December 2003 - cypherpunks-legacy

Sunshine, pools and palm trees
by file130＠ibm.net 17 Dec '03

17 Dec '03

There's a place near Palm Springs, California where palm trees sway, sparkling hot mineral pools dance in the sunlight and your worries melt away with the special touch of our world class staff. Spacious rooms, soothing massages, facials, and body therapies await you. We have two mineral water wells that continuously pump hot water into 8 pools, (one is Olympic size). To immediately receive a discount and get a FREE cool T-shirt mailed to you, call the Desert Hot Springs Spa Hotel at 1-800-808-7727 and mention the Internet offer. Visit our web site at http://www.dhsspa.com or send us an email to Spas(a)earthlink.net for more information.

1 0

Re: Key Recovery / The True Story
by Lucky Green 17 Dec '03

17 Dec '03

At 01:59 PM 5/23/97 -0700, Ernest Hua wrote: > Is it EVER okay for spooks to break into a church's computer to > find out if they are secret terrorists? > >I'm not sure the answer is clearly one way or another, and I am >willing to bet that the tone of the answers will mostly be emotional >appeals to some idealistic standard or pessimistic nightmares. >From a pragmatic standpoint, if the feds can burn down a church with the worshippers still inside with impunity, it stands to reason that breaking into their computers would not be a very big deal. --Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. Put a stake through the heart of DES! Join the quest at http://www.frii.com/~rcv/deschall.htm

2 1

Re: V-Chips for the Internet
by Lucky Green 17 Dec '03

17 Dec '03

At 02:16 PM 5/23/97 -0700, Tim May wrote: >There are three main dimensions to this "V-chip for the Internet," just as >there are for the original V-chip for televisions: [...] >3. Economics. How long will it take before even 5% of the nation's >computers have this V-chip installed? How much will it cost? Who will >bother with it? You may recall that the US mandated the use of V-chips in future televisions. By the same token, the US could mandate the use of I-chips in future modems. [...] >Could hardware-based chips be coming? At a recent meeting, John Markoff >asked me if I'd heard anything about Intel's rumored contract to buy 20 >million (yes, 20 _million_) keyboards with crypto features built in. I had >not heard this rumor. > >(Since then, though, there have been rumblings that Intel is preparing to >offer such keyboards, possibly with "user authentication" features (don't >know what kind). Actually, it is 10 million keyboards with smartcard readers. Unless Intel increased the lot size. I talked with a person at Intel attempting to purchase the devices back in October, 1996. He expressed the difficulties they were having finding a keyboard vendor who understood that the CPU should not be directly involved in the smartcard operation. From this discussion, I assumed the purpose of the devices is authentication. The keyboards might be for an ecommerce solution or they might be used in conjunction with Intel's P7, which will support encrypted instruction sets. --Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. Put a stake through the heart of DES! Join the quest at http://www.frii.com/~rcv/deschall.htm

1 0

international rates
by minjiang＠hotmail.com 17 Dec '03

17 Dec '03

Hello, You were referred to us as someone who makes regular international calls. If this is not the case, please forgive the intrusion- we won't send you any other messages. These are, by far, the lowest international calling rates anywhere. You can sign up online right now for service, for no cost or fees, and you DO NOT need to switch your long distance carrier: http://205.199.212.65/itl/itl.html AGAIN, there's no need to switch service: Just dial the 800# or PIC code for access. You can be on in 48 business hrs. or less. PLUS, you can earn 5% on other people's usage, and get a FREE web page that will take orders for your referals 24 hours per day: All rates are FLAT rates, 24 hrs./day: $1.48 Afghanistan $0.72 Albania $0.77 Algeria $0.76 American Samoa $0.43 Andorra $1.04 Angola $0.73 Anguilla $0.73 Antigua $0.68 Argentina $0.77 Armenia $0.53 Aruba $1.16 Ascension Island $0.28 Australia $0.38 Austria $0.85 Azerbaijan $0.36 Bahamas $0.95 Bahrain $1.18 Bangladesh $0.64 Barbados $0.70 Belarus $0.33 Belgium $0.93 Belize $0.78 Benin $0.44 Bermuda $1.09 Bhutan $0.88 Bolivia $0.64 Bosnia $0.99 Botswana $0.69 Brazil $0.60 British Virgin $0.75 Brunei $0.60 Bulgaria $0.81 Burkina Faso $0.97 Burundi $1.31 Cambodia $1.02 Cameroon $0.24 Canada $0.84 Cape Verde Islan $0.66 Cayman Islands $1.38 Central African $1.42 Chad $0.56 Chile $0.81 China $0.62 Christmas Island $0.68 Colombia $1.17 Comoros $1.05 Congo $1.35 Cook Islands $0.72 Costa Rica $0.54 Croatia $0.83 Cuba $0.62 Cyprus $0.48 Czech Republic $0.28 Denmark $1.09 Diego Garcia $1.04 Djibouti $0.67 Dominica $0.78 Ecuador $0.93 Egypt $0.75 El Salvador $0.46 Estonia $1.18 Ethiopia $0.44 Faeroe Islands $1.07 Falkland Islands $1.18 Fiji Islands $0.32 Finland $0.28 France $0.72 French Antilles $0.74 French Guiana $0.72 French Polynesia $1.04 "Gabon, Republic" $0.76 Gambia $0.93 Georgia $0.28 Germany $0.82 Ghana $0.54 Gibraltar $0.48 Greece $0.67 Greenland $0.60 Grenada $0.59 Guadeloupe $0.38 Guam $0.72 Guatemala $1.35 Guinea Bissau $0.90 Guinea $0.97 Guyana $0.74 Haiti $0.78 Honduras $0.39 Hong Kong $0.42 Hungary $0.46 Iceland $0.99 India $0.88 Indonesia $1.10 Iran $1.21 Iraq $0.34 Ireland $0.69 Israel $0.34 Italy $1.17 Ivory Coast $0.65 Jamaica $0.36 Japan $0.88 Jordan $0.96 Kazakhstan $1.12 Kiribati $0.65 Korea $0.89 Kuwait $0.99 Kyrgyzstan $1.50 Laos $0.55 Latvia $0.99 Lebanon $1.03 Lesotho $0.70 Liberia $0.63 Libya $0.37 Liechtenstein $0.62 Lithuania $0.37 Luxembourg $0.87 Macao $0.67 Macedonia $1.18 Madagascar $0.70 Malawi $0.59 Malaysia $1.10 Maldives $1.13 Mali $0.55 Malta $1.14 Mauritania $0.90 Mauritius $1.28 Mayotte Island $0.27 Mexico Step 1 $0.32 Mexico Step 2 $0.44 Mexico Step 3 $0.49 Mexico Step 4 $0.53 Mexico Step 5 $0.70 Mexico Step 6 $0.73 Mexico Step 7 $0.75 Mexico Step 8 $1.03 Micronesia $0.88 Moldova $0.34 Monaco $0.99 Mongolia $0.64 Montserrat $0.62 Morocco $0.88 Mozambique $1.10 Namibia $1.34 Nauru $1.50 Nepal $0.29 Netherlands $0.66 Nevis $1.10 New Caledonia $0.35 New Zealand $0.84 Nicaragua $1.09 Niger $0.81 Nigeria $1.61 Niue $0.30 Norway $1.14 Oman $1.27 Pakistan $1.50 Palau $0.78 Panama $0.83 Papua New Guinea $0.92 Paraguay $0.78 Peru $0.71 Philippines $0.46 Poland $0.44 Portugal $0.21 Puerto Rico $1.04 Qatar $1.15 Reunion Island $0.65 Romania $0.67 Russia $1.07 Rwanda $0.80 Saipan $0.46 San Marino $1.04 Saudi Arabia $1.40 Senegal $1.36 Seychelles Isl $0.99 Sierra Leone $0.36 Singapore $0.48 Slovakia $0.57 Slovenia $1.04 Solomon Island $0.63 South Africa $0.38 Spain $1.16 Sri Lanka $0.97 St Helena $0.73 St Kitts $0.73 St Lucia $0.47 St Pierre & Mi. $0.73 St Vincent $0.64 Sudan $1.25 Suriname $0.68 Swaziland $0.22 Sweden $0.29 Switzerland $1.15 Syria $0.57 "Taiwan, Republic" $0.98 Tajikstan $1.07 Tanzania $0.89 Thailand $1.06 Tonga $0.73 Trinidad & Tobag $0.74 Tunisia $0.66 Turkey $0.99 Turkmenistan $0.73 Turks & Caicos $1.05 Tuvalu $0.91 Uganda $0.67 Ukraine $0.75 United Arab Emir $0.19 United Kingdom $0.90 Uruguay $0.99 Uzbekistan $1.09 Vanuatu $0.43 Vatican City $0.48 Venezuela $1.25 Vietnam $0.44 Wallis $1.00 Western Samoa $0.97 Yemen Arab Rep $0.97 Yemen Demo Rep $0.60 Yugoslavia $0.85 Zaire $0.91 Zambia $0.74 Zimbabwe

1 0

Algebra.com Lag Test
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -- - ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. - ----------------------------------------------------------- Tag-O-Matic: OS/2...Opens up Windows, shuts up Gates. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM4d3Ko9Co1n+aLhhAQEprwQAxDoO44ubcgSrXXU/GD8K1klkw/Np9CON OeiP5Od+XvfFefqLy+s+Wflddbg5fwTi664hpHKRlSj/nMeVNOrnor0i5RXW0i/6 YZxmmeTzvPq7m+PlEqnE17Wwi8urcdsurM9wHX6TOe6iCc4z5QcMjrOoKDbHjymZ VHwxY81GUjU= =LgkZ -----END PGP SIGNATURE-----

1 0

Cyberpass Lag Test
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -- - ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. - ----------------------------------------------------------- Tag-O-Matic: OS/2: Taking the wind out of Windows. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM4d3fY9Co1n+aLhhAQHJiQP+MQg1bRnZgIN2UEGKzvXZcR+6eSW5C4ka BF58Qpw7ByrF2X32guzeu6fIrM4HC56qGGutatwZ2hfYFP5yHY3uE87AOmEV++js FxkcbPdeRIUELhL59EE+J5W8K2+9IOIgU+djJ1lWmW2UYh7sXTx6NChgXI8fUELq 3I9Ah1VxBAw= =+Gyu -----END PGP SIGNATURE-----

1 0

Beware of encrypted processors bearing gifts...
by Dave Emery 17 Dec '03

17 Dec '03

Lucky Green wrote : > > Actually, it is 10 million keyboards with smartcard readers. Unless Intel > increased the lot size. I talked with a person at Intel attempting to > purchase the devices back in October, 1996. He expressed the difficulties > they were having finding a keyboard vendor who understood that the CPU > should not be directly involved in the smartcard operation. From this > discussion, I assumed the purpose of the devices is authentication. > > The keyboards might be for an ecommerce solution or they might be used in > conjunction with Intel's P7, which will support encrypted instruction sets. I find the notion of an extremely wide deployment (as any Intel x86 product will be) of machines with processors that support encrypted instruction sets and associated smart cards deeply disquieting. It seems to me that this is enabling technology that would allow the insertion of autonomous encrypted 'little brothers', into operating systems and perhaps major net applications such as web browsers as well.. These 'little brother' observers could be made completely opaque to even determined and sophisticated users - with encrypted code and the potential for encryption of all their data it would require breaking the encryption for an independant entity to understand what such an agent was doing and who it was doing it for. And by making support of such agents part of the encrypted inner ring of an OS (Win99?), it might be very nearly impossible to run the OS without the agent or agents present and operating properly. And as more and more PCs are net connected, such agents would not need to operate entirely autonomously, as they could communicate over encrypted links with their Big Brother somewhere else. The sea change in computing that would result from providing a mechanism for secret, black box, unknowable and unalterable code to run on the worlds personal computers is very significant. Up to now it has been possible, with effort and skill and intelligence, to determine what the code of any OS or application did by decompiling it, or use of software ICEs, debuggers, and even hardware monitors such as ICE's and logic analyzers. Presumably an encrypted Intel processor will reveal these secrets only to a very limited group of trusted developers, and perhaps even then only information about the application or layer the person is authorized to work on. Having both the ability to know what code is doing, and the ability to alter it has so far detered most attempts to put unfriendly agents into OS or applications code. It has been too easy to discover them, and too easy to disable them for this to be a really effective tool of social control, as witnessed by the failure of generations of copy protection schemes. But a truly secure encrypted processor changes things a lot - both understanding what the code does and modifying it become near impossible. While one can readily understand and even sympathize with the use of such entities to control and perhaps even largely eliminate software piracy and other theft of intellectual property, the potential uses of secure agents to implement more sinister social policy are frightening. A three way encrypted handshake between an encrypted agent that was part of the OS and a smart card and software at an ISP could be used to enforce an internet drivers license law for example, with no packets being forwarded by the ISP without hard authentication (even up to biometrics) of the user. And it would be rather trivial to disallow use of "unapproved" software to communicate over the net, making enforcement of GAK much more complete. One could even use such a mechanism to forbid use of any uncertified software on a net connected machine, thus making it rather hard to use such rogue applications as PGP. And given that independant review of such secret OS code would be near impossible, adding a Digital Telephony style watcher that could be turned on via an encrypted packet from the net to record the user's actions and what he typed or even access encryption keys or plaintext of encrypted traffic would simply require collusion between the OS supplier and the government, perhaps under pressure of antitrust enforcement or other suitable incentivization. Discovering that such a secret trojan was in the encrypted inner kernal code would not be easy, especially if it was only used rarely... Perhaps most sinister, as more and more of the code run on a PC becomes encrypted and opaque, it gets easier and easier for a trojan created not by a Big Brother state, but by criminal elements or foreign or industrial spies, to hide amidst all the other layers of encrypted code, safe from being detected by all but the few in possesion of the master keys or special hardware required to understand what was going on. Dave Emery die(a)die.com

2 1

Re: Too few Cypherpunks nodes
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > (ichudov(a)algebra.com) wrote: >> To subscribe to one of the Cypherpunks mailing list distribution points >> send email to (one of) majordomo(a)algebra.com, >>majordomo(a)sirius.infonex.com, or majordomo(a)cyberpass.net with the >>following text in the body of your email message: > Actually, infonex and cyberpass are the same place. Instead, you > can list majordomo(a)ssz.com, majordomo(a)cyberpass.net, and > majordomo(a)algebra.com. I've also put the same info into "PGPSteps" (http://bureau42.base.org/public/pgpsteps.txt) Ciao Harka -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBM4iHVDltEBIEF0MBAQFeuQf+NrK46h+hfep/FXS4UoiGvw4Od9p6txRI NY+2TUlzGbpY7/okLHhNACLx2g4TKmcNFMUYYPDn3cfcTbVjRGYAwAxhDViY43DC 7dD5XzBx/dAREHWd7pqK7JPJLSYgd8MqKMbiZy2PDWLcbUyS0gk9YPLStRhjSrKl WGtQtXYYJxlOD27RQnWHMoPkt76PuXsts0/qv7tt3fuuakW6mZx/ebZ/3vquR5sC YbxHVul2PcKHLixOPo/uduOCntz58LXe4k9cZFNs1/YbxcsNWQVPL4rx9jY7F8BE 4/DFZtvplY8XqVLc3EvMd2KQRyefXGxF+owEAjKjO8HlZUAVO54k3w== =XDyj -----END PGP SIGNATURE-----

1 0

Re: Beware of encrypted processors bearing gifts...
by Lucky Green 17 Dec '03

17 Dec '03

At 10:28 PM 5/24/97 -0400, Dave Emery wrote: > A three way encrypted handshake between an encrypted agent that >was part of the OS and a smart card and software at an ISP could be >used to enforce an internet drivers license law for example, with no >packets being forwarded by the ISP without hard authentication (even up >to biometrics) of the user. And it would be rather trivial to disallow >use of "unapproved" software to communicate over the net, making >enforcement of GAK much more complete. One could even use such a >mechanism to forbid use of any uncertified software on a net connected >machine, thus making it rather hard to use such rogue applications as >PGP. I strongly agree with you. While the motivation that lead to the development of such processors stems probably from the desire to thwart software piracy, it will make implementation of the "Internet Driver License" that much easier. [For those new to Cypherpunks, I consider the requirement for an Internet Driver License as inevitable as the sun raising tomorrow morning. While the event is technically in the future, it will occur with a certainty that it may just as well have already happened in the past. Read the graphic novel "Watchmen" if you don't understand what I am talking about. Sure, there is a small but no-zero probability that the Earth will be vaporized before sunrise by a timebomb left by aliens 3.5 million years ago. That's why I wrote "as inevitable", as opposed to "inevitable".] Smartcard readers and processors with encrypted instruction sets are just a first step to the ultimate goal, requiring biometric authentication to the applications on your machine. Some will claim they won't use such machines and stick to their old Pentium Pro's. I just threw out an old 286, because I couldn't find a single person that wanted it for free. Your 200 MHz Pentium Pro will be just as useful as that old 286 a few years hence. Sure, it will still operate and you can even run some old programs on it. But it simply will be unsuitable as your primary machine. Instead, you will find yourself using a box that runs code you can't possible figure out what it does and requires biometric authentication for login. Have fun, --Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. Put a stake through the heart of DES! Join the quest at http://www.frii.com/~rcv/deschall.htm

3 2

You have got to check this one out!
by owner-cypherpunks 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000">You have got to check out this awesome web page I found!!!<A HREF="http://www.moscowlive.com/2449"> CLICK HERE TO GO TO THE WEB PAGE !!! </A> [ you must be over 18 years of age to access it. :) ]</PRE></HTML>

1 0