December 2003 - cypherpunks-legacy

Pr0duct Cypher: PGPtools.
by loki＠nately.UCSD.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The error you mentioned is not my problem. I got the fix when I got PGPTools. I would really like you to look at the code I am using. Do you still have access to a Linux box? This communication with you using public groups and lists is a waste of bandwidth, and very slow. Could you send me an anonymous reply block? It is going to take forever for you to guess what my problem is without being able to look at the code directly, and I do not want to post the whole thing to cypherpunks. - ---------------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche - ---------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLuY51FVkk3dax7hlAQEd3gP+NnOcGoscIITPTHUQNztkSrYksjt3F9Qp WAuaelTX7UkkjvBjlLwyR2rASx0vXaGxsBmoAgWlyM1Z+87hqBK1EoCLFzN+Zt5b Vjx/GWsKo4QMro2DD8t7ppKKDUdcgK/7EgaaWGhKOXkmO5awf4IzxHIebeoqz/f6 UPwe3rnCVbY= =N8QE -----END PGP SIGNATURE-----

1 0

Re: Breaking the NSA
by merriman＠metronet.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > >Frenchie Wrote > > Not that easy. They would just crack the code and *another* > acronym based agency would come up with a different reason to > seize you and your computer. It would seem unrelated to anyone > but *you* since you would know what you did but would have no > way to prove that your original infraction is why you are doin' > time. Hope that makes some sense. > >Maybe. What if the only way to do this was illegal? Since when has that really stopped them? Or even slowed them down noticeably? > > > If it isn't something *really good* they probably wouldn't come after > you anyway. > >Whats the definition of GOOD? How about.... the Skipjack algorithm :-) > > #3 I can agree with. I don't think that NSA would tip their hand > and let on to us that they can read our stuff. At least not directly. > >We may as well find out. Knock yourself out. I got no desire to be Bubba's love toy..... > > One more thing. Don't you think that they subscribe to the Cypherpunk > list just to see this kind of logic? > > >Maybe But isnt freedom of speech what this list is about and what your >constitution does! Granted that's what the U.S. Constitution _started out_ as - no telling where things will end :-( > > > > BTW....I ain't one of 'em and I wouldn't tell if I was. :) > >Prove it Ri-i-i-i-i-ght! -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuajTMVrTvyYOzAZAQF0bQP/YwIGyIsAEjZnyT1lIRSR25YUnTvT48cP vd9uDh/NYOHSrWtADj32bBQlenmQIF791P/VTZqjd1oxNgEzwLF8gZ4OgIUt6UQm URUapx0uUVRNQqD1SrNMH2RCJyh+pjJZryGif1AnJMqTUvlqvZDrHxCeDQ3qunah ZXIOGZvC+6w= =GtzR -----END PGP SIGNATURE----- - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)fohnix.metronet.com for PGP public key and fingerprint. PGP encrypted Email welcome, encouraged, and preferred. "Those who make peaceful revolution impossible will make violent revolution inevitable." John F. Kennedy

1 0

Re: Breaking the NSA
by VAMAGUS＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Tony.Gurnick(a)nzdairy.co.nz wrote: >If you really want to test NSA. Encrypt some crypto code >with pgp in an overseas public key(IE: non-us) then email the >code to someone out of the us. This way you will find out 1 of 2 >things. > 1. That pgp is unbreakable by the NSA > - Rsa with fairly log keys take so much work the nsa > cant crack it with huge computers. This is a good > thing Not that easy. They would just crack the code and *another* acronym based agency would come up with a different reason to seize you and your computer. It would seem unrelated to anyone but *you* since you would know what you did but would have no way to prove that your original infraction is why you are doin' time. Hope that makes some sense. > > - Idea, even though it is new, is a secure algorithm > for the above reasons > Same argument...no one would ever know either way. Until you got out in about 100 years. > > - You wont get in trouble as you are only sending > random bits out of the country not code If it isn't something *really good* they probably wouldn't come after you anyway. > > 2. PGP is BREAKABLE by the NSA (OUCH!) > - You get in deep shit! > > > or > > 3. PGP is breakable by the NSA but they dont tell anyone! (HMMM) #3 I can agree with. I don't think that NSA would tip their hand and let on to us that they can read our stuff. At least, not directly. > > - Well this would be an interesting one! > > - Since they are the ones that imposed the ITAR rule in the > first place (them or the us gov) they have a prob! If > they knew you were exporting crypto because they cracked > pgp they could not convict you as that would imply they cracked > pgp and they would tell the whole world what they can & > cannot crack. It would be a big bummer for RSA and IDEA > but at least we`d know! One more thing. Don't you think that they subscribe to the Cypherpunk list just to see this kind of logic? BTW....I ain't one of 'em, and I wouldn't tell if I was. :) ***************************Frenchie Sends******************************* * PGP Public Keys: 1024/BEB3ED71 & 2047/D9E1F2E9 on request. * * As soon as any man says of the affairs of the state * * "What does it matter to me?" the state may be given up for lost. * * J.J.Rousseau - The Social Contract * * PGP info: email to mail-server(a)mit.edu with first line of message: * * send pub/usenet/alt.security.pgp/* * *****************************J. Francois******************************** -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuZF0LbmxeO+s+1xAQEGQwP+MjgH2uvJUXNAi8Cb1HMHZRTMjxAODSfr dfPS1SCbzCTzaQMSVCvfWS8hxfbnENGuDe3bhdhIJb0QzkuYWTmHFxpTydrTtJw+ U0OtB/O65JpNsisXEYF14FZ3hUBPqQ8NQ/TN4WV1dx6tROuWnoY1hYAOMM2pnZNY 0NBtz0MB1i0= =XpJK -----END PGP SIGNATURE-----

1 0

crypto email to France
by farr＠evtech.com 17 Dec '03

17 Dec '03

Hello - My company would like to be able to send encrypted mail to our office in Paris. Strictly inter-company stuff, using PGP for example. I know we can buy PGP here, and get it off the net in Europe, thereby avoiding exporting the technology in either direction... I've been told by someone here in the US that France wants control of any use of encryption software including sending email. I've also been told by someone in France that the agency in France is the Service Central de la Securite des Systemes d'Information (SCSSI), and that they want companies to register with them for use of cryptographic software. I've read what I can find on the net about legalities of using encryption software, and everything concerning Europe (what little there is) is quite vague. Does anyone here know any details or where I might find out more about what, if anything, needs to be done to legally exchange encrypted email with our office in Paris? Thanks very much! Best Regards, Rebecca Farr Evolutionary Technologies, Inc. Systems Administration Group 4301 Westbank Dr. Bldg. B, Suite 100 Austin, TX 778746 phone: 512-327-6994 x260 fax: 512-327-6117 email: farr(a)evtech.com

2 2

Bad PGP sig on 'Remailers and ##'
by Greg Broiles 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Earlier I wrote: > I'm not going to install remailer software that would allow this > because it'd make it even easier to post messages under someone > else's name. [...] but the PGP sig on the message was bad, apparently because nn stuck an extra X-To: line in the message. Ugh. Anyway, I said it, and meant to say it. Thanks to the c-punk who caught that & sent me mail. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuZLpX3YhjZY3fMNAQHJWAP+Mk6jSgxGl5zpFDblnUeEfa94YtDaCNxr j9EWgI2lQzSsEqO2e5JRohBmXlQGxs8aPiKl3wGsRAcYAO6kYV3xfTQOfDbifT+9 sFP5/1wgO7I4cM3EdDgVtM7bYHUR44QebN/ONQxdDWi2+ErVfWh/PPR1u9DR2+wd c0v7rIRuuZc= =OvHk -----END PGP SIGNATURE----- -- "The anchored mind screwed into me by the psycho- | Greg Broiles lubricious thrust of heaven is the one that thinks | greg(a)goldenbear.com every temptation, every desire, every inhibition." | -- Antonin Artaud | @!

1 0

Re: Breaking the NSA
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 6:31 PM 12/07/94, DNA wrote: >If you really want to test NSA. Encrypt some crypto code >with pgp in an overseas public key(IE: non-us) then email the >code to someone out of the us. This way you will find out 1 of 2 >things. > 1. That pgp is unbreakable by the NSA > - Rsa with fairly log keys take so much work the nsa > cant crack it with huge computers. This is a good > thing Nah, no possible result would tell you this. Perhaps PGP is "breakable", in that it takes something like 30 seconds of their computer time to break, say. But even 30 seconds would probably be too much time to spend on _every_ single piece of email that crosses national borders.

1 0

Breaking the NSA
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

Frenchie Wrote Not that easy. They would just crack the code and *another* acronym based agency would come up with a different reason to seize you and your computer. It would seem unrelated to anyone but *you* since you would know what you did but would have no way to prove that your original infraction is why you are doin' time. Hope that makes some sense. Maybe. What if the only way to do this was illegal? If it isn't something *really good* they probably wouldn't come after you anyway. Whats the definition of GOOD? #3 I can agree with. I don't think that NSA would tip their hand and let on to us that they can read our stuff. At least, not directly. We may as well find out. One more thing. Don't you think that they subscribe to the Cypherpunk list just to see this kind of logic? Maybe, But isnt freedom of speech what this list is about and what your constitution does! BTW....I ain't one of 'em, and I wouldn't tell if I was. :) Prove it T

1 0

Re: Breaking the NSA
by VAMAGUS＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Tony.Gurnick(a)nzdairy.co.nz wrote: >Frenchie Wrote > > Not that easy. They would just crack the code and *another* > acronym based agency would come up with a different reason to > seize you and your computer. It would seem unrelated to anyone > but *you* since you would know what you did but would have no > way to prove that your original infraction is why you are doin' > time. Hope that makes some sense. > >Maybe. What if the only way to do this was illegal? Then you would have to hope you never do anything illegal. Then no (pick your acronym) agency would be able to easily trump up a charge that could be used as an infiltration technique to get to your system *legally*. If they want to bad enuff I'm sure breaking the law to catch you doing something would be arranged. Violating National Interests maybe? > If it isn't something *really good* they probably wouldn't come after > you anyway. >Whats the definition of GOOD? PGP?...3xDES?....RC5?....plans for an A-Bomb with instructions for construction and location of available nuclear material?...pick one. > #3 I can agree with. I don't think that NSA would tip their hand > and let on to us that they can read our stuff. At least, not directly. >We may as well find out. Agreed, the problem is finding a way to be sure! A little misinformation has a habit of going a long way. > One more thing. Don't you think that they subscribe to the Cypherpunk > list just to see this kind of logic? >Maybe, But isnt freedom of speech what this list is about and what your >constitution does! Be careful...not everyone here is a U.S. resident or citizen. At least I don't think so. But since I am I know how precariously balanced the definition of free specch is. The Supreme Court in cahoots with law enforcement and lawmakers could change things pretty quick! Throw in a handy list of names......u know the rest. > BTW....I ain't one of 'em, and I wouldn't tell if I was. :) >Prove it [I see my smiley was disregarded] Proof you say! A classical dilemma: If I say I am (one of them) it implies gathering intelligence or a reason to sow suspicion even if I am not. Denial implies I am what I say I am not. So, even though I am not, it would be impossible to *convince* you of that. If I was I still couldn't produce *believable* evidence to support the statement. Take my advice: Don't Trust Nobody. ***************************Frenchie Sends******************************* * PGP Public Keys: 1024/BEB3ED71 & 2047/D9E1F2E9 on request. * * As soon as any man says of the affairs of the state * * "What does it matter to me?" the state may be given up for lost. * * J.J.Rousseau - The Social Contract * * PGP info: email to mail-server(a)mit.edu with first line of message: * * send pub/usenet/alt.security.pgp/* * *****************************J. Francois******************************** -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuZqibbmxeO+s+1xAQFLpwP7BiRyz2VD+gkBwE7F/yF99XPlYVjXYBsV wE6bJtGOQ94qojVYSlw/L2BXHwm271VqXgknKAxZbJUh/Y4497tnaRCVLx4Us91Z k/wrEWmnsB5uE2yNWcYuIMxMSRfrEhUAPNJUvl95+ryFm+7TC7kVKuPi/38+oKMS FCe0hmvbVDQ= =lt1q -----END PGP SIGNATURE----- Is there a reason *you* don't sign your messages? Hehehe.... :)

1 0

Re: (Fwd) Read this, Virus info!!
by alano＠teleport.com 17 Dec '03

17 Dec '03

>I have received two versions of this warning about "Good Times" >virus, this one from mail list Design-L and a similar one from >list Fiction-of-Philosophy. Some forwarded headers have been >removed from this version. > >Has anyone on c'punks got further info or comment? Yes. It is a hoax. (I will obtain the debunking message fron one of the virus echos if needed...) It was designed to prey on the gulibility of AOL users. (You cannot make a mail message that will virus your system just by READING it. AOL does not have support for nam-shubs.) | "Encryption ROT13s your mind." | alano(a)teleport.com | |"Would you rather be tortured by the government | Disclaimer: | |forces or the people's liberation army?" -mklprc | Ignore the man | | -- PGP 2.6.2 key available on request -- | behind the keyboard.|

1 0

Re: Good times virus (ANSI BOMB?)
by Claborne, Chris 17 Dec '03

17 Dec '03

Can't be too UNIX centric. With the advent of MS Mail and CC:Mail that have SMTP gateways, they automagically convert uuencoded files to attachments in the native format. That is, when you send me a message with a uuencoded file at the end, my mail gateway uudecodes and puts the attachemnt in my mail messas as a clickable icon. NOW, all you got to do is convince me to doubble click on this (virus exe) and bingo!, I'm dead. Question: Has anyone tried to infect or destroy an NT box with some known virus. NT's security model could prevent this (I.E. trying to write to a restricted file or stay resident...). But I'm not sure what is secured since almost all users use NT workstation as "Administrator". 2 -- C -- >--------------------------------------------------------------------------- --- >-----BEGIN PGP SIGNED MESSAGE----- > >>On Dec 7, 1:04am, ADAM GERSTEIN, _THE_ MACGURU wrote: >>> Need I remind you of a certain Robert T. Morris? Does the "Internet Worm" >>mean >>> anything to you? Sure, it wasn't actual email, but it did use email and >other >>> means of transport to cripple the net in a matter of hours. >> >>The Internet Worm used the sendmail DEBUG mode to execute commands on >>a remote system. It did not propogate itself via email messages, which was >>what the original (ridiculous) warning claimed. >> >>I can't feel a lot of sympathy for people who took this announcement >>seriously. Such stupidity reaps its own rewards. > >Although the concept of "text viruses" seems a bit far fetched to some >people, there these lovely toys known as ANSI bombs. Essentially they work >in a similar method to the some techniques used in the sendmail bug, but >they are MS-DOS specific, they will use embedded ANSI codes to run programs >as the files is viewed... anyone know what will happen if deltree /XXX >(where XXX represents an unpublished string of characters) is run from the >root directory of a DOS hard disk? Its gone, quickly. Sure the files can be >undeleted, but undeleting a whole disk is tricky business... > >Maybe Good Times is a hoax, but ANSI bombs exist and using a DOS ANSI text >viewer will surely be a foolish thing to do on any downloaded text file... > >If anyone feels the need for proof I collected a few a while back, but >really don't see the need to post them...heh heh. > > Adam Philipp > >PS: Please no comments about superiority of MACs or LINUX boxs because they >are immune to ANSI boms...that ought to be clear enough... > >- -- >PGP Key available on the keyservers. Encrypted E-mail welcome. > >SUB ROSA: Confidential, secret, not for publication. > -Black's Law Dictionary > >GJ/CS d H S:+ g? p? au+ a- w+ v++ c++ UL+ UU+ US+ P+ 3 E N++ k- W++ M-- V >po- Y++ t++ 5+ jx R G' tv+ b+++ D++ B--- E+++ u** h-- f++ r+ n+ y++-- > >- --- >[This message has been signed by an auto-signing service. A valid signature >means only that it has been received at the address corresponding to the >signature and forwarded.] > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 >Comment: Gratis auto-signing service > >iQBFAwUBLuVnPSoZzwIn1bdtAQEjeAF+Pi65kg9SMBZ1bzO5gJBsumi5x2vJFgqC >o0hc3bMaqLYb5WY/jlaAtWURtzXzOUc6 >=/53s >-----END PGP SIGNATURE----- >

1 0