December 2003 - cypherpunks-legacy

Re: (Fwd) Re: GATT and RSA
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

I want to know whether GATT will affect the export of encryption software. It seems to frown upon any barrier to trade and I think I could argue, perhaps not correctly, that if ACME in Taiwan can't buy the necessary encryption software to do business with CENTRAL in Kansas, then ACME is prevented from competing in America. BONEHEAD Inc, from North Dakota won't have to worry about foreign competition. This means that either there can be no secure international EDI standard that anyone can use to do business or there will be trade barriers to foreigners interacting with American firms. Of course, this is just a random conjecture based upon a conversation I had with Dave Banisar. Is it silly? Or sensible? I'm sure there are exemptions for military hardware, but heck, when it comes down to it food is the ultimate strategic resource. Where does crypto lie in this spectrum? Everyone knows where it lies in the eyes of the NSA. Where does it lie in other people's reality? -Peter

2 1

Re: PGP Tools under Linux (Pr0duct Cypher)
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: Pr0duct Cypher Pr0duct Cypher writes: >I wrote: >>I am using PGPTools to handle all the crypto functions in the second >>generation remailer that I have written. All the copies of PGPTools that I >>have found seem to be set up to compile on SUN workstations only. > >That's interesting, because I developed it under Linux and MS/DOS, and there >was a lot of trouble at the beginning with it not running on big-endian >machines. It sounds like whoever "fixed" it for sparcs broke it for >little-endian machines. The original should still be on ftp.csn.net; get it >there and it should work. > >>Mixmaster is both a remailer and a front end, and therefor must run on many >>different platforms. I have been able to compile PGPTools on Linux and >>FreeBSD, but PGPTools produces invalid RSA blocks. If you (or anyone else >>reading this) have ported PGPTools to other platforms could you send me the >>source and makefile, or point me to them. If not, could you help me do it, >>the source code is a tangle, and it will take me a long time to do on my own >>(I am a brute force programer, not a C wizard). > >Get the original, test it, and post the results. > <SNIP> > - Pr0duct Cypher Ok, I grabbed second oldest version (this included a bugfix). I compiles and seems to work fine when I use it with PTD. It fails when run under Mixmaster. The failure is deep inside pgptools. When I call pgpk_findkey to get a key from a public key ring (by name not number), it chugs along checking each key id in the ring. Each time it checks a key, it uses a pair of fifo's which it then destroys. After checking the second id, when it is destroying kc (k is destroyed without problems both times), I get a segmentation violation in the line nfb=fb->next; Since kc was simply a copy of k kc=fifo_copy(k); I suspect the problem lies in fifo_copy. These are all mem fifo's. If you want to look at the source code I am playing with (with tons of debugging printfs in it) let me know and I will stick it on my ftp. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLuOBVFVkk3dax7hlAQGYNAP9GvDMvdSKA1vUsmJB/xitPVsiazNeZjXJ NrjwouMg85VR1ri1rm1y2NuKbHEljGfwNB7z8euy7e1clptRsN4WWrP+ASSfrire 9Clan80Ep4lEA+83caArQv3Hcdb8+8FnLpXd/zrPI2V/3TVM2OrfU7/RtUo+3Pr3 JE2d0s6Jn+E= =jlbs -----END PGP SIGNATURE----- -- Lance Cottrell <lcottrell(a)popmail.ucsd.edu> http://nately.ucsd.edu/~loki/ Home of the remailer chaining script "chain". PGP 2.6 key available by finger or server. "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Remailers and "##"
by Jonathan Rochkind 17 Dec '03

17 Dec '03

I know there's some kind of a syntax you can use involving "##", with some of the remailers, and the remailer will insert a header line into the message. But I'm having trouble figuring out what syntax this is. Can anyone help me out?

3 2

Re: AA BBS - Thomases are going to jail...
by frissell＠panix.com 17 Dec '03

17 Dec '03

At 11:30 AM 12/5/94 PST, hkhenson(a)cup.portal.com wrote: >Part of the Federal Government's law enforcement mechanism is under >the control of the Religious Right. Stuff about the AA BBS bust elided. One should note that this prosecution is similar to others carried out against the sellers of physical visual pornography for years. The stings have been carried out by both Republican and Democratic federal prosecutors usually in border states. They started before there was an official Religious Right. The US Attorney in this case may have been a Democrat since most Republicans were replaced by Clinton. He, she, or it is probably not a member of the RR. >I find the situation intolerable--without having a clear idea of how >to deal with it. There will be an appeal. >Certainly *any* system which carries alt.sex.* is subject to the same >treatment by the Religious Right (in the guise of the Memphis Feds) as >AA BBS. In fact, the very .gifs that were found obscene in Memphis >were made "freely distribute," by Robert and have been posted *many* >times to the net. That will be an interesting case. DCF ************************************************************************* ATMs, Contracting Out, Digital Switching, Downsizing, EDI, Fax, Fedex, Home Workers, Internet, Just In Time, Leasing, Mail Receiving, Phone Cards, Quants, Securitization, Temping, Voice Mail.

1 0

Privacy seminar
by L. Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Has the privacy seminar been dropped? Last message I've seen from it was November 5. Thanks, -- Todd - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuONtioZzwIn1bdtAQHK1wGAlR4l8iUNvGZ401ub4P6TMibXlW5vYAoP ZrSJysUUsdFIuPHUkauWYKwiiRtVRqga =Y5Vd -----END PGP SIGNATURE-----

1 0

Re: Oceania?
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

The Oceania folks may or may not have been serious; I don't know them well enough to judge. If they were serious, they weren't competent - nowhere in their literature did I see anything that implied that the question "Can I look at your financial plans?" would get a useful answer. The primary gamble for Oceania is that you could set up a country without having a piece of dirt to anchor it to and get other governments to treat it as a government, rather than getting the US government to treat it as a drug-running boat on the high seas (i.e. target for Coast Guard piracy), or getting some other government or free-market pirates interested. (Secondary gambles are things like financial stability, hurricanes, etc.) One of their magazines had an article on a floating hotel built by Sven somebody that's recently been anchored off Vietnam. Rather than trying to raise $1B or so to build The Raft and gamble on not losing it all to governments or other pirates, you could make the same gamble by buying the floating hotel for $25-50M, which you might even be able to talk some rich investor into coughing up in return for a slice of the pie. That'd be enough to knwo if it works, get your satellite dish up, and see if you can convince a hundred or so enthusiasts to move there, run a gambling casino, and make back some bucks to pay some dividends for your investors and hire a few mercenaries to protect the place. However, they made some nice T-shirts :-) A more serious effort was done in the early 70s by the Minerva folks, who built up an island out of coral reefs in the South Pacific (the UN tends to require 1 foot above mean high tide to count as enough dirt to be a country.) About six months later the Kingdom of Tonga invaded and stole the place. Bill

1 0

Re: Authentication at toad.com: WTF?
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Hmm, yes, using agents for security verification seems reasonable; if you've got a legal relationship or other sufficient trust. It does also require an adequate communication path between you and your agent - on the incoming side so you know that the message the agent verified is the message you're seeing (e.g. the agent's signature on the message, plus potentially some check to make sure all the messages get delivered), and on the outgoing side to make sure your agent gets your messages correctly. Bill

1 0

Re: Interoperability, one-use remailer tickets
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Mike Ingle suggests adding a one-shot reply capability to the remailers, to discourage hit-and-run abusers by allowing replies to them. The reply token would become invalid after either one use or timeout. One problem with this approach is that, if the sender is on the mailing list / newsgroup that the message is sent to, he can use up the one-shot reply himself if he's quick, by being the first one to reply. It's also somewhat difficult to design a system where the one-shot replies would chain. Non-automatic non-mandatory one-shot replies are more useful, since there are times you may want to get replies. Bill

1 0

fixed code
by Adam Shostack 17 Dec '03

17 Dec '03

The procmail stuff I sent yesterday was slightly broken. It seems that keyservers respond well to 'mget 36E61FB1', but not 'get 36E61FB1' To auto retrieve keys, use these two procmail recipies: # auto key retreival :0BW * -----BEGIN PGP KEYID=|/usr3/adam/bin/sender_unknown # I have an elm alias, pgp, points to a keyserver :0ac |elm -s"mget $KEYID" pgp sender_unknown #!/bin/sh # sender_unknown returns a keyid, exits 1 if the key is known OUTPUT=`pgp -f +VERBOSE=0 +batchmode -o /dev/null` echo $OUTPUT | egrep -s 'not found in file' EV=$? if [ $EV -eq 0 ]; then echo $OUTPUT | awk '{print $6}' fi exit $EV

2 1

PGP-ELM????
by shawn leas 17 Dec '03

17 Dec '03

I've successfully downloaded and compiled pgp-elm, but notice no differences between it and the original. What's the deal??? How do you use it??? X-man

2 1