December 2003 - cypherpunks-legacy

Cyphergurus: Advice needed
by W. Kinney 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm writing a Macintosh encryption application (nearing completion), which, when it encrypts a file, changes its file type and creator so that the encryption program will be launch when the file is double-clicked. I have to save four pieces of information about the original plaintext: file type, creator, data fork length, and resource fork length. These are placed in a resource in the encrypted file. What I'd like to get opinions on is _should I encrypt this header information_, since its format will be known to an attacker and, in many cases, its contents easy to guess? My inclination is to leave it plaintext, since the worst that can happen if a file type is known is the same type of attack that would _always_ be possible with an encrypted header. Thanks to all with thoughts on the subject. -- Will -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLN9hEPfv4TpIg2PxAQEZCwP9G2nysBI31CnD2UasTUHQb3itwc2S1juc TGJRvo5iB1WRFHwYwxyraae41Kf2Xsu6qiuHAQWEuvGhG4MyiZjXwZsE5FU9pxRR CV/pvSG4J/teXvJXv575Vr3lVxI6isDa4oZcMtv5rOS7ihIqF4ssuHnlOa6mHckU KW81MGB8nkQ= =cLCE -----END PGP SIGNATURE-----

3 3

CRYPTO DATA warning sign
by Jef Poskanzer 17 Dec '03

17 Dec '03

I posted this to alt.hackers last Thursday, and I just joined cypherpunks yesterday, so I don't know whether someone copied it to the list in the intervening days. If so, sorry for the duplication. If not... This is a warning sign in the style of the diamond-shaped ones that the Department of Transportation requires on the back of vehicles carrying hazardous loads. It will look pretty butch on your read bumper. I suggest printing it onto sticker paper and then overspraying with clear acrylic or polyurethane for weatherproofing. --- Jef %! dot_crypto.ps - draw a DOT cryptographic data warning symbol % % Copyright (C) 1989, 1993 by Jef Poskanzer <jef(a)netcom.com>. % % Permission to use, copy, modify, and distribute this software and its % documentation for any purpose and without fee is hereby granted, provided % that the above copyright notice appear in all copies and that both that % copyright notice and this permission notice appear in supporting % documentation. This software is provided "as is" without express or % implied warranty. /in { 72 mul } def /black { 0 setgray } def /white { 1 setgray } def /showcenter { % str -- dup stringwidth pop 2 div neg 0 rmoveto show } def % Disk - actual size, centered at 0,0. /disk_lw 0.03 in def % line width /disk_width 3.5 in def /disk_height 3.66 in def /disk_shadow 0.05 in def % Drop-shadow offset. /disk_cutoff 0.2 in def % corner cutoff size /disk_hole_width 0.18 in def /disk_hole_height 0.15 in def /disk_hole_xmargin 0.1 in def % x distange between right edges /disk_hole_ymargin 0.26 in def % y distange between bottom edges /disk_detail_radii 0.1 in def % radius of corners on details /disk_label_width 2.80 in def /disk_label_height 2.16 in def /disk_labelline_margin 0.1 in def /disk_labelline_width disk_label_width disk_labelline_margin 2 mul sub def /disk_labelline_yspacing disk_label_height 5 div def /disk_labeltext_size disk_labelline_yspacing 0.7 mul def /disk_labeltext_yoffset disk_labelline_yspacing 0.1 mul def /disk_detail_leftmargin disk_width disk_label_width sub 2 div def /disk_slidearea_width 2.38 in def /disk_slidearea_height 1.26 in def /disk_slide_width 1.87 in def /disk_slidehole_width 0.47 in def /disk_slidehole_height 0.99 in def /disk_slidehole_xmargin 0.3 in def % x distance between right edges /disk_slidehole_ymargin 0.175 in def % y distance between top edges /disk_wo2 disk_width 2 div def /disk_ho2 disk_height 2 div def /disk_outline { newpath disk_wo2 neg disk_ho2 neg moveto 0 disk_height rlineto disk_width disk_cutoff sub 0 rlineto disk_cutoff disk_cutoff neg rlineto 0 disk_height disk_cutoff sub neg rlineto closepath disk_wo2 disk_hole_xmargin sub disk_ho2 neg disk_hole_ymargin add moveto 0 disk_hole_height rlineto disk_hole_width neg 0 rlineto 0 disk_hole_height neg rlineto closepath disk_wo2 neg disk_hole_xmargin add disk_ho2 neg disk_hole_ymargin add moveto disk_hole_width 0 rlineto 0 disk_hole_height rlineto disk_hole_width neg 0 rlineto closepath } def /disk { % line1 line2 line3 line4 -- % Save args. /disk_line4 exch def /disk_line3 exch def /disk_line2 exch def /disk_line1 exch def % First draw drop-shadow. black gsave disk_shadow neg disk_shadow neg translate disk_outline fill grestore % Fill with white. white disk_outline fill % Draw outline. disk_lw setlinewidth black disk_outline stroke % Label area. newpath disk_wo2 neg disk_detail_leftmargin add disk_ho2 neg moveto disk_wo2 neg disk_detail_leftmargin add disk_detail_radii add disk_ho2 neg disk_label_height add disk_detail_radii sub disk_detail_radii 180 90 arcn disk_wo2 disk_detail_leftmargin sub disk_detail_radii sub disk_ho2 neg disk_label_height add disk_detail_radii sub disk_detail_radii 90 0 arcn disk_wo2 neg disk_detail_leftmargin add disk_label_width add disk_ho2 neg lineto stroke % Label lines and text. gsave 0 setlinewidth disk_wo2 neg disk_detail_leftmargin add disk_label_width add disk_ho2 neg translate 180 rotate /Times-Roman findfont disk_labeltext_size scalefont setfont newpath disk_labelline_margin disk_labelline_yspacing -1 mul moveto disk_labelline_width 0 rlineto stroke disk_labelline_margin disk_labelline_yspacing -1 mul disk_labeltext_yoffset add moveto disk_line1 show newpath disk_labelline_margin disk_labelline_yspacing -2 mul moveto disk_labelline_width 0 rlineto stroke disk_labelline_margin disk_labelline_yspacing -2 mul disk_labeltext_yoffset add moveto disk_line2 show newpath disk_labelline_margin disk_labelline_yspacing -3 mul moveto disk_labelline_width 0 rlineto stroke disk_labelline_margin disk_labelline_yspacing -3 mul disk_labeltext_yoffset add moveto disk_line3 show newpath disk_labelline_margin disk_labelline_yspacing -4 mul moveto disk_labelline_width 0 rlineto stroke disk_labelline_margin disk_labelline_yspacing -4 mul disk_labeltext_yoffset add moveto disk_line4 show grestore % Slide area. newpath disk_wo2 neg disk_detail_leftmargin add disk_ho2 moveto disk_wo2 neg disk_detail_leftmargin add disk_detail_radii add disk_ho2 disk_slidearea_height sub disk_detail_radii add disk_detail_radii 180 270 arc disk_wo2 neg disk_detail_leftmargin add disk_slidearea_width add disk_detail_radii sub disk_ho2 disk_slidearea_height sub disk_detail_radii add disk_detail_radii 270 0 arc disk_wo2 neg disk_detail_leftmargin add disk_slidearea_width add disk_ho2 lineto stroke % Slide. newpath disk_wo2 neg disk_detail_leftmargin add disk_slidearea_width add disk_slide_width sub disk_ho2 moveto disk_wo2 neg disk_detail_leftmargin add disk_slidearea_width add disk_slide_width sub disk_detail_radii add disk_ho2 disk_slidearea_height sub disk_detail_radii add disk_detail_radii 180 270 arc stroke % Slide hole. newpath disk_wo2 neg disk_detail_leftmargin add disk_slidearea_width add disk_slidehole_xmargin sub disk_ho2 disk_slidehole_ymargin sub moveto 0 disk_slidehole_height neg rlineto disk_slidehole_width neg 0 rlineto 0 disk_slidehole_height rlineto closepath stroke } def % DOT diamond - size 1, centered at 0,0. /DOT_lw 0.01 def % line width /DOT_inset 0.06 def % inset of inner border /DOT_bits_xspacing 0.012 def /DOT_bits_yspacing 0.020 def /DOT_bits_size 0.75 def /DOT_bits_xsize DOT_bits_xspacing DOT_bits_size mul def /DOT_bits_ysize DOT_bits_yspacing DOT_bits_size mul def /DOT_bits_nx 1 DOT_bits_xspacing div def /DOT_bits_ny 1 DOT_bits_yspacing div def /DOT_bits_xso2 DOT_bits_xsize 2 div def /DOT_bits_yso2 DOT_bits_ysize 2 div def /DOT_diskoffset 0.19 def % y-position of disk /DOT_diskscale 0.28 3.5 in div def % scale of disk /DOT_fontsize 0.09 def % size of lettering /DOT_wordoffset -0.06 def % y-position of "CRYPTO DATA" /DOT_numoffset -0.34 def % y-position of "10" /DOT_inner_outline { newpath -0.5 DOT_inset add 0 moveto 0 0.5 DOT_inset sub lineto 0.5 DOT_inset sub 0 lineto 0 -0.5 DOT_inset add lineto closepath } def /DOT_bits_0 { gsave DOT_bits_xso2 DOT_bits_yso2 scale newpath 0 0 1 0 360 arc stroke grestore }def /DOT_bits_1 { newpath 0 DOT_bits_yso2 neg moveto 0 DOT_bits_ysize rlineto stroke }def /DOT_bits { 0 setlinewidth gsave DOT_bits_nx DOT_bits_xspacing mul 2 div neg DOT_bits_ny DOT_bits_yspacing mul 2 div neg translate 0 1 DOT_bits_ny { gsave 0 exch DOT_bits_yspacing mul translate 0 1 DOT_bits_nx { gsave DOT_bits_xspacing mul 0 translate rand 2147483648 div 0.5 lt { DOT_bits_0 } { DOT_bits_1 } ifelse grestore } for grestore } for grestore } def /DOT { % Outer border. DOT_lw setlinewidth black newpath -0.5 0 moveto 0 0.5 lineto 0.5 0 lineto 0 -0.5 lineto closepath stroke % Fill inner area with 1's and 0's. gsave DOT_inner_outline clip DOT_bits grestore % Inner border. DOT_inner_outline stroke % Disk. gsave 0 DOT_diskoffset translate DOT_diskscale dup scale 45 rotate black (PGP public key) (1024 bits) () () disk grestore % "CRYPTO DATA". /Helvetica-Bold findfont DOT_fontsize scalefont setfont 0 DOT_wordoffset DOT_fontsize 0.4 mul sub moveto (CRYPTO DATA) showcenter % "10". 0 DOT_numoffset DOT_fontsize 0.4 mul sub moveto (10) showcenter } def % Main code. %/preview true def /preview false def preview { /m_x_offset 0.5 in def /m_y_offset 0.5 in def /m_x_count 1 def /m_y_count 1 def /m_size 7.5 in def /m_x_space 0 def /m_y_space 0 in def /m_angle 0 def } { /m_x_offset 0.375 in def /m_y_offset 0.75 in def /m_x_count 3 def /m_y_count 3 def /m_size 2.25 in def /m_x_space 0.50 in def /m_y_space 0.75 in def /m_angle 45 def % Use manual feed. { statusdict begin /manualfeed true def end } stopped pop } ifelse gsave m_x_offset m_y_offset translate 0 1 m_y_count 1 sub { gsave 0 exch m_size m_y_space add mul translate 0 1 m_x_count 1 sub { gsave m_size m_x_space add mul 0 translate m_size 2 div dup translate m_size dup scale m_angle rotate 1 m_angle cos div dup scale DOT grestore } for grestore } for grestore showpage

1 0

Re: Nymalizer, politics on the list
by jamie＠netcom.com 17 Dec '03

17 Dec '03

greg(a)ideath.goldenbear.com (Greg Broiles) > I wholeheartedly support either >him or the spoofer in their call to take the politics somewhere else. > Try the Extropians list. Y'all come! -- ................................ Jamie Dinkelacker Palo Alto CA Jamie(a)netcom.com 415.941.4782 ................................

1 0

Go away.
by pmetzger＠lehman.com 17 Dec '03

17 Dec '03

Go away and leave us alone.

1 0

Suggested mod to PGP
by Stanton McCandlish 17 Dec '03

17 Dec '03

An interesting suggestion was passed to me from a FidoNet node, suggesting a way that might get PGP accepted in BBS-based networks a little easier: A new commandline switch that will cause PGP to produce it's clearsigning info, digital signature, etc, as part of a FTSC kluge line, most of which are "invisible" unless you really try to get at them (in much the same way that elm will filter out most of the headers, and you have to hit "h" to see them all). This would assuage fears of Fidomail becoming cluttered and unreadable with PGP output. This reminds me strongly of another recent proposal to have PGP use the headers, rather than the body of messages, for PG information in Internet/Usenet messages. Considering that these 2 similar ideas came from totally independent sources, this may be a good idea for developers to look at, since it seems to occur to a lot of people. -- -=> mech(a)eff.org <=- Stanton McCandlish Electronic Frontier Foundation Online Activist & SysOp "A nation that is afraid to let its people judge the truth and falsehood of ideas in an open market is a nation that is afraid of its people." -JFK NitV-DC BBS 202-232-2715 Fido 1:109/1103 IndraNet 369:111/1, 14.4V32b 16.8ZyX Join EFF! For more information about membership, send mail to eff(a)eff.org

1 0

Q: Can anyone locate the ISS
by an6077＠anon.penet.fi 17 Dec '03

17 Dec '03

As the subject says, has anyone located the ISS (Internet Security Scan) on a ftp-site. I have seen the discussion about it, but not any sites mentioned. (I have tried archie to!) Thanks in advance. ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

Revisionist History of the US....:( (fwd)
by John Young 17 Dec '03

17 Dec '03

Responding to msg by ravage(a)bga.com (Jim choate) on Fri, 2 Sep 10:8 AM >Lesson 2 should be that the 'external' threat won't >last forever and at some point the real issues will >blow up to such an extent that the poplace will not be >concerned about external events because they are so >busy trying to stay alive and make a living. Yes. The external threat to the US has diminished, let's hope, to where some resources, human and material, can be applied to ways to make an advanced society serve its citizenry without resorting to fear of foreign boogies. The way that the surveillance satellite systems of the US and the USSR helped to reduce fear of military planners is instructive. This non-lethal technology, though expensive, made, and continues to make, accidental nuclear war less likely, and seems to me to be a great service to the world's population. Aggressive weapons systems may be similarly replaced by non-lethal technology as scientists and technologists are asked to device such apparatus. Fear of economic and social deprivation might also benefit from the talents of those who once produced the tools of the Cold War and hot regional conflicts you mention. Further, this list offers other ways to envision a society less dependent on the national security rubric of big Government, and may thereby support alternative local initiatives for economic and civil affairs. Kudos for this non-lethal work. John

1 0

Info on Clipper chip and fabrication of it
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Clipperpunks (Not!), Someone in the know passed on some information to me about the Clipper/Skipjack stuff. Here it is: ***begin quote*** An ARM processor will be used as a controller inside the Skipjack & ?? chips (don't think it's currently used in Clipper). VLSI progammable logic (EEprom based?) is used to both store the keys, and provide some other logic functions, so you can't read anything if you take the chip apart. I don't think any other exotic technologies are used. Mykotronix designs the mask- they're fabricated at VLSI. ***end quote*** We knew all of this, except for the part about the ARM processor (formerly the "Acorn Risc Machine") being used in the core. The ARM is a high MIPS-per-watt processor that is being used in the Apple Newton and the 3DO game machine. (I'll leave it to you all to construct some theories about what this might mean--but probably doesn't--for Newtons and 3DO containing Skipkjack features.) --Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. Note: I put time and money into writing this posting. I hope you enjoy it.

2 1

Re: Modem taps/Caller ID
by Dark 17 Dec '03

17 Dec '03

-> There was an intersting thread in comp.dcom.telecom about something called the "Presto Chango!" box, that transmits bogus CID information after the call is answered, so you can easily confuse most CID boxes in the market. Luis <- anyone have more info? -uni- (Dark)

1 0

Re: ISS location
by Paul Goggin 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bilbo Baggins (an6077(a)anon.penet.fi) queries: >As the subject says, has anyone located the ISS (Internet Security >Scan) on a ftp-site. I have seen the discussion about it, but not any >sites mentioned. (I have tried archie to!) As I have posted before and yet again.... Try aql.gatech.edu /pub/security/iss - -- R O All Comments Copyright by | Technofetishist A N Paul S. Goggin (1993) | Cypher, Cyber, Chaos V Information Broker | Ergoflux, Interzone E chaos(a)aql.gatech.edu | Carpe Diem: Stop the Clipper wiretap chip Finger account for latest _Phrack_ | Public Key: PGP and RIPEM available For anonymous communication:---> anon32940(a)anon.penet.fi - ------------------------------------------------------------------------------ Title 18 USC 2511 and 18 USC 2703 Protected -- Monitoring Absolutely Forbidden -----BEGIN PGP SIGNATURE----- Version: 2.2 iQCVAgUBLN/44Mjh5TPwiWbBAQHLzwP/Xnke5vfiD8C0GWw6MzfXPdSIQRvr+yUm mOIsx7FZbeEu78lI55jcgrDZ2Kz4mgROeHVfY3aEG3WnOfisDqH0bsKB6ddvdaW+ cmqRSazNAQkXtIbUYOLeAM+Sa5ziu1rKaBViBfFHWtcu7fHTfzatIxvDtkI1TZ/B XyavzNIz8Zk= =9cgw -----END PGP SIGNATURE-----

1 0