December 2003 - cypherpunks-legacy

NOC_ase
by John Young 17 Dec '03

17 Dec '03

10-8-96. FiTi: "Offshore financial centres agree to greater scrutiny." The Offshore Group comprises most of the biggest offshore financial centres including the Bahamas, Bermuda, the Caymans, Gibraltar, the Channel Islands, Hong Kong, Lebanon, Panama and Singapore. The agreement says home supervisors should be able to inspect the books of shell branches wherever they are kept. "In no case should access to these books be protected by secrecy requirements in the country that licenses the shell branch," it says. WaJo: "Cold War Spying: Mystery Gives Way to History." The release of the Venona documents tells us more about the state of intelligence agencies today in both Russia and the U.S. than it does about Stalin's spy rings. These and counterpart activities in Moscow dramatize the ongoing campaign American and Russian intelligence agencies are waging in the 1990s -- not against each other but at home, to preserve their budgets and public respect. And with "Venona: The Book" launched at last week's conference, can a CIA/NSA CDROM be far behind? ----- http://jya.com/nocase.txt (10 kb for 2) ftp://jya.com/pub/incoming/nocase.txt NOC_ase ---------- Anybody got a copy of the Offshore Group's agreement? Whither EUB? Or seen "Venona: The Book"? If so, does David Kahn have a part?

2 1

DSP wrinkle removal (was Voice Stress Analysis of Debates?)
by James A. Tunnicliffe 17 Dec '03

17 Dec '03

Adamsc wrote: > On Sun, 06 Oct 1996 15:28:40 -0800, jim bell wrote: > > >BTW, did anyone notice that some of the evening news anchors are > > >imaged via a camera/DSP to render as more youthful (e.g., removing > > >facial wrinkles)? > >Really? Where'd you hear this? I suppose it's not beyond the realm > >of possibility, but that would be rather sophisticated programming, > >particularly in real-time. > One of the big anchors admitted it. However it was only possible in > the studio. Might have even been a contrast-lowering gadget. Well, I already threw it out, so I can't verify it, but I know I read an article on this, I'm pretty sure in last week's TV Guide. I don't recall the technical details (I doubt any were presented), but someone (JYA?) could check last week's TV Guide and maybe even quote the article. I'm embarrassed to have to admit to actually reading TV Guide*, especially to this august group... Tunny ====================================================================== James A. Tunnicliffe | WWWeb: http://www.inference.com/~tunny Inference Corporation | PGP Fingerprint: CA 23 E2 F3 AC 2D 0C 77 tunny(a)Inference.com | 36 07 D9 33 3D 32 53 9C ====================================================================== * Um, I only scan it for stuff that is likely to show up as a discussion topic on cypherpunks. That doesn't leave much out, of course. begin 600 WINMAIL.DAT M>)\^(@,.`0:0" `$```````!``$``0>0!@`(````Y 0```````#H``$(@ <` M& ```$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06 `P`.````S <*``D` M!P`+``$``P#\``$@@ ,`#@```,P'"@`)``<`"P`!``,`_ `!"8 !`"$```!% M-S,W,#=!0T0X,C!$,#$Q.3,P.3 P04$P,$$U1C8P1 `"!P$-@ 0``@````(` M`@`!!( !`#P```!$4U @=W)I;FML92!R96UO=F%L("AW87,@5F]I8V4@4W1R M97-S($%N86QY<VES(&]F($1E8F%T97,_*0#_% $#D 8`_ <``!H````#`"8` M``````,`-@``````'@!P``$````B````5F]I8V4@4W1R97-S($%N86QY<VES M(&]F($1E8F%T97,_`````@%Q``$````;`````;NUN9C[K <UM2#8$="3"0"J M`*7V#0`,2\4N``,`+@```````P`&$)KD8"H#``<04 0``!X`"! !````90`` M`$%$04U30U=23U1%.D].4U5.+# V3T-4,3DY-C$U.C(X.C0P+3 X,# L2DE- M0D5,3%=23U1%.D)45RQ$241!3EE/3D5.3U1)0T542$%44T]-14]&5$A%159% M3DE.1TY%5U-!3D,``````P`0$ `````#`!$0`0````(!"1 !````Y00``.$$ M``!8!P``3%I&=3_<,NO_``H!#P(5`J0#Y 7K`H,`4!,#5 (`8V@*P'-E=&XR M!@`&PP*#,@1&`@!P<')Q,2 (50>R`H,SAP/%$X,2(G-T96T"@"Y]"H (SPG9 M.Q<_,C4>-0* "H$-L0M@;F<Q## S%/ +`VQI,S9?#? +51+Q"_(3H&\6$&,A M!4!!9&%M!/ @=T4<4CH*A3X@3P.@4\!U;BP@,#8>$!R1"#$Y.1ZP,34Z,@`X M.C0P("TP.!0P,!Z :@=P(&)ECFP#(!T](<%"5%<>@%!D:60@`'!Y`B!EI"!N M'&!I8R+P=!' S05 <P-P(O!O9B-Q(O#L978)\ N 9R,`!] $('\`<!&P!; E M01= (5H'<&$R9PF ('8',"*0(&.#'. $D&$O1%-0(W#T;R 70&X$@2*0!" $ M8)470" BP'4C@&9U`R#@*&4N9RX>@!= !&#W)T :0"%:9@#0!S$=(0N 9&ML M!Y I/PJ%(5A2`F4'0&QY/R @5]LD8!= )R* *7$@)& *P1<C@ 0`+C!)(\!U M<'#";Q'P(&ET)P0@(Q&_()$BP2* )%(70 = ;2%8MR0A,"$`D&(#$#!P>1Z MUF(ID"-T=PA@;"* (*#O*' CH"YQ(\%P+X$C,2.@KR<1'$$)P!S@;231+"%8 M_PJQ(S$IT K +A P8 .@,;+V+2,P!X N+,X>("0',R![)/ E9V0V@ ) )Q$P M<"[Q+D!(;W<DD07 ,' =(/\H\0(@.!$RU"QP.#$=ER12=18`=2)@;SPQ!= Z MT&C_!4 1P"2@)(,@D4"1)X$"(7LGX!8`+1;0/( L,23P9_\[@"<`/" *BQL/ M`= M)@K[_1O58P! +E @L1Z +] '0/TQL60X(". %T 'X#SA*8'/'H CT"_! M)Z!N)P5 /*'?!I X(4AQ,Z(OT&LC$ ?@_R_01V(BD271(S$^`0(@+V/]1P$G M(( 3H!(`,V OX2E!7SA!"V 6`!T@">!K,)%4\%8@1W4B<"H0+D OT/YD`B!) M(1= )Z @P212''&^: ,`3Z$B4!(`"W!L!"#R*$\"=6(%0"*A3=$I0>],H1'P M`C )@"DSA"/2(M+ *$I903\I02$T4OL1L 60:TV/3I(BD2* `,#F>3210'-Q M=1QA)$-+5?<Y#4QB%B!B"L!!<1'P,5&_*&! (RA1.X-:TQR0=2WRMTK#)-). M5BH>@ >0< 60'P<Q.!$H42]R(I!U9W5G54$)P A@<"Y?4"S,5/<>8"*P1-4] M82]B/V-/9%^R/435($HGL00@03PPMV!B2X$&D&8B\"Y ?"Y0,6>096(Z+Q " M0' ZZ"\O=VAP+@N 9R H@<4C4"X%H&TO?C\P8(CW+\!HQA/A<C @-,$_8 .@ MZ6=A4$<H,$8DT020$Z -"X!T9^ N0$-!(#(H,R!%$B!&;7!!0\UM4$0>D&X` M-S=EAFFC_D!J=VE"/Y%G87"O+D!#L&$>D#<@1#EQT&UP,Y5N,#,2(#5M<#E# M8+\/=%]U;W9_9/XJ(%5M_T<"/5,$\ .1/.$"$#41/S!O#= C=%YA0Y!K(+!= M\W/O)9 'X# `*.)A1-4B8 3P/U[ `)!+TC5 (T!+PF-YIS50;($>8&MS/#%4 M(Y*?3R 'D$D2+'! ,FUU$;!_2$-$U20A5&$1X3D&%F$``8)P````0 `Y`# J M)[/KM;L!`P#Q/PD$```"`4<``0```# ```!C/553.V$](#MP/4EN9F5R96YC M93ML/4Q!3D1252TY-C$P,#DQ-#$Q,#%:+38V,@`"`?D_`0```$H````````` MW*= R,!"$!JTN0@`*R_A@@$`````````+T\]24Y&15)%3D-%+T]5/4Y/5D%4 M3R]#3CU214-)4$E%3E13+T-./5153DY9````'@#X/P$````5````2F%M97,@ M02X@5'5N;FEC;&EF9F4``````@'[/P$```!*`````````-RG0,C 0A :M+D( M`"LOX8(!`````````"]//4E.1D5214Y#12]/53U.3U9!5$\O0TX]4D5#25!) M14Y44R]#3CU454Y.60```!X`^C\!````%0```$IA;65S($$N(%1U;FYI8VQI M9F9E`````$ `!S!P`$,XZK6[`4 `"#!PV8*SZ[6[`0,`#33]/P```@$4- $` M```0````5)2AP"E_$!NEAP@`*RHE%QX`/0`!`````0`````````+`"D````` M``L`(P```````@%_``$```!/````/&,]55,E83U?)7 ]26YF97)E;F-E)6P] M3$%.1%)5+3DV,3 P.3$T,3$P,5HM-C8R0&QA;F1R=2YN;W9A=&\N:6YF97)E -;F-E,BYC;VT^``#M2C$T ` end

1 0

Re: Anonymous E-mail
by Graham Toal 17 Dec '03

17 Dec '03

Do not email this site again. Do not telephone or fax. Put us on your "Do not call" list. By the way, it's not a very good sign of confidentiality when one connects to your web server and receives a flood of cookie requests. Also I see no pgp encryption, no mix of independent remailers - this system has no privacy whatsoever. Even if you're not a front for the KCIA yourself, all it takes is someone to monitor the 3 trunks to your servers and your entire anonymity is lost. I think the cypherpunks will have a good laugh at this one. G > From isp(a)PINmail.com Tue Oct 8 06:29:37 1996 > From: isp(a)PINmail.com > To: Internet Service Provider <isp(a)PINmail.com> > Date: Tue, 8 Oct 1996 16:43:35 +0000 > Subject: Anonymous E-mail > > Dear Internet Service Provider, > > Sorry for bothering you, but we would like to introduce a new Internet > service which may be of interest. > > PINmail utilizes our proprietary software to make it easy for users to > send anonymous e-mail and newsgroup postings through the World Wide > Web. > > Private and confidential. Easy to use. Low annual cost. No software > installation and upgrade headaches for your subscribers. And no > customer service nightmares for you. > > Please take a look at http://www.PINmail.com/ > > We are now seeking to establish mutually beneficial business > relationships with aggressive Internet Service Providers (ISPs) > to develop distribution channels for PINmail. > > Our Distributor Program offers you an opportunity to provide your > subscribers with an exciting value-added service, and create a > potentially lucrative revenue stream for yourself. > > For each new PINmail client with your domain name in his/her e-mail > address, we will pay you $5 (US currency). > > You have the option to retain the $5 for yourself, or rebate it > partially or entirely to your customer(s). > > ALL YOU HAVE TO DO IS SIGN-UP AS A PINmail DISTRIBUTOR. THEN > EVERYONE WITH YOUR DOMAIN NAME IN THEIR E-MAIL ADDRESS > WHO REGISTERS WITH PINmail WILL EARN YOU $5!!! > > EVERY SINGLE ONE, NO MATTER THE SOURCE!!! > > In return, we require that you do two things. First, place a PINmail > banner ad on your site. Second, send an e-mail message to all your > subscribers introducing them to PINmail. That's it! > > Many thanks for your patience and bandwidth, and we look forward to > working with you to develop this dynamic new method of confidential > Internet communications. > > Best regards, > > > Jack W Flader, Jr > Director > AsiaFocus International Inc > > PS. If you would like to test this service, please send an e-mail to > isptest(a)PINmail.com specifying your preferred PINmail address and PIN. > We will provide you with a complimentary account for one month, which > will allow you to experience the many powerful features of PINmail. > > _______________________________________ > PINmail > Private and Confidential E-mail Service > www.PINmail.com >

2 1

Re: Recent Web site cracks
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

yes, i heard that about 50 microseconds after i posted. another thing that i have been thinking is that both of these cracks were inside jobs, which would explain any number of things. -paul > From stewarts(a)ix.netcom.com Tue Oct 8 12:36:57 1996 > From: stewarts(a)ix.netcom.com > X-Sender: stewarts(a)popd.ix.netcom.com (Unverified) > X-Mailer: Windows Eudora Light Version 1.5.2 > Mime-Version: 1.0 > Content-Type> : > text/plain> ; > charset="us-ascii"> > Date: Tue, 08 Oct 1996 09:37:23 -0700 > To: pjb(a)ny.ubs.com > Original-From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: Re: Recent Web site cracks > Cc: cypherpunks(a)toad.com > Content-Length: 1263 > > At 09:46 AM 10/8/96 -0400, pjb(a)ny.ubs.com wrote: > >The recent cracks of the DOJ, CIA and Dole web sites have caused me to think > >about just what is going on here. > > > >Do you suppose that these entries were made via the httpd route, maybe via > >cgi-bin, or just a straight telnet-type entry to the server? I don't know > >what operating systems were involved with these three systems, or even if > > The DOJ and CIA sites were actually cracked; don't know the mechanisms. > The dole-kemp96.com and dole-kemp96.org domains were spoofs - they > have similar names to the real site, and people reach them by accident > or by hearing about them. According to today's San Jose Mercury News, > the web designer who registered them did so just before Dole announced > Kemp as his VP, and tried to sell his design services to the campaign. > They didn't buy it, and the names were sitting around with nothing > better to do anyway, so he decided to have a good time with them. > Supposedly he's gotten about 40,000 hits and the "real" site got 1,000,000. > > > # Thanks; Bill > # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com > # You can get PGP outside the US at ftp.ox.ac.uk > Imagine if three million people voted for somebody they _knew_, > and the politicians had to count them all. > >

1 0

RE: Recent Web site cracks
by Mullen Patrick 17 Dec '03

17 Dec '03

Which firewalls did they use, what are the holes, and how can you plug and/or exploit them? PM _______________________________________________________________________________ From: Dr.Dimitri Vulis KOTM on Wed, Oct 9, 1996 3:20 Subject: Re: Recent Web site cracks To: cypherpunks(a)toad.com stewarts(a)ix.netcom.com writes: > The DOJ and CIA sites were actually cracked; don't know the mechanisms. They used firewalls that are known to be easily crackable. ^^^^^^^^^^ ^^^^^^^^^^^^^^^^ --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps ------------------ RFC822 Header Follows ------------------ Received: by mail.ndhm.gtegsc.com with SMTP;9 Oct 1996 03:20:19 -0400 Received: from toad.com by delphi.ndhm.gtegsc.com with SMTP; Wed, 9 Oct 1996 7:17:16 GMT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id QAA26393 for cypherpunks-outgoing; Tue, 8 Oct 1996 16:51:04 -0700 (PDT) Received: from uu.psi.com (uu.psi.com [136.161.128.3]) by toad.com (8.7.5/8.7.3) with SMTP id QAA26380 for <cypherpunks(a)toad.com>; Tue, 8 Oct 1996 16:50:40 -0700 (PDT) Received: by uu.psi.com (5.65b/4.0.061193-PSI/PSINet) via UUCP; id AA00949 for ; Tue, 8 Oct 96 19:43:02 -0400 Received: by bwalk.dm.com (1.65/waf) via UUCP; Tue, 08 Oct 96 16:54:14 EDT for cypherpunks(a)toad.com To: cypherpunks(a)toad.com Subject: Re: Recent Web site cracks From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) Comments: Dole/Kemp '96! Message-Id: <9VZHVD1w165w(a)bwalk.dm.com> Date: Tue, 08 Oct 96 16:53:43 EDT In-Reply-To: <199610081636.MAA10912(a)attrh1.attrh.att.com> Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. Sender: owner-cypherpunks(a)toad.com Precedence: bulk

1 0

Re: ElGamal
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

> Tim May sits at his terminal dressed in five-inch stiletto heels, fishnet > stockings, a gold-lame mini-skirt, a purple halter with girdle underneath to > keep in his flabby gut, A Fredericks of Hollywood padded bra also underneath > the halter, a cheap Naomi Sims pink afro wig, waiting to yank his crank > whenever a black man responds to one of his posts. No, you must be confused, I believe you are talking about Dmitri Vulis or whatever his fucked up name is.

1 0

Re: pgp, edi, s/mime
by ratak 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: jubois(a)netcom.com, cypherpunks(a)toad.com Date: Wed Oct 09 10:19:39 1996 t: > > - S/MIME and PGP are the two leading candidates for encrypting EDI > messages, > S/MIME inside the US, and PGP outside the US where S/MIME is unavailable. > How far along has S/Mime come now, can they offer the same key sizes as PGP...? ___________________________________________________________________ GarGoyle Securities - -Intrusion Assessment Systems - -Security Consultation/Education/Curriculum Development - -Project Management/Research/Analysis World Wide... - -Member of CITDC (Canadian International Trade Development Council) - -Email: ratak(a)GargSec.mb.ca (Jason E.J. Manaigre) - -Web: www.GargSec.mb.ca - -Email for PGP key with phrase 'Get Public Key' as Subject - -2048 PGPKey iD E2 FA 30 E5 F5 AD EC F3 00 9A 9D 33 59 FC DF AD ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMlvCj/qtmO8M92GRAQFNBAf8CVzTxtle7jvTQFq6UM9MpEGjvrnoSHoO NMidciwyht0AqyGNPqNxczU/arpCAQwluwkhtTRor8lYsUWLLLyZB8d2DGs1i/En 3dE4WIXnNSR/G4YjHf8ln/DwE+YbHHFwEve5zSJAf4Gnvt7+LRo+VJPq34MaJgyc 5888BrSMHKTo5pyISAz+LQhDJptWMZwPsldrZctWI0QW/xgFMCmZr8qt2VYWdlZw XO+Px+QadwvNJlL8pR2ZT3l458rzU5B7kS3CKVJDl0iUlVWK2/xHiuRUHfo1Yu1Z VB6jFEw6IsQI8ukrANu90qgDcab3YQpe99BQCd/imZfKWSzO3vsieQ== =Ew/I -----END PGP SIGNATURE-----

5 5

Microsoft CAPI
by Ravi Pandya 17 Dec '03

17 Dec '03

>From today's HotWired Packet http://www.packet.com: "Today Microsoft is using similar technology as part of its Cryptography API: You can't load an encryption engine into Windows 95 or Windows NT unless that engine has been specially signed by Microsoft's corporate key. The reason for this restriction, says the company, is the Clinton administration: Microsoft couldn't have gotten export permission for its operating systems if users could easily plug in crypto engines that hadn't been approved. " This is disturbing, if true, though I suspect there is also a less ominous reason: you certainly want your cryptography provider to be trusted, and you want to be sure the code has not been altered. The implications really depend on Microsoft's policy on signing cryptography engines, and whether they allow a way to delegate signature authority. Ravi

5 4

RE: crypto cd once more
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:23 PM 10/8/96 +0100, JR(a)ROCK.CNB.UAM.ES wrote: >>1) is there a system that can handle unix, windows and mac filenames >> > Yes. Use Rock Ridge extensions. That will allow for long UNIX >names. If you couple it with ISO9660 youget both worlds. Windows 95 will read rockridge discs, but will not display the long filenames. (Why they have not added those extensions to MSCDEX on Win95 is a mystery. Maybe Bill Gates had a bad experience at a showing of "Blazing Saddles".) --- | "Remember: You can't have BSDM without BSD." - alan(a)ctrl-alt-del.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

pgp, edi, s/mime
by Jeff Ubois 17 Dec '03

17 Dec '03

Interesting comments from a member of the IETF EDI-INT group, which is developing standards for secure EDI over the net, and managing a Commercenet pilot project: - S/MIME and PGP are the two leading candidates for encrypting EDI messages, S/MIME inside the US, and PGP outside the US where S/MIME is unavailable. - If PGP 3.0 comes out on time with promised features, it could gain adoption by large companies as a standard means of encrypting EDI messages; that would pull smaller companies along, but it has a narrow window of opportunity and could lose to S/MIME products like those from Deming. - The G7 governments will impose key escrow on large companies trading over the net, and while non-escrowed systems will continue to be available, they are likely to be illegal, and certainly will be marginalized.

1 0