December 2003 - cypherpunks-legacy

Re: .....
by Anonymous 17 Dec '03

17 Dec '03

> Intel plans to include security features in upcoming chipsets, including copy > protection, certificate management, and -- get this -- random number > generation. This will be implemented in firmware, and, given that it is > supposed to perform copy protection functions, there is a significant > possibility that the code would be inaccessible, maybe (heaven forbid) within a > tamper-resistant shell. To clarify exactly why this is a problem: although it obviously won't affect the security of existing apps, it's likely that many newer apps will be dependent on this possibly-secret firmware for security, and we all know the evils of depending on a design not subject to intense public scrutiny. Worse yet, it seems possible that a certificate-based system could be used to ensure that neither non-Intel chips nor software fill-ins would be accepted by applications using the firmware. And, of course, except for what was mentioned in the TechWeb article itself, this is all conjecture based almost entirely on Murphy's Law.

1 0

Re: McAfee PGP 6.0.2
by Edwin E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Duh! You're so right. here's the URL http://www.nai.com/products/security/pgp_perspriv602.asp In Liberty Edwin At 08:37 PM 12/17/98 -0800, you wrote: >> I got it! I had to use their search engine to find it though. Took 3 >> tries to get it because the ftp kept stalling. If anyone can't find >> it I will be happy to send it on as an attach. > >It might help if you posted either the URL or the terms you fed their >search engine to locate it. > >-- > Jim Gillogly > Trewesday, 28 Foreyule S.R. 1998, 04:36 > 12.19.5.14.0, 6 Ahau 13 Mac, First Lord of Night > -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNnnoFEmNf6b56PAtEQIe1wCggnyZc8La+KNjL1e2qSK7dbt/kQgAn3o8 GkjttjZC9VldQ7jFCueSm6Ex =PAxS -----END PGP SIGNATURE----- When freedom is outlawed.......Only outlaws will be free! If cryptography is outlawed, pomz pvumbxt xjmm ibwf dszquphsbqiz. Fun! Fast! Revealing! Try "The World's Smallest Political Quiz" at: http://www.self-gov.org/quiz.html IS AIDS A GOVERNMENT/DRUG COMPANY HOAX? http://www.virusmyth.com/aids/index.htm When you blame others, you give up your power to change. Dr. Robert Anthony Libertarian Party of Hillsborough County, FL http://home.tampabay.rr.com/lphc When a place gets crowded enough to require ID's, social collapse is not far away. It is time to go elsewhere. The best thing about space travel is that it made it possible to go elsewhere. Lazarus Long

1 0

RE: Encryption chip
by Brown, R Ken 17 Dec '03

17 Dec '03

> Does anyone know if there is some kind of chip, > or IC commercially available that does secure encryption? Yes, somebody does know. OK, sorry, that was facetious. In fact I know.

1 0

RE: I must admit. . .
by Richard.Bragg＠ssa.co.uk 17 Dec '03

17 Dec '03

So maybe this needs a multi-phase approach. 1)The mail programs themselves will encrypt between servers. This can be used to both protect the message(s) from being read (easily). Does PGP also assist by doing some compression?. Also it can be used to autheticate messages using a signiture which will have the dual purpose of providing some tamper proofing. 2)The receiving mail-server will autheticate the incoming message against its own list of known servers, and validate that the contents of the message as a whole appears OK. Maybe it will flag messages that fail these checks. It can also flag messages that arrived without server encryption. 3)If the incoming decrypted message is not itself privately encrypted by the sender it will use PGP to encrypt the message for the user before storing locally. If the sender has already encrypted the message then it will simply store it. Caveats A)All systems must have compatible encryption systems or access to those systems. (Why limit to just one?) and all those systems must have some sort of agreed means of flagging the message to allow automatted decryption. B)Some means of exchanging public keys must be developed. This must allow for keys to be changed. What happens when keys are changed, and messages are still in transit from the old keys. C)Not everyone is wise enough to use UNIX. Some people even use (pardon the language) Windoze or even AS/400's. There is plenty more scope for discussion here I think even if it is some of the less verbally able slagging off about old ideas that can't/won't work because ... etc. Surely there are enough brains out there to thrash this through properly. Hwyl "William H. Geiger III" <whgiii(a)openpgp.net> on 18/12/98 00:23:05 To: "Marcel Popescu" <mdpopescu(a)geocities.com> cc: "Cypherpunks list" <cypherpunks(a)toad.com> (bcc: Richard Bragg/UK/SSA_EUROPE) Subject: RE: I must admit. . . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In <000301be2a14$9e5a8ec0$22fcb3c3(a)roknet.ro>, on 12/18/98 at 01:26 AM, "Marcel Popescu" <mdpopescu(a)geocities.com> said: >> I for one would like sendmail integrated with PGP. For example: >> sendmail asks receiving server if it has PGP, and please give >> your public key, I have mail for you.. Then send the e-mail >> encrypted, while the receiving sendmail decrypts it and delivers >> forwards. This is not very effective, but it would help some. >I think this is a great idea. First time I'll play with making a POP >client (an idea that appeals to me once in a while) I'll think about >it... Wouldn't it be more efficient to use TLS or SSH as an encryption protocol between the POP3d and the POP3 client? This could also be used for sendmail<->sendmail transactions. This still does not address local storage on the POP3d server. I am looking to setting up procmail to automatically PGP encrypt incomming messages and the forwarding them to a local account so even if the sender does not have PGP once the message is received by the PGP mail forwarder the messages will be PGP encrypted (I have had several people contact me looking for solutions to ISP's snooping on their mail without relying on the senders using PGP). - -- - --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html - --------------------------------------------------------------- Tag-O-Matic: OS/2: Your brain. Windows: Your brain on drugs. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i OS/2 for non-commercial use Comment: Registered_User_E-Secure_v1.1b1_ES000000 Charset: cp850 wj8DBQE2eZOrlHpjA6A1ypsRAgVDAKCpsNkbUjYCe77XBFHXnQDjZveHIwCg81zI UQM3ssGqYt/sQ+674XepePs= =GLQh -----END PGP SIGNATURE-----

1 0

Technical Analysis Special Offer
by richardcwaits＠telescan.com 17 Dec '03

17 Dec '03

We've put together a technical analysis package that will help you profit not just in 1999, but into the next millenium. And with your purchase of $125 or more, you'll get your choice of one free investment book! Just buy any of the information packed books, video tapes or CDs below with a total value of $125 or more, and choose one of the four books listed at the bottom of this message. But you must order by December 30, 1998 to receive this special offer! Call (800)324-8246 today to get a great package of educational materials, plus one free book! Trading 101 and 102: The 101 book is a step-by-step guide to all the trading basics. Learn how to create a personalized trading system, backtest it, and evaluate performance. Then step up to the Trading 102 book, "Getting Down to Business," a complete guide to starting and managing your own trading business. Get both books for $68! Market analyst John Murphy shows you how to profit with technical analysis with these two unique resources. In his book "The Visual Investor," Murphy shows you how to track the ups and downs of stock prices by visually comparing charts (includes software disk.) In his new videotape, "Applying Trading Methods to Today's Trading," Murphy shares his perspective as he reveals some of the technical indicators he uses to analyze the markets. Buy both the book and video for only $89! Learn how to Interpret Bollinger Bands. Attend John Bollinger's exclusive one-day seminar... in the comfort of your own home! In this two-videotape set, Bollinger shows you the history and construction of trading bands, how to interpret Bollinger Bands and what indicators to use for confirmation. Also covered is %b, Money Flow, "The Squeeze," and chart analysis. John Bollinger also reviews in detail his latest industry group work, including Early Warning Signals. It even includes an in-depth workbook. Just $195! Thomas Myers' Technical Analysis Course teaches you how to recognize market trends with his basic course, and how to use trends for profit. Just $47.50! Martin Pring, one of the foremost technical analysts in the world, has created the perfect guide for beginning technicians. In his book Technical Analysis Explained, Pring gives you a one-on-one course on every aspect of technical analysis. And the interactive companion CD-ROM is a user-friendly way to help master the techniques. Just $89.95 for both! Through this special year-end offer, a purchase of $125 or more entitles you one of the books below. Cyber-Investing: Cracking Wall Street with your Personal Computer (a $26.95 value) Wall Street City: Your Guide to Investing on the Web (a $27.95 value) ProSearch Strategy Handbook - 1999 Edition (a $39.95 value) Reminiscences of a Stock Operator (a $19.95 value) Call 800-324-8246 to order. This offer ends December 30!

1 0

RPK Encryptonite engine
by CyberPsychotic 17 Dec '03

17 Dec '03

Hello people, Just wondering if anyone could pull a word on RPK crypto. They say they built their engine based on Diffie-Hellman Key Exchange principles (which shoulds safe enough), but they claim their software doesn't fail under US crypto restriction law, which makes me suspicious. -- fygrave(a)tigerteam.net http://www.kalug.lug.net

1 0

War as a public relations excercise (was re:Comrade Klinton at it again)
by Brown, R Ken 17 Dec '03

17 Dec '03

> nobody(a)sind.hyperreal.art.pl is accused of writing: > > As I recall, the name "Desert Fox" was a nickname > held by a Nazi general. Fitting, that. It's what Allied journalists called Erwin Rommel, who was a German general, if not exactly a Nazi. Sometimes said to be a military genius. IIRC he distinguished himself well as a Panzer commander under Guderian in the attack on France; commanded the Afrika Korps & was beaten by the Allies (doing his reputation little harm - they were strongly outnumbered and probably lasted longer than they were expected to); and then was injured in the D-day invasion, invalided out and accused of plotting to kill Hitler. He was murdered by the Nazis (in that he was told that if he commited suicide his wife and children would not be sent to a concentration camp, which counts as murder in my book). Once upon a time a code name for a military "operation" was just that, a code name. These days it is a brand label. Probably thought up by the same guys that Coca-Cola or Ford would hire to name a new product. For any British person over the age of about 30 "Desert Fox" will immediately bring to mind Rommel, WW2 and the "Desert Rats", the British 8th Army (in fact mostly Indian + Australian with contingents from all over the Empire) who fought against Rommel in North Africa. That reminds us of the long-range Desert Group & for those who have been paying attention, the SAS, (who get *heaps* of publicity here. There is a whole tacky genre of SAS books and magazines) which in turn is supposed to make us feel good (all that rhetoric about "punching above our weight" and the "best trained and most skilled army in the world", "the Professionals"). And "Fox" brings to mind foxhunting of course. The choice of name is meant to imply to British audiences that "our boys" are out there hunting Saddam, even though that has been officially denied by both UK and US government. All the publicity refers to "him" and "his" weapons. No-one ever says "we are at war with Iraq", it is always "we are denying *him* the use of *his* weapons of mass destruction". Maybe we will soon start to see planted media hints that there are, or have been, SAS on the ground in Iraq looking for *him* - which will be instantly denied in such away as to allow people to carry on thinking that it is true if they want to. The US may have a law against killing heads of state but we Brits don't (although apparently we are still unsure as to whether we have a law against extraditing them to Spain when accused of a mere 3,000 murders). I strongly suspect the news management for this war was handled by the Brits, possibly the same spin team that handled last years Labour general election victory. The first attack was about 4 minutes to 10 pm UK time. I heard it as a newsflash on the radio & then turned on the TV just in time for ITV's "News at Ten" program. One of their journalists was waiting outside that front door of 10 Downing Street, obviously tipped off about an "important announcement" and the PM came out sometime around 10 past 10 to make his speech (half an hour *before* Clinton, which must have been agreed between the governments) which ended just in time for the ad break. I suppose Clinton's speech would have been about lunchtime on the West Coast, late afternoon on the East Coast. A bit early from the POV of news management. It gives the networks a few hours to work on it before prime-time TV. One of the first rules of this sort of thing you want your own words to go over unedited if at all possible - the less time the networks get the more likely you are just to be given a live mike. That way you get to choose your own sound-bites. Or borrow them from Margaret "There is No Alternative" Thatcher. Of course she needed the Falklands War to get re-elected, and Clinton needs all the help he can get, but Blair is still master of all he surveys (Well, except for a few of us unreconstructed far-lefties, Peter Mandelson's private life, and Welsh Labour Party) so perhaps he can afford to be magnanimous in victory. Or perhaps he really thinks that there is no alternative. We could accuse them or timing the attack for TV, although I suspect 0100 Baghdad time was in fact a sensible H-hour. You'd want it after dark, and later rather than earlier if you were interested in minimising civilian casualties. I suppose 0300 or 0400 might have been better - but that would have missed UK evening TV and given the news media time to sort out their story for the morning (some of the "serious" papers here came out against the attack. Tabloids seem to be all for it of course). As it was everyone got the government announcement first. Ken Brown This all my opinion and nothing to do with my employers. (And I am certainly not even going to speculate about oil prices from this address).

1 0

international free crypto campaign
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: "Erich Moechel" <erich-moechel(a)quintessenz.at> To: rms(a)gnu.org Date: Fri, 18 Dec 1998 11:55:26 +0100 Subject: international free crypto campaign CC: rah(a)shipwright.com Priority: normal Status: U Hello, We are in the midst of developing logos 4 the global campaign proposed as followup 2 the Wassenaar decision. The logos are here: http://www.quintessenz.at/freecrypto.html We would appreciate ur evaluation, suggestions highly welcome. quintessenz group is a founding member of the Global Internet Liberty Campaign. I've done much on the spot reporting from Wassenaar Office here in Vienna and am one of the coordinators of the International Crypto Campaign. hoping 2 hear from u Erich -.-.- --.- -.-.- --.- -.-.- --.- q/depesche taeglich ueber internationale hacks--.-zensur im netz crypto--.-IT mergers--.-monopole & die universalitaet digitaler dummheit subscribe http://www.quintessenz.at -.-.- --.- -.-.- --.- -.-.- --.- Certified PGP key http://keyserver.ad.or.at -.-.- --.- -.-.- --.- -.-.- --.- erich-moechel.com/munications ++43 2266 687201 fon ++43 2266 687204 fax -.-.- --.- -.-.- --.- -.-.- --.- --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

4 3

RE: McAfee PGP 6.0.2
by Wilson, Jamie (J.R.) 17 Dec '03

17 Dec '03

I downloaded my copy from http://www.nai.com/products/security/pgp_perspriv602.asp. ____________________________________________________ Jamie R. Wilson -----Original Message----- From: John Holland [mailto:ekkensj@earthlink.net] Sent: Thursday, 17 December, 1998 18:44 To: cypherpunks(a)toad.com Subject: Re: McAfee PGP 6.0.2 >McAfee has announced that they are giving away the commercial version of PGP 6.0.2 for free for a limited time. Where is the free version available? Neither the McAfee or Network Associates web sites mentioned this.

1 0

Dec. 18 column - Clinton still lying
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Thu, 17 Dec 1998 20:49:17 -0700 Date: Thu, 17 Dec 1998 19:52:00 -0800 (PST) To: vinsends(a)ezlink.com From: Vin_Suprynowicz(a)lvrj.com (Vin Suprynowicz) Subject: Dec. 18 column - Clinton still lying Resent-From: vinsends(a)ezlink.com Resent-Sender: vinsends-request(a)ezlink.com Status: U FROM MOUNTAIN MEDIA FOR IMMEDIATE RELEASE DATED DEC. 18, 1998 THE LIBERTARIAN, By Vin Suprynowicz There, he did it again So again, American missiles and planes are committed to a half-hearted, just-to-make-a-point "war" in Iraq. (Does no one else recall that a longer-haired Bill Clinton once protested a war in Vietnam because it was not legally declared, and further because it was unwinnable, given that Lyndon Johnson's policy of gradual escalation and "measured response" turned out to be good for nothing but filling body bags?) And so the vast majority of Americans now shuffle into line, dispiritedly rallying once again behind our fighting men and women, praying for their safety. But Americans express this subdued support in spite of -- not because of -- their faith that their current president would never lie. President Clinton will almost certainly be impeached by the House of Representatives within days if not hours, for past lies and subversions of justice aimed solely at protecting his own power, privilege and prestige. But surely matters of life and death, war and peace, are of such moment that no president would subordinate them to any ongoing attempt to sidestep justice ... right? In the final episode of the award-winning documentary series "The World at War," a middle-aged German woman -- she had been a teen-ager in the spring of 1945 -- recalls hiding in a Berlin basement as Russian shells rained down overhead, listening with her mother to what was likely the final radio broadcast by Nazi public relations chief Joseph Goebbels. When Goebbels promised that the war would yet be won by secret weapons soon to be unveiled by der Fuhrer, the teen-aged girl expressed disbelief. She was then stunned when her mother slapped her, admonishing: "Do you think Herr Goebbels would lie to us at a time like (start ital)this?(end ital) Mr. Clinton's crimes are on nowhere near the scale of those of the Nazis, of course. (Though the relatives of the women and children his henchmen killed at Waco might ask what difference the "scale" makes -- as now the same question may occur to those dying in Iraq to prevent that sovereign nation from stockpiling the same kinds of weapons the United States has possessed for decades.) But isn't there a ghastly fastidiousness to the way this simpering administration insists it will not bomb during the Ramadan holiday so as not to offend "Muslim sensibilities"? When George Patton's First Army was racing to the relief of Bastogne, did the troops take a day off from killing Germans on Dec. 25? If foreigners bombed your home and killed you family, would you be less offended to have them do so on Dec. 22 than on Christmas Day, or Yom Kippur? Do Mr. Clinton and his political advisors really understand what war (start ital)is(end ital)? Meantime, the evidence mounts (it never seems to take long, anymore) that Mr. Clinton did indeed lie again on Dec. 16, when he told the American people that he decided on the timing of these latest bombings not to divert attention from his own impending impeachment, but rather upon the specific catalyst of receiving -- on Wednesday -- a final report from U.N. arms inspectors. The Washington Times reported in a front page story Thursday that, according to "authoritative sources," the White House notified the Joint Chiefs of Staff that air strikes would be ordered this week on (start ital)Sunday(end ital), "48 hours before he saw a United Nations report declaring Iraq in noncompliance with weapons inspectors." Providing third-party corroboration, Israeli spokesman Aviv Bushinsky said Wednesday that President Clinton discussed preparations for an attack with Israeli Prime Minister Benjamin Netanyahu just minutes before Mr. Clinton flew home from Israel on (start ital)Tuesday(end ital). What does it matter, which day the president made the decision? It doesn't , of course; it only matters if the president deliberately lied about it, which then throws into question anything else he has said about the real motives for these actions. The Times further quotes a "senior congressional source" reporting that "White House eagerness to launch air strikes grew with intensity as a parade of centrist Republicans announced they would vote to impeach the president." The credibility of the president (start ital)does(end ital) matter. The ability of the public to have confidence that the man in the Oval Office will put the faithful execution of his constitutional oath and duties ahead of his personal ambition -- even his own political survival -- (start ital)does(end ital) matter. Or are we willing to accept a world in which wars orchestrated by television producers with the goal of improving "ratings points" turn out not to be fiction, at all? (The second thing White House spokesmen did Dec. 16 -- after announcing the latest raids on Iraq -- was to deny this was "a Wag the Dog scenario," referring to the reason cult comedy in which a hypothetical president arranges a fake Balkan war to keep a sex scandal off the front pages.) For all his failings, can anyone imagine Franklin Roosevelt troubling himself to deny that the D-Day landings of 1944 were staged as a mere political stunt, to "make him look more presidential"? Mind you, I wish more Americans would start ridiculing the absurd assumption that we need the federal government to hold our hands and change our diapers, cradle to grave. The best remedy for the pretensions of many of these arrogant bureaucrats to run our lives is indeed to laugh them out of town. I just never expected to see the United States of America turned so quickly into an impotent laughing stock, and from the top down. Vin Suprynowicz is the assistant editorial page editor of the Las Vegas Review-Journal. Readers may contact him via e-mail at vin(a)lvrj.com. *** Vin Suprynowicz, vin(a)lvrj.com The evils of tyranny are rarely seen but by him who resists it. -- John Hay, 1872 The most difficult struggle of all is the one within ourselves. Let us not get accustomed and adjusted to these conditions. The one who adjusts ceases to discriminate between good and evil. He becomes a slave in body and soul. Whatever may happen to you, remember always: Don't adjust! Revolt against the reality! -- Mordechai Anielewicz, Warsaw, 1943 * * * --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0