- cypherpunks-legacy - lists.cpunks.org

Re: What's really in PGP 5.5?
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Martin Minow claiming to be Martin Minow wrote: >Anonymous, claiming to be Monty Cantsin, writes about PGP 5.5: I beg your pardon! >>Decrypting files and decrypting messages are not the same problem. >>The PGP product has SMTP support - it is explicitly designed to >>weaken transmitted messages. Just like Clipper. > >No, it isn't "just like Clipper." Messages encrypted with PGP 5.5 >can be decrypted or verified by PGP 5.0 or other implementations that >can decode the PGP message and encryption format. Also, PGP 5.0 or other >complient implementations can send encrypted and signed messages to >PGP 5.5 users. Next you'll be telling us that PGP doesn't really use Skipjack. ;-) _Of course_ it isn't Clipper. But, it's like Clipper in the most important way: it is surveillance friendly. The use of Clipper was not compelled. We hated it because if it were used to any degree at all, its use would become mandatory. PGP Inc.'s Big Brother line of products play the same role Clipper did, only they are wrapped up in PGP Inc.'s "Good Guy" image. PGP Inc. may succeed where William Clinton and The Spooks failed. Were we to behave consistently, we would treat the company with the same level of trust and respect the present administration receives. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBND1+KpaWtjSmRH/5AQFTTwf7B6QO8I0yqQobsoUlW5AZxxXH4Tya/pwd 3hAZs//Y1gKyVEX6nW9dE3sDVAW8GBK489S4TMWemdbtfgeq7EaiV0D5QcLcAXst Iqz/WIKxpXjJ5+DjPV2CP6v6zd2XGIa7y3G0BKXglLZh5X7EkiRbJ6c8aixgAk6n 2nFKDqyp53mpmqTPm7xQbpYni5CtQ8Ljq/m+m4LP1hN05OYR8ZWJRz7hqrWvU+5A zw0xagCgPOKZZMZNS7sW+xGwVezsLis9KMZvsB1Paq4s8+geNlFr73vDwlM9SROI KxCfJnpr/sLG3x3Mtbv8Y0vhErTsZ2Pu4HnazVdjelh+r6O67v3TQQ== =JUfQ -----END PGP SIGNATURE-----

2 1

Re: Defeating MITM with Eric's Secure Phone
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- My apologies if this has already been discussed, but wouldn't this be a straightforward solution? Alice and Bob use PGP as a secure, identified channel to exchange a random 6 digit hex number. For example, 0xC926D0. When they establish their Comsec connection, they read 0x5F92E4 off their units. Alice takes the digits C, 9, and 2, and adds them mod 16 to 5, F, and 9 to get the digits 1, 8, and B, which she reads to Bob who confirms them. (Adding just the digits instead of larger numbers means that Alice and Bob can do the computation in their heads.) Bob takes the digits 6, D, and 0 and adds them mod 16 to the digits 2, E, and 4 to get 8, B, and 4. Bob reads them to Alice who confirms them. Any flaws? Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBND2EZ5aWtjSmRH/5AQGBnQf/QRMe/66ge+M/zHzzrZ7zc3g9wFKESsjA alzeGfUulzp+18JyUy1RHNOtM+4bXZUaiYAN7FnxKkAkY+IzW5m7nDHMnC18e+bD IZpO626Ze+pumokhXVTYW0JHWF4OfCol4qmYNSTjM+n4RO0DcmecOuQYuwnscJvb 808rsuin09dhY3UV5uyDWrCwuATIRjwSRTewBinuTGZo/QtMurXJlPc45WtF07oC 9Tg3ebnnq0NtbxWmsX7WT/tjFHoniS5sPoBusrlZT+1z+PT0SzqtSR1JmWKGVQQC xubaghabXvNj9nZZPsEGCG4rMbJw8Qtoh9J6I+aQJ0TVK4hHuanJXw== =Ooh/ -----END PGP SIGNATURE-----

3 2

No Subject
by Zooko Journeyman 17 Dec '03

17 Dec '03

~h ~h ~h ~h ~v

1 0

New Rule
by The New Dictator 17 Dec '03

17 Dec '03

>From now on, no one can drink coffee out of yellow cups, ok? The reason for this is because there are child molesters. Thank you for your cooperation, or I will kill you. The New Dictator "I have a suitcase, and I'm not afraid to use it."

1 0

The more things change...
by TruthMangler 17 Dec '03

17 Dec '03

sampler-request(a)lmboyd.com wrote: > ====================================================== > Q. Why do some countries make it a crime to commit > suicide? > A. Maybe so governments legally can confiscate the > property of the deceased. That's how it worked in ancient > Rome. Laws are made of money, it's said. > ============================================== > LMBoyd Web Site / U. S. Newspapers / Start Email / Stop Email > http://www.LMBoyd.com/postscript.htm

1 0

BXA RFC on Export Controls
by John Young 17 Dec '03

17 Dec '03

"The Bureau of Export Administration (BXA) is reviewing the foreign policy-based export controls in the Export Administration Regulations to determine whether they should be modified, rescinded or extended. To help make these determinations, BXA is seeking comments on how existing foreign policy-based export controls have affected exporters and the general public." http://jya.com/bxa100897.txt

1 0

The Globalization of Chile, from The Netly News (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 10 Oct 1997 08:51:15 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: The Globalization of Chile, from The Netly News ************* http://cgi.pathfinder.com/netly/opinion/0,1042,1484,00.html The Netly News Network (http://netlynews.com/) October 10, 1997 The Globalization of Chile By Declan McCullagh (declan(a)well.com) The wires are clogged again in Chile, a country with no shortage of Net-enthusiasm but little way to express it. Bandwidth is so limited in this remote country, which stretches almost to Antarctica, that local netizens wake up early or stay up late to log in (this report had to be filed via fax). Chile's connections to the outside world total about 9 Mb/sec, the same size pipe that a small U.S. Internet provider uses to connect to the Net. Chileans intend to change this. By next summer, fiber optic cables will gird the country on the east and west, snaking south from Brazil and Peru. The country's connectivity will jump to 200 times its current bandwidth. Even now, though, there's plenty of excitement about the Net in the capital, Santiago. Apple Chile, H.P. and the Cafe Internet Cybercenter line the Avenue Andres Bello. The REUNA Internet World Conference, which ends today, attracted hundreds of local businessmen. Companies such as Business News Americas email (for a fee) daily economic reports from Chile to American investors and analysts. But even if younger Chileans are cyber-savvy, the country remains staunchly conservative. Nearly 90 percent of Chileans are Roman Catholic (it was once the state religion) and Chile remains the only Western country where both divorce and abortion are illegal. Geography, too, has an effect. The South American country is ringed by deserts to the north, the Pacific Ocean to the west and the lofty Andes mountains to the east. [...]

1 0

CAK as a really bad form of corporate networking
by Tim May 17 Dec '03

17 Dec '03

I've been scratching my head, trying to figure out what the market for PGP's new recovery program is for. After all, if employees have local disks and these disks are on a company network or backup plan, then the corporation has access to the plaintext of memos, reports, and plaintext sent and received e-mail. (The purpose of Alice encrypting to Bob being _in-transit_ security, and nothing more.) It seems to me that the CAK (Corporate Access to Keys) approach being talked about, where Alice encrypts to Bob and _also_ encrypts to Eve, is a poor solution to the "archiving" problem. As Adam Back and others have noted, if Alice stores her Eudora or whatever e-mail files on her systems, presumably in plaintext (as the purpose of encrypting with Bob is for _in-transit_ security, not storage security), then the corporation can insist that she make her plaintext files archivable on the company's backup system. One way to look at the market for CAK is that a company is too flaky to have a corporate network or backup strategy and is using CAK as a kind of crude networking scheme. E-mail, with cc:ing of the company crypto czar, is a way to archive or pool company traffic. A rather back-assed approach, it seems to me. Meaning no insult to PGP, Inc. or its fine programmers, it's as if this message was sent out: --begin internal Giant Corporation memorandum-- From: Cakbert, Evil PR and Security Administrator To: All Droids Subject: Mandatory Voluntary CAK System It has come to my attention that our attempts to get a corporate-wide network working have failed, and that we are using a mishmash of intranets, local LANs, and direct dial-out systems. This is thwarting our efforts to read what you people are writing to each other. Henceforth, to solve this network problem we must insist that you adopt a mandatory voluntary system of cc:ing me, Cakbert, on all of your messages. Encrypted messages must be voluntarily encrypted with PPP (Pretty Poor Privacy). Thank you for your attention. --end internal Giant Corporation memorandum-- --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 3

Re: DoD Asks Me to Stop Quoting From the Congressional Record
by tcmay＠got.net 17 Dec '03

17 Dec '03

(A copy of this message has also been posted to the following newsgroups: alt.censorship, alt.privacy,comp.org.eff.talk,misc.legal) In article <61l7cn$rc$1(a)gail.ripco.com>, glr(a)ripco.com (Glen Roberts) wrote: > I received a letter yesterday from the Office of the Secretary of > Defense. It politely asked me to stop quoting from the U.S. > Congressional on my website, and I presume they are also asking me > not to include such quotes on my radio show or print publications. > > Keep your eye out for a copy of their letter and my response... > I'll be anxious to see it. Certainly they have no legal footing, as the Congressional Record is just that, a record of what our elected Congress is doing and saying. The CR is, as we all know, widely available and meant to be quoted. This is why things, including a lot of nonsense (actually, _mostly_ nonsense) is "read into the Record." Or simply submitted to the CR for inclusion. As for any possible military secrets being disclosed, this is what closed hearings are for. Not that I necessarily approve of how many closed hearings there are, but this is what they're meant for. It would be consistent with trends of the past few decades if the Congressional Record becomes subject to secrecy laws. Hell, if were a Congresscritter I know I'd certainly want some of my stupid remarks stricken from the record and discussion of them banned. Let us know what happens. By the way, if the DoD pushes on this issue, you may find using mirrors of the CR, with pointers, another way to go. Don't actually quote the offending secruts, just give pointers to them. But quoting the CR is almost certainly fully legal. --Tim May -- The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

InfoWar Epilogue 0 (Part III of 'The True Story of the InterNet')
by A. Hoir 17 Dec '03

17 Dec '03

1 0