December 2003 - cypherpunks-legacy

Re: NO commo to "Faggot" cypherpunk list
by Stephen Boursy 17 Dec '03

17 Dec '03

George A. Stathis wrote: > > Black Unicorn wrote: > >>> Any list run by an admitted Faggot is no place >>> where I will allow an audience. That certainly is your right alough I'd personally differ. >> >>Oh, this guy is for free speech. Sure. I saw nothing to the contrary--did you? >>Freedom Knights? Try Knights of the KKK. Oh my. > I think you ought to realize by now, Mr. "Black Unicorn", that > aga (like everyone of us) has a right to his own likes and dislikes. > They may alienate some people, offend others, but I sincerily believe > that equating his "dislike of faggots" to the "KKK" is seriously > misleading. > One of Dr. Grubor's cosmic purposes in life is to bring the vermin out of the woodwork--we have yet another. Steve

2 1

Re: [NOISE] U.S. CIA employee caught spying
by trei＠process.com 17 Dec '03

17 Dec '03

Tim Scanlon <tfs(a)adsl-122.cais.com> writes: > This is on the local DC news; > Harold Nicholson age 46, a CIA employee was arrested for spying today > at Dulles airport. He allegedly has been working for the Russians > for the past 2 years. > He was caught after he failed a series of polys, and bank account > irregularities had been noticed, as well as suspcious travel. > They got him on hidden video apperently photocopying documents > that he intended to pass along. > Tim If he's found guilty, I hope that they throw the book at the traitor. He apparently was a trainer of agents, and as such was in a positiona to identify many to the Russians. I wonder how many died so he could earn his $140,000? Peter Trei trei(a)porcess.com

2 1

Re: The Utility of Privacy
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 19 Nov 96 at 6:31, Duncan Frissell wrote: > Owning gold in America in 1930 vs 1933 Hi Duncan. Do you have any documentation or historical references to the reason they gave for forbidding ownership of gold? Just curious... How about gold backed Magic Money tokens? :) Ciao jfa Jean-Francois Avon, Pierrefonds (Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

1 0

"Don't Hire Lists" of FASCIST SCUM Tim May
by George A. Stathis 17 Dec '03

17 Dec '03

At 10:18 ðì 17/11/1996 -0800, Timothy C. May <tcmay(a)got.net> wrote: (in response to a rather civilised condemnation of censorship I had written as defense of someone _else_, a person whom I don't even know)... >"Not ethical"? > >But we will do it anyway. Moreover, some of us maintain lists of "Do Not >Hire" persons. Few high tech or Silicon Valley software companies will hire >such folks. > >Congratulations, Stathis, as you are now on such a list. First of all, I question your right to have 'authority', not only for this, but for dictating to "Cypherpunks" what persons to trust or to distrust. BECAUSE you are NOT a "cypherpunk". You are a CypherScumBag-Fascist. People sent me PRIVATE letters asking how to converse in encrypted E-mail due to FEARS that people like YOU, ASSHOLE, are monitoring them. THIS is why you got me angry. I URINATE upon your Unemployability files. I got BALLS meaning I got my OWN job. And I can tear you apart in front of everybody NOW, because it took me a fucking long time NOT to need to remain SILENT in front of FASCIST ASSHOLES LIKE you. DIE, Scum! Well, my friends and I have been compiling OPEN lists of *Fascist Scum*, _undesirable_ among...parties and wild sexy holidays in Greek Islands. :-) For example in _my_ island of Kythera (birthplace of Goddess Venus) where I also have a house, often relaxing there to flee the 'rat-race' madness. (whenever I can steal some time from running my _own_ business in Athens). In any case... ************************************************************************** Congratulations, Master Tim, you've earned yourself the No[1] place in our own... _legal_ blacklist of Fascist Scum who are Undesirables in... Greek Islands. If you ever come to Greece we'll *ruin* your holidays... :-) ************************************************************************** ROTFL!!! (seriously now...) "Unemployability lists" are *illegal* in _Europe_ anyway, you know. They are specifically illegal in the "Human Rights and Protection of Private Records of Information" Acts, of the EUROPEAN PARLIAMENT... The only _legal_ 'unemployability files' in _Europe_ are those involving penal convictions, as well as _true_ records of previous employment. And if someone can _prove_ in a European court that someone else's slanderous activity ruined their prospects of employment, you go to jail, poor Tim... In Europe, freedom of opinion and style of self-expression OUTSIDE WORK, are irrelevant, actually.. Even inside a company they're relevant if and only if they damage the profits or the reputation or other company assets. (And good programmers are tolerated for being wild eccentrics, _anyway_). HOWEVER... This is *nothing*, compared to what _will_ happen in a few years time, when SUCH so-called 'UNEMPLOYABLE PERSONS FILES' are gonna be taken to Publicity and also to (European) Justice. We'll convict you to pay such a great FINE for malicious harm to individuals all over the world, that you will CRAWL inside a hole somewhere in your United States and never, ************************************************************ ever, ever, attempt to leave the shitty polluted hole of yours anymore. You will be screaming for help from the ACLU, and hiring bodyguards! :-). Of course, _Mafia-like Fascist McCarthian Scum_ like yourself laugh with 'human rights laws'... (Especially European Laws)... So, if THIS didn't scare ya, there is MORE for you AT HOME: *************************************************************************** The hordes of U.S. University Graduates, left unemployed by the year 2005 or 2010, will LITERALLY FRY YA alive, scumbag Tim, chop off your head and pin it on a lamp-post, IN YOUR OWN COUNTRY, because they'd be *very* angry with fascist scum like you, undermining their (already widespread) serious unemployment, which is likely to cause many deaths in RIOTS and TURMOIL... *************************************************************************** As for me... :-) I imagine myself waking up in my Greek island house one day, reading the NEWS: "Lynch Mob in the States torture and murder controversial holders of 'unemployability lists', blaming them for their own unemployment"; Wow! And as I sip my (100% _real_) orange juice with cheerful REAL people, in a beach-bar near my island-house, I will sigh; starting to tell my friends a story(!) about WHAT this strange news is about, and WHO was this Fascist American "Tim May", murdered by mobs of angry young American unemployed... (MY CONDOLENCES). In fact... Long before THIS day is over, poor old Tim, you will start having REAL nightmares at night: Because NOBODY can protect you, NOW, when you crawl YOUR streets at night; streets already UNSAFE, you know. And THIS lack of safety is part of your DEPLORABLE standard of living over there: NOT the money; what money BUYS! So... Don't *ever* threaten again ANY European, with your "U-lists", especially Europeans who have their OWN businesses, and who can also write _much_ better software code (in 'PROLOG' & 'Assembler') than you, dumb-old-Tim! You are ALREADY obsolete, disposable, pseudo-human NOISE; Trash from your own past, when Senator McCarthy's 'unemployability threats' sent the U.S. back to the Middle Ages. You are welcome to get BACK to those Middle Ages, if you like; So as to follow the drain-pipe-highway of OTHERS like you... >We got computers, we're tapping phone lines, I know that that ain't allowed. We got computers, we're TRANSCENDING your technology, we'll smash you one day LEGALLY (if your compatriots don't murder you ILLEGALLY, long before then)... Tim May, May you (already) "live" in an "interesting time" (Chinese Curse). ("live"?... for how long? :-) ) With *much* delight about your self-chosen TROUBLES, George Alexander Stathis (Hellenic Software Producer, and PROLOG/ASM programmer) (my web page is now being prepared with the help of a friend, who lives in Kalamata and started his OWN Web site there.

1 0

CAVE Query
by John Young 17 Dec '03

17 Dec '03

We've received by black bag a 25-page doc entitled: TR45.3, Appendix A to IS-54, Rev. B Dual-Mode Cellular System Authentication, Message Encryption, Voice Mask Generation, A-Key Verification, and Test Data February, 1992. No Source. It describes the CAVE cryptographic function in detail, and its use to generate a set of cryptovariables for the Cellular Message Encryption Algorithm (CMEA); for generation of 520 bits for the duplex voice privacy masks; and for other tasks. Each page warns that information in the document may be subject to export jurisdiction under ITAR. Does anyone know if this is already available on the Web? TIA of incarceration.

2 1

Re: Playing Cards - Caution!
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 10:57 AM 11/19/1996, Alan Bostick wrote: > Thirty-two bits of randomness in a space that is 225 bits wide leave > room for an awful lot of order. The maximum entropy after one riffle shuffle is actually about 48 bits, assuming the deck was split in half. That is, n! / k! (n-k)! = 52! / 2 * 26! ~= 4.9592 * 10^14. log_2 4.9592 * 10^14 = 48 bits. (Think of one half of the deck of k cards fitting into n possible holes. The order of each half of the deck is guaranteed, so this can be thought of as the number of ways k balls fit into n holes. What about the other half of the deck? They just fall into the empty holes.) Assume the split introduces about 4 more bits, and we get 52 bits of possible shuffles. However, in practice a riffle shuffle may be more predictable. It is possible that 32 bits of entropy are introduced with each riffle shuffle, but it is not obviously true. For a cryptographic application, the standard is higher than for almost any other. So, if it is not clear that something is the case, probably it shouldn't be used. >> A model is presented which Diaconis believes is similar to how people >> shuffle in real life. What is troubling from a cryptographic point of >> view is that there is little empirical evidence to back this up. What >> is more, Diaconis mentions that there is some variation in shufflers. >> A neat shuffler will be less random. (Side note: The Economist claims >> Diaconis can execute 8 perfect shuffles in less than a minute. This >> means the deck is returned to its original order!) > Mathematics does not rely on empirical evidence. ;-) That's true, but the application of mathematics certainly does depend on empirical evidence. I would be very surprised if Diaconis made a mistake with the math. I think the math is what primarily interests him. From his book I did not see a lot of evidence that a great deal of empirical research on card shuffling had been performed. Rather, a few mathematicians here and there appear to have tried out the model and decided that it more or less works. For the standards we should apply, those of a cryptographic application, this is not good enough. >> The study of randomness in cards looks much harder to me now. Also, >> flaws which may be exploitable for financial reasons when real money >> is on the table may have to be substantially more dramatic than the >> flaws required to exploit, for instance, an alleged one-time pad. > Do bear in mind that, unless you distill its entropy through hashing, > a randomly-ordered deck of cards is going to show a lot of seemingly > non-random properties if you try to use it as a one-time pad. Most > obviously, because each card in the deck is dealt once and only once, > there must of necessity be correlations between cards dealt early in > the deck and cards dealt later. (Card-counters at blackjack tables > make their money by exploiting these correlations.) I solved this problem in my original message on the subject. You use the order of the cards to represent your message. Then you use a fully shuffled deck to mix up the mapping of the cards to numbers. If the deck is truly randomly ordered, the scheme I proposed is a true one time pad. (If I made an error, I would like to hear about it!) Tangentially, I would be reluctant to rely on a one time pad whose key was produced by a hash function. We assume that the hash function is cryptographically secure, but if we can assume that, we might as well assume that some cryptosystem is secure. One time pads are supposed to avoid those types of assumptions. > The randomness of rolling dice is much more easy to interpret than that > of dealt cards. I agree completely. In practice, you pretty much have to have a computer to make use of the original schemes I proposed. The literature on card shuffling is quite interesting. A number of people over many years have worked on this. It looks to me like there's lots more interesting work to be done. Many readers of this list would probably find Diaconis's book interesting. There might even be a number of new attacks possible on card games. If 7 riffle shuffles does not, in fact, bring the deck to complete entropy it means that a number of combinations of cards are unlikely. Is the distribution of pokers hands perfectly even? They may not be. Solving this problem in the general case appears to be very hard. But, some progress could be made by modeling real shuffling and looking for patterns in the relationships between the cards electronically. Conceivably, poker hands are not as random as people believe. While the cards you have in your hand may be random, their relationship to other cards may not. This is like a pseudo random number generator. If you don't notice the pattern, you will believe you are looking at a random number stream, but in fact you are not. However, the entire subject is orthogonal to my goals right now. Peter Hendrickson ph(a)netcom.com

1 0

WinSock Remailer Resuming Operation
by Joey Grasty 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Y'all: I'm pleased to announce that the WinSock Remailer is resuming operation tonight at 11:00 PM EST from winsock(a)rigel.cyberpass.net. All messages to the remailer must be PGP encrypted. The public key for this remailer is: - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQBtAzKL9KEAAAEDANpSkWhtxPQXO4A/igS1TKsrHpBIgLd07sgKHmcwGsnPcI5K h2/T1rm3E8lRw5zKWd5MDs7b9Ku7+/V1SjEs2XmpiX1aJ7oN2LJvQ9OO5Z01CwUA 7LFnSfcOrGCnk0ADrQAFEbQuV2luU29jayBSZW1haWxlciA8d2luc29ja0ByaWdl bC5jeWJlcnBhc3MubmV0PokAdQMFEDKL9PjDgztlfPQWWQEBlYYC/iv5zt+v8E/N puymUHLHavlBr9XuP7XVECW3trUxSRdCqnVp1el7fHIQNaN0hw+DW9KutOuumm+u ZzwStZ94dimBYlmSedZ4t4f6DAOK0WZ6wosi/tV5IGlgCdIQA7o2W4kAdQMFEDKL 9M4OrGCnk0ADrQEBWCYDAIlhADaxwBSb2Edz9A5oqAq6YddIVSJdUwuIiN5TvKPa oRXdpkpEYRi1JOUPNy+vLCF21c9LLUYcKMxMvIJPGq6OSBy6VzCdaiOS/yBz7fsH 9I4X5IwoNnf0/Mm+di5zlA== =/UGi - -----END PGP PUBLIC KEY BLOCK----- Here's the info for the remailer-list: $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp hash cut ksub reord"; I'll be adding "post" to this list after I get a more thorough testing of the NNTP code that I added for authentication. "latent" is also pending. The remailer will run every 60 seconds from 12:00 AM to 8:00 AM every day and whenever I am online. Cyberpass automatically spools the messages when I am not connected. Those of you that want to run your own remailer may obtain a copy of the remailer from links from the WinSock Remailer Home Page at: http://www.cyberpass.net/~winsock/ Currently, the remailer runs only under Windows 3.1, but a version for Windows NT and 95 will be available shortly. Note: alt.religion.scientology and alt.clearing.technology are blocked. I'm not interested in run-ins with either supporters or detractors of the Church of Scientology. Binary and picture groups are also blocked, but only because I don't have the bandwidth to support them. I invite people who want remailers to post to these groups to download the remailer and operate it for themselves. Regards, Joey Grasty Jim Ray WinSock Remailer Operators -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMpJaEQ6sYKeTQAOtAQEhZwMAqPnQG0a6Vm4HSx111ha1VulP7ClWqRba 66v/Ff5hLssO+nWbnEKb3VQ/sJEEdQzGQk2lMGeradxQBt0YANiymGkpNR66uAGg a5rtisLAfmwJNJSGhvJtPaMd4r7HnSG3 =EN8y -----END PGP SIGNATURE-----

1 0

Re: Does John Gilmore...
by Dave Hayes 17 Dec '03

17 Dec '03

Black Unicorn writes: > Dave Hayes writes: > > > Again, you confuse free speech with free broadcast. > > Isn't broadcast a subset of speech, especially in this culture? > That which is broadcast is certainly speech. > Trying to draw some kind of "right to be broadcast" as a result is > stupidity or ignorance, or both. Then I suppose you want to control all mailing lists, USENET groups, and web pages. These are broadcasts, and of course they have no rights other than what you seem to want to give them. > Anyone has the right to, e.g., start a mailing list, or a newsletter. > No one has the right to compell ABC or FOX or John Gilmore or anyone > else to broadcast their speech. (The rarest exceptions, like equal time > rules, exist in election contexts). But what about this letter? It is cc'd to two mailing lists. I own the Freedom Knights one, John Gilmore owns the cyperpunks one. Does that mean that both of us have to approve it before it gets sent? Do we both own it? > Learn the difference. Go to law school before you argue free speech > concepts in any detail. "Laws" do not cover the net's "multicast" technology. Distinguishing communication types so as to control those who use them is not going to solve your problem. You are much better off, from a practical standpoint, learning to control what you see and hear rather than attempting to control others. One does not need a school to see this, it sits under one's nose like a milk moustache. ------ Dave Hayes - Altadena CA, USA - dave(a)jetcafe.org Freedom Knight of Usenet - http://www.jetcafe.org/~dave/usenet One only fights what one thinks is real.

2 1

Cracks Are Found In Smartcard Security (fwd)
by Z.B. 17 Dec '03

17 Dec '03

[This was on the Defcon list...apologies if it's already been posted today.] Zach Babayco zachb(a)netcom.com <-------finger for PGP public key http://www.geocities.com/SiliconValley/Park/4127 ----- If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available. ---------- Forwarded message ---------- Date: Tue, 19 Nov 1996 21:17:49 +0000 From: Simon Gardner <simon(a)access.org.uk> To: aaa-list(a)access.org.uk Cc: dc-stuff(a)dis.org Subject: Cracks Are Found In Smartcard Security Cracks Are Found In Smartcard Security Researchers have found a way to attack tough codes, says Michael McCormack. A team of Cambridge and German researchers have used ordinary hacking methods and £150 worth of electronics equipment to crack the "world's most secure computer chip", used in automated teller machines worldwide. They say their technique could be used to reprogram a wide variety of supposedly secure smartcard applications, including the Mondex "money on a card" bankcard, GSM phones, and satellite TV descramblers. Dr Ross Anderson, of Cambridge University Computer Laboratory, working with German researcher Markus Kuhn, used methods pioneered by Sky-TV hackers to crack the Dallas chip, described by the manufacturer as having "the most sophisticated security features available in any microcontroller" and used in most of Britain's cash machines. The chip decodes the information read from bankcards and authorises the bank machine to process transactions ordered by the owner. It is also used by the Mondex system to verify the amount of electronic money available to the cardholder. Anderson and Kuhn used cheap and easily built electronic equipment to send wrong instructions to the chip, observing how it encrypted bad data. By sending such errors through all parts of the encryption system, they could work out its key. "You will have to have backup security" "Once you know that, you can instruct it to put some zeros on the end of your Mondex balance, start unscrambling your satellite feed, anything you like," Anderson said. "Breaking the average smartcard can be done by anyone with a modicum of technical knowledge by the methods we have described. The expense is negligible but it is time-consuming." Their discovery could spell the end of the Mondex system, which relies entirely on the security of the smartcards for its integrity. "I don't think you will be able to have floating systems like Mondex any more, where all the information is held on the smartcards," said Anderson. "You will have to have backup security with authorisation calls and auditing, just like ordinary credit cards. The smartcards are no longer reliable on their own." John Beric, head of security at Mondex, said security was a moving target, and he was unconcerned by the findings. "I welcome Dr Anderson's work, because it's a benchmark that establishes the difficulty of breaking the system," he said. "I take some comfort that it's taken a Cambridge academic and a very bright student to do this." Beric said Mondex had a scheme for continually improving its security by transparently introducing new smartcard chips every two years. "It's not static, we're ahead of the criminal now, and we believe the technology is there to ensure that we stay ahead." Anderson said his latest research indicated that two of the world's most widely used systems for encoding sensitive financial information - the RSA and DES encryption standards used by most banks - could also be cracked easily." [The London Telegraph, 19th November 1996]

1 0

Re: Does John Gilmore...
by George A. Stathis 17 Dec '03

17 Dec '03

At 08:17 ìì 19/11/1996 -0500, Black Unicorn wrote: [snip] >Forward complaints to : European Association of Envelope Manufactures >Finger for Public Key Gutenbergstrasse 21;Postfach;CH-3001;Bern >Vote Monarchist Switzerland ^^^^^^^^^^ Monarchiste et... Cypher-punk, n'est pas? :-) Alors, pour vous Monsieur, je dis: Liberte Egalite Fraternite. Peut'etre votre... Rois trouve le medecin contre la... Decapitation. <plonk> Alors, combien d'argent vou voulais pour mon droit dans votre "mailing list", Excellence? Dit mois, Dit! Je vous... pris !!! ROTFL Vive le Rois Georges :-) P.S. All the nutcases gather here at once? No wonder they're 'unemployable'.

1 0