December 2003 - cypherpunks-legacy

Eudora/Trumpet encryption
by Sean A. Walberg 17 Dec '03

17 Dec '03

I'm a crypto newbie here, but does anybody know how Trumpet Winsock and/or Eudora encrypt the passwords in their .ini files? I am trying to write a front end for a client and would rather it set up automatically rather than the program ask. How would I go about cryptoanalysing this? If it were a simple XOR, then wouldn't Plaintext1^Cypher1 == Plaintext2^Cypher2 and so on? Thanx for any help you can give me on this matter, Sean o-------------------o----------------------o-----------------------o | Sean Walberg, | Tech Support | Pas_al, _obol, BASI_, | | sean(a)escape.ca | escape communication | PostS_ript, T_L... | | Mail for PGP key | 925-4290 | C fills all the holes | o----------------] http://www.escape.ca/~sean [--------------------o

3 2

SSL trouble
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

DD> In conclusion, I think random searching is the way to go. It's even better DD> than Monty's pre-allocation with quad-coverage. Here's a thought: How about the best of both worlds. Keep the double-coverage, bidirectional sweep, and allocate only one "team". The client software will take the pre-allocated segment, and then go random for the rest of the run. * GHOTI = FISH? touGH: GH = F wOmen: O = I dicTIonary: TI=SH. I love English! --- * Monster(a)FAmend.Com *

1 0

Applied crypto, security guru needed, from Coopers & Lybrand
by Declan McCullagh 17 Dec '03

17 Dec '03

[From a CMU computer science department mailing list. --Declan] ---------- Forwarded message ---------- >From: Dahl Gerberick <Dahl.Gerberick(a)us.coopers.com> > >Hi, > >I recently took a senior level position with Coopers & Lybrand in Boston. >As such it has come to my attention that they are looking for someone with >the following background. > >I do not expect that you will know where I can find such a person right >now, but if you keep this message handy you might think of me if that >person should come along in the near future. > >If you should find someone who meets these requirements please get back to >me, or have them contact me directly. > > Dahl Gerberick > 617-478-9936 (Office) > 617-478-5900 (Fax) > 617-784-2701 (Home) > gerberick(a)acm.org > >Thanks >Dahl - - > >PS: Feel free to redistribute this message as you see fit. > > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - >- - - - - - - - - - - - - - - - - - - - - > > 1. Minimum 5- 10 years experience in applied cryptography > > 2. Ability to design and implement security applications that utilize > encryption technology > > 3. Extensive knowledge of X.509 standards for digital certificates > > 4. Detailed knowledge of all prevailing algorithms, DES, IDEA, RSA, > Elliptic curve, etc. > > 5. Algorithm development background not necessary > > 6. Intimate knowledge of all national standards for cryptographic > implementations such as ANSI X.9 working group standards > > 7. Intimate knowledge of all commercially available encryption > products from vendors such as Entrust, Verisign, Cylink, IBM, > GTE, etc. > > 8. Knowledge of legal implications of electronic commerce such > as ABA Digital Signature standard > > 9. Security consulting background a plus > > 10. Technical skill in TCP/IP, UNIX, internetworking technology > > > >

1 0

RE: 25,000,000 People
by mail＠sendmailco.com 17 Dec '03

17 Dec '03

Would you be interested in... * Sending out Bulk Email FREE for 30 Days? * Receiving 25 MILLION Email Addresses FREE of charge? * Sending out Bulk Email using your CURRENT Internet Account, without EVER having to worry about it being canceled? * Sending out a FREE Bulk Email Advertisement for your Business or Web Page to over 250,000 people per day? * Posting a FREE Ad for your business to over 25,000 Newsgroups in under three hours? To find out how to do all of this and more for FREE, email our autoresponder at: send(a)nim.com You MUST Place the word "FREE" in the Subject Line so our autoresponder mailbot can send you this FREE Information! To be removed from our mailing list, email our autoremover at: remove(a)nim.com You MUST Place the word "REMOVE" in the Subject Line so our autoremover mailbot can remove you from our mailing list.

1 0

Re: Florida Drivers Permits
by Q Mixmaster Remailer 17 Dec '03

17 Dec '03

silly(a)whip.ugcs.caltech.edu ((me)) wrote: > California has both the digitized picture and the mag stripe, and > they even get a digital copy of your thumbprint. Hello, Brave New > World. I wonder what, if anything, you could be charged with if that magnetic strip "accidentally" came too close to a degausser?

3 2

RE: 25,000,000 People
by mail＠sendmailco.com 17 Dec '03

17 Dec '03

Cypherpunks, Would you be interested in... * Sending out Bulk Email FREE for 30 Days? * Receiving 25 MILLION Email Addresses FREE of charge? * Sending out Bulk Email using your CURRENT Internet Account, without EVER having to worry about it being canceled? * Sending out a FREE Bulk Email Advertisement for your Business or Web Page to over 250,000 people per day? * Posting a FREE Ad for your business to over 25,000 Newsgroups in under three hours? To find out how to do all of this and more for FREE, email our autoresponder at: send(a)nim.com You MUST Place the word "FREE" in the Subject Line so our autoresponder mailbot can send you this FREE Information! To be removed from our mailing list, email our autoremover at: remove(a)nim.com You MUST Place the word "REMOVE" in the Subject Line so our autoremover mailbot can remove you from our mailing list.

1 0

Greetings
by dr261＠cleveland.Freenet.Edu 17 Dec '03

17 Dec '03

Greetings, everyone. I just discovered this list a few days ago and have been monitoring since then. It's pretty interesting. I'd like to get involved. I'm very interested in cryptography and mathematics, but I have very little cryptographic experience. (hm. Is there a Cypherpunks FAQ?) From the conversation that's going on, I am led to beleive that Cypherpunks is setting up a distributed system to break some cryptographic system or factor a large number. I would expect that a constant net connection would be a requirement to participate in such an interesting event. In any case, I have a 486DX-50 running Linux and I'm interested and curious and willing to learn and help in any way I can. -- ================================================================= Tobin Fricke, Alias Light Ray dr261(a)cleveland.freenet.edu TobinTech Engineering KE6WHF Amateur Radio The Digital Forest BBS (714) 586-6142, 28800bps

2 1

Re: Demagnetizing
by dr261＠cleveland.Freenet.Edu 17 Dec '03

17 Dec '03

Where exactly is the r/c circuit? Is it very small and in a label? Book publishers don't put them in, do they? Also, if the thing gets "burned out" by the magnet in the pad, what do libraries and such do where materials are reused? Just slap on another label thing? -- ================================================================= Tobin Fricke, Alias Light Ray dr261(a)cleveland.freenet.edu TobinTech Engineering KE6WHF Amateur Radio The Digital Forest BBS (714) 586-6142, 28800bps

1 0

Re: Greetings
by dr261＠cleveland.Freenet.Edu 17 Dec '03

17 Dec '03

Ah. By address space, you mean a set of possible keys, right? Is there specific software we use to test this 'address space,' or do we come up with our own? It seems that there ought to be a more exotic method other than a brute force attack. I don't know much about cryptography, but if there's a way to get "feedback" as to how "close" a key is to the real key, then some sort of genetic algorithm could be devised. Actually, perhaps not, since there are no "genes" envolved, just a big number. Hm. -- ================================================================= Tobin Fricke, Alias Light Ray dr261(a)cleveland.freenet.edu TobinTech Engineering KE6WHF Amateur Radio The Digital Forest BBS (714) 586-6142, 28800bps

1 0

Re: non-censorous spam control (was Re: Spam is Information?)
by Mark Grant 17 Dec '03

17 Dec '03

On Thu, 31 Jul 1997, Jeff Barber wrote: > Network bandwidth used for the purpose of email transport, > even with increased spamming factored in, is simply too low to justify > charging much for it. It will still be *way* cheaper than surface mail. Yep; which is why it's a bad idea. We don't need net postage to pay the ISP, we need net postage to pay *me* to read the spam. Making them pay $0.0001 to send a message will have little impact, but making them pay me $1 to read it certainly will (i.e. my filters could block all potential spam unless it includes a dollar of ecash). I have no problem with spammers subsidising my Net access, I just object to having to pay for their crap. > So unless the percentage of people who delete it instantly, sight-unseen, > is higher than I suspect or new tools make it easy to filter out all > spam, it's going to remain economically advantageous for the spammers > to target broadly. I've seen one spam in the last two weeks. The other 100k or so was blocked by my filters; I'm almost starting to miss it. When you actually sit down and analyse the spam most of it has so many obvious 'spam-tags' that you can easily work out a set of rules to catch them. The only disadvantage is that on a couple of occasions it's caught mail from friends when they sent it through a site which appends advertising rather than from their normal address. Mark

1 0