December 2003 - cypherpunks-legacy

Re: Keyserver service outRAGE
by Black Unicorn 17 Dec '03

17 Dec '03

Mr. Toal says: -> Uni, hush now, shut up, and listen. You've entirely missed the point here. This is a major tactical strike for pgp. We finally have an entirely legal pgp, thanks to some excellent net.politics from the guys at MIT. The restriction on what new keys they accept was part of the deal, but stop and think what it really means - is it going to affect *anybody*? And what's to stop you fetching 2.5 and loading/re-dumping your old key from that version? <- No, you've entirely missed the point here. If the MIT brass is so adept at politics why has no one realized that this change is not going to affect *anybody*. Clearly the keys are either indistinguishable from version to version other than the plaintext version number, or this policy will actually accomplish something. Why would those involved give up "so much" (At least they have been fighting so hard for it) for what amounts to NOTHING? If you're not suspicious.... In any case, I hope your right. I hope PGP2.5 is a dream come true. Problems remain. Mac users are out in the cold. In the final analysis the MIT server is trying to compell behavior for no apparent reasons. The fact that this was a requirement for some "DEAL" really makes me wonder who in the administration was at the negotiating table and I really hope they are on the other side of the table in the next negotiation I have to do. OR They are indeed as sly as you say, and it is YOU who does not understand the true depth of the politics. I hope the former, I wonder about the latter.

3 2

Re: Anonymous phone calls...
by autarchist＠aol.com 17 Dec '03

17 Dec '03

>One of the problems of using the pre-paid cards was brought to light >recently in the Olympic incident of Harding/Kerrigan. Harding's husband >bought one of the cards to make phone calls and they traced the calls back to >him via the card, since you have to present valid ID to purchase those. I have bought these cards without having to present any kind of ID. Most truck stops sell them (at least in the southeast). However, there could be other ways for them to figure out who you are, such as interrogating all the people whom you used the card to call.

1 0

(fwd) Join our Betting Systems Re-development Project...
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

I'm attaching a job offer here for a couple of reasons: - it mentions a new betting system programming job in Hong Kong (shades of the "Internet Casino"? Actually, no, not in this case...but it _could_ be...) - the focus on object-oriented methods to rewrite their transaction-processing system has echoes of the "protocol" problem we're talking about here - expect very similar projects, someday, for projects in the cypherspace --Tim Newsgroups: comp.object From: gu_jc5(a)uxmail.ust.hk (Steven Wong) Subject: Join our Betting Systems Re-development Project Reengineering team Message-ID: <1994May4.062924.2984(a)uxmail.ust.hk> Sender: usenet(a)uxmail.ust.hk (usenet account) Organization: Hong Kong University of Science and Technology Date: Wed, 4 May 1994 06:29:24 GMT Technology Architect Join our Betting Systems Re-development Project Re- engineering team The Royal Hong Kong Jockey Club is evolving into a sophisticated user of high volume transaction processing technology for one of the largest wagering systems in the world which handles over US$100 million each race meeting. To meet our user demands of tomorrow - for example design for real-time support of horse racing events around the globe - we now face the enormous challenge of re-developing the total technology base and infrastructure of these betting systems which will reach the end of their life by the end of the millennium. We are re-engineering with an objective to implement an up-to- date Open Distributed Systems and Object Orientation approach, in order to create flexible systems capable of supporting the demanding needs of the Hong Kong market place and to position us for absorbing change well into the next century. We are replacing systems at the client, network and senior levels. The re-development of our network includes the metropolitan area branch offices, two racetracks and a 1,600 workstation Telebet Auditorium. As Technology Architect working with the Application Architect and other members of the technical team you will undertake the task of developing benchmarks and supporting the Development and Technical Research and Planning teams to develop strategies for system development. With a penchant for problem solving, you must have strong practical experience in our planned technologies, and still be hands on with regard to coding and debugging. Experience with OO, C++ and Unix is essential. A knowledge of both written and spoken Cantonese would also be a distinct advantage. This Hong Kong based position will be on a fixed 2-3 year contract. To attract outstanding people, the packages will be mainly cash remuneration at a level reflecting experience and Hong Kong relocation/living costs. In the first instance, apply with full career details quoting relevant ref. number, by E-mail: mimi(a)attmail.com, or by writing to The Senior Personnel Manager, The Royal Hong Kong Jockey Club, 2 Sports Road, Happy Valley, Hong Kong. Fax: (852) 576 1987 or (852) 577 2773.

1 0

Re: Keyserver service outage
by Tom Allard 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- wcs(a)anchor.ho.att.com (bill.stewart(a)pleasantonca.ncr.com +1-510-484-6204) sez: [...] > There's an easy cure for this, though - if some non-North-American wants to > write an RSAREF-compatible software package in C and distribute it as freeware, > then it can be used in non-US versions of things that require RSAREF. [...] The cure is actually easier than that. Just make ONE change in pgp 2.3a so that it lies about what version it is. pgp 2.3b could simply identify itself as pgp 2.5 and no one would be able to tell the difference. rgds-- TA (tallard(a)frb.gov) I don't speak for the Federal Reserve Board, they don't speak for me. pgp fingerprint: 10 49 F5 24 F1 D9 A7 D6 DE 14 25 C8 C0 E2 57 9D -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLckMBaAudFplx0TNAQERGAP/W2ZHXjsKsT/0JexSzgZnSKoACjTJDqfu PSXfzE9Jl0ESNChZZjRU7HN50Bw0YPANqrwrRpHkkzBGsh/NeqbomvPLovTXh0KI ioSLCJtT2Q7w8YqrYcFMZxFqwc0elHqjfGUnclGonUZ+9/DY0ey2JIlybcMasglL ywYyyTzG/fw= =t2b7 -----END PGP SIGNATURE-----

1 0

MIT PGP Announcement
by Brian A. LaMacchia 17 Dec '03

17 Dec '03

MIT has just officially announced the upcoming availability of PGP 2.5. The announcement was just made at Networld+Interop '94 in Las Vegas by Jeff Schiller, MIT's Network Manager. The text of the actual announcement is available via WWW at http://www.media.org/. Look under "MIT PGP Security Announcement."

1 0

Re: Valid MacPGP??
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

At 3:58 PM 05/04/94 -0400, Black Unicorn wrote: >Mr. Hawk: > >Which version do you have? > >Mr. Frissell: > >The most recent version is MacPGP2.3.hqx.cpt > >Do NOT distribute MacPGP2.3 V1.1 as the source code is not "out there." > >I will be happy to send you a copy if you like. > >-uni- (Dark) If it is an annoyance, ignore this message, but could you mail me a copy? I have ver. 2.2 and no ftp, and ftpmail won't send to my site a good 3/4 of the time (and the sysadmins here don't think this is a problem...) thanks- -j

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Can someone re-post the dumpster-dived Mykotronx information that was posted to the list last year? I need it for an article on Clipper that I'm working on. Also, has the government announced which agencies are going to be holding the two pieces of Clipper keys in "escrow"? ...Wally

2 1

Re: Anonymous phone calls...
by andreas.elbert＠gmd.de 17 Dec '03

17 Dec '03

>Maybe in Norway you do, but not here. The Orange Cards were >completely anonymous, I think, and there's certainly no reason that a >card system couldn't be set up that is anonymous if those weren't. > prepaid cards can be set up to work anonymously, sure. Unfortunately, the one making this decision (the network operator) is more concerned with toll fraud and usage statistics. E.g. the german telekoms payphone log the time of a call and the serial number of the prepaid card. (And the only one reading their publications (and complaining) is the CCC, which has not quite the right reputation to raise the newspapers attention)

1 0

Re: Keyserver service outage
by Graham Toal 17 Dec '03

17 Dec '03

: Not true. The problem is copyright, which is honored by Berne Convention : signers even if they don't have software patents or patent-after-publishing : rules like the US. This includes Europe, the U.S., and many other places. : ViaCrypt 2.4 is copyrighted by ViaCrypt, and RSAREF is copyrighted by RSA, : so you won't be able to use 2.5 source outside the US either; not sure about : binaries. : There's an easy cure for this, though - if some non-North-American wants to : write an RSAREF-compatible software package in C and distribute it as freeware, : then it can be used in non-US versions of things that require RSAREF. You misunderstand what the RSAREF stuff does - it isn't an alternative encryption - it's being used to replace the extended precision etc stuff in pgp to make a 100% compatible version. So the current pgp *is* already 100% compatible, as long as its version number is >= 2.4 (which by an amazing coincidence mines happens to be since I've had to edit a couple of mission-critical comments since I got 2.3a ;-) ) Even if 2.5 checks version numbers or *any* internal details in the pgp packets, as long as it is constrained by being compatible with ViaCrypt 2.4, we can always *guarantee* to be able to make a compatible free pgp based in 2.3a. And since the RSA and IDEA patents aren't valid in Europe, this is 100% kosher. You guys use MIT-PGP and we'll use free pgp 2.5 G

3 2

Exactly.
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

Chael, I've noticed that anon messages originating from nowhere recently do not have a "subject" or "organization" in the header. (I tried this by sending a message to myself and it doesn'y use this format anymore.) Has this been changed to something else, such as "x-subject"? - paul

2 2