December 2003 - cypherpunks-legacy

Re: Goodbye
by John Young 17 Dec '03

17 Dec '03

At 07:04 PM 10/16/96 -0700, you wrote: >Thus the glory days of cypherpunks, an insider club of the best >and brightest, far superior to the common herd, where we planned and >organized for a world where the ignorant masses can no longer >rob and harass their superiors, a world where the elite can >live the good life in freedom and comfort and abandon the >useless worthless masses to wander blindly into ruin, despair, >and slavery, lost in a world they cannot understand, and will >no longer have the power to smash. Why, James, this reads very much like Robert McNamara's best and brightest in the Nam glory days, cheerleading the B&B gang's gory battles slaughtering the worthless masses for vain comfort of the elite Pentagon planners. I presume you are not a savagely scarred vet, wrecked by over-heated ambition of the B&B elite, just another rightly ignored McNamara crybaby aged-Whiz Kid. Take R&R for a long while, you need it. Go to your nearest VA Hospital and wipe-up bed pans. Then come back to c'punks and earn your rank, not just flaunt the vanity plates.

1 0

A home for stego in source code ?
by peter.allan＠aeat.co.uk 17 Dec '03

17 Dec '03

The monarchist lightning-hater has been cracking the whip again. > Where is highly sophisticated stego? Adam Back suggested several areas for investigation, including English text. Some weeks ago somebody suggested using synonyms in natural language to express stegodata. A synonym for a word in the message would be chosen from a defined set, and the choice that was made would express a bit or several. This seems related to the clever "alternate dictionary" idea in RFC-1938. But a lack of true synonyms (or programs that understand natural language) make it look pretty hopeless as a practical proposition. SOURCE CODE A POSSIBLE CHANNEL Even small programs often have several hundred symbols. The names given to these are mostly arbitrary, and they can be replaced (consistently) by other names by a program. In fact there "shrouded" source code is sometimes released to make it less clear to the human reader than the original source. In this application the names would be chosen randomly from a set of words and syllables (perhaps with some rules about which are plausible together). There is also a choice of StyleWithCaps and style_with_underscores. If the symbols (in order of first appearance) all have a CRC calculated on them I'd guess you could get 4 bits each without difficulty. There are also comments. These might be natural language, debugging code and never-really-got-this-working code. Maybe a CRC on each comment is worth 8 bits. Comments of the form /* Thanks to P.McNicholas, M.Davies and WorpleSword for advising on the next section **/ could be added with random names quite well (although the user might have to mark the complicated code fragments suitable for receiving such attributions). Names used could be lifted from a list of known helpful programmers ... And then there is layout. The kind of thing that is standardised with indent(1). This would be anti-standard in layout, choosing spacing and linebreaks and spaces with the stegomessage in mind. And some code constructions are capable of rewriting to add info to the message. 0==x , x==0 x>y , x<y i++ , ++i (sometimes) for , while if , switch (sometimes) Or variables could be added to hold intermediate values, and lengthen the source as our desired effect. There may be more scope for plausible stego in code that doesn't have to work. Next time you see a load of verbose mistyped rubbish called "Help me with my program!!!" it could be someone who got this idea ahead of me. I've been dipping into "Understanding and Writing Compilers" (Bornat, 1979). (free, withdrawn from library) It seems the early phases of a compiler build the symbol table as a tree and do various bits of analysis on the source. A good starting point for a program might be a compiler - rip out the translation and optimisation phases and add the stegoreader and stegogenerator. KEYED V. UNKEYED STEGO Assuming that the data hidden in stegofiles is random (keys or cyphertext) the enemy is supposed to be unable to tell whether there is really a message there. An example of unkeyed stego is the use of LSB of each byte in an image or audio file. In contrast, the subliminal channel mechanisms written about by Schneier use a key known to the intended reader. In this application keyed stego would seem to have an advantage over unkeyed in that the source could be made to keep to a house style while retaining some stego capacity. The seeds for the CRCs and style info (resembling ./indent.pro ~/indent.pro) could be user-defined. I'd still wouldn't want to hide plaintext under it, but it would give more flexibilty for the users. Would anyone like to write a version ? Then we could test my guesses about how many bits can be hidden. It probably won't be close to 1 in 8, but I think 1 in 30 should be within reach. -- Peter Allan peter.allan(a)aeat.co.uk

1 0

RE: [NOISE] I never knew that Dimitri Vulis was a net.legend
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

"Timothy C. May" <tcmay(a)got.net> wrote: >And here I thought it was the real history of the Net, especially the part >about how "the dandruff-covered Peter Vorobieff (spit) conspired with the >purebred Sovok Valery Fabrikant (spit) to spread the lies of the Jew >cripples dying of AIDS in Sovok-controlled clinics." >(hint: this a satire, based on the writings of Vulis, who speaks of people >as "lying purebred Sovok Tchurkas" (whatever _they_ are), and attaches >the charming word "(spit)" after nearly every person he references.) Just last week Concordia University in Montreal unveiled four new art installations; one dedicated to the memory of each of the four professors shot and killed by Valery Fabrikant. The works are in the form of tables so that they can be integrated with the student body. Raving on the net does occasionally have physical manifestations. Prend soin, James

1 0

Goodbye
by James A. Donald 17 Dec '03

17 Dec '03

Goodbye I am leaving cypherpunks for a while, perhaps forever. Why should anyone handle a high volume list as a list and not as a newsgroup? Our tools for handling newgroups are superior to our tools for handling mailing lists. The reason to prefer mailing lists is that the very inconvenience keeps out the ignorant masses. Word initially spreads person to person, and intelligent and highly motivated people make most of the contributions, Thus the glory days of cypherpunks, an insider club of the best and brightest, far superior to the common herd, where we planned and organized for a world where the ignorant masses can no longer rob and harass their superiors, a world where the elite can live the good life in freedom and comfort and abandon the useless worthless masses to wander blindly into ruin, despair, and slavery, lost in a world they cannot understand, and will no longer have the power to smash. In those days we forged the weapons and planned the strategies, defending the net against the enemies of freedom. But with the passage of time, we got the same half human trash as you encounter in the newsgroups, and less satisfactory tools to filter them. The glory days are long past, and cannot be revived by forming a new mailing list. Perhaps I will see you guys on Usenet, by and by. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

RE: USPS electronic postmark
by James A. Tunnicliffe 17 Dec '03

17 Dec '03

>Jonathan Litt[SMTP:littlitt@MIT.EDU] wrote: >Today I was at the Internet Expo in Boston and I sent myself a >postmarked email from the USPS booth. It is enclosed below for all to >scrutinize. >[...snip...] >I will also paraphrase something that was said by one of the people at >the booth: > > "We always send the message itself as an attachment. The message that > you see at first shows the postmark, and warns you not to open the > attachment if you are not the intended recipient. Just as with normal > mail, it is a federal crime to double click on the attachment to view > the contents of the message if the message is not for you." >[...snip...] >As stated above, here is the message in its entirety, exactly as it >arrived in my mailbox. Below that is the base64 decoded for your >convenience. (Official USPS warning:) >[...]If you are not the intended >recipient, you are hereby notified that any viewing, dissemination, >distribution, or copying of this message is prohibited. > >Only littlitt(a)mit.edu may view the enclosed message. [...unauthorized federally-protected not-for-your-eyes message deleted...] >Aaaugghh! I accidentally viewed the message! Now I'm a federal criminal! (A >veritable Public Enemy, I guess, given my additional crime of wearing my RSA >"munitions" shirt in full view of people who may well be dangerous foreign >nationals.) > >If I go down for this, I'm taking you with me, Jonathan. > >Tunny >====================================================================== > James A. Tunnicliffe | WWWeb: http://www.inference.com/~tunny > Inference Corporation | PGP Fingerprint: CA 23 E2 F3 AC 2D 0C 77 > tunny(a)Inference.com | 36 07 D9 33 3D 32 53 9C >====================================================================== > >

1 0

NAVAHO
by azur＠netcom.com 17 Dec '03

17 Dec '03

As most all on this list are aware, the U.S. Army made frequent and successful use of our indigenous people (often Navaho) for battle field communications during WW II. Now obviously Navaho is a widely recognized language and even our 'oppressive" government wouldn't dare tell such speakers, who might be under investigation for some alledged criminal activity, that were engaging in international communications that they could not use this or a similar form of communciation because LE might not be able to interpret its meaning. What would be the legal status of communicating with a language, too complex for easy human use, which required a computer to structure and translate between other human languages? What would be the ITAR implication of exporting such linguistic software? What about speaking or writing riddles or other 'indirect' coding in which the true meaning of spoken or written communication is other than the appearent (literature, especially mysteries have them)? Could export of software designed to create/interpret such riddles or 'hidden' meanings come under ITAR regulation? -- Steve PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Sacred Cow Meat Co. | --------------------------------------------------------------------- Counter-cultural technology development our specialty. Vote Libertarian. Just say NO to prescription DRUGS. "Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive." -- C.S. Lewis "Surveillence is ultimately just another form of media, and thus, potential entertainment." -- G. Beato

2 1

Anonymous Auth Certificates [was: Re: Blinded Identities]
by Carl Ellison 17 Dec '03

17 Dec '03

P.S. you might also check out http://www.clark.net/pub/cme/usenix.html for more on why ID certificates are useless in any case. - Carl +------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2| | "Officer, officer, arrest that man! He's whistling a dirty song." | +-------------------------------------------- Jean Ellison (aka Mother) -+

1 0

SKIP cryptanalysis?
by Adam Shostack 17 Dec '03

17 Dec '03

Has anyone looked into SKIP key management? I'm aware of Jeff Schiller's statement about OAKLEY/ISAKMP being the more flexible, useful system to be the main standard for IPsec. Adam -- "Every year the Republicans campaign like Libertarians, and then go to Wasthington and spend like Democrats." Vote Harry Browne for President. http://www.harrybrowne96.org

1 0

Re: YES OR NO?
by Alan Olsen 17 Dec '03

17 Dec '03

At 08:45 AM 10/17/96 -0700, you wrote: >On Thu, 17 Oct 1996, Dr.Dimitri Vulis KOTM wrote: > >> It is a great honor to meet a net.legent in person. > >I hope Dimitri will stop hidding behind his computer and "honor" >us with his presence at an SF Bay area Cypherpunks meeting. I've >got pledges for nearly $1200 to bring him out here to speak. All >we need now is a serious response from Dimitri. I guess when the >going gets tough, the "net legends" get yellow. What are you >afraid of Dimitri? I can understand what he has to be afraid of. It is one thing to be a harassing bastard on the net. It is another to have to defend your actions to those people face to face. Dimitri has made insulting remarks about myself and good friends. He has been abusive and obnoxious all over the face of the net. I can see how some people might take that personally. (I would not do him personal harm. Ask him why he feels he needs to be a flaming asshole maybe...) I killfiled Dimitri because there was no use talking to him and no use listening to him. Currently he has taken the tact of posting news when his reputation capitol reaches into the heavy negative numbers. (And I still filter them all into the trash because I cannot trust him to not forge the posts into something containing something the author did not write or intend.) There are others I do not argue with for other, similar, reasons. It is pointless to debate with the closed minded and the compulsive flamers. (If I wanted to listen to compulsive juvenile flame I would go hang out on WWIV BBSes. It least there you know the people are probably fourteen, not just acting like it...) The only purpose such debate will ever serve is to influence the onlookers. The point is probably moot anyways. I doubt if I will get to any of the California meetings any time in the near future. (Work is hell, but at least it pays something. Unlike the regular brand of hell.) --- | "Remember: You can't have BSDM without BSD." - alan(a)ctrl-alt-del.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

EUP_hem
by John Young 17 Dec '03

17 Dec '03

10-17-96. WaPo: "U.S. Considers Slugging It Out With International Terrorism" Officials contend that the main threat now comes from a murky network of home-grown, privately financed and largely independent groups forming a kind of international "terrorists' Internet." That network is proving extremely difficult for U.S. intelligence agencies to locate and penetrate. "Today's terrorists don't have to depend that much any more on states for access to financing or the technological means." "Postal Service Plans to Leave Its Mark on Electronic Mail" Cylink is developing a system for electronically postmarking and encrypting computer messages and Sun and Enterprise Productivity are developing software that will allow bulk mailers to calculate the price of mail shipments on the Internet. The Postal Service predicted that the new system ultimately will account for $5 billion in postage a year, about 9 percent of all postage. ----- http://jya.com/euphem.txt (18 kb for 2) ftp://jya.com/pub/incoming/euphem.txt EUP_hem

1 0