December 2003 - cypherpunks-legacy

Security Mailing Lists
by Christopher Klaus 17 Dec '03

17 Dec '03

This was put together to hopefully promote greater awareness of the security lists that already exist. Most security mailing lists have been only announced once and it was only word of mouth that it would acquire new members. This list should hopefully make the membership grow for each mailing list. If you know of any mailing lists that have been skipped, please e-mail cklaus(a)iss.net with the info. The newest updates for this will be on http://iss.net/. This web site also contains info for the following security issues: Vendor security contacts Security Patches What to do if you are compromised Set up Anon ftp securely Sniffers attacks and solutions Security Mailing Lists The following FAQ is a comprehensive list of security mailing lists. These security mailing lists are important tools to network administrators, network security officers, security consultants, and anyone who needs to keep abreast of the most current security information available. General Security Lists * 8lgm (Eight Little Green Men) * Academic-Firewalls * Best of Security * Bugtraq * Computer Privacy Digest (CPD) * Computer Underground Digest (CuD) * Cypherpunks * Cypherpunks-Announce * Firewalls * Intruder Detection Systems * Phrack * PRIVACY Forum * Risks * Sneakers * Virus * Virus Alert Security Products * Tiger * TIS Firewallk Toolkit Vendors and Organizations * CERT * CIAC * HP * Sun ------------------------------------------------------------------------------- 8lgm (Eight Little Green Men) To join, send e-mail to majordomo(a)8lgm.org and, in the text of your message (not the subject line), write: subscribe 8lgm-list Group of hackers that periodically post exploit scripts for various Unix bugs. ------------------------------------------------------------------------------- Academic Firewalls To join, send e-mail to majordomo(a)net.tamu.edu and, in the text of your message (not the subject line), write: SUBSCRIBE Academic-Firewalls This is an unmoderated list maintained by Texas A&M University. Its purpose is to promote the discussion and use of firewalls and other security tools in an academic environment. It is complementary to the Firewalls list maintained by Brent Chapman (send subscription requests to Majordomo(a)GreatCircle.COM) which deals primarily with firewall issues in a commercial environment. Academic environments have different political structures, ethical issues, expectations of privacy and expectations of access. Many documented incidents of cracker intrusions have either originated at or passed through academic institutions. The security at most universities is notoriously lax or even in some cases completely absent. Most institutions don't use firewalls because they either don't care about their institution's security, they feel firewalls are not appropriate or practical, or they don't know the extent to which they are under attack from the Internet. At Texas A&M University we have been using a combination of a flexible packet filter, intrusion detection tools, and Unix security audit utilities for almost two years. We have found that simple firewalls combined with other tools are feasible in an academic environment. Hopefully the discussion on this list will begin to raise the awareness of other institutions also. ------------------------------------------------------------------------------- Best of Security To join, send e-mail to best-of-security-request(a)suburbia.net with the following in the body of the message: subscribe best-of-security REASONS FOR INCEPTION In order to compile the average security administrator it was found that the compiler had to parse a foreboding number of exceptionally noisy and semantically-content-free data sets. This led to exceptionally high load averages and a dramatic increase in core entropy. Further, the number, names and locations of this data appears to change on an almost daily basis; requiring tedious version control on the part of the mental maintainer. Best-of-Security is at present an un-moderated list. That may sound strange given our stated purpose of massive entropy reduction; but because best often equates with "vital" and the moderator doesn't have an MDA habit it is important that material sent to this list be delivered to its subscribers' in as minimal period of time as is (in)humanly possible. If you find *any* information from *any* source (including other mailinglists, newsgroups, conference notes, papers, etc) that fits into one of the acceptable categories described at the end of this document then you should *immediately* send it to "best-of-security(a)suburbia.net". Do not try and predict whether or not someone else will send the item in question to the list in the immediate future. Unless your on a time-delayed mail vector such as polled uucp or the item has already appeared on best-of-security, mail the info to the list! Even if it is a widely deployed peice of information such as a CERT advisory the proceeding argument still applies. If the information hasn't appeared on this list yet, then SEND IT. It is far better to run the risk of minor duplication in exchange for having the information out where it is needed than act conservatively about occasional doubling up on content. ------------------------------------------------------------------------------- Bugtraq To join, send e-mail to LISTSERV(a)NETSPACE.ORG and, in the text of your message (not the subject line), write: SUBSCRIBE BUGTRAQ This list is for *detailed* discussion of UNIX security holes: what they are, how to exploit, and what to do to fix them. This list is not intended to be about cracking systems or exploiting their vunerabilities. It is about defining, recognizing, and preventing use of security holes and risks. Please refrain from posting one-line messages or messages that do not contain any substance that can relate to this list`s charter. Please follow the below guidelines on what kind of information should be posted to the Bugtraq list: * Information on Unix related security holes/backdoors (past and present) * Exploit programs, scripts or detailed processes about the above * Patches, workarounds, fixes * Announcements, advisories or warnings * Ideas, future plans or current works dealing with Unix security * Information material regarding vendor contacts and procedures * Individual experiences in dealing with above vendors or security organizations * Incident advisories or informational reporting ------------------------------------------------------------------------------- Computer Privacy Digest To join, send e-mail to comp-privacy-request(a)uwm.edu and, in the text of your message (not the subject line), write: subscribe cpd The Computer PRIVACY Digest (CPD) (formerly the Telecom Privacy digest) is run by Leonard P. Levine. It is gatewayed to the USENET newsgroup comp.society.privacy. It is a relatively open (i.e., less tightly moderated) forum, and was established to provide a forum for discussion on the effect of technology on privacy. All too often technology is way ahead of the law and society as it presents us with new devices and applications. Technology can enhance and detract from privacy. ------------------------------------------------------------------------------- Computer Underground Digest To join, send e-mail to LISTSERV(a)VMD.CSO.UIUC.EDU and, in the text of your message (not the subject line), write: SUB CUDIGEST CuD is available as a Usenet newsgroup: comp.society.cu-digest Covers many issues of the computer underground. ------------------------------------------------------------------------------- Cypherpunks To join, send e-mail to majordomo(a)toad.com and, in the text of your message (not the subject line), write: SUBSCRIBE cypherpunks The cypherpunks list is a forum for discussing personal defenses for privacy in the digital domain. It is a high volume mailing list. ------------------------------------------------------------------------------- Cypherpunks Announce To join, send e-mail to majordomo(a)toad.com and, in the text of your message (not the subject line), write: SUBSCRIBE cypherpunks-announce There is an announcements list which is moderated and has low volume. Announcements for physical cypherpunks meetings, new software and important developments will be posted there. ------------------------------------------------------------------------------- Firewalls To join, send e-mail to majordomo(a)greatcircle.com and, in the text of your message (not the subject line), write: SUBSCRIBE firewalls Useful information regarding firewalls and how to implement them for security. This list is for discussions of Internet "firewall" security systems and related issues. It is an outgrowth of the Firewalls BOF session at the Third UNIX Security Symposium in Baltimore on September 15, 1992. ------------------------------------------------------------------------------- Intrusion Detection Systems To join, send e-mail to majordomo(a)uow.edu.au with the following in the body of the message: subscribe ids The list is a forum for discussions on topics related to development of intrusion detection systems. Possible topics include: * techniques used to detect intruders in computer systems and computer networks * audit collection/filtering * subject profiling * knowledge based expert systems * fuzzy logic systems * neural networks * methods used by intruders (known intrusion scenarios) * cert advisories * scripts and tools used by hackers * computer system policies * universal intrusion detection system ------------------------------------------------------------------------------- Phrack To join, send e-mail to phrack(a)well.com and, in the text of your message (not the subject line), write: SUBSCRIBE Phrack Phrack is a Hacker Magazine which deals with phreaking and hacking. ------------------------------------------------------------------------------- PRIVACY Forum To join, send e-mail to privacy-request(a)vortex.com and, in the text of your message (not the subject line), write: information privacy The PRIVACY Forum is run by Lauren Weinstein. He manages it as a rather selectively moderated digest, somewhat akin to RISKS; it spans the full range of both technological and non-technological privacy-related issues (with an emphasis on the former). ------------------------------------------------------------------------------- Risks To join, send e-mail to risks-request(a)csl.sri.com and, in the text of your message (not the subject line), write: SUBSCRIBE Risks is a digest that describes many of the technological risks that happen in today's environment. ------------------------------------------------------------------------------- Sneakers To join, send e-mail to majordomo(a)CS.YALE.EDU and, in the text of your message (not the subject line), write: SUBSCRIBE Sneakers The Sneakers mailing list is for discussion of LEGAL evaluations and experiments in testing various Internet "firewalls" and other TCP/IP network security products. * Vendors are welcome to post challenges to the Internet network security community * Internet users are welcome to post anecdotal experiences regarding (legally) testing the defenses of firewall and security products. * "Above board" organized and/or loosely organized wide area tiger teams (WATTs) can share information, report on their progress or eventual success here. There is a WWW page with instructions on un/subscribing as well as posting, and where notices and pointers to resources (especially if I set up an archive of this list) may be put up from time to time: http://www.cs.yale.edu/HTML/YALE/CS/HyPlans/long-morrow/sneakers.html ------------------------------------------------------------------------------- Virus To join, send e-mail to LISTSERV(a)lehigh.edu and, in the text of your message (not the subject line), write: SUBSCRIBE virus-l your-name It is an electronic mail discussion forum for sharing information and ideas about computer viruses, which is also distributed via the Usenet Netnews as comp.virus. Discussions should include (but not necessarily be limited to): current events (virus sightings), virus prevention (practical and theoretical), and virus related questions/answers. The list is moderated and digested. That means that any message coming in gets sent to me, the editor. I read through the messages and make sure that they adhere to the guidelines of the list (see below) and add them to the next digest. Weekly logs of digests are kept by the LISTSERV (see below for details on how to get them). For those interested in statistics, VIRUS-L is now up to about 2400 direct subscribers. Of those, approximately 10% are local redistribution accounts with an unknown number of readers. In addition, approximately 30,000-40,000 readers read comp.virus on the USENET. ------------------------------------------------------------------------------- Virus Alert To join, send e-mail to LISTSERV(a)lehigh.edu and, in the text of your message (not the subject line), write: SUBSCRIBE valert-l your-name What is VALERT-L? It is an electronic mail discussion forum for sharing urgent virus warnings among other computer users. Postings to VALERT-L are strictly limited to warnings about viruses (e.g., "We here at University/Company X just got hit by virus Y - what should we do?"). Followups to messages on VALERT-L should be done either by private e-mail or to VIRUS-L, a moderated, digested, virus discussion forum also available on this LISTSERV, LISTSERV(a)LEHIGH.EDU. Note that any message sent to VALERT-L will be cross-posted in the next VIRUS-L digest. To preserve the timely nature of such warnings and announcements, the list is moderated on demand (see posting instructions below for more information). What VALERT-L is *not*? A place to to anything other than announce virus infections or warn people about particular computer viruses (symptoms, type of machine which is vulnerable, etc.). ------------------------------------------------------------------------------- Security Products ------------------------------------------------------------------------------- Tiger To join, send e-mail to majordomo(a)net.tamu.edu and, in the text of your message (not the subject line), write: SUBSCRIBE tiger Discussion list for the UNIX security audit tool TIGER This is the TIGER users mailling list. It is for: 1. Update announcements 2. Reporting bugs in TIGER. 3. Discussing new features for TIGER. 4. Discussing use of TIGER. 5. Discussing anything else about TIGER. What is TIGER? TIGER is a set of shell scripts, C code and configuration files which are used to perform a security audit on UNIX systems. The goals for TIGER are to make it very robust and easy to use. TIGER was originally developed for checking hosts at Texas A&M University following a break in in the Fall of 1992. The latest version of TIGER is always available from the directory net.tamu.edu:/pub/security/TAMU. In addition, updated digital signature files for new platforms and new security patches will be maintained in the directory: net.tamu.edu:/pub/security/TAMU/tiger-sigs. ------------------------------------------------------------------------------- TIS Firewall Toolkit To join, send e-mail to fwall-users-request(a)tis.com and, in the text of your message (not the subject line), write: SUBSCRIBE Discussion list for the TIS firewall toolkit ------------------------------------------------------------------------------- Vendors and Organizations ------------------------------------------------------------------------------- CERT (Computer Emergency Response Team) Advisory mailing list. To join, send e-mail to cert(a)cert.org and, in the text of your message (not the subject line), write: I want to be on your mailing list. Past advisories and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5). ------------------------------------------------------------------------------- The CIAC (Computer Incident Advisory Capability) of DoE CIAC has several self-subscribing mailing lists for electronic publications: 1. CIAC-BULLETIN for Advisories, highest priority - time critical information and Bulletins, important computer security information; 2. CIAC-NOTES for Notes, a collection of computer security articles; 3. SPI-ANNOUNCE for official news about Security Profile Inspector (SPI) software updates, new features, distribution and availability; 4. SPI-NOTES, for discussion of problems and solutions regarding the use of SPI products. To join, send e-mail to ciac-listproc(a)llnl.gov and, in the text of your message (not the subject line), write any of the following examples: subscribe ciac-bulletin LastName, FirstName PhoneNumber subscribe ciac-notes LastName, FirstName PhoneNumber subscribe spi-announce LastName, FirstName PhoneNumber subscribe spi-notes LastName, FirstName PhoneNumber e.g., subscribe ciac-notes O'Hara, Scarlett 404-555-1212 You will receive an acknowledgment containing address, initial PIN, and information on how to change either of them, cancel your subscription, or get help. ------------------------------------------------------------------------------- HP, Hewlett Packard To join, send e-mail to support(a)support.mayfield.hp.com and, in the text of your message (not the subject line), write: subscribe security_info The latest digest of new HP Security Bulletins will be distributed directly to your mailbox on a routine basis. ------------------------------------------------------------------------------- Sun Security Alert To join, send e-mail to security-alert(a)sun.com and, in the subject of your message write: SUBSCRIBE CWS your-email-addr The message body should contain affiliation and contact information. ------------------------------------------------------------------------------- Copyright This paper is Copyright (c) 1995 by Christopher Klaus of Internet Security Systems, Inc. Permission is hereby granted to give away free copies electronically. You may distribute, transfer, or spread this paper electronically. You may not pretend that you wrote it. This copyright notice must be maintained in any copy made. If you wish to reprint the whole or any part of this paper in any other medium excluding electronic medium, please ask the author for permission. Disclaimer The information within this paper may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties with regard to this information. In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or spread of this information. Any use of this information is at the user's own risk. Address of Author Please send suggestions, updates, and comments to: Christopher Klaus <cklaus(a)iss.net> of Internet Security Systems, Inc. <iss(a)iss.net> Internet Security Systems, Inc. Internet Security Systems, Inc, located in Atlanta, Ga., specializes in the developement of security scanning software tools. Its flagship product, Internet Scanner, is software that learns an organization's network and probes every device on that network for security holes. It is the most comprehensive "attack simulator" available, checking for over 100 security vulnerabilities. -- Christopher William Klaus Voice: (770)441-2531. Fax: (770)441-2431 Internet Security Systems, Inc. "Internet Scanner lets you find 2000 Miller Court West, Norcross, GA 30071 your network security holes Web: http://iss.net/ Email: cklaus(a)iss.net before the hackers do."

1 0

Re: spam-- a technological solution/proposal
by Ryan Lackey 17 Dec '03

17 Dec '03

PGP message

1 0

Digital Money: New Era or Business as Usual?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Subject: Digital Money: New Era or Business as Usual? Date: Wed, 6 Aug 97 11:11:20 +0000 x-sender: daveb(a)mail.hyperion.co.uk From: "David G.W. Birch" <daveb(a)hyperion.co.uk> To: "Bob Hettinga" <rah(a)shipwright.com> Mime-Version: 1.0 Bob, Please repost to e$ and anywhere else you think it might go down well! The speaker line up is excellent so I'm hoping we can drum up some extra business by showing it off!! Digital Money: New Era or Business as Usual? London, England, 7th-8th October 1997 Hyperion are co-sponsors of a two day seminar bringing together leaders in the field of digital money and online trading. The seminar is organised by Unicom <http://www.unicom.co.uk> in association with Lotus, NCR, Computer Associates, Attachmate, IMIS, Automatic ID News, British Computer Society and the Institute of Management Consultants. The seminar cost UKP 845 plus VAT where applicable and places should be booked through Unicom. Opening Address: Digital Money Directions David G.W. Birch, Director, Hyperion. Keynote Address: Monetary Innovation in Historical Perspective Glyn Davies, Professor Emeritus and economic advisor to Julian Hodge Bank Ltd. A copy of Glyn's excellent book "A History of Money from Ancient Times to the Present Day" will be presented free to all delegates with the compliments of Hyperion. Digital Money and Laissez-Faire Banking David Cronin, formerly with Bank of Ireland. Digital Money Liability Nick Lockett, Field Fisher Waterhouse. Why is the Electronic Economy Different? John Browning (edited Wired UK). Programmable Currenies Howard Smith, CSC Is the Book Entry Transaction Dead? Bob Hettinga, Digital Commerce Society of Boston Trading in the Internet Financial System Ian Grigg, Systemics The Electronic Purse in Context Peter Hirsch, Retail Banking Research Mondex, A Status Report Steve Maier, Mondex International E-Cash, GSM and the Net Julian Wilson, AT&T Unisource Electronic Purse: the lessons so far Steve Johnson, Verifone Getting from Real Money to Electronic Money Robert Zipplies, DigiCash Micropayments Peter Kirby, IBM The Cybercash Solution Set Steve Crispinelli, Cybercash The Millicent Scheme Henry Gouraud, Digital UK. ------------------------------------------------------------------ David G.W. Birch, Director. Hyperion, 8 Frederick Sanger Road http://www.hyperion.co.uk/ Guildford, Surrey GU2 5YD, UK mailto:daveb@hyperion.co.uk Tel:+44(0)1483 301793 Finger for my PGP public key Fax:+44(0)1483 561657 Where people, networks and money come together....consult Hyperion --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: Billing for internet usage
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 5:06 PM 8/1/95, David G. Koontz wrote: .... >One way would be to perform cooperative billing balances between nodes, >and allow each node to 'bill upward'. This means that any two machines >are more interested in their relative balance than how much money they >are really spending. There are some interesting problems of trust and >reliability, that might be solved through the use of digital money. .... Ideas like these are discussed in my "Digital Silk Road" paper which is now accessible as "http://www.webcom.com/~agorics/dsr.html". There may soon be a PostScript version available. These are the ideas that I presented at a Cypherpunks meeting about a year ago.

1 0

ADMIN: You might not be on the list anymore!
by hugh 17 Dec '03

17 Dec '03

I want to warn you folks about how the list is run, just so you don't think that evil is a foot on toad.com. Recently the bounce messages for cypherpunks got to be over 80 megs large, largely due to my being busy. When I went to clean them and the offending messages out (only 38 addresses needed to be culled) I found a lot of bounces from the likes of AOL and MCI that were "user XXX's mail box is full..." bounces. In the past I tryed to ignore these message as it was clear that the mail boxes would get emptyed at some point. Now I have seen these messages from the same address for weeks, and combined with the number of hours it takes to cull this crud from the list has pushed me into a new policy. I am now deleteing (allmost) all addresses from the list that generate bounce messages. If you stop getting cypherpunks email the FIRST thing to do is ask the majordomo(a)toad.com mailbot if you are still on the list, this might looks like: To: majordomo(a)toad.com Subject: --text follows this line-- which yourlogin(a)yourhost.dom If you are NOT on the list, just subscribe again and leave it at that. Please note that many of the bounce messages came from email to (local) news group gateways, and while I try to send warning mesages, it would be better if folks maintaining such gateways made sure that bounce messages went to the local maintainers insted of me. Enjoy the list, and keep it on topic folks! ||ugh Daniel Majordomo Potty Trainer hugh(a)toad.com

2 1

PINESIGN 2.2 (re: PGP for Pine)
by Robert A. Hayden 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've been out of town this week, so I coulsn't respond in a timely manner (and I returned to 500+ pieces of cypherpunks email :-) I'm appending a copy of PineSign 2.2, ehich is the most recent version of the PineSign program. It doesn't do any encryption, it simple allows for easy signing of messages composed with pine (and maybe other mailers as well). If you want to encrypt and such, I'd recommend mkpgp if you can find it or perhaps autopgp does it (not sure). I also have a version of a similiar program for Tin available on my home page, or I can post it if there is interest. ===== #!/bin/sh # PINESIGN v2.2 # Written by: Robert A. Hayden <hayden(a)krypton.mankato.msus.edu> # PINESIGN is a simple program that will allow you to automatically sign # your email and news messages composed with the Pine 3.91 mail reader. It # may also work with other mail and news programs, but it has not been # tested. # INSTRUCTIONS FOR CONFIGURING PINE # # You need to define the following options in Pine. This can be done # either via the SETUP options in the main menu of Pine, or via editing # the .pinerc. # # A) signature-file=" " (an empty space) # B) enable-alternate-editor-cmd # C) enable-alternate-editor-implicitly (optional but recommended) # D) signature-at-bottom # E) editor=<exact path to this script> # INSTRUCTIONS FOR CONFIGURING PINESIGN # # The PGP program must be in your path, and the PGPPATH environment # variable must be defined. See the PGP documentation for details. # # Double check that the first line of this program points to sh. # # In addition to PGP and the editor you define, PineSign also will use the # following programs: # cat # clear # echo # mv # # Execute the command "chmod 700 <path/to/tinsign>" # # Edit the SIGPATH and PINEEDITOR variables to point at your signature # (if any) and the editor you wish to use for your Pine mail. Default # signature will be the file .signature-pine in your $HOME directory. # Default editor is pico -z -t. # # Define SIGPATH=/dev/null if you do not have an ASCII signature to # append. SIGPATH=$HOME/.signature-pine PINEEDITOR='pico -z -t' # Next, define the ECHOTYPE variable. Some systems do not allow the use # of the echo -n command. If your system doesn't like echo -n, uncomment # the plain echo variable and comment out (put a "#" in front of it) the # echo -n commant. ECHOTYPE='echo -n' #ECHOTYPE='echo' # INSTRUCTIONS FOR USING PINESIGN # # When you compose a message, you will compose your message as normal. # # When you exit your editor (control-X in Pico), you will receive a prompt # asking if you wish to add your signature file to the message. If you # respond with y, Y or just press return, your text signature file will # be appended to your message. If you type anything else, your message # will not have your signature added. # # Next, you will be prompted as to whether you wish to PGP sign your # message. If you answer with y, Y or return, you will be prompted for your # PGP passphrase and then dumped back to the address/subject section of # Pine. If you type anything else, your message will not be signed. # # If you selected it to be added, your signature file will be appended # AFTER your digital signature. # # If you have not defined your alternate editor to be run implicitly, you # will need to start it manually. If you do not run the alternate editor, # your signature file will not be appended and you will also have to do # that manually. It is highly recommended that your define your alternate # editor to run implicitly. ### DO NOT EDIT ANYTHING BELOW THIS LINE UNLESS YOU KNOW WHAT YOU ARE DOING ### $PINEEDITOR $1 clear $ECHOTYPE "Would you like to add your ASCII signature to this message? [y] " read SIG echo " " $ECHOTYPE "Would you like to sign this message with your PGP signature? [y] " read PGP if [ "$PGP" = "y" ] then pgp -sat +comment="PGP Signed with PineSign 2.2" +clearsig=ON $1 mv $1.asc $1 fi if [ "$PGP" = "Y" ] then pgp -sat +comment="PGP Signed with PineSign 2.2" +clearsig=ON $1 mv $1.asc $1 fi if [ "$PGP" = "" ] then pgp -sat +comment="PGP Signed with PineSign 2.2" +clearsig=ON $1 mv $1.asc $1 fi if [ "$SIG" = "y" ] then echo " " >> $1 cat $SIGPATH >> $1 fi if [ "$SIG" = "Y" ] then echo " " >> $1 cat $SIGPATH >> $1 fi if [ "$SIG" = "" ] then echo " " >> $1 cat $SIGPATH >> $1 fi # REVISION HISTORY # 1.0 - Original Release # 2.0 - Added the ability to select whether or not to add the ASCII signature # 2.1 - Forgot to add the +clearsig=on parameter to the PGP statements. # OOPS! # 2.2 - CURRENT RELEASE # After receiving complaints about some systems not being able to # handle the -n parameter for echo, added in the ECHOTYPE variable. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: PGP Signed with PineSign 2.2 iQCVAwUBMD5oFzokqlyVGmCFAQHW0AQAuw7BVRcAKGfi7Bk53KBoQnYPO0H+3Ubn aMCiOx9lWU2CDCtBxYM3TyMtNCIrcLt9YV5kFqSLXAN4kpe3s+p2wko3PdL9JyZg 63h1Wl7HT7t/Q+yYhYrI3kazrHJj9Bhv/AZTVhicEHV89z0SadXq7dZKrIQX6H3t 0aVz5mmZ5+E= =Tfxw -----END PGP SIGNATURE----- ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ Finger for Geek Code Info <=> Finger for PGP Public Key \/ / -=-=-=-=-=- -=-=-=-=-=- \/ http://krypton.mankato.msus.edu/~hayden/Welcome.html -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GED/J d-- s:++>: a-- C++(++++) ULU++ P+ L++ E---- W+(-) N++++ o+ K+++ w--- O- M+ V-- PS++>$ PE++>$ Y++ PGP++ t- 5+++ X++ R+++>$ tv+ b+ DI+++ D+++ G+++++ e++ h r-- y++** ------END GEEK CODE BLOCK------

1 0

Auto-pgp for pine/elm/tin (fwd)
by P.J. Ponder 17 Dec '03

17 Dec '03

In Garfinkel's book, he talks about the risks of running PGP on a multiuser system where others (sys. admins, eg) have higher levels of authority than you do. I have PGP installed on my pc and if I want to use it, I can save the message in ascii, then upload it to the server where I have my Internet account, then mail it. maybe not entirely transparent, but at least it seems to me that the convenience of running it on the server with something like Mr. Wilcox's BAP is not worth the added risk. Besides, how often do you need to use it? -- pjp ---------- Forwarded message ---------- Date: Fri, 25 Aug 1995 12:03:52 -0400 (EDT) From: Henry W. Farkas <hfarkas(a)ims.advantis.com> To: cypherpunks(a)toad.com Subject: Auto-pgp for pine/elm/tin -----BEGIN PGP SIGNED MESSAGE----- > Does anyone know of an addon to the Pine mailer that supports PGP? > the only PGP software i could find required me to first compose a > letter in an editor then run it through a pgp signature program > then finally read it into my favorite mailer. > > I'm looking for something that is hopefully transparent, or if not > relatively quick to do. > ________________________________________________________________________ > Sameer Manek Seawolf(a)challenger.atc.fhda.edu > ________________________________________________________________________ - ------------------------------------------------------------------------ Yes, it exists, and I'm using it now. I've tried competing products and found this to be the cleanest, smoothest and easiest to install. I have no personal, commercial or financial interest in this product. It does "auto-pgp" for pine, elm and tin. *********************************************************************** * BAP v.1.01 * * Written August 1995 by Bryce Wilcox * * e-mail: <bryce.wilcox(a)colorado.edu> * * PGP key id: <617C6DB9> * * snail mail: <2228 Canyon Blvd, Apt. 1E, Boulder, CO, 80302> * * URL: <http://cs.colorado.edu/~wilcoxb/home.html> * * BETA TEST VERSION! DO NOT DISTRIBUTE! * * (Note that documentation, among other things, is still unfinished.) * *********************************************************************** I also found the author responsive to my comments and suggestions. Just please do *-NOT-* put your pass phrase in a cleartext file! - ------------------------------------------------------------------------ =========================================================================== Henry W. Farkas | Me? Speak for IBM? Fat chance. hfarkas(a)ims.advantis.com |------------------------------------------------ hfarkas(a)vnet.ibm.com | http://newstand.ims.advantis.com/henry henry(a)nhcc.com | http://www.nhcc.com/~henry - --------------------------------------------------------------------------- PGP 6.2.2 Key fingerprint: AA D0 F5 44 C1 8C 11 52 B3 80 34 1C CE 38 EC 53 Public key at: pgp-public-keys(a)pgp.mit.edu, and other popular key servers. - --------------------------------------------------------------------------- Brought to you by Henry's Hardware: Home of the Pretty Good Hack "We're not fast, but it's not bad, and we're cheaper than the guy down the street!" =========================================================================== -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed with Bryce's Auto-PGP v1.0beta iQCVAwUBMD30WaDthkLkvrK9AQF6sQP/fVen7ZI4DbgC14y+NPdZYOjaRQ9/jQNT d4StD638OoBRkO7b8efiTd/rNULwuzSPKDiplKwRdE8Bboh4FdSWYvz6wfqgNJcd D3imouQcEt+erjEC2H5haQyZwBHeNNR9mTYhkzoBt4+jMqsRCECduaExyHUOTWFj euOkRqTJ0l4= =2q74 -----END PGP SIGNATURE-----

4 3

Auto-PGP for OS/2
by dan＠milliways.org 17 Dec '03

17 Dec '03

A few weeks ago, someone anonymously posted a uuencoded version of an add-on to the OS/2 System Editor that claimed to automatically use PGP to encrypt and/or sign ASCII documents. However, when I uudecoded it with several different versions of uudecode, all I got was garbage. I sent mail to the poster's anon.penet.fi address, but didn't get a response. Did anyone manage to get a clean file or know where I can FTP it? Thanks. Dan ****************************************************************************** "I think, therefore I am" - Descartes Dan Bailey "I don't think, therefore I'm a moustache." - Sartre dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ******************************************************************************

1 0

Re: ADMIN: You might not be on the list anymore!
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:14 AM 8/26/95, Robert A. Hayden wrote: >I administrate several mailing lists. Bounce as of late have gotten so >bade, especially from AOL, C$erv, etc (and I expect soon from MSN.COM) >that I also just nuke the person out of hand. It's better in the long >run :-) I agree. Kill them all. God will know his own. --Tim the Impaler (I'm seeing bounces on all Compuserve addresses for the simple Cypherpunks Santa Cruz I administer manually.) ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Zmaster say "Go Legal" Cheap !
by email＠exoticwhispers.com 17 Dec '03

17 Dec '03

ZMaster has hired this promotional company and are not the maintainers of the email list. Please so do not contact them for removes, just click on your |Reply Option| and type REMOVE in the subject line. ======================================================== We are XXX content providers to web sites via CDROM licensing. One blanket license allows you to put all our CD's online we have on the market now and all future ones coming. We are in compliance with 18 USC 2257, and model releases are on file. Cheapest way to get legal high quality hardcore images. We have won the industry awards 2 years in a row for "Best Hardcore" photo CD...the 5 cd's are about 3500 XXX and 500 softcore...the newest fetish cd is at pressing house. Release date is July 9th. Been publishing since 1992. Once you license fee is paid...you may place all 5 of our titles online now, and all the ones to be released in the future for merely the cost of the CD ($20). http://www.zmaster.com Benefits: a) Excellent supplemental content for your galleries. Stop paying $1-3 an image, pay pennies. b) Best deal on the net for licensing in terms of $$$ c) No legal hassles, risks, or fears of copyright d) Place it on all your URLS's once your licensed e) No risk, 100% money back guarentee if your not thrilled with the quality and variety. f) At least 2 more productions will be released this year, a Gay male title with all gay talent and another XXX hardcore. h) Images are scanned from 35mm slides and were taken during the filming of hundreds of movies. i) Ask us how to get your FREE copy of Compupic to do your batch cropping, resizing, and adding of text to images - $69.95 webtools free. j) Resell our CDROM titles for 30% commission, purchase direct from us wholesale. http://www.zmaster.com

1 0