December 2003 - cypherpunks-legacy

Re: Anonymous phone calls...
by andreas.elbert＠gmd.de 17 Dec '03

17 Dec '03

>Maybe in Norway you do, but not here. The Orange Cards were >completely anonymous, I think, and there's certainly no reason that a >card system couldn't be set up that is anonymous if those weren't. > prepaid cards can be set up to work anonymously, sure. Unfortunately, the one making this decision (the network operator) is more concerned with toll fraud and usage statistics. E.g. the german telekoms payphone log the time of a call and the serial number of the prepaid card. (And the only one reading their publications (and complaining) is the CCC, which has not quite the right reputation to raise the newspapers attention)

1 0

Text of MIT PGP Announcement
by Hal 17 Dec '03

17 Dec '03

> MIT has just officially announced the upcoming availability of PGP 2.5. > The announcement was just made at Networld+Interop '94 in Las Vegas by > Jeff Schiller, MIT's Network Manager. The text of the actual > announcement is available via WWW at http://www.media.org/. Look under > "MIT PGP Security Announcement." Here is what I found there: [IMAGE] MIT PGP ANNOUNCEMENT _________________________________________________________________ These pages constantly under construction _________________________________________________________________ [IMAGE] Jeffrey Schiller _________________________________________________________________ The Massachusetts Institute of Technology announces that it will shortly distribute PGP version 2.5, incorporating the RSAREF 2.0 cryptographic toolkit under license from RSA Data Security, Inc., dated March 16, 1994. In accordance with the terms and limitations of the RSAREF 2.0 license of March 16, 1994, this version of PGP may be used for non-commercial purposes only. PGP 2.5 strictly conforms to the conditions of the RSAREF 2.0 license of March 16, 1994. As permitted under its RSAREF license, MIT's distribution of PGP 2.5 includes an accompanying distribution of the March 16, 1994 release of RSAREF 2.0. Users of PGP 2.5 are directed to consult the RSAREF 2.0 license included with the distribution to understand their obligations under that license. This distribution of PGP 2.5, available in source code form, will be available only to users within the United States of America. Use of PGP 2.5 (and the included RSAREF 2.0) may be subject to export control. Questions concerning possible export restrictions on PGP 2.5 (and RSAREF 2.0) should be directed to the U.S. State Department's Office of Defense Trade Controls. [IMAGE] Return to Cyberstation Home mail commentsto webmaster(a)media.org

1 0

PGP 2.3a keys
by SINCLAIR DOUGLAS N 17 Dec '03

17 Dec '03

I know I could just read the source to find this, but... Is the version number on a PGP public key inside the security wrapper or not? If not, it should be possible to write a program that would take a 2.3a key and spit out an identical 2.5 key. The keyserver database could be updated in this manner, and everybody would be happy.

1 0

Re: Keyserver service outRAGE
by Tom Allard 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- gtoal(a)an-teallach.com (Graham Toal) sez: [...] > The restriction on what new keys they accept was part of the deal, but > stop and think what it really means - is it going to affect *anybody*? Yes, it will effect those not in the U.S. Or did you forget about them? > And what's to stop you fetching 2.5 and loading/re-dumping your old > key from that version? ITAR. [...] rgds-- TA (tallard(a)frb.gov) I don't speak for the Federal Reserve Board, they don't speak for me. pgp fingerprint: 10 49 F5 24 F1 D9 A7 D6 DE 14 25 C8 C0 E2 57 9D -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLcjYyKAudFplx0TNAQH+cgP9EG7/jn0XdD1ZmCZTK4mk+VEjie13LXwH V927mWRLLgSu11Tj+6SsdNg9g9R2xIpXt47mMGetr3n6A6hB35UshaGAxyMPNI4V bBetgRTZUx2wzKbd2V3Gyi8hxw6Kf64FuCZnUZNe5Ds6Jg2w8Do8a4AYCbV5Ua/M 1s/MtSUY9Dk= =1vax -----END PGP SIGNATURE-----

2 1

Re: Valid MacPGP??
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

Sorry to everyone on the list about that last message from me. Teach me to watch the headers closer... -j

1 0

Marked_Money
by remailer＠merde.dis.org 17 Dec '03

17 Dec '03

Is there a way of marking digital coins, so the depositor can be identified?

3 2

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Can someone re-post the dumpster-dived Mykotronx information that was posted to the list last year? I need it for an article on Clipper that I'm working on. Also, has the government announced which agencies are going to be holding the two pieces of Clipper keys in "escrow"? ...Wally

2 1

Re: Text of MIT PGP Announcement
by markh＠wimsey.bc.ca 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Subject: Re: Text of MIT PGP Announcement > PGP 2.5 strictly conforms to the conditions of the RSAREF 2.0 license > of March 16, 1994. Hmm... This version of the RSAREF 2.0 licence agreement did not have the definition of published interface that was included in later versions. (e.g. April 15, 1994) In particular, if you interpret "published interface" to be "all the routines one can call from an unmodified version of RSAREF 2.0", you would probably be able to build a version of PGP based on these. Here are some extracts from the March 16 1994 licence agreement > d. Prior permission from RSA in writing is required for any > modifications that access the Program through ways other > than the published Program interface or for modifications > to the Program interface. RSA will grant all reasonable > requests for permission to make such modifications. >... > 7. RSAREF is a non-commercial publication of cryptographic > techniques. My bet is that this involves some legal funny stuff with this version of the licence agreement. Another possibility is that PGP 2.5 will use triple DES. All just speculation. I don't have any inside information. Mark -----BEGIN PGP SIGNATURE----- Version: 2.4 iQBVAgUBLcljyWrJdmD9QWqxAQG4ywIAnXtDP6aKPP5VGtPuKxOiSWiKryP7qeHJ 7jfMkXC9QQJttzujStPXNl8UlDFf7CErfeNHleo+CCtOCOpqiz76SA== =aHYn -----END PGP SIGNATURE----- -- Mark Henderson markh(a)wimsey.bc.ca - RIPEM MD5: F1F5F0C3984CBEAF3889ADAFA2437433 ViaCrypt PGP key fingerprint: 21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46 low security key fingerprint: EC E7 C3 A9 2C 30 25 C6 F9 E1 25 F3 F5 AF 92 E3 cryptography archive maintainer -- anon ftp to ftp.wimsey.bc.ca:/pub/crypto

1 0

No Subject
by anonymous＠extropia.wimsey.com 17 Dec '03

17 Dec '03

Ah, the problems of anonymity. In order to prevent impersonation, I'm passing my public key to the list. Future messages from me will be signed with this key. -Lady Ada -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi2rMQAAAAEEALehNDQG2UpPhFLspypt6dPLFjSB1wnwFW9p8cEftZ+ga/ZU 06mywff21ODSYily2NMwOpw+mxSkxiOTJDdjJ3kenRW4qwpvmBGs96AK+0yv2DDh R3ff9cpOlIu3tUcJhmdTcSj+MXlkYwJwhJoA9o4uCFXahN5W1KXNQdJx1hMZAAUR tBZMYWR5IEFkYSA8bm93aGVyZUBhbGw+ =K9ps -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Hell's Bells...
by jim＠Tadpole.COM 17 Dec '03

17 Dec '03

I think if you look a bit more closely, the host attached to the 'name' is at Arlington National Labs. Jim

1 0