December 2003 - cypherpunks-legacy

Ad: For Dog Owners Only
by tri-max＠t-1net.com 17 Dec '03

17 Dec '03

Hi, Here is A Better Way to Wash Your Pet Think of it as a shower massage for pets. SHAMPETTE easily snaps on to any garden or shower hose. With an integrated shampoo reservoir for instant lather, and flow through massaging fingers that get deep down to the pet's skin. Fleas, ticks & loose hair will have nowhere to hide. Special promotional gift with each purchase, go to link below. http://www.t-1net.com/trimax/Shampette/index.html Thanks in advance for visiting..... /////////////////////////////////////////////////////////////////////////////// To be removed from future mailings, please reply with the word "Remove" in the subject line and this software will automatically block you from future mailings! ////////////////////////////////////////////////////////////////////////////////

1 0

Mitnick Rings Bell
by John Young 17 Dec '03

17 Dec '03

6 November 1997, Digital Cellular Report: U.S. government takes hard line on Mitnick. US Hacker Pleads for Help A US 'hacker'- Kevin David Mitnick - has issued a plea for financial help to fight his defence case through his lawyer, Donald C Randolph of Santa Monica, USA. Through Randolph, Mitnick is claiming that the US government is seeking to make an example of him for the possession of unauthorised cellular access codes. The issue is particularly important in the North American market where analogue, rather than digital cellular, is the norm. In one of the most amazing claims, Mitnick claims to have been kept in solitary confinement for 23 hours a day, naked in a freezing air-conditioned cell for eight months and led to the showers in chains. Perhaps the most puzzling aspect to the whole case is the fact that while the US government has never sought to prove that Mitnick profited from his 'hacking' activities - although he could certainly have done so by 'selling' stolen airtime to third parties. Instead they claim he caused losses in excess of $80 million. Kevin certainly appears to be paying the price for his nefarious deeds having already spent nearly two years in custody during which time he has been prohibited from any access to wireless communications equipment, computer hardware or computer software. It's difficult to know exactly which side is the more paranoid since Mitnick is claiming that his fate is part of a deliberate US government plot to divert scrutiny away from its plans concerning the control and regulation of both telecommunications and the Internet. The case would seem to present a most powerful argument for the US to switch more swiftly over to digital cellular where 'hacking' is far more difficult.

3 2

Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 6 Nov 1997 08:52:15 GMT > From: Adam Back <aba(a)dcs.ex.ac.uk> > Subject: Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd) > Jim Choate <ravage(a)ssz.com> writes: > > Adam Back <aba(a)dcs.ex.ac.uk> > > > Seems to me that the distinction that churches are exempt from taxes > > > partly hinges on their non-profit, or not-for-profit status. > > > > No, it stems from the fundamental democratic axiom of seperation of church > > and state. If the churches pay taxes they aren't seperate. > > I pay taxes, I am separated from the state. Do you hold US citizenship? If so then, no, your assertion of seperation from the state is incorrect. It's that pesky "We the people..." thing. If you want to be considered seperate from the US *AND* you don't want to pay US taxes then renounce your US citizenship and move to another country *OR* figure out a way to become your own 1 person church. Like it or not that's the way it works. > > If the state supports churches they aren't seperate. > > If the state doesn't tax churches they are subsidizing them relative > to other sorts of organisations. This is surely a form of support. Subsidize means to pay, the government does not pay as a rule pay the churches anything, that would violate the seperation clause as well. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

WINDOWS *.PWL program
by �ukasz Bromirski 17 Dec '03

17 Dec '03

Two years ago, you've posted an Windows 95 *.PWL cracking program. However, it was severly broken in our news group. Could you post me personally a full-working copy of it (as an e-mail) or a source (full) of this program? I'll be glad to see it. Thanx in advance. -- ### ### ### ### ## ###### £ukasz Bromirski # # # # # # # # ## # #### e-mail: szopen(a)gazeta.pl # # # # # # # ### # ## tel. (+48) 022 699 48 00 # #### # ### # # # ## # #### Agora-Gazeta Sp. z o.o. ###### ####### ### ## ###### Dzia³ Telekomunikacji

1 0

Clarifying the Language
by Mixmaster 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- TruthPastor wrote: >Jim Burnes wrote: >> On Wed, 5 Nov 1997, Anonymous wrote: >> > Churches, like governments, corporations, or any other organized >> > entity, have some wonderful people in them, doing wonderful things. >> > The problem, as always, is what our founding fathers realized--these >> > types of organizations/structures tend to grow and attain power which >> > is then used for the purpose of self-sustained growth (survival). >> > Humanity tends to evolve, while organized humanity tends to de-volve. >> > Biped humans, walking upright, form organizations which move toward >> > becoming quadrapeds dragging large clubs. > >> Ha! This is pretty interesting. Rather than the typical cypherpunk >> approach of eliminating such inefficient and corrupting methods as >> income taxation and tax exemption we are playing by their game. Pathetic, isn't it? > Taxation and exemptions are, conceptually, no different than a >tribal agreement that those who bring home the deer will share >with those who guard the campsite, and that the shaman who keeps >the evil spirits at bay has to do neither. The important word in this sentence is "agreement". If the American taxpayer does not agree with how his tax money is being used, does he not have the right to demand that it be used in an appropriate way? If his demands go unanswered, does he not have the right to refuse to continue paying? If the American taxpayer does not like substandard education, abortion, weapons manufacturing, destructive environmental legislation, and so forth, why should she be forced to pay for it? The simple fact is that taxation in America has ceased to be an agreement, and has devolved into extortion with the threat of jail/forfeiture for "non-compliance". >> The whole of [Orwell's] warning to society was that by systematically >> altering the language, you alter the things that can be discussed. > > I believe that half of the disagreements on the cypherpunks list, >and the vast majority of disagreements in the world in general, are >the result of disputes over semantics, rather than beliefs. If one were to break down the anti-Income Tax argument to its most basic level, it would be that the government does not have the right to extort money from its citizens to promote agendas which are destructive of the citizens' persons and property. Basic Common Sense (TM). Nerthus -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNGHX9uFWwZe05jcJAQGj8AgAhPmUFgdrB5Wf5TYARJs7BovxFd+irLSA DlSehEMQfzergb3hsl90rW+HFxlw01CueQrkZpCKlRoHUxeoj3vimgpXBJRwjFDE ky2qhCSlFcjXEtqB6IBvPkzqd7lUK/lpv7VQzgsUrz6kS97l566sQTSILzF10mN2 NUT2CawCaU+69ZzR+oNwe6V8Yf1CWygIDYKnOiSpwRYsB6AV0kZcb5RKIYfDnNe7 FFjLsbg6L7LhQvvHHcs8CRkzjwo70sDI6kLOdUJvWPhyzuf4laam8L+tguTxrA96 2TUsMuG6Hi3WJVcUkabkx8J4D6yy3Pqep/scSgaqvwAr6VFJBh+KLg== =32Dc -----END PGP SIGNATURE-----

1 0

CNN's "Ian Goddard Plot"
by freematt＠coil.com 17 Dec '03

17 Dec '03

From: Ian Goddard <igoddard(a)netkonnect.net> Subject: CNN's "Ian Goddard Plot" _________________________________________________ ( free to forward & copy nonprofit with attribute ) ------------------------------------------------- CNN's IAN GODDARD TWA 800 "PLOT" (c) 1997 Ian Williams Goddard I've tried to decisively extricate myself from my TWA 800 inquiry, but it seems that CNN and the gov't don't want me to go. CNN is spreading gross misinformation on television, indicating that I said my inquiry into TWA 800 was part of a "sham" and a "plot." That is FALSE!! I've always promoted what I believe, and now I believe promoting the Navy-missile theory was a big mistake! I believe that the evidence is not sufficient to blame the Navy and I wish to move away from that and all areas of conspiracy inquiry forever. But I never said my inquiries were a "plot" or a "sham." Christine Negroni with CNN contacted me a few days ago to ask about my change of direction, I did not contact her. CNN reports now suggest that I said my conspiracy inquiry was part of a "plot" (a secret scheme) to do damage to the government's reputation. That's 100% FALSE !! My only crime is honesty. I'm honest enough to admit, as I have for months, that my inquiry into TWA 800 was an effort to identify untruth in the government. I have a fact-based bias against government, I'm a libertarian. My webpage was entitled "Anti-Authoritarian Journal," identifying my bias up front, unlike most sources. Such up-front honesty is NOT a "plot," as CNN attempts to portray it. The fact is that anything that is labeled what it is up front is by definition NOT a plot. I'd say CNN has a bias for the gov't line, however, does CNN label its journalism "Authoritarian Journalism?" No. WITNESSES NOT MY FAULT I did not invent nor am I to blame for the fact that 150+ witnesses reported having seen something fly upwards and explode at the spot TWA 800 was. That there were such wit- nesses, up to 154, has been widely reported in the media. CNN just reported in reference to me: Joe Lychner of Houston, who lost his wife and two daughters in the crash, told CNN that Goddard and Salinger owe an explana- tion to the American public. The basis of the missile theory are the witnesses, and I did not invent the witnesses. If anyone owes America an explanation for the missile theory I think it's the wit- nesses, not me. All I did was report what they said and commit the error of theorizing that maybe that fiery thing shooting up was a Navy missile and the Navy is covering it up. I also did not invent the Navy-missile theory. My explanation for that theory is that the Navy is known to have many missiles and is known to be off- shore where the plane crashed. However, an inventory showed that all Navy missiles were accounted for... OK fine, I'm ready to move on, but it seems they aren't: National Transportation and Safety Board spokesman Peter Goelz told CNN that my re-reporting of witness accounts and theorizing that the Navy was at fault has done "real damage" and "caused innumerable people great agony." Wow! It seems I'm a human monster of immense proportions. I am sorry for that, yet it would seem that the fault lies in part and primarily with the major media for ever having reported the witness accounts in the first place. I then made the mistake of suggesting that the Navy may have been at fault and is covering it up, which I now see as a mistake, for I could be wrong and if I'm wrong I've impugned the reputations of America's finest, which is something I should not and do not now want to do, and for which having done in the past, I am very sorry. I don't know what happened to TWA 800, and at this point I don't care! I just want to be left alone and no longer harassed by the major media and others over the TWA 800 case. I'm sorry I thought the Navy did it. It was a mistaken thought. I'm sorry my thoughts have "caused innumerable people great agony." I'm a humani- tarian and have been a vegetarian for 19 years because I want NOT to cause suffering to any living being. CNN's "SECRET SCHEME" THEORY I've never published anything I thought was false. I even published errata notices when required. All claims I've made were meticulously referenced so that readers could check up on what I said for themselves. Providing not just referenced information and ideas but all the links necessary to access the larger body of information about the case is what made my reports so popular and what made this little guy the focus of world news. My plan has been to end my "war on the Establishment." Wanting to move on from conspiracy theory and set a new course, I asked Doctor David Stern, who hosts the DEEP TIMES webpage, to remove my conspiracy reports. However, due to CNN's misleading charges that I've admitted to having been engaged in a "plot" and thus that I will- fully attempted to mislead people to believe what I knew to be false, I have requested that David Stern temporarily replace all my reports so that people can judge for themselves if I was the liar CNN suggests. It will take David some time to get the reports back up, but when they are up you can access them directly at: http://www.copi.com/articles/Goddard or indirectly at: http://www.copi.com/articles/. Please check the first site within the next few days. _____________________________________________ Ian Goddard, now at <igoddard(a)netkonnect.net> ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor,1933 E. Dublin-Granville Rd.,#176, Columbus, OH 43229 Archived at http://www.reference.com/cgi-bin/pn/listarch?list=FA@coil.com **************************************************************************

1 0

Re: Privacy Software
by nobody＠neva.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Adam Back wrote: >Java isn't so bad. Just in time compilers are being shipped with >some browsers (netscape on some platforms). Sun now has native >bigint library (good for you know what, and exportable because they >haven't included the few lines required to implement public key >encryption with it). Okay, Java sounds pretty good. The native bigint library clinches it! >> While it may seem crazy to toss compatibility, it has some >> advantages. For instance, the only people who will use it are the >> hardcore types. I like the idea of an exclusive crypto system that >> only cool people who are fairly with it use. > >I think there would be advantages to always tunneling the encrypted >messages inside PGP, that way no snoops know you're using it, until >it's too late. Aside from political correctness issues, why not? It would also be nice to have an encrypted SMTP channel which happens to be riding on IPSEC. >> If the protocol doesn't accept multiple keys for a message it is >> slightly CAK/GAK resistent. And, it's a nice statement of intent. >> It's also nice to have tools which help you to behave securely >> without carefully thinking about it when you are using them. > >Forward secrecy is what you want for GAK resistance -- can't get much >more GAK hostile than burning your keys seconds after message >receipt. The more I think about the more the separation of authentication keys from communication keys seems like the way to go. If both parties can connect to each other's machines in real time, then a negotiated key which is discarded is great. More often everybody's offline, but that just means you have to publish many different communications keys, perhaps sorted by hours. (Given remailer lag you might have to keep communications keys around for a day or two after expiration, but that's not too bad.) >> The randseed.bin file has always bothered me. What we really want >> is some good sources of entropy in which we have tremendous >> confidence. > >What's wrong with the randseed.bin and the public and private key >rings is that they should all be encrypted with a key derived from >your passphrase. It's also complicated and hard to understand. The Right Thing (TM) is to simply solve the entropy problem correctly. >> >I wonder how good linux's /dev/urandom would be if MD5 becomes even >> >more suspect. >> >> Well, neither of these would be good for a one time pad, of course. > >Linux's /dev/random might not be bad. There is some real entropy in >key strokes and mouse movements, and they are quite conservative >about entropy estimation. You can easily make it more conservative >-- XOR together a load of it to derive a smaller key. The problem with computers generating entropy is that they are complicated machines which are designed to be deterministic. While it seems reasonable that keystrokes and mouse movements have some entropy, its hard to really convince yourself that there couldn't be patterns arising from the OS somehow. For example, maybe the sample times form weird patterns which are related to the scheduler. By all means this can be XORed in, but it seems dangerous to rely upon it if you are trying to be hardcore and use one time pads. >> It would be neat to have, say, three sources of hardware randomness >> and then XOR the result with the above pseudo random output. > >That'd be fine. Personally not being a hardware type, I am >suspicious of hardware RNGs.. I can't tell when they are going >wrong.. failure modes can be dangerous (whoops lead fell of geiger >tube), etc. Most plausible failure modes in hardware should be detectable with the usual tests for "randomness". >Software and computers are easier to understand. Provided you XOR >the lot together you should be fine though. Software and computers are highly complex devices and we don't truly understand every aspect of their operation. We can say it's unlikely that there are patterns in the bits they generate, but if we resorting to one time pads, it seems to me that the entropy question has to be nailed down completely. (Not that I have a good solution, yet. As you pointed out, one time pads consume a lot of entropy. It takes a long time to flip a coin 1.5 MB * 1024 bytes/MB * 8 bits/byte times!) Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNGK7tpaWtjSmRH/5AQH1Rgf7BWVm8IsauXUry7vzL1Wiw/jlISKXO+q2 SWXOW0ce2jH1wKH+X3FbiONLYihzhp8UIvyn6FO7rVXHMdXoDXFVhrpyhbphcejM hokty69o1hQqLU9aX6z7OAA7Vjj2zKZXWc7U596UGkc0+G64qpJfh7kZoHY+Q332 uWMhEHu0AOnv9wGK9Fip4J4n/4jh/ob00VXXeTGG9peJ/AZBqtJMHV9tLW8Xu2EA Yc+zdUmk2jjSHvi2a/9u8NTsJapUVFiEaZ8+iQCZYeP8SG6oAsMmMb0rrCj1y+DK EtMt0rtC6jHGl8dag7zfZLpiIrl6mObMexbh5gAJ40Fb6Ei0HLbZ0g== =4BA0 -----END PGP SIGNATURE-----

1 0

Re: Protocols for Insurance to Maintain Privacy
by Anonymous 17 Dec '03

17 Dec '03

Two ways to tell if the person has had the test: A) The company performing the test keeps track of everyone who has had it. This could be by some biometric ID, perhaps even a DNA fingerprint. B) The company performing the test marks people who have had it. They could have a harmless radioactive tracer injected. This would degrade after a while but it could be used to see if the test had been taken within some time interval. Both of these require that all companies able to issue the test cooperate and that there is no black market source of testing.

2 1

[news] U.S. cyberterrorism report hit on encryption stance
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

*** U.S. cyberterrorism report hit on encryption stance The U.S. commission on critical infrastructure was criticized Wednesday for endorsing the Clinton administration's policy requiring government access to all private computer data. Sen. Patrick Leahy said key questions had been raised about costs and feasibility of so-called key recovery systems. "Until those significant questions are ... answered, we should be cautious in adopting grand key recovery encryption schemes that may exacerbate system vulnerabilities," Leahy said. The commission's report warned key telephone, power, water and financial systems were increasingly vulnerable to computer attack. For story http://www.infobeat.com/stories/cgi/story.cgi?id=5804555-b01

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

I have your GAK. Mail me your CAK and we'll trade.

1 0