December 2003 - cypherpunks-legacy

Niacin warning (was Surveillance cameras)
by Hal 17 Dec '03

17 Dec '03

From: rarachel(a)prism.poly.edu (Arsen Ray Arachelian) > you can also just pop a 400mg Niacin capsule... Niacin will > quickly dialate all your capilaries bringing lots of blood > to your face and making you look like a lobster. > > That should mess up any scan... so if you're a wanted > crook in an airport that uses ir-face biometrics, just > pop niacins like them were pop-corn. :-) I just want to warn anyone who is thinking of trying this that 400 mg is not the place to start with niacin. The flushing will be extremely intense at that level and you will probably either think you are dying or wish you were. Try 50 or 100 mg to start with. You do build up a tolerance to this effect of niacin pretty fast so experienced users will need higher doses to get the flushing. But for a non-user lower doses are adequate. Hal

2 1

Re: Spy Satellites For Sale
by joshua geller 17 Dec '03

17 Dec '03

so (to ask the obvious question) what is to prevent a foreign concern from using cryptography that US intelligence cannot decipher? these people are stupid. josh

1 0

RE: The Agency Whose Name May Not Be Spoken
by Pat Farrell 17 Dec '03

17 Dec '03

In message Fri, 11 Mar 1994 11:10:15 -0800 (PST), tcmay(a)netcom.com (Timothy C. May) writes: > Makes you wonder what TLAs are still largely unknown to the public. There are probably a fair number of obscure ones. Two that I know aren't often talked about are: DCA - Defense Communications Agency - responsible for DoD communication, MilNet, STU-III encrypted phones, and assorted odds and ends. DIA - Defense Intellegence Agency - DoD's own personal CIA. Pat Pat Farrell Grad Student pfarrell(a)gmu.edu Department of Computer Science George Mason University, Fairfax, VA Public key availble via finger #include <standard.disclaimer>

3 2

RE: 2nd CJ update
by Pat Farrell 17 Dec '03

17 Dec '03

In message Fri, 11 Mar 1994 10:17:52 -0800, Phil Karn <karn(a)unix.ka9q.ampr.org> writes: > PS. Does anybody consider it odd that someone from the NSA would actually > identify themselves as such? Not anymore. Both CIA and NSA have recently (past few years) had "open" employees and contractors who can admit where they work. Some can even admit general information about what they do, such as "I'm a SyBase DBA in the administrative organization." In the olden days, the same minor "spooks" would simply tell you they worked "for the government" or "for DoD" So the old "If I tell you I have to kill you" line is left to Maxwell Smart. Pat Pat Farrell Grad Student pfarrell(a)gmu.edu Department of Computer Science George Mason University, Fairfax, VA Public key availble via finger #include <standard.disclaimer>

1 0

Ride to either Cypherpunks meeting or to Kindness
by crunch＠netcom.com 17 Dec '03

17 Dec '03

Is anyone living in Marin or SF planning to go down to the Cypherpunks meeting this afternoon. If so, I would like a ride. Please Email me or phone me at 415-381-5847. If not, then is anyone planning to go to "Kindness" this evening. I would at least like to go to that... John D.

2 1

Heavy remailer traffic source?
by Hal 17 Dec '03

17 Dec '03

For the last day or two I have been getting several dozen messages (67 today, a similar number yesterday) similar to the following: > From remail(a)infinity.hip.berkeley.edu Sat Mar 12 00:10:07 1994 > Date: Sat, 12 Mar 94 00:05 PST > To: hfinney(a)shell.portal.com > From: nobody(a)infinity.hip.berkeley.edu > Remailed-By: Remailer <remail(a)infinity.hip.berkeley.edu> > Complaints-To: Sameer <sameer(a)soda.berkeley.edu> > Anon-To: remailer(a)entropy.linet.org > Anon-To: remailer(a)entropy.linet.org > Anon-To: hfinney(a)shell.portal.com > Anon-To: nowhere(a)bsu-cs.bsu.edu > Anon-To: ebrandt(a)jarthur.claremont.edu > Anon-To: nowhere(a)bsu-cs.bsu.edu > Anon-To: ebrandt(a)jarthur.claremont.edu > Anon-To: remailer(a)entropy.linet.org > Anon-To: remailer(a)utter.dis.org > Anon-To: remailer(a)rebma.mn.org > Anon-To: hfinney(a)shell.portal.com > Anon-To: hfinney(a)shell.portal.com > Anon-To: remailer(a)utter.dis.org > Anon-To: remail(a)infinity.hip.berkeley.edu > Status: R > > ## > Do-Inject: Yes > > -----BEGIN PGP MESSAGE----- > Version: 2.3a > > rQeAYgVzdGRpbgAAAADCSE/UHZnlLco5W9yVWyw5M8XSD7rLnZFAd9IlwX5W2zkM > [...] > MEBR2/p7L6XuKfGQG38t4K4o7J8YbWNPDQ8qP4YeMBAg3Tvzl5tyTWN9/NN7NfCJ > fR3k > =ypSB > -----END PGP MESSAGE----- The "PGP" message appears to be just an ascii-armoring of random bytes. Is this an attempt by someone to provide the "masking" remailer traffic we have been discussing for some time? This is OK, but I think the volume is too high. What is the Do-Inject: header intended to accomplish? The message apparently is intended to provide multiple remailing addresses per message. However, my remailer only does one remail address per message. Also, my remailer does not accept "Anon-To" but only "Request-Remailing-To". So all these messages are ending up in my mail box. Anyone want to explain these? Hal

1 0

Re: MAIL and Coming Police State
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Karl Barrus writes: >> I mention this because I have asked and been told repeatedly by an >> attorney friend of mine that running a remailer on a system where you >> don't have authorization to do so is a violation of the ECPA. (i.e. >> access beyond what the system administration intends for you to have). >I would be interested in what legal research your attorney friend >engaged in in order to come to this conclusion. Possibly it would be a Sure. The attorney is Ed Cavazos (polekat(a)well.sf.ca.us) - I met him first as a user on his BBS (Bamboo Gardens, WWIVnet, now in Houston after years in Austin) where he runs Modem/BBSLaw net, and then in person a few times at EFH (Electronic Frontiers Houston) meetings or events. He was involved in the Steve Jackson vs. Secret Service case, not as lead attorney, but as an assistant. Since this is the only case involving the ECPA to hit the courts and he was in on it, I'm going to have to go with his judgement, unless somebody can argue super persuasively (and preferably convince him too!) As a side note at the last EFH event, we had about 50 people in a room talking about the Clipper Chip and its cons - people that stayed after his talk on legal issues in cyberspace. Anyway, I've asked him several times about the legality of remailers, and during his last talk he addressed them, again ;). Like a fool, I didn't take notes, but from what I remember, the ECPA: * forbids others reading private communications * makes it a crime to attempt unauthorized access on a system with private communication facilities (i.e. email) * forbids you from access above/beyond what the system intended for you I think there is one more thing that goes along with the ECPA, but I can't remember. I will email polekat and ask again, hopefully in a few days or so he'll be able to get back to me. Again, this is all from memory. Anyway, the last one is the key. It says the even if you are a legit user, the following are still illegal: * you find a way to defeat security * you read files that you aren't supposed to, even if the permissions let you * you run programs or use the system in any way that the system administration didn't intend for you (i.e. you run crack all the time or you run a remailer) Now, I was careful to make a distinction: running a remailer on a current account, and running one on an old account. (Because the four remailers I used to run were on old account of mine when I was a student at UH. Now I am at Rice, and Ed said it is DEFINITELY a violation to run a remailer on an account you aren't even supposed to have anymore) But, he said that even running one on a current account is a violation unless you have permission. I mean, I don't mean to scare anybody or spread FUD - for example I am not out of the remailer business ;) it's just the next one I set up will be with the approval/blessing/whatever of the system administration! > violation if running a remailer was specifically prohibited by the > operator (though this sounds more like a contract problem than an ECPA Well, the way it is prohibited here at Rice is by a policy which forbids sending mail to any unauthorized or nonstandard program. Stuff like filter, procmail, slocal (if MH were on owlnet ;) would be allowed, but definitely not a remailer. > Holding this to be a violation is also particularly silly since it > would make unlawful the doing of something by instrumentality of > software an act which can easily be done (and was done, before the > current era of software remailers) by hand. One would solicit for Yeah, but by this logic why is it illegal to export cryptographic software when you can print it and mail it anywhere you please? Silly, yet illegal. Karl Barrus <klbarrus(a)owlnet.rice.edu> -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLYH9GoOA7OpLWtYzAQE1cQP+MvYFldT0fkfMa66vz8bdj3eqwleuKohb VJzmBZolS2ki0D/Wz01BkCxyhUj4ENLCT1zr6C+mWw7cFhyx+MuTnKKOWPWyiTp7 9NgkyjYhqw66jCIXvP/s828sY831OhcBe7iZTjcuvGTPuPzbuV04J7Exj1DYPfp5 WeGl0kZ5+dE= =i4en -----END PGP SIGNATURE-----

1 0

New member
by Gordon Joly 17 Dec '03

17 Dec '03

Me, that is... just in from the cold. Gordon Joly Phone +44 71 380 7934 FAX +44 71 387 1397 Email: G.Joly(a)cs.ucl.ac.uk UUCP: ...!{uunet,uknet}!ucl-cs!G.Joly Comp Sci, University College, London, Gower Street, LONDON WC1E 6BT & mice-nsc(a)cs.ucl.ac.uk & http://www.cs.ucl.ac.uk/mice/gjoly.html &

1 0

WARES - "Terminate Clipper" t-shirt (fwd)
by Arthur Chandler 17 Dec '03

17 Dec '03

Got this from another group. I haven't ordered the shirt, so can't say yea or nay about it, but thought folks here might be interested. ---------- Forwarded message ---------- Date: Fri, 11 Mar 1994 09:41:24 -0500 From: CountMind0 <mgardbe(a)ANDY.BGSU.EDU> To: Multiple recipients of list FUTUREC <FUTUREC(a)UAFSYSB.UARK.EDU> Subject: WARES - "Terminate Clipper" t-shirt (fwd) ---------- Forwarded message ---------- Date: Wed, 09 Mar 94 22:29:15 EST From: FringeWare Inc <fringeware(a)IO.COM> To: mgardbe(a)andy.bgsu.edu Subject: WARES - "Terminate Clipper" t-shirt Sent from: sethross(a)aol.com i just got this really cool t-shirt from this place in Seattle... It's black and it says don't give BIG BROTHER THE MASTER KEY <image> TERMINATE CLIPPER NOW It has a pretty cool multi-colored image of a skeleton key on a chip..,,.. and some other stuff here's the rest of the info.... "...Snail mail orders to: Paul Clark PO Box 59152 Renton, WA 98058 Email COD orders at iplus1hope(a)aol.com $10 by check, $12 COD, black, XL only, 100% cotton heavyweight" ----- It's pretty a cool shirt; the guy is a pretty wild artist on the outskirts of Seattle. I sent him my address on email and he shipped it c.o.d. about a week after i I ordered it i wore it around today...it's pretty sad how many people don't know wha t's going on sethross(a)aol.com

1 0

PowerMacPGP
by fhalper＠pilot.njin.net 17 Dec '03

17 Dec '03

Does anyone know if Mr. Zimmerman or anyone else will be writing a Power Macint -osh PGP porgram. What about the other popular encryption programs. Thanks, Reuben Halper -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3 mQCPAi16KosAAAEEAMUwRni4a9+GbuAhHDLcBWK60hCJUYxhr2hYokpELAhx0ejp 2fq61Tu9Hjn051CN8Xy5nu6sv2ODfG/t59l4DJSb5pirQaII3zaX0rMX0ydwGDoW YakL4ow1lNY+d/k14KpIuUW404+fNuNhIGSkdVLQIfbOgh0preK7/P44AKvdABEB AAG0JlJldWJlbiBIYWxwZXIgPGZoYWxwZXJAcGlsb3Qubmppbi5uZXQ+iQCVAgUQ LXorceK7/P44AKvdAQEUxwQAoffTibRlwE5tNQVGvrulh1OQgXNhTRec9vUaUwPy U64FIZ+KnmdfYgiJYXtcItA90EB9MDexazKeqJzMOPShVNOfyiwy2yUlnQs425f8 DxBvM//zuvj6s4/mXDTPUZtG9PP0HVaEGTJY15JdfRqtj/w+HHnsHlgCnj0NnIhX TW8= =D9UX -----END PGP PUBLIC KEY BLOCK-----

3 2