December 2003 - cypherpunks-legacy

Re: Tim's worst nightmare
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> Woman in Standoff Shoots at Police > Filed at 10:12 a.m. EST > By The Associated Press > ROBY, Ill. (AP) -- Gunfire rang out again at the home of a > woman involved in a month-long standoff with authorities who > have a court order to bring her in for psychological testing. Just imagine a few hundred (or thousand) people getting together in Roby, Ill., defying the police-ordered half mile ban around her house and sitting down peacefully between her and the police...

2 1

WPI Cryptography Seminar
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: goya.WPI.EDU: christof owned process doing -bs Date: Mon, 27 Oct 1997 13:26:02 -0500 (EST) From: Christof Paar <christof(a)ece.WPI.EDU> To: ecegraduate(a)ece.WPI.EDU, ma-clipboard(a)wpi.WPI.EDU, DCSB <dcsb(a)ai.mit.edu>, ecefaculty(a)ece.WPI.EDU, faculty(a)owl.WPI.EDU, graduate(a)owl.WPI.EDU Subject: WPI Cryptography Seminar MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Christof Paar <christof(a)ece.WPI.EDU> Starting next week, we will again offer an open Cryptography Seminar at WPI. We will meet (mostly) Tuesdays at 4:30. Some of the talks until the end of this year are - Erik DeWin, K.U. Leuven, Belgium: The P1363 IEEE Public-Key Standard. - David Jablon: A new network identification system. - Jens-Peter Kaps, WPI: High-speed implementation of DES on FPGAs. - Christian Cachin, MIT: Unconditionally secure key agreement. - Tobias Lohrenz and Kai Wollenweber, U. Siegen, Germany: Implementation of a key-agile ATM security module. IF YOU WANT TO RECEIVE ANNOUNCEMENTS FOR THE CRYPTO SEMINAR, please send me a brief reply and I put you on the mailing list. Otherwise you won't here from us again :) Regards, Christof Paar PS: All students in my current or past cryptography courses are automatically on the list; please don't respond. ************************************************************************* Christof Paar http://ee.wpi.edu/People/faculty/cxp.html Assistant Professor email: christof(a)ece.wpi.edu Cryptography Group phone: (508) 831 5061 ECE Department, WPI fax: (508) 831 5491 100 Institute Road Worcester, MA 01609, USA ************************************************************************* For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: [NEW] mixer@htp.org (
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Tsuyoshi Hayashi <take(a)barrier-free.co.jp> writes: > > Please add mixer(a)htp.org, the first public remailer in Japan, > was setup by a member of cypherpunks-j. > > mixer(a)htp.org is probably: > > $remailer{"mixer"} = "<mixer(a)htp.org> cpunk mix pgp"; Congrats for the new remailer and a related question: Are the cypherpunks-e and cypherpunks-j lists now fully included into the list-distribution from and to the other three nodes? (The last thing I can recall was, that there were still some problems with the distribution) Ciao Harka ... "Use a Cipher - Be Free!" -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBNFTydTltEBIEF0MBAQE4Igf+L6+JAkmntV4rNalAU63f2nYtxWW0Fvpl EK4IrKyVEAHRsduvanzoTdHlrn46ZIc5lzyUgUcEiBmPxWUyAqNrWAPyWkYGdBkW NlyXzoXrNk/cY4CsU9h9FmrIxW1fCoF6vc5JPm7fCpEweQqwAP4zE5zlCL4U1/Ny /+kYEIH5hhL5L1DHmNNLWVMcdP2JYU8Q1M6mYWf0y92fnCZfPY0mW7G5U5ONJqVR XrUlVMm4PD2TsUXmgKLTSqu24t82fNVgJ3U/bSDQGhA/Hx+B+hwuBvSBSF9XAO4G lUg8dzraUaGOrcChLwVv/ChBueBedxol+vpItsz2FIJE0sPTEpTpIQ== =XGoj -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

Re: FCPUNX:puff pieces vs tough crypto issues (Re: Singapore TOILET
by Eli Brandt 17 Dec '03

17 Dec '03

Declan McCullagh wrote: > >From my perch in Washington, I see PGP 5.5/CMR as an existence proof that > key recovery can be done. So far the crypto-advocates have been able to > wave around the Blaze et al white paper that says we don't know how to do > it. Even Dorothy Denning agreed. But now when a mandatory GAK bill goes to > the House floor, all Rep. Solomon etc. have to do is wave around a > shrinkwrapped copy of PGP and say: "I bought this for $19 at the Egghead > shop at 21st and L." Details will be lost in the fearmongering. Key detail lost: what the white paper says is that we don't know how to do it *right*. -- Eli Brandt | eli+(a)cs.cmu.edu | http://www.cs.cmu.edu/~eli/

1 0

key recovery meeting/demonstration in DC, 11/5
by Greg Broiles 17 Dec '03

17 Dec '03

See <http://gits-sec.treas.gov/const.htm>; there's going to be a meeting discussing key recovery technology and legislation in Washington, D.C. on November 5. I don't really have time to track down the organizational pedigree of "GITS" (Government Information Technology Services), the institution organizing the conference, but they've got space on the Dept of Treasury's web server. The meeting features, among other folks, William Reinsch, undersecretary at the Dept of Commerce, and an unnamed luncheon speaker who will discuss the future of KR legislation. The cost is $100, and they want you to register by today. Am unsure how easy it'd be to crash the conference - it's at the Omni Shoreham Hotel. The web page features plenty of obfuscation/confusion which tries to link KR technology with encryption/security technology, suggesting that a combination of the two (or merely the former) is required to allow widespread use of the Internet for commerce and data transfer. If anyone happens to attend, I imagine that list subscribers would be interested in a summary of the comments, etc. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

3 3

"I have in my hand a working message recovery system"
by Tim May 17 Dec '03

17 Dec '03

(I've changed the thread name to "I have in my hand a working message recovery system." Some of you may know what this is a reference to.) At 12:47 PM -0700 10/27/97, Eli Brandt wrote: >Declan McCullagh wrote: >> >From my perch in Washington, I see PGP 5.5/CMR as an existence proof that >> key recovery can be done. So far the crypto-advocates have been able to >> wave around the Blaze et al white paper that says we don't know how to do >> it. Even Dorothy Denning agreed. But now when a mandatory GAK bill goes to >> the House floor, all Rep. Solomon etc. have to do is wave around a >> shrinkwrapped copy of PGP and say: "I bought this for $19 at the Egghead >> shop at 21st and L." Details will be lost in the fearmongering. > >Key detail lost: what the white paper says is that we don't know how >to do it *right*. Agreed, but this is just the kind of "detail" Congress is already so good at ignoring. Declan is right, that Congress will hold PGP 5.5 and its CMR and "Policy Manager" up and will say, "See, even industry is demanding message recovery. And here's a program that already does it." Granted, CMR will not meet FBI requirements for real-time access, and will not meet SIGIN/COMINT wishes for surveillance-friendly systems, but it's a start. I'll bet, as I said in a post a few hours ago, that if CMR is widely adopted, that various regulatory agencies like the FTC, SEC, OSHA, etc., will begin to impose rules about how and where CMR archives are stored.... Then the battle will be 80% over. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Fucking Minors / Re: NABMLA embattled -- mirror sites?
by George Spelvin 17 Dec '03

17 Dec '03

Human Gus-Peter wrote: > Anonymous wrote: > > I'm not sure the right to free speech includes the right to endorse guys > > fucking little boys, whether they give it a moniker like "transgenerational > > love" or not. Any sex with a minor is rape, since they can't legally give > > consent. > > That's right. People who are too lazy to drive a fourteen year old > to New Mexico, where they can legally fuck their brains out, should > go to jail for a long, long time. > When I cruise the children's chat lines, I always tell them I would > like to meet them in New Mexico and fuck their brains out. That's > legal. I consider this issue so important that I thought it appropriate to reply to it even before it arrived at the Cypherpunks mailing list. I believe that people should be required by law to provide not only their true identity when using the Internet for communications, but should also be required to provide their true physical location, so that law enforcement agencies will know whether what they are writing is legal or illegal in the state from which they are sending the communication. > What I love about the law is that it gives us clear guidelines to > help us recognize the difference between those filthy fucking > child-molesting perverts fucking fourteen year olds in California, > and the decent, upstanding citizens fucking the fourteen year > olds in New Mexico. Amen! > God Bless America, > LegallyFuckingFourteenYearOldsMonger George Spelvin "Legally fucking Eighteen Year Olds in California."

1 0

Re: NABMLA embattled -- mirror sites?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Anonymous wrote: > I'm not sure the right to free speech includes the right to endorse guys > fucking little boys, whether they give it a moniker like "transgenerational > love" or not. Any sex with a minor is rape, since they can't legally give > consent. That's right. People who are too lazy to drive a fourteen year old to New Mexico, where they can legally fuck their brains out, should go to jail for a long, long time. When I cruise the children's chat lines, I always tell them I would like to meet them in New Mexico and fuck their brains out. That's legal. What I love about the law is that it gives us clear guidelines to help us recognize the difference between those filthy fucking child-molesting perverts fucking fourteen year olds in California, and the decent, upstanding citizens fucking the fourteen year olds in New Mexico. God Bless America, LegallyFuckingFourteenYearOldsMonger

1 0

Re: Fucking Minors / Re: NABMLA embattled -- mirror sites?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

George Spelvin wrote: > Anonymous wrote: > > That's right. People who are too lazy to drive a fourteen year old > > to New Mexico, where they can legally fuck their brains out, should > > go to jail for a long, long time. > I consider this issue so important that I thought it appropriate > to reply to it even before it arrived at the Cypherpunks mailing > list. I would like to remind George Spelvin (if that is your *real* name) that is improper Netiquette to reply to your own anonymous posts before they have even arrived to the mailing list to which they were sent. While the Mandatory/Voluntary Netiquette rules are unclear in regard to those with psychic abilities responding to the posts of others before they arrive at the mailing list, I am certain that the concept is the same. > I believe that people should be required by law to provide not > only their true identity when using the Internet for communications, > but should also be required to provide their true physical location, > so that law enforcement agencies will know whether what they are > writing is legal or illegal in the state from which they are > sending the communication. This is patently ridiculous! How do you know for certain that 'Anonymous' is not the person's *real* name? And how do we know that Anonymous is not physically *at* REPLAY.COM? Point to it on a map for me, why don't you? For that matter, how do we know that George Spelvin is *your* real name? And how do we know if you are physically at dev.null? I think that others on the list will agree with me that your logic is lame, and your arguments are ridiculous. LegallyPullingMyOwnPudAtREPLAY.COMonger

1 0

Fortify
by Jeremey Barrett 17 Dec '03

17 Dec '03

Saw this on BoS... To: best-of-security(a)cyber.com.au Subject: BoS: 128bit for Netscape ouside the US From: Stef Hoeben <Stefan.Hoeben(a)esat.kuleuven.ac.be> Date: Mon, 27 Oct 1997 13:00:54 +0100 (MET) Old-Status: O Old-X-Envelope-From: Stefan.Hoeben(a)esat.kuleuven.ac.be Mon Oct 27 23:02:17 1997 Old-X-Originally-To: To: best-of-security(a)cyber.com.au Old-X-Originated-From: From: Stef Hoeben <Stefan.Hoeben(a)esat.kuleuven.ac.be> Organization: ESAT, K.U.Leuven, Belgium Resent-Date: Tue, 28 Oct 1997 16:57:55 +1100 (EST) Resent-From: best-of-security(a)cyber.com.au Resent-Message-ID: <"eSK-kC.A.f_C.2wSV0"@plum> Resent-Sender: best-of-security-request(a)cyber.com.au Sender: darrenr(a)cyber.com.au A program, called Fortify, has been developed that hacks Netscape to provide strong encryptioni.e. 168bit 3DES or 128bit RC4). Available on most platforms and for both versions 3.0 and 4.0 of Netscape. Freely available on the site below and only some 500K. http://www.geocities.com/Eureka/Plaza/6333 We have tested it on one of our pc's ...and it worked. -> DES-CBC3-SHA connections with my own testserver have been made -> Netscape: "high-grade encryption key for U.S. domestic use only"

1 0