December 2003 - cypherpunks-legacy

Transparent Cryptographic File System (fwd)
by Adam Shostack 17 Dec '03

17 Dec '03

Haven't seen this on cpunks. ----- Forwarded message from Kenneth Stailey ----- >From xtech-request(a)zephyr.ccrc.wustl.edu Thu Feb 6 18:26:49 1997 Date: Thu, 6 Feb 1997 16:47:28 -0500 (EST) Message-Id: <199702062147.QAA29127(a)duality.gnu.ai.mit.edu> From: Kenneth Stailey <kstailey(a)gnu.ai.mit.edu> To: tech(a)openbsd.org Subject: Transparent Cryptographic File System Sender: owner-tech(a)openbsd.org Precedence: bulk Hi, I thought that there might be some interest in looking at this: From: ermmau(a)ios.diaedu.unisa.it (Ermelindo Mauriello) Subject: New release of TCFS (Transparent Cryptographic File System) Newsgroups: comp.os.linux.announce Date: Thu, 16 Jan 1997 07:14:53 GMT Followup-To: comp.os.linux.development.system Organization: Universita' di SALERNO - Dip. Informatica ed Appl. Path: ai-lab!bloom-beacon.mit.edu!howland.erols.net!newsfeed.internetmci.com!zeke.ebtech.net!loki.tor.hookup.net!omega.metrics.com!liw.clinet.fi!not-for-mail Lines: 51 Approved: linux-announce(a)news.ornl.gov (Lars Wirzenius) Message-ID: <pgpmoose.199701160914.15063(a)liw.clinet.fi> NNTP-Posting-Host: localhost X-Server-Date: 16 Jan 1997 07:15:02 GMT X-Original-Date: 15 Jan 1997 14:51:36 GMT X-Auth: PGPMoose V1.1 PGP comp.os.linux.announce iQBVAwUBMt3VcjiesvPHtqnBAQECXwH+PKb4gmvn2sSqa3caegRau0cHJ9Lx9hII YG0YmSbwPf+oFV4ie4omldPpTO3VjGXSkY11zIof6b3HzY3dNzajyQ== =aNko -- Start of PGP signed section. We are glad to announce that a new release of TCFS (Transparent Cryptographic File System) for Linux is now available. TCFS is a cryptographic filesystem developed at the Universita' di Salerno (Italy). It operates like NFS but allows users to use a new flag X to make the files secure (encrypted). In theis release files are encrypted using DES. The new release works in Linux kernel space, and may be linked as a module to Linux 2.0.x kernels. A mailing-list is available at tcfs-list(a)mikonos.dia.unisa.it. Documentation is available at http://mikonos.dia.unisa.it/tcfs. Here you can find instructions for installing TCFS and docs on how it works. Mirror sites are available at http://www.globenet.it/~ermmau/tcfs and http://www.inopera.it/~ermmau/tcfs \|||/ (o o) ----------------------ooO--O--Ooo------------------------------- ! //////// //// //// Ermelindo Mauriello ! ! // // /// // e-mail: ermmau(a)edu-gw.dia.unisa.it ! ! ///// // / // ermmau(a)pantelleria.dia.unisa.it ! ! // // // ermmau(a)globenet.it ! ! /////// // // ermmau(a)inopera.it ! !--------------------------------------------------------------! ! LINUX - The choice of a GNU generation !!! ! ---------------------------------------------------------------- -- End of PGP signed section. ----- End of forwarded message from Kenneth Stailey ----- -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Waiting for Mac version [was Re: Full strength Email Clients]
by Steve Schear 17 Dec '03

17 Dec '03

>-----BEGIN PGP SIGNED MESSAGE----- > >At 06:51 PM 2/6/97 +0800, pclow wrote: >><You want Eudora 3.0 and PGPMail 4.5. [Despite PGP,Inc's best efforts, >>the >><brand new PGPMail has escaped from the United States and is now >>available >><worldwide.] Its too bad there isn't a Mac version contemplated. They appear to think that existing PGP versions, paired with Eudora, are sufficient. I think a better integrated approach for the Mac would be appreciated as the available AppleScripts are buggy and awkward. --Steve

1 0

Re: True story, Fly the Obsfucted Skies (fwd)
by Dr.Dimitri Vulis KOTM 17 Dec '03

17 Dec '03

Ray Arachelian <ray(a)earthweb.com> writes: ... > I thought about it. I scratched my goatee. I said: ... How can an Armenian eunich grow a bear? Even a faggy goatee? --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: Deloitte-Touche?
by Dr.Dimitri Vulis KOTM 17 Dec '03

17 Dec '03

Adam Back <aba(a)dcs.ex.ac.uk> writes: > > Mark <mark(a)infolawalert.com> writes: > > I'm almost certain that Murray is a consultant rather than > > or in addition to an accountant. He's been saying these things > > William Murray used to post frequently to sci.crypt, alt.security.pgp, > etc when I read those forums. He also I think wrote the forword for > one of the books on using PGP. One of my first flame wars on Internet, some 15 years ago, was with William H. Murray over my criticism of DES. How time flies. :-) --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: anonymous remailers
by Dr.Dimitri Vulis KOTM 17 Dec '03

17 Dec '03

c.musselman(a)internetmci.com (Charley Musselman) writes: > C'punks -- > When I told a friend about the alt.drugs.pot cultivation newsgroup > and suggested that he use an anonymous remailer to post to the group, > he laughed and said, "Who do you suppose runs the remailers? ATF, > FBI, DEA, that's who!" Gee, it makes sense to this paranoid. Does > anyone know the answer? Specifically, how can we choose a trusted > remailer? Even if the feds are not directtly involved, the so-called "cypher punk" remailers are run by people who should not be trusted. Check out their remailer-operators list: it's full of announcements that some specific person posted something via the remailer that the operator didn't like. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

4 4

Re: 40-bit RC5 crack meaningless??
by Michael Froomkin - U.Miami School of Law 17 Dec '03

17 Dec '03

This would be the same Strassmann who stated in public at Harvard early in 1995 that most remailers were run by intelligence agencies such as the KGB, then denied saying it when asked for substantiation? And cut it from his paper? On Thu, 6 Feb 1997, Vin McLellan wrote: > Strassmann, the author of this denunciation of RSADS and > Ian Goldberg, is the former Director of Defense Information > (i.e., CIO,) of the Bush DoD and an often-insightful commentator Having said that, there is some debate about the extent to which in *intelligence gathering* as opposed to, say, trying to crack a banking protocol, one can reasonably count on a known plaintext. And much debate about the processing costs of not having one, especially when one doesn't know what kind of document is being encrypted (e.g. is it ASCII plaintext? a spreadsheet? a jpeg? etc.). I think that's his (misdirected) point. A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | U. Miami School of Law | froomkin(a)law.miami.edu P.O. Box 248087 | http://www.law.miami.edu/~froomkin Coral Gables, FL 33124 USA | It's warm here.

1 0

Re: mail-to-news fun
by Lance Cottrell 17 Dec '03

17 Dec '03

It would be a trivial hack for Mixmaster. It allways knows if a message if going to another remailer, or if this is the last hop, so it can add the disclaimer only on the last hop. -Lance At 4:06 PM -0800 2/6/97, Bill Stewart wrote: >At 01:01 PM 2/6/97 -0500, Scott V. McGuire wrote: >>On Wed, 5 Feb 1997 stewarts(a)ix.netcom.com wrote: >>> People don't read mail headers or disclaimers at the bottom, >>> and putting disclaimers like that into message text for >>> email exposes the message to traffic analysis.) > >>How does putting it in the message expose it to traffic analysis but not >>putting it in a header? > >Suppose you're sending a message on a remailer chain of >you -> Alice->Bob->Charlie->Dave->Eve->Fred--> target >and Bob puts lots of disclaimers in his remailer's outgoing messages. >Anything Bob puts in a header will get stripped out by Charlie, >so it's no problem. However, if Bob tacks a disclaimer >as the bottom text in the outgoing message, when Eve sends >mail to Fred she'll also see the disclaimer that > The message was sent by an anonymous user > through the remailer at Bob's Remailer Shack. > Bob doesn't know who sent it, and doesn't keep records, > so he can't squash the user, but he can block mail to you > if you don't want any more anonymous email. > Don't believe everything you read! >so she'll know to check the FBI Illegal Wiretap files for Bob. > >Some comments and backtracking >0) Of course, if you want to avoid traffic analysis, >sending unencrypted email is pretty stupid, and only the >next hop is going to see a disclaimer that you append >after the encrypted part of the message. > >1) Prepending the disclaimer to the message body is >pretty unfriendly to the :: syntax, and not all that >great for PGP encrypted messages either. Pretend I >really just suggested appending it at the end, >since that's what I would have said if I'd been thinking :-) > >On the other hand, I suppose that you can see whether the >next hop is a Type I remailer by looking for the :: or ##. > >2) Cutmarks would be a nice fix, but they require too much >attention to detail to get right, in case the next hop >is a remailer. > >So maybe you _should_ always put in the disclaimer, >at the end, with a reminder to always encrypt your >remailer-chain mail if you want to avoid traffic analysis :-) > > > > > ># Thanks; Bill ># Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com ># You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp ># (If this is a mailing list, please Cc: me on replies. Thanks.) ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. http://www.obscura.com/~loki/ "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

My messages not appearing on either of the lists?
by Timothy C. May 17 Dec '03

17 Dec '03

Cypherpunks, My posting seem to be going into Limbo, being sent neither to the Cypherpunks Heaven Sandy administers nor to the flames of the Cypherpunks Hell. At least this is how things now appear. I sent the message below to the list this morning (Thursday) at 8:43 a.m. PST. As of tonight, 12 hours later, I haven't seen it on either the Singapore Web site--last archived 30 minutes ago--or on the "Flames" list to which I have temporarily subscribed (to see what Sandy counts as a "flame"). Has anyone else seen it? I've looked, but there's always a chance I somehow spaced out and missed it. (I doubt it though.) If I have missed it, despite carefully scanning for it for the past 8-12 hours, my apologies. If it has not appeared on either the Censored list or the Flames list, then something is rotten in the state of Denmark. By the way, I noted that many of the messages which appeared at the Singapore Web archive site have dates much later than mine, including several dated at least 8-10 hours after my message. Likewise, some of the Flames messages are dated much later than my message. (Bill Stewart got a message through dated Thu, 06 Feb 1997 16:06:06 -0800, Mark Henderson got one through at Thu, 6 Feb 1997 15:56:19 PST, and so on. One would thus have thought that my message, dated Thu, 6 Feb 1997 08:43:35 -0800, would by now either have been approved and hence on the Censored list, or rejected as unfit for Cypherpunks to sully their neurons with, and hence passed on to the Flames list. By the way, some of the "Flames" messages are also dated late afternoon or evening.) So, is my message just sitting around someplace, awaiting some final decision? What's the basis of this decision? (Perhaps Sandy has "kicked it upstairs" to John for him to decide on? Just a hypothesis....) I will repeat my message below. As you will be able to see, my message contains no "flames" of its own, and the messages it quotes do not seem flamish to me, either. (It is true that Vulis uses the phrase "Limey faggots," in reference to beer-serving habits, but he does not directly insult any list members with this phrase. If Sandy is calling this phrase a flame, then Cypherpunks will be blocked from their usual characterizations of Congresscritters and NSA stooges.) I think a delay of greater than 11 hours in being distributed on one of the two lists (even if my message is sent out in the next hour or so) is unacceptable. If a moderator cannot get to traffic in the order in which it was received and disposition it promptly, he or she has no business being a moderator of a high-volume list. (Eric Blossom's and Ray Arachelian's "best of" compilations are a different matter, for reasons discussed many times here.) So, why hasn't this message appeared on one of the two lists? --Tim May >Date: Thu, 6 Feb 1997 08:43:35 -0800 >To: cypherpunks(a)toad.com >From: "Timothy C. May" <tcmay(a)got.net> >Subject: Re: Moderation [Tim,Sandy] >Cc: >Bcc: >X-Attachments: > > >I decided to subscribe only to the "cypherpunks flames" list, just to see >what was being filtered into it. > >The message below is one example of what is going there. I received it, >and the header includes the line: "Sender: >owner-cypherpunks-unedited(a)toad.com", so I am surmising that it was indeed >filtered into the flames list. > >Now, admittedly, the _content_ of this kind of post is "off-topic," but I >sure don't see any evidence of _flames_. > >Is Sandy now filtering based on his notions of list relevance, and not >just on the basis of insults, jabs, flames, and "lack of comity"? While >lack of relevance may be a criterion for someone to filter by, it doesn't >square with anything I recall Sandy citing, and it introduces a new and >dimension to the debate. > >--Tim May > >(The entire post is included, to ensure that no one claims I am editing >out any flames, insults, etc.) > > >At 11:06 PM -0800 2/5/97, Dale Thorn wrote: >>Dr.Dimitri Vulis KOTM wrote: >>> Dale Thorn <dthorn(a)gte.net> writes: >> >>> > > > The drunk can be excluded, but when someone wants to use the drunk as >>> > > > an example to escalate the exclusion to other persons who are not in >>> > > > fact drunk, watch out! >> >>> > > If I get really really drunk, which happens very seldom, then I'm >>> > > too drunk to post. I don't mind an occasional beer, though. >> >>> > > Oksas, have you ever tried beer? :-) >> >>> > I had my first beer(s) in three years at one of those industrial >>> > parties last night. It made the craps table action seem a bit >>> > merrier, and the girls were friendlier too. >> >>> I like an occasional Coors Lite. BTW I think Limey Faggots are right about >>> one think: I like room-temperature beer better than cold beer. YMMV. >> >>Interesting coincidence for people on opposite coasts - the bar at >>the hotel had two choices: Bud regular and Coors light. I took the >>Coors. > > > > > Just say "No" to "Big Brother Inside" We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 3

World's first Ecash note
by Jeremey Barrett 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The world's first Ecash note has been printed! A USD 0.01 note made out to anyone can be found at: http://www.veriweb.com/people/jeremey/ecash/1_cent.html The data portion of the note is a PDF417 2-D barcode, containing a standard ecash payment of 1 US cent. The source code for the general PDF417 encoding and the ecash conversion will be published as soon as I clean it up and come up with a somewhat nicer interface. The PDF417 code should be useful for non-ecash stuff as well, it will encode anything. I will be bringing a bunch of notes to the bay-area cypherpunks meeting Saturday. Suggestions/comments appreciated. - -- =-----------------------------------------------------------------------= Jeremey Barrett VeriWeb Internet Corp. Senior Software Engineer http://www.veriweb.com/ PGP Key fingerprint = 3B 42 1E D4 4B 17 0D 80 DC 59 6F 59 04 C3 83 64 =-----------------------------------------------------------------------= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMvq83i/fy+vkqMxNAQH/tQP/fSgEQ8K0BQcwTJxnaF7aKg1LzNshMdey A8MH67Uv8zfv9cQTD0+g/JO4x64Ina5ZcMqn4IoHNOybqfvrR4ZepDLa+SsX2hhU 2xdmgf452OEhVpjSYoNnDMKoKAUUbfIlApu7W/9M/Ecx3vbT0cq4dxVF2zzcmJsy nhEPFe2iSc4= =v84p -----END PGP SIGNATURE-----

1 0

Which list am I on?
by Against Moderation 17 Dec '03

17 Dec '03

I thought I was on the cypherpunks edited list. However, I appear to have seen some of the messages that Tim says got lost. Moreover, I keep getting ASCII art messages flaming someone with the initials DLV (though I haven't seen any more of the TCM flames [I haven't looked too hard, either]). My mail headers have: >From cypherpunks-errors(a)toad.com <date> >Sender: owner-cypherpunks(a)toad.com Now I'm really confused. Which list am I on?

3 2