December 2003 - cypherpunks-legacy

Re: get mix-installer. (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From adam(a)lighthouse.homeport.org Fri Jan 5 20:23:21 1996 From: Adam Shostack <adam(a)lighthouse.homeport.org> Message-Id: <199601060225.VAA21165(a)homeport.org> Subject: Re: get mix-installer. To: ravage(a)ssz.com (Jim Choate) Date: Fri, 5 Jan 1996 21:25:59 -0500 (EST) In-Reply-To: <199601060152.TAA04065(a)einstein.ssz.com> from "Jim Choate" at Jan 5, 96 07:52:17 pm X-Mailer: ELM [version 2.4 PL24 ME8b] Content-Type: text Content-Length: 367 Jim Choate wrote: | I would like a copy to use in my consulting business as well as put on the | Austin Cypherpunks ftp site. Both are fine. I assume that a copy was auto mailed to you; let me know if there is a problem. May I ask who pays to get mixmasters installed? -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: get mix-installer. (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From adam(a)lighthouse.homeport.org Fri Jan 5 20:23:21 1996 > From: Adam Shostack <adam(a)lighthouse.homeport.org> > Message-Id: <199601060225.VAA21165(a)homeport.org> > Subject: Re: get mix-installer. > To: ravage(a)ssz.com (Jim Choate) > Date: Fri, 5 Jan 1996 21:25:59 -0500 (EST) > In-Reply-To: <199601060152.TAA04065(a)einstein.ssz.com> from "Jim Choate" at Jan 5, 96 07:52:17 pm > X-Mailer: ELM [version 2.4 PL24 ME8b] > Content-Type: text > Content-Length: 367 > > Jim Choate wrote: > > | I would like a copy to use in my consulting business as well as put on the > | Austin Cypherpunks ftp site. > > Both are fine. I assume that a copy was auto mailed to you; let me > know if there is a problem. > > > May I ask who pays to get mixmasters installed? > > -- > "It is seldom that liberty of any kind is lost all at once." > -Hume > In a earlier message I received from Adam I mistook his auto-remailers scripts responce as a refusal to supply the afformentioned code. I apoligize for my ignorance and retract any negative statements or implications that I may have made. In the last year I have had a couple of local business people and about a dozen individuals ask about remailers and using PGP. I currently have a couple of state political activists in the gun lobby who have begun using it for internal communications. I am hoping to have another machine installed in the next couple of weeks with mixmaster available. It is my intention to run a remailer here in Texas with the help of the local cpunks (I hope) in order to demonstrate what the technology is capable of. I see this script as a major advance in making the software more palatable to the general populace. My current business plan is to educate several international translaters I work with about the technology. They work with foreign patents being applied for here in the US and they typicaly must sign non-disclosure agreements to get the contracts. Such technology may be something they find useful. Jim Choate

1 0

Jan 13 Mountain View CA meeting
by mrm＠netcom.com 17 Dec '03

17 Dec '03

Hi all, happy new year. The Jan 13 Mountain View, California meeting will be held again at Sun Microsystems, at Sparcy's cafeteria. That's building 21, in the set of Sun buildings near Shoreline Park in Mountain View. Take 101 to Amphitheater Parkway exit, turn left onto Charleston at the light (this street is also named Garcia at its far end) and follow the purple Sun signs for building 21. You'll drive down Charleston (Garcia) for about 1/3 mile and then turn right onto a road that in about 3 blocks takes you to B21. Please send mail if you have a topic you would like to speak about, and I'll send out a speaking agenda towards the end of the week. Marianne mrm(a)netcom.com mrm(a)eng.sun.com p.s. I'll bring bagels again but since I never got reimbursed last time around I think I will put out the donation jar this time ...!

1 0

WIRE TAP ON NET
by Douglas F. Elznic 17 Dec '03

17 Dec '03

E-MAIL-TAP NETS CRIMINALS The first-ever court-approved wiretap of an e-mail account has resulted in the arrest of three people charged with running a sophisticated cellular-fraud ring. The alleged mastermind, a German electrical engineer, advertised his illicit wares on CompuServe, where they caught the attention of an engineer at AT&T's wireless unit. The Secret Service and the Drug Enforcement Agency then got into the act and obtained the Justice Dept.'s permission to intercept e-mail messages between the alleged perpetrator and his accomplices. "This case represents the challenges in the future if we can't get ahead of the curve in technology," says a U.S. attorney, whose office is prosecuting the case. (Wall Street Journal 2 Jan 96 p16) -- ==================Douglas Elznic=================== delznic(a)storm.net http://www.vcomm.net/~delznic/ (315)682-5489 (315)682-1647 4877 Firethorn Circle Manlius, NY 13104 "Challenge the system, question the rules." =================================================== PGP key available: http://www.vcomm.net/~delznic/pgpkey.asc PGP Fingerprint: 68 6F 89 F6 F0 58 AE 22 14 8A 31 2A E5 5C FD A5 ===================================================

2 1

Re: Pi Stuff
by jim bell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 01:15 PM 1/5/96 -0800, you wrote: >Various amazed people on the Pi thread wrote: > > > But BTW, isn't it interesting, that news item from a few > > weeks ago, on an algorithm for determining individual bits > > in Pi, regardless of whether you've calculated all the > > previous ones. Only problem is, it only works in > > hexadecimal (and, obviously, binary, etc, not decimal. >A few quick comments. The notion that one might be able to >compute digits of Pi efficiently at any starting point in the >number is not late-breaking news. The Chudnovsky brothers >developed a formula which permitted them to do this a number of >years ago, and used it to compute Pi to several billion digits. While I'm not an expert at this, I think you're misrepresented the Chudnovsky result. They formulated an equation that allowed "you" to continue the calculation past "N" digits as long as you had the result that far. As far as I know, they DID NOT generate any formula for the generation of isolated digits of pi, the more recent news. I'm signing this message after having turned off word-wrap in Eudora. I'm told this my help my clearsigning process. Could somebody verify this? - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAi1zvWcAAAEEAKmSqngLWK2N2gOJKPtjF9VCfSkXY+XUZBRCbbFU71uH/dLX C2Uq6wFS8alRgMc3rp90JnnJ/6eJqXwMjCunogwucWOaU7S/w+OwjOG9fUqsXIA6 2j25Wtjce65mbp0TKLAzwMb/P/Qq7BlclqhuKzfVBH7dIHnVAvqHVDBboB2dAAUR tBFKYW1lcyBEYWx0b24gQmVsbA== =G3LA - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMO3ArPqHVDBboB2dAQFXfQP+OhdkTw+3TFF4x97Or4hBRGSCd015+ZfJ 1wTov5MuKgfHlVEqml02mi3RJQSD1WYryysMkcQKrGS+X6IULolxtasKrXEUBw5P fIiEAc+ueY68XZULGTL0IpsUDhUYXTWRaP9l64iELrdtmvtDQAd0zxfGDAoeyhvO goZCWxWXUqs= =ZGyP -----END PGP SIGNATURE-----

2 1

Re: Revoking Old Lost Keys
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:07 AM 1/6/96, Bruce Baugh wrote: >I'd like to bring up a problem I haven't seen addressed much yet, and which >I think is going to come up with increasing frequency as PGP use spreads. > >The problem is this: how can one spread the word that an old key is no >longer to be used when one no longer has the pass phrase, and cannot >therefore create a revocation certificate? Basically, you are screwed. Any revocation you attempt will not be trusted, as we will suspect the new "you" to be an attacker, perhaps an agent of the NSA or the Illuminati. In the view that "you are your key," the old you no longer exists. Perhaps you could just move to a different city, change your name, and create a new key. (However, be sure you write down your passphrase and other salient information to handle your next memory loss.) > >In my case the problem is medical: thanks to autoimmune problems, I get >random memory loss from time to time. Sometimes it's big - like an entire >semester of my sophomore year of college. Sometimes it's small - like three >old pass phrases. So there are keys of mine floating around the key servers >that I don't want used, and which are just taking up space. Pardon me for being politically incorrect (*), but anyone who has these sorts of memory lapses should certainly write down the passphrases! While it is true that writing down a passphrase increases the risk slightly that a black bag operative will sneak into one's house and use his Minox to record the passphrases, in practice this is a minor risk. Especially compared to the immediate risk of losing or forgetting the passphrase. (* I said I was being "politically incorrect" because I've found that people these days don't want their defects and weaknesses commented upon by others, even when they mention them themselves. Thus, cripples don't want anyone to comment on their handicaps, and so on. Someone on this list with "Multiple Personality Disorder" got mightily offended when someone else mentioned MPD in a joking way in a post. Others freak out at innocent remarks, seeing their own demons.) So, if you are losing entire semesters worth of memory, you might want to start writing a lot of stuff down. Seriously, this is an example where "escrow" works. Seal an envelope with your passphrase and any other stuff you want to remember, and leave it with your lawyer or escrow agency with instructions to only turn it over to you. Same as a safe deposit box, unless you forget the key. (You could forget you have a lawyer, so better write that down somewhere, too.) I've not forgotten my PGP passphrase, but then I've only had one PGP key in the last several years and I've written a note to myself someplace which describes what the passphrase is in terms I think would only be meaningful to me. Not fully secure, but nothing really is. And secure enough. If you've had several keys in several years, and yet you are risk of forgetting entire semesters, maybe you ought to think about whether encryption is all that necessary for you. (I rarely see the need to encrypt, even as I cherish the ability and present right to encrypt, so I naturally wonder what it is all these people who seem to be encrypting nearly every private message they send are really concerned about....just my opinion.) I hope all turns out well, and I hope my candid answers to your questions are not too politically incorrect. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 3

"Microsoft.com" added to my KILL file
by tcmay＠got.net 17 Dec '03

17 Dec '03

After getting another batch of bounce messages from Microsoft's Postmaster, I have reluctantly decided to filter out all messages from Microsoft.com until they fix this problem with Microsoft Exchange. Their latest message was: ***** Your message did not reach some or all of the intended recipients. To: cypherpunks(a)toad.com Subject: Foiling Traffic Analysis Sent: 01/05/96 08:51:18 The following recipient(s) could not be reached: Ron Murray on 01/05/96 08:51:18 The recipient name is not recognized [MSEXCH:MSExchangeMTA:northamerica:RED-70-MSG] ***** Rather than fight their misconfigured mail system, or try to convince them to change their ways so as to conform to accepted practices, I'll just use technology. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Pi Code.......
by mpd＠netcom.com 17 Dec '03

17 Dec '03

In case anyone wants to play with the little program that emits bits of Pi, a Fortran version is available on the Web at... http://www.cecm.sfu.ca/~pborwein/PISTUFF/FORTRAN -- Mike Duvos $ PGP 2.6 Public Key available $ mpd(a)netcom.com $ via Finger. $

1 0

Re: Revoking Old Lost Keys
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 03:10 AM 1/6/96 +0000, Michael C. Peponis wrote: >On 5 Jan 96 , Bruce Baugh wrote: >Another problem, let's say I get your public key from Bob, who signed >your key, and Bob knows you have revoked your key, but I don't, so >what happens to my copy of your key? > >Since there is no revokation certificate, I am forced to take Bob's >word that you have indeed want to revoke your key, but have no way of >verifying that without talking to you, and agin I have to go through >the same verification process that Bob did. I know Bruce and his problem is quite real. I happened to have the three keys that he is wanting to revoke in my keyring. (And one of them he had forgotten he had made at all.) It would be nice if there was a way to use the "web of trust" to certify a key revokation in the same way that one signs a key. Basically get a couple of your friends who are accepted in the crypto community and have them vouch for the actual loss of the key(s). It would certainly help patch the problem. (It might open up things for spoofing anyways. There would have to be a way of overriding such a thing with the real key, but that would require the passphrase. (Which should be available if not lost.)) An idea at least... -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMO495OQCP3v30CeZAQHObQf/VtMoPzpBqx9wU2rsrHkMc5K4LF2PbZdj QboPyoR0c56zIGPiDDoRed4aiy8ylBlPjEGdSeLjoVysbY+yfWz1GDzsrmsdNw9G tAE7DxX88kk9ym4ixy+3CIsFqKrHn1CBh64DAsoJzXRLgwEhPENLmqf0VXgRkYnI Dd7UE3fF15sMEEVdGYXBqEy7r3e83R9dW7ap/z8wy/sM5U8pzo0SwRrqEFVNe2/g 8rYDF8uFgDjbCrU60UVqFq3ipRbGDBGMI9xSLqpSkBHuSOk0si3sNqvSM09WuWFE LjkrVWPvZNaw1DbuQT7v2FTXNrNnfBsVH9MicM2fednOV0Fe7ZIoZg== =sT8b -----END PGP SIGNATURE----- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "Governments are potholes on the Information Superhighway." - Not TCMay

1 0

Re: Windows Eudora and PGP
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:04 PM 1/5/96 +0800, Ng Pheng Siong wrote: >On Fri, 5 Jan 1996, David K. Merriman wrote: >> I've gotten ahold of the WPGP mentioned here a couple days ago, and it seems >> to be working just fine, for me. Even easier to use than PIdaho, though not >> quite as 'full-featured' (ie, remailer support, etc). > >Aegis, which was mentioned on this list some months ago, is the best >of the lot, IMHO. No remailer support: You can talk to a remailer from >an email program. ;) I use Aegis right now and I have only one major problem with it. It does not have a facility to do word wraps in the program before signing. This means that if you use it with Eudora and word wrap is on, all of your sigs are going to be bad. (And hitting return on every line before feeding it through is a pain in the ass.) On the other hand, I have heard that WPGP is not very stable under Win95. Can't win for losing... Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "Governments are potholes on the Information Superhighway." - Not TCMay

1 0