December 2003 - cypherpunks-legacy

128 bit MS Internet Explorer
by bart＠netcom.com 17 Dec '03

17 Dec '03

MS got their site, www.microsoft.com, straightened out. I was able to download with about the same form filling as required for Netscape 3.0. b

1 0

Re: Cypherpunks the movie
by nobody＠replay.com 17 Dec '03

17 Dec '03

why stop at a video why not a musical.... "Cypherpunk The Musical" Broadway here we come... Featuring Songs: "PGP why is it so hard to break" "We write code" "Why were we called shitopunks?"

1 0

Re: Husband/Wife jailed for saying Clinton Sucks
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

true, then there are those who are brain dead, and continue to participate, notice that i did not say serve, in public office for years. -paul > From zachb(a)netcom.com Thu Aug 22 19:18:40 1996 > Date: Thu, 22 Aug 1996 16:18:23 -0700 (PDT) > From: "Z.B." <zachb(a)netcom.com> > Subject: Re: Husband/Wife jailed for saying Clinton Sucks > To: pjb(a)ny.ubs.com > Cc: cypherpunks(a)toad.com > Mime-Version: 1.0 > Content-Type> : > TEXT/PLAIN> ; > charset=US-ASCII> > Content-Length: 487 > > On Thu, 22 Aug 1996 pjb(a)ny.ubs.com wrote: > > > perhaps we should all add a line to our sigs to the effect that we hope > > he dies, and soon, natural causes, of course. Hmmm, what exactly does > > 'natural death' include? > > > > -paul > > When I read this, a quote from a certain famous sci-fi writer came to mind: > "All forms of death are ultimately due to heart failure." > > > --- > > Zach Babayco > > zachb(a)netcom.com <----- finger for PGP public key > http://www.geocities.com/SiliconValley/Park/4127 > > >

1 0

Re: U.S. Army Private Faces Spying Charges
by Peter Trei 17 Dec '03

17 Dec '03

> > Thomas C. Allard wrote: > > > > His father said an Army major at Fort Bragg, whom he declined to name, > > had urged him to persuade his son to sign a confession, so prosecutors > > would not seek the death penalty. > > Isn't plea bargaining wonderful? > > Gary Iff this guy is guilty (and I have no particular reason to doubt it), I was still under the impression that treason carried the death penalty only in wartime. Peter Trei trei(a)process.com

2 1

Middleman has a new name!
by John A. Perry 17 Dec '03

17 Dec '03

It has been brought to my attention that the name "middleman" is too long for the DOS-based remailer programs. In lieu of this I'm changing the listed name middleman(a)jpunix.com to middle(a)jpunix.com. The change will be effective for both the type-I and type-II remailers. I will also make this change to the type2.list/pubring.mix files shortly. The remailers will continue to also answer to middleman(a)jpunix.com. John Perry - perry(a)alpha.jpunix.com - PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers.

1 0

ctcp.0.9
by Damien Lucifer 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This is a program i found on unimi that offers secure socket connections, utilitizing a simple server/client. It can be installed without root priveledges and uses d/h for key transfers. Anyone looked this package over, and if so what is your oppinion about it? Included below is the THEORY file that describes the key exchange: The encryption negotiation is performed using a protocol similar to FTP/SMTP/NNTP. The client sends commands to the server and the server returns a four-digit response code. Unless stated otherwise, all numbers in this document are hexadecimal with the most significant byte first. When a connection is initiated, the server should send a 2000 response indicating that it is ready to accept commands. Commands: DH3DES - Diffie-Hellman Key exchange followed by Triple-DES encryption If supported, 3001 is returned. The following commands are then expected: MOD - If an argument is supplied, it is the number, in hexadecimal, to use as the modulus. Responses: 2210 - okay 4031 - invalid number 4032 - too small 4033 - too large If no argument is given, the server should supply the modulus, sending 2211 followed by the modulus. If the server is unable to supply a modulus, 4034 should be returned. GEN - this should follow MOD. The generator to use. The format is the same as that of the MOD command. The response codes are 2210, 2211, 4031 or 4034 EXCH - Key exchange Client sends exch followed by gen raised to hir secret exponent. Server sends 4030 if a gen/mod has not been agreed upon. otherwise 2212 followed by gen raised to its exponent ENCR - Begin encrypted Session 4020 - No key selected for encryption 2300 - Encrypted session begin LPORT xxxx - this command takes a 16-bit hexadecimal port number argument, and connects to the specified TCP port on the local host. Responses: 2400 - connected 4010 - Unable to connect 4011 - Access denied RPORT xxxxxxxxxxxx - Connect to remote port The argument to this command is a 48-bit hexadecimal number representing the IP address and port number to connect to. The response should be first 2500, then when the connection has been attempted: 2400 - connected 4010 - Unable to connect 4011 - Access denied QUIT - quit Response: 2100 - Goodbye Summary of error codes: 1xxx - informational messages 10xx - server is supplying additional information that the client may ignore. 11xx - server is responding to a client's request for information 2xxx - okay 20xx - Server is ready 21xx - Disconnect, goodbye 22xx - Command okay 23xx - Encrypted session begins now 24xx - Session with another service begins now 25xx - Command ok, operation in progress, please wait 3xxx - ok so far, send the rest 4xxx - command was okay but could not be processed 5xxx - command not understood or not implemented Triple-DES The triple DES encryption uses output feedback exclusive-ored with a non-sequential counter. There are three counters, each of which is exclusive-ored with the data block before encryption with the corresponding key. The counters are incremented in each round by a shared, secret value which is part of the total key. The result of each round of encryption is exclusive-ored with the data stream. I0 ------ ----- | | | I1 ----- | ---A1------- | ---> \ | | \ | --XOR | --XOR | | | E1 | E1 | | | I2 ----- | ---A2------- | ---> \ | | \ | --XOR | --XOR | | | E2 | E2 | | | I3 ----- | ---A3------- | ---> \ | | \ | --XOR | --XOR | | | E3-------^ E3-------^ | | v v XOR with data stream I0 - Initialization Vector I1 - Initialization of counter 1 I2 - Initialization of counter 2 I3 - Initialization of counter 3 E1 - Encryption with Key 1 E2 - Encryption with Key 2 E3 - Encryption with Key 3 A1 - Add increment value 1 A2 - Add increment value 2 A3 - Add increment value 3 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMh219rGlo8DEMb2JAQEzWgP/VpcWiL8+UN+7l7wCtUr6N5Bk4iqG5fYq Jb9ImvVA3h2k8cGz/ETBQW/3H9GA9jCsqzLrgcUewAa8CgdmhPoVE04e2scAxp4l y2peJlQmakCl2RCKHJZPTTaOLnsBU4NCZxwW8Q4xeUb0KBYfiW9XeULleyhhfsO2 n7XYpc4XhaY= =vGhK -----END PGP SIGNATURE-----

2 1

IE Security Flaw
by jya＠pipeline.com 17 Dec '03

17 Dec '03

Markoff reports today on the MS IE security flaw discovered by the Princeton team and posted here recently. See: http://www.nytimes.com/yr/mo/day/news/financial/web-browser-flaw.html

1 0

Re: Lesson 2 in cracking (cryptoanalysis 001)
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-08-21 20:43:50 EDT, you write: >The point is that if you took two novels by the same author and >completely sorted them alphabetically they'd be almost the same. The examples cited did this by word, not by message as your stating. >So a block of PGP encrypted ascii-armored (i.e. 8=>7-bit encoding) >wouldn't affect the frequency counts? Tell me, how long have you been on >your current medications? I was talking about the algorithm as given, not PGP. > That's the point!! IT'S A JOKE!!! You know, "hahaha - very funny"? Not a > serious proposal? I know! But at least it is relevent to the group! How many points of attack have you seen on here? How many techniques have shown up here? P.S. My apologies to the fella I called a troll. It was uncalled for - lacking in social skills.

1 0

Re: Spamming (Good or Bad?)
by James C. Sewell 17 Dec '03

17 Dec '03

At 03:35 AM 8/23/96 +0000, Vipul Ved Prakash wrote: > >This is peculiar. Nobody seems to mind ads in Newspapers, printed >magazines, TV, and for that matter web sites. That is unwanted stuff I'd suggest that most/all of us 'mind' ads in papers, tv, etc. The difference is that while we can do nothing about commercials on TV (short of breaking federal law and jamming the signal) we can do something about spam. If there is enough concensus we can develop/distribute/encourage the use of new mailers that will help defeat spam. For example: If mail comes into a server that has more than 25 recipients then it is only forwarded to those who have "signed up" for that sender. When we subscribe to Cypherpunks we also have to register that with our network of mail servers. Then if Mr. Spam sends stuff out it's not been "signed up" for so it gets trashed. I don't really like mail servers redirecting my mail, but perhaps we could arrive at a reasonable criteria for filtering if we tried real hard. Jim Jim Sewell - jims(a)tansoft.com Tantalus Incorporated - Key West, FL

2 1

Verdict in "MTV" Case
by tcmay＠got.net 17 Dec '03

17 Dec '03

Indiannapolis, IN (A.P.) -- A jury has awarded the State of Indiana $25 million in damages in the case of "Indiana v. Music Television." Music Television, also known as MTV, was accused of costing the state of Indiana more than $100 million in additional educational expenses due to students watching MTV when they should have been doing their homework. The jury foreman in the case was quoted as saying, "Like, like the kids are, like, goofin' off. Besides, MTV doesn't like play enough old stuff, like Zeppelin and Floyd." Following the various court decisions to award damages to states for medical costs associated with smoking by state residents, a barrage of similar lawsuits is happening across the country. School systems are suing book publishers, movie makers, television broadcasters, shopping malls, and miniature golf arcades. Makers of sports equipment are facing crippling lawsuits by insurers. The last remaining American bicycle maker, Trek, announced that it is withdrawing from the U.S. market, following the $37 million judgement against it in "Oregon v. Trek." --Klaus! von Future Prime

2 1