December 2003 - cypherpunks-legacy

PGP removal
by KENUNGER＠delphi.com 17 Dec '03

17 Dec '03

I first got pgp2.2 from compuserve ibmsys forum downloads. A few day ago the file finder on cis listed PGP2.3. When I actually looked neither program was there. Sysop says the were removed on advice of his lawyer(not compuserve management ) because of government crakdown. and questios of legality. The not so subtle hand of intimidation by rumor seems to be at work here. Just thought this would be of interest. p.s. I FTPed it from the INTERNET anyway.=======Ken PPUBLIC KEY AVAILABLE ON PGP KEY SERVERS .

1 0

Re: Crypto Toolkit Suggestions
by Phil G. Fraering 17 Dec '03

17 Dec '03

Re: Hiding processes and data via subordinate processes, variables, et cetera... it will probably be a _lot_ better and easier to simply assume that a multi-user unix system isn't secure to begin with, and work out alternatives from there. Phil

1 0

Network Etiquette Question
by DON_HENSON＠delphi.com 17 Dec '03

17 Dec '03

Just a quick question on network etiquette. Shouldn't it be considered bad form to post a PGP-encrypted message (readable by only one person) to a list like Cypherpunks? Don Henson PGP key on server or on request

1 0

Digital Cash Primer
by DON_HENSON＠delphi.com 17 Dec '03

17 Dec '03

Shari Steele writes: -> Hey 'punks. Anyone know of an elementary primer on digital cash? I'm trying to get up to speed on this. <-- I would like an elementary primer also. How about posting the info to the list vice just to Shari. Thanks, Don Henson PGP key avail on server or on request

2 1

Posting Long Documents
by DON_HENSON＠delphi.com 17 Dec '03

17 Dec '03

In the interest of saving money (for those of us who have to pay for our internet access), please DO NOT post long reference documents, such as the 'ASCII version of ECPA' directly to the list. A much better way to get this information out would be to post an anonymous FTP site where the document can be obtained. Would appreciate muchly. Don Henson PGP key avail on server or on request

1 0

Macintosh System 7 Pro, e-mail, encryption
by msattler＠netcom.com 17 Dec '03

17 Dec '03

I installed Macintosh System 7 Pro (7.1.1) onto my PowerBook today. I'd heard that e-mail was part of the new package, but I was amazed to see how integral it is. When you start up for the first time you are asked for a userid and a password to protect your "PowerTalk Keychain". A mailbox and a "catalog" appear on your desktop; the latter is a list of entries in different domains (like AppleTalk, EtherTalk, etc.) so that you can authenticate yourself on all the places you exist with one login. E-mail comes free with the system and works automagically when multiple users install the new system. I haven't used a lot of this system since it's so new, but I sent this message because it heralds a new era of turnkey mail/network-identity. I'm investigating how this works with AppleEvents to see how PGP can be seamlessly integrated. A friend of mine went to the product launch at Apple and got a free "signed" RSA user identification voucher. I'd be very interested in hearing from others who have a clue about this stuff. ----------------------------------------------------------------------------- Michael S. Sattler msattler(a)netcom.com +1 (415) 358-3058 Digital Jungle Software Encrypt now; ask me how. (finger for PGP key) Evil will certainly triumph if good people do nothing at all.

1 0

Re: Standard Headers for Anonymous Remailers
by pierre＠shell.portal.com 17 Dec '03

17 Dec '03

> From: Karl Lui Barrus <klbarrus(a)owlnet.rice.edu> > > The attitude expressed by the individual on io.com shows a problem we > will have in educating others - "anonymous posts CAN destroy a civil > conversation". Yes, maybe so, but in my experience on mailing lists, > bbses, etc. I've noticed that "flame wars" and "anonymous posts" have > NO correlation, and are quite independent of one another. > > Since I've seen "flame wars" on systems with absolutely no anonymous > posting facilities (or none that were used), I conclude that civil > conversation is destroyed by strongly held differences in opinions (or > some other factor I can't pin down). I'll second that. The main menaces against "civil conversations" have been, on Netnews, flame wars and wars between two individuals. After the first few messages, the flamers and the opponents are clearly identified. They are usually proudly posting under their usual Name (as they are all fighting for their Reputation, and for establishing their opponent's Incompetence) (... do we recognize anybody yet :-? ) I actually can't remember such a war involving an anonymous poster (as in "using penet or similar"). What destroys discussions (and forces people to leave them...) is the tendency of threads to start genuine, and to end as flame wars. Certainly, for-money systems would tend to shorten flame wars.. On the other hand in the few discussions against anonymous posting, some people were arguing for "accountability" who were clearly forgetting the proportion of people who use handles or pseudonyms as their default setup. These are not anonymous per se, but in the current fickle netnews, what's the difference? (BlackNet would make a difference :-) Only in the most outrageous fraud cases (votes, forgery...) are pseudonyms tracked back to their account holder. Solution (1/2 kidding): Build an anonymous remailer that gives a choice of "obviously anonymous output", or "random pseudonym output". You could even take the pseudonym from the phone book, or from the names of the people who used the newsgroup in the past :-) Pierre. pierre(a)shell.portal.com

1 0

brin on privacy
by peter honeyman 17 Dec '03

17 Dec '03

david brin spoke in ann arbor recently at a library science school alumni meeting. his talk was titled "Information and the 21st Century: Privacy, Wealth and the Newest Threat to Freedom." here are my recollections; hopefully they're not too dim or biased. getting right to the punch line, tNTtF is this: privacy laws will be used as a weapon by the Rich and Powerful to restrict the free flow of information. brin feels that privacy laws will be ineffective against the RaP, will be sold to the rest of us through effective propaganda, and that they will be used by the RaP as a means to cement their power base. he argues that complete and open access to information provides the greatest social benefit and best serves The American Dream. asked about clipper, he suggested that key escrow was exactly the sort of tool that the RaP would use, and that we would all benefit by banning cryptography. asked whether private citizens should be barred from insuring personal electronic privacy, he replied that he felt that such measures would be ineffective agianst the RaP. (i concluded from these answers that cryptography is not brin's strong point.) brin's message was basically a populist one. he is concerned that the moguls of data will have the opportunity to control what we see and hear. what i found most fascinating about his talk was that while i generally agree with the social objectives he backs, i am in 180 degree disagreement on how to accomplish these ends. peter ps: anybody else get the willies (as it were) reading paul goggin's note about foia, where the asst atty genl was asked about fbi foias against individuals, and replied that the new foia regs presumed disclosure? hey brin, there oughtta be a law!

1 0

What happened to FEE
by Larry Gadallah 17 Dec '03

17 Dec '03

I wonder what happened to the fast elliptical encryption (FEE) encryption software that NeXT was working on about two years ago? I heard that the US authorities took a very dim view of it and I assume that this was because it was either very fast or very strong or both. Pardon my ignorance if this is an old thread, but I haven't seen it mentioned anywhere for quite some time and certainly not in the last month since I was on the cypherpunks mailing list. Thanks, --- --------------------------------------------------------------------- Larry Gadallah Amateur Radio VE4TCP Lac Du Bonnet, Manitoba, Canada IP: [44.135.114.9] SMTP: larry(a)owrlakh.wl.aecl.ca AX25: VE4TCP(a)VE4PIN.#PIN.MB.CAN.NA ---------------------------------------------------------------------

1 0

A new twist on the electronic horizon...
by fergp＠sytex.com 17 Dec '03

17 Dec '03

excerpted from: RISKS-FORUM Digest Tuesday 5 October 1993 Volume 15 : Issue 06 - -- Date: Fri, 1 Oct 1993 11:43:00 -0600 From: tmplee(a)tis.com (Theodore M.P. Lee) Subject: RISKs of trusting e-mail Until such time as either the general population learns what to expect or digital authentication (such as PEM) becomes widespread, I suspect we will hear more of this kind of incident. This academic year the University of Wisconsin started providing e-mail accounts to all students at its Madison campus. (6,000?, maybe) The students, both technical and non-technical, are being encouraged to use e-mail as a way of interacting with their instructors. They access the accounts either through University-supplied machines scattered throughout the campus or through dial-up Serial Link Protocol (SLIP) connections. A mix of Macintosh's, PC's and other assorted workstations are involved. Last week (note how early in the school year) a group of five students, several from the Honors floor of one of the freshman dorms, were caught having forged several pieces of e-mail. Most potentially damaging was a note saying it was from the Director of Housing, to the Chancellor of the University, David Ward; note that the previous Chancellor is now Pres. Clinton's Secretary of HHS, so the present Chancellor is new to the job. The forged message was a submission of resignation. Ward's secretary had just returned from vacation and apparently assumed the proferred resignation was legitimate. The secretary accepted it and started to act upon it -- it was only during the course of that that it was discovered to be a fake. The students also sent messages purporting to be from the Chancellor to other students asking them to pay their tuition. They also forged a message from the Chancellor (my information doesn't say who it went to) saying he was going to "come out of the closet" and announce it Sept. 25. The students were only caught through a combination of circumstances. First, since they used one of the dial-in connections there were logs of who dialed in when. Secondly, during the course of their experiments they botched some addresses which caused enough traffic to go to the dead-letter office that the investigation could narrow what was happening. (It should be pointed out that the forgery was fairly easy to accomplish using the Eudora mail client on a Macintosh: the user has complete choice over the "from:" field of a message.) The FBI is investigating whether any federal crime was involved and, needless-to-say, the students are likely to be expelled at the least. Ted Lee, Trusted Information Systems, Inc., PO Box 1718, Minnetonka, MN 55345 612-934-5424 tmplee(a)tis.com Paul Ferguson | privacy \'pri-va-see\ n, pl, -cies; Mindbank Consulting Group | 1: the quality or state of being apart Fairfax, Virginia USA | from others 2: secrecy fergp(a)sytex.com | ferguson(a)icp.net | Privacy -- Use it or lose it.

1 0