December 2003 - cypherpunks-legacy

RE: UPSs
by Pearson Shane 17 Dec '03

17 Dec '03

Hi Stan, Yeah. Since the big powersupply transformer primary winding is in _parallel_ with the AC power coming from the wall, this inductor will transfer the spikes, etc to the secondary winding and into the bridge rectifier, etc quite nicely. But decent ripple prevention should also help out here. Though this hasn't much to do with PC switchmode powersupplies. An inductor/capacitor spike filter that may be in UPS' would have 2 large inductors in _series_ with the active and neutral and high voltage capacitors in parallel with both ends of the inductors across the active and neutral. This is specifically designed as a low pass filter for getting rid of spikes. I don't think the SW supply would do it quite as well with as much power handling, strength etc. I'd rather a great big low pass filter designed for spike dampening doing the deed than having my PC power supply bearing the brunt of it. It's also an extra layer that is quite cheap. Bye for now. > -----Original Message----- > From: StanSquncr [SMTP:StanSquncr@aol.com] > Sent: Saturday, March 21, 1998 8:51 AM > To: Pearson Shane; spectre(a)anthrax.net; cypherpunks(a)toad.com > Subject: Re: UPSs > > In a message dated 98-03-19 18:48:51 EST, Shane.Pearson(a)tafensw.edu.au > writes: > > << A simple low pass filter made of 2 large inductors and a > few high voltage capacitors will do the trick nicely. >> > > Right. The filtering that's already in the power-supply (except that > the > switching transformer isn't as big as an inductor as a normal > old-style power > transformer. > > Stan

1 0

Re: Rivest's Chaffing and Winnowing
by Kevlar 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Now I read about this before it was mentioned on this list, and wanted to comment briefly upon it. Although at first glance this appears to be a hopelessly ineffective way of communicating (it requires double the information, plus MAC's), It does have some interesting possibilities. For instance... Rivest mentioned in his technical paper that you might use this in a situtation where you are multiplexing two or more streams of information, in which one persons "wheat" is another persons "chaff"... This would elminate the need to generate random "chaff", and therefore bring the ammount of wasted space WAY down... I could see this in use in situtations like LAN's or intranets, where bandwidth is not nearly as much of a concern because there is usally an overabundance anyway. Something else that occured to me while reading this tho... a major flaw if implemented "out of the book".... He mentions generating random MAC's... and this would be allright because the chance of randomly generating a genuine MAC is 2**64, or 10**19, but that is unacceptable, as the law of advrages WILL catch up to you eventualy. Therefore his second party adding chaff idea is failable. Of corse, this is easliy remedied at run-time by checking to see if the MAC that was just randomly generated is genuine, and therefore unacceptable. I hope to stimulate discussion on this subject, and welcome your opinions about mine... Peace. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.5 for non-commercial use <http://www.nai.com> iQA/AwUBNRWlqgbVu2P/8fhEEQLxAACbBTO08OT/uYnDPQ1dKJH0xaZi3ocAniXQ Z0O3d1uKcvfLDcbTHPb6PTw2 =aJRQ -----END PGP SIGNATURE----- -Kevlar <Kevlar(a)smartlink.net> Oh, I'm sorry... Was I not suposed to EXPORT STRONG CRYPTO? print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"| dc` Beat your algorithms into swords and your virtual machines into spears... Let the weak say, "I am strong".

1 0

Encryption without encryption - from Ron Rivest
by Martin Minow 17 Dec '03

17 Dec '03

In a paper entitled "Chaffing and Winnowing: Confidentiality without Encryption," Ron Rivest describes a method of transmitting a document that gives an evesdropper no information about the content of the document. <http://theory.lcs.mit.edu/~rivest/chaffing.txt> "Winnowing does not employ encryption, and so does not have a``decryption key.'' Thus, the usual arguments in favor of ``keyrecovery'' don't apply very well for winnowing. As usual, the policydebate about regulating technology ends up being obsoleted bytechnological innovations. Trying to regulate confidentiality byregulating encryption closes one door and leaves two open(steganography and winnowing)." Martin Minow minow(a)apple.com

1 0

My post earlier.
by Aspen 17 Dec '03

17 Dec '03

Sup, It's Kevlar. I posted earlier about the "new" encryption method. It occured to me if you assign the "MAC"'s to computers and make a simple router (some transistors to act at "signaler" lines, one way of corse, so 3 a computer, A few ic's, hardware, and a power supply, ($75)), You have the makings for a basic network. Isn't that allready pattented? Hope I made somebody think for a second. I know I concidered this notion quiet a bit.

1 0

Here
by V75ortex 17 Dec '03

17 Dec '03

To: V75ortex(a)aol.com Subject: Here From: V75ortex <V75ortex(a)aol.com> Date: Thu, 2 Apr 1998 22:14:41 EST Organization: AOL (http://www.aol.com) <a href="http://www.adult-clicks.net/icon.html">Click here for 10 free pics</a>

1 0

instructs for using PGP 5 freeware with Eudora and 2.6.2 keys
by David Honig 17 Dec '03

17 Dec '03

Since I grew impatient navigating geocities' UI, I am sending this in the hope that it will be useful. Propogate at will. Using Eudora+PGP 5 with 2.6.2-Compatible RSA Keys for Win95 for Dummies 4/3/98 honig(a)alum.mit.edu Intro I explain how to install and use the slick Eudora and PGP 5 freeware on Windows95 while maintaining full back-compatability with PGP v. 2.6.2 users. The installation path for compatability with 262 is not the obvious one a new user would take. Thus this document. The install takes about 10 minutes and the software is free. The strength of your key is the same. What is Eudora? PGP? Eudora is a popular, powerful, easy to use GUI POP3 email client. Free versions are available. PGP is a public-key encryption package. PGP 5 freeware includes a plug-in for Eudora, making secure email not only possible, but nearly transparent. That is key to widespread use which is key to the success of any protocol. But some people use only PGP 2.6.2, or 262 it is built into their MacOS. The problem is that 262 uses "RSA" keys only, but PGP 5 can also use "Diffie-Hellman" keys. In fact, the freeware version of PGP 5 does not allow the creation of RSA keys. These instructions tell you how to set up Eudora + PGP so you can painlessly use these tools with all popular PGP versions. The newer PGP does not generate keys that the earlier PGP can use; but the newer version imports them. So if we take the trouble to use the older version of PGP to make our key, we can use our slick GUI email tools with everyone, even the 2.6.2 throwbacks who probably use rotary phones, carburators, etc. I use "PGP 2.6.2 key" to mean the RSA key version supported by PGP 2.6.2, and "PGP 5 key" to mean the Diffie-Hellman key supported by the freeware version. Both variants are based on the ease of multiplying two numbers and difficulty of factoring the product of large indivisible ("prime") numbers. Installation Instructions You will use defaults everywhere. 1. Download and install Eudora lite 3.05 (eul305.exe) from http://eudora.qualcomm.com/eudoralight/ This creates c:\Eudora by default. Use Tools | Options | Getting Started and Hosts to specify your POP email account (e.g., joe(a)xyz.com) and your SMTP (outgoing) host (e.g., mail.isp.com) TEST: Run Eudora, send yourself email, wait a minute, retrieve it, exit. 2. Download and install PGP 5 freeware (pgpinstall.exe) Do NOT create a key if asked to do so. PGP 5 makes keys incompatible with PGP 2.6.2. You will use a 2.6.2-compatible key you make later on. This creates c:\Program Files\PGP\PGP5.0 and installs a plug-in to Eudora. TEST: Start Eudora, look for PGP tools in toolbar. Easier Setup If You Can: 1 & 2. Download Eudora + PGP together from http://eudora.qualcomm.com/eudoralight/ and install. (I can't access this so I don't know about installing it.) TEST: send yourself email as above. Check for PGP tools as above. HERE'S THE RETRO-COMPATABILITY PART 3. Download pgp262.zip. Create new directory c:\pgp262. Go there. Unzip the file there. Read the instructions, you may have to set some variables before using PGP262 SET PGPPATH=C:\PGP262 SET PATH=C:\PGP262;%PATH% SET TZ=PST8PDT While in that directory: 4. Create a 2.6.2 key with PGP 2.6.2: Run "pgp -kg" and do what it says. You will provide a username. Use your email address. You will also provide a passphrase to hide your private key. Pick a phrase you can remember, that others can't guess. You'll have to type your passphrase to prove who you are (when you use your private key). 5. Export your 2.6.2 key to a file: Run "pgp -kxa yourname mykey" where "yourname" is the username you used above. This creates a file mykey.asc which is your public key suitable for emailing. 6. Import your key into PGP 5: Double click on the file "mykey.asc" that you just created. 7. Make sure your PGP262 key is your Default (e.g., if you made a PGP 5 key): Run PGPKeys, e.g., from Eudora. Select your key with the blue icon. Right-click to see its properties. Its key type should be "RSA". Right-click and select Set As Default. TO TEST PGP Send yourself a regular email addressed to the username you used above, which should be your email address, to verify that functionality didn't break. Then send a second letter, this time, select Eudora's PGP MIME button AND the PGP Encrypt button. Then send your letters. Wait a bit, and retrieve your mail as you did before. To read the encrypted version run the Plug-in. You will be prompted for your passphrase. If one of your dinosaur 2.6.2 associates sends you a block of text, use the PGP Decrypt button. You will be prompted for your passphrase. To send email to other people, you will have to import their public keys. Security Note Your private key is hidden in the \Program Files\PGP\PGP50\SECRING.SCR file. Its also in the c:\pgp262\SECRING.PGP file. If threse files are copied by opponents, only your passphrase stands between them and your secret key. Your mykey.asc file is the opposite: it should be published so people can send messages to you (and verify that you signed and sent what was received by them, etc.) PGPKeys lets you export your key to a well-known server which functions like a phone directory. honig(a)alum.mit.edu ------------------ "Are we going after their tax returns? I can only hope that we are, frankly, doing a little persecuting" ---Nixon to Erlichman, on tax audits of wealth Jewish contributors to the Democrats. -LA Times 1.4.98

1 0

RE: regulating the internet
by Brown, R Ken 17 Dec '03

17 Dec '03

> Jennifer DePalma <jdepalma(a)cato.org> wrote: > > >Anyone have any opinions on the feasibility of regulating the internet? > Of course you can regulate the Internet, the Internet is *made* of regulation. All it is is an agreement between people who run computers to send and receive messages, and pass them on to other computers, according to certain rules. It is like the treaties between supposedly sovereign nation states - you play by the rules if you want people to talk to you. The Internet is the best living example that you don't need governments to have regulation (although the US government certainly helped a lot. Maybe the Net or the Moon landings will go down in history as your pyramids or Stonehenge, the one thing your civilisation will be remembered for). The regulations will be made and broken and kept and changed by the people who use the Net and no-one will ever know what they all are at any one time but a lot of us will have a good idea of most of them, most of the time. The Internet doesn't depend on telephone companies or governments or undersea cables or satellites or university computing departments or cable TV or copper wires or carrier pigeons (that reminds me - time for my annual check up on the new RFCs :-) or fibre optics or anything else, although it uses all those things. It is software, not hardware, it is a set of rules, treaties, agreements, protocols, words, comments, jargon, ideas, thoughts. The Internet is like money, or marriage, or table manners - while people act as if they believe in it, then it will continue to exist. Of course if what the question was really about the feasibility of regulating what people use the Internet *for* - well, that's a different question...

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

On Thu, 2 Apr 1998, Robert Hettinga wrote: > At 2:32 AM -0500 on 4/2/98, David Honig wrote: > > http://braggbbs.bragg.army.mil/libs/utils.htm > > has a link to ftp://bbs.bragg.army.mil/library/utils/pgp262.zip > > This is really nothing new. My understanding is that when Kelly Goen posted > the original PGP to USENET, he set the distribution to US only, or at the > very least North America only. With a *.ca address, I'm wondering, in all situations do I follow the US guidelines? Or are some different? As for the "regulation" post, I was going to reply until I realized it was just so she could donate email addresses to her book. -confused cdn-

1 0

Ex-spook tells 2 other countries their codes are toast
by David Honig 17 Dec '03

17 Dec '03

http://www.newsday.com/ap/rnmpwh0j.htm Ex-CIA Worker Charged in Spy Case By MICHAEL J. SNIFFEN Associated Press Writer WASHINGTON (AP) -- A fired CIA covert operative was charged today with tipping off two foreign governments that the United States had broken their code systems. He was held without bond. Douglas Fred Groat also was charged with trying to extort $500,000 from the CIA in return for not disclosing its secrets. Groat, a 50-year-old bearded and burly man, worked for the CIA from May 1980 through October 1996 but spent the last three of those years on administrative leave. The grand jury charged that he gave secrets about U.S. code-breaking to two foreign governments, which were not named, in March and April of 1997. The grand jury said that Groat attempted to extort money from the CIA began before his alleged turncoat activities and continued after them. The grand jury said the attempted extortion lasted from May 1996 until February 1998. All four espionage counts allege that the spying took place between March 24, 1997 and some time in April 1997. A federal grand jury said in its indictment that Groat gave both foreign countries classified information concerning ``the targeting and compromise of the cryptographic systems of ... (the foreign country) by the United States with intent and reason to believe that said information would be used to the injury of the United States.'' Groat, who was arrested Wednesday night without incident by the FBI, entered a not guilty plea through his attorney, at federal courthouse here, to all five counts against him. Two of the counts carry a maximum penalty of death. Prosecutor Eric Dubelier persuaded U.S. District Judge Norma Holloway Johnson to continue holding the burly and bearded Groat without bail by calling him ``a risk of flight and a danger to the community.'' ``Based on his former employment with the CIA, he is trained in travel and false identity and deception,'' Dubelier said. ``He has no ties to the community and he possesses sensitive classified information'' that could be communicated to foreign nations if he were allowed to go free. Johnson said that a federal grand jury had returned a sealed indictment March 27 which included four counts of communicating secret defense information to a foreign government and one count of interference with commerce. Two of the counts of conveying secrets carry the death penalty. It was not immediately known which countries were involved. Federal officials requesting anonymity said there was more than one. Groat himself did not speak during the 10-minute initial appearance. Muscular and heavy-set with black hair and a mustache, he appeared in court wearing dark blue jail trousers and shirt. He held his hands clasped in front of him as he stood beside his attorney, public defender A.J. Kramer. The judge set a detention hearing for next Thursday. And Dubelier said the government would use the Classified Information Procedures Act to prevent secrets from being disclosed at trial. Groat was the third current or former CIA employee to be arrested for espionage in the last four years. He was fired from the CIA under circumstances that officials would not immediately disclose. They said he held a lower rank than two of the biggest spies ever caught inside the CIA -- Aldrich Ames, who headed counterintelligence against Moscow while secretly working for the Russians, and Harold Nicholson, who was a CIA station chief abroad while selling secrets to Moscow. Ames and Nicholson pleaded guilty in plea bargains with the government. An official familiar with the investigation said the probe into this former CIA employee ``does not rise to the level of the Aldrich Ames case'' in terms of the suspected damage to U.S. security. Ames was arrested in 1994 and was sentenced to life in prison without the chance for parole. Ames gave the Soviets the names of at least a dozen high-level moles inside the Soviet government who were providing information to the CIA. Many of them were arrested and executed based on Ames' information. Nicholson gave the Russians the names of new CIA recruits whom he helped train. Officials said that limited where they could serve later in their careers. The CIA employee in this case worked at the ageny's headquarters in Northern Virginia and it was not clear if he had ever served overseas. The FBI was not seeking any accomplices in the case, but officials would not say whether any foreign diplomats were being expelled from this country. The names of the countries involved with the CIA employee could not immediately be learned. The House and Senate intelligence committees were kept informed of the investigation into the spying charges as it proceeded, congressional officials said today, speaking on condition of anonymity. An official said Senators have been actively involved in following the investigation since its inception.'' AP-NY-04-03-98 1331EST ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu When exponentiation is outlawed, only outlaws will exponentiate.

1 0

Golden Portfolio and Ca$h
by rdonnovan＠hotmail.com 17 Dec '03

17 Dec '03

Introducing "7MG's" Golden Portfolio and the amazing 7 MILLION DOLLAR GENERATOR!!!! Make all your financial dreams come true within a few weeks! 5 people= $7,000,000!!! The Golden Portfolio/"7-Million-Dollar-List" is a completely new, revolutionary income opportunity which allows everyone to achieve financial success with very little effort and only a small one-time stake. The GP"7-Million-Dollar-List" concept is extremely simple yet brilliant in it's ability to create profits for all participants with a logical and ingenious system. This system is cheat-proof and assures fast payments to all participants. There is no waiting for company checks as all payments received are money orders.. straight to you! No complicated spillovers, matrixes or other MLM non-sense. This is a simple program which requires no work other than the 10 steps listed below. The program is legal in that a product is exchanged for the $160, a portfolio of information on such topics as effective marketing, travel discounts, anonymous bank accounts etc. 7MG will deliver the product to your customers and monitor the program to assure that you will get your payments sent directly to you for a one time $20 fee. How does it work? There are seven positions on the GP"7-Million-Dollar-List". Your one-time stake is US $160. #1. Send $30 to the person in position 7 (your sponsor) #2. Send $10 to the person in position 4 (bonus position) #3. Send $100 to the person in position 1 (prime position) #4. Send $20 to "7MG" (program administration) All payments must be sent money order by fed-ex letters. Make sure to send copies of money orders and tracking numbers to "7MG" who is monitoring and controlling the system closely. As soon as "7MG" receives your membership registration with the list of names approved, you can immediately proceed to the next step. A copy of this circular with your letter protector code and your name in position #7 on the GP"7-Million Dollar -List" will be sent to you along with your 9 reports. All you have to do is to find at least 5 new members. Each of them will send you $30 via fed-ex and you already have earned money! Your participation starts at position 7 on the GP "7-Million-Dollar-List". Assuming that everyone will also introduce 5 new members you wil get $10 each from 625 people when you reach position 4 on the GP"7-Million-Dollar-List". This totals $6,250 - but this program is designed to rake much more money right into your pocket. By continously moving up the list you will reach position one within only a few short weeks. Being now in the prime position on thousands and thousands of GP"7-Million-Dollar-Lists" you will receive up to 78,125 fed-ex letters containing $100 each. THIS IS THE INCREDIBLE AMOUNT OF $7,812,500 You can keep this money, it's yours and there's nothing expected in return. *A series of reports will be e-mailed to all members by 7MG, there's nothing for you to do but find 5 members and wait for your express letters with money orders. It should be very easy to convince other people of this opportunity. Make sure to introduce as many new members as possible into this fantastic program. *REPORTS in the Golden Portfolio Effective and Affordable Marketing Travel Discounts Earn 30% in a Stable European Bank Directory of International Maildrops Opening an Offshore Bank Anonymous Bank accounts Protecting yourself from fraud Obtaining assets for rent and Much More! 7MG is right now in global expansion and will experience phenomenal growth. Millions of potential participants worldwide are waiting already. So, leave nothing to chance - start right away to see your share of daily cash pouring into your mailbox !! Wishing you Success!! Go For it Today!! ~Sign up by April 10th and receive a $100 airline disc. certificate!! Instructions: 1. Set up a fed-ex account. It's fast and super easy! Call 1-800Gofedex or set up online at http://www.fedex.com (You must set this account up, all packages will be tracked using the fedex software and any mail-based correspondence from "7MG" will be sent using your account number.) 2. Print and fill out the membership registration form below. 3. Fax the form to 7MG for approval.(the list has to be verified against computer records to make sure no one has falsely inserted a name or changed any address information- this assures that you get your money!) The letter will be sent back approved or changed to the correct letter, then you can proceed to step #4. 4. Obtain 4 money orders in the amounts listed and obtain 4 Fedex airbills. 5. Fill the money orders out according to name and destination and do the same for the airbills. 6. Write the tracking codes of the airbills on the money order slips. 7. Make a copy of all 4 money orders on one sheet of paper and Fax it to 1-847-759-2343 8. Mail out the money orders in the Fedex packages the same day by standard overnight express. Important! 9. When we receive your faxed copy of the money orders you will receive the golden portfolio and a copy of this letter with your name in the #7 spot with a letter code protector. 10. Proceed to send your letter out through e-mail. Remember your goal is at least 5 participants. Don't stop until you get 5 people! This is a MUST!! A list of reputable bulk-email companies will be sent to you! ------------------------------------------------------------------------ -- (Print and Fax to 1-847-759-2343) Membership Registration: Yes, I want to become a member of 7MG and receive the golden portfolio*. Please register my details and send approval for this list right away! Fed-ex account number__________________________ Email address _________________________________ Fax Number _________________________________ Name _______________________________________ Address______________________________________ (You must use a regular street address, FED-Ex will not ship to P.O. boxes. If you don't want to use your home address try a place like Mail Boxes Etc.) City________________________________________ State____________Zip Code_____________________ Country_____________________________ Letter Protector Code #4285 Golden Portfolio/"7-Million-Dollar-List" Position 1 (prime postion), send US $100 R. McKinney 4416 W. 170th street #A Lawndale, CA 90260 Position 2 GVHS Enterprises Position 3 Cherish Hatz Position 4 (bonus positon, send US $10) CD Marketing 12166 Metric blvd. #243 Austin, TX 78758 Position 5 BT Enterprises Position 6 M & M Publications Position 7 (your sponsor, send US $30) C. Diane 15900 Crenshaw bl. #572 Gardena, CA 90249 Monitor/Registration fee send US $20: 7MG 195 Stevens Ave. Columbus, OH 43222

1 0