December 2003 - cypherpunks-legacy

Re: Anyone going to DEFCON
by jeremym＠jax.jaxnet.com 17 Dec '03

17 Dec '03

>As chance has it, I will be vacationing in Las Vegas July 29 - August 6. >Is anyone else planning on going to DEFCON? > >Sam I'm planning to attend all of DefCon III. I, for one, am anxious to meet Bruce Schneier. AFAIK, there will be time for Q&A during the Con, and I'd be happy to ask questions for anyone who won't be able to attend. .jeremy --- Jeremy Mineweaser | GE d(++) H- s+:- g- p1+ au a18 w+ v++ jeremym(a)jax.jaxnet.com | C++ L++++ P+>+++ L+ 3+ E- N++>+++ K- http://www.jaxnet.com/~jeremym | W++@ M-- V- po+ Y++ t++ 5 j+ R+++ G? tv- Finger for PGP key | b++ D++ B-- e u---(**) h! f+ n---- y? http://dcs.ex.ac.uk/~aba/x.html | *ai*vr*vx*crypto*ITAR*unix*data havens*

1 0

Re: Netscape the Big Win(dows)
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 21:47 7/21/95, Damaged Justice wrote: >Au contraire. I finally got the chance to use Netscape, and although I AM >impressed, I still prefer Lynx. Most folks will probably call this pointless >stubborness, elitism, I don't care. Graphics are too damn slow at any >speed and personally, I have no need (or desire) to have my net connection >slow to a snail's crawl just to make it "look nicer". Ever tried turining off "autoload immages"? -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

Re: Netscape the Big Win(dows)
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 19:15 7/21/95, bigdaddy(a)ccnet.com wrote: > In my own experience, the Mac newsreaders that I have >tried(mainly Nuntius and Newswatcher) have felt incredibly slow compared >to tin. Depends on the load on the host, the speed of your link, the speed of your Mac, and if you want to trade features for speed at that given moment. >What, IMHO, would be a good step forward would be Mac versions of >UNIX packages like pine and tin... The human interface is the whole point behind Newswatcher and Nuntius. As for Mac users that prefer tin, they already have an implementation available. It is called telnet. >preferably with AppleScripts that >implement the same functionality as the PineSign and TinSign scripts >recently distributed here. I have been thinking about writing AppleScripts that link Newswatcher with PGP. Unfortunately, there is another project that has precedence. Still, as with most great utility software not yet available, you can always try to write it yourself. Have fun, -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

Re: big word listing
by Joey Grasty 17 Dec '03

17 Dec '03

Alex sez: > Is there a "challenge response" type of password/login available > somewhere ? > Post Office Protocol 3 (POP3) has an optional command called APOP which sends a string of the form "<process-ID.clock@hostname>". The POP3 client calculates the MD5 digest of <process-ID.clock@hostname>password and sends it to the server as "APOP username 58349485whatever89583449". I like it. Regards, -- Joey Grasty jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] jgrasty(a)pts.mot.com [work -- designing pagers] "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin." -- John Von Neumann

1 0

Re: big word listing
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 04:17 PM 7/21/95 -0500, Chris Gorsuch wrote: [ stuff about keeping a dictionary of previously used passwords to prevent reuse ] > A "cryptographic" solution would be to simply store a hash of the password >rather than the password itself in the "appended" dictionary. A CRYPTOGRAPHIC >solution would be to use one time passwords :). Be _very_ careful if you try this. After all, it's an invitation for anybody who runs the dictionary to use a crack program on the convenient list of hashes. (If you use the same hash as the password file, you haven't risked _too_ much, but using something fast like MD5 invites people to use their pre-computed "MD5's of a million wimpy passwords" list. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #--- # Export PGP three lines a time --> http://dcs.ex.ac.uk/~aba/export/ M0V]N9W)E<W,@<VAA;&P@;6%K92!N;R!L87<@+BXN(&%B<FED9VEN9R!T:&4@ M9G)E961O;2!O9B!S<&5E8V@L(&]R(&]F('1H92!P<F5S<SL-"F]R('1H92!R M:6=H="!O9B!T:&4@<&5O<&QE('!E86-E86)L>2!T;R!A<W-E;6)L92P@( T*

1 0

Re: Something occured to me
by Andrew.Spring＠ping.be 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > >Whent he republicans took over the congress, they instidtued that >Contract on America. One of the first laws that was passed (by both >parties, I might add) was a law that made lawmakers abide by the same >laws that "normal" people abide by. > I think this was aimed at congress's tendency to exempt themselves from their own legislation. For example, Congressmen are, supposedly, entitled to practice hiring discrimination based on, "race, creed, or color of socks" in the words of GB Trudeau's Lacey Davenport. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMBAYFY4k1+54BopBAQHxuwP+J/ypbLg07RE49Mvc/oXTl9RtPwTInEv7 t2RjOb57I2gvjr60i/OS/1EFVQv8FE7iZHtXpOEw7W2nHRTOBsWwTx6L9b7NB5Z9 ufkierYXyJnTJvXXvkrevXZ4wmc26Q5dyMU35HmMensRJSYwlR213DyvvKD5aOG1 6MtCqMomJZQ= =Wn55 -----END PGP SIGNATURE----- -- Thank you VERY much! You'll be getting a Handsome Simulfax Copy of your OWN words in the mail soon (and My Reply). <Andrew.Spring(a)ping.be> PGP Print: 0529 C9AF 613E 9E49 378E 54CD E232 DF96 Thank you for question, exit left to Funway.

1 0

An idea about Java and remailer clients and servers...
by Phil Fraering 17 Dec '03

17 Dec '03

I think someone mentioned the possibility of running a Mixmaster client in Java. I was under the impression that there was a lot of common code between the Mixmaster client and server versions, at least in the current version. Does it have to be the case, then, that we even have separate client and server versions? If a new program is going to be written in Java, can't it have the functionality of both client and server? Why not "charge" for the ability to send an anonymous message with the duty to have for a short time (maybe an hour or two) running on your machine a node in a remailer network? Phil

2 1

Re: Government Mandated Keys
by dan＠milliways.org 17 Dec '03

17 Dec '03

On Wed, 19 Jul 1995 11:39:07 -0700 you wrote: >At 11:02 AM 7/19/95 PDT, rick hoselton wrote: >>I want to register the 1-bit key of "1". I expect to >>send about half my message bits encrypted, the rest will be clear-text. > >Oh, go ahead, register 0 also. You'll probably want to switch keys >occasionally during sessions. Actually, why don't we just register our favorite geometric constant, pi? Assuming it's non-repeating, and non-terminating, you're guaranteed that whatever key you end up using will be somewhere in pi. Dan ****************************************************************************** Vote Speaker Newt Gingrich for President!! Dan Bailey Worcester Polytechnic Institute, class of 1997. dan(a)milliways.org ******************************************************************************

1 0

Re: Something occured to me
by Jason Burrell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > > On Fri, 21 Jul 1995, Robert A. Hayden wrote: > > > Whent he republicans took over the congress, they instidtued that > > Contract on America. One of the first laws that was passed (by both > > parties, I might add) was a law that made lawmakers abide by the same > > laws that "normal" people abide by. > > If you believe that... > > Well, it is true, under certain limited circumstances, but it doesn't > make them criminally liable for writing bad laws, nor can it. The pity, of course, is that we can't get Exon for passing around a book that he said contained child pornography, since he's immune while he's on the Senate floor. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMBE0fyoZzwIn1bdtAQGWwAF/b66+ddWoQ+k7lqOvRu5/2uZgCop5X+d4 ipMc98PXCucBiM5QHP5l6sIopZUVcr5H =grqV -----END PGP SIGNATURE-----

1 0

Re: big word listing
by Andrew.Spring＠ping.be 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Post Office Protocol 3 (POP3) has an optional command called >APOP which sends a string of the form "<process-ID.clock@hostname>". >The POP3 client calculates the MD5 digest of > > <process-ID.clock@hostname>password > >and sends it to the server as "APOP username 58349485whatever89583449". > >I like it. > Of course, this requires the user password to be stored unencrypted on the server; which you may not want to do. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMBEbT44k1+54BopBAQEvaAP/btvc6mK8aFL5ONL70aQRhJIY/Zu+6HnU WSDiVNLTtbEiMA+4W7hOD3RQORl42r/Lqdyevq+VmG1LAikCETDgS77jiGq11Kt+ q1HVGQEkiPexd8asJw66hjYLo+vWylu2U39e7YWc01ccr2Hr+zZR+/MHVPQsMq5y LXTiercKsow= =gdHC -----END PGP SIGNATURE----- -- Thank you VERY much! You'll be getting a Handsome Simulfax Copy of your OWN words in the mail soon (and My Reply). <Andrew.Spring(a)ping.be> PGP Print: 0529 C9AF 613E 9E49 378E 54CD E232 DF96 Thank you for question, exit left to Funway.

1 0