December 2003 - cypherpunks-legacy

Are there *any* internet services runnable from powerpc
by tjb＠acpub.duke.edu 17 Dec '03

17 Dec '03

I'm still thinking I'd like to provide some internet services from my power mac. I have my own IP address and the folks at network services said they don't mind if I run a WWW server, and they will even change the name assigned to my IP address if I don't like it. So it sounds to me like I can provide internet services. I hesitate to run a web server because I hear there are lots of security bugs and I won't subject my mac to that. I am looking for a unix emulator that is freeware for the macintosh. I was directed to one apparently freeware unix platform for the mac by someone on the cypherpunks list, but it says it does not support ethernet which is how I am interfaced. I have a power mac 7100 with an ethernet port to the internet. Does anyone know if I could, for example, get scripts for Eudora to snarf mail and run a keyserver, or set up an anon remailer, or do anything at all remotely cool and for the betterment of the crypto/privacy/pgp/etc. services available to the internet public? I could leave my mac on 24/7 serving up services. When I'm debugging code it might crash, but I suppose there should be fail-safe systems. It doesn't seem like I can do much unless I buy a unix emulator, and I don't have the money for that. I'm a student. Tom ------------------------------------------------------------------------ Tom Bryce for PGP public key finger tjbryce(a)amherst.edu

1 0

MMB question
by L. Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Schneir mentions MMB in the section following IDEA (in 11.10) of _Applied_ _Cryptography_, but notes that it's brand-spanking new at the time of _AC_'s publication. He mentions that "Eli Biham thinks that a 128-bit block size actually weakens the algorithm." What's the current thought on MMB? Has it undergone serious analysis and if so, what's the conclusion been? Thanks, - -- Todd Masco | "Roam home to a dome, Where Georgian and Gothic once stood cactus(a)hks.net | Now chemical bonds alone guard our blond(e)s, cactus(a)bb.com | And even the plumbing looks good." - B Fuller - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuQWbSoZzwIn1bdtAQH14wGAiDedhz9smWvZ4Taph8ITrMJq+Ey+J/MT 3TXoYa+j3YAbh2OU6l0Lc/M+uQy1vVBP =Ejvv -----END PGP SIGNATURE-----

1 0

Re: public accounts / PGP / passphrases
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Adam wrote: > Derek wrote: > | It would be nice to integrate PGP into terminal emulators, too, like > | kermit or seyon or red ryder or whatever, so that you could easily use > | PGP locally to sign/encrypt things on the remote end. Wishful > | thinking, I guess... > > I think terminal emulators are the wrong layer for PGP > integration. PGP support is needed in document editors and viewers, > rather than in network layers. The terminal emulator we used to use at Bell Labs, ctrm, was designed to let you interact conveniently between your DOS machine and a Unix system you were dialed into; it felt like you were controlling things from the Unix end. Thus, you could issue Unix commands to initiate file transfer via kermit or xmodem (utopc *, pctou *), and you could also issue Unix commands to run DOS commands back on the PC - the commands basically sent back and escape sequence saying ESC RUN foo.exe arg arg arg CR or whatever. It was easy to build applications that did things like crunch up mail messages into temp files, download the file to DOS, run Lotus or WordStar on it, and haul the result back. You could take the same approach with PGP if you wanted - the support you need in document viewers is the ability to hand chunks of the document/mail message off to an arbitrary program for processing. Coincidentally (:-), MIME lets you do this sort of thing. I don't know if ctrm is still around - it was designed by an employee and we were allowed to use it internally, but I don't think it was sold outside. But it wouldn't be too hard to add that sort of capability to your favorite source-included freeware terminal emulator, and then you could build convenient PGP tolls, remote Mosaic viewers, etc. out of it. Bill

1 0

Re: Freeport information
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Michelle Montpetite writes (forwarded by Sam Kaplin): > Anonymous users have read-only access (e.g. they cannot > post to the bulletin boards nor send e-mail); [...] > Prerequisite software > > FreePort is distributed in source code. You will need > typical Unix program development tools including an C > compiler, yacc, and linker. The publicly available > layered software mentioned above is available from > various ftp sites on the internet, (where ?) > or is available from CWRU as a complete collection of the prerequisite > source code. (where ?) [...] > Installation and maintenance of the FreePort software > requires an experienced Unix Systems Programmer. The > technical support person requires 'root' access to > install and configure the various prerequisite > communications software. [...] > Licensing > > A 5-year renewable FreePort 2.3 license for a nonprofit > site is $850 ($2800 for-profit). The software is > shipped as a "tar" file on 8mm Exabyte cartridge, or > for extra cost, on 1/2" magnetic tape or DC6150 > cartridge. I'm still not clear about what's free and what costs eight hundred bucks. > The software is AS IS. Stupid is as stupid does ? Zen and the art of software maintenance. - - -L. Futplex McCarthy; PGP key by finger or server "We've got computers, we're tapping phone lines; I know that that ain't allowed" --Talking Heads - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLuQf4Gf7YYibNzjpAQEBxwP/QuZ5dkFDpJvMJAWNyqvUd02XudTq+Fod mrPmnY/2JxoxpHbXwbVs6BFvV1R3iEg+/0NpumQxSZYV9bcN5o7yBm5LSjCFurIW 2NkDbAaaEG6e9rV3efzhFO2FCe2jmrcXPkUVIGLORxMJ3oS7cZyYBpZNDidN+fOP z9lBWln7MC4= =h+xK - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuQhISoZzwIn1bdtAQFdeAF/SJVofZS/anhfZe8RkuxJajt1xQZV/aZR n8B66+zP0aCMXZhfdMU2u/udI5LTCcLG =RsyI -----END PGP SIGNATURE-----

1 0

Re: Are there *any* internet services runnable from powerpc
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

Tom wrote: >I have a power mac 7100 with an ethernet port to the internet. Does anyone >know if I could, for example, get scripts for Eudora to snarf mail and run >a keyserver, or set up an anon remailer, or do anything at all remotely >cool and for the betterment of the crypto/privacy/pgp/etc. services >available to the internet public? I could leave my mac on 24/7 serving up >services. When I'm debugging code it might crash, but I suppose there >should be fail-safe systems. > >It doesn't seem like I can do much unless I buy a unix emulator, and I >don't have the money for that. I'm a student. Yeah, A/UX is rather overpriced. But you don't need it for a web site. Your PPC can provide any Web service your heart desires without you having to buy A/UX. You can open an HTTP server using the excellent MacHTTP, a ftp site using Peter Lewis' MacFTP, etc. You can even use perl on the Mac using MacPerl, the list goes on. All these programs are available at your friendly neighbourhood InfoMac mirror site. I am not so sure about the keyserver, though. I suppose it might be possible to write an AppleScript for the new scriptable versions of MacPGP and Eudora, but I don't think it would be worth the effort. There are enough keyservers out there. IMHO, the best source of info regarding running your own web server on a Mac is the MacHTTP mailing list. You can join by sending a message to listserv(a)oac3.hsc.uth.tmc.edu with "SUBSCRIBE MACHTTP_TALK Your Name" in the body of the message. Also check the MacHTTP home page for announcements and frequently asked questions and answers. It can be found at: http://www.uth.tmc.edu/mac_info/machttp_info.html Enjoy, -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

1 0

Valid mail -> usenet gateway for alt.security.keydist
by skaplin＠skypoint.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Does anyone have a valid mail -> usenet gateway for alt.security.keydist? I've tried a few and they don't seem to work. ============================================================================== No doubt Jack the Ripper excused himself on the grounds that it was human nature. --A. A. Milne-- ============================================================================== skaplin(a)skypoint.com | "...vidi vici veni" - Overheard | outside a Roman brothel. PGP encrypted mail is accepted and | preferred. | Change is the only constant in the | Universe..."Four quarters, please." E-mail key(a)four11.com for PGP Key or | Finger skaplin(a)mirage.skypoint.com | Smile!! Big brother is watching. ============================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBLuQjC8lnXxBRSgfNAQHiCwf9FDGkO/yt74Zn0zRE5P23cxBo7pfHr7i3 g3HFJD5kp0b8kUXsj2UwN9X5E6L/9gDED2fyiWbdnh/Q2v75wFGVBusmUwCE4Xgs cTS97xOBLAXCr/snXcZD96Zw3hpGsiNASXKwPtTfflNpKxuEaOSYBPpyaGjHr6gs nFbLitYEVgq51SuKZGO3lYMrUc5kkTLhMBPUk7YxeBmnDaEBduDqSuQrApAw5GwK lcgYVNK2SW69GaCWWqAn2NQsSROVSQlaiiVRIPTKPxV9/5basGfZNKhJpgepBPSY cSplbGwVb7DfcAXD9yu0yXBimiNHbBeuamS8Cm+9eamxD9ZD2vuzbQ== =/aF3 -----END PGP SIGNATURE----- This message digitally signed to verify the identity of the writer.

1 0

no subject (file transmission)
by anon＠losers.hacktic.nl 17 Dec '03

17 Dec '03

Remailed by: anon(a)losers.hacktic.nl X-Remailer-Software: Remail for Waffle 1.4 > > Could someone bring me up to speed on this group? On the surface, it > would seem that there is a lot in common with their objectives and the > general Cypherpunks "philosophy". (quotes because I understand the > diversity of thought in this group.) Posted earlier: > From nobody(a)soda.BErkeley.EDU Wed Aug 3 11:12:35 PDT 1994 > Article: 17449 of alt.privacy > Xref: netcom.com alt.privacy:17449 > Path: netcom.com!netcomsv!decwrl!spool.mu.edu!cass.ma02.bull.com!soda.BErkeley.EDU!nobody > From: nobody(a)soda.BErkeley.EDU (Tommy the Tourist, Anon User) > Newsgroups: alt.privacy > Subject: OCEANIA GETS SCREWED! > Date: 28 Jul 1994 20:47:23 -0000 > Organization: Bull Worldwide Information Systems. > Lines: 65 > Sender: daemon(a)cass.ma02.bull.com > Distribution: world > Message-ID: <199407282045.NAA24571(a)soda.Berkeley.EDU> > NNTP-Posting-Host: cass.ma02.bull.com > Status: RO > > > From CompuServe's Libertarian Political Issues Forum > > > Subject: #216752-Oceania? > From: Scott A. Kjar 70402,3124 > To: L D Weller 71011,1743 > > It turned out to all be a scam, actually. The key people involved, Eric > Kline and Chuck Geshlieder, allegedly had a scheme set up where they > repeatedly paid themselves out of all of the proceeds. It apparently went > something like this: > > 1) Donations came to Oceania. Kline and Geshlider, as principals, got > paid a portion. > > 2) Oceania then contracted with The Gold Standard Press, owned by Kline > and Geshlider, to do printing. Kline got a share as the sales rep. > > 3) Gold Standard Press then printed fund-raising letters for Oceania. > Kline and Geshlider split the profits, as partners in Gold Standard. > > 4) Oceania sent out more fund-raising requests. > > 5) Donations came to Oceania. (see #1) > > It fell apart when Kline and Geshlider allegedly accused each other of > fraud, and Geshlider apparently took his case to the Nevada State Attorney > General's Consumer Fradu Division. (Poor Chuck, there were no consumer's > in this transaction.) What is amazing about all of this is that The Gold > Standard was an ILLEGAL business (no business license) and Chuck had been > hauled before a judge a few months ago on this very charge. He allegedly > threatened to beat her up in the parking lot (something he has threatened > to virtually everyone who has ever met him), and then skipped town for a > couple of weeks. The people at the Attorney General's office apparently > were astounded that Chuck, who is knowlingly running an illegal business, > and is not keeping any records the IRS might get hold of, is complaining > about his business partner and co-conspirator about a scam. After all, > there are NO Gold Standard Press records, and there are NO Oceania > records. (It turns out that Kline was simply writing checks Pay To The > Order of Cash, and then using the cash to cover his reversals in the Stock > Market.) > > Eventually, their need for cash apparently outstripped the rate at which > suckers were sending them money, and like hungry wolves, set upon each > other. > > GOOD RIDDANCE! > > p.s. I know both of these jerks personally. We have tried to throw them > out of the LP in Las Vegas for several years. Like counterfeit money, > they just keep turning up! > > > ------------ > To respond to the sender of this message, send mail to > remailer(a)soda.berkeley.edu, starting your message with > the following 7 lines: > :: > Response-Key: ideaclipper > > ====Encrypted-Sender-Begin==== > MI@```$!S^P;+]AB?X9TW6\8W2:NP&2&04%GSR=BW]`^+`=)MFOA[ER>?SK)G > 8$I$XG.1&][YD$P&3*E2?3N6*&SLZ:_5^ > ====Encrypted-Sender-End==== > >

1 0

2048-bit keys??
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

just curious, how many random bytes does it take to generate these fuckers and can the keyservers out their handle em yet?

4 3

Re: Well now that we're signing...
by Craig Steinberger 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I disagree also with posting public keys to the list, but I think anyone who signs their messages should either have their key in the keyservers or should at least provide information on how to get the key along with the message. Why bother signing if your key is not available? Something I was wondering about is what should be done with signatures that don't check out. For the most part it is due to a bug in the signing/mailing procedure, rather than an actual spoof. Is there an ettiquette for contacting the person who posted the missigned message. Do people want to know if their sigs didn't check out? - -Craig Ëaig Steinberger stein-c(a)eng.buffalo.edu SUNY at Buffalo CFD Lab send mail with subject PGPKEY for PGP Key -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuKKpMI9bVMUIPr9AQEqugQAgiPQaW6J0PuBuaCZB8+V2nXNCjRrdB68 N67rDSRwv82Kri+QDSIggbtuuuqAJp/u750x1CSCGWd+SgwPENs0mRlW+bEh5IB2 Oqq0GnQ6E8PdLvVDneAVdrdBymyz5csAgTCOKgRc90XPycMGi/aMa2Kk8KglAR4K qZgVBN+P4XY= =A66/ -----END PGP SIGNATURE-----

3 3

Re: AA BBS - Thomases are going to jail...
by hkhenson＠cup.portal.com 17 Dec '03

17 Dec '03

We have a Problem . . . H. Keith Henson Part of the Federal Government's law enforcement mechanism is under the control of the Religious Right. By reaching out thousands of miles through cyberspace connections, the RR is using Federal power to suppress constitutionally protected activities which they find offensive. I expect the RR people involved feel that what they are doing is fair return for Federal power being used to suppress the school Christmas pageant in a thousand sleepy little towns in middle America--and less dangerous than offing abortion doctors, or killing gays. Most of you reading these groups are familiar with the AA BBS case. In a nutshell, a postal inspector in Memphis called Amateur Action BBS in California, downloaded a dozen files, ordered other stuff, shipped the sysop some unsolicited kiddy porn, then arrested the sysop (Robert Thomas) and his wife (Carleen) for kiddy porn and (by Memphis standards) obscenity. They were tried in Memphis last summer by an obviously biased court. (The judge and prosecutor made no attempt to hide their longstanding mutual admiration.) The Memphis jury found the sysop and his wife guilty of obscenity, but even they couldn't buy the kiddy porn charges, and acquitted on that charge. Friday (Dec. 2, 1994), in the worst perversion of justice I have ever witnessed, the sysop and his wife were sentenced to three years. They were lucky to get that little time. I got a look at the pre-sentencing report. (I may be able to post some of it later.) The recommended sentence included about twice this amount of time based on the kiddy porn charge they were *acquitted* of. Those reports are simply *amazing*. They cover family members and history out a generation or so in all directions, not to mention school, medical records, tax filings, and any police record--even if you were found innocent! It seems to be the function of these things to put your entire life in the worst possible light. Someone should take the form and do one for Christ just prior to the Crucifixion. It would run something like: ". . . questionable father, . . low class occupation (carpenter), . . . accused of impersonating a doctor by healing sick, . . . known to associate with low class persons, . . . travels about (vagabond), . . ." Back to the problem. I find the situation intolerable--without having a clear idea of how to deal with it. With little more effort (though a lot more skill than the postal inspector demonstrated) the RR-controlled Feds can create crime and venue problems for just about anyone running a BBS or net node. Certainly *any* system which carries alt.sex.* is subject to the same treatment by the Religious Right (in the guise of the Memphis Feds) as AA BBS. In fact, the very .gifs that were found obscene in Memphis were made "freely distribute," by Robert and have been posted *many* times to the net. Could we use economic retaliation? I won't use Federal Express any more because it and Graceland (and the cat houses near Graceland) seem to be the economic mainstays of Memphis. Unfortunately, even a very effective economic boycott is not going to have an effect on the zealots, and depressing that area further might make it an even *more* repressive backwater because the last of the intelligent/tolerant people would move out. On the other hand, economic pressures might induce the more sensible part of the community to pressure the zealots into being more tolerant (at least of people 3 time zones away!). In recent years economic pressure has induced two states to change laws. A positive sign that economic pressure might be effective is that the local newspaper did *not* support the prosecution. Research question: Why did the Memphis Feds back off after the Deep Throat trials? Is the law any help? After nearly a year of watching the process, I am *quite* pessimistic. In its own way, the court system is deeply corrupt. I think even the RR folks know this is a political case and not a criminal one. In political cases, leaving a person out on bail during appeal is normal, but in this case, it is very much in the government's interest to have Robert out of circulation so he cannot pursue the Electronic Communication Privacy Act suit and other causes of action against them in civil court. Robert's motion for bail during appeal was denied. Are there political routes? Yes, but chancy. It is possible that a political fight with the RR might backfire and result in heavy restrictions on the nets. Coming down hard on the nets would be very popular with the Administration forces after the Clipper debacle. The power of the net to organize political force must be quite worrying to those in power. (It is clear to me that modern day revolutions, anywhere in the world, and peaceful or not, would be organized through the net. In some places this has already happened.) It may be that a general cutting down on the powers of the Federal Government is in order. This has pros and cons, and support (in some areas) even from the RR. How *does* one shrink the unshrinkable? Tax revolts (in the form of massive political pressure) seem to come about when the tax rates get as high as they are now. Another possibility is that the formation of private money may greatly shrink the ability of governments everywhere to collect taxes. Should people start thinking about direct action? I hope we don't come to this! There is nothing I can think of worse than arousing the technically knowledgeable to take the infrastructure apart. Problem is that pinpoint damage (like taking the 901 area code down for a few days or weeks) is somewhere between impossible and probably impossible. (Though ATT managed to take down their entire phone network for a day with a missing "case" statement.) Your thoughts and suggestions would be appreciated. Please post encrypted through a remailer chain if you absolutely *must* post ideas about the last paragraph! S ,.

4 3