December 2003 - cypherpunks-legacy

Looking for Hackers' Story
by sghahn＠math1.kaist.ac.kr 17 Dec '03

17 Dec '03

I am looking for the sources about the general aspects of the hackers. I am writing an article for a Korean journal <The Database World>. I am writing about the origins, the history, the developments, the new trends, and its impact on the industry, etc. Pla Please send me an e-mail if you know any good sources. Thanks in advance.

1 0

Argh, apologies
by L. Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- My most sincere apologies: due to a Truly Heinous filesystem lossage mode, (thanks, DEC, for ultrix 4.2!) the sign/forward service cypherpunks(a)hks.net has been broken since late Wednesday and everything through it has been lost. I just got back from DC/MD/VA and corrected the problem. I've modified things so that this will not happen again (at worst, signing and forwarding will be delayed until the queue is manually run). Again, I very much apologize for this. - -- Todd Masco | It's sometimes difficult to be too loud about your cactus(a)hks.net | enumerated rights when you're busy exercising your cactus(a)bb.com | unenumerated rights. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLumIeyoZzwIn1bdtAQFU6AGAu3BVYAsmo+8+mVRRhm5i4rPijBDOjUC0 b00JXC27ejVCzr2ZGis1f1pbwH+/9bDJ =xfn3 -----END PGP SIGNATURE-----

1 0

Re: Good times virus (ANSI BOMB?)
by adam.philipp＠ties.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >On Dec 7, 1:04am, ADAM GERSTEIN, _THE_ MACGURU wrote: >> Need I remind you of a certain Robert T. Morris? Does the "Internet Worm" >mean >> anything to you? Sure, it wasn't actual email, but it did use email and other >> means of transport to cripple the net in a matter of hours. > >The Internet Worm used the sendmail DEBUG mode to execute commands on >a remote system. It did not propogate itself via email messages, which was >what the original (ridiculous) warning claimed. > >I can't feel a lot of sympathy for people who took this announcement >seriously. Such stupidity reaps its own rewards. Although the concept of "text viruses" seems a bit far fetched to some people, there these lovely toys known as ANSI bombs. Essentially they work in a similar method to the some techniques used in the sendmail bug, but they are MS-DOS specific, they will use embedded ANSI codes to run programs as the files is viewed... anyone know what will happen if deltree /XXX (where XXX represents an unpublished string of characters) is run from the root directory of a DOS hard disk? Its gone, quickly. Sure the files can be undeleted, but undeleting a whole disk is tricky business... Maybe Good Times is a hoax, but ANSI bombs exist and using a DOS ANSI text viewer will surely be a foolish thing to do on any downloaded text file... If anyone feels the need for proof I collected a few a while back, but really don't see the need to post them...heh heh. Adam Philipp PS: Please no comments about superiority of MACs or LINUX boxs because they are immune to ANSI boms...that ought to be clear enough... - -- PGP Key available on the keyservers. Encrypted E-mail welcome. SUB ROSA: Confidential, secret, not for publication. -Black's Law Dictionary GJ/CS d H S:+ g? p? au+ a- w+ v++ c++ UL+ UU+ US+ P+ 3 E N++ k- W++ M-- V po- Y++ t++ 5+ jx R G' tv+ b+++ D++ B--- E+++ u** h-- f++ r+ n+ y++-- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuVnPSoZzwIn1bdtAQEjeAF+Pi65kg9SMBZ1bzO5gJBsumi5x2vJFgqC o0hc3bMaqLYb5WY/jlaAtWURtzXzOUc6 =/53s -----END PGP SIGNATURE-----

7 7

Re: An Attempt to Hobble SAFE Crypto Bill (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 25 Jul 1997 18:22:48 -0400 From: Alan Davidson <abd(a)cdt.org> To: "--Todd Lappin-->" <telstar(a)wired.com>, fight-censorship(a)vorlon.mit.edu Subject: Re: An Attempt to Hobble SAFE Crypto Bill At 11:03 AM -0800 7/25/97, --Todd Lappin--> wrote: > >An Attempt to Hobble House Crypto Bill > > by Rebecca Vesely ... > The amendment, by Representative Benjamin Gilman > (R-New York), who chairs the International Relations > Committee, would make it unlawful to "manufacture, > distribute, sell, or import any product within the United > States that can be used to encrypt communications or > information if the product does not permit the real-time > decryption of such encrypted communications or > information." The full text of this very frightening amendment is now available on CDT's Web site at: http://www.cdt.org/crypto/legis_105/SAFE/index.shtml#970725 It's a chilling glimpse at the Administration's view of a mandatory-domestic-key-recovery world. This is the first time I've seen anyone put such a provision through the House Legislative Counsel process. -- Alan Alan Davidson, Staff Counsel 202.637.9800 (v) Center for Democracy and Technology 202.637.0968 (f) 1634 Eye St. NW, Suite 1100 <abd(a)cdt.org> Washington, DC 20006 PGP key via finger

1 0

(fwd) Newt says Clipper Chip is Dead
by jamesd＠netcom.com 17 Dec '03

17 Dec '03

Xref: netcom.com alt.culture.usenet:6563 alt.rave:37968 Newsgroups: alt.culture.usenet,alt.rave Path: netcom.com!ix.netcom.com!howland.reston.ans.net!usc!bloom-beacon.mit.edu!crl.dec.com!crl.dec.com!pa.dec.com!mtshasta.snowcrest.net!ken From: ken(a)snowcrest.net ("Ken Stuart") Message-ID: <82739.ken(a)mtshasta.snowcrest.net> Reply-To: ken(a)snowcrest.net Subject: Newt says Clipper Chip is Dead Date: Tue, 13 Dec 94 20:09:25 PDT X-Received: by usenet.pa.dec.com; id AA29312; Tue, 13 Dec 94 20:15:43 -0800 X-Received: by pobox1.pa.dec.com; id AA20213; Tue, 13 Dec 94 20:15:37 -0800 X-Received: from mtshasta.snowcrest.net by inet-gw-1.pa.dec.com (5.65/10Aug94) id AA16575; Tue, 13 Dec 94 20:14:24 -0800 X-Received: from [204.94.225.49] (sl1.mtshasta.snowcrest.net [204.94.225.49]) by mtshasta.snowcrest.net (8.6.5/8.6.5) with SMTP id UAA15046; Tue, 13 Dec 1994 20:13:23 -0800 X-Minuet-Version: Minuet1.0_Beta_16 X-Popmail-Charset: English X-To: alt.rave.usenet(a)decwrl.dec.com, alt.culture.usenet.usenet(a)decwrl.dec.com Lines: 16 Hello, On his weekly call-in TV show on National Empowerment Television tonight, Newt received a call asking about his opinion on the Clipper Chip, and he replied that it was a moot point, in that the Clipper chip concept was designed for a condition that no longer exists. So, paranoiacs, lighten up! :-) - respect to all, Ken ken(a)snowcrest.net (primary address) (if no answer, try ken.stuart(a)tigerteam.org ) -- --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we James A. Donald are. True law derives from this right, not from the arbitrary power of the omnipotent state. jamesd(a)netcom.com

1 0

the idiot spamming people who post to alt.2600 through my remailer
by Erich von Hollander 17 Dec '03

17 Dec '03

:: Post-To: alt.2600 has been squished. e

1 0

Re: Doomsaying, development, and deployment
by Adam Shostack 17 Dec '03

17 Dec '03

Why use the PGP libs? Would it be easier to use swIPe as an engine for encryption? If you do use swIPe, name the package link IP encryption. Adam Steve wrote: | > | How about starting a todo list so we can reach a consensus on a | > | prioritized list of goals. This may help us come up with projects | > | we can work together on. I'm itching to do some coding... | > | > Some projects worth doing: | > | > a link encryptor | | If someone would recommend the best version of the pgp libs, | I'll think about adding it to plug-gw (from TIS). That would | provide a ready made transparent shell for connecting | systems. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: McCoy is Right! New Mail Format to Start Now.
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Oh, get real, Lucky! My mail reader here is neither inadequate nor (particularly) buggy - it's good old "Mail", and when somebody posts MIME mail, it quite accurately shows me the real ASCII the mail is made of - I wish my other mail reader would do that. (It's Microsoft Mail, a closed, buggy, really appalling system that chokes on messages with more than 64K of non-attachment message body, and chokes badly on >132K.) If there were a convenient MIME viewer to pop in as my PAGER, I might have mail use it rather than less -sc, my current preference. But meanwhile, a MIME is a terrible thing to waste.....

1 0

c'punks top 5
by Andrew Lowenstern 17 Dec '03

17 Dec '03

What, IMHO, are the top 5 most important things the cypherpunks should be concentrating on? No doubt everyone else has their own ideas of what the "cypherpunks top 5" (or top 10) is, so please tell us your suggestions. 1. anonymous http proxy servers ("re-webbers") 2. PGP compatible crypto library 3. reply-able remailers that are secure and easier for the recipient 4. better remailer security (dc-nets) 5. socket-based keyserver interface for real-time automagic key fetches andrew <btw, this is a top 5 rather than a top 10 because I couldn't think of 10 good things to concentrate on when I wrote this>

2 1

Re: properties of FV
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

In the www-buyinfo discussion on crypto, > From research!nsb.fv.com!nsb Sat Dec 17 09:36:40 1994 >Eric > "If and When" is Yes and Today. Anybody who can autosign their > > The risk analysis is absolutely true. However, I have the impression > you missed the phrase "deployed widely enough to have penetrated a > meaningful portion of our market". I suspect that the cypherbunks and > www-buyinfo communities are not the best place to get a feel for the > extent to which crypto is widely deployed. Pick some random other list > or newsgroup, however, and I'll be surprised if you find 1% market > penetration for crypto. Obviously, from reading Cypherpunks you'd get the idea that everybody has PGP and all but a few old fogies have MIME :-) However, one of the reasons that few people actually are using PGP signatures on all their messages is that there's no real need - most of us realistically aren't trying to overthrow our governments, except through obsolescence and ridicule, and there isn't much problem with forging postings on the net. On the other hand, if my credit card were involved, I'd certainly be happy to start signing all my fv payment confirmations, especially if there were a convenient tool for doing so that got distributed free.... bILL

1 0