December 2003 - cypherpunks-legacy

$1,000,000 CypherPunk Challenge
by RCMP HateMailer 17 Dec '03

17 Dec '03

THE ESTEVAN DETACHMENT OF THE ROYAL CANADIAN MOUNTED POLICE IS PROUD TO ANNOUNCE THE COMMENCEMENT OF THE MILLION DOLLAR CYPHERPUNK CHALLENGE! Thanks to the generous contributions of RCMP officers such as Constable Beauline, who generously offered to kick in a share of the money he extorted at gunpoint from the late TruthMonger #1, in the CoalDust Saloon, we are able to offer each of you a chance at the Grand Prize for aiding us in securing a conviction on any major criminal charge against an individual who has sullied the reputation of the Royal Canuckian Mounted Police by subjecting us to ridicule for the mountains of government resources and funds we have pissed away in our unsuccessful attempts to imprison him over the years. The sorry, scumbag piece of shit who posts to the CypherPunks mailing list under a variety of aliases, including, Toto, TruthMonger, Blanc Weber and Sameer, is known to be as big a pain in the ass to you irreverent, anarchist CypherPunks felons as he is to those of us sworn to Serve and Protect the rich and powerful from loudmouthed troublemakers who feel no shame in stepping outside the boundaries of our subservient middle-class society. CSIS, an arm of Canadian law enforcement whose manifest is to find and exploit weaknesses of character in our citizens, in order to encourage them down a path which will allow the judicial system to put enough white people in jail to keep a semblance of order amoung the Wagon-Burners who belong in the white man's prisons by virtue of their birthright, has provided the RCMP with illegally intercepted InterNet communications which lead us to believe that most of the CypherPunks are, in reality, personally resigned to the fact that Big Brother already has the game in the bag, and would recognize the benefit of helping us to hammer down, once and for all, in two quick 'chops', the 9-inch nail that rises like a Penis from the Asses every time we attempt to slap it down. Others may make you similar offers to make the $$$ Big Bucks $$$, but our offer pays monumentally greater amounts of cash than sitting at home licking your own dick... THE CHALLENGE: To support our efforts to encourage Toto down a path that will lead to enough mental and emotional pressure to overcome the beneficial effects of his current medication and result in his increasing vulnerability to the violent manifestations of his medical disability to the point where he finally 'snaps,' and strikes out in a blind rage of senseless violence that will finally allow the Canadian Justice system to incarcerate him in a place where his presence will not be an affront to normal, decent Canadians who are willing to believe that Louis Riel acted alone, as long as we allow them to continue to debate endlessly on CBC radio on how to end the never-ending debates on CBC radio, and finally take some action on what are essentially inconsequential matters. OUR PLEDGE: To continue our efforts to pressure Toto through illegal violations of his Charter Rights and to provide those who choose to participate in our assault on this particular citizen by providing information as to known vulnerabilities which can be used to exploit his weaknesses. YOUR *WINNING* ROLE: To support and encourage Toto in manifesting, to the fullest extent possible, the moral outrage that comes naturally from a lifetime of watching growing authoritarian tyranny in all aspects of Canadian society. To echo and validate the impulsive outbursts of emotional and physical violence which is endemic among those with his type of medical disability. THE KEYS TO SUCCESS: While we continue to harass Toto at every step, seeking to criminalize and socially stigmatize him for his values and beliefs, you, as a CypherPunk, can encourage him to dwell upon the injustices to which he is subjected, in the name of normality. While we continue to illegally and arrogantly confiscate his property, denying him use of the tools he uses to improve his knowledge of his medical condition, and to help maintain mental and emotional balance through creative expression and physical functionality, you, as a CypherPunk, can make a point of reminding him that even if we are forced, at some point, to cease our illegal harassment of him, that we have endless government resources available that enable us to continue harassing him as long as we desire. While we continue to pressure Toto to submit to our attempts to suppress his right to freedom of expression, you, as a CypherPunk, can point out to him the debasement and oppression that is involved in submitting to our tyranny. The key to living life comfortably, as a Sheeple, lies in avoiding undue reflection upon the lies and injustices that are part of the daily menu of a government and society geared toward the worship and furtherance of money and power. Defective humans who are incapable of hypnotically ignoring the the lies, hypocrisy and injustice around them need to be removed from society in order to ensure the efficient functioning of the more obedient Sheeple. BONUS: Any CypherPunk who is able to contribute to our efforts to the extent that enough pressure is applied to the weak points of Toto's medical condition to result in him completely snapping and blindly striking out at random against those who have no part in his persecution (as opposed to merely striking back at those who are violating his human rights) will receive a share of any royalties that may result from book and movie script sales. When encouraging Toto in viewing it as his right and duty to launch a mindless, violent assault on the world at large, keep in mind that chainsaw massacres have the potential to be big money makers in the news and entertainment media industry, and senseless slaughter of innocent children is a proven winner in maximizing audience share. Remember: Those who make peaceful revolution impossible, make violent revolution a damn profitable business.

1 0

WE'LL PAY CA$H FOR YOUR DEAD INDIANS !!!
by RCMP HateMailer 17 Dec '03

17 Dec '03

~ MAD MOUNTIE INDIAN TRADING POST ------------------------------- Despite the comparative ease with which members of the law enforcement community are able to avoid penalties or legal punishment for murdering Wagon-Burners under the cover of a government-issued assassins badge, there still remains a small minority of policemen who are not comfortable with the moral implications of taking another human life lightly, but who don't want to suffer the stigmatism of not having a human trophy mounted on their office wall. This translates into $$$ BIG BUCKS $$$ for those who work in mortuaries, or who are lucky enough to hit a Wagon-Burner with their vehicle in a remote location where they can pop the body into the trunk. The Mad Mountie Indian Trading Post will pay top dollar for Wagon-Burner carcasses without noticeable tread marks, and a special bonus to those who bring in a mother and child combination suitable for mounting in the currently popular "Dave's Double" configuration. Carcasses that bear a significant resemblance to famous Wagon-Burners such as Louis Riel, Sitting Bull and Geronimo will be sold at the monthly Officers Only Auction.

1 0

Denning 98
by John Young 17 Dec '03

17 Dec '03

Dorothy Denning's Spring 98 course schedule provides an informative overview and recommended readings: Information Warfare: Terrorism, Crime, National Security http://guru.cosc.georgetown.edu/~denning/cosc511/spring98/schedule.html The 1997 course was discussed here last year, along with criticism of a parallel student web site on criminal use of encryption, as noted by anonymous on UK Crypto: http://infinity.nus.sg/cypherpunks/dir.97.07.10-97.07.16/msg00003.html

2 1

Pornography or Art?
by Porn or Art 17 Dec '03

17 Dec '03

Check out http://members.xoom.com/Porn_or_Art and see what you think of the new web page I made. I'd appreciate your comments on this. Send comments to me at Porn_or_Art(a)hotmail.com Thanks ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

RE: possible customer for a Forth box?
by Stuart Johnson 17 Dec '03

17 Dec '03

> -----Original Message----- > From: Greg Bailey [SMTP:greg@minerva.com] > Sent: Thursday, April 09, 1998 9:23 PM > To: 'stuartj(a)packetengines.com' > Cc: 'ATHENA Tech'; 'ark-gvb' > Subject: RE: possible customer for a Forth box? > > On Thu, 9 Apr 1998 15:12:17 -0700, Stuart Johnson > <stuartj(a)packetengines.com> wrote: > > > i'm currently looking for a box or chipset that will encryption > > ethernet traffic at or near wire speed. does anyone know of such a > > thing? anyhelp will be greatly appreciated. > > We might be able to help, but the above is not a complete problem > statement. It could be read as use of Ether for a point to point > connection between two machines with all traffic encrypted, which > is a nice and simple key management problem. Or it might mean > two or more boxes plugged into an Ethernet with only traffic > between these pairs of boxes encrypted. This is a much harder > key management problem and also is full of special cases such as > some protocols (ARP for example) that must never be encrypted. > thanks all for the quick replies, for my needs a point to point connection is fine. i've looked at a few things out there (netfortress, some bay routers) but they are all very slow, i'm looking for a wire speed implementation (100-1000Mb/s) is there anything out there in this arena? or do i have to make my own <g>. if i were to embark on building my own is there any body of work out there that would help me get a jump start? i have the LAN protocol knowledge but my crypto knowledge is limited to what i've read in Schneier. thanks, -stuart ps. i should now be on the lists, but if you could cc replies to me i'd appreciate it ___________________________________________________ Stuart Johnson stuartj(a)packetengines.com Asic Design Engineer Phone : (509) 777-7208 Packet Engines Inc. leading the Gigabit Ethernet revolution ___________________________________________________ Key ID : B65F9B8D Key Fingerprint : F97D84A61C732CBAA1DA50A8D41963 A NEW BIG PRIME : 2^3,021,377-1 ___________________________________________________

1 0

RE: possible customer for a Forth box?
by Bauer, Michael (C)(STP) 17 Dec '03

17 Dec '03

> > -----Original Message----- > > From: Greg Bailey [SMTP:greg@minerva.com] > > Sent: Thursday, April 09, 1998 9:23 PM > > To: 'stuartj(a)packetengines.com' > > Cc: 'ATHENA Tech'; 'ark-gvb' > > Subject: RE: possible customer for a Forth box? > > > > On Thu, 9 Apr 1998 15:12:17 -0700, Stuart Johnson > > <stuartj(a)packetengines.com> wrote: > > > > > i'm currently looking for a box or chipset that will encryption > > > ethernet traffic at or near wire speed. does anyone know of such a > > > thing? anyhelp will be greatly appreciated. > > > > We might be able to help, but the above is not a complete problem > > statement. It could be read as use of Ether for a point to point > > connection between two machines with all traffic encrypted, which > > is a nice and simple key management problem. Or it might mean > > two or more boxes plugged into an Ethernet with only traffic > > between these pairs of boxes encrypted. This is a much harder > > key management problem and also is full of special cases such as > > some protocols (ARP for example) that must never be encrypted. > > > thanks all for the quick replies, for my needs a point to point > connection is fine. > > i've looked at a few things out there (netfortress, some bay routers) > but they are all very slow, i'm looking for a wire speed > implementation > (100-1000Mb/s) is there anything out there in this arena? or do i have > to make my own <g>. if i were to embark on building my own is there > any > body of work out there that would help me get a jump start? i have the > LAN protocol knowledge but my crypto knowledge is limited to what i've > read in Schneier. > Have you checked out RadGuard's cIPRO? It claims throughput of 100 Mbps and is IPSec-compliant, although I don't know which specific algorithms it supports. Mick Bauer Network Engineer, EXi Corp.

1 0

announce: weaken for netscape !!
by Anonymous Sender 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello. since it is possible to fortify netscape navigator, it is also possible to weaken it. i'm releasing this patch to underline the fact that you should really think about the degree of trust you put in your crypto software or any modifications done to it by others. so what's this patch is ? this is WEAKEN for netscape (should i put a (TM) logo ? )! it makes crypto in ssl useless !! for people who dont believe me ... here's some tech details : during handshake, ssl client and server exchange two random 32 bytes sequences (Client.Random and Server.Random) in cleartext. when the client receives the server's public key (if the cipherspec uses rsa), it generates a 48 bytes random structure (this is the premaster secret) and sends it to the server encrypted with that public key. so if you can patch the software, how to make this schema useless ? just make the premaster secret predictible, since the master secret is a function of it, plus the two random structures which are available in clear to you (attacker) you may now ask why this is interesting ? after all, if an attacker gains access to your machine all the security is lost anyway. I released this to say that : 1- it is easy to fortify netscape, but can't verify that it really works (i mean you cant verify that it offers real 128 security, what is saied in the properties window in netscape after fortifying it is not a proof of security) 2- weakening netscape is easy ... but u can verify that it works !! 3- this is a very short byte sequence !! imagine what happenes if : 3-1 that sequence is propagated by a virus ! 3-2 your boss installs that sequence by night in your computer !! 3-3 some vendors already ship their software with the weaken sequence !!! enough with args, here is the stuff : this patch works on communicator pro export for win32, i downloaded the copy i worked on a few hours ago ... so by downloading the latest communicator 4.04 export, english from netscape's ftp site you will be able to weaken your browser ;) ... anyway if you want to be sure about your version before weakening it, download fortify, and run it's md5 program with following parameter : md5 -r 0x400-0x32ca00,0x384a00:0x58400 ...\program\netscape.exe there is a line matching the version i'm talking about in the "index" file you will find with fortify.exe (download the whole fortify from www.fortify.net) here's a copy from that line : 4096512 0x400-0x32ca00,0x384a00:0x58400 aea2aba6f731468e34fd1141f603ea20 pro 4.04 0 2 morphs-1.2 x86win32 (97325) netscape's executable size : 4096512 bytes by running md5 as indicated, you should obtain this hash aea2aba6f731468e34fd1141f603ea20 now this is the patch to apply : look for byte sequence : 52 88 8d e0 fe ff ff 8a 40 01 6a 00 88 85 e1 fe ff ff e8 9e 27 00 00 83 c4 0c 8b f8 and change with 6a 72 52 88 8d e0 fe ff ff 8a 40 01 88 85 e1 fe ff ff e8 cd 98 94 77 83 c4 0c 33 ff that's all !!!! in short, i'm changing a call to GenerateRandom to memset >;-) 72 is the ascii code for 'r' (my favorite char). if you can play with ssleay, you can change the ssl/ssl_txt.c, ssl/s3_srvr.c and ssl/ssl.h in order to keep the premaster secret in memory so you can display it in the output given by s_server -accept <port> -www good luck -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: cp850 iQCVAwUBNS59fpVRLpSyKBl9AQFQPQP/fxAuSA80MmLTZtkFI776HfTylXbhXbvM Eq6rWdEip7OhuaG8Nemjc+lVH95I+YRHqG5iHWdT9and1PhQ9QHGwxmWLVT8wa0x HlOVuoMK4BuyfwbcvYAXUwtdgbA6hcVXX/BD+jCPXhE+ZDYPbHGF+NRYaeBIhWRC x1QsId+jPQQ= =eOS5 -----END PGP SIGNATURE-----

1 0

weaken : contact the author
by Anonymous Sender 17 Dec '03

17 Dec '03

here's my pk, just drop me a message in the list -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzUuVR4AAAEEALkjQwGKIsBT16nqJbZsWiPOH6gfRkzFav0RmWgjBu/bjDKe PmC2aGoQV2FXFYGGnX0bHyBz8Qjewdb7aDg/MQsAXjxsSZvqxNEkXGa6bH4U/Fe8 32WBddLrScc6vikaPv0o3D8bgzr+qQM0s9FSP4n5Jb+N/y2YjJVRLpSyKBl9AAUR tAVtYXJrb4kAlQMFEDUuVR6VUS6UsigZfQEBI9AD/RM6l/Gmw3+IPNQ1fRSFAME3 ZLoWUC6mAW5kUP0IaOFD/tXGXT+ekehcFojHpk9/QIO1mVpxr3bp97/ETZb1ZJiS EHTEjAP/85gja/YlRubfihUUb5/MoIz94a+MWsoDB0qLDJbQ48vyNsftNDrolUFf KUdCME7v3al/m6c0wufP =Bnx/ -----END PGP PUBLIC KEY BLOCK-----

1 0

Canadian CypherPunks SuckSeed From the Union!
by Canadian Nutly News 17 Dec '03

17 Dec '03

[Canadian Nutly News-Bienfait, Saskatchewan]CANADIAN CYPHERPUNKS LIVING in countries all around the world have seceded from the countries and societies surrounding their MeatSpace bodies and have formed Cult of One Republics based on freedom, privacy and the Dog-given right to piss on any source of heat that burns their ass... Inspired by the Nuclear Suitcase Full Of Dirty Shorts technology that was developed in a basement in Bienfait, Saskatchewan, by the Grand Pooh-Bah of Mongeritaville and activated recently at a hidden location near RCMP headquarters in nearby Estevan, the CypherPunks have been enlisting in increasing numbers in Army of Dog Private Guard units consisting solely of themselves. Bill Stewart, a naturalized Canadian CypherPunk, told reportwhores, while belching and patting his stomache, "I've got a powerful lot of gas backed up, and I'm not afraid to use it." Mercetan Mercantile, a Bienfait business buying bottles of bombmaking ingredients from a wide variety of chemical companies and hog farms around the world and reselling them to a specialized children's market, reports that the children they deal with are getting increasingly older as adults recognize the advantages of using revolutionary munitions that will allow them to be tried as children for their crimes. Members of the CypherPunks Disturbed Male List, famous for thier childish pissing contests, have long been suspected of using those pissing contests to distract attention from their development of secret StinkyEggFart technology and parallel technologies designed to raise a stink that can't be ignored. CypherPunk Jim Bell, living in a part of Canada south of Seattle, was instrumental in helping to promote the use of non-violent BadEgg technology to escalate the trend of Tyrannical Dictatorships (TM) toward violating the rights of its citizens to raise a stink and subjecting them to outrageously cruel and unusual punishment, as well as long periods of imprisonment for childish behavior. TruthMongrel, barking over a Sympatico InterNet connection that was raised from the dead by a Circle of Eunuchs member deep within the filthy bowels of the Canadian ISP, said, "Jim Bell is just a pawn in the game plan of the Forces of Light. Canadian CypherPunks have long been aware that he is a schill being run by a handler named Blanc Weber who has a hidden agenda of promoting a peaceful revolution." Attila T. Hun, hacking into TruthMongrel's Sympatico account, broke into his transmission to add, "Even Toto has been coming under the spell of Weber's goody-two-shoes virginal allure. He used to be a *real* man and a serious threat to the continued physical existence of Micro$not Mongul, Bad BillyC, and now he has turned into just another WinLoser95 user begging at the feet of his Redmond Puppet Masters, compromising his integrity by offering to only cut off three of BadBillyG's fingers in return for help making Micro$not's software work. "Next thing you know, he'll be offering just to slap BadBillyC around like a girl, in return for a free copy of WinLoser98." Blanc Weber, when reached for comment, dismissed Attila's claims, and grinningly told reportwhores, "That's ridiculous. Everyone in the Micro$not Memorial Branch Davidian Compound in Redmond knows that the MicroMaster likes to be *spanked*, not slapped." She added, with a wink, "There are rumors that the DOJ anti-trust action against Micro$not is just a business move by the MicroMaster to make his million dollar spankings by Janet Reno tax deductible." Tim C. May, a CypherPukes FartLoserForKing candidate, expressed disgust with the CypherPunks division into two camps, one advocating violent revolution and the other promoting biological development of a mutant strain of vegetable known to insiders as 'The Slime That Ate The Slime That Ate DC." "Fuck this shit...I'm going to NUKE something!" he shouted, pausing to add, "I just picked up a couple of items at the Dirty Shorts Munitions Show&Tell in Las Vegas which will guarantee that Slick Willy will never inhale again..."

1 0

Re: Secure Cell Phones for State
by John Young 17 Dec '03

17 Dec '03

Motorola's site is informative (thanks for the pointers and comments), and perhaps cannot reveal the detail needed to compare security level to other systems in the US and other countries. Dave Emery probes the tech questions a bit and I'll go further, with Adam Shostack and others, to ask as a citizen why we cannot purchase the level of cell phone privacy that our gov and mil folks can with our money (a return to the NSA-crippled algo of CMEA and CAVE). There has been some discussion of this on UK Crypto about the various telco security systems in Europe and the same critique of a double standard has been made. Cell phone manufacturers would have a big stake in who gets the best security to the global public first. Moreover, as Scientific American points out in its special section this month, applications of wireless technology are rapidly growing for a host of new information distribution, collection and interactive purposes. The need for security of this data floating through the spectrum could hardly be greater, not only for privacy but for prtoection against tampering, insertion of disinformation, and a variety of new ways to warp data to fit schemes the owners and originators never dreamed of. Is end to end encryption of the STU-III sort going to be needed for all wireless or are there other plans in the works at TLAs and TIAs? It would be greatly appreciated if those who may be tongue-tied by NDA and worse, if we were pointed in the right direction by, say, semaphore, to the likely places where we can dig out, say, by FOIA, what we need to know about Albright-privileged wireless security. Finally, are the TAC-2000 units useful for the Secretary's global travels? If so, are they supported by military networks overseas? Or do American officials use a different system when traveling? Note: We're commencing a log of this discussion of this topic from several lists at: http://jya.com/tac-2000.htm

1 0