December 2003 - cypherpunks-legacy

HACK - U HAVE NO PRIVACY
by lefty＠apple.com 17 Dec '03

17 Dec '03

I don't know whether you all have seen this: I've got a double-sawbuck that says it's nonsense, but those of you who are into recreational paranoia may enjoy it. I especially enjoyed the mention of the Bilderbergers... >From: fringeware(a)io.com (FringeWare Inc) >To: lefty(a)apple.com >Precedence: list >List-Server: fringeware-request(a)io.com >Errors-To: fringeware-owner(a)io.com >X-Www-Page: http://io.com/commercial/fringeware/home.html >Keywords: exchael psychotes convestuffican geneur existration tription >Subject: HACK - U HAVE NO PRIVACY >Reply-To: holo(a)netcom.com (D. Ronan Hallowell) >Date: Wed, 25 May 1994 21:51:06 -0700 (PDT) > >Sent from: holo(a)netcom.com (D. Ronan Hallowell) > >---------- Forwarded message ---------- >>Date: Wed, 25 May 94 09:42:11 -0700 >>From:paul.geronca@support.com >>To: sfraves(a)techno.Stanford.EDU > > [mod's note: We received another forwarded copy of this message > annotated with a msg saying it's a hoax...?] > >NSA can crack PGP > >A lot of people think that PGP encryption is unbreakable and that the >NSA/FBI/CIA/MJ12 cannot read their mail. This is wrong, and it can be a deadly >mistake. In Idaho, a left-wing activist by the name of Craig Steingold was >arrested _one day_ before he and others went to stage a protest at government >buildings; the police had a copy of a message sent by Steingold to another >activist, a message which had been encrypted with PGP and sent through E-mail. > >Since version 2.1, PGP ("Pretty Good Privacy") has been rigged to >allow the NSA to easily break encoded messages. Early in 1992, the author, >Paul Zimmerman, was arrested by Government agents. He was told that he >would be set up for trafficking narcotics unless he complied. The Government >agency's demands were simple: He was to put a virtually undetectable >trapdoor, designed by the NSA, into all future releases of PGP, and to >tell no-one. > >After reading this, you may think of using an earlier version of >PGP. However, any version found on an FTP site or bulletin board has been >doctored. Only use copies acquired before 1992, and do NOT use a recent >compiler to compile them. Virtually ALL popular compilers have been >modified to insert the trapdoor (consisting of a few trivial changes) into >any version of PGP prior to 2.1. Members of the boards of Novell, Microsoft, >Borland, AT&T and other companies were persuaded into giving the order for the >modification (each ot these companies' boards contains at least one Trilateral >Commission member or Bilderberg Committee attendant). > >It took the agency more to modify GNU C, but eventually they did it. >The Free Software Foundation was threatened with "an IRS investigation", >in other words, with being forced out of business, unless they complied. The >result is that all versions of GCC on the FTP sites and all versions above >2.2.3, contain code to modify PGP and insert the trapdoor. Recompiling GCC >with itself will not help; the code is inserted by the compiler into >itself. Recompiling with another compiler may help, as long as the compiler >is older than from 1992. > >Distribute and reproduce this information freely. Do not alter it. >------------------------------------------------------------------------- >To find out more about the anon service, send mail to help(a)anon.penet.fi. >Due to the double-blind, any mail replies to this message will be anonymized, >and an anonymous id will be allocated automatically. You have been warned. >Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi. > > > > -- Lefty (lefty(a)apple.com) C:.M:.C:., D:.O:.D:.

2 1

Re: News Flash: Clipper Bug?
by W Lee Nussbaum 17 Dec '03

17 Dec '03

In <9406021400.AA08779(a)disvnm2.lehman.com>, dmandl(a)lehman.com (David Mandl) writes: > >More specifically, it was the TOP STORY in the Times. Ha ha ha. Lesbian invisibility strikes again... (of the six columns on a Times front page, three of today's are topped by a picture, two by the article "Pentagon Must Reinstate Nurse Who Declared She Is a Lesbian", and one by this article, "Flaw Discovered In Federal Plan For Wiretapping") - Lee

2 1

Spoofing Clipper
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

I had a fun idea. Imagine getting enough information together to spoof clipper transmissions? The idea being to disguise other types of secure transmissions as clipper ones. What would be needed would the escrow encryption identifer, a bunch of damaged LEAF/IV assemblies and a transmission channel that wouldn't be easily distinguishable from data portions of a clipper transmission. You start the channel up prepending one of a large number of spoofed LEAF/IV assemblies. With enough of these traversing the ether, the chaff/wheat noise ratio goes down to where having a source identifier (ID in the LEAF) gets real hit or miss - to where it loses traffic analysis value. Sort of growing weeds intentionally on the information superhighway.

1 0

Re: Spoofing Clipper
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>With enough of these traversing the ether, the chaff/wheat noise ratio >goes down to where having a source identifier (ID in the LEAF) gets >real hit or miss - to where it loses traffic analysis value. Sort of >growing weeds intentionally on the information superhighway. If the adversary learns to distinguish false clipper transmissions, you could always use a fake one to lull him into not listening further.

1 0

no subject (file transmission)
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

Attn Pr0duct Cypher -----BEGIN PGP MESSAGE----- Version: 2.3a hIwCwagUhZdVih0BBAChSe8ov73Jd8q6qWDqRnd8z84Rkg4+S3/+P0fUAbyAhQNb pxX8+F2RKZMQcoxNZe1/nhkKOyFYt6bbvFqwwZc7Xuma8ZzXwkGfPvjqxWRHIsrn S4bRr2t62oGzu5aVR8fiN9ZtYLiQ5Lp0A9RvGVEsKsGoD442Sf//MPHGBLqfzaYA AAeonA5aIw2cAeKXEJY45MmJvbH2jfrBcnDl1nrQ4b7UO3HElIxdF0ivw++fagiT oE8xSgKnCEk7zJ/Yv9Nam6Ryq1rohwleraGrhPmXmXYgjb80Zt1usCiDAiIjtbhj yus7KknBEB7SE+BW81YFKdHm0XU9QFxHb1Fb8kO7q75yfFnxniCAqzaGgaITzXWM AyLMQ5rIyrD5ClxU46t9BhgvIng/neMPfrrvg1MCU67LKug9z5hI2RlDay/7nbxT rm0S2DxfdinvFWPfimvczUBFKkQjnADgKuSzQ6sNV7fwtJKO6YizZZVXgYCdwUU9 LuB0S5+FnQtkLMeljh1yDZMCn9sRqR1ptmDolR/yIikFJPe8toNLJG6j63FYjx+f Di3XzwfO85fvlSlX8PN9K1YmynfBjL8kZf53nX+2vbyH3/g1KdihT0KoEgM9IztV fPL3govzgU56EkEIhKGl3ziRc8bnyejiftz4yu6kopoZ5Av2Sprz9YkhiZk99/Ft CsUlP0E7a1EKRIG2RHOB9HvdKwdEZyPt0bi3Q+s0AHyNJzXZHKk7XPHi+Is4Bjsv rhCc0GbkfEw51b97O2R9XfIk6/X0Iw1DzxE9JX55skm9VT84rvR/rnDiaLYP6BxC X5ui1GC2Xx4oJkz+vPCtEVFTrZpY7v+D+pHHDltJ+VYcs1aMfW4Mg1ApcAsmOzbY hRD9/4wCLzB3Ewvie9hbpQajPz62Yw/V9rD3e6ojMIlNX7fa/qZ74Fc607w4/+z1 EZs+MRPwPT8o6jz9iJSj+8A+AJ8BQTPKORfvyiTqvLBUEzVAZPQIhktbEuhRDIKf 9P66fTmehly2Z8XrrGU3IGNgsV3uDYxwhribPFDp9AGyENtLOLrDU86IbRHzcmgz 9vm+epbn1mfJ5FIlfEZtlwIz3QPAo86i19inp+cpY9mUf5vKEmVJ8Z9WcjB8exkT 7WoXRzS0MkTYo1aNFMD/sbqf4q6KalhzTCkmFJvSejFu2QSBUH+d4kfI/+dijKFG PVSMmqrT0n66DsN5qX+mBPVlFp3eG1rkvM5M/Z28U4ZQWZR0r5rUNaMpqbp6eZMd 3ndVwc01txIQoBoQwak/5E6BiVAwHr/BEa8Su+YUkRzSyPlPc13CzAceFm0lwqO+ FjUyUfxnbNqvDw+g3e++h7fum7dIGtxfl64JYmlrBrvxkQUuqGlG2Gkzu79LTZhJ 6FAYTGqjkBbBqBwnlfK0BKnZhKReAm5NlyK7VMbDGbOFLp9Xjh6rZPWnAAiyzxV6 6NV7tRxAOfDONKp9mLEPmgi9vAhWP48F6g6XmEJlOLBepUWmm9CQW0bZ410ndoMd ZAqfTn7HDqBJ+1EVs72wsMfGsIo8OLqxIFELEP+C/ARMGsCxWpkYhoKQDEL8blnv hF8elXbJa+wCu1Nk4VoCgY5FIj4JXVR6GH0/B+uQVCN7BzF869BoLKj7fiYEmGfn 6XjQiQ5edMoLsmqhyi4N1U/Uf+O+yRqFjPTEBy+eOVmhODAX/e+PjGx8+aFZ02Kv wmog02GShuteJW0nAj8oVumb6sj68VF1HSNW6ZxQDKBniV2SLmNknyl1ZfebdmM6 WKeX/nv9EaIHrOZ4Tt0lV2wi1bg+LTFloR+QDpFxttnXWqC0zMGvfwyX/0T+PPEa S937Blry5rXUDIZFqHY/n3mBzGppgaZidyZm0ET5//8cAmQnnayXYPrq2tG9cSsy mZ246OCoMTSCqEuOeM9OQRtdKEKm2BIwiNXBqzHTRBS4xweR5V7tNql59F94fZOS M1hsFPXQ3y65hqVfdIJpBKnmGNAJ/Hoi4zUJR+6mIhTJKNwbkyuofe6/A9W+PXNf 9ceVyPZgg2Tc7WNw1+gIvo2jzQAxmoOrRM4UrmWMLBeSN1+3H7MqsUliJpidXqkO WKNcgLFjS8oti6Xp3F6YfXwHoZi0/w5XvViMhjYX0EKwPeYPOpXiSixbRB38t/mx gzU1OKMHYA7g04v3I717pupt5vFpWNIh+tk7k1b/LXVDml60CocIdreG8z3eLicm SO2XuVvq+VbYbLOIeilnEziuaihor/CPofphvi0u7gGMEpxy5ruSnCKYMAbJc198 EizICR594571WBxDWaRbAHXNnhIkCp2+jVNXkK/+T8/wu+qCvoMMEMSZW9ocH3JF BP7dFudSEpFxnIgzCg/u7xuiNtFQOfgskNLUgICbxQNuJ8xQ6xocPPLDNhxYPghk We8MA81RQgSm7tV63flA+uQ+T/gT4rKg+gEauQa9N4s4YzUBRztXJC8Epge/PlAg KaX5ipk5Tx5sGMc6r6Uc6bo6L26wXqYdKgDwGnFBZ6NREtzteyE264d7JHyoIOvL xryxz6qQVDtl/i2k6dIksXZK5r07XSTo6LPKJ2i2qA/3TZ/0MdUGAdLSG9Jg5QFi QgbrUjap169XIil0exLz+Ix2SzuRQF7VlkH2cDNTumBSC0Y0DUvBk2tNQfRH5Hdf OZOj7IQQPn9SQIXn7wR8BN0WlrE5lxKklj/HjMPyQvBNOuqnmDoPaBy6w/p1w89Z wcvatuiJ0dI830JMIwKL0ETlRVuu6RfKAd3L7uxp3m4572LVfVbifmmKcQ== =66Pi -----END PGP MESSAGE-----

2 1

Re: HACK - U HAVE NO PRIVACY
by Vinod Valloppillil 17 Dec '03

17 Dec '03

> One question: What's MJ12? British Intelligence was still MI5, >right? >-- >Michael Brandt Handler <grendel(a)netaxs.com> >Philadelphia, PA, USA PGP v2.6 public key via server / finger / mail >"I am iron, I am steel, nobody can touch me when I'm on the wheel" -- Curve MJ12 is (supposedly) the ultra-secret high-level national security group for the free world in charge of advanced military projects and most importantly -- UFO phenomena. In UFO conspiracy circles this group has supposedly sold the American public to alien abductors in exchange for technology, science, etc. No list of good conspirators is complete without it ! :) These opinions are mine, not Microsoft's. Vinod Valloppillil

1 0

Re: HACK - U HAVE NO PRIVACY
by Vinod Valloppillil 17 Dec '03

17 Dec '03

> One question: What's MJ12? British Intelligence was still MI5, >right? >-- >Michael Brandt Handler <grendel(a)netaxs.com> >Philadelphia, PA, USA PGP v2.6 public key via server / finger / mail >"I am iron, I am steel, nobody can touch me when I'm on the wheel" -- Curve MJ12 is (supposedly) the ultra-secret high-level national security group for the free world in charge of advanced military projects and most importantly -- UFO phenomena. In UFO conspiracy circles this group has supposedly sold the American public to alien abductors in exchange for technology, science, etc. No list of good conspirators is complete without it ! :) These opinions are mine, not Microsoft's. Vinod Valloppillil

1 0

Re: Black Eye for NSA, NIST, and Denning
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

> At today's talk at MIT (Morris & Unkenholz of the NSA) Morris >said several times that the escrow system had to be produced in a >hurry, on top of the Skipjack algorithim, which was designed >previously and 'sitting in a storeroom.' (boy, I'd like to FOIA that >storeroom. :) Gee, now that mab(a)research.att.com (Matt Blaze), knows where to find the checksum, and by extension the unit id (Which shows up on labels in photos on the literature from Mykotronx) - providing a known plaintext, maybe someone will start working on the family key? (I won't hold my breath waiting for it to be announced)

4 7

Anonymous mail pool
by Matthew Ghio 17 Dec '03

17 Dec '03

russ <nelson(a)crynwr.com> wrote: >Now that's an interesting idea for contacting people anonymously. >Have a big mailing list where you know certain people are subscribed. >Everyone gets all the mail, but they put a filter on it so that only >mail directed to their anonym is delivered to them. Or, if they're >really paranoid, they filter them by eye. > >But it's so obvious that someone probably already thought of it... Yes, I think you can subscribe to a mailing list for that purpose by sending mail to pool0-request(a)extropia.wimsey.com (Please correct me if that address is wrong.)

1 0

Re: Faster way to deescrow Clipper
by Matthew Ghio 17 Dec '03

17 Dec '03

russ <nelson(a)crynwr.com> wrote: > From: Derek Atkins <warlord(a)MIT.EDU> > > ...not be able to decrypt the communications, but they still get your ID. > >"your ID"? You mean your phone's ID. Goodness gracious, if you were >a criminal, you wouldn't go out and steal someone else's Clipper >phone, would you? Let's not get too high tech here, just because we >have the ability. Or you could just steal someone else's LEAF, by keeping a copy of it, and use that for spoofing. Then you could have a valid IV too...

1 0