December 2003 - cypherpunks-legacy

No Subject
by Bovine Remailer 17 Dec '03

17 Dec '03

Someone using the Huge Cajones mailer wrote: David Lesher <wb8foz(a)nrk.com> writes: > USPS uses key locks seemingly designed by Ben Franklin himself. > Look at them someday. FedEx boxes used to have Simplex 926 > 5 pushbutton ""locks"" if you stretch the point. Still did last I checked. Don't let the old-fashioned look deceive you. Most mail storage boxes use lever tumbler locks (similar to what's used in safe deposit vaults, though obviously the mailbox locks have a flimsier plug). How is that obvious? Safe deposit locks generally aren't designed to be hard to open, just hard to open without damage. There's always either a guard or a locked vault door protecting the locks. Mailboxes, on the other hand, generally aren't kept under guard or in vaults.

1 0

Re: Cyphernomicon by Tim May
by Asgaard 17 Dec '03

17 Dec '03

On Sun, 2 Feb 1997, Declan McCullagh wrote: >That question is one for Tim to answer, but I should point out that TC May hasn't posted in a month or so. I miss his posts. Without any official role he was the de facto moderator, mostly by example but also by pointing out the core of the issues when things went astray, for all those years. Did he mention going away for so long in any of his latest posts? I remember 'for the holiday season' but that is long gone. I hope he hasn't left the list for good, being pissed off by Gilmore's choice of moderator(s) or some such reason. Asgaard

1 0

Re: Keystroke sniffer question
by Z.B. 17 Dec '03

17 Dec '03

On Sat, 1 Feb 1997, Scott wrote: > How can you detect if there is a keystroke sniffer on your computer. > All sniffers have to write to disk at some point. You can detect one by checking to see how much disk space you have (DIR on MSDOS), typing a few lines of random characters, and check your disk space again. If it's gone down a little, then you probably have one. > Is there a file name to look for? Try checking in your TEMP directory...the few ones that I've seen default to creating an invisible file in that directory. > Where do people get them? They either buy them or write them. Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

1 0

Re: If guilty of a lesser crime, you can be sentenced for a greater
by jim bell 17 Dec '03

17 Dec '03

At 12:56 AM 2/2/97 -0500, Black Unicorn wrote: >Please note that the difference between: > >"But he got the same sentence as he would have if he was convicted of >carrying a gun in furtherance of the crime." > >and > >"But he got the same sentence as he would have is he was not convicted of >carrying a gun in furtherance of the crime." > >is subtle at best. > >Next time don't get caught stealing with a gun nearby. Better yet, set up a system to encourage the public to USE those guns (and other weapons) to get rid of the people who pass such laws, and the problem is solved. Jim Bell jimbell(a)pacifier.com

1 0

National Cryptologic School
by John Young 17 Dec '03

17 Dec '03

DAW provided this URL: http://csrc.nist.gov/training/in170.zip 1996-04-29 Introduction to Computer Security National Cryptologic School Interactive Courseware Trainee Guide (formerly, CP-133) (37 zipped files, DOS program) We've had a look at this course, a primer on CompSec and a required course for all DoD employees. It takes some fiddling to get past the sign-on block. Hint: after unzipping execute "student.exe" and enter "CP" as the lesson. Repeat for other listed files, CPxxx - CPxxx. It's basic stuff but worthwhile for its claims, these among others: 1. Most hackers are employees of the target. 2. Negligence, accidents and sloppy sys-administration are prime causes of disruptions, perhaps more than deliberate attacks. 3. Environmental weaknesses are often overlooked by security experts too focussed on computer systems. It lists these security documents as references: EO 12356 [superceded by EO 12958] DCID 1/16 [Director of Central Intelligence Directive] DoDDir 5200.28 DoD 5200.28 STD Public Law 100-235 NSA/CSS Dir 10-27 NSA/CSS Manual 130-1 (NSAM 130-1) NSA/CSS Manual 130-2 (NSAM 130-2) NSA/CSS Reg 130-2 NTISSAM COMPSEC 1-87 The Rainbow Series OMB A-130 Does anyone know of a source for the DCID series and the NSA/CSS series? Some of the others are available on the Web -- see AltaVista. While looking for these we ran across an informative implementation of infosec and compsec: Information Systems Accreditation Document, 4 Volumes System Security Requirements for the Department of Defense Intelligence Information System Automated Message Handling System (AMHS) V2.x By: McDonnell Douglas Aerospace For: Electronic Systems Center, Air Force Materiel Command Which we've put at: http://jya.com/amhs.htm

1 0

Re: Geiger and long, unreadable lines
by Adam Back 17 Dec '03

17 Dec '03

Dimitri Vulis <dlv(a)bwalk.dm.com> writes on cpunks-flames: > Adam Back <aba(a)dcs.ex.ac.uk> writes on cpunks-flames: > > > > Mr William H. Geiger III "Author of E-Secure" writes on cpunks: > > > <sigh> for the benifit of those misfortunate enough to be still working on > > > dumb terminals I have disabled my PGP script until I have time to add a > > > word wrap routine to it. > > > > <sigh> it is you who were demonstrating your ineptitude by spewing > > 120+ line length postings. Why is it so difficult for you to keep > > under 80 chars? Would you like some technical assistance? Notice how > > near every one else apart from yourself is managing to keep under 80 > > chars? > > Notice how near every one else apart from yourself bends over for the NSA, > and is willing to use a 40-bit key "escrowed" with the feds? Why is it so > difficult for you to keep under 40 bits? Would you like some technical > assistance? Why are you setting yourself apart from the Internet community > that so happily embraces GAK? Why do you desire "privacy" for your traffic > when everyone else does not? What have you got to hide? Are you looking to > transmit child pornography, bomb-making instructions, and/or cannabis > legalization propaganda? We better have a look at your hard disk soon. btw Dimitri, a crypto question: Diffie-Hellman key generation, there are two main ways of generating the diffie-hellman prime modulus, method 1: p = 2q+1 where q is a prime also. And method 2: p = r.2q+1 where q is a prime and r is a randomly generated number. With method 1, the security parameter is the size of p in bits (or size of q, as they are related). With method 2, there are two security parameters, size of q and size of p in bits. Method 2 has the advantage that key generation is faster as it is quicker to generate new random numbers r, than to repeatedly generate trial prime q as you have to do in method 1. However is the security weaker in method 2? What size of p and q do you have to use to get the same security as for same size of p in bits as in method 1? What should be the relationship between the size of p and q? (this isn't cpunks, this is cpunks-flames, so your non-crypto pledge shouldn't hold, besides Sandy has a stated policy of killing the whole thread, so I thought it amusing to continue your crypto relevance in moving on to technical topics rather than political) Adam -- print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

2 1

Re: If guilty of a lesser crime, you can be sentenced for a greater
by jim bell 17 Dec '03

17 Dec '03

At 12:56 AM 2/2/97 -0500, Black Unicorn wrote: >Please note that the difference between: > >"But he got the same sentence as he would have if he was convicted of >carrying a gun in furtherance of the crime." > >and > >"But he got the same sentence as he would have is he was not convicted of >carrying a gun in furtherance of the crime." > >is subtle at best. > >Next time don't get caught stealing with a gun nearby. Better yet, set up a system to encourage the public to USE those guns (and other weapons) to get rid of the people who pass such laws, and the problem is solved. Jim Bell jimbell(a)pacifier.com

5 6

Re: PGP 2.1
by Mark Henderson 17 Dec '03

17 Dec '03

Larry Johnson writes: > Hello, > Can any;one tell me how to get a version of PGP 2.1? > Thanks > If you are a U.S./Canadian person in the U.S. or Canada you can get 2.1 and most of the release versions of PGP from ftp://ftp.wimsey.com/pub/crypto Easiest thing is to point your web browser to ftp://ftp.wimsey.bc.ca/pub/crypto/software/README.html Then after reading and agreeing to the conditions, click in the appropriate place and descend into the PGP directory. But, why do you want version 2.1? -- Mark Henderson -- mch(a)squirrel.com, henderso(a)netcom.com, markh(a)wimsey.bc.ca PGP key 1024/B2667EFF - 5A 93 7D 29 EB 63 84 09 EA A2 AA 6C FA C5 A6 21 unstrip for Solaris, Wimsey crypto archive, TECO, computer security links, change-sun-hostid, Sun NVRAM/hostid FAQ - http://www.squirrel.com/squirrel/ --w=NZbzo6Zc1UmsEa Content-Type: APPLICATION/PGP-SIGNATURE Content-ID: <Pine.SUN.3.91.970202142321.627G(a)crl7.crl.com> -----BEGIN PGP SIGNATURE----- Version: 2.6.3 iQCVAwUBMvT7LaWYCYyyZn7/AQGJmAP/dQs4nQi07UaNGSdx5pJcwppCnq9Uo77B rIuwJppnWPsvlcN32GF88lf6TupIoIVsReZbYJdu2WPluXsUTQ+oTOwEHNOD831t TXsqDd8QNpwZGGfbhv3tQ5T79jQIVim3jOesWbN9Ix3/qJyKgJnwRR1u0hZKriC3 lQAiUFl/hkg= =VPrH -----END PGP SIGNATURE----- --w=NZbzo6Zc1UmsEa--

2 3

National Cryptologic School
by John Young 17 Dec '03

17 Dec '03

DAW provided this URL: http://csrc.nist.gov/training/in170.zip 1996-04-29 Introduction to Computer Security National Cryptologic School Interactive Courseware Trainee Guide (formerly, CP-133) (37 zipped files, DOS program) We've had a look at this course, a primer on CompSec and a required course for all DoD employees. It takes some fiddling to get past the sign-on block. Hint: after unzipping execute "student.exe" and enter "CP" as the lesson. Repeat for other listed files, CPxxx - CPxxx. It's basic stuff but worthwhile for its claims, these among others: 1. Most hackers are employees of the target. 2. Negligence, accidents and sloppy sys-administration are prime causes of disruptions, perhaps more than deliberate attacks. 3. Environmental weaknesses are often overlooked by security experts too focussed on computer systems. It lists these security documents as references: EO 12356 [superceded by EO 12958] DCID 1/16 [Director of Central Intelligence Directive] DoDDir 5200.28 DoD 5200.28 STD Public Law 100-235 NSA/CSS Dir 10-27 NSA/CSS Manual 130-1 (NSAM 130-1) NSA/CSS Manual 130-2 (NSAM 130-2) NSA/CSS Reg 130-2 NTISSAM COMPSEC 1-87 The Rainbow Series OMB A-130 Does anyone know of a source for the DCID series and the NSA/CSS series? Some of the others are available on the Web -- see AltaVista. While looking for these we ran across an informative implementation of infosec and compsec: Information Systems Accreditation Document, 4 Volumes System Security Requirements for the Department of Defense Intelligence Information System Automated Message Handling System (AMHS) V2.x By: McDonnell Douglas Aerospace For: Electronic Systems Center, Air Force Materiel Command Which we've put at: http://jya.com/amhs.htm

1 0

RE: Libel, Times v. Sullivan
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- on or about 970202:0457 blanc <blancw(a)cnw.com> said: +Yes, if the Magna Carta guaranteed a right and the forefathers fought +to secure it, why should any of us ever have to lift a finger in our +own defense. seems to me Jefferson said it took a rebellion every 20 years or so to keep democracy awake... other than presuming your answer is tongue in cheek (not elsewhere), complacency == welfare. +My contribution to this thread from the Cpunk History & Philosophy +Division: a Jewish saying from a book I glanced through of couple of +weeks ago, something like: + + "What good is it to a man who has lost his sight + that his ancestors had perfect vision." not a lot, but that does not mean he should scorn those who have managed to retain their sight. your saying is rather characteristic of the genre --best glamourized in Mad magazine. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: Encrypted with 2.6.3i. Requires 2.6 or later. iQCVAwUBMvTfKL04kQrCC2kFAQG48gQA3LCObnHCe09r1jtV/0HbeilmKqSuP7ue lf6yScJiBHCwgm8aGT+NqjmSdvKUlTEfjV4H2zVCfoYyQEh5tMs4LnnDpd4zPL0M EBUrCdu2KBgLQpgbzP9g64cUCsq6LMGsfe7mqKaYYFIUmYJMBLsrYrLtPLPGlJ0S +LRYfJexD1s= =y085 -----END PGP SIGNATURE-----

1 0