December 2003 - cypherpunks-legacy

Re: PGP for Windows 95
by Arunas Norvaisa 17 Dec '03

17 Dec '03

On 08:55 AM 97.06.17 +0000, Silvakow wrote (and I quoted): > >Has anyone yet checked out PGP for Windows 95? It's $50 at stores >right now. Information from pgp.com, but I want to know more before >I buy it. Is it worth it? Should I stick with PGP for DOS? And >does anyone know if those PGP public keys are compatible with DOS >PGP? What d'ya mean??? PGP 5.0 is much more (not USD 50 in any case); freeware PGP (latest version 2.6.2 for USA and 2.6.3i outside US) is working just fine in MS-Dos shell under windoze'95... If you mean specific shell (what I doubt), it's not PGP itself and you'll still will get those dos windows anyway... -- greetz... Arunas Norvaisa - little guy, The Masses Inc. <mailto:arunas@post1.com> with subject: 'send key' to get PGP key PGP for idiots page <http://www.a-vip.com/an> and a mirror site <http://www.post1.com/~arunas> Programming Department: Mistakes made while you wait.

2 1

New PGP Key
by Mike Duvos 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Just a brief note to say that I have generated a new 1024 bit PGP key for my new ISP, zipcon.net. I have signed this key with itself, and with my Netcom key. Unlike my Netcom key, whose passphrase is only typed when I am alone with my PC, the Zipcon key will be used on a multi-user Linux system for signing posts and other such things, and will not be secure against having its passphrase sniffed. Feel free to use the Zipcon key for casual commuication, but "Eyes Only" stuff should ONLY be encrypted with the Netcom key. - -- Mike Duvos $ PGP 2.6 Public Key available $ enoch(a)zipcon.com $ via Finger $ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBM6b9g8A6o0SuPU79AQGF9gP+MhGUUv6dL6T6gETgujfI61s52AFzrO8a /akS0492PdLoGLMvKbco+icnkQ6BQyJQw2lrV3G3mghQxXOBpJojW8z5mxD/eTUm QpaTO+AxiEnEQQcWb5X9PGGlJ/LLiJIo3Tc99DJhTIYgSTIkgNtYD7IgvAhziMwr jMHQjq9R/j8= =3UMb -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzOm9YkAAAEEANXQ12uCbPMlbON1kwbHfaLZ79MaSQCmB1AJ399gmt6LhYR5 aWtbeuRzDw1m5lF0hDveWDga1WG9PY7WQ0nq/W+Ww9SrrTPCI055rUW5RcAeKUNS Y6udUoCojMRT5bHMi/7CUm3OYtCw2T9DAE9NerOJ8IVpusqeVMA6o0SuPU79AAUR tB1NaWtlIER1dm9zIDxlbm9jaEB6aXBjb24ubmV0PokAlQMFEDOmlcY1TNKt+Wg9 AQEBKygD/ih1A1mjYcq8mrMmcBgDIAzu3RCbBv/uYGRXXherjKhrpdvHNTzd/LFF Z/Akg3owYhMJbHa9cbu4pCe1U+YgmGWqrsoXsuF87KrwUoO/HYI6ggosRhMazhdT 0H/zudqIMlyxXwLZqMiGI5XEkyHmkX4Jodh+SC7u7i1SjWTvYhCziQCVAwUQM6b1 8sA6o0SuPU79AQF+XAQAxKBswtbUe1/dforndHQ0+Fh6oRjdrfod3X/UQp3WIO+t cdSd0Vk2zVklECSV/vDjwEI46W9ZK/LVWhLuxVsGNJOnEYUFHfm89QIA7h8BkiIf iwRYdbrA32mHiogyy552Rq2YMOtQxa5T0/LrNSgOesXNV1UYBNC7bLkj3iA7gag= =f3h5 -----END PGP PUBLIC KEY BLOCK-----

1 0

Anon E-mail article in WSJ
by Alan 17 Dec '03

17 Dec '03

In today's (06/18/97) Wall Street Journal there is an article on Anonymous e-mail in the corporate environment. Talks about companies who have set up systems to recieve anonymous e-mail from employees to deal with specific situations in the workplace. Interesting stuff and very positive. (A few negatives were listed, but more as sidenotes than anything.) Page B-1 has the article. This time I will be making a copy... alano(a)teleport.com | "Those who are without history are doomed to retype it."

1 0

*** FREE Airfare Quotes from The World's Best Travel Agents
by ETN Head Office 17 Dec '03

17 Dec '03

** FREE Airfare Quotes from The World's Best Travel Agents ** Finding the lowest airfare on Internet has become very easy.... Just complete your Fare Request Form (online or request a form) online: http://www.etn.nl/inforeq.htm request a form: mailto:fare4all@etn.nl and we forward your request to those 5 travel agents who offer the lowest fares for the routing you requested. Within 1 or 2 days you receive fare quotes from different agents around the World without any obligation to book. You will be surprised with the great fares our agents can offer you. ETN can offer this service FREE OF CHARGE because we are sure to have the World's best travel agents. Our agents are permanently monitored and any agent who cannot convert enough inquiries into bookings is automatically removed from our list. Also for discounted hotels, tours, car rentals and transfers we have some great programs which you find on the Discount Airfares Home Page: http://www.etn.nl/discount ============================================================== European Travel Network Head Office P.O.Box 561, NL-5600 AN Eindhoven - Netherlands Tel.(31)73-547 9759 Fax (31)73-543 0117 E-Mail: etnho(a)euronet.nl ETN on Internet: http://www.etn.nl --***-- ETN is the worldwide association of The World's Best Discount Travel Agents, Consolidators and Incoming Tour Operators with Member-Agencies in 144 Countries. Our Agents quote you a fare for your next trip FREE OF CHARGE. Just send a blank email message to fareform(a)etn.nl

1 0

Re: [DES] Anguilla surpasses US military in code breaking challe
by Peter Trei 17 Dec '03

17 Dec '03

> From: Vincent Cate <vince(a)offshore.com.ai> > To: cypherpunks(a)toad.com > Subject: Anguilla surpasses US military in code breaking challenge. Vince writes: > Press Release > Anguilla, June 16, 1997 > > Anguilla surpasses US military in code breaking challenge. > > The Caribbean country of Anguilla has searched through more than > 2,380,000,000,000 code keys as part of the Deschall effort to break a DES > encrypted message. This is in response to a challenge by RSA Inc to show > that DES 56 bit keys are not large enough given the rapid advances in > computing technology. As of June 16th, the entire US military effort, > represented by Internet machine names ending in ".mil" in the Deschall > statistics pages, has searched fewer keys. Anguilla host names end in > ".com.ai". Anguilla is a free and democratic country, that does not limit > key lengths. NOT a press release, but true. Framingham,MA , June 16, 1997 Process Software surpasses Anguilla in code breaking challenge. The small software firm of Process Software has searched through more than 25,600,000,000,000 code keys as part of an independent effort to break a DES encrypted message. This is in response to a challenge by RSA Inc to show that DES 56 bit keys are not large enough given the rapid advances in computing technology. As of June 16th, the entire US military effort, represented by Internet machine names ending in ".mil" in the Deschall statistics pages, has searched fewer keys. Anguilla host names end in ".com.ai". This represents 5965 2^32 key segments, or 0.035% of the total keyspace. We've got a long way to go. It's worth noting that the DESChall people claim to have now searched over 23% of the keyspace, and at the current rate will have searched the whole thing about 3 months from now. They have not released their source code for independent evaluation. I for one would feel a lot more comfortable with DESChall if there was at least some outside review, even if no general release is made. Peter Trei trei(a)process.com

4 3

4471.html
by Damaged Justice 17 Dec '03

17 Dec '03

Web Anglais? Non, S'il Vous Plait --> Ashley Craddock --> [1]arrow Web Anglais? Non, S'il Vous Plait by [2]Ashley Craddock 9:02am 17.Jun.97.PDT When Quebec computer-store owner Morty Grauer got a letter telling him to get rid of his Web page, change it, or else, he rolled over. But he wasn't happy about it. "I don't need subpoenas, fines, or going to court," Grauer told the [3]Montreal Gazette. "But what gets my goat is when they make me do something. I'm enraged right now. How can they tell you what to do on the Internet?" But according to the Quebec's Office de la Langue Francaise, they can do it pretty easily - jurisdictional issues notwithstanding. Because Grauer's Web site was in English, because it was on a Quebecois server, and because it had no French component, his [4]microbytes.com was illegal, plain and simple. "The Micro-Bytes Web page violated the Charter of the French Language," spokesman Gerald Paquette said Monday. So on 29 May, the OLF sent Grauer a letter, threatening to revoke his certificate of "francization," a legal necessity for businesses with 50-plus employees. Grauer has said he will comply as of 1 July. Crafted in the pre-Internet 1970s, Quebec's Charter of the French Language stipulates that commercial publications such as catalogs, brochures, leaflets, and commercial directories must be available in French. It also denies English-language education to immigrants, even those from English-speaking countries. (A separate Canadian federal law on bilingualism has a much more limited scope, requiring the government to publish information in both English and French.) In the separationist furor that has raged over Quebec for decades, the charter has been a highly controversial bulwark against anglicization and cultural dilution. In Montreal, large businesses are bilingual. On the streets, English words are no longer displayed. In homes and schools, the phrase, "le weekend," common parlance in France, is almost never heard. But whether or not the 20-year-old charter will have any teeth in the age of the Internet and free trade remains unclear. Although the charter has been relatively successful in terms of maintaining linguistic purity, its economic effects have been harsh: An estimated 300,000 residents and 1,000 businesses have left the province since the law was passed. And the Internet is expected to exact a high toll for such linguistic balkanization: An estimated 90 percent of online communications are in English, only 2 percent in French. In France itself, where linguistic purity campaigns have recently taken on some degree of political chic, language activists have sued three sites under a 1994 law that bans single-language advertising in any language but French. The suits, which would have tested the law's application to Web sites for the first time, were dismissed last week on a technicality. In the free-speech-happy Internet, however, a four-year-old United Nations ruling may prove the most ominous indicator for attempts to enforce language purity: After reviewing the case of an English-speaking Canadian forced to call his funeral home a "salon funeraire," The UN's Human Rights Council found that the Canadian charter was in violation of the free-speech provision of the International Covenant on Civil and Political Rights. Still, the Office de la Langue Francaise is determined to hold the linguistic line. "Quebec wants to be a player in the global market, but there's a real chance it will erode our sense of language, of identity," Paquette said. "It's the same thing with the Internet: We feel threatened by it. It gives us the possibility of communicating with French speakers in France, Belgium, Switzerland, and North Africa, but English is the lingua franca of the Web. If we don't enforce this law, that'll only be more true in the future." Related Wired Links: [5]Web Sites Foil Canada's Election Poll Ban 3.Jun.97 [6]Canadian Election Law Prompts Web Site Battle 27.May.97 [7]arrow [8]Find Read a story in the Wired News archive. [9]Feedback Let us know how we're doing. [10]Tips Have a story or tip for Wired News? Send it. [11]Copyright © 1993-97 Wired Ventures, Inc. and affiliated companies. All rights reserved. References 1. http://www.wired.com/news/top_stories/ 2. mailto:craddock@wired.com 3. http://www.montrealgazette.com/ 4. http://www.microbytes.com/main.html 5. http://www.wired.com/news/topframe/4221.html 6. http://www.wired.com/news/topframe/4081.html 7. http://www.wired.com/news/top_stories/ 8. http://www.wired.com/news/search.html 9. mailto:newsfeedback@wired.com 10. mailto:tips@wired.com 11. http://www.wired.com/wired/full.copyright.html

1 0

Kerrey bill introduced in Senate
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: gbroiles(a)mail.io.com (Unverified) Date: Tue, 17 Jun 1997 14:41:46 -0700 To: cypherpunks(a)cyberpass.net From: Greg Broiles <gbroiles(a)netbox.com> Subject: Kerrey bill introduced in Senate Mime-Version: 1.0 Sender: owner-cypherpunks(a)cyberpass.net Precedence: bulk Reply-To: Greg Broiles <gbroiles(a)netbox.com> X-Loop: cypherpunks(a)cyberpass.net Sen. Kerrey's evil "Secure Public Networks Act" was introduced in the Senate today, cosponsored by Sen. McCain. The bill, if passed, would: Criminalize the knowing use of crypto to encrypt data or communications in furtherance of a crime; (s. 104) Criminalize breaking another person's ciphertext for the purpose of violating their privacy, security, or property rights; (goodbye, Netscape bugs bounty and DES/RC4 cracks) (s. 105(3)) Criminalize intercepting another's intellectual property for the purpose of violating intellectual property rights (s. 105(4)) Criminalize issuing a key to another person in furtherance of a crime (s. 105(6)) Require federal government purchasers of crypto equipment to buy GAK crypto; (s. 202, 204) Require crypto products purchased with federal funds for use on a public network to employ GAK crypto; (s. 203, 205) Legalize the export of 56-bit DES crypto; (s. 302) Criminalizes the issuance of signature certificates by registered CA's for encryption keys if the user has not complied with GAK procedures; (s. 407(a)(4)) Criminalizes requesting a signature certificate for an encryption key from a registered CA if the user has not complied with GAK procedures; (s. 407(a)(5)) Allows the Secretary of Commerce to "make investigations, obtain information, take sworn testimony, and require reports or the keeping of records by .. any person", to the extent necessary to enforce the Act; (s. 701(a)) Allows the Secretary of Commerce to subpoena witnesses and documents in any State at any designated place; (s. 701(b)(3)(A)) Allows the Secretary of Commerce to impose civil/adminstrative penalties of up to $100K for violations of the Act; (s. 702(1)) Ugh. The original is online at <http://www.senate.gov/~kerrey/encrypt/encrypt2.html>, mirrored at <http://www.parrhesia.com/kerrey.html>. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Dateline=FUD / Witness=Reality
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

It is interesting to note the differences between the U.S. media and the Canadian media in the wake of the McVeigh trial. Dateline NBC is milking the remaining viewer interest by doing a fear-piece on the dangerous threat to the country that militia groups pose, despite the fact that the McVeigh=Militia mental construct is a total government fabrication. Dateline promotes great fear over the danger posed by the existence of citizens who "resist government control." Apparently, any citizens who wish for freedom from government control are an enemy of the government. Any citizens who wish to take steps to be able to defend their own personal freedom are an enemy of the government. Following Dateline was Witness, a Canadian show, running a production called "Surviving Waco." "Surviving Waco" was a straight documentary with little "spin" to its theme. It reviewed the Waco tragedy without placing large amounts of blame or adding imaginary conspiracy theories. What made the show startling was the fact that without all of the hype and hoopla of spin-doctored media coverage the whole affair turned out to be a simple case of government agencies launching an assault against a group of people who held unusual religious beliefs. When you strip the hype and hoopla away from the OKC bombing, what is really left? A former member of the U.S. military decided that the U.S. government is an enemy of the citizens and should be subjected to armed assault. Those who made the decisions resulting in the deaths of men, women and children in Waco are drawing government paychecks while the victims who survived the assault are in jail. The person who made the decision resulting in the deaths of men, women and children in OKC faces death and the victims who survived are heros. The true tragedy surrounding these events is the fact that the media gets away with feeding the public hype and hoopla because that is all the public really wants to hear. Reality is just too damn scary. Reality is that when the government screws up an operation so badly that it gets totally out of hand and results in the deaths of a multitude of citizens, the survivors will be imprisoned in order to accentuate their guilt and the government's innocence. Reality is that a single person with no connections to any (perceived) radical group can commit an act of destruction against government buildings and their occupants, and the government can confiscate all the weapons and do all the wiretaps they want without making the public any more secure against this possibility. The public wants to be told that the "danger" can be removed if this-or-that group is neutralized. The public wants the media to name an enemy that we can be protected from--militia, drug dealers, pornographers, cryptologists. Reality is too scary. Reality is that I can pick up the garden hoe outside and walk over to my neighbor's house and whack his whole family over the head, and he can do the same. (Reality is the fact that I would spend 5 more years in prison than he, because I have PGP on my computer.) Reality is that if government takes away all the guns and crypto, and taps all the phones, and even takes away my garden hoe, I can break off a good, thick tree branch and go whack the public over the head. (even innocent children!) We live in a Media Reality where the slaughter of men, women and children is given a spin to provide whatever illusion the media and the polls deem will sell the most Pepsi to the public. The public doesn't want to hear that the 800 law enforcement agents surrounding Waco are monsters. They don't want to hear that people can be slaughtered for their religious beliefs by government forces. They do want to believe that a single monster is responsible for OKC and that killing him will remove the threat. And most of all, the public wants to believe that the Branch Davidians "had it coming," because, if they didn't, then the possibilities it raises are too frightening to imagine. The problem, of course, is that the greater the number and the more varied the groups of people who resist increasing government control, then the greater and the more varied will be the list of people who "have it coming." Currently, cryptographers are being added to the list of those who "have it coming." The media reports of the government assault on the meeting place for the Bay Area Cypherpunks meeting will be accompanied by government proof of the Cypherpunks having started the fire in which they died. There will be great media coverage of the Cypherpunks' conspiracies to poison water supplies, make drugs and deal in child pornography (under their "leader," Jim Bell, of course). Oh, I forgot about Cypherpunks' plans to "nuke D.C." If that isn't enough to make us all "monsters" then what is? Of course, while we are sitting in jail (or walking toward the gas chamber) we can take consolation in the fact that perhaps somewhere there is a country showing a documentary which reflects the reality of our lives and our actions, instead of the hype and hoopla needed to sell more Pepsi. TruthMonger

1 0

Re: Regulating the Net
by 3umoelle＠informatik.uni-hamburg.de 17 Dec '03

17 Dec '03

> Note the privacy protections being written into law in Germany: > > "Privacy protection: Personal data can be gathered only to the > extent that is necessary to perform the requested service (like > connecting to the Internet) or for accounting purposes, and must be > erased immediately thereafter. The consumers must be forewarned of > the type, scope and place of the data collection and have the right > to access their personal information at any time." > > Since this bill is now passing into law, I will expect an immediate > exodus of corporations from the country in order to avoid these > draconian laws. Better start selling my deutschemarks, huh? There is nothing much new in that law. Internet service providers have always been subject to the general Privacy Law. Also have a look at the EU privacy directive, which is similar in spirit: http://www.echo.lu/legal/en/dataprot/directiv/directiv.html You'll probably not be very surprised to learn that e.g. many credit card companies operate from Denmark or the Netherlands, and that even the state-owned railway company has orders for their customer cards processed in the US and the cards mailed from Holland.

1 0

None Re: Recipient Anonymity
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Matt Ghio wrote: > A group of servers collects messages of equal length for anonymous > recipients. All servers exchange messages so that each has copies of all > messages. > > A recipient wishes to retrieve a message from the servers without any > server knowing which message he is receiving. The recipient selects a > group of n servers. From each server, S_1...S_n-1, he requests a random > selection of messages, with a 50% probability that any particular message > will be selected. The server returns the xor of all messages requested. > He sends the final server a request which is the xor of all the previous > requests and the one single message that he wants. > > The xor of all the responses is the desired message. It is impossible to > determine which message was received unless all servers collude. So what you're saying is: - Messages - A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Server 1: 1 0 1 1 0 1 0 0 1 0 1 0 0 0 1 0 1 1 0 1 0 1 0 0 1 1 Server 2: 0 1 1 0 1 1 1 0 1 0 0 0 1 0 0 1 0 1 0 1 0 0 0 1 0 0 Server 3: 1 1 0 1 1 0 1 0 0 0 1 0 1 0 1 1 0 0 0 0 0 1 0 1 1 1 So server 1 sends back the xor of messages A,C,D,F...Z; server 2 sends back the xor of B,C,E,F,G...etc. The xor of all of that cancels out everything except Message Q. But as long as at least one of the servers doesn't keep logs then nobody will know that except the person who downloaded it. Clever. It sure beats reply-blocks. :)

1 0