December 2003 - cypherpunks-legacy

Re: big word listing
by strick at Jihad 17 Dec '03

17 Dec '03

% | see if the password is in it. My question is, are there any pre-built lists of % | this nature? I am currently only using a spelling dictoinary, and would like % | somthing a little bigger. I made one really easily once with a tiny awk program that read files and remembered all the words (in a big table, with the old ``table[word]=1'' trick, then iterate the table and print it out). I probably used 'tr -cd' in front of it to get rid of non-alfa stuff. I fed it netnews -- especially hierachries with folklore, unix, rec.all, sex, etc. And it made a dictionary that cracked several hundred passwords (from a Major University /etc/passwd) in about 24 hours of SparcStation II time (i think ... this was six years ago). I remember finding the word 'creat' -- doubtless obtained from the unix wizards group -- and a whole family of machine-generated accounts whose password was 'pw'. I'm not sure these words exist in dictionaries, but they do in netnews and passwords. anyway -- it's fun to make your own. strick

1 0

ANNOUNCE: Regulatory Arbitrage - Free Speech Server
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

The Free Speech Server ---------------------- In an attempt to preempt senator Exon and his thought police, and to demonstrate to such other utterly misguided, utterly clueless net-illiterates who somehow get ahold of the notion that it is even *possible* to censor peoples words and conversations on the Internet, that what they seek is indeed impossible. This is a simple demo of why it is impossible to censor the net. The Net is international, and in the apt words of Tim May's .sig quote: "National borders are just speed bumps on the information superhighway." The concept of "Regulatory Arbitrage" term meaning of course: shopping for suitable regulations, so if the US has silly "indecency" laws, well just store your words in another jurisdiction. Free Speech Server, jurisdiction Netherlands -------------------------------------------- Alex de Joode has kindly hosted an exon(tm) free speech server on replay.com: http://www.replay.com/exon/ is an automated double-speak translator. It will translate between text in goverment approved thought policed language back into free speech. So, the canonical example, a comlaint against Senator Exon (spit), Exonized(tm) so that even the most zealous US government internet thought police could not complain: ---------------------------------------------------------------------- Senator Exon may I express my annoyance you're a person who is overly sensitive to vulgar speech. This has lowered my opinion of you considerably for your work on the communications decency bill. President Clinton and his crowd of law enforcement officials seem to be overly keen in their attempts to regulate the information super highway. In my opinion they are just understandably scared of losing their much abused so called legitimate wiretap capabilities. It seems highly inappropriate that incompetents like you should be deciding matters about which you have little knowledge. ---------------------------------------------------------------------- Feed that into the WWW forms interface on www.replay.com (click on the unexonize toggle button, and select the "exon" dictionary, and you get back my original message to Exon, ahh much better this really says what I had to say: ---------------------------------------------------------------------- X-Regulatory-Arbitrage-URL: http://www.replay.com/exon/ X-Authors-Preferred-Speech: exon X-Comment: Regulatory Arbitrage in action, free speech server NL Exon fuck you you're a prudish prick. May you rot in hell for your work on the government censorship bill. Slick Willy and his gang of jack booted thugs seem to be fucking falling over themselves in their attempts to censor the net. In my opinion they are just scared shitless of losing their illegal wiretaps. It seems fucking way out of order that assholes like you should be deciding matters about which you know squat. ---------------------------------------------------------------------- The mechanism used to do the translation is phrase replacement, there are facilities for you to add your own phrases if the dictionaries do not cover what you want to say. Please join in and add your own phrases, so that the dictionaries get more interesting. It works by replacing phrases, so in the above: 'fuck you' <-> 'may I express my annoyance' 'fucking way out of order' <-> 'highly inappropriate' 'know squat' <-> 'have little knowledge' etc. Jurisdictional Information -------------------------- The first server is located in the Netherlands, so there are liberal pornography laws, lower age of consent, no thought crimes, freedom of speech, and privacy are still valued, the are no restrictions on "indecent speech", no restrictions on crypto export, etc, etc. The idea is that in your own jurisdiction (US or other oppressive regime with government censorship) you are only saying something within the bounds of censored government speech and thought guidlines, and yet you have a comment, which says what language you *would* use if you weren't being censored, ie you inculde as a header, or a comment in your post what your preferred speech is in terms of a selection of "exon" dictionaries: X-Authors-Preferred-Speech: exon,legislese,sarcasm You haven't actually *said* anything which would require 'correction' by the thought police, rather you have just said what words you would use if you were allowed to. You could also view it as a form of (weak) text stego, saying one thing, but meaning another to a sufficient extent to maintain plausible deniability. Uses ---- It is starting to look like the US will have in place a set of regulations which will make it illegal to use "vulgar speech" or "indecent speech" on the internet. In fact it is looking like you will be able to say less on the internet than could be written in a book in a bookstore or library. Whilst the above example was in terms of 4 letter words, there are dictionaries for several topics, which you as user of the system you can add phrase to for your amusement: exon: "fuck you" <-> "may I express my annoyance" sex: "good fuck" <-> "good sleep" violence: "kick the shit out of" <-> "have a minor disagreement" sarcasm: "that prick Exon" <-> "most honorable Sen Exon esq" legislese: "pillage and loot" <-> "govern" legislese: "tyrannically suppress" <-> "provide protections against" graphic: "lobotomised barney gif" <-> "we love barney" crypto: "fcrypt module" <-> "conventional poetry quatrain" The sky and your imagination is the limit. Oh yes, and 'May I express my annoyance Senator Exon!' :-) Adam -- HAVE *YOU* EXPORTED RSA TODAY? --> http://dcs.ex.ac.uk/~aba/rsa/ --rsa--------------------------8<------------------------------- #!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL $m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa 2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length($n)&~1)/2) -------------------------------8<------------------------------- TRY: rsa -k=3 -n=7537d365 < msg | rsa -d -k=4e243e33 -n=7537d365

1 0

PGP message and keyring format
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Does anyone know of any documentation describing the format of PGP messages and keyrings, so that other applications can send and receive PGP-compatible messages and work with PGP keyrings? Thanks for any info..

2 1

You have cashed my check....
by Censored Girls Anonymous 17 Dec '03

17 Dec '03

Dear First Virtual, You now present puzzling information. You have cashed my check. So why are you telling me that you have no bank information. You stated that the check itself provided the bank information. If this situation persists, I will forward said materials and correspondence to the State of Minnesota Attorney General's Office, and the U.S. District Attorney's Office for prosecution. For what you have connumicated so far surely appears fraudulent. I don't have much money as it is. But then maybe (considering all of the lag time) this is your scam. Maybe this is entirely legitimate, and just an honest mistake. I have added below your opening correspodence of July 18th, the day before the check cashed. Awaitng your response, Carol Anne Braddock Exhibit #1 - Acct. Acceptance Status >From carolann(a)censored.orgTue Jul 25 17:50:44 1995 Date: Tue, 25 Jul 1995 17:24:22 -0500 From: UnCensored Girls Anonymous <carolann(a)censored.org> To: cab(a)censored.org X-UIDL: 805661824.000 From: sgcs-server(a)card.com To: carolann(a)censored.org Y-Tag: 950611397619 Subject: newacct-result Comments: generated by via-btl.tcl - Enabled Mail (EM) environment for UNIX Date: Mon, 10 Jul 1995 15:35:00 -0400 Reply-to: support-newacct(a)card.com X-Status: The account for Carol Anne Braddock is now activated. Your First Virtual account identifier is: newt-carolann Please SAVE YOUR FIRST VIRTUAL ACCOUNT IDENTIFIER, and use it when you buy or sell information. (NOTE: This account identifier differs from the ID-choice that you provided when you applied for your account. We have added a unique prefix.) You may begin using your account to sell information over the Internet immediately! Exhibit #2 Your Letter Today. >From sgcs-server(a)card.comTue Jul 25 18:32:24 1995 Date: Tue, 25 Jul 1995 18:23:24 -0500 From: sgcs-server(a)card.com To: cab8(a)censored.org Subject: change in account status This is an automated message from First Virtual's Internet Payment System. When we tried to verify the the bank account information associated with Carol Anne Braddock, the verification failed. INVALID ACCOUNT NUMBER Once this matter is corrected, we will be able to pay you for your sales. If you have changed your checking account, please follow the directions below. Otherwise, please send e-mail to: support-payout-failure(a)card.com CHANGING THE CHECKING ACCOUNT NUMBER USED FOR PAYMENT If you wish to change the account number of the checking account used to pay you, please send e-mail to: chgacct(a)card.com The ENTIRE body of your message should contain EXACTLY two lines: Account-ID: your First Virtual account identifier Financial-Changes: yes We will send you a confirming note. After you confirm, we will send you e-mail with a new application-ID and instructions on sending us a check for $10.00 (ten US dollars, to cover our paper processing expenses). -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

2 1

Re: You have cashed my check....
by carolann＠censored.org 17 Dec '03

17 Dec '03

Look at the .sig And if it's a system that's vaporware we all need know about it. And if it is corrected, part 17/713 will have begun to go it's job, in a 'realworld' situation. >Please don't send this here. It has no place on this list. > >-Ekr > > -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

DOS Script Programming Request
by ncra＠ix.netcom.com 17 Dec '03

17 Dec '03

To any interested party: I need 3 simple DOS scripts to be writter or translated from a UNIX script to DOS. The scripts need to do the following: 1) Look into a specific directory and execute a .bat file that will sign encrypt the file(s) in the directory using Viacrypt's PGP and wipe out the original. It then needs to move the cyphertext file(s) to a second directory. 2) The second script needs to log on to a netcom account, enter user id and password and upload the cyphertext files in the second directory using Z-modem transpher. The netcom account is already programmed to mail the files to the correct address. It then needs to logout and move the transfered files to a third directory. 3) The 3rd script needs to delete all files in the third directory that are over 15 days old on the 1st and 15th of each month. The first two scripts need to run on a timer and in sequential order on a daily basis. That's it. If you are interested, let me know and I will fill you in on specific details. Also include a proposed charge for the programming. Thanks.

1 0

"Only on the Cypherpunks list..."
by tcmay＠sensemedia.net 17 Dec '03

17 Dec '03

At 10:00 PM 7/25/95, Nathaniel Borenstein wrote: >Well, only on the cypherpunks list would you be likely to find general >agreement that PGP'ed credit card numbers are "easier" than First >Virtual. Many thousands of extremely naive net citizens are now happy >FV customers, and I seriously doubt that most of them could master PGP >without a full-day tutorial. (We're not talking about rocket scientists >here, folks.) A lot of truth here...sometimes the perfect is the enemy of the good. After all, only on the Cypherpunks list would you be likely to find general agreement that setting up a separate Intel box running Linux so one can create a suitable mail client is the preferred way to do secure e-mail? (Smileys for the :=)-impaired...I have nothing against Linux, and even browsed the new O'Reilly book recently. But I'm _still_ glad I'm "just a Mac user.") I have no idea what First Virtual's current or future business plans are, but I do expect more solid encryption, a la PGP or "real" RSA (licensed), will be coming soon. I assume FV is planning for this likely development. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)sensemedia.net | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

4 5

cypherpunks-lite
by sameer 17 Dec '03

17 Dec '03

Does anyone have eric blossom's email address? I'd like to sub to his cpunks-lite. Thanks, -- sameer Voice: 510-601-9777 Network Administrator Pager: 510-321-1014 Community ConneXion: The NEXUS-Berkeley Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer(a)c2.org

1 0

Re: S/MIME and the Future of Netscape
by hal9001＠panix.com 17 Dec '03

17 Dec '03

At 11:27 7/24/95, Timothy C. May wrote: >At 12:54 PM 7/23/95, Bob Snyder wrote: >>tcmay(a)sensemedia.net said: >>> With regard to SSL and Netscape not being open to outside developers, >>> several leading e-mail outfits, including Qualcomm, Netscape, >>> Frontier, etc., are working on an interoperable secure e-mail >>> standard called "Secure/MIME," or "S/MIME." >> >>Do you have sources for this information? MOSS is out there at least as a >>Internet Draft, and possibly further along, and Steve Dorner of Qualcomm, the >>original author of Eudora, is pretty active in the MIME community and I doubt >>he would support a second MIME type to do the same thing... > >Some of you have expressed skepticism about the mention of "S/MIME." [snip] All MOSS does is designate the MIME Headers/etc to support Encrypting and/or Signing MIME Parts. It says nothing as to how you do the Encoding or create Signature - only how to package the two parts into a MIME format once you have them. Thus S/MIME is/could-be an implementation of MOSS (as would be a MUA that used the MOSS formats to package a PGP signature or Encrypted Message). For those who want to read the docs, just send this message: >To: mailserv(a)ds.internic.net >From: YOUR-ADDRESS-GOES-HERE > >ENCODING mime >FILE /internet-drafts/draft-ietf-pem-mime-08.txt >FILE /internet-drafts/draft-ietf-pem-sigenc-03.txt

1 0

Re: Banks on the Net (Was: Re: Questions about Conferences)
by Joel Hames 17 Dec '03

17 Dec '03

In my previous post, I asked about the security of First Security National Bank, which doesn't exist. Enzo is right, I was wondering if anyone had information on the security of Security First National Bank (www.sfnb.com) Thanks Joel Hames jhames(a)deltanet.com

1 0