- cypherpunks-legacy - lists.cpunks.org

White House Not Decent
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

(Reprinted without permission from the Seattle Times Personal Technology section) White House Site Blocked Add the White House to the Internet's extensive list of dens of sin. Surfwatch, a widely used software program that prevents access to, and downloading of, sexually explicit material on the Internet, accidently blocked access to the White House home page recently - all because a "White House for Kids" Web site address contained the word "couples." That's a dirty word in the Surfwatch universe because many sexually explicit online sites use it as part of their come-on. In this case, "couples" merely referred to the Executive Branch tandems of President and Hillary Rodham Clinton and Al and Tipper Gore. Surfwatch fixed the problem within hours, although some might still find the site offensive. For political reasons, that is.

1 0

Encryption Chips
by A. Padgett Peterson P.E. Information Security 17 Dec '03

17 Dec '03

> Faking crypto chips for public algorithims is theoretically >more difficult, because its simple to create a DES_verify routine to make >sure your DES chip is working right. a) chips do not need makeup b) t'were me, I would just fix the chip so that instead of 2^56 (DES) keys or whatever, the PRNG was "fixed" so that the total keyspace was only 2^32 for instance. Enough to be nearly impossible to check but small enough for a brute force engine to zip through in seconds *if you knew the algorithm*. The nice thing about am implimentation in software is that the code can be examined for just this sort of thing *on a randomly selected operating unit*. - hard to do with a chip. Warmly, Padgett

2 1

Re: Remember, RC4 is now PC1
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:19 AM 2/24/96 -0800, jamesd(a)echeque.com wrote: >>From now, instead of saying "RC4" let us say "PC1, (formerly known as RC4)" .. >Every time you say RC4 without saying "Trademark of some bunch of >lawyer scum" you theoretically break the lawyer made law. So let us >stop doing it. Serve them right. You can always call it "Ron's Code 4" or "Rivest's Code 4" or whatever. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

3 2

WinSock Remailer
by Joey Grasty 17 Dec '03

17 Dec '03

C-punks: You can now check out the features of the WinSock Remailer at: http://www.c2.org/~winsock/ The remailer is now scheduled to be operational about March 21, 1996. After a one month alpha test, the executable will be available for download for beta testing by anyone who wants to run a remailer. Regards, -- Joey Grasty jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] jgrasty(a)pts.mot.com [work -- designing pagers] "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin." -- John Von Neumann PGP = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7

1 0

Hack attempt? "12 days" from anon.com
by Rishab Aiyer Ghosh 17 Dec '03

17 Dec '03

Regarding the mysterious mail from mailer-daemon(a)anon.com that many people have received: 1. The mail was apparently sent by a daemon bouncing an undeliverable mail. anon.com is a "virtual domain" hosted at io.com, so it's unlikely that the daemon would have an anon.com address. 2. Headers show it was routed through 38.10.221.81 and smtp1.interramp.com. That IP address showed up as ip81.la.ca.interramp.com the first time I tried a traceroute. The second time it showed up as ip81.syracuse.ny.interramp.com. In any case, traceroute went recursive between los-angeles.ca.isdn.psi.net (38.145.221.110) and lan.losangeles.ca.psi.net (38.145.221.1). This indicates the target could not be reached - perhaps it's a PPP address, or disconnected. 3. There is an X-Sender: (Unverified) header entry. So the mail was SMTP faked without the HELO protocol. 4. The error purpoting to originate from mailer-daemon(a)anon.com says the mail was addressed to PeppermintPty(a)loacst.org. loacst.org is not a registered domain. 5. PeppermintPty is obviously Peppermint Patty; the "original message" is signed Marcie. Peanut fans will recognise these characters. So - what was it all about? An elaborate prank? A convoluted NSA plot? I would lean towards the first, but perhaps we'll know on March 1st, the date to "gain access to target". Rishab ps. the copy I received follows: >From mailer-daemon(a)anon.com Fri Feb 23 20:08:00 1996 Received: from m-net148.arbornet.org (m-net.arbornet.org [148.59.250.2]) by shellx.best.com (8.6.12/8.6.5) with SMTP id UAA20969 for <rishab(a)best.com>; Fri, 23 Feb 1996 20:07:44 -0800 Received: from smtp1.interramp.com by m-net148.arbornet.org with smtp (Smail3.1.29.1 #4) id m0tqBGv-0009SHC; Fri, 23 Feb 96 23:07 WET Received: from [38.10.221.81] by smtp1.interramp.com (8.6.12/SMI-4.1.3-PSI-irsmtp) id XAA24970; Fri, 23 Feb 1996 23:06:42 -0500 X-Sender: (Unverified) Message-Id: <v01520db9ad53979e9858(a)[38.10.221.81]> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Fri, 23 Feb 1996 08:11:33 -0800 To: (Recipient list suppressed) From: mailer-daemon(a)anon.com (System Mail Manager) Subject: Twelve Days of Christmas Status: RO -- <System Report> -- UNDELIVERABLE MAIL: Unknown Host("PeppermintPty(a)loacst.org") UNDELIVERABLE MAIL: Bad Key -- <Original Message Follows> -- *** TOP LEVEL: DESTROY IMMEDIATELY UPON READING *** *** DO NOT PRINT OR SAVE. Code1.8 Table2Hex6 *** DAY 10: DR. BLACK located a promising entry point at the target site. DR. BLACK recovered four of the six password tokens before his position was compromised. DR. BLACK will be replaced by DR. ORANGE. Estimated time to recover the remaining two password tokens and gain access to target: EIGHT DAYS (03.01.96) Confidence is HIGH. My team has been working around the clock for a month now. Please tell your people to be more tolerant. Yelling doesn't help anything. Marcie

2 1

mismaster
by Black Unicorn 17 Dec '03

17 Dec '03

Where is the latest version of mixmaster available? I can't seem to get hold of obscura for lance's homepage and * http://nately.ucsd.edu/~loki/ * ftp://nately.ucsd.edu/pub/remail/ seem to be down. Any ideas? --- My prefered and soon to be permanent e-mail address: unicorn(a)schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information

4 3

Wanted: Win95/NT C++/Crypto Contractor
by John Pettitt 17 Dec '03

17 Dec '03

Must have: Good C++ skills Have shipped real code to real users Ability to work unsupervised Understanding of networking (TCP/IP) and World Wide Web (HTTP) Crypto experience (probably RSA BSAFE - we are still choosing). Must be able to cite references for the above! Rate and location negotiable - SF Bay / Silicon Valley preferred. Contact: John Pettitt VP Engineering CyberSource Corporation 1050 Chestnut St #201 Menlo Park CA 94025 Fax 415 473 3066 jpp(a)software.net please send resumes as ASCII, MS Word, HTML/URL or PostScript only! P.S. Please don't bug me on the phone!

1 0

Re: Internet shutdown Feb 29?
by jis＠mit.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >This looks completely, totally, and insanely bogus, but I >need some kind of verification for this bizarre little >piece of mail that somehow ended up in my mailbox. > >Anybody from MIT ever heard of "Kim Dereksen"? Yeah, from several of ISP's and others (including one un-named government organization that wanted to FAX us the message, for security reasons, didn't want to send it over the network). Of course the message is Bogus... it wasn't even e-mailed from MIT (nor did the author try to make it look so). -Jeff -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMTDOksUtR20Nv5BtAQEoUwP/QYtgsYDnzjv/usaBax+pXX3glYLpewMO Fi/cQN5840YigQpA/3klyptyEtA9sj2Vd3CYvGfj0KYqZfRG1mSKecURRBHE7kzq hB2o4fter8Pjp+3bW3APb6DsrCvlkmYcnR+QYBN8oikKkv1+cGYvHl7w6x3LJiiU U5BLXiPc2s0= =98q4 -----END PGP SIGNATURE-----

2 1

Re: And she's no blond.....
by Rich Graves 17 Dec '03

17 Dec '03

[joke from article <Sa8f.6014(a)clarinet.com>] Soon you'll be able to count on that kind of personal service from AltaVista, which recently paired with DoubleClick. Look where the banner ads take you now. -rich

1 0

RE: PGP
by Chris Grantham 17 Dec '03

17 Dec '03

Sorry, that wasn't suppose to be sent there too. Chris ---------- From: Chris Grantham[SMTP:casper@optima.mme.wsu.edu] Sent: Sunday, February 25, 1996 1:38 PM To: 'Thaddeus J. Beier' Cc: 'Cypherpunks' Subject: PGP R U aware of a PGP mailing list? Chris P.S. How do I attach a sig to a Microsoft Exchange message? FOR BEST SECURITY -STEAM ALL PGP MESSAGES! -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzEvXtUAAAEEALtwrsq7zqQdTDRRpgJeCXYCuA6M49Yp93IE3ScaMwPPi297 EIEbpSyv3ZB9UBjTNHcsPADhfwDs8/yBS4SWW+NF1BwnRLUbNpZ5E6BGxGojQnF4 yC5MKNIuxDgY8FYYpsXWpxWIOJZOf5LY6E4BhZ9fGK/MfuhSvUFD9HN4zM2hAAUR tC1DaHJpcyBXLiBHcmFudGhhbSA8Y2FzcGVyQG9wdGltYS5tbWUud3N1LmVkdT4= =xznQ -----END PGP PUBLIC KEY BLOCK-----

1 0