December 2003 - cypherpunks-legacy

Re: DESCRIBE
by David K. Merriman 17 Dec '03

17 Dec '03

At 09:23 PM 03/18/95 -0800, you wrote: >undescribe cypherpunks(a)toad.com cyber(a)ronet.com.br > Well, we're not organized, for starters..... Dave Merriman------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

Win95 Remailer update
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've generated a full installation package for RemailerBot, so that it now includes all required .DLLs, .OCXs, et al. Also includes the source code. It replaces the remailer.zip available through my web page. Simply unzip it to the directory of your choice, and run the setup132.exe file. Alternatively, you can use the MS expand utility to uncompress selective files. "We apologize for the inconvenience" Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMU0tz8VrTvyYOzAZAQGS7QQArcKCBJKrzv9X/qZTaGGoPb1/46LKCKfe hehMiGlc50llJ/J5EqH86CPsGhX2W3DgUE+G/IPG+hD7HLCMrc06dDcO5XkO1Y+9 FNhCkmeA/XhoiDF61cjZ8IWO5oZx0iKsHFBhd4WhkirVRyGREXnveQA0txZmH1JA shzfa1XwqHo= =3gkt -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> http://www.shellback.com/personal/merriman/index.htm

1 0

PGP and Human Rights
by Philip Zimmermann 17 Dec '03

17 Dec '03

Recently, I received the following letters by email from Central Europe. The letters provides food for thought in our public debates over the role of cryptography in the relationship between a government and its people. With the sender's permission, I am releasing the letters to the public, with the sender's name deleted, and some minor typos corrected. This material may be reposted, unmodified, to any other Usenet newsgroups that may be interested. -Philip Zimmermann Date: Sat, 09 Mar 1996 19:33:00 +0000 (GMT) >From: [name and email address deleted] Subject: Thanks from Central Europe To: Philip Zimmermann <prz(a)ACM.ORG> Dear Phil, This is a short note to say a very big thank you for all your work with PGP. We are part of a network of not-for-profit agencies, working among other things for human rights in the Balkans. Our various offices have been raided by various police forces looking for evidence of spying or subversive activities. Our mail has been regularly tampered with and our office in Romania has a constant wiretap. Last year in Zagreb, the security police raided our office and confiscated our computers in the hope of retrieving information about the identity of people who had complained about their activites. In every instance PGP has allowed us to communicate and protect our files from any attempt to gain access to our material as we PKZIP all our files and then use PGP's conventional encryption facility to protect all sensitive files. Without PGP we would not be able to function and protect our client group. Thanks to PGP I can sleep at night knowing that no amount of prying will compromise our clients. I have even had 13 days in prison for not revealing our PGP pass phrases, but it was a very small price to pay for protecting our clients. I have always meant to write and thank you, and now I am finally doing it. PGP has a value beyond all words and my personal gratitude to you is immense. Your work protects the innocent and the weak, and as such promotes peace and justice, quite frankly you deserve the biggest medal that can be found. Please be encouraged that PGP is a considerable benefit people in need, and your work is appreciated. Could you please tell us where in Europe we can find someone who can tell us more about using PGP and upgrades etc. If you can't tell us these details because of the export restriction thing, can you point us at someone who could tell us something without compromising you. Many thanks. --- [ I sent him a response and asked him if I could disclose his inspiring letter to the press, and also possibly use it in our ongoing legislative debates regarding cryptography if the opportunity arises to make arguments in front of a Congressional committee. I also asked him to supply some real examples of how PGP is used to protect human rights. He wrote back that I can use his letters if I delete his organization's name "to protect the innocent". Then he sent me the following letter. --PRZ ] Date: Mon, 18 Mar 1996 15:32:00 +0000 (GMT) >From: [name and email address deleted] Subject: More News from [Central Europe] To: Philip Zimmermann <prz(a)ACM.ORG> Dear Phil, I have been thinking of specific events that might be of use to your Congressional presentation. I am concerned that our brushes with Governments might be double-edged in that Congress might not like the idea of Human Rights groups avoiding Police investigation, even if such investigations violated Human Rights. However we have one case where you could highlight the value of PGP to "Good" citizens, we were working with a young woman who was being pursued by Islamic extremists. She was an ethnic Muslim from Albania who had converted to Christianity and as a result had been attacked, raped and threatened persistently with further attack. We were helping to protect her from further attack by hiding her in Hungary, and eventually we helped her travel to Holland, while in Holland she sought asylum, which was granted after the Dutch Government acknowledged that she was directly threatened with rape, harrassment and even death should her whereabouts be known to her persecutors. Two weeks before she was granted asylum, two armed men raided our office in Hungary looking for her, they tried to bring up files on our computers but were prevented from accessing her files by PGP. They took copies of the files that they believed related to her, so any simple password or ordinary encryption would eventually have been overcome. They were prepared to take the whole computer if necessary so the only real line of defence was PGP. Thanks to PGP her whereabouts and her life were protected. This incident and the young woman's circumstances are well documented. We have also had other incidents where PGP protected files and so protected innocent people. If the US confirms the dubious precedent of denying privacy in a cavalier fashion by trying to deny people PGP , it will be used as a standard by which others will then engineer the outlawing of any privacy. Partial privacy is no privacy. Our privacy should not be by the grace and favour of any Government. Mediums that ensured privacy in the past have been compromised by advances in technology, so it is only fair that they should be replaced by other secure methods of protecting our thoughts and ideas, as well as information. I wish you well with your hearing. Yours most sincerely [name deleted] --- [end of quoted material] ------------------------------------------------------------------

1 0

Re: Keep the pressure! Cryptographers Against Cryptography EXPOSED!
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Some people have wondered why I am anonymous and attack me. I am not ashamed of my views. I write this thread anonymous as a form of protest. The 10 PEOPLE on the LIST OF SHAME have their shields. The whole government will come to their aid in helping them spread their lie and is behind them. I have an acount and post regularly under my real name. I am not ashamed of my views. I am proud of them. I write this anonyously as a form of protest because they have there shield and we have our remailers. I WANT TO KEEP IT THAT WAY! THEY MUST NOT BE ALOWED TO TAKE OUR SHIELD AWAY. BOYCOTT THE SELLOUTS AND DO WHAT YOU HAVE TO DO

2 1

First encrypted online backup service?
by John Gilmore 17 Dec '03

17 Dec '03

Actually it looks like they're set up for modem access, but I presume that if there's any serious demand they'd do it over the Internet. Of course, Would You Trust Your Backups To This Man? If the random key generated for it was later found to be not random enough, or if any of a dozen other bugs or breakthroughs make the encryption penetrable, would you want to have transmitted every bit of data in your computer, to a site you don't know very well, and to all interested eavesdroppers? Using proprietary and unverified software? Or even using free software? Maybe some reliable cypherpunk should run such a service. Examine what comes through and gets written on tape. Superencipher it yourself before writing it on tape, and keep your own keys securely; maybe with a secret sharing scheme, and a tree of keys that requires going offline to other backup tapes to recover the key for a particular backup tape. And as you look at your customers' data, remember Robert Morris's #1 piece of advice to cryptanalysts: "Look for plaintext". It shows up in the darnedest places where it shouldn't. A c'punk backup service would warn you if you tried to push plaintext into it. Though it'd store it for you regardless: the customer might care a lot more about being able to retain a copy of their data than they care about whether anyone else could see it. I hope they find a market and some workable solutions to these issues. It'd be nice to have automatic backups of my data kept securely in a few spots around the globe for some reasonable price. John Gilmore Forwarded-by: Stanton McCandlish <mech(a)eff.org> From: Alan Brown <abrown(a)usaor.net> Newsgroups: comp.org.eff.news Subject: Protect your computer data with remote tape backup. Date: 13 Mar 1996 01:37:12 GMT Organization: National Computer Company Message-ID: <4i58s8$r65(a)news.usaor.net> X-Mailer: Mozilla 1.1 (Windows; U; 16bit) Content-Transfer-Encoding: quoted-printable FACT In the Next 3 Months Another 30 Million Computers Will Crash and Lose Data ***************** This Year Alone Over $1 Billion Worth Of Computers Will Be Stolen ********** Each Month 10 Million In-House Accidents, Operator Error, Viruses & Equipment Failure Will Cause Loss Of Data ***************** With National Computer & Data Back-up Company=92s technology we can safel= y,=20 confidentially and automatically encrypt your data, download to our=20 server and store in our offsite water and fireproof vaults. Our proprietary software is loaded on your computer and at a time that=20 you select, normally after business hours, your computer will=20 automatically call our server, compress and encrypt your files and=20 download the days work. We then download your files to tape and store in=20 our vaults in case of future need. Your files are encrypted and only you=20 have the password so noone but you can see your data. It is quick, safe,=20 reliable and you don=92t have the time consuming chore of doing backups.=20 For those outside the 412 area code we have an 800# for you to use to do=20 your backups so you won=92t have a toll charge. Let us help you For As Little As $2.00 Per Day FOR MORE INFO EMAIL US AT abrown(a)usaor.net OR CALL US TODAY 412-934-0912

1 0

Keep the pressure! Cryptographers Against Cryptography EXPOSED!
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

This is the third in a regular series of postings to expose the lie that has become of the Leahy bill. I am proud to report that the majority of us have the good sense to see this for what it is but a few cypherpunks continue to lie to us and have not recanted. It is too late to toss this up as a mistake in judgement. We tried to educate these people on the error of their ways but they persist in spreading the lie that the Leahy bill is good for us. We tried to give them the benefit of the dout, but isn't it funny that when presented with the facts NOT ONE OF THESE ""SCIENTISTS"" has admited to his CLEAR MISTAKE. No, they continue spreading the same lie lie lie that the LEAHEY BILL WILL SOMEHOW HELP US. THEY MUST BE STOPPED. We can be fortunate that their number is small. At least the ones we know about. Only three more since the last report. But even one is too many. These people have alot to answer for. Ask them who they work for and who signs there checks. Ask them why they lie. Ask them why they are afraid of your right to privacy. (of course we know why) Show them HOW WE FEEL. Let them serve as examples too others if they are too cowardly to serve as beacons for truth. THE LIST OF SHAME: B. Schneier: bs208(a)newton.cam.ac.uk, schneier(a)counterpane.com M. Blaze: mab(a)crypto.com, mab(a)research.att.com J. Bizdos: jim(a)rsa.com S. Safaddar: shabbir(a)vtw.org D. Weinstein: djw(a)vplus.com P.. Peterson: padgett(a)hobbes.orl.mmc.com B. Stewart: stewarts(a)ix.netcom.com B. Unicorn: unicorn(a)schloss.li P. Karn: karn(a)unix.ka9q.ampr.org D. McCullagh: declan(a)well.com BOYCOTT APPLIED CRYPTOGRAPHY, AT&T, VTW, and RSA!!!! THE LEAHY BILL IS 100% PART OF THE PLAN TO KILL FREE CRYPTO. YOU DON'T NEED EXPERTS TO THINK FOR YOU! REMEMBER RICO AND WORLD GOVERNMENT!

7 8

Re: Keep the pressure! Cryptographers Against Cryptography EXPOSED! (fwd)
by Black Unicorn 17 Dec '03

17 Dec '03

On Wed, 20 Mar 1996 anonymous-remailer(a)shell.portal.com wrote: > These people have alot to answer for. Ask them who they work for > and who signs there checks. Ask them why they lie. Ask them why > they are afraid of your right to privacy. (of course we know why) > Show them HOW WE FEEL. Let them serve as examples too others if > they are too cowardly to serve as beacons for truth. > > THE LIST OF SHAME: > B. Schneier: bs208(a)newton.cam.ac.uk, schneier(a)counterpane.com > M. Blaze: mab(a)crypto.com, mab(a)research.att.com > J. Bizdos: jim(a)rsa.com > S. Safaddar: shabbir(a)vtw.org > D. Weinstein: djw(a)vplus.com > P.. Peterson: padgett(a)hobbes.orl.mmc.com > B. Stewart: stewarts(a)ix.netcom.com > B. Unicorn: unicorn(a)schloss.li WOO HOO! Took long enough. > P. Karn: karn(a)unix.ka9q.ampr.org > D. McCullagh: declan(a)well.com > These people have alot to answer for. Ask them who they work for The Executive Office on National Security in the Department of Justice. Fred Baron is my boss. > and who signs there checks. All DOJ paychecks are government paychecks. Duh. > Ask them why they lie. Because we know we can kill crypto for good if only we can keep you fools disorganized for a few more months. Just... a... few... more.... > Ask them why they are afraid of your right to privacy. How the hell am I going to get my paycheck if we can't tax you? --- My prefered and soon to be permanent e-mail address: unicorn(a)schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information

1 0

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This came from Dave^H^H^H^HAnonymous in the context of that highly entertaining rec.music.white-power hullabaloo. What he was thinking cross-posting to alt.politics.white-power, I can't imagine. The References: and Reply-To: headers are hilarious. - -L. Detweiler alias Rich Graves FUCKING STATIST http://www.c2.org/~rich/ From: nobody(a)REPLAY.COM (Anonymous) Newsgroups: news.groups,alt.politics.white-power,alt.2600 Subject: L. Detweilers's Back!!! New nym: rich(a)c2.org (Rich Graves) Date: 16 Mar 1996 15:29:18 +0100 Sender: replay(a)utopia.hacktic.nl Message-ID: <4iej7u$r6(a)utopia.hacktic.nl> References: <rich(a)c2.org> lying asshole Reply-To: <rich(a)c2.org> L. Detweiler NNTP-Posting-Host: utopia.hacktic.nl Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Length: 194 XComm: Replay may or may not approve of the content of this posting XComm: Report misuse of this automated service to <postmaster(a)REPLAY.COM> Xref: nntp.Stanford.EDU alt.2600:179080 news.groups:126480 Give it up, "L" We've got the glass on you -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMU3MjI3DXUbM57SdAQFBKwP9HCsustLeJGLqTzt9WCh2DM9/znj+Xl0E aaidu28dpuhxdju/6phZ0uEHHXC/fUomH/dY5AXu3IaW68N6nLAXAl1TwJvd/dAh JIjmchQpDptmH2039pFn0I/xTKO0nqqK/tMNYHC3v9HTwRxlR2nGUxh/vAUAKObf tWbITC1fNPY= =5/VC -----END PGP SIGNATURE-----

1 0

Re: Keep the pressure! Cryptographers Against Cryptography EXPOSED!
by JR＠ns.cnb.uam.es 17 Dec '03

17 Dec '03

>Some people have wondered why I am anonymous and attack me. >I am not ashamed of my views. I write this thread anonymous >as a form of protest. > >The 10 PEOPLE on the LIST OF SHAME have their shields. The whole >government will come to their aid in helping them spread their >lie and is behind them. > Have you considered visiting your GP or a psychiatrist? No, seriously, that paranoia of yours may get worst and now it may still be time to cure it. You better go now before it gets worst and you end killing a President or something similar. Or at least, use your scarce brains to think a bit (not much needed) to realize that even if these people were of such conspiratorial taste they do have the same right to express their opinions and wants as you do. >I have an acount and post regularly under my real name. I am not >ashamed of my views. I am proud of them. > Oh, I see, that's why you keep using an anonymous remailer. >I write this anonyously as a form of protest because they have >there shield and we have our remailers. I WANT TO KEEP IT THAT WAY! >THEY MUST NOT BE ALOWED TO TAKE OUR SHIELD AWAY. > ^^^ YOUR and who else? Aren't you generalizing a bit? And BTW denying others any right to express themselves? Aren't you stablishing as "me/us" vs. "THEM" where you mistify that "THEM"? Shouldn't you consider if you're not going too far and really need medical assistance? >BOYCOTT THE SELLOUTS >AND >DO WHAT YOU HAVE TO DO > Boyz, do you consider the above concerns too. Before attempting to follow advice of a possibly paranoid, ill, mental patient, consider seriously if you are not really hurting yourselves. The latest thing a cypherpunk should do is enjoin conspiratorial dementia and begin pursuing the very people that is actually supporting cryptography, developing the crypto field and fighting for crypto rights. As he says, "do what you have to": ponder seriously the problem and don't let anyone tell you what to do. Least of all "anonymous" fundamentalists. jr

1 0

No Subject
by Robb＠SpeakOut.org 17 Dec '03

17 Dec '03

Does anyone know of a Visual Basic/Quick Basic implementation of the Unix Crypt(3) function used to hash passwords. I have not found any crypto source code in VB. Your help in this search is greatly appreciated. If you would like E-Mail me direcly , Robb(a)Speakout.org. Many Thanks, Robb Hill

1 0