December 2003 - cypherpunks-legacy

unsibscribe?
by Squirrel Remailer 17 Dec '03

17 Dec '03

"Alexander.Kvache" <alexk(a)hcl.com> sent the new word: > >unsibscribe to the list. I am pretty sure we have seen them all, now. OBcrypto - are these spellings randomly generated? JMR

1 0

ANother Timmy May clone
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Timmy-May-style pseudo-crypto: >From: Edgar Stahley <EStahley(a)tricryption.com> >Newsgroups: comp.security.misc >Subject: Finally, an easy Encryption System >Message-ID: <3269375D.469A(a)tricryption.com> >Date: Sat, 19 Oct 1996 16:17:33 -0400 >Organization: Tricryption >Lines: 14 >NNTP-Posting-Host: u029.comcat.com >Mime-Version: 1.0 >Content-Type: text/plain; charset=us-ascii >Content-Transfer-Encoding: 7bit > >What if an encryption program was really easy to use? > >What if you could send important documents securely over the >internet without having to enter any keys at all? > >What if this was possible because you and your group of >recipients could be the only ones in the world having access to >your very own customized encryption system? > >What if there was a $2000 contest to check it out? > > * (R) Edgar Stahley ES(a)tricryption.com >* TRICRYPTION - IBM file encryption. Fax/Phone: (215) 453-1452 > * Web site: http://www.tricryption.com

1 0

Vulis' Trash
by blanc 17 Dec '03

17 Dec '03

From: Black Unicorn I'm I the only one who is sick of Vulis' trash? ....................................................................... No. How often can a person open up a message only to read: "Look, see how cleverly I put words of comparison and degradation in conjunction with a person's name? Wow - Am I impressive, or what?" "See me - see the jig-saw puzzle of words and meaning I can stick together - aren't I a clever person? See how I can convert the ability to understand into a regrettable, abhorrent waste of time?" "Look at me - hey, see what I'm doing? See me stringing these words together, unpleasant combinations to ponder, about which you can do nothing?" "Put me in a category somewhere and give me significance! I don't have anything of substance to contribute to your minds, but I'm unavoidable, see? Pay Attention to Me!" ...without becoming weary of his shallow "amusement". .. Blanc

2 1

Re: Don't ask why, thank you. [NOISE]
by Dale Thorn 17 Dec '03

17 Dec '03

red wrote: > Why? Date: 20th October 1996. > The purpose of life,... is not to be found. I have been pursuing > this thought and question to many of the people I have met in the past > few weeks. Sad enough to report that I have found no answers or clues > that if anyone ever know what it is or could be. One thing for sure is > material and physical objects are close to replacing the purpose, the > real purpose if there is one. [remainder deleted] You could ask yourself, as a technical matter of some importance, just how you came to be thinking about purpose, or about it in the way that you think about it, i.e., was the thought developed in you through bombardment from "philosophical" sources, or did you actually develop it independently? Try to track that down and deconstruct it, and it will help in getting a handle on the issues you want to look at. On the other hand, you could try what I call the Consciousness Experiment. Intelligent persons have argued (contrary to the notions of certain religious philosophies and possibly even quantum physicists) that there is no *free will*, since all *things* are fully predictable, given sufficient detachment from the universe being studied, and sufficient resources to analyze the motions of all particles, waves, and/or other constructs. In the Consciousness Experiment, you get up every day and attempt to do something *good* for which you have absolutely no motivation, kinda like a "Mother Teresa act" or whatever. Use your imagination. The goal is to separate your "purely altruistic" (for sake of argument, whether this is real or not) acts from your base acts, i.e., eating, sleeping, and even loving (in the sense of attachment to particular persons as opposed to living beings or "earth things" as a whole). If you can stay focused on the goal, to "prove" that you truly are a sentient being and not just a living-flesh motivation-driven automaton, then eventually you will have an answer of sorts to your question, but with your mind in a different frame of reference or perspective, I believe you'll be somewhat amused at your original posting on this topic, assuming you keep a copy around.

1 0

FWZ1 encryption algorithm
by Jüri Kaljundi 17 Dec '03

17 Dec '03

Is there any data available on FWZ1 encryption algorithm? This is used in CheckPoint FireWall-1 product for securing virtual private networks. As it is exportable from US, it must be pretty weak, but even considering that I would like to know how it exactly works. JK - jk(a)stallion.ee

1 0

sprint pulled plug on cyberpromo..
by Robert Hettinga 17 Dec '03

17 Dec '03

Ah. I feel *much* better now... For the time being, anyway. Cheers, Bob --- begin forwarded text Date: Sun, 20 Oct 1996 13:53:01 -0400 Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Bill Sommerfeld <sommerfeld(a)ORCHARD.MEDFORD.MA.US> Subject: sprint pulled plug on cyberpromo.. To: CYBERIA-L(a)LISTSERV.AOL.COM Since this issue was brought up here a little while ago, it seems appropriate to forward this.. (NANOG is the "North American Network Operators Group"). Subject: Re: Cyberpromo.com spam snuffed? Date: Fri, 18 Oct 1996 20:02:17 -0400 (EDT) From: "Todd R. Stroup" <tstroup(a)tstroup.inhouse.compuserve.com> Reply-To: "Todd R. Stroup" <tstroup(a)tstroup.inhouse.compuserve.com> To: pferguso(a)cisco.com cc: nanog(a)merit.edu On Fri, 18 Oct 1996, Paul Ferguson wrote: > It appears that the infamous cyberpromo site has been disconnected. > > - paul > > [snip] > [snip] Cyberpromo is a suspect in sending mail from a host with the name and local domain of compuserve.com (the exact name of one of our mail gateways) They were creating fakeing mail headers by actually haveing a machine on their network with the same name and domain. I could have thought of more creative ways to do this but this is what we saw... Since were getting an influx of mail from upset individuals asking why CompuServe was the host of all this spam. After we found out what Cyberpromo was up to, we asked for cooperation from Sprint to pull the plug. At this time (and to my knowledge), CompuServe has not yet made an effort to engage in any legal action. I am unable to comment on anything else at this time. Todd R. Stroup Network Engineer - CompuServe --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Re: unsibscribe?
by nobody＠replay.com 17 Dec '03

17 Dec '03

Anonymous wrote: > "Alexander.Kvache" <alexk(a)hcl.com> sent the new word: > > > >unsibscribe > > to the list. I am pretty sure we have seen them all, now. > > OBcrypto - are these spellings randomly generated? Naw, it's a new stego method... ;-)

1 0

Re: Usenet and Re: extortion via digital cash
by azur＠netcom.com 17 Dec '03

17 Dec '03

>At 12:34 AM -0400 on 10/20/96, Scott McGuire wrote: > >> I've been thinking about the use of Usenet as a message pool and this >>seems to be a good place to bring up my thoughts. As an already existing, widely disseminated and easily used message pool, Usenet is very valuable to us. I'm concerned that it may not last though. Many people now complain about how low the signal to noise ratio is (even more than they complain about this list). I've heard people say that they have given up on newsgroups in favor of mailing list, web-zines, etc. So, if it gets too bad, might it just fade away? Or, if it remains but becomes unpopular, will it be easy to restrict if we use it for anonymous messages? > >IMHO, it will end up similar to the late night infomerical spots on TV. >Not puch of value there, but bored people will still look. > >Any effort to regulate it will come from a tangent; IDs of some sort >to post in public, or have access to the net, or screening it out of >the hypothetical InfoBahn II networks, or similar. In the U.S., at least, attempts to enforce identification of Internet users or anonymous posters to newgroups and such are likely to meet with stiff legal resistance. The Supreme Court has ruled that anonymous use of protected speech (e.g., political handbills) must be permitted. -- Steve PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Sacred Cow Meat Co. | --------------------------------------------------------------------- Counter-cultural technology development our specialty. Vote Libertarian. Just say NO to prescription DRUGS. "Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive." -- C.S. Lewis "Surveillence is ultimately just another form of media, and thus, potential entertainment." -- G. Beato

3 2

IETF meets in San Jose, Dec 9-13; want to come?
by John Gilmore 17 Dec '03

17 Dec '03

The Internet Engineering Task Force will hold one of its thrice-yearly meetings in San Jose in December, making it accessible to many cypherpunks. (The following two meetings will be April in Memphis, and August in Munich.) IETF sponsors working groups which propose new protocols and procedures to evolve the Internet technology and infrastructure. Many of these working groups are of interest to cypherpunks. Working groups are open to all interested parties and transact almost all of their business by email. An IETF meeting is a place where working groups can meet and resolve issues that are hard to handle by email. It's also a place for newcomers to the working groups to be introduced to the issues and existing players. An IETF meeting is not a standards committee meeting, nor is it a technical conference. It's a unique animal. The working groups meet in parallel sessions, usually several times per meeting. Participants are encouraged to submit any large publications by email before the meeting, so that they can be intelligently discussed, rather than merely read, at the meeting. There is little or no voting, and few or no "papers". The working groups run by "rough consensus and running code" -- a method near and dear to the cypherpunk credo. There's a whole Security Area with these working groups: aft Authenticated Firewall Traversal cat Common Authentication Technology dnssec Domain Name System Security ipsec IP Security Protocol otp One Time Password Authentication pkix Public-Key Infrastructure (X.509) tls Transport Layer Security wts Web Transaction Security I'm actively working with the DNSSEC and IPSEC groups, on my S/WAN project. In addition there are lots of other interesting working groups for Mobile IP, Web evolution, MIME and email security, IPv6, Dynamic DNS update, etc. All of these have security implications. For more information about any of this, see www.ietf.org. You'll find full info about the upcoming meeting, as well as minutes from past meetings, working group charters and web pages, archives of working group email lists, more info than you'll be able to read. Many working group sessions are multicast on the MBone for those who can't travel to participate, and there is excellent Internet access available on-site, with acres of terminals, printers, and laptop-plugins. Attending the meeting will cost $250 if postmarked before Nov 8. Non-local c'punks who wish to attend, but who can't afford to stay in a hotel, can probably find other c'punks in the area to stay with. (I'm in San Francisco, 50 miles from the meeting, so I'm not a good candidate.) John

1 0

Re: Wrap Up: Conference on Law Enforcement and Intelligence
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 1:03 PM 10/20/96 +0000, James Morris wrote: >On Sat, 19 Oct 1996, Black Unicorn wrote: > >> 4. Might be a good idea to review implementations of crypto. >> >> Both James Woolsey and Stewart Baker made sly remarks about the >> reliability of crypto in the public domain. [...] > >There was also an interesting comment made in session three of the >Joint Australian/OECD Conference on Security, Privacy and Intellectual >Property Protection in theGlobal Information Infrastructure, >(Canberra, 7 - 8 February 1996), reportedly by a representative of >the DSD: > >"... PGP may not survive as a viable option for private security." > >For the full quote, see: > http://www.nla.gov.au/gii/sess3.html (1) If I were faced with an opponent who had a crypto system I couldn't break, I would attempt to make him think I could break it so he would stop using it. AKA FUD. (2) If I could break his system, I would want him to continue using it. I would have to be very careful about how I used the material so he didn't catch on to the break. There are some wonderful examples of this logic in "The Code Breakers". (3) The devil is in the details. I still am not convinced that MacPGP has enough sources of entropy for its IDEA key generation. (But I am not convinced that it doesn't either.) I put integrating Jon Callas's entropy manager into MacPGP as a high priority. ------------------------------------------------------------------------- Bill Frantz | Tired of Dole/Clinton? | Periwinkle -- Consulting (408)356-8506 | Vote 3rd party. I'm | 16345 Englewood Ave. frantz(a)netcom.com | Voting for Harry Browne | Los Gatos, CA 95032, USA

3 2