December 2003 - cypherpunks-legacy

Re: Liberating the Bits
by dshipman＠ewol.com 17 Dec '03

17 Dec '03

At 07:59 PM 7/2/97 -0500, you wrote: >On Wed, 2 Jul 1997, Tim May wrote: > >> Hey! I got mine and I'm keeping it! >> Just because a bunch of gullible people believed my company's claim >> that we owned the results of our creative ideas doesn't mean that I >> have to be a sucker, too. >> > >If you're willing to admit you got yours under false pretenses, >the rest of us would like to have it back. Now. > >MacN > Wow... and not on AOL. Come on guys, from now on would you attach a midi laugh track to your jokes so the humor deprived will know its a spoof? dLs -----------------------------------------------

1 0

PGP security problems?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I saw this on another mailing list and was wondering if anyone has any information as to what kind of security problems PGP had. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Due to security problems Pretty Good Privacy, Inc., will be using a new signing key in our email correspondence, with an effective date of July 1, 1997. The new key can be downloaded from our keyserver at: http://www.pgp.com Any PGP Corporate key other than the following should be regarded as having been revoked: pub 1024/6C309BDF 1997/06/30 Pretty Good Privacy, Inc. Corporate Key <pgp(a)pgp.com> All employee keys with pgp.com addresses should also be regarded as having been revoked unless signed with the new Corporate Key. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7sc7UlfPVhsMJvfEQJMIACgwqhazDJfN6WqX2HBrq/klG0opmgAoOi6 btA8EoPROpqc9VA2V9fP1Nou =v0eg -----END PGP SIGNATURE-----

1 0

Re: PGP security problems?
by Philip R. Zimmerman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The recent spate of bogus keys uploaded to the PGP keyserver (with subsequent posts forged using our employees names showing up on mailing lists and newsgroups) is particularly troubling given the fact that they appear to be coming from within the ranks of the cypherpunks. While I still support the aims of the cypherpunks list, I must confess to being somewhat disillusioned by these attacks by long time members of the cypherpunks list. Even more troubling is the fact that there is evidence of the attacks being designed to aide one of PGP, Inc.'s competitors--Stronghold. I suppose I should have realized long ago that Gilmore <spit> and Sameer <fart> were in collusion to turn the cypherpunks against PGP in order to corner the encryption market for c2net's back-door, GAK'ed product. Although PGP's successful effort to get the Huge Cajones anonymous remailer shut down has helped to minimize the damage to our reputation, we may have to take action against other remailers, as well. I wish I had listened to the warnings of the late Dale Thorn, Toto, and Dimitri Vulis before it had come to this. In conclusion, I would ask everyone to be wary when receiving messages purporting to be from PGP, Inc. or from any of our employees. It is inevitable that some gullible fools will be taken in by the forgeries, but simple precautions such as checking the key signatures against the keys on our keyserver and perusing the message headers to determine the source of the email should aide in spotting forgeries. (You should be particularly wary of any messages originating from Canadian ISP's, as that seems to be the natural habitat of Mongers of every sort.) Philip R. Zimmerman <prz(a)pgp.com> -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7s2017MfpC8gEO7EQI7pACg0285HGGqLevqRTFZnzpB59PS8yoAn1Wp 0b7D8YcrmSn9VbjmAq55nKWx =fRuw -----END PGP SIGNATURE-----

3 2

Re: PGP security problems?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Anonymous wrote: > I saw this on another mailing list and was wondering if anyone has any information as to what kind of security problems PGP had. The following appeared on several newsgroups I belong to. --------- [Forward] --------- From: Will Price <wprice(a)pgp.com> Newsgroups: alt.privacy.anon-server,alt.fan.john-hinkley,alt.religion.tantric-sex,alt.anonymous-assholes,alt.cypherpunks,news.admin.net-abuse.therapy Subject: Security Problems at PGP Followup-To: alt.cypherpunks Date: 2 Jul 1997 20:02:22 GMT -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Anonymous wrote: > Does anyone have the inside scoop on the security problems at PGP? The problems encountered had to do with bogus keys of PGP employees being uploaded to the server. This has been rectified by the creation of a new PGP Corporate Key with which all employee keys must now be signed in order to be considered valid. The new PGP Corporate key, dated July 30, 1997, is now available on the PGP, Inc. keyserver. Will Price -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7slnQolbA5ByKtoEQJNNgCgyK89QB7xQiwhgPUeoB5gMqc2BmEAoJhO 14xzY3rKoguftPd0qYWZsTyx =+X4g -----END PGP SIGNATURE-----

1 0

Important Announcement for Barron's Online Subscribers
by Barrons Online 17 Dec '03

17 Dec '03

Dear Barron's Online subscriber: I'd like to make you aware of some important changes coming to Barron's Online in the next few weeks. Barron's Online is forming an alliance with The Wall Street Journal Interactive Edition, its sister Web publication from Dow Jones & Co. Barron's Online, the Interactive Journal and the soon-to-be-unveiled SmartMoney Interactive are pooling their efforts to provide investors with the Web's most comprehensive collection of business and markets news, commentary, financial information and personal finance tools -- all at a single subscription price. Beginning July 25, access to Barron's Online will be by paid subscription only. The price is $49 per year. But print subscribers to Barron's will be eligible for an introductory rate of only $29 per year. What does this mean for you? Barron's Online will still offer the key features you've enjoyed in the past, including our exclusive Weekday Extra columns. One noteworthy change: Barron's Online Dossiers will be replaced by Interactive Journal Company Briefing Books, which we expect you'll find equally useful. You get a chance to experience the combined offering on July 25. You can wait until then to register, if you wish. After July 25, the first time you come to Barron's Online you'll be asked to re-register and provide us with a credit card. Your card won't be charged until two weeks later, so you'll have a chance to look around. If you're not satisfied, you can cancel your account and you won't be charged. But here's an opportunity to extend that free trial. Register for the Interactive Journal now or any time before July 15 via a special offer link on the Barron's Online site, and your first eight weeks will be free. Cancel anytime before the eight weeks expire, and there's no charge. With free access for eight weeks, you'll have a chance to explore the Interactive Journal now and, in a few weeks, check out the revamped Barron's Online. For more information, and to receive the eight-week free offer, see <http://www.barrons.com/wsj_frame.html>. We're sure you'll agree that the combined power of these Web sites will be worth more than the subscription price we're charging. After all, more than 100,000 people already are subscribing to the Interactive Journal alone. Best regards, Howard Gold Neil Budde Editor Editor Barron's Online The Wall Street Journal Interactive Edition http://www.barrons.com/wsj_frame.html ======================================================================== If you do not wish to continue receiving these email alerts, send email to: stopmkt(a)lists.wsj.com If you have other questions, please call our customer service group at 1-800-369-2834. ======================================================================

1 0

Re: PGP security problems?
by Carolyn Turbyfill 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The email forgeries using bogus PGP keys to give the appearance that the messages are from PGP, Inc. and our employees are the result of a sick, twisted mind. Perhaps someone thinks they are being funny, but I, for one, am not amused. In order for the internet to function in a coherent, meaningful manner, people need to be able to have assurance that the email they receive accurately reflects the true source of the message and be able to verify the identity of the writer by checking for a valid signature. I urge the person or persons doing this to stop. Immediately! After I send this message to the cypherpunks list and receive it back in my email, I'm going to check the signature and the headers on it and if it turns out to be a forgery, like the others, then I'm going to be really, really mad. Carolyn Turbyfill <turby(a)pgp.com> "I'm not wearing any panties." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7tNBu5XWImkXCQiEQLiggCfcJmJBkepBVEDtktoSMtTV97f0uoAoNCe 6IrX5/0nUBjpcIq24XtMFDlK =0CHj -----END PGP SIGNATURE-----

4 3

Re: PGP security problems?
by Michael J. Iannamico 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please be advised that the message sent to the cypherpunks list purporting to be from Carolyn Turbyfill <turby(a)pgp.com> was a forgery. The PGP signature on the file, apparently from Marc Briceno <mark(a)digicash.com> may have been a forgery, as well, since it is unlikely that Marc would know whether or not Carolyn wears panties. It may be that the forger quite simply made a lucky guess. Oh! Not that I've been peeking up the women's skirts at the office. I'm in therapy now, and all of that is behind me. I must have just heard it from someone else in the office. Not that we're a bunch of perverts who sit around talking about that kind of thing, mind you. (I'd better shut up while I still have a job.) Oh! I know. This message must be a forgery, too. Yes, that's it...this message is a _forgery_! It's not me writing it, its that sick, demented, cypherpunk forger. I'm not backsliding. I attend all the meetings and I am taking my medication regularly. It's the _forger_, I tell you...the _forger_!!! Michael J. Iannamico <mji(a)pgp.com> "I'm feeling much better now." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7tbH2vmZC203a9iEQJjjQCg1IICgkrGCdiydWAlqjbpoxQ5YEEAoNco CjhwCCVEz/ALHinvGNhJHvDT =sjFj -----END PGP SIGNATURE-----

1 0

http://hipcrime.home.ml.org
by cypherpunks＠Algebra.COM 17 Dec '03

17 Dec '03

1 0

Re: Jeff's Side of the Story.
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

nobody(a)REPLAY.COM (Anonymous) wrote: >> > Beware... all of this is speculation, because huge.cajones was an >> > anonymous service, not even I can say with any authority that any >> > of the people named below had anything to do with the shutdown of >> > huge.cajones (or The MailMasher). However, there are a number of >> > coincidences of timing. > > Who was it that used the threat of a lawsuit to shut down the >remailer? > I, for one, would be more than happy to make certain that they >receive ample opportunity to "Make $$Money$$ Fast!!" by receiving >a mountain of information as to how to do so. > Anyone who would attack a remailer is probably involved in child >pornography and drug dealing and these perverts should be exposed >for what they are. Please see http://www.netscum.net/burnorg0.html for more info.

3 2

Re: PGP security problems?
by Philip Nathan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been a nervous wreck tonight, reading all of the forged messages revealing the secrets of a number of my fellow PGP, Inc. employees. It is only a matter of time until the forger gets around to me, so I might as well confess now that I've been stealing money from the company and selling PGP, Inc. company secrets to the competition. I'm not proud of what I've done, but I am desperate to get out of this madhouse. Pantyless women, men who shine their shoes twelve times a day to peek up the women's skirts. Spooks all over the place and Phil Zimmerman sending Tim C. May ASCII-art slams to the cypherpunks list (while blaming it on Dr. Vulis). The child-pornography ring and the incessant drug dealing within the company are bad enough, but what I find really intolerable is the support for terrorists and the plot to help secret government agencies rule the U.S. Of course, if you check the cypherpunk archives, you'll probably find that Tim May predicted all of this happening in a post he sent to the list in '92. Philip Nathan <philipn(a)pgp.com> There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key forgers is warranted: "Death to Everyone!" - ---------:---------:---------:---------:---------:---------:---------:---- Philip Nathan | Crypto Anarchy: encryption, digital money, philipn(a)pgp.com | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7tobvNv9MGSYz54EQL82QCfelOV54gMyMeSUhUM3gz3dS00TpgAoLpo nIAXn3NpRcJZ+bzV8Cd6NNu0 =l0oJ -----END PGP SIGNATURE-----

1 0