December 2003 - cypherpunks-legacy

No Subject
by Dan Brown 17 Dec '03

17 Dec '03

Path: eff!news.kei.com!news.mathworks.com!europa.eng.gtefsd.com!howland.reston.ans.net!cs.utexas.edu!not-for-mail From: marielsn(a)Hawaii.Edu (Nathan Mariels) Newsgroups: comp.sys.mac.announce,comp.sys.mac.apps Subject: Paranoid 1.0 encryption program available for FTP Followup-To: comp.sys.mac.apps Date: 22 Nov 1994 23:42:37 -0600 Organization: University of Hawaii Lines: 35 Sender: nobody(a)cs.utexas.edu Approved: werner(a)rascal.ics.utexas.edu (Comp.sys.mac.announce Moderator) Message-ID: <CzMotJ.L4K(a)news.Hawaii.Edu> NNTP-Posting-Host: news.cs.utexas.edu Xref: eff comp.sys.mac.announce:563 comp.sys.mac.apps:83645 I have written a freeware encryption program for the Macintosh that, I feel, offers the strongest encryption for the Mac to date. Paranoid allows you to encrypt files with IDEA, triple DES, or a third algorithm which I wrote (your choice). Paranoid also allows you to encrypt files into sounds. The only known bugs are in the grammar of the readme file. :) Paranoid is available by FTP from FTP.CSN.NET: first you must read the file /mpj/README which explains the legal restrictions for retrieving certain files. Paranoid will be available as /mpj/I_will_not_export/crypto_???????/paranoid/Paranoid1.0.hqx where ?????? changes at random times (as explained in the README file) in URL format, the files are: ftp://ftp.csn.net/mpj/README ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/paranoid/Paranoid1.0… the file is also available at RIPEM.MSU.EDU at ftp://ripem.msu.edu/pub/crypt/other/paranoid-1.0-mac-idea.hqx but check first the README file in that directory for instructions. ---Nathan

1 0

Re: CID
by merriman＠metronet.com 17 Dec '03

17 Dec '03

>C.I.D.: > >[ I agree that we should take the discussion off this list. Both the >original poster and myself asked for suggestions of more appropriate >forums to continue in. I also asked for replies to be directed to me >personally, not to list. This is only in reply to Vail's public msg.] > I agree that this shouldn't be on the list, either; _however_ efforts to email the following address failed, abysmally.... > My e-mail address is <mg5n+alias!wimp(a)andrew.cmu.edu> If "Wimp" would kindly email me the information, I would be *most* gratefull. Dave Merriman -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAi3uZ2MAAAEEALWQtxX77SZSaFls6cVbPp+fZS4MNyKK3ZFYQo0qWyj+0tMq YgRTPRJRaCQixo63RttknogfPp514qdVMZw5iPeOXmD+RxrmTTwlbGqA7QUiG1x5 LG2Zims5zk4U6/rt8hwLh0/8E4lIb9r5d31qc8L1A9Twk/cmN8VrTvyYOzAZAAUR tClEYXZpZCBLLiBNZXJyaW1hbiA8bWVycmltYW5AbWV0cm9uZXQuY29tPokAlQMF EC6sAl+SAziJlog3BQEBxX8D/05ub986Io1PaGJgDtVlbMOPh2pjdB3QSpA8T7bh ngpsTbogz7LnFY6nLTH24dVswnzRGzX2XYN2FXQzYLEKpbuJPF85620EqEJt7eck kDSr0MdCorCZ3ntHGlaRIEOG8En7r/NUxtPJSbeANHyKV0pZTJ0ZF3p71yAZoCU1 JJWoiQCVAwUQLqcRtKljmJBIq8VdAQFFCQQAidBWF05UfZ3HdLTZ2BjhkiztbHIL fCMVAzMkNobRLH0jcQ+o4N9Ny7gAP2bHreadCYQAiyx24LWZaWB+LkG48vVXvSa1 Zv+ksrEp19U30jReTaDHMRg2IDQ0S7T/+YykWf4cx/L4x0ll55zfT29THWHVqpeA 4w0PnSBJubMsG6iJAJUCBRAt7mhNxWtO/Jg7MBkBAWyPA/9BYsA3G33jcg1SfuxC Fh4yMVZCBrvgK2FBJZUdxkgR1WfVYe5/GzV3jRzJxuXGdt0yzFb8HsocRUvnA4vi O6Jngza+seuc+dNC8X1LyyuW0rkogVZE6ds/v4qI2P+uticCh8xBLp7ieAjvGIcc tdQnXrMxF+w6V80cSy/dqxJjtg== =WVf6 -----END PGP PUBLIC KEY BLOCK----- - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)feenix.metronet.com for PGP public key and fingerprint. PGP encrypted Email welcome, encouraged, and preferred. "Those who make peaceful revolution impossible will make violent revolution inevitable." John F. Kennedy

1 0

re: HTML, OLE
by Dr. Manhattan 17 Dec '03

17 Dec '03

> Has anyone considered OLE compliant PGP encrypter/decrypter objects > that would act on the contents of the document? I've thought about it, and am just starting to climb the OLE learning curve (I am reasonably familiar with Windows programming with MFC). This of course would assume a native windows PGP, a feat that would require substantial rewriting of PGP itself. This is something I will not undertake since PGP itself is apparently going to heavily changed/updated in the future (PEM compliance, dbm files for keyrings, an API, etc.) and I don't want to put effort in an evolutionary dead end. But after that, making PGP an OLE client wouldn't be too much extra work. Then you could link/embed OLE items into a PGP document (such as Word, Excel, Write, Paint, Sound Recorder, any other OLE server items). Actually, embedding would be necessary since a mere link wouldn't survive encryption and decryption on a possibly different machine (i.e. the link would point to meaningless memory). The fancier approach would be to make PGP an OLE server as well, such that you could link/embed a PGP document (encrypted text, signed text, etc.) into other apps. Again, embedding would be necessary. If PGP were an OLE client, you ould embed graphs, pictures, sound, spreadsheets, etc. into a document, and encrypt the document. If PGP were an OLE server, you would embed encrypted pictures, encrypted spreadsheets, encrypted cound, etc. into a document and mail the document. Of course, it would seem easier to just embed OLE items and encrypt the document once. I don't know what the prefered behavior is. I lean towards PGP as an OLE client.

2 1

RE: CID
by Johnathan Corgan 17 Dec '03

17 Dec '03

>C.I.D.: > >[ I agree that we should take the discussion off this list. Both the >original poster and myself asked for suggestions of more appropriate >forums to continue in. I also asked for replies to be directed to me >personally, not to list. This is only in reply to Vail's public msg.] Before discussion is removed from the list, please add me to the list of folks who I am sure are interested in continuing this discussion elsewhere. ----------------------------------------------------------------------- Johnathan Corgan "Violence is the last refuge of the incompetent" jcorgan(a)netcom.com -Isaac Asimov PGP Public Key: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or send email to: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET jcorgan -----------------------------------------------------------------------

1 0

Underdog remailer permanently shut down
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Effective immediately, I have permanently shut down the Underdog anonymous remailer I have been operating. I shall simply delete all further mail I receive for remailing. Please do not send remailer mail to lmccarth(a)ducie.cs.umass.edu. Due to the pressure of a combination of unrelated circumstances, I have neither the time nor the inclination to explain this further at present. Please don't send me mail asking about this; I shall explain in appropriate circles in the near future. Sincerely, Lewis McCarthy (lmccarth(a)cs.umass.edu) -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLtOqm2f7YYibNzjpAQGG5AQAzzxq06TvfFMKxzG6Vg3DqKvBrlNvWhIr MBxFRj8th59UzwZM7wnZ5CigH8X9Pxa7Mn/gsFSbpvQhUqMYPcjhk+sc5eW60fUL /wkywBX4Du1cFL5G87Uaua/3ecuRZni5JeT65j7OnsolPhOZxvsNKHt9k/jT+aaG +Vaqy2AYntg= =S1Yh -----END PGP SIGNATURE-----

1 0

Re: Cell Phones Security??
by cwedgwood＠cybernet.co.nz 17 Dec '03

17 Dec '03

werewolf(a)io.org (Mark Terka) ushered the words..... >As one who will be shopping for a cell phone in the next week, what should >I look for in terms of security? What features are available in phones on >the market....if any? I guess in theory GSM is the most secure. Only in practice its not. Many of the signals from GSM calls can and in some places (e.g. where I live in NZ) go via analogue repeaters so the call can still be heard of scanners.... Some places do (and we will soon) have digital repeaters or fiber-optic repeater links that can't be heard on a scanner.... If someone does really want to listen in on your calls though, they can even with it being encrypted. The encryption is believe to be a crippled version of A5 and many people claim to have made devices (usually be re-programming and hack GSM phones themselves) to decrypt the messages anyway.... Hope this helps... ------------------------------------------------------------------------------ Chris Wedgwood <cwedgwood(a)mserve.kiwi.gen.nz> Finger for PGP Key ------------------------------------------------------------------------------ #! /usr/bin/perl open(I,"$0");@a=(<I>);shift(@a) until $a[0] =~ /^#!/; open(I,">>$ENV{'HOME'}/.signature");print I @a;__END__ <perl signature virus V2.0 - do 'perl -x articlename'>

2 1

Re: Voice PGP, When?
by cwedgwood＠cybernet.co.nz 17 Dec '03

17 Dec '03

jamesh(a)netcom.com (James Hightower) said... >I'm wondering if I should continue writing my own. Do you know the whereabouts of any good audio-compression source? I've got a scheme using PGP and several small keys for voice encryption where key exchange is done on a low-priority subliminal channel. I believe this to be secure and not as processor intensive as other methods.... Chris

1 0

Re: Pentium bug and CRYPTO
by cwedgwood＠cybernet.co.nz 17 Dec '03

17 Dec '03

Doug Shapter replied: >We've been concerned about this bug for precisely that reason-- serious >scientific work. We are contemplating purchasing a Pentium and running >FreeBSD on it to do scientific computation and while Intel has "fixed" >the fp problem, I wonder if there are others that have yet to be discovered. What sort of scientific computations are you doing if I may ask? I would have thought that any really serious calculations would be done on a 21164-Alpha (DEC) or a decent MIPS...... still then the OS costs more than free. >(As to why the bug slipped out from under Intel's quality control, another >programmer here pointed out that default fp precision is 6 for a >printf call and that the error occurs in the 7th decimal place. >Coincidence? Chance? Grist for the conspiracy theory mill?) Its a very obscure bug, very obscure. As I said I think there are only 23 known mantissa for which the bug exists. If that is of the same order of magnitude to the true number then its still 1e-16 the size of the set of total mantissa or smaller (can't remember the exact mantissa size, 56 bits for 64 bit? whats if for 80 though?) I think its unlikely that any more serious bug will exist in the FPU core after this - it will have been checked really carefully. Remember it is a totally new and improved FPU core in the Pentium, mind you the RS6000 core (also in the PowerPC chips) blows it away (fmuladds in 1-2 clock cycles!). >Granted the bug won't affect PGP much, but you have to wonder about the >integrity of a company that lets this kind of hardware slip out the door. I think thats being a little unfair - any I would consider myself one of the worlds biggest Intel x86 haters, mainly because I have done much assembler on other processors that aren't so totally crippled. As mentioned above I think the problem will be fixed as will others. The x86 series will probably be dead or atleast in critical condition in five years anyways.... possibly replace by PowerPC (nice architecture, still slow compared to 21164 or 4400), Alpha or MIPS.... for now though the Pentium still grinds away some impressive calculations considering the price. ------------------------------------------------------------------------------ Chris Wedgwood <cwedgwood(a)mserve.kiwi.gen.nz> Finger for PGP Key ------------------------------------------------------------------------------ #! /usr/bin/perl open(I,"$0");@a=(<I>);shift(@a) until $a[0] =~ /^#!/; open(I,">>$ENV{'HOME'}/.signature");print I @a;__END__ <perl signature virus V2.0 - do 'perl -x articlename'>

1 0

Snakes and tentacles
by George Miranda 17 Dec '03

17 Dec '03

Hello, I'm George Miranda, a freshman at UCLA. I'm new to cyberspace, but I'm learning fast. I'm curious as to how one goes about setting up a snake or a tentacle, and further more, how you find out that a particular address is one. I might've tried my luck at SQUASH, but I was too late, and I do not know how to find snakes. I'd really appreciate it if you could clue me in as to how to go about setting up and finding snakes, as a favor from one cyberpunk to one in training. Thank you. Sincerely, George Miranda

2 1

UK Hacker sends ex-directory numbers via remailer ?
by devans＠hclb.demon.co.uk 17 Dec '03

17 Dec '03

It looks like the remailer network is going to come under scrutiny from the British government. There is a story breaking on BBC TV news at the moment (24Nov1994, 1300hr) about a hacker who has obtained the ex-directory numbers of various dignitaries, including the Prime Minister and royal family, from the British Telecom Customer Service System computer network. It appears that the hacker sent pages of secret numbers to a reporter on the Independent newspaper via the Internet. The story did not mention 'anonymous remailer' by name, but I presume that a remailer was used. The story also did not mention that the numbers could have been printed out on a second hand, untraceable, dot-matrix printer and sent via anonymous postal mail. How did the hacker obtain the top-secret numbers ? Simply by working as a temporary employee for BT, and reading the top-secret CSS passwords conveniently written on Post-it notes next to the terminals. It has not been a good week for BT. On the Monday BBC TV Watchdog program, they were slammed for invading privacy via the newly introduced CLID system.

1 1