December 2003 - cypherpunks-legacy

With my deepest regards....
by admin＠veracruz.net 17 Dec '03

17 Dec '03

I am withdrawing from this list. Not because of the volume of email...that I can deal with...but what I cannot deal with is the volume of garbage and egotistical ranting that seems so prevalent in what should for all sakes and purposes be a discussion of cyphering and security. Apparently the name of this list is designed to mislead...because of all the posts, a grand total of 5% proved worth reading at all. Thank you and good day. --- Adam Breaux admin(a)veracruz.net http://www.veracruz.net {Corporate Page } http://www.abyss.com {Extracurricular} http://www.iso-america.com {In Search Of...} "Violence is a cruel world doing what it does best...break the habit...BE NICE" --- me.

3 2

Random ITAR violations
by Blake Coverett 17 Dec '03

17 Dec '03

I was looking through the current rfc index for something else a few minutes ago when I noticed rfc2040 from the end of October. Machine readable C code for several modes of RC5.

1 0

VIB
by roland＠internetfleamarket.com 17 Dec '03

17 Dec '03

Fuck_God_Up_The_Ass, This is a VIB (Very Important Bookmark)! The Internet Fleamarket is available now to all Internet users locally, nationwide and worldwide. Sell what you don't need, offer your service and reach out to all. Or just visit us! http://internetfleamarket.com . Happy New Year!

1 0

cypherpunks suggestion
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

John -- Just got back after vacation... It is my understanding that cpunks list has been attacked by several clever tricks. I have a couple of suggestions on how to improve protection of this list: # Use the following recipe in .procmailrc for cypherpunks (or majordomo) # account: :0 * ^TOcypherpunks * !^X-Loop: * !^FROM_MAILER * !^FROM_DAEMON * !^X-Mailing-List: { # get rid of duplicates :0 Wh: msgid.lock | formail -D 65524 msgid.cache # add X-Loop:, etc :0 fhw | formail -I "X-Loop: cypherpunks(a)toad.com" \ -I "X-Mailing-List: cypherpunks(a)toad.com" \ -I "Precedence: list" \ -I "Errors-To: cypherpunks-errors(a)toad.com" # this recipe finally passes the submission to majordomo :0 | majordomo .... } The rest is not really anything for cypherpunks, and should go to /dev/null. - Igor.

1 0

Do you need the MOST powerful way to advertise?
by starr＠lakes.ring.com 17 Dec '03

17 Dec '03

cypherpunks(a)toad.com, Hi, saw you posting online and was wondering if you market products/services using your computer and would like to learn how to do so QUITE a bit better than what you are already doing?<g> If so, just say the words (words=MORE ORDERS) and I'll email a free, helpful file that could mean the online marketing difference between scintillating success and frustrating failure. OR! to get this profitable information free RIGHT NOW! INSTANTLY! send an email to star-conniestarr-netcontact(a)nicers.com (just put this in the to: field) and a free, complete information package will be emailed to you automatically in less than ONE MINUTE! ACT NOW! Sincerely, Connie Starr ps: don't forget the address to send for free information has one r in the first star and two r's in the second starr <g>

1 0

DCSB: Applying PGP To Digital Commerce
by Robert Hettinga 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston Presents Rodney Thayer Sable Technology Corporation "Applying PGP To Digital Commerce" Tuesday, January 7, 1997 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Rodney Thayer has 20 years experience in the software development business. For the past 10 years he has been designing, implementing, deploying, and troubleshooting networking software. He currently is the Principal of a consulting firm based in Newton, Massachusetts where he is involved in the implementation of communications products for a variety of customers, including software vendors, major end-user organizations, and several governmental organizations both foreign and domestic. He also writes and lectures on the deployment, troubleshooting, and implementation of data communications networks. Mr. Thayer will talk about how PGP can be used in the business world today, for exchange of information, digitally identifying documents, and other commerce applications. In this presentation, we will discuss the application of PGP, including mechanics, the cryptographic and legal issues, and the infrastructure requirements for it's use. The state of the art in digital message encryption is now at the point where it has become practical to use encrypted and digitally signed email for digital commerce. Recently, one scheme, PGP, has emerged from the realm of the cyberpunk as a legitimate tool for business. Commercial products are now available that support PGP encryption in electronic mail and for documents and digital storage. PGP is no longer a cult tool for computer junkies and cyberpunks. It is a legitimate, sound cryptographic technology that can be used, today, for digital commerce. As an increasingly crypto-aware business community searches for solutions, the question of how to use message encryption tools such as PGP becomes germaine to the business community. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, January 7, 1997 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have dress code: jackets and ties for men, and "appropriate business attire" for women. We will attempt to record this meeting and put it on the web in RealAudio format at some future date We need to receive a company check, or money order, (or, if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, January 4, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Planned speakers for DCSB are: February David Kaufman 1996 in Review / Predictions for 1997 March TBA April Stewart Baker Encryption Policy and Digital Commerce We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, rah(a)shipwright.com . For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: SafeMail 1.0b6 e32 iQCVAwUBMsb+IvgyLN8bw6ZVAQEhRgP/b5Q5u83gIUAqJYPHp6J/BxKUrFjy/fYH J4EqvEvjKrdWE0jcwE34ISf+qUmBS+rZZRYVMsQ8jiVa/uF8TwNNTEEe5kMUPpne UtKvuJOEosFURwGfR4OLoYu1NsqPNuzAD40dwfQDQGVcmTqNlivhikZByE4MTNVz bUlII450N/8= =IS1x -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Cryptanalysis Trainer
by John Young 17 Dec '03

17 Dec '03

We've transcribed from PDF to ASCII the cryptanalysis program in Appendix F of the US Army's Field Manual FM 34-40-2, Basic Cryptanalysis, September, 1990. http://jya.com/appf.htm Manual quote: "This program gives the capability to encipher and decipher messages in monoalphabetic and polyalphabetic substitution systems, produce a variety of statistical data about the encrypted messages, and print the results or save them to disk. Because of its limited purpose, the program does not support on-screen analysis. The printed results can be used off-line to aid in analysis, however. The program should be particularly useful in preparing examples and exercises for training cryptanalytic techniques."

1 0

lambda 2.13 - Parental control abuses and Crypto leaks
by jt＠freenix.fr 17 Dec '03

17 Dec '03

lambda 2.13 contents ... * Parental control abuses * Crypto Soap Opera : new leaked documents in France and at the OECD * Short-circuits : - U2's hacked: Big Lie in Cyberspace - Serbia's fight for democracy reach digital age - Radikal censorship (sorry for langage mistakes, the text has not been reviewed by an English third party) * * * * * Peacefire vs Cybersitter Parental control abuses * * * * * An insider quarrel between blocking-software CyberSitter and one of the Web site blocked has emerged recently. A US youth association against Net censorship, Peacefire (wwww.peacefire.org) claimed on December 7 : "Sometime today or yesterday, CYBERsitter put www.Peacefire.org on its list of blocked sites. Next time users of the program update their "filter file", they will see our web page blocked along with Playboy.com, Penthouse.com etc. (not to mention NOW.org, Members.GNN.com, and C2.org) Apparently, the company president read our page about CYBERsitter at: http://www.peacefire.org/censorware/CYBERsitter.html and didn't like it." Solid Oak Software (www.solidoak.com) owner of the blocking program, claims Peacefire put online some advices or tips to abort CyberSitter efficiency for teenagers; claimed one time of "copyright infringements"; and decided to urge Peacefire's IAP to block its account. Remember that these softwares were designed to allow parents to control their child's access to the Internet. "Parental control", as it is called, was suppose to give ways for parents to self-censor Internet content. But when people trust the technology and give too much faith to black-listed sites maintained by other individuals' moral standards, parents don't really keep on their "parental control" anymore. They even fail to tackle their own responsability towards their childs. On December 27 the CPSR (www.cpsr.org) wrote a protest letter to Solid Oak. Abstracts: "Your own description of your product provides a fairly concise description of CYBERSitter's restrictions: "any site that focuses on topics such as adult or issues, illegal activities, bigotry, racism, drugs or pornography". Using this list", the CPSR went on, "any determined individuals with web browsers might easily build a profile of sites that are blocked by CYBERSitter. Several members of our group dowloaded your demo, and quickly verified that your software completely or partially blocks access to sites such as the National Organization of Women (http://www.now.org) and the Yahoo search engine (http://www.yahoo.com) Since CYBERSitter's behavior can be easily categorized, Peacefire's publishing of a list of blocked sites does not justify blocking Peacefire's site, or any similar unsavory activities. ... By blocking sites that focus on topics such as [sex] and drug use, SolidOak may filter potentially educational materials regarding AIDS and drug abuse prevention." As Haselton wrote later, "Most letters to the president, Brian Milburn, at bmilburn(a)solidoak.com, or to their support staff at support(a)solidoak.com, are now being bounced with the message, "this account has been configured to reject all messages on this topic..." i would guess that their mail software at those accounts is rejecting all messages with the word "Peacefire" in the subject line, so remember to leave it out if you decide to write to them about this. (And thanks for your support if you do!)" P.S.- The European Commission has submitted draft guidelines to member States concerning the Internet's content regulations. They were quite reserved about the real efficacy of content control specifications like PICS, but nonetheless approved it: http://www.echo.lu/best_use/best_use.html * * * * * French Crypto Sop Opera : other leaked documents * * * * * If you're an encryption addict and fluent in French, jump to the document published by Planete Internet magazine : http://www.planete-internet.com/crypto/decret It is a draft decree prepared by the SCSSI, the security agency, which draws a preliminary picture of future French "trusted third party" agencies (TTPs), or "key recovery agents". A brief summary of what the French electronic notary will look like: The government - The SCSSI * Will say which encryption product will be concerned; all crypto systems will be OK if a key recovery scheme is scheduled; (PGP and the like are not on the list of "approved" products); * Will decide which firm is OK to become a TTP; but no justification will be needed for negative requests; The TTP, "le notaire" * All commercial firms or entities (SA, SARL, consortiums...) will be concerned; * But all its members, CEOs or associates must be "French": like the majority of its finantial assets; * Will be submitted to "professionnal secret" and obliged to keep third party encryption keys away from illegal wiretapping activities; The (commercial) user * Will be obliged to use authorised encryption products; * Will engage itself to fully cooperate with the TTP; The (basic) user * Even if the sheme will not be mandatory, using encryption without the backing of a TTP will be considered illegal; * Huge finantial and logistical procedures will discourage NGO's, small companies and the citizen to protect legally its electronic communications. The new and fully complete policy is scheduled in France in the comming weeks. * * * * * PS - Leaked document from the OECD's crypto hearings Australians cryptographers at http://www.ozemail.com.au/~firstpr/crypto/oecd_dr2.htm published the draft paper that were on the agenda of the Dec. 16-20 closed-door meeting in Paris, revealing the broad and detailed policy toward an international cooperation for "lawfull access" to encrypted communications. * * * Short-circuits * * * U2 hacked? Big Lie in Cyberspace --------------- You surely read numerous stories about the U2 rock band that were "robbed" in Cyberspace by hackers that traveled through cables of a digital camera that broadcasted on the Internet views of their Dublin studio. Hackers put 2 new songs online from a site in Hungary, the story went on. Strange hacking, hey??! The story, which broke in the London's Sunday Times on November 17 (follomed by a naive Le Monde in Paris) was just dope -- a fake, phoney and bull story. Read, for example, what a fan from the Nederland says -> www.universal.nl/users/mirrorbal/u2.htm Number 1 : he told the real story to the Times which didn't even publish a word of it. What's the story? A videotape with 45 sec abstracts from both songs were released by Island Records-Hungary in November (it was the scheduled date for U2's upcomming album, but now scheduled in March!). And a guy simply put a microphone besides his TV and put the digital stuff online. Where's the hack? The Hungarian explains also the story, but didn't erase the songs from his server: w3.datanet.hu/~karpati/ Serbia's fight for democracy reach digital age --------------- Read David S. Bennahum's last MEME bulletin about Serbia's democratric fight: http://www.reach.com/matrix/. Bennahum spent one week in Belgrade and met democrats willign to create cyber-rights organisations like the EPIC or the CDT. Follow their fight daily on the Internet : http://eurasianews.com/erc/serbopp1.htm Radikal censorship --------------- A magazine banned in Germany, the leftist Radikal, available online in the Nederlands, was the target of German policemen on Dec. 11. After failing to urge Nederlands authorities to block the Web site last September, German police decided to act as usually, with the help of their Dutch counterpart and raided a house in Vaals. It turns out that they acted to block Radikal at the source : its paper version. Read the news on: http://www.xs4all.nl/~tank/radikal http://www.xs4all.nl/~felipe/germany.html * * * * lambda 2.13 - www.freenix.fr/netizen * * * * Jerome Thorel =-= Journaliste / Reporter =-= Paris, France lambda bulletin =-= Planete Internet Editor

1 0

PROTECT YOUR FAMILY
by IQ Mailer 17 Dec '03

17 Dec '03

*+*+ This message is provided under the strict C.A.R.E. Code of Ethics. (Conscientious Advertising through Responsible E-mail). You can view the code at: iq-internet.com/care.html PROTECT YOUR FAMILY My LIFECARD does exactly that. You or any member of your famil will have instant worldwide access to a wide range of potentially life saving medical and personal information in case of an emergency. SAFETY SECURITY PEACE OF MIND MYLIFECARD was the first TRUE medical emergency information card and is STILL the state of the art. You spend THOUSANDS of dollars a year to protect your family's health. You owe it to your family to spend a few pennies a day for MYLIFECARD. DON'T DELAY!!!!! FOR MORE INFORMATION: Type in the word INFORMATION in the body of your message and hit reply. *+*+ To REMOVE your name from our list *+*+ reply with NO MAIL in the subject line.

1 0

Re: Internal Passports
by drose＠AZStarNet.com 17 Dec '03

17 Dec '03

Bob Hettinga wrote: >At 6:20 pm -0500 12/29/96, Timothy C. May wrote: >>What I think this means is a move toward a national ID card, replacing the >>confusing (to airlines, to government agents, etc.) mishmash of state >>driver's licenses, student ID cards, etc. > >"I've found that they issue a national ID card, it's time to leave..." > Lazarus Long, "Time Enough For Love", by Robert A. Heinlein "After Austria and Germany, Switzerland is my favourite country. I have spent the past 40 winters and 10 summers there. I love the place because it's clean, beautiful, very conservative and its people mind their own business." Taki, in today's _Sunday Times_(London).

2 1