December 2003 - cypherpunks-legacy

thanks...
by Joichi Ito 17 Dec '03

17 Dec '03

Thanks to everyone who sent me information about Key Recovery. FYI, I gave a fairly objective update on the current status of the bills being debated in the US, distributed the Walsh Report (missing some paragraphs) and reviewed John Davidson's comments on the report, distributed and reviewed "The Risks of Key Recover, Key Escrow and Trusted Third-Party Encryption", distributed and reviewed most of the material written by Carl Ellison, reviewed the recent letter from Janet Reno to Congress, distributed Whit Diffie's May '93 testimony on Clipper, and finished by distributing materials from the TIS site, in particular going over RecoverKey. I can't tell you about any of the other stuff that is currently being presented in the study group, but once the report becomes public, I will try to get an English version up on the Net. It should end up being the Japanese National Poice Agency's official position on Key Escrow, Certification Authorities, and several other issues. I will be participating in another study group soon to discuss many of these issues with the Self Defense Force from the point of view of Japanese national security as well as another NPA study group on what to do about "crackers"... Anyway, if anyone who can give me some insight into these areas will be at HIP, I'd love to chat. ;-) Thanks again. - Joi P.S. I am not a "policeman" but an outside boardmember of these study groups. The ministries are under quite a bit of scrutiny these days and the study groups tend to be quite frank and balanced. The reports don't always dictate the law, but since most politicians do not have real staffers, therefore most of the expert study is done in the ministries. -- Finger jito(a)nsm.eccosys.com or jito(a)garage.co.jp for PGP Key Fingerprint for RSA PGP Key ID 0x0EE23A2D 0D3A 7AAA 3DA8 E7B3 3AF1 C6FA B7ED D834 Fingerprint for DSS/Diffie-Hellman PGP Key ID 0x2D9461F1 58F3 CA9A EFB8 EB9D DF18 6B16 E48D AF2A 2D94 61F1 Home Page: http://domino.garage.co.jp/jito/joihome.nsf To subscribe to my personal mailing list send mailto:friends-subscribe@ito.com

2 1

Re: Joichi Ito as a Junior Policeman
by Ross Wright 17 Dec '03

17 Dec '03

On or About 1 Aug 97 at 23:46, Tim May wrote: > You sound like a "junior policeman" to me. I smelled bacon. And I thought I saw Doughnut crumbs. > Another person to add to the killfiles. Hey, not me. You gotta know what the bad guys are up to. =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: (408) 259-2795

1 0

Hot Nude Male & Female Pics!!
by ron＠ebonyworld.com 17 Dec '03

17 Dec '03

Ladies and Gentlemen, This e-mail is an announcement for a totally new website. The site contains extremely high quality color pictures of nude black muscular men and fine black women. The pictures are not pornographic in nature (Playboy & Playgirl Quality)....but are definitely worth checking out none-the-less!!! If you should find this email to be offensive or if young children are accessing it just reply to us with "remove" in the subject box. We will make sure that you are not contacted again. However, we are sure that you will find this site to be thoroughly enjoyable. http://www.ebonyworld.com If you would like to evaluate HUNDREDS of super high quality nude color photos of beautiful fine black women and/or gorgeous muscular well endowed brothas then go to visit http://www.ebonyworld.com. You could even win a trip for two to Jamaica just for registering!! Be sure to check out our newest Hot Black Strip Club, Best of Players Magazine and Black Inches Magazine Areas. These areas feature top erotic models such as Heather Hunter, Janet Jacme, Charmaine Sinclaine, Dominique Simone, Stiff Omar & Big Rolando!!! BONUS (Can't Say We Don't Give Back!!): Each week we raffle off $50 to 10 lucky current members. At the end of each month we raffle off $100 to 5 lucky current members. At the end of each 6 month period we raffle off 3 free 200MHz Gateway 2000 Pentium Pro Multimedia Computers. And at the end of each year we give away 2 free trips to Jamaica to two lucky members and their guest. All you have to do is join Ebony World Online...THAT'S IT...You're entered into the sweepstakes automatically!!! (When you join...be sure to give us your name and e-mail address so that you will be entered into our drawings) GOOD LUCK!! (Odds of winning are 1 in 26) Must be 18 years old to go to http://www.ebonyworld.com

1 0

Re: Authors Wanted
by editors＠commonwealthpub.com 17 Dec '03

17 Dec '03

Authors Wanted North American publisher requires book length manuscripts in all genres for possible publication. Translation services available. Reply with outline or synopsis to: Commonwealth Publications, email: editors(a)commonwealthpub.com fax: (403)-432-9409 Visit our website at http://www.commonwealthpub.com

1 0

Credit Card w/$5,000 Limit GUARANTEED - NO CREDIT CHECK/SSN
by money＠guaranteed.com 17 Dec '03

17 Dec '03

This is a one-time message. If not interested, please delete, and you will never hear from us again. $5000 WORTH OF CREDIT GUARANTEED!! * You Receive 2 Major Offshore Credit Cards! * A total of $5,000 worth of Credit (Unsecured) AND... * (optional) $10,000 - $15,000 Line of Credit (5.95% APR)!!! * Line of Credit could expand after 6 months to $25,000-$100,000!!! * NO Credit Check or Income Verification! * NO Social Security Number Required! * NO Deposits or Collateral Funds (Unsecured)!! * Bad Credit, No Credit, Bankruptcy, NO PROBLEM!!! * Amazing 4.95% APR!!! * GUARANTEED APPROVAL!!! * 3 x 6 forced matrix could earn you $6,941 (or more) per month!! * Complete Financial Privacy! Our services could provide you with the funds you need to run your business effectively, or help you obtain the CREDIT that you deserve for use in everyday life. BEST OF ALL....You may NEVER AGAIN have to pay for anything you charge! **************************************************************************** As more domestic banks say "NO" to credit card applicants, an ever increasing number of credit card applicants find their way to safe and confidential offshore banks. It's no secret that once you have established a few not so good remarks on your credit record, you will find it very difficult to obtain credit again. When you go offshore, however, your credit record is of NO real consequence. Remember, going offshore places you in a NEW jurisdiction. In most cases, these new offshore locations do not even have credit reporting requirements. The secrecy and confidentiality laws prohibit the release of one's banking transaction. Should anyone working in these offshore banks even so much as say "Yes, this person has an account with us," SEVERE penalties of fines and/or imprisonment could result for the non-complying bank employee! Can you now see the tremendous advantages of having an offshore bank card? Unless you , yourself, leave a paper trail, nobody at the offshore bank will release your credit card records. How many people do you know who would love to have an Offshore Bank Card? Hundreds? Thousands? Tens of Thousands? Your OFFSHORE INCOME from referring others to our program will reflect how many people you can introduce to the program. And remember, there is NO 1099 issued on that income! You will benefit from your personal advertising efforts in two ways: 1) You will receive a $25 BONUS CHECK for every person that you personally sponsor. PAID WEEKLY!!! (only 4 referrals will earn back your initial processing fee). 2) Matrix participants will receive monthly commissions for all participants in your downline. IT'S EASY TO APPLY! Simply email to offshorecard(a)answerme.com and complete the Request Form with a payment of only $100.00. How do I make payments on my credit card? Your credit card may be paid through any ATM bank machine in the world or by mail, but... YOU MAY NEVER HAVE TO MAKE A PAYMENT! When you choose us to help you get an Offshore Card you're automatically put into a 3 x 6 forced matrix (forced meaning that, if you fill one level, every person that's signed up under your automatically goes on to fill your next level, and so on) could earn you $6941.00 per month! You will be paying $25 per month in dues to the club for services rendered. This $25 will be DEBITED EACH MONTH from your account, and will allow you to receive commission checks for the banking activities of every person in your downline! Matrix participants are recruited through a network of distributors worldwide. Participants earn monthly commissions on the dues ($25) paid by every member in good standing under them in a 3 x 6 forced matrix. Monthly commission schedule is as follows: Level 1 - 0% ($1.25) times 3 referrals on this level...[3x$0]..........$0.00 Level 2 - 10% ($2.50) times 9 referrals on this level....[9x$5].......$22.50 Level 3 - 5% ($1.25) times 27 referrals on this level....[27x$1.25].$33.75 Level 4 - 10% ($2.50) times 81 referrals on this level..[81x$2.50]..$202.50 Level 5 - 20% ($5.00) times 243 referrals on this level.[243x$5.00].$1215.00 Level 6 - 30% ($7.50) times 729 referrals on this level.[729x$7.50].$5467.00 Total: $6941.25 Per Month!! (referrals are the number of people underneath you in the matrix--a combination of the people you refer, and the people they refer, etc.) All the money earned as a result of matrix participation is deposited AS A PAYMENT to the member's credit card account! If their commissions exceed the minimum monthly payment, no further payments are required that month. (i.e. enroll 3 people in a month and you will more than likely have covered your minimum payment for anything you charge that month, just from the enrollee's bonuses! Develop a large downline, and your entire monthly charges could be ZEROED OUT each month!), or better yet, you will receive $6941.00 CREDIT in your account! Imagine what you could do with $6941.00 PER MONTH CREDIT!! NO REPORTING OF YOUR CARD ACTIVITY TO CREDIT BUREAUS: Since these cards are not issued through the North American banking institutions and credit reporting systems, the existence and details of your account activity are not disclosed to government agencies or credit bureaus. ASSET PROTECTION: Your card deposits are virtually unreachable by creditors. PRESTIGE: Impress your friends and business clients with your card issued by an offshore bank of international reputation. Plus, of course, all of the regular benefits of a universally recognized and accepted credit card; Identification and check guarantees; Dining out, hotel and car rental reservations, travel, and much more! Matrix participants agree to pay $300.00 per annum for services rendered by our club. This amount is charged to your credit card in 12 monthly installments of $25.00 each, and is then re-distributed among active Matrix Participants according to the above schedule. For an application & FAQ email offshorecard(a)answerme.com P.S. - EXTRA OFFER - If you'd like information on obtaining 2 MORE Guaranteed Cards (same application fee, amount of credit and opportunity to earn money), please email application(a)answerme.com and we'll send off the applications to you ASAP! Thank you for your time. This will be one of the best decisions that you ever make!!!

1 0

Hear 30 Full-length Albums from Warner Bros. Records in RealAudio
by RealAudio & RealVideo News 17 Dec '03

17 Dec '03

Dear RealPlayer User, Thank you for using RealPlayer software for RealAudio and RealVideo. I'm writing to tell you about a special offer available exclusively for users of the enhanced RealPlayer Plus. If you order and download RealPlayer Plus, you'll get access to 30 full-length albums from Warner Bros. Records, presented in RealAudio. RealPlayer Plus delivers benefits you can't get anywhere else, including: - The best quality audio and video at 28.8 - One-button scanning for the best live audio & video on the web - Instant access to your favorite RealAudio and RealVideo content with preset buttons - Packaged CD-ROM and manual plus free telephone technical support Please visit our Web site for more information or to download RealPlayer Plus: http://www.real.com/wbr/order.html I hope you enjoy RealPlayer Plus, Maria Cantwell Vice President of Marketing, Progressive Networks --------------------------------------------- For information about this e-mail including how to subscribe to or unsubscribe from future announcements, please visit: http://www.real.com/mailinglist/index.html

1 0

PGP 5.0b11 feedback / PGP Linux memlock patch
by David Miller 17 Dec '03

17 Dec '03

Guys, Here's a patch for PGP 2.6.2 (and 2.6.3i) source which locks all process pages in memory (will not swap to disk) under Linux if the user is running with effective root privilege. You might consider putting something like this in PGP 5.0. Also, this patch should be generalizable to POSIX systems withthe mlockall(2) function. If you have any success in generalizing it to POSIX, please let me know, as I only have access to Linux. See 'man memlockall' for more info. --David Miller -- I'll take a smart dog over a dumb person any day. Begin3 Title: pgp-memlock.pat Version: 25JUL97 Entered-date: 25JUL97 Description: Patch for Linux PGP 2.6.2 and PGP 2.6.3i source to lock all pages in physical memory if running with root privilege. This keeps sensitive data from being swapped to disk, where it could be later recovered by undesirables. There is no effect if not run with effective root privilege. Root privs are immediately dismissed, allowing pgp to be safely installed SUID root (assuming its chmod'ed 4111). pgp.c is modified, increasing executable size by ~391 bytes. Keywords: PGP, encryption, security, Linux Author: dm0(a)avana.net (David Miller) Maintained-by: dm0(a)avana.net (David Miller) Primary-site: sunsite.unc.edu /pub/Linux/apps/crypto/pgp-memlock.pat Alternate-site: Galactus Original-site: Coderpunks list Platforms: Linux Copying-policy: GPL End *** src/pgp.c Sat Jul 26 01:25:57 1997 --- src/pgp.c.new Sat Jul 26 01:25:50 1997 *************** *** 111,116 **** --- 111,120 ---- #include <stdio.h> #include <stdlib.h> #include <string.h> + #ifdef linux + #include <unistd.h> /* for David Miller's memory lock patch */ + #include <sys/mman.h> /* for David Miller's memory lock patch */ + #endif #ifdef __QNX__ #include <sys/stat.h> *************** *** 435,440 **** --- 439,457 ---- #ifdef DEBUG1 verbose = TRUE; #endif + + /* David Miller's memory lock patch */ + #ifdef linux /* Linux only, for now */ + if (geteuid() == 0) { /* if we have root privs */ + /* lock all current & future pages in physical memory */ + if (mlockall(MCL_CURRENT|MCL_FUTURE) < 0) + fprintf(pgpout, LANG("\007Could not lock all pages in memory.\n")); + if (setuid(getuid()) < 0) /* drop root privs */ + fprintf(pgpout, LANG("\007Could not drop root priviliges.\n")); + } + #endif + /* end David Miller's memory lock patch */ + /* The various places one can get passwords from. * We accumulate them all into two lists. One is * to try on keys only, and is stored in no particular

1 0

Re: bulk postage fine (was Re: non-censorous spam control)
by bpettigrew＠usa.net 17 Dec '03

17 Dec '03

aba(a)dcs.ex.ac.uk wrote: > OK, lets say we make emails free, unmetered, but they _must_ include a > valid token for 0c. (OK Dimitri?) > > Next we choose a threshold say 1000 posts per day. Seems hard to > imagine anyone generating manually over 1000 emails per day. That's > more than 1 per minute for a 10 hour day. > > Next when you sign up for this new email postage system, you have to > hand over a $100 deposit. The 0c payments are anonymous. But if you > spend over 1000 of them in one day, your identity becomes known (via a > mechanism like that used for Chaum's off-line double spending > detection protocol). You loose $100. To you, the spammer, the posts > cost 10c each. Your account is disabled until you pay another $100. How would this work. The ISP is enforcing these rules? But the email is not anonymous to the ISP. Or is the email going through a remailer. Why not just have an ISP say you can't send more than 1000 emails a day. But then what stops other ISPs from using different rules to get the business of spammers. -- Bubba Pettigrew

2 1

announce: eternity server @ replay
by Adam Back 17 Dec '03

17 Dec '03

I've put an eternity server up at: http://www.replay.com/aba/eternity/ (Alex de Joode kindly offered me an account for the purpose). It's running live off news.xs4all.nl newsfeed. (replay.com is in .nl too running off xs4all networks (I think), so it's newsfeed is fast for replay to access). It will check for news every 2 mins (if someone is using it). It's configured to read alt.anonymous.messages. It's running eternity-0.05 (+ a few bug fixes which haven't been packaged to produce 0.06 yet). For instructions on posting get the latest eternity distribution off my home page: http://www.dcs.ex.ac.uk/~aba/eternity/ It's not that automated yet, you have to make the posts manually, though it will help you figure out which inline images, and links are related to a page. And will offer some assistance in encrypting the documents and creating the hashes for the URLs, you still have to do a bit of work, and you have to post the documents yourself also. Adam -- Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

eternity content suggestions?
by Adam Back 17 Dec '03

17 Dec '03

Anyone got some ideas for content to stuff on the eternity service? It looks like there might be a "wired news" article, and it would be nice to have a few tasty items on-line. I suspect it might be a better idea to start with the milder stuff, something which has reasonable popular support which makes governments look stupid for trying to censor. Things like: - memoirs of dead french presidents doctor - radikal Other ideas? Adam -- Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0