December 2003 - cypherpunks-legacy

steganography detection hazard?
by Anonymous 17 Dec '03

17 Dec '03

Suppose you take your plaintext, encrypt it, then spread the bits across an image as the LSBs. The LSBs will, if you've used a decent cipher, have perfectly uniform distribution. The 'noise' LSBs in a chunk of *digitized* bits will show a *uniform* distribution. (As indeed will the cipher's blocks, or any bitchunk larger or smaller.) Therefore an entropy test (see Maurer) will discriminate between the two. Please prove me wrong. --Stegosaur

1 0

passwords and hashes
by Alexander Kjeldaas 17 Dec '03

17 Dec '03

I'm looking into how passwords should be transferred into keys for the loopback filesystem in Linux. Currently, what happens is that you take the SHA or RIPEMD-160 hash of the password string and use that as a key. If the cipher only uses a 128-bit key, the last 32 bits of the hash is unused. I have some questions about this scheme: o In the case of a 128-bit cipher, do I lose any information by not using the last 32 bits of information? Should the last 32 bits be xored with the first 128 in order to not lose any info? o Is there any advantage to _not_ using a 256-bit hash function? (i.e - use a 128-bit hash for 128-bit ciphers). Currently there are lots of AES ciphers that don't get fed a 256-bit key because we only have a 160-bit hash. o Is there a good 256-bit hash function? I don't know of any other than snefru. In this application, speed doesn't matter much. Should I use a 256-bit cipher instead maybe? o Is it safe to always take the hash of the password, or is it better to use the password directly as the key if it is less than 16 characters for 128-bit cipher? astor -- Alexander Kjeldaas, Guardian Networks AS, Trondheim, Norway http://www.guardian.no/

1 0

cfs' ecb+ofb mode vs. interleaved cbc mode
by Alexander Kjeldaas 17 Dec '03

17 Dec '03

For fast file-system crypto, you really want to implement the ciphers so that you encrypt several blocks at a time. CFS does this by using a special mode (described as ecb+ofb by schneier). The CFS documentation explains: "At attach time, CFS derives from the passphrase into two DES keys, K1 and K2. K1 is used to create two (or three) DES pseudorandom stream ciphers, each 128KB long, S1 and S2. To encrypt a file block, it is first XORd against a unique bitstream derived from the inode number of the file. The result is then XORd against S1 based on its offset in the file. This is then DES ECB encrypted with K2, and the result of that is XORd against the appropriate position in S2. The resulting ciphertext is what is stored. The cipher is reversed in the obvious manner. Filenames are similarly encrypted. There does not appear to be a feasible attack that allows an independent search for the two subkeys K1 and K2; in a brute-force known-plaintext attack, an attacker would have to try all 2**112 key combinations. Note that in the single DES mode, the two keys may be vulnerable to independent exhaustive search under a so-called "linear" attack, but this attack appears to require a large number of chosen plaintexts encrypted under the same inode number. Under most conditions where the attacker cannot introduce large numbers of chosen plaintexts, I believe even the single-DES CFS encryption to be very strong in practice. Note that this is not the same as a "proof". In any event, CFS is always at least as secure as DES or triple DES (as selected when the directory is created). If want high security, select triple DES (now the default); for better performance, use the hybrid single-DES option." I'd like to know how this method compares to using an interleaved cbc mode - for example 8-way interleaved cbc. The n-way interlaved cbc-mode works by chaining each n'th block together instead of each block. This means you get n more messages. For a 512-byte block and a 128-bit block length, this means that each message will be 512/(8*16) = 4 blocks long. For a 4k block you get messages that are 32 blocks long. This might or might not be a problem. With CFS you need 2x the key material - something that is really hard to get by when you're using 256-bit keys. It seems to me you'll have to type in an extremely long password or each of the keys will in practice be weaker than what the theory tells you. Another point is that CFS requires a lot more nonswappable memory than interleaved cbc mode. This means that interleaved cbc mode initially seems more attractive for file-system use. Am I missing something? astor -- Alexander Kjeldaas, Guardian Networks AS, Trondheim, Norway http://www.guardian.no/

1 0

Nation's Biggest Jewish Singles Event: Dec. 24 @ Webster Hall
by theball＠matzah.cc 17 Dec '03

17 Dec '03

******************************************************************* If you would like to continue to receive e-mail notifications regarding UTOPIA's events for Jewish Singles, please let us know by sending us an e-mail at theball(a)matzah.cc. Please note that this is a one-time mailing only. if we do not hear from you, we will never e-mail you again and we thank you for your time. ******************************************************************** "A high-end event," "awash in cocktail dresses," "attended by Cosmopolitan's Bachelor of the Month" and "3,000 guests who schmoozed their way over three vast floors." -- New York Magazine "Not a creature stirs on Christmas Eve . . . but that's not at this annual party for the city's young and Jewish where some 3,000 people turned out to dance, romance and kick back last year." -- New York Daily News "By midnight the nightclub was alive" with "4,000 partygoers" at this "holiday alternative for Jewish urbanites on their single most silent night of the year." -- The New York Times ******************************************************************** The Nation's BIGGEST Event for Jewish Singles Each Year Since 1995! Thursday, December 24, 8 p.m.- 4 a.m. THE BALL '98 at WEBSTER HALL (125 E. 11th St., between 3rd and 4th Aves, NYC) ************************************************ 4 FLOORS, 4 DJs, 7 UNIQUE ROOMS, 3000+ EXPECTED Grand Ballroom, Live Trapeze, Martini Bar, Jazz Club, Cigar Lounge, Coffee Bar, Flashback Disco, Sports Bar, BlackHole Lounge, more! Please dress with style ************************************************************ Hi, we have sent you this e-mail because we thought you might have interest in "The Ball '98" -- the Nation's Largest Party for Jewish Singles in their 20's and 30's. "The Ball '98" is sponsored by UTOPIA Events. UTOPIA also sponsors the annual "Turkey Ball" on Thanksgiving Eve and other events for Jewish Singles. If you would like to continue to receive e-mail notifications regarding UTOPIA's events for Jewish Singles, please let us know by sending us an e-mail to theball(a)matzah.cc. Please note that this is a one-time mailing only. if we do not hear from you, we will never e-mail you again and we thank you for your time. THE BALL '98 THE NATION'S BIGGEST EVENT FOR JEWISH SINGLES! Our annual Ball is the nation's biggest event for Jewish Singles in their 20's and 30's. In 1995, over 3000 young Jewish singles attended the Ball when we held it at the Palladium. In 1996, over 3,500 attended at Webster Hall. Last year, over 4000 people attended this event when we held it at The Tunnel and the party was covered by The New York Post, The Daily News, The New York Times, and more. THE BALL '98 4 FLOORS 4 DJs, 7 UNIQUE ROOMS The Ball '98 offers something for everyone: GRAND BALLROOM: For the Ball '98, Webster Hall's Grand Ballroom will be the site of the Main Party -- the place to meet and mingle with thousands of young Jewish singles, featuring dance music from a legendary DJ. We will work to ensure that the atmosphere in the Grand Ballroom (and The Ball '98 generally) is conducive to meeting and mingling. THE MARTINI BAR & JAZZ CLUB: Make this your place for intimate conversation. TTHE TRAPEZE SHOW: At 11:45 p.m., a trapeze artist defies death and gravity high above the Grand Ballroom -- without a net! Not for the faint-hearted. AND THERE'S SO MUCH MORE TO EXPLORE: The Coffee Bar, The Sports Bar, the Cigar Lounge, The Flashback Disco featuring music from the 70's and 80's, the Black Hole Lounge, and more! FOUR ENTRANCES, HUGE COAT CHECK: So that you can quickly enter and enjoy the Nation's Largest Jewish Singles Event, we have made arrangements to use four entrances to Webster Hall and to expand Webster Hall's already large coat check. ADMISSION Admission to The Ball '98 is $20 in advance and $25 at the door (we have added more cashiers this year to make entry easy). For information on purchasing tickets in advance, please call Utopia at 212.459.4321 or e-mail us at theball(a)matzah.cc. QUESTIONS? If you have any questions about The Ball '98 or any other matter, please feel free to e-mail us (theball(a)matzah.cc) or call Utopia directly at 212.459.4321 Thanks and we look forward to seeing you on December 24 at Webster Hall for The Ball '98.

1 0

req!
by tre64t3＠rubicon.bf.rmit.oz.au 17 Dec '03

17 Dec '03

UNIVERSITY DEGREE PROGRAMS Increase your personal prestige and money earning power through an advanced university degree. Eminent, non-accredited universities will award you a degree for only $200. Degree granted based on your present knowledge and experience. No further effort necessary on your part. Just a short phone call is all that is required for a BA, MA, MBA, or PhD diploma in the field of your choice. For details, call 602-230-4252

1 0

Legally Pay No Federal Income Tax !
by Zebra911＠usa.net 17 Dec '03

17 Dec '03

======================================================= Liberty Electronic Press -- News Release *************** What you are about to learn here may be shocking to you so be pre- pared to learn what most Americans dont know. First of all there are TWO different American Flags. The most common one you all have seen and recognize. Its Old Glory with the Stars and Stripes as you most commonly see displayed outside homes, offices and the Post Office. It is the Flag of "The Republic united States of America". The lower case u in the word united, is proper, and is as written in "The Declaration of Independence". Our other American Flag is just the same as Old Glory accept it has a yellow fringe around it. This flag is an Admiralty Flag and is usually displayed indoors in government offices and many court rooms. Just as there are two different American Flags there are two dif- ferent American Governments. Im not referring to political parties. The two governments are: "The Republic united States of America", flying Old Glory and "The [district] United States of America" flying Old Glory with the yellow fringe, or the Admiralty Flag. "The Republic united States of America" gives you RIGHTS and The Constitution of the United States. "The [district] United States", gives you privileges such as allowing you to sell or deal in Alcohol, Tobacco and fire arms and to own a corporation. All Americans that work for the government, whether it be Federal, State, County or City or live or work on government land such as Washington, D.C., Guam, Samoa, Puerto Rico, the Virgin Islands and other ceded lands are under the jurisdiction of "The [district] United States" and the Admiralty Flag. If you are not in the jurisdiction of "The [district] United States" and the Admiralty Flag you can be EXEMPTED from the Federal Income Tax, filing, withholding, and record keeping. To do this you must get out of their jurisdiction and refute their jurisdiction over you. You will then be considered a Non-Resident Alien and a foreign entity with respect to "The [district] United States". YOU DO NOT LOOSE ANY RIGHTS AND YOU ARE STILL CONSIDERED AN AMERICAN CITIZEN. ACTUALLY YOU GAIN A RIGHT, I.E. YOU DONT HAVE TO PAY FEDERAL INCOME TAX!!! The Founding Fathers of The United States of America wrote our Con- stitution, Bill of Rights and Declaration of Independence to set us FREE from TYRANNY and TAXATION. Our Founding Fathers did not want our government to make you pay INCOME TAXES. If you study the Constitution, and the IRS tax laws, you will find that paying income taxes is not mandatory. It is based on a voluntary system. The LAWS and the SUPREME COURT and the IRS have ruled that Federal income taxes are VOLUNTARY and FILING A RETURN IS NOT REQUIRED in many cases if you properly VOLUNTEER OUT OF THE SYSTEM AND THEIR JURISDICTION.. "Our tax system is based on individual self assessment and VOLUNTARY COMPLIANCE." - M. Caplin, IRS Commissioner "OUR TAX SYSTEM IS BASED UPON VOLUNTARY ASSESSMENT AND PAYMENT AND NOT ON DISTRAINT" -Supreme Court Ruling, Flora v. U.S., 362 U.S. 145 It is very EASY and LEGAL to volunteer out of the IRS tax system, but you must know the EXACT PROCESS REQUIRED to do this simple task. If you dont know the correct way to do this, you could be FINED $500 by the IRS. If you will spend JUST $59.00 we will send you our package: "BEAT THE IRS & PAY-NO-MORE". Our information will SET YOU FREE LEGALLY! After reading our reports and filling out a simple form you will be FREE from the IRS BANDITS and the graduated Federal INCOME TAX ... FOREVER. Our information is guaranteed to STOP FEDERAL INCOME TAX WITHHOLDING from your pay check!!! You will never have to pay Federal income taxes again. You will never have to file a 1040 Form again. You will never have to keep personal expense or income records. You will be completely FREE from the Federal income tax. We send you absolute PROOF you do not have to file a return. After reading our report and following simple instructions your pay check will be free from those nasty income tax deductions. This will put an extra $20 to $200 in your pocket every week!. "ISNT IT ABOUT TIME YOU GET PAID WHAT YOUR WORTH?" Now is the time to fight back. Please read on!!! ********************************************** "BEAT-THE-IRS & PAY-NO-MORE" Our PACKAGE, (Beat The IRS & PAY-NO-MORE) will teach you EXACTLY how to EASILY: STOP FEDERAL Income Tax Withholding, STOP April filing of 1040 Form, & STOP THE IRS EXTORTION PERMANENTLY! This works for all Citizens that are not government employes, don't deal in Alcohol, Tobacco, or fire arms, or own a corporation or own a business where you are under a duty to withold from your employes paycheck. ------------------------------------------------------------------- The IRS Federal Income Tax System is based on VOLUNTARY COMPLIENCE... We will teach you how to legally VOLUNTEER OUT OF THE SYSTEM! ------------------------------------------------------------------- Your Success is ABSOLUTELY Unconditionally GUARANTEED! Our methods work every time for everybody if you were born in and live in one of the 50 Republic States and are not a government employee. Also you can not live or work on Government Property such as a Military base, Washington, D.C., Guam, Semoa, Virgin Islands, etc. Our method is 100% legal, honest and ethical. We will pay anybody $1,000 if they can prove our method is ILLEGAL, DISHONEST or UNETHICAL!!! Our method has worked for every person who has ever bought this package without exception. We have been selling our package for over 2 years and have NEVER HAD ANY COMPLAINTS! NOBODY HAS EVER FAILED!!! YOUR PAYCHECKS WILL BE 10% TO 35% BIGGER EVERY WEEK, within weeks of filing the proper forms and affidavit. WHY NOT GIVE YOURSELF A RAISE THIS YEAR BY EXERCISING AND ENJOYING MORE OF YOUR CONSTITU- TIONAL RIGHTS. SET YOURSELF FREE! ------------------------------------------------------------------- Your package includes unlimited LIFETIME telephone consultations, a copy of the U.S. Constitution, The Bill of Rights, forms, affidavits, and much, much more! Knowledge Equals Freedom! Shouldn't you get yours! --------------------- ORDER FORM - CUT ---------------------------- TO ORDER BY MAIL: Send this order form plus your Name, Address, Phone # and a $59 + $3 S&H - $62 Total (Money Order Only) to: LINKCO -- Dept. # N0001 -- POB 66781 -- Phoenix, AZ 85082 Phone: (602)267-9688 Thanks for reading this message! -(Unconditional Money Back Guarantee)- - Copyright 1996 Linkco - ================================================================== To be REMOVED from this list type REMOVE in the subject area of a new e-mail and send to: CharlieEcho14(a)hotmail.com ==================================================================

1 0

JUST RELEASED VOL. 2
by smo＠clinet.fi 17 Dec '03

17 Dec '03

JUST RELEASED!!! INTRODUCING...THE CD VOL. 2 The CD - Vol. 2, is the absolute best product of its' kind anywhere in the world today. There are no other products anywhere that can compete with the quality of this product. We took a total of over 190 million email addresses from many of the touted CD's that are out there (bought them all - some were $300+)! We added the millions we had in storage to those. When we combined them all, we had in excess of 300+ million addresses in one huge file. We ran a super "sort/de-dupe" program against this huge list. It cut the file down to less than 20 million!!! Can you believe that? It seems that most people that are selling CD's are duping the public by putting numerous files of addresses in the CD over and over. This created many duplicate addresses. They also had many program "generated" email addresses like CompuServe, MCI, ANON's, etc. This causes a tremendous amount of undeliverables. After completion of removal of duplicates and initial filtering we were left with the base of 10 Million addresses worth fine tuning to finish the project. Remember, we are not here to produce the CD with the gad zillion millions that our competitors are so proud to put their names on these days. We ARE here to produce the very BEST CD list as far as quality of addresses go We then ran a program that contained 300+ keywords to remove addresses with vulgarity, profanity, sex-related names, postmaster, webmaster, flamer, abuse, spam, etc., etc. Also eliminated all .EDU, mil, .org, .GOV, Genie, Delphi, GNN, Wow etc. We also filtered out all addresses found in any of our 1300+ domains list. We also filtered out addresses in excess of 30,000 which have proven to be affiliated with anyone found to be opposed to our using direct bulk email as a advertising medium. We have also purged the list to be free of any "web poison" addresses created by those who are opposed to us conducting legitimate business on the internet today. If you do not know what web poisoned addresses are, please look it up now. One list we recently purchased had over 90% poisoned addresses. The "bottom line" here is that you can go out on the world market today and purchase every lists for thousands of dollars and NOT have anymore worth owning than what we have compiled for you here today. You use these addresses, you will experience increased response, increased sales, and a host of other positives that far exceeds any hoped for results when using the competitor's inferior products. Our customers purchase our products over and over and over. Most of the competition ever succeeds is selling a second product to anyone after they purchase the first. So, you see, our list will save people hundreds of dollars buying all others that are out there on CD and otherwise. Using ours will be like using the 200+ million that we started with, but a lot less money and a lot less time!! We have always said, "You can buy from the REST or you can buy from the BEST". Your choice. _____________________________ What others are saying: "I received the CD on Friday evening. Like a kid with a new toy, I immediately started bulking out using the new email addresses. Over the course of the weekend, I emailed out over 500,000 emails and I received less than TWENTY undeliverables!! I am totally satisfied with my purchase!! Thanks Premier!!" Dave Buckley Houston, TX "This list is worth it's weight in gold!! I sent out 100,000 emails for my product and received over 55 orders! Ann Colby New Orleans, LA **************************************** HERE'S THE BOTTOM LINE The CD is comprised of 7 million PREMIUM & SUPER clean addresses -ready for mailing upon receipt of the CD. Each file contains exactly 100,000 email addresses. There are only AOL & Mixed addresses on this CD. You have 50 files of 100,000 each of AOL to equal 5,000,000 addresses. The AOL addresses are less than 6 weeks old and have been collected throughout the production schedule. The remaining files are comprised of General Internet addresses. There are 20 files of 100,000 each, totaling 2,000,000 premium addresses. NO Compuserve! No Delphi! No Genie! No Prodigy! NO Filler Addresses! Simply the Best of the Best!!! >>> ONLY $200.00! This price is effective for the next seven days, thereafter the price will be $299.00 so ORDER NOW! Remember, bottom-line you always get what you pay for! All lists are completely free of any Duplicates. We also on a continual basis, add New Names and Remove Undeliverables and Remove Requests. The result is the Cleanest Email Addresses Available Anywhere to use over and over again, for a FRACTION of the cost that other companies charge. Typical rates for acquiring email lists are from 1cent to as high as 3 cents per email address - that's "INFORMATION HIGHWAY" ROBBERY!. We continually work on our CD. Who knows when those other CDs were made. We're constantly adding and deleting addresses, removes. Etc. It all comes back to quality. Don't even hesitate on this one or you will miss out on the most effective way to market anywhere...PERIOD! If you have any further questions or to place an order, you can call toll free at: 800-600-0343 Ext. 2693 To order our email package, simply print out the EZ ORDER FORM below and fax or mail it to our office today. We accept Visa, Mastercard, AMEX, Checks by Fax. _________________ EZ Order Form _____Yes! I would like to order MILLIONS Vol. 2 email addresses for only $200.00. *Please select one of the following for shipping.. ____I would like to receive my package OVERNIGHT. I'm including $15 for shipping. (outside US add an additional $25 for shipping) ____I would like to receive my package 2 DAY delivery. I'm including $10 for shipping. (outside US add an additional $25 for shipping) DATE_____________________________________________________ NAME____________________________________________________ COMPANY NAME___________________________________________ ADDRESS_________________________________________________ CITY, STATE, ZIP___________________________________________ PHONE NUMBERS__________________________________________ FAX NUMBERS_____________________________________________ EMAIL ADDRESS___________________________________________ TYPE OF CREDIT CARD: ______VISA _____MASTERCARD CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD___________________________________________ AMOUNT $____________________ (Required) SIGNATURE:x________________________ DATE:x__________________ You may fax your order to us at: 1-212-504-8192 CHECK BY FAX SERVICES! If you would like to fax a check, paste your check below and fax it to our office along with all forms to: 1-212-504-8192 ****************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-212-504-8192 ******************************************************* If You fax a check, there is no need for you to send the original check. We will draft up a new check, with the exact information from your original check. All checks will be held for bank clearance. (7-10 days) Make payable to: "GD Publishing"

1 0

RE: Postcard Debates
by Wilson, Jamie (J.R.) 17 Dec '03

17 Dec '03

The problem with the USPS is that it is government run -- like anything government run, it doesn't work right. It's too expensive, too slow, and too unreliable. Email, on the other hand, is largely handled by the private sector. Hence, it works better. What I find interesting (in response to your note that the USPS would charge), is that the U.S. government had to actually pass a law to make sure the U.S. government doesn't start taxing the Internet. ____________________________________________________ Jamie R. Wilson -----Original Message----- From: Reeza! [mailto:howree@cable.navy.mil] Sent: Friday, 11 December, 1998 20:51 To: cypherpunks(a)toad.com Subject: RE: Postcard Debates This would open the door for the USPS to charge for each email sent. The same rules? No. Based on those rules, but not the same rules. The same rules would slow email down considerably also, wouldn't they???<g> Reeza! At 08:41 AM 12/11/98 -0500, Wilson, Jamie (J.R.) wrote: >If everyone just encrypted their messages then no suspicions would be raised >regarding the use of encryption. Most people use envelopes, plain and >simple -- and as a result no one questions what they are hiding. It's >understood that mail is private and therefore people have a right to seal it >in an envelope and not worry about people tampering with it. On the same >note, there are federal regulations and penalties (in the U.S. anyway) for >tampering with mail and interrupting the delivery of it. The same laws >should apply to email. > >____________________________________________________ >Jamie R. Wilson > > > >-----Original Message----- >From: Robert Wenzler [mailto:rwenzler@usachoice.com] >Sent: Thursday, 10 December, 1998 13:56 >To: Mbishop645(a)aol.com >Cc: maven(a)weirdness.com; hab(a)gamegirlz.com; Cypherpunks(a)toad.com >Subject: Re: > > > > >Mbishop645(a)aol.com wrote: >> >> >HaB wrote: >> ><snip> >> >> That's a good place to begin, though. "Would you send a letter to >> >> someone without an envelope?" "Then why not put your email in the >> >> electronic equivalent of one?" >> >> >> >> balance. >> > >> >Would I send a letter to someone without an envelope? >> >One word: postcard. >> >> Ahh, but would you tape a check for your phone bill to a postcard? Other >> than writing a greeting to someone what else do you use a postcard for? > >No, I would not tape a phone bill check to a postcard. There is the >chance for it to fall off. > >There is different methods of sending mail for different levels of >security and functionality. Some people make it obvious what is inside >an envelope. (who would not recognize a Christmas card from the >envelope?) Others make it as bland and normal as possible to >have it go by without much notice. > >It all depends on how secure you want it. Some things you can do >with what amounts to postcard security. > >What amount of security do you want for your email? Would you be >willing to do something extra for that security? > >This type of question is up to each person. How much risk is the >person willing to take. Each person has the responsibility to >understand what the risks are and to decide what risks they are >willing to take. > > >

1 0

CALL 1-800-HOT-PUSSY....CALL NOW!!
by 785 17 Dec '03

17 Dec '03

Hi Sexy, I am lonely waiting for you to call me. Let me be the "Little Secret" in your life! WARNING!! These lines are extremely xxx-rated. Adults over 18 only!!! Sex starved girls will give you a hot sexual experience you'll never forget. Not recommended for people with weak hearts or bad backs!!! Call 1-800-HOT-PUSSY(468-7877) $2.99-$4.99 per min. Billed by Teleworld Visa/Mastercard/Amex Must be over 18 Call 1-900-288-LIVE(5483) (US ONLY) Billed as 1-ON-1 on your phone bill $25.00 per call Must be over 18 1-900-451-PUSSY(7877) (Canada) $2.99-$4.99 per min. (US $) CALL NOW!!! CALL NOW!!! CALL NOW!!!

1 0

test
by Igor Chudov 17 Dec '03

17 Dec '03

test

1 0