December 2003 - cypherpunks-legacy

PGP implements Key Recovery today!
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

PGP has provided a key recovery option for several years. You can either use the EncryptToSelf option, or use multiple recipients, one of which is your favorite backup service (or yourself, perhaps one of your other keys.) Works fine, and you can use it to recover the session key when you want. Keep a backup copy of your private key on a floppy in your safe deposit box, and maybe keep your passphrase on a yellow sticky (:-) and you're all set. Now, if PGP had a single-DES option for encryption, they could apply for an export permit...... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

5 4

L.Detwieler
by Butler, Scott 17 Dec '03

17 Dec '03

Clipped from WELCOME TO CYPHERPUNKS >The cypherpunks list has its very own net.loon, a fellow named L. >Detweiler. The history is too long for here Can anyone give me the details of The History of this character and wot he is on about

2 1

Re: Foul Language [NOISE]
by Dale Thorn 17 Dec '03

17 Dec '03

Mail AutoResponder wrote: > Please do not send messages to this autoresponder using > foul language. I only sent you one message ever, containing not a single "cuss/curse/swear/foul" word at all. But since you insist on pestering me after I told you not to, I will now respond with a less-than-civil directive: Piss off, assholes.

1 0

L.Detwieler
by Butler, Scott 17 Dec '03

17 Dec '03

Clipped from WELCOME TO CYPHERPUNKS >The cypherpunks list has its very own net.loon, a fellow named L. >Detweiler. The history is too long for here Can anyone give me the details of The History of this character and wot he is on about TIA Scott {:-)

1 0

Re: Recent Web site cracks
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 09:46 AM 10/8/96 -0400, pjb(a)ny.ubs.com wrote: >The recent cracks of the DOJ, CIA and Dole web sites have caused me to think >about just what is going on here. > >Do you suppose that these entries were made via the httpd route, maybe via >cgi-bin, or just a straight telnet-type entry to the server? I don't know >what operating systems were involved with these three systems, or even if The DOJ and CIA sites were actually cracked; don't know the mechanisms. The dole-kemp96.com and dole-kemp96.org domains were spoofs - they have similar names to the real site, and people reach them by accident or by hearing about them. According to today's San Jose Mercury News, the web designer who registered them did so just before Dole announced Kemp as his VP, and tried to sell his design services to the campaign. They didn't buy it, and the names were sitting around with nothing better to do anyway, so he decided to have a good time with them. Supposedly he's gotten about 40,000 hits and the "real" site got 1,000,000. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

4 3

Re: Dallas Semiconductor turns on Internet commerce at the touch of a button
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:13 AM 10/7/96 -0400, Robert Hettinga wrote: >Dallas Semiconductor turns on Internet commerce at the touch of >a button; wearable computer chip generates uncrackable codes using public >key cryptography >---------------------------------------------------------------------- > DALLAS--(BUSINESS WIRE)--Oct. 7, 1996-- >... > Unlike a loose plastic card, the iButton stays attached even >while communicating, making misplacement less likely. Messages or >transactions are authorized only after the PIN is validated by the >iButton, the same technique automatic teller machines use to >dispense cash. What bothers me about such schemes is this: What happens if the insecure machine which accepts your PIN and transfers it to the iButton then performs a transaction which you have not authorized. E.g. it transfers $10 rather than $.01. You can collect quite a bit by repeating the scam. I have not heard of a trust protocol which does not require some form of input and/or output on the iButton itself. All the ones which can be used by normal humans (e.g. do not require the user to do public key cryptography in his/her head) require both a small display and a approve/disapprove button. I think the credit card calculator form factor is attractive for this application. ------------------------------------------------------------------------- Bill Frantz | "Cave softly, cave safely, | Periwinkle -- Consulting (408)356-8506 | and cave with duct tape." | 16345 Englewood Ave. frantz(a)netcom.com | - Marianne Russo | Los Gatos, CA 95032, USA

1 0

NOC_ase
by John Young 17 Dec '03

17 Dec '03

10-8-96. FiTi: "Offshore financial centres agree to greater scrutiny." The Offshore Group comprises most of the biggest offshore financial centres including the Bahamas, Bermuda, the Caymans, Gibraltar, the Channel Islands, Hong Kong, Lebanon, Panama and Singapore. The agreement says home supervisors should be able to inspect the books of shell branches wherever they are kept. "In no case should access to these books be protected by secrecy requirements in the country that licenses the shell branch," it says. WaJo: "Cold War Spying: Mystery Gives Way to History." The release of the Venona documents tells us more about the state of intelligence agencies today in both Russia and the U.S. than it does about Stalin's spy rings. These and counterpart activities in Moscow dramatize the ongoing campaign American and Russian intelligence agencies are waging in the 1990s -- not against each other but at home, to preserve their budgets and public respect. And with "Venona: The Book" launched at last week's conference, can a CIA/NSA CDROM be far behind? ----- http://jya.com/nocase.txt (10 kb for 2) ftp://jya.com/pub/incoming/nocase.txt NOC_ase ---------- Anybody got a copy of the Offshore Group's agreement? Whither EUB? Or seen "Venona: The Book"? If so, does David Kahn have a part?

2 1

DSP wrinkle removal (was Voice Stress Analysis of Debates?)
by James A. Tunnicliffe 17 Dec '03

17 Dec '03

Adamsc wrote: > On Sun, 06 Oct 1996 15:28:40 -0800, jim bell wrote: > > >BTW, did anyone notice that some of the evening news anchors are > > >imaged via a camera/DSP to render as more youthful (e.g., removing > > >facial wrinkles)? > >Really? Where'd you hear this? I suppose it's not beyond the realm > >of possibility, but that would be rather sophisticated programming, > >particularly in real-time. > One of the big anchors admitted it. However it was only possible in > the studio. Might have even been a contrast-lowering gadget. Well, I already threw it out, so I can't verify it, but I know I read an article on this, I'm pretty sure in last week's TV Guide. I don't recall the technical details (I doubt any were presented), but someone (JYA?) could check last week's TV Guide and maybe even quote the article. I'm embarrassed to have to admit to actually reading TV Guide*, especially to this august group... Tunny ====================================================================== James A. Tunnicliffe | WWWeb: http://www.inference.com/~tunny Inference Corporation | PGP Fingerprint: CA 23 E2 F3 AC 2D 0C 77 tunny(a)Inference.com | 36 07 D9 33 3D 32 53 9C ====================================================================== * Um, I only scan it for stuff that is likely to show up as a discussion topic on cypherpunks. That doesn't leave much out, of course. begin 600 WINMAIL.DAT M>)\^(@,.`0:0" `$```````!``$``0>0!@`(````Y 0```````#H``$(@ <` M& ```$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06 `P`.````S <*``D` M!P`+``$``P#\``$@@ ,`#@```,P'"@`)``<`"P`!``,`_ `!"8 !`"$```!% M-S,W,#=!0T0X,C!$,#$Q.3,P.3 P04$P,$$U1C8P1 `"!P$-@ 0``@````(` M`@`!!( !`#P```!$4U @=W)I;FML92!R96UO=F%L("AW87,@5F]I8V4@4W1R M97-S($%N86QY<VES(&]F($1E8F%T97,_*0#_% $#D 8`_ <``!H````#`"8` M``````,`-@``````'@!P``$````B````5F]I8V4@4W1R97-S($%N86QY<VES M(&]F($1E8F%T97,_`````@%Q``$````;`````;NUN9C[K <UM2#8$="3"0"J M`*7V#0`,2\4N``,`+@```````P`&$)KD8"H#``<04 0``!X`"! !````90`` M`$%$04U30U=23U1%.D].4U5.+# V3T-4,3DY-C$U.C(X.C0P+3 X,# L2DE- M0D5,3%=23U1%.D)45RQ$241!3EE/3D5.3U1)0T542$%44T]-14]&5$A%159% M3DE.1TY%5U-!3D,``````P`0$ `````#`!$0`0````(!"1 !````Y00``.$$ M``!8!P``3%I&=3_<,NO_``H!#P(5`J0#Y 7K`H,`4!,#5 (`8V@*P'-E=&XR M!@`&PP*#,@1&`@!P<')Q,2 (50>R`H,SAP/%$X,2(G-T96T"@"Y]"H (SPG9 M.Q<_,C4>-0* "H$-L0M@;F<Q## S%/ +`VQI,S9?#? +51+Q"_(3H&\6$&,A M!4!!9&%M!/ @=T4<4CH*A3X@3P.@4\!U;BP@,#8>$!R1"#$Y.1ZP,34Z,@`X M.C0P("TP.!0P,!Z :@=P(&)ECFP#(!T](<%"5%<>@%!D:60@`'!Y`B!EI"!N M'&!I8R+P=!' S05 <P-P(O!O9B-Q(O#L978)\ N 9R,`!] $('\`<!&P!; E M01= (5H'<&$R9PF ('8',"*0(&.#'. $D&$O1%-0(W#T;R 70&X$@2*0!" $ M8)470" BP'4C@&9U`R#@*&4N9RX>@!= !&#W)T :0"%:9@#0!S$=(0N 9&ML M!Y I/PJ%(5A2`F4'0&QY/R @5]LD8!= )R* *7$@)& *P1<C@ 0`+C!)(\!U M<'#";Q'P(&ET)P0@(Q&_()$BP2* )%(70 = ;2%8MR0A,"$`D&(#$#!P>1Z MUF(ID"-T=PA@;"* (*#O*' CH"YQ(\%P+X$C,2.@KR<1'$$)P!S@;231+"%8 M_PJQ(S$IT K +A P8 .@,;+V+2,P!X N+,X>("0',R![)/ E9V0V@ ) )Q$P M<"[Q+D!(;W<DD07 ,' =(/\H\0(@.!$RU"QP.#$=ER12=18`=2)@;SPQ!= Z MT&C_!4 1P"2@)(,@D4"1)X$"(7LGX!8`+1;0/( L,23P9_\[@"<`/" *BQL/ M`= M)@K[_1O58P! +E @L1Z +] '0/TQL60X(". %T 'X#SA*8'/'H CT"_! M)Z!N)P5 /*'?!I X(4AQ,Z(OT&LC$ ?@_R_01V(BD271(S$^`0(@+V/]1P$G M(( 3H!(`,V OX2E!7SA!"V 6`!T@">!K,)%4\%8@1W4B<"H0+D OT/YD`B!) M(1= )Z @P212''&^: ,`3Z$B4!(`"W!L!"#R*$\"=6(%0"*A3=$I0>],H1'P M`C )@"DSA"/2(M+ *$I903\I02$T4OL1L 60:TV/3I(BD2* `,#F>3210'-Q M=1QA)$-+5?<Y#4QB%B!B"L!!<1'P,5&_*&! (RA1.X-:TQR0=2WRMTK#)-). M5BH>@ >0< 60'P<Q.!$H42]R(I!U9W5G54$)P A@<"Y?4"S,5/<>8"*P1-4] M82]B/V-/9%^R/435($HGL00@03PPMV!B2X$&D&8B\"Y ?"Y0,6>096(Z+Q " M0' ZZ"\O=VAP+@N 9R H@<4C4"X%H&TO?C\P8(CW+\!HQA/A<C @-,$_8 .@ MZ6=A4$<H,$8DT020$Z -"X!T9^ N0$-!(#(H,R!%$B!&;7!!0\UM4$0>D&X` M-S=EAFFC_D!J=VE"/Y%G87"O+D!#L&$>D#<@1#EQT&UP,Y5N,#,2(#5M<#E# M8+\/=%]U;W9_9/XJ(%5M_T<"/5,$\ .1/.$"$#41/S!O#= C=%YA0Y!K(+!= M\W/O)9 'X# `*.)A1-4B8 3P/U[ `)!+TC5 (T!+PF-YIS50;($>8&MS/#%4 M(Y*?3R 'D$D2+'! ,FUU$;!_2$-$U20A5&$1X3D&%F$``8)P````0 `Y`# J M)[/KM;L!`P#Q/PD$```"`4<``0```# ```!C/553.V$](#MP/4EN9F5R96YC M93ML/4Q!3D1252TY-C$P,#DQ-#$Q,#%:+38V,@`"`?D_`0```$H````````` MW*= R,!"$!JTN0@`*R_A@@$`````````+T\]24Y&15)%3D-%+T]5/4Y/5D%4 M3R]#3CU214-)4$E%3E13+T-./5153DY9````'@#X/P$````5````2F%M97,@ M02X@5'5N;FEC;&EF9F4``````@'[/P$```!*`````````-RG0,C 0A :M+D( M`"LOX8(!`````````"]//4E.1D5214Y#12]/53U.3U9!5$\O0TX]4D5#25!) M14Y44R]#3CU454Y.60```!X`^C\!````%0```$IA;65S($$N(%1U;FYI8VQI M9F9E`````$ `!S!P`$,XZK6[`4 `"#!PV8*SZ[6[`0,`#33]/P```@$4- $` M```0````5)2AP"E_$!NEAP@`*RHE%QX`/0`!`````0`````````+`"D````` M``L`(P```````@%_``$```!/````/&,]55,E83U?)7 ]26YF97)E;F-E)6P] M3$%.1%)5+3DV,3 P.3$T,3$P,5HM-C8R0&QA;F1R=2YN;W9A=&\N:6YF97)E -;F-E,BYC;VT^``#M2C$T ` end

1 0

Re: Anonymous E-mail
by Graham Toal 17 Dec '03

17 Dec '03

Do not email this site again. Do not telephone or fax. Put us on your "Do not call" list. By the way, it's not a very good sign of confidentiality when one connects to your web server and receives a flood of cookie requests. Also I see no pgp encryption, no mix of independent remailers - this system has no privacy whatsoever. Even if you're not a front for the KCIA yourself, all it takes is someone to monitor the 3 trunks to your servers and your entire anonymity is lost. I think the cypherpunks will have a good laugh at this one. G > From isp(a)PINmail.com Tue Oct 8 06:29:37 1996 > From: isp(a)PINmail.com > To: Internet Service Provider <isp(a)PINmail.com> > Date: Tue, 8 Oct 1996 16:43:35 +0000 > Subject: Anonymous E-mail > > Dear Internet Service Provider, > > Sorry for bothering you, but we would like to introduce a new Internet > service which may be of interest. > > PINmail utilizes our proprietary software to make it easy for users to > send anonymous e-mail and newsgroup postings through the World Wide > Web. > > Private and confidential. Easy to use. Low annual cost. No software > installation and upgrade headaches for your subscribers. And no > customer service nightmares for you. > > Please take a look at http://www.PINmail.com/ > > We are now seeking to establish mutually beneficial business > relationships with aggressive Internet Service Providers (ISPs) > to develop distribution channels for PINmail. > > Our Distributor Program offers you an opportunity to provide your > subscribers with an exciting value-added service, and create a > potentially lucrative revenue stream for yourself. > > For each new PINmail client with your domain name in his/her e-mail > address, we will pay you $5 (US currency). > > You have the option to retain the $5 for yourself, or rebate it > partially or entirely to your customer(s). > > ALL YOU HAVE TO DO IS SIGN-UP AS A PINmail DISTRIBUTOR. THEN > EVERYONE WITH YOUR DOMAIN NAME IN THEIR E-MAIL ADDRESS > WHO REGISTERS WITH PINmail WILL EARN YOU $5!!! > > EVERY SINGLE ONE, NO MATTER THE SOURCE!!! > > In return, we require that you do two things. First, place a PINmail > banner ad on your site. Second, send an e-mail message to all your > subscribers introducing them to PINmail. That's it! > > Many thanks for your patience and bandwidth, and we look forward to > working with you to develop this dynamic new method of confidential > Internet communications. > > Best regards, > > > Jack W Flader, Jr > Director > AsiaFocus International Inc > > PS. If you would like to test this service, please send an e-mail to > isptest(a)PINmail.com specifying your preferred PINmail address and PIN. > We will provide you with a complimentary account for one month, which > will allow you to experience the many powerful features of PINmail. > > _______________________________________ > PINmail > Private and Confidential E-mail Service > www.PINmail.com >

2 1

Re: Recent Web site cracks
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

yes, i heard that about 50 microseconds after i posted. another thing that i have been thinking is that both of these cracks were inside jobs, which would explain any number of things. -paul > From stewarts(a)ix.netcom.com Tue Oct 8 12:36:57 1996 > From: stewarts(a)ix.netcom.com > X-Sender: stewarts(a)popd.ix.netcom.com (Unverified) > X-Mailer: Windows Eudora Light Version 1.5.2 > Mime-Version: 1.0 > Content-Type> : > text/plain> ; > charset="us-ascii"> > Date: Tue, 08 Oct 1996 09:37:23 -0700 > To: pjb(a)ny.ubs.com > Original-From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: Re: Recent Web site cracks > Cc: cypherpunks(a)toad.com > Content-Length: 1263 > > At 09:46 AM 10/8/96 -0400, pjb(a)ny.ubs.com wrote: > >The recent cracks of the DOJ, CIA and Dole web sites have caused me to think > >about just what is going on here. > > > >Do you suppose that these entries were made via the httpd route, maybe via > >cgi-bin, or just a straight telnet-type entry to the server? I don't know > >what operating systems were involved with these three systems, or even if > > The DOJ and CIA sites were actually cracked; don't know the mechanisms. > The dole-kemp96.com and dole-kemp96.org domains were spoofs - they > have similar names to the real site, and people reach them by accident > or by hearing about them. According to today's San Jose Mercury News, > the web designer who registered them did so just before Dole announced > Kemp as his VP, and tried to sell his design services to the campaign. > They didn't buy it, and the names were sitting around with nothing > better to do anyway, so he decided to have a good time with them. > Supposedly he's gotten about 40,000 hits and the "real" site got 1,000,000. > > > # Thanks; Bill > # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com > # You can get PGP outside the US at ftp.ox.ac.uk > Imagine if three million people voted for somebody they _knew_, > and the politicians had to count them all. > >

1 0