December 2003 - cypherpunks-legacy

HR 3627: The day after?
by Michael Handler 17 Dec '03

17 Dec '03

So: if we get HR 3627 out of the House Select Committee on Intelligence intact, what's the next step? If the resolution passes the House, does there have to be a Senate debate as well? And, of course, will there be a live broadcast of the vote on CNN so we can watch it like we did with NAFTA? ;-) -- Michael Brandt Handler <grendel(a)netaxs.com> Philadelphia, PA PGP v2.6 public key on request WARNING: I have built the first quantum computer, and I am factoring your public key at the speed of light as you read this.

1 0

Massive ITAR Violation!
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

I mailed this about 5 minutes before the news of list death arrived, so it didn't make it. Conspiracy! Anyway, I posted this to comp.org.eff.talk and so far it has generated no interest. The Cypherpunks have been mentioned in various articles in the mass media as a group that would at least toy with the idea of civil disobedience concerning ITAR violation. Imagine yourselves trying to topple ITAR by publically exporting PGP to many countries, every day, for over a year. Yet do any of us really want to push our luck this way? Phil Zimmermann is out a lot of cash paying for a legal team. He can hardly afford taking his family out for dinner. That's why discovering this, I feel it should make *news*. As it turns out, the internet's largest Macintosh ftp archive has been exporting MacPGP2.2 every day for the last year! This to Singapore and China and God knows where else. Every country on Earth with an internet connection, likely. Here is a satirical essay, explaining what anyone who takes ITAR at face value might do if they discovered this situation.... -----BEGIN ROT13 SIGNED MESSAGE----- Fellow citizens of the United States of America, I wish to inform you of a great and ongoing catastrophe of most serious consequence. It is organized crime, by definition. Below is the header for the MacPGP2.2 file on sumex-aim.stanford.edu, archived with dozens of other utilities, as /info-mac/util/pgp.hqx, which has been there for *over a year*, many times a week being *exported* onto info-mac mirrors around the world. This is the most massive and organized absolute violation of the USA's ITAR munitions export laws (regulations) we have ever witnessed. For an entire year, weekly if not daily, the notorious encryptor PGP, right under our eyes, exported! I hope this is cleared up as soon as humanly possible, but we are all of us left with the guilt of not having noticed this before. All this talk of ITAR and there you are, your largest communal Mac ftp site pumping out PGP across the border like a huge demonic machine bent on destroying our beloved society. If the moderators cannot be contacted immediately, I suggest military force be used. Or cooperative shutdown of the US internet connections. Please begin this at once, as it *must* be stressed that PGP is classified as a MUNITION, right along with rocket launchers and tanks!!!!!!!! This is as serious as it gets. I didn't even know what the internet *was* back in April of '93, and I am but one in a million (literally) who has access to sumex-aim.stanford.edu and all its mirror sites. It must have been my destiny to save the world, for none of *you* seem interested in doing so. It has only been an hour since I discovered this NATIONAL SECURITY DISASTER, and I immediately set myself in action to save my country from destruction. *I*YoU*mE*We*OiwIE*wE*yOU*Me*I* P.S. Here is the evidence: >From: macmod(a)SUMEX-AIM.Stanford.EDU (Info-Mac Moderator) >Date: Sun, 25 Apr 1993 23:22:58 PDT > >PGP (Pretty Good Privacy) ver 2.2 - RSA public-key encryption freeware >for MSDOS, protects E-mail. Lets you communicate securely with people >you've never met, with no secure channels needed for prior exchange of >keys. Well featured and fast! Excellent user documentation. > >PGP has sophisticated key management, an RSA/conventional hybrid >encryption scheme, message digests for digital signatures, data >compression before encryption, and good ergonomic design. Source >code is free. > >Keywords: PGP, Pretty Good Privacy, RSA, public key, encryption, > privacy, authentication, signatures, email > >(This file must be converted with BinHex 4.0) > >:$8eKBe"(8$)Z-LjcC@%!39"36'&eFh3J!!!$@3X!!%DFIea6593K!!%!!eN,FNa .... And upon downloading it and starting it up, the console window faithfully displays: >Pretty Good Privacy 2.2 - Public-key encryption for the masses. >(c) 1990-1993 Philip Zimmermann, Phil's Pretty Good Software. 6 Mar 93 >Date: 1994/06/12 16:10 GMT I further suggest that all of the following sites (but a sample) immediately remove this file from their archives and stop mirroring sumex-aim till they too remove the file. To keep this from happening again, I suggest *all of us* in the USA delete our copies of PGP from our hard disks, lest our children export it into the hands of such enemy nations as these. It is time we put an end to this scourge, for look what will happen if we do not. Pornographers and terrorists are coming for our children if we do not act. Death to PGP users!!!!!!!!!!!!!!! Where is our government in all of this? Our tax dollars are not being used to protect us from the EXPORT OF MUNITIONS TO ENEMY NATIONS!!!!! I suggest full prosecution of all users and maintainers of sumex-aim, as they have all obviously conspired to maintain this treachery. I suggest they all be searched for other weapons as well including land mines, automatic machine guns, poison gases, biological weaponry and mind control devices of all sorts, as it is my firm belief that the only reason they are interested in PGP is to forward their agenda to export other munitions, drugs pushed on *our* children to pay for them!!! This will culminate in the obvious acquisition of *nuclear bombs* by every Tom Dick and Harry gangster. Little boys and girls in the getto with *neutron bombs* and *poison gas missiles*! I shutter to think we could have stopped it but, alas, we may have failed ourselves. Here are the target sites. I suggest immediate offensive attacks to destroy these evil ports of death and destruction.... Australia (Melbourne): archie.au//micros/mac/info-mac/util/pgp.hqx Austria (Vienna): ftp.univie.ac.at//mac/info-mac/util/pgp.hqx Canada (Vancouver): ftp.ucs.ubc.ca//pub/mac/info-mac/util/pgp.hqx Finland (Espoo): ftp.funet.fi// pub/mac/info-mac/util/pgp.hqx Finland (Jyvaskyla): ftp.jyu.fi//info-mac/util/MacPGP2.2.sea Germany (Hannover): ftp.rrzn.uni-hannover.de//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.center.osaka-u.ac.jp//info-mac/util/pgp.hqx Japan (Tokyo): ftp.iij.ad.jp//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.u-tokyo.ac.jp//pub/info-mac/util/pgp.hqx Netherlands (Wageningen): ftp.fenk.wau.nl//pub/mac/info-mac/util/pgp.hqx Republic of Singapore (Singapore): ftp.nus.sg//pub/mac/util/pgp.hqx Sweden (Lund): ftp.lth.se//mac/info-mac/util/pgp.hqx.Z Sweden (Uppsala): ftp.sunet.se//pub/mac/info-mac/util/pgp.hqx Switzerland (Zurich): nic.switch.ch//mirror/info-mac/util/pgp.hqx Taiwan (Hsinchu): ftp.edu.tw//Macintosh/info-mac/util/pgp.hqx UK (London): src.doc.ic.ac.uk//packages/info-mac/util/pgp.hqx.gz -----END ROT13 SIGNED MESSAGE----- -----BEGIN ROT13 SIGNATURE----- Whar fvkgu avargrra uhaqerq avargl sbhe. Sbhegubhfnaqgra punenpgref va frirauhaqerqrvtuglrvtug jbeqf bs baruhaqerq yvarf. -----END ROT13 SIGNATURE-----

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

I mailed this about 5 minutes before the news of list death arrived, so it didn't make it. Conspiracy! Anyway, I posted this to comp.org.eff.talk and so far it has generated no interest. The Cypherpunks have been mentioned in various articles in the mass media as a group that would at least toy with the idea of civil disobedience concerning ITAR violation. Imagine yourselves trying to topple ITAR by publically exporting PGP to many countries, every day, for over a year. Yet do any of us really want to push our luck this way? Phil Zimmermann is out a lot of cash paying for a legal team. He can hardly afford taking his family out for dinner. That's why discovering this, I feel it should make *news*. As it turns out, the internet's largest Macintosh ftp archive has been exporting MacPGP2.2 every day for the last year! This to Singapore and China and God knows where else. Every country on Earth with an internet connection, likely. Here is a satirical essay, explaining what anyone who takes ITAR at face value might do if they discovered this situation.... -----BEGIN ROT13 SIGNED MESSAGE----- Fellow citizens of the United States of America, I wish to inform you of a great and ongoing catastrophe of most serious consequence. It is organized crime, by definition. Below is the header for the MacPGP2.2 file on sumex-aim.stanford.edu, archived with dozens of other utilities, as /info-mac/util/pgp.hqx, which has been there for *over a year*, many times a week being *exported* onto info-mac mirrors around the world. This is the most massive and organized absolute violation of the USA's ITAR munitions export laws (regulations) we have ever witnessed. For an entire year, weekly if not daily, the notorious encryptor PGP, right under our eyes, exported! I hope this is cleared up as soon as humanly possible, but we are all of us left with the guilt of not having noticed this before. All this talk of ITAR and there you are, your largest communal Mac ftp site pumping out PGP across the border like a huge demonic machine bent on destroying our beloved society. If the moderators cannot be contacted immediately, I suggest military force be used. Or cooperative shutdown of the US internet connections. Please begin this at once, as it *must* be stressed that PGP is classified as a MUNITION, right along with rocket launchers and tanks!!!!!!!! This is as serious as it gets. I didn't even know what the internet *was* back in April of '93, and I am but one in a million (literally) who has access to sumex-aim.stanford.edu and all its mirror sites. It must have been my destiny to save the world, for none of *you* seem interested in doing so. It has only been an hour since I discovered this NATIONAL SECURITY DISASTER, and I immediately set myself in action to save my country from destruction. *I*YoU*mE*We*OiwIE*wE*yOU*Me*I* P.S. Here is the evidence: >From: macmod(a)SUMEX-AIM.Stanford.EDU (Info-Mac Moderator) >Date: Sun, 25 Apr 1993 23:22:58 PDT > >PGP (Pretty Good Privacy) ver 2.2 - RSA public-key encryption freeware >for MSDOS, protects E-mail. Lets you communicate securely with people >you've never met, with no secure channels needed for prior exchange of >keys. Well featured and fast! Excellent user documentation. > >PGP has sophisticated key management, an RSA/conventional hybrid >encryption scheme, message digests for digital signatures, data >compression before encryption, and good ergonomic design. Source >code is free. > >Keywords: PGP, Pretty Good Privacy, RSA, public key, encryption, > privacy, authentication, signatures, email > >(This file must be converted with BinHex 4.0) > >:$8eKBe"(8$)Z-LjcC@%!39"36'&eFh3J!!!$@3X!!%DFIea6593K!!%!!eN,FNa .... A-1993 Philip Zimmermann, Phil's Pretty Good Software. 6 Mar 93 >Date: 1994/06/12 16:10 GMT I further suggest that all of the following sites (but a sample) immediately remove this file from their archives and stop mirroring sumex-aim till they too remove the file. To keep this from happening again, I suggest *all of us* in the USA delete our copies of PGP from our hard disks, lest our children export it into the hands of such enemy nations as these. It is time we put an end to this scourge, for look what will happen if we do not. Pornographers and terrorists are coming for our children if we do not act. Death to PGP users!!!!!!!!!!!!!!! Where is our government in all of this? Our tax dollars are not being used to protect us from the EXPORT OF MUNITIONS TO ENEMY NATIONS!!!!! I suggest full prosecution of all users and maintainers of sumex-aim, as they have all obviously conspired to maintain this treachery. I suggest they all be searched for other weapons as well including land mines, automatic machine guns, poison gases, biological weaponry and mind control devices of all sorts, as it is my firm belief that the only reason they are interested in PGP is to forward their agenda to export other munitions, drugs pushed on *our* children to pay for them!!! This will culminate in the obvious acquisition of *nuclear bombs* by every Tom Dick and Harry gangster. Little boys and girls in the getto with *neutron bombs* and *poison gas missiles*! I shutter to think we could have stopped it but, alas, we may have failed ourselves. Here are the target sites. I suggest immediate offensive attacks to destroy these evil ports of death and destruction.... Australia (Melbourne): archie.au//micros/mac/info-mac/util/pgp.hqx Austria (Vienna): ftp.univie.ac.at//mac/info-mac/util/pgp.hqx Canada (Vancouver): ftp.ucs.ubc.ca//pub/mac/info-mac/util/pgp.hqx Finland (Espoo): ftp.funet.fi// pub/mac/info-mac/util/pgp.hqx Finland (Jyvaskyla): ftp.jyu.fi//info-mac/util/MacPGP2.2.sea Germany (Hannover): ftp.rrzn.uni-hannover.de//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.center.osaka-u.ac.jp//info-mac/util/pgp.hqx Japan (Tokyo): ftp.iij.ad.jp//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.u-tokyo.ac.jp//pub/info-mac/util/pgp.hqx Netherlands (Wageningen): ftp.fenk.wau.nl//pub/mac/info-mac/util/pgp.hqx Republic of Singapore (Singapore): ftp.nus.sg//pub/mac/util/pgp.hqx Sweden (Lund): ftp.lth.se//mac/info-mac/util/pgp.hqx.Z Sweden (Uppsala): ftp.sunet.se//pub/mac/info-mac/util/pgp.hqx Switzerland (Zurich): nic.switch.ch//mirror/info-mac/util/pgp.hqx Taiwan (Hsinchu): ftp.edu.tw//Macintosh/info-mac/util/pgp.hqx UK (London): src.doc.ic.ac.uk//packages/info-mac/util/pgp.hqx.gz -----END ROT13 SIGNED MESSAGE----- -----BEGIN ROT13 SIGNATURE----- Whar fvkgu avargrra uhaqerq avargl sbhe. Sbhegubhfnaqgra punenpgref va frirauhaqerqrvtuglrvtug jbeqf bs baruhaqerq yvarf. -----END ROT13 SIGNATURE-----

1 0

Re: (None)
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>OBcypherpunk: Matt Blaze's paper (_Protocol Failure in the Escrowed >Encryption Standard_) is only available in Postscript format. But at >my local Kinko's, the fascist session logging utility doesn't seem to >notice that 'copy /b a:eesproto.ps prn' in a DOS Prompt window causes >printing to happen. ;-) An ascii version of the paper is available on: ftp.eff.org:/pub/EFF/Policy/Crypto/Clipper, the filename is ees_flaw_blaze.paper around 35K bytes

1 0

Re: Cantwell Bill
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

Mr. Gillogly wrote, >The reason I don't consider your Stunning Revelation an important news >flash is that it's just one example of the many ways crypto is actually >exported. For example, PGP 2.6 was overseas within hours of its release. That was a single ITAR violation. This is thousands. >A more direct comparison is with DES: NIST has DES code available in >soft copy in Appendix A of its publication fips181.txt, accessible in >their public FTP directory with no warnings about export restrictions. Huh? Who would want to export DES? That wont have any influence on people's politics. PGP is a hot topic. *It's* export is all that people think about. >The Cantwell stuff is extremely important for commercial products, but >for private crypto (e.g. non-profit and non-infringing PGP >implementations) it simply decriminalizes the existing vigorous export >activity; rather like decriminalizing the use of marijuana. The sumex case is like a huge year-long "smoke-in", the sort of thing that might lead to *legalization* of hemp, if the lay public were aware of it. "Private crypto" (PGP in all its guises) is becoming a standard, yet its future development has been and still is being severely crippled by ITAR worries among many who would otherwise be active core PGP developers. Cantwell, in my eyes, is about *PGP*. I'm all for commercial RSA, but unless I can send a friend a free copy of it, the hell with it. Also remember commercial crypto hardly ever comes with source code! Colin found a serious bug in PGP2.6 where one character was left out in the crypto code. I believe it was someone else who pointed this out to him. Had this happened with ViaCrypt PGP or "Microsoft Encrypt", would you expect it to be found? How can you *trust* a commercial crypto routine if the exact and compilable source code is not available? And if PGP does become a standard, why do you want to pay for it 8-) ? So you wont have to waste the time looking for backdoors in the source? P.S. Sorry for the multiple posting, but I figured the remailer I used was dead, since it was, for a day.

1 0

Dead list???
by ER CRAMER 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Is this list dead or isn't nobody writing on it??? Or ain't I subscribed anymore??? ... If you outlaw Privacy, only Outlaws will have Privacy! Eelco Cramer <crame001(a)hio.tem.nhl.nl> ------ - -------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLf67RIDAdPKe9hHLAQF6xwQAuK3c/+gEKuws22S2Qh9qXveCKHSUw5WE tCrRpMUU2zcKGbZMRaGGF2UOuElT0v5jxfENYL1XQlSvlNTPMSLOFkFQ0T3XV1oh DnDl0tctgU8dwSxTqGKRuAfYQ5cuyqWPLc9TBMk6mMz7xCJJwIb3oGDtSvTlX0/L 0k8KyObm8yI= =um6V -----END PGP SIGNATURE-----

2 1

Waco in cyberspace
by bchappe%sunoco＠relay.nswc.navy.mil 17 Dec '03

17 Dec '03

> >In the June 6 issue of the New Yorker is an interesting story by >John Seabrook (who did the email interview with Bill Gates) about >getting flamed and how violated and uspset it made him. Lots of not >explicitly stated suggestion that maybe somebody will need to control >all this, and some very confusing material suggesting to the non-technical >that viruses or worms may be sent via email messages. "Is this free speech?". >But the chilling passage in the article is on page 77 where the writer says > >>Dr. Clinton C. Brooks, the N.S.A.'s lead scientist on the Clipper Chip >>told me, "You won't have a Waco in Texas, you'll have a Waco in cyberspace. >>You could have a cult, spaeking to each other through encyrption, that >>suddenly erupts in society - well programmed, well organized - and then >>suddenly disappears again." > >Getting scared yet? > >-Steve

1 0

LIST: List Maintenance
by hugh＠ecotone.toad.com 17 Dec '03

17 Dec '03

I have restored the backup of the list from June 11th, and merged it with the list as of a few minutes ago. Some list users who signed up again in the last three days are now signed up twice for the list (due to signing up from a different machine or having changed your name). If you are getting two copyies of the posting to the list, send majordomo(a)toad.com a "unsubscribe cypherpunks" command from the machine that you don't want the list going to. If you still have problems after trying that, please contact us via cypherpunks-owner(a)toad.com or majordomo-owner(a)toad.com and we will fix it by hand. Enjor, and write code and doc! ||ugh Daniel Sometimes Postmaster hugh(a)toad.com

1 0

Re: Waco in cyberspace
by landmann＠facstaff.wisc.edu 17 Dec '03

17 Dec '03

At 09:53 6/15/94 +0500, Brett Chappell wrote: >>>Dr. Clinton C. Brooks, the N.S.A.'s lead scientist on the Clipper Chip >>>told me, "You won't have a Waco in Texas, you'll have a Waco in cyberspace. >>>You could have a cult, spaeking to each other through encyrption, that >>>suddenly erupts in society - well programmed, well organized - and then >>>suddenly disappears again." The folks in Waco hadn't committed any great crime, and would have continued in their secluded existence for quite some time had the ATF not seen fit to provide a catalyst. I suppose that cyberspace, with its potential anonymity and privacy, would be the stuff ATF nightmares are made of.. NO DOORS TO KICK DOWN, and GUNS are PRETTY USELESS in CYBERSPACE!! :-) -Tom =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Thomas Landmann E-mail: landmann(a)facstaff.wisc.edu DoIT Network Systems Technology Compuserve: 76020,2055 1210 W Dayton Street, Rm 4220 AX.25: N9UDL @ WD9ESU.#SCWI.WI.NOAM Office: 608.263.1650 Home: 608.277.1115 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= >>> Waiting for "Chicago"? Try Linux *NOW* instead! <<<

2 1

instructions on how to get PGP 2.6
by ecarp＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Could someone email me the directions on how and where to get PGP 2.6? I have the directions, but they're sitting at home in my mailbox, and I'm 2 hour away from home. :( Thanks in advance... :) - -- Ed Carp, N7EKG/VE3 Ed.Carp(a)linux.org, ecarp(a)netcom.com Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi If you want magic, let go of your armor. Magic is so much stronger than steel! -- Richard Bach, "The Bridge Across Forever" -----BEGIN PGP SIGNATURE----- Version: 2.5 iQCVAgUBLf8d8SS9AwzY9LDxAQGMrgP/UobsKNKlYJgJDJJkgM1I9JF5P4jnXaYW QD4/3WzMkMdnI0+hxWTMRfgFru3gXoG7gCeE8qXyhzr0s2VkK4VJOD0t1fEMar6D Sxwbwj847ecymIEIc+lFTVPalEOmpQfYILJ/RKQzlZ2weMKh1hzbL9681LDiedIa VtUtZE20TmA= =LcB6 -----END PGP SIGNATURE-----

1 0