December 2003 - cypherpunks-legacy

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Developers using the current version of PGPtools should becareful to add keyspace FIFO and passphrase "burns" to their applications to insure that security critical information is NOT left carelessly in memory... while PGP 2.3A is VERY scrupulous, PGPTools package does NOT have sufficient internal checks and "burns" at present...this is left to the developer at pressent... I also noted a fifo_unlink routine where a burn should be performed prior to the unlink from the FIFO queue... Anon

1 0

How to easily increase remailer traffic
by rjc＠gnu.ai.mit.edu 17 Dec '03

17 Dec '03

Recently I was reading a message about how fast ftp porno sites go down because as soon as they are announced they undergo constant heavy use. Given an anonymous remailer network, there is no need for sending random noise messages to keep a constant traffic. Simply set up a double blind porno e-mail archive site. The site address itself would be a self-addressed pgp remailer block, and all return addresses would be SASE too. Not only would this provide a constant background of data flowing to hide important messages in, but it would also incentivize thousands of people on the net into using pgp via e-mail daily and would educate them about crypto. The double blind mechanism would keep the site safe from direct attack, and would give many people more confidence about requesting such files (since they could be encrypted on delivery) As more sites pop up using the double blind mechanism to avoid discovery, more and more remailers would be added to the network. People would be encouraged to set up simple light-weight remailers in their .forward once they figure out that there is safety in large numbers. Pornography is usually the first media to use new technology. Whether it's modems, networks, bbs, minitel, irc, muds, cd-roms, independent phone service, desktop video, desktop publishing, video games, you name it. Let's harness its power to found cryptoanarchy in cyberspace. All that's needed is a uucp setup, about 20 megs for jpeg picture archive or story archive, pgp, and some slightly more powerful remailer software. This is guaranteed to generate a steady stream of remailer usage (possibly too much) -Ray (unsubscribed still) -- Ray Cromwell | Engineering is the implementation of science; -- -- rjc(a)gnu.ai.mit.edu | politics is the implementation of faith. --

1 0

Re: Strategies for getting encryption in widespread use QUICKLY
by Pat Farrell 17 Dec '03

17 Dec '03

In message Sat, 12 Feb 1994 13:00:55 -0800, Peter shipley <shipley(a)merde.dis.org> writes: > This is why I email this list to encourage the use of MIME email headers > with a MIME mailer (elm, pine, mh, Zmail etc..) when a person > receives email, the mailer agent will invoke pgp automaticly > thus reading encrypted email is a user transparent process. Clearly MIME is a step in the right direction. And clearly MIME is steg friendly, who can tell a MIME encoded PGP message from a MIME encoded GIF file without looking at character frequencies, etc. (You _know_ that I'm going to lie about the MIME-Content-Type flag :-) But I haven't yet found a Windows PC client that will work without TCP/IP. Maybe I haven't looked hard enuff. Since 85% of all computers are shipped with Windows, "widespread use" means Windows (or Windoze for the cynics). I also don't know why the network vendors charge so much more for SLIP and/or PPP, but until IP is as cheap as async, there is a need for lower technology solutions. There are also some design questions that have to be addressed on the human interface side. For example, some folks strongly prefered not to receive encrypted mail, because they didn't work in an PGP friendly environment. So you need to have a client that is smart enuff to automatically encrypt to folks who control machines on the net, and not encrypt by default to folks using unsecure delivery such as netcom.com's vt100 based users. And you need a nice way to override the default. Clearly this information goes in the roledex that you keep with your client software. I mention it only so that folks realize that the simple publication of a PGP or RIPEM key does not indicate that a user is ready to receive all email encrypted. Solving these problems is exactly why we write code. Pat Pat Farrell Grad Student pfarrell(a)gmu.edu Department of Computer Science George Mason University, Fairfax, VA Public key availble via finger #include <standard.disclaimer>

2 1

Re: Oh No! Nazis on the Nets
by greg＠ideath.goldenbear.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "Perry E. Metzger" <uunet!lehman.com!pmetzger> writes: > I'll remind you that the supreme court has held that text-only works > can not be held to be obscene. You can write anything you want, > including explicit descriptions of sodomizing dead children, and it > can not be censored. As I mentioned to Perry in E-mail, the above is incorrect. Pure text can be obscene and hence unprotected by the First Amendment. Kaplan v. California, 413 U.S. 115, 118-119, 93 S.Ct. 2680, 2683-2684 (1973). Others here (Mike Godwin?) can likely provide a much better discussion of just where this fits into First Amendment law; Shepherds' reveals no more recent decisions which modify the holding in Kaplan. -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLVxTKX3YhjZY3fMNAQEd2wP7BmUq0bUzhdhSg9+/Y/+by1C+p0dEu2ef Q8c0nlzkux6cUBQPrr18/c+dAmMQ4x+Dofr/0N1jF+q9uffnVmeVa9qQjzB1SzJy 9PCsXI7x/7B1bNZFuegliJvUn7aD7UqBBS9Au7/nlZ6Ky8Gb6G0HadrIaZyP9yQy PuQh+QDXTnY= =F0SC -----END PGP SIGNATURE----- -- Greg Broiles ".. has bizarre Cyberanarchist theories relating greg(a)goldenbear.com to human punishment." -- L. Detweiler

2 1

Blatant Plug
by Chris Goggans 17 Dec '03

17 Dec '03

After a complete sellout at HoHo Con 1993 in Austin, TX this past December, the official Legion of Doom t-shirts are available once again. Join the net luminaries world-wide in owning one of these amazing shirts. Impress members of the opposite sex, increase your IQ, annoy system administrators, get raided by the government and lose your wardrobe! Can a t-shirt really do all this? Of course it can! -------------------------------------------------------------------------- "THE HACKER WAR -- LOD vs MOD" This t-shirt chronicles the infamous "Hacker War" between rival groups The Legion of Doom and The Masters of Destruction. The front of the shirt displays a flight map of the various battle-sites hit by MOD and tracked by LOD. The back of the shirt has a detailed timeline of the key dates in the conflict, and a rather ironic quote from an MOD member. (For a limited time, the original is back!) "LEGION OF DOOM -- INTERNET WORLD TOUR" The front of this classic shirt displays "Legion of Doom Internet World Tour" as well as a sword and telephone intersecting the planet earth, skull-and-crossbones style. The back displays the words "Hacking for Jesus" as well as a substantial list of "tour-stops" (internet sites) and a quote from Aleister Crowley. -------------------------------------------------------------------------- All t-shirts are sized XL, and are 100% cotton. Cost is $15.00 (US) per shirt. International orders add $5.00 per shirt for postage. Send checks or money orders. Please, no credit cards, even if it's really your card. Name: __________________________________________________ Address: __________________________________________________ City, State, Zip: __________________________________________ I want ____ "Hacker War" shirt(s) I want ____ "Internet World Tour" shirt(s) Enclosed is $______ for the total cost. Mail to: Chris Goggans 603 W. 13th #1A-278 Austin, TX 78701 These T-shirts are sold only as a novelty items, and are in no way attempting to glorify computer crime.

1 0

Meeting Thanks
by Greg - Kucharo 17 Dec '03

17 Dec '03

Thanks to everyone who organized and presented at saturdays meeting,I had a great time and learned a great deal.I'm already looking foward to the next meet. Greg/kryten

1 0

Re: SCI: Brain Wave Alteration
by jdwilson＠gold.chem.hawaii.edu 17 Dec '03

17 Dec '03

Re use of strobe in EEG's - yes, the use of strobe lights with both closed and open eyes at various frequencies are still part of the standard EEG diagnostic protocol for differentiating among other things epelepsy, narco- lepsy, and other neurological disorders of this nature. -Jim

1 0

UNSUBSCRIBE
by jcook＠pro-storm.metronet.com 17 Dec '03

17 Dec '03

UNSUBSCRIBE ME PLEASE.

1 0

Unsubscribe
by Thure 17 Dec '03

17 Dec '03

Unsubscribe me please. / Bjoern nv90-btu(a)nada.kth.se

1 0

Pornography Server
by Robert A. Hayden 17 Dec '03

17 Dec '03

In response to the posting about setting up a pornography server (Sorry, I'm afraid I deleted the specific message so I cannot remember who you was :-). That is certainly a way for people to get and use PGP and to get used the remailers. It would get a lot of heavy use as well. Now, if there was a way to batch mailings (so that if, say, six people ordered one item, it would be sent as one letter to all six instead of six different letters, with precedence set to bulk), that would help even more. Now, there are also some practical considerations as well. What materials do you archive? If you put up pictures (gif or jpeg), you will be talking about tremendous amounts of traffic. Once they are uuencoded, even with compression, they can be huge. If you limit yourself to things such as stories and the like, you will have less traffic, but also less use. There is also the legal side of distributing pornography. Interstate transfer is naughty and with Al Gore's Information-Superhighway Patrol, it will raise some very political issues (but, by using a decent blind system, for all the patrol knows, the distributor might be in the recipient's state). Also, and this is really just an interface issue, scripts should be developed that will automate the retrieval process (ie, build and submit the mail message). These would be similiar to the hop.mail or anon.mail scripts, but would be custom to the pornography server. For example: It begins with an input for the file to be retrieved. It will continue prompting for that until the person enters a null (or 'q' or something) It will then list (at least) one dozen remailers, and they can select one (or take a default, and randomize it. Or perhaps randomize it through >1 remailer, although that decreases response time.). They will then have to PGP sign their mail message (so that the ordering software can verify the person placing the order. This is to cut down mail-spoofing to mail-bomb an enemy with porn.) Encrypt it for the appropriate parties Send it on its way. The server can either reply immediately with the appropriate files, or it can batch everything up for processing during low-traffic times (I personally like the first, but dont' really care that much). The mail is then PGP encrypted back to the recipient (by getting the key from a key server, or by having the orderee register their key before hand, with the latter probably being easier, although it does leave a paper trail that can be examined) and sent out with precedence set to 'bulk' so that other stuff is more important on the mail links. It should all be fairly accomplishable with a series of perl and sh scripts on either end. The real question is what to offer. I'll talk more about this from an organizational stand-point if anyone is interested. I'm afriad that I'm really not that good a programmer (even of simple shells) as my field of expertise is in management and other administrative stuff (but obviously not spelling :-) ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> In the United States, they \/ Finger for PGP 2.3a Public Key <=> first came for us in Colorado... -=-=-=-=-=-=-=- (GEEK CODE 1.0.1) GAT d- -p+(---) c++(++++) l++ u++ e+/* m++(*)@ s-/++ n-(---) h+(*) f+ g+ w++ t++ r++ y+(*)

1 0