December 2003 - cypherpunks-legacy

No Subject
by backdraft＠earthlink.net 17 Dec '03

17 Dec '03

desubscribe

1 0

Igor Chudov's cypherpunks felony admission turned over to the appropriate authorities
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Yo C'punks, check this out: >Path: ...!newsfeed.internetmci.com!news.sgi.com!enews.sgi.com!news.mathworks.com!news.sprintlink.net!news-peer.sprintlink.net!arclight.uoregon.edu!netnews.worldnet.att.net!uunet!news-in2.uu.net!news1.gte.net!usenet >From: netscum(a)gte.net >Newsgroups: news.admin.net-abuse.misc,soc.culture.russian >Subject: Chudov's published felony admission turned over to Commerce >Date: Fri, 27 Sep 1996 03:16:06 GMT >Organization: GTE Intelligent Network Services, GTE INS >Sender: netscum(a)gte.net >Distribution: Worldwide Net Scum >Message-ID: <324b43fa.476946222(a)news.gte.net> >Reply-To: yourself(a)netscum.org > >Igor Chudov's published admission of his willful and purposeful violation >of ITAR laws (a criminal felony offense according the United States Code) >has been turned over to the appropriate investigators at the Department of >Commerce in Washington, D.C., who expressed interest in this incident, >particularly because of the additional contributing factor of Chudov's visa >status being under active investigation by the Department of Justice, >Immigration and Naturalization Service. Chudov's very bad example serves >notice on the many netscum reading this article that "crime does not pay." Also check out NetScum's home page at http://home1.gte.net/netscum.

1 0

[NOT NOISE] Jena Remailer
by mixmaster＠remail.obscura.com 17 Dec '03

17 Dec '03

wmono(a)Direct.CA wrote to All: w> My appologies in advance to the list for this noise. Dear Anonymous, w> if there is another way to contact you, please let it be known so that w> this need not involve the 1500 others on the list. Noise? Are you on drugs? This is one of the relatively few _on-topic_ threads on this damned list these days! If 1500 other folks can be made to give a try to the Jenaer Remailer then this thread has served a very useful and salutary purpose. >> 4: Account is automatically established and should work >> immediately. w> As soon as the mail arrives, that is correct. If it was lost by using w> a non-operational remailer, or by sending a misformatted mail, then it w> will not. I believe this was the problem; several of the remailers were choking right when I was doing this experiment. Indeed, I had to post my reply to you here FOUR times through otherwise reliable remailers before it ever showed up. w> It may be lag, it may not be. I recommend that you create a test nym, w> with minimal anonymity (no remailers, send everything directly to w> jena) and, after waiting several hours to ensure that the key was w> added, send a mail from your nym to your own account. If you get no w> mail after several hours, something is wrong. This is mechanically a sound suggestion, but I believe that it is a primary security measure to avoid any direct contact with fresh remailer, even using a waste account. >> w> - Never request a delivery to your real Email address. >> So here's what I really want to know: When/if the new account is up >> and running, how _does_ one discreetly retrieve his mail? I don't >> see how, other than to have it sent to alt.anonymous.messages via a >> mail2news netmail address such as >> alt.anonymous.messages(a)news.demon.co.uk and then pick through the >> mess there until some cyphertext message responds to his right key. w> That's exactly right. We need better message pools. Actually, what w> is needed is a email message pool, because of the lag and uncertainly w> of Usenet. But that's a project for another day. >From a security standpoint, to say nothing of the netmail load, I should prefer not to use an e-mail pool, but the daunting load of spam and clueless messages in a.a.m is a nuisance, and you are surely right about the vagaries of Usenet connectivity. My first thought was to have them sent to a non-autopinging *.test ng via a well-tested parsing mail2news gate, but some autopingers ping ALL *.test traffic passing through a site. If these ping messages didn't get automatically bitbucketed at the remailer site, this could be a problem for the operator. Anyway, let's see what happens with today's tests...

1 0

Crypto and six yr old sex perverts: Project Electric Potatoes [CRYPTO]
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

Using crypto may be required to keep ya outta jail, given the guberment has gone so far low as to "route out this six year old sex pervert busy kissing the girls." (Quoted for emphasis.) I wonder when sexual harassment will become a sex offence. Are the red sashed sex cores of Orwell's 1984 around the corner? I wonder if he will need to register with the sheriffs office in any towns he moves into as a sex offender - or has that law not passed yet? Soon I believe our communications will be turned against us - as I am sure I will hear about this one in the future.... Crypto can help us from the all intrusive guberment - it is far to big. Hence a new project for us all: Multicast Crypto referred to as Electric Potatoes as mashed up potatoes are hard to put back together. Purpose: Already we are seeing problems for speech on the internet (see radikal postings - though they are a bit fruity IMHO.) And it sounds like the law in one country is going to be very interested in arresting people in another. Hence, perhaps we need a crypto system (including human procedures and fail safes) for community discussions. Crypto is very much one to one right now, but can we implement a crypto for wide distribution to a very defined set of people? This should be useful in commerce too... like CC of mail to others, etc. Problem Definition Time: Who will be responsible for allowing a member into the community? (And all the other trust issues...) The software to implement the community must be available on multiple platforms like UNIX, Windoze, Macintosh, NeXT, etc. How do we over come the problems of storage - should the messages remain encyphered at all times in local storage of a member in case of a knock on the door, requiring the user to use the software to read, write, store, and organize messages. Is it even possible to overcome the human turncoat factor? Can we protect them as well as us from coercian, black mail, seizure, or defection? Is this even possible, because we are looking for the freedom to speak, yet nobody will be able to hear us!!! ********** Method of discussion: Since we will all hopefully have many ideas and comments on this exercise,may I provide a protocal: Please have Project Electric Potatoes in the subject heading - some of us use the delete key quite freely and don't want to accidently remove your valued comments and ideas. Should the message contain a problem definition, please have Problem in the subject. Should the message contain an answer please have Answer in the subject. Should the message contain a rant, please have Rant in the subject. I leave it to the writer to include [CRYPTO] in the header.... Thank You All, and I hope we get a great discussion going on here.

3 2

Re: Mousepad RNG's?
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: jamesd(a)echeque.com, cypherpunks(a)toad.com Date: Sat Sep 28 20:04:39 1996 > Netscape was broken through weakness in the source of > truly random numbers. No, it wasn't. Netscape was broken because their random numbers (really pseudorandom) were chosen from very poor sources (on Unix boxes, pid and ppid, maybe even the system clock :) dave - ----- David E. Smith, P O Box 324, Cape Girardeau MO USA 63702 dsmith(a)prairienet.org http://www.prairienet.org/~dsmith send mail with subject of "send pgp-key" for my PGP public key "Madness takes its toll . . . please have exact change ready." -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMk3LMTVTwUKWHSsJAQEWbQf9H2+cssRqpNLBa2HTL7cDPbE8dOQaWN5Q MicZPXU8ynZ4T1cw8YWHkJKsyHBR7JmAnor8dMkweAqGqu7OlGUZUTsBCoylUxjk onpCFDfHBZk+87Kdcy4JIBeuWQZjsHelk38zS4wlmcDRjeS+yXCd86UhL1jK34Z2 PTrs9Xz2LMLuyIxLwLmVZofcgtXkbWnYS0wJ8QoEjgLLMS5SsMT5g11dPMARxHYY J2XApz2fb1+CTErhaMx657+UK1ToYnbnU8ehpBSAHlOPqTIsYUOryjkAL6R+bgTo MG/ZMKCuSOvvgASPBM00fcc0SUQqxICCNz7KX+GjgHvoNCuUy1IMmA== =vgpk -----END PGP SIGNATURE-----

1 0

Making Remailers Widespread
by Bill Stewart 17 Dec '03

17 Dec '03

I've been thinking about how to make one-way remailers a widespread commodity, rather than the novelty item they are today. Doing two-way remailers would be better, but that's still a hard problem, and I don't want to widely deploy shoddy two-way-remailers. Suppose we add form-based remailer support to a popular SSL-equipped HTTP server, such as Apache-SSL, by putting remailer.pl and a remailer form in the default setup, which would deploy hundreds of remailers with minimal effort. What would we have to do to make it work well, rather than turn into a public relations disaster and spam explosion? - The remailer script would have to add disclaimers at the beginning and/or end of the message reminding readers that the message is anonymous, and to contact the remailer cabal rather than the postmaster. - Blocking becomes a big problem - it's annoying enough now, when there are a small number of remailers with hard-working operators; we'd need some sort of automated blocking support to make it usable by relatively non-involved operators - A centralized block list (e.g. http://www.remailer.net/block.txt) which all of the form-based remailers could load and reference would allow non-picky operators not to have to handle it themselves - Implementing the blocking list as a web form for people who want to be blocked would make it relatively painless to use; remailer-operators wouldn't have to transcribe email from the remailer-operators list to use it, which helps with other problems. - Of course, once anybody can fill out their name and ask to be blocked, it's possible for spoofers to block people who don't want to be. One approach for preventing this is to implement a three-way handshake - user fills out form, form mails back blocking notice with cookie, user returns cookie to complete blocking - this is a bit messier for mailing lists, but we can ignore... - special-case for "postmaster", who may want to block all of foo.domain instead of just postmaster(a)foo.domain - special-special-case for postmasters of big sites, e.g. aol, netcom, who we may want to ignore? - A sender-blocking list is harder, and may still take human attention - remailer chaining - allow user to put in another Apache-remailer site so we don't have to limit the chaining to known short list of sites. The remailer.pl can send an https foo.bar.com remailer.pl PUT - The remailer form can probably just have field for second site, if empty don't use. I suppose remailer.pl could also automagically add that in when it posts. Technical question: - How do we initiate an http or https PUT from a script? I assume there's probably some perl add-in for posting http/https? Is there a command-line-shell interface that can fetch URLs? # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # You can get PGP software outside the US at ftp.ox.ac.uk/pub/crypto

4 3

Re: Public Schools
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Fri, 27 Sep 1996 22:36:57 -0800, Timothy C. May wrote: >> a very unusual situation --but I live in rural southern utah >> where the regional middle school of 1200 can support 4 bands, the >> top 2 being very impressive, and provide full AP classes, and ACT >Wow! Utah is teaching AP? Is Jim Bell being brought in as a Special Lecturer? >(I knew Idaho has special Militia classes, but to hear that Utah is now >teaching Assassination Politics is pretty impressive.) Now, ignoring the humorous parts, wouldn't that be a scary thought? Pro-AP high school students? I could just imagine the death toll rising as the "popular" students are knocked off by jealous rivals, as the dumped [boy/girl]friend gets even, etc. It'd be hard for any non-homeschooled student to live to 18. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

2 1

sophie germain primes
by Serge E. Hallyn 17 Dec '03

17 Dec '03

Could anyone direct me to an online list of small (less than 800-digit) Sophie Germain primes? (actually any list would do) many thanks, -serge hallyn(a)cs.wm.edu

1 0

Re: Public Schools
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Fri, 27 Sep 1996 09:22:05 -0400, ronsimpson wrote: >I hate to burst any bubbles but, the school with the highest number of >National Merit Finalists and highest number of 1600 SATs is a Public >High School (Jefferson High in Fairfax, VA) This probably just means that they have a good SAT cram course. Ditto for the NMS. I've run into people who've done well on the SATs and have been rather underwhelmed. In my opinion it's like MIPS: Meaningless Indicator # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0

[AP] Afghanistan
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Afghanis publicly hanged their former president, Najibullah [no last name]. Other countries should follow their example. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1