- cypherpunks-legacy - lists.cpunks.org

PRZ Endorses PGP 2.6
by edgar＠spectrx.sbay.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I was a little surprised to receive the following as a response from a "vacation" program apparently prepared by PRZ to answer his e-mail during a temporary absence: In case you haven't heard, MIT is soon releasing PGP version 2.6, available from an FTP site at MIT, for US noncommercial users only. It is a nice version of PGP, with all the strength and integrity of PGP 2.3a, with some bug fixes and improvements. -Philip Zimmermann I suppose this means he thinks (knows?) that problems inter-operating with overseas & commercial (Viacrypt) users will be worked out. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLechXt4nNf3ah8DHAQHDCQP/YejwsDpt/Mtb9KvKKY4m7xlC7nudFFO3 s6Q8v9ExknOsnpQ9Xp+vEeosFVtYkceqI3Saa1uhErwF3HBR4xCczGEXGE9jk0PD 1OHoe5lbzjg6dsjw6wj89GGSLM/oEaJEj3+3kBXq2UJPunQHmXryx5KV4lW8RGtQ NW8ydMIwaZA= =GrzX -----END PGP SIGNATURE----- -- edgar(a)spectrx.sbay.org (Edgar W. Swank) SPECTROX SYSTEMS +1.408.252.1005 Cupertino, Ca

2 1

Sun looking for applicants for secure networks
by Marianne.Mueller＠Eng.Sun.COM 17 Dec '03

17 Dec '03

Begging your pardon for this use of the mailing list, but, if you're looking for a job developing network security software, Sun's hiring. Please send resumes or inquiries to nick.johnson(a)sun.com. --Marianne Subject: Re: SPARCstorage array and striping Date: 23 May 1994 18:36:55 GMT Organization: Sun Microsystems Inc. Summary: Wanted: Network/UNIX Security Engineers Looking for candidates. Responsibilities: Working has part of the Corporate IR group these positions (2 currently open) are responsible for the internal security of Sun's Network. Individuals will develop and maintain security policies, perform audits on existing network and system implementations, develop tools for the performance of remote audits and intrusion detection, work with other internal Sun groups to identify secure methods to inter-connect business partners, evaluate new security products, drive encryption usage inside corporation, perform customer presentations, work with enginering groups to test new OS releases and influence product strategy. Individuals should have at least 3 IP networking and 5 years UNIX security work experience. Prefer individuals that have at least a BS in computer science or directly related field with some software development background. Interested parties should forward their resume to: angie.alfred(a)Sun.Com with a copy to nick.johnson(a)Sun.Com.

1 0

Re: New MacPGP
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

>Why don't you ask Eric? 99% of the people on the list have no >administrative access to this or any other FTP site. (You could also >contact Mike Johnson, who runs a pretty good crypto archive.) Mike at mpj(a)netcom.com put it up within a day. That was a week after I sent it to both Erics, Tim May, and a few other people who were on this list who seemed interested in it. I *did* come to you guys first :-). What y'all been up to? Nice soda remailer, though it looks too hard to use ;-). - Nik

2 1

thanks
by David C. Taylor 17 Dec '03

17 Dec '03

Thanks for all the replies on Dispersed DES - a bit wiser now, I have decided to junk that version of the idea (seeing as CBC probably provides a great deal more protection with seemingly much lower security cost). David C. Taylor

1 0

Re: procmail
by Martin Janzen 17 Dec '03

17 Dec '03

tim werner <werner(a)mc.ab.com> writes: >> With procmail, you can associate arbitrary actions with a match, so no >> it would not have to be silent. > >Will anyone who has procmail working please send me an example of how you >use it? I am totally confused. OK. First -- just checking -- I assume you're running some version of UNIX. I'm using HP-UX 9.03 on an HP 9000 workstation, but everything should work pretty much the same on other systems. First, you have to tell the mail system that you want your mail to be filtered through the procmail program. You do this by creating a one-line file called ".forward" in your home directory: "| IFS=' '; /usr/local/bin/procmail -p" The quotes are necessary. Replace /usr/local/bin with the name of the directory in which you've installed the procmail program. Do a "chmod 644 .forward" to make sure that your mail software can read this file. Now you can create a ".procmailrc" file in your which tells procmail how to filter your mail. Here are some excerpts from mine: ------------------------------------------------------------------------------- # ~/.procmailrc # # Configuration file for procmail mail processing software # # General environment variables (You may not need all of these; see the # procmail(1) man page to find out what each one means. Of course, the # HOME variable should be set to your own home directory.) # HOME= /Home/janzen PATH=/usr/local/bin:/usr/ucb:/bin:/usr/bin:$HOME/bin MAILDIR = $HOME/Mail LOGFILE = $HOME/.procmaillog LOCKFILE = $HOME/Mail/procmail TMP= $HOME/tmp SENDMAIL= /usr/lib/sendmail TMPFILE= $TMP/procmail.$$ LOCKFILE= $HOME/Mail/.procmail # # First, toss out junk mail # :2H ^From:.*root@idacom.hp.com ^Subject:.*cron /dev/null # The ":" introduces a new "recipe". The "2" means that two expressions # follow. The "H" indicates that procmail should search the header only, # ignoring case. (The man page lists all kinds of other flags.) # # The first regular expression (regexp) matches a line containing "From:" # at the start of the line ("^"), then any arbitrary characters (".*"), # then "root(a)idacom.hp.com". # # Similarly, the second regexp matches a header line beginning with # "Subject:" and containing the word "cron" anywhere in the subject. # # The line following the last expression tells procmail where to save # the message. In this case, I save it to /dev/null, throwing it away. # (When you're first setting up procmail, I suggest saving unwanted # messages to ~/junk or something, until you're satisfied that your # recipes work as expected!) # # You can also forward matched messages to another user (eg. !joeuser@host) # or pipe them to a UNIX command (eg. |$HOME/bin/my_fancy_mail_processor). :2H ^From:.*cypherpunks detweiler /dev/null :2H ^From:.*cypherpunks subscribe /dev/null # # Now, sort mail from mailing lists into the proper folders # :1H ^From:.+cypherpunks Cypherpunks # Put all mail with a "From:" line containing the word "cypherpunks" into # the file $HOME/Mail/Cypherpunks. :1H ^TOcypherpunks Cypherpunks # "^TO" is shorthand for "^(To|Cc|Apparently-To):.*". This is supposed to # catch all destination addresses. :1H ^Return-Path:.+cypherpunks Cypherpunks :1H ^From:.*pgpmip PGPMIP :1H ^From:.*wnet.edex.edu.au PGPMIP :1H ^From:.*Extropians Extropians :1H ^TOExtropians Extropians ------------------------------------------------------------------------------- One other thing: I like to get a summary each day, showing me what procmail has done. I do this by creating a script called procmailsummary.sh: ------------------------------------------------------------------------------- #!/bin/sh # # Summarize the ~/.procmaillog file # # Use the LOGFILE variable if it's set; otherwise, use a default LOGFILE=${LOGFILE:=$HOME/.procmaillog} # Add a header to the message # (This also avoids sending a message with a null body, which confuses Elm!) echo "Subject: Procmail Summary" echo " " sort ${LOGFILE} | awk ' /^ Folder:/ { folder = $2; nbytes = $3; msgcount[folder] += 1; totalbytes[folder] += nbytes; } END { for (folder in msgcount) printf "Folder %s:\tsaved %d messages (%d bytes)\n", \ folder, msgcount[folder], totalbytes[folder]; } ' if [ "$1" = "-clear" ]; then rm -f $LOGFILE; fi ------------------------------------------------------------------------------- I then use crontab to schedule this script so that it's executed at 7AM every morning, and mails me the result. When I come in, I can see at a glance which mailing lists have new messages. (WARNING: If you're not running HP-UX, the crontab(1) command may not exist on your system, or may work somewhat differently. Also, on some systems you must be root to use cron. If you have problems, try "man cron" or ask your sysadmin to give you a hand.) echo '0 7 * * * /usr/local/bin/procmailsummary.sh -clear | elm -s "Procmail Summary" janzen' | crontab This should all be on one line. Replace /usr/local/bin with the name of the directory in which you've put the script. Make sure to do a "chmod +x procmailsummary.sh", to make the script executable. Finally, if you are using a mailer other than elm, replace the "elm ... janzen" command with something appropriate (eg. "mail janzen"). Now verify that the crontab command worked: crontab -l Hope that helps... -- Martin Janzen janzen(a)idacom.hp.com Pegasus Systems Group c/o Hewlett-Packard, IDACOM Telecom Operation

1 0

"lifeguard(?)": bullet tracking system???
by rarachel＠prism.poly.edu 17 Dec '03

17 Dec '03

Hey guys, I heard a blurb on the radio a few days abo about something called "lifeguard" which can track the source of gunfire. My guess is that they use acoustics for this. I don't know how they can claim that it wouldn't be confused by non-gun noises, nor what silencers would do to this thing. They also mentioned that some models can be fitted with guns so as to auto matically return fire... Is this bullshit? Anyone else hear about this? I wish they'd given out more info on this thing... I heard this on WCBS (AM) in NYC... This can have some serious big brother is watching effects in bad neighborhoods. Such a beast could be fitted with a machine gun to simply fire wherever it hears a bullet come from, potentially killing anyone else who happens to be near the source of the fired gun, more likely a hostage with a gun to his head than the holder of the gun... :-( Ugh, if this is what the crime bill means, I'm all for legalizing drugs just to get the cops and criminals out of business... Shit if every pharamacy sold cheap drugs, or every liqour store, there'd be a gigantic drop ib drug related murders. Sure, the ammounts of stick ups and burglaries that liquor stores would suffer would rise, but, if the FBI, CIA, ??? are already involved in drug runnimg, they may as well make it legal and stop hiding their activities. (Of course if they did their economic strangleholds would drop)

5 5

Re: Hiding conventionally encrypted messages in PGP messages to someelse.
by Paul Franklin 17 Dec '03

17 Dec '03

In article <199409030238.AA18130@xtropia> you wrote: > -----BEGIN PGP SIGNED MESSAGE----- > I have been thinking about steganography lately. Correct me if I am > wrong, but it seems to me that if one wants to hide encrypted data, then > all this public key encryption stuff becomes irrelevant. It seems that > the sender and the recipient must agree on a way to hide the data. The > time of this agreement is a perfect time to exchange conventional > key(s). > Speaking of conventional encryption, PGP uses conventional > encryption (IDEA). So if we wish to hide conventionally encrypted > data, why not use the purloined letter method, and hide it as the > conventionally encrypted data in a PGP encrypted file? > To create such a file, we would simply create as PGP usually does, > except that we specify or record the conventional IDEA key used. Then to > decrypt the file, we simply ignore the RSA headers and use the specified > or recorded conventional IDEA key. We could even insure that the IDEA > key in the RSA encrypted headers is wrong. So, obiwan can not reveal > the data even if Darth can seize him. > I have created a hack to PGP ui to do all of the above! Isn't this what pgp -c does?

2 1

Re: http://digicash.support.nl = NULL
by sidney＠apple.com 17 Dec '03

17 Dec '03

[Harry Bartholomew wrote about problems accessing digicash web page via lynx.] It looks to me like the web page requires Mosaic forms support. I could see a little bit more than you did using MacMosaic, which shows the pictures but doesn't support forms. It was a bit confusing, since I could see a number of entries for things with prices next to them, such as $5 for the e-cash software and $0.25 for "information". I couldn't tell how you are supposed to get either of those without either the software or at least the information. Maybe someone who has X or Windows Mosaic can tell us more about what's there. I sent e-mail to the info e-mail address that the page mentioned and got back the following. (I sent just the word "info" in the subject and body of the message.) What I find strange about it is that it looks like an automated reply, but it is asking me to reply as if the mail will be read by a human. Another interesting thing about it is that Chaum does not include consumers in his list, just people who are interested in selling products or clearing money. After reading all of the copies of the digicash press announcement that were sent to this list, I'm a bit hesitant to post this, but what the heck. Following is the reply I got back from info(a)digicash.nl: [begin quote] Date: Tue, 31 May 1994 14:51:25 CET From: "DigiCash Information" <info(a)DigiCash.nl> To: sidney(a)apple.com Subject: ecash-info Thank you for your interest in our electronic money technology. Because of all the reactions we have received, we have made available some background information on our Web server http://digicash.support.nl If you prefer, we would of course be pleased to provide similar information by electronic or paper mail. In any case, we plan to be keeping you informed of developments by email. It would be helpful for this purpose, if you could let us know more about the nature of your interest, and at least which of the following categories fits best: (a) potential acceptor of electronic cash for services offered over the network, (b) potentail provider of electronic cash service itself to other network service providers, (c) member of the press, or (d) interested in the technology for other purposes. We are looking forward to finding a way that we can work together. Very kind regards, David Chaum Managing Director [end quote]

1 0

I back your scratch...
by fnerd＠smds.com 17 Dec '03

17 Dec '03

So, the reason I asked about "orthogonal checksums" was this: If you can check the integrity of a copy of a file remotely, then people can trade storage space and have remote backups. Or have more complicated schemes where, say, a group of users pay for a common storage service by backing up some of the files (or other files) for the provider. The nice thing about this is that storage space is something that's immediately valuable and electronically tradable. And its value can increase by trading. In other words, we can trade one meg for one meg and both come out ahead in terms of safety. "I back your scratch and you back mine." I'm not sure storage space makes a good unit of value for anything else, since the cost of storage keeps going down. On the other hand, trading space for space is immune to that inflation. Some concrete applications: o Making bulletin boards' data safe from loss by vandalism o Archiving a mailing list -fnerd - - - - - - - - - - - - - - - nowhere man has gone before -----BEGIN PGP SIGNATURE----- Version: 2.3a aKxB8nktcBAeQHabQP/d7yhWgpGZBIoIqII8cY9nG55HYHgvt3niQCVAgUBLMs3K ui6XaCZmKH68fOWYYySKAzPkXyfYKnOlzsIjp2tPEot1Q5A3/n54PBKrUDN9tHVz 3Ch466q9EKUuDulTU6OLsilzmRvQJn0EJhzd4pht6hSnC1R3seYNhUYhoJViCcCG sRjLQs4iVVM= =9wqs -----END PGP SIGNATURE-----

1 0

Sternlight infested version of pgp26
by Vincent.Cate＠FURMINT.NECTAR.CS.CMU.EDU 17 Dec '03

17 Dec '03

The pgp26-RSAREF_3.0_beta.tar.gz file is not real. From some other post, it seems this came from the site in Italy that I mentioned awhile back. They have removed the file from there. It is a lot of bytes for a joke. It should probably be removed from soda too. -- Vince > pwd /alex/edu/berkeley/soda/pub/cypherpunks/pgp/pgp26 > ls -NOT_FOR_EXPORT pgp26ui-src.tar.gz pgp26uis.zip pgp26-RSAREF_3.0_beta.tar.gz pgp26ui-src.tar.gz.sig pgp26uix.sig pgp26.zip pgp26uis.sig pgp26uix.zip > gunzip -c < pgp26-RSAREF_3.0_beta.tar.gz | (cd ~/tmp; tar xvf -) gunzip: stdin: not in gzip format > strings pgp26-RSAREF_3.0_beta.tar.gz WANTED FOR NET.TREASON: |\/\/\/\| | | | (o)(o) C _) OFFICER David Sternlight | ,___| Net.Police | / a.k.a. PROUD _0--------/\/----\/\-------0_ DICK OF / /0 \----/ 0\ \ THE INTERNET / | \ \||/ / | \ / /|STERN || POLICE|\ \ _/_____/ ||LIGHT] || | [#] || \_____\_ |_______/ |\____/ || \__*_/| \_______| > ll pgp26-RSAREF_3.0_beta.tar.gz -rw-r--r-- 1 alexsrvr 567791 May 25 00:20 pgp26-RSAREF_3.0_beta.tar.gz

1 0