December 2003 - cypherpunks-legacy

Decline and Fall
by Duncan Frissell 17 Dec '03

17 Dec '03

Decline and Fall of the Nation State: Tuesday's WSJ had an article on how private money market funds are starting to jawbone foreign governments just like the World Bank used to. Case cited was Fidelity Investments calling Mexican bank officials during the Peso crisis after the recent assasination. They said "we'll invest another $18 billion (of ours and other fund's money) if you do what we say and if not..." DCF "If they hadn't killed quite so many people, you'd almost have to feel sorry for them." --- WinQwk 2.0b#1165

1 0

[ANSWER] NIST's ftp site
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

Thanks to all who responded to my question. The answer is: csrc.ncsl.nist.gov Also, apparently, source for DES was in Appendix A of the file "/pub/nistpubs/fips181.txt". However, it was removed and replaced with the following: Appendix A This section contained a listing of the source code referenced in the Automated Password Generator Standard. This section is not available in electronic form. Complete copies of FIPS 181, including this appendix, may be purchased in hardcopy from the National Technical Information Service (NTIS) via mail or telephone. National Technical Information Service U.S. Department of Commerce 5285 Port Royal Road Springfield, VA 22161 (703) 487-4650 Order by FIPSPUB181 Price: $22.50 (Same address and phone number for discount prices on quantity orders.) -------------- I wonder if they'll ship to an address outside of the US or Canada? I wonder if the people who package and mail the stuff even look at it? Jim_Miller(a)suite.com

5 5

Cypherpunks' mail database does exist
by Gary Jeffers 17 Dec '03

17 Dec '03

Vincent, you state that a fully archived, indexed cypherpunks mailing list exists as: http://pmip.maricopa.edu/crypt/cypherpunks/cypherpunks.src Ok, so I ftp'ed to pmip.maricopa.edu & tried to get to cypherpunks.src, but even the subdirectories weren't there. I suspect that http does not imply that we ftp. What communication method is this called & how do we use it? I send this public instead of private as I suspect that a lot of lurkers don't know what is going on either. Yours Truly, Gary Jeffers

5 4

Tracking cellular phones (OJ reference)
by Michael Wilson 17 Dec '03

17 Dec '03

About the earlier note on tracking cell phones. It isn't hard. In fact, the network HAS TO do it, essentially. A cell phone has a pager in it that signals when it is getting a call, what cell to go for, and frequencies (check out the old Bell System Technical Journals from when cell technology was a research project at what is now Ameritech). Cell receiver stations are arranged in a hex about 8 miles on a face. When a signal gets weak (it can tell signal strengths), the phone is handed off to a better cell; it can go a good round of local cells until it actually hits a stronger receiver site. Using this, you can bounce the phone around to different cell receivers, test signal strength (none of this actually activates the phone, it is part of the standard polling), and get a fairly good fix on location. After that it is simply a matter of flooding the area with enough black and whites to find the phone (in this case, the car that OJ was driving around in, which they did pick up from a helo). No real need for special gear, other than what it might take to track a signal through triangulation on a local basis; standard FCC gear for hunting pirate radio and video bands, and easily available for law enforcement. So think of your cell phone as a leash, 'cause that's what it is. Anyone else notice a serious *lack* of usage of cyberpunk style journalism in this one? Scanners to track police, listening in on 911 reports, hunting down the local cell phones to listen to them, a directional mic to hear negotiations. The local LAPD didn't even know how to pull the number of their own cell phone. Back to lurking... ;) [A special note to our friends in the intelligence community out there... Tag, you're it! With love, The Nemesis Group]

1 0

ADMIN: List Software Upgrade Warning
by hugh＠ecotone.toad.com 17 Dec '03

17 Dec '03

This is a "two birds with one stone" message, testing the new version of MajorDomo that I just installed and telling you folks that if you have any strange problems with the list to please contact me about them. ||ugh Daniel Sometimes Postmaster hugh(a)toad.com

1 0

Re: Prime magnitude and keys...a ?
by ghio＠cmu.edu 17 Dec '03

17 Dec '03

Jim choate <ravage(a)bga.com> wrote: | No, again it will allow you to find the secret key, it will not | provide any information about the factors of that number. It might | be used for that but as you have pointed out, it takes a long time. Okay, obviously neither you or Perry know what you're talking about, or you are too busy flaming each other to express your thoughts coherently. Finding the secret key WILL allow you to factor the modulus (assuming you know the public key). Therefore, solving for the secret exponent is equivilent to factoring. This has been discussed before. I thought you have been on the list long enuff to remember it, but it is obviously necessary to restate the explanation for those who haven't seen it before. Assume we have: Two (unknown) prime numbers p and q, a known modulus n, where n is the product of p and q, and known public key exponent e. Now, suppose someone discovers the corresponding secret key d. Now assuming the case where de=(p-1)(q-1)+1, we have two equations with two unknowns: pq = n de = (p-1)(q-1) + 1 Solving for p and q is simply a matter of solving simeltaneous equations. First, we rewrite the second equation: de = pq - p - q + 2 Now we substitute the known values for de and pq and do some simple algebra: p = n - de + 2 - q Substitute p in the original equation: q(n-de+2-q) = n q(n-de+2) - qq = n -qq + q(n-de+2) - n = 0 qq - q(n-de+2) + n = 0 Now solve for q using the quadratic formula. q=((n-de+2)+((n-de+2)^2-4)^(.5))/2 P can then be found (of course) by dividing n by the now-known value for q. Now, there is the possibility that (p-1)(q-1)+1 will not equal d*e. However, d*e will always be equal to k(p-1)(q-1)+1 where k is an interger. Given PGP's fondness for using 17 for d, and since e < (p-1)(q-1) then de < 17(p-1)(q-1), therefore k<17. It would therefore be fairly easy to find k, since it could only be one of sixteen possible values. Furthermore, (and more importantly), it is not necessary to know the prime factorization to generate key pairs. It is only necessary to know a valid number of the form k(p-1)(q-1). You can find an inverse key for any public key just by finding its multiplicative inverse modulo k(p-1)(q-1) (k, p, & q do not need to be known.) Therefore, if you find one keypair, you can find them all.

1 0

"Thomas A Douglas", do you mind?
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

Whoever it is on illuminati.io.com forging mail to cslaw with a return address of cypherpunks, kindly fuck off, and remember you're not the only person from io.com who reads this group. This sort of trivial forgery is easy to track down if anyone could be bothered. G > The original message was received at Fri, 17 Jun 1994 13:45:53 -0500 > from illuminati.io.com [198.4.60.10] > ----- The following addresses had delivery problems ----- > <cslaw(a)pericles.com> (transient failure) > Return-Path: cypherpunks(a)toad.com > Received: from (illuminati.io.com [198.4.60.10]) by wuarchive.wustl.edu (8.6.8.1/8.6.4) with SMTP id NAA20107 for <cslaw(a)pericles.com>; Fri, 17 Jun 1994 13:45:53 -0500 > Date: Fri, 17 Jun 1994 13:45:53 -0500 > From: cypherpunks(a)toad.com ^ Not funny. > Message-Id: <199406171845.NAA20107(a)wuarchive.wustl.edu> > Subject: Green card information, please. > Apparently-To: <cslaw(a)pericles.com> > I am interested in your services. Please send me more information. Thank you. > ----- > Thomas A. Douglas > "Just another bump on the Information Superhighway." Perhaps he forgot to remove his sig file, on the other hand there is no-one obviously called Douglas on illuminati.

2 1

totally secure email?
by khijol!erc 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Howdy! I'm trying to totally secure email as soon as it comes into a site, before it hits me mailbox. I don't have root access, though. :( What I've tried is to do a "|pgp -feat ecarp|rmail erc%khijol(a)apple.com", but pgp just produces empty files! If I execute it by hand, it works. Anyone know either (1) why it isn't working wnd how to fix it, or (2) suggect a better alternative? For political reasons, my email must be encrypted as soon as it hits the site before it gets dropped in my mailbox, or the sysadmin will read it (snoopy bugger) and find out I'm looking for a job elsewhere. Thanks for all your help!! - -- Ed Carp, N7EKG/VE3 ecarp(a)netcom.com, Ed.Carp(a)linux.org "What's the sense of trying hard to find your dreams without someone to share it with, tell me, what does it mean?" -- Whitney Houston, "Run To You" -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLgMnySS9AwzY9LDxAQF81AP9FIZnm0r0BoIl85dQgbedwpoSIEjlhoUJ jTM/bXiNW07udBzmsS6Egb2HeuNOy4Hai+sw52rk4IhuBYVhi+z6OooQVLnsu5Qo arxcfaqGEfW7peg45FcyAO2MEuJURIsjk26bKsUR+RRHm7y2BqnKKq7NnqZjDWAe YNk8YOUQK/Y= =IyWZ -----END PGP SIGNATURE-----

1 0

Re: Another Cellular Victim
by Tommy the Tourist 17 Dec '03

17 Dec '03

> >They report that he was tracked via his cellphone use. What this country > >needs is a good anonymous cellphone net. > Really. And what's more: when the Colombian drug lord was located > via his cellular use, the story was that the NSA had to bring special > equipment into the country to do the tracking. That doesn't wash here. > It looks like at least some switches in Amerika are already equipped > to read out locations for individual phones. They probably don't even > have to wait for you to make a call - they can call you, or even use > the phone's automatic pings. No NSA equipment needed. A simple scanner and some software can be used to track which cell you are in. They didn't have to triangulate OJ's position or anything, they only needed to know which cell he was in, and the direction he was traveling. The rest is simple. (you can find such software on hack/phreak BBSes already. The only personal information needed is the telephone # of the cell phone) ------------ To respond to the sender of this message, send mail to remailer(a)soda.berkeley.edu, starting your message with the following 7 lines: :: Response-Key: ideaclipper ====Encrypted-Sender-Begin==== MI@```$YS^P;+]AB?X9TW6\8WR:.P&2'N\0Q?\$?[X!7/,SN6`JBJ$D//!Z"Z FS)`S)G0<=-J!/44-Q$^WK"37[MUZNKYYE)[BS7ZNSJSP<LH*RSD` ====Encrypted-Sender-End====

1 0

Re: DSS
by nobody＠rebma.rebma.mn.org 17 Dec '03

17 Dec '03

Dan Harmon wrote: >What do they know that we do not? Makes you wonder about all of PKP's >claims. Has PKP ever sued anyone over their patents or have they just >threatened? Very curious. They have just threatened.

1 0