December 2003 - cypherpunks-legacy

Re: "Any of the mailers that you can use on a shell are oxen"
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

L. Futplex McCarthy wrote: >Lucky Green writes: >> Any of the mailers that you can use on a shell are oxen. > >So after my dept. tosses all its DECstations in the dumpster tomorrow, >following your advice, what OS should the new machines support ? System 7 ? >AmigaDOS ? VMS ? Windows 95 ? What's the fabulous alternative to Unix about >which I've inexplicably missed hearing ? I was afraid of this... I _love_ UNIX. I do not want to see it replaced. What I claim is that 7bit terminals and terminal emulators are a piece of history. My message is that the use of non-ASCII displayable data on the net is growing and that character based terminals are unable to handle the way information will (is) be(ing) presented. UNIX can handle graphics just fine, just VT100 can't. There can be no other lasting solution but to abandon VTwhatever in favor of bitmaped output devices. Since running X over a dial-up connection is rather inefficient, and considering the significant computing power of the PC's that are now being underused as dumb terminals, processing the data locally seems to be a sensible solution. -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

2 1

QUERY: S/Keyish PGP?
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- A quick question: Has anybody considered the possibility of hacking something into PGP's password protection to allow an S/Key like access? IE, I'm sitting here in FL on a 2400 bps modem, telnetted through Netcom's dialup to hks.net, so I'm not bloody likely to be typing my passphrase in and thus am barred from using PGP (without hideous contortions, that is). My questions: - Has anybody done any work on making an S/Key-like mechanism with the assumption that the machine running PGP is (somewhat) secure? This I'm certain is technically possible. More complex: - Has anybody put any thought into a mechanism based upon one-time passwords for regulating PGP private key use on shared, insecure machines (strength == quality of password, of course)? If people could have a widget very much like the Macintosh S/Key widget on their Mac fom which they could cut-n-paste their one time password, it seems like we'd be one step closer to addressing concerns like Tim's. Just a thought... A GUCAPI would make such a mechanism easier, of course (I haven't abandoned the GUCAPI thought: I'm just gestating). - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvOEUSoZzwIn1bdtAQGRSgF8DAt6/1WjmiU3clMy0E+EU4RDmcF0JaGC Y+pNb8dgOzWXEr9b5EyWM0BS4uqw13mK =Xsa9 -----END PGP SIGNATURE-----

2 1

Re: FV & PGP (was Re: First Virtual email security)
by NetSurfer 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Sat, 17 Dec 1994 nsb(a)nsb.fv.com wrote: > Once more, with feeling: > > It is NOT an either/or. In the First Virtual system, the credit card > number NEVER GOES OVER THE NET AT ALL, which means that it doesn't go > over the net in the clear AND it doesn't go over the net encrypted. > I got your point from your first response. The remaining 5 were not necessary. I do not continue to question this point. But I might point out that companys doing business on the net might not like having the details of their day to day transactions sniffable, as you can build quite a good business intelligence profile from that type of info. As can the IRS, FBI, etc. Nor would they appreciate being spoofed... I strongly suggest you take another serious consideration of implementing encryption *now* rather than later, as your current scheme is not thorughly protecting the privacy of individuals or organizations until you do. - -NetSurfer #include <standard.disclaimer> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> == = = |James D. Wilson |V.PGP 2.7: 512/E12FCD 1994/03/17 > " " o " |P. O. Box 15432 | finger for full PGP key > " " / \ " |Honolulu, HI 96830 |====================================> \" "/ G \" |Serendipitous Solutions| Also NetSurfer(a)sersol.com > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvPiKioZzwIn1bdtAQEBVAGAhjULtzChTtOy5zY0L+kjuzzXXNLfeYAL jJqKiETK5l8GqqGPXr/I+yx3z7PSu3zN =bcUC -----END PGP SIGNATURE-----

1 0

Kibo recommends PGP to Bob Rae (fwd)
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- For those who don't know, Kibo is a fairly famous Usenet personality. I've no idea whether he uses PGP, but it's encouraging to see him recommending it to Bob Rae.... - - -L. Futplex McCarthy Forwarded article: > Newsgroups: ont.general,alt.religion.kibology > From: kibo(a)world.std.com (James "Kibo" Parry) > Subject: Re: Thanks > Message-ID: <D0t4Aq.LE9(a)world.std.com> > References: <1994Dec9.222452.21478(a)govonca.gov.on.ca> > Date: Wed, 14 Dec 1994 15:28:02 GMT > > [ont.general] > In <1994Dec9.222452.21478(a)govonca.gov.on.ca> premier(a)govonca.gov.on.ca (Premier of Ontario) writes: > > Many thanks to those of you who flamed the PC pranksters. I knew > > when I went online that I would have to deal with fake posts and related > > chaff. > > Might I suggest looking into using a PGP signature to prevent this from > happening again? [...] - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvQZVGf7YYibNzjpAQEsUgQA1Nm6MZtxFub2lvx3QE70sht2dQyvR9iC 1PXdNhImVm5/Wlu6+xJbEQBIBB229+F4NOrs8E4T9f5/ZjEyZQnW9AsRQ4KQwThz ShUAf//6RIOcOWj9qc5YZWjAXxFaaq9nud7bAbZ+sTwiw+2/5y1lZSWhcF8nfeXw UesP86rCjKw= =oNiJ - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvQahyoZzwIn1bdtAQGuugGAmrWYvSpkE9IGBm9+DrxU4Mn0XKPT5ovm D+3A6cSINGhiEY2EAg/YV0RUxXYMz2yY =30UW -----END PGP SIGNATURE-----

1 0

No Subject
by bryce＠cybernet.co.nz 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Well thats 2 replys, Man it`s going to be packed! :) > >When a meeting happens what do we discuss?/do? > - an obvious one would be NZ crypto! > - New crypto ideas? > - NZ Anon remailers & Repositorys > - Patents??? (maybe not) > - Cryptanalasis (Hopefully, oh please-oh please) We haven't heard from Peter Gutmann yet (probably because he is so busy), but if he turns up it would be interesting to hear about any future plans for SFS. I don't mind explaining a little bit about some areas of cryptanalysis, maybe the various sieves. Chris might want to talk about some hardware ideas. >PS: Why do we need a workstation? (probably a dumb question) To try stuff out, play with programs, broadcast the nonsense worldwide over the net <grin> ... We don't need one, we just need people who have a common interest and something to say about it. -----BEGIN PGP SIGNATURE----- Version: 2.6 Comment: Please note my current address is bryce(a)cybernet.co.nz iQCVAwUBLvJtYtXxuu4HpwwBAQF9PgP/ZLORHZjtNqchFHZSuhHfqQIFqrfdJIyI C7J7jCSnpt8cEqdZKJf2xSU6oeITg8oL388KwqY+O0em2O0QyiWqNZZcv4oJItFs 4R/lECvtrO9a5YbNyT4tgzFXWM2muULoYbSog2FhUlFOkNAfwRaJCqIghQceOrzF apRh15/AH1I= =3/2q -----END PGP SIGNATURE----- ------------------------------------------------------------------------------- Bryce Boland <bryce(a)cybernet.co.nz> Finger for PGP Public Key

1 0

Re: Digital privacy
by Amanda Walker 17 Dec '03

17 Dec '03

> >Pssst, what about privacy? Again, since your voice is digitally > >processed, it's >less likely that anyone could eavesdrop on > >your conversations. > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > ?Como? This is absolutely amazing! Well, it is true, from a pragmatic point of view. A neighborhood kid with a Radio Shack scanner can't listen in on digital cellular calls. You have to actually hack a phone, which is a much less prevalent skill. I still think that CDMA+DES is the way to go for secure cellular, but from a purely pragmatic point of view simply going digital does increase privacy. Using analog cellular is like using a walkie-talkie. Amanda Walker InterCon Systems Corporation

4 3

The NEXUS-Berkeley Presents: a New Years Party
by sameer 17 Dec '03

17 Dec '03

If you get this note, then you're invited. Please don't forward this anywhere else, but you're welcome to bring friends. Apologies if you receive duplicates. -- Date: Dec 31, 1994 -> Jan 1, 1995 Time: 8PM-? Place: The NEXUS-Berkeley, Berkeley CA -- Please join us at the NEXUS-Berkeley while we bring in the new year, as it happens in New York, Chicago, Anchorage, and other cities around the continent. (I would include here the Australian sites but that would require that the party start approx. 7 AM on the 31st...) We expect other nexus-locations to be wired into the net along with us, although the connectivity at the other locations will probably be minimal. For all I know they might not be wired at all, leaving us with only our own new years to celebrate. In any case, I expect to have approximately 7 terminals which people can use to communicate with the other cities. (Then again, for all I know that might not happen.. We might not even have -1-... Ah the flux of life.) Bring someone to share. (You should also bring some-things- to share too, like drinks, snacks, etc.) Please RSVP for directions. (Mail sameer(a)c2.org.. I'd like to get an idea of how many people to expect, etc..) Thanks. -- sameer Voice: 510-841-2014 Master Conspirator Pager: 510-321-1014 Community ConneXion: The NEXUS-Berkeley Dialin: 510-549-1383 http://www.c2.org (or login as "guest") sameer(a)c2.org

2 1

NYT on Pentium
by John Young 17 Dec '03

17 Dec '03

John Markoff writes today on Intel's mishandling of the Pentium flaw. Mr. T May quoted. For email copy send blank message with subject: 585_999 Here are few excerpts: In recent weeks, evoking memories of Richard Nixon at the height of the Watergate crisis, Mr. Grove has retreated to his "war room" inside the company's corporate headquarters in Santa Clara. *** 'Righteousness' How did a sporadic arithmetic error that was not detected for months, in the chip that Intel insists is its most heavily tested microprocessor in history, become the heart of such a debacle? The answer is rooted in Intel's distinctive corporate culture, and suggests that Intel went wrong in much the same way as other big and unresponsive companies before it. Intel has traditionally valued engineering over product marketing. Inward-looking and wary of competitors (from experience with the Japanese), it developed a bunker mentality, a go-for-the-jugular attitude and a reputation for arrogance. "There are certain elements in Intel's culture, and one is righteousness," said Federico Faggin, a former Intel engineer and co-inventor of its first microprocessor. "The attitude at Intel is, 'We're better than everyone else and what we do is right and we never make mistakes.' " *** But the technologist's mind-set did little to prepare Intel for the consumer marketplace. Although it spent hundreds of millions of dollars on its "Intel Inside" and Pentium ad campaigns, the consumer-oriented strategy unraveled last month when Mr. Grove dismissed customers' requests for chips to replace the Pentium. *** "What Intel clearly should have done is issued a bug report as soon as they found out it was a reproducible problem," said Timothy May, a former Intel semiconductor engineer. "Instead, by keeping it mum, they backed themselves into a corner." But although he has issued a public apology for the flaw, Mr. Grove has been unwilling to personally come forward in an effort to restore customer confidence. "The test of a great company is in how they handle disasters," said James F. Moore, head of Geopartners, a high-tech consulting firm. "This is one where you can't behave like a paranoid. This is one where only the compassionate survive."

1 0

alt.2600 spam
by dfloyd＠io.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [Post deleted about auto-reply to one's system adminstrator if (s)he posts on alt.2600 by Black Unicorn] FWIW, the person doing that crud on Netcom has had his/her account yanked permanently. (note new PGP key...) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBLvQTJ1LUeLjqSiixAQFJugf+L3Ri8JGMYJ9Mwn1O+mVbR4Hwz4l1grpV KfhBg46jjlypQ4/9SGn+OsEq9JVb2nF4VySzbsS2hV4RW42WIMkv4F23AqDVbusT 1L7dxZIGC8MZB+XdYMHTxf7AaNmSfyTzSHxGPWhVyvaC8D6+DKmrpZS0Md/lqdiF zG/MQgOkwfln0MDk1D3UN6ExUz+HkSFHvd4jGtNQtP4ufps404MTEuCbFPc36bqY V+btOmzDJs4gwGaXk0Bmal59xYaygn3CWlbNM5zOhS1IjShLEo3Re9/Yb7U25Fr+ /Qxg5kd084CE5svclXKxG/963UKQHY1ovv7kfATMIMF37M0mT1lpBw== =pDsV -----END PGP SIGNATURE-----

2 1

No Subject
by pgut01＠cs.aukuni.ac.nz 17 Dec '03

17 Dec '03

>We haven't heard from Peter Gutmann yet (probably because he is so busy), but >if he turns up it would be interesting to hear about any future plans for SFS. >I don't mind explaining a little bit about some areas of cryptanalysis, maybe >the various sieves. Chris might want to talk about some hardware ideas. I seem to have been dropped in at the tail end of the discussion, so if you can let me know what it's about I'll be able to disagree with you about it. Peter.

1 0