: Tage(a)ACM.org //// /// Department of Computer Science/IMR | Phone : +47-776-44032 /// // 9037 University of Tromsoe, Norway | Fax : +47-776-44580 // / "'oe' is '\o' in TeX" | URL:http://www.cs.uit.no/~tage/ -- http://yakko.cs.wmich.edu/~frogfarm ...for the best in unapproved information "We think people like seeing somebody in a uniform on the porch." -US Postal spokeswoman, quoted in AP, 1/27/96. I don't know about you, but most people I know who saw someone in uniform on their porch would pull out the shotgun...

1 0

(fwd) Re: PGP implementation source code
by Damaged Justice 17 Dec '03

17 Dec '03

[The discussion started with Pretty Safe Mail, the recent "PGP-compatible" Mac program, and whether or not it was safe. Source code is not available. Some authors noted that PSM was much slower than PGP, but so far lives up to its promise of user-friendliness. A Win95 version is in the works.] >From: Ian_Miller(a)bifroest.demon.co.uk (Ian Miller) Newsgroups: comp.security.pgp.discuss,comp.security.pgp.resources Subject: Re: PGP implementation source code (was "Imminent Death of PGP?" revisited) Date: Fri, 24 Jan 1997 19:55:46 +0000 Lines: 66 Message-ID: <AF0EC44296683DACD(a)bifroest.demon.co.uk> In article <5c2kap$1tu(a)topcat.uk.gdscorp.com>, Steve Gilham <steveg(a)uk.gdscorp.com> wrote: >PGP defines, but, IIRC does not inspect, a comment packet type. This >packet type could be added to a .pgp file and contain anything the >implementor wished (your plaintext secret key if it has been used in >this instance of the program, any IDEA key used, your passphrase, if >given) without any standard PGP implementation being aware of it The IDEA initialisation vector could also be used as a subliminal channel, it is only 8 bytes but it could (for example) leak a random 60 bits of one prime in your secret key with the remain 4 bits saying which set of 60 bits. Worse is the possibility that the program could put a back door into RSA key generation to make the modulus trivially factorisable by someone in the know. There are a number of mechanisms for this of varying detectability up to detectable only by reverse-engineering. Here are some of the (endless) possibilities in order of increasing sophistication:- 1) Make one of the primes a constant. Factorise by dividing by this number. Detectable by inspection of public keys alone. (For more details, see my article "There are no common factors in the Public keyring", 13th Jan in comp.security.pgp.announce.) 2) Select the first prime P at random but make second prime Q the smallest prime larger than PK where K is a constant. Factorise by searching from root(N/K). Probably detectable by suitable inspection of several secret keys generated by the product, but (I think) undetectable from public keys alone. 3) Select a random seed and using a good PRNG, make the rest of generation process deterministic based on the seed. Use the "deadbeef" technique to select a modulus that has this seed as its least significant bytes. Factorise by extracting the seed from the modulus and repeating the deterministic key generation. This is detectable only by reverse engineering. 4) Select a random seed and use a short key PKE key exchange system (e.g. Elliptic curve) to generate a session key and a key exchange cyphertext. Use a key generation similar to (3) except that you seed the PRNG with the session key and deadbeef to make a key ending in the key exchange cyphertext. Factorise by extracting and decrypting the session key (requires a secret key), and repeating the key generation. Again this is only detectable by reverse engineering, but even after executing the reverse engineering you still cannot factor the keys generated because the program only contains the public key not the secret key. Method (4) is an interesting example of a "locked back-door". There is often an unstated assumption that back-doors have to be open. i.e. If you can find them you can get in. It isn't always true. Whereas it seems intuitively unlikely, it is not inconceivable that there is a way of putting a locked back-door into some forms of Feistel ciphers. The NSA would have been reluctant to put an open back-door into DES, but they would not have hesitated to put in a locked back-door. In my opinion the only safe assumption is that they could and they did. In cryptography you shouldn't trust your intuition, code with source or unexplained algorithm components. Ian Ian_Miller(a)bifroest.demon.co.uk FAI-D10204 PGP key 1024/FCE97719 FP: 2A 20 46 10 E5 96 27 40 91 B1 95 BA CA D3 BC 14 Antworten auf Deutsch waeren mir angenehm. -- http://yakko.cs.wmich.edu/~frogfarm ...for the best in unapproved information Tell your friends 'n neighbors you read this on the evil pornographic Internet "Where one burns books, one will also burn people eventually." -Heinrich Heine People and books aren't for burning. No more Alexandrias, Auschwitzs or Wacos.

1 0

Re: Homo/bi/sexuals Most Destructive (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 24 Jan 97 21:33:41 +0000 > From: "Attila T. Hun" <attila(a)primenet.com> > Subject: Re: Homo/bi/sexuals Most Destructive Much drivel about AIDS deleted. > One of the saddest commentaries on the entire problem is the > man, a Pan-American flight steward, who was identified as carrier > #1 by the Communicable Disease Center (CDC) in Atlanta; he died The correct term is 'Patient 0'. Jim Choate CyberTects ravage(a)ssz.com

1 0

(fwd) New keyserver available
by Damaged Justice 17 Dec '03

17 Dec '03

>From: tage(a)cc.uit.no (Tage Stabell-Kulo) Newsgroups: comp.security.pgp.tech Subject: New keyserver available Date: 24 Jan 1997 16:11:26 GMT Lines: 12 Message-ID: <5camve$3d4(a)news.uit.no> A new PGP keyserver, still _very_ experimental, is available at host dslab1.cs.uit.no at port 24162, use telnet(1). In general it will find a key in a few seconds. Your comments and suggestions are solicited. -- //// Tage Stabell-Kuloe | e-mail: Tage(a)ACM.org //// /// Department of Computer Science/IMR | Phone : +47-776-44032 /// // 9037 University of Tromsoe, Norway | Fax : +47-776-44580 // / "'oe' is '\o' in TeX" | URL:http://www.cs.uit.no/~tage/ -- http://yakko.cs.wmich.edu/~frogfarm ...for the best in unapproved information "We think people like seeing somebody in a uniform on the porch." -US Postal spokeswoman, quoted in AP, 1/27/96. I don't know about you, but most people I know who saw someone in uniform on their porch would pull out the shotgun...

1 0

Re: Homo/bi/sexuals Most Destructive (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 24 Jan 97 21:33:41 +0000 > From: "Attila T. Hun" <attila(a)primenet.com> > Subject: Re: Homo/bi/sexuals Most Destructive Much drivel about AIDS deleted. > One of the saddest commentaries on the entire problem is the > man, a Pan-American flight steward, who was identified as carrier > #1 by the Communicable Disease Center (CDC) in Atlanta; he died The correct term is 'Patient 0'. Jim Choate CyberTects ravage(a)ssz.com

2 1

Re: Airport security [no such thing]
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, On Thu, 23 Jan 1997 ichudov(a)algebra.com wrote: > Is it really true that my response was tossed out as flames? a) NO posts have been "tossed out." Your response was sorted into the "flames" list--not because it flamed directly, but because it was part of the threat started by Dimitri in which he engaged in flaming. b) While I realize this is a judgment call that others might dispute, I don't think it makes much sense to post to the moderated list only the parts of threads that are not flamish. I would rather keep thread intact on one list or the other. There are exceptions. I put one of Dimitri's post on this thread into the moderated list because the point he made did not require particular knowledge of the entire thread and had non-inflamatory relevance. > It was crypto-relevant. Perhaps, but crypto-relevance is NOT the criterion by which I am moderating the list. I am sort on the basis of (a) emotional, non-relevant personal attacks on list members, and (b) spam. I believe (and so far the postings have borne me out) that in an atmosphere of civil, reasoned discourse, the relevance issue will largely take care of itself. By the way, contrary to what Dimitri has alleged, I have posted every message from him in which he was able to restrain himself with regard to gratuitous insults and/or spam. In other words, the set of Dimitri posts that have appeared on the moderated list is not the null set. By the way number two, this response will be posted to the flames list and NOT the moderated list. Even though I have not flamed anyone, two things keep it off the moderated list: (1) my policy about keeping thread on the same list where possible (see above), and (2) basic precepts of fairness. Though Dimitri has stated-- without a scintilla of evidence--that my moderation policy would be used to attack him and not give him the opportunity or forum to defend himself, I am keeping ALL personal attacks off the moderated list. Those who are subscribed to the "flam" postings can see numerous unkind posts about Dimitri that I have not allowed on the moderated list. That policy applies to me just as much as to anyone else. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

Comments
by satan_is_a_hacker＠juno.com 17 Dec '03

17 Dec '03

All comments on my article will be welcome and replied to.

1 0

Anyone have info on foreign "ITARS"
by Bill Campbell 17 Dec '03

17 Dec '03

Does anyone have any pointers to info about the import/export restrictions on encryption products in various countries. I know any such summary would be very dynamic, but perhaps there's something out there. Thanks! =Bill=

1 0

Re: greed and the internet
by azur＠netcom.com 17 Dec '03

17 Dec '03

> The Internet will no no longer be the peoples net, and the > commercial greedies are establishing a faster, more secure > network with controlled access points; leaving the common man's > access in the mud, still paying the exorbitant rates on a pay > before play basis. That, and it gives control of information to > the government --which, as we all know. is 'heavenly white' > -above sin. > Rather than being forced by pressures from the market, smaller ISPs appear to be holding their own and in many cases thriving. A significant number of them have begun to form their own cooperatives to operate mini-NAPs, mosty to aggregate local traffic and reduce unnecessary traffic to the NAPs. It isn't too far a stretch to envision that should this practive become commonplace, these smaller ISPs could band together to create their own Net overlay, bypassing the NAPs. This trend could spell trouble for gov't agencies expecting to monitor Net traffic from only a few convenient locations (i.e., NAPs). --Steve

1 0

Scandinavian Goverments provide PGP to postal customers...
by Hugh Daniel 17 Dec '03

17 Dec '03

FYI: >From: jsp(a)betz.biostr.washington.edu >Sent: Friday, January 24, 1997 2:31 PM >Subject: Meanwhile, back in the Free World... > > >Encrypted Email For Finns, Swedes, Danes > by Sami Kuusela > > 4:43 pm PST 23 Jan 97 - While keeping a watchful eye on the emerging > American encryption policy, Scandinavian countries are embarking > on a joint project to implement the first international email security > service. > > Nordic Post Security Service (NPSS) - involving Finland, Norway, > Sweden, and Denmark - hopes to provide secure email, and > officials say that soon every Nordic citizen can walk into the > nearest post office and sign up for it. > > But no matter the success of the secure email system, the NPSS > project is a clear sign that, unlike the United States, Northern > Europe is moving forward with exporting encryption technology > across national barriers. > > "Finnish policy has not been to start with regulations and fear of > Net issues," says Anu Lamberg, the head of the Information > Network Unit in the Finnish Ministry of Transport and > Communications. "The American discussion on this matter has > been funny to watch, but I hope nobody in Europe or Finland starts > to question the very basics of democracy." > > Based on PGP, with no "third-party" key holder, the Nordic system > uses unbreakable RSA-algorithm encryption with a 1024-bit key. > > However, some hardware is required. Because the key is on a > smartcard, users must have smartcard readers installed on their > computers, which aren't yet widely available. But Pdr Andler of > Finnish Hewlett Packard says that later this year, smartcard readers > will become standard on computers in Scandinavia. "It is a really > big help for users, who don't have to remember dozens of > passwords when using different kind of services," Andler says. > > The project has been moderately successful in Finland - the first > Nordic country to offer the secure email - as the system isn't any > more difficult to use than a standard email program. All the user > has to do is click "send." > > For project developers, using strong crypto was never an issue. > "From the very beginning we've been basing this on strong crypto," > says Vesa-Pekka Moilanen, technical director for Finland Post, and > mastermind of the email project. "At first, the customers are going > to be mainly professionals," he says, "but quite soon private > individuals will start using it." But the use of secure email probably > won't be widespread until 1998 - if then. > > "If strong crypto is banned it's going to have major effects on the > development of information society," says Risto Siilasmaa, the > CEO and president of DataFellows, one of the only makers of > encryption programs in Finland. The Finnish government awarded > DataFellows "most innovative company" honors in 1996. "But > nobody is going to limit strong crypto. I haven't met a single > leading Nordic official who says otherwise." > > One question, though: What if a Nordic citizen enters the United > States with the email program installed on his or her laptop? For > now, Nordic officials are only beginning to contemplate the > ramifications.

1 0

Re: your mail
by tekmasta＠global.california.com 17 Dec '03

17 Dec '03

At 02:37 PM 1/24/97 -0800, you wrote: >On Fri, 24 Jan 1997, fuck you wrote: > >> Are their any H/ P/ V/ A/ C ers on this list?? > > Yes. > >Genocide >Head of the Genocide2600 Group > > >============================================================================ > **Coming soon! www.Genocide2600.com! > ____________________ > *---===| |===---* > *---===| Genocide |===---* "You can be a king or a street > *---===| 2600 |===---* sweeper, but everyone dances with the > *---===|__________________|===---* Grim Reaper." > >Email: gen2600(a)aracnet.com Web: http://www.aracnet.com/~gen2600 > >^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > It is by caffeine alone that I set my mind in motion. > It is by the Mountain Dew that the thoughts acquire speed, > the lips acquire stains, the stains become a warning. > It is by caffeine alone that I set my mind in motion. >=========================================================================== ===== try my site too http://gcwp.com/fadedimage can anyone help me out with getting pgp working... I just got 2.6.2 excutable the freeware one and its for dos... I need to get one that works with eudora or netscape.... please help! ,_ ,. .`.--- . ,-,-,-. ,---. .---. |_ / | ,-| |__ ,-|.`,| | | ,-.| -' ,-.,'\___ | /~~|-.| |,| | || | ; | .,-|| ,-'|-' \ | ,' `-'`-'`^---`-'' ' `-'`-^`---| `-' `---' ' ,-.| `-+' ,-. . .,-. . . . ,-_/,.,--. | | ,-.,-| | | ,-.,-|,-.,-.,-.,-.,-.. .,-.,-| ' |_|/| | | | .| || | | | .| || ||-'| | || | || || || | /| | | \| `--^-'' '`-' `--^-'' '`-'`-'' `-|' `-'`-'' '`-' `' `'`--\ ,| `' -= http://gcwp.com/fadedimage =-

1 0

Re: Homo/bi/sexuals Most Destructive (fwd)
by no_one＠nowhere.org 17 Dec '03

17 Dec '03

In article <199701250026.QAA13770(a)toad.com>, ravage(a)einstein.ssz.com (Jim Choate) wrote: > Much drivel about AIDS deleted. > > > One of the saddest commentaries on the entire problem is the > > man, a Pan-American flight steward, who was identified as carrier > > #1 by the Communicable Disease Center (CDC) in Atlanta; he died > > The correct term is 'Patient 0'. And the CDC is the Centers for Disease Control; and it has since found many, many prior cases of AIDS. These three minor errors are indicative of Attila's reliability of the subject. Of course, no one at CDC or NIH believes any of this crap; it was tired a decade ago. ObCrypto? How to implement RL anonymity protocols for medical treatment? (Of course I'm stretching it - but "carriers" were the *first* horseman.

1 0