December 2003 - cypherpunks-legacy

Double crypt strength
by Rick Osborne 17 Dec '03

17 Dec '03

I am curious as to the strength of Un*x crypt when used upon itself. I was thinking of was to obfuscate passwords and a few came to mind (obviously not original): 1. Use a hashed passphrase. 2. Encrypt your original password and then used that as your password. (Or triple, quadruple, ad inifinitum...) Re #1: I know that a good hash will take a pass phrase and reduce it to a statistically random sequence. I'm not intending to use the hash for verfication, but for two reasons: 1. Get a nice random jumble 2. Come out with something shorter than I came in with. Re #2: This I thought might help spoil a dictionary attack. Granted, if the attacker knows that you are doing this, it only adds one step in his process, but if he doesn't it turns his attack into plain brute force. Plus, for Un*x users, it's right there on the command line and only adds a few seconds to the entire procees of changing passwords. The added benefit with both of these is that the user does not have to remember some cryptic string, but can remember his normal password/phrase. By this, it is obviously not a commercial-use scheme, but one for individual users. (If everyone used the same algorithm, it'd be kinda pointless, right?) So with everyone (hashing down/reencrypting) their (passphrases/passwords) with different algorithms, all attacks are reduced to brute force. Either that, or the attacker has to figure out what algorithm the user used, still making a dictionary attack that much harder. So what are the comments on a system like this? Obviously, they are not original ideas, but I would like to know what has been said about them. Rick Osborne / osborne(a)gateway.grumman.com / Northrop Grumman Corporation ------------------------------------------------------------------------- What the hell, it's only 4 month's grant - I can live in a cardboard box, and catch pigeons for food. After all, I've got raytracing to do!

1 0

The FAGGOT list
by aga 17 Dec '03

17 Dec '03

On Mon, 6 Jan 1997, Wm_Wallace wrote: > Blow me!! > That is another FAGGOT coming out of the woodwork! > > > > > > > In article <Pine.LNX.3.95.970103055306.29988A-100000(a)dhp.com>, aga > <aga(a)dhp.com> wrote: > > > On Thu, 2 Jan 1997, Dr.Dimitri Vulis KOTM wrote: > > > Date: Thu, 2 Jan 1997 10:50:21 -0500 (EST) > > > From: Chris Rapier <rapier(a)psc.edu> > > > To: spam-list(a)psc.edu > > > Subject: regarding the minutes for the filtering meeting... (fwd) > > > Message-Id: <Pine.BSI.3.95.970102104539.22816E-100000(a)triste.psc.edu> > > > Mime-Version: 1.0 > > > Content-Type: TEXT/PLAIN; charset=US-ASCII > > > Sender: owner-spam-list(a)psc.edu > > > Precedence: bulk > > > Reply-To: spam-list(a)psc.edu > > > > > > Hello all, > > > > > > These are the minutes from the informal meeting we had at IETF. As you can > > > see the focus of the work shifted from a narrowly defined anti-spam > > > concept to a more generalized mail filtering routine. I, and others, have > > > come to believe that shifting the focus like this will be more effective > > > in the long run. > > > > > > This is not to say that this is the only way to combat spamming. However, > > > at the present time it does seem the most promising and most likely to > > > garner IETF support. > > > > > > I'll be making some annnouncements with regards to direction and focus and > > > other resources in the next couple of days. I'm also going to start > > > working on a proposed Charter for this. If all goes well there is a > > > possibility we can have a real honest to goodness official type BOF in > > > Memphis. > > > > > > Chris Rapier > > > Systems Programmer/Cabin Boy 2nd Class > > > Pittsburgh Supercomputing Center The Pittsburgh Supercomputing Center is a well known FAGGOT operation, with both Peter Berger and the dyke Esther Felderman working there to hire FAGGOTS exclusively for future positions. > > > 11EE > > > > This guy said he was not a faggot, but I am not too sure > > any more. I am going to have to see this Chris Rapier personally > > in the next few months, and straighten the boy out. This little boy > > needs a Pittsburgh Education. > > > > > > > > Chaired: Chris Rapier > > > Minutes: Jack De Winter > > > > > > > Now it appears we have another problem gathering of faggots here. > > Just how many KNOWN faggots are on this list? > > > > > > > Attended: > > > Jack De Winter <jack(a)wildbear.on.ca> > > > Kirpal Khalsa <kirpal_khalsa(a)ccmail.com> > > > Benjamin Franz <snowhare(a)netimages.com> > > > Steve Hole <steve(a)esys.ca> > > > David Morris <dwm(a)xpasc.com> > > > Yaron Y. Goland <yarong(a)microsoft.com> > > > Chris Rapier <rapier(a)psc.edu> > > > Rob Earheart <earhart(a)cmu.edu> > > > Sam Weiler <srw+filtering(a)cmu.edu> > > > Chris Neumann <chris(a)innosoft.com> > > > Randy Gellens <randy(a)qualcomm.com> > > > Lyndon Nerenberg <lyndon(a)esys.ca> > > > Matt Wall <wall(a)cmu.edu> > > > John Meyers <jgm(a)cmu.edu> > > > Neal A Dillman <neald(a)glyph.com> > > > Ned Freed <ned(a)innosoft.com> > > > Dan N. <dan(a)innosoft.com> > > > Peter Taylor <peter.taylor(a)ncl.ac.uk> > > > John Noremburg <jwnz(a)qualcomm.com> > > > Neal McBurnett <nealmcb(a)bell-labs.com> > > Most of the above men are apparently FAGGOTS, since they conspire to censor Freedom Of Speech on the InterNet, under the guise of "spam elimination." Actually, is all a front for censorship by homosexuals on the InterNet. > > All of these who are faggots must be labeled > > and watched, as we know that faggots are the worst censors. > > > > Let's all hope that John Gilmore fucks Peter Berger up > > the ass before he dies. > > > > Does anyone know this last guy from Bell Labs? > The question is does Bell Labs knowingly hire faggots?

1 0

An observation on the moderation thread.
by roy＠sendai.scytale.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Of passing interest: I'm seeing the majority of complaints about list moderation only as they are quoted in others' replies, because the origional complainents are already in my killfile. Carry on, Sandy and John. - -- Roy M. Silvernail [ ] roy(a)scytale.com DNRC Minister Plenipotentiary of All Things Confusing, Software Division PGP Public Key fingerprint = 31 86 EC B9 DB 76 A7 54 13 0B 6A 6B CC 09 18 B6 Key available from pubkey(a)scytale.com, which works now -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMtD6Phvikii9febJAQEYywP9GrCx0/UQJNns2kdwvyK2UcdGrETObWDG JeFc8ob+pEvX3mm89astZ2c6AF8tb77pGYofbGJu3qyLtsOFnQ+BJPBusZNta5wv 4NJ4I79rp5uioxyg/8mQbvoaMffYuuvAWVTzmI53eHXRl605Za8fkRlejXah2HSH iefACIE5pIw= =oeKw -----END PGP SIGNATURE-----

4 3

No Subject
by DAVID ARTHUR 17 Dec '03

17 Dec '03

unsribrive

1 0

Re: Sandy and I will run a cypherpunks "moderation" experim
by Rich Burroughs 17 Dec '03

17 Dec '03

At 02:54 AM 1/6/97 -0800, "Ross Wright" <rwright(a)adnetsol.com> wrote: [snip] >So my question is: is there going to be a maximum number of times I >can say fuck in a good post? Like a 3-fuck limit? Or will you take >out the magic marker and draw through them? 5 fucks. Rich p.s. Has anyone mentioned censoring the word "fuck," besides Ross? ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb U.S. State Censorship Page at - http://www.teleport.com/~richieb/state dec96 issue "cause for alarm" - http://www.teleport.com/~richieb/cause

1 0

'96 Act Tech Fund
by Jeff Grantham 17 Dec '03

17 Dec '03

Greetings, I am a researcher at the University of Colorado and I am looking for information on the Technology Fund mentioned in Section 552 of the Telecom Act. I have had little success in getting information on this fund perhaps because the v-chip has replaced it. This fund was supposed to be a voluntary effort by industry to come up with an alternative to the v-chip. The top 4 networks pledged $2 Million to this fund before the act was passed, but now it seems dead. The original legislation was proposed by Rep. Coburn (R-OKLA). This part of the telecom act is much milder than the v-chip stuff, but nobody knows what happended. If you have any information, web sites, new groups or articles that might be useful it would be very valuable to me. I am willing to share whatever information I find and post the final reserach on my web page. Thanks, Jeff Grantham

1 0

Re: Sandy and I will run a cypherpunks "moderation" experiment in Jan
by Rich Burroughs 17 Dec '03

17 Dec '03

At 03:06 AM 1/6/97 -0800, toto(a)sk.sympatico.ca wrote: >I believe that every "EASY $$$ MONEY" posting ought to be forwarded >to the webmaster at the site from which it originated. > Those who are harboring these generous souls should also be afforded >the opportunity to rake in the cash. I can hardly see how anybody >could possibly resent being reminded of the wonderful opportuninties >they are making it possible for us to learn of. Be careful when mailbombing in retribution for spam. Often the aricles are forged, and sometimes it's with the direct intention of getting someone else mailbombed. I traded some email with a system administrator a few days ago in this boat -- they had cancelled a customer's account, and to get revenge the former customer sent out a bunch of spam that was forged to look like it came from this sys admin's domain. Even if the site wasn't literally mailbombed, the system administrator had to spend a lot of time, I'm sure, delaing with unhappy recipients of the spam, like myself. Mailbombing is almost always a bad plan, IMHO, besides being a denial of service attack and probably illegal in a lot of places. Rich ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb U.S. State Censorship Page at - http://www.teleport.com/~richieb/state dec96 issue "cause for alarm" - http://www.teleport.com/~richieb/cause

1 0

Re: Anonymous Post Control
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> > Well the obvious answer seems to me to stop majordomo at toad.com > > accepting ANY messages from anonymous sources but let pseudonyms > > post, pseudonymous posting allows the owner of the nym to accumulate > > reputation capital without disclosing his or her true identity. > > Paul Bradley accumulated oodles of reputation capital with his > obscene rants about "brute force attacks on one-time pads". I do not see what was remotely "obscene" about a slip up of this kind, and please refrase from using the plural where it is not appropriate, I posted such a mistake once and immediately realised what I had said and retracted it. > > Now he wants more censorship. If you had cared to comment in the rest of my posting to your reply you would have seen that immediately after stating this solution I confirmed that I do not encourage this or condone it as it is censorship, but that it was merely a solution, not a good one granted but still worthy of mentioning. For those who (ahem) overlooked that part of my posting here it is again. >Bear in mind of course that this is a purely technical answer and I >happen not to believe that anonymous posting should be stopped. But of course you chose not to comment this in as it allowed you to credibly rant about me wanting censorship, at least argue with someone you have a dispute with rather than just randomly picking people and quoting parts of their posts out of context then flaming them. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

$$$ for IP plan.....
by David Lesher / hated by RBOC's in 5 states 17 Dec '03

17 Dec '03

X-within-URL: http://rs.internic.net/arin/ AMERICAN REGISTRY FOR INTERNET NUMBERS PROPOSAL {chop} Below is the proposed plan for the organization structure and fee schedule. The organization will have more detailed bylaws which will be ratified by the Board of Trustees. _________________________________________________________________ An annual membership fee of $1,000 will be charged to all entities joining the American Registry for Internet Numbers (ARIN). Membership is open to any entity/individual wishing to join, regardless of whether the entity/individual receives address space directly from ARIN. Membership is not a requirement for receiving address space from ARIN. _________________________________________________________________ SECTION 2.3 ISP REGISTRATION FEE If an ISP moves from a Small to a Medium category (for example) in the same year, the ISP will be charged the difference. Small $2500/year /24 - /19 Medium $5000/year >/19 - /16 Large $10K/year >/16 - /14 X-Large $20K/year >/14 ================================ Anyone care to calculate the total dollars? -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

2 1

IWD_ism
by John Young 17 Dec '03

17 Dec '03

1-6-96. "Information-Warfare Defense Is Urged" The Defense Science Board said the Pentagon should launch counterattacks against computer hackers by injecting the attackers' computers with "a polymorphic virus that wipes out the system, takes it down for weeks." The report largely sidesteps as irrelevant the continuing controversy about the export of encryption codes. ----- IWD_ism

3 2