December 2003 - cypherpunks-legacy

No Subject
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Quoting: http://www.msnbc.com/onair/nbc/mtp/default.asp Tune in to Meet the Press with Tim Russert on Sunday... check local listings for details. Sunday: Meet the Press will look at crime, terrorism, national security, and foreign campaign contributions. Moderator Tim Russert will speak with FBI Director Louis Freeh. This week's panelist will be NBC's Pete Williams, and the roundtable guest will be Elizabeth Drew, author of Whatever it Takes. Meet the Press transcripts are usually available three hours after the show airs.

1 0

Full Strength Stronghold 2.0 Released Worldwide
by sameer 17 Dec '03

17 Dec '03

For Release May 5, 1997 C2Net Software: Douglas Barnes +1 510 986 8770 UK Web: Dave Williams +44 113 222 0046 Full-Strength Stronghold 2.0 Released Worldwide C2Net President Sameer Parekh Rejects Weak Keys, Back Doors Oakland, CA - C2Net Software, Inc. annouced today the worldwide availability of Stronghold 2.0, a major upgrade to their secure web server based on Apache. With this release, Stronghold has added more functionality than ever, including uncompromised security, web-based configuration, and new protocol support. "The Stronghold web server -- like all C2Net products -- supports full-sized keys, and will never support government back doors," said C2Net president Sameer Parekh. "We have development teams around the globe working on our products, free from US export control policy. Even if some of these countries cave in to US demands, we'll still be able to produce first-rate, uncompromised security products." Others Use Compromised Security In a recent announcement, Netscape Communications announced plans to include government back doors in their products. "By implementing this so-called 'key recovery', Netscape is getting a small increase in key length in exchange for putting your keys in the hands of the government," said Parekh. "This the same government that hired Aldrich Ames, the same goverment that has IRS employees surfing taxpayer databases at will. What do you think is going to happen to your keys?" According to cryptography expert Bruce Schneier, "There is absolutely no business case for key recovery. Any benefit you get from longer key lengths is offset by the enormous security risk of concentrating keys in a few hands." Current "export" versions of Netscape and Microsoft web servers use a weak 40-bit cipher that can be broken in hours by any bored systems administrator or college student with access to a few hundred idle machines. By comparison, all C2Net software can use at least 128-bit keys. To understand this difference, imagine that the hundreds of computers needed to crack a 40 bit key in a few hours were compressed into a cube an inch on a side, and you built a computer the size of the Earth out of these cubes, it would still take this computer more than four times as long to crack a 128 bit key. It's easy to find a few hundred computers idle at any medium-sized business or university; Earth-sized computers are still relatively uncommon. Stronghold Gaining Market Share In several recent surveys, Stronghold has emerged as a leading contender in the web server market. An O'Reilly and Associates/Netcraft survey of secure web servers in use on the Internet found that Stronghold was second only to Netscape. The monthly Netcraft survey of all web servers on the Internet has indicated for some time that Stronghold is also the second most popular commercial web server for the Unix platform. "We've been steadily gaining market share," indicated Parekh, "and to a great extent it's due to our firm stand that we won't sell deliberately weakened security products to our customers." Features in Stronghold 2.0 "We've redesigned the security interfaces and built on the new Apache 1.2 code base," commented Mark Cox, Stronghold product manager at UK Web. "Stronghold has had many productivity and performance enhancements and it is now fully compliant with the new HTTP/1.1 standard." The HTTP/1.1 standard is a significant update to HTTP/1.0, the protocol that governs how web browsers and web servers communicate. HTTP/1.1 brings many new features to the table, including improved content and language negotiation, improved persistent connections, and better recovery from interrupted transfers. (For more information on HTTP/1.1, see http://www.apacheweek.com/features/http11) Stronghold 2.0 also includes a web-based configuration manager, allowing web administrators to securely administer their sites from the web browser of their choice. "We've had a lot of requests for this feature as Stronghold has grown in popularity," said Douglas Barnes, C2Net Vice President. On the security front, the new release includes support for Secure Sockets Layer (SSL) version 3, which provides stronger security and more flexibility in choosing ciphers. Background UK Web Limited is a leading Internet services company specialising in server technology, Internet security, business solutions and effective site design. C2Net is the leading worldwide provider of uncompromised network security software. Netscape Navigator and Netscape Enterprise are trademarks of Netscape Communications Corporation. Microsoft Internet Explorer and Microsoft Internet Information Server are trademarks of Microsoft Corporation. Stronghold and SafePassage are trademarks of C2Net Software, Inc. Portions of Stronghold were developed by the Apache Group, and were taken with permission from the Apache Server http://www.apache.org/. Stronghold also includes software developed by Eric Young (eay(a)cryptsoft.com)

4 3

Ebonics: The Finale
by azur＠netcom.com 17 Dec '03

17 Dec '03

Oakland school officials drop ebonics references Associated Press OAKLAND, Calif.-The Oakland public schools African American Task Force has dropped all references to ebonies in a final report about improving education for black students. The district caused a national controversy four months ago when it suggested that ebonies, or black English, was a second language that is "genetically based." The final report, obtained by The Oakland Tribune, still emphasizes improving black students' language skills, but it makes no reference to ebonies. There is also no reference to black students speaking a separate language. And provisions suggesting the district pursue federal bilingual funding for black students, as it does for children who speak Spanish or Chinese at home, have been deleted. The U S. Department of Education quickly dismissed the latter idea when it was raised in December. Instead, the 17-page report calls for better language and reading programs, additional tests to measure the language skills of students who speak black English, and expansion of the Standard English Proficiency program. The task force says the district should aggressively recruit black teachers and offer help to black teachers who have not passed the state teaching exam. The task force also recommends hiring a coordinator specifically to improve the education of black students and a budget of nearly $2 million over five years to achieve the goals. The task force's work is an attempt to improve the dismal record of Oakland's black students. Black students, who represent 53 percent of the district, make up 71 percent of special education classes, 37 percent of gifted classes and 80 percent of suspensions. --end PGP encrypted mail PREFERRED (See MIT/BAL servers for my PK) PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear (N7ZEZ) | Internet: azur(a)netcom.com 7075 West Gowan Road | Voice: 1-702-658-2654 Suite 2148 | Fax: 1-702-658-2673 Las Vegas, NV 89129 | --------------------------------------------------------------------- God grant me the serenity to accept the things I cannot change; The courage to change the things I can; The weapons that make the difference; And the wisdom to hide the bodies of the people that got in my way;-) "Surveilence is ultimately just another form of media, and thus, potential entertainment." --G. Beato "Without censorship, things can get terribly confused in the public mind." -General William Westmoreland

2 1

[STEGO] One-time pads
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Timmy C. Mayonnaise sexually molests little children, farm animals, and inanimate objects. < > < > V )_.._( V Timmy C. Mayonnaise \\ <____> // ~ <______> ~ > /~\______/~\ // /~\_____/~\ /_\ /~\____/~\ /_\ /~\___/\~\ _/_\/ \___/\__/__\/ \___/__\/

2 1

Thanks for signing up!
by The Dilbert Trivia Game 17 Dec '03

17 Dec '03

Hi from Yoyodyne! This message is to let you know that you're signed up for The Dilbert Trivia Game. Welcome! You'll get questions e-mailed to you on Tuesdays, your answers are due back by 11 p.m. Eastern Time on Sundays, and you'll get your scoring messages on Mondays. It's that simple. When your questions come, you'll be asked to send your answers to dogbert(a)yoyo.com in this format: * Make sure your Player ID -- which looks like this (123456di) -- is on the Subject line of the message you send back with your answers. * Each answer must be preceded by one of these symbols # and each answer must be on its own line. * Each answer must be the letter of the multiple choice answer you like best. Let's repeat. The answer is the letter of the multiple choice selection you like best. It works like this: If one of the questions asks for the name of the evil human resources director, we'll say: "What is the name of the evil human resources director?" Then we'll list these choices: A -- Catbert B -- Ratbert C -- Dogbert You know that Catbert is the evil human resources director, so you'll send back e-mail with your Player ID in the Subject line, and a multiple choice selection in the body of the message that look like this: # A That's pretty much all there is to it. For all the fine print on how to play, the schedule, etc., e-mail these addresses for the autoreply of your choice: How to Play -- dogberthow(a)yoyo.com Official Rules -- dogbertrules(a)yoyo.com FAQ -- dogbertfaq(a)yoyo.com Talk to you soon! P.S. We promised you an answer to this sample question when you signed up: * * * Dilbert is worried that if head count is reduced by 50 percent, all the smart people will leave The boss says: A -- Would that be a bad thing? B -- If only half the people go, how could that be all the smart people? C -- Could you organize a goodbye potluck lunch for them The correct answer is #C. --- Yoyodyne Entertainment "Where the future begins...tomorrow." win(a)yoyo.com

1 0

http:--www.cnn.com-TECH-9705-04-web.libel.ap-
by Jim Choate 17 Dec '03

17 Dec '03

CNN logo navigation Infoseek/Big Yellow Pathfinder/Warner Bros Tech banner Puzzled about doing real business on the Web? rule CAUTION: ANYTHING YOU POST MAY BE USED AGAINST YOU Libel May 4, 1997 Web posted at: 9:51 p.m. EDT (0151 GMT) In this story: * When slander becomes libel * Privacy issues * E-mail can make it a federal issue * The wrath of large corporations (AP) -- When the Founding Fathers wrote the First Amendment protectingfreedom of the press, they never imagined millions of Americanswould someday have their own version of one sitting in their backrooms. But with the advent of the World Wide Web, that's exactly whathas happened. And from this revolution has emerged a new legalquandary: Just what standards are private individuals to be held towhen it comes to what they "publish" on the millions of Web pagesand other online forums that serve as the world's soapbox? To a great extent, the answer thus far is this: No one knows.With the Web revolution less than 3 years old, a body of case lawhasn't yet been built up. But lawyers who study online issues dohave some observations -- and advice. When slander becomes libel First off, they note, the line between slander, once the realmof individuals, and libel, the bane of publishers, has beenblurred. It used to be that spreading malicious gossip aboutsomeone down at the barbershop could lead to charges of slander.But slander, by definition spoken, was hard to prove and generallydidn't reach enough people to do any major harm. Post that same information where it can be read by millionsonline, however, and you've suddenly entered the realm of libel --governed by stricter laws originally written to cover printpublications. "Let's face it," says Mark Rasch, director of informationsecurity law and policy at the Center for Information Protection atScience Applications International Corp. in McLean, Virginia. "If I wereto print up a handbill saying bad things about my neighbor thatwere false, at most I could distribute a couple of hundred of them.With the Web, I can now damage his reputation worldwide." The law is clear: Libel consists of publishing a false anddefamatory statement about an identifiable person, causing injuryto the subject's reputation. Often tied to it is the legal notionof defamation, defined as that which exposes a person to hatred,ridicule or contempt, causing them to be shunned or injuring theirbusiness or calling. Truth is always a defense against libel, so if your Web pagesays someone has two heads and they do, you're fine. But saythey're a murderer and you can expect someone to come asking forsome proof -- and possibly a bill for damages if you don't have any. Privacy issues Then, there's invasion of privacy. It's one thing to pass alonga juicy bit of gossip to a friend. It's quite another to post it tothe Web. "Let's say, for instance, you disclose some private fact aboutsomebody -- say, their medical records. Or you snuck into theirhouse and took a nudie photo of them and put it up on the Net. Thatwould be a no-no under civil law and they could sue for damages,"says David Banisar, staff counsel for the Electronic PrivacyInformation Center in Washington, D.C. Although few of these cases have actually gone to court, lawyersoften are called in when things get ugly. "I know of a few cases where the ex-husband and ex-wife havegone after each other on the Net," Banisar says. "In oneinstance, the ex-wife put up a diatribe page on what a scumbag hewas and how he wasn't paying his child support -- and gave out hisphone number so suitably angry women could take it up with him." Remember, too, that the Internet's reach magnifies everything inthe eyes of the law. E-mail can make it a federal issue Shouting "You jerk, I'm gonna belt you one!" at a carelessdriver who runs over your mailbox won't get you into trouble. Butposting the threat on the Internet is dangerous. It's all aquestion of reach: Anything done over a telecommunications deviceis automatically an interstate communication. "This suddenly makes it a federal issue if you e-mail,"Banisar warns. State statutes vary, but when federal laws come into effect, anycommunication containing a threat to kidnap or injure a personcarries with it the possibility of imprisonment up to five years ora fine of up to $1,000. And an entirely different level of concern pops up when theobject of the threat is an elected official. Like the "no jokes"signs posted by airport metal detectors, the FBI has no sense ofhumor when it comes to threatening officeholders. "We can't forget all those idiots arrested for sending threatsto the president. So don't send threats to the president overe-mail. It's a federal crime," Banisar says. Fraud is another sticking point. It's illegal everywhere, ofcourse. But the Federal Trade Commission has taken an especiallyhard line against fraud on the Net. Send a snail-mail chain letterasking for money and you might get a call from postal authorities.Try it on the Web, however, and you'll be investigated by the FTCforces who track online scammers. The wrath of large corporations But in the end, the biggest vulnerability of any self-publisheron the Web is probably the wrath of large corporations. You can say their logos are ugly and their presidents are jerksand they don't flinch. But try using any variety of a heavilytrademarked name or image on your site and watch the injunctionsflow. Generally speaking, it's other businesses who get into trouble.But, once in a while, an individual will set out to make a point --and get a legally phrased e-mail in response. Several cases haveresulted in Web sites' being taken down, including individuals whoposted statements against Kmart and McDonald's. Overall, remember that putting words or pictures up on your Webpage is just like publishing them in the newspaper. Use Rasch's simple test: "What you should avoid putting on theWeb is the same stuff you'd avoid putting on leaflets and handingout on the street." Copyright 1997 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed. rule Related sites and stories: * The Communications Decency Act: Related sites and stories - June 12, 1996 External sites are not endorsed by CNN Interactive. rule Watch these shows on CNN for more sci-tech stories: CNN Computer Connection | Future Watch | Science & Technology Week rule Message Boards Sound off on our message boards Tell us what you think! You said it... [INLINE] Puzzled about doing real business on the Web? rule To the top © 1997 Cable News Network, Inc. All Rights Reserved. Terms under which this service is provided to you.

1 0

Re: Full Strength Stronghold 2.0 Released Worldwide
by TruthMonger 17 Dec '03

17 Dec '03

Tom Weinstein wrote on cryptography(a)c2.net: {With Perry dripping Sameer's sperm from his mouth as his C2Nut Jackboots soiled the message with the following:} [I felt I had to let this go through, but I would advise that those involved restrict themselves to calmer comments from here on... --perry] > sameer wrote: > > > > In a recent announcement, Netscape Communications announced plans to > > include government back doors in their products. "By implementing this > > so-called 'key recovery', Netscape is getting a small increase in key > > length in exchange for putting your keys in the hands of the > > government," said Parekh. "This the same government that hired Aldrich > > Ames, the same goverment that has IRS employees surfing taxpayer > > databases at will. What do you think is going to happen to your keys?" > > This is utter crap, and I'm sure you know it. All we're going to do is > provide an OPTIONAL (and I mean really optional, not the way the feds > use it) way for administrators to recover private keys. This is not > GAK. I will never work on a product that includes GAK. > > Oh, but I guess saying that Netscape is responding to customer > requirements by including support for corporate key recovery wouldn't > make such good press release spam. Crap seems to be such a violent, obscene word when used to describe C2Nut's bullshit. Good thing that the cryptography list has Perry to protect the list subscribers from StrangleHold's competition defending themselves from Sameer's self-serving denigration of their products. Too bad C2Nut doesn't have a StrangleHold on the cypherpunks list, as well. Then they could use censorship threats to make us all be good little boys and girls, too. I expect all PR statements to have a modicum of bullshit in them and I resent any lame-fuck-would-be-Hitler trying to put a lid on the response to that bullshit. The fact that StrangleHold seems to have so many things to hide and such a strong need to control discussion of its product indicates to me that perhaps their product cannot stand up to the light of public scrutiny and criticsm. C2Nut's bottle-fed cryptography list may be fine for those who are afraid to know too much about StrangleHold, but anyone who owns a wetsuit needs to subscribe to the cypherpunks list for the good, old-fashioned pissing contests that send the pretenders home with their tails between their legs. (Anyone hear from DataERetch lately?) PissMonger

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash latent cut ek reord"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"wazoo"} = "<remailer(a)wazoo.com> cpunk mix pgp hash latent cut ek"; $remailer{"shaman"} = "<remailer(a)lycaeum.org> cpunk pgp hash latent cut ek"; $remailer{"hidden"} = "<remailer(a)hidden.net> cpunk pgp hash latent cut"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 5 May 97 6:45:39 PDT remailer email address history latency uptime ----------------------------------------------------------------------- nym config(a)nym.alias.net *+*#+#+++**# 3:30 99.99% cyber alias(a)alias.cyberpass.net ++++*-++***# 19:39 99.98% balls remailer(a)huge.cajones.com *####*####*# 1:52 99.97% squirrel mix(a)squirrel.owl.de +-++++++++- 1:54:28 99.94% weasel config(a)weasel.owl.de +-++-+++++- 1:57:01 99.90% lucifer lucifer(a)dhp.com ++++++++++++ 35:18 99.90% mix mixmaster(a)remail.obscura.com ++.-.-.---.- 8:18:24 99.87% replay remailer(a)replay.com ***++- * -* 54:35 98.34% jam remailer(a)cypherpunks.ca ******* *** 8:52 97.43% winsock winsock(a)rigel.cyberpass.net -------..- 5:58:48 97.30% hidden remailer(a)hidden.net #+#**#+# + 5:34:09 95.94% reno middleman(a)cyberpass.net -+.--+-.+ 1:19:01 90.79% dustbin dustman(a)athensnet.com -..-- 3:59:41 78.48% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Problems with posts
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hmmmm I seem to be having some problems with getting my messages posted to the list (at least they are not showing up back here). :( This is just a test so please ignore. Thanks, - -- - ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. Finger whgiii(a)amaranth.com for PGP Key and other info - ----------------------------------------------------------- Tag-O-Matic: Win3.1? For fast relief call 800-3-IBM-OS2. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Registered User E-Secure v1.1 ES000000 iQCVAwUBM24DHo9Co1n+aLhhAQFQAwP+L3AXu9AbQsCuaNroI3UfuyAKGO70MiMM MD4bxRENaBwRc4A1aU6QsZosbuyRZfOZqCQ67ANI7Ecowfij9rc92wOvl+ePhYjS ObvDdDoDRpDqBDQ8oVimDkIwXJ8z79xxK6s3F0uevSb4pSlz3MZHrf+BoDxc5L1u mA403n2n+W8= =cAdA -----END PGP SIGNATURE-----

1 0

Win up to $4,950.00 Instantly with Cyber Casino
by Service＠iBase.net 17 Dec '03

17 Dec '03

Win up to $4,950.00 Instantly with Cyber Casino, found at http://www.iBase.net/InternetCasino. See you there! "Because face it......MONEY MATTERS!" /////////////////////////////////////////////////////////////////////////////// If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings. ////////////////////////////////////////////////////////////////////////////////

1 0