December 2003 - cypherpunks-legacy

Richelson's Latest
by John Young 17 Dec '03

17 Dec '03

Jeffrey T. Richelson has a new book: A Century of Spies: Intelligence in the Twentieth Century. Oxford University Press, New York, 1995, 534 pp., $30.00. ISBN 0-19-507391-6. Jacket copy: "Richelson covers the crucial role of spy technology from the days of Marconi and the Wright Brothers to today's dazzling array of Space Age satellites, aircraft, and ground stations. He provides portraits of spymasters, spies and defectors ... the 'black magic' of U.S. and British codebreakers. A final chapter probes the still-evolving role of intelligence in the new world of disorder and ethnic conflict, from the high-tech wonders of the Gulf War to the surprising involvement of the French government in industrial espionage." Blurb: "This is the missing book -- the primer -- on the craft of intelligence. It is a highly informed briefing, set in historical persepctive, by the best of the spy watchers." -- William E. Burrows, author of "Deep Black." -- Watchers of spy watchers will recall Richelson's excellent, "The U. S. Intelligence Community," and other fine work on spy satellites and Soviet intelligence.

1 0

Richelson Doesn't Know C (was Re: Richelson's Latest)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:45 PM 8/12/95, John Young wrote: > Jeffrey T. Richelson has a new book: > > A Century of Spies: Intelligence in the Twentieth Century. > Oxford University Press, New York, 1995, 534 pp., $30.00. > ISBN 0-19-507391-6. This is all well and good, for ciphergroupies, BUT WHAT DOES IT HAVE TO DO WITH CODING IN C? :-} Seriously, I've read (or used as a reference) Richelson's books. His book on U.S. Intelligence Agencies had a lot of good stuff on the more obscure agencies, and is a great supplement to Bamford. At least some cryptographers think this stuff is useful, as Whit D. borrowed my copy for several months. I look forward to getting this new one! --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

F*** FOSTER
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

this vince foster thing is BS. total bs. Perry is right. there's not a single smidgeon of honest reporting going on. its just slime being stirred up by internet thugs and rapscallions. let foster rest in peace. multiple people have ruled it was a suicide. perry can attest that it was a suicide. perry can attest that the NSA was not involved. he has seen everything, and if he has an opinion on something, you can take his word that it was based on the FACTS. the FACTS of the case are that FOSTER was fed up with his nothing life, and pulled the trigger and blew his brains out in a park. so what if they couldn't find the brains anywhere? or they are missing a few here and there??? they were splattered on the grass. when there is that much splatter all over the place, you can be sure that the people showing up with the spatula are not going to be that meticulous. they probably did about 5 minutes of scrape, scrape, scaping and then vomited and passed the spatula to the next guy. I mean, cut these guys some slack. the NSA stuff is total, utter poppycock. the NSA has absolutely nothing to do with vince foster. Clinton has nothing to do with foster. Hillary has nothing to do with foster. why, the way people are ranting you'd think there is a major political scandal going on. NOTHING IS GOING ON HERE. please step aside, and move along. PLEASE MOVE ALONG FOLKS, THERE'S NOTHING MORE TO SEE HERE. the fact that foster may have had access to intelligence secrets such as cryptography is IRRELEVANT to the cypherpunks. the fact that a scandal may have taken place is IMMATERIAL to our goals. our goals are to WRITE CODE. FOR GOD'S SAKE, WRITE THAT CODE. I don't care if you have to create code generators. CODE, CODE, CODE. post the code to the cypherpunks list. talk about the code. critique the code. study the code. salvation for all humanity lies in finding the magic formula. and we can't find it, UNLESS WE CODE, DAMMIT. perry understands this. some people think that there is a magic government program that will solve poverty, give freedom to everyone in the US, and solve P=NP. they're WRONG. the government cannot do any of this. BUT PROGRAMMERS CAN!!!! put your programming hats on. if you haven't banged a keyboard a half million times, fired up VI to edit a C file for the ten zillionth time, NO PROGRESS IS BEING MADE. ITS AS SIMPLE AS THAT. if you haven't compiled something recently, RECOMPILE IT JUST TO BE SAFE. we just aren't making any progress without CODE, CODE, CODE. we have an utter shortage of code. the problem is not politics, but LACK OF CODE. anyone can look at the net today and see there is a HORRENDOUS SHORTAGE OF CODE IN CYBERSPACE. we have to train everyone to program NOW or the future is lost to the incompetent. we will be back to Vic 64's if people don't keep up the constant programming. software is the key to salvation. every second devoted to the vince foster thing is a precious second taken away from code. NOTHING POSITIVE CAN COME OF PREOCCUPATION WITH CONSPIRACY THEORIES. PERRY CAN ATTEST TO THAT. remember when PRZ was getting indicted? perry was right on then too. some people were scared shitless and raving out of their minds, saying the world would end tomorrow, but NOT PERRY. perry has NO FEAR. he said that we should CODE, CODE, CODE. and you know what??? HE'S RIGHT. if people followed PERRY, we would not be in this @#$%^&* predicament we are in. if we could just get it so that every person who signed up to the internet could CODE, we would be home free. salvation. utopia!!! then we could rest a little. but only a little, otherwise the NSA will beat us again at the code race. once again: forget Foster. nothing, absolutely nothing about this scandal could possibly help our cause of trying to expose corruption in government to the mainstream populace, to keep them better informed, to put limits on the NSA, to show that they have been involved in horrendous abuses, that there is something utterly smelly in our government. FORGET IT. NOTHING LIKE THIS WILL EVER BE PROVEN OR ESTABLISHED. IT'S IMPOSSIBLE, JUST LIKE PERRY SAYS SO. when anything new comes of this foster stuff, just remember that perry predicted way ahead of time that it would amount to NOTHING, NOTHING, NOTHING. and the more you preoccupy your brains with this TOTAL MINUTIA, the less you are coding. STOP IT RIGHT NOW. just remember, if you don't, you will be SORRY, and when you come crying back to Perry that nothing of value came of all your conspiracy mongering, he will have NO SYMPATHY, in fact if he had a gun around he'd probably be tempted to blow your brains out. and you can just FORGET about the spatula.

3 2

Re: PRZ encrypted voice software release imminent
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 14:42 8/11/95, Ray Cromwell wrote: >I would like to see a secure voice communication protocol that is divorced >from the particular details of the algorithms used (although a >base level of some voice compression technique + DES + RSA will have to >be used) That way, new and better algorithms can be dropped in depending >on the network used (modem, ipx, tcp/udp, etc) and the bandwidth required >(CELP vocoder, MPEG-audio, lossless encoding, progressive PCM, etc) The codec used is at the very core of any computer telephony system. A standard that doesn't specify the codec(s) can be little more than a standard on message formats, which will be of little value if the other side doesn't implement the same codec. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

Re: PRZ encrypted voice software release imminent
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:36 PM 8/11/95, Ray Cromwell wrote: > My question is, how portable is it, and does it work over TCP/IP rather >than just modem connections (I suggested this about a year ago)? My ideal >implementation would function on the following architectures: > >Unix: can be used through either /dev/tty?? or Socket (probably want >to use UDP). Works on Solaris, IRIX, AIX, NetBSD/FreeBSD/BSDI and Linux. >(audio devices are all proprietary) > > >Windows: uses Window's sound card device drivers, works via either >comport or WinSock > >Mac: uses Mac sound drivers, uses Mac modem port or MacTCP >From the "MacWeek" article, it initially runs on the Macintosh, using the sound capabilities built into (nearly) all Macs. Direct modem connections, with Internet versions to follow. (Windows to follow, too.) Sound quality with 9600 baud modems said to be pretty good, quality with 14.4 modems said to be very good, and quality with 28.8 modems said to be better than standard phone quality. The Mac may be a strange platform to develop on, to many of you, but it has some advantages. The sound tools are relatively standardized and are even built into the OS. Developers can thus count on what users will have. But why the developers actually picked the Mac to do first is something they can talk about. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

4 4

BUK_guv
by John Young 17 Dec '03

17 Dec '03

8-18-95. W$Japer: "Encryption-Software Plan Presented Using 'Keys' Held by Escrow Agents." [This is a variation on the Markoff article today, with a bit more.] Companies hoping to start selling stronger encryption products will have to wait a few months, since the administration has yet to sort out important details. For instance, one unresolved issue is how to certify escrow agents to keep fly-by-night operators and organized-crime figures out of the business. And the administration's emerging policy doesn't deal with data-security hardware -- products that wire the encryption schemes right into chips or other devices. Even with the export restrictions, U.S. officials haven't been able to stop widespread international distribution of an encryption program, called Pretty Good Privacy, that is nearly impossible to crack. "Seizure of Electronic Messages In Obscenity Case Raises Questions." Users of a small computer bulletin board in Ohio sued local authorities who seized their electronic mail and other materials as part of an investigation into obscene postings. In their lawsuit, which appears to be the first of its kind, the plaintiffs contend that the Hamilton County Regional Computer Crimes Task Force and other authorities violated their rights to free speech and privacy by seizing their messages during a June raid of five bulletin boards. The plaintiffs also allege that, by seizing their private electronic messages, the authorities violated the Electronic Communications Privacy Act. Double yolk: BUK_guv (about 11kb)

1 0

28M_dip
by John Young 17 Dec '03

17 Dec '03

8-17-95. FPeach: "Russian 'in $2.8m Citibank computer fraud'." Citibank New York fell victim to a $2.8m fraud after a Russian computer hacker penetrated the bank's security system in Wall Street and removed the money from the accounts of corporate clients, it was claimed in a London court yesterday. The alleged fraud was carried out by a 24 year-old mathematics graduate using a computer in his office in St Petersburg, claim the US authorities, which are seeking his extradition from the UK. 8-17-95. NYPaper: "Russian Accused of Citibank Computer Fraud." A judge set another hearing for Sept. 15 after Mr. Levin's lawyer argued that the Government has not shown that any computer in the United States was involved. Stereo: 28M_dip (about 6kb)

1 0

BULK EMAIL LIST GETS RESULTS QUICKLY TRY IT
by OIL.PATCH.MARKETING＠08746.com 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000"><FONT COLOR="#00FFFF" SIZE=3> Profitable Internet Marketing Using Bulk Email Best Bulk E-Mail Prices on the Internet!!!!!! Bulk Email is the most cost effective form of advertising in the history of the world !!!!!!!!!!!!!!! --------------------------------------------------------------------------- Why is Bulk Email Successful ? - Bulk Email is successful because it works. Advertising in any form is a numbers game. The more people exposed to your message (an impression in advertising terminology), the more sales you will make. Bulk Email gets your message in front of a vast amount of people for a very modest investment. For the price of one black and white ad, appearing one day only, in a daily newspaper in a medium to large city, you can send your Bulk Email message out to 1,000,000 people !!! Most of these large newspapers don't even have a circulation of 1,000,000. Sure not everyone is going to read your Bulk Email message, but not everyone sees your ad in the newspaper either. Bulk Snail Mail (regular junk mail) has been very successful and not everyone reads it. If regular junk mail wasn't profitable, you wouldn't be seeing so much of it. The reality is Bulk Email works and that is why you are seeing it repeatedly. If Bulk Email didn't work you wouldn't see it being used !!!!!!!!!! --------------------------------------------------------------------------- What is the Future of Bulk Email ? My advice is to get out there while you still can and build up your business with Bulk E-mail. --------------------------------------------------------------------------- What is Bulk E-mail ? - Bulk E-mail is the sending out of unsolicited Email Messages. These Bulk E-mail messages can be sent to target list of Email addresses or to just anyone. It is entirely possible to send out several million pieces of Bulk Email in one day. These Bulk E-mail messages can contain information, offers to sell goods or services, or simply promote a web site. --------------------------------------------------------------------------- General Bulk E-Mail Mailing Rates These prices include the creation of the Bulk E-Mail message, the use of the mailing list and the sending out of the Bulk E-mail. Small Starter Size 25,000...............................$99 Try it Sampler Size 100,000..............................$199 Medium Size Run 250,000..............................$299 Large Run 500,000..............................$499 Serious Run 1,000,000..............................$899 Professional 2,000,000. ............................$1500 Business Builder 3,000,000..............................$2200 Mega Market Run 5,000,000..............................$3000 --------------------------------------------------------------------------- Mailing Lists ( Does not include Bulk E-Mailing) 1,000,000 E-mail addresses........................................$99 2,0000,000 E-mail addresses......................................$149 5,000,000 E-mail addresses.......................................$299 10,000.000 E-mail addresses......................................$499 --------------------------------------------------------------------------- We have over 40,000,000 names in hand. This list is updated every few weeks. This gives our customers the NEWEST list available anywhere. We can assure our customers that thier order will be processed A S A P. If there is ever a doubt we send extra names. We may not be the cheapest but we give our customer "TOP QUALITY SERVICE". --------------------------------------------------------------------------- OIL PATCH MARKETING RT 2 BOX 396A JENKS, OK 74037 Call Bill Moore at 918-291-7546 Or fax your order to 918-291-7546 We accept Visa, MasterCard, Discover/Novus, American EXpress If you're not interested in receiving this type of email, DO NOT HIT REPLY. Send a blank e-mail message to <takemeoff(a)answerme.com> </FONT><FONT COLOR="#000000" SIZE=3>

1 0

NIST Release on Key Escrow
by Dave Banisar 17 Dec '03

17 Dec '03

EMBARGOED FOR RELEASE: NIST 95-24 3 p.m. EDT, Thursday, Aug. 17, 1995 Contact: Anne Enright Shepherd COMMERCE'S NIST ANNOUNCES (301) 975-4858 PROCESS FOR DIALOGUE ON KEY ESCROW ISSUES Furthering the Administration's commitment to defining a workable key escrow encryption strategy that would satisfy government and be acceptable to business and private users of cryptography, the Commerce Department's National Institute of Standards and Technology announced today renewed dialogue on key escrow issues. A Sept. 6-7 workshop will convene industry and government officials to discuss key escrow issues, including proposed liberalization of export control procedures for key escrow software products with key lengths up to 64 bits, which would benefit software manufacturers interested in building secure encryption products that can be used both domestically and abroad. Key escrow encryption is part of the Administration's initiative to promote the use of strong techniques to protect the privacy of data and voice transmissions by companies, government agencies and others without compromising the government's ability to carry out lawful wiretaps. In a July 1994 letter to former Rep. Maria Cantwell, Vice President Gore said that the government would work on developing exportable key escrow encryption systems that would allow escrow agents outside the government, not rely on classified algorithms, be implementable in hardware or software, and meet the needs of industry as well as law enforcement and national security. Since that time, discussions with industry have provided valuable guidance to the Administration in the development of this policy. For example, many companies are interested in using a corporate key escrow system to ensure reliable back-up access to encrypted information, and the renewed commitment should foster the development of such services. Consideration of additional implementations of key escrow comes in response to concerns expressed by software industry representatives that the Administration's key escrow policies did not provide for a software implementation of key escrow and in light of the needs of federal agencies for commercial encryption products in hardware and software to protect unclassified information on computer and data networks. Officials also announced a second workshop at which industry is invited to help develop additional Federal Information Processing Standards for key escrow encryption, specifically to include software implementations. This standards activity would provide federal government agencies with wider choices among approved key escrow encryption products using either hardware or software. Federal Information Processing Standards provide guidance to agencies of the federal government in their procurement and use of computer systems and equipment. Industry representatives and others interested in joining this standards-development effort are invited to a key escrow standards exploratory workshop on Sept. 15 in Gaithersburg, Md. This workshop is an outgrowth of last year's meetings in which government and industry officials discussed possible technical approaches to software key escrow encryption. The Escrowed Encryption Standard, a Federal Information Processing Standard for use by federal agencies and available for use by others, specifies use of a Key Escrow chip (once referred to as "Clipper chip") to provide strong encryption protection for sensitive but unclassified voice, fax and modem communications over telephone lines. Currently, this hardware-based standard is the only FIPS-approved key escrow technique. NIST officials anticipate proposing a revision to the Escrowed Encryption Standard to allow it to cover electronic data transmitted over computer networks. Under this revised federal standard, the Capstone chip and other hardware-based key escrow techniques developed for use in protecting such electronic data also will be approved for use by federal agencies. As a non-regulatory agency of the Commerce Department's Technology Administration, NIST promotes U.S. economic growth by working with industry to develop and apply technology, measurements and standards. - 30 - Note to editors: Readers who are interested in obtaining more information about the workshops can contact Arlene Carlton, (301) 975-3240, fax: (301) 948-1784, e-mail: carlton(a)micf.nist.gov.

1 0

Re: Where is the key cracking farming software?
by dan＠milliways.org 17 Dec '03

17 Dec '03

On Fri, 18 Aug 1995 02:11:00 -0400 you wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >With all the talk about cracking SSL, where is the cracking software? >Sombody just offered me a six Pentium workstation, if I agree to give it a >"real workout". I'd like to be able to say: "Sure, will do." There must be several versions of the code at this point. The Cypherpunks release, Damien's release and whoever else wrote some code to do the chore. If someone could pass me a pointer to the version that's best-commented and most understandable (one man's C is another man's crypto) I'd like to port it to Windows NT and write a simple installation to install it as a service. Perhaps a general-purpose OO bruteforcing library (addition to Crypto++?) would be a good idea. Just pass a pointers to the encrypt() and decrypt() functions to use for this session to the Cracker object, which in turn takes a number of bits and starts cracking.:) The problem with this is the disparity among out-of-the-box encrypt and decrypt functions. But I suppose it's nothing that couldn't be overcome with wrapper functions. Just thinking out loud. :) Dan ****************************************************************************** "I think, therefore I am" - Descartes Dan Bailey "I don't think, therefore I'm a moustache." - Sartre dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ******************************************************************************

1 0