December 2003 - cypherpunks-legacy

(None)
by Jeff Gostin 17 Dec '03

17 Dec '03

ghio(a)cmu.edu (Matthew Ghio) writes: > I couldn't find alt.numbers.random, or any alt.numbers.* groups, on any of > the news-servers that I tried. Perhaps you need to newgroup it again. According to David Lawrence's Usenet listing, alt.numbers.* doesn't exist. Unless it was created in the last two months, officially it doesn't exist. But since when did "officially not existing" mean something actually didn't exist? --Jeff -- ====== ====== +----------------jgostin(a)eternal.pha.pa.us----------------+ == == | The new, improved, environmentally safe, bigger, better,| == == -= | faster, hypo-allergenic, AND politically correct .sig. | ==== ====== | Now with a new fresh lemon scent! | PGP Key Available +---------------------------------------------------------+

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

I mailed this about 5 minutes before the news of list death arrived, so it didn't make it. Conspiracy! Anyway, I posted this to comp.org.eff.talk and so far it has generated no interest. The Cypherpunks have been mentioned in various articles in the mass media as a group that would at least toy with the idea of civil disobedience concerning ITAR violation. Imagine yourselves trying to topple ITAR by publically exporting PGP to many countries, every day, for over a year. Yet do any of us really want to push our luck this way? Phil Zimmermann is out a lot of cash paying for a legal team. He can hardly afford taking his family out for dinner. That's why discovering this, I feel it should make *news*. As it turns out, the internet's largest Macintosh ftp archive has been exporting MacPGP2.2 every day for the last year! This to Singapore and China and God knows where else. Every country on Earth with an internet connection, likely. Here is a satirical essay, explaining what anyone who takes ITAR at face value might do if they discovered this situation.... -----BEGIN ROT13 SIGNED MESSAGE----- Fellow citizens of the United States of America, I wish to inform you of a great and ongoing catastrophe of most serious consequence. It is organized crime, by definition. Below is the header for the MacPGP2.2 file on sumex-aim.stanford.edu, archived with dozens of other utilities, as /info-mac/util/pgp.hqx, which has been there for *over a year*, many times a week being *exported* onto info-mac mirrors around the world. This is the most massive and organized absolute violation of the USA's ITAR munitions export laws (regulations) we have ever witnessed. For an entire year, weekly if not daily, the notorious encryptor PGP, right under our eyes, exported! I hope this is cleared up as soon as humanly possible, but we are all of us left with the guilt of not having noticed this before. All this talk of ITAR and there you are, your largest communal Mac ftp site pumping out PGP across the border like a huge demonic machine bent on destroying our beloved society. If the moderators cannot be contacted immediately, I suggest military force be used. Or cooperative shutdown of the US internet connections. Please begin this at once, as it *must* be stressed that PGP is classified as a MUNITION, right along with rocket launchers and tanks!!!!!!!! This is as serious as it gets. I didn't even know what the internet *was* back in April of '93, and I am but one in a million (literally) who has access to sumex-aim.stanford.edu and all its mirror sites. It must have been my destiny to save the world, for none of *you* seem interested in doing so. It has only been an hour since I discovered this NATIONAL SECURITY DISASTER, and I immediately set myself in action to save my country from destruction. *I*YoU*mE*We*OiwIE*wE*yOU*Me*I* P.S. Here is the evidence: >From: macmod(a)SUMEX-AIM.Stanford.EDU (Info-Mac Moderator) >Date: Sun, 25 Apr 1993 23:22:58 PDT > >PGP (Pretty Good Privacy) ver 2.2 - RSA public-key encryption freeware >for MSDOS, protects E-mail. Lets you communicate securely with people >you've never met, with no secure channels needed for prior exchange of >keys. Well featured and fast! Excellent user documentation. > >PGP has sophisticated key management, an RSA/conventional hybrid >encryption scheme, message digests for digital signatures, data >compression before encryption, and good ergonomic design. Source >code is free. > >Keywords: PGP, Pretty Good Privacy, RSA, public key, encryption, > privacy, authentication, signatures, email > >(This file must be converted with BinHex 4.0) > >:$8eKBe"(8$)Z-LjcC@%!39"36'&eFh3J!!!$@3X!!%DFIea6593K!!%!!eN,FNa .... A-1993 Philip Zimmermann, Phil's Pretty Good Software. 6 Mar 93 >Date: 1994/06/12 16:10 GMT I further suggest that all of the following sites (but a sample) immediately remove this file from their archives and stop mirroring sumex-aim till they too remove the file. To keep this from happening again, I suggest *all of us* in the USA delete our copies of PGP from our hard disks, lest our children export it into the hands of such enemy nations as these. It is time we put an end to this scourge, for look what will happen if we do not. Pornographers and terrorists are coming for our children if we do not act. Death to PGP users!!!!!!!!!!!!!!! Where is our government in all of this? Our tax dollars are not being used to protect us from the EXPORT OF MUNITIONS TO ENEMY NATIONS!!!!! I suggest full prosecution of all users and maintainers of sumex-aim, as they have all obviously conspired to maintain this treachery. I suggest they all be searched for other weapons as well including land mines, automatic machine guns, poison gases, biological weaponry and mind control devices of all sorts, as it is my firm belief that the only reason they are interested in PGP is to forward their agenda to export other munitions, drugs pushed on *our* children to pay for them!!! This will culminate in the obvious acquisition of *nuclear bombs* by every Tom Dick and Harry gangster. Little boys and girls in the getto with *neutron bombs* and *poison gas missiles*! I shutter to think we could have stopped it but, alas, we may have failed ourselves. Here are the target sites. I suggest immediate offensive attacks to destroy these evil ports of death and destruction.... Australia (Melbourne): archie.au//micros/mac/info-mac/util/pgp.hqx Austria (Vienna): ftp.univie.ac.at//mac/info-mac/util/pgp.hqx Canada (Vancouver): ftp.ucs.ubc.ca//pub/mac/info-mac/util/pgp.hqx Finland (Espoo): ftp.funet.fi// pub/mac/info-mac/util/pgp.hqx Finland (Jyvaskyla): ftp.jyu.fi//info-mac/util/MacPGP2.2.sea Germany (Hannover): ftp.rrzn.uni-hannover.de//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.center.osaka-u.ac.jp//info-mac/util/pgp.hqx Japan (Tokyo): ftp.iij.ad.jp//pub/info-mac/util/pgp.hqx Japan (Tokyo): ftp.u-tokyo.ac.jp//pub/info-mac/util/pgp.hqx Netherlands (Wageningen): ftp.fenk.wau.nl//pub/mac/info-mac/util/pgp.hqx Republic of Singapore (Singapore): ftp.nus.sg//pub/mac/util/pgp.hqx Sweden (Lund): ftp.lth.se//mac/info-mac/util/pgp.hqx.Z Sweden (Uppsala): ftp.sunet.se//pub/mac/info-mac/util/pgp.hqx Switzerland (Zurich): nic.switch.ch//mirror/info-mac/util/pgp.hqx Taiwan (Hsinchu): ftp.edu.tw//Macintosh/info-mac/util/pgp.hqx UK (London): src.doc.ic.ac.uk//packages/info-mac/util/pgp.hqx.gz -----END ROT13 SIGNED MESSAGE----- -----BEGIN ROT13 SIGNATURE----- Whar fvkgu avargrra uhaqerq avargl sbhe. Sbhegubhfnaqgra punenpgref va frirauhaqerqrvtuglrvtug jbeqf bs baruhaqerq yvarf. -----END ROT13 SIGNATURE-----

1 0

Re: (None)
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>OBcypherpunk: Matt Blaze's paper (_Protocol Failure in the Escrowed >Encryption Standard_) is only available in Postscript format. But at >my local Kinko's, the fascist session logging utility doesn't seem to >notice that 'copy /b a:eesproto.ps prn' in a DOS Prompt window causes >printing to happen. ;-) An ascii version of the paper is available on: ftp.eff.org:/pub/EFF/Policy/Crypto/Clipper, the filename is ees_flaw_blaze.paper around 35K bytes

1 0

How many on cypherpunks?
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

> It was at about 700 subscribers for several months, then the first big > "outage" a month or so ago caused the number to drop way off. Last I > checked (send the message "who cypherpunks" to majordomo(a)toad.com) > there were about 400 subscribers. (It is likely that many of the > original "700 Club" were casual subscriber, dormant accounts, > gateways, whatever.) > > And the list just suffered a second wipe-out of the subscriber list, > so I don't know right now how many are even seeing this. My week-old 'who' shows 450; yesterday's shows 180. I see this second outage as an omen - the cypher gods want less traffic ;-) So I'm _not_ going to send a mailer to the differential list of users I have, this time! ----------------------------------------------------------------------------- Rishab Aiyer Ghosh They came for the Jews, and I was silent because I was not a Jew; rishab(a)dxm.ernet.in They came for the Trade Unionists, and I did not protest, because I did not Voice/Fax/Data +91 11 6853410 belong to a trade union; Voicemail +91 11 3760335 They came for the Catholics, and I said nothing because I was not a Catholic; H 34C Saket And then they came for me. New Delhi There was no one left to say anything... INDIA ----Father Niemoeller

2 1

Re: Cantwell Bill
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

Mr. Gillogly wrote, >The reason I don't consider your Stunning Revelation an important news >flash is that it's just one example of the many ways crypto is actually >exported. For example, PGP 2.6 was overseas within hours of its release. That was a single ITAR violation. This is thousands. >A more direct comparison is with DES: NIST has DES code available in >soft copy in Appendix A of its publication fips181.txt, accessible in >their public FTP directory with no warnings about export restrictions. Huh? Who would want to export DES? That wont have any influence on people's politics. PGP is a hot topic. *It's* export is all that people think about. >The Cantwell stuff is extremely important for commercial products, but >for private crypto (e.g. non-profit and non-infringing PGP >implementations) it simply decriminalizes the existing vigorous export >activity; rather like decriminalizing the use of marijuana. The sumex case is like a huge year-long "smoke-in", the sort of thing that might lead to *legalization* of hemp, if the lay public were aware of it. "Private crypto" (PGP in all its guises) is becoming a standard, yet its future development has been and still is being severely crippled by ITAR worries among many who would otherwise be active core PGP developers. Cantwell, in my eyes, is about *PGP*. I'm all for commercial RSA, but unless I can send a friend a free copy of it, the hell with it. Also remember commercial crypto hardly ever comes with source code! Colin found a serious bug in PGP2.6 where one character was left out in the crypto code. I believe it was someone else who pointed this out to him. Had this happened with ViaCrypt PGP or "Microsoft Encrypt", would you expect it to be found? How can you *trust* a commercial crypto routine if the exact and compilable source code is not available? And if PGP does become a standard, why do you want to pay for it 8-) ? So you wont have to waste the time looking for backdoors in the source? P.S. Sorry for the multiple posting, but I figured the remailer I used was dead, since it was, for a day.

1 0

Waco in cyberspace
by bchappe%sunoco＠relay.nswc.navy.mil 17 Dec '03

17 Dec '03

> >In the June 6 issue of the New Yorker is an interesting story by >John Seabrook (who did the email interview with Bill Gates) about >getting flamed and how violated and uspset it made him. Lots of not >explicitly stated suggestion that maybe somebody will need to control >all this, and some very confusing material suggesting to the non-technical >that viruses or worms may be sent via email messages. "Is this free speech?". >But the chilling passage in the article is on page 77 where the writer says > >>Dr. Clinton C. Brooks, the N.S.A.'s lead scientist on the Clipper Chip >>told me, "You won't have a Waco in Texas, you'll have a Waco in cyberspace. >>You could have a cult, spaeking to each other through encyrption, that >>suddenly erupts in society - well programmed, well organized - and then >>suddenly disappears again." > >Getting scared yet? > >-Steve

1 0

Dead list???
by ER CRAMER 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Is this list dead or isn't nobody writing on it??? Or ain't I subscribed anymore??? ... If you outlaw Privacy, only Outlaws will have Privacy! Eelco Cramer <crame001(a)hio.tem.nhl.nl> ------ - -------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLf67RIDAdPKe9hHLAQF6xwQAuK3c/+gEKuws22S2Qh9qXveCKHSUw5WE tCrRpMUU2zcKGbZMRaGGF2UOuElT0v5jxfENYL1XQlSvlNTPMSLOFkFQ0T3XV1oh DnDl0tctgU8dwSxTqGKRuAfYQ5cuyqWPLc9TBMk6mMz7xCJJwIb3oGDtSvTlX0/L 0k8KyObm8yI= =um6V -----END PGP SIGNATURE-----

2 1

LIST: List Maintenance
by hugh＠ecotone.toad.com 17 Dec '03

17 Dec '03

I have restored the backup of the list from June 11th, and merged it with the list as of a few minutes ago. Some list users who signed up again in the last three days are now signed up twice for the list (due to signing up from a different machine or having changed your name). If you are getting two copyies of the posting to the list, send majordomo(a)toad.com a "unsubscribe cypherpunks" command from the machine that you don't want the list going to. If you still have problems after trying that, please contact us via cypherpunks-owner(a)toad.com or majordomo-owner(a)toad.com and we will fix it by hand. Enjor, and write code and doc! ||ugh Daniel Sometimes Postmaster hugh(a)toad.com

1 0

LAST CALL: Crypto export bill - one day left to make or break!
by Stanton McCandlish 17 Dec '03

17 Dec '03

*DISTRIBUTE WIDELY AND QUICKLY* ONE DAY DEADLINE! The House Intelligence Committee will probably make their decision on the vital issue of cryptography export tomorrow afternoon, Wed. June 15, 1994. If you've not had your say on whether the State Dept. & NSA will be allowed to continue to restrict the flow of public cryptographic products, write, call and fax *today*. Updated fax information for the entire Intelligence Cmte. is below, as is a sample letter, and background information on this important legislative action. If you don't get through on your first fax attempt, keep trying. All of these numbers have been tested and are working as of June 14. ******* What You Can Do 1) Fax a short letter TODAY to the chair of the Intelligence Committee, Representative Dan Glickman (D-KS). Ask him in your own words to leave the encryption provisions of H.R. 3937 intact. You may wish to send a copy of this to the committee itself also. Fax number: +1 202 225 5398 Committee fax: +1 202 225 1991 2) If you are unable to fax a letter, send an e-mail message to Rep. Glickman at glickman(a)eff.org. We'll deliver it for you, provide it arrives before noon, at which point all such messages must be delivered. 3) Personally urge everyone you know to send a similar fax to Rep. Glickman TODAY, especially if they are among Glickman's Kansas constituents. 4) If your own Representative is on the Intelligence Committee, send him or her a copy of what you sent Rep. Glickman. ******* Phone and Fax Numbers House Intelligence Committee ---------------------------- Subcommittee phone: +1 202 225 4121 Subcommittee fax: +1 202 225 1991 <== send your fax HERE <== p st name phone fax ___________________________________________________________________________ D KS Glickman, Daniel +1 202 225 6216 +1 202 225 5398 Chair D WA Dicks, Norman D. +1 202 225 5916 +1 202 226 1176 D CA Dixon, Julian C. +1 202 225 7084 +1 202 225 4091 D NJ Torricelli, Robert +1 202 224 5061 +1 202 225 0843 D TX Coleman, Ronald D. +1 202 225 4831 +1 202 225 4831 [Coleman's staff manually switch line to fax if they hear fax tones. Preceeding your fax with a voice call might help] D CO Skaggs, David E. +1 202 225 2161 +1 202 225 9127 D NV Bilbray, James H. +1 202 225 5965 +1 202 225 8808 D CA Pelosi, Nancy +1 202 225 4965 +1 202 225 8259 D TX Laughlin, Gregory H. +1 202 225 2831 +1 202 225 1108 D AL Cramer Jr, Robert (Bud) +1 202 225 4801 private D RI Reed, John F. +1 202 225 2735 +1 202 225 9580 D MO Gephardt, Richard A. +1 202 225 2671 +1 202 225 7452 R TX Combest, Larry +1 202 225 4005 +1 202 225 9615 R NE Bereuter, Douglas +1 202 225 4806 +1 202 226 1148 R CA Dornan, Robert K. +1 202 225 2965 private [Dornan's public fax disconnected; office refuses to divulge a fax number] R FL Young, C. W. (Bill) +1 202 225 5961 +1 202 225 9764 R PA Gekas, George W. +1 202 225 4315 +1 202 225 8440 R UT Hansen, James V. +1 202 225 0453 +1 202 225 5857 R CA Lewis, Jerry +1 202 225 5861 +1 202 225 6498 R IL Michel, Robert H. +1 202 225 6201 +1 202 225 9461 ****** Sample Fax FAX to: 202-225-1991 and 202-225-5398 Representative Daniel Glickman Chair House Intelligence Committee U.S House of Representatives Dear Representative Glickman: I realize that tomorrow your committee will probably act on the encryption provisions of H.R. 3937, the Export Administration Act of 1994. I urge that you allow them to remain as they were introduced in Rep. Cantwell's H.R. 3627, and subsequently incorporated into H.R. 3937. Privacy is the basis for my concern, and I support the ability to use secure encryption. Additionally, prohibiting the export of secure cryptography from the United States puts the U.S. at a competitive disadvantage internationally, for who would choose to use crypography known to be insecure (such as the "Clipper Chip", or products intentionally weakened to pass excessively stringent export restrictions)? Please, support privacy and security by preserving the cryptography export language of H.R. 3937. <signed> ****** More Information Detailed background information on this alert: ftp.eff.org, /pub/Alerts/export.alert gopher.eff.org, 1/Alerts, export.alert http://www.eff.org/pub/Alerts/export.alert.html BBS (+1 202 638 6119, 6120; 8N1): "Alerts" file area, export.alt The actual text of this part of H.R. 3937 is at: ftp: ftp.eff.org, /pub/EFF/Policy/Crypto/ITAR_export/hr3937_crypto.excerpt gopher.eff.org, 1/EFF/Policy/Crypto/ITAR_export, hr3937_crypto.excerpt http://www.eff.org/pub/EFF/Policy/Crypto/ITAR_export/hr3937_crypto.excerpt BBS: "Privacy--Crypto" file area, hr3937.crp For current status on the bill: ftp.eff.org, /pub/Alerts/export_alert.update gopher.eff.org, 1/Alerts, export_alert.update http://www.eff.org/pub/Alerts/export_alert.update BBS: "Alerts" file area, export.upd A general Web page on crypto export policy is at: http://www.cygnus.com/~gnu/export.html -- Stanton McCandlish * mech(a)eff.org * Electronic Frontier Found. OnlineActivist F O R M O R E I N F O, E - M A I L T O: I N F O @ E F F . O R G O P E N P L A T F O R M O N L I N E R I G H T S V I R T U A L C U L T U R E C R Y P T O

3 2

instructions on how to get PGP 2.6
by ecarp＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Could someone email me the directions on how and where to get PGP 2.6? I have the directions, but they're sitting at home in my mailbox, and I'm 2 hour away from home. :( Thanks in advance... :) - -- Ed Carp, N7EKG/VE3 Ed.Carp(a)linux.org, ecarp(a)netcom.com Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi If you want magic, let go of your armor. Magic is so much stronger than steel! -- Richard Bach, "The Bridge Across Forever" -----BEGIN PGP SIGNATURE----- Version: 2.5 iQCVAgUBLf8d8SS9AwzY9LDxAQGMrgP/UobsKNKlYJgJDJJkgM1I9JF5P4jnXaYW QD4/3WzMkMdnI0+hxWTMRfgFru3gXoG7gCeE8qXyhzr0s2VkK4VJOD0t1fEMar6D Sxwbwj847ecymIEIc+lFTVPalEOmpQfYILJ/RKQzlZ2weMKh1hzbL9681LDiedIa VtUtZE20TmA= =LcB6 -----END PGP SIGNATURE-----

1 0