December 2003 - cypherpunks-legacy

Re: FYI: Eudora and PGP
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

>I have heard from the (one of the?) author(s) of Mac Eudora, on another Just Stever Dorner. Eudora is his baby. >to support applescript) will be supported to. I still haven't figured out >if ViaCrypt MacPGP uses the same applescript suite as MacPGP 2.6ui, which >is the neccesary detail there. Currently, it does (according to a Viacrypt employee and one other person on this list). >Or at least consider this post a welcome reprive from the Mandatory >Signature Wars. Intentionally posting off topic, eh Jonathan? :) -j

1 0

Where to get PGP for SunOS
by Geoffrey Faivre-Malloy 17 Dec '03

17 Dec '03

One last question answered and i'll be off and running :) Where can i get PGP for SunOS? Thanks, Geoffrey -------------------------------------------------------------------------- | Geoffrey(a)crl.com The opinions expressed herein may or | | Geoffrey Faivre-Malloy may not be the opinions of my employer.| | Purple Duck Software Like anyone really cares... | -------------------------------------------------------------------------- | Snail Mail: 613 Calibre Springs Way, Atlanta GA, 30342 | --------------------------------------------------------------------------

2 1

E-money Good or Bad?
by KDAGUIO＠aba.com 17 Dec '03

17 Dec '03

<Forwarded (from: LIBERTY) by Terry Liberty-Parker using timEd. <Originally from Libernet (Michael Beasley) (1:204/9.0) to All. <Original dated: Nov 26 '94, 20:51 <From: MWBEASLEY(a)delphi.com (Michael Beasley) <To: Libernet(a)Dartmouth.EDU <Date: Sat, 26 Nov 1994 22:56:04 -0500 (EST) <Suggested Reading: E-Money article in December issue of "Wired" <magazine <The article is about the future of electronic money. Electronic <money is coming, with small scale tests in progress now with <more scheduled for next year. There are competing systems out <there - whose ultimate intent is to someday replace entirely <that green paper in your wallet. <The really big question is how much individual privacy will be <retained: < "Can digital cash become anonymous, as real-world money is? < And if so, should it be?" <As you can guess there are two opposing camps on this one: <U.S. Government Agencies AAA .. ZZZ DigiCash Corporation <The American Bankers Association - vs - assorted cypherpunks <Microsoft Corporation assorted privacy advocates <The Borg at least one Libertarian ******************************* Whoa! Much of content of the discussions I had with Mr. Levy concerned the importance of protecting privacy and security for everyone. None of those comments made the cut. Yes, I have concerns about fully anonymous digital cash, but while I am not a full on crypto-anarchist, neither am I a crypto-facist. Let me ask you a question. If people can communicate over the net anonymously, tranmit unreadable messages, and transfer unlimited amounts of fully anonymous money, haven't you, in addition to protecting some of the interests of minorities, also perfected a mechanism by which people with evil intent can engage in criminal activities completely unobserved and with no fear of prosecution? How safe would you feel as an average private citizen, a famous/wealthy citizen, a mail order retailer, a bank, or a leader of a democracy? I have always believed that people won't come outside to play with you unless they feel safe. We want electronic commerce to work everywhere in the world. The following is not flamebait!!! If anyone can adequately address the concerns of all of the above entities I can guarantee you that they will become wealthy fast, if you don't address them all there is a significant risk that you will fail. If you have the answer (and I haven't seen an adequate proposal yet) please let me know and I will spread the word and clear the way. Thanks for listening!...kawika... ****Speaking only for myself and not the ABA.

3 2

How do *I* use PGP?
by TheElusiveMatthew 17 Dec '03

17 Dec '03

It has been my belief that there isn't an effective way for me to use PGP, but with all the hubbub, I thought it might be worthwhile to verify this. My internet access is through a personal account provided by my employer. It is on a machine used exclusively by employees of the University of Illinois (no student accounts). My primary access to this account is through my IBM xt (dos 3.3) at work. This machine is occasionally used by others and is outside of my control. I also use many of the public access Win/Mac machines on campus. I have no pc of my very own. Is there an effective way for me to use PGP? -- Matt Hewn <matthewn(a)uiuc.edu> -- Information is not knowledge; knowledge is not wisdom; wisdom is not truth. Truth is absolute.

1 0

Re: Brands excluded from digicash beta
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

>Paul Robichaux (perobich(a)ingr.com) writes: >Take a look at the process involved in clearing checks and you will soon >see how it can get very strange. If clearing sounds simple, may I suggest as a general rule of thumb to look at the complexities involved with transaction management in distributed database environment, and multiply the complexity found there by the number of banks worldwide. Then, find a way to factor in a many-to-many instead of a one-to-few achitecture. And that rule of thumb completely ignores the fact that if a transaction is fouled up anywhere along the line, one finds extensive legal liability involved instead of a 'mere' corrupt table in a database. -j >jim

2 1

Re: E-money Good or Bad?
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

>The following is not flamebait!!! Heh... Nice try. -j

1 0

Re: Is it happening already ?
by Hal 17 Dec '03

17 Dec '03

Here is my key. I just sent it to the keyservers. I hadn't had a chance to sign it with my secure key yet. Hal -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQBNAy7bVn8AAAECAPRhqHLha5WFaFQw0/b1Wn8XCuHokjvbEeJbg5UPHs6fBE3i uZTmAY5aFqnFXOdNGackOOTYu3tEGcwsm07L0wEABRG0F0hhbCBGaW5uZXkgaW5z ZWN1cmUga2V5iQCVAwUQLt5K9agTA69YIUw3AQED0gQAoORH1weDQ+L2gefrRauI GLqDlNy0nJQDo5wgdJky5Pd7vUJalwxGuqnQG1QV+ejnRYEN7wEoYQRjv21tTos9 nbUtWAoINrEVjWHpG7AXIRNyoCJtket9mQ2jz9QNTD9Nt8JsedJlqLuT7RMLN1tb /cIYnrBCyuTCek4fRbTYkSU= =G3nF -----END PGP PUBLIC KEY BLOCK-----

1 0

More on ASIS...
by Ian Farquhar 17 Dec '03

17 Dec '03

I was told this morning that the ASIS post had been reposted to several other lists, including several social ones. Interesting... Anyway, there was a followup to the incident on the radio this morning (2BL, is anyone was listenning): Gareth Evans (Minister for Foreign Affairs) has announced that no documents were irretrievably lost in the fire, as everything which was lost in the fire was also duplicated elsewhere. In addition to this, the fire is being referred to the ACT coroner's office, as despite the original claim by the Federal Government that there were no suspicious circumstances, the Australian Federal Police have decided to do pursue this action. It is not clear yet whether this is a matter of proceedure, or whether suspicious circumstances are suspected. The government's original claim was produced with surprisingly little time for investigation, it has been noted. Ian.

1 0

Why nothing works <g> [Was: Mandatory sig workaround]
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Roy wrote in response to Tim: >Tim, just for fun, what tools would need to appear to make it possible >for you to sign your traffic? Maybe a description will inspire some of >the Macheads out there to get hacking. (the astute reader will note >that I'm not suggesting new tools to the erstwhile Mr. May, as has been >done so often in the past) There is no hacking in the world that could create the kind of tool that would be needed to satisfy Tim. What would be required to satisfy Tim can't be done and I think that most long time CP's are be well aware of that. We have had this discussion over and over for many issues (PGP, MIME,..) for the last two years. The problem isn't that there are no tools for Tim's Mac, the problem is that there is _no way_ to do all these things on Netcom's UNIX host. 1. Tim: "I can't do any of the new things you are proposing because I don't have the tools." 2. Some CP: "Just download your mail to your local machine and process it there. There are many great ways to automate this on a Mac." 3. Tim: "I don't want to have to download mail for processing. I want to be able to do it all on Netcom's machine." 4. Some CP: "Just run PGP on Netcom's machine and process the mail there.' 5. Tim: " Using PGP on a shared machine is a security risk." 6. Some CP: "Just use a low security key on Netcom to sign your messages." 7. Tim: "PGP on a timeshare is worse than nothing. It gives a wrong sense of security. " 8. Some CP: "Since you don't want to do it on the host and you don't want to do it on another machine, there is no way for you to do it." 9. GOTO 1. No, the above is not a quote of an acctual exchange, but rather an abreviated version of what I gathered from reading hundreds of messages and dozens of threads. YMMV, - --Lucky -----BEGIN PGP SIGNATURE----- Version: 2.6ui iQCVAgUBLt41vASQkem38rwFAQFNRwP8DjwJ37unGf27LscvTOCU699wvXvH/pEI kBdvRCHJNQbcerBc7SDwjgVJC3XaaIDlO1rqBfcZXZETOa/3EKnjFHiX0+6Kb0zo b1k2lTmzFG7su2biwkmYkI5TlYEM4/nTpq/vYjZ3Md5rjXm5wA+cJcfivJd8RdX6 fRwWq2QXerM= =z9wu -----END PGP SIGNATURE-----

4 3

PGP signing tools for Elm/Pine/nn
by Greg Broiles 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Recent comments re the signing controvery give me the impression that a repeat of this information might be useful. I apologize if this seems like a waste of bandwidth. I can't seem to find a copy of a tool to make .shar's (or whatever one calls them) so I've separated files with ===== markers. I have also uploaded a gzip'ed .tar of these files, plus a gzip'ed copy of the mkpgp.txt.uu document referenced below, to cypherpunks/incoming on ftp.csua.berkeley.edu. These scripts + a copy of PGP interface nicely with Pine or Elm and NN to sign/encrypt outgoing messages, and decrypt or signature- verify incoming mail. The four files below came with the PGP 2.3 distribution (under contrib/elm_nn); they were not included in the laster distributions. I don't know why. They still seem to work fine with the newer MIT-PGP stuff. The "mkpgp" script referenced in Michael Handler's message seems to work fine from inside Pine; but I mostly stick with Elm and nn, so haven't used it much. Again, sorry to use list bandwidth for this; I thought that these were already in the hands of most of the folks on the list but the last few days' messages make me feel uncertain about that. (And no, for the zillionth time, it's not great policy to use PGP on a machine where you're not root. Use a small key marked "unsecure" and get on with life. It won't protect you from root but it will protect you from Detweiler and other small-time annoyances.) ===== Michael Handler's message ===== From: Michael Handler <grendel(a)netaxs.com> Subject: Interfacing PGP with Pine (Script pointer) Date: 25 Nov 1994 07:03:03 -0800 Message-ID: <Pine.SUN.3.91.941125094529.29026E-100000(a)unix3.netaxs.com> For a well written script to interface PGP with Pine: finger slutsky(a)lipschitz.sfasu.edu | pgp -f > mkpgp.txt.uu If you don't have finger access, mail me privately, and I'll send the file to you. Mike, who is only as elegant as his actions let him be - -- Michael Handler <grendel(a)netaxs.com> Philadelphia, PA Civil Liberty Through Complex Mathematics VoicePGP Development Team soc.support.youth.gay-lesbian-bi co-moderator ===== readme ===== To integrate PGP 2.1 with Elm and NN: 0) Make sure the path of Perl in the first line of each of the three files reflects the full path of this utility for your system. Also, make sure that the EDITOR and PAGER environment variables reflect your editor and pager of choice (vi and less will be used by default). 1) Put the files morepgp, mailpgp, and postpgp in one of the directories on your PATH. 2) Modify your ~/.elm/elmrc file to contain the following lines: editor = mailpgp pager = morepgp 3) Modify your ~/.nn/init file to contain the following lines: set editor postpgp That's all folks! Now, each time you post a message or reply to a message with nn, after you exit your editor, you will be asked whether you want to sign your message. Each time you compose a private message with elm, or reply to a message, and leave the editor, you'll be asked whether you want to sign and/or encrypt the message. When you browse a message, if it contains any PGP blocks, those will be properly interpreted. When you reply to a message containing PGP blocks, you'll have them properly decrypted and quoted in your editor. BUGS 1) You cannot encrypt messages that you mail from nn. You can only sign them. 2) When you reply to a PGP-encryted message, the encrypted message is temporarily kept on the disk, which is a security hole. 3) The temporary files are not wiped out, they are just deleted. 4) The scripts are ugly, reflecting my lack of knowledge of Perl. In fact, I don't know Perl at all; I hacked somebody else's scripts. If you know Perl better then me, please feel free to improve the scripts and don't forget to mail me a copy of the improved version. I can be contacted as Vesselin Bontchev at bontchev(a)fbihh.informatik.uni-hamburg.de ===== mailpgp ===== #!/usr/bin/perl ($visual = $ENV{'VISUAL'}) || ($visual = '/usr/ucb/vi'); $topgp = 0; $blanks = 0; $paragraphs = 1; $blankcompress = 1; $name=@ARGV[$#ARGV]; umask (077); open (INPUT, "<$name"); open (OUTPUT, ">${name}.rply") || die "Cannot open ${name}.rply for output.\n"; while (<INPUT>) { if (!$topgp && !m/^> -----BEGIN PGP .*-----/) { if (m/^> *$/) { if ($paragraphs) { if ($blankcompress) { if ($blanks == 0) { print OUTPUT "\n"; $blanks = 1; } } else { print OUTPUT "\n"; } } else { print OUTPUT; } } elsif (m/^ *$/) { if ($blankcompress) { if ($blanks == 0) { print OUTPUT "\n"; $blanks = 1; } } else { print OUTPUT; } } else { print OUTPUT; if ($. == 1 && !m/^> /) { print OUTPUT "\n"; $blanks = 1; } else { $blanks = 0; } } } if (!$topgp && m/^> -----BEGIN PGP .*-----/) { $topgp = 1; $tmpfile = "${name}.pgp", unlink ($tmpfile); open (TMPFILE, ">$tmpfile") || die "Cannot open $tmpfile for output.\n"; } if ($topgp) { $_ =~ s/^> //; print TMPFILE $_; if (m/^-----END PGP .*-----/) { $topgp = 0; close TMPFILE; $clrfile = "${name}.clr"; `pgp $tmpfile -o $clrfile`; open (CLEAR, "<$clrfile") || die "Cannot open $clrfile for input.\n"; print OUTPUT "-----BEGIN OF PGP DECRYPTED TEXT-----\n\n"; while (<CLEAR>) { if (m/^$/) { print OUTPUT "\n"; } else { print OUTPUT "> "; print OUTPUT; } } close CLEAR; unlink ($clrfile); unlink ($tmpfile); print OUTPUT "\n-----END OF PGP DECRYPTED TEXT-----\n\n"; } } } close OUTPUT; close INPUT; unlink ($name); rename ("${name}.rply", "$name"); system ($visual,@ARGV); while (!$q) { print "Sign this message? [Y]: "; $q = <STDIN>; $q =~ s/[ \t\n]//g; $q = substr ($q, 0, 1); if (($q eq 'Y') || ($q eq 'y') || ($q eq '')) { push(@opts,'-st','+clearsig=on'); $q = "y"; } elsif (($q ne 'N') && ($q ne 'n')) { $q = ''; } } $q=''; while (!$q) { print "Encrypt this message? [Y]: "; $q = <STDIN>; $q =~ s/[ \t\n]//g; $q = substr ($q, 0, 1); if (($q eq 'Y') || ($q eq 'y') || ($q eq '')) { push(@opts,'-e'); $q = "y"; } elsif (($q ne 'N') && ($q ne 'n')) { $q = ''; } } if (@opts) { system ('pgp','-a',@opts,$name); if ($? == 0) { unlink ${name}; rename ("${name}.asc", "$name"); } } ===== morepgp ===== #!/usr/bin/perl # written by jason steiner, jsteiner(a)anwsun.phya.utoledo.edu, Jan 1993 # # if you use or make improvements to this program i would appreciate # copies of your modifications & your PGP public key. $|=1; $topgp=0; $logname = $ENV{'LOGNAME'}; $pager='/usr/local/bin/less -i -n -s -S -c -M'; $pager = $ENV{'PAGER'} if ($ENV{'PAGER'}); umask 077; open (PAGER, "|$pager") || die "Cannot open pipe to $pager.\n"; print PAGER "\n"; while (<>) { if (!$topgp && m/^-----BEGIN PGP .*-----/) { $topgp = 1; $tmpfile = "/tmp/.pgp.$logname.$$"; unlink($tmpfile); open (TMPFILE, ">$tmpfile") || die "Cannot open $tmpfile for output.\n"; } if (!$topgp) { print PAGER; } else { print TMPFILE $_; if (m/^-----END PGP .*-----/) { $topgp = 0; close TMPFILE; open (CLEAR, "pgp -f < $tmpfile |") || die "Cannot open pipe to PGP.\n"; print PAGER "-----BEGIN PGP DECRYPTED BLOCK-----\n"; while (<CLEAR>) { print PAGER; } close CLEAR; unlink($tmpfile); print PAGER "-----END PGP DECRYPTED BLOCK-----\n"; } } } close PAGER; ===== postpgp ===== #!/usr/bin/perl # written by jason steiner, jsteiner(a)anwsun.phya.utoledo.edu, Jan 1993 # # if you use or make improvements to this program i would appreciate # copies of your modifications & your PGP public key. ($visual = $ENV{'VISUAL'}) || ($visual = '/usr/ucb/vi'); system($visual,@ARGV); while (!$q) { print "Sign this message? [Y]: "; $q = <STDIN>; $q =~ s/[ \t\n]//g; $q = substr ($q, 0, 1); if (($q eq 'Y') || ($q eq 'y') || ($q eq '')) { push(@opts,'-st','+clearsig=on'); $q = "y"; } elsif (($q ne 'N') && ($q ne 'n')) { $q = ''; } } if (@opts) { $name = $ARGV[$#ARGV]; umask(077); open(INPUT,$name); open(HEAD,">${name}.head"); open(BODY,">${name}.body"); while (<INPUT>) { if (1 .. /^$/) { print HEAD; if (m/^From: / || m/^To: / || m/^Date: /) { print BODY; } } else { print BODY; } } close(HEAD); close(BODY); system('pgp','-a',@opts,"${name}.body"); if ($? == 0) { unlink($name); system "cat ${name}.head ${name}.body.asc > $name"; } unlink("${name}.head"); unlink("${name}.body"); unlink("${name}.body.asc"); } -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt5gen3YhjZY3fMNAQF1QwP+OETB9ibDTWxLJ3BWQsgG5tAIeSHgeWs7 cOasOVidSoHJ10LPbOjwfCP9mluUTpsWNzIXC3GRSh5QO0esOPubu5CsFUaouEo8 DwvAik5kxIUcztqry8ImktFY14UmLZDjHshN+2WU7yLNG0BBM4C2mfwqkKDN9ESX ZK2bJj2LVF0= =2toZ -----END PGP SIGNATURE-----

1 0