December 2003 - cypherpunks-legacy

Mimic Function Stego Programs?
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

Does anybody have a stego program along the lines of Peter Wayner's Mimic Functions? I'm looking for something that you can hand a grammar and a set of bits that will produce sentences in the grammar, plus a decoder that can take the sentences and reconstruct the bits. I have a friend who lives in a kleptocratic country where the local bureaucrats have made it clear they'll confiscate the main email node in his town if they catch traffic they recognize as encrypted, and text in some non-popular language may be less obvious than, say, Mandelbrot sets with stego-bits or other artwork. ----- PHB would work ok... http://www.unitedmedia.com/comics/dilbert/archive/dilbert960821-9577.gif ----- # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> Reassign Authority!

3 2

Re: Hayek (was: Cato Institute conference on Net-regulation)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:26 AM 8/28/96, Dr.Dimitri Vulis KOTM wrote: >Senile tcmay(a)got.net (Timothy C. May) rants: >> Indeed, Hayek has had a _lot_ to do with the Cypherpunks! From "The Road to >> Serfdom" to "Law, Legislation, and Liberty," his works have exerted a >> profound influence on me, and on many others. > >But he's fucking unreadable. I plan to teach economic this semester and >make every student read Hazlitt (economics in 1 lesson). I can't force them >to read hayek (or Rothbard) because they're fucking unreadable. Shit. Well, to one who inserts "(spit)" after nearly every name he cites, and critiques Hayek as "fucking unreadable. Shit.," I suppose Hayek must indeed seem unreadable. Shit. After all, Hayek rarely writes things like: "The senile Von Mises (spit) and his Sovok Cabal plotters...." As to "forcing" your students to read Hayek, just who is in charge? If you're the instructor, they can choose to read what you tell them to read, or be unprepared on the exams you give and possibly flunk the class. What part of "Required Reading" do you or your students not understand? --Tim (spit) May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

MSIE cryptography
by John Hemming - CEO MarketNet 17 Dec '03

17 Dec '03

Just downloaded the most recent English Version 2.1 for Windows 3.1. This does appear to do the same in terms of no encryption at all after the server hello. To be fair to Microsoft the number of cycles performed for the private key echange is quite high. Therefore, not having any key and not doing the RSA calculations makes the access quite a bit faster. The older versions (and some Win95 versions) that we have found around seem to just crash our server. I am not really feeling like debugging that.

1 0

Re: Thoughts on CyberTerrorism {per request}
by Remo Pini 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: whgiii(a)amaranth.com, cypherpunks(a)toad.com Date: Thu Aug 29 15:45:06 1996 > The issue of cyberterrorism can be divided into 3 main parts: > Catastrophic Terrorist Attack > Major Criminal Attack > Minor Hacker Attacks > The CyberTerrorist > The CyberTerrorist/Mad Scientist > The Computer Criminal > The Hacker It seems that you have a very broad view as to what constitutes terrorism. According to you, somebody who hacks into a system is a cyberterrorist. It seems, that would make a burglar a real life terrorist, too. So, to state my point: you use the word cyberterrorism in conjunction with ALL possible attacks on a system. Did I get that definition right? If not, why not? Greetings, Remo Pini - ------< fate favors the prepared mind >------ Remo Pini rp(a)rpini.com PGP: http://www.rpini.com/crypto/crypto.html - ----< words are what reality is made of >---- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMiWe5BFhy5sz+bTpAQGf5gf+L6Mkx4rqvdvsWe84j2TzLYaeOpbO7VCe S1Ia3EC9rByfXK71zmDCWRd7bTdmRULq297dD/Aqr7KWSEEtsBpQCLs8tGiPCV3I S+M613ud6Uy9QXtIyw14Ao7XILijWUDU2Hdwb5xfmJ/GIIQiZyDjMVLDXABM7rgb 4d+5AP+gh6VTRNqd2LmhwcvhUoupeJ40QxlRyOJ2A4ZNT7xaS7shUPnbS5kcuSrF z27nRmnaPkRmh3VD870OIoTRsWUOIQ9lwUkXrPdly9w8E23FyuXGPEMkW+KdUCNZ 6hI7YYsBnCJjM+aUzq3Ypt/N/iUcbPvKO4T+FtbKJHB15IbtDTUr4A== =pg+4 -----END PGP SIGNATURE-----

1 0

Realtime Keyserver update
by Osborne, Rick 17 Dec '03

17 Dec '03

First off, let me say thank you to all of those who responded to my first message, I gained alot of useful information. Mark Rogaski <wendigo(a)pobox.com> and I have decided to write up a RFC on it and are going through the initial stages of deciding on its functionality. We would appreciate any and all useful input on the subject. All ideas are welcome. You can email my autoresponder (at this same address) to get the latest information on what we've decided. Just make the subject GET KEYSERVER INFO for the response. Thank you for your interest and help. Rick Osborne

1 0

List owner named in law suit (fwd)
by Damien Lucifer 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Wed, 28 Aug 1996 16:52:36 -0400 (EDT) From: Clay Irving <clay(a)panix.com> Subject: List owner named in law suit I can't believe this one! Peter Laws, a recent graduate of the University of Arkansas, maintains an electronic mailing list called "SCAN-L". The list is provided for radio scanning enthusiasts. There are a few hundred subscribers to the list. Recently, in a thread about scanning publications, an employee of publication "A" apparently wrote something to offend someone at publication "B". Lo and behold, next thing you know, Peter is named in a lawsuit because he is the maintainer of the list. Something seems very, very wrong with this. I've never heard of anything like this before. Can a Email list maintainer be held liable for something someone else writes? Peter *just* graduated, and he needs all the help he can get. Thanks, in advance. -- Clay Irving N2VKG clay(a)panix.com http://www.panix.com/~clay/

1 0

Small German bank claims first with online service
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

> FRANKFURT, Aug 28 (Reuter) - German private bank Gries & >Heissel Bankiers on Wednesday launched an Internet banking >service -- the first comprehensive service of its kind in a >country where online bank options are gradually taking off. > The small Berlin-based bank linked up with U.S. computer >firm Hewlett Packard Co to develop the system, which Internet >users can access using a high-security personal code. > Clients will be able to view detailed balances on their >deposit, current and securities accounts and transact all normal >banking business on the World Wide Web. > Although online banking is a developing trend on the German >financial services market, larger banks with far broader >customer bases are working on more selective Internet packages. > Thomas Gries, one of Gries & Heissel's personally-liable >directors, said he regarded Internet banking as a logical >supplement to the bank's existing services. > ``We have had an Internet home page since October 1995. This >move from a pure information medium to an interactive one was a >logical one,'' Gries said. > Banking officials attending the CEBIT electronics conference >in Hanover this week said German online banking business was >poised to grow dramatically. > ``In the next six months, five to ten German banks will be on >the Internet,'' said Stefan Schoeller, board member at Bayerische >Vereinsbank AG unit Vereins- und West Bank. > Vereinsbank plans to launch Internet services within about >six months via its Advance Bank direct unit, pending a review of >security options. > Rival discount broker Direkt Anlage Bank, a unit of >Bayerische Hypotheken- und Wechsel Bank AG, on Tuesday launched >an Internet service for its securities account holders at half >the cost of its telephone banking service. > Meanwhile market leader Deutsche Bank AG is to test >electronic cash on the Internet this autumn in a joint >initiative with Dutch electronic payments group Digicash NV. > Vereinsbank officials at CEBIT said they planned a steady >expansion of the bank's online options over the coming years, >predicting 10 to 15 percent of its current account clients would >be online by the year 2000. Around 12 million Germans would rely >on home banking by that date, the bank predicted. > At the moment, around 3.7 percent of the bank's clients, or >45,000 individuals, handle their banking via PC alone, Stefan >Schoeller said. > Hewlett-Packard's German sales manager Michael Lindner said >his company, which last year helped set up the world's first >Internet bank, Security First Network Bank, had spoken to >several other German banks about some kind of Internet venture. > ``We certainly do not plan to limit our involvement to a >small exclusive bank,'' he said. > Lindner said there were about two million Internet users in >Germany and 35 million worldwide. He admitted that the amount of >bank business transacted on the Net -- about $200 million -- was >``very limited'' but predicted a dramatic rise in volume. > Vereinsbank's Schoeller said the cost advantage alone made >it worthwhile for customers to go online. A normal current >account incurred charges of 8.40 marks a month, while the same >account online would cost just 5.40 marks, he said. > All banks are stressing the security of the Internet. > > > _______________________ Regards, Boredom is the feeling that everything is a waste of time; serenity, that nothing is. -Thomas Szasz Joseph Reagle http://rpcp.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

Cypherpunks Lite
by youssefy＠ucla.edu 17 Dec '03

17 Dec '03

There was a posting by someone about three weeks ago that gave the address for a person who ran a filtered version of the cypherpunks list, can someone please repost that information?

2 1

Re: MSIE cryptography
by Peter Trei 17 Dec '03

17 Dec '03

John Hemming - CEO MarketNet" <johnhemming(a)mkn.co.uk> writes: > Just downloaded the most recent English Version 2.1 for Windows 3.1. > This does appear to do the same in terms of no encryption at all after > the server hello. > > To be fair to Microsoft the number of cycles performed for the private key > echange is quite high. Therefore, not having any key and not doing the > RSA calculations makes the access quite a bit faster. > > The older versions (and some Win95 versions) that we have found around > seem to just crash our server. I am not really feeling like debugging that. I understand that some versions of MSIE support SSL level 3. SSL3 includes a capability to switch 'cipher suites' in mid-session, or pick one at the start of the session. One of the standard cipher suites performs authentication, but not encryption. This is consistant with your description. Please ensure that the server you are connecting to is not configured for authenticate-only. It would be a pity to raise a big ruckus over what may be just a mis-configured server. Peter Trei trei(a)process.com

2 1

Re: In reference to comments made to me and to the Group
by Institute for Security and Intelligence 17 Dec '03

17 Dec '03

Mr. Geiger: I do not have interest in nor time for a flame war. But I do appreciate your perspective, whether or not I agree. Rather than flaming, I propose that all interested readers post their *CONSTRUCTIVE* ideas on the CyberTerrorism issue. If you feel it is not an issue, then don't respond. I'm not looking for opinions on politicians, the government, etc., nor do I care what you think of me or my views. However, if you can put some _solid_ thoughts into bullet items, or any other format you deem useful, perhaps we can move forward. Ideas. Actions. No commentary, raves, rants, flames, or other bandwidth wasters. Let's see what we come up with. Barry C. Collin Institute for Security and Intelligence

3 2