December 2003 - cypherpunks-legacy

PGP Tools under Linux
by anonymous-remailer＠xs4all.nl 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >I am using PGPTools to handle all the crypto functions in the second >generation remailer that I have written. All the copies of PGPTools that I >have found seem to be set up to compile on SUN workstations only. That's interesting, because I developed it under Linux and MS/DOS, and there was a lot of trouble at the beginning with it not running on big-endian machines. It sounds like whoever "fixed" it for sparcs broke it for little-endian machines. The original should still be on ftp.csn.net; get it there and it should work. >Mixmaster is both a remailer and a front end, and therefor must run on many >different platforms. I have been able to compile PGPTools on Linux and >FreeBSD, but PGPTools produces invalid RSA blocks. If you (or anyone else >reading this) have ported PGPTools to other platforms could you send me the >source and makefile, or point me to them. If not, could you help me do it, >the source code is a tangle, and it will take me a long time to do on my own >(I am a brute force programer, not a C wizard). Get the original, test it, and post the results. Some people have asked if I am still around. Yes, I am, and I'm thinking about a major update of PGPTools. The update would involve getting out any persistent bugs I can find, cleaning up the code and making it completely reentrant, and replacing all 2.3a modules with 2.6.x modules so it is patent-safe. It also needs some kind of exception handling for disk errors and the like. A pass-through function for the disk access calls, and a way of freeing all memory before a longjmp to bail out, for example. Before doing this, I need to hear from the PGP development team. There have been rumors of an upcoming PGP API, something similar to PGPTools. If this is the case, let me know so I don't waste time writing an incompatible version. If this is not the case, let me know so I can get started. More information about NexusBucks, please. Is it for real? How many coins in circulation? Have any services been bought with them yet? What is the address of the Magic Money server? Is it fully automatic, or are messages being manually processed? "There's never been a time in our history where it's been possible to place information beyond the reach of the collective efforts of society, but with modern cryptography you can." - Phil Zimmermann "Large primes united, will never be divided!" - Pr0duct Cypher -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt6cDcGoFIWXVYodAQGZ8AP/bZASa9sn+QzDiQkDJqacBAPhpqQHfkhL 7kWh7belMm8gA6KFmLfZcPywCWm3zU1QOS2+xRzPUGP0f7MrQjDuj3h7M4X3fDDV DiybwF4rIUAs2wBubioTYwE+as6N//CmfbtpkRdPVWhg5rnvgEOU+lzEvkhFt0tc 2MzkmHTBvIQ= =CSzj -----END PGP SIGNATURE-----

1 0

CSPAN
by Alex Strasheim 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Although it was probably an exercise in futitility, I sent a note to CSPAN suggesting that they have PRZ as a guest on the Booknotes program that Brian Lamb hosts. I figured that maybe they could have him on in conjunction with the book version of PGP that the MIT press is coming out with. In my note I made the argument that policy concerning cryto is really policy concerning wiretapping and surveillance, and that technological changes are eroding the status quo and forcing us to decide whether we want a lot more surveillance (or at least the potential for it) or a lot less, that since this is going to have a lot to do with how the police interact with the public in the future, it's an important issue, etc. At the end, I appended the transcript of the talk PRZ gave in NYC that was recently posted to the list. I found that particular text to be pretty impressive, and I'm hoping that the folks at CSPAN will as well. There are a few details that I hope will go over well: MIT's involvement, the fact that PRZ has debated the NSA's general counsel, the quotes from the FBI director, etc. On top of that, the conference from which the transcript came seems like the sort of event that CSPAN would televise. I don't know Phil, and I don't know if he'd even want to appear on the program. But there are two things about Booknotes that I think would make it a very good forum for the cryto debate. First of all, Phil would have enough time to explain the issues. That's important, because this isn't something that can be easily packed into a sound byte. Also, although I don't know this for a fact, I would imagine that the program would probably be a pretty good way to reach people on this Hill, both members and staffers. Anyway, I sent them Phil's phone number and his email address. The encouraging thing is that I sent this out more than a day ago, and I haven't heard back from them yet. Ordinarily, when you send them email you get a form letter back within an hour or two. That gives me some hope that maybe some people over there are reading the transcript, and that perhaps they're thinking about it. I don't know if CSPAN is open to lobbying or not, but the more I think about it, the more it seems to me that it could be a very useful forum for the debate. I think it would be worthwhile to let them know the next time Phil's going to speak at an event similar to the one I took the transcript from, and see if they'd be willing to televise it. My feeling is that if we can get the word out to the public at large, we're going to win. == Alex Strasheim | finger astrashe(a)nyx.cs.du.edu alex(a)omaha.com | for my PGP 2.6.1. public key -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt7LBhEpP7+baaPtAQF65AP+OAL3xt66v55U4Spd/5PenHYaRzs1v/vy P7HyVRI8RjH1Y+nR1cpLRYz+uilSrK9Fk1ew4Qhfja0RNh91kVe2aVHmw7dIxWHv rhFv569LFMQWj73JawdtePaXver+6deWhc8d1VL/PkgXgk5feg6mDEjRUB1GsjgZ FfkoHvrEBQA= =cHR2 -----END PGP SIGNATURE-----

1 0

cypherpunk signing service
by sglass＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Operating System: SunOS 4.1.3_U1 Site: netcom12 X-Mailer: ELM [version 2.4 PL23] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Length: 1021 Todd... | The cypherpunks(a)hks.net service is now available. | | It will sign any message sent to cypherpunks(a)hks.net with its (currently | 384 bit) key and forward the signed message to cypherpunks(a)toad.com. Does this look right? pub 384/27D5B76D 1994/12/01 Cypherpunk signing agent <cypherpunks(a)hks.net> Key fingerprint = 85 BA D4 6D B8 9D B6 B7 EB 74 11 48 42 45 61 F2 | I welcome any suggestions on the format of the message and the prepended | message. Why not stealth it and just appear as if the sender signed it? | I've made a couple of changes to the format of outgoing messages that | should hopefully make life easier for readers. Thanks, Todd! | The most noticable will be the movement of the blurb, but also very | significant is the removal of the "Reply-To: " (feh on the proliferation | of MUA behaviors) header, and way down on the "noticable" list is an | "Errors-To: " and a "Sender: " header. Lookin' good. | Thanks for y'all's comments: keep 'em coming. Good work. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBFAwUBLt7OeioZzwIn1bdtAQGndwF+JJkJwvNKoSw16//vyK7nbNfxeUxGG3ar 9Ek87KCkqlg+QKbwGcCisaV1PJcu+Lns =vnS5 -----END PGP SIGNATURE----- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address belonging to the signature and forwarded.]

1 0

Re: Authentication at toad.com: WTF?
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MATERIAL----- > On Wed, 30 Nov 1994, The new cypherpunks signature checking agent wrote: > > The below message was found to have a valid signature from "JEFF LICQUIA (CEI) > > " JLICQUIA(a)mhc.uiuc.edu. Apparently it was a spoof, but whatever. I'd be really bugged by the security implications of software claiming to have validated signatures; software that complains about bogus sigs is fine, since if it's spoofed it's only a warning, and if the warnings are deleted your trust is still somewhat limited unless you've verified the signatures yourself. Trusting someone else's verification is less than ideal security policy :-) Bill -----BEGIN PGP SIGNATURE----- Pgp-version: 32767 uhohovhoehvohfvoihvhoviheoivhefoivhefohvefohv jhjhohhuhvuhiuhewiuvhiuhfveiuhefviuhevhevhvhh -----END PGP SIGNATURE----- Cypherpunks signature checking agent: It's valid - trust me!

2 1

hello
by Alan J Lacey 17 Dec '03

17 Dec '03

send me your zine pleas

1 0

Larry is at it again, and is flaming old Eric now.
by Anonymous User 17 Dec '03

17 Dec '03

[BIG flamo at Eric deleted... it ain't worth printing] To keep Larry from forging in my name, I am going to fight fire with fire, and am going to anon post this. Dude, what did Eric Hughes do to you to get you so rabid? As soon as you were found out, you started drooling. Ask your local vet school for your first series of rabies shots... you NEED them. Eric Hughes spends his time and money for support of this list. Do you? Probably not. If he wants signatures, ITS HIS DAMN LIST. Enough of flaming at you, buddy. You are too wasted to hear anything but your typing and drool dropping to the floor as you try to spam this list again. About two months ago, Tim May bitched about the coming of a ton of dillweeds on the Net. Guess I agree on this point with him. LD, there is something called Electro Convulsive Therapy. It does a good job of helping cases that would otherwise be too far gone for medicine. Take a good look at getting treatment. It seems you need it. -- A lurker who does not like the maintainer of this list getting treated like crap for trying something new.

1 0

Re: NYT Potpurri and Econo-cash
by frissell＠panix.com 17 Dec '03

17 Dec '03

>"And flirting with heresy, Mr. Spindler says he sees no need >for the so-called information superhighway. And 500 channels? >Sixty are plenty. 'This is not going to be an all-electronic Pretty stupid considering that the non-interactive 150 channel RCA/Hughes DBS system is one of the hottest sellers of this holiday season. DCF

1 0

Re: Brands excluded from digicash beta
by Wolfgang Roeckelein 17 Dec '03

17 Dec '03

Hi, paul(a)poboy.b17c.ingr.com (Paul Robichaux) wrote: >The more I deal with Digicash, the better First Virtual looks. My technical >preference is for using Brands or Chaum cash; at present, though, there aren't >any shipping Brands servers, and the Digicash folks don't seem to be able to >get all their socks in one bag. Does anybody know how the chaum patents (I think they claimed somewhere that they had applied for some) affect Brands system? Wolfgang --- Dipl.-Wirtsch.-Inf. Voice: +49 261 6509 173 Wolfgang Roeckelein Fax: +49 261 6509 179 WHU Koblenz E-Mail: roeckelein(a)wi.whu-koblenz.de Burgplatz 2 (NeXTmail ok) D-56179 Vallendar Germany

2 1

Re: using us crypto sw outside usa
by adam.philipp＠ties.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >I was wondering what is the legal status for using rsaref outside usa. >Is it legal or not? Depends on whether RSA has a patent in that country... I know of no countries besides the U.S.A. that have a patent on RSA. Using exact code may also violate copyright...that is a tougher matter to prove...but copyright treaties allow some level of international protection...use with care. >Also, what is the legal status of RC4 code posted to the net? It was a trade secret. It is no longer...Copyright issues still are still a problem, but ask an attorney in your country if you are going to use it in a commercial program. Adam Philipp - -- PGP Key available on the keyservers. Encrypted E-mail welcome. SUB ROSA: Confidential, secret, not for publication. -Black's Law Dictionary GJ/CS d H S:+ g? p? au+ a- w+ v++ c++ UL+ UU+ US+ P+ 3 E N++ k- W++ M-- V po- Y++ t++ 5+ jx R G' tv+ b+++ D++ B--- E+++ u** h-- f++ r+ n+ y++-- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBFAwUBLt74TCoZzwIn1bdtAQGrwgF/WOBO0J7eZDmrYd+TrirztXE+0DPG7ODN Gj8VMHuFpWEh92FV1/wkcOlBTQ7bfxtH =DdWH -----END PGP SIGNATURE----- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address belonging to the signature and forwarded.]

2 1

The thread that would not die. (Mandating signatures)
by John.Schofield＠sprawl.expressnet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- It is silly to talk of someone "owning" the list. The list is a community. The only possible owners are the people in the community. If we all left, Eric would still have control over the list--but the list would be worthless. It is just as silly, though, to talk about whether or not Eric has the "right" to enforce his ideas. He *CAN* make changes to the list--anything else is irrelevant. This whole discussion seems to be based on the idea that signing everything is a Good Thing. Yet I haven't seen a convincing argument for that. If I read a forged message, I haven't been hurt. If the person being impersonated doesn't exist, nobody has been harmed--and if he does, ONLY that person has been harmed. So, let's put the onus here where it belongs. If people feel their reputations are important enough that they need to sign their messages, more power to them. If they don't feel it is important, who are you to tell them the value of THEIR reputations? When signatures are easy enough to do, the scale will balance on the side of security--people will value their reputations more than the trouble it takes to sign messages. Until then, people will not sign. For me, signing is easy--even though I am ridiculously unconnected right now. So I do it, using an off-line mail-reader shell that I wrote and distributed myself. The list members who are convinced that digital signatures are valuable could do much more to advance their cause by eliminating some of the barriers to using digital signatures than by mandating them. Any type of a stick will not work very well in this situation. The people most interested in privacy and encryption are those who are by nature most individualistic and stubborn. Forcing them to do something will make most of them go the other way, or go away. I know my mind works that way. -----BEGIN PGP SIGNATURE----- Version: 2.7 Comment: Call 818-345-8640 voice for info on Keep Out magazine. iQCVAwUBLt6x1Wj9fvT+ukJdAQGKcAP/TqIF6b8UEo6IWV93JdktGoYSxQ5w6wKw MR3tXicSCRI1S/tSOSqcZm45M9CExKz7W4z417Ip8iP/wzjEmAb+s0ObgRoxoHPL Xe+VFSYq6o7f5XT67eBr+lK6t+pknmkc626Z86LsjqKIZ5jBLZrpKzmOP+La2Ypv /uE1/ZckzbA= =G1kK -----END PGP SIGNATURE----- **EZ-PGP v1.07 --- Blue Wave/RA v2.12 -- |Expressnet: John Schofield 11:310/12 |Internet: John.Schofield(a)sprawl.expressnet.org | | Standard disclaimer: The views of this user are strictly his own.

2 1