December 2003 - cypherpunks-legacy

RE: Revoking Old Lost Keys
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:47 AM 1/6/96, Frank O'Dwyer wrote: >On Saturday, January 06, 1996 09:18, Timothy C. May[SMTP:tcmay@got.net] wrote: >>Basically, you are screwed. Any revocation you attempt will not be trusted, >>as we will suspect the new "you" to be an attacker, perhaps an agent of the >>NSA or the Illuminati. In the view that "you are your key," the old you no >>longer exists. > >This is true, but the "old you" can be resurrected if you can get enough >people to believe your new key using any out-of-band means available >to you. You can also put a comment in your new key's uid explaining the Could you explain how "enough people" can get around a basic feature/limitation of the current PGP web of trust? Who, besides the originator, can revoke an old key? How many does it take? If a bunch of the "alleged" friends of Bruce could do this, could they not revoke the key of someone they simply wish to hassle? I agree that a new key can be generated, and a new "Please use this key, not the other one" message sent, and this may work, but I don't believe this revokes the old key and removes it from the keyservers. I could be wrong, as I am certainly no expert on the keyservers. The question is: is there a "majority vote" mode on the keyservers that causes them to remove a key if enough people claim it is no longer valid? --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

FW: Undeliverable: Re: Massey, CEO of Compuserve, on Internet
by blanc 17 Dec '03

17 Dec '03

From: Steve14571(a)aol.com Something else I want to know... Why is my mail going through microsoft.com? ....................................................................................................... There is an email 'alias' at Microsoft which was subscribed to the cpunk list, to receive and distribute the cpunk list to members of that alias. A new beta version of Exchange is being used on a test basis by some departments (apparently all of the cpunks at MS are using it), and the programmers recently encountered a "little complication" (to use a phrase from the movie 'Brazil'). I'm told that the problems were corrected, but that now the spoolers are releasing messages which were backed up while mail delivery was put on hold. I hate to agree with Timothy C. May, but it is probably best to "use technology " to deal with it for a day or so. .. Blanc

1 0

Why can't I get PGP from MIT
by post＠why.net 17 Dec '03

17 Dec '03

MIT won't let me get PGP or PGPhone. I know their server went down awhile back but, I have tried them several times and sent several e-mail requests. I thought maybe I was missing something obvious or maybe they are just really busy. I keep being told I'm not in the U.S. I have tried two different Internet service providers and my Unix account at Lockheed Martin Tactical Aircraft Systems. I understand why I would be denied when trying to get PGP from a commercial site but, under my personal accounts I get the same results. I requested that my providers be put on the "approved" list of domestic sites but still get the same results. My original e-mail request to MIT was sent roughly 3 months ago. All I want is clean copy of PGP for personal use. I have considered purchasing a commercial system but still would like to try PGP with the big keys. Thanks, Sid Post post(a)why.net

1 0

Re: Why can't I get PGP from MIT
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:47 PM 1/6/96, post wrote: >MIT won't let me get PGP or PGPhone. I know their server >went down awhile back but, I have tried them several times >and sent several e-mail requests. I thought maybe I was >missing something obvious or maybe they are just really >busy. I keep being told I'm not in the U.S. As I recall, they don't tell you you're "not in the U.S.," they tell you they cannot conclude in the affirmative that you _are_ in the U.S. This has to do with whether they have a record (DNS) of your site, blah blah. And the message about sending them e-mail affirming your status, etc., points out that the mail is handled manually and may not be gotten to for a while. This happened to me, with PGPhone, when they could not confirm my ISP (got.net) to be a U.S.-based service. I simply grabbed one of the "otherwise available" copies (it was either posted publically, or available at an offshore site, I forget which). This was several months ago, the day after it was released. I fired it up, concluded I was missing some pieces needed to make it work, and put it aside for the time being. For PGP, I always go to the offshore sites anyway, on principle. These sites are listing with numbing frequency in all the usual places. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Revoking Old Lost Keys
by David E. Smith 17 Dec '03

17 Dec '03

At 11:11 AM 1/6/96 -0800, tcmay(a)got.net wrote: >If one can safely and securely store a revocation certificate for later >use, why not just store the much shorter passphrase? If the security of the safely-stored passphrase is violated, a lot of trouble can be caused. There's not nearly as much that can be done with a stored revocation certificate. dave --- Sorry for any delayed replies, but business trips are so seldom announced. David E. Smith, dsmith(a)midwest.net, PGP ID 0x92732139

1 0

Re: Why can't I get PGP from MIT
by Alan Olsen 17 Dec '03

17 Dec '03

At 12:47 PM 1/6/96 -0600, post wrote: >MIT won't let me get PGP or PGPhone. I know their server >went down awhile back but, I have tried them several times >and sent several e-mail requests. I thought maybe I was >missing something obvious or maybe they are just really >busy. I keep being told I'm not in the U.S. There was a posting (either on the server or somewhere else) that claimed that the MIT site was having problems with .net and .org sites. (As well as a couple of others if I remember correctly.) The posting claimed that they had fixed the problem, but i guess not... | Remember: Life is not always champagne. Sometimes it is REAL pain. | |"The moral PGP Diffie taught Zimmerman unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

2 1

Re: USENIX anyone?
by loki＠obscura.com 17 Dec '03

17 Dec '03

At 11:31 AM 1/4/96, Matt Blaze wrote: >I'm going to be at the USENIX conference in San Diego later this month, >as are, I suspect, many other crypto/cypherpunk types. > >Any interest in a crypto BOF? I have organized a Remailers and other "Cypherpunkish" topics BOF. I think it is scheduled for Thursday at 6:30 - 8:30 -Lance ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Re: Mixmaster On A $20 Floppy?
by tallpaul＠pipeline.com 17 Dec '03

17 Dec '03

On Jan 06, 1996 12:16:57, 'Laszlo Vecsey <master(a)internexus.net>' wrote: >> >Question 1: Can you fit linux, pgp, mixmaster, etc. on the 135 Mb disk and >> >have enough useful space left over for a useful amount of data? >> >> [snip snip snip] >> >> But if I can squeeze everything I need to turn an arbitrary PC >> into a secure (modulo hardware) login session into 1.44 MB + boot image, >> I don't think there's a problem putting all the stuff you want on a >> 135MB disk. Hell, the _hard disk_ on my Linux box is only 80MB... > >Someone can get one of those tiny devices that slips on the end of a >keyboard connector and captures all the scan codes - you're better off >bringing the whole computer (laptop) along with your floppy. > First, I am not convinced that such devices exist in the real, practical world. They would require either storage hardware or radio transmitters, all in a package small enough to be undetectable to the naked eye. Second, I do not think it practicable that the cosmic-nasties (of one's chosen social bias) could, in the real, practical world, run black-bag jobs on tens of thousands of surburban garages as a prophylactic measure against teenagers "playfully" setting up Mixmaster sites. The software costs of quality crypto approach nil thanks to the terrific folks who brough us things like linux and pgp. It is, I think, easy for us to miss the giantic steps forward that these technologies represent. Imagine talking to an IBM-mainframe priest of not-too-many years ago about the idea of something like linux; imagine the same thing with an NSA bureaucrat about the development cost of a security concept/package like pgp! Move hardware costs downward and user-interface upward, and Mixmaster isn't a "black art" of cypherpunks. It is a parlor game for teenage slumber parties. That's the type of world I want to see. -- -- tallpaul -- Any political analysis that fits on a bumper sticker is wrong.

1 0

Re: Why can't I get PGP from MIT
by Lou Zirko 17 Dec '03

17 Dec '03

I have sent two requests myselt in the last two months that have gone unanswered. The request was to have isdn.net added to the allowed list. I know the initial rejection was the .net domain, but the location should not be hard to look up - just a basic whois. I got PGP from alternative locations, but still have not been able to get PGPhone. > MIT won't let me get PGP or PGPhone. I know their server > went down awhile back but, I have tried them several times > and sent several e-mail requests. I thought maybe I was > missing something obvious or maybe they are just really > busy. I keep being told I'm not in the U.S. <snip> > All I want is clean copy of PGP for personal use. I have considered > purchasing a commercial system but still would like to try PGP with > the big keys. > > Thanks, > Sid Post > post(a)why.net > > > Lou Zirko (615)851-1057 Zystems lzirko(a)isdn.net "We're all bozos on this bus" - Nick Danger, Third Eye -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzBLJocAAAEEAMlDzYJPYq0pvfMuSiKU0Y65L2nJql+qEJHYGjO5Pys4prDw YW1ooPWaqrPQAy/eyqrM7I9KNFDCtmaPxtgcPw2oEDfc/w6cPkrVzvovKLfHQvtg V/hHUekptSf6j525omrVAoM9MxVL3sEGCjn9VrTeC3h9upkfntHOJeL88i2NAAUR tB5Mb3UgWmlya28gPHppcmtvbEBkYXRhdGVrLmNvbT4= =Qlxm -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Internet & Porno on A&E tonite
by wlkngowl＠unix.asb.com 17 Dec '03

17 Dec '03

On Sat, 6 Jan 1996 10:54:55 -0600 (CST), you wrote: >Hi, >Just saw an add for a Investigative Reports show tonite on A&E dealing with >the Internet and some of the current issues relating to porno and privacy. What time?!?

1 0