December 2003 - cypherpunks-legacy

Re: Privacy Without Tears
by lunaslide＠loop.com 17 Dec '03

17 Dec '03

>At 05:53 PM 2/10/96 -0800, Lunaslide wrote: > >>If everyone not only has a link to these pages in text, but also has their >>"PGP secured!", or similar little graphic on their pages, linked to these >>sites as well, it would save a lot of people a lot of redundant explaining >>and it would help spread the word about PGP like wildfire to the masses. > >I like that a lot! A nifty graphic would be the old-fashioned engraving of a >padlock on the O'Reilly book about PGP. There have also been graphics handily prepared by a member of this list. Regretfully, I forget the URL and who it was from. Anybody got that for us again please? lunaslide "Prohibition... goes beyond the bounds of reason in that it attempts to control a man's appetite by legislation and makes a crime out of things that are not crimes... A prohibition law strikes a blow at the very principles upon which our government was founded." - -- Abraham Lincoln On the meridian of time there is no injustice, only the poetry of motion creating the illusion of truth and drama. Henry Miller ________________________________________________________________ Digitally sign your mail too! -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCPAzEX3QEAAAEEAOGQjhnqGH29pO1WDaXs5GFOVPhCBWyYEk9XEwRmscjveWzH AhA6DeOA480zWNqQURyqE2yPmR8WzT+OXYqmeiQiycKyFA41Vs/Ruf+gXXxe7uXS L5BK3K8oKbfoH0D5/TAkMT4r6BprXFQz4pFc3gY2SSaSPElpMjKHaKBsRsyRABEB AAG0HUplZmYgQ29ubiA8bHVuYXNsaWRlQGxvb3AuY29tiQCVAwUQMRffHzKHaKBs RsyRAQGNhwP9E9xEZ9/LCKnhgtnrqgD7pDoXG2pCy8FoyfFjoImGkG+jF1wELXmB Z0mf8F8CgYkys0mif1XeGDMelr1gzlZAm6LgQt4kcvztMW/aRLn18QP+iwltVT/L p8D37mitOjvuk46sWgAChIaPPPIeg/EaYQjQkmlpWKsEYIoTRy+E8mU= =4Gku -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Regarding employee rights on company equipment
by Leslie Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > From Edupage Feb 8, 1996, > > INTERNET USAGE POLICIES > Neal J. Friedman, a specialist in online computer law, says that "employees > are under the misapprehension that the First Amendment applies in the > workplace -- it doesn't. Friedman is only pseudo-right: IE, his arguement makes sense but courts have not always followed this reasoning, though: if you're really interested in this topic, investigate rulings where an employer has read an employee's voicemail. The key concept is "reasonable expectation of privacy." - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMRvoHSoZzwIn1bdtAQGA5AF+NLNypUxQ1E5/X6smpiY215d2R1O0A/Y0 n0hlXF9lpZNg6y+qlLWR5qZc00PZ5HpX =NI4R -----END PGP SIGNATURE-----

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

On Wed, 7 Feb 1996, Jordan Hayes wrote: > > it _is_ anonymous ... > > And then: > > > can be refilled at ATMs > > You make a deposit or something? How does the transaction clear? > When they finally look in the envelope, they credit the card? > > Or do you mean just 'anonymous' between the user and the merchant? > > /jordan > sorry i wasn't clear: it is anonymous between the user and the merchant, and between the user and the card distributer (in this case Visa). "Refilling" at ATMs is essentially a download of "cash" from your bank account into the card.

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

On Fri, 9 Feb 1996, Jim Small wrote: > DO you know where I can find glide.c , or (newer) to bruteforce > .pwl files? http://www.c2.org/hackmsoft/ There will also be a utility for extracting and decrypting file sharing (Win95 as server) passwords as soon as the code is refined and the ReadMe is written. -rich

1 0

Re: DSN
by um＠c2.org 17 Dec '03

17 Dec '03

Bill Stewart <stewarts(a)ix.netcom.com> wrote: >>[RSA in 5 lines of Scheme, deleted.] >Got any short prime-number generators? I am writing some more Scheme code (not optimized for size, though). Have a look at http://www.thur.de/ulf/crypt.scm -- Ulf Möller * E-Mail: <um(a)c2.org> * WWW: http://www.c2.org/~um/

1 0

Re: Choices
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:05 AM 2/11/96, "A. Padgett Peterson P.E. Information Security" >Think I have been consistant - am FOR things which add to my choices and >AGAINST those which reduce the choices available. In general I do not >mind paying a delta for increased choice so long as it is small No, I don't think you're consistent. "Tim's Fine Televison Sets" does not like the idea of having to put CC (and, soon, V-Chips) in its t.v.s. Men with guns are telling him he must comply, or else. Your "am FOR things which add to my choices" ignores the fact that mandatory closed-caption hardware is an infringement on the basic property rights of someone who offers products for sale. Those who want CC devices, or V-chip devices, or automatic text-to-speech converters are of course free to buy them, if someone is selling them. They are not free to demand that my widget include them. --Tim [This Bible excerpt awaiting review under the Communications Decency Act] And then Lot said, "I have some mighty fine young virgin daughters. Why don't you boys just come on in and fuck them right here in my house - I'll just watch!"....Later, up in the mountains, the younger daughter said. "Dad's getting old. I say we should fuck him." So the two daughters got him drunk and screwed him all that night. Sure enough, Dad got them pregnant....Onan really hated the idea of doing his brother's wife and getting her pregnant while his brother got all the credit, so he pulled out before he came....Remember, it's not a good idea to have sex with your sister, your brother, your parents, your pet dog, or the farm animals, unless God tells you to. [excerpts from the Old Testament, Modern Vernacular Translation, TCM, 1996]

1 0

Building in Big Brother
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Building in Big Brother: The Cryptographic Policy Debate Edited by Lance J. Hoffman Springer Verlag Publishers Copyright: March 1995 Price:$29.95 ISBN 0-387-94441-9 _________________________________________________________________ "If you ever wondered how a particular computer technology could attract the interest of the directors of three intelligence agencies, the heavyweights in the computer industry, a gang of programmers turned freedom fighters, and the President of the United States, you need look no farther than Building in Big Brother. This book outlines the next civil liberties battle in the United States." - Marc Rotenberg, Electronic Privacy Information Center "One-stop-shopping for even the most sophisticated analyst of the policy wars over cryptography." - A. Michael Froomkin, Associate Professor of Law, University of Miami Law School "Lance Hoffman has compiled an extraordinarily useful and well balanced collection of materials on cryptography and its applications. This book will instantly become a definitive compendium." - Peter G. Neumann "Though Lance Hoffman is a dedicated opponent of current government policy, he has assembled a volume that should be -- and will be -- on the desk of every cryptographic policymaker in Washington. He has accurately recorded the many voices in a debate that will profoundly affect our future, for good or ill, well into the twenty-first century. This book is an important contribution to the history of encryption. It is an even more important contribution to those who are struggling to shape that history." - Stewart Baker, Steptoe & Johnson (formerly General Counsel to the National Security Agency) "An authoritative source of political writings by the major players in the crypto revolution." - Philip Zimmermann, Creator of PGP _________________________________________________________________ Includes Steven Levy's peerless "Cypherpunks vs Uncle Sam" and other Shortstop-proof cpunx ammunitions.

1 0

Anonymity
by don＠cs.byu.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In a project relating to the need for anonymous remailers, I would like to find out about someone in particular. (I would like to do so without the resulting information getting circulated any more than it probably already is.) Specifically, I have a full name and an email and am curious how much information can be collected. (whoever has those US-population CD's, that's the kind of thing I'm looking for) Preferrably I would like to go from the email address only to a SSN or address or something unique, but I will make the two of them my starting point if necessary. The point being, of course, that anonymous remailers are the only thing that keeps many email addresses from becoming a life history. Anyone who can help me research please send PGP encrypted (key 0x994b8f39) mail. Thanks -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMR2C0cLa+QKZS485AQFGNgL/XIOSJqabFsiHa9xtwWb1kltGbjcMnLZ4 appMShASZNBUULl9dj7qwyhSxVosgaaKIHPMd9H4DiywRG47WYXxqbKDI1dBSA+l f7Wy68QYA0RVtL9oci6z+w6UGpwfRbnV =rP7B -----END PGP SIGNATURE-----

1 0

"internet underground" magazine
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

just went to Barnes&Noble to check out magazine titles on the Internet/cyberspace, and walked away with 10 separate titles!! anyway, there is a new one that will be especially appealing to cpunks here. I haven't seen it mentioned here: "internet underground". issue #3 has interesting articles on - web transaction tracking, by S.Garfinkel - "my secret life with Phil Zimmerman", S.Garfinkel - how to send anonymous email. mentions cpunk remailers. by editor S.Ellerman plenty of other fluff. maybe some people here may want to contribute. often when magazines start out they are hungry for writers and getting into them is not as hard. I suspect "internet underground" may end up covering cpunk topics regularly with or without anyone's help from here. (oh, the spooks are rolling in their coffins. heh.)

1 0

The Decense Project
by Ray Cromwell 17 Dec '03

17 Dec '03

The Decense Project A few days ago I was reading Clarinet Newsbytes Top news. It read like something right out of 1984. "Germany cracks down on AOL and Compuserve", "Japan busts Japanese porn web site", "French bans web sites with banned book", "China issues internet regulations", and "Clinton signs Telecom bill" The other shoe is starting to drop. The ante has been raised as governments around the world are trying to control the content of the Internet. But the politicians writing this type of legislation have no clue what they are really dealing with. They are are part of a centralized organization with a centralized philosophy trying to cope with something inherently decentralized, non-physical, and constantly evolving. We all know the genie is out of the bottle. Let's write some code to keep it that way. Enough of the rhetoric. Decense is the name of what I hope to be, a family of software protocols designed to "decensor" the net. I'm contributing the first, and I hope, most useful piece. I hope others will join me in developing this software, making it more robust, and distributing it across the net. What is Decense? The first piece of the Decense software is designed to provide "penet" like double-blind anonymous transactions for the http protocol. It is written as a cgi-bin script which provides a seamless mapping between anonymous ids and remote web servers. Servers running Decense can be chained like anonymous remailers to increase site level security. Decense works as follows. The server maintains a database mapping anonymous ids to url directories. For instance 'foo' -> 'www.c2.org' as an example. The anonymous ids are stored as md5 hashes so that if the site is ever compromised, the db cannot be used to get a complete listing of all anonids<->sites. The attacker is forced to hash and compare each one he is looking for. [yes, he still gets a listing of all the urls, but chaining takes care of that to some extent. In the future, I want to use the unhashed 'anonid' as a key to a symmetric cipher to encrypt/encrypt each url field of the database. The db would be stored as (hashed(anonid), DES/IDEA(anonurl) ^ key ^ value ] A url is constructed as follows http://<decense.server.host>/<cgi-bin-dir>/decense/<anonid>/<relative url> Decense will lookup the anonid in the database, and map it to a url, such as "http://foo.bar", it will then append the relative url portion yielding "http://foo.bar/<relative url>" It will proceed to fetch the document at that URL. If the document is an html or text file, it will scan the file replacing any references to the remote server with the decense url. Example: Let's say I am running decense at http://foo.bar with an anonid of 'c2' which maps to www.c2.org. If I then request http://foo.bar/cgi-bin/decense/c2/index.html and index.html contains the following URL <img src="/c2.jpg"> the URL will be changed to <img src="http://foo.bar/cgi-bin/decense/c2/c2.jpg"> in the returned document. Future plans for Decense I am heavily loaded down with work right now. But future versions of Decense should have 1) the ability to filter out mailto: and instead, substitute in a url pointing to a post/mail cgi-script which sends mail to the real recipient through an anonymous remailer chain. 2) the ability to proxy through SSL servers for encryption 3) the ability to handle authenticated urls properly 4) the ability to handle a document being located on multiple sites, with optional shamir sharing, so that a site is a) either picked at random to retrieve a document or b) a portion of the sites are picked, and the document is fetched and reassembled via a sharing protocol from those sites. I will release source code in about a day, I'm now alpha testing it. If you would like to contribute to Decense, send mail to rcromw1(a)gl.umbc.edu -Ray rjc(a)clark.net

2 2