- cypherpunks-legacy - lists.cpunks.org

Re: PGP
by DANIEL CHARPENTIER 17 Dec '03

17 Dec '03

> you really ought to be more thoughtful about what and how you write on > the cypherpunks list... The how is referring to not double spacing isn't it. Sorry, I've been up for the last couple of days and didn't even realize it. What do you mean what I write about? > > anyway, the PGP code from MIT should compile on nearly all unix > machines. i'm not sure it will compile with a g++ compiler though. all > unix type machines should have uncompress, tar, (g)cc. just get the > source from MIT. I am not an idiot. I must have downloaded PGP from about 20 million different places. They are all either missing files, some times the darn code won't compile, or when I "tar xvf" half of the files bring up an error and the computer says it can not create the file. I'll try the address that you've sent. Hopefully I will have better luck. In the persuit of constructing a stable cryptographic program that uses PGP what features should be included. Obviously all of the ones that PGP has and encrypting/decrypting e-mail but what else?

1 0

Re: News on Congressional Debate on Exon
by Kevin S. Van Horn 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- tcmay(a)got.net (Timothy C. May) wrote: > >I just heard (12:15 EST) that the House has adopted language similar to the >original Exon-Coates language in the Senate I consider it unlikely in the extreme that this passed without Gingrich's sanction. So I guess the Newt's much-publicized opposition to the Exon amendment was just a show. - --------------------------------------------------------------------------- Kevin S. Van Horn | Uncle Sam needs YOU! vanhorn(a)atext.com | But not vice versa. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMMYBmCoZzwIn1bdtAQE9lwGA1w4SUuzkxqcrIWu2EJq65rspqg7PVL6Y FcMbibELAnFrZOUKNVtQNXxtpfaItIGR =QI3W -----END PGP SIGNATURE-----

1 0

Re: Solution for US/Foreign Software?
by Rich Salz 17 Dec '03

17 Dec '03

You would not be allowed to export a browser where the crypto library is a dynamically-loaded library. If you wrote a "browser toolkit", you would have to take special care to hide even the names of the crypto functions in the library symbol table. If you want to do offshore crypto development, your best bet is to document the required interfaces and protocols in a publication which is available to anyone, as this is supposedly protected by the First Amendment. On the other hand, I encourage you to try to do otherwise. /r$

1 0

Kim Philby in Washington
by tallpaul＠pipeline.com 17 Dec '03

17 Dec '03

Burgess, Philby, and Maclean in Washington A Comment on Clipper and G.A.K. It is historically indisputable that Guy Burgess, Harold "Kim" Philby, and Donald Maclean were agents for Soviet intelligence. What is far less known is the role that these three individuals played in the U.S.A. and how this related to their access to U.S. secret material. Maclean, at one time, was the Head of Chancery of the British Embassy in Washington D.C. As such, he was the head of the code room at the Embassy and thus had access to *all* encrypted traffic passing through the Embassy. This included everything available through the considerable Anglo-U.S. co-operative ventures during the immediately-post W.W. II period. Guy Burgess was also assigned to the British Embassy where one job was as a liaison agent with the U.S.A. It has been reported during this period that he had a pass from the Atomic Energy Commission that gave him 24-hour-a-day access unaccompanied by any U.S. "overseer." This was a higher level of A.E.C. security than held by J. Edgar Hoover at the time. Kim Philby was the U.K.'s liaison to the Central Intelligence Agency. He was personally close ("a drinking buddy") to then head of C.I.A. Counter-Intelligence James Jesus Angleton. Angleton was, to all accounts, a psychopathologically paranoid individual, seeing Soviet spies and disinformation attempts in almost all areas of life with the exception of his one-time bar companion. He might be likened to one of those hysterical Victorian "feminists" who thought "all men are pigs" with the exception of one real gentleman she knew. (The gentleman would, of course, be Jack the Ripper.) I write this not out of any sense that Key Escrow or Clipper are "communist plots." Far from it, especially during this period. But the presence of Burgess, Philby, and Maclean in Washington shows how unable the governments have been to protect their own secrets. It is unreasonable to suggest -- as do supporters of Clipper and G.A.K. -- that governments will be any better protecting ours. --tallpaul

1 0

Cyberia-L Archive [was Re: ERA_sur]
by Rich Graves 17 Dec '03

17 Dec '03

As somebody pointed out to me, Cyberia-L, like cypherpunks, is archived on http://www.hks.net/ and the public news server nntp.hks.net. Now send them some of the money you're going to make from the stock market. -rich

1 0

Civilizing Cyberspace (book note)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Forward: Steven E. Miller, a member of the national board of directors of Computer Professionals for Social Responsibility, has published a new book, *Civilizing Cyberspace: Policy, Power and the Information Superhighway* (Addison Wesley, 1995, 413 pages). This is the best book I have seen on the public policy debates surrounding the information superhighway. It covers all aspects of this debate, including democracy, citizenship, community networks, privacy, intellectual property, competing models of the NII, universal service, equity, freedom of expression, protecting the public interest, encryption, and so on. Highly recommended for anyone interested in this subject, or for use as a text in classes. Gary Chapman, Coordinator, The 21st Century Project LBJ School of Public Affairs, University of Texas, Austin

1 0

Re: Solution for US/Foreign Software?
by jimbell＠pacifier.com 17 Dec '03

17 Dec '03

> >> I'm not saying they are a "bypass" of the laws. Rather, I'm saying that >> if the goal is to: >> >> 1. Let companies like Netscape make foreign sales. >> >> 2. Still comply with the letter of the law. > >It takes more than one or two people to coordinate an international effort. >Once more than a few people know about it, it becomes "company policy" or >"corporate objective", in which case, the NSA/DoS will eventually figure it >out and start levying heavy fines and jailing the individuals. You miss the point! There will be no "international effort"! Here are the steps: 1. Write a program limited to keysize, carefully constructed to isolate those portions of the program which define key size, GAKedness, etc. 2. Get it export approved. Export it. THEN 3. Announce that a "US-only" version of the same program is being released, and include the minimal component which replaces the limited software. Release it, only in the US of course! >The main point is that there is no such thing as the "letter of the law". >What they enforce is much broader than that, and how they enforce it is much >more subtle than clear-cut criminal prosecution. Therefore, you cannot just >use literal loop holes just because it's not clear, because the law they are >enforcing is not clear either. The system I describe doesn't even violate the spirit of the rules. If anything, it bends over backward to implement a foreign version of the software which ALREADY is export-approved at the time it was, um, upgraded. True, it's possible to sneak the extra component out of the country, but hey, it's also possible to sneak an entirely new program out of the country. I'm not suggesting that the company who writes the component takes it out, it'll happen regardless. If the order of the versions was reversed, the USG might complain that the export version was "too similar" to the domestic version. That's why you wait for the export approval before you write the domestic version.

4 3

Re: The "Future" Fallacy
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:24 AM 12/6/95, blancw(a)accessone.com wrote: >From: Duncan Frissell > >Bill Gates (like Mister Newt before him) committed what I call the Future >Fallacy in "The Road Ahead." Page 106. > >"Soon any child old enough to use a computer will be able to transmit coded >messages that no government on earth will find easy to decipher." >................................................... > > >Billg is an optimist. > >What's wrong with this picture, Duncan? I found nothing wrong or incorrect with the quote Duncan attributed to Bill Gates (I haven't read Gates' book). I couldn't understand Duncan's koan, shrugged, and moved on. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

6 6

[NOISE] Re: PGP
by Hroller Anonymous Remailer 17 Dec '03

17 Dec '03

> > you really ought to be more thoughtful about what and how you write on > > the cypherpunks list... ** Vast numbers of double spaces deleted ** > The how is referring to not double spacing isn't it. Sorry, > I've been up for the last couple of days and didn't even realize it. > What do you mean what I write about? He means that this is NOT alt.security.pgp - we are not here to teach you how to use a bloody C compiler or to summarise README notes for you. RTFM. > > anyway, the PGP code from MIT should compile on nearly all unix > > machines. i'm not sure it will compile with a g++ compiler though. all > > unix type machines should have uncompress, tar, (g)cc. just get the > > source from MIT. > > I am not an idiot. I must have downloaded PGP from about 20 million > different places. They are all either missing files, some times the > darn code won't compile, or when I "tar xvf" half of the files bring > up an error and the computer says it can not create the file. I'll try > the address that you've sent. Hopefully I will have better luck. You want help, but supply minimal information. Post your problem to the appropriate place - alt.security.pgp, and supply a bit of information - what version of the source are you trying to compile, what Unix platform, what version of the C compiler, etc. > In the persuit of constructing a stable cryptographic program > that uses PGP what features should be included. Obviously all of > the ones that PGP has and encrypting/decrypting e-mail but what else? ?

1 0

Re: latest librand source now av
by an116512＠anon.penet.fi 17 Dec '03

17 Dec '03

In .cypherpunks, Matt Blaze <mab(a)research.att.com> writes: >[Sorry if this is a duplicate; my machine had a bogus sendmail.cf >when I first sent this.] > >Souce code for the latest version of librand (a random >number package based on event interval variations) for >Unix-like machines is now available in: > ftp://ftp.research.att.com/dist/mab/librand.shar > >There are no restictions on use or distribution of this >code, which was written by Matt Blaze, Jack Lacy, and >Don Mitchell. > >-matt > why the FUCK would anyone want to use random number code from at&t, (and mister nescape GAK apologist himself)? this the code that was broken by french student for christs sakes. and tell us the truth about the restrictions, next time, bozo. asshole. cypherpunks write code themselvess!!! --****ATTENTION****--****ATTENTION****--****ATTENTION****--***ATTENTION*** Your e-mail reply to this message WILL be *automatically* ANONYMIZED. Please, report inappropriate use to abuse(a)anon.penet.fi For information (incl. non-anon reply) write to help(a)anon.penet.fi If you have any problems, address them to admin(a)anon.penet.fi

2 1