December 2003 - cypherpunks-legacy

legally circumvent the Sept 1,94 Legal Kludge, Program Part 000
by 0x7CF5048D＠nowhere 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- released to the public domain. The legal kludge makes output from PGP 2.6 from an Eastern University incompatible with earlier versions after Sept 1 1994. A Usenet article has documented a discovery by Paul Elliott that the pgp 2.6 legal kludge can be disabled by invoking it with the following parameters: pgp +CERT_DEPTH=0 +LEGAL_KLUDGE=OFF +CERT_DEPTH=real_desired_value others This program invokes pgp with the above parameters. "real_desired_value" is taken from the CONFIG.TXT file. This will cause the legal kludge that makes PGP from an Eastern University incompatible with earlier versions of PGP to be turned off. This program does not address the incompatible signature format problem. This does not modify the code or the executable of PGP in any way. It simply invokes it with unusual parameters. Therefore it should be legal. The program searches your config.txt file for the default value of CERT_DEPTH. It will run slightly faster if this variable is at the top of that file. The program to be invoked may be controlled by the environment variable "PGPEU". EU stands for Eastern university. This variable may specify the file name or a complete path. If this variable is undefined, the program indicated by the hard coded string "PGPEXE" will be invoked this string may be defined with a -DPGPEXE= flag at compile time. By default (that is if PGPEU is undefined) PGPNOKLG.EXE will search your path for a program called "PGP.EXE". Thus the command: PGPNOKLG -e file will call PGP 2.6 in a way so that the result will be compatible with earlier versions of PGP. The program PGPNOKLX.EXE invokes (by default) a program called "PGP26.EXE". So you could take the original program "PGP.EXE" from an Eastern University and rename it to "PGP26.EXE" somewhere in your path. You could the rename "PGPNOKLX.EXE" to "PGP.EXE" then when PGP is invoked normally it will really be PGPNOKLX which will invoke the original pgp (AS PGP26) in a way that output will be compatible with earlier versions. Thus scripts, shells and mail programs that are designed to invoke pgp could continue to work, but in a way that the output is compatible with earlier versions of PGP. This program has been ported to MSDOS and OS/2. Somebody please port to all other platforms. I have posted a zip file which contains source, makefiles and binaries as a pgp signed binary, in 3 posts. The following is the source for the programs pgpnoklg and pgpnoklx. - ---------------------------------------------------------------------- /* Released to public domain! works dos os/2, please port to all other platforms It has been recently discovered by paul elliott that the PGP26 (eastern University) legal kludge can be disabled by invoking pgp with the following parameters: pgp +CERT_DEPTH=0 +LEGAL_KLUDGE=OFF +CERT_DEPTH=real_desired_value others This program invokes pgp with the above parameters. "real_desired_value" is taken from the CONFIG.TXT file. This will cause the legal kludge that makes PGP from an Eastern University incompatible with earlier versions of PGP be turned off. This program does not address the incompatible signature format problem. The program to be invoked may be controled by the environment variable "PGPEU". EU stands for Eastern university. this variable may specify the file name or a complete path. If this varriable is undefined, the program indicated by the hard coded string "PGPEXE" will be invoked this string may be defined with a -DPGPEXE= flag at compile time. The program searches your config.txt file for the default value of CERT_DEPTH. It will run slightly faster if this variable is at the top of the file. deveolped for borland c++ compilers for msdos and os2 to compile bcc pgpknolg.cpp */ // necessary include files. #include <stdlib.h> #include <string.h> #include <dir.h> #include <iostream.h> #include <fstream.h> #include <strstrea.h> #include <iomanip.h> #include <process.h> // define executable path to invoke pgp. #ifndef PGPEXE #define PGPEXE "pgp" #endif #if defined(__OS2__) || defined(__MSDOS__) #define SEP '\\' #define SEPSTR "\\" #else #define SEP '/' #define SEPSTR "/" #endif int main(int argc,char *argv[]) { // path to invoke pgp. char pgpexe[MAXPATH]; // if environment variable PGPEU is defined use it // as the program to invoke as pgp! char * pgpeust=getenv("PGPEU"); if (pgpeust) strcpy(pgpexe,pgpeust); else *pgpexe=0; // If no such environment variable use hard coded PGPEXE macro! if (*pgpexe == 0 ) strcpy(pgpexe,PGPEXE); char path[MAXPATH]; // get the path where the config.txt file is supposed to be strcpy(path,getenv("PGPPATH") ); // and get its length int len=strlen(path); #if defined(__OS2__) || defined(__MSDOS__) // convert all '/' to backslashes for dos os/2 char *w; for(w=path;*w;w++) if(*w=='/') *w=SEP; #endif // if there some chars and last one is not \ then add one. if (len) { if ( path[len-1] != SEP ) strcat(path,SEPSTR); }; // add the filespec. strcat(path,"CONFIG.TXT"); // default value if can not get from config.txt file // this is the value in the pgp26 executable int cert_depth=4; // parse the config file for the value of CERT_DEPTH { // open the file ifstream config(path); if ( config.good() ) { // read till eof while( !config.eof() ) { char buf[512]; // read a line config.getline(buf,sizeof(buf)); // if not commented. if ( *buf != '#' ) { istrstream line(buf); char field[80],equ[80]; int depth; // parse line to first field equal char and value line >> field >> equ >>depth; if ( line) { // upcase the field strupr(field); // if we have a "CERT_DEPTH=val" LINE if ( (strcmp(field,"CERT_DEPTH") == 0) && (strcmp(equ ,"=") == 0 ) ) { // save stored depth cert_depth =depth; // abort search of rest of file // this program will go faster if CERT_DEPTH is // at top of file! break; } } } } } } // create a parameter string fo the form "CERT_DEPTH=val" // where val was found in the config.txt file! char reset_par[20]; { ostrstream reset_file(reset_par,sizeof(reset_par)); reset_file << "+CERT_DEPTH=" << cert_depth << ends; } typedef char * string; // list of arguements! string list[200]; // leading arguemnts int out_idx = 0; // name of program list[out_idx++] = "PGP.EXE"; // we do this to set the variable "value" in pgp 2.6 to =0 // the value of CERT_DEPTH is not really needed to be 0 list[out_idx++] = "+CERT_DEPTH=0"; // this will set pgp varriable "legal_kludge" =value=0 // works because value is zero because of above. list[out_idx++] = "+LEGAL_KLUDGE=OFF"; // set value of CERT_DEPTH back to its proper value. list[out_idx++] = reset_par; // add all the rest of the parameters from the command line! for( argc--, argv++; argc; argc--,argv++,out_idx++) list[out_idx] = *argv; // termintate the line! list[out_idx]=NULL; // replace the current program with an execvp call // never returns from execvp return execvp(pgpexe,list); } -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLi2sYw2Gnhl89QSNAQFAGwQAsYh2fCaK9y9ssONU6k9VMDKQLmc5Qz9L 7FdNOl3Qj5Kd7mudMLU/e0tsSPL9Sr4i629bKVFOlFXUXloYn5xRBsz+Ura4pgZD X2H5bzMAldrwdSN0zfjYX6G8NnvkcpXAZ0BFqw7tBWsflSx3wOjOXLxRDrfKvVvC DNx7M3uD3vg= =xdD6 -----END PGP SIGNATURE-----

4 4

Gore's "new and improved" key escrow proposal
by mpjohnso＠nyx10.cs.du.edu 17 Dec '03

17 Dec '03

Just think how easy it would be to comply with software key escrow requirements: imagine a new PGP option -- +encrypt_to_escrow_agents=on The escrow agent's PGP public key could be shipped with every copy of PGP... naturally, every PGP user will be required by law not to override this option if the Vice President gets his way. --- sound of tongue being removed from cheek --- I have tried to think of a positive use for key escrow. The only thing that I have come up with so far is kind of like having local key escrow within one company, or something like that. Kind of like having a master key that fits all the offices in one wing of a building, or something like that. That could be good in some business uses, provided you could pick your own trusted master key holder. I don't think that is what Al Gore has in mind.

10 9

Re: GUT and P=NP
by nzook＠math.utexas.edu 17 Dec '03

17 Dec '03

>berzerk(a)xmission.xmission.com writes: > > One last word on this. Try and represnet a continum of states by an > > infinite turing machene. Go ahead, I dare you. You can't.<=big period. >Could I not let each position on the tape represent a real value in >[0...1]? >| GOOD TIME FOR MOVIE - GOING ||| Mike McNally <m5(a)tivoli.com> | >| TAKE TWA TO CAIRO. ||| Tivoli Systems, Austin, TX: | >| (actual fortune cookie) ||| "Like A Little Bit of Semi-Heaven" | HAHAHAHAHAHAHAHAHAHAHA ROFL HAHAHAHAHAHAHAHAHAHAHA Okay. So I should be so rude. People please. When someone, especially like berzerk or tcmay makes a strongly definitive statement, PLEASE try not to show your ignorance to the whole group. Cantor demonstrated, near the turn of the century, that no such system can represent all reals in [0,1]. Boring technical explanation follows. Let f be a function from the integers to [0,1]. Note that the Turing tape has precisely one space for each integer, so this function cooresponds to your idea. I claim that f is not onto. (ie: you cannot represent all reals this way.) Write a decimal expansion for each elment in the range of f, and order them as follows: f(0) = .d(1,1) d(1,2) d(1,3) d(1,4) .... f(1) = .d(2,1) d(2,2) d(2,3) d(2,4) .... f(-1)= .d(3,1) d(3,2) d(3,3) d(3,4) .... f(2) = .d(4,1) d(4,2) d(4,3) d(4,4) .... f(-2)= ..... construct a, in [0,1], as follows: let g be a function from {0,1,2,3,4,5,6,7,8,9} to {5,6} s.t. g(x) = 5 if x>5, g(x) = 6 if x < 6. Let a = sum for i = 1 to infinity of g(di,i)/10^i. I claim that a is not in the range of f. Is f(0) = a? No, the first digits differ. Is f(1) = a? No, the second digits differ. Is f(-1)= a? No, the third digits differ. You get the picture. There are a couple of small details left out, you should be able to fill them in. Historical note: I believe that is the original construction. Further historical note: You can see the germ of Godel's work here. Nathan

4 3

Re: My anonymous remailer
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

: From: Hal <hfinney(a)shell.portal.com> : service it's hard to know what features to provide. In particular, if : cleartext output is prevented, how much does that impair the usefulness of : the network? My instinct is that it hurts a lot, although it would be nice : for the operators since it would eliminate most sources of complaints. I said in my previous post that that wasn't what I had meant, but thinking about it, it's worth considering. After all, if anyone really missed the functionality of anon posting to news, people could set up news gateways that accepted encrypted articles for posting, decrypted them, and injected them. Again, whoever did that would be taking direct responsibility for what was injected, and it would cleanly decouple the posting function from the anon remail function for those who didn't want to do both. G

1 0

Majordomo results
by Anonymous 17 Dec '03

17 Dec '03

>>>> who cypherpunks

1 0

Majordomo results
by Anonymous 17 Dec '03

17 Dec '03

>>>> who cypherpunks

1 0

Re: Det./tmp/Nym on Netcom
by tim werner 17 Dec '03

17 Dec '03

>From: whitaker(a)dpair.csd.sgi.com (Russell Whitaker) >Date: Mon, 25 Jul 1994 12:05:04 -0700 > > nym(a)netcom.com > tmp(a)netcom.com > >Bryant was >at liberty to say that the user accounts "tmp" and "nym" were the same >person. I noticed that both tmp and nym mentioned in one of their early posts that they had read up about cypherpunks in the archives at soda, or some such, and that it was ok to launch right into the discussion, since he/she was up to date with the issues. This was followed, of course, by the usual long and boring happy horseshit. I also noticed a common net phenomenon: since Sue D. Nym appeared from his/her name to be female, some men were more likely to come to his/her defense when he/she was flamed. This reminded me of the blurb I read in Wired (bad magazine, I've since stopped subjecting my eyes to the green print on red background) about men using names like "Janet" trying to sweet-talk lesbians on IRC and eventually finding out that "Karen" was also a man. tw

1 0

Steve Winter Declares War in Cyberspace
by nobody＠kaiwan.com 17 Dec '03

17 Dec '03

I just FTPed this from the Fidonet archives over at ftp.fidonet.org. It looks as if, if this nut case has his way, we may have a "Waco in cyberspace". For those of you who "enjoyed" Ralph Stokes' Ruckmanite spam entitled "Beware of Roman Catholic Corruption" which brewed in the bowels of Fidoland for years before spilling over into Internet/Usenet, Steve Winter has the *POTENTIAL* to do far more damage. He owns not only a Fido node, but the entire "PRIME Net" structure, as well. His Internet address, BTW, is "Steve.Winter(a)f98.n18.z1.fidonet.org". Yes, the ".n18" means he's in Fidonet region 18, just like our old "friend" Ralph (the Mouth) Stokes <Ralph.Stokes(a)f1611.n375.z1.fidonet.org>. If those two were ever to team up... If you doubt the truthfulness of this, because of my need to post anonymously, feel free to FTP the file for yourself and have a look. The file can be obtained via anonymous FTP from ftp.fidonet.org as /pub/fidonet/fidonews/fnewsb29.lzh and you can verify this for yourself. Anyway, enjoy, beware, learn, or whatever: ********************************************************************** F I D O N E W S -- Vol.11 No.29 (18-Jul-1994) ---------------------------------------------------------------------- The FIDO Crucifixion by Steve Winter (1:18/98) Some of you out there have been giving me a lot of bad press lately. I don't really care because the bible tells me that false christian scum will try to deter me from my mission to correct the lies and Satan-influenced false teachings of deviant so-called pastors. I don't care. They can flay my skin, draw and quarter me and even take steps to censor me in FIDO, but I will carry on. Recently, I became aware of a new threat to the true church of Jesus,that being these people who call themselves "Pagans". They should more properly call themselves Heathens or even Satanists. Yes, I have investigated many of these new age BBSs and I have only one thing to say. THEY MUST GO!! The devil will not be allowed to exert domain where Jesus rules King. We shall persue these godless satanic groups until the last one has been exorcised or given over to the Lord for disposal. We must seek them out and destroy their places of depravity and destroy their rings of stone and their alters where babies are sacrificed to appease their lord and master Satan himself. Good Christians everywhere must join together to eradicate this unwholesome threat to the very fibre and existance of mankind, and we must do it NOW! I am asking the following of every Christian FIDO reader that can see this message to disrupt, destroy and do away with every pagan BBS in their area. Crash their their boards, and upload ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ viruses, what ever you need to do. These are scum of the earth ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ and if I had MY way these idiots would be swinging from lamp posts like Mussolini did after World War II. Let the dogs eat their flesh and the bones be crushed under the feet of the legions of God's people. If we all can get together on this ONE thing, we can eradicate this threat to mankind within 6 months. Call your local police and report these deviants. Report their crimes against children and if possible, infiltrate them so that we can accumulate a listing of these disgusting pawns of Satan. We must act now or surrender FIDO to the Satan controlled minions of the dark side of man. Crush them like the vermin they are. THIS IS WAR! FidoNews 11-29 Page: 7 18 Jul 1994

3 2

Re: GUT and P=NP
by wrevans＠oceanus.mitre.org 17 Dec '03

17 Dec '03

>berzerk(a)xmission.xmission.com writes: > > One last word on this. Try and represnet a continum of states by an > > infinite turing machene. Go ahead, I dare you. You can't.<=big period. > >Could I not let each position on the tape represent a real value in >[0...1]? > Nope, You'd still have only a countable number of states and the cardiality of [0..1] is not countable. I think that a simple diagonalization argument would show that one would need an uncountable number of infinite turing machines to represent a continum of states. Ward R. Evans wrevans(a)mitre.org voice: (703) 883-7631 fax: (703) 883-1363

1 0

LITTLE BROTHER INSIDE
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, I was just thinking about computer seizures and thefts. I think I've come up with a couple of interesting solutions. REMOTE CONTROL--In addition to denying access to your files by encrypting, you might want to *change* them in some way *after* your computer has been seized/stolen. Pagers are cheap. They can be pinged no matter where they are located in their service area. They can be accessed from any phone (even a jailhouse payphone). And they are small enough to be wired into your computer. It souldn't be too difficult to fix it so your computer can read transmitted numbers from the pager's memory. Code numbers could be used to tell your computer to take various actions. Depending upon your circumstances, you could tell your computer to decrypt this or that set of files, to reformat the hard drive, to fry the CPU, etc. LITTLE BROTHER INSIDE--Even better than a pager, would be a cell phone. It would be more expensive, but also more versatile. In addition to giving instructions to your computer, a cell phone could be used to *eavesdrop* on the location where your computer is being held. By disabling the ringer and remounting the mouthpiece, you could surreptitiously call your computer, any time, from any phone and monitor conversations in the area. (To paraphrase an old military curse, "bug the bugging buggers.") As long as the computer is plugged in, the cell phones batteries will continue to be topped off. (For the truly thorough privacy advocate, a GPS unit could be hooked into the cell phone to give you its location.) S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 3