December 2003 - cypherpunks-legacy

Re: Why DES in IPSEC ESP?
by Marc Horowitz 17 Dec '03

17 Dec '03

>> | Why was (single) DES chosen as the algorithm for the ESP part of IPSEC? Because people were going completely nuts about mandating something not easily specifiable at all. DES was an easier case to make than 3DES. >> So, in order to ship sooner rather than later, DES was chosen. >> 3DES will probably be available soon afterwards. Shipping is irrelevant. Perry is busily coding 3DES support into NetBSD. Once it's in the bsd network stack, it will spread everywhere. Presumably, someone will implement it outside the US as well. As Perry put it succinctly at a recent IETF meeting, people will not necessarily use what is mandated. They will use what is available. If 3DES is in the freely available reference implementation (which it will be), and it performs adequately, that is what will get used. Marc

1 0

where to get RFCs and internet drafts
by Perry E. Metzger 17 Dec '03

17 Dec '03

A couple of people have asked, so I'm posting... RFCs and internet drafts are both available for anonymous FTP from ds.internic.net. Phil Karn's photuris stuff is still in the early draft phase. Help speed up development by playing with it! .pm

1 0

questions/info on premail
by mhobbs＠rad.rpslmc.edu 17 Dec '03

17 Dec '03

To all. Is there anyone out there that has incorporated premail into another script? Like a mail script or cgi script. I'm trying to expand the idea of integrating anon-mailers into web pages for more ease of use. If anyone has directly linked premail to a page, please let me know. I am having some problems calling it from a script and I thought someone might have solved this problem already. I wrote to Raph about this, but as you might know, his page states that he got married on Aug 5, so I don't expect the speediest of replies :) Michael Hobbs dochobbs(a)wwa.com mhobbs(a)rad.rpslmc.edu p.s. As to the cpremailer page that I posted here last week; -I have removed the hardwired remailer and now allow simple of choosing of remailers. I also think I have the news instructions up to date. http://miso.wwa.com/~dochobbs/cpremailer.html

1 0

Conspiracies
by John Young 17 Dec '03

17 Dec '03

I respect the view that sound crypto requires skeptical review and testing outside closed rooms. Conspiracies live or die by the same process. Crypto would die if there was no belief in conspiracies. Conspiracy theory drives the cypherpunk agenda, I surmised from the welcoming statement. Note the caution about "S1," and any other crypto offering. Perry's sharp statements on the urgent need for crypto deployment are motivated, it seems to me, by a view of a believable, if not wholly proveable, threat that crypto is believed to counter. I choose to believe him; Orlin's got my skeptical interest -- put up or shut up -- and he's not out of line. But who knows more than what we read in the conspiracy- driven media and hear from our respected leaders? Take your pick of them, or believe your own home-grown, they're unavoidable, on cypherpunks or elsewhere -- they're the crippling religion of the ages. My mouth waters to hear the latest conspiracies about cypherpunks' evil spread of demon crypto.

1 0

Re: "S1" encryption system (was: this looked like it might be interesting)
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

>Jon writes: >> Two other possibilities: (1) It's merely an independently produced >> cryptosystem disguised as a "leak" to save its creator the trouble of >> asking experts to analyze it for him/her. >It strikes me as rather foolish to mail off anonymous copies to several >individual recipients (Matt, Perry, Tim, ...) in addition to the list, if >S1 is a real leak. Why aid the traffic analysts by firing off multiple >messages through the remailers ? A third possibility comes to mind, that person or persons associated with the list are using the post to focus on cryptographic efforts in lieu of political or apocalyptic diatribes.

1 0

PGP Tools on Linux
by Rev. Mark Grant 17 Dec '03

17 Dec '03

Did anyone ever get PGP Tools working on Linux ? I can compile it, but it has a marked tendency to get SEGVs when destroying fifos... Mark

2 2

PERRY METZGER: YOUR MOMMY IS CALLING YOU HOME
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I'm tired of Perry. he's always ranting and stirring the shit. he's always setting himself up as the savior of the list signal. what the hell has he really written? oh, the poor bastard has holed himself in his apartment to write crypto code or the world is going to die tomorrow. thank you, mr. Jesus Christ, Nailed to a Cybercross. WHY HATH WE FORSAKEN HIM??? oh, I can see the blood oozing from the gaping flesh wounds. poor Perry, having to bear this horrible cross while everyone else stands around and gawks and remarks about Foster conspiracy theories... yes, we are being utterly inconsiderate of his splendor and selflessness. has anyone seen Mathew, Mark, John, or Luke around??? Perry has something to say to them. oh, and Perry has become Mr. Cyberlobbyist. yes, just what we NEED, is another person to be sucked up and ground up in the oozing washington slime regurgitator. well, if it would swallow him up and never spit him out, perhaps we should encourage him in his newfound political passions. I have seen an awful lot of noise on the list, and I'm pretty f***ing amazed at how much of it is due to PM and his BLACKBOARD FINGERNAIL SCREECHING. he's worse than detweiler. actually, I think he may be a detweiler tentacle. he's certainly doing a fantastic impression of it. mr. holier than thou Protector of the Cypherpunks. perry, just go stay in your dark apartment and write your code. we'll be happy to hear from you in a year when you have all your little tinkertoy prototypes put together with threads and bubblegum. TCM is not the first person you have violated by posting private mail. you are the lowest cypherscum for violating privacy, perry. you know that if anything is sacred to cypherpunks, it is Tim May and privacy, and frankly I think you have been doing just a little to much pissing on both of them lately. oh, violate Tim May's privacy? well, stab two sacred cows with one bazooka, why don't you, you little bastard... do we have any need for you? maybe tim may is a weenie, but I'd rather have a weenie around then YOU, and I think virtually EVERYONE HERE concurs on that point... why don't you take a vacation from the list? TCM has the guts to do this, and has done so in the past. but you are just a bloated buffoon who cannot tell when he is not wanted somewhere even as people spit in your face. hee, hee, reminds me of someone else I know. but frankly, perry, I don't think you have the balls to go away. if you are a real programmer, and all the real programmers have left, what does that make you? stupid, I'd say. we would not miss you one whit if you left, Perry. in fact I think it's safe to say that we'd be quite delighted if you would take your constant shit-stirring somewhere else and get a life. TCM may have a pathetic excuse for a hobby, but you have a pathetic excuse for a LIFE. I know you personally Perry, and you couldn't conduct yourself in a meeting of civilized people if you had your tongue chopped off, and I think there's plenty of meetings you've been to when your peers were wishing exactly that.... xxxxxxooooo <- hugs and kisses, darling perry puppy

5 5

DED_hed
by John Young 17 Dec '03

17 Dec '03

8-10-95. NYPaper Page-Oner: "Jerry Garcia of Grateful Dead, Icon of 60's Spirit, Dies at 53." By Jon Pareles, Music Critic. [With] "Sadness From the Streets to High Offices." By John Markoff. DED_hed

1 0

Legislative One-Liners
by J. Kent Hastings 17 Dec '03

17 Dec '03

-- [ From: J. Kent Hastings * EMC.Ver #2.5.02 ] -- -----BEGIN PGP SIGNED MESSAGE----- DANGER: Legislature In Session! "One-Liners" List of 104th Congress privacy legislation. Latest update: 8/1/95. The overview compiled by the Electronic Privacy Information Center (EPIC), info(a)epic.org, http://www.epic.org is edited here into single line entries by J. Kent Hastings, zeus(a)pinsight.com, Assistant Director of the Agorist Institute, http://www.pinsight.com/~zeus/agorist/ The full text of pending bills, and other legislative materials is available from cpsr.org /cpsr/privacy/epic/104th_congress_bills/ - -- House Bills -- Taking Back Our Streets (HR 3). Limits sanctions for illegal searches. Personal Responsibility (HR 4). Databases of new hires and child support. Risk Assessment (HR 9). Government Information Locator Service (GILS). FBI Counterintelligence (HR 68). Easier access to credit reports by FBI. Electronic Anti-Stalking (HR 112). Electronic harassing a federal crime. Obscenity and Computers (HR 121). Network obscenity 10-year fed penalty. Quality Assurance in Drug Testing (HR 153). Requirements for drug testing. Individual Privacy Protection (HR 184). New national privacy commission. Interstate Child Support (HR 195). New hires database, IRS collection. Export Administration (HR 361). Studies software encryption overseas. Antitrust Reform (HR 411). Orders FCC privacy survey, limits CPNI. Postal Privacy (HR 434). Prohibits P.O. selling info to direct marketers. Fair Health Information Practices (HR 435). Health care privacy bill. Restricted Explosives Control (HR 488). Federal permits, even black powder. Social Security Anti-Fraud (HR 502). Telephone verification of applicants. Immigration Reform (HR 560). Tamperproof ID cards for immigrants. Consumer Reporting Reform (HR 561). Limits cost and use of credit reports. Enforce Employer Sanctions (HR 570). SS card w/fingerprint, barcode, photo. Exclusionary Rule Reform (HR 666). Violates 4th Amendment, except IRS/BATF. Criminal Alien Deportation (HR 668). Wiretaps OK for illegal immigration. Illegal Immigration Control (HR 756). Wiretaps, machine SSN I.D., databases. Child Support Responsibility (HR 785). Parents SSN birth/marriage documents. Paperwork Reduction (HR 830). Coordinates federal information policy. Comprehensive Antiterrorism (HR 896). "Terrorist organization" fund raising. Child Support Enforcement (HR 906). Allows access to all financial records. Communications Decency Act (HR 1004). Same as Exon bill in Senate (S 314). Illegal Immigration Control (HR 1018). Tamper proof Social Security cards. Welfare Transformation (HR 1157). Database of new employees, parent locator. American Health Security (HR 1200). Health records database for research. Food Stamp Simplification (HR 1214). Increases SSN use. Electronic benefits. Basic Health Care (HR 1234). Weak limits on medical information access. Sexual Crimes Against Children (HR 1240). New penalties, computer networks. DNA Identification (HR 1241). Revises funding authorized for Violent Crime. Family Stability (HR 1250). Database of employees, parents, more SSN use. Family Privacy Protection (HR 1271). Prohibits questionnaires of minors. Revise Aliens and Nationality laws (HR 1292). Employment verification card. Children's Media Protection (HR 1390). "V-Chip" TV filtering, ratings. Communications Act of 1995 (HR 1555). Privacy of customer info, except CDA. Antiterrorism Amendments (HR 1635). Eases wiretaps, credit report evidence. Quality Assurance in Drug Testing (HR 1706). Standards for drug testing. Comprehensive Antiterrorism (HR 1710). Eases wiretaps, credit evidence. Constitutional Rights Oversight (HR 1738). Creates inspector general review. Prevent Fraud in Health Care (HR 1758). Sharing of medical information. Health Information Modernization (HR 1766). Health Information Network. Counterterrorism Research (HR 1847). New DOJ surveillance and tracking. High Risk Drivers (HR 1866). SSN as common identifier for drivers liscenses. Health Care and Paperwork Reduction (HR 1912). Magnetic ID, SSN/health plan. Immigration in the National Interest (HR 1915). More wiretaps, bank records. Internet Freedom and Family Empowerment (HR 1978). On-line srvc screening. Parental Control Inappropriate Programming(-ed.) (HR 2030). Another V-Chip. -- Senate Bills -- Violent Crime Control (S 3). OK's illegal search, wiretaps by foreign govts. Family Health Insurance Protection (S 7). Democratic health care bill. Exclusionary Rule Limitation (S 54). OK's violations of 4th Amendment. Paperwork Reduction Act (S 244). Government Information Locator Svc (GILS). Immigrant Control (S 269). National registry for workplace verification. Private Long-Term Care (S 294). Creates "health information network". Communications Decency Act (S 314). Outlaws sexual and anonymous messages. High-risk Drivers Act (S 387). National system of driving records, uses SSN. Marking of Plastic Explosives (S 390). Wiretaps terror "material support." Interstate Child Support (S 456). Databank of new hires, SSA link. Illegal Immigration Control (S 580). Wiretaps immigration and smuggling. Child Custody Reform (S 632). Database of all child custody cases. Telecommunications Competition (S 652). Restricts indecent Internet speech. Taxpayer Browsing Protection (S 670). Stops unauthorized tax data viewing. Child Support (S 687). Support obligation database. SSNs related documents. Amend Fair Credit Reporting (S 709). Limits employment credit reports. Study of Internet Pornography (S 714). Replacement for Comm Decency (S.314). Comprehensive Terrorism (S 735). "Roving" wiretaps, Internet bomb info. Economic Opportunity (S 746). Expands National Parent Locator Service. Immigration Enforcement (S 754). Telephone verification for applicant SSNs. Illegal Immigration (S 759). Database non-immigrants' entrance/exit dates. Omnibus Counterterrorism (S 761). Pays for Digital Telephony and wiretaps. Interstate Child Support (S 828). Both parents' SSNs birth/marriage/driver. Real Welfare Reform (S 834). "Designated industries" support obligations. Work and Gainful Employment (S 840). Child support, new hire, SSN documents. Health Information Modernization (S 872). National health info network. Protection of Children (S 892). Criminalizes indecent computer data. Intelligence Authorization (S 922). Credit info, FBI "counterintelligence." Interstate Child Support (S 926). Database of W-4 forms and child support. Healthy Mothers, Healthy Children (S 933). Children's immunization database. Information Technology Management (S 946). Chief Information Officer of OMB. Anti-Electronic Racketeering (S 974). Bans encryption software distribution. National Information Infrastructure (S 982) Newly defined computer crimes. Illegal Immigration Control (S 999). Internal passport for all citizens. - --- End of Listing --- ANNOUNCING: The "MIND YOUR 0WN BUSINESS" audiotext program. 1 - 9 0 0 - C A N - M Y 0 B (1-900-226-6902) Notice the zero digit, not the letter "O." The Feds say you can't have privacy, but we say you CAN "Mind Your 0wn Business!" And now we have a 900 number to reveal new methods to defend your privacy from criminals and tyrants. Sponsored by The Agorist Institute. The cost of each call is just 99 cents per minute, average cost $2.97, average length 3 minutes (August 1995 only. Future messages will be longer.) You must be at least 18 to call or have parental permission. This is a much better deal than you'll get from most psychic or sex lines ;^) The line will be updated by the 1st of each month. By September 1, 1995, our message will be recorded by a professional audio producer, but for now, you get to hear me read the first script. Don't be surprised if we update it during August. Kent J. Kent Hastings, Assistant Director of The Agorist Institute zeus(a)pinsight.com -- http://www.pinsight.com/~zeus/agorist/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMCqAeDTxxI221vktAQEaTAQAitl0r9d6nii64lfdIszWvnePURR0ti9h JsL3pMk+CYwz3CweuVvCXXJKp3TX6P+hkL6kdjt2zJ6axQFAfRcLcl6BqpQcxI7p MnHQbkLFQgI/4t9nM3RxieX5/a4idYtEAZuZh+y3ca160ftxCFLUaP6kordg/KI2 YgvAqrljkOA= =SQWP -----END PGP SIGNATURE-----

1 0

Conspiracies and "Ciphergroupies"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:57 PM 8/10/95, John Young wrote: > I respect the view that sound crypto requires skeptical > review and testing outside closed rooms. Conspiracies live > or die by the same process. Crypto would die if there was > no belief in conspiracies. > > Conspiracy theory drives the cypherpunk agenda, I surmised > from the welcoming statement. Note the caution about "S1," > and any other crypto offering. I think a better, and less loaded, tern than "conspiracies" is "threat models." It has always been important to many of us that the policies and plans of potential threats be discussed, analyzed, etc. Thus, our recurring focus on the activities of the NSA, GCHQ, FinCEN, and so on. For example, all folks on this list should almost certainly read "The Puzzle Palace," even though it does not _directly_ help with the latest project in writing code. And like Orlin Grabbe, whose "End of Money" article I posted a pointer to last winter, I closely follow the recent developments involving the intelligence agencies, the plans to limit crypto, etc. (By the way, it was my close following of the NSA and related organizations, and my monitoring of what Dorothy Denning was saying, that led to my "A Trial Balloon to Ban Crypto?" article in this group and in sci.crypt three years ago. This warning, which generated much discussion on sci.crypt and here, prepared us for the Clipper announcement six months later.) Is this wasted time? Shouldn't I be using my time to write Trumpet Winsocks--whatever they are!--for WinCypherHyperPhone? Well, we all decide what our interests are, and exhortations by others that we are not working on what is "really" important are not very useful. There are probably a dozen different sorts of interests here, ranging from a bunch of folks interested in popularizing crypto to several law professors and lawyers interested in legal aspects to Internet programming experts. Even some pure mathematicians. Even some novices. > Perry's sharp statements on the urgent need for crypto > deployment are motivated, it seems to me, by a view of a > believable, if not wholly proveable, threat that crypto is > believed to counter. I choose to believe him; Orlin's got my > skeptical interest -- put up or shut up -- and he's not out > of line. Perry is Perry. He has certainly written his share of rants and "off-topic" posts, as have we all. Literally thousands of his posts over the past 3 years reside on my disk drives, and certainly until recently most of them were not about writing code. Ironically, just a few weeks ago, Perry was sharply criticizing me for my "Crisis Overload" post and was urging me to join him in a serious lobbying effort to undermine the Grassley bill. I declined, thinking it unlikely to succeed and preferring to concentrate on my other project (including a new release of SmalltalkAgents, just arrived). When I preferred to work on more technical things than launching a grassroots political campaign, he got abusive and insulting in e-mail and I told him I would no longer accept this sort of abuse. You may recall he chose to post this private message here in public, without of course the messages that preceeded this (and without my permission, needless to say). Again, Perry is Perry. People work on what interests them. It is nice for Perry, and maybe for all of us if his efforts work out, that he has thrown himself into this new programming project, but it is wrong for him to automatically dismiss the interests and efforts of others. There's also a certain "control freak" attitude that creeps into this list (and other lists, of course) at times, wherein people say that their current interest is vastly more important than anything else and that anyone who does not drop their frivolous other interests and begin work immediately on the One True Project are fools and knaves, and are probably secretly working for the NSA! (:-}). People should write about what interests them. Those who wish to program, should program. Those who wish to explore number theory, should explore number theory. And so on. Attempting to control what gets posted on this list is pointless. If you don't like a particular topic, or an author, use filters and kill files. This can be done in many ways, including mail programs, procmail, and even the "MailWeir" service that Harry Hawk offers. And many people dump the list traffic into local newsgroups, allowing threadified reading. Also, various digestified versions of the list exist--Eric Blossom has one. Insulting people as "ciphergroupies" because they are not working on one's current interest seems needlessly counterproductive. Just my views. If you don't like 'em, ignore them or filter them. That's the Cypherpunk way of doing things. --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

5 4