December 2003 - cypherpunks-legacy

Re: Announcement: Very Good Privacy
by Mark Rosen 17 Dec '03

17 Dec '03

> > What puzzles me is that he included two cyphers that are _extremely_ > > easy to > > break, the vignere cypher and the ascii cypher. Why include these? And > > what > > is his new permutation of RC4 and DES? > > > > Concur. Also, let's see: only available for Win95/NT, no sources > available, and cyphers that are known to be weak - and that can > be used without any warnings whatsoever - anyone else watching > their Snake-Oil-O-Meter get pegged? The plus side of the Vigenere and ASCII ciphers is that they are fast. For example, on a friend's machine, I can get 1.7mb/s using ASCII while NewDES, the fastest "secure" algorithm, runs at a only 600k/s. Documentation of each algorithm with an explanation of its security is provided in the help file. As for snake-oil, this is a genuine product. I am trying to compete with Puffer 2.0, which costs like $25-$30; $5 is certainly less than that. As soon as I get the money to buy the needed compiler, I'll make a port to the Mac, and a port to Windows 3.1 should surface in a few days. > Give us some source code, port it to XWindows, and then maybe > we'll talk. I'm working on installing Linux on my machine and will be working on an X port. I'll keep you posted. BTW, I personally really enjoy using VGP and have encrypted all of my source code and other archived things like that. Mark Rosen FireSoft - http://www.geocities.com/SiliconValley/Pines/2690 Mark Eats AOL - http://www.geocities.com/TimesSquare/6660/

1 0

Codebreakers on the telly.
by pjb＠23kgroup.com 17 Dec '03

17 Dec '03

on tuesday, 3 dec at 2000 hrs, channel 13 (PBS) in the new york area will air the Nova special, "The Codebreakers". this isn't anything new, but, as i remember, it's worth watching again. cheers, -paul

1 0

Just in time for Christmas!!!
by orders＠compugen.net 17 Dec '03

17 Dec '03

Dear Computer User: The perfect gift for your family, a friend, or just for yourself. "Personal Computer Accessories" Mitsumi Keyboards, Microsoft Mouse, Computer Speakers and more... Select the URL below to place your order; just in time for Christmas. *************************************************************************** To place your order visit our website at: http://www.pcorders.com ***************************************************************************

1 0

New payment scheme for Web access
by Asgaard 17 Dec '03

17 Dec '03

(See abstract from Edupage at the end) Who wants to use the MTV web site anyway, but I suppose this could spread. I guess a very popular site could allow access only to domains (....foo.bar) that have paid instead of blocking those who have not, otherwise 'new' sites could circumvent it easily. On the other hand, a proxy server inside of an allowed domain would circumvent the allowing kind of scheme, at least for a while (until they found out about it). Great opportunities for hacking wars. Another payment scheme in use is to recieve passwords for closed Web pages by voice phoning to an expensive number. Did the porno sites invent this (they have long been in related business)? Asgaard ************************************************************************** MTV TURNS THE TABLES IN WEB VIEWING Viacom's MTV Networks has come up with a new way to make its Web investment pay off -- it's putting the squeeze on online service providers, demanding that they pay multimillion dollar fees or risk having their subscribers blocked from viewing MTV's Web site. <...>

3 2

unsuscribe
by Thomas Repellin 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 2 Dec 96 6:49:59 PST remailer email address history latency uptime ----------------------------------------------------------------------- weasel config(a)weasel.owl.de ++++++---++ 2:15:58 99.98% lucifer lucifer(a)dhp.com ++++++-++++* 39:05 99.92% cyber alias(a)alias.cyberpass.net ******-+***+ 36:36 99.91% lead mix(a)zifi.genetics.utah.edu *+++++-+++** 37:21 99.91% nym config(a)nym.alias.net #*+#*#-##### 2:02 99.91% jam remailer(a)cypherpunks.ca ***** ****** 14:42 99.86% squirrel mix(a)squirrel.owl.de ++++++---++ 2:12:47 99.74% middle middleman(a)jpunix.com - ------.-- 3:35:44 99.66% replay remailer(a)replay.com *** - -+**** 21:25 99.28% mix mixmaster(a)remail.obscura.com ++-+++-._.- 11:59:53 99.24% dustbin dustman(a)athensnet.com + ++-___.-+ 23:00:40 98.77% reno middleman(a)cyberpass.net ----- --.-- 3:00:22 98.71% haystack haystack(a)holy.cow.net *#**# #** # 13:51 97.64% extropia remail(a)miron.vip.best.com --------- - 7:34:35 97.19% exon remailer(a)remailer.nl.com #####*-#*#*# 25:16 96.88% winsock winsock(a)rigel.cyberpass.net - -+ 7:01:07 62.06% balls remailer(a)huge.cajones.com ******- 4:04:02 58.23% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Looking for "PrOduct Cypher"
by Dave Del Torto 17 Dec '03

17 Dec '03

"PrOduct Cypher," I need to get in touch with you to discuss your PGP library work. Please email me ASAP (my key's on the MIT keyserver). Thanks. dave PS: Pls excuse the x-post.

1 0

ANNOUNCE: Latest Java Cryptix lib - includes PGP and all Java implementation
by Gary Howland 17 Dec '03

17 Dec '03

A new ALPHA release of the Systemics Cryptix crypto library for Java is now available for download at http://www.systemics.com/software/ The library is FREE FOR COMMERCIAL AND NON-COMMERCIAL USE. This release of the library is only intended for serious developers, who are prepared to work with a moving API. Differences from the previous release are that the library is now 100% Java, although native code can still be loaded if the libraries are present (which is unlikely, since I haven't completed them yet :-) Also, PGP classes have now been incorportated into the library. And of course, all the source is available (in fact, that's all that is presently available :-) Enjoy! CRYPTIX 2.00 - CRYPTOGRAPHIC CLASSES FOR JAVA _________________________________________________________________ Description This library contains a suite of cryptographic classes for Java. It is important to note that this release is not yet stable, so is only recommended for use by serious developers, since there may be major design and API changes. For users that require stability, please use the previous release . Features missing DES and Blowfish are not yet ported to Java. There is currently very little in the way of documentation and example programs. The auto loading of native libraries (if they are present) has not been tested. Features The library is now 100% Java, although native libraries will be loaded if they are present, in order to improve performance. PGP support is now being added to the library (currently most PGP packet types are supported, except for compressed data packets - anyone developing a zip compression library in Java?). Mailing list A mailing list exists for the developers and users of this library. This list is very low volume, and can be joined by sending subscribe cryptix-java _your mail address_ to majordomo(a)systemics.com. Another mailing list exists for PGP developers, and can be joined by sending subscribe pgp-dev _your mail address_ to majordomo(a)systemics.com. Copyright This library is covered by the following licence: Copyright © 1995, 1996 Systemics Ltd (http://www.systemics.com/) All rights reserved. This library and applications are FREE FOR COMMERCIAL AND NON-COMMERCIAL USE as long as the following conditions are adhered to. Copyright remains with Systemics Ltd, and as such any Copyright notices in the code are not to be removed. If this code is used in a product, Systemics should be given attribution as the author of the parts used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes software developed by Systemics Ltd (http://www.systemics.com/) THIS SOFTWARE IS PROVIDED BY SYSTEMICS LTD ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The licence and distribution terms for any publically available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.] _________________________________________________________________

1 0

Copyright violations
by alzheimer＠juno.com 17 Dec '03

17 Dec '03

-- Financial Times, 11/29/96 REUTERS STAFFER SABOTAGES HONG KONG BANK DEALING ROOMS A computer operator at Reuters in Hong Kong recently sabotaged the dealing room systems of five of the company's investment bank clients. The attack crippled for up to 36 hours the computer systems delivering market prices and news to traders at NatWest Markets, Jardine Fleming, Standard Chartered and two other banks. The banks, which resorted to alternative terminals such as Bloomberg, claimed the tampering had no significant impact on trading and said neither they nor their clients experienced losses as a result. The initial breach occurred on November 18. Reuters engineer Winston Cheng (now suspended) allegedly paid maintenance visits to several clients and used his password to gain access to the operating system at the heart of the Reuters networks. He entered commands that would delete key operating system files after a delay to allow him to leave the building. The first bank to report problems at 6:00 P.M. was Standard Charter, followed by the others. The dealing room systems were partially fixed by the morning to allow trading to continue more or less as normal but it was not until the next day that they were restored to full operation. As well as reviewing procedures on staff, Reuters is considering restrictions on its maintenance engineers' access to trading floors and the system software.

1 0

Announce: New mailing list for PGP developers
by Gary Howland 17 Dec '03

17 Dec '03

Hi, I have set up a mailing list for PGP developers. The main topic of conversation will be issues directly related to developing PGP tools and libraries, such as non-standard cipher feedback modes :-/ The list can be joined by sending subscribe pgp-dev _your mail address_ to majordomo(a)systemics.com. Best regards, Gary Howland -- pub 1024/C001D00D 1996/01/22 Gary Howland <gary(a)systemics.com> Key fingerprint = 0C FB 60 61 4D 3B 24 7D 1C 89 1D BE 1F EE 09 06

1 0