December 2003 - cypherpunks-legacy

Re: NET_run
by Bruce Baugh 17 Dec '03

17 Dec '03

> 2-19-96. NYT: > > "In this new game, you'll never play with a full deck." > > Sometime next month a game will be played on the > Internet, challenging surfers to leap between sites, > solving puzzles and cracking codes that will give them > access to secret data hidden behind firewalls and > software barriers. Okay, I just checked with Wizards of the Coast, and here's the story. Netrunner is indeed a card game. As part of the intro publicity, some demo games will be run on the Web. (No, no info about that at the moment.) The rest is the intersection of overenthusiastic publicity folks and clueless reporters. "Go, marketing department, go" were the exact words of my friend. However, he also says that the game is an exceedingly cool one, and that those of you who like the collectable card games should check it out. -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

> From owner-cypherpunks(a)toad.com Mon Feb 19 17:50:19 1996 > Date: Mon, 19 Feb 1996 17:17:52 -0600 (CST) > From: IPG Sales <ipgsales(a)cyberstation.net> > We are not currently revealing all the details of our system because of > patents in process, and other relat6ed matters. We are offering the > software. You should be able to readily decompile it and determine the > algorithms used andf how they are used to generate random number sequences > for very long files. For short messages, a true OTP is used directly. Marketing Fluff - read "we don't *want* to revel it". Patent stuff doesn't take long to get the initial disclosures filed. Cypherpunks are generally engineers and are immune to such crap. > If you are aware of encrtypting technology, you recognize that hardware > prime number cycle wheels for the basis of some of the most secured > hardware systems employed for encryption. We simply expand that technogy > using software to set an intial setting, an adder, and a limit for 64 > such wheels, using large random prime numbers for each of those settings. > The total number of possibilities is over 10 to the 1690th power and can > be much larger. So. Large "random" prime numbers are generated. From what? How? Obviously these act as keys to your "OTP". Figure out how to match this prime and you can generate the same "OTP". > Thus we can eliminate the need to have the length of the OTP to be equal > to the length of the file - if you do not belive that it works, try it > and see - it takes inly a few hours to set such a trial up. We generated > over 790 gigabytes of charcaters, on multiple backups, and tested. Our > standard deviations, chi squares, Delta ICs for bits, characters, sets, > and the entire set were random. The sets are random, and you can take > that to the bank. So the data coming out appears random. Big whoopie. Lots of algorithms can generate the same thing. The key is how do you seed that random number generator? This isn't even close to being a OTP. A OTP by definition has a random set of data that is transmitted to the receipient over a seperate secure channel from the actual message to be sent. The actual message and the OTP are XOR'ed together and sent. The receipient then XORs the OTP and the encrypted message to get plaintext. That is pretty simple - even a marketing drone should be able to figure that one out. Now - explain how (in generic terms) your system acts as a OTP. > Someone, will decompile it and discover that it is truly random, at least > from the practical usage basis. But we need that time to file patents, > cvopyrights and the like. Yes - hopefully someone will take the time and money to decompile it. .... but if you are so sure of yourself, why not give away some demo copies. Why not source of the security functions? (Shove that patent crap someplace - you wouldn't be selling it if your disclosures weren't already filed) > The IPG system solves the key management problem and produces a truly > unbreakabkle system. We make no apologies for not currently revealing all > of the methodologies andf algorithms, but they will be revealed with > time, by us or others, and you will discover that it is indeed a simple, > easy to use, easy to install, truly unbreakable system. "unbreakable" - Bullshit - you obviously don't know crap. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

14 25

Re: NET_run [NOISE]
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02:54 PM 2/19/96 -0800, bruce@aracnet wrote: >> Sometime next month a game will be played on the >> Internet, challenging surfers to leap between sites, >> solving puzzles and cracking codes that will give them >> access to secret data hidden behind firewalls and >> software barriers. > >Netrunner is indeed a card game. As part of the intro publicity, some demo >games will be run on the Web. (No, no info about that at the moment.) The >rest is the intersection of overenthusiastic publicity folks and clueless >reporters. "Go, marketing department, go" were the exact words of my friend. Which is based on the even more cool Cyberpunk (no, not Cypherpunk, but it seems that way in my own games) traditional role-playing game. Actually, that's not a small percentage of why I keep up with all the noise on this list - you get some _great_ game ideas. <<perrygram elided>> dave -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMSkafjVTwUKWHSsJAQEI7gf9HwKWFS489/ljLT9OtQxpfLP5dqOtCkFg 7IW65RvYfuwS/G6bkpc9pOUGGabnsI/rak7AtzJwXlqtI6DJnTl7MSNoA+vdddQX t7eLv4d9phTSBg3s5N1upOZuLO8239pWmx+y0Rknzo1qkZ9P0pQPOFqHdhsem5TA X/AtP1nLyno8dKlOLcdcqk3p5CLQt6v3X/sZN10Y1N6JYXcxmY3VbFWMBjmWjAZi Qv9awTjBvLem+NHF/alEkRR2AIeswLwl7jB/P9zZ/R4x1NfcGYKGWRnT+6cFITrM UYH+WxqYZGcrY3ECVJ8IrylFJ/MJsBDyUpw+ZXIbh9BjQmD8GfiukQ== =TPrG -----END PGP SIGNATURE----- ----- David E. Smith, c/o Southeast Missouri State University 1000 Towers Circle South MS 1210 Cape Girardeau MO 63701 dsmith(a)midwest.net, dsmith(a)alpha.c2.org, PGP 0x961D2B09 (573)339-3814 http://www.midwest.net/scribers/dsmith/ "Reality is only for those lacking in true imagination."

1 0

Fuck Islam and the Apologists Cluttering Up this List with Defenses of It
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:08 AM 2/20/96, Sean Gabb wrote: >I did say I wouldn't send this review. But having broken purdah once >already this evening, I see no harm in doing so again. > >Sean Gabb. ... All of you in the following list please take me off your list of responses: Sean Gabb <cea01sig(a)gold.ac.uk>, Alan Horowitz <alanh(a)infi.net>, Ashfaq Rasheed <ashfaq(a)corp.cirrus.com>, jpb(a)miamisci.org (Generally, I don't see why people keep letting the cc: and To: fields get cluttered up with additional names, unless someone is not reading the CP list, in which case who cares if they don't get it?) Please don't send me separate copies (in addition to what is sent to the IslamPunks mailing list) of this Muslim crap....it's bad enough seeing the pro-Muslim apologists explaining why the Word of Allah (hollow be his name) is more liberating than any decadent, Western system can be, about how women are more free under Islam because they have the freedom to be obedient to the will of her husband and Allah (hollow be his name), the freedom to be beaten with sticks if they show their face in public, and the freedom to have their devil organs removed. And don't send me any more apologies about how it is only "Arab Islam" that is barbaric and authoritarian...the Persians don't exactly like to be called Arabic, and yet the Persian/Iranian branch (Shiite) is amongst the most backward of all the Muslim sects. (Women dismissed from their professional jobs when Khomeini took over, forced to wear the chador, death warrant on Rushdie, and so on.) --Tim May [This Bible excerpt awaiting review under the Communications Decency Act] And then Lot said, "I have some mighty fine young virgin daughters. Why don't you boys just come on in and fuck them right here in my house - I'll just watch!"....Later, up in the mountains, the younger daughter said. "Dad's getting old. I say we should fuck him." So the two daughters got him drunk and screwed him all that night. Sure enough, Dad got them pregnant....Onan really hated the idea of doing his brother's wife and getting her pregnant while his brother got all the credit, so he pulled out before he came....Remember, it's not a good idea to have sex with your sister, your brother, your parents, your pet dog, or the farm animals, unless God tells you to. [excerpts from the Old Testament, Modern Vernacular Translation, TCM, 1996]

1 0

Re: Easy Nuclear Detonator
by jim bell 17 Dec '03

17 Dec '03

At 12:14 PM 2/19/96 EDT, E. ALLEN SMITH wrote: > I would have appreciated it if you'd sent this to me privately, or at >least didn't enclose my message to you (which was sent in private email). Among >other reasons, it is rather off-topic (unless one wants to count it among bomb >information available on the net). > -Allen Uh, okay, sorry. See, I wrote the response for you, and at the last minute I realized that I might as well include it to the list as well. Yes, it is "off topic" but I thought it was interesting reading anyway. In addition, I gave the list 12+ hours of "warning" and asked if anybody objected... All I got was an "attaboy" from Dr. Dmitri Vulis. As for the inclusion of your private note: sorry again. But at the time, it just didn't occur to me that you'd object to this. "Nettiquette" is new to me. Jim Bell jimbell(a)pacifier.com.

3 2

Re: Remailers not heard from; info?
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 01:31 PM 2/19/96 -0800, bruce@aracnet wrote: >A fix along the lines of > >:: >don't-send-anything-after-this > >might be readily applicable. Don't some remailers support the "Cutmarks" header, which does essentially that? A useful reference for this is Raph's remailers list; among the numbers and cryptic little charts is a listing of which remailers support which features. dave -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMSkaFDVTwUKWHSsJAQGCjAf+K5TW4yRol6a0L2xclbrU84MMA3FtmpCE xyx016KEOxEfVGBflsg3phRYSfY13Ezjxkrmkv449wsOAlRamwFpgCTcpDNU+dKk YXrJGnQ2PMNYPXZNNK/CObHEFA2xl3peITMF27NrLcGkC2On4r+geajyV8QZo+RF bNmPJ6fc5FTyl1BNAe0L/spucxx1wDG+IgKZP9IX+I3niJJBdxj73N4AAz3loesq +qwB9NRceFtNYdoigYUxC9nhB0s90C1fJtkc0/M8Jv0Qd0S4FosU+e1HSCkNLgXU ALuoXkhhRFmBAIW9Qf6aLKK4ANgt9DfmKIoHaBYy1B1GBKhxLHEWqw== =Fzjc -----END PGP SIGNATURE----- ----- David E. Smith, c/o Southeast Missouri State University 1000 Towers Circle South MS 1210 Cape Girardeau MO 63701 dsmith(a)midwest.net, dsmith(a)alpha.c2.org, PGP 0x961D2B09 (573)339-3814 http://www.midwest.net/scribers/dsmith/ "Reality is only for those lacking in true imagination."

1 0

Re: Remailers not heard from; info?
by Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I think it would be better to use some commands indicating the start and end of the messages... ::begin-body [message goes here] ::end-body - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSke8ioZzwIn1bdtAQEQBgGAq91bmP74lyy4PIiTrZmYkg3zDBbt3Ke/ fLcVQNmXFZuYR5s5FkfX9DKLmY3Vkg1v =jI5z -----END PGP SIGNATURE-----

1 0

Re: Remailers not heard from; info?
by Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The c2 remailers always bounce from full disks for the last couple of months when I've tried to use them. I've had problems with amnesia as well. I've noticed some that allegedly allow replacement of subject do not. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSkeaSoZzwIn1bdtAQF1YAF8DQDN1BnrJ0DU5Vp3Ac9Z8id91UGurocG kAyHUUEnMXD2eFa1K4PPI+VCrFQBFKgs =pC+m -----END PGP SIGNATURE-----

1 0

Re: Remailers not heard from; info?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:41 PM 2/19/96, Alex Strasheim wrote: > >o Depending on a remailer to strip your sig doesn't give you security wrt >the remailer operator. If you use encryption, the last remailer on the >chain will see your sig, which will be in the innermost encrypted block. >That defeats the purpose of chaining. If you're not using encryption, you >don't have any security anyay. Exactly. Further, in an earlier message Bruce Baugh asked why some remailers did not more promptly remail their messages. Bruce, you need to look at Raph Levien's statistics on remailers, inclduding batching/latency: rapid responses tend to defeat the traffic analysis features of remailers! Also, preserving subject lines through remailings, another feature Bruce is requesting, is kind of like barium-tagging one's messages! Why use remailer chains if the messages are tagged all the way through? (There are wrinkles that work, such as adding a subject line based on stuff stored inside the encrypted block a remailer opens for furhter processing. The nth remailer can add a suject line that may be different for every hop, or only added near or at the end of the remailings...) Those who want more "user-friendly" remailer features would do well to think about what the properties of an "ideal mix" are. >A better solution might be a specialized remailer that strips sigs for >people who need the service. People who need sig stripping could put >that remailer in the chain, and the rest of us could handle our sigs on >our own. And for "casual-grade remailing," where no encryption is used and where minimal other mix features are used, there are Web pages that will send simple messages through a user-selectable remailer (http://www.c2.org:80/remail/by-www.html) This Web remailer will _not_ automatically add a .sig, as it is not a mail program per se, and the only text that is remailed is what is entered into the on-screen window. --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

SOTP = Snake Oil Time Pad
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:53 PM 2/19/96, Mike McNally wrote: >IPG Sales writes: > > For short messages, a true OTP is used directly. > >Quick question: does anybody at IPG know what the "O" in "OTP" stands >for? I think it is "O for Oil," as in Snake Oil. The view of some seems to be "We're selling Internet Security products because that's where the money and the suckers are, and anything with "Internet" and "Security" in it will mean a quick couple of million when we take our company public." --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0