December 2003 - cypherpunks-legacy

Re: Failure of centralized certificates - was "Experts slam PGP
by TruthMonger 17 Dec '03

17 Dec '03

e$pam wrote: > From: kilgallen(a)eisner.decus.org (Larry Kilgallen) > Subject: Re: Failure of centralized certificates - was "Experts slam PGP > encryption" > In article <5g8i92$4rs(a)news.ox.ac.uk>, patrick(a)gryphon.psych.ox.ac.uk > (Patrick Juola) writes: > >>As a corporation with diverse ownership, it should be much more complex > >>for VeriSign to subvert their own system for a cause than it would be > >>in the case of an individual such as Phil Zimmermann or David Sternlight. > The only ones we care about are those with "keys to the kingdom". > In the case of those who are so empowered, one needs positive > incentive for them to corrupt the database. Could some political > cause provide that incentive -- yes. Damn good thing that there are no political issues surrounding crypto. TruthMonger

1 0

1001 FREE Places to Promote Your Site!
by Strut Your Stuff 17 Dec '03

17 Dec '03

"Strut Your Stuff!" For 1001 FREE Places to Link your Web Site! http://www.choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ March Special! Send your 25 word classified ad to 100,000 e-mail addresses for $45.00. Add .20 for each additonal word. Send credit card info along with your ad to: ads(a)choicemail.com or visit our Site at: http://www.choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Targeted E-mail Addresses We will build you a fresh targeted e-mail list. Tell us what list you would like to target and we will build the list for you. The list will be yours to keep. Mail to the list as many times as you wish. Your will also receive the e-mail program, Pegasus for FREE. Only $50.00 per thousand names. Send credit card info along with number of addresses you would like and type of list. E-mail to: target(a)choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ FREE Newsletter Subscribe to our FREE Net Newsletter. The Net Newsletter offers free on-line marketing strategies, tells you where to find Free Internet services, products or services. To subscribe: Type "subscribe" in the subject line and send an e-mail to: subscribe(a)choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

1 0

Upcoming Crypto Actions
by John Young 17 Dec '03

17 Dec '03

In addition to the March 20 House hearing on Goodlatte's HR695 where Phil Karn will testify, there's a Senate hearing on Leahy's PRO-Code bill: March 19; 2:00 p.m. Commerce, Science, and Transportation To hold hearings on S. 377, to promote electronic commerce by facilitating the use of strong encryption. SR-253 This was postponed from March 11, perhaps in concert with Goodlatte to maximize coverage of the issue. Recall that the administration is due to shortly release its policy on international encryption agreements. And BXA has scheduled several actions to comply with The Wassenaar Arrangement: [November 29, 1996 (Volume 61, Number 231)] [Unified Agenda] >From the Federal Register Online via GPO Access [frwais.access.gpo.gov] [Page 62337-62348] DEPARTMENT OF COMMERCE (DOC) [Excerpts] --------------------------------------------------------------------------- Bureau of Export Administration--Final Rule Stage --------------------------------------------------------------------------- Regulation Sequence Title Identifier Number Number --------------------------------------------------------------------------- 669 Changes to the Commerce Control List to Accord With the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies.................. 0694-AB35 670 Changes to the Export Administrative Regulations To Implement the Guidelines and Information Sharing Provisions of the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use......................... 0694-AB40 676 Incorporation of the Wassenaar Arrangement Into Category 2 of the Commerce Control List; Expansion of License Exception CIV.............................................. 0694-AB48 [End excerpts]

1 0

Re: Silvernail Concedes / Hides In Shame
by TruthMonger 17 Dec '03

17 Dec '03

Roy M. Silvernail wrote: > For the rest of the list, my comments were sent to > an7575(a)anon.nymserver.com in private mail. He/she/it chose to quote > private mail to the list. Make of that what you will. If this is the case, Roy, I apologize. I didn't notice that you had changed the reply-to address on your response to bypass the anonymity of your reply, so it appeared in my headers in the same format as those replies I receive through the list. I sometimes forget that there are those who do not wish the contents of their private email to reflect on their public image. I wouldn't lose too much sleep over it, however, since many people on the list hate to have their bubbles burst and probably killfiled me after my first post. I'm still waiting for someone to reply to the actual issues I raised in my post, as opposed dealing with imaginary daemons that they tacked on to the thread. TruthMonger

3 2

DESCHALL v0.214 now available -- US/Canada only
by Rocke Verser 17 Dec '03

17 Dec '03

Greetings! DESCHALL Version 0.214 is now available in the US and Canada. DESCHALL is a client-server based approach to cracking the RSA DES Challenge. Information about DESCHALL is available at the following Web site: http://www.frii.com/~rcv/deschall.htm As indicated in the above Web page, Michael Paul Johnson has graciously agreed to distribute DESCHALL from his export-controlled North American Crypto Site. [Thanks, MPJ!] At the present time, the server is running at about 2% of capacity. The server can handle a *whole lot* more clients. Clients are available for Linux, FreeBSD, OS/2, Windows 95/NT, and Sparc. [Offers for guest accounts to compile other clients gladly accepted!] Pentium 120MHz clients can test about 600,000 keys per second. Good luck! -- Rocke Verser, rcv(a)dopey.verser.frii.com

2 1

Re: [ADMINISTRATIVIUM] ElGamal
by nobody＠hidden.net 17 Dec '03

17 Dec '03

The only `culture' Timmy C[ocksucker] May possesses is that cultivated from his foreskin scrapings. O O Timmy C[ocksucker] May | \___/ \_/

3 2

Re: Anonymous Nymserver: anon.nymserver.com
by Peter Trei 17 Dec '03

17 Dec '03

Someone mistitling itself "Truthmonger" writes: > Now that you seem to have actually read what I have written, perhaps > you might consider reading what you, yourself, have written. > I stated my case for contending that PGP=>2.5 has been compromised, > and got back wild-eyed demands for proof of that which I did not > claim, mainly, that PGP had been 'broken.' > To reiterate my original observations: > 1. The development of RSA was funded and controlled by the spooks. > i.e. - The National Science Foundation and the Navy. > 2. The campaign of persecution against Phil Zimmerman ground to a > halt once he agreed to PGP using the spook-developed RSAREF subroutines > to implement the RSA functions, instead of PGP's original subroutines. > If people with guns came to me and told me that software I had > written now had to use their subroutines, instead of my own, then > I would consider my software 'compromised', regardless of whether > or not I could immediately discern any anomalies in it. > It is far, far easier to 'build' a back-door, than to 'find' one. "TM" (I can't bring myself to use it's full name, since it is so totally inappropriate) has made the following claims: 1. "PGP => 2.5 has been compromised." 2. "It is far, far easier to 'build' a back-door, than to 'find' one." His main arguement rests on the fact that the later versions of PGP use RSAREF, rather than Phil's own code. As support of the first claim, he claims: > 1. The development of RSA was funded and controlled by the spooks. > i.e. - The National Science Foundation and the Navy. I'm not sure what you're referring to with "RSA" here - is it the algorithm or the company? If it's the algorithm, you may or may not have the intellectual capacity to verify it yourself - if you don't you have no business telling us it's compromised, and if you do, either publish the problem (and claim your 15 minutes of fame), or admit there is no hole you are aware of. There are plenty of people on this list who can follow the math, even if you can't. If it's the company, then you are either ignorant or lying. RSA has *not* had a good relationship with the USG, as those who have been following the matter over the years know well. Most recently, you will notice that it has licensed some of it's patents to a Japanese chip maker in an effort to avoid problems with US export restrictions. Is this the action of a USG patsy? > 2. The campaign > of persecution against Phil Zimmerman ground to a halt once he > agreed to PGP using the spook-developed RSAREF subroutines to > implement the RSA functions, instead of PGP's original subroutines. PGP 2.5 was released in March 1994, about a year after Phil was indicted. It took until January 1996 for the indictment to be dropped; nearly another two years. If a deal was struck, why did it take so long? The dismissal of Phil's persecution was almost certainly due to (a) the approach of the statute of limitations, and (b), the very high probability that he would be found innocent. if they took him to trial. The government simply ran out of legal pretexts under which to harass him. Now that your supporting assertions have been shown to be flawed, let's return to the original claims. 1. "PGP => 2.5 has been compromised." 2. "It is far, far easier to 'build' a back-door, than to 'find' one." The problem, TM, is that we have full source code, and anyone with the intelligence and knowledge required can check it independently. PGP and RSAREF are both distributed as source. There is not one byte of instructions or data that have to be accepted on faith - no precompiled libraries, no mysterious DLLs or ActiveX controls. If there is a backdoor, show it to us. Your second claim, that it is easier to build a backdoor than to find one, is true but not pertinant. Let's try an analogy. 1. You buy a house from a builder. You, being paranoid, wonder if the builder has included a secret door to enable him to enter the house without your permission. You investigate what you can, but in the end are left with some doubts. 2. You buy a set of blueprints from the builder, and examine them carefully for weaknesses. You then buy a plot of land of your choice, hire the workers you want, get materials from any supplier you wish. You supervise the construction yourself down to the last detail. Others who have purchased the same blue prints include trusted independent architects and construction engineers, who concur with you thatno hidden back doors can be found in the design. At this point, how worried are you that the builder has left himself an unauthorized entry? The situation with PGP >=2.5 is like the second scenario, not the first. What it comes down to "TM" is: Put up or shut up. You can't spread FUD in a situation where there is no unknown to Fear, no Uncertainty to deal with, and no Doubt that we have all the knowledge we need. Respond in a substantive manner. So far, you've avoided doing so. Peter Trei trei(a)process.com

5 6

Fred Cohen and dhp.com
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

For a good laugh, check out www.dhp.com where they posted their e-mail correspondence with Dr. Fred Cohen. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

VSA2048 Cryptography Module Source Code
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Anyone interested in receiving the source code of VSACM should e-mail DataETRsch(a)aol.com with VSACM V2.0 Source Code Request in the subject line. (BTW, about that "if they come in pretty disks" line, very funny.) Jeremy Yu-Ramos DataET Research

3 2

It's Only Money !!
by freedom＠econopromo.com 17 Dec '03

17 Dec '03

- FREEDOM NEWSLETTER - March 14th, 1997 ******************************************* We realize that some people prefer not to receive commercial E-Mail. We only want to keep INTERESTED recipients on our list. So... If YOU would rather not receive our mail - HIT REPLY - and type REMOVE in the message and subject area. This is an automated system. You will be removed from all future mail from us. Since this is an automated system, there is no need to say anything else, as nobody but the computer will see it anyway! You will be removed within 24. (You must spell REMOVE correctly!!!) ********************************* <for best viewing max your screen to largest size> ********************************* Standing for FREEDOM, LIBERTY, and AMERICA! We believe in Freedom of the Press and Speech. (These freedoms are essential for the development and growth of the Internet.) See our "Patriotic Quotes That Make Sense" at the end of this publication. DID YOU KNOW ....... The National Debt of the USA is now over $5.2 trillion ? ... the interest on the National Debt is $650 million A DAY ?? .... Recent projects supported by YOUR tax dollars: (USA) $37,500 for a potato chip machine for Moroco... $20,000 to study the mating calls of Central American toads ... $6,000 to research the sex life of Polish bisexual frogs ... $15,000 to find out how fishing boat crewmen cause trouble in Yugoslavian peasant towns.... $500,000 to revitalize downtown Ada, OK (population 16,000) ... $84,000 to study why people fall in love ... $566,000 to fly cows to Europe ... $6,100,000 to search for E.T. !! (source; American Way Features) Balanced Budget?? We doubt it will ever happen. Congress is having too much fun spending our money !! Interesting Web Sites of The Week: Citizens Against Government Waste: http://www.Govt-Waste.org/ PLEASE SUPPORT OUR SPONSORS. They are the Entrepreneurs that make the Free Enterprise System of America work. We make it EASY to receive FREE INFORMATION from our sponsors. ************************************ "HIT REPLY" INFORMATION SECTION: (please read!) ***Send a -SEPARATE- request for each information offer*** For each FREE information document desired, HIT REPLY - and then type the indicated Key Word in the subject -and- message area, and send. That's all you need to do. This automatic system will forward your request to the vendor. The vendor will send you the FREE INFORMATION that you desire. Remember, type the Key Word (s) or it won't work. Nothing else is necessary. (If you misspell the Key Word (s), it won't work!) Please DO NOT "QUOTE BACK" ANYTHING. If you do, the system can't find your request!! - - just type the Key Word (s). ************************************* ATTENTION CRUISE LOVERS! If you love Cruise Vacations, you need to subscribe to Cruise News. It's FREE. This E-Mail newsletter will come to your mailbox twice monthly. You will read the latest news from the Cruise Industry, special insider deals, reader contests (win a prize!), funny stories, and more. To subscribe HIT REPLY and type: SUBSCRIBE CRUISE NEWS _______________________________ ATTENTION GOLF LOVERS: Subscribe to Golfers Express! It will come to your E-Mail mailbox twice a month, with exciting new products and services & unusual offers for Golfers Only! Sometimes we feature great golf / vacation offers! It's FREE!! To subscribe - HIT REPLY and type: SUBSCRIBE GOLF _______________________________ ATTENTION BUSINESS OWNERS - RETAIL SALES MANAGERS, PROMOTERS, ETC. Reward your best customers with a deluxe, luxury vacation to Orlando, Florida! With our new Orlando Voucher your customer will receive four days and three nights at the Orlando / Westgate Ramada Inn Resort, (located right at the main gate of Disney World). Included with this voucher are TWO FREE ROUNDS OF GOLF, a $500 Fun Book, and more! Your cost for these exciting vouchers can be as low as $20 each. For complete details, HIT REPLY and type: VOUCHER (Vouchers are for incentive purposes only) _______________________________ Tax Trouble? Have not filed for a while? We will do older returns, federal, any state. Ask us how many years you need to file. Missing Information?? We will get it, talk to collections, do payment plan or offer. http://www.filetax.com . We will help, no guilt, no attitude. Interline Employee?? Check: http:www.filetax.com/flight.html For free Info by E-Mail - HIT REPLY and type: TAX ________________________________ They SELL FOR YOU & You make BIG$$$ - Join 4 for 1. There are No Others like this one! For FREE information - HIT REPLY & type: BIG$$$ ____________________________________ Lots of Cash, Fast!!! Get paid to watch television. For FREE Information - HIT REPLY & type: WATCH ____________________________________ Turn a $100 monthly investment into $3630 in Five months. No Risk; 100% money back guarantee. I'll show you how! If not satisfied in 90 days, for any reason, get your money back! For FREE Information - HIT REPLY & type: INFO22 *************************************** *************************************** *************************************** REGULAR RESPONSE SECTION: To respond to any of the following announcements, DO NOT HIT REPLY! Rather, follow the instructions in each ad. If sending an email for FREE information, you must create a NEW email and send it to the address in the ad. This is very important! If you hit "reply" for these ads, nothing will happen! You must send a separate request to each sponsor. *************************************** *************************************** *************************************** (This is a Fund Raiser, and merits your support) ***LATEST HOOPS SCORES & UPDATES*** 1-900-484-5800 ext. 8109 $2.99 per min. Must be 18 years. (Touch Tone Phone required) The proceeds from your call will be donated to Make - A - Wish Foundation ! (They Grant Wishes to Terminally Ill Children) ______________________________ For God so loved the world, that he gave his only begotten Son, that whosoever believeth in him should not perish, but have everlasting life. -- John 3:16 _____________________________ MLSA will give you a Standard Dish Network Satellite System at no charge. You pay first year programming $300, Install kit $79 and shipping $$ SAVE $199 E-Mail MLSA(a)marshill.com ______________________________ Secure America provides a complete Wireless Security System with 2-way monitoring for FREE, you pay/mth monitor fee-$29 Dealers earn $300 per system. E-Mail MLSA(a)marshill.com ________________________________ FREE leads from TV infomercials by well known Media Star! *** email Ann at 107773.75(a)compuserve.com for FREE info. ________________________________ http://www.netvendors.com Please visit our web site www.netvendors.com to view a dazzling and unpredictable selection of American hand made decorative items. We have beds, bird houses, ceramics, clocks, earrings, lamps, mirrors, pillows, planters, teapots, toys, and much more. When ordering enter code #3456 beside your name for free shipping. _______________________________ FREE Webpage, FREE joining, plus FREE Downline. No cost from start to finish - just join: http://www.gldb.com/?sss19612 *********************************************** ATTENTION ON-LINE ADVERTISERS! BE A SPONSOR AND GET YOUR MESSAGE OUT TO MILLIONS! ""f you would like to place your message before 1/2 million on-line readers a week, we can do it for you for as little as $10 per line! We mail to different people each week! We will get your message out to millions! We have a very economical plan to give you a real presence on the net. Find out how you can get a FREE week of E-Mail advertising!!! We can also do an "Exclusive" mailing of your letter alone. For the "do-it-your-self" marketer, we can also provide you with your own mailing lists for your own direct E-Mail marketing. For full details, HIT REPLY and type - ADINFO - in the message area. Our Auto-Responder will send you rates and ordering details. FREEDOM NEWSLETTER E-Mail Communications / Econo Promotions Garner, NC *********************************************** Quotes that make sense: " A wise and frugal government, which shall restrain men from injuring others, which shall leave them otherwise free to regulate their own persuits of industry and improvement, shall not take from the mouth of labor the bread it has earned. This is the sum of good government." -- Thomas Jefferson, First Inaugural Address, March 4, 1801 " When more of the people's sustenance is extacted through the form of taxation than is necessary to meet the just obligations of government and expenses of its economical administration, such exaction becomes ruthless and a violation of the fundamental principles of a free government." -- Grover Cleveland, Second Annual Message, December, 1886 "The death of democracy is not likely to be assassination from ambush. It will be a slow extinction from apathy, indifference, and undernourishment." -- Robert M. Hutchins, Great Books (1954) "The point to remember is that what the government gives, it must first take away." -- John S. Coleman, Address to Detroit Chamber of Commerce

1 0