December 2003 - cypherpunks-legacy

No Subject
by Anonymous 17 Dec '03

17 Dec '03

> I had begun by thinking that, since the output of a block cipher in > feedback mode (ie, a stream cipher) is uniformly distributed ("white") that > it would be sufficient conditioning to feed a bad RNG into a block cipher > with feedback. Here, the bad RNG would kick the cipher out of the fixed, > but key-dependant, sequence it would otherwise generate. I don't quite parse what you're saying here...? (more reply below) ... > On cypherpunks, Bill Stewart mentioned using hashes instead of ciphers. > A hash is like a cipher in that changing any input or key bit changes the > output unpredictably, but a hash is irreversible because there are fewer > output bits than input bits. The simplest hash is a one-bit parity; MD5 > is a more expensive keyed hashing function used for message > authentication. > > Thinking about a hash instead of a cipher was interesting because now > we reduce the number of output bits, which if done right, could > improve the information carried by each binary digit. We take the MAC > of an imperfect random number and toss the original random, retaining > the MAC as our better random value. The problem with XORing is that you might have a generator where bits are interdependent in a way that causes entropy to be lost in the XOR. You generally don't have this problem with the more involved mixing functions. If the construction you use for distilling the RNG's output to a random number works as a collision-free hash function, you can place a lower bound on the amount of entropy in the output based on how long it takes to simulate the biases in the RNG (I posted a somewhat confuberated description of the reasoning to coderpunks -- basically, if the hash of the simulation's output has little enough entropy, it means you can break the hash; since you can't break the hash, the output can't have that little entropy). Normally, though, you can get away with using pretty much any nonlinear mixing function, even if it's not a good hash function. An "entropy pool" setup where you can put entropy in and pull keys out at will gets slightly more hairy...if you want to do that, I suggest you try to contact someone who knows what he/she's doing. :) Should that prove infeasible, key a stream cipher with the mixed entropy, and, when you want to pull a key out, grab some stream cipher output; when you want to drop entropy in, mix some stream cipher output with your new entropy and rekey the stream cipher with the result (to save time, I'd only do the rekeying right before I want a key containing the new entropy). Probably a lot more complicated and slow than it needs to be, but I think it lets you add any amount of entropy you want without fear of an attacker somehow interfering with the generation. ...

1 0

Look At This
by h0uugi93＠galaxylink.com.hk 17 Dec '03

17 Dec '03

<HTML><PRE>AMERICA'S # HOME BUSINESS TELEMARKETING GOES MLM No Selling No recruiting Great Income Call Now, You have nothing to Lose I am making $1,000.00 per day, this is my second day Call 1 888 443 8971 ID# 2085 The Mailing List that you are being mailed from was filtered against the Global Remove List at: http://remove-list.com Remove-List is a free public service offering to help the general public get removed from bulk mailings lists and has not sent this message. If you want their help, please add your name to their list and you will not receive a bulk email from us or any other ethical bulk emailer</PRE></HTML>

1 0

Where do you roam?
by Anonymous 17 Dec '03

17 Dec '03

SC>At 5:28 AM -0400 7/31/98, Michael Hohensee wrote: SC>>Source: Handgunner Magazine, Sept./Oct. 1998, page 154: SC>Paladin sought to reverse the ruling of the U.S. Court of Appeals for the SC>Fourth Circuit, whichfound that the book Hit Man: A Technical Manual for SC>Independent Contractors enjoyed no FirstAmendment protection because, in SC>that court's opinion (based in part on the stipulations of theparties), a SC>jury could find that the book's content amounted to the aiding and abetting SC>of criminalconduct. I've been reading the Bible lately, and it's content has been aiding and abetting me in all kinds of criminal misconduct, like murdering a crapload of Arabs and other assorted non-Jewish darkies. Anybody think that the U.S. Court of Appeals for the Fourth Circuit is prepared to refrain from being hypocritical, and rule that the Bible does not enjoy FirstAmendment protection? Tojohoto, The ApplePie Murderer *** The Fire House Inn *** Come visit us Telnet: fhouse.org WWW: fhouse.org ***********

1 0

CypherPunks Are Stupid DickWads!!!
by Anonymous 17 Dec '03

17 Dec '03

Cuthmarks=*** Ha! Ha! Ha! I can say anything I want about you guys and you won't know who I am, because I am using an AnonymousRemailer (TM). How does it feel to have your own CypherPunksTechnology turned against you, eh? And there's nothing you can do about it, because you don't know who I am... Hell, I can even badmouth the remailer operators, while using their own systems to send out my email badmouthing them, eh? I mean, these RemailerOperators are really stupid lamers, eh? I mean, they can't even get their messages to come out in the same order that they came in by... Dumb, eh? Some of the test messages I sent to myself came back in a different order from that what I sent them in. I guess these guys don't know much about computers, eh? And those names, 'Anonymous' and 'Nobody', aren't fooling AnyBody, because the minute you see them, you *know* that the message is from a remailer. Dumb, eh? Well, I just thought I'd let you guys know how stupid you are and how you'll never know who I am, or how to find me, because I am cutting the edge off of computer technology. MrOrMsAnonymousNobody!ADickWaddLikeYouGuys p.s. - It's a damn good thing you can't find me, neither, because my new email account is on a system that is so straight that my email is automatically scanned for BadWords before being sent out, and I have to either use misspelled BadWords like Phuck, BadWords which aren't in the BadWordDictionary, like DickWadd, or send the chapters of SPACE ALIENS HIDE MY DRUGS!!! to the CypherPunks Disturbed Male LISP couched and potatoed in ConvectionalEncraption. *** The Fire House Inn *** Come visit us Telnet: fhouse.org WWW: fhouse.org ***********

1 0

Better living through masterbation/Digestible Dildos
by STUFFED/EUREKA! 17 Dec '03

17 Dec '03

Welcome to today's issue of Stuffed. To read it you should click on the URL below. If it is not made clickable by your email program you will need to use your mouse to highlight the line, copy it and then paste it into your browser (then press Return). http://stuffed.net/98/7/31/ If you have an email program that can display web pages you will find today's front cover should have already been disp- layed and can be clicked on to take you straight to Stuffed. This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka!

1 0

Re: CypherPunks Are Stupid DickWads!!!
by Anonymous 17 Dec '03

17 Dec '03

Someone (we will never know who) wrote: NO>Cuthmarks=*** NO> Well, I just thought I'd let you guys know how stupid you are and how NO>you'll never know who I am, or how to find me, because I am cutting the NO>edge off of computer technology. NO> *** The Fire House Inn *** NO> Come visit us NO> Telnet: fhouse.org NO> WWW: fhouse.org NO> *********** It looks like Toto has made fools of us again. Damn he is smart! FoolMonger *** The Fire House Inn *** Come visit us Telnet: fhouse.org WWW: fhouse.org ***********

1 0

Did you *really* write PGP?
by toto＠fhouse.org 17 Dec '03

17 Dec '03

PRZ, Some guys from the Secret Service came to see me about the Death Threats I've been sending you. It's pretty funny that after all those years of persecuting you, the GuberMint is now paying these guys to protect you, eh? They sure looked at me funny when I told them that it was all in good humor, and that I wouldn't dream of doing anything bad to the guy who wrote PGP. Are you *sure* you wrote it? They don't seem to think so... Do you play the saxaphone? They said you play the saxaphone. Anyway, say "Hi!" to Buddy for me... Your Pal and CoConspirator, Toto ~~~~ *** The Fire House Inn *** Come visit us Telnet: fhouse.org WWW: fhouse.org ***********

1 0

french Libertarian e-zine in Quebec, Canada (excerpt)
by Jean-Francois Avon 17 Dec '03

17 Dec '03

This magazine is bilingual but not translated. Articles are published in their original language only. If the author does a translation, both versions are likely to be published. Ciao JFA Montréal, le 1er aoû1998 Numéro 17 LE QUÉBÉCOIS LIBRE (page 6) LE QUÉBÉCOIS LIBRE sollicite des textes d'opinion <mailto: libre(a)colba.net> qui défendent ou contestent le point de vue libertarien sur n'importe quel sujet d'actualité. Les textes doivent avoir entre 700 et 1200 mots. Prière d'inclure votre titre ou profession, le village ou la ville oùvous habitez, ainsi que votre adresse électronique. <980801-5.htm> <980801-5.htm>page précédente Vos commentaires <mailto: libre(a)colba.net> MUSINGS BY MADDOCKS ID IN THE USA: GIVING THEM THE FINGER by Ralph Maddocks In June of this year, the US Department of Transportation's National Highway Traffic Safety Administration proposed some new rules, effective October 1, 2000. They require all citizens to obtain a driver's licence containing a social security number. The law makes mention of «biometric identifiers »by which is meant such high-tech delights as digitized thumb or fingerprints on magnetic strips. An unrelated, for the moment, announcement by the Immigration Service on June 23 revealed a new identification system called INSPASS. The latter is a system which verifies such things as retinal and hand scans in order to let frequent travelers pass through customs more quickly. All very efficient. In this land of the free, whose praises are sung ad nauseam, these kinds of regulations are being introduced frequently and surreptitiously so that the average man, or woman, in the street will not realize what is happening until it is far too late to protest. Requirements such as social security numbers on driving licences are leading inevitably towards their becoming national identity cards. A card which the citizen will soon need to secure government services, apply for a job, conduct banking transactions or even to buy something as simple as an airline ticket. An old topic with a new twist Of course this topic is not new to the US, various groups have been proposing tamper-proof ID cards for many years. Often this was connected to discussions on gun control or immigration, it being believed that illegal immigration could be deterred by the use of such cards. The fact that they would be no more reliable than the documents produced originally to obtain them, plus the estimated $2.5 billions required to implement them, does not deter those who would mandate their use. A great deal of the impetus for ID cards is coming from California where a serious illegal immigration problem does indeed exist. As usual, politicians possessed of little or no imagination propose simplistic solutions to complex social and economic problems. Their idea being that such a card would become a kind of employment passport, which illegal immigrants would not possess. Unless, that is, their friendly local forger could supply one. There can be little doubt that the appearance of such a card would be welcomed by the police, they could then stop people at will and ask for some identification. The potential for the harassment of strange, different looking or foreign sounding individuals will increase exponentially. Minorities such as Asians, Latinos and African Americans will become even more perfect targets for such identity checks. Other groups too, such as banks, health insurers, landlords, merchants and others, salivate at the prospect of employing ID cards in their daily activities. Information, once gathered, can be stored at almost no cost, and retrieved in any imaginable sequence. It is this which is providing the incentive to collect the sort of information that has hitherto been maintained about only a very small portion of the population. The United States already has in its education system a national electronic network of student records. The purpose of this system being to allow the exchange of information between various public and private agencies, and the tracking of individuals through school and university, through their military service, through the criminal justice system, through their civilian careers, and through their use of the medical services. Toward a womb to tomb database At the moment, these databases are provided only with an electronic portfolio for every student, an assessment of each student's work and behavior by his teacher and the student's social security number. It is proposed also to include: data about prenatal care; birth weight; number of years in a pre-school program; poverty status; physical, emotional and other development at various ages; date of last routine health and dental care; plus many other items such as the employer's name and whether the person is registered to vote. A womb to tomb, all seeing, all knowing database. In a book published jointly by the U.S. Department of Education and the U.S. Department of Health and Human Services, there is ominous talk of «overcoming the confidentiality barrier. »The purpose of the new databases being stated as giving all agencies «ready access to each other's data. » There is a group in the US known as the American Association of Motor Vehicle Administrators (AAMVA) which is actively involved with the Transportation Secretary in proposing or actually changing the various state driving licences to include digitally encoded fingerprints, retinal scans, digital computer readable photographs and other biometric forms of identification. So far, some 28 States have actually begun to make or proposed the changes to their driver's licences. Last December, the AAMVA announced that fingerprints are their currently favored form of biometric identification. It may interest readers to learn that many Canadian provinces are also members of the AAMVA. It would be naive to think that these ideas will not cross the world's longest undefended border before long. All the State assemblies which have introduced the necessary legislation to implement this new form of national ID have done so under cover, usually at the end of a legislative session in the middle of the night. These politicians know a thing or two about journalists. The mainstream media having been remarkably silent on the subject and frequently supportive of the federal government. On a positive note, at least a few States are now actively involved in trying to repeal the fingerprinting requirement. Alabama and New Jersey have done it, and Georgia is considering a piece of draft legislation which will forbid the use of biometric identifiers of any kind. «Live Free or Die »the motto of our neighboring US State of New Hampshire, may well become somewhat more than a motto if its citizens do not resist these latest proposals emanating from their Federal Government. Perhaps, instead of providing their fingerprints, they should show their politicians a collective upraised finger. <index.htm> <index.htm>sommaire page suivante <980801-7.htm> <980801-7.htm> Jean-Francois Avon, B.Sc. Physics, Montreal, Canada DePompadour, Société d'Importation Ltée Limoges fine porcelain and french crystal JFA Technologies, R&D physicists & engineers Instrumentation & control, LabView programming PGP keys: http://bs.mit.edu:8001/pks-toplev.html PGP ID:C58ADD0D:529645E8205A8A5E F87CC86FAEFEF891 PGP ID:5B51964D:152ACCBCD4A481B0 254011193237822C

1 0

CRTC asks if it should regulate the internet
by Anonymous 17 Dec '03

17 Dec '03

Date: Sat, 1 Aug 1998 10:37:34 -0400 (EDT) From: Jeffrey Shallit To: efc-talk(a)efc.ca Subject: CRTC asks if it should regulate the internet X-EFC-Web-Site: http://www.efc.ca The front page of today's Globe & Mail has a story about the CRTC asking if it should regulate the Internet. The front page story directs you to page A4 for the remainder, which is actually on page A3. On page A3 an incorrect URL for the CRTC releases. The correct ones are: http://www.crtc.gc.ca/ENG/NEWS/RELEASES/1998/R980731e.htm (press release) http://www.crtc.gc.ca/ENG/bcasting/notice/1998/p9882_0.txt (public notice in English) All EFC members should write and say they are opposed to CRTC regulation. Unfortunately, I am scheduled to leave for vacation tomorrow, but David Jones will post this and perhaps suggest some sample letters to write to the CRTC. EFC will plan to attend the public hearings on the issue on November 23 in Hull, Quebec. Jeffrey Shallit

1 0

Cracking DES 8
by John Young 17 Dec '03

17 Dec '03

Chapter 8, Hardware Board Schematics: http://jya.com/crack-des08.htm (13K + 8 images)

3 2