December 2003 - cypherpunks-legacy

Re: COO_kie
by Yanni 17 Dec '03

17 Dec '03

> So, Folks, how does one manipulate the cookie in Netscape so that the > user can control what Netscape sees??? > > Michael E. Carboy > carboy(a)hooked.net Simple, read the cookie specs on the NetScape site. :) http://home.netscape.com/ -jon Jon S. Stevens yanni(a)clearink.com ClearInk WebMagus http://www.clearink.com/ finger pgp(a)sparc.clearink.com for pgp pub key My apologies for the loss of bandwidth. :-)

1 0

Re: V-chips, CC, and Motorcycle Helmets
by Deranged Mutant 17 Dec '03

17 Dec '03

> It makes me very wary of them. What gets me are all the people here who > talk about them as if they will have useful features. They will be about as > useful as the ratings on video games. ("Hey, theres a cool one! This one > has flying mangled bodies! Its OK though. No sex!") What's the line in the song "Father Bruce"? "The word to kill ain't dirty I used it in the last line but use a short word for lovin' and you wind up doin' time..." --- "Mutant" Rob <wlkngowl(a)unix.asb.com> Send a blank message with the subject "send pgp-key" (not in quotes) for a copy of my PGP key.

1 0

Re: Using /dev/random for PGP key generation? Be Wary
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 10:56 AM 2/12/96 -0500, rngaugp(a)alpha.c2.org wrote: >... >I am unsure about using my modification, together with these drivers >that are not connected to a real hardware RNG. In what way would the use >of these drivers' methods of gathering entropy be superior to PGP's >method of getting entropy from keyboard timing? If you choose to do >something like this, you should think carefully and make a careful study >of the code. If there are no common-mode sources, xoring two streams will not reduce the entropy. If you use PGP's keyboard timings for one stream, and (e.g.) disk drive randomness for the other, the output of the xor of the two streams should have at least as much entropy as the best of the two. However, I would be worried if /dev/random and PGP were both using keyboard timings to generate entropy. Bill

1 0

Portland, OR, Key-Signing+
by Bruce Baugh 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- ANNOUNCING: THE SECOND QUASI-MONTHLY PORTLAND CYPHERPUNKS SOIREE AND KEY-SIGNING Yes, it's that time again. When: Saturday, February 26, 1996 come 4:30-5 pm to join those of us watching the new episode of MYSTERY SCIENCE THEATER 3000, or come 7:30-8 pm to avoid it Where: my apartment, in SE Portland e-mail me for directions This meeting is about to be announced in a bunch of local and regional newsgroups; I hope to get a crop of novices as well as the more experienced folks. A keysigning will take place, with instructions for it mailed out later in the week. I have a PC running Windows 95, and it'll be available for use in key verification and the like. If anyone has a portable computer with another OS to bring, please do. Proposed topics: 1) Alan Olsen is working on an e-mail client with PGP integration. Let's talk interface. 2) I'm working on a guide for crypto newbies. Come and tell me what works or doesn't. 3) So, just how lame is the Communications Decency Act, anyway? :-) 4) Whatever of crypto relevance is on your mind. Since there was confusion last time about expectations, let me spell out of a few things up. 1) Since some participants have expressed the desire not to be photographed, no cameras. 2) Insofar as others have other concerns, e-mail me. No guarantees on what we can do or not, but I'd like as many people as possible to be as comfortable as possible. 3) What's discussed during the soiree _will_ be fair game for comment later. Interesting insights, dramatic news, stunning rhetoric, the whole deal, may all be continued on the net later. There are, alas, some restrictions on partying tools, imposed by my chronic immune problems. If you smoke, a) please hold off if possible or b) take it outside and away from my door. (I have a nice back patio suitable for this purpose, since I never use it for anything.) I will have quite a variety of drinks on hand, but please, leave the alcohol at home. Ditto for any scents or perfumes you might usually wear. This way I get to have fun, too. :-) I really hate to add this particular paragraph (and it isn't in the version that'll get posted to newsgroups), but...one person won't be welcome. Jim Bell's conduct at the last meeting and on the list are such as to make it quite clear that I don't want him in my home. I won't send him directions. I ask that nobody else do so. If he shows, he will not be allowed in. I have no interest in hosting a get-together dominated by the perpetuation of an increasingly dull flamewar. (And if he can stop grinding the usual axes in the next two weeks, I'd be delighted to drop this.) The time and energy I, and other participants, have are too valuable to waste that way. (And if he thinks I'm being unreasonable, he is of course free to organize his own gathering.) [Note: I will not pursue this matter further on Cypherpunks. I needed to announce it; I don't need to sustain the flame fest.] Regards, -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEQAwUBMSAW8X3AXR8sjiylAQHECQfRAVlw1MzEpCceLzxM3LbwuLwmSpgacLFi 8eUNFGNHis1xwpOvYpY/u/6WQXScI00oq/44euY8N6bzUxV6djbhIPR1jX+J0KrQ 2Dl8gZgaRNdo69nBabIt3gBG4OZzWiqX2g7YLOcr4I7rcNvCPn0SbaIayb5trgjh AWSVnC1g8gy17XBpAZMrLurgQQx0ul5CS0RreO6/Tpqy3P2V2ly0+k3k9p29RJly Y/Ug7KSYxirXUt07eeI8HCXzEtJ8DvN133Nwbos7WZvXitR5fzf0eXbxGSe7WXay KB0olIiWEi/r0q7xP8GdE07WcBzbXCfH5Uf6VPr9F34rig8= =p6BW -----END PGP SIGNATURE----- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

Smart cards
by A. Padgett Peterson P.E. Information Security 17 Dec '03

17 Dec '03

> The largest demand, though, will come from government agencies, like > Spain's Social Security Administration and the Czech Republic's > Healthcare Ministry. China, with a population of 1.2 billion, is > considering a national identification card using this technology, said > Waqar Qureshi, Motorola worldwide marketing manager for smart-card > chips. Been around for quite a while - expensive part is not the cards themselves ($1-$3) but the card *readers*. Warmly, Padgett

2 1

Give it a rest Perry
by jdoe-agamemnon＠alpha.c2.org 17 Dec '03

17 Dec '03

Cpunks, On Mon, 12 Feb 1996 Ray Arachelian wrote: >I personally like reviews of messages that are posted regarding other >people's posts, however I prefer to read them in email. Cypherpunks >isn't for "this doesn't belong here" messages. :) I personally agree with him.

1 0

Communication
by A. Padgett Peterson P.E. Information Security 17 Dec '03

17 Dec '03

Jim rites: >Logic lesson for Padgett: >There are at least three categories here: >1. Government restricts communication. >2. Government neither assists nor restricts communication. >3. Government assists communication. (through stolen tax dollars, BTW.) Oh, now I see where you are confused. To me there are at least six categories - the three you mention but in matrix form with two columns: Wholly inside the USA and from the USA to/from "elsewhere". (2) applies inside the USA and in some cases (3) - and tax dollars are not necessarily "stolen", the Constitution specifies that taxes may be levied for certain matters. (1) does not apply though through the rationale/excuse of "maximising the use for all" some regulations have been enacted primarily by the FCC. It is not improbable that the FCC's area of responsibility might extend to the Internet once considered a "national resource". Not saying right or wrong, just "could" & would not be surprised. In the case of communications with "other" entities, I expect all three to apply in different instances - what makes anon.penet.fi different from the L. A. Times. Now in the case of extra-National communications, I believe that in certain cases the Nation-state has not only the sovereign right of control but the obligation to control. For example just to pick a popular example, France might negotiate a trade agreement with the USA that included an agreement to block all PGP communications between the two countries. That would be legal. What the US does not really have is the *ability* to control communications. Warmly, Padgett

2 1

An entity calling itself Kilroy was probably here (was: Web Page Authentication (was: Anti-Nazi Authentication) )
by Bryce 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This quotes some mail sent directly to me by (probably) an entity calling itself "Jiri Baum". I apologize in advance if said probable entity is offended at my broadcasting his words, but I thought it was a good contribution to cpunks. (Which, cosmos knows, could use some good contributions that aren't just rehashes of the eternal floating "libertarianism" Usenet flamewar/rantfest.) (Hereafter knowns as "the EFLUFR", pronounced "Effluffer".) +---+---- Bryce | | +---+------ Probably an entity calling itself Jiri | | | | v v v v > > > > An entity calling itself Jiri Baum > > > > <jirib(a)sweeney.cs.monash.edu.au> probably wrote: > > > ... > > > > > > Probably? Didn't I sign it? :-) > > > > > >Ah, grasshopper... If there was a good path between you and > >I in the Web of Trust, *then* I would take out the > >"probably". :-) > ... > > I guess it depends on whether we are talking about "Jiri Baum wrote" > (about which you'd be perfectly right) or "An entity calling itself > Jiri Baum wrote". Witness: > + there exists an entity which controls the PGP key in question > (*) > + that entity calls itself "Jiri Baum" (key signature) > + that entity wrote the text in question (text signature) > > Therefore, an entity calling itself Jiri Baum wrote the text in > question. No need for a web of trust - as they say on Star Trek, > simple logic will suffice :-) Well now let's say that an active attacker had supplanted your public key with his own. He is not, really, an entity who calls himself "Jiri". I mean, sure by using a public key which he controls and which has "Jiri" on it he is calling himself "Jiri", but he rarely if ever actually talks to people and says things which those people associate with the name "Jiri". More significantly, he never thinks of *himself* as "Jiri". So in this most fundamental sense he does not "call himself Jiri". *You* are the entity who calls yourself Jiri, and I can only say that you "probably" wrote the above because I'm not sure if you actually control the public key associated with your name. Tim May's solipsistic conflation of appearance and identity notwithstanding. I guess we are just using different semantics for "an entity calling itself". I didn't want to say "an entity whose One True Name is 'Jiri Baum'", because I don't believe in One True Names. I can see how my choice of words was confusing though, since Mitch (the Man In The CHannel) can be seen as "calling itself 'Jiri Baum'". Maybe I'll start saying "An entity who creates the output which we associate with the nym 'Jiri Baum'...", in order to point out that the actual "Jiri" makes this stuff up and Mitch just relays it with perhaps some editing. But then what if Mitch took a more active role, putting words in your mouth and so forth? Maybe I should say "An entity who calls itself 'Jiri Baum' and is more or less unaware of any nym collision regarding that nym...". Yeah, that one seems bulletproof... > True - I guess that's another use - a time-stamping service could > sign any page that asks for it. Time to whip up yet another CGI > script! (When/if I have the time - this one ain't so simple because > it has to get the page off the web.) Wei Dai <weidai(a)eskimo.com> and Matthew Richardson <matthew(a)itconsult.co.uk> have both done this. I suspect that Wei's time-stamping service is not still functional. (A pity. We need redundancy for added assurance.) I myself use Usenet and mailing lists as a sort of poor man's time-stamping service. If I invent an idea or some prose, and I sign it and then broadcast it thusly, I think enough people will keep a record of it having been in existence with my signature on it at this time, that I can later call on them to testify to that effect. Hopefully. Yet another reason to clearsign my output. Okay I will try to find responses to this even if they are buried in the EFLUFR. (All hail GREP!) Regards, Bryce "Toys, Tools and Technologies" the Niche New Signal Consulting -- C++, Java, HTML, Ecash Bryce PGP sig follows -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed under Unix with 'BAP' Easy-PGP v1.01 iQCVAwUBMSDPpPWZSllhfG25AQFrUgP+IzidvICvkApSl87b03f4Ebatwcmg05cJ QF3jE7SbmRpcJshE6Cty5Lu3revBeGknRI3VDMoS4n0fCIxjq3D592d5mqOjwN0e QV620Aq2cnJZ3LRknZtaIGNluedkC4iG2xM3VzxIbVVGmmGEbhwEhKNmFEqWr2um SdDPSWvtnhs= =sc0s -----END PGP SIGNATURE-----

1 0

TEN_ysp
by John Young 17 Dec '03

17 Dec '03

2-13-96. NYT: "New Spynet Links C.I.A. and Envoys." The C.I.A. is planning to buy commercial comm gear, put an encrypting scrambler on it, and give diplomats in Bosnia and elsewhere the ability to receive adulterated facts that it previously had been unwilling or unable to share except with enemies. Soon, diplomats will be up to speed with spying foreign correspondents, many of whom have portable comm gear combining sat phones and computer ports. "We have our own classified Internet in the intelligence community, with home pages just like you do on the Internet," gurgled a spy-leaker to this reporter-siphon -- who already knew by spying browsers and snooping search engines what the dagger-gagger duhhed. TEN_ysp

1 0

Re: Spin Control Alert (LI Newsday, 2/12/96)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"declan+(a)CMU.EDU" "Declan B. McCullagh" 13-FEB-1996 00:19:48.79 >Exactly. Catharine MacKinnon, for instance, has called the EFF and other >Rimm-debunkers part of the "pro-pornography power block" which >represents the "howling fury of the pornographers protecting their >penises and their wallets." So Catharine MacKinnon wants to castrate and steal from men? No surprise... Excellent quote to repeat, BTW... it might even get the male followers of the Christian Coalition et al to question with whom they're working. >ObCrypto: Yes, Know Your Enemies and work with the natural enemies of >the religious right, such as groups like the ACLU and the FEN. The >theocratic push to outlaw nonescrowed crypto is next. As I said before about the CPSR and libertarians (and Rush Limbaugh and libertarians), politics makes strange bedfellows. -Allen

1 0