December 2003 - cypherpunks-legacy

Ping! ((chain=(anon);1;(replay)))
by cypherpunks＠count04.mry.scruznet.com 17 Dec '03

17 Dec '03

-------- ping 5

1 0

Ping! ((chain=(anon);1;(replay)))
by cypherpunks＠count04.mry.scruznet.com 17 Dec '03

17 Dec '03

-------- ping 5

1 0

Detweiller spotted?
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Dale Thorn said: >Now that's what I call amazing. Maybe I could rewrite PGP >tomorrow (hee hee). Is anyone else hearing a familiar (and again, constant) voice from the past? Maybe I'm wrong, but has anyone met him in person? Just asking.

2 1

COREL TO CENSOR ALL CLIP ART WORLDWIDE
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Swastikas halt Corel sales By Reuters November 25, 1996, 12 p.m. PT MUNICH, Germany--Corel (COSFF) software company has temporarily halted sales of its top-selling Corel Draw graphics program in Germany because it includes four banned Nazi symbols, a company spokesman said today. The Canadian company will remove three drawings of Adolf Hitler and one swastika from future versions of its popular software, spokesman Thomas Layer said. It is also distributing warning labels to be placed on versions now being sold, Layer said. The label warns that the "improper use of digital images and symbols" found in the programs Corel Draw 4.0, 5.0, and 6.0 is prohibited in Germany, which bans public displays of Nazi symbols. Munich's state prosecutor launched an investigation into the software on October 2 after learning that someone had used the banned images to print business cards for a neo-Nazi group, Layer said. This is not the first time that the company has had complaints due to their clip art images. In 1992, pressure from US Black rights organisations forced drawings of the Ku Kux Klan to be removed from the collection. Consideration is also being given to the removal of other images from the collection, either due to legal restrictions in various countries, or due to complaints from organisations such as the Simon Wiesenthal Center. Images considered for removal include a burning US flag, Josef Stalin, the Star of David icon, a cannabis leaf, and a drawing of a woman in a bathing costume. Corel Draw provides more than 24,000 clip art drawings and symbols that computer users can copy. The company suspended the sales on November 19.

2 1

Re: Building a DC-NET
by Gary Howland 17 Dec '03

17 Dec '03

Dimitri writes: > > Black Unicorn <unicorn(a)schloss.li> writes: > > > On Sat, 30 Nov 1996, Simon Spero wrote: > > > > > (what's the Alice/Bob name for someone trying a denial of service attack?) > > > > Louis? > > John the petty small-time bitch? How about William? (Can't use Bill, since 'B' is taken). Could refer to Clinton (since he denies services to Cuba etc.), or to Gates (the creator of 'denial of service', aka. DOS). Gary

2 1

IP address
by Internaut 17 Dec '03

17 Dec '03

What is the risk of publishing your dynamic IP address to a web page while you are on line? How vulnerable is someone just connected to the internet, w/o any server running? What attacks are feasable? --Internaut

2 1

RSA key generation in 13 lines of Perl
by Steve Reid 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've completed my Perl/dc RSA key generation program. The compacted 13-line version is below. A commented version can be found at http://www.edmweb.com/steve/rsagen.txt #!/usr/local/bin/perl $k=768;$e=sprintf'%X',65537;print"Please enter a LOT of random junk.\n" ;$a=<STDIN>;print"Working. This may take a while.\n";for(1..(length($a)- 1)){$b[$_&31]^=unpack('C',substr($a,$_,1));$b[$_&31]=(($b[$_&31]<<5)|($b [$_&31]>>3))&255;}for(0..255){$c[$_]=$_;}$a=$d=$f=0;for(0..255){$a=($a+ $c[$_]+$b[$a&31])&255;($c[$_],$c[$a])=($c[$a],$c[$_]);}open(F,'|dc'); select F;print"16dio[$e+]sa";for(1..50){for(1..$k/32){printf'%02X',&g;} print"Sr";}for(1,2){printf'%02X',&g|128;for(2..$k/16){printf'%02X',&g;} print"d$e%-2+d2%0=aSP";}print"[d2%SA2/d0<X+d*LA1=ZlP%0]sX[lR*]sZ[1+Q]sQ[ la1+sa0sc]sA[lAxlb1+sb]sB[ld1+sdLrddSssR1lP1-2/lXx+1+lP%99scd0=A2=Bclcla +32>C]sC[LsSrld1-dsd0<D]sD[le1+se0ddsasbsdlCxlDxlP2 $e*+sPlc99=Elb32=ElP 2 $e*-led1>QQ]sE_1selExsq_1seLPlExsp[p=]Plpp[q=]Plqp[n=]P*p[e=]P$e p1-lp 1-lq1-**1+$e/[d=]Pp\n";close(F);sub g{$d=($d+1)&255;$f=($f+$c[$d])&255;( $c[$d],$c[$f])=($c[$f],$c[$d]);return($c[($c[$d]+$c[$f])&255]);} I'm sure this can be compacted further. I haven't put a lot of work into compacting it; I really just want to get it out. Run the program, type in a LOT of random gibberish (several lines at least) and press enter. Then wait. Eventually it will output your p, q, n, e and d in hexadecimal. p and q: Prime numbers, congruent to 2 mod e. They can usually be discarded, but they should never be revealed. n: Your public modulus e: Your public encryption exponent (usually 10001 hex) d: Your private decryption exponent By default the program generates a 768-bit public modulus and a public exponent of 10001 hex (65537 decimal). These can be changed by adjusting the numbers in the first line. A 1024-bit modulus would be better, but for some reason generation takes a LOT longer than a 768-bit modulus. Fortunately key generation doesn't need to be done very often. Timings on a 100 MHz Pentium running FreeBSD: Size of n Time 512-bit: 4-5 minutes 768-bit: 8-9 minutes 1024-bit: 35-80 minutes (ack!) I've had some difficulty generating 1024-bit keys, but it seems to be working now. Let me know if you see any problems generating large keys other than the obvious problem with the time spent. Disclaimer: This program seems to work, but your milage may vary. -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv iQEVAwUBMqID5dtVWdufMXJpAQE14AgApqOI2MMPe0V74cKI0vc3bDw8hfDW723c QKqVleH0MTIv4F792bf7ItekM81RbQiaB+AhSigFFFb679ZgdCV7XpPOwhkE3SD4 vJy1xU4HdZ6TbSrfzzZn8Peqd5K5zZdY7CpXbxW30TZWFNX5lqdDAAbvM77h36QC h/jwK1nWMzrTDupbhBwemkpZKaFmk5uAms5Y94Ckezh66+sOcWmvf7smyn8RJg4q zad6OVrclso22NBp/Pa0nf2+IdgFnhEfHgHxsI0t+awSokfr6WlZ8WAScxv40kJO KfcdBX1DXg4spl8kXgoQOrrA3VIUJKWXFfpnTt2nAKr/P4XfbpyFQw== =CY5F -----END PGP SIGNATURE-----

1 0

Re: denial of service and government rights
by jim bell 17 Dec '03

17 Dec '03

At 09:25 PM 11/30/96 -0500, Tired.Fighter(a)dhp.com wrote: >On 30 Nov 96 at 13:10, Black Unicorn wrote: > >> On Fri, 29 Nov 1996, Greg Broiles wrote: > >> [...] >> >> > I don't see any reason why this wouldn't be true for a >> > computer. Fed.Rul.Crim.Pro. 41(b)(1) allows the seizure >> > (but seizure is not forfeiture) of "property that >> > constitutes evidence of the commission of a >> > criminal offense". >> >> It is true of computers. >> Take the case of Ripco (the Chicago BBS raided in the >> SunDevil raids back when). >> >> I don't think "Dr. Ripco" has yet gotten his equipment >> back. I don't know for sure, but what I do know is >> that 5 years after the raid, he still had certainly >> not gotten anything back. Unicorn has a long history of reciting government abuses, but then failing to provide any sort of answer to them. My solution (AP: "Assassination Politics") would make such abuse fatal. Jim Bell jimbell(a)pacifier.com

2 1

Re: IPG Algorith Broken!
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> Some of these bullies, like Paul Bradley, realize that they don't know > the meanings of the words they use. Paul Bradley not only posts nonsense > about brute force attacks on OTP, but also harrasses anyone who exposes > his utter ignorance, in en effort to intimidate them into shutting up. You don`t seem to realise that not only is my reputation unnafected by your worthless drivel about "brute force attacks on one time pads", which everyone else apart from you and Don immediately accepted as a simple misunderstanding of the topic of the message (I was talking about stream ciphers), but I am finding it rather amusing to watch the level of your rants deteriorate to the point where you now label anyone who actually posts about cryptography on this list as a "k00l hAcKiNg D00d" who knows nothing of what he is talking about. And as for harrasing people to shut up if you had been watching the traffic on the list you would have noticed that I disagreed with John over throwing you off the list. I simply wonder if the reason you appear to be so calm offline but a foaming at the mouth lunatic online is that you are scared someone is going to give you the good kicking you so rightly deserve. > "Cypherpunks'" opinion of any proposed new cryptosystem is worthless and > irrelevant. And I suppose the opinion of a man who cannot control his urges to post rants about "sovok jews" and armenian refugees is of great value to the learned and worthy??? Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

2 1

Re: Strong-crypto smart cards in Singapore and Germany
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

whgiii(a)amaranth.com ("William H. Geiger III") writes: ><sigh> Big Brother comming to a bank near you. > >Does anyone understand the implications of a society moving to an >electroinc cash based system?? > >All trasactions will be recorded, moitored, tracked & analysed. This is >not just the government that one has to worry about but corporations also. Actually the German system contains some fairly elaborate safeguards to make it pretty challenging to automatically track transactions (Germans have historical reasons for being uneasy about government monitoring). However given other German laws like the Fernmeldeanlagenueberwachungsverordnung (yes, that's one word), which make the CALEA look like a picnic, I'm not sure how long these safeguards will remain in place. Given that the standard has been created by a collaboration of all German banks, who are big enough to tell the government to take a hike if they demand access to the data, it may be safe (certainly the people involved in the project that I've spoken to are confident that they can keep the data private, however I'm not so sure how it'll work out in the long run). As for the Singapore solution, the Singpore government knows whats best for you, so it isn't any of your business to question their judgement. Anyone thinking otherwise gets 25 strokes of the rattan. Peter.

1 0