December 2003 - cypherpunks-legacy

Mixmaster Test
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Sorry for the spam, folks ... just looking for a mixmaster that puts the Subject: line into cypherpunk messages. Name-Withheld-By-Request Editor in Chief, Cypherpunk Enquirer

1 0

Re: FW: Now we have it all
by Hendra Halim 17 Dec '03

17 Dec '03

>X-Sender: tcmay(a)mail.got.net >Date: Wed, 6 Nov 1996 10:04:52 -0800 >To: CYPHERPUNKS(a)toad.com >From: "Timothy C. May" <tcmay(a)got.net> >Subject: Re: FW: Now we have it all >Sender: owner-cypherpunks(a)toad.com > >At 10:47 AM +0100 11/6/96, Butler, Scott wrote: >>> >>Abaddon wrote: >> >>>>susbscribe >> >>Surely we have seen it all now. >>I find it hard to believe that a word like >>suscribe....subsribe....subcribes.. >>SUBSCRIBE..is so difficult to spell correctly. >> >>:-) > >This is actually steganography. Various spellings of "subscribe" are being >used to communicate a bit or two per message. > >Actually, the practice becomes a code, as in: > >"Suscrive if by sea, sudcribe if by land." > > >--Klaus! von Future Prime > > >Please unsubscribe me from your list > > >Hendra

1 0

Cypherpunk mailing list
by Hendra Halim 17 Dec '03

17 Dec '03

>From: CHALAKKI(a)worldnet.att.net >X-Sender: CHALAKKI(a)postoffice.worldnet.att.net (Unverified) >To: Cypherpunks(a)toad.com >Subject: Cypherpunk mailing list >Date: Wed, 6 Nov 1996 22:38:08 +0000 >Sender: owner-cypherpunks(a)toad.com > >Please put me on your mailing list > > >Please unsubcribe me from your list Hendra

1 0

Mixmaster Test
by John Anonymous MacDonald 17 Dec '03

17 Dec '03

Sorry for the spam, folks ... just looking for a mixmaster that puts the Subject: line into cypherpunk messages. Name-Withheld-By-Request Editor in Chief, Cypherpunk Enquirer

1 0

Mixtest
by John Anonymous MacDonald 17 Dec '03

17 Dec '03

Sorry for the spam, folks ... just looking for a mixmaster that puts the Subject: line into cypherpunk messages. Name-Withheld-By-Request Editor in Chief, Cypherpunk Enquirer

1 0

Re: Is there a Win PGP?
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 10:58 PM 11/6/96 -0500, you wrote: >subject says it all.... Im just wondering is (and where) there is a windows >version of PGP.. thanks! There are two separate issues - PGP with a Windows GUI, and PGP that really runs as a Windows process, rather than needing to fire up a DOS window. There are a dozen or so Windows GUIs for PGP, many of which are on ftp.ox.ac.uk. I especially like Private Idaho; I think the path to it is www.eskimo.com/~joelm/ (also ftp.eskimo.com) Current version is about 2.8 ; I'm not running it because it dropped support for ViaCrypt (due to problems with ViaCrypt 4.0), and I like using ViaCrypt. I'm also having problems getting the older versions to work on Windows NT (sigh...) For a real Windows version, you can buy ViaCrypt (about $100-130?) At least inside the US, to use the interesting RSA methods except through the official external interfaces to RSAREF, you need permission from RSA. Basic PGP for DOS/Unix/Mac has this, but there isn't a blessed Windows version except ViaCrypt, a commercial product. For commercial applications, you probably also need ViaCrypt anyway. It was a nice product before they added Key Escrow support. Now that Phil has bought them, they'll presumably return to political correctness on that issue. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk

6 6

Re: Information
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

>> On Tue, 5 Nov 1996, Edward R. Figueroa wrote: >> > I'm a new Cyberpunk! Probably wearing a set of Ono-Sendai eyeballs.... >> > Last, I would like to know once and for all, is PGP compromised, is >> > there a back door, and have we been fooled by NSA to believe it's secure? You can read and compile the source code yourself. You can learn crypto to help you understand the strength of the algorithms. I'd recommend Bruce Schneier's "Applied Cryptography". You can look for bugs and subtle design flaws along with other people. There are un-subtle design flaws, like the DOSoid user interface :-), and there are philosophical arguments about whether an identity-based Web of Trust is the right trust model, and practical problems about how to support revocation correctly, but basically it's Pretty Good Privacy. On the other hand, there are other threats to think about. Is there a virus, software bug, or trojan horse that captures the keystrokes you type into your computer? If your passphrase is stolen, you lose. PGP can't tell; it's just software. What's on that yellow sticky note? Is the NSA listening for electronic signals from that dark van parked out in front of your house? They're pretty good these days. Your computer doesn't know, so PGP can't help you with it. Are you using PGP to keep business records (like that second set of books) which can be subpoenaed by a court? When the IRS seizes your computer and sees all those files with ------BEGIN PGP----- on them, can they force you to reveal the keys or at least the contents? PGP can't solve those problems for you. But it can keep amateurs like your local police department from reading the files you really care about until they haul you in front of a court where you can bring a lawyer. There are applications that PGP doesn't do, like keeping the blocks on your disk drive automagically encrypted - it just does things to files when you tell it to. But you can at least encrypt the critical stuff, and you can encrypt your email messages and other sensitive files you transmit across a network. Won't do any good for IRC... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk

7 9

Mike Rawson on ISP-TV's "Real Time"
by ISP-TV Main Contact 17 Dec '03

17 Dec '03

*** ISP-TV Program Announcement: Live interview with Mike Rawson, Director of Internet Policy, office of U.S. Senator Burns *** *** Monday, Nov. 11 *** *** 9:00 PM ET *** Mike Rawson, Director of Internet Policy for the office of U.S. Sen. Burns, will be the guest on ISP-TV's "Real Time" interview show this monday night. Mike runs Sen. Burns web site, and has been active in the shaping of legislation aimed at cryptographic liberalization, as well as bringing hearings on the Pro-Code Bill live over the Internet. Mike will share with us the current state of crypto legislation, as well as speculate on its future in the next Congress. This video interview can be viewed on the ISP-TV main CU-SeeMe reflector at IP 205.197.247.33, or other ISP-TV affiliate reflectors listed at http://www.digex.net/isptv/members.html See URL http://www.digex.net/isptv for more information about the ISP-TV Network To obtain Enhanced CU-SeeMe software, go to: http://goliath.wpine.com/cudownload.htm

1 0

[NOISE] [philosophypunks] [Vulis] Mills & Hallam-Baker
by Bryce 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- hallam(a)ai.mit.edu writes: > > If we return to the original basis on which Mill opposed censorship > its not hard to find out why Dimitri is denied his support. The > argument is based on the need to keep alive debate. That was only one of several arguments. Another was that the potentially-censored speaker might be right! I don't remember the others. Regards, Bryce -----BEGIN PGP SIGNATURE----- Version: 2.6.2i Comment: Auto-signed under Unix with 'BAP' Easy-PGP v1.1b2 iQB1AwUBMoGkZUjbHy8sKZitAQFmRgMAu2U+zQTa+txp2wz9SG6mQwS4MXXkgeDi zjenNSN8KvwM92fxio5S+KfOzTjggU2dczeBuEAb7EPPJFUCtAh0ZEgYguzEnpAU Vx2Ct06VOQbr0mRUlfuGbwgvX0fYnh0D =Dqw6 -----END PGP SIGNATURE-----

2 1

Euro Key Escrow
by Ben Laurie 17 Dec '03

17 Dec '03

Someone, somewhere, posted a rumour that Europe was about to go for a key escrow scheme known as "Royal Holloway". I have done a little research and gleaned the following: It is, apparently, true that the EC is considering schemes for key escrow, by "trusted third parties" (trusted by who, I'd like to know?). "Royal Holloway" is one of these schemes. It is named after the college of origin, if anyone cares. It essentially revolves around each pair of TTPs sharing two out of three parts of a key, and generating the third part for each of their users. The idea is that either of the TTPs who generated keys for an encrypted message exchange can decode it (by using the private key of their "client" and the public key of the other TTP's "client"). Full details can be found at: ftp://ftp.dcs.rhbnc.ac.uk/pub/Chris.Mitchell/istr_a2.ps This is in PostScript. I'm not aware of any plain text versions. I'm informed that this is likely to be introduced into EC legislation, though my understanding is that members are not required to actually incorporate the legislation. No doubt France will embrace it with happy shouts. Of course, it is our duty as netizens to resist this kind of rubbish, and I encourage you to write to your MP/EuroMP (or local equivalent). Cheers, Ben. -- Ben Laurie Phone: +44 (181) 994 6435 Email: ben(a)algroup.co.uk Freelance Consultant and Fax: +44 (181) 994 6472 Technical Director URL: http://www.algroup.co.uk/Apache-SSL A.L. Digital Ltd, Apache Group member (http://www.apache.org) London, England. Apache-SSL author

2 1