December 2003 - cypherpunks-legacy

Re: Interactive Week exclusive - White House to launch "Clipper III"
by jim bell 17 Dec '03

17 Dec '03

At 04:09 PM 5/18/96 -0400, Will Rodger wrote: >The White House is about to answer recent attempts to liberalize encryption >exports with a proposal of its own. > >Documents obtained by Interactive Week show the Ciinton Administration has >been lobbying key Republican committee members to compromise on encryption >through a policy that looks very much like previous commerical key escrow >efforts. Typical boneheaded government! At it yet again, I see. I'd feel inclined to say something like "I predict that they will fail" but that might be misinterpreted. This most recent outrage wouldn't even be compatible with the Leahy bill, bad as it was. Even so, I was pleased to see that we had already managed to educate a number of people in Congress who already know that this plan is DOA. That's progress, I guess. Jim Bell jimbell(a)pacifier.com

1 0

Re: TCM: mafia as a paradigm for cyberspace
by jim bell 17 Dec '03

17 Dec '03

At 12:43 PM 5/18/96 -0700, Vladimir Z. Nuri wrote: >what amazes me about people who tend to have a warped mindset is that >they think new technology, such as cyberspace, creates a new morality. >suddenly murdering, violence, drug dealing, or whatever are supposedly >thrust into some new reality in which old rules no longer apply. >you and Jim Bell are unbelievably similar, as much as either of you >would hate to admit it. I resent that implication! Tim May is always far more restrained, introspective, controlled, and cautious than I. He approaches the subject of cyber-anarchy with nervous concern, I'm the one who jumps in with unrestricted glee. Jim Bell jimbell(a)pacifier.com

1 0

Sendmail Question (was: SMTP Server for sending to anonymous remailers?)
by Anonymous User 17 Dec '03

17 Dec '03

lcs Mixmaster Remailer <mix(a)anon.lcs.mit.edu> wrote: > > Does anyone know of an anonymous remailer that has an SMTP server > > (hopefully unlogged) that I can specify in a special variant of the > > "sendmail.cf" sendmail configuration file for sending mail to > > anonymous servers? > > > > I use a PPP connection, and right now I'm using my ISP's default > > server and I don't like the idea of logs being kept, even though the > > messages themselves are chained/encrypted. > > > > Maybe I'm "paranoid", but if I wasn't, I probably wouldn't bother > > with PGP, C'punk remailers, etc. <g> > > Anon.lcs.mit.edu does not perform ident lookups, does not add > Received: headers, and runs at log level 1 (only "Serious system > failures and potential security problems" logged, according to the > sendmail manual). > > This is useful for testing things out anonymously, but I don't > understand why you would want to use it an a regular basis. Why don't > you send your mail directly from your home machine to the first > remailer hop? Nothing is forcing you to send outgoing mail through > your ISP's mail server or any other one particular mail server. Why > would you want to do that in the first place? What settings do you use in sendmail.cf to accomplish this (sending it directly)? Is that the default behavior? Specifically, what goes on the "DR" and "DV" lines? When I send mail from my PPP account to my work account, I always seem to end up with a "Received: >From <my ISP's host> by <some intermediate host>" line. I'm ass-u-ming that if the host name shows up in the headers, it's passing through that machine and is potentially being logged.

1 0

PLEASE HELP ME GO OUT OF THIS LIST!!!!!!
by Marc Escalier 17 Dec '03

17 Dec '03

how to go out of this list. please help me, it would be VERY NICE.

2 1

Remailers vs Nyms - conflicting assumptions?
by Bruce Baugh 17 Dec '03

17 Dec '03

I've been enjoying the discussion of "disposable" remailers, but I note a problem. If this has been addressed before, well, now it's being noted again. In my (admittedly limited) experience with nym servers, the reply path is fixed - it goes through specified hops. This creates A Problem when any one of the remailers involved goes down. There's no way for the mail to get through. There's not even a way for the nym holder to verify that there is a site down, as opposed to some more transitory problem, without information from an external source. This seems to me a fairly serious weakness, given prevailing governmental attitudes. What would it take to create a nym server that could route around the death or disability of any given mailer? -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

2 1

Re: Rumor: DSS Broken?
by Bill Stewart 17 Dec '03

17 Dec '03

>I was talking to someone who was talking to someone (have I said this is a >rumor yet?) who was solicited for comment by a Very Famous Reporter about >the fact that DSS, the Digital Signature Standard, promulgated by NIST, I >believe, had been broken. MD5 is at least weakened, maybe broken; there's an abstract by Hans Dobbertin that says something about generating collisions, and gives an example (though the abstract doesn't say how general the method is.) It does appear that the method can't generate collisions of arbitary form (i.e. the original string was "11111111MySecretKey0..0Message11111111" and the string that has the same hash is 'posk cpidjuwfviejwvijevijefivjefvjifejvij viaA" DSS is known to have subliminal channels - in addition to signing a message, you can embed bits that can be viewed by someone who knows the key, so the digital signature on your passport/healthcare/workauthorization smartcard can also hide data saying "Jew. Not Gay. Commie. Failed drug test once." This was discovered/published by Gus Simmons, and is in Applied Crypto; there are several channels with varying amounts of data, computation requirements, and such. # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215 # goodtimes signature virus innoculation

1 0

Re: The Crisis with Remailers
by Deranged Mutant 17 Dec '03

17 Dec '03

On 18 May 96 at 13:06, Vladimir Z. Nuri wrote: > >> 2. there is no good way to deal with spams or other so-called "abuse" > > > > Nor should there be. What's one person's abuse is another person's > >free speech. Internet traffic should not be censored based on contents. > > pardon me, but a rather shallow response. [stuff i kind of agree with deleted] I have my own mini-solutions... for personal mail, I use a kill file. For Usenet (when I'm really stuck with too much free time and actually read it) FreeAgent and Agent have some ignore thread/kill-file abilities (my setup only retrieves headers... so I have that luxury for now). How to deal with the problem as an admin is an entirely different story. Solutions? --- No-frills sig. Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: Fingerprinting annoyance
by jpps＠voicenet.com 17 Dec '03

17 Dec '03

Senator Exon wrote: > ... i just need a working method. Clorox can take them off. Applied sparingly it could be used to obsure portions of the whorls. jps -- Jack P. Starrantino jpps(a)voicenet.com http://www.voicenet.com/~jpps

1 0

Re: PLEASE HELP ME GO OUT OF THIS LIST!!!!!!
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:14 PM 5/18/96, Marc Escalier wrote: >how to go out of this list. >please help me, it would be VERY NICE. Thanks to recent legal inquiries by the Church of Scientology, they have determined that Major Domo, believed to be an army officer stationed at Fort George Meade, Maryland, is the control officer for the Cypherpunks mailing list. The Scientologists have determined that Major Domo works in "Terminal Operations Access Division," or "T.O.A.D." By sending a message to majordomo(a)toad.com, with the body messsage of "unsubscribe cypherpunks" (without the quote marks), Major Domo may choose to take pity on you and remove you. Of course, his superior, Colonel Mode, may insist you remain on the list. --Klaus! von Future Prime THE X-ON CONGRESS: INDECENT COMMENT ON AN INDECENT SUBJECT, by Steve Russell, American Reporter Correspondent....You motherfuckers in Congress have dropped over the edge of the earth this time... "the sorriest bunch of cocksuckers ever to sell out the First Amendment" or suggesting that "the only reason to run for Congress these days is to suck the lobbyists' dicks and fuck the people who sent you there," ....any more than I care for the language you shitheads have forced me to use in this essay...Let's talk about this fucking indecent language bullshit.

1 0

Confusing MD5 and DSS? (was Rumor: DSS Broken?)
by Deranged Mutant 17 Dec '03

17 Dec '03

On 18 May 96 at 19:30, Robert Hettinga wrote: [..] > I was talking to someone who was talking to someone (have I said this is a > rumor yet?) who was solicited for comment by a Very Famous Reporter about > the fact that DSS, the Digital Signature Standard, promulgated by NIST, I > believe, had been broken. Hm. Isn't there supposed to be a "TM" after "Very Famous Reporter"? There was a recent "So..." thread on coderpunks about some collisions found for MD5... as reporters are wont to, perhaps MD5 got confused with SHS which got further confused with DSS? Just speculation upon speculation. Rob. --- No-frills sig. Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0