December 2003 - cypherpunks-legacy

OS/2 Brute SSL binary
by blane＠eskimo.com 17 Dec '03

17 Dec '03

After an evening of installing emx+gcc for OS/2 I have gotten a compiled binary to run on my machine. Its chugging away at 5100 keys/sec. If you want to try out my binaries, ftp over to: ftp.eskimo.com/~blane/brutessl/bruteos2.zip I have included the .exe, the .txt file and the .pf files for hals 2 challenges and the test.pf I think I have it compiled so that you don't need emx.dll on your system, but I can't test it(I have emx installed). Let me know of any problems. I tried the os/2 binaries from the ftp.brute... site, but they insisted on running the DOS command.com shell, and then dying with an error. Good luck! Brian -------------------------------------------------------------------------------------- http://www.eskimo.com/~blane | Finger for PGP Key | 'Space, its so roomy!' - B. Bunny ftp://ftp.eskimo.com/~blane | | --------------------------------------------------------------------------------------

1 0

Palladin Press Announces "Home Composting" by Tim C. May
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > At 8:46 PM -0700 8/3/97, Anonymous wrote: > >Joichi Ito wrote: > >> As for Tim's message... I keep worrying (when I am in Japan) that I'm too > >> radical, so it's nice to hear from someone who is really hardcore to put > >> a wimp like me in my place. ;-P > > Actually, when Tim puts someone in what he considers to be their > >place, it usually involves the purchase of a tombstone. > Actually, the trick is to avoid having the body discovered. What goes into > the 10 h.p TroyBilt Chipper/Shredder comes out not needing any kind of > tombstone at all. This may explain why my paramilitarist neighbor's garden always does so much better than mine. (It could also explain the bone fragments in his garden potatoes.) > Not that I have ever advocated killing mere folks like Joichi with whom I > disagree strongly. (A new quote: "Killfiles don't need tombstones.") Definition of a CypherPunk tragedy: "A Killfile being deleted without an ASCII Art message in it." > The point is, if Joichi Ito wants to ever be taken at all seriously, as a > reasonable objective reporter of what is happening, his co-opting by the > Japanese Self Defense Forces, Chobetsu, etc., for this "committee" on > crypto policy, must be scrutinized, and almost certainly criticized. The JSDF, Chobetsu, etc., might well say the same thing about his co-opting by the CypherPunks. I believe that you are right about scrutinizing and criticizing the work of all politicians and reporters, but I doubt any of us could ultimately reach agreement on what exactly constitutes being co-opted, or exactly when one of "us" becomes one of "them." I value Declan McCullagh's reporting on privacy and crypto issues, but I recognize the need to ask him to "take his shirt off" every now and again so we can check to see if he has an alien creature stuck to his back, controlling his mind. The problem with sending spies and secret agents into the enemy camps has always been that they may grow to like the enemy's life- style a little *too* much. > >> And nothing but mischief will come out any meetings with government on > >> "crypto policy," as their goals can never be our goals. At least in the > >> U.S., despite obvious flaws, we have a "Congress shall make no law" > >> provision which _tends_ to make government meddling in speech, such as > >> meddling in crypto, more difficult. > > > > I hope that the "flag" Tim is wrapping himself in isn't the same one > >that he was burning yesterday. > > {Not that I'm accusing Tim of being purposely deceitful. It's just > >that when we throw a "leaner" instead of a "ringer," they sometimes > >lean in opposite directions.} > Utter bullshit. I have cited the First, Second, and other provisions of the > Constitution for the 5 years of this list. That I would prefer an even more > anarchistic, market-oriented system than we now have, or that I dislike the > hundreds of thousands of laws passed over the last 50 years, is no reason > not to use the protections of the Constitution. Don't shoot, I was just being fascetious. To tell the truth, I find it confusing these days to figure out *which* flag is being burned, or used to wrap oneself in, these days. Is it the flag that defends freedom or the flag that defends children? Is it the flag that defends the Constitution or the flag that defends "national security?" {And if it is the flag that defends the Constitution, then *which* Constitution? The one the founders wrote, or the one being used as a doormat at the Whitehouse?) > And the line between an > anarchocapitalist and a strict constuctionist is fine indeed. Anyone who > thinks this is "deceitful" is probably one of those folks who says, "Oh, > yeah, well if you dislike government why don't you just refuse to drive on > public roads? Or, perhaps, "If you dislike government why don't you just refuse to participate in it?" Different strokes for different folks. Sometimes the pen is indeed mightier than the sword (or a Ryder truck) and sometimes the almighty dollar is mightier than either. Regardless, "We have met the enemy, and he is us." probably comes closer to the heart of the problem with our societies and governments than any socio-political analysis of the issues and events of our time. The problem is not who writes what, and the reasons behind it, the problem is the aspect of our human nature which wants us to believe in Santa Claus, benevolent government and the goodness of our fellow man, despite evidence to the contrary. The problem is not who blows up a building, or a city, the problem is the aspect of our human nature which wants us to paint the face of justice or terrorism on the action instead of recognizing the injustice, regardless of the necessity, or lack thereof, of the action. The bottom line is that, despite our personal beliefs as to "the meaning of life" and the values and beliefs it should be lived by, it may well be that this planet's true purpose is to serve as a compost pile to provide nourishment for more intelligent forms of life being grown/evolved elsewhere. {Keep an eye out for asteroids shaped like a "TroyBilt."} TruthMonger

1 0

Re: The Theory of Nymity (value of True Names)
by James A. Donald 17 Dec '03

17 Dec '03

Larry Detweiler wrote: > part of L.D.'s demonstrations were the harm that someone with > some ingenuity, flair, malice, and boredom could wreak on any > cyberspatial community through the use of unrestrained > anonymity/pseudonymity. and it appears that some of you still > don't get the point. perhaps another reminder or demonstration > is in order Larry has from time to time attempted to prove that net anarchy is a bad thing, because people can engage in nasty pointless destructive behavior. In addition to his battles with the cypherpunks list over anonymity, he has also argued with pretty much the entire net community that without a central authority it is meaningless to attempt to distinguish between good conduct and bad conduct, and has attempted to prove his thesis by actual demonstration. His accounts have been repeatedly yanked, he has found himself under endless savage attack by a large part of the entire internet, and has repeatedly gone completely insane, possible because of the emotional stress resulting from massive hostility, denigration, and contempt from huge numbers of people. Of late his attacks have become more cautious and less likely to provoke massive retaliation. He appears to have recovered his sanity temporarily. Perhaps another reminder or demonstration is in order. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Regarding your check
by promotions＠web-promotions.com 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This message has been sent by Web-Promotions.Com and adheres to all North American laws pertaining to Bulk Email. If you would like to be removed from future mailings please respond back to the sending address and put REMOVE in the SUBJECT BOX. Placing the word remove in any other area of the email may go unnoticed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Clickers paying from 3¢ to 5¢ per click PLUS BONUS up to $500 paid to sites with QUALITY traffic each and EVERY month. We are looking for serious players who want to make serious money. No messing around, WE PAY ON TIME, WEEKLY and by WIRE if you choose. Site size for bonus is not important, just the QUALITY of your traffic. Check out http://www.clickers.net for more information. WHAT HAVE YOU GOT TO LOSE? Richard Clickers Admin ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This message has been sent by Web-Promotions.Com and adheres to all North American laws pertaining to Bulk Email. If you would like to be removed from future mailings please respond back to the sending address and put REMOVE in the SUBJECT BOX. Placing the word remove in any other area of the email may go unnoticed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Crypto DLL's/SSLeay 0.4.5
by Eric Young 17 Dec '03

17 Dec '03

Just in case people are interested, I've put the most recent version of my SSL (SSLeay) library up on ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL/ The big differece with this realease is that it builds under Windows 3.1. The DLL's for the libraries are there as well as the ported demo programs. I've used Borland C 4.0 and the .IDE file plus source code are in the distribution. The DLL's contain routines for MD2, MD5, RC4, DES (every mode you could want :-), IDEA, RSA, SSL and all the X509 etc stuff that is part of life with SSL. The library even compiled under MSDOS :-). Since my code base will always be unix first, the code is not optimised for 16bit and probably never will be, but still, the algorithms work and the code is free for comercial and non-comercial use. The applications need work to make them nice under Windows, but hell, I'm only writing a library :-). On the PGPphone issue, I Personally I feel SSLphone would be a much better way of doing things. If some-one has a 'voice' over modem program already, they should be able to slip SSL into it in only a few days. For phone over modem, authentication is not really required and what exists in my library is everything required for the encryption side of things. those URL's again http://www.psy.uq.oz.au/~ftp/Crypto/ ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps eric -- Eric Young | Signature removed since it was generating AARNet: eay(a)mincom.oz.au | more followups that the message contents :-)

2 2

FBI Files on Clipper Releas
by Dave Banisar 17 Dec '03

17 Dec '03

FOR RELEASE: August 16, 1995, 2:00 p.m. EST CONTACT: David Sobel (202) 544-9240 FBI FILES: CLIPPER MUST BE MANDATORY WASHINGTON, DC - Newly-released government documents show that key federal agencies concluded more than two years ago that the "Clipper Chip" encryption initiative will only succeed if alternative security techniques are outlawed. The Electronic Privacy Information Center (EPIC) obtained the documents from the Federal Bureau of Investigation under the Freedom of Information Act. EPIC, a non-profit research group, received hundreds of pages of material from FBI files concerning Clipper and cryptography. The conclusions contained in the documents appear to conflict with frequent Administration claims that use of Clipper technology will remain "voluntary." Critics of the government's initiative, including EPIC, have long maintained that the Clipper "key-escrow encryption" technique would only serve its stated purpose if made mandatory. According to the FBI documents, that view is shared by the Bureau, the National Security Agency (NSA) and the Department of Justice (DOJ). In a "briefing document" titled "Encryption: The Threat, Applications and Potential Solutions," and sent to the National Security Council in February 1993, the FBI, NSA and DOJ concluded that: Technical solutions, such as they are, will only work if they are incorporated into *all* encryption products. To ensure that this occurs, legislation mandating the use of Government-approved encryption products or adherence to Government encryption criteria is required. Likewise, an undated FBI report titled "Impact of Emerging Telecommunications Technologies on Law Enforcement" observes that "[a]lthough the export of encryption products by the United States is controlled, domestic use is not regulated." The report concludes that "a national policy embodied in legislation is needed." Such a policy, according to the FBI, must ensure "real- time decryption by law enforcement" and "prohibit[] cryptography that cannot meet the Government standard." The FBI conclusions stand in stark contrast to public assurances that the government does not intend to prohibit the use of non-escrowed encryption. Testifying before a Senate Judiciary Subcommittee on May 3, 1994, Assistant Attorney General Jo Ann Harris asserted that: As the Administration has made clear on a number of occasions, the key-escrow encryption initiative is a voluntary one; we have absolutely no intention of mandating private use of a particular kind of cryptography, nor of criminalizing the private use of certain kinds of cryptography. According to EPIC Legal Counsel David Sobel, the newly- disclosed information "demonstrates that the architects of the Clipper program -- NSA and the FBI -- have always recognized that key-escrow must eventually be mandated. As privacy advocates and industry have always said, Clipper does nothing for law enforcement unless the alternatives are outlawed." Scanned images of several key documents are available via the World Wide Web at the EPIC Home Page: http://www.epic.org/crypto/ban/fbi_dox/ -30- _________________________________________________________________________ Subject: FBI Files on Clipper Released _________________________________________________________________________ David Banisar (Banisar(a)epic.org) * 202-544-9240 (tel) Electronic Privacy Information Center * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://epic.org Washington, DC 20003 * ftp/gopher/wais cpsr.org

3 4

Financial Cryptography '98 Call for Papers
by Ray Hirschfeld 17 Dec '03

17 Dec '03

Financial Cryptography '98 Second International Conference February 23-26, 1998, Anguilla, BWI CALL FOR PAPERS General Information: Financial Cryptography '98 (FC98) is a conference on the security of digital financial transactions. Meetings alternate between the island of Anguilla in the British West Indies and other locations. This second meeting will be held in Anguilla on February 23-26, 1998. FC98 aims to bring together persons involved in both the financial and data security fields to foster cooperation and exchange of ideas. Original papers are solicited on all aspects of financial data security and digital commerce in general, including Anonymous Payments Fungibility Authentication Home Banking Communication Security Identification Conditional Access Implementations Copyright Protection Loss Tolerance Credit/Debit Cards Loyalty Mechanisms Currency Exchange Legal Aspects Digital Cash Micropayments Digital Receipts Network Payments Digital Signatures Privacy Issues Economic Implications Regulatory Issues Electronic Funds Transfer Smart Cards Electronic Purses Standards Electronic Voting Tamper Resistance Electronic Wallets Transferability Instructions for Authors: Send a cover letter and 12 copies of an extended abstract to be received by November 17, 1997 (or postmarked by November 7, 1997 and sent via airmail) to the Program Chair at the address given below. The extended abstract should start with the title, the names of the authors, and an abstract followed by a succinct statement appropriate for a non-specialist reader specifying the subject addressed, its background, the main achievements, and their significance to financial data security. Submissions are limited to 15 single-spaced pages of 12pt type. Notification of acceptance or rejection will be sent to authors no later than January 12, 1998. Authors of accepted papers must guarantee that their paper will be presented at the conference. Proceedings: Proceedings of the conference will be published by Springer Verlag in their Lecture Notes in Computer Science (LNCS) series. Preproceedings will be available at the conference, but final versions will not be due until afterwards, giving authors the opportunity to revise their papers based on presentations and discussions at the meeting. Instructions and deadlines for submission of final papers will be sent later to authors of accepted papers. Rump Session: In addition to the regular conference program, a rump session will be held to provide an opportunity for less formal presentations. Although the rump session will be organized during the conference itself, any advance proposals may be sent to the Program Co-Chair at the email address given below. Rump session contributions will not appear in the conference proceedings. Stipends: A very limited number of stipends may be available to those unable to obtain funding to attend the conference. Students whose papers are accepted and who will present the paper themselves are encouraged to apply if such assistance is needed. Requests for stipends should be addressed to one of the General Chairs. Registration: Information about conference registration and on travel, hotels, and Anguilla itself will follow in a separate general announcement. There will be special discount registration rates for authors of accepted submissions, full-time academics, and students. Workshop: A workshop, intended for anyone with commercial software development experience who wants hands-on familiarity with the issues and technology of financial cryptography, is planned in conjunction with FC98, to be held during the week preceding the conference. For information, please contact one of the General Chairs. Send Submissions to: Rafael Hirschfeld FC98 Program Chair CWI Kruislaan 413 1098 SJ Amsterdam The Netherlands email: ray(a)cwi.nl phone: +31 20 592 4169 fax: +31 20 592 4199 Send Rump Session Contributions to: Matthew Franklin FC98 Program Co-Chair email: franklin(a)research.att.com Program Committee: Matt Blaze, AT&T Laboratories--Research, Florham Park, NJ, USA Antoon Bosselaers, Katholieke Universiteit Leuven, Leuven, Belgium Yves Carlier, Bank for International Settlements, Basel, Switzerland Walter Effross, Washington College of Law, American U., Washington DC, USA Matthew Franklin, AT&T Laboratories--Research, Florham Park, NJ, USA Michael Froomkin, U. Miami School of Law, Coral Gables, FL, USA Rafael Hirschfeld, CWI, Amsterdam, The Netherlands Alain Mayer, Bell Laboratories/Lucent Technologies, Murray Hill, NJ, USA Moni Naor, Weizmann Institute of Science, Rehovot, Israel Frank Trotter, Mark Twain Ecash/Mercantile Bank, St. Louis, MO, USA Doug Tygar, Carnegie Mellon University, Pittsburgh, PA, USA Moti Yung, CertCo LLC (formerly: Bankers Trust E-Commerce), New York, NY, USA General Chairs: Robert Hettinga, Shipwright, Boston, MA, USA email: rah(a)shipwright.com Vincent Cate, Offshore Information Services, Anguilla, BWI email: vince(a)offshore.com.ai Exhibits and Sponsorship Manager: Julie Rackliffe, Boston, MA, USA email: rackliffe(a)tcm.org Workshop Leader: Ian Goldberg, Berkeley, CA, USA email: iang(a)cs.berkeley.edu Those interested in becoming a sponsor of FC98 or in purchasing exhibit space, please contact the Exhibits and Sponsorship Manager. A copy of this call for papers as well as other information about the conference will be available at URL http://www.cwi.nl/conferences/FC98.

1 0

DigSig laws
by Donald M. Kitchen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Being a resident of Utah, I was interested in exactly what Utah's digital signature law was about. I knew it had to be somewhat level-headed, since a number of people in little silicon valley must have had their fingers in it... Unfortunately, IANAL for me is more than just a legal disclaimer. Anyone know of any of the legal eagle (ie, judge-l, eff, etc) have analyzed it, or know of any summaries that my search didn't find? (I was lucky to find this link in the first place...) Here is the utah law: gopher://gopher.utah.edu/11/Off%20Campus%20Information/State%20of%20Utah/ Utah%20Legislative%20Bills/1995 (I had to manually gopher it, it's under search bills, it's SB0082) Or perhaps any of you IANAL types would care to try reading it...it sounded like the key had to be escrowed with a legally recognized agent. PS: my compliments to Damien. Oh, I mean, the SSL crack looked nice leading the SF Chronicle's Business headline, but I'm especially thrilled the way the Signal/Noise ratio suddenly improved overnight. It will make reading what happened during my vacation much more interesting from that point on... And for those of you who think that PROMIS is squarely on-topic, <PLONK!>. When I can get grep routing results to /dev/null for "whitewater", etc, I'll be sure to share.. Don -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMDwC48La+QKZS485AQHnnQL9FllVv82m5a0bl0xg5einnt3KR2X4FhPj jdTMiWeCPRW6H84/GWzPdhcHrn0ilvtgnwZTYqaL+1KS6wuPkuMcjOLw8VgxLmO9 CyUAee/zipkTyPnSPlgYp5Nvw0vm+gFn =qurO -----END PGP SIGNATURE----- <don(a)cs.byu.edu> fRee cRyPTo! jOin the hUnt or BE tHe PrEY PGP key - http://bert.cs.byu.edu/~don or PubKey servers (0x994b8f39) June 7&14, 1995: 1st amendment repealed. Death threats ALWAYS pgp signed * This user insured by the Smith, Wesson, & Zimmermann insurance company *

1 0

Tim 1 - Joichi 0 - DreamMonger NULL / Re: Joichi gives up / Tim Throws a "Leaner" / Re: Tim Speaks the
by TruthMonger 17 Dec '03

17 Dec '03

Joichi Ito wrote: > > OK. I give up. I think DreamMonger's last comment about at least sort of > believing in my intentions is about the best it will get for me here. Sure, quit before we even have a chance to use the cheap shots we've thought up since our last posts. Spoilsport. > Tim, you're in my killfile now too so I'm not going to respond directly to > your comments. Me neither. I'm going to use email. > Now at least when I am going through the meatgrinder, I won't know if it is > a cypherpunk or a Japanese fascist who's sending me through. It would probably be considered Politically Incorrect for me to mention that eye-shape might be a good indication, so I won't. Another indication might be whether your torturers are shouting, "Confess! You all an Ameliclan SPY!" or, "We kicked your ass in 'The Big One', pal." If you haven't figured it out by the time you've been put completely through the meatgrinder, you can still figure it out by noting whether your remains are being mixed with rice and put in cabbage leaves, or being coated with barbeque sauce and thrown on a grill. > At 05:46 97/08/04 +0200, Anonymous wrote: > > I hope Joichi Ito paid enough attention to the OKC bombing to realize > > that some surgeons are less skilled than others, and that there is a > > risk in remaining too long in close proximity with cancerous tissue. > > Some Japanese conservatives probably think *I* am the cancerous tissue that > their people shouldn't hang out with... "Everybody needs somebody that they can look down on. That they can feel better than, at any time they please. Someone doing something dirty, decent folks can frown on. And if you can't find nobody else, then help yourself to me." - Kris Krisofferson It has been my experience that it is more fulfilling to be tortured by CypherPunks than by Conservatives. <ymmv> (And the physical meetings are more fun, too.) TruthMonger

1 0

Re: Tim 1 - Joichi 0 - DreamMonger NULL / Re: Joichi gives up / Tim Throws a "Leaner" / Re: Tim Speaks the
by Joichi Ito 17 Dec '03

17 Dec '03

At 01:42 97/08/04 EST, TruthMonger wrote: > Sure, quit before we even have a chance to use the cheap shots we've > thought up since our last posts. Spoilsport. > > Tim, you're in my killfile now too so I'm not going to respond directly to > > your comments. > > Me neither. I'm going to use email. OK. I was trying to not-so-elegantly back out of the big hole I dug for myself. To be completely honest, I am fascinated (I don't know if this is the right word here...) by this discussion and if we were f-t-f I would probably still be engaged but I find Tim's arguments too deep to write off, but I find myself without enough time right now to engage with my full attention...and if I don't give this my full attention, I'm sure I'll lose... so, I gave up... for now. I'll formulate my thoughts and next time, I'll think before I write. Maybe I'll wait for a chance to take a stab at Tim later on. At 00:44 97/08/04 -0500, Jim Choate wrote: > Forwarded message: > > > Date: Sun, 3 Aug 1997 22:02:24 -0700 > > From: Tim May <tcmay(a)got.net> > > Subject: Re: Tim Throws a "Leaner" / Re: Tim Speaks the Truth > > Any journalist in Europe or in the U.S. would be seen as having irreparably > > compromised his journalistic objectivity by serving on such a panel! And > > properly so, of course. > > As long as they were representing their personal opinions and not acting as > a journalist (ie being paid by a 3rd party) and they disclose the action > there would be compromise on objectivity. Jim, I hope you meant to say "wound not be compromising" in the above statement. This may sound like an afterthought, but one of the reasons that I did such a stupid thing as post my association with a police study group here was as a part of being very open about what I was doing and trying to ask for advice on that basis. Also, FYI, I am not being paid by the government or any 3rd party. I am not a "consultant" to the government. I am an "outside expert". I am not representing the police to the people of Japan, I am trying represent the peoples' interest to the government... but I'll stop now before I get bashed again. - Joi -- Finger jito(a)nsm.eccosys.com or jito(a)garage.co.jp for PGP Key Fingerprint for RSA PGP Key ID 0x0EE23A2D 0D3A 7AAA 3DA8 E7B3 3AF1 C6FA B7ED D834 Fingerprint for DSS/Diffie-Hellman PGP Key ID 0x2D9461F1 58F3 CA9A EFB8 EB9D DF18 6B16 E48D AF2A 2D94 61F1 Home Page: http://domino.garage.co.jp/jito/joihome.nsf To subscribe to my personal mailing list send mailto:friends-subscribe@ito.com

1 0