December 2003 - cypherpunks-legacy

attn bianca@dev.null
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

1 0

patenting big brother
by Ariel Glenn 17 Dec '03

17 Dec '03

if it's not one thing, it's another. Ariel Glenn ariel(a)columbia.edu ----- http://www.nytimes.com/library/cyber/week/101397patents.html Engineer Invents Computerized Surveillance System By TERESA RIORDAN Imagine that a city park were studded with discreetly placed cameras that fed images into computers programmed to keep a watchful eye. This may sound darkly Orwellian, but David Aviv, a former aerospace engineer, has patented exactly such a system as a way of combating crime. Aviv said his invention, which he calls the Public Eye, used pattern recognition to detect robberies or acts of violence. He said he had digitized and stored a library of physical interactions. "We employed actors to do re-enactments of muggings," he said. "We had 10 different sizes of muggers and 10 different sizes of victims." The camera sends to a computer the real-time images of a person getting money from an automated teller machine, for example. The computer then takes a snapshot and compares the image against the library of threatening interactions. "It takes another snapshot and then another snapshot and does a similar comparison over and over again to reduce false alarms," Aviv said. "I'm describing this in slow motion, but it actually takes place every fraction of a millisecond." If the computer detects a malicious act, an alarm promptly alerts the police or a paid guard. Aviv said he also used a type of pattern recognition, called word gisting, to detect aggressive verbal interactions. Muggers, according to Aviv's research, use a limited vocabulary. "Mostly they say, 'Give me your money,' and then use a lot of cuss words," he said. His word-gisting library contains about 20 basic words, spoken in a number of different dialects. How is Aviv's system different from having a human guard observe a bank of television monitors? "Guards get tired," Aviv said. "And they are expensive." Aviv estimated that it cost about $130,000 a year to have one site manned by guards 24 hours a day. "My system you could lease at $500 a month," he said. "You're not going to eliminate all guards, because you still need someone to run over when a hostile act is taking place." Aviv's company, ARC Inc., which is based in Las Vegas, is seeking financing for further development of the surveillance system. He received patent 5,666,157.

2 1

Public Key Smart Card
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Mon, 13 Oct 1997 18:48:39 -0400 From: Robert Hettinga <rah(a)shipwright.com> Reply-To: rah(a)shipwright.com MIME-Version: 1.0 To: rah-web <rah(a)shipwright.com> Subject: Public Key Smart Card http://www.businesswire.com:80/cgi-bin/sr_headline.sh?/bw.101397/501100 [(c) 1997 Business Wire | www.businesswire.com] ---------------------------------------------------------------------------- BW1111 OCT 13,1997 5:29 PACIFIC 08:29 EASTERN ( BW)(GEMPLUS) Gemplus Announces Availability Of GPK4000, Public Key Smart Card Business Editors MONTGOMERYVILLE, Penn.--(BUSINESS WIRE)--Oct. 13, 1997-- First Smart Card To Combine Digital Signature, On-Board Key Generation, and Electronic Payment With Multi-Application Functionality Gemplus today announced the availability of GPK4000, the first public key smart card to combine digital signature, on-board key generation, and electronic payment with multi-application functionality. The GPK4000 smart card, with its advanced cryptographic co-processor, can be used to secure Internet, intranet and extranet transactions in such applications as electronic commerce and computer security. GPK4000 features full cryptographic functionality, including 1024-bit RSA-based digital signature at sub-second speed and 4 Kbytes of application memory. Additionally, it provides an on-board key generation mechanism that ensures that the private component of the public key that performs the cardholder's digital signature is never seen outside the card. GPK4000 keys, whether generated internally or loaded by the issuer, can be certified by any certification authority through the card's ability to store industry-standard X.500 certificates in the card's memory. The card has also been specifically designed to strengthen the security of Web sites that rely on the SSL3 protocol for mutual authentication of client and Web server. "We are pleased that industry leader Gemplus has chosen RSAs industry leading technology for their high-quality, high- performance smart card," said Jim Bidzos, president of RSA Data Security, Inc. "RSA is considered to be the most trusted encryption available, whether for Web browsers or smart cards. When it comes to applications of smart cards such as electronic cash or personal identity, there is no such thing as too much security. Users can use these smart cards with the greatest of confidence." Gemplus GPK4000 cards will be used in the upcoming version 2.0 release of ImagineCard, the only complete security solution for both corporate applications and Web services, jointly developed by Hewlett-Packard, Informix and Gemplus. "The additional capabilities of Gemplus GPK4000 enable our customers to deploy more comprehensive smart card applications based on ImagineCard solutions," said Christian Roy, general manager of HP Enterprise Networking and Security Division. "Through ImagineCard and the strength of Gemplus GPK4000 card, HP meets its commitment to bring the benefits of smart cards to support the extended enterprises business processes." "Authentication is a necessary component for the widespread adoption of electronic commerce," said Anil Pereira, director of corporate marketing for VeriSign. "VeriSign Digital Ids stored on Gemplus GPK4000 smart cards provide Internet and corporate network users with a convenient, portable method for secure access to online resources and a trusted, proven solution to participate in secure communications and online payments." Gemplus Public Key Cards GPK4000 is the second in a line of Gemplus public key smart cards for securing Internet, intranet and extranet services. The GPK2000 card, with 512- and 768-bit key lengths was announced in 1996. The GPK (Gemplus Public Key) family will continue to be enhanced, with future versions including more memory and additional functionality. The GPK card range is compliant with ISO7816-1, -2, -3, -4 and is EMV compatible. GPK4000 features a suite of developer algorithms, including RSA, DSA/DSS, DES, Triple-DES, MD5 and SHA1. GPK Developers Kit The GPK Developers Kit enables developers to prototype applications. It includes: -- PILOT GPK, Windows-based software for rapid application development and personalization; -- A card reader (GCR410) with RS232 serial port connection; -- Sample GPK4000 cards; and -- A reference manual and application notes. About Gemplus Gemplus Corporation is the North American subsidiary of Gemplus Group, the world's leading producer of magnetic stripe and smart cards. It manufactures and sells memory cards, microprocessor cards (both contact and contactless), magnetic stripe cards, as well as electronic tags. It also designs and markets software, terminals and systems; and provides personalization, consultancy and training services to offer its customers comprehensive solutions. In 1996, Gemplus Group's total sales were $440 million. By the end of 1997, the company will have a production capacity of 900 million plastic and smart cards. Gemplus sells its products worldwide for such applications as public and cellular telephony, financial transactions, loyalty, transportation, education, healthcare, gaming, identity, access control, pay TV, security for computer networks and electronic commerce. Information about Gemplus' products and services can be found on the World Wide Web at: http://www.gemplus.com. -0- All trademarks are the property of their respective owners. --30--kdb/ny* CONTACT: Dr. Patricia Neptune Neptune Group International Inc. (203)221-2820 or pneptune(a)neptunegp.com KEYWORD: PENNSYLVANIA INDUSTRY KEYWORD: COMPUTERS/ELECTRONICS COMED PRODUCT Today's News On The Net - Business Wire's full file on the Internet with Hyperlinks to your home page. URL: http://www.businesswire.com [Image] --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: Encryption Program
by semprini＠theschool.com 17 Dec '03

17 Dec '03

Hello. I just posted an encryption program on the web. It uses a key- generated pseudorandom stream of characters that get XORed with the plaintext to produce the cyphertext. For decryption, the same stream is run against the cyphertext. (Such is the nature of the XOR operation.) You can download the program at: http://www.brigadoon.com/~semprini/3dmx I am interested in other people's views, comments, questions, etc. on this program. Any questions, comments, etc. can be sent to me at "semprini(a)theschool.com". Thanks, Dylan

2 1

Re: [RePol] First Post!
by TruthMonger 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jari Aalto, confirmed by veteran, respected CypherPunk Dr. Dimitir Vulis, KOTM, to be a government disinformation artist, wrote: > | Sat 97-10-11 Anonymous <anon(a)anon.efga.org> list.repol > | I've downloaded pgp. > > | How do I send the key to this list ? > Don't! DO! > [From ema-tipgp.html] Notice there is no verifiable URL pointer given for this alleged reference. Typical of spoofing attacks. > 10.0 General PGP guidelines According to who? Aunt Ema, or Tot? > 10.1 About including the public key in the mail message > > Do not distribute your public key by mail or Usenet post, because > there are more proper ways. People generally do not want that 'you' > send the key to them, instead they want to get it by itself from > some trusted channel: finger or key server. The reason for this > should be obvious: email is not a secure channel, anyone can > replace the contents of your mail with something other. Bullshit. Email is no less secure than other channels on the InteNet. (Is too!) {Is not!} (Is too!) {Is not!} (Is too!) {Is not!} The chances of your public key being compromised through email to a mailing list are slim. > Use some/all of the ways here to make your public key available: > > o Put it in your ~/.plan file, so people can simply finger > you for it. Open the ~/.plan file and just insert key there, > ,then anyone who fingers you can read the key: > > % finger foo(a)site.com Bad idea! It makes it vulnerable to attack by those with access to your system(s), as well as to attack by outside hackers. > o Post it to a public-key server which in turn automatically > ,distributes your key to all the other keyservers. Be aware that the public-key servers are run by agents of the federal government whose goal is to prevent crypto users from avoiding registering their keys with coming GAK laws. > | I'm new at all this anonymous stuff! > > Please read the pgp docs that came along the program. More pgp and > remailing pointers can be found from my main page > > ftp://cs.uta.fi/pub/ssjaaa/ssjaaa.html Which is full of lies! Please note that the proper procedures for obtaining and using Crypto Keys are outlined by CypherPunk Notable Newbie of the Year, A. Hoir, in a series of posts on the CypherPunks mailing list. I am including my public key below, within the body of this email, and it can be verified by checking it against the listing for my keys on the keyserver at http://www.pgp.com/ . Lastly, and most importantly, take the time and effort to verify for yourself any claims made by those posting to mailing lists, in general, and using anonymous or misleading personas, in particular. TruthMonger > *===================================================================* > To unsubscribe or subscribe send a message of UNSUBSCRIBE or SUBSCRIBE to > the email address REMAILER-POLITICS-REQUEST(a)SERVER1.EFGA.ORG - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGP for Personal Privacy 5.0 mQDiBDRCDGgRAgDz0VR8oKaE3LeAkKi1tnNfTPaUQzhXFD0Tf7HTmO1BxSqxVO8U mxvPCTtw2KLRtYt+udXeHDsduyDxxBC8U0xrAKD/BLyXv9cjrG1pr+y4yaor4TH7 6wH/RlhBvKUwZ2/NOWcS3RKxz/25LoW7Y6LTT4ahiFWQUMFpOBRxclsiLajOoci3 8pdjqr2Oy5uJP6EbUARMFgUThAIAwvqTOSpVumu4ib50yojvuYniN01tg9c3jmCv KV28a/LHEpug3R1FusI1BaOuQVTRyLgmoJRhl9uqjonUS/vdgrQlSmFyaSBBYWx0 byA8amFyaS5hYWx0b0BudGMubm9raWEuY29tPokAUQQQEQIAEQUCNEIMaAUJAAFR gAQLAwECAAoJENVQ+s43zWjf9p0An164iqcY9UfDDacAhKQh0PJ534aoAKDTHx68 3h+G5qyNPYxZXTrVBJy0CLkAjQQ0QgxxEAIA/2RE3cUr5HlC5rDt3D+6LqbA6pt/ Yj8cEhCKzfXepCKyMowSKcSeucikNdFkSpNf4jVZN0aAt3aLgQiubKRdVQACAgIA ojrQS61RR4FHVsn6hi78CIUfdJFtjcPB4PgHMj5VQUCv9QN926d7mk13PCPjeWU3 4eip3RaukG/WfeaQXT58OIkATAQYEQIADAUCNEIMcQUJAAFRgAAKCRDVUPrON81o 3xgEAJ4yQ2yR8W3yLefi5YyhfRNc5kGRYwCfYgVqqCamaOpJhNWfUNfzVVIB7Ng= =SubM - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNEIPuNVQ+s43zWjfEQKX+wCg5MydykFtaUVN9Pj9mYbT55SdWzMAoKeD SlKAfuAz3OGRko9Chm11NBFy =S6R7 -----END PGP SIGNATURE-----

1 0

No Subject
by biz＠savoynet.com 17 Dec '03

17 Dec '03

//////////////////////////////////////////////////////// Realizing that many of you do not wish to receive UCE, if you would please type REMOVE in the Subject Header, you will not hear from me again, you WILL be permanently removed. If you don't do this, and send me a nasty reply, there will be no way for me to REMOVE you. ///////////////////////////////////////////////////////// We are looking for reseller for our Virtual Pets/Electronic Pets Tamagotchi Style Virtual Pets On sale 3 in 1 Electronic Pets ( We have 200,000 pcs in our Taiwan factory ready to ship ) Price: $3.5 FOB Taiwan at quantity 1000 UP Smaller quantity: price by request. This is most popular electronic toy. We can provide the "Virtualc Pets", Dinosaur, Puppy, Kitten 3 in 1 It can be re-set, so you can play with your pet for a long long time. If you are interested in these products. Please contact with us. mailto:biz@savoynet.com Long Well Electronic Corp. P.O Box 15211, Fremont, CA 94539

1 0

Re: James A. Michner [non-crypto]
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Jim Choate wrote: > Thought some of you might care to know that James A. Michner the Pulitzer > prize winning author who lives here in Austin, Tx. has decided to take > himself off the kidney dialysis machine that has been keeping him alive. I guess that means the end of The True Story of the InterNet...

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord ?"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"cracker"} = "<remailer(a)anon.efga.org> cpunk mix remix pgp hash ksub esub latent cut ek reord post"; $remailer{'redneck'} = '<config(a)anon.efga.org> newnym pgp'; $remailer{"bureau42"} = "<remailer(a)bureau42.ml.org> cpunk mix pgp ksub hash latent cut ek"; $remailer{"neva"} = "<remailer(a)neva.org> cpunk pgp pgponly hash cut ksub ?"; $remailer{"lcs"} = "<mix(a)anon.lcs.mit.edu> mix"; $remailer{"medusa"} = "<medusa(a)weasel.owl.de> mix middle" $remailer{"McCain"} = "<mccain(a)notatla.demon.co.uk> mix middle"; $remailer{"valdeez"} = "<valdeez(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"arrid"} = "<arrid(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"hera"} = "<goddesshera(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"htuttle"} = "<h_tuttle(a)rigel.cyberpass.net> cpunk pgp hash latent cut post ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix reno winsock) (weasel squirrel medusa) (cracker redneck) (nym lcs) (valdeez arrid hera) The remailer list here has been out of date for some time, but should be up to date now. I'm still working on updating the web page. Last update: Mon 13 Oct 97 6:45:44 PDT remailer email address history latency uptime ----------------------------------------------------------------------- hera goddesshera(a)juno.com ------------ 5:55:28 99.50% squirrel mix(a)squirrel.owl.de ----- ------ 3:25:30 99.49% nym config(a)nym.alias.net **####+## +# 1:16 95.21% cyber alias(a)alias.cyberpass.net *+++**+** *+ 11:56 94.67% mix mixmaster(a)remail.obscura.com +++++*++* + 26:05 94.54% redneck config(a)anon.efga.org *##**++** ## 1:47 94.48% neva remailer(a)neva.org *+ + -+- - 1:33:09 94.37% winsock winsock(a)rigel.cyberpass.net ..--..--- -+ 9:43:02 94.02% jam remailer(a)cypherpunks.ca ++++*+++ +* 23:21 94.00% cracker remailer(a)anon.efga.org *++*+*++ ++ 17:35 93.90% replay remailer(a)replay.com ****** ** ** 3:46 93.78% bureau42 remailer(a)bureau42.ml.org ----- --- 3:30:56 87.00% arrid arrid(a)juno.com --------- - 8:26:08 86.01% reno middleman(a)cyberpass.net +++ *+++ 1:01:28 66.48% valdeez valdeez(a)juno.com 4:58:22 -25.98% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

After All,-----It Is *YOUR* Life
by skoked＠mail2.c-flash.net 17 Dec '03

17 Dec '03

After all, It is *YOUR* Life-- I would like to let YOU in - on a small Gold Mine!! I have.... If you are like many other people who don't like going to work-This is for YOU!! Even if you love your job (especially if You don't) - This is for YOU!! What I'm about to say maybe UNBELIEVABLE at first, But read on... THIS IS NOT A SCAM--- I am an ordinary Joe just like YOU!! EVERYTHING YOU NEED----(except a small amount of dedication and time) Is being offered to *YOU* ---*RIGHT NOW*!!! The rest will follow !!! I'm going to share with You--- My *FREE* Software--- To get You started on Your way !!! ---WHAT HAVE YOU GOT TO LOSE?--- -Soon, from 9 to 5 , You will be doing all of the things You only dreamed of !!! ***RIGHT NOW*** To get YOUR *FREE* Software, Reply with the subject 'FREE' P.S.- Reply only with Subject 'FREE' (nothing else should be in this field) /////////////////////////////////////////////////////////////////////////////// This Message was Composed using Extractor Pro Bulk E- Mail Software. If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings.If you do not reply only with subject "Remove", there is no way for you to be "Removed"........So please do so if you want to be "Removed". ////////////////////////////////////////////////////////////////////////////////

1 0

GOST
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

I am developing a product that would use GOST for encrypting data streams. This is mostly beacuse its design and simplicity hold considerable aesthetic value, atleast for me. Most of the related text I have read indicates that some SBOX sets can be cryptographically weak, and its a good idea to use SBOX data as key data instead. Pointers? -- Powell lingered. "How's Earth?" It was a conventional enough question and Muller gave the conventional answer, "Still spinning." -- "Reason", Asimov. ================================================================== Vipul Ved Prakash | - Electronic Security & Crypto vipul(a)best.com | - Web Objects 91 11 2233328 | - PERL Development 198 Madhuban IP Extension | - Linux & Open Systems Delhi, INDIA 110 092 | - Networked Virtual Spaces

2 2