December 2003 - cypherpunks-legacy

Secure checksums
by nobody＠hidden.net 17 Dec '03

17 Dec '03

Timmy C. Mayhem's abysmal grammar, atrocious spelling and feeble responses clearly identify him as a product of the American education system. >\\\|/< |_ ; (O) (o) -OOO--(_)--OOOo- Timmy C. Mayhem

3 2

RE: Microsoft Authenticode key security
by Peter Trei 17 Dec '03

17 Dec '03

William H. Geiger III writes: > In <L0c53D131w165w(a)bwalk.dm.com>, on 03/05/97 at 07:44 PM, > dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) said: > > >"Bob Atkinson (Exchange)" <bobatk(a)EXCHANGE.MICROSOFT.com> writes: > > >> Actually, and sort of to the point, no, the keys never actually ever the > >> BBN box, except as part of a backup procedure in which they are > >> extracted in a doubly-encrypted form for which for security reasons you > >> need the manufacturer's help in restoring. > >> > >> To this day, no human or computer other than the box itself knows the > > >But do we necessarily believe what Microsoft people say? > > If Bill Gates got on national TV and told the world that the sky was blue > I'd have go outside and look for myself. Actually, around Redmond, gray skies are much more common. Really guys, If you want to attack Authenticode (and I personally consider it a bandaid on a dangerous system), then stealing or buying the key is not the approach to take. I see two possible approaches to prove it's weakness. 1. If they are using RSA, factor the public key. This depends on it's length. Considering the amount of cpu people seem to be able to muster for distributed cracks, etc, I suspect that 512 bit keys will soon be vulnerable (equiv = RSA 155). 2. Write a Trojan Horse ActiveX control which disables the Authenticode checking, then covers it's tracks. No, I'm not working on either of these. Peter Trei trei(a)process.com Disclaimer: I speak for myself, not my employer.

2 1

Re: Speech
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Homosexual Charles Platt <cp(a)panix.com> writes: <garbage> > Dmitri Vulis was kicked off my ISP many months ago for allowing multiple > logins under his user name and password, presumably so that his friends at > Brighton Beach could share his account without paying the $10 per month > for email+Usenet. At the very least, this indicates a certain ... um ... > lack of class. <more garbage> This is a lie with no basis in reality whatsoever. I'm glad that CHarles Platt and other homosexuals are dying from AIDS. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1

Re: New York Times report on FC97
by Dale Thorn 17 Dec '03

17 Dec '03

Timothy C. May wrote: > This is my view as well. > I welcome the clarifications Vince Cate has provided, and I wish him well > in Anguilla. And I welcome, as always, the various comments of Black > Unicorn about the offshore investment and offshore tax avoidance market. [snip] > At least here in sunny California (it ain't subtropical, but it's warm > enough for me most days) I can sit on my mountaintop and rant as much as I > want without fear that I'll be invited to leave. And only one of my assault > rifles was ever registered to me, courtesy of the fascist Dianne Fineswine > and her commie sympathizer friends. [Serious thought] Some people I know have found a haven they swear by in Costa Rica. Apparently you don't have to be rich to live there.

2 1

Medical Records Security
by John Young 17 Dec '03

17 Dec '03

The new "Protecting Electronic Health Information" report by the National Academy of Sciences is at: http://jya.com/pehi.htm (615K) There is quite a lot of crypto discussion. The NY Times featured this report on Page One today. It's worth reminding that this report and the recent one on secrecy both fault national encryption policy and emphasize that it's time to break the logjam caused by NatSec/LEA dispute with commerce, and get on with protecting the privacy of citizens from government and commerce working in cahoots. Note that commerce is seen as much a threat as government, with the looming probablility that government and commerce will unite against the citizenry, now as ever, both claiming to protect from the other, using their phony fight as a camouflage for royal screwing rights.

1 0

Re: toad
by Dale Thorn 17 Dec '03

17 Dec '03

Igor Chudov @ home wrote: > Dale Thorn wrote: > [about gilmore] > > I didn't mean he shouldn't read them, although if he did, it might > > be a first! I meant that if the messages pass thru him before any- > > one else gets to see them, well, better check them carefully... > i suggest that you write a script that checks on everybody, including > myself. it should basically subscribe to all mailing lists and store > checksums with hostnames indexed by message-id. I would if I could. You know how I love to produce those charts with [STATS] in the header. I'm a heavy user of difference-utility programs and personal "cooks" on the daytime job, but my problem here is I don't run a real O/S (I have Win95), and so getting the mail into a parseable format is prohibitively time-consuming. If the c-punks were a real threat to national security or something (what a hoot that would be!), you can be sure there'd be a lineup at the O/S utility window to get whatever traffic analysis s/w was available. Right now I do my part the hard way, i.e., hunt, peck, and hope the Windows system doesn't crash every 25 messages, which is its usual. Maybe IBM's are better - I use HP.

1 0

Re: Purifying Washington with Nuclear Flames
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

"William H. Geiger III" <whgiii(a)amaranth.com> writes: > In <v03007800af4415448ad4(a)[207.167.93.63]>, on 03/05/97 at 10:38 PM, > "Timothy C. May" <tcmay(a)got.net> said: > > > >At 1:00 AM -0400 3/6/97, E. Allen Smith wrote: > >>From: IN%"tcmay(a)got.net" "Timothy C. May" 5-MAR-1997 22:59:36.45 > >> > >>>Too bad your "assassination politics" doesn't extend to entire cities. I > >>>have concluded that having a terrorist group smuggle a nuke into D.C. woul > >>>not be altogether a bad thing. Besides dealing with the government problem > >>>it would also deal with a quarter of a million or more unemployable welfar > >>>addict leeches. > >> > >> I'm glad you say "altogether"... some of us live (or have friends or > >>family who live) decidedly too close to D.C. for such to be an attractive > >>possibility. Besides that, I'm certain there are some innocents in the city > >>just-born infants, perhaps? > > >War is never clean. Innocents always get caught in the crossfire. > > >If the U.S., for example, had avoided all actions in WW II which might > >have injured an "innocent" (babies, old women, schoolgirls, and so on...), > >the war could not have been prosecuted. Now maybe this is one option, one > >which ardent pacifists prefer, but most of us understand the practical > >realities that "innocents" often die in wars. > > >Nuking Washington is just a joke, of course. But I wouldn't cry any tears > >if I woke up one morning, turned on CNN, and was informed that a large > >crater appeared where D.C. once was. > > I doubt that there would be few that would. :))) > > I have always found the statment of "innocent civilians" to be an odd one > in a time of war. > > I have always beleived that all citizens held a collective guilt for the > actions of their government. It is only through the support of the citizens > can any government opperate wether through active support or through the > inactivity of not opposing their government. This not only holds true for > "democracies" for dictatorships as well. As such if the actions of a > government bring it to war their civilian population is just as fair game > as their troops in the field. I wholeheartedly concur. Nuke Washington, DC. Kill every American everywhere. Even if they voted for Perot. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

4 3

Re:Vebis radio jokes
by Ray Arachelian 17 Dec '03

17 Dec '03

On Wed, 5 Mar 1997, Vebis wrote: > Hmmmm, Tastes like chicken! Uh huh, huh Vebis, that was like kwel! Heh heh, heh heh! Do it again! So like Vebis, how did it feel to score with a male german sheppard? I bet you swallowed, huh huh, huh, 'cause you said "Tastes like chicken!" heh heh, heh heh, heh heh... > Vebis KOTM > Vebis and Buttmunch BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps =====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "If you're gonna die, die with your|./|\. ..\|/..|sunder(a)sundernet.com|boots on; If you're gonna try, just |/\|/\ <--*-->| ------------------ |stick around; Gonna cry? Just move along|\/|\/ ../|\..| "A toast to Odin, |you're gonna die, you're gonna die!" |.\|/. .+.v.+.|God of screwdrivers"| --Iron Maiden "Die With Your Boots on"|..... ======================== http://www.sundernet.com ========================= For with those which eternal lie, with strange eons even death may die.

1 0

MEETING: SF Bay Area Cypherpunks Meeting, March 8th 1997
by Hugh Daniel 17 Dec '03

17 Dec '03

From: Dave Del Torto <ddt(a)pgp.com> Subject: SF Bay Area Cypherpunks Meeting 8 March --Eudora-PGP-Plugin-5108864832-1354432592 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" This message and any updates thereto will be on the web at <http://www.stanford.edu/~llurch/cpunks970308.html> March 97 Cypherpunks Physical Meeting [1] Strange Sex Acts with Smart Cards (~60 min) [2] Recent Crypto Legislation Summary (~30 min) [3] pre-CFP97 Discussion Session (~30 min) [4] The Latest from Ian (~30 min) [5] Trust Metrics (~60 min) (Times may not sum due to ranting.) Date: Saturday 8 March 97 Time: (setup) 11 AM (meeting) 12 Noon - 6 PM (optional post-meeting dinner) Hosts: Rich Graves, Stanford Networking Systems <llurch(a)stanford.edu> Dave Del Torto, PGP Inc. <ddt(a)pgp.com> Place: Polya Hall / Turing Auditorium, Stanford University campus Directions: A (bit)map of the part of the Stanford Campus where the meeting will be held is at: <http://www-facilities.stanford.edu/transportation/PGrid4.html> From Hwy 101, take the Embarcadero exit all the way to campus. Turn right (clockwise) on Campus Drive. Turn left into the Jordan Quad parking lot. From Hwy 280, take Sand Hill. Turn right on Junipero Serra, then left (counterclockwise) onto Campus Drive. Turn right into the Jordan Quad parking lot. Notes: Ethernet to redundant T3 network connection, analog modem, Ricochet/Metricom repeater available. Very cool SVGA projector, old-fashioned overhead projector too Win95 and Mac CPU - AGENDA - [1] Strange Sex Acts with Smart Cards (~60 min) with Lucky Green <shamrock(a)netcom.com> - SmartCard Types - Digital Signatures and Smart Cards (an introduction) - Lamport Signatures: - Extended Lamport Signatures - opt'l: Compact Endorsement Signatures (needs mgmt approval) - DigiCash's BLUE Smart Card OS - Show and Tell (optional) Browsing strongly recommended beforehand: 1. Tutorial: "Digital Signatures and Smart Cards" <http://www.digicash.com/publish/digsig/digbig.html> 2. BLUE smart card OS info: <http://www.digicash.com/products/blue/blue.html> [2] Recent Crypto Legislation Summary (~30 min) with Greg Broiles <gbroiles(a)netbox.com> - summary of the recent crypto legislation - ProCODE - ECPA 1997 (s. 376) [3] pre-CFP97 Discussion Session (~30 min) see <http://www.cfp.org/> [4] The Latest from Ian (~30 min) with Ian Goldberg <iang(a)cs.berkeley.edu> - PDF417-barcode-to-ecash converter utility - RSA implementation for the Pilot [5] Trust Metrics (~60 min) with Raph Levien <raph(a)acm.org> - Doctoral thesis update: - measuring & comparing trust metrics (successes and failures) - some limitations of the distributed certification approach - Two-way Web anonymizing Existing Web anonymizers (www.anonymizer.com and onion routers) provide anonymity only to the browser of information. I will propose a protocol analogous to the one used by e-mail nymservers that also allows information to be published anonymously. This protocol fully supports caching, and also makes it relatively difficult to mount spam, harassment and security flaw exploitation attacks. If you have another agenda item, notify us ASAP! ________________________________________________________________________ Dave Del Torto +1.415.524.6231 tel ddt(a)pgp.com +1.415.572.1932 fax Pretty Good Privacy, Inc. http://www.pgp.com web ________________________________________________________________________ Rich Graves +1.415.725.7710 tel llurch(a)stanford.edu +1.415.723.0908 fax Stanford Networking Systems http://www.stanford.edu/group/networking --Eudora-PGP-Plugin-5108864832-1354432592 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: 5.0 alpha MessageID: uNpg9ovv+12PbhzqS9lMWnthZuklR97t iQCVAwUBMx+/sKHBOF9KrwDlAQEqVgP/YC0Y/7Ms9L3RYNlmPIjKh/kng6FRqgaa tzRHKynPXztEoOkJpbGo0l2xEPKNB/Y98MhJuSNDJOPq4lPRlBshvSpT/dxxI2Zu VSGMqO8EzOBHUXdYQ9Dgoh/8xlvq1sFwy9/lNOwlSS2+SD8dMfBDgOH5WUrcGx3c eL0PD01vqdk= =0dg5 -----END PGP SIGNATURE----- --Eudora-PGP-Plugin-5108864832-1354432592--

1 0

Re: Speech
by Trevor Goodchild 17 Dec '03

17 Dec '03

On Thu, 6 Mar 1997, Dr.Dimitri Vulis KOTM wrote: > Homosexual Charles Platt <cp(a)panix.com> writes: > <garbage> > > Dmitri Vulis was kicked off my ISP many months ago for allowing > > multiple logins under his user name and password, presumably so t > > that his friends at Brighton Beach could share his account without > > paying the $10 per month for email+Usenet. At the very least, this > >indicates a certain... um ... lack of class. > > <more garbage> > > This isa lie with no basis in reality whatsoever. > > I'm glad that CHarles Platt and other homosexuals are dying from AIDS. > > --- > > Dr.Dimitri Vulis KOTM > Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013,14.4Kbp Oh, my dear Doctor, I do regret that I have forgotten to inform you that last year, shortly after our sweet night together where you gave such good head and let me inside your sweet, though untight ass, that I have tested HIV positive. I hope this doesn't inconvenience you much, and send my regards to your sweet wife, whom I remember having a much tighter anus than your own - no offense, but she is much tighter. I hope this doesn't influence your feelings about me, and I hope that next time you drop by my home in Fire Island that you bring her along to share our bed. Oh, and next time I want you to stay the whole weekend; one night stands are fun, but waking up in an empty bed is not my idea of a good lay. With love, -- Trevor. --- Trevor Goodchild

1 0