December 2003 - cypherpunks-legacy

Re: denial of service and government rights
by Dale Thorn 17 Dec '03

17 Dec '03

Mail Delivery Subsystem wrote: > ----- The following addresses had delivery problems ----- > <Tired.Fighter(a)dhp.com> (unrecoverable error) > 550 <Tired.Fighter(a)dhp.com>... User unknown > ----- Original message follows ----- > Tired.Fighter(a)dhp.com wrote: > > On 30 Nov 96 at 13:10, Black Unicorn wrote: > > > On Fri, 29 Nov 1996, Greg Broiles wrote: > > > > I don't see any reason why this wouldn't be true for a > > > > computer. Fed.Rul.Crim.Pro. 41(b)(1) allows the seizure > > > > (but seizure is not forfeiture) of "property that > > > > constitutes evidence of the commission of a > > > > criminal offense". > > [snip] > > > Please forgive my naivete, but are there no legal > > weapons available to the 'victims' in such cases? > > I'm passingly familiar with the Operation Sundevil > > fiasco -- i.e., with the outcome re the principal > > 'charges'. I'm appalled, however, at the apparent > > lack of remedies for return of such seized property. > > Are individuals who find themselves in such a > > predicament simply at the government's mercy (there's > > an oxymoron for ya)?? > > Just in case someone replies saying "It's not all that bad", or "It can't > happen here", etc., you should know this: > > The United States government has not been responsive to the people for > a long time, but what's become evident in recent years is that they're > also no longer responsive to basic law and order. > > They do respond to extreme pressure, as was applied in the Weaver, Waco, > and other similar cases, but, as a general rule, they do whatever they > want all the way to the top of the Justice dept. with impunity. > > Example: George Bush's old pal at the Wash. DC P.R. firm hires the > niece(?) of a Kuwaiti official to testify in front of Congress in full > view of the American people on television, that the Iraquis were throwing > babies out of incubators in Kuwait, thereby securing the necessary votes > in Congress to prosecute the Gulf War. > > When it was discovered (after the "war") that the Incubator Baby Scandal > was a lie, nobody was prosecuted. Further, in blatant violation of the > U.S. Constitution, Bush and Schwartzkopf were knighted by Queen Elizabeth > II of England. > > There are also numerous examples of the Justice dept. being caught red- > handed forging documents to frame people for whom they had no evidence or > insufficient evidence to prosecute, and what happens in those cases? > Nothing.

5 12

Re: Building a DC-NET
by Gary Howland 17 Dec '03

17 Dec '03

Dimitri writes: > > Black Unicorn <unicorn(a)schloss.li> writes: > > > On Sat, 30 Nov 1996, Simon Spero wrote: > > > > > (what's the Alice/Bob name for someone trying a denial of service attack?) > > > > Louis? > > John the petty small-time bitch? How about William? (Can't use Bill, since 'B' is taken). Could refer to Clinton (since he denies services to Cuba etc.), or to Gates (the creator of 'denial of service', aka. DOS). Gary

2 1

ubject
by Gary Howland 17 Dec '03

17 Dec '03

Swastikas halt Corel sales By Reuters November 25, 1996, 12 p.m. PT MUNICH, Germany--Corel (COSFF) software company has temporarily halted sales of its top-selling Corel Draw graphics program in Germany because it includes four banned Nazi symbols, a company spokesman said today. The Canadian company will remove three drawings of Adolf Hitler and one swastika from future versions of its popular software, spokesman Thomas Layer said. It is also distributing warning labels to be placed on versions now being sold, Layer said. The label warns that the "improper use of digital images and symbols" found in the programs Corel Draw 4.0, 5.0, and 6.0 is prohibited in Germany, which bans public displays of Nazi symbols. Munich's state prosecutor launched an investigation into the software on October 2 after learning that someone had used the banned images to print business cards for a neo-Nazi group, Layer said. This is not the first time that the company has had complaints due to their clip art images. In 1992, pressure from US Black rights organisations forced drawings of the Ku Kux Klan to be removed from the collection. Consideration is also being given to the removal of other images from the collection, either due to legal restrictions in various countries, or due to complaints from organisations such as the Simon Wiesenthal Center. Images considered for removal include a burning US flag, Josef Stalin, the Star of David icon, a cannabis leaf, and a drawing of a woman in a bathing costume. Corel Draw provides more than 24,000 clip art drawings and symbols that computer users can copy. The company suspended the sales on November 19.

1 0

COREL TO CENSOR ALL CLIP ART WORLDWIDE
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Swastikas halt Corel sales By Reuters November 25, 1996, 12 p.m. PT MUNICH, Germany--Corel (COSFF) software company has temporarily halted sales of its top-selling Corel Draw graphics program in Germany because it includes four banned Nazi symbols, a company spokesman said today. The Canadian company will remove three drawings of Adolf Hitler and one swastika from future versions of its popular software, spokesman Thomas Layer said. It is also distributing warning labels to be placed on versions now being sold, Layer said. The label warns that the "improper use of digital images and symbols" found in the programs Corel Draw 4.0, 5.0, and 6.0 is prohibited in Germany, which bans public displays of Nazi symbols. Munich's state prosecutor launched an investigation into the software on October 2 after learning that someone had used the banned images to print business cards for a neo-Nazi group, Layer said. This is not the first time that the company has had complaints due to their clip art images. In 1992, pressure from US Black rights organisations forced drawings of the Ku Kux Klan to be removed from the collection. Consideration is also being given to the removal of other images from the collection, either due to legal restrictions in various countries, or due to complaints from organisations such as the Simon Wiesenthal Center. Images considered for removal include a burning US flag, Josef Stalin, the Star of David icon, a cannabis leaf, and a drawing of a woman in a bathing costume. Corel Draw provides more than 24,000 clip art drawings and symbols that computer users can copy. The company suspended the sales on November 19.

2 1

COREL TO CENSOR ALL CLIP ART WORLDWIDE
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Swastikas halt Corel sales By Reuters November 25, 1996, 12 p.m. PT MUNICH, Germany--Corel (COSFF) software company has temporarily halted sales of its top-selling Corel Draw graphics program in Germany because it includes four banned Nazi symbols, a company spokesman said today. The Canadian company will remove three drawings of Adolf Hitler and one swastika from future versions of its popular software, spokesman Thomas Layer said. It is also distributing warning labels to be placed on versions now being sold, Layer said. The label warns that the "improper use of digital images and symbols" found in the programs Corel Draw 4.0, 5.0, and 6.0 is prohibited in Germany, which bans public displays of Nazi symbols. Munich's state prosecutor launched an investigation into the software on October 2 after learning that someone had used the banned images to print business cards for a neo-Nazi group, Layer said. This is not the first time that the company has had complaints due to their clip art images. In 1992, pressure from US Black rights organisations forced drawings of the Ku Kux Klan to be removed from the collection. Consideration is also being given to the removal of other images from the collection, either due to legal restrictions in various countries, or due to complaints from organisations such as the Simon Wiesenthal Center. Images considered for removal include a burning US flag, Josef Stalin, the Star of David icon, a cannabis leaf, and a drawing of a woman in a bathing costume. Corel Draw provides more than 24,000 clip art drawings and symbols that computer users can copy. The company suspended the sales on November 19.

2 1

Ping!
by cypherpunks＠count04.mry.scruznet.com 17 Dec '03

17 Dec '03

--------

1 0

Ping! ((chain=(anon);1;(replay)))
by cypherpunks＠count04.mry.scruznet.com 17 Dec '03

17 Dec '03

-------- ping 5

1 0

Ping! ((chain=(anon);1;(replay)))
by cypherpunks＠count04.mry.scruznet.com 17 Dec '03

17 Dec '03

-------- ping 5

1 0

A quick discussion of Mersenne Numbers
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

I wake of the latest find announcement, some people maybe wondering what the heck is this?!! A mercenne number is of the type: M(p) = 2**p -1 results in a prime when p is a prime. Hopefully this will lead the way to see the pattern of prime numbers and being able to compute prime numbers in a far more efficient manner (after all a function that when given a prime number results in a prime number would be quite a kicker now wouldn't it!) The other Mersenne primes include: 2,3,5,7,13,17,19,31,127,61,89, and 107. The numbers 67 and 257 are not primes.... Have fun in them prime number databases....

4 5

Another problem with IPG algorithm
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Don and others, At the heart of IPG algorithm there is a pseudo-random number generator which generates values of A(JV). (see http://www.netprivacy.com/algo.html) DO JV=JV+1 IF JV=53 THEN JV=0 A(JV)=(A(JV)+B(JV)) MOD C(JV) UNTIL A(JV)<16384 Note that if B(JV) and C(JV) in a triplet (A(JV), B(JV), C(JV)) are not mutually prime, they will generate very few numbers and not a whole set 0-16383. For example, if C(JV) is 20000, and B(JV) is 10000, and initial A is (for example) 57, the only two numbers that this triplet will generate will be 57 and 10057. This refutes Don Wood's claim that the distribution of results approaches even. Even if only ONE triplet is such as I described (and it is VERY likely to happen statistically), the distribution will be skewed. Don, what do you think about it? igor

2 2

Re: denial of service and government rights
by jim bell 17 Dec '03

17 Dec '03

At 09:25 PM 11/30/96 -0500, Tired.Fighter(a)dhp.com wrote: >On 30 Nov 96 at 13:10, Black Unicorn wrote: > >> On Fri, 29 Nov 1996, Greg Broiles wrote: > >> [...] >> >> > I don't see any reason why this wouldn't be true for a >> > computer. Fed.Rul.Crim.Pro. 41(b)(1) allows the seizure >> > (but seizure is not forfeiture) of "property that >> > constitutes evidence of the commission of a >> > criminal offense". >> >> It is true of computers. >> Take the case of Ripco (the Chicago BBS raided in the >> SunDevil raids back when). >> >> I don't think "Dr. Ripco" has yet gotten his equipment >> back. I don't know for sure, but what I do know is >> that 5 years after the raid, he still had certainly >> not gotten anything back. Unicorn has a long history of reciting government abuses, but then failing to provide any sort of answer to them. My solution (AP: "Assassination Politics") would make such abuse fatal. Jim Bell jimbell(a)pacifier.com

2 1

Re: denial of service and government rights
by Greg Broiles 17 Dec '03

17 Dec '03

At 05:24 PM 12/1/96 -0800, Dale Thorn wrote: >So what you're saying is I (or we) can testify in front of Congress on >essentially any topic, telling a blatant lie (that we know is false, and >which they will subsequently prove is false), and totally get away with >it. You and I can do that, is that what you're saying? This is idiotic. I suspect it's deliberately idiotic, but I can't see what anyone gains by it. If you've got a point to make, would you please just say what you're thinking and move on? There's a big difference between something being punishable and someone being punished. The false testimony was given on behalf of a friendly government, and in favor of a cause which met with widespread national support and was the focus of much (literal) flag-waving and patriotic speechifying. In general, you face very few risks if you lie in a way which helps a very popular cause, and the people you're lying to want to do the thing that your lies are purportedly justifying. Your risks are much greater if you're saying something unpopular or if you are an unpopular person. I'm not talking about law, I'm talking about politics. And the fact that laws are sometimes enforced in a political matter shouldn't be news to anyone. (I'm not saying that's good, but I think it's attributable to and a result of to the general fallibility of human beings, myself included, so I'm skeptical about easy answers. Real-world solutions tend to fall short of theoretical perfection. Doh.) >If that is true, then my original contention that things are far worse >than the person I originally responded to was imagining, stands as >correct. Things are bad indeed. I'd sure appreciate it if you'd just say what you're thinking (if it's on-topic) instead of playing stupid "Is X true? Is Y true? Wow! I've just discovered something new!" games. Your comments suggest to me that what you're dancing around is, essentially, that the government is morally wrong because it (eliding distinctions between governments and branches of governments) enforces laws in an erratic or discriminatory or political fashion. That's what I'm extracting from your messages. If there's something more to what you're saying, I think I'd have a better chance of extracting it if you devoted less energy to tricky rhetorical strategies. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

2 1

Phrack, where can i find it?
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

where can i find latest (and old) phrack issues?

3 2

RSA key generation in 13 lines of Perl
by Steve Reid 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've completed my Perl/dc RSA key generation program. The compacted 13-line version is below. A commented version can be found at http://www.edmweb.com/steve/rsagen.txt #!/usr/local/bin/perl $k=768;$e=sprintf'%X',65537;print"Please enter a LOT of random junk.\n" ;$a=<STDIN>;print"Working. This may take a while.\n";for(1..(length($a)- 1)){$b[$_&31]^=unpack('C',substr($a,$_,1));$b[$_&31]=(($b[$_&31]<<5)|($b [$_&31]>>3))&255;}for(0..255){$c[$_]=$_;}$a=$d=$f=0;for(0..255){$a=($a+ $c[$_]+$b[$a&31])&255;($c[$_],$c[$a])=($c[$a],$c[$_]);}open(F,'|dc'); select F;print"16dio[$e+]sa";for(1..50){for(1..$k/32){printf'%02X',&g;} print"Sr";}for(1,2){printf'%02X',&g|128;for(2..$k/16){printf'%02X',&g;} print"d$e%-2+d2%0=aSP";}print"[d2%SA2/d0<X+d*LA1=ZlP%0]sX[lR*]sZ[1+Q]sQ[ la1+sa0sc]sA[lAxlb1+sb]sB[ld1+sdLrddSssR1lP1-2/lXx+1+lP%99scd0=A2=Bclcla +32>C]sC[LsSrld1-dsd0<D]sD[le1+se0ddsasbsdlCxlDxlP2 $e*+sPlc99=Elb32=ElP 2 $e*-led1>QQ]sE_1selExsq_1seLPlExsp[p=]Plpp[q=]Plqp[n=]P*p[e=]P$e p1-lp 1-lq1-**1+$e/[d=]Pp\n";close(F);sub g{$d=($d+1)&255;$f=($f+$c[$d])&255;( $c[$d],$c[$f])=($c[$f],$c[$d]);return($c[($c[$d]+$c[$f])&255]);} I'm sure this can be compacted further. I haven't put a lot of work into compacting it; I really just want to get it out. Run the program, type in a LOT of random gibberish (several lines at least) and press enter. Then wait. Eventually it will output your p, q, n, e and d in hexadecimal. p and q: Prime numbers, congruent to 2 mod e. They can usually be discarded, but they should never be revealed. n: Your public modulus e: Your public encryption exponent (usually 10001 hex) d: Your private decryption exponent By default the program generates a 768-bit public modulus and a public exponent of 10001 hex (65537 decimal). These can be changed by adjusting the numbers in the first line. A 1024-bit modulus would be better, but for some reason generation takes a LOT longer than a 768-bit modulus. Fortunately key generation doesn't need to be done very often. Timings on a 100 MHz Pentium running FreeBSD: Size of n Time 512-bit: 4-5 minutes 768-bit: 8-9 minutes 1024-bit: 35-80 minutes (ack!) I've had some difficulty generating 1024-bit keys, but it seems to be working now. Let me know if you see any problems generating large keys other than the obvious problem with the time spent. Disclaimer: This program seems to work, but your milage may vary. -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv iQEVAwUBMqID5dtVWdufMXJpAQE14AgApqOI2MMPe0V74cKI0vc3bDw8hfDW723c QKqVleH0MTIv4F792bf7ItekM81RbQiaB+AhSigFFFb679ZgdCV7XpPOwhkE3SD4 vJy1xU4HdZ6TbSrfzzZn8Peqd5K5zZdY7CpXbxW30TZWFNX5lqdDAAbvM77h36QC h/jwK1nWMzrTDupbhBwemkpZKaFmk5uAms5Y94Ckezh66+sOcWmvf7smyn8RJg4q zad6OVrclso22NBp/Pa0nf2+IdgFnhEfHgHxsI0t+awSokfr6WlZ8WAScxv40kJO KfcdBX1DXg4spl8kXgoQOrrA3VIUJKWXFfpnTt2nAKr/P4XfbpyFQw== =CY5F -----END PGP SIGNATURE-----

1 0

Secure Memory Deletion
by Mark Rosen 17 Dec '03

17 Dec '03

Does anyone know any papers on secure deletion of things from memory? That is one thing that most people are oblivious to, though, if a program leaves your unencrypted passkey laying in memory or a buffer of your plaintext, then all the encryption in the world won't help. Should I overwrite the 32 times specified for hard drives, or are RAM chips easier to clear? Thanks.

2 1

No Subject
by vitamin＠best.com 17 Dec '03

17 Dec '03

I apologize if this is off topic. I received free one month trial in July from Netcom and in mid July I canceled my account with Netcom due to lousy customer service. When I called I was treated rudely because of canceling netcom. I called again the next day and the person who answered the phone apologized me for the behaviour of the previous employee and I was told my account will be canceled. Low and behold come July I got my credit card statement and netcom had billed me. I promtly called them and was assured that my account would be cancelled. Come September I was billed again for August and September. Once again I called and she assured me it would be cancelled. Again, it was not. Come October they still billed me. In my November statement they are still billing me. I prefer L.A. Better Business Bureau and District Attorney emails and physical addresses. Someone please help me!!!!! Thank You

2 1

Re: Strong-crypto smart cards in Singapore and Germany
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

whgiii(a)amaranth.com ("William H. Geiger III") writes: ><sigh> Big Brother comming to a bank near you. > >Does anyone understand the implications of a society moving to an >electroinc cash based system?? > >All trasactions will be recorded, moitored, tracked & analysed. This is >not just the government that one has to worry about but corporations also. Actually the German system contains some fairly elaborate safeguards to make it pretty challenging to automatically track transactions (Germans have historical reasons for being uneasy about government monitoring). However given other German laws like the Fernmeldeanlagenueberwachungsverordnung (yes, that's one word), which make the CALEA look like a picnic, I'm not sure how long these safeguards will remain in place. Given that the standard has been created by a collaboration of all German banks, who are big enough to tell the government to take a hike if they demand access to the data, it may be safe (certainly the people involved in the project that I've spoken to are confident that they can keep the data private, however I'm not so sure how it'll work out in the long run). As for the Singapore solution, the Singpore government knows whats best for you, so it isn't any of your business to question their judgement. Anyone thinking otherwise gets 25 strokes of the rattan. Peter.

1 0

Re: Phrack, where can i find it?
by Lyghte 17 Dec '03

17 Dec '03

>where can i find latest (and old) phrack issues? > You can browse the old ones online at the phrack homepage (http://freeside.com/phrack.html) _\ /_ / \ __ ___ __ | \ / | _ |_| | |_ THE |__ | |__| | | | |__ "It may roundly be asserted that human ingenuity cannot concoct a cipher which human ingenuity cannot resolve." Edgar Allan Poe

1 0

pseudonymous servers
by Bovine Remailer 17 Dec '03

17 Dec '03

Which pseudonymous servers are currently active?

1 0

Re: A quick discussion of Mersenne Numbers
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-12-01 16:17:01 EST, you write: > On Sun, 1 Dec 1996 Scottauge(a)aol.com wrote: > > > I wake of the latest find announcement, some people maybe wondering what > the > > heck is this?!! > > > > A mercenne number is of the type: > > > > M(p) = 2**p -1 results in a prime when p is a prime. > > > > Hopefully this will lead the way to see the pattern of prime numbers and > > being able to compute prime numbers in a far more efficient manner (after > all > > a function that when given a prime number results in a prime number would > be > > quite a kicker now wouldn't it!) > > It doesn't. If q is a Mercenne prime, then p is prime if q = 2^p-1. It > doesn't work the other way around. If it did, then it would be very easy to > find out if a number is a Mercenne prime: just add 1 and find the base 2 > logarithm and if the result is prime, then the original number is prime. It' > s > much more difficult than that. It would also be possible to find an > infinite > number of Mercenne primes using a deterministic algorithm. > > > Mark I agree, my discussion was toooooo quick and the statement: > > M(p) = 2**p -1 results in a prime when p is a prime. is misleading. I was thinking the second paragraph when I was writing the statement statement above. A case of the mind working faster than the fingers?

1 0

Re: denial of service and government rights
by Lucky Green 17 Dec '03

17 Dec '03

At 05:24 PM 12/1/96 -0800, Dale Thorn wrote: >So what you're saying is I (or we) can testify in front of Congress on >essentially any topic, telling a blatant lie (that we know is false, and >which they will subsequently prove is false), and totally get away with >it. You and I can do that, is that what you're saying? You and I can't. The government can. It is one thing to commit a crime (if a crime has even been committed in the case in question). It is another thing to find somebody willing to prosecute it. In today's day and age, the Constitution exists for historical purposes only. Much of it has long been abolished by the courts. The remainder is being mostly ignored. The "Kein Kläger, kein Richter" principle makes it irrelevant if doing so is illegal. A favorite saying of 2nd Amendment supporters is: "Which part of 'shall not be infringed' don't you understand?" If society doesn't care that the Constitution is being violated, the violations will continue. And society couldn't care less. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

1 0

RE: Secure Memory Deletion
by John Fricker 17 Dec '03

17 Dec '03

Seems to me that the chip itself hardly a worry. memset() does the trick for the memory locations you are aware of. Any electrical or molecular level residues would be terribly difficult to sort out. The OS provides ample opportunities for unknowns though. ie, Is there some structure in memory that has the data from the user interface object used to collect the passphrase? Is there a keyboard buffer storing the last several (dozen? hundred?) keystrokes? Can 100% security be achieved at all with our current OS's? >Mark Rosen (mrosen(a)peganet.com) said something about Secure Memory Deletion on or about 12/1/96 4:49 PM > Does anyone know any papers on secure deletion of things from >memory? That >is one thing that most people are oblivious to, though, if a program leaves >your unencrypted passkey laying in memory or a buffer of your plaintext, >then all the encryption in the world won't help. Should I overwrite the 32 >times specified for hard drives, or are RAM chips easier to clear? Thanks. > >End of message --j ----------------------------------- | John Fricker (jfricker(a)vertexgroup.com) | -random notes- | My PGP public key is available by sending me mail with subject "send pgp key". | www.Program.com is a good programmer web site. -----------------------------------

1 0

IP address
by Internaut 17 Dec '03

17 Dec '03

What is the risk of publishing your dynamic IP address to a web page while you are on line? How vulnerable is someone just connected to the internet, w/o any server running? What attacks are feasable? --Internaut

2 1

RE: IP address
by Internaut 17 Dec '03

17 Dec '03

> Adamsc wrote: > > Igor wrote > > > On Sun, 1 Dec 1996 22:23:30 -0600, Internaut wrote: > > >What is the risk of publishing your dynamic IP address to a web page > > >while you are on line? How vulnerable is someone just connected to > > >the internet, w/o any server running? What attacks are feasable? --> >> Well, if you are running Win95 (all) or 3.1 (w/certain TCP/IP stacks) your >> machine can be locked up or rebooted at *any* time using just PING! >Isn't is Unix that is actually vulnerable? I tried pinging myself off and it didn't work; maby it has to be from a remote host.

2 1

The Good Doctor (Dobb that is) on DSNT
by John Fricker 17 Dec '03

17 Dec '03

The January 1997 Dr. Dobb's Journal has a somewhat interesting interview with Eva Bozoki, Chief Scientist for Digital Secured Networks which more about scientific research in the old USSR as it does about VPN's and encryption. Some notable quotes from Ms. Bozoki: "If people understand our competence, they will trust the product." "I don't like key escrow because I don't trust anybody." "We add a twist by encrypting the public key exchange." Seems like the interviewer had a nice chat with Ms. Bozoki but it is a shame that he did not press her on more technical details. It is after all a programmer's journal. I find the first two quotes interesting in that it would appear that Ms. Bozoki would not purchase the product she is creating! In order to establish trust in an encryption product more is required than simply agreeing that the company is competent. Competence does not imply trustworthiness. Trust can be established through review and examination of the innards, algo's and source code. A quick read of www.dsnt.com does not reveal any additional information on the crypto used (other than it being a 512 byte public key algo using Diffie-Hellman key exchange). Yet it would seem that DSNT has painted themselves into a corner as revealing their architecture would make encrypting the public keys ineffective. The interviewer also failed to press Ms. Bozoki for a position regarding key escrow. She states that she does not like key escrow but she does say (when discussing how security is being retrofitted into TCP/IP) "So you have to make sure that certain secrets don't go out and that you can legally wiretap certain conversations in a situation which wasn't designed for that." And also she mentions "the need for a government to defend its country". So does DSNT's products support wiretapping out of the box? --j ----------------------------------- | John Fricker (jfricker(a)vertexgroup.com) | -random notes- | My PGP public key is available by sending me mail with subject "send pgp key". | www.Program.com is a good programmer web site. -----------------------------------

1 0

Re: A quick discussion of Mersenne Numbers
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: Scottauge(a)aol.com, cypherpunks(a)toad.com Date: Sun Dec 01 23:29:04 1996 > > I wake of the latest find announcement, some people maybe wondering what > the > heck is this?!! > > A mercenne number is of the type: > > M(p) = 2**p -1 results in a prime when p is a prime. > Oh, if only it were all that easy... For more information on Mersenne primes, and using those spare CPU cycles to search for new ones, check out: http://ourworld.compuserve.com/homepages/justforfun/range.htm(l?) - ----- David E. Smith, P O Box 324, Cape Girardeau MO USA 63702 dsmith(a)prairienet.org http://www.prairienet.org/~dsmith send mail with subject of "send pgp-key" for my PGP public key "Remember: King Kong died for your sins" - Principia Discordia -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMqJpMXEZTZHwCEpFAQEq/wf+NFGMQtkqDgcJzrOvBMwqeHvJmy6Rx5S2 /goRQCyoxIVtwzYRuPwRByWvsylpinq2F1VH+Jsfpg4PFzDgYxjElROY0Ne/XnsV 2roop+zKkXDBpElC+2dRp+OrBHFer+EU3bOXfINRe8QyLJLu7+gmZWE1ghOBRC/1 5hdHTTSnWGFRFPU3suz+XRznmCkTuFl5y2ycV2TWQMmXqcBmaoPVikeygcnXCcax EJgwFg7+od2SZ97SIBqsDbSYKNFnUGgP0ZScZXf6op8UWSwq2x2KKYlbYptQKVjX UmBt40SFP+YcTllKqe9XGSyilY7Pe96O3PFbmR+Ni7LY8AQcH4w0Qw== =X0ML -----END PGP SIGNATURE-----

1 0

Re: Announcement: Very Good Privacy
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Sun Dec 01 23:30:00 1996 > Dear Sir, > > > I'm not sure how an encryption product that uses encryption > > algorithms weaker than Pretty Good Privacy can be described > > as being better than PGP. > > > > Especially when all the algorithms listed have known problems > > of one kind, or another. << And yes, I know that the known > > problems -- in some instances --- are entirely theoretical in > > nature. >> > > What puzzles me is that he included two cyphers that are _extremely_ > easy to > break, the vignere cypher and the ascii cypher. Why include these? And > what > is his new permutation of RC4 and DES? > Concur. Also, let's see: only available for Win95/NT, no sources available, and cyphers that are known to be weak - and that can be used without any warnings whatsoever - anyone else watching their Snake-Oil-O-Meter get pegged? Give us some source code, port it to XWindows, and then maybe we'll talk. dave - ----- David E. Smith, P O Box 324, Cape Girardeau MO USA 63702 dsmith(a)prairienet.org http://www.prairienet.org/~dsmith send mail with subject of "send pgp-key" for my PGP public key "Remember: King Kong died for your sins" - Principia Discordia -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMqJpYHEZTZHwCEpFAQFWPAf/Q2FoUPrgXAyjkWlLRQiRSV544TawvdL0 efdxOuRoGJ9jPSOBxm2KepfSw6Gl6yjwK7buuIB9LcMPMbp41Yn7Z4BTx1lY4fEQ XjdKMZMGoDYfiFCP4Xm9D1vG0cX+eWUL9jxih3ZSGR8OjcypVNrTBxoSbO3q5pHu 69+ASfTdcyG4VySD/YJ2NM17P2wzU7BTNXawOIisaN87Us5hTNLtHt55/D5r5pcs SPgLo1bBBP/z98+/r6flPtIk7LXwWPqWuJRMFp5FVUk+9/TfbdgsUT9tfl7VzABW nY4z+zVvSuFBomVR5ON9wdNonG8YAeBCQGHy69oXhsErKDv6EXgbDQ== =VeBI -----END PGP SIGNATURE-----

1 0

The Good Doctor again
by John Fricker 17 Dec '03

17 Dec '03

Also in the January issue has an article on RIPEMD-160. Source code (and full article text) is available at www.program.com/source/crypto --j

2 1

Re: IP address
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Sun, 1 Dec 1996 22:23:30 -0600, Internaut wrote: >What is the risk of publishing your dynamic IP address to a web page while you are on line? How vulnerable is someone just connected to the internet, w/o any server running? What attacks are feasable? --Internaut Well, if you are running Win95 (all) or 3.1 (w/certain TCP/IP stacks) your machine can be locked up or rebooted at *any* time using just PING! # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

4 3

Re: Announcement: Very Good Privacy
by Mark Rosen 17 Dec '03

17 Dec '03

> > What puzzles me is that he included two cyphers that are _extremely_ > > easy to > > break, the vignere cypher and the ascii cypher. Why include these? And > > what > > is his new permutation of RC4 and DES? > > > > Concur. Also, let's see: only available for Win95/NT, no sources > available, and cyphers that are known to be weak - and that can > be used without any warnings whatsoever - anyone else watching > their Snake-Oil-O-Meter get pegged? The plus side of the Vigenere and ASCII ciphers is that they are fast. For example, on a friend's machine, I can get 1.7mb/s using ASCII while NewDES, the fastest "secure" algorithm, runs at a only 600k/s. Documentation of each algorithm with an explanation of its security is provided in the help file. As for snake-oil, this is a genuine product. I am trying to compete with Puffer 2.0, which costs like $25-$30; $5 is certainly less than that. As soon as I get the money to buy the needed compiler, I'll make a port to the Mac, and a port to Windows 3.1 should surface in a few days. > Give us some source code, port it to XWindows, and then maybe > we'll talk. I'm working on installing Linux on my machine and will be working on an X port. I'll keep you posted. BTW, I personally really enjoy using VGP and have encrypted all of my source code and other archived things like that. Mark Rosen FireSoft - http://www.geocities.com/SiliconValley/Pines/2690 Mark Eats AOL - http://www.geocities.com/TimesSquare/6660/

1 0

Codebreakers on the telly.
by pjb＠23kgroup.com 17 Dec '03

17 Dec '03

on tuesday, 3 dec at 2000 hrs, channel 13 (PBS) in the new york area will air the Nova special, "The Codebreakers". this isn't anything new, but, as i remember, it's worth watching again. cheers, -paul

1 0

Just in time for Christmas!!!
by orders＠compugen.net 17 Dec '03

17 Dec '03

Dear Computer User: The perfect gift for your family, a friend, or just for yourself. "Personal Computer Accessories" Mitsumi Keyboards, Microsoft Mouse, Computer Speakers and more... Select the URL below to place your order; just in time for Christmas. *************************************************************************** To place your order visit our website at: http://www.pcorders.com ***************************************************************************

1 0

New payment scheme for Web access
by Asgaard 17 Dec '03

17 Dec '03

(See abstract from Edupage at the end) Who wants to use the MTV web site anyway, but I suppose this could spread. I guess a very popular site could allow access only to domains (....foo.bar) that have paid instead of blocking those who have not, otherwise 'new' sites could circumvent it easily. On the other hand, a proxy server inside of an allowed domain would circumvent the allowing kind of scheme, at least for a while (until they found out about it). Great opportunities for hacking wars. Another payment scheme in use is to recieve passwords for closed Web pages by voice phoning to an expensive number. Did the porno sites invent this (they have long been in related business)? Asgaard ************************************************************************** MTV TURNS THE TABLES IN WEB VIEWING Viacom's MTV Networks has come up with a new way to make its Web investment pay off -- it's putting the squeeze on online service providers, demanding that they pay multimillion dollar fees or risk having their subscribers blocked from viewing MTV's Web site. <...>

3 2

unsuscribe
by Thomas Repellin 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 2 Dec 96 6:49:59 PST remailer email address history latency uptime ----------------------------------------------------------------------- weasel config(a)weasel.owl.de ++++++---++ 2:15:58 99.98% lucifer lucifer(a)dhp.com ++++++-++++* 39:05 99.92% cyber alias(a)alias.cyberpass.net ******-+***+ 36:36 99.91% lead mix(a)zifi.genetics.utah.edu *+++++-+++** 37:21 99.91% nym config(a)nym.alias.net #*+#*#-##### 2:02 99.91% jam remailer(a)cypherpunks.ca ***** ****** 14:42 99.86% squirrel mix(a)squirrel.owl.de ++++++---++ 2:12:47 99.74% middle middleman(a)jpunix.com - ------.-- 3:35:44 99.66% replay remailer(a)replay.com *** - -+**** 21:25 99.28% mix mixmaster(a)remail.obscura.com ++-+++-._.- 11:59:53 99.24% dustbin dustman(a)athensnet.com + ++-___.-+ 23:00:40 98.77% reno middleman(a)cyberpass.net ----- --.-- 3:00:22 98.71% haystack haystack(a)holy.cow.net *#**# #** # 13:51 97.64% extropia remail(a)miron.vip.best.com --------- - 7:34:35 97.19% exon remailer(a)remailer.nl.com #####*-#*#*# 25:16 96.88% winsock winsock(a)rigel.cyberpass.net - -+ 7:01:07 62.06% balls remailer(a)huge.cajones.com ******- 4:04:02 58.23% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Looking for "PrOduct Cypher"
by Dave Del Torto 17 Dec '03

17 Dec '03

"PrOduct Cypher," I need to get in touch with you to discuss your PGP library work. Please email me ASAP (my key's on the MIT keyserver). Thanks. dave PS: Pls excuse the x-post.

1 0

ANNOUNCE: Latest Java Cryptix lib - includes PGP and all Java implementation
by Gary Howland 17 Dec '03

17 Dec '03

A new ALPHA release of the Systemics Cryptix crypto library for Java is now available for download at http://www.systemics.com/software/ The library is FREE FOR COMMERCIAL AND NON-COMMERCIAL USE. This release of the library is only intended for serious developers, who are prepared to work with a moving API. Differences from the previous release are that the library is now 100% Java, although native code can still be loaded if the libraries are present (which is unlikely, since I haven't completed them yet :-) Also, PGP classes have now been incorportated into the library. And of course, all the source is available (in fact, that's all that is presently available :-) Enjoy! CRYPTIX 2.00 - CRYPTOGRAPHIC CLASSES FOR JAVA _________________________________________________________________ Description This library contains a suite of cryptographic classes for Java. It is important to note that this release is not yet stable, so is only recommended for use by serious developers, since there may be major design and API changes. For users that require stability, please use the previous release . Features missing DES and Blowfish are not yet ported to Java. There is currently very little in the way of documentation and example programs. The auto loading of native libraries (if they are present) has not been tested. Features The library is now 100% Java, although native libraries will be loaded if they are present, in order to improve performance. PGP support is now being added to the library (currently most PGP packet types are supported, except for compressed data packets - anyone developing a zip compression library in Java?). Mailing list A mailing list exists for the developers and users of this library. This list is very low volume, and can be joined by sending subscribe cryptix-java _your mail address_ to majordomo(a)systemics.com. Another mailing list exists for PGP developers, and can be joined by sending subscribe pgp-dev _your mail address_ to majordomo(a)systemics.com. Copyright This library is covered by the following licence: Copyright © 1995, 1996 Systemics Ltd (http://www.systemics.com/) All rights reserved. This library and applications are FREE FOR COMMERCIAL AND NON-COMMERCIAL USE as long as the following conditions are adhered to. Copyright remains with Systemics Ltd, and as such any Copyright notices in the code are not to be removed. If this code is used in a product, Systemics should be given attribution as the author of the parts used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes software developed by Systemics Ltd (http://www.systemics.com/) THIS SOFTWARE IS PROVIDED BY SYSTEMICS LTD ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The licence and distribution terms for any publically available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.] _________________________________________________________________

1 0

Copyright violations
by alzheimer＠juno.com 17 Dec '03

17 Dec '03

-- Financial Times, 11/29/96 REUTERS STAFFER SABOTAGES HONG KONG BANK DEALING ROOMS A computer operator at Reuters in Hong Kong recently sabotaged the dealing room systems of five of the company's investment bank clients. The attack crippled for up to 36 hours the computer systems delivering market prices and news to traders at NatWest Markets, Jardine Fleming, Standard Chartered and two other banks. The banks, which resorted to alternative terminals such as Bloomberg, claimed the tampering had no significant impact on trading and said neither they nor their clients experienced losses as a result. The initial breach occurred on November 18. Reuters engineer Winston Cheng (now suspended) allegedly paid maintenance visits to several clients and used his password to gain access to the operating system at the heart of the Reuters networks. He entered commands that would delete key operating system files after a delay to allow him to leave the building. The first bank to report problems at 6:00 P.M. was Standard Charter, followed by the others. The dealing room systems were partially fixed by the morning to allow trading to continue more or less as normal but it was not until the next day that they were restored to full operation. As well as reviewing procedures on staff, Reuters is considering restrictions on its maintenance engineers' access to trading floors and the system software.

1 0

Announce: New mailing list for PGP developers
by Gary Howland 17 Dec '03

17 Dec '03

Hi, I have set up a mailing list for PGP developers. The main topic of conversation will be issues directly related to developing PGP tools and libraries, such as non-standard cipher feedback modes :-/ The list can be joined by sending subscribe pgp-dev _your mail address_ to majordomo(a)systemics.com. Best regards, Gary Howland -- pub 1024/C001D00D 1996/01/22 Gary Howland <gary(a)systemics.com> Key fingerprint = 0C FB 60 61 4D 3B 24 7D 1C 89 1D BE 1F EE 09 06

1 0

Working Draft: "Using Markets to Achieve Efficient Task Distribution"
by Ian Grigg 17 Dec '03

17 Dec '03

Our paper on "Using Markets to Achieve Efficient Task Distribution" is now on the web at http://www.systemics.com/docs/papers/task_market.html as a working draft (please don't quote or disseminate - it is now "under offer" for FC97). I, at least, am going to have a break from paper writing and go have a go at coding it, and all the other things in the queue. However, comments are most welcome. Thanks to everyone who has commented so far. -- iang iang(a)systemics.com

1 0

unsunscribe
by Greg Shanton 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

1 0

No Subject
by Michael Froomkin - U.Miami School of Law 17 Dec '03

17 Dec '03

[Cross-posted to cyberia & cypherpunks] Links, albeit rather thin ones, to background info on the Technical Advisory Committee to Develop a Federal Information Processing Standard for the Federal Key Management Infrastructure appear at: http://csrc.nist.gov/tacdfipsfkmi/ The first (public) meeting will be Dec. 5-6 at the Sheraton Grand Hotel at Dallas/Ft. Worth Airport [Highway 114 & Esters Boulevard], 4440 W. John Carpenter Freeway, Irving, Texas. Alas, I won't be able to make it. On-the-spot reports most welcome... The committee is also asking for written submissions (35 copies!!). A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | U. Miami School of Law | froomkin(a)law.miami.edu P.O. Box 248087 | http://www.law.miami.edu/~froomkin Coral Gables, FL 33124 USA | It's warm here.

2 1

Pathfinder Personal Edition Launches
by help＠pathfinder.com 17 Dec '03

17 Dec '03

Dear Friend of Pathfinder: We invite you to discover Pathfinder Personal Edition, the new personalized news and information service available exclusively on Pathfinder. With Pathfinder Personal Edition, you can customize the news to make it YOUR news. You just specify your areas of interest, and with the click of a mouse, Pathfinder Personal Edition searches the most comprehensive collection of up-to-the-minute news sources available online (including over 20 specialized news wires and some of your favorite magazines -- Time, Fortune, Money, People, Sports Illustrated, Entertainment Weekly and Life) and brings back to you news, sports scores, stock quotes, and even your favorite cartoons. With Pathfinder Personal Edition you're not just getting raw information from news feeds, you're getting in-depth information that's valuable to you, complete with analysis. Pathfinder Personal Edition even has a staff of real editors working every day to bring you the top stories from their areas of expertise. And with eight graphical formats to choose from and control over how sections and articles appear, Pathfinder Personal Edition literally makes the news your news. Everything is up to you -- you can build your own newspaper from the ground up or choose one of our six Editor's Editions from the newsstand and make it your own by personalizing the content right down to your local weather. Pathfinder Personal Edition puts everything in one place, so you spend less time wading through unwanted information and more time soaking up what you want to know. With this special risk-free offer, you can try Pathfinder Personal Edition for free for two full months! Avoid information overload -- try Pathfinder Personal Edition today: http://pathfinder.com/promo Sincerely, Pathfinder Pathfinder Personal Edition - Retrieves your world.

1 0

[ANNOUNCEMENT] Sphere packings
by nobody＠zifi.genetics.utah.edu 17 Dec '03

17 Dec '03

Tim C. May's police record is many times longer than his prick (well, that's not hard). \|/ @ @ -oOO-(_)-OOo- Tim C. May

1 0

Re: wealth and property rights
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Adam Back wrote: >> >> Steve Boursy writes: >> >>> That's a fair question. I don't begrude one's ownership of their >>> fair share--but I do have serious problems with what we shall >>> call 'accumulators' if you will. For them I have contempt and no-- >>> they do not have that right of possession and often such 'work' is >>> at the expense and on the backs of others. >> >> I'm an accululator :-) >> >> The investments I have I worked for. > > Well of course you have--but the majority of people >in the world that are poor have worked just as hard >and do not derive the same benefits--that needs to >be changed. > > <clip> > >> See, if you spend your money now, on the above, you have no right to >> criticize me when I look relatively wealthy later. It's your choice >> to blow your money. > > > I agree--that's not what I was talking about--the majority of wealth >is handed down not earned--and the ability to earn also more often >than not results in hand me down priv. I believe it was Thomas Jefferson who was successful at getting the practice of primo geniture outlawed in Virginia (it was later adopted by all the other states). He believed in a 'meritocracy' or sorts and abhored any practice which would create a merchant or political aristocracy in the new Republic. Unfortunately much of his wisdom was ignored (e.g. objection to a central bank, and the forbidding of one generation to indebt another) and we suffer the consequences to this day. > > >> Btw, people of your mentality (communists/socialists) already make it >> very difficult for me to accumulate, > > We do our best--some day we'll take it all away--really. > > Steve

1 0

Re: IP address
by AwakenToMe＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-12-02 02:44:30 EST, you write: << >What is the risk of publishing your dynamic IP address to a web page while you are on line? How vulnerable is someone just connected to the internet, w/o any server running? What attacks are feasable? --Internaut Well, if you are running Win95 (all) or 3.1 (w/certain TCP/IP stacks) your machine can be locked up or rebooted at *any* time using just PING! >> Im not sure under what circumstances you were referring this happening in, but I use win95 and so do friends of mine whom I ping ALL the time with their dynamic IP address. I do this to check the time before we do some online gaming across the net. Mind you.... I dont have to be connected to a KALI gaming server to do this.. He lets me know his IP address via his 2nd phone line, I log on the my ISP, goto dos and PING him.. and voila! Adam

1 0

FRIDAY THE 13TH PICTURES
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Well, better late than never. Photos from my last costume party or now on the Web. Check them out at: http://www.c2.net/~sandy/web.htm (My eyebrows and most of my hair have grown back in the ensuing two and a half months.) Mark 15 February on your calendars. I'll be having another gala masquerade ball on that date. The venue will be Pacifica, CA. A formal invitation will be posted to the list a month or so before the party. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: IP address
by AwakenToMe＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-12-02 20:11:05 EST, you write: << try ping -l 65510 host.name.edu >> from what ive heard, the sytem going down from a ping command is only when you ping with a wrong size packet

1 0

Phrack, where can i find it?
by varange＠crl.com 17 Dec '03

17 Dec '03

Tim Scanlon <tfs(a)adsl-122.cais.com> writing [ 762] bytes in <$m2n21503-.9612012338.AA09683(a)adsl-122.cais.com> from nexp.crl.com!usenet73.supernews.com!news.good.net!news.good.net!www.nntp.primenet.com!nntp.primenet.com!feed1.news.erols.com!phase2.worldnet.att.net!uunet!in1.uu.net!204.171.44.51!scramble.lm.com!mail2news!toad.com!cypherpunks-errors said: > > where can i find latest (and old) phrack issues? > > > ftp.fc.net /pub/phrack has all the back issues, as well as the > current ones. Mid-1995 is about their latest issue. Their older issues truely sucked with mucho false info. -- Cheers!

2 1

ANNOUNCEMENT: New low-noise cryptography mailing list
by Perry E. Metzger 17 Dec '03

17 Dec '03

[Sorry that this is several weeks late, folks.] "Cryptography" is a low-noise mailing list devoted to cryptographic technology and its political impact. WHAT TOPICS ARE APPROPRIATE: "On topic" discussion includes technical aspects of cryptosystems, social repercussions of cryptosystems, and the politics of cryptography such as export controls or laws restricting cryptography. Discussions unrelated to cryptography are considered "off topic". If you subscribe, please try to keep your postings "on topic". In order to assure that the quality of postings to the mailing list remains high, repeated postings "off topic" may result in action being taken by the list moderators. MODERATION POLICY: In order to keep the signal to noise ratio high, the mailing list will be moderated during its initial weeks of operation. This will be changed if it appears that the list will remain on topic without moderation. TO SUBSCRIBE: send mail to majordomo(a)c2.net with the line subscribe cryptography in the body of your mail. If you wish to subscribe a mailing address other than the one you are sending from, send a message with the line subscribe cryptography [address]

3 3