December 2003 - cypherpunks-legacy

Export controls apply to physical objects, too
by paul＠poboy.b17c.ingr.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Yesterday's _Huntsville Times_ had an interesting story about a local company's problems with the ITARs. The company, Signature Technologies, makes an EM-absorbent paint called Signaflux, the main application for which is decreasing the radar cross-section of various flying objects. Although so far the primary customers for Signaflux have been from the US DoD, there have been sales to "friendly" foreign governments, notably the Israelis. ST has been trying to diversify; in that vein, they've been selling Signaflux for industrial and commercial applications, like EM shielding in test cells and reducing airport buildings' radar signatures. The dispute in this case comes from a contract to sell Deutsche Aerospace SA about $500,000 worth of Signaflux for the Cyclops cruise missile. ST applied to Commerce for an export license under the dual-use provision. After a CJ determination, State yanked their export license. The story didn't say who requested the CJ determination. I can't imagine that ST would have asked for one, since they had a license already. In closing, the CEO was quoted as saying (paraphrased) "These rules are stupid; I could sell the Germans a fleet of F-16s with dashboards full of avionics, but I can't sell them paint." - -Paul - -- Paul Robichaux, KD4JZG | Demand that your elected reps support the perobich(a)ingr.com | Constitution, the whole Constitution, and Not speaking for Intergraph. | nothing but the Constitution. ### http://www.intergraph.com ### -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLpAGjafb4pLe9tolAQF8eAP+K2I9qwXHfZQg8jTVXl3XE5Ymi1ukBhUB t+6DNG9N/Z6VVXdz60WYNW5rpYfHIsb/DjwVYhi8dgScKoesdHpzAgysKQ403ENG IIZH3egeuDBQy0kwl0oL7bLsJTzPnh+jKBH3PEHspmbsjZ4rREfW1KN1EoVN5++5 ofWCod/NQeo= =CnMq -----END PGP SIGNATURE-----

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I have written and installed a remailer pinging script which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, at: http://www.cs.berkeley.edu/~raph/remailer-list.html Please let me know about any other remailers which I missed. I've only included remailers which can mail to arbitrary addresses, so I already know chop and twwells are missing. This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: fftp://soda.berkeley.edu/pub/cypherpunks/premail/premail-0.22.tar.gz For the PGP public keys of the remailers, as well as some help on how to use them, finger remailer.help.all(a)chaos.bsu.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"chaos"} = "<remailer(a)chaos.bsu.edu> cpunk hash ksub"; $remailer{"vox"} = "<remail(a)vox.xs4all.nl> cpunk oldpgp. post"; $remailer{"avox"} = "<anon(a)vox.hacktic.nl> cpunk oldpgp post"; $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"rebma"} = "<remailer(a)rebma.mn.org> cpunk pgp hash"; $remailer{"jpunix"} = "<remailer(a)jpunix.com> cpunk pgp hash latent cut post"; $remailer{"wien"} = "<remailer(a)ds1.wu-wien.ac.at> cpunk pgp hash nsub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash"; $remailer{"soda"} = "<remailer(a)csua.berkeley.edu> eric pgp. post"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub"; $remailer{"usura"} = "<usura(a)xs4all.nl> cpunk pgp. hash latent cut post"; $remailer{"leri"} = "<remail(a)leri.edu> cpunk pgp hash"; $remailer{"desert"} = "<remail(a)desert.xs4all.nl> cpunk pgp. post"; $remailer{"underdog"} = "<lmccarth(a)ducie.cs.umass.edu> cpunk pgp hash latent cut post"; $remailer{"nately"} = "<remailer(a)nately.ucsd.edu> cpunk pgp hash latent cut"; $remailer{"efrias"} = "<efrias(a)csugrad.cs.vt.edu> cpunk pgp hash"; catalyst(a)netcom.com is _not_ a remailer. Last ping: Mon 3 Oct 94 6:00:02 PDT remailer email address history latency uptime ----------------------------------------------------------------------- c2 remail(a)c2.org *+-********* 13:09 99.99% wien remailer(a)ds1.wu-wien.ac.at ***#+**--#** 19:02 99.99% chaos remailer(a)chaos.bsu.edu **####**+##* 2:56 99.99% leri remail(a)leri.edu ***#**#***** 6:38 99.99% portal hfinney(a)shell.portal.com *##*#+***#** 4:01 99.99% ideath remailer(a)ideath.goldenbear.com *****-*+- ** 1:40:23 99.99% underdog lmccarth(a)ducie.cs.umass.edu ***+******** 4:41 99.98% penet anon(a)anon.penet.fi *****+-+**** 47:05 99.96% jpunix remailer(a)jpunix.com *-*#**-**-** 11:04 99.96% vox remail(a)vox.xs4all.nl .-......-- 12:10:26 99.94% bsu-cs nowhere(a)bsu-cs.bsu.edu **# #****#-* 13:42 99.76% efrias efrias(a)csugrad.cs.vt.edu *#***** 4:30 99.79% rebma remailer(a)rebma.mn.org -+---*--.-*- 10:13:40 99.58% extropia remail(a)extropia.wimsey.com ++ +-++++*+ 40:30 99.40% soda remailer(a)csua.berkeley.edu -......_.. 9:25:30 99.31% nately remailer(a)nately.ucsd.edu -++++- ++++* 33:37 99.15% usura usura(a)xs4all.nl +***..-** ** 1:16:06 98.42% desert remail(a)desert.xs4all.nl .---...---- 24:19:31 84.16% alumni hal(a)alumni.caltech.edu *****+** 6:06 79.87% Suggested path: chaos;wien;c2 For more info: http://www.cs.berkeley.edu/~raph/remailer-list.html Options and features cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. oldpgp Remailer does not like messages encoded with MIT PGP 2.6. Other versions of PGP, including 2.3a and 2.6ui, work fine. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. special Accepts only pgp encrypted messages. History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). If you've got a Web page, please feel free to include a link to this page. If you think your Web page is relevant to the subject of remailers, let me know and I'll link it in. Comments and suggestions welcome! Note to remailer operators: this script generates hourly ping messages. If you don't want that, let me know and I will take your mailer off the list, or increase the interval between pings. Raph Levien

3 2

New Remailer feature
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Raph, I just saw your bi-monthly posting about the remailers. I'd like to point out that jpunix supports a feature not mentioned in your message/finger mechanism. Jpunix.com also supports the ability to have messages encrypted to the recipient by the remailer itself. This will protect cleartext messages sent back to the sender via reply blocks. By adding Encrypt-Key: yourkey to the header list for jpunix.com, jpunix will encrypt anything following a ** on a line by itself with that key. John Perry - perry(a)jpunix.com - -- PGP 2.61 key for perry(a)jpunix.com is on the keyservers. PGP-encrypted e-mail welcome! -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLpATZlOTpEThrthvAQHMmQP/SLFOCbArzMbJ26lSJZz0mUXQfABstXf2 Um5TqDgiOuDnAWE3DvZkDIQcMtALJ9wI/Lj+ji4gCF0Ytk7hShizyl+zcj0huKQT npvbFC//9Yv0RJZsm1f47R4ttksqBmO+kEep4LUsWoRlqBBMwFyVkAPaFX/nclPw zdcGEpIv7JU= =+o2l -----END PGP SIGNATURE-----

1 0

Anarchy-X Notification
by John Young 17 Dec '03

17 Dec '03

Got about a dozen of these in the last couple of days. Should I fear or embrace Organization: Anarchy-X? Sounds good but TLA maybe? John Forwarding mail by: "ROOT"@ax.com () on Mon, 03 Oct 1:1 AM ------------------- >From ROOT(a)ax.com Mon Oct 3 04:45 EDT 1994 Received: from netcomsv.netcom.com (uucp4.netcom.com [163.179.3.4]) by pipeline.com (8.6.9/8.6.9) with ESMTP id EAA02169 for <jya(a)PIPELINE.COM>; Mon, 3 Oct 1994 04:45:26 -0400 Received: from ax.com by netcomsv.netcom.com with UUCP (8.6.4/SMI-4.1) id BAA22993; Mon, 3 Oct 1994 01:37:39 -0700 Received: by ax.com (UUPU-1.42) id D1115pj Mon Oct 03, 1994 01:01:37 EDT From: "ROOT"@ax.com Message-Id: <9410030101.D1115pj(a)ax.com> X-Mailer: UUPlus Mail 1.42 To: jya(a)pipeline.com Subject: Non-Delivery Notification Organization: Anarchy-X Date: Mon, 03 Oct 94 01:01:36 EST Content-Type: text Content-Length: 377 NON-DELIVERY NOTICE ------------------- The message you sent on: Unknown to "ROOT" was undeliverable. ========================= !!! Automated Notice !!! ======================= E-mail replies to this user should have the following on the first line of message text: TO: "ROOT" ================================================================= =========

1 0

SHA patch
by Michael Shiplett 17 Dec '03

17 Dec '03

Hello there, After some work with the SHS (or is the implementation actually the SHA?) code listed in _Applied Cryptography_, I have patched it to allow updates of buffer sizes that are not a multiple of SHS_BLOCKSIZE. The patched version works for the different groupings of the test data "abc", e.g., update(abc) update(a) + update(bc) update(ab) + update(c) Since the "abc" case tests only the logic of shsUpdate() [all the transformation invocations are actually performed by shsFinal()], I ran the original code and the modified code on several files and (fortunately) received the same hash values for the two implementations. shsUpdate() follows. You may need to define a bcopy->memcpy macro. michael =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= void shsUpdate(SHS_INFO *shsInfo, BYTE *buffer, int count) { int offset, need; /* determine if there are left over bytes in the shs data. they are handled specially below */ offset = (int) ((shsInfo->countLo >> 3) & 0x3f); need = SHS_BLOCKSIZE - offset; /* update bitcount */ if ((shsInfo->countLo + ((LONG) count << 3)) < shsInfo->countLo) shsInfo->countHi++; /* carry from low to high bitCount */ shsInfo->countLo += ((LONG) count << 3); shsInfo->countHi += ((LONG) count >> 29); /* if there were indeed left over data bytes, see if the incoming data is sufficient to fill to SHS_BLOCKSIZE. if not, copy the incoming data and return; otherwise fill the block, perform a transformation, and continue as usual */ if (offset) { if (count < need) { bcopy(buffer, (BYTE *) shsInfo->data + offset, count); return; } else { bcopy(buffer, (BYTE *) shsInfo->data + offset, need); #ifdef LITTLE_ENDIAN byteReverse(shsInfo->data, SHS_BLOCKSIZE); #endif shsTransform(shsInfo); buffer += need; count -= need; } } /* process data in SHS_BLOCKSIZE chunks */ while (count >= SHS_BLOCKSIZE) { bcopy(buffer, shsInfo->data, SHS_BLOCKSIZE); #ifdef LITTLE_ENDIAN byteReverse(shsInfo->data, SHS_BLOCKSIZE); #endif shsTransform(shsInfo); buffer += SHS_BLOCKSIZE; count -= SHS_BLOCKSIZE; } /* store the left over data */ bcopy(buffer, shsInfo->data, count); }

1 0

Filing FOIA Requests
by ozymandias G desiderata 17 Dec '03

17 Dec '03

A large group of my friends and I are interested in finding out exactly what the cheeseballs over in Intelligence, Inc. have on file about us. Does anyone have handy the details necessary to file a Freedom of Information Act request for your own file? Do y'all have some hints so that we can expect the best possible yield? On the same note, do any of you have any humorous / chilling stories about what you found out when you got your file? Thanks in advance for the info, ozymandias G desiderata

2 1

DTI Pointers?
by ozymandias G desiderata 17 Dec '03

17 Dec '03

I'm taking public speaking so that I can finally get out of college and into the big wide world, and have decided to educate my class on the controversy surrounding the Digital Telephony Initiative. I need hardcopy to make my TA happy, and after an (admittedly quick) browsing of the archives, I wasn't able to find much in the way of hard information. Are there any good pointers, especially to the recent Lehman version of the bill and the controversy that now surrounds the EFF? Thanks in advance for your help, ozymandias G desiderata

1 0

Puzzle Palace
by fhalper＠pilot.njin.net 17 Dec '03

17 Dec '03

I just finished reading the Puzzle Palace and I thought it was quite interesting Does anyone know where I could find some more info on the NRO and DIA, or even info on what the NSA has been up to for the last ten or so years, besides the obvious. Thanks to whoever recommended the book to me, I don't remember who it was. Reuben -------------------------------------------------------------------------------- Reuben Halper "I'm not growing up, I'm just burnin' out." Montclair High - Green Day - Montclair, NJ E-mail: fhalper(a)pilot.njin.net or PGP 2.6ui Public Key Reuben8878(a)aol.com available upon request --------------------------------------------------------------------------------

4 5

RE: Chomsky quote (thread from hell)
by Blanc Weber 17 Dec '03

17 Dec '03

From: James A. Donald The intended effect is to make us feel that such "extreme" freedom of speech is a bit excessive and not really necessary or desirable. . . . Thus he is actually making a misleading and spurious argument *against* freedom of speech at the same time as he is piously declaring himself to be in favor of freedom of speech. ............................................................... James, couldn't he simply be taken at his word - his explicit expression, rather than the implied "catty nastiness". If it was not what he really meant, he would eventually be irritated enough by the full acceptance of his apparent support for liberty to come out and say more precisely what he really wants people to think, so they don't go on allowing freedoms which he is really trying to prevent. Blanc

1 0

Re: HTTP authentication efforts
by rah＠shipwright.com 17 Dec '03

17 Dec '03

At 10:05 PM 9/20/94 -0500, Paul Ferguson wrote: >Howdy guys 'n gals. > >As much as I'd love to rant about Detweiler getting an account on Colorado >Supernet, I must put aside my insidious remarks for the time being. > >Does anyone know, on the off-chance, who is currently working on >HTTP authentication processes for web browsing and Mosiac? > >Pointers appreciated. One pointer, coming up! >Date: Sun, 28 Aug 94 04:30:02 EDT >From: www-buyinfo-request(a)allegra.att.com >To: www-buyinfo(a)allegra.att.com >Subject: weekly www-buyinfo reminder >X-UIDL: 778077798.009 > >Weekly reminder for the www-buyinfo mailing list. > >Please note that the mailing address for subscribe/unsubscribe is > www-buyinfo-request > ******* >To subscribe: > Send mail to www-buyinfo-request(a)allegra.att.com > Body of message (NOT Subject:) subscribe www-buyinfo >To unsubscribe: > Send mail to www-buyinfo-request(a)allegra.att.com > Body of message (NOT Subject:) unsubscribe www-buyinfo >To contribute to the mailing list: > Send mail to www-buyinfo(a)allegra.att.com > >Mail archives will be located in: > ftp.research.att.com:/dist/www-buyinfo-archive/ >Hypermail archives are located at: > http://www.research.att.com/www-buyinfo/archive/ > ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0