December 2003 - cypherpunks-legacy

NYT login
by David Lesher 17 Dec '03

17 Dec '03

At one point, some kind souls were entering "username: cypherpunks" logins for all the various "free" www sites. Did anyone catch the www.nytimes.com one? If so, what password? -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

2 1

Re: Win a free Apache-SSL-US Commercial license
by Steve Gibbons 17 Dec '03

17 Dec '03

In Article: <Pine.SOL.3.91.960301204634.8380C-100000@chivalry>, Simon Spero <ses(a)tipper.oit.unc.edu> wrote: # On Fri, 1 Mar 1996 sameer(a)atropos.c2.org wrote: # > See http://apachessl.c2.org/ for more details. # Not quite an entry, but am I the only one to pronounce SSL "Cecil" # (SEcure Socket layer), to go along with SHTTP as "Shit-p" (nil)? # Cecil The C2 Web server? The word that always springs to my mind is "sessile." (Granted, I'm a pessimist, at heart... ;) -- Steve(a)AZTech.Net

1 0

Re: PGP PRNG seeds?
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jean-Francois Avon (JFA Technologies, QC, Canada) wrote: > I tinkered with the switch > pgp +makerandom=size output.fil > > Is there a way to "seed" the PRNG with another file, say , part of an > encrypted text file? Copy the first 408 bytes of that file to the randseed.bin file in your pgp directory. (I'd save the original randseed.bin file or use a good RNG to generate a new one when you're done). - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTf8qyoZzwIn1bdtAQHrZQF/dM8RgYDEB+pTSmdy9HSIi38YKy9LG9FE yBZtka9z28A2UyVvi37ijP8DrcOYg4zI =duUA -----END PGP SIGNATURE-----

1 0

Re: Anonymous Web Browsing
by Mark Grant, M.A. (Oxon) 17 Dec '03

17 Dec '03

On Fri, 1 Mar 1996, Timothy C. May wrote: > These are "web proxies," and searching on this should produce some > information to answer your questions. There's a problem with that. I've noticed several pages recently with hidden mailto: links that aren't marked as such. So you can be happily browsing away through a web proxy only to click on a link and have your real id mailed to the site's owners. As people have mentioned, this is even worse with Javascript. Note to Netscape people: Is it possible to have an option that will *always* pop up a mail window and request confirmation before mail is sent out? Or disable mailto altogether? It would be a lot easier than binary editing the executable to remove all the mailto strings... Or does it exist? I can't find it. Mark

1 0

Re: Problems with certificates.
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 08:35 AM 3/1/96 -0500, A. Padgett Peterson P.E. Information Security wrote: >Today, each person generates their own PGP key. While it is unlikely that >any two will match, it is likely that at some point some two will match >(see matching birthdays in a bar - number is less than you would think). If if we colonized every planet in the galaxy, and every planet had a trillion people, and every single person on every planet generated a billion keys a second for a billion billion years, not one pair would match, assuming they were generated from truly random seeds. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

New PRNG method!
by Olcay Cirit 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello, All! I was just thinking about how to generate random numbers, when I hit upon an interesting idea: If the internet is so huge and complex, why not, say, use the least significant bits of ping times from random internet hosts as seeds for a PRNG? (Practical Random Number Gen.) You could then break the resulting binary value into 128-bit blocks and modulus/xor each with a stream of random numbers taken from a keyboard timing. After all this, you could wash it with a secure symmetric cryptosystem such as idea in CBC mode. Any thoughts, comments? -olcay - -- "For he who lives more lives than one, |) Olcay Cirit -- olcay(a)libtech.com more deaths than one must die" (| http://www.libtech.com/olo2.html - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTh9pCoZzwIn1bdtAQGuDAGA1QM1KyGQ2i6n9LLF00HrVn7OvBftesA9 +Jsu4W3yZothdL1pFQLt2v5l9mjgTspW =2x/g -----END PGP SIGNATURE-----

3 2

Re: Anonymous Web Browsing
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:24 AM 3/2/96, dwhite(a)pris.bc.ca wrote: > Hi guys..... I'm new here and I don't have the same technical >expertise as I am witnessing with most of the other posters here. > My question is this: Would it be possible to create a web site that >would function along the same lines as remailers do? Something that would >allow a person to browse anonymously. So lets say I surfed into a These are "web proxies," and searching on this should produce some information to answer your questions. Most of us, I think, are not using them. Your intuitions are correct, that protection steps are needed. The technology is developing, but the perceived need (anonymous browsing) is probably less than the perceived need for anonymous e-mail. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Cryptanalysis
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:44 AM 3/2/96, Alan Olsen wrote: >My mistake... The publication I was thinking of was "the Journal of >Cryptology". They reference Springer-Verlag New York Inc. as the source for >back issues, but there is no listing on the linked web page for that journal >and the search engine returns nothing for that journal. (They do have a few >other things of interest however...) One gets the "Journal of Cryptology" automatically by attending the Crypto Conference (at least this was so in the past). I can't see that it carries much that the "Crypto" and "Eurocrypt" Proceedings carry (though Chaum's "Dining Cryptographers" paper was in Volume I, Number 1, circa 1988-89). "Cryptologia" is a much different thing. Neither is necessary for the disposing of snake oil products, however. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Cryptanalysis
by Alan Olsen 17 Dec '03

17 Dec '03

At 11:11 PM 3/1/96 -0800, Timothy C. May wrote: >At 6:52 AM 3/2/96, Alan Olsen wrote: > >>The author has failed to call me back. I do have some serious concerns >>about the code. (There is not a single XOR used, except to clear >>registers!) I am starting to suspect that it is based on a mathematical >>progression based on the numbers 40, 28, 36. I need to spend a bit of time > ^^^^^^^^^^ >Ah, note that the magic key, 42, is not included. Coincidence, or stupidity? Actually it is an obscure reference to a movie called "Our Man Flint". It was the basis of the code used in the movie. >Alan, there is not enough time in the universe to waste it on those who >will not learn even the basics. The "author," who I had understood to be a >friend of yours (though apparently a more distant relationship is >involved), is apparently developing something John Dee would have been >proud of. He is more aquaintence than friend... Someone who is a close friend asked me to get involved. As for the other reasons for asking for the references, it is more a matter of personal curiosity. I expect his project to fail anyways for reasons i have already stated... --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "I, Caligula Clinton... In the name of the Senate and the people of Rome!" - Bill Clinton signing the CDA with the First Amendment bent over.

1 0

Re: Cryptanalysis
by Alan Olsen 17 Dec '03

17 Dec '03

At 11:11 PM 3/1/96 -0800, Timothy C. May wrote: >>>* The journal "Cryptologia" is largely devoted to amateur cryptanalysis. >> >>The web info for back issues listed a web page from a publisher that had no >>listing for them on the server. I will be sending mail to get more info... > >Last I checked, Tony Patti was still the editor. Not all things are on the >Web in serious ways, obviously. I had no problems finding copies in my >local university library (UC Santa Cruz), but it was several years ago that >I last checked (conventional cryptanalysis not being very germane and all). >Reed College might have copies. My mistake... The publication I was thinking of was "the Journal of Cryptology". They reference Springer-Verlag New York Inc. as the source for back issues, but there is no listing on the linked web page for that journal and the search engine returns nothing for that journal. (They do have a few other things of interest however...) The time spent was not a loss... I found a number of interesting things on the web and recieved a number of pointers to books I was not aware of and are not listed in any of the FAQs. The best site I found was at: http://mnementh.cs.adfa.oz.au/htbin/bib_lpb It is for Lawries Cryptography Bibliography. It contains a search engine to a large listing of crypto articles. Worth checking out. --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "I, Caligula Clinton... In the name of the Senate and the people of Rome!" - Bill Clinton signing the CDA with the First Amendment bent over.

1 0