December 2003 - cypherpunks-legacy

Passphrase Online...
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi there, I have a question reg. passphrases: If I am connected to the Internet via a SLIP/PPP connection and I type my passphrase while being online (for example, in Private Idaho, after getting my mail), could that passphrase be compromised? If so, how would that be done? Also, if I am online, is it possible for somebody to access my hard drive? Thanks in advance for your help... Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! --> http://www.eff.org */ /* E-mail: harka(a)nycmetro.com (PGP-encrypted mail preferred) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMucA7jltEBIEF0MBAQFdewf/Q74ATvi+OZzSCdyFrIRQ5aRjychCd6hO DbfM+/NQ6EcZseKp30JyjmV2VW4Y+HrxIYPtFKii4XzOJ8YCE2Cvtvn9gP8mAntY oIgsUZG36t+L4nmANpsiEHyzEIMlhjcgW7alKTr+hFbnRjlPwX8W0gdEIXAgIl2k 4uYEB+P+cfUhy1xPQgWfAk6VFspNIHIlFJ3mUqEIJTAOguV//UfIjyNFoGrZhiG7 ocy6YaQ2LiNpoh5xHBIvMf8YSz+FJORVLTucsmA0DYSHMKatNNutXGHoEI5kW1Ww 1O5YAoIuvCLyg/4AEgPBVeU2ClJjARmKrzBcw1bMZDp3wv/DkZdoEQ== =Xtu7 -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

RE: Fighting the cybercensor
by blanc 17 Dec '03

17 Dec '03

From: jim bell (in response to Dimitri Vulis') Look, I've proposed what I consider to be a remarkably consistent method to prevent the kind of political tyranny that you criticize, and I don't see any recognition of this fact. ........................................................ 1) Jim, why do you insist on discussing this on an forum for encryption? 2) Why do you suppose the Iraqis haven't already thought of doing this themselves? 3) The Mafia uses this method all the time - why then haven't they achieved a more rational society among themselves? 4) Weren't governments (like the U.S.) instituted to prevent this sort of thing (even if they don't work out as expected)? i.e., there were systems of courts and lawyers and such instituted to openly deal with "criminal" activity so that a) people could receive assistance against low-life degenerate killers, and b) it could be proven that the accused were indeed deserving of punishment. Humans being what they are, this hasn't worked like it's supposed to, but the point is that there is a reason why such ideas for systems of justice were introduced in the first place. That reason, as I eloquently read in a book, was "So That Reason May Live". That is, so that people who choose to live in a "society" may do so by the method of solving problems through the application of intelligence, rather than merely knocking each other off because a voting majority decides they don't like someone. Destructive people often ascend to positions of power not simply because they are ruthless, but because they have 1) many sycophantic followers and 2) many ignorant, vulnerable people unable to prevent it. You might be able to kill off one Saddam, but potentially many others would be waiting in the wings to take his place. The situation surrounding the existence of someone like Saddam is part of the contributing factors which keeps him there, not simply that one man himself. It was the same with Hitler and with so many others - they don't just have an excess of "power" concentrated within themselves which puts them in positions of control over others - there will have been many people who will have helped put them there, expecting to derive benefits from it. And what will be done about all those people who made this "power" possible? You don't just kill the one man and be done with it - you have to also "kill" the conditions which maintained him. .. Blanc

1 0

RE: Jim Choate Speaks Out on My Part of the Net
by blanc 17 Dec '03

17 Dec '03

From: Toto Jim Choate wrote: > For instance, since Toto pays for the hardware and software that comprises > his part of the net, he is free to limit, control, and edit for content, > anything that passes through his part of the net. > Although I sometimes disagree with Toto because of my limited ability to > understand things on a conceptual level, his rugged good looks, charm, > and superior intelligence show that he should be allowed to control his > own privately owned part of the net and anything that passes through it. .......................................................... I believe it, Jim. .. Blanc

1 0

Fantasy quotes & libel
by Jim Choate 17 Dec '03

17 Dec '03

Hi, After review of the material I forwarded by request it is clear that 'fantasy' quotes are libel provided: * the person being quoted is not a public figure. On a 'private' mailing list like the cypherpunks this is a given unless similar statements can be found in the public records. * the section added to the original quote is not clearly seperated or otherwise dilineated such that a reader will be able to tell what the original quote was and the extrapolation by the 'editor' is. * there is clear intent to effect the perception of the original authors reputation in a negative or otherwise harmful manner. * the 'fantasy' quote is not clearly marked as the opinion of the editor. While quoting persons with editing is allowed under the 1st Amendment as understood by the courts the attributation of extrapolations by a third party (meaning a party other than the original author and the reader) as 'true' quotes of the original author is not. 'Truth' is usually ascribed as protection against libel, however, opinions are not 'true', they are opinions not facts as accepted by a court. With the current 'editorial control' as provided by the cypherpunks mailing list the mailing list operator/censor may also be held in some situations accountable as well. This occurs because the relationship between list operator and the quoter is similar to that of editor and reporter in a newspaper. For the quoter to get his quote distributed the list operator must ok it. The reasoning used is that the editor 'should have known' the boundaries and applied them. Not only is ignorance not an excuse but neither is negligence. Jim Choate CyberTects ravage(a)ssz.com

1 0

Passphrase Online...
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi there, I have a question reg. passphrases: If I am connected to the Internet via a SLIP/PPP connection and I type my passphrase while being online (for example, in Private Idaho, after getting my mail), could that passphrase be compromised? If so, how would that be done? Also, if I am online, is it possible for somebody to access my hard drive? Thanks in advance for your help... Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! --> http://www.eff.org */ /* E-mail: harka(a)nycmetro.com (PGP-encrypted mail preferred) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMucA7jltEBIEF0MBAQFdewf/Q74ATvi+OZzSCdyFrIRQ5aRjychCd6hO DbfM+/NQ6EcZseKp30JyjmV2VW4Y+HrxIYPtFKii4XzOJ8YCE2Cvtvn9gP8mAntY oIgsUZG36t+L4nmANpsiEHyzEIMlhjcgW7alKTr+hFbnRjlPwX8W0gdEIXAgIl2k 4uYEB+P+cfUhy1xPQgWfAk6VFspNIHIlFJ3mUqEIJTAOguV//UfIjyNFoGrZhiG7 ocy6YaQ2LiNpoh5xHBIvMf8YSz+FJORVLTucsmA0DYSHMKatNNutXGHoEI5kW1Ww 1O5YAoIuvCLyg/4AEgPBVeU2ClJjARmKrzBcw1bMZDp3wv/DkZdoEQ== =Xtu7 -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

re: fighting the cybercensor
by Howard Campbell 17 Dec '03

17 Dec '03

A recent publication "The Sovereign Individual"('97) discusses many of the issues discussed on Cypherpunks. The authors, James Dale Davidson and Lord William Rees-Mogg, sketch the likely totalitarian scenarios that will emerge in the coming years. Just as we see every day in the media, they predict that we ain't seen nothing yet when it comes to the attempts to regulate cyberspace, cryptography, and the content of online information. Portraying cellular phone triangulation as a public health concern, etc., are just the beginning. The authors also paint a bleak picture for blanc's 'True Believer' types. They will continue to be milked "as a farmer milks his cows" while those with techno-savvy and 'extranational' savoir faire will grow wings and take their wealth and marketable skills to other jurisdictions where predatory taxmen and arbitrary civil forfeiture laws don't exist. The book is sort of Toffleresque, but written better and full of historical parallels that help the reader to understand social upheavals of the past and how the demise of failing contemporary institutions are likely to affect Joe windowz95. Example: chapter 4- "The Last Days of Politics: Parallels Betwen the Senile Decline of the Holy Mother Church and the Nanny State". aloha, wc

1 0

Austin Cypherpunks Feb. Meeting
by Jim Choate 17 Dec '03

17 Dec '03

The Austin Cypherpunks (austin-cpunks(a)ssz.com) will be holding their next physical meeting on Saturday, February 18, 1997 at 6pm. It will be held at the Central Market HEB Restaurant, look for the red covered 'Applied Cryptography' book. In addition to the local cpunks the Experimental Science Instrumentation and Advanced Computer Experimentation groups have been invited. The meeting is open to all. If you have any questions or need further directions please send email to the Austin Cypherpunks. Hope to see you there.

1 0

Re: Passphrase Online...
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >If I am connected to the Internet via a SLIP/PPP connection and I >type my passphrase while being online (for example, in Private >Idaho, after getting my mail), could that passphrase be compromised? >If so, how would that be done? It certainly _could_ but hopefully isn't. Let's say that Joel McNamara hadn't released the sources to Private Idaho. It's certainly possible that he hooked into the windows created when PI shells out to DOS, and left a snippet of code that mails your keyID and passphrase to some throwaway AOL account, or a nym address that bounces through a dozen remailers, or whatever. Anything you give to a program, especially one that you know accesses the Internet, is a potential security risk. (Special note to Joel, if he's still on this list: Yes, I know better. I've read through all of your released Private Idaho sources. You just seemed like a handy example :) Paranoid yet? Good. That's a healthy state to be in. Fortunately, most developers (like Joel) don't put any such evil hooks into their software. Having access to the source, to be able to read through it yourself, is IMO one of the better ways to be sure about such things. Reading the source and recompiling it yourself is probably the best. >Also, if I am online, is it possible for somebody to access my hard >drive? Depends on what kind of computer and software you're running. I'll assume a Windows-style machine. If we assume that Microsoft didn't leave any lurking backdoors in their implementation of wsock32.dll and winsock.dll, and all you run is your usual Web browser and mail client and you trust _those_ you are probably safe. However, if you're running any server daemons on your machine, such as the MS Personal Web Server or WFTPD or whatever, the possibilities go up _a_lot. Those programs were designed to let others access your hard drive, so there's a much higher chance that they'll let someone get something they're not supposed to. Again, if you trust the people that developed your software to not stab you in the back, you should be alright. Still paranoid? Excellent. dave -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMuxcVHEZTZHwCEpFAQEIKQf8CMV/7NmaJy50DUmiWV8Pg8iYPv8N3Xcl M+Fr0HRO08nxy9uRJ+C+aLhnwmXWYfiXyeSbsy9veHepZfTzsEBIYntlk4wOs7eZ Lk4mjRVI0bLNE60lxmd+8znL0E0QqzVaw5K7t3W0VEe2AMP7aN+ktZGLuIZ8epTg TSQz4u8Q908r+Od/Ojh2BkG13po63ORPu+wKOzMyLeLWgx5Nz252Xot345tHJSJF QqM9SQkDW3AZQgiz+we4qocXE8XQ1VbrMJ+qhTQ6GgsVjpfwJegvOqgIC7hgbpDd gj8lQuEKRqYIPxCqnbh3GbzIQvIwrr4PhvIOuxHX4RPaRacFjrE4iQ== =F/ib -----END PGP SIGNATURE-----

1 0

Passphrase Online...
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >If I am connected to the Internet via a SLIP/PPP connection and I >type my passphrase while being online (for example, in Private >Idaho, after getting my mail), could that passphrase be compromised? >If so, how would that be done? :Paranoid yet? Good. That's a healthy state to be in. Fortunately, :most developers (like Joel) don't put any such evil hooks into :their software. Having access to the source, to be able to read :through it yourself, is IMO one of the better ways to be sure about :such things. Reading the source and recompiling it yourself is :probably the best. :Still paranoid? Excellent. Paranoia!! I love that word :)...What about somebody snooping on my phoneline, while I type the passphrase? :) Harka -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMucbDzltEBIEF0MBAQH/Wwf8DeH6rBzczDPjc00sEAV649EHmZu3Fm5W QCIbtRT9+NWHb4jHmbB5jBkUpkswBDwbisQoZ/XKKhCKeMHbUKWApWiq9jPuvg9w aSsal+8uqVyHLnKEiq1xqjih7rurwRC3qsWWq6Mr7XDgICzfh4XonKgp7ln6LuQj HKk+ewTNND+7WDYGQFAz6VkGzELSjKuPgNRv614IwyC0VXDHH/DJRaEOnBUYa9e2 FfcHUyZANWuHVscHwDCPKIVy+tR8UzsYhhwrIOf1e2KZhTfRMLiP/Tqaaup/C0Nr r5Bjp76e5VPtQ4GsdhrzQT9wjaV2apWq4eDRvkLMq8fVSkV/+ZaTKg== =qEst -----END PGP SIGNATURE-----

1 0

casio dialer
by ja94a08＠tdi.itm.edu.my 17 Dec '03

17 Dec '03

anyone heard of casio .. phone dialer watch ? it's stated that user can phone for free using public phone .. anyone ?

1 0