December 2003 - cypherpunks-legacy

List
by Ryan Bushby 17 Dec '03

17 Dec '03

Send List.

1 0

Re: WNSTORM on ftp.wimsey.bc.ca
by markh＠wimsey.bc.ca 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Subject: Re: WNSTORM on ftp.wimsey.bc.ca > I've just ftp'ed this to ftp.wimsey.bc.ca... it's in the /uploads/WNS210 > directory. > I've copied these files to a more permanent place: ftp.wimsey.bc.ca:/pub/crypto/software/dist/US_or_Canada_only_XXXXXXX/Steg Usual routine to get it. i.e. cd /pub/crypto/software, get the README file, and if you agree to the terms then follow the instructions. Mark -----BEGIN PGP SIGNATURE----- Version: 2.4 iQBVAgUBLekUPGrJdmD9QWqxAQH1tQH/WebE3IDtAdl8YcJ7m8KtZ448A1b4aQpM X8E3SCDck/Dql7QMgzYPFpDLZrCiR0pkWR3G9Y5+Wre2G5vClQxZ/Q== =fZOa -----END PGP SIGNATURE----- -- Mark Henderson markh(a)wimsey.bc.ca - RIPEM MD5: F1F5F0C3984CBEAF3889ADAFA2437433 ViaCrypt PGP key fingerprint: 21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46 low security key fingerprint: EC E7 C3 A9 2C 30 25 C6 F9 E1 25 F3 F5 AF 92 E3 cryptography archive maintainer -- anon ftp to ftp.wimsey.bc.ca:/pub/crypto

1 0

Re: Compress before encrypting? (Was Re: NSA Helped Yeltsin...)
by jpp＠jpplap.markv.com 17 Dec '03

17 Dec '03

Date: Mon, 30 May 1994 16:53:32 +0200 From: Alastair McKinstry <amck(a)maths.tcd.ie> [...] While this is true, don't forget the usefulness of known plaintext for brute-force analyses. If you're doing a brute-force search [...] Costs: <$20 million (see Schneier) and this then makes breaking DES keys (for example) trivial, if they all have the plain text. [I presume Alastair ment to say] ...the same known plain text. [...] Ah yes. Well, the state of the art in cryptanalysis (as far as I know) just moved forward a notch. =) j'

1 0

digital clearinghouse idea
by brookfld＠netcom.com 17 Dec '03

17 Dec '03

I am a crypto-novice, so perhaps you can develop these ideas better. But, here goes. Right now, if you want an anonymous transaction done and a small amount of money is involved, you can go down to a bank or Seven Eleven and purchase a money order for cash. You mail the money order, and it is very hard for anyone to find out who you are. The money order has introduced anonymity between you and the payee. My concept is similar, but it would seem that any such concept must work with your existing checking accounts, to be useful today. So, to establish an ecash digital clearinghouse, how about the following: 1. Set up an Ecash Clearinghouse (ECH) in bank secrecy haven, such as Bahamas, Liechtenstein, etc. 2. Subscribers to ECH pay $2/month plus small transaction charge (say $.15/transaction) 3. Each subscriber authorizes his bank to accept electronic checks from ECH as debits to his account. Electronic checks are currently handled by the U.S. banking system as Automatic Clearinghouse transactions, and are used by organizations such as Checkfree(tm) and by insurance companies to automatically take money out of your account each month for premiums, etc. 3. Ecash is emailed to ECH. 4. ECH issues an electronic debit to payor's account. This debit clears, so now the money is in the account of the ECH. 5. ECH issues an electronic payment to the payee's account. This electronic payment is from the ECH, with the ecash number as the "backup" for the transaction. 6. Now everyone has gotten paid. Weaknesses perhaps you can address: the ECH "knows" who is the payor and payee for each transaction. Similar to anon.penet.fi, in that there _is_ a list somewhere which could be seized and use to reconstruct the transactions, e. g. for "law enforcement" purposes. Perhaps ECH subscribers could open an ECH account as a "numbered" account, but even so, since the ECH would have each subscribers' regular checking account number, this wouldn't be much protection. Without the ECH knowing your checking account number, ecash isn't convenient. Any ideas? BROOKFIELD ECONOMICS INSTITUTE (U.S.A.) Limited ----------------------------------------------------------- Do you want to subscribe to our newsletter? Send email to brookfld(a)netcom.com, with the words SUBSCRIBE BBA your_first_name your_last_name as the subject of the message. Do you have a business question? Send it to brookfld(a)netcom.com. Questions which Brookfield determines are of common interest will be answered in the newsletter. Submissions become property of Brookfield Econcomics Institute. Copyright (c) 1994 Brookfield Economics Institute (U.S.A.) Limited. Rights are granted for use or duplication of this information by subscribers and individuals, but all commercial rights and rights of resale are reserved. Other use or duplication is prohibited. Brookfield is not engaged in rendering professional advice. In business and legal matters the advice of an attorney or other competent professional should be sought.

3 2

Re: MacPGP2.6 (was Re: Email Stalking on CNN)
by qwerty＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Sidney asked, >More to the point of this mailing list, if anyone out there is a member of >the U.S. version MacPGP development group at qwerty, are you all in the >process of upgrading MacPGP 2.3a to play with 2.6, or providing a version >to MIT so they can release a street legal PGP for the Mac? And if not, why >not? More to the point, if anyone out there happens to be a Mac programmer, are you joining the MCIP to create a street smart interface? And if not, why not? :-) Our main concern is ITAR and we are getting legal advice from a team of lawyers, well versed in such matters. MacPGP2.6 will indeed arrive, but it will be the same old beast. We will likely use it as our short-term crypto engine. MacPGP2.6 is a dead end though. PGP3.0 will be turned into a Mac system Manager, adding new routines to the Toolbox. There will also be an Apple Events Linker with a nice interface (to replace MacPGP2.3/MacPGP2.6) for normal programmers and script writers to use. A system-wide menu will get your girlfriends to use PGP with you, FINALLY :-). Drag-and-Drop and "Vaults" for the Finder (thought the Menu could also act on Finder selections, but that's another hack since you guys at Apple wont tell us how to get that info, not to mention how to put up a system-wide menu!). Whoever wants to see what we're up to ftp to ftp.netcom.com in /pub/mcip, and grab MCIP.pictures. There's a bunch of project literature there including a list archive and list of members. -=Xenon=- I heard about MacPGP2.3aV1.1 appearing on ftp.netcom.com in /pub/mpj/... but I can't find it in Europe yet. I mailed Christoph about where he put it. He says he's updating it and will release source, but I heard that in a copy of mail one of our members had with him. No word on the existing source being available overseas, which is rather odd, since it came out of Germany. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQBVAgUBLellt2qUjHAmZBGNAQHV6QH+LjaNwn78JaNRs3VplnfLSBJNwFZi7N+h Uti2K/SyBCNunxZ55q212bW55myeAnqWpjnlLBSJqoS406Dc8TzdWQ== =rS8Z -----END PGP SIGNATURE-----

1 0

FBI: to Russia with love
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Ho ho. Not content with Big Brothering America, the FBI is draping a protective arm around the Russians, to teach the KGB's progeny how to _really_ do their job. Freeh said that Russian mafia selling nukes to terrorists may pose the single largest threat to American security. Whatever happened to all the ferocious pedophiles on the Net? Does Boris know that his new protector's favourite encryption ensures the absolute secrecy of his communications? I thought that US jurisdiction was extended to the whole world through the spooks and the DEA. The FBI's in good company, no doubt. -------------------------------------------------------------------------- Rishab Aiyer Ghosh rishab(a)dxm.ernet.in Voicemail +91 11 3760335; Vox/Fax/Data 6853410 H-34C Saket New Delhi 110017 INDIA The National Short-Sleeved Shirt Association says: Support your right to bare arms! --------------------------------------------------------------------------

1 0

Re: MacPGP2.6 (was Re: Email Stalking on CNN)
by sidney＠apple.com 17 Dec '03

17 Dec '03

qwerty(a)netcom.com (-=Xenon=-) wrote: >A system-wide menu will get your girlfriends to use PGP with you, FINALLY :-). Yes, I noticed the smiley, but I would like to point out that the name "sidney" is ambiguous regarding both gender and sexual orientation, and the statement is ironic given that almost half of Apple's PowerMac OS team, including the person in charge, is female. (I have no statistics as to how many of the team members would have girlfriends vs. boyfriends). Anyway, back to the topic: >hack since you guys at Apple wont tell us how to get that info, not to >mention how to put up a system-wide menu!). I do my hacking in Macintosh Common Lisp, not at that level. But if there is any information you need for MacPGP that I can find out for you by tracking down people within Apple, if Apple doesn't consider it confidential, e-mail the questions to me directly and I'll see what I can do. Be sure to give me enough detail in the question so that I can understand what it means and how to ask it. I'm still pretty much a Mac novice, although I would like to change that. Hmmm... I haven't looked much into the crypto stuff built in to System 7 Pro. Would that stuff you're talking about for PGP 3.0 integrate it in well enough that the existing 7 Pro facilities for mail encryption and digital signatures could be used to produce PGP compatible output? That would be a real win, letting Apple deal with user interface issues. I guess that the state of MacPGP is relevant to the cypherpunks list, but followups regarding your questions to me can drop back to private mail. -- sidney markowitz <sidney(a)apple.com> SK8board Punk Rocket Scientist [not speaking for Apple!] Advanced Technology Group voice: (408) 862-4319 Apple Computer, Inc., M/S 301-3D fax: (408) 974-8414 1 Infinite Loop AppleLink: SIDNEY Cupertino, CA 95014 Internet: sidney(a)apple.com

1 0

No Subject
by Gary Jeffers 17 Dec '03

17 Dec '03

who cypherpunks index cypherpunks

2 1

Re: "lifeguard(?)": bullet tracking system???
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>C'punks, > >On Sun, 29 May 1994, Arsen Ray Arachelian wrote: > >> Hey guys, I heard a blurb on the radio a few days abo about something called >> "lifeguard" which can track the source of gunfire. My guess is that they [snip] and Sandy Sandfort <sandfort(a)crl.com> replied, [much really spiffy stuff about shooting the shooter(or not) "elided" as they say around here...] uh, is this *really* cryptography? [sorry...] ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

3 2

FBI: to Russia with love
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Ho ho. Not content with Big Brothering America, the FBI is draping a protective arm around the Russians, to teach the KGB's progeny how to _really_ do their job. Freeh said that Russian mafia selling nukes to terrorists may pose the single largest threat to American security. Whatever happened to all the ferocious pedophiles on the Net? Does Boris know that his new protector's favourite encryption ensures the absolute secrecy of his communications? I thought that US jurisdiction was extended to the whole world through the spooks and the DEA. The FBI's in good company, no doubt. -------------------------------------------------------------------------- Rishab Aiyer Ghosh rishab(a)dxm.ernet.in Voicemail +91 11 3760335; Vox/Fax/Data 6853410 H-34C Saket New Delhi 110017 INDIA The National Short-Sleeved Shirt Association says: Support your right to bare arms! --------------------------------------------------------------------------

1 0