December 2003 - cypherpunks-legacy

Re: Mr. throw@yourself.up
by Psionic Damage 17 Dec '03

17 Dec '03

Try Pingin' his ass! Teach him a lesson. At 06:39 AM 12/19/96 -0500, you wrote: > > ><HTML> ><BODY> ><CENTER> ><A HREF="http://www.geocities.com">Postage paid by: <IMG SRC="http://www.geocities.com/pictures/newgeobt.gif"></A></CENTER> ></BODY> ></HTML> > > >-----BEGIN PGP SIGNED MESSAGE----- > >He's some little turd at telnor.net. Probably >rex(a)telnor.net > Throw ftp://ftp.telnor.net/pub/firewall/downloaders.HTM >into your favorite browser. The ftp server is world writable too. > Fuckin' IRC scum. > Oh yeah. > Merry Christmas. > > >jamie >- ------------------------------------------------------------------------------ >jamie(a)comet.net | Comet.Net | Send empty message > | Charlottesville, Va. | to pgpkey(a)comet.net > | (804)295-2407 | for pgp public key. > | http://www.comet.net | >"When buying and selling are controlled by legislation, the first things >to be bought and sold are legislators" -P.J. O'Rourke. >- ------------------------------------------------------------------------------ > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQEVAwUBMrkpX/MDfTuunU79AQEeogf+Lq4bmq3klEUXHyMAozReqBJgX55AshYs >SKh+dZUSEd4kXGM2zDbApLyO8htzxVlpMfcql8ra//9S55OqIOrI3EaVlm3MJ1jt >q0oBLM93SNPUmExVAiR38LEybPi7m8qWpfPj6xQUrt20Jlh3FG1aZJJW0JxW1vHP >QwsZCbp2QKifCYA+ej404HdsVjfPoC/IyTcZ/QTi5BOcXMLRbjkfLb3XuVjPfuiE >5wrqqVnXmQpGOp9Pd1yUHvGUYcxKIRBqx23IwaxcIpfONtWsDfTlZixLGZNVOjc8 >SJmbOukE+KeOSJRElwrJFuWVTB+qtTyif9qksopmuj6vsCQpbrQ94g== >=aDfS >-----END PGP SIGNATURE----- > > pSIONIC dAMAGE Zer0 Faith Inc. www.geocities.com/SiliconValley/Heights/2608 H/P/A/V/C ANTIVIRUS/COUNTERSECURITY "ONLY THE ELITE SURVIVE!"

1 0

Ban spam outright?
by Roderick Simpson 17 Dec '03

17 Dec '03

There is an interesting debate going on between Jamie Love and Scott Hazen Mueller over how to deal with the problem of email spam (does this constitute as one?) in Brain Tennis right now. Mueller would like to get rid of spam outright, while Love's organization is on the verge of recommending spam labeling legislation to the US Congress. Go to www.braintennis.com to take a look. Also, drop in to the open discussion area: http://www.braintennis.com/cgi-bin/interact/replies_all?msg.33709 Best, Rod R o d e r i c k S i m p s o n rod(a)wired.com A s s o c i a t e P r o d u c e r T h e H o t W i r e d N e t w o r k www.braintennis.com www.wiredsource.com

1 0

Ahem... 'virus'?
by Dagmar the Surreal 17 Dec '03

17 Dec '03

Let's get a few things straight here before we go any further... I field enough calls from the clooless at work trying to warn me about getting the 'Good Times Virus' in my email without having to worry about yet another meme floating around about email virii. 1. Can anyone show that the .com file replicates? It MUST reproduce itself to be called a virus last time I checked. It looks like a trojan horse to me. 2. How many of you people are using Microsloth Internet Mail? It was mentioned a LONG time ago (I think here, in fact) that there was a major mental lapse on the part of the programmers when designing it because single-clicking a piece of mail will view it, while DOUBLE-CLICKING the mail will execute it (and any attached files!). Most people double-click EVERYTHING in Windoze, and this is why it nailed so many people. I'm surprised I hadn't seen this done sooner. If you think it only got a few of the M$IM users, think again. I'll bet there's a LOT of them out there who are 'suffering in silence' because their computer is completely kaput, or sitting in a shop waiting for someone like me to wipe the hard drive and reinstall everything. Please, if there's going to be another damn meme about email virii, let it NOT be from a list I consider to be at least a LITTLE more enlightened than the hordes of AOL (l)users out there. ---------- Dagmar the Surreal (not actual size) "The Internet is Full. Go Away." -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzK50XQAAAEEAMoJsT9Rwbd28VUGhag2fOl+QrTnltqHrN2/7CBMy6kcnaba 8j3HIsNY6NzE/62iV67n6uCTlt6r3/ZosZL4RXYerH06bDOAfWZ6AYn6d0OO+vgi sghnFXiUfknU0h7A88R7z4uRRpZNkU0NXL/svZjrL+cOiMRnQUAqcwqI8ynFAAUR tCREYWdtYXIgdGhlIFN1cnJlYWwgPGRhZ21hckBlZGdlLm5ldD4= =34r7 -----END PGP PUBLIC KEY BLOCK-----

2 1

Re: EFF: Bernstein court declares crypto restrictions unconstitutiona
by root＠ace.cnl.com.au 17 Dec '03

17 Dec '03

1 0

Re: "I've Always Wondered..."
by Jason Durbin 17 Dec '03

17 Dec '03

Dimitri Vulis KOTM (dlv(a)bwalk.dm.com) Thu, 19 Dec 96 09:50:27 EST wrote: Rabid Wombat <wombat(a)mcfeely.bsfs.org> writes: > On 10 Dec 1996, Secret Squirrel wrote: > > > Still, this brings up an interesting point: Considering the special > > > abilities of many of the principals here, is there something especially > > > tasty in store for those net predators who spam this list? > > > I've always imagined something _very_ special happens to their accounts, > > > but I may just be a hopeless romantic, I dunno... > > > If not, why not? > > Even c'punks are busy at times. > He he he. Clearly, "cypher punks" like Paul Bradley, Ray Arachalian, and > Timmy May suffer from too having too much free time. Idle minds are the > root of sexual perversion or some such. Regulars of the Cypherpunk mailing list would be well advised to pay no attention to Dimitri Vulis who is in the latter stages of dementia caused by the syphillus he contracted from his wife Marina. How sad. Of course, in his rare lucid moment, he lies just for fun. So, enjoy. :) jd

1 0

Re: "Cryptography Policy and the Information Economy" draft available
by Carl Ellison 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 04:11 PM 12/19/96 -0500, Matt Blaze wrote: >I've got a new draft available of my critique of US cryptography >policy and its impact on the future of the "information economy". >It summarizes comments I made to a recent meeting of the Computer >and Communications Industry Association, and is an updated version >of testimony I gave to the Senate commerce committee earlier this >year. > >Postscript is at ftp://ftp.research.att.com/dist/mab/policy.ps >ASCII text is at ftp://ftp.research.att.com/dist/mab/policy.txt Matt, I liked your draft except for one thing. You never mentioned that the government has never established a legal right to access the cleartext of an encrypted communication or file. Perhaps the most severe flaw in the GAK proposals is that I as a citizen wish to attempt to keep secrets from the government and to force them to take me to court to get a judge to demand that I release those secrets -=- while their proposals are trying to prevent me from even attempting such. - Carl -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMrn+WlQXJENzYr45AQFrFgQAp2jfB3EOLJoOKHIpTne7D4cwL1KzPcRg VoELRWDGS1RkgK5cSgLl9ASWZ7TdcMRiQUbDPMoffMi3UWlfIpomdsHq+E4HE/U+ 6CS+cpUfw/eSwBYkotCfETMAHymknu/o06QYfBX0TQsN/2XOC52xXEd9Nb/8xjUW c4RETw8Os8A= =nkcy -----END PGP SIGNATURE----- +------------------------------------------------------------------+ |Carl M. Ellison cme(a)cybercash.com http://www.clark.net/pub/cme | |CyberCash, Inc. http://www.cybercash.com/ | |207 Grindall Street PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 | |Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 | +------------------------------------------------------------------+

1 0

Re: Executing Encrypted Code
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 9:18 PM 12/19/1996, Ben Byer wrote: >> At the last meeting references were made to processors which only >> execute encrypted code. Decryption occurs on chip. >> >> If each chip has a unique public/secret key pair, and executes >> authenticated code only, there are some interesting implications. > Let's see... What about this scenario: > Alice gets a contraband copy of PGP 4.0 off the Internet. Since the > public-key algorithm is publicized so that people can encrypt software > to a chip, PGP 4.0 has the ability to encode/decode/generate keys for > the chip. Alice generates a public key/private key pair 0x12345678, > in software. Alice goes to www.microsoft.com and orders Office '99 > online, and tells Microsoft "Hi, my name is Alice, my credit card > number is 31426436136778 and my PGPentium's public key is 0x12345678." > Microsoft unwittingly sends Alice a copy encrypted to 0x12345678, for > which she has the private key to. Alice decrypts Office '99, and > reencrypts it with public key of her PGPentium, as well as the keys f > all her friends. The software vendor would be wise to check that the public key was legal. It would be a simple matter for the manufacturer to publicize all public keys that had been installed on chips. > Does the authentication defeat this? I'm sort of waving my hands around when I say "authentication". One approach is for the manufacturer to authenticate software submitted by approved vendors. The vendors are then tasked with encrypting it for the correct processor. > Our computers would only run software from Microsoft? Scary. There are all sorts of nifty deals that could be made. Microsoft could commission a special run of the processors which only run Microsoft approved software. Machines using these processors could be given away or sold at a steep discount. You could also timestamp the software so that it only runs for a given length of time. This will encourage people to upgrade regularly. ;-) The processors could also support metering. The processor could support some sort of API for the software to tell it how many computrons had been used and stop it from running after they run out. This means that light users or evaluators of software pay relatively low prices while heavy users pay high prices. This is a great deal for all concerned. Right now software vendors try to do this with clever deals, but it's crude at best. Peter Hendrickson ph(a)netcom.com

4 3

Re: Credentials without Identity--Race Bits
by Bill Stewart 17 Dec '03

17 Dec '03

At 12:38 PM 12/11/96 -0800, "Timothy C. May" <tcmay(a)got.net> wrote: >Consider a "race credential" offered by some entity. .. >(Why some groups might want this is left as an exercise for the reader. >Perhaps a less-inflammatory example (to some of the sensitive amongst you) >might be that some women want to interact in "women only" forums--a clear >case of discrimination, no?--and may want a "gender bit" avaiable to >display as a credential.) I've already tried to subscribe to a forum (at the liberal Utne reader!) where I was rejected because they currently had more subscribers who identified themselves as "male" than as "female", and they wanted to maintain a balance. And certainly "US Citizens Only" sites are common - nationalism is just as ugly and stupid as racism, and far more likely to be enforced with ID requirements; I've heard that in less civilized parts of the world you're actually required to carry government-issued ID cards to walk down the street or fly on airplanes. Another problem is that "nationalist credentials" made hide other data, such as a race bit, a Jewish bit, a don't-ask-out-loud-don't-tell bit, a suspected-Commie bit, a check-FBI-files-first bit, etc. The subliminal channels in DSS are the best known method for doing this, but it's probably possible to do something similar even using blind signatures, especially if there are multiple keys or timestamp fields. For example, they could use different signature keys that are supposedly just "signed at the New York/LA/Langley/Holtsville/SF/DC office" or "signed 4/1/97 4:20pm". # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

11 12

Re: Executing Encrypted Code
by Jazzmin Belle Sommers 17 Dec '03

17 Dec '03

>>>> You could also timestamp the software so that it only runs for a given >>>> length of time. This will encourage people to upgrade regularly. ;-) >>> Or to reset their clocks. Which is what many of us do when software is >>> about to "expire." >>However, why not use "beacons"? chop chop chop I have been using some shareware that simply has a built-in counter. Once the counter runs out, you have to register. I would suppose that one could hack the code to find the counter, assuming you could decompile it (or wanted to). Personally I think this is a decent solution to the problem -- the counter on this particular software let you use it 50 times. That's adequate to determine whether you want to keep it or not. Of course, if you saved the .zip file to disk before you installed it, you could delete the copy and reinstall the .zip. But everyone knows this. Jazzmin Sommers

1 0

RE: Securing ActiveX.
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> Armenians are murderous cowards. They killed over 2 million Moslems in > this century alone - mostly women and children. I note that along with this racist generalisation you decided to post the following rant: >As usual, Timmy May spouts racist, anti-Semitic shit. As usual, he has >no idea what he's talking about. So what else is new... As well as a number of other rants along those lines. There is little difference between over generalisations of the kind you made above and, for example, discriminating against someone on the basis of race, colour, religion etc. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

2 1