December 2003 - cypherpunks-legacy

Re: Security of PGP private keys
by dmandl＠lehman.com 17 Dec '03

17 Dec '03

> From: jrk(a)sys.uea.ac.uk (Richard Kennaway) > > PGP secret keys are protected by a password. Yet people have said that one > should not keep one's secret keyring on an insecure machine. Why? > > -- ____ > Richard Kennaway __\_ / School of Information Systems > Internet: jrk(a)sys.uea.ac.uk \ X/ University of East Anglia > uucp: ...mcsun!ukc!uea-sys!jrk \/ Norwich NR4 7TJ, U.K. 1. Why take chances? Once the evil intruder has the file, she can throw test passwords at it from now till doomsday and might be able to crack it. 2. On shared machines, there are ways for users with the appropriate access to read your keystrokes (like, for example, when you type in your pass phrase). Anyone with that access should also be able to grab your secring.pgp with no problem, and that's that. --Dave.

1 0

CASH: crosspost
by Karl Lui Barrus 17 Dec '03

17 Dec '03

At risk of irritating some folks who already saw this, a crosspost: > Medvinsky, Gennady and B. Clifford Neuman. "NetCash: A Design > for Practical Electronic Currency on the Internet" Proceedings > of the First ACM Conference on Computer Communications Security > (November 1993) [available via anonymous FTP, > <URL=ftp://prospero.isi.edu/pub/papers/security/netcash-cccs93.ps.Z>]. > Addressing the pressing problem of how to conduct fiduciary > business on the Internet, Medvinsky and Neuman describe a > system that allows clients, merchants, and currency servers to > interact in a secure fashion over an insecure medium. The > framework presented here addresses, to varying degrees, the > following issues: security, anonymity, scalability, > acceptability, off-line operation, transferability, and > hardware independence. The authors readily admit that this > scheme does not solve all of these problems perfectly, but it > does allow for the integration of other protocols when utmost > anonymity and offline capabilities are required. - DR

1 0

Re: a desperate plea
by lefty＠apple.com 17 Dec '03

17 Dec '03

> No, I wasn't complaining about his personal attacks per se but his long term >behavior on this list and Extropians which is mainly "hit-and-run" >attack posts about once a month which usually generate massive flame wars. >(the last of which ended up with Tim May leaving the extropians list) Let me make sure I understand this: are you claiming that _I_ caused Tim to leave the Extropians list? -- Lefty (lefty(a)apple.com) C:.M:.C:., D:.O:.D:.

1 0

Re: Help writing code
by Pat Farrell 17 Dec '03

17 Dec '03

Let me quickly try to clear up some confusion. I've gotten several replies (real quick response) that are answering a different question. I'm not trying to reimplement TCP/IP. I'm trying to provide a Windows version of NUpop, which is a DOS program that works fine over a simple serial line. Most folks automatically associate SMTP/POP with TCP/IP, but there is no connection. Admittedly they work better with a robust, end to end protocol. But I've been using NUpop for a year over a non-TCP/IP line. I get hundreds of messages a day. It works. But there are no sources available to NUpop, it is a DOS program, and it doesn't support piping messages thru PGP/RIPEM/... I have lots of DOS libraries that do exactly the simple things I need. I don't want to use DOS, I want native Windows code. Pat Pat Farrell Grad Student pfarrell(a)netcom.com Department of Computer Science George Mason University, Fairfax, VA Public key availble via finger #include <standard.disclaimer>

1 0

Re: help writing code
by Pat Farrell 17 Dec '03

17 Dec '03

In message Wed, 27 Oct 1993 10:10:04 -0600 (MDT), mpjohnso(a)nyx.cs.du.edu (Michael Johnson) writes: > The only way to communicate reliably over the serial port in Windows is > to upgrade the UART in your serial port to a 16550AFN or equivalent. The > standard UART (16450 in AT class machines) has no buffer and suffers from > frequent dropouts due to data overwrite on receive. If you can't do that, > then an error correcting protocol such as SLIP or PPP is required. A 16550 is clearly a big help, but Microsoft admits that their comm.drv fails often when you are using speeds greater than 4800. I have 16550's in my PC. A step in the right direction is TurboComm, a replacement driver, but that is expensive. A hardware solution is to use an intellegent serial card, like Hayes ESP or Telcor's T/Port. An O/S solution is to use a real operating system, :-) I want a no cost, MS-Windows solution. But I think folks read too much into my use of "robust" NUpop works fine as a DOS program without end-to-end. I simply want that functionality in a Windows program. No more, no less. I'm aiming low end, the mass market with a 386sx and a 2400 modem. Folks like me with a network of PCs in their house and even cypherpunks are not my market. The English majors, history and art majors are the folks I envision when I see a "user" Pat Pat Farrell Grad Student pfarrell(a)netcom.com Department of Computer Science George Mason University, Fairfax, VA Public key availble via finger #include <standard.disclaimer>

1 0

Re: Net Regs.
by kwaldman 17 Dec '03

17 Dec '03

In response to my reply to Duncan's *"Net Regulation" Perry wrote: >To: kwaldman <kwaldman(a)BBN.COM> >Subject: Re: Net Requlation >Date: Wed, 27 Oct 1993 09:53:47 -0400 >From: "Perry E. Metzger" <pmetzger(a)lehman.com> >You do realize that cypherpunks is not extropians... >kwaldman says: >> Say the best way to go is to become a perpetual tourist. That is >> you don't have US citzenship and thus are not subject to it's taxes and >> other nosy laws. [Not that other government's don't have nosier laws]. >> Anyway Yes I realize it, and perhaps Perry's right we should move this to extropians. Karl * BTW I spelled Duncan's name wrong twice in 1 paragraph in my last post. Sorry.

1 0

blacknet international offers DOSSIERS for SALE
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

In article <9310270231.AA02958(a)tamsun.tamu.edu> remail(a)tamsun.tamu.edu writes: > blacknet international is pleased to offer the following materials for sale: > > DOSSIERS: on the current participants in the Cypherpunks Mailing List Flame war > > PRICES: Prices and delivery terms upon request via encrypted anonymous return > address. > > SUBJECTS: > Perry Metzger <pmetzger(a)lehman.com> > Duncan Frissell <frissell(a)panix.com> > S. Boxx <an12070(a)anon.penet.fi> > L. Detweiler<ld231782(a)longs.lance.colostate.edu> > Timothy C. May <tcmay(a)netcom.com> > Ray Cromwell <rjc(a)gnu.ai.mit.edu> > David Sternlight <strnlght(a)netcom.com> > > These are available now via PGP encrypted return anonymous mail. Yes yes, very droll. What's not so funny is that the moderator of comp.dcom.telecom appears to have taken the BlackNet joke idea for his very own, and *is* selling dossiers on people for the purposes of doing nasty things to them (as he says himself in a footnote some way down this post) Of course, I'd like to discuss this in comp.dcom.telecom, but I'm persona non grata there nowadays...

2 1

My key
by an41418＠anon.penet.fi 17 Dec '03

17 Dec '03

As Hal Finney suggests, a pseudonym is a key. Others have also inquired about my key, so I made one. However, posting it to the group makes no sense because if this message were a forgery, then someone could pose as me. Strange, the idea of someone posing as someone else's pseudonym. Anyway, send me e-mail if you want my public key, and I'll send it to you. Wonderer P.S. Silly pgp question: When I type pgp -sa file -u wonderer I produce an entire pgp message. How do I make a shorter signature that is a hash of my message? ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

2 1

Re: My Views on the Detweiler Matter
by jamie＠netcom.com 17 Dec '03

17 Dec '03

Cypheroids and Cypherettes, The eventual recognition that names are symbol strings and not their referents is akin to the realization that the map not being the terrrtory. Yep, sometimes we just keep learning the same old lesson. The Detweiler/Boxx rants have the flavor of a reformed alcoholic distrupting the champagne toast at a wedding, selfishly driven by their world view and utterly unaware of the social dynamics around them. But aside from the rantings, pleas for TrueNameUtopia in CypherSociety, and threats, I sense something else. Take your pick of remark -- "thou doth protesteth too much," or "where there's smoke there's fire," or ... . Seems to me that the essential raison d'etre of L.Detweiler and S.Boxx (and even sometimes The SternLight himself) is purposive to distract c'punks from "writing code" or essays or having fun. This is basic motivated deception used in sports, business and the military ... get the opponent to do something else ... Here's one interpretation: if c'punks weren't pushing the envelope in creating both tools and understanding for things like cryptography, anonymous remailers and digital cash, nor pushing the social bounds through BlackNet, Nyms, Sam Hill, and May's CryptoAnarchy, the Detweiler nonsense wouldn't have emerged. A nerve has been struck; and this seems, in the big picture, to be A Good Thing. I've no doubt that to the true statists, fascists and communists, we are their vision of hell. On the other side of this, they will no longer be the only ones to hide behind anomynity, pull their secret strings, and pronounce agents of change as Evil Incarnate. We stand at the threshold of a new world, in large part to be enabled by cryptography. As "The Net" expands, dark fiber becomes illuminated, online markets flourish and the like, cryptography will be key for economic survival, and it will be in the hands (or machines) of The People, not The State. If such great progress wasn't being made toward providing for personal privacy, the L.Detweiler-Boxxs of the Net would be ranting about something else. So each rant underscores how significant the progress in cryptography is becoming; and it will become more so. In a nutshell, three cheers for c'punks. -- ................................ Jamie Dinkelacker Palo Alto CA Jamie(a)netcom.com 415.941.4782

1 0

Re: Net Regs.
by Duncan Frissell 17 Dec '03

17 Dec '03

K > Yes I realize it, and perhaps Perry's right we should move this K >to extropians. No one has complained to *me* yet. I thought this a cpherpunks issue because it deals with the *Physical* Layer which is just as important a part of the ISO reference model as any other. We have to deal with questions of the interface between some of our technology and the world. Duncan Frissell Free Reference Model mnemonic. Read from the bottom up: Anarchists Communists or Socialists <--- I know they've renamed this but that's the way Trust I first saw it. Never Departments Police Applications Communications System Transport Network Data Link Physical --- WinQwk 2.0b#1165

2 2