December 2003 - cypherpunks-legacy

pgp 2.6.1 circumventing legal kludge
by 0x7CF5048D＠nowhere 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have examined the source to the latest modification to pgp2.6 pgp2.6.1. It appears that the +legal_kludge command parameter remains as also does the bug that prevents this code from working! (Value is used instead of Flag.) One would have thought that the bug would have been fixed or the legal kludge code would have been removed in pgp2.61. The existence of this bug was widely publicized. Perhaps the authors wish there to continue to be a way to circumvent the kludge, but can not be seen taking explicit action to fix the bug. The bottom line is that to encrypt a message to be sent to someone with an earlier version of pgp such as pgp 2.3a, one should disable the legal kludge by using the following command line: pgp +cert_depth=0 +legal_kludge=off +cert_depth=4 -eat file them My program in noklg.zip is a way to use the above feature to cause pgp to be compatible with earlier versions of pgp without the extra typing. (It supports MSDOS and OS/2). You can set up the program so that pgp shells and other programs work as originally designed, but encrypting files compatible with earlier versions of pgp. I wish that someone would store this program in at a public ftp site. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLninbg2Gnhl89QSNAQEB7QP+L2iA+ha2KCfH31O2OoG6syIWWNc7f76e rx5lQ3HpufkVIqhvw+Ff1FWR5aWIPZ2ZKfYAAHjpDiTRMJIMOs2dalx30Hjn/Jyw X6cEIGzywRpRx8oX+kX5BhxM93IblP1mHAe1e17jiwgBXfbX1yj4/loxL8aHv/cB LYB0F2go2C0= =qN3q -----END PGP SIGNATURE-----

1 0

Re: Wiretap Emergency
by Rick H. Wesson 17 Dec '03

17 Dec '03

mail -v -s "This is a test." Barton.Joe(a)house.gov < test ibd{wessorh}150: Warning: alias database /etc/mail/aliases.pag out of date Barton.Joe(a)house.gov... Connecting to mercury.house.gov. (smtp)... 220-mercury.house.gov mail server ready at Fri, 16 Sep 1994 00:15:25 -0400 220 ESMTP spoken here >>> EHLO ar.com 250-mercury.house.gov Hello ar.com (internex-ibd.ar.com) pleased to meet you 250-HELP 250-SIZE 1714821120 250-8BITMIME 250-XONE 250 XQUE >>> MAIL From:<wessorh(a)ar.com> SIZE=118 250 <wessorh(a)ar.com>... Sender ok >>> RCPT To:<Barton.Joe(a)house.gov> 250 <Barton.Joe(a)house.gov>... Recipient ok >>> DATA 354 Enter mail, end with "." on a line by itself >>> . 250 AA187868926 Message accepted for delivery Barton.Joe(a)house.gov... Sent (AA187868926 Message accepted for delivery) Closing connection to mercury.house.gov. >>> QUIT 221 mercury.house.gov closing connection OK Lets get to work boys and girls..... -Rick

1 0

Re: Wiretap Emergency; House E-Mail addresses
by Rick H. Wesson 17 Dec '03

17 Dec '03

UNITED STATES HOUSE OF REPRESENTATIVES CONSTITUENT ELECTRONIC MAIL SYSTEM We welcome your inquiry to the House of Representatives Constituent Electronic Mail System. Currently, fortythree Members of the U.S. House of Representatives have been assigned public electronic mailboxes that may be accessed by their constituents. The nature and character of the incoming electronic mail has demonstrated that this capability will be an invaluable source of information on constituent opinion. We are now in the process of expanding the project to other Members of Congress, as technical, budgetary and staffing constraints allow. A number of House committees have also been assigned public electronic mailboxes. The names and electronic mailbox addresses of these committees are listed below after the information about participating Representatives. Please review the list of participating Representatives below, and if the Congressional District in which you reside is listed, follow the instructions below to begin communicating by electronic mail with your Representative. If your Representative is not yet on-line, please be patient. U.S. REPRESENTATIVES PARTICIPATING IN THE CONSTITUENT ELECTRONIC MAIL SYSTEM. Hon. Thomas E. Andrews 1st Congressional District, Maine Rm. 1530 Longworth House Office Building Washington, DC 20515 TANDREWS(a)HR.HOUSE.GOV Hon. Joe Barton 6th Congressional District, Texas Rm. 1514 Longworth House Office Building Washington, DC 20515 BARTON06(a)HR.HOUSE.GOV Hon. Sherwood Boehlert 23rd Congressional District, New York Rm. 1127 Longworth House Office Building Washington, DC 20515 BOEHLERT(a)HR.HOUSE.GOV Hon. Dave Camp 4th Congressional District, Michigan Rm. 137 Cannon House Office Building Washington, DC 20515 DAVECAMP(a)HR.HOUSE.GOV Hon. Maria Cantwell 1st Congressional District, Washington Rm. 1520 Longworth House Office Building Washington, DC 20515 CANTWELL(a)HR.HOUSE.GOV Hon. John Conyers, Jr. 14th Congressional District, Michigan Rm. 2426 Rayburn House Office Building Washington, DC 20515 JCONYERS(a)HR.HOUSE.GOV Hon. Sam Coppersmith 1st Congressional District, Arizona 1607 Longworth House Office Building Washington, DC 20515 SAMAZ01(a)HR.HOUSE.GOV Hon. Peter Defazio 4th Congressional District, Oregon 1233 Longworth House Office Building Washington, DC 20515 PDEFAZIO(a)HR.HOUSE.GOV Hon. Peter Deutsch 20th Congressional District, Florida Rm. 425 Cannon House Office Building Washington, DC 20515 PDEUTSCH(a)HR.HOUSE.GOV Hon. Jay Dickey 4th Congressional District, Arkansas Rm. 1338 Longworth House Office Building Washington, DC 20515 JDICKEY(a)HR.HOUSE.GOV Hon. Vernon Ehlers 3rd Congressional District, Michigan Rm. 1526 Longworth House Office Building Washington, DC 20515 CONGEHLR(a)HR.HOUSE.GOV Hon. Anna Eshoo 14th Congressional District, California Rm. 1505 Longworth House Office Building Washington, DC 20515 ANNAGRAM(a)HR.HOUSE.GOV Hon. Elizabeth Furse 1st Congressional District, Oregon Rm. 316 Cannon House Office Building Washington, DC 20515 FURSEOR1(a)HR.HOUSE.GOV Hon. Sam Gejdenson 2nd Congressional District, Connecticut Rm. 2416 Rayburn House Office Building Washington, DC 20515 BOZRAH(a)HR.HOUSE.GOV Hon. Newton Gingrich 6th Congressional District, Georgia Rm. 2428 Rayburn House Office Building Washington, DC 20515 GEORGIA6(a)HR.HOUSE.GOV Hon. Bob Goodlatte 6th Congressional District, Virginia Rm. 214 Cannon House Office Building Washington, DC 20515 TALK2BOB(a)HR.HOUSE.GOV Hon. Rod Grams 6th Congressional District, Minnesota Rm. 1713 Longworth House Office Building Washington, DC 20515 RODGRAMS(a)HR.HOUSE.GOV Hon. Dan Hamburg 1st Congressional District, California Rm. 114 Cannon House Office Building Washington, DC 20515 HAMBURG(a)HR.HOUSE.GOV Hon. Dennis Hastert 14th Congressional District, Illinois Rm. 2453 Rayburn House Office Building Washington, DC 20515 DHASTERT(a)HR.HOUSE.GOV Hon. Martin Hoke 2nd Congressional District, Ohio Rm. 212 Cannon House Office Building Washington, DC 20515 HOKEMAIL(a)HR.HOUSE.GOV Hon. Ernest J. Istook, Jr. 5th Congressional District, Oklahoma Rm. 1116 Longworth House Office Building Washington, DC 20515 ISTOOK(a)HR.HOUSE.GOV Hon. Sam Johnson 3rd Congressional District, Texas Rm. 1030 Longworth House Office Building Washington, DC 20515 SAMTX03(a)HR.HOUSE.GOV Hon. Mike Kreidler 9th Congressional District, Washington Rm. 1535 Longworth House Office Building Washington, DC 20515 KREIDLER(a)HR.HOUSE.GOV Hon. Tom Lantos 12th Congressional District, California Rm. 2182 Rayburn House Office Building Washington, DC 20515 TALK2TOM(a)HR.HOUSE.GOV Hon. Thomas Manton 7th Congressional District, New York Rm. 203 Cannon House Office Building Washington, DC 20515 TMANTON(a)HR.HOUSE.GOV Hon. George Miller 7th Congressional District, California Rm. 2205 Rayburn House Office Building Washington, DC 20515 GEORGEM(a)HR.HOUSE.GOV Hon. Ed Pastor 2nd Congressional District, Arizona Rm. 408 Cannon House Office Building Washington, DC 20515 EDPASTOR(a)HR.HOUSE.GOV Hon. Bill Paxon 27th Congressional District, New York Rm. 1314 Longworth House Office Building Washington, DC 20515 BPAXON(a)HR.HOUSE.GOV Hon. Owen Pickett 2nd Congressional District, Virginia Rm. 2430 Rayburn House Office Building Washington, DC 20515 OPICKETT(a)HR.HOUSE.GOV Hon. Earl Pomeroy North Dakota, At Large Rm. 318 Cannon House Office Building Washington, DC 20515 EPOMEROY(a)HR.HOUSE.GOV Hon. David Price 4th Congressional District, North Carolina Rm. 2458 Rayburn House Office Building Washington, DC 20515 PRICE(a)HR.HOUSE.GOV Hon. Jim Ramstad 3rd Congressional District, Minnesota Rm. 322 Cannon House Office Building Washington, DC 20515 MN03(a)HR.HOUSE.GOV Hon. Pat Roberts 1st Congressional District, Kansas Rm. 1126 Longworth House Office Building Washington, DC 20515 EMAILPAT(a)HR.HOUSE.GOV Hon. Charlie Rose 7th Congressional District, North Carolina Rm. 2230 Rayburn House Office Building Washington, DC 20515 CROSE(a)HR.HOUSE.GOV Hon. Christopher Shays 4th Congressional District, Connecticut Room 1034, Longworth House Office Building Washington, DC 20515 CSHAYS(a)HR.HOUSE.GOV Hon. Karen Shepherd 2nd Congressional District, Utah Rm. 414 Cannon House Office Building Washington, DC 20515 SHEPHERD(a)HR.HOUSE.GOV Hon. David Skaggs 2nd Congressional District, Colorado Rm. 1124 Longworth House Office Building Washington, DC 20515 SKAGGS(a)HR.HOUSE.GOV Hon. 'Pete' Stark 13th Congressional District, California Rm. 239 Cannon House Office Building Washington, DC 20515 PETEMAIL(a)HR.HOUSE.GOV Hon. Cliff Stearns 6th Congressional District, Florida Rm. 332 Cannon House Office Building Washington, DC 20515 CSTEARNS(a)HR.HOUSE.GOV Hon. Charles Taylor 11th Congressional District, North Carolina Rm. 516 Cannon House Office Building Washington, DC 20515 CHTAYLOR(a)HR.HOUSE.GOV Hon. Robert Walker 16th Congressional District, Pennsylvania Rm. 2369 Rayburn House Office Building Washington, DC 20515 PA16(a)HR.HOUSE.GOV Hon. Mel Watt 12th Congressional District, North Carolina Rm. 1232 Longworth House Office Building Washington, DC 20515 MELMAIL(a)HR.HOUSE.GOV Hon. Dick Zimmer 12th Congressional District, New Jersey Rm. 228 Cannon House Office Building Washington, DC 20515 DZIMMER(a)HR.HOUSE.GOV INSTRUCTIONS FOR CONSTITUENTS The list above includes the electronic mail addresses of members who are participating in the program. However, if your Representative is taking part in the project, we request that you send a letter or postcard by U.S. Mail to that Representative at the address listed above with your name and internet address, followed by your postal (geographical) address. The primary goal of this program is to allow Members to better serve their CONSTITUENTS, and this postal contact is the only sure method currently available of verifying that a user is a resident of a particular congressional district. In addition, constituents who communicate with their Representative by electronic mail should be aware that Members will sometimes respond to their messages by way of the U.S. Postal Service. This method of reply will help to ensure confidentiality, a concern that is of upmost importance to the House of Representatives. COMMITTEES OF THE U.S. HOUSE OF REPRESENTATIVES PARTICIPATING IN THE ELECTRONIC MAIL SYSTEM. Subcommittee on Labor-Management Relations Committee on Education and Labor Rm. 320 Cannon House Office Building Washington, DC 20515 SLABMGNT(a)HR.HOUSE.GOV Committee on Natural Resources 1324 Longworth House Office Building Washington, DC 20515 NATRES(a)HR.HOUSE.GOV Committee on Science, Space, and Technology 2320 Rayburn House Office Building Washington, DC 20515 HOUSESST(a)HR.HOUSE.GOV COMMENTS AND SUGGESTIONS You can send comments about our service to the Constituent Electronic Mail System Comment mailbox, at COMMENTS(a)HR.HOUSE.GOV We will make every effort to integrate suggestions into forthcoming updates of our system. Please note, that the intended purpose of this mailbox is to support public inquiry about the House Constituent Electronic Mail System. Messages intended for Members of Congress should be sent directly to the appropriate Member of Congress at their electronic mail or postal address. UPDATES AND ADDITIONAL INFORMATION From time to time, you may want to send another e-mail message to CONGRESS(a)HR.HOUSE.GOV to see the most recent version of the list of Members and Committees using Constituent Electronic Mail. The information is also available on the U.S. House of Representatives' Gopher server at GOPHER.HOUSE.GOV in the folder Congressional Information. To learn more about information available electronically from the House, send an e-mail message to HOUSEHLP(a)HR.HOUSE.GOV Thank you again for contacting the House of Representatives' Constituent Electronic Mail System. We are excited about the possibilities that e-mail has to offer, and will be working hard to bring more Members on-line and to expand our services. This message will be updated as necessary. Honorable Charlie Rose (D-NC) Chairman Committee on House Administration

1 0

Re: C'Punks web server
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Try these: <li> Cypherpunks Berkeley <li> Cypherpunks Washington <li> Cypherpunks Maricopa <li> Cypherpunks WAIS Index <li> Vince Cate's Cypherpunk Page <li> Ein Cypherpunks-Archiv <li> Nectar <li> Magic Money Hadmut

1 0

yet another use for MD5
by *Hobbit* 17 Dec '03

17 Dec '03

After examining Tripwire and deciding that it was *way* overkill for my own purposes, I decided to cobble together my own minimalist solution to the unix file integrity problem. I call it "L5", for a variety of reasons, and have decided to present it to the community as a Useful Hack. For all I know it may have already been done elsewhere, but I haven't yet seen such a thing mentioned, despite the simple underlying concept. L5 can be FTPed from asylum.sf.ca.us:/pub/hobbit/L5.tar.Z. L5 simply walks down Unix or DOS filesystems, sort of like "ls -R" or "find" would, generating listings of anything it finds there. It tells you everything it can about a file's status, and adds on an MD5 hash of it. Its output is rather "numeric", but it is a very simple format and is designed to be post-treated by scripts that call L5. Here are some of its other features: Filenames come first, making sorting easier. Filenames are delimited in a non-[unix]-spoofable way; ending in "//". The single character after "//" indicates the file type. Scanning stops at device boundaries, so L5 doesn't go slogging through random NFS trees or "tmpfs"es unless you tell it to. You can tell it not to walk any directories lower than the one[s] you handed it as arguments. [It always walks one level of its given arguments.] You can tell it to only print the filenames. If a file looks like a script of some kind, it is shown as type "K" instead of "F". Useful for finding those setuid shell scripts... MD5 hashing can be output in hex, Tripwire's radix64 format, or not at all, as you specify. The hex hash for a given file is the same as that of the CERT "md5check". You can feed it a list of files or directories to check as its standard input. You can have it do its hash *on* standard input. This feature is useful for doing things like "l5 /critical/files | l5" to get a small but secure summary hash. It is small and reasonably fast. Some of it is based on code from Tripwire, but it doesn't use a DBM database and only offers one hash option. The MD5 code, in particular, is the endian-independent version from Tripwire, which builds almost anywhere. Selection of files to ignore certain changes in is undoubtedly less versatile, but you can always filter the output through further scripts before, for example, diffing your "old" system snapshot against your "new" system snapshot. [The rest of this file is in the README that comes with L5.] _H*

1 0

Re: RC4 Legal Issues
by rparratt＠london.micrognosis.com 17 Dec '03

17 Dec '03

Phil Karn <karn(a)qualcomm.com> wrote: > This was my understanding *before* the recent jury decision in the > Microsoft vs Stac Electronics countersuit. When Stac sued Microsoft > for infringing their patents on disk compression, Microsoft > countersued Stac for trade secret infringement for having > reverse-engineered some hidden system calls in MS-DOS. Not only did > the jury uphold Stac's bogus software patent, but they also found in > favor of Microsoft on their ridiculous trade secret accusation! > > Needless to say, this creates a very troubling precedent. Now you can > now apparently infringe a trade secret merely by examining fully > public information (e.g., commercially available object code.) Do juries get to decide on points of law and create precedents in the US legal system? No wonder you have such odd laws. In the UK, legal argument is taken by the judge in the absence of the jury, (and in most civil cases there is no jury anyway -- I think that we only have juries in criminal cases and libel, but someone more knowledgable may be able to correct this). Anyway, the role of the jury is to decide on the facts e.g: A says X, B says Y, who do we believe? Also, the ability of judges in lower courts to create precedents is restricted. A case like Microsoft v Stac would end up going right up through the appeal process. -- Richard Parratt.

1 0

C'Punks web server?
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

This may sound like a stoopid question, but didn't someone mention a c'punk web server (or something similar) a while back? If something like this exists, where's the home page located? Thanks, - paul

2 1

C'Punks web server (again)
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

I found it, for anyone interested, by a reference on the EFF Web Server: http://soda.berekeley.edu/pub/cypherpunks/Home.html - paul

2 1

thoughts on RC4
by perry＠imsi.com 17 Dec '03

17 Dec '03

I've been looking at the RC4 (or alleged RC4) code a bit. Unlike most ciphers, RC4 doesn't seem to have any particular word length dependancies in its principles. That is to say, a cipher like IDEA has lots of magic numbers involved, but RC4 does not, which means that one could, in principle, extend it from being byte oriented stream to being word oriented stream without causing particular harm. (It would, of course, become incompatible, but thats not a real issue.) Can anyone see any reason why one could not change RC4 to being a word oriented stream cipher, call it "ERC4"? The reason I ask is because this would speed things up by a factor of four on 32 bit machines, which would mean modest hardware could possibly break 100mbps speeds. The 64 bit extension on 64 bit RISC processors could go far, far, faster still. This is a real consideration in the protection of network traffic, where extremely fast encryption in software has been a stumbling block. Perry

7 9

RC4 Legal Issues
by Patrick G. Bridges 17 Dec '03

17 Dec '03

So what does the publication of the reverse engineering of RC4 mean legally? AT&T claimed trade sevret and copyright protection over code that was pretty well known in the BSDI case... Can RC4 still be construed as a trade secret or proprirtary to RSADS and Bizdos or are, as I understand from previous messages, we free to use RC4 now (ignoring the submarine patent issue)?

6 8