December 2003 - cypherpunks-legacy

Krispin Preaches Revolution!
by Anonymous 17 Dec '03

17 Dec '03

Kent Crispin wrote: > On Thu, Aug 28, 1997 at 06:17:09PM -0500, snow wrote: > > Well, the current system stinks, but enough people are buffalo'd into > > thinking that it works, so it is doubtful that it will get better. > People are not "buffalo'd" -- they are happy with a system that gives > them a good life. Therefore, it has to get worse before it gets > better. I am happy that Kent has finally realized the need to Monkey Wrench the "system" to the point where enough citizens get off of their too- comfortable asses and address the issues which are leading to an increasing number of their fellow citizens being persecuted and fucked over by the government. "Then they came for the fat-asses, and I was a fat-ass, but nobody spoke up." -Roseanne "If you want to keep people from claiming they're Jesus, you have to break a few eggs." -Janet Reno/Pontius Pilate Now that Kent has realized, like McVeigh, that "it has to get worse before it gets better," perhaps he is ready to break the Big Egg. I'll be more than happy to chip in to fill Kent's private plane with fuel, and Peter Trei is at the airport, right now, stripping the identifying numbers off of Kent's aircraft. (Ever since he started forging posts to the list, Peter's gotten really radical.) TruthMonger {Now that we've got Peter Trei forging posts and Kent Crispin is ready to nuke D.C., how long can it be before we convince Blanc to bomb a daycare center?}

4 3

Encryption: yet another reason
by amp＠pobox.com 17 Dec '03

17 Dec '03

Yet another reason why we need ubiquitous strong encryption... >From The Wall Street Journal Law: News Concern Denies Allegations It Spied On Pager Messages NEW YORK -- Breaking News Network of Fort Lee, N.J., denied prosecutors' allegations that it illegally intercepted sensitive pager messages intended for New York City officials. Carl Rowan Jr., an attorney for the company, said the concern will fight the charges, announced Wednesday by Mary Jo White, Manhattan's U.S. attorney. Mr. Rowan said the company believes two former volunteers fabricated information that led to the prosecutors' charges. Breaking News said it uses a network of volunteers to listen to police scanners and other public radio traffic. The company then distributes information, such as the locations of fire and police activity, to news organizations paying for the service. "The company is absolutely outraged at how it has been treated and believes that what is really involved here is an effort to intimidate and embarrass a news-gathering organization," Mr. Rowan said. According to a complaint unsealed this week, Breaking News and people affiliated with the company allegedly used tracking software and a "cloned" police pager to illegally tap into alphanumeric messages sent to high-ranking police, fire-department and city officials. ------------------------ Name: amp E-mail: amp(a)pobox.com Date: 08/29/97 Time: 11:12:34 Visit me at http://www.pobox.com/~amp == -export-a-crypto-system-sig -RSA-3-lines-PERL #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/) == 'Drug Trafficking Offense' is the root passphrase to the Constitution. Have you seen http://www.public-action.com/SkyWriter/WacoMuseum ------------------------

1 0

Stealth Helicopters
by Anonymous 17 Dec '03

17 Dec '03

> "Like them new Stealth Helicopters, equipped with devices to drown out > the sound." Or very quiet private jets. I saw a small, unmarked jet plane tailing and tracking an urban police helicopter just the other night while out on a walk in a deserted commercial district. Its light signature resembled Vader's Imperial Shuttle, incidentally. -THE LIE

1 0

RE: ASK ToolKit Clarifications
by Phillip Hallam-Baker 17 Dec '03

17 Dec '03

For my comments on snakeoil see: http://crecy.ai.mit.edu/snakeoil/ Follow the navigation bars through 'key distribution" to "Monkey Wrench" Despite the hype KeyGen does not "throw a monkey wrench" into anything. It is unfortunately nothing particularly new. It is simply an example of the type of technique that is commonly used in conjunction with a public key system to keep keying material fresh while avoiding additional public key exchanges. >Unfortunately, I cannot talk about those things that are being patented, but >maybe in the near future. I hope you are not about to claim a patent on the use of one way hash functions to create keying material. I have prior art on that dating back to 1993 and I wasn't the first to discover it by a very long chalk. I suspect that the internals of Photuris probably contains most of the KeyGen proposal. >The keys are both random and unpredictable -- meaning that you will not be >able to deduce what the next key is even if you have any key that was used >in the past. The system does not depend on the secrecy of internal >algorithms for security. What about hard coded internal parameters? If you can avoid the need for an initial insecure exchange your magic box means you don't need the synchronisation technique at all. >We are not blindly implying that applications using the ASK ToolKit are >unbreakable. However, the toolkit provides the means for intrusion >detection and prevention. We know of no method this simple that does that. I know of many, the problem is that most of them arn't much good. The only exceptionaly simple schemes I know are Diffie Helleman and RSA. D-H is certainly simple. It is astonishingly simple in fact and much easier to explain to someone than MD5 or SHA. >The toolkit provides a number of bells and whistles to allow the developer >of an appliction using it to do many things like change keys as often as >wanted -- even every bit (not practical) or re-synchronize (which is >different from re-initializing). It also allows the last session >information to either be stored in encrypted form on the machine or removed >to a portable medium. OK how about the symmetric key exchange system from Shen? You already have exchanged a private key S beteeen the parties (e.g. used public key or you have a password established). You don't want to exchange the password over the wire en-clair of course. Nor do you wish to use the shared secret as the encryption key over long periods of time. One option is for party Alice to chose a random session mask M and send Bob M, The session key is then K = M XOR S. If the encryption system used is secure both parties can use the derrived session key without problems. A better solution however is for Alice to chose a random token R and send Hash (K, R), R to Bob. She can also use the XOR mask trick as well to decouple key exchange and session key choice. This is a massive advantage if the text you want to exchange has already been encrypted. i.e. we calculate M = K XOR S rather than chosing M at random. >The ToolKit does not provide the initial strong authentication needed to >start the process off. There are many very good methods for doing this, so >why should we bother. BECAUSE YOU GREAT PUDDING HEAD THAT IS THE ONLY HARD PART. Techniques to keep symmetric key material fresh indefinitely have been known for years. Kerberos is full of them. So incidentaly is Windows NT which happens to have a lot of similar ideas at least with respect to authentication. The GSSAPI probably has the same stuff burried inside it somewhere. >The claims we make are not so much for the ToolKit itself but for the >applications that we envision can be developed given the ingenuity of the >developer. We invite everyone who has a genuine interest in possibly >using the ToolKit, >and who is not just tossing flame about, to contact us with their questions. >If you are a responsible consultant or represent a responsible organization >and can sign an NDA, then we would be glad to fill in the details. This is the whole big problem. Most people I know who are interested in security worry about the competence of their security expert. So the obvious thing to do is to hire another security expert to audit their work. That is not possible if there are NDAs. Signing an NDA to not reveal source code is one thing, signing one to not use a mechanism is quite another. The capabilities you describe can be easily performed using conventional techniques. The only case in which NDAs normally come up in security work is when actual source code is being exchanged. Even then the norm is for the provider of the security toolkit to be providing their their trade secret source to the purchaser rather than this happening the other way round. As for licensing terms that relate to the utility of the functionality rather than the cost of doing the work these tend to be limited to cases where the selling party has an established product of known quality protected by credible patents. Jim Bizdos meets these criteria, you do not. Phill

1 0

Goodlatte: Internet challenge to sovereignity
by Lucky Green 17 Dec '03

17 Dec '03

>From a post to FC: >At the computer in a Roanoke County library on Tuesday, Goodlatte searched >the World Wide Web for casino home pages to bolster his point. Several dozen >popped up. > >"This is a $200-million-a-year business that could grow to $1 billion in >the next >few years," he said. "The Internet is a challenge to the sovereignty of >civilized >states and nations to decide what is appropriate and decent behavior." Oh really? What a pitty. :-) --Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. DES is dead! Please join in breaking RC5-56. http://rc5.distributed.net/

1 0

info
by EHaile＠aol.com 17 Dec '03

17 Dec '03

Please send more details...thanks

1 0

Snuffle Availability
by John Young 17 Dec '03

17 Dec '03

Dan Bernstein's 1990 version of Snuffle posted to sci.crypt remains available: ftp://coast.cs.purdue.edu/pub/tools/unix/snuffle.shar

2 1

Correction about who opposes crypto regulations....
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:16 AM 9/8/95, hallam(a)w3.org wrote: >>Nope. but the patriots & the cyPHerpunks share a common goal, and belief >>that it is none of the government's business what we think or want to >>share with our computers. > >Poor you, the only major political party to come out with a pro crypto >statement >is a socialist party. On the contrary, the Libertarian Party has come out strongly in favor of cryptography and privacy, and they are consistently either #3 or #4 in popularity. (I believe Peace and Freedom is usually #4 and LP is usually #3.) Their home page (http://www.access.digex.net/~lphq/lphq.html) says: "The LPHQ is the center of activities of the Libertarian Party, the third largest political party in the U.S. We stand for individual liberty, both in terms of personal and financial freedom." It is impossible to argue that the Libertarian Party is opposed in any way to the right to encrypt, and their 1994 platform makes this clear: "We oppose all proposed regulations of civilian research on encryption methods. We also oppose government classification of such research or requirements that deciphering methods be disclosed to the government." I point this out not to argue in favor of the LP here, but to correct a seriously incorrect statement. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1

Shams and Shame
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:34 AM 9/8/95, Pat Farrell wrote: >I am even willing to type in some, but that is known to cause typos, >as I can't type, and even spellcheckers can't tell real words >such as 'sham' from 'shame' Yeah, it's a real sham you can't spel. --Tin May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: Greetings,
by Peter Trei 17 Dec '03

17 Dec '03

> From: Jack Holt <jholt(a)intrcom.com> > To: <cypherpunks(a)toad.com> > Subject: Greetings, > Date: Fri, 29 Aug 1997 12:03:39 -0500 > Reply-to: Jack Holt <jholt(a)intrcom.com> > Hello, I would like some information about offshore banking and opening a > checking account. Thank you. Jack Holt 1004 Lakewood St. Ozark,Mo. 65721 > U.S.A. > Phone no. 417-485-7038 email jholt(a)intrcom.com I am interested in a > checking > account. We seem to be getting a rash of clue-free queries today. Was the cypherpunks address mentioned on some general media article? Peter Trei trei(a)process.com

2 1