December 2003 - cypherpunks-legacy

Re: bug in remailers
by jml＠wizard.synapse.net 17 Dec '03

17 Dec '03

> Litsen, you mentioned that you were getting >the same problem with other remailers. That was because you >were mailing through my remailer to them or from them, right? I sure >hope so. I would hate to think my code effected others remailers! :) > Homer Yah, I'm 99% sure that it what happenned. I'll be testing that today. I've sent a few test messages to your remailer and everythnig came back just fine. The trouble with other remailers is that it can take as much as a full day before a message gets delivered. I'll get back to you. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAy8X2ZIAAAEEALbeB9136vtAk/FOOb8a1rYv7OWAVJZMiWs/CI1Hla9iUxBj hv+KM1rK31cygbk2/y38cZFQupgP34/0HkLKXsl5bP7vifXi5JzyNpeOmYT3Cr/E FqyWRFUo6dyp7AVm23ryZGZAM2qfcdXaslEqWAD3PczAnQ34vKhVa3SvpHjhAAUR tAZ3aXphcmQ= =syn9 -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Scientology [!]
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> -----BEGIN PGP SIGNED MESSAGE----- > > 1/15/95 > > TO: THOMAS M. SMALL > COUNSEL FOR RELIGIOUS TECHNOLOGY CENTER AND BRIDGE > PUBLICATIONS, INC. > > FROM: Lance Cottrell > Operator of remailer@nately and mixmaster@nately My pgp says: Bad signature Does this message come from Lance Cottrell or from Scientology? > I am willing to comply with your request. Oh. If this is true (is it?) and other remailer operators do the same, there will be no anonymous criticism of the Thetans any more. An non-anonymous criticism of this "church" is said to be a thing of a special kind. Mmmh, Hadmut

2 1

Re: Scientology (fwd)
by L. McCarthy 17 Dec '03

17 Dec '03

This is the copy that was sent to the remailer operators' list. Note that the start of "FROM:" is corrupted, and there's some odd line breaking. I'm guessing that's the reason the signature doesn't check (for me, either). -L. Futplex McCarthy Forwarded message: > From remailer-operators-owner(a)c2.org Sun Jan 15 15:08:56 1995 > To: Remailer-Operators(a)c2.org > Message-Id: <ab3f26ae01021004e8c7(a)[137.110.24.249]> > Date: Sun, 15 Jan 1995 11:56:48 -0800 > From: lcottrell(a)popmail.ucsd.edu (Lance Cottrell) > Subject: Re: Scientology > > -----BEGIN PGP SIGNED MESSAGE----- > > 1/15/95=20 > > TO: THOMAS M. SMALL > COUNSEL FOR RELIGIOUS TECHNOLOGY CENTER AND BRIDGE > PUBLICATIONS, INC. > > =46ROM: Lance Cottrell > Operator of remailer@nately and mixmaster@nately > > In response to your email of January 3, 1995 requesting that I block= > anonymous posting to the Internet news groups alt.clearing.technology and a= > lt.religion.scientology. > > Although my remailers have always supported direct posting to news groups,= > this feature has never been advertised or supported. Since direct posting= > from my remailers is never used, I am willing to comply with your request.= > Posting to alt.clearing.technology and alt.religion.scientology has been bl= > ocked. > > By this action I do not admit to any wrongdoing on my part, nor do I wish to= > imply any wrongdoing on the part of any users of my remailers. I am merely= > turning of a feature that I never intended to be used. > > By design it is not possible to prevent users from using my remailers to= > send a message to another computer to be posted. I can not, and will not,= > block mail to other remailers or to mail-to-news gateways. > > Yours, > Lance M. Cottrell > > CC: Cypherpunks(a)toad.com, remailer-operators(a)c2.org, > alt.privacy.anon-server, alt.privacy, > alt.religion.scientology, alt.clearing.technology > > -----BEGIN PGP SIGNATURE----- > Version: 2.6 > > iQCVAwUBLxl9WlVkk3dax7hlAQH5lAP9HWND3nMsoz/Yn6fz36iqtDqI7s3cEllM > Gaajeq4qAR/t5a5CrEyOW1sYq+bxw5UZppREJC5uBbcp7ZP2k/7jprEcq9O7run3 > ZX985aIY8f5kI6GmUemhmQcflgyNDoeDJMFhRBrvDQqCWueLKVUZLNXx9bsMCi94 > EH/mStSfdJY=3D > =3DUgN1 > -----END PGP SIGNATURE----- > > >

1 0

REQUEST: Privacy/Free Speech URLs
by Robert A. Hayden 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On the request of a few law-related professors and other faculty, I'm trying to put together a web page that brings together resources from all over the net that are related to issues of free speech, privacy, libel, censorship, etc. If you have a few URLS with materials related to the above, I'd appreciate it if you could drop them in an emailee to me. Basically, any URL that ends up pointing to issues of rights and rules on the net, and possibly related software (such as PGP and the like). Thanks much :-) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxq8aTokqlyVGmCFAQGPXwP+LpyRgw+fuV4HXzt3ObGyu4ME8XsgBbRz Z2yyhVsbeK9DnhJuYPRiaHGjOmO3rl+9qmjisxbmQA8YkmKIyIGB8ViP7RKLoUlg vCUzr00AbQHc9SZKuuQCyOSHirDNZfc/3A92U1MsEXZl/gACoNxOq3+uSqyE9LWu bQrXW4xbl+0= =2H+w -----END PGP SIGNATURE----- ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> I am Pentium of Borg \/ Finger for PGP Public Key <=> you will be approximated

1 0

Re: Pgp where?
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- In article <ab3c722e200210036071(a)[192.187.167.52]>, Dave Del Torto <ddt(a)lsd.com> wrote: >FYI, I keep the most recent version of Mike Johnson's excellent guide on >where to find PGP in: > > ftp.netcom.com:/pub/dd/ddt/crypto/crypto_info/where_is_pgp?.txt I also have an infobot on pgp-faq(a)hks.net. Sending mail there will get you a fast autoresponse with a reasonably recent version of the same FAQ. >Send email to <pgp-questions(a)lsd.com> if you have further questions. And, I'll remind everyone that we need volunteers for the pgp-help mailing list (Dave's on it). It's important that we be able to identify what the worst barriers to PGP use are and the best way to do that is to answer folks' questions. Send mail to pgp-help-request(a)hks.net to be added. Thanks, - - -- Todd Masco | "life without caution/ the only worth living / love for a man/ cactus(a)hks.net | love for a woman/ love for the facts/ protectless" - A Rich Cactus' Homepage - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxqYhRNhgovrPB7dAQH+4AP/RsK7SdY+KVmxuEn3JU8INnK0XnAsi3et jw5jtTfcFJmIKN0u1PmcFeeOwbrgqahzPvOpTJvXQHA73zi94XLGbAR5hrDRAD7N Sfm/4h6lngQV2tzAephZg0J5aV3X6wcCrhd3h3sG01QeaT8YWBzmeRKTXBpAkpWw Nf7opd5EXhM= =t88d - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxrTxSoZzwIn1bdtAQGTzgGAlbPDZqyvoI+5nSZS8NaAnXL5iUXIVRip bu3AM/mGFK/3Y0AsfKnhr4b3ZnZP1KXS =4gk2 -----END PGP SIGNATURE-----

1 0

Re: Jude Milhon in WIRED
by Hal 17 Dec '03

17 Dec '03

From: tcmay(a)netcom.com (Timothy C. May) > General insults, or political statements, are of course kosher, but > making any kind of snide remarks about Joe Foobar, for example, will > often result in these comments being fed to the at person. (I recently > made some comments here on this list about a public Net person, whom I > do not believe is or was subscribed...a few days later I got a > note from this person objecting to my characterization of his views! I > am assuming someone forwarded the traffic to him.) I felt the same way recently. I had commented here about elec cash prodigy Stefan Brands being among those not getting into the DigiCash demo, it got cross-posted to www-buyinfo (which is read by DigiCash people) and led to a big political stink that may have set back relations between Brands and Chaum and therefore the prospects for high-quality digital cash. I really regretted my words as it was certainly not my intention to stir up bad blood. I still tend to think of this list as a relatively private place to make comments "just among friends", unlike more public venues which feed into a wider cross-section of views and where I try to be much more circumspect. Hal

1 0

request for factorising code
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have had a look at the exported version of Netscape's WWW browser which has support for secure transfer of info, and it says it uses RSA keys limited to 40 (not sure whether this is decimal digits or bits). This is the broken version for export, I am not sure what the non-crippled version uses. I would like to have a go at factorising a number of 40 digits to get a feel for how secure this system is. I suspect not very secure even 40 digits is pretty pitiful for an RSA key size 40 bits would be a joke. I would like to get a feel for how long it takes to factorise a 40 digit number. Does anyone have source code for factorising large numbers. I have code to generate the RSA key pairs and modulus, what I am looking for is code to factorise a number using one of the better algorithms (quadratic sieve, etc.). Adam -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAiwUXUEAAAEEAJnWEHE3juLAyMnEt3hrID3t8tblJvJPfoPz4Plg+2a5y4HA TonXBomkhm8hrRu1umruUUaeW1mxIbpvP413a2JyU7pdyfyoFVpWW5iT9pXYOgSW 65d+5GWe4g4PLrSbJZPBFIezd8xddnx5+5hbRk1K6UpfReQuOynIuJ1VakpnAAUT tB9BZGFtIEJhY2sgPEEuQmFja0BleGV0ZXIuYWMudWs+ =pRe7 -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUALxrGhSnIuJ1VakpnAQHzbAP/Q00RZan2rdMrIYzM3Dp4+620DFGoe0zi bRMvLUlKUuPPfdc5PYh/l7cxXwnj6/ARP6QUCyxlHwS/vKxHNJyhIcgna2yIBQGA NtCKZjZNdEYII9/taC4BXc7nTIvJKuz0EgXVSJwbUXgBjuMFA/ZGOrKr1SFcyLbP qMER2rgg5VM= =AJwi -----END PGP SIGNATURE-----

4 3

Known data havens for pirates? Doubtful
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

I forget who wrote: > blame them. Copyrighted data on a server in a jurisdiction that > doesn't acknowledege the copyrights - a prime use for Data Havens > when they come of age. I suppose you _are_ aware that the US has threatened China with punitive duties on $100 BILLION dollars worth of trade, and that China has started holding some show trials (without shutting down its state-owned CD-piracy factories). It's not going to be easy to find a country more willing and able to ignore international copyright law (Berne Convention etc) than China; however, despite howls of protest even China is likely to knuckle down eventually. What may be likely is distributed piracy markets, such as described in Tim's BlackNet spoof. Read my earlier post on what Lance Rose thinks. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "In between the breaths is rishab(a)dxm.ernet.in the space where we live" rishab(a)arbornet.org - Lawrence Durrell Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

6 5

Re: How do I know if its encrypted?
by Ben.Goren＠asu.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I think we're pretty well agreed that Dave's DataHaven can't ensure that files are encrypted without looking inside them at some point. It's a dilemma: Dave wants to be sure he can't read something, but the only way he can be sure is by reading it. But suppose that Dave's good friend Ender Trent decides to set up a new service, Ender Trent's Trusted Encryption. It's a simple job: people send files to Ender and he returns them encrypted and signed. Now, all Dave needs do is check Ender's signature before accepting a file. At no point does Dave ever decrypt or attempt to decrypt such a file. Ender offers encryption in many different forms. In the simplest, Alice sends the file to Ender, Ender generates a random key, encrypts the file, and sends both back to Alice. Almost as simple, Ender uses the hash of the original file as the key. Presumably, Alice already knows the hash and so Ender doesn't send that back. Alice could supply a public PGP (or other asymmetrical algorithm) key with the file and Ender uses that. If Alice is a frequent customer and likes this method, she might register the key with Ender. Lastly, Alice might want to supply a symmetric key of her own. Because Ender wants to protect people like Dave, he can either print a warning that the key used for encryption might not be secure, or run a password-cracking algorithm on it, or both. Because of the extra effort and reduced security, Ender might not want to offer this, or charge an arm and a leg for it. And Dave might not be willing to accept such files, anyway. How is it better to have Ender do all this rather than Dave? Essentially, it splits the risk. Dave never sees the files, and therefore can't be responsible for their contents. Nor could he make sense out of them, even if he tried really, really hard. He could operate his data haven in all but the most repressive parts of the world. Ender's risk is slim to none. Were he to be held accountable for files he encrypts, public notaries would likewise have to be held accountable for everything they notarize. I don't see that as a problem. Dave might wish to offer an encryption service, as Ender might want to offer a data haven, but, if they're smart, they won't accept files that they themselves encrypted. Ender's encryption need not only be for data havens, of course. Nervous remailer operators might want proof of encryption. Escrow services will likely like Ender. And probably more. If there is a demand for a trusted encryption service, I'll create one after the second trumpet audition for the Oregon Symphony on the first of the month. That's the main reason I'm signing this--to hold myself to it. b& -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEUAwUBLxrj5a7gd9aHWwWVAQH2Hgf0CF+0CIMWiK7d52Gaa8fPpMQy+qAYOBj+ MxJPZJpwxLEzmdT8n+dWjz2+0uPbIXXYa8yEM86UeV9++BzNM7WkOr5tezUuUrYa aM+I4yWJEz/oUpURxi4tt1Jmxn4F0IGQENBweIw+lsgU/TyNweCerKoShLpP4zca iZr1HtkK/7KdEi/wmADtfI6aUHytRyMXYvwKhKiy23eAFyNtZgAz4i77p2Kw6iM6 aTGsQQVjda6AYcVlIcLAJN8v+pQV+RGKA4FGACsxEGHDCQvFd3/WvCD4pupPm80E 9QLhQ2zLIjAkSmkO9flndXq6TOcCtMd3f6u/oGCx1EHKUTdP8nbg =svFy -----END PGP SIGNATURE----- -- Ben.Goren(a)asu.edu, Arizona State University School of Music Finger ben(a)tux.music.asu.edu for PGP public key ID 0x875B059.

1 0

Re: REQUEST: Privacy/Free Speech URLs
by jml＠wizard.synapse.net 17 Dec '03

17 Dec '03

>On the request of a few law-related professors and other faculty, I'm >trying to put together a web page that brings together resources from all >over the net that are related to issues of free speech, privacy, libel, >censorship, etc. > >If you have a few URLS with materials related to the above, I'd >appreciate it if you could drop them in an emailee to me. Basically, any >URL that ends up pointing to issues of rights and rules on the net, and >possibly related software (such as PGP and the like). > >Thanks much :-) Check out Vince Cate's Cryptorebel/Cypherpunk Page at: ftp://furmint.nectar.cs.cmu.edu/security/README.html It has just about everything with links to other sites that have links to other sites that have links to.... it's a web thing. :-) *********************************************** jml(a)wizard.synapse.net PGP encrypted mail preferred. I might disagree totally with what you say but I'll defend your right to say it to the death. ***********************************************

1 0