December 2003 - cypherpunks-legacy

Re: FBI Visits JPUNIX
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

In regard to an email which was purported to be subjected to suppression Anonymous wrote: > The first time it was sent via a remailer, it was bounced for ill- > defined reasons. The second time it was sent, the remailer was shut > down, and remains shut down. Mark M. wrote: > Speaking as "XXXXXXXXX" (or, at least, one of the "XXXXXXXXXs"), I did receive > the following message which originated from "TruthMonger." Shortly after I > received the message, anon.nymserver.com closed down all of its free, > anonymous accounts due to "abuse." Anonymous continued: > Efforts to send it through a second remailer also failed, with no > notice from the server of any problems being received. Other email > sent through the remailer at the same time encountered no difficulties. Later the same day John Perry wrote: > Due to an FBI investigation that was opened recently naming > myself and jpunix as suspects, I have decided that the heat taken by > remailer operators due to those individuals that can't control > themselves has become unacceptable. The message in question is below. Draw your own conclusions. XXXXXXXXX, I thought I would reply privately to you, since you seem to at least have a willingness to allow the possibility of compromises to the security of the encryption methodologies behind PGP programs, among others. To begin with, I'm not sure whether you realize it, or not, but the Navy's spook tenacles run deeper, and extend further, than those of any of the more notable or visibly involved agencies who lurk in the background of security and privacy issues. One of the reasons for this is that their physical existence could be said to mirror the Internet in many respects. The very nature of their 'global' home (the sea), has always permitted them access to people and regions which are denied to others. Also, they are often in the position to be involved in what looks to be merely the 'transporting' of people and information. Whether providing escort services or getting drunk in foreign bars, the expertise of naval intelligence has always lain in the area of observation, first and foremost. By far the greatest tool of intelligence agencies on the Internet, has been traffic analysis. Their techniques are sufficiently sophist- icated that I would not be surprised to find out that they can tell more about us from our Internet activity than can be learned from the satellites capable of reading the newspaper over our shoulder as we sit in the park. Traffic analysis involves all measurable quantum of information, the chief concerns being the patterns and timing of data transfer, from which everything ranging from content and motivation can be deduced. If you wish to think in terms of back-doors, then you would be well advised to go beyond the concepts of 'passwords' and 'holes' and try to think in terms of patterns and timing, and other such 'structures' which are peripheral to concerns regarding 'code' and 'mathematics.' i.e. As well as considering the 'content' of what a program returned, you must also consider 'when' the program returned the result, and the patterns in the timing, as well as the content. An analogy could be made to a person who, being interrogated, answers all questions with a predictable rhythm and then 'pauses,' however slightly, in answering a certain question. You can see that what is revealed by the 'content' of the answer can be greatly insignificant compared to what is revealed by the 'delay' in answering. To expand your concept of 'back-doors' and 'holes,' you have to ask questions such as: "Does it take a program or hardware longer to return a result of '0', than to return a result of '1'?" "What factors can be introduced into the hardware and/or software that can influence the patterns and/or timing of various processes and the results they return?" "Can key searches be made more efficient by analyzing such things as rhythm, syntax, etc? What 'details' or 'qualities' of an individual, group, or 'arena of concern' can be analyzed for the purpose of being able to group them into structures which can be searched for?" "How can 'assigning' a value to certain sequences of numbers be used as a pattern to 'filter' the input data into a form which is easier to analyze?" You are aware of 'tricks and techniques' that apply to mathematics and are widely known. i.e. The process of shifting and adding numbers when multiplying by the number '11'. However, what about those quantum of information which are of no consequence to those seeking for the 'final result' of that multi- plication? Can the peripheral effects of mathematic calculations be used to analyze what has taken place, to narrow the scope of inquiry? My nephew describes numbers as getting 'wider' as they get larger, and he does quick checks of his result through his 'feel' for how much 'wider' a number should be when he is done, even in complicated equations which he ill-understands. (He reminds me of Steven Wright, who claims that someone told him that his socks didn't match, and he replied, "Sure, they do. I go by thickness.") I am currently working on a project which involves merging chaos theory with traffic analysis and other processes to analyze the effects that algorithms display when processed through the filters of varying hardware and software structures and methodologies. The RSA algorithm and accompanying RSAREF subroutines were our first focus, for the very reason that there were certain factions behind the scenes of the Zimmerman/RSA agreement who seemed to have an inordinate amount of interest in the subroutines being chained to the algorithm (for reasons that have nothing to do with patent protection). Those whose expertise goes far beyond my own in this area look at the initial results of the analysis as confirming that their is a 'relationship' between the RSA algorithm and the RSAREF subroutines which will enable them to break the system down into workable units for fairly quick analysis. What is interesting is that the results from small probes into other encryption systems show the same potential for exploitation using varying analysis methodologies and processes. (One fairly well-known encryption routine is almost lame enough to reveal its secrets to anyone with a pencil and a stopwatch, as well as the file size and time it takes to encrypt.) While I would rather you didn't publicize the preceding information, as a general rule, I think that is something that should be shared with anyone who is seriously focusing their efforts on better methods of encryption and analysis of encryption methodologies. I am aware of two other groups who are working along the same lines, although with a narrower range of variables than ourselves, and I am certain that there must be more than a few other entities out there who are also pursuing this line of research.

2 1

encrypt_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [World Book 1997 Multimedia Encyclopedia. Built upon the questions kids ask most. IBM] [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: U.S. Bill To Ban Internet Gambling Introduced Next Story: Rational Unveils Software With Microsoft _________________________________________________________________ Thursday March 20 2:56 PM EST Clinton Admin. To Offer Encryption Bill Shortly WASHINGTON - The Clinton administration plans to introduce legislation soon that would clearly affirm that encryption users in this country are free to use any type or strength of encryption technology, a senior administration official said. Currently, no such explicit law is on the books. Under Secretary of Commerce William Reinsch also told a Senate Commerce Committee hearing the bill would explicitly state that participation in so-called "key management infrastructure" would be voluntary. Key refers to the password or software "key" that can read encrypted information. The bill also would: -- Spell out the legal conditions for the release of "recovery information" to law enforcement officials. The bill also provides legal safeguards for third-party "key recovery agents" who have properly released such information. -- Criminalizes the misuse of keys and the use of encryption to further a crime. -- Offers, on a voluntary basis, firms that are in the business of providing public cryptography keys the opportunity to obtain government recognition. Such recognition, Reinsch said, would allow firms to "market the trustworthiness implied by government approval. The testimony came in a hearing on two bills introduced by Senate lawmakers that would remove almost all export curbs on encryption technology. The administration's newest export policy, enacted through executive order in November and in effect since January 1, allows export of stronger encryption than previously allowed. But it requires companies to incorporate features within two years allowing the government to crack the codes by getting access to the software keys. Administration officials said they opposed the export provisions in the two Senate bills, saying that the export liberalization goes too far. The bills were offered by Sens. Patrick Leahy (D-Vt.) and Conrad Burns (R-Montana). Copyright, Reuters Ltd. All rights reserved _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: U.S. Bill To Ban Internet Gambling Introduced Next Story: Rational Unveils Software With Microsoft _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Re: PGP Security
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:markm@voicenet.com to Harka <=- In> The fundamental problem with the current remailer network, as others In> have noted before, is that it is a free service open to abuse by In> anyone. If remailers were commercialized, this would eliminate the In> spam problem and would provide the remailer operator with resources to In> legally defend him or herself. Currently, there is no modivation for an In> operator to continue the service when legally threatened. Personally I believe, that the fundamental problem with remailers is, that there are simply too few of them. If there were a few hundred or even thousand around the world, it would be much harder to crack down on the R-network and the individuals, who run the remailers. In need is a remailer program, that even not so technical people could easily run from their common Windoze machine. Jgrasty's winsock remailer is a good step in the right direction (although it didn't work for me personally). Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! --> http://www.eff.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ ___ Blue Wave/386 v2.30 [NR] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMzJEKTltEBIEF0MBAQGgfwf/QePG5nHUjZajUjmskX/CwW+WSvMcDE13 +EiILayy/lE4WQQeGCK8Q0/gcmVqTNtvug3gSRYyUqmadDgzfAlpFg4Vn5pv3I1Z Spf8WNiRpQ1EhHIXPaW4zwMRvAAeySQG/WMmRFzzYWSb2MydlHy3e/XhDy8OtBe3 5IwcGimZE+820eXgdXdCPM2xg3Bri8tUlqBvrVvD+hPi8e5hw3eNc/i1Jf1GP4+w WIhLLzkRe+AYxXEpUrK5c2D1HiNO3KRWqmTiufTjXHZPnu8DW5BXODTbBoqnyOBi syCctfLGD85zFo199FYVsQ4ThFE897qo3U4v9JQuHifRw0GQS5GCiQ== =f+dR -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

gambling_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [IBM DB2] [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: Wired Summit Newsroom Echoes To Click Of Mice Next Story: Clinton Admin. To Offer Encryption Bill Shortly _________________________________________________________________ Thursday March 20 2:57 PM EST U.S. Bill To Ban Internet Gambling Introduced WASHINGTON - A bill to ban all forms of gambling on the Internet has been introduced in the U.S. Senate. "Given the tremendous potential for abuse, addiction and access by minors, online gambling should be prohibited," Sen. Jon Kyl, an Arizona Republican, said. He was joined by two other Republicans and three Democrats in offering the bill. Currently, only computer gambling on sports events is prohibited. The legislation would extend criminal penalties to companies who offer all types of computer gambling. Communications companies regulated by the U.S. Federal Communications Commission would be required to discontinue services to any companies they carry that offer gambling. Kyl said the bill also eliminates ambiguity about the definition of bets and wagers to make any form of online betting illegal. The bill was introduced on the same day as the U.S. Supreme Court heard arguments about a 1996 law banning transmission of sexually explicit material on the Internet to anyone younger than 18. The Clinton administration argued that the law should be upheld to protect young children. Opponents said it violated free-speech rights of adult Internet users and should be found unconstitutional. A decision in the case is due by July. Copyright, Reuters Ltd. All rights reserved _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: Wired Summit Newsroom Echoes To Click Of Mice Next Story: Clinton Admin. To Offer Encryption Bill Shortly _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Re: FINALLY, "SOME" TRUTH Re: Anonymous Nymserver: anon.nymserver.com
by Toto 17 Dec '03

17 Dec '03

Attila T. Hun wrote, in blood: > on or about 970313:1533 TruthMonger <an7575(a)anon.nymserver.com> said: > + To reiterate my original observations: > +1. The development of RSA was funded and controlled by the spooks. i.e. > +- The National Science Foundation and the Navy. > +2. The campaign of persecution against Phil Zimmerman ground to a halt > +once he agreed to PGP using the spook-developed RSAREF subroutines to > +implement the RSA functions, instead of PGP's original subroutines. > about a year ago when Phil's prosecution was dropped, I wrote a > rather lengthy message here about PKZ, the prosecution turning to > vapour, surprise funding for PGP, Inc. (which is substantial), and > the issue of being compromised. What I found interesting about TruthMonger's missive was that the replies he received as a result of merely 'questioning' certain things regarding the holy icon of PGP, he got back replies/rants, from normally rational list subscribers, which were scathing rebukes to issues he or she hadn't even raised. I wonder if you had a similar experience with the post you mention. > ANYONE who has managed to walk away from a fed hate/hatchet job has > been compromised to some extent. No shit, Sherlock. > + If people with guns came to me and told me that software I had > +written now had to use their subroutines, instead of my own, then I > +would consider my software 'compromised', regardless of whether or not > +I could immediately discern any anomalies in it. > + It is far, far easier to 'build' a back-door, than to 'find' one. > > you got that one right! > just the ability to _backtrack_ into the algorithms is a start. > One piece of clear text and you're toast. You can't tell me the guy who designed the Rubik cube didn't know how to 'beat' it when he was done. > + It never fails to amaze me how the back-doors that software makers > +intentionally build into their products for their own convenience > +suddenly become 'bugs' when hackers, among others, take advantage of > +them. > + One hacker I know used to find most of his hacks into AT&T UNIX by > +screwing up his system (i.e. - corrupting the passwd file) and then > +calling in the AT&T support techs and observing their tricks and > +techniques (and then improving on them). > > ...ask a few of the old line unix hacks at Murray Hill (where I was > "granted" my name....) however, AT&T was never as bad as a few of > the others (Sperry comes to mind...) and most of AT&T's access > points were not open and exploitable without you enabling them (by > giving them access). I know a hacker who could get Support Techies to perform all of their secret black-magic in front of him just because he had the abilty to act extremely stupid. (If he asked you the time of day, you'd write it down for him, and explain it to him.) > however, 20 years ago, the feds were scary enough with "new" > crypto; 4 AM rousts that noone believed the feds would do. > warrants? yeah, right! If the feds arrested you, you were > "obviously" guilty or they would not have arrested you. I think we can expect the day to come when the Feds make their major public relations tune "If you don't have anything to 'hide', then why do you need crypto?", thus pointing out to 'decent folk' that the CypherPunks are all drug smuggling, tax-dodging pedophiles. -- Toto "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix/xenbody.html

1 0

Re: encrypt_1.html
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:lynx_user@linux.nycmet to Harka <=- In> Clinton Admin. To Offer Encryption Bill Shortly In> WASHINGTON - The Clinton administration plans to introduce In> legislation soon that would clearly affirm that encryption users in In> this country are free to use any type or strength of encryption In> technology, a senior administration official said. In> Currently, no such explicit law is on the books. Obviously, by making a law, that strangely enough tries to legalize, what is legal already, the administration is trying to bait people into "voluntary" key escrow, which are in my opinion the actual main points of the law... In> The bill also would: In> -- Spell out the legal conditions for the release of "recovery In> information" to law enforcement officials. The bill also provides In> legal safeguards for third-party "key recovery agents" who have In> properly released such information. etc.etc... What a bunch of bullshit. Now, that the backdoor "Clipper" doesn't work due to enough awareness, they now try all the windows of the house of cyberspace to do their black-bag job of getting a lock on the front-door, that they'd have a master-key for... Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! --> http://www.eff.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ ___ Blue Wave/386 v2.30 [NR] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMzJYADltEBIEF0MBAQFbFgf9HEgRLdqaE9jiWXBr8ztkLPTLAaQ5BfRE e4Q6KEYC/zGXUOEtxUEN755rIHo8PNwwSM7ovbEGf7La15O4AnNxRKbVvFbUWGTv nVw3eMDiy/mt11DqMQ316zAIv0sIpXJhspxHTSMWU++uIR3pVUGq31weFPUN4f4B RruaJwEmf1dvVVJkXHgDsrC8HiECSrBidvz57vfpeZpIj4BscEdycBEAH8zmnPic t3Hi9sc5Gc6DQz6ThbaMAj2bHhWEwPuw3GiKe2yzM6A2D/DeIZrlJ0dE2hK6DMXV jz2/DKNQYp9kS1d6vojPdYYEaPXR/upg6Otqno3SJ71DEMqcc49IDA== =vBCY -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

3 2

Cyberpromo hacked
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

http://www.anonymizer.com:8080/http://www.cyberpromo.com

1 0

Re: ADV Weekly Transcripts
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Regarding 1968 view of population control: _Stand on Zanzibar_ John Brunner Thanks

1 0

No Subject
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

BELIEVE the Children! Toto <toto(a)sk.sympatico.ca> writes: > Dale Thorn wrote: > > > > Really? Define _common_. I have lived in the Mid West for about 85% of > > > my life, and I know no one who learned these things from their parents. > > > > C'mon guys. Parents diddling with their kids is more than common - > > probably 1/3 of all fathers do something sexual with one or more > > of their children at some point. People just suppress it. > > I can't believe it could be that common without the government > finding a way to 'tax' it. Def: relative humidity - the sweat on snow's balls as he fucks his sister. BELIEVE the Children!

1 0

Jackboots in Canada
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- AP 3/21/97 Quebec Spurred by a new outbreak of bombings, the Canadian government agreed Thursday to toughen laws to help Quebec stamp out a war between motorcycle gangs that has killed more than 30 people. [snip] ...Hell's Angels and Rock Machine...have been battling for control of the illegal drug trade in Canada. Canadian justice minister, Allan Rock, said the measures would include broadening laws on search warrants, electronic eavesdropping and bail conditions for arrested gang members. -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMzKOOiKJGkNBIH7lAQHrAwP+P/0YSzXsLKlLe5YAzOVC0QB31uNhmvim HsSdPbulXccXCV0WIeG5uCtzCLXliR759KunfxEs2GithcIpfcDDKa4SFJv9+SVi PqmWXAxs+qNQ/uQqsDo97zuk+tNhO0631XRkh1LS+tL9Q6pCJfSpNl3Ntvhtyafv OD01c5tLwts= =AqwJ -----END PGP SIGNATURE-----

6 6