December 2003 - cypherpunks-legacy

Re: Clinton's fake apologies (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 22 Sep 1998 10:28:01 -0400 > From: Duncan Frissell <frissell(a)panix.com> > Subject: Re: Clinton's fake apologies (fwd) > Ladies and Gentlemen of the Jury, we just conducted a > favorable/non-favorable public opinion survey about the ADA over there and > found out that 3% had a favorable opinion of him 3% unfavorable and 94% > were DK or No Opinion. I therefore plead that he has insufficient personal > popularity to conduct this prosecution. I like that one, talk about 'jury of their peers'... ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Stego-empty hard drives... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 22 Sep 1998 08:54:57 -0500 > From: Mark Hahn <mhahn(a)tcbtech.com> > Subject: Re: Stego-empty hard drives... (fwd) > As I recall, this thread is about customs officials booting your laptop > from *their* floppy and scanning your hard drive. I suggest two > practical solutions to avoid this incursion: That's where we started, we're miles away and deep in the woods now.... ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Stego-empty hard drives... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 23 Sep 1998 00:01:31 +1000 > From: Reeza! <howree(a)cable.navy.mil> > Subject: Re: Stego-empty hard drives... (fwd) > At 07:45 AM 9/22/98 -0500, Jim Choate wrote: > >Forwarded message: > >> From: "Neels Kriek" <kriek(a)bigfoot.com> > >> Subject: Re: Stego-empty hard drives... (fwd) > >> Date: Tue, 22 Sep 1998 01:52:03 -0500 > >> I have bee using Encrypted magic Folders for a while now. it gives you the > >> option of encrypting all files in a specific folder. it can also do file > >> name scrambling and even hide all the files in a directory from the OS. > >> > >> It activates through a hot key combination. You work on the files you want > >> and when you exit emf the whole dir is hidden again. probably not the most > >> secure system but it will certainly fool most them if you disable booting > >> from a stiffy/floppy. > > > >The problem is this approach is detectible with a suitable 'virus scanner' > >technology. Even if the encrypted folders and such don't appear in the file > >system you have various other pieces of the processing agent that must sit > >around on the drive and hence are open to signature attacks. > > > > The first assertion is not entirely accurate- Which first assertion, his or mine? Youre quoting leaves me confused (not that it is necessarily your fault...;). > I played with Magic Folders > for a while- it relies on a command, usu. in the autoexec.bat or win.ini > file (dos/windows environment) to load, with a bootable floppy disk these > commands would would be bypassed and the so-called "hidden" folder is in > plain sight. One thing is clear, you can't mundge the base OS or else the catch is going to be trivial. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

CHALLENGE response (fwd)
by Anonymous 17 Dec '03

17 Dec '03

The whole point of the CHALLENGE response went straight over his head, didn't it? It's almost as though there are two mailing lists here: the one for dolts, where Jim Choate gets into his idiotic little arguments with his fellow fools, yammering back and forth on totally off-topic matters, and the one for people interested in cryptography and its implications. We have here the first known case where a key was constructed ex post facto to validate a signed message, in response to Adam Back's challenge. No longer can you assume that just because you posted a signed message on a certain date, and you hold the public key which signed that message, that you can later prove authorship. It challenges some of the implicit assumptions which have been made in using public key cryptography. And all Jim Choate can do is take issue with a snippet of Toto's ravings which were included purely to illustrate the signature validity. He is completely unaware of what is really happening. Jim Choate writes: > Forwarded message: > > > Date: Tue, 22 Sep 1998 08:01:07 +0200 > > From: Anonymous <nobody(a)replay.com> > > Subject: CHALLENGE response > > > "Contrary to one famous philosopher, > > you're saying the medium is not the > > message," Judge Thomas Nelson said, > > alluding to the media theorist Marshall > > McLuhan. > > http://www.nytimes.com/library/cyber/week/120997encrypt-bernstein.html > > > > Bullshit! > > The bits and bytes of email encryption are a clear message > > that I wish to exercise my right to speak freely, without those > > who wish to do me harm invading my privacy. > > If you're going to take that tack then you need to invoke freedom of the > press and not freedom of speech.

1 0

CHALLENGE response (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

> Subject: CHALLENGE response (fwd) > The whole point of the CHALLENGE response went straight over his head, > didn't it? It didn't go over my head at all. What amazes me is that it took you this long to figure out that one could munge signatures. > We have here the first known case where a key was constructed ex post > facto to validate a signed message, in response to Adam Back's challenge. Um, I don't believe that is true. It may be the first time members of this list have managed it. > No longer can you assume that just because you posted a signed message > on a certain date, and you hold the public key which signed that message, > that you can later prove authorship. It challenges some of the implicit > assumptions which have been made in using public key cryptography. No, it challenges basic assumptions regarding the importance of identity. In no way does it effect the basic math of crypto, public or otherwise. And people wonder why I don't sign my messages... > And all Jim Choate can do is take issue with a snippet of Toto's ravings > which were included purely to illustrate the signature validity. He is > completely unaware of what is really happening. I've taken no issue with Toto or his ravings. Have a nice day. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

CTIA Daily News from WOW-COM - September 22, 1998
by CTIA Daily News 17 Dec '03

17 Dec '03

========================================== Welcome to today's edition of the CTIA Daily News from WOW-COM. Please click on the icon / attachment for the most important news in wireless communications today. Your company just formed a partnership in a country you never heard of. Are you worried about international roaming fraud? You should be. CTIA's Wireless Security '98 - It's Just Smart Business ORLANDO, FLORIDA · NOVEMBER 9 - 11, 1998 http://www.wow-com.com/professional/ Team WOW-COM wowcom(a)ctia.org ===========================================

1 0

Re: Stego-empty hard drives... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 22 Sep 1998 09:38:18 -0500 > From: Petro <petro(a)playboy.com> > Subject: Re: Stego-empty hard drives... (fwd) > If you do (1), and simply have _no_ prompt, just a small space in > time AFTER the POST (say, immediately after) to type in your passkey, and > things are > set up that if you type the wrong keys, it goes straight into hidden space > mode, then there would be no suspicion, other than a slightly long boot > sequence (and if the wait time were only 2 or 3 seconds, it might not even > be noticable.) If we are discussing only the customs inspector doing a visual inspection this will certainly work. It won't hold up to TEMPEST analysis where they fingerprint a known un-mod'ed unit and then compare that to yours. The POST shouldn't change from laptop to laptop, irrespective of the filesystem or OS that is actualy installed. The point is that this is a weak approach with a variety of attacks open. When one considers the amount of work required to collect BIOS'ed , reverse engineer them (unless you got lots of mullah), develop the crypto, develop the camouflage code, distribute the code, burn the ROM's, distribute the ROM's, cost of suitable TEMPEST monitors, etc. the benefit seems questionable at best. Even if they can't crack it in may places (eg France) such actions would be prosecutable in and of themselves. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Re: Stego-empty hard drives... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 22 Sep 1998 09:32:49 -0500 > From: Petro <petro(a)playboy.com> > Subject: Re: Stego-empty hard drives... (fwd) > Why prompt, you installed it, just have the startup stop at a > certain point, just simply pause. You hit a couple keys (4-8) and go on. > Given this case you don't really need the security of a long passphrase > since if they are looking to get in, you've lost already. You'll probably not want it to stop, simpy wait a few seconds. Also, if the passphrase is incorrect you'll not want to issue any error messages. Stopping the boot may be a good indication of a problem. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

Re: atheism (was: RE: Democracy... (fwd)) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 22 Sep 1998 09:27:57 -0500 > From: Petro <petro(a)playboy.com> > Subject: Re: atheism (was: RE: Democracy... (fwd)) (fwd) > Basically he is saying you can't deny the existence of something if > you don't know what it is. That's the rub, in transcendental religions with this as a proviso it becomes impossible to even talk about God, he transcends the natural world and escapes any hope of comprehension other than a simple label. In effect transcendental religions have defined themselves into a circle. They define God as something undefinable and then claim that anyone who counters their beliefs is at fault because they can't define God. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

For Women
by tperf＠usa.net 17 Dec '03

17 Dec '03

Dear Adult: This message is intended for mature adults. If it has reached you in error, we apologize. Are you (or someone you care about) affected by the following conditions: · Impotency · Deteriorating sexual function due to: 1. Age 2. Medical Condition 3. Medication 4. Life Style The Performance Technique can reduce or eliminate the adverse affects these conditions have on intimate relations. If not you, maybe a friend, parent or grandparent could benefit. To immediately read about this revolutionary sex technique Visit the Performance Technique Home Page: This is well worth a look. It will change your sex life. Click Here Or go to:http://209.139.56.159/ Good luck - Have fun. President Performance Technique Removal Instructions ------------------------------------------------------------------------ The Mailing List that you are being mailed from was filtered against the Global Remove List at: http://remove-list.com Remove-List is a free public service offering to help the general public get removed from bulk mailings lists and has not been sent this message. If you want their help please add your name to their list and you will not receive a bulk email from us or other ethical bulk emailer. ------------------------------------------------------------------------

1 0