December 2003 - cypherpunks-legacy

[ANNOUNCEMENT] ElGamal
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Tim C[ocksucker] May proves that the Midwestern gene pool needs some chlorine in it. /\ \ / /\ //\\ .. //\\ Tim C[ocksucker] May //\(( ))/\\ / < `' > \

1 0

Personal use exception to ITAR/EAR
by Greg Broiles 17 Dec '03

17 Dec '03

Someone wrote to the list in the last day or so (I seem to have mislaid the message) asking what happened to the ITAR's personal use exemption. The introductory comments to the new 12/30/96 regs indicate that: "License Exceptions TMP and BAG effectively replace the Department of State's personal use exemption." (Federal Register, p. 68575) License exception TMP is described at 15 CFR 740.4, and BAG is described at 15 CFR 740.9, both of which are available via John Young's helpful hypertext version of the EARs at <http://jya.com/740.htm>. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

"FREEDOM for you this New Year"
by rapidd＠gtwinc.com 17 Dec '03

17 Dec '03

********************************************************* According to our resources the enclosed information maybe of interest to you. If you wish to be Removed and receive no further mailings simply send an E-mail message to: remove2(a)pleaseread.com Thank you. Please Do Not Click Reply To This Message. ********************************************************* If you could make one improvement in your life for the New Year what would that be? Could it be a desire to achieve FREEDOM?? Freedom from worry? Freedom to act on your dreams? Freedom to improve your lifestyle? Freedom from bills? Freedom to go where you want, when you want (with money as no object)? Freedom to get the things you always wanted but couldnt afford? Freedom to help someone close to you (your parents, your spouse or "significant other", relatives, friends, neighbors, business associates, etc.)? What would this type of "Freedom" mean to you?? Is it then worth a couple of minutes of your time to let us show you and your relatives or friends how to start earning over $500 a week; then over $500 a day; and move on to earn over $10,000 a week in supplemental income? All in your spare time -- even_while_you_sleep!! -- That's right, I said --- ++ "OVER TEN THOUSAND DOLLARS A WEEK!!!" ++ For less than the price of a dinner for two in a nice restaurant, you can be on your way to making your dreams come true. No health fads, no "imitation" products, no scams, no schemes. Just convenient access to everyday products (like telephone and gasoline) that everybody you know uses --- we promise <<<If we reached you in error -- we apologize. To REMOVE, DO NOT USE THE "REPLY" BUTTON!! Please send an E-mail to: remove2(a)pleaseread.com and you will be permentantly Removed from our database.>>> Sounds to good to be true? That is what I first thought, But it is true and is already happening! HOW is this possible?? Just take a look at our Web site -- right NOW: START 1997 off on the right foot!! TAKE YOUR FIRST STEP TOWARDS FINANCIAL SECURITY!!! http://www191014.ai.net See how and why this can happen for you, your family and your friends try the Web address above! (you can copy and paste the Web address into your browser of choice) Hint: if your Web browser is buggy or producing errors, try Netscape or Microsoft Internet Explorer for best viewing) ** We're_even_giving_away_one_all-expense_paid SKI VACATION_for_two in Steamboat Springs, Colorado no purchase necessary (must be 18) ** (Sure beats a coffee mug or a T-shirt, doesn't it?). That is because we appreciate your time in evaluating this ground-floor opportunity. You can be on your way to making your dreams come true. You will have an opportunity for income for you and your family, even your friends. They will thank you for the rest of your life. *** Heres the deal *** It is so easy. Just do the numbers. Were sending this E-Mail to over 8 MILLION people over the next few weeks. If just one-half of one percent sign up, you could have a portion of 40,000 people generating INCOME FOR YOU EVERY DAY right through next the new year and beyond!! This is a "no risk" opportunity! The sooner you ACT, the more of these people you will have WORKING FOR YOU! Now, honestly, what have you got to lose? -- a few minutes of browsing?? Use your World Wide Web browser to locate us at: http://www191014.ai.net CLICK the address above, look at the opportunity. Then be sure to sign up for the SKI VACATION CONTEST. Better yet, ask for the application and take this important step to make your dreams come true. <<<if you do not have a Web Browser, E-Mail us at: eightmil(a)pleaseread.com Please put the words "Send Info & Application" in the SUBJECT line and include a contact name, physical address, and telephone # >>> Thank You again for your time, Direct Access Corporation eightmil(a)pleaseread.com http://www191014.ai.net

1 0

Hyperlink Spoofing: an attack on SSL server authentication
by Frank O'Dwyer 17 Dec '03

17 Dec '03

I've written up an attack on SSL server authentication at http://www.iol.ie/~fod/sslpaper/sslpaper.htm As far as I am aware, this attack hasn't been written about before. It does not attack the SSL protocol or low-level cryptography, but works at a higher level in order to persuade users to connect to fake servers, with the browser nonetheless giving all the usual appearances of a secure session. Not much technical sophistication is required to carry off the attack, and the impact is that a user may be persuaded to reveal information such as credit card numbers, PINs, insurance or bank details, or other private information to the fake server. Another risk is that the user may download and run trojan Java applets or executables (e.g. banking or database clients) from the fake server, believing them to be from the real server and therefore safe. I am posting this announcement on comp.security.misc, ssl-talk and on cypherpunks. If you know of any other individuals who may be concerned about this attack, but who do not read this group or those lists, please forward this message to them. Cheers, Frank O'Dwyer fod(a)brd.ie

2 2

Re: Secret-Sharing Algorithm
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> I've been looking over Shamir's secret sharing polynomial scheme that > Schneier describes in section 23.2 of AC2. The basic equation for a (3,n) > threshold scheme is (ax^2+bx+M) mod p. I understand that the coefficients > need to be randomly generated for each message but is it OK to reuse the same > prime p over and over? If the message M is always a 160-bit SHA hash, could > I just find the first 161-bit prime and hard-code it into my application and > then just generate new 160-bit coefficients for each new message? Yes, as long as the message can never be more than 160 bits this would be fine, the co-efficients must be true random for the security to be perfect. Indeed using the same prime is an advantage as you suggest because it does not alter the security but increases the ease of implementing the system. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Re: Anonymous Post Control
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> It would be nice if toad.com would verify signatures and insert a > header into the messages with the PGP User Id of every poster. > Then it would be very easy for many people to filter the messages > using widely available off-the-shelf mail software. Well the obvious answer seems to me to stop majordomo at toad.com accepting ANY messages from anonymous sources but let pseudonyms post, pseudonymous posting allows the owner of the nym to accumulate reputation capital without disclosing his or her true identity. Bear in mind of course that this is a purely technical answer and I happen not to believe that anonymous posting should be stopped. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

2 1

Re: How many Faggots on this list?
by aga 17 Dec '03

17 Dec '03

On Fri, 3 Jan 1997, Santa12801 wrote: > FUCK YOU..YOU GOD DAM STUPID MOTHERFUCKER > And HERE comes ANOTHER one, coming out of the woodwork! -aga (bring 'em out of the woodwork).bot

1 0

Please read! High Tech
by Rita May Marendic 17 Dec '03

17 Dec '03

I Sincerely appologize if this is unwanted e-mail. Please hit REPLY and type REMOVE in the SUBJECT area and SEND to be removed from this list. - Rita Marendic This is a new biz you might be interested in you really just have to listen to this demo to believe it. Listen to the whole thing, takes about 3 minutes or so ... at the end you can leave a message and our upline will call you. In the message tell your name, phone number & the best time/day to call you. You also need to leave MY name Rita Marendic & MY Distributor number: which is 1853400. This process will work the same way for YOU when you get into this one with me! If you prefer you may hang up and e-mail me with your phone number and time to call you. It would be worth your time to call the number again and listen to this TWICE! 416-763-9045. I did! I just could not believe what I was hearing the first time! AND, this is just a PART of what we have for sale with this one! It gets even better! LOTS of people are going to want to get in this! Not much hassle involved ... we just generate leads and have them call & listen to this demo on the phone. You think WE can sell this? This is Brand New ... Since November ... (last month!) With this BizOp we pay a one-time out-of-pocket and then ALL future fees come out of REVENUE. No more out-of-pocket after the getting-in fee. THIS is a beauty ... Let me know what you think. Sincerely, Rita Marendic

1 0

Re: Cypherpunk Elitism and Spam Filters
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Toto <toto(a)sk.sympatico.ca> writes: > Dr.Dimitri Vulis KOTM wrote: > > > > I'm not doing anything with your stupid list. I'm not even on it. > > That's right. This list is now being 'haunted' by the 'ghost' of > the late, great Dr. DV K. Boo! aa@@aaao a@@@@@@@@@@@aao @@@@@@@@@@ ::::::: :::: @@ @@ @@@ :::::::::::: :::::: @@@@@@@@@@@@ :::::::::::::::: :::::::: @@@@@."".@@@@@ :::::::::::::::::: ::::::::: @@@@@@@@@@@@@@@@ ::::::::::::: :::::::::: @@@@@@' `@@@@@@@ :::::::::: :::::::::::::: @@@@@b__d@@@@@',@@@@@@@@ ::::::::::::: ::::::::: aaaa`@@@@""".@@@@,a@@@@@@@ :::::::::::::::: :::::::: aa@@@@@@@@@@@@@@@@@@@@@@@@@@ :::::::::: :::::::: ::::::: @@@@@@@@@@@@@@@@@@@@@@@@@@@@ :::::::::::a :::::::: ::::: @@@@@@@@@@@@@@@@@@@@@@@@@@@ ::::::::::: @@@a :::::::: :::: @@@@@@@@@@@@@@@@@@@@@@@@@@@ ::::::::::: @@@@@@@a ::::::: a@a @@@ :: @@@@@@@@@@@@@@@@@@@@@@@@@@@ ::::::::::: @@@@@@@@@@@@aaa : a@@" @@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@ ::::::::::: @@@@@@@a @@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ :::::::::::: @@@@@@@@@@@@a @@@@@@@@@@"" a@@@@@@@@@@@@@@@@@@ @@@@@@@@@@ ::::::::::: @@@@@@@@@@@@@@@@@@ @@@@@@'"@@ a@"@@@@@@@ @@@ : @@@@@@@@ ::::::::::: @@@@@@@@@@@@@@@@@@@ ,@@'"' : @@ @@" "@@@"@@ ::: @@@@@ ::::::::::: @@@@@@@@@@@@@@@@@@@@@ @@' :::: @@@ :::: @ ::::::::::: @@@@@@@@@@@@@@@@@@@@@@@@ :::::: : :::::: :::::::::: a@@@@@@@@@@@@@@@@@@@@@@@@@ ::::::: ::::::::::: :::::::::: a@@@@@@@@@@@@@@@@@@@@@@@@@' ::::::: ::::::::::::::::::: a@@@@@@@@@@@@@@@@@@@@@@@@@@ :::::::: ::::::::::::::::: ""a@@@@@@@@@@@@@@@@@@@@@' ::::::::: ::::::::::::: @@@@@@@@@@@@@@@@@@@@@' :::::::::: ::::::::::::::: """""@@@@@""""""""' ::::::::::: ::::::::::::::::: :::::::::::::::::: ::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::: ::::::::::::: --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Ecash naysayers
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text ------------------------------ Date: Fri, 3 Jan 1997 17:02:52 -0500 From: Roderick Simpson <rod(a)wired.com> To: Multiple recipients of list <com-priv(a)lists.psi.com> Subject: Ecash naysayers Anyone heard a convincing naysayer of electronic cash? Who were they? Best, Rod R o d e r i c k S i m p s o n rod(a)wired.com A s s o c i a t e P r o d u c e r T h e H o t W i r e d N e t w o r k www.braintennis.com www.wiredsource.com ------------------------------ --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/

3 2