December 2003 - cypherpunks-legacy

Javascript Encryption/Decryption
by amp＠pobox.com 17 Dec '03

17 Dec '03

The Javascript page at infohiway has posted a javascript implementation of simple encryption for the web. http://www.infohiway.com/javascript/indexf.htm This would be interesting if it had a real crypto algorithm in it like IDEA. ===from their page=== Welcome to the ISN Web Developer's Cut-N-Paste JavaScript, Perl and Plug-ins Toolbox! http://www.infohiway.com/javascript Featuring more than 189 FREE JavaScripts you can simply paste into your HTML! Plus we have some Cut-N-Paste Perl and CSS scattered around the site, too! Cut-N-Paste JavaScript Home / Encryption Scheme This little script is really easy to use. Just paste in your message and you get back your encrypted message... relatively quickly. So long as the recipient has the same JavaScript app as you do, decryption will work. The sample on this page is of a 4-Bit encryption open architecture scheme using only JavaScript. Although designed primarily for encryption of shorty emails, the same notion could be used to protect confidential dealer price lists, etc. on your public pages. Encryption is not just a matter of "jumbling letters". Any amateur cryptographer has a whole lot more tricks than that up his sleeve. First, our little sample programs permit you to use a key letter, a key word or a key phrase of your own devising. What length? You decide. Since the length is unknown, we've created a first problem for anyone attempting to decrypt it. Secondly, they are ultimately recursive. Meaning that you can recursively encrypt encrypted materials as many times as you wish. Only you and the recipient know how many times. Another problem for the "great decryptor". Finally, you can really be sneaky about the key phrases you use. For example, you might agree that the key phrase will be the seventh line on page 13 of Catcher in the Rye. (Seventh month, thirteenth day) Or you might grab the 13th line on a page at a specific URL for this month. Or the lead headline from the ABC News Home Page for today. If you download this little script to your hard drive, even if the boss finds it, it does him/her absolutely no good whatsoever in decrypting your email, because the key phrases are absolutely necessary to the decryption of encrypted messages. === E-mail: amp(a)pobox.com Date: 12/24/97 Time: 08:50:10 Visit me at http://www.pobox.com/~amp -export-a-crypto-system-sig -RSA-3-lines-PERL #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/) Have you seen http://www.public-action.com/SkyWriter/WacoMuseum ===

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

Tim May has been beaten up numerous times by fellow prostitutes for driving blow job prices down. _ {~} ( V-) Tim May '|Y|' _|||_

2 1

FREE CASH GRANTS, FUNDING AND LOANS
by order_desk78＠hotmail.com 17 Dec '03

17 Dec '03

Our research reveals that this information may be of use to you and/or your organization. ********************************************************************************* Hi, if you have ever considered getting a loan ...............you should take time to read this. We Have Over 45,000 U.S. Based Grant Provider Programs In Our Database. WE ARE A FINANCIAL FINDER & MATCHING SERVICE ."INTEREST - FREE CASH GRANTS AND FUNDING!"... IF YOU ARE BEING REJECTED FOR THE MONEY YOU NEED ..... ______________________________________________________ Then Why Not Try A Private Foundation OR The Federal Government? Interest Free Cash Grants From $100.00 & Up to $1,000,000.00. No Collateral. No Cosigners, No Security Deposit, No Credit Check. No Pay Back. The Money May Be Used For Any Worthwhile Purpose; Education, Personal Welfare, Business, Medical, Religion, Etc. ANYONE CAN GET AN INTEREST FREE CASH GRANT! ____________________________________________ As long as they have a genuine reason for needing money and as long as the grant provider's guidelines are met. Dear Applicant, This letter tells you HOW YOU CAN GET AN INTEREST FREE CASH GRANT. Take a few minutes to read it. You'll be suprised to see how easy it can be to get a grant. From time to time, everyone needs to borrow. The problem is that for most people, getting a loan is a big hassle. Going to banks or finance companies in person takes a lot of time. In most cases, there is endless paperwork. And Unfortunately, in many cases all that you end up with is a rejection notice. ABSOLUTELY NO HASSLES ________________________ Getting a Grant is probably a lot easier than you think. In your area, there are usually only a small number of places that will provide you with the money, that you need. On the other hand, there are literally thousands of grant providers who donate money to people who have genuine reasons for needing the money. Chances are that most banks in your area have very stringent loan requirements. Unlike Banks, most Grant Providers are more lenient; in a sense that persons who have poor credit, no credit, or even those who have gone through bankruptcy are able to get the money that they need - sent to them by a check payable to them. This is because foundations are NOT interested in CREDIT RATINGS. We are not associated with any of the foundations in our program, therefore all money will go directly to you, payable to you. As a Financial Finder & Matching Service, we know where the money is and which Grant Providers may be most likely to approve your grant. Our state-of-the-art search engines enables us to select multiple criteria from our database and create within minutes a list of grant providers that match your area of interest. There are thousands of grant providers with money to donate. It is our job to put you in touch with them. PLEASE REMEMBER: CASH-GRANTS are FREE of any interest, & they DO NOT NEED TO BE PAID BACK! ________________________________________________ Grant Providers give out money for a wide variety of needs as long as it is something LEGAL and within the Grant Providers' field of interest. This means that you obtain the money to cover bills, meet emergency needs, or to buy anything that you might need, as long as the Grant Provider agrees to it. YOU DECIDE HOW MUCH MONEY YOU WANT TO OBTAIN. ________________________________________________ The amount can be as little as $100.00, and up to $1,000,000.00 is possible. And remember, there is NO CREDIT CHECK. As a Financial Finder & Matching Service, we'll review your service application form and determine which foundations may be most likely to provide you with the money that you need. Keep in mind that we have only reputable Grant Providers in our program. You are protected by the fact that these foundations are regulated by the laws of the United States. No matter how much you need to obtain, no matter what you need to use the money for; we feel confident that we can assist you to get it with the service we are offering. We will ONLY process order which we feel are within the parameters provided by the Grant Providers. All that you will have to do is complete the service application form below, and mail it with payment as indicated on the form. We will process your service application within 10 days. We will match your FINANCIAL NEEDS & REQUIREMENTS with the most suitable Grant Providers in our program. ______________________________________________________ PRICE LIST BASIC GRANT PROVIDER LISTING Contains over 100 Grant Provider Programs that are issued for general charitable causes on a national basis. Also includes application procedures and deadlines.................$29.95 CUSTOM GRANT PROVIDER LISTING This is your tailored listing of grant providers in your area of interest. Will include (if available) the application forms, contact names, and grant providers in your city or state....................................................................$39.95 CUSTOM GRANT PRO A comprehensive listing in your area of interest containing funding sources in the private and government sector. Also includes a Grants writing manual.......................................$49.95 ______________________________________________________ Service Application Form: bk-74-4 (circle one) Money Order Check Credit Card (Circle One: VISA, M/C, Discover) Credit card # ________________________________________ Expiration Date____________________ Signature_________________________________________ ( ) BASIC GRANT PROVIDER LISTING $ 29.95 ( ) CUSTOM GRANT PROVIDER LISTING $ 39.95 ( ) CUSTOM GRANT PRO $ 49.95 ( ) RUSH PROCESSING $ 10.00 ( ) SHIPPING & HANDLING* $ 4.00 Total $_____ TO EXPEDITE, FAX TO (619) 683-9130 If paying by check or money order, Please make payable to: FINANCIAL RESEARCH GROUP & MAIL TO: FINANCIAL RESEARCH GROUP 864 NORTH SECOND STREET #291 EL CAJON, CA 92021 Checks Take 5 Days to clear at the bank. Please Print Clearly For Our Office Staff *********************************************** PLEASE FILL IN WHERE APPLICABLE *********************************************** Grant Purpose/Area of interest: (if you are a student ordering the CUSTOM LIST, please specify your current major and GPA) ______________________________________________________ ______________________________________________________ ______________________________________________________ I/We Need Funding For; ____ Program Development ____ Continuing support ____ Research ____ General/Operating Support _____ Private Non-profit organization _____ Puplic Non-profit organization Amount Needed $___________.00 Name_____________________________ Occupation ________________________ Address________________________________________________ City ____________________ County___________State _________ Zip___________________________ Phone #(______)_______ -_________ Signature_______________________

1 0

computer modelling of cryptanalytic thought processes (references)
by David Honig 17 Dec '03

17 Dec '03

I was reading the Military Cryptanalysis Field Manual at ftp://ftp.ox.ac.uk/pub/crypto/cryptanalysis/ basic_cryptanalysis.ps.tar.gz and was reminded of a book I had partly read a while ago, Doug Hofstadter's _Fluid Concepts & Creative Analogies : Computer Models of the Fundamental Mechanisms of Thought_ (http://www.amazon.com/exec/obidos/ISBN=0465024750/r/0509-6726066-321937) 'Hofstadter and his colleagues created a variety of computer programs that extrapolate sequences, apply pattern-matching strategies, make analogies, and even act "creative." ' For instance, he developes a model that solves a type of newspaper-puzzle cryptogram. The interplay between levels of abstraction ---recognizing words in the plaintext language, and reconstructing the key together from statistical and other constraints (Ch. 4)--- is what's similar between Hofstadter's model and what the field manual describes. Caveats: Hofstadter's book is very dry. The Field Manual only mentions that computers may be useful, and gives advice that may have been useful 70 years ago. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu "Windows 95 is a technologically complex product that is best left alone by the government..." ---MSFT Atty B. Smith

1 0

Re: Completely anonymous communications ARE only for "Criminals"
by Charlie Comsec 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- gburnore(a)netcom.com (Gary L. Burnore) wrote: > :> Nope. If a lawyer believes he can win and there big money involved, he'll take > :> it on the premise that he gets paid if he wins. If the defendant has nothing > :> to offer, the lawyer won't do it. Thus, the falsly accused may not be able to > :> afford to go to court. The decision to sue is mostly based on how deep the > :> pockets of the defendant would be. > : > :Then what's the point of going to all the trouble of tracking someone down if > :you're unwilling or unable to take appropriate legal action against him > :after he's found? > > That's not what I said. If your decision to sue or not sue is based on the deepness of the defendant's pockets, and if you didn't know this until after he was identified, then you very might well end up tracking down and identifying someone that a lawyer wouldn't be willing so sue (on a contingency fee basis), right? My question was, if Politas' suggestions were implemented and an unknown individual was tracked down using the procedure he outlined, and it turns out the individual was "judgement proof", who's going to pay for the costs of the investigation? Otherwise, you end up with an "in terrorem" remedy. That's one that you probably wouldn't or couldn't aqctually use, but the potential to do so might serve as a deterrent. Unfortunately, when free speech is involved, that's exactly what many of us don't want. It cuts both ways. Look at what the scientologists did to Julf and the anon.penet.fi remailer. Alleging some violation of Swedish law, they almost succeeded in retrieving Julf's entire "traceability" database linking account names to their "real" owners. The end result was that the remailer was destroyed. Having privacy invading data like that available put all of Julf's clients at risk. In the end, Julf felt that it was better to close down rather than risk future raids. That has pretty much driven a nail in the coffin of the sort of "traceable" remailers Politas is now proposing. It's a case of "been there -- done that". Few people relish ending up on the Scientologists' (or the next organization like it that comes along) hit list, and most now realize how vulnerable a remailer operator is to coercion -- even the "legal" variety. One doesn't even have to be an anti-scieno to be a victim of such a raid. Since they're so paranoid about anonymity and the ability of people to publish their "secret scriptures" anonymously, they might just steal such a database and anonymously publish it themselves. Outing thousands of innocent remailer clients would irreparably harm the reputation of remailers, which would work to their advantage. I'll even go so far as to say that you'll never be able to eliminate truly anonymous remailers. First of all, you'll never get every single country to adopt Politas' suggestions. All it takes is one untraceable remailer in an encrypted chain to make back-tracing a message impossible (or at least prohibitively costly, in terms of money, time, and computing resources). > :> :So you're suggesting that the victim should suffer. You are really saying > :> :that it is perfectly acceptable for someone to be run out of a newsgroup by > :> :a single person who refuses to be killfilable. > :> > :> > :> Yup, that's what he's saying. > : > :I don't recall ever saying that. How do you run a person out of > :an unmoderated NG? > > Charlie, if he doesn't like your posts and you continue to post and he just > can't bring himself to killfile you the next best thing is for him to leave, > right? That's one option, but I wouldn't make it a blanket suggestion. Some ideas are worth defending and some are better off dropped. I've seen fanatics on some NGs who have attracted exactly ZERO supporters to their position, and dozens of people rebutting, flaming, ridiculing them, etc. yet these folks persist. Ultimately it's their choice. Let me cite an example. I believe the earth is round and presumably you do too. But if you visited a NG that was the hangout of dozens of flat-earthers, you probably wouldn't stick around too long to argue the point. At least I know I wouldn't. Being right doesn't require you to convince everyone. You just accept the fact that some arguments are unwinable and move on to more productive things. The same could be said for religious or political flame wars. If I expressed my opinion, and some religious kook accused me of being the devil incarnate for espousing such heresy, I wouldn't waste my time trying to netcop the person. Maybe calling me "the devil incarnate" is libellous, but IMO it's not worth the time and effort to pursue. And that's even with a net.kook who's posting with a genuine e-mail address and his "real name". An anonymous kook is even less worthy of bothering with. If he crosses the line and commits behavior that is flagrantly illegal, then he's exposing himself to risk by doing so. Let's face it, people may walk down the street with ski masks on, and even if it annoys you, you're probably not going to be able to unmask them. If one robs a bank, though, he stands a far greater chance of being identified and apprehended. Politas' solution is like requiring name tags on ski masks. Let's worry about the bank robbers rather than the people who wear ski masks. > : And if it's moderated, and the moderator is allowing what > :you consider libel against you, then you probably have a case against him. > > True. > > :That's what the courts decided in a landmark case against an ISP. When you > :manage the content then you become responsible for it as well. > > Exactly. The bottom line being, if you have a POV you wish to express, and you encounter opposition in one forum, choose another one. If you can't find one, start one. > :Nor do I understand the "who refuses to be killfilable" part, either. > > I believe he meanse by continously altering his name or by posting > anonymously. If he's posting anonymously, then he's easily killfilable. Just put the return address of the remailer(s) he's using in your killfile. If he's not posting anonymously, then that scenario is not related to remailers. If you're talking about multiple GENUINE IDs, then the ISPs involved might be able to help -- assuming he's really committing abuse OF the net, and not merely being annoying. If they're bogus IDs, then his ISP might have a policy about that as well. > : How can > :someone you don't even know control your killfile? I can killfile anyone I > :want to, including "nobody@some_remailer". I haven't killfiled anyone, but > :I could do so if I wanted to. > > You could but it's not worth it. Killfile anyone posting anonymously because > of one idiot? I don't do that either. Again, that's a choice you have to weigh. Take each remailer ID and decide whether the valuable posts from that ID outweigh the junk. But, again, annoying posts aren't really what Politas' proposal dealt with. He was talking about actual laws being broken. > :Why would that prevent you from contacting the police? But consider that > :libel is a civil tort not a criminal offense, so the police aren't likely to > :get involved, even if you could identify the culprit. > > True that a traceless remailer makes it impossible, not that getting the > police involved would work. Sorry I wasn't clearer. If you had a matter that truly concerned the police, the lack of a suspect's name shouldn't hinder you. After all, if someone had stolen your car, you'd report it even if you didn't know who did it, wouldn't you? As I said previously, many bank robbers are caught even if they wore masks or drove a car without license plates. > :I'm really trying to understand what Politas' wants, but it's difficult. > > I think he wants one particluar person to leave him alone. I must have missed that point in following the thread. If I recall correctly, I asked him what particular problem he was trying to solve, since it's easier to solve real, existing problems that hypothetical ones. He said that he didn't have any problems like that himself, and doubted he would because he didn't normally engage in behavior that would attract enemies, but he was concerned that it might happen to others. [Politas: please feel free to jump in and clarify this point.] - --- Finger <comsec(a)nym.alias.net> for PGP public key (Key ID=19BE8B0D) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNKFE6wbp0h8ZvosNAQESpQf9GO+lwhRsKMWnn24n9LJR8bE/Wih+gmXg sFYVVAQDExRCiCcoBMcvg1+EvxKvOrpLMKOiyf3ErxPiSxmn6ngb8n0PlraEpURt ioBOrg6/BDUGU5tGxdyfot2kOpc89S/c+bdjOBKWmKe0zKi4PObinX+yIaJ+EnOG 3HajH3B4ND3KSO9nwtQmtCuu8HBt8S0qA3o5H6fXSOmVfknZZIpnYaneYWUAqn8G ey8jVyIUdBjLYP36U1JCsvIPbcW/vhAEpO0qnbmWf11fLfJGAW8aVl+wHuZVbqyL lAqXil0r0QuAyksJ5OoMHMA6SOofMkR4CUiPZhQE2VC+sWE9rKiHFQ== =0ndp -----END PGP SIGNATURE-----

1 0

Best Cypherpunk War Text
by Secret Squirrel 17 Dec '03

17 Dec '03

The "lock and load," "Best Cypherpunk long gun" and other similar threads have gotten me thinking. Can any fellow Cypherpunks suggest any books or documents on the net concerning urban warfare, generic non-urban warfare (e.g. plains), differences between weapons, suggestions, etc. Basically a survivalist's almanac, I suppose. Threat model: For whatever reason the U.S. just collapsed. Civil war is imminent and there is little or no civility in the streets.

2 1

Best Cypherpunk War Text
by Mixmaster 17 Dec '03

17 Dec '03

The "lock and load," "Best Cypherpunk long gun" and other similar threads have gotten me thinking. Can any fellow Cypherpunks suggest any books or documents on the net concerning urban warfare, generic non-urban warfare (e.g. plains), differences between weapons, suggestions, etc. Basically a survivalist's almanac, I suppose. Threat model: For whatever reason the U.S. just collapsed. Civil war is imminent and there is little or no civility in the streets.

1 0

Re: Civil War Crypto Question...
by John Young 17 Dec '03

17 Dec '03

Jim Choate wrote: >Myer implimented including a 'cipher disk' whereby the Union was able to >change their telegraph codes on an hourly schedule. It was apparently very >effictive in dealing with taps and such. > >Anyone know of another source that discusses this disk? Myer's code and cipher disk (with illustration) are briefly described in Fred Wrixon's "Codes and Ciphers" along with an entry on Civil War crypto with a photo of a Confederate cipher disk. We've put the entries and illustrations at: http://jya.com/cydisk.htm The book is: "Codes and Ciphers: An A to Z of Covert Communication, from the Clay Tablet to the Microdot," Fred B. Wrixon, Prentice Hall, 1992, paper. $18.00 ISBN 0-13-277047-4

1 0

Cryptographers Do It With Protection
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Excerpts From: None of Your Business: World Data Flows, Electronic Commerce, and the European Privacy Directive Peter P. Swire & Robert E. Litan >The Tension Between Data Protection >and Modern Information Technologies >On almost any conceivable dimension, we are in the midst of an information >explosion. Data protection rules, by contrast, seek to block flows of >information. Data 'Control' is oppression. Data 'Protection' is our friend. "If putting all information about every individual on the face of the globe in the hands of the New World Order saves the life of a single child..." >Seen another way, the rise of computers and computer networks is undoubtedly >a major reason why countries have promulgated data protection rules in >recent decades. In both the United States and Europe, current debates >about privacy are being driven by fears about how computers pose a threat >to privacy. >That is, computers are the key reason for data protection rules. ... >International flows of data. International flows of information are >climbing rapidly within companies, as they create global Intranets, >and between companies, as they use Extranets with their strategic >partners. And these "data protection rules" are going to be enforced equally for everybody, right? If you and I are fined and imprisoned for violation of these rules, then it will be likewise for owners of megacorporations, government employees, etc. Just like at Waco and Ruby Ridge, Kent State and Tiennachinc Square... Just like murdering dictators at the APEC summit would have been maced and arrested if they carried signs saying "Freedom & Democracy." Get real. While Bernstein has the Dogs of InfoWar set on his ass, RSA is exporting cutting edge encryption technology to Communist China. Bottom Line: Just as is the case today, the "data protection" laws and regulations of the future will apply only to those individuals and corporations who fail to fall in line with the New World Order's desire for all new technologies to contain tools of surveillance and oppression. "Those who have nothing to hide, have nothing to fear." Put a cork in your asshole...the government is going to 'protect' you again. BendOverI'mHereToHelpYouMonger |<----------------------------------------------------------- ----------------------------------------------------------- ----------------------------------------------------------- ----------------------------------------------------------->| 6"

1 0

This post is none of your business
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Excerpts From: None of Your Business: World Data Flows, Electronic Commerce, and the European Privacy Directive Peter P. Swire & Robert E. Litan >The Directive's limits on transborder data flows directly confront >organizations' expectations to be able to circulate information freely >inside the organization's firewalls and other security. Operations >in the United States and other third countries will often expect to >exchange data about employees with European operations. >Wherever there is no finding of adequacy, however, sending data to >third countries risks violating the data protection regime. >Organizations thus face a compliance dilemma of whether they can >implement Intranet and other information technologies consistent with >European law. Keep in mind that ignorance of laws written on foreign shores, in foreign languages, will be no excuse. Americans can expect to be indicted as coconspirators of people they have never met, have never seen, and have never communicated with. "Put down that copy of the Constitution, and slowly back away from the keyboard, Monsieur!" >In an era of transnational business, the accounting and auditing >functions of companies require transfer of an increasingly wide range >of information across borders. To carry out these functions, auditors >and accountants must have the ability to examine the underlying >documentation of transactions. This documentation often includes >personally identifiable information. >The Directive thus challenges the ability of transnational firms to >follow accepted and appropriate procedures for audit and accounting. So we can expect to see governments and megacorporations blow off billions of dollars in order to protect Dimitri Vulis' privacy. Right... "None of Your Business" is full of references to "transnational" corporations and organizations, and the development of "Intranet" and "Extranet" webs within and among them. While it addresses many of the issues which will come into play regarding regional laws and regulations in the expanding global InterNet (and does a damn fine job of it), I believe that, in the end, the single issue which will decide the fate of all who use the InterNet will be the right to privacy. Without privacy, freedom and self-determination are not possible. The more things globally change, the more they will remain the same. Individual Bernsteins will find themselves pitted against the bottomless pockets of governments and corporations, while 'transnational' RSAs will be free to engage in activities of momentous proportions which are forbidden to the Bernsteins of the world in even the smallest of instances. 'Data Protection' will be as big a farce as 'News Protection' currently is. It will be a tool for those with money and power to control and manipulate the information that citizens are allowed to access, and the form in which they will be allowed to view it. The 'personal information' concerning the 'guerilla' mothers and babies who are slaughtered by US troops will be 'protected' (and thus 'unavailable), while the 'personal information' regarding the 'men of valor' who died while slaughtering them will be made available for a nation told to mourn only them. The 'personal information' concerning those who get filthy rich selling the government $10,000 toilet seats will be 'protected', while the 'personal information' regarding every small sin in the lifetime of the whistleblower who exposes the thief will be made available to every media souce on the face of the earth. The citizen's answer, "None of Your Business," will inevitably be countered by the government's question, "What do you have to hide?" With the expansion of global laws to cover every action and activity possible to humankind, 'data' becomes translatable as 'evidence.' And "everything" becomes the government's business. Is it my imagination, or are Swire and Litan, as well as all others who write about the current state of development of global technology, society and law, merely providing real-time footnotes to '1984', without providing Orwell's insight into our true future? ~~~~ 1984AnimalFarmBraveNewWorldMonger "Everything not permitted, is forbidden."

1 0