December 2003 - cypherpunks-legacy

Key Security Question
by Z.B. 17 Dec '03

17 Dec '03

My computer went into the shop a few days ago, and I was unable to take my PGP keys off it before it went in. What are the security risks here? If the repairman chooses to snoop through the files, what would he be able to do with my key pair? Will I need to revoke the key and make a new one, or will I be relatively safe since he doesn't have my passphrase? Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

3 2

Constitutional Right to Annoy?
by Martin Minow 17 Dec '03

17 Dec '03

Today's New York Times web page's Cybertimes section has an article on a new lawsuit that claims a constitutional right to annoy. Among other things, annoy.com will provide a way to "send anonymous e-mail messages to public figures." They're suing the CDA. http://www.nytimes.com/library/cyber/week/013197annoy.html (Assuming I retyped it correctly.) Martin Minow minow(a)apple.com

1 0

RC5-12/32/5 contest solved. Who gets a credit?
by Yuri Sorkin 17 Dec '03

17 Dec '03

stewarts(a)ix.netcom.com Tue, 28 Jan 1997 21:37:57 -0800 At 09:55 PM 1/28/97 +0100, Germano Caronni <caronni(a)tik.ee.ethz.ch> wrote: >challenge: RC5-32/12/5 >time: from start of contest until Tue Jan 28 21:54:58 1997 >method: massive distributed coordinated keysearch, details later which was a bit slower than Ian Goldberg's crack, but pretty close. --------------------------------------------------------------------------- Huh!? Goldbeg's announce states that he spent about 3.5 hours, i.e. a solution came not earlier than 12.30 PST, while Caronni got it at 11.55 am PST. Yuri Sorkin

1 0

Re: CAST
by John Young 17 Dec '03

17 Dec '03

For a paper on CAST see: http://www.nortel.com/entprods/entrust/cast.html "Constructing Symmetric Ciphers Using the CAST Design Procedure" By Carlisle M. Adams

1 0

CAST
by Ng Pheng Siong 17 Dec '03

17 Dec '03

Hi, Attended a presentation by Milkyway, vendor of the BlackHole firewall, which also does VPN. Supposedly the symmetric cipher used in the VPN is called CAST. Anyone has any info on it? TIA. Cheers. -- Ng Pheng Siong <ngps(a)pacific.net.sg> * Pacific Internet Pte Ltd * Singapore PGP: send mail with subject "send pgp key".

1 0

Constitutional Right to Annoy?
by Martin Minow 17 Dec '03

17 Dec '03

Today's New York Times web page's Cybertimes section has an article on a new lawsuit that claims a constitutional right to annoy. Among other things, annoy.com will provide a way to "send anonymous e-mail messages to public figures." They're suing the CDA. http://www.nytimes.com/library/cyber/week/013197annoy.html (Assuming I retyped it correctly.) Martin Minow minow(a)apple.com

1 0

"Secret" Postal Device stolen
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- from http://www.herald.com/dade/digdocs/021949.htm Postal Service offers $25,000 reward for stolen . . . something By ARNOLD MARKOWITZ Herald Staff Writer U.S. mail carriers carry more than just the U.S. mail. They carry something else so secret that nobody outside the Postal Service knows about it -- except four crooks who steal them from letter carriers on the streets of Miami. There's a $25,000 reward for tips producing capture and conviction. ... Comments? Please direct any replies for the list to me also, as I am still on Ray's FCPUNX, which I suppose makes this list double-filtered for me now, if a little delayed. :-) Typically, I now care what the mystery device is, since the occasionally-disgruntled ones don't want me to know. JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMvIhGzUhsGSn1j2pAQEp5wfPQ1YsiZviksusdbdVQHBz9yKMOSt5z3Ue Utlmxzx8RExqjaTc/cSLORf55pBWbJiDFB+a+ev09I2iZujq7nlNNCZNI0NaHw2L RObAjBQ4YT7sekWYMw81y08zH9x49OmAhh7CCh2qzh5ZyQ0qc3YdFzmc8F00+jdW J9ZsXSvJaBS+Jvh/eIPH+IlD873hyk6T4Nrayt0xt2z6Ajvst0XK5vOLkeJobZg3 +x8IyS26/bcrWGkKD/4rK81/QDmLIyHG7oWzaJAR1q6UKCad0C1w6/i2dwWtWV1v RyXfyYTgXi8XPbieBL7RZmP0j3A0xqlCr4PASMuZskBa+g== =Kspp -----END PGP SIGNATURE----- Regards, Jim Ray <jmr(a)shopmiami.com> DNRC Minister of Encryption Advocacy One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me http://shopmiami.com/prs/jimray/ PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71

1 0

Re: PGPMail 4.5 Released!
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 06:29 AM 1/31/97 -0500, you wrote: >And what happened to the $29 discount price they proposed for 2.6.3 users and viuacrypt users!!!!!!!!!!!! > I just email PGP sales with that question. DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMvJBCIVO4r4sgSPhAQEZ4wP/RWERsyjzsVURKR5rBZx3DKoj6dDDRvIP vNGbE3UnI/hqiRaZSf6P/36MnM2dQ8yIbbmlvsWV3N4m9moBUnvY6hy3elbwFTkE P+cICHcm3S0uW68aZ/vKK4sasg+WJgd+YLBwdQWkZc8GBn8Ut6mJE7sVXEiJWNMC WgFjwMALh7A= =j4+j -----END PGP SIGNATURE-----

2 1

Re: Cats Out of Bags
by sameer 17 Dec '03

17 Dec '03

> > "Other governments were upset with the 56-bit export allowance. > > They said it was going to undermine their national security." > > On this point, the other governments are correct. > It really _is_ tougher to maintain a nation-state when your > former subjects can have private conversations with each other > and with other governments' former subjects...... > And even 56 bits is a start. Full strength crypto is already available worldwide. It makes not one iota of difference. -- Sameer Parekh Voice: 510-986-8770 President FAX: 510-986-8777 C2Net http://www.c2.net/ sameer(a)c2.net

1 0

Key Security Question
by Z.B. 17 Dec '03

17 Dec '03

My computer went into the shop a few days ago, and I was unable to take my PGP keys off it before it went in. What are the security risks here? If the repairman chooses to snoop through the files, what would he be able to do with my key pair? Will I need to revoke the key and make a new one, or will I be relatively safe since he doesn't have my passphrase? Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

1 0