December 2003 - cypherpunks-legacy

Majordomo w/ built-in security
by Christopher Durfy 17 Dec '03

17 Dec '03

Hi guys, I'm new to the list, and it looks like a good one ;) I've got a question, and was hoping someone could point me in the right direction. Here's the situation: A large group of Doctors want to have an email list set up, but are concerned about privacy issues. Client's confidential patient info is likely to be talked about, and any interception of data would likely caused them to get sued =P Would the best way to get somehow incorporate PGP into the majordomo or smartlist (if it's possible) and either assign keys to all the doctors (or one key for ALL the doctors maybe, to cut on admin times....) Anyone ever run up against a situation like this? Any pointers, horror stories or solutions are very welcome! Thx. -Christopher Durfy, chris(a)alphawave.com

3 2

using TCP sequence numbers for stego
by Mark M. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would using TCP sequence numbers to carry stegoed data be practical? The data would have to be removed at a lower level. This would mean kernel patches and extra system calls in UNIX. I have no idea what this would require under Windows or Mac. This seems like the ideal place to stego data because most OS's have started using random sequence numbers. Any ideas? Mark - -- finger -l for PGP key PGP encrypted mail prefered. -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQEVAwUBMmP7sSzIPc7jvyFpAQHlUQf+JwmltREsYq65f5YPOdubmr8hxAjfiOa+ zIX7VpP75qm+SgiZTxBaioN2pVzW0yCb36IqNKYuZuUww/ip8Bh/0aNnyzNguD+p jXVOLpzbfBeD33Q+NLag6N2R2PogZQT2yx2vfSwQ9zeyoZ1CYTxiKZHDq06czzAt gq3wszp0l9U1jr2xTnmprNYofYUrvWitpId41tTbyx336dmJ5lNKS1Nssu/+vCZC B9Gib+s/ayQz6BGuEDCVqr36cZY75uHYfUuMnIHnONYAsFC4qR1vNdJ/OnCXJJR2 D6Ns9POsb9NGCh0pFzGjDavpQKwIU9b/Br30vge1tKsPA30GByPJMQ== =NaaI -----END PGP SIGNATURE-----

1 0

Dmitri
by L.Detweiler 17 Dec '03

17 Dec '03

I just pledged $20 for Dmitri's trip and want to publicly encourage him to attend. Dmitri, I can attest the cpunks and Sandy are gracious hosts. (lately Dmitri has been sending me mail intermittently about tcm) because of the extremely wide interest and "buzz" factor of this activity, I suggest this invitation of guests with donations be made a semi-regular feature of cpunk meetings, with discussions on the list about future guests. btw, I have recently tweaked my www site slightly for anyone who is interested. oh, and btw, there was a fantastic article on crypto in last week's newsweek by Steven Levy, I don't recall seeing mention of it here. it mentioned "crypto anarchy" and the 4 horsemen of the infocalypse. a very concise yet informative and current article. | /\ |\| /~ L~ L_ /~~\ | | \_ L_ http://www.csn.net/~ldetweil/

1 0

[TIMMY MAY] Timmy May doesn't like being exposed as a liar
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

More spam from FOTM (friends of Timmy May): >Received: from miafl2-16.gate.net (miafl2-16.gate.net [199.227.2.143]) by osceola.gate.net (8.7.6/8.6.12) with SMTP id HAA187758; Wed, 16 Oct 1996 07:13:05 -0400 >Date: Wed, 16 Oct 1996 07:13:05 -0400 >Message-Id: <199610161113.HAA187758(a)osceola.gate.net> >From: Jim Ray <liberty(a)gate.net> >To: root(a)bwalk.dm.com, postmaster(a)bwalk.dm.com >X-Priority: Normal >Subject: Dr.Dimitri Vulis KOTM >X-Mailer: Pronto Secure [Ver 1.10] >X-Prontosecureinfo: T=signed, P=x-pgp > >-----BEGIN PGP SIGNED MESSAGE----- > >Mime-Version: 1.0 >Content-Type: text/plain >Content-Transfer-Encoding: 7bit > >To: root(a)bwalk.dm.com, postmaster(a)bwalk.dm.com >Date: Wed Oct 16 07:10:45 1996 >Can you folks somehow get Dr.Dimitri Vulis KOTM <dlv(a)bwalk.dm.com> to quit >sending anonymous messages to cypherpunks? I have killfiled him, but he >sends things with subject headers like "RSA" through the anonymous remailers >and it is impossible to killfile them and still get interesting anonymous >messages. > >He is evidently angry at another subscriber, Tim May, for showing the list >how much of a fool he was regarding economics in the past, but now he shows >how much of a fool he is. Below is an example, the subject was RSA, and it >could only have come from him, I assure you. [BTW, this is not a threat of >legal action on my part against you, it's just that you are lowering your >reputations by letting him continue spewing garbage, and now that even >killfiling him hasn't worked, I am trying to convince you to talk to him and >encourage him to please take his lithium regularly.] >JMR > >- -----Begin Included Message ----- > >Date: Tue, 15 Oct 1996 15:35:04 -0400 (EDT) > From: amnesia(a)chardos.connix.com (Anonymous) >To: cypherpunks(a)toad.com >Cc: > >Timmy C. Mayflower was born when his mother was on the >toilet. > > > >- ---- End of forwarded message ---- >One of the "legitimate concerns of law enforcement" seems to be >that I was born innocent until proven guilty and not the other >way around. -- me > >Defeat the Duopoly! Vote Harry & Jo http://www.HarryBrowne96.org/ >___________________________________________________________________ >PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 >I will generate a new (and bigger) PGP key-pair on election night. ><mailto:jmr@shopmiami.com> http://www.shopmiami.com/prs/jimray >___________________________________________________________________ > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQCVAwUBMmTCum1lp8bpvW01AQHAugP/e/GTay0y778Ziy3JbWCGBb+tRxM8Q1Zi >Z3aIP97hNYYoD7QKi9yP1gS3ZRbg/9ZXJonWTi+zmZ7yUjmWndczmXJ2IAC+Rgpx >7MQmrhjU4htmiMCuawNmVLZRNZMl/+kNnX15taA8GdXTcuPXUsGN0y39oMbbqT5g >do3B4yicgrY= >=iix/ >-----END PGP SIGNATURE----- >

1 0

RSA
by amnesia＠chardos.connix.com 17 Dec '03

17 Dec '03

Timmy C. Mayflower was born when his mother was on the toilet.

1 0

SUN_syn
by John Young 17 Dec '03

17 Dec '03

CIAC Bulletin H-02 issues Sun's thumb-busting god-dam-its for SYN flooding: ============================================================================= SUN MICROSYSTEMS SECURITY BULLETIN: #00136, 9 Oct 1996 ============================================================================= BULLETIN TOPICS In this bulletin Sun discusses the TCP-based "SYN flood" denial- of-service attack. We suggest ways to tune most Solaris/SunOS systems to make them more resistant, and explain which releases and configurations stand up best. We also discuss which customers are most likely to be affected, and the degree to which firewalls and similar insulating arrangements can protect an enterprise from this attack. This Bulletin also describes the patches and other changes Sun commits to making in the future in response to the emergence of such attacks. This denial-of-service attack, which affects all operating systems which implement the TCP protocol, has previously been discussed in CERT(sm) Advisory CA-96.21, issued on 19 September 96. Attacks against several prominent service providers have been well documented in the last several weeks in Time magazine, the Wall Street Journal, and many other national and international periodicals. I. What has Happened, Who is Affected, What to Do II. Understanding the Vulnerability III. Technical Recommendations IV. Plans and Schedules APPENDICES A. Queuing Capacity Vs. Attack Rates B. How to obtain Sun security patches C. How to report or inquire about Sun security problems D. How to obtain Sun security bulletins or short status updates ----- http://jya.com/sunsyn.txt (48 kb) ftp://jya.com/pub/incoming/sunsyn.txt SUN_syn

1 0

[POINTERS] On Vulis' net background
by Douglas B. Renner 17 Dec '03

17 Dec '03

Some *very* informative background data may be found at: http://www.math.harvard.edu/~verbit/scs/cranks/from-Schlomo.html#vulis Of course the title KOTM may also have been fraudulently obtained (if USENET vote forgery bears any relevance...) see: "Fraudulent votes from bwalk.dm.com cited" in (are we surprised?) news.admin.net-abuse.misc Here's a pointer to one archive: http://www2.altavista.digital.com/cgi-bin/news?msg@3945@misc%2enews%2einter… Doug

3 4

mail software for multiple addrs
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

hi everyone. I'm asking this here because I know that cpunks spend a lot of time in email. I'm looking for some GUI software that can deal well with 1. multiple internet providers - i.e., if I have multiple providers, I would like the software to be able to easily deal with them all, without having to retype IP addresses etc. into dialog boxes 2. multiple email accounts - i.e. the mail software is not going to use merely one POP account, but should be able to have different email addrs and passwords over POP 3. multiple mailing lists - I'd like a way to sort incoming mail into separate folders/directories based on header fields, and a way to automate this. (i.e. not have to go through the same procedure each time of typing the fields etc.) I am aware of Netscape's mail features, which don't really handle much of the above. also, I suspect many people require some combination of the above, so there is probably software out there to do it.. at least there is a demand. also, I'm aware of procmail but would prefer something that supports a GUI interface. also, if you know of a better place to post this query, please tell me. thanks much;

2 1

More threats from FOTM (Friends of Timmy May)
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

I'm receiving more harrassing e-mail from the asshole who threatened to sue me for libeling Timmy May (fart). Since this asshole has never been heard from before, I suspect it's just another of Timmy May's tentacles. Anyway, if you want a videotape, I'll put one together. If not, I won't. >Date: Tue, 15 Oct 1996 20:36:36 -0500 >From: "Douglas B. Renner" <dougr(a)skypoint-gw.globelle.com> >Subject: Re: Threats from FOTM (Friends of Timmy May) >To: "Dr.Dimitri Vulis KOTM" <dlv(a)bwalk.dm.com> >In-Reply-To: <Vi7TVD1w165w(a)bwalk.dm.com> >Message-Id: <Pine.3.89.9610152025.C3275-0100000(a)skypoint-gw.globelle.com> >Mime-Version: 1.0 >Content-Type: TEXT/PLAIN; charset=US-ASCII > > >> I've been receiving multiples copies of threats of frivolous lawsuits in >> connection with Sandy Sanford's kind offer to address the San Francisco > >Well then obviously your hands are tied then, aren't they? That was easy.

3 3

Re: Killing Mr. Wallace of "Savetrees"?
by azur＠netcom.com 17 Dec '03

17 Dec '03

> Tim May wrote: >I'm not a lawyer, but this is getting real close to the line. I doubt many >DAs would take it seriously, but I rather expect Mr. Wallace of >savetrees.com might discover this message and draw the reasonable inference >that his life is being threatened. Do you think this approach might stop the SPAM? PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Sacred Cow Meat Co. | --------------------------------------------------------------------- Counter-cultural technology development our specialty. Vote Libertarian. Just say NO to prescription DRUGS. "Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive." -- C.S. Lewis "Surveillence is ultimately just another form of media, and thus, potential entertainment." -- G. Beato

1 0