December 2003 - cypherpunks-legacy

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

3/17/98 A note to Cypherpunks: Today I was sent a missive ostensibly from Mr. Toto. Following are the particulars: [begin quote] Return-Path: <toto(a)sk.sympatico.ca> Received: from harrier.sasknet.sk.ca (harrier.sasknet.sk.ca [142.165.5.2]) by camel10.abraxis.com (8.8.5/8.8.5) with ESMTP id XAA02654 for <camcc(a)abraxis.com>; Mon, 16 Mar 1998 23:42:42 -0500 (EST) Received: from uymfdlvk (regnsk01d05020132.sk.sympatico.ca [142.165.24.84]) by harrier.sasknet.sk.ca (8.8.6/8.8.6) with SMTP id WAA21157; Mon, 16 Mar 1998 22:40:54 -0600 (CST) Message-ID: <350E1A48.6C00(a)sk.sympatico.ca> Date: Mon, 16 Mar 1998 22:38:01 -0800 From: Toto <toto(a)sk.sympatico.ca> Reply-To: toto(a)sk.sympatico.ca To: Replay Anonymous remailer <remailer(a)REPLAY.COM> [end quote] For health reasons I removed myself from the list several months ago; now it appears the errors of my youth have returned to haunt me. I had assumed either the RCMP, CIA, FBI, KGB, ASPCA, or some other local authority had plucked Toto from the Web. Alas, this latest message, SAHMD -- Prologue 8/0, indicates the torment continues unless, of course, it is a forgery. But then, Mr. T. has been known to forge messages he has signed and send them direct with screwed up Anon: headers. This must stop. Whom should I contact to complain about such harrassment? My head is hurting again for the first time in months. Alec

1 0

Re: "Must refrain from using a mind": A(h)OL's son
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Information Violation wrote: > > from the Bienfait Rectal Examiner: > _________________________________________________________________ > > A(h)OL, a long, chubby dick with a thick mustache, has pleaded not > present to two felony counts alleging possession of cryptographic material > with the intention of ciphering or deciphering. > > If convicted, he faces up to six lifetimess in prison. > > He pleaded not present Wednesday and is free on his own recognizance, > subject to some unusual conditions: that he obey authority, stay away > from words, refrain from possessing or using a mind and get > psychopathological torture. > > Opening the back door of Jim Morrison's former home on a trimmed > cul-de-sac, A(h)OL, his face reflecting anarchy for a few seconds, > declined a donut and shut the door. > > A(h)OL's attorney, Adrian Messenger, said the persecution's theory of > reality was probably the result of 'bad acid.' His client, a > childless bachelor, with two sons, "is a 47-year-old turd," he said. > "He's not a cryptographer. He stays stoned a lot, and he's a pretty > recessive pervert." > > Adrian said A(h)OL "strikes me as an acutely illiterate guy who > wouldn't hurt a word. He hasn't got the social grace or skills of > one who would try subtly to peek up a female cryptographer's skirt > to see if she was wearing panties."

1 0

BIOS, FBI/ERF, Barbara Boxer,
by bill payne 17 Dec '03

17 Dec '03

Tuesday 3/17/98 6:29 AM Charles Christopher, FBI/NY http://www.fbi.gov/fo/nyfo/nytwa.htm John Gilmore Christopher, I received a phone call Monday morning. The caller asked me to modify my resume to reflect my experience with PC BIOS. I added the following lines. Attended Annabooks University week-long course on ROMing BIOS in 1992. Sixteen years experience interfacing high-level languages to BIOS. Reverse engineering BIOS and DOS for Sandia Labs weapons controller. Custom BIOS modifications experience for electronic locks for the FBI/Engineering Research Facility using Pentium processors. The FBI paid my course tuition for the Annabooks course. http://www.annabooks.com/ I learned several months after Sandia manager Tommy Sellers, who was entering the crypto business, and ombudsman Harvey Brewster gave me a directed transfer to break electronic locks for the FBI that the FBI DOES NOT GET COURT ORDERS to do normally illegal work. The FBI my FBI/ERF supervisors, Mike Uttaro, and his boss Mike McDevitt told me that they believe that the above work is CLASSIFIED SECRET. http://www.fbi.gov/ I think that we should get this matter settled before it GETS WORSE. Gilmore, I saw at http://www.jya.com/acp-pols.htm BOXER CONTINUES EFFORTS TO OPPOSE U.S. EXPORT LIMITS ON COMPUTER ENCRYPTION March 4, 1998 WASHINGTON, D.C. -- U.S. Senator Barbara Boxer (D-CA) joined Americans for Computer Privacy and a delegation of bipartisan lawmakers at a news conference today to oppose U.S. export limits on encryption technology. The following is Senator Boxers statement. Since the high-tech revolution, Americans have learned that privacy protection is of the utmost importance. Encryption technology is a key component in protecting our privacy - it is the lock on the door that guarantees not only our privacy, but often our safety as well. Boxer also is known for the following quote Those who survived the San Francisco earthquake said, Thank God, Im still alive. But, of course, those who died, their lives will never be the same again. - Representative Barbara Boxer, after the 1994 [sic] earthquake Weird History 101 John Richard Stephens http://www/adamsmedia.com Sandian Ron Pate and I were seated in a SF airport satellite area during that earthquake. Pate and I worked on electronic tagging for the CTBT. This used public key crypto. I used the Cylink CY1024 for that project. Electronic locks are mostly connected to Pcs. The PC keeps both a printed record and disk log entrys. Electronic lock programmers do not and cannot rewrite an operating system. Therefore, the simplest way to defeat an electronic lock is to modify BIOS. Intercept the electronic lock programmer call to BIOS, look for a known credential, open the door, and suppress the writes to printer and disk. Not too tough to do. But I was told to modify MANY SYSTEMS which I could NOT DO. Hirsch, CardKey, Sensor engineering, .... I was being set up to fail. Looks like your legal stuff is paying off in political support. Lets hope we get this crypto mess settled so that we can all move on to more constructive projects. Later bill

2 1

REASONABLENESS
by bill payne 17 Dec '03

17 Dec '03

Guys The great ANGLO ARMADA is sailing near Iran. And the Armada needs to expend its 'intelligent' weapons for business reasons. Be on the BEST OF BEHAVIOR. best regards bill Monday 3/9/98 6:17 PM merata(a)pearl.sums.ac.ir lawya(a)lucs-01.novell.leeds.ac.uk sjmz(a)hplb.hpl.hp.com Guys I just read a printed copy I made of Crypto AG: The NSA's Trojan Whore? http://caq.com/CAQ/caq63/caq63madsen.html starting at http://www.aci.net/kalliste/ fairly carefully. I seized upon Madsen's statements, 1 the random encryption key could be automatically and clandestinely transmitted with the enciphered message. 2 they may also have been tipped off by Stasi files of the ex-East German regime that found their way to Iran Try MfS agents who went to work for Iran after the Cold War. Then there was the postcard from Tel Aviv I received at Sandia labs which followed-up a yellow piece of paper sent by snail mail asking numbered detailed questions about work I was doing at Sandia. I responded back to the postcard, by postcard of course, "Know any sayanim?" No response. It doesn't take at rocket scientist to figure that one out. Let's all hope for settlement of this unfortunate matter so that we can all move on to more constructive projects. Best bill

2 1

Will New Sendmail Block Remailers?
by John Young 17 Dec '03

17 Dec '03

Markoff in the NYT reports today on the release of a new Sendmail upgrade by author Eric Allman that will block spam by checking the legitimacy of the originating address before delivery. The report claims that spam is up to 10% of e-mail worldwide, And that Sendmail is used on 75% of the computers that route e-mail, all of which are being fitted with the new program. What are the chances that this will affect remailers or other means of eternal anonymity? Except Sualk, GL, UB and Nuh, all of whom we now know are Otot GinPu Tca as those crazy Syug Irtmid Irun.

17 19

Here
by V75ortex 17 Dec '03

17 Dec '03

To: V75ortex(a)aol.com Subject: Here From: V75ortex <V75ortex(a)aol.com> Date: Thu, 2 Apr 1998 22:14:41 EST Organization: AOL (http://www.aol.com) <a href="http://www.adult-clicks.net/icon.html">Click here for 10 free pics</a>

1 0

instructs for using PGP 5 freeware with Eudora and 2.6.2 keys
by David Honig 17 Dec '03

17 Dec '03

Since I grew impatient navigating geocities' UI, I am sending this in the hope that it will be useful. Propogate at will. Using Eudora+PGP 5 with 2.6.2-Compatible RSA Keys for Win95 for Dummies 4/3/98 honig(a)alum.mit.edu Intro I explain how to install and use the slick Eudora and PGP 5 freeware on Windows95 while maintaining full back-compatability with PGP v. 2.6.2 users. The installation path for compatability with 262 is not the obvious one a new user would take. Thus this document. The install takes about 10 minutes and the software is free. The strength of your key is the same. What is Eudora? PGP? Eudora is a popular, powerful, easy to use GUI POP3 email client. Free versions are available. PGP is a public-key encryption package. PGP 5 freeware includes a plug-in for Eudora, making secure email not only possible, but nearly transparent. That is key to widespread use which is key to the success of any protocol. But some people use only PGP 2.6.2, or 262 it is built into their MacOS. The problem is that 262 uses "RSA" keys only, but PGP 5 can also use "Diffie-Hellman" keys. In fact, the freeware version of PGP 5 does not allow the creation of RSA keys. These instructions tell you how to set up Eudora + PGP so you can painlessly use these tools with all popular PGP versions. The newer PGP does not generate keys that the earlier PGP can use; but the newer version imports them. So if we take the trouble to use the older version of PGP to make our key, we can use our slick GUI email tools with everyone, even the 2.6.2 throwbacks who probably use rotary phones, carburators, etc. I use "PGP 2.6.2 key" to mean the RSA key version supported by PGP 2.6.2, and "PGP 5 key" to mean the Diffie-Hellman key supported by the freeware version. Both variants are based on the ease of multiplying two numbers and difficulty of factoring the product of large indivisible ("prime") numbers. Installation Instructions You will use defaults everywhere. 1. Download and install Eudora lite 3.05 (eul305.exe) from http://eudora.qualcomm.com/eudoralight/ This creates c:\Eudora by default. Use Tools | Options | Getting Started and Hosts to specify your POP email account (e.g., joe(a)xyz.com) and your SMTP (outgoing) host (e.g., mail.isp.com) TEST: Run Eudora, send yourself email, wait a minute, retrieve it, exit. 2. Download and install PGP 5 freeware (pgpinstall.exe) Do NOT create a key if asked to do so. PGP 5 makes keys incompatible with PGP 2.6.2. You will use a 2.6.2-compatible key you make later on. This creates c:\Program Files\PGP\PGP5.0 and installs a plug-in to Eudora. TEST: Start Eudora, look for PGP tools in toolbar. Easier Setup If You Can: 1 & 2. Download Eudora + PGP together from http://eudora.qualcomm.com/eudoralight/ and install. (I can't access this so I don't know about installing it.) TEST: send yourself email as above. Check for PGP tools as above. HERE'S THE RETRO-COMPATABILITY PART 3. Download pgp262.zip. Create new directory c:\pgp262. Go there. Unzip the file there. Read the instructions, you may have to set some variables before using PGP262 SET PGPPATH=C:\PGP262 SET PATH=C:\PGP262;%PATH% SET TZ=PST8PDT While in that directory: 4. Create a 2.6.2 key with PGP 2.6.2: Run "pgp -kg" and do what it says. You will provide a username. Use your email address. You will also provide a passphrase to hide your private key. Pick a phrase you can remember, that others can't guess. You'll have to type your passphrase to prove who you are (when you use your private key). 5. Export your 2.6.2 key to a file: Run "pgp -kxa yourname mykey" where "yourname" is the username you used above. This creates a file mykey.asc which is your public key suitable for emailing. 6. Import your key into PGP 5: Double click on the file "mykey.asc" that you just created. 7. Make sure your PGP262 key is your Default (e.g., if you made a PGP 5 key): Run PGPKeys, e.g., from Eudora. Select your key with the blue icon. Right-click to see its properties. Its key type should be "RSA". Right-click and select Set As Default. TO TEST PGP Send yourself a regular email addressed to the username you used above, which should be your email address, to verify that functionality didn't break. Then send a second letter, this time, select Eudora's PGP MIME button AND the PGP Encrypt button. Then send your letters. Wait a bit, and retrieve your mail as you did before. To read the encrypted version run the Plug-in. You will be prompted for your passphrase. If one of your dinosaur 2.6.2 associates sends you a block of text, use the PGP Decrypt button. You will be prompted for your passphrase. To send email to other people, you will have to import their public keys. Security Note Your private key is hidden in the \Program Files\PGP\PGP50\SECRING.SCR file. Its also in the c:\pgp262\SECRING.PGP file. If threse files are copied by opponents, only your passphrase stands between them and your secret key. Your mykey.asc file is the opposite: it should be published so people can send messages to you (and verify that you signed and sent what was received by them, etc.) PGPKeys lets you export your key to a well-known server which functions like a phone directory. honig(a)alum.mit.edu ------------------ "Are we going after their tax returns? I can only hope that we are, frankly, doing a little persecuting" ---Nixon to Erlichman, on tax audits of wealth Jewish contributors to the Democrats. -LA Times 1.4.98

1 0

RE: regulating the internet
by Brown, R Ken 17 Dec '03

17 Dec '03

> Jennifer DePalma <jdepalma(a)cato.org> wrote: > > >Anyone have any opinions on the feasibility of regulating the internet? > Of course you can regulate the Internet, the Internet is *made* of regulation. All it is is an agreement between people who run computers to send and receive messages, and pass them on to other computers, according to certain rules. It is like the treaties between supposedly sovereign nation states - you play by the rules if you want people to talk to you. The Internet is the best living example that you don't need governments to have regulation (although the US government certainly helped a lot. Maybe the Net or the Moon landings will go down in history as your pyramids or Stonehenge, the one thing your civilisation will be remembered for). The regulations will be made and broken and kept and changed by the people who use the Net and no-one will ever know what they all are at any one time but a lot of us will have a good idea of most of them, most of the time. The Internet doesn't depend on telephone companies or governments or undersea cables or satellites or university computing departments or cable TV or copper wires or carrier pigeons (that reminds me - time for my annual check up on the new RFCs :-) or fibre optics or anything else, although it uses all those things. It is software, not hardware, it is a set of rules, treaties, agreements, protocols, words, comments, jargon, ideas, thoughts. The Internet is like money, or marriage, or table manners - while people act as if they believe in it, then it will continue to exist. Of course if what the question was really about the feasibility of regulating what people use the Internet *for* - well, that's a different question...

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

On Thu, 2 Apr 1998, Robert Hettinga wrote: > At 2:32 AM -0500 on 4/2/98, David Honig wrote: > > http://braggbbs.bragg.army.mil/libs/utils.htm > > has a link to ftp://bbs.bragg.army.mil/library/utils/pgp262.zip > > This is really nothing new. My understanding is that when Kelly Goen posted > the original PGP to USENET, he set the distribution to US only, or at the > very least North America only. With a *.ca address, I'm wondering, in all situations do I follow the US guidelines? Or are some different? As for the "regulation" post, I was going to reply until I realized it was just so she could donate email addresses to her book. -confused cdn-

1 0

Ex-spook tells 2 other countries their codes are toast
by David Honig 17 Dec '03

17 Dec '03

http://www.newsday.com/ap/rnmpwh0j.htm Ex-CIA Worker Charged in Spy Case By MICHAEL J. SNIFFEN Associated Press Writer WASHINGTON (AP) -- A fired CIA covert operative was charged today with tipping off two foreign governments that the United States had broken their code systems. He was held without bond. Douglas Fred Groat also was charged with trying to extort $500,000 from the CIA in return for not disclosing its secrets. Groat, a 50-year-old bearded and burly man, worked for the CIA from May 1980 through October 1996 but spent the last three of those years on administrative leave. The grand jury charged that he gave secrets about U.S. code-breaking to two foreign governments, which were not named, in March and April of 1997. The grand jury said that Groat attempted to extort money from the CIA began before his alleged turncoat activities and continued after them. The grand jury said the attempted extortion lasted from May 1996 until February 1998. All four espionage counts allege that the spying took place between March 24, 1997 and some time in April 1997. A federal grand jury said in its indictment that Groat gave both foreign countries classified information concerning ``the targeting and compromise of the cryptographic systems of ... (the foreign country) by the United States with intent and reason to believe that said information would be used to the injury of the United States.'' Groat, who was arrested Wednesday night without incident by the FBI, entered a not guilty plea through his attorney, at federal courthouse here, to all five counts against him. Two of the counts carry a maximum penalty of death. Prosecutor Eric Dubelier persuaded U.S. District Judge Norma Holloway Johnson to continue holding the burly and bearded Groat without bail by calling him ``a risk of flight and a danger to the community.'' ``Based on his former employment with the CIA, he is trained in travel and false identity and deception,'' Dubelier said. ``He has no ties to the community and he possesses sensitive classified information'' that could be communicated to foreign nations if he were allowed to go free. Johnson said that a federal grand jury had returned a sealed indictment March 27 which included four counts of communicating secret defense information to a foreign government and one count of interference with commerce. Two of the counts of conveying secrets carry the death penalty. It was not immediately known which countries were involved. Federal officials requesting anonymity said there was more than one. Groat himself did not speak during the 10-minute initial appearance. Muscular and heavy-set with black hair and a mustache, he appeared in court wearing dark blue jail trousers and shirt. He held his hands clasped in front of him as he stood beside his attorney, public defender A.J. Kramer. The judge set a detention hearing for next Thursday. And Dubelier said the government would use the Classified Information Procedures Act to prevent secrets from being disclosed at trial. Groat was the third current or former CIA employee to be arrested for espionage in the last four years. He was fired from the CIA under circumstances that officials would not immediately disclose. They said he held a lower rank than two of the biggest spies ever caught inside the CIA -- Aldrich Ames, who headed counterintelligence against Moscow while secretly working for the Russians, and Harold Nicholson, who was a CIA station chief abroad while selling secrets to Moscow. Ames and Nicholson pleaded guilty in plea bargains with the government. An official familiar with the investigation said the probe into this former CIA employee ``does not rise to the level of the Aldrich Ames case'' in terms of the suspected damage to U.S. security. Ames was arrested in 1994 and was sentenced to life in prison without the chance for parole. Ames gave the Soviets the names of at least a dozen high-level moles inside the Soviet government who were providing information to the CIA. Many of them were arrested and executed based on Ames' information. Nicholson gave the Russians the names of new CIA recruits whom he helped train. Officials said that limited where they could serve later in their careers. The CIA employee in this case worked at the ageny's headquarters in Northern Virginia and it was not clear if he had ever served overseas. The FBI was not seeking any accomplices in the case, but officials would not say whether any foreign diplomats were being expelled from this country. The names of the countries involved with the CIA employee could not immediately be learned. The House and Senate intelligence committees were kept informed of the investigation into the spying charges as it proceeded, congressional officials said today, speaking on condition of anonymity. An official said Senators have been actively involved in following the investigation since its inception.'' AP-NY-04-03-98 1331EST ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu When exponentiation is outlawed, only outlaws will exponentiate.

1 0