December 2003 - cypherpunks-legacy

angel 0.5 released
by Antonomasia 17 Dec '03

17 Dec '03

My website (software page) should have angel 0.5 on it at around midnight (GMT). This is a mail transfer agent intended to operate well with remailers. Progress since the last release is taking the DH key authentication to a different program so that the RSA secion when added will not be in the main server (angeld). RSA authentication of the DH key is still to be added. -- ############################################################## # Antonomasia ant(a)notatla.demon.co.uk # # See http://www.notatla.demon.co.uk/ # ##############################################################

1 0

2nd reposting of a response to Jim Choate (on crypto archives)
by Mok-Kong Shen 17 Dec '03

17 Dec '03

Note: There was some technical problem since yesterday to cypherpunks postings, so that my posts to the list didn't result in copies back to me. This morning I reposted these, again without success. An hour ago Igor Chudov informed me that the problem was solved and I have just verified this with a test message. I am therefore reposting once again one of my posts of yesterday here. It is a response to Jim Choate. Please ignore it if you have already seen it. Jim Choate wrote: > > > From: Mok-Kong Shen <mok-kong.shen(a)stud.uni-muenchen.de> > > > We were talking about a site that has to be closed because of (new) > > crypto laws, not technically down which is seldom with modern hardware. > > And also you said that money is no problem! > > You need to go back and re-read what prompted this. Your responce is > completely out of context. > > > Why you care so much about people who voluteer to run sites? They > > certainly know what kind of risks that they probably face, financial > > or otherwise. Do you care your neighbour who opens up a new company > > and do you feel unconditionally have to give him advices?? Are you > > the one who is cleverer than all the others? > > It depends, do I shop there? > > I'm done with this discussion. You want to expect people to put their neck > on the line and you use their services while owning them nothing then wonder > why nobody does it, so be it. Let me ask you some clear questions and please give me also clear answers: If there is some person who is grown up and is not metally ill and who decides to volunteer to put up an archive site of crypto software for the benefit of those who need them, what do you have against that? Any reasonable person who plans to do some business (for profit) certainly well considers the possible risks he might have. For non-profit activities like what we are discussing it is clear that one is much more careful before launching the work. Why do you want to disuade him from doing that? If he fails, that's his fate but you don't loose a cent because of that. If he puts up a site and that has to be closed down after a couple of months because of unforeseen new crypto laws, you at least profit in that short time period of the possibility of downloading from his site and other people also profit from that. If his country has poor economy (inflation, unemployment etc. leading possibly to early depletion of his monetary resources) or bad infrastucture (total breakdown of telecommunication of his country, rendering his site no longer operable) or religion (because he is physically injured by religious fanatics and therefore unable to work), or whatever other reasons than these three that you mentioned, that's all HIS business not YOURS. He, being in his own country, should know all such risks much much better than you! Be happy that because of him you have one more possibilty of obtaining your desired software (during the time his site is operational)! If he ever gets into trouble, it will be fine of you if you will try to help him, through raising funds etc. But you are not obliged to do that. So I don't understand the motivation of your arguing up till now. I would be able to understand if you were working in an authority attempting to strengthen the effects of crypto laws, thus wishing to have as few archive sites in the world as possible, at best none. (Of course, I know absolutely nothing of you. Should I happen to have made here a wrong assumption about your occupation, then I like to offer my sincere apology.) M. K. Shen

1 0

2nd reposting of a response to Enzo Michelangeli (on crypto archives)
by Mok-Kong Shen 17 Dec '03

17 Dec '03

Note: There was some technical problem since yesterday to cypherpunks postings, so that my posts to the list didn't result in copies back to me. This morning I reposted these, again without success. An hour ago Igor Chudov informed me that the problem was solved and I have just verified this with a test message. I am therefore reposting once again one of my posts of yesterday here (not exactly identical to the original, being reconstructed from memory). It is a response to Enzo Michelangeli. Please ignore it if you have already seen it. Enzo Michelangeli wrote: > It would be helpful if the list included the approximate size in Mb of each > archive. I'm making arrangements for some mirrors here in Hong Kong, and I > need an estimate of the space needed. I don't know. But a number of years ago I accessed some archive sites of software for processing of Asian languages. From that and the fact that modern disks have become much bigger in capacity and cheaper, I suppose that storage shouldn't be a bottleneck. I like to take the opportunity to mention a non-trivial issue that happens to have refreshed my attention by a reader's letter in a computer journal, namely that software at public archives could be infected by virus. I suppose one should give this potential risk some consideration, since in the present context there could be some third party particularly interested in disrupting the goals of crypto archives. Another point I like to raise is what to archive, i.e. whether only program texts (which are small) or also executable files, and how to let the archive contents be up-to-date. Related to this is whether the archive owner has to fetch everything himself or there is also a directory for uploading by contributors (this is the case with the archives I mentioned above and is sensible for new software and for updates.) M. K. Shen

1 0

Mornington Crescent Explained (was RE: Global Strike to protest Wassenaar)
by Brown, R Ken 17 Dec '03

17 Dec '03

> Ben[SMTP:ben@edelweb.fr] wrote, in reply to me replying to Richard Bragg: > >> > Ever played Mornington Crescent? Try the same thing with >> > e-mail. The idea is that only those in the game know "the rules". >> > These rules can change at any time in any way and all >> > "real players" can tell about the new "rules" and adjust accordingly. >> >> showing of course that he either doesn't know the *real* rules of >> Mornington Crescent or else (more likely) doesn't want to reveal them! Oh, >> and this posting quite clearly wins this round - even with the new DLR >> extensions and the Elverson Road footbridge:-) >Ok Ken--you didn't get 'Soccer Moms', now us Yanks don't get 'Mornington >Crescent'. You want to explain to the list? Well, you *did* ask. Don't blame me. It is summed up well at: http://vortex.hawo.stw.uni-erlangen.de/~asheiduk/pgg/06S/06S008.html or, more prosaically, at: http://www.geocities.com/CapitolHill/Senate/6270/ed_morning.htm Straight from the horse's mouth: http://news.bbc.co.uk/hi/english/uk/newsid_79000/79273.stm A transcript of an actual game can be found at: http://www.lazarus.demon.co.uk/mc/mc100.html - he also has many other links at: http://www.lazarus.demon.co.uk/mc/mc.html The Encyclopaedia Morningtonia has more detail than anyone in their right brain would want to know about the game at: http://aurora.york.ac.uk/mc_em.html Here are the rules of a slightly different game that Richard may have been thinking of: http://members.xoom.com/mornomic/ruleset.html and http://www.cms.dmu.ac.uk/~c94kd/mornomic/ruleset.txt Ken

1 0

German government press release on Wassenaar
by ulf＠fitug.de 17 Dec '03

17 Dec '03

Press release from the Ministry of Economy http://www.bmwi.de/presse/1998/1208prm2.html, my translation: Export control for encryption technology loosened No "key recovery" for cryptographic products At their plenary meeting on December 2nd and 3rd 1998 the 33 treaty states of the Wassenaar Arrangement have decided to revise the export control for encryption technologies (cryptographic products). Export control has been loosened, and the embodiment of crypto restrictions has been hindered. Thus there will be no export ban for encryption products in the future. The previously comprehensive control characterized by a large number of sectoral exceptions has been replaced by a positively formulated list text. In future all kinds of products - hardware and software are treated in the same way - are only subject to export control starting at a key length of 56 bits. Mass market products that fulfill certain requirements are subject to export control only up from a key length of 64 bits. For the present the restriction to 64 bits is valid for two years, it must then be renewed unanimously or it will be cancelled. In addition, methods such as digital signatures and authentication as well as certain product groups such as wireless phones and pay TV devices are completely exempted from export control. The regulation concerning freely available products (public domain) has remained unchanged. Certain states that had initially demanded special treatment for "key recovery" products have not have been unsuccessful. Thus the export of encryption technology will remain possible without depositing keys with government agencies. ---------------------------------------------------------------------- >From an AP news report, my translation [The Green Party is part of the new German government, but the Ministry of Economy is led by the Social Democrats]: Green Party member of parliament Hans-Christian Ströbele critisized that the government gave in to US pressure for stronger control on encryption. The agreement would affect the obvious need of computer users to protect their business and private communication from unauthorized access. Also the business opportunities of German producers of powerful encryption software would be reduced in a serious way. Thus when implementing the agreement in national law, negative effects must be limited as much as possible.

4 7

Thank you for downloading DropStuff
by Aladdin Customer Service 17 Dec '03

17 Dec '03

Dear Cypher Punks, Thank you for downloading Aladdin DropStuff with Expander Enhancer 4.5. (If you had any problems downloading the software, please contact Aladdin Customer Service by sending an email to service(a)aladdinsys.com.) As you know, DropStuff is shareware, and you may try the software out for up to 15 days with no obligation. After that, please register DropStuff 4.5 by using our onlineregistration form, available on the Aladdin web site at: http://www.aladdinsys.com/store/ At Aladdin, we believe in maintaining a close relationship with our customers. What you think about us and our products is important to us. From time to time, we send out surveys about Aladdin, our products and service as a means of improving your experience with us. We hope that you will take a few minutes to respond to these surveys. When you become a registered user of DropStuff 4.5, you'll be entitled to special value offers on Aladdin products, we'll notify you of upgrades, special updates and events and provide you the excellent technical support for which we're famous. We hope you enjoy using your new copy of DropStuff with Expander Enhancer 4.5. Thank you, Marty McGillivray Product Manager The StuffIt Family of Products Aladdin Systems, Inc.

1 0

RE: Postcard Debates
by Joel O'Connor 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Deep. . .mad deep. I completely agree, does anyone know of any such laws regarding e-mail? -----BEGIN PGP SIGNATURE----- Version: PGP 6.0.2 iQA/AwUBNnFaV1MQ9C083U98EQIkFwCcDqbpZqgR0wehfhGufe8Rqzr8ZKcAoNH8 xVqePuZTtRuBALc2NSfiM3BS =kkN5 -----END PGP SIGNATURE----- ---"Wilson, Jamie (J.R.)" <jwilso37(a)visteonet.com> wrote: > > If everyone just encrypted their messages then no suspicions would be raised > regarding the use of encryption. Most people use envelopes, plain and > simple -- and as a result no one questions what they are hiding. It's > understood that mail is private and therefore people have a right to seal it > in an envelope and not worry about people tampering with it. On the same > note, there are federal regulations and penalties (in the U.S. anyway) for > tampering with mail and interrupting the delivery of it. The same laws > should apply to email. > > ____________________________________________________ > Jamie R. Wilson > > > > -----Original Message----- > From: Robert Wenzler [mailto:rwenzler@usachoice.com] > Sent: Thursday, 10 December, 1998 13:56 > To: Mbishop645(a)aol.com > Cc: maven(a)weirdness.com; hab(a)gamegirlz.com; Cypherpunks(a)toad.com > Subject: Re: > > > > > Mbishop645(a)aol.com wrote: > > > > >HaB wrote: > > ><snip> > > >> That's a good place to begin, though. "Would you send a letter to > > >> someone without an envelope?" "Then why not put your email in the > > >> electronic equivalent of one?" > > >> > > >> balance. > > > > > >Would I send a letter to someone without an envelope? > > >One word: postcard. > > > > Ahh, but would you tape a check for your phone bill to a postcard? Other > > than writing a greeting to someone what else do you use a postcard for? > > No, I would not tape a phone bill check to a postcard. There is the > chance for it to fall off. > > There is different methods of sending mail for different levels of > security and functionality. Some people make it obvious what is inside > an envelope. (who would not recognize a Christmas card from the > envelope?) Others make it as bland and normal as possible to > have it go by without much notice. > > It all depends on how secure you want it. Some things you can do > with what amounts to postcard security. > > What amount of security do you want for your email? Would you be > willing to do something extra for that security? > > This type of question is up to each person. How much risk is the > person willing to take. Each person has the responsibility to > understand what the risks are and to decide what risks they are > willing to take. > == Ogre bounces like sonar. . .Peace. Ogre _________________________________________________________ DO YOU YAHOO!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

Welcome to Netcenter
by netcenter-reg＠netscape.com 17 Dec '03

17 Dec '03

Dear Monica Lewinsky, Welcome to NETSCAPE NETCENTER, where you can access all the Internet services you need in one convenient location. With your FREE enrollment in Netscape Netcenter, you're joining millions of others who've already discovered the Internet's best resource for software, content, commerce, and community. YOUR FREE EMAIL ACCOUNT ************************************************** As a bonus, we have automatically reserved for you your own private Netscape WebMail account: cpunksusa(a)netscape.net Netscape WebMail accounts, provided free to all Netcenter members, are accessible from any computer with internet access. You can activate your WebMail account here: http://home.netscape.com/netcenter/mail/index.html IMPORTANT MEMBERSHIP INFORMATION ************************************************** Each time you visit us at Netscape Netcenter, you will enter your user name and password. Our records now indicate: Your User Name is: cpunksusa Please keep this information for future reference. BEST OF THE NET ************************************************** With your Netscape Netcenter membership, you'll be able to take advantage of a broad variety of business and consumer channels like news, sports and personal finance; outstanding products from leading companies such as Music Boulevard, Travelocity, Amazon.com, and FTD; and integrated services like personalization to give you the information you want, when you want it. And, there's more! We'll send you a periodic email newsletter featuring all the latest information on the specials, services and products available to you. It will keep you informed of the frequent updates and new services being added to Netcenter. Thank you for becoming a member of Netscape Netcenter, your home on the Net. The Netcenter Team http://home.netscape.com/netcenter NETSCAPE NETCENTER ************************************************** Netsearch: http://home.netscape.com/escapes/search/netsearch_0.html WebMail: http://home.netscape.com/netcenter/mail/index.html Personalize: http://my.netscape.com/index.html Member Directory: http://home.netscape.com/memberdirectory ************************************************** Netscape respects your online time and Internet privacy. This welcome letter is a one-time only mailing. If you would like to subscribe or unsubscribe to other Netscape or partner mailings, please visit our In-Box Direct service. http://form.netscape.com/ibd/cgi-bin/ibd-x.cgi Copyright (c) 1998. Netscape Communications Corporation. All rights reserved

1 0

Your Postal Code
by netcenter-reg＠netscape.com 17 Dec '03

17 Dec '03

Dear Monica Lewinsky, You have received this email because you had requested Netcenter to mail you the postalcode used in your Netcenter registration. We have your postalcode as: "90024" You can use this postal code to obtain your password or username. If it is not your correct postal code, please update it (and any other out-of-date information) in the Netcenter Member Center. Thanks, Netcenter Registration

1 0

Linux Encrypted File Sytem
by Mike Gorsuch 17 Dec '03

17 Dec '03

Hey guys, I'm hoping that you guys can point me in the right direction. I have become very interested in the idea of an encrypted file system, rather than encrypting individual files. I read an article in the Linux Journal that talked about how to give Linux the support. Well, first I had to get the source for an older kernel, 2.0.30, and use the patches. It patched and compiled fine. Next I was supposed to patch mount. The problem I am facing is that the mount source will not take the patch right. If anyone can help me on these two issues I would be very happy: 1) What source version of mount do I need to use? 2) Is there a way to get kernel 2.0.35 or later to use this support? Mike ----------------------------------------------------------------------------- "The Darkest Hour is Always Just Before Dawn..." Mike Gorsuch aka Wulfgang ICQ UIN 670820 email: mikeg(a)soonernet.com Web Page: http://www.geocities.com/Area51/Rampart/6071 ------------------------------------------------------------------------------

5 7