December 2003 - cypherpunks-legacy

Kremlin v1.04
by Mark Rosen 17 Dec '03

17 Dec '03

I'm sure you all remember my program, Very Good Privacy, and have been waiting for the release of the new version with bated breath. Well, it's finally here! Only, after being contacted by PGP, Inc. regarding a possible trademark violation, I've changed its name to Kremlin. Remember: it's like an iron curtain for your data. The new version still uses the same algorithms. The algorithms can be grouped into three categories: ASCII and Vigenere, which give little security, but are extremely fast, DES, NewDES, and Safer SK-128, which will protect against all but the most well-funded adversaries, and Blowfish, IDEA, and RC4, which are perhaps the most secure algorithms available today. The key-size of the algorithms ranges from 64-bits (actually 56-bits) in DES to 128-bits in IDEA, NewDES, and Safer SK-128, and infinite length in ASCII, Blowfish (up to 448-bits), RC4, and Vigenere. If the "Hash Passkey" option is checked, then the passkeys are hashed with a 64-bit per-source file salt using SHA1 to form a 160-bit passkey; extra bits not used by the fixed-length algorithms are discarded. Without the "Hash Passkey" option checked, the passkey is only XORed with the salt and retains its original size. If the "Encrypt Headers" option is checked, then the filename and file size of the files are encrypted, giving an attacker no information about the source files. Once the files have been encrypted, you have the option of securely deleting them by overwriting them a user-definable number of times with random data; the most secure encryption algorithm in the world is useless if the plaintext is left unsecured on the hard drive. All of this is done through one simple dialog box. To launch Kremlin, just drag a file or directory (or a combination of files or directories) onto the Encrypt icon on the Windows 95 desktop. To decrypt a file, just double-click on it and enter the passkey; no unwieldy tabbed dialog boxes or file directory navigation boxes. Plus, as a added bonus, anyone who orders 10 or more copies of Kremlin will receive a can of Spam (TM) for free! For more information on Kremlin, e-mail mrosen(a)peganet.com To download Kremlin, go to: http://www.geocities.com/SiliconValley/Pines/2690

1 0

new restrictions in EAR (over ITAR)
by Adam Back 17 Dec '03

17 Dec '03

(from "http://jya.com/bxa123096.txt") : a. ``Software'' specially designed or modified for the : ``development'', ``production'' or ``use'' of equipment or ``software'' : controlled by 5A002, 5B002 or 5D002. : b. ``Software'' specially designed or modified to support : ``technology'' controlled by 5E002. large integer libraries? (modexp functions?) : c. Specific ``software'' as follows: : c.1. ``Software'' having the characteristics, or performing or : simulating the functions of the equipment controlled by 5A002 or 5B002; : c.2. ``Software'' to certify ``software'' controlled by 5D002.c.1; this one (I presume) is addressed at people like microsoft with CAPI certifications, you can't export the signing software : c.3. ``Software'' designed or modified to protect against malicious : computer damage, e.g., viruses; - Virus scanning software? (Winn Schwartau's info warfare hype is rubbing off on the spooks) Makes one wonder, if it's purportedly in the national security interests to bar the export of virus scanners (of any quality), logically it's also in the national security interests for the NSA to write and distribute virii. - Programs which checksum themselves as a crude check against viruses/modification? (some _operating systems_ qualify on this basis) - md5file from rfc1321? (rfc1321 is the MD5 rfc, md5file checksums files with md5, useful for checking what's changed)? - firewalls! (whoops there goes a few more million in US trade) Madness, Adam -- print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Re: Hardening lists against spam attacks
by Bovine Remailer 17 Dec '03

17 Dec '03

So, we had a spike of spam attack around Christmas, primarily using the mechanism of subscribing the cypherpunks list to other mailing lists. Now, everybody is off designing methods to limit postings to the list. You know what this reminds me of? The enthusiasm displayed by the the current US government administration to get bills passed that would curtail even more rights of its citizens in the wake of the TWA flight 800 crash. Cypherpunks, you have met the enemy and it is you.

2 1

benefits of EAR (not)?
by Adam Back 17 Dec '03

17 Dec '03

Reading through "http://jya.com/bxa123096.txt": > 1. This interim rule has been determined to be significant for > purposes of E.O. 12866. A cost benefit analysis has been prepared and > is available upon request by contacting James A. Lewis at (202) 482- > 0092. Anyone availed themselves of this offer of a CBA for EAR? Just curious as to what the supposed benefits are :-) Adam -- print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

4 3

Join Us "Special Conference Call"
by carrollw＠cadvision.com 17 Dec '03

17 Dec '03

Hello opportunity seeker, For most people, finding the RIGHT opportunity that provides the FREEDOM and the right CASH flow to earn a living working from HOME is a DREAM at best. Team 2000 has joined a company that has all the INGREDIENTS for this wish to be fulfilled and I extend a very CORDIAL invitation for you to join our Team 2000 TOLL FREE conference CALL on: THURSDAY Evening, January 2, 1997 You are invited to a Special Toll Free Conference Call with ... 1. The President of Idea Concepts, Ken Hampshire 2. The Co-founder of Idea Concepts, Steve Miles 3. Other key leaders of Idea Concepts 4. The Team 2000 Leaders 5. Most importantly: YOU Hear about the products, compensation plan and exciting late breaking news on this call! Please, write this number down now and put it on your calendar for Thursday night, January 2, 1997. At the appropriate time for you,(in your time zone) call 1-800-556-3844 9:30 pm Eastern Standard Time 8:30 pm Central Standard Time 7:30 pm Mountain Standard Time 6:30 pm Pacific Standard Time You may call in 2-3 minutes before the actual time. If you call in too soon you will get a busy signal, so just keep dialing back in. Your questions will be answered Thursday night on the TOLL-FREE Conference Call. In the meantime you may wish to review information on our website and follow the links: http://www.ideaconcepts.com Best Regards for a Healthy, Happy and Prosperous New Year! Wayne J Carroll Team 2000 - Leader

1 0

Travel Discounts
by travlpls＠netside.com 17 Dec '03

17 Dec '03

Fuck_God_Up_The_Ass, How would you like to save 65% on all your leisure and business travel? Save at thousands of fine hotels, resorts and condos, all around the world. Also, save on airfare, cruises, car and RV rentals, special attractions and MUCH MUCH more!! That's just the tip of the iceberg! For a limited time only, we are offering a golf package which includes 50% off green fees at over 2,000 golf facilities. This travel package will pay for itself the first time you use it!! *START SAVING NOW!! SIMPLY HIT REPLY AND TYPE "DISCOUNTS"*

1 0

stupid remailer-ignorant stud3nt caught by NY polic3
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

http://www.nytimes.com/yr/mo/day/news/national/psychopaths-educ.html Potential Killer or Just Disturbed? Psych Class Seeks Distinction By KAREN W. ARENSON NEW YORK -- The 20-year-old man with a Mohawk haircut, multicolored pigtails, tattooed arms and rings on every finger was an engineering student at a New York college when he sent e-mail to a public official threatening to torture him and rape his young daughter. The FBI arrested the student a few days later as he sat in his pajamas eating breakfast. Late last year, the case landed on the desk of Dr. Naftali Berrill, a forensic psychologist who had conducted court-ordered examinations of Joel Rifkin, the serial killer, and Colin Ferguson, the Long Island Rail Road killer. Now, Berrill is using the e-mail case in the class he teaches at John Jay College of Criminal Justice in Manhattan. The class is part of the college's fastest-growing area of study: forensic psychology. Six years ago there were 96 students in the masters program; now there are 271. "There is a fascination with this stuff," said Berrill, who assigns movies like "Klute," "Silence of the Lambs" and "Psycho" as homework, along with articles in scientific journals. "Popular culture has gone nuts with the idea of taking someone who has committed a crime and profiling the person, thinking about why he did it, what is behind it." The goal on a recent day was to get his students to judge whether the tattooed man was fit to stand trial, whether he was legally responsible for his behavior, or whether he might be considered legally insane, and whether he is in need of treatment. Berrill had evaluated the man and knew the court's ruling, but he wasn't about to tell his students until the exercise was over. "How should the young man be handled?" he asked the students. "Is he really dangerous or is he only sick? Is prison appropriate or does he need medical treatment?" First, the students wanted more information. They did not have the young man to question, so they began firing questions at their professor. Did the young man have prior problems with the law? Berrill shook his head no. Any history of psychological problems? Berrill reported that the young man had "apparently always been an odd duck, a person who felt separated from the group and who capitalized on his oddness." Since his arrest, he says he has had fleeting ideas of killing himself. How did he behave when arrested? He spoke quietly and his speech was fluent, articulate and terse. His reaction was more surprise than remorse. Any other unusual behavior? He used to have fantasies of protecting people beset by attackers. Sometimes he sensed the taste of chocolate, even when he had none in his mouth. Sometimes he walked around New York City with knives strapped to his chest and arms. For half an hour, the psychological sleuthing continued: What kind of family history did he have? He was the last of several children in an Irish-American working-class family, and he had brothers who had been arrested for drug use. Was he overprotected and coddled? The young man had said he was well cared for, but it was difficult to learn whether there was true affection. Finally, the students were ready to lay out their theories. The young man showed signs of a narcissistic personality disorder or a histrionic personality disorder, some said. He might have sent the e-mail message just to get attention, adding the rape threat for shock value but not really as something he intended to carry out. One group thought the student himself had been abused. And some saw his threats as reflections of his own sexual inadequacy. Some students suggested blood tests and psychological tests to see if he was depressed. For many students, the analysis was better than an evening in front of the television set. "I love it," said Adrienne Higgins, a former florist who returned to college and hopes to go on for a Ph.D. in neuropsychology. Eva Norvind, who has a master's degree in health education and counsels sexual deviants, calls the class one of her most challenging. Some students go on to earn doctoral degrees in psychology and begin a practice. Others go to law school, and still others go into social service or police work. But Berrill estimates that about a third of the students take the class to indulge in their own fascination with crime. Berrill got to the heart of the question: "If you were in law enforcement, is he a dangerous person?" Most class members nodded yes. The most telling piece of evidence, said one student, was "the fact that he was walking around the city, like an armed bomb waiting to go off." And the dissenters? "He needs help. I am very concerned about the homicidal and suicidal thoughts." Another commented, "In terms of being dangerous, he has no history. His use of e-mail shows a fear of social contact, and that doesn't fit the character type of a killer." Berrill was pleased. He had one more question: Does the young man have a shot at the insanity defense? No, most students said. "He was aware of everything he was doing," said one. "But he would be helpful to an attorney." Berrill beamed. In his view, the class had captured the important elements. "If I were asked by a judge," he told them, "I would say he is dangerous. Always err on the conservative side. He is in need of mental health services. But incarceration? No. He is not psychologically equipped to deal with real criminals or psychopaths." The court concurred. Earlier this year, a judge put the young man on probation and directed him to seek psychological counseling. - Igor.

1 0

IJLNotes is a Computerized Automated Messaging Center
by ijlnotes＠joblocator.com 17 Dec '03

17 Dec '03

What is IJLNotes? http://www.joblocator.com/ijlnotes/ Need help tracking your day, week or month ? IJLNotes is a unique Computerized Automated Messaging Center. Min. Hardware/Software Requirements Windows 3.1 , '95 or NT 386 or faster 4 MBs RAM Check out the screen shots on our web page http://www.joblocator.com/ijlnews/i5.gif http://www.joblocator.com/ijlnews/i6.gif Full working demo until Feb 10, '97

1 0

anonymous <-> anonymous; dcnets
by Laszlo Vecsey 17 Dec '03

17 Dec '03

Can someone point me towards a mailing list or two that is dedicated to the discussion and development of dcnets? Thank you! - Lester - A recent study has found that concentrating on difficult off-screen objects, such as the faces of loved ones, causes eye strain in computer scientists. Researchers into the phenomenon cite the added concentration needed to "make sense" of such unnatural three dimensional objects. -

1 0

Re: Crypto reg clarification from Commerce Department
by Greg Broiles 17 Dec '03

17 Dec '03

Lucky Green wrote: >I just got of the phone with Bruce Kutz, Export Policy Analyst, Office of >Strategic Trade and Foreign Policy Controls. (202) 482-0092. He seems to be >the contact person for the new regs. Well done, Lucky. This is what's needed to kick off a lot of commentary during the next 45-days. Backed by research, to be sure. The outpouring of such commentary on the full EAR from May 1995 to March 1996 shaped the final document, and that process is an excellent case study for how to affect the final form of the latest crypto regs. It's worth perusing the full EAR in the Federal Register: March 25, 1996 (Volume 61, Number 58), Pages 12713 et seq. for 325 pages (well over a 2.5MB -- it's also on our site, see URL below). Here's the portion of the EAR that Lucky and Kutz discussed: [Page 12805] Sec. 744.6 Restrictions on certain activities of U.S. persons. (a) General prohibitions--(1) Activities related to exports. (i) No U.S. person as defined in paragraph (c) of this section may, without a license from BXA, export, reexport, or transfer to or in any country other country, any item where that person knows that such item: (A) Will be used in the design, development, production, or use of nuclear explosive devices in or by a country listed in Country Group D:2 (see Supplement No. 1 to part 740 of the EAR). (B) Will be used in the design, development, production, or use of missiles in or by a country listed in Country Group D:4 (see Supplement No. 1 to part 740 of the EAR); or (C) Will be used in the design, development, production, stockpiling, or use of chemical or biological weapons in or by a country listed in Country Group D:3 (see Supplement No. 1 to part 740 of the EAR). (ii) No U.S. person shall, without a license from BXA, knowingly support an export, reexport, or transfer that does not have a license as required by this section. Support means any action, including financing, transportation, and freight forwarding, by which a person facilitates an export, reexport, or transfer without being the actual exporter or reexporter. (2) Other activities unrelated to exports. No U.S. person shall, without a license from BXA: (i) Perform any contract, service, or employment that the U.S. person knows will directly assist in the design, development, production, or use of missiles in or by a country listed in Country Group D:4 (see Supplement No. 1 to part 740 of the EAR); or (ii) Perform any contract, service, or employment that the U.S. person knows directly will directly assist in the design, development, production, stockpiling, or use of chemical or biological weapons in or by a country listed in Country Group D:3 (see Supplement No. 1 to part 740 of the EAR). (3) Whole plant requirement. No U.S. person shall, without a license from BXA, participate in the design, construction, export, or reexport of a whole plant to make chemical weapons precursors identified in ECCN 1C350, in countries other than those listed in Country Group A:3 (Australia Group) (See Supplement No. 1 to part 740 of the EAR). (b) Additional prohibitions on U.S. persons informed by BXA. BXA may inform U.S. persons, either individually or through amendment to the EAR, that a license is required because an activity could involve the types of participation and support described in paragraph (a) of this section anywhere in the world. Specific notice is to be given only by, or at the direction of, the Deputy Assistant Secretary for Export Administration. When such notice is provided orally, it will be followed by a written notice within two working days signed by the Deputy Assistant Secretary for Export Administration. However, the absence of any such notification does not excuse the exporter from compliance with the license requirements of paragraph (a) of this section. (c) Definition of U.S. person. For purposes of this section, the term U.S. person includes: (1) Any individual who is a citizen of the United States, a permanent resident alien of the United States, or a protected individual as defined by 8 U.S.C. 1324b(a)(3); (2) Any juridical person organized under the laws of the United States or any jurisdiction within the United States, including foreign branches; and (3) Any person in the United States. (d) Exceptions. No License Exceptions apply to the prohibitions described in paragraphs (a) and (b) of this section. (e) License review standards. Applications to engage in activities otherwise prohibited by this section will be denied if the activities would make a material contribution to the design, development, production, stockpiling, or use of chemical or biological weapons, or of missiles. ----- The EAR covers all kinds of exports, so encryption and cryptography provisions are found by searching. The Federal Register published it in seven 50 page chunks, and is available at: http://www.access.gpo.gov/su_docs/aces/aces140.html Enter the search term: "Page 12713" (with quotes; repeat six times in sequence). We've combined the seven parts for searching: http://jya.com/ear032596.txt (2,570K)

1 0