- cypherpunks-legacy - lists.cpunks.org

Re: e$: Watching the MacRubble Bounce
by Martin Minow 17 Dec '03

17 Dec '03

Cypherpunks as a spectator sport becomes interesting when a several intelligent, articulate, people start a productive rant. Emphasis on "productive." Unfortunately, this rant is rapidly degenerating into an emotional bickering between people who are capable of accomplishing much more. For the record, there are several Apple employees, some *very* high up in the food chain, who receive selected postings from Cypherpunks. For better or for worse, however, they are spared pipebomb-punks, Sternlight-punks, Ritalin-punks, and most of the other nonsense that permeates this mailing list. I, for one, would appreciate the chance to hear Tim May present "crypto-anarchy" and "crypto-privacy" -- in a much more coherent fashion than I would get at a physical cypherpunks meeting or from the mailing list. I'm not sure what Tim's consulting fee might be, but I'd be happy to contribute a six-pack of Anchor Steam if that would help. Vinnie is putting the "Mac Crypto" conference together in his spare time using "borrowed" facilities in a way that stays below Apple's "radar horizon". Think of it as a slightly more formal physical cypherpunks meeting. He may be able to scare up a budget for drinks and munchies, but don't expect a t-shirt. As for the "Mac is dead," I'll leave that to another time and place. Martin Minow minow(a)apple.com

1 0

Re: Apple people on the list
by jim bell 17 Dec '03

17 Dec '03

At 11:15 PM 8/6/96 GMT, John Young wrote: >I'd like to hear Tim, too, in this Big Apple. RealAudio, perhaps. >What would you offer to set off Tim's simmering crypto-anarcho-volcano, >make it heard round the planet? A plan. Jim Bell jimbell(a)pacifier.com

1 0

Re: Internal Passports
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:37 PM 8/5/96 -0700, Timothy C. May wrote: >But the law says, these days, that I must verify the >legality of workers *if* they appear to be dark-skinned, Mexican, Latin, or >the like. I say "if" because there are no requirements in general for >white-skinned, Anglo workers....no work permits, no proofs of citizenship >(such a document is currently lacking in the American pantheon...I, a mixed >descendant of Mayflower colonist and Scandinavian immigrants, lack such >"proof"). Naughty naughty Tim. You're violating the Immigration Control and Nationality Act of 1986. You are supposed to check all employee's IDs even your own childrens' and fill out that I-9 form. You have to verify identity and right to work using a menu of documents ranging from passports and SS cards to Driver's licenses and "American Indian Tribal Documents" (I gotta get me some of them). And there are special provisions to punish discrimination against those who appear foreign. After all, there are loads of illegal Canadians and Irish here. People are always coming from the third world counties. <G> The law also required that a commission study whether or not the "foreign appearing" were suffering discrimination because of the law and it reported a few years later that sure enough, they were. DCF

2 1

Re:appropriate algorithm for application
by mccoy＠communities.com 17 Dec '03

17 Dec '03

Cerridwyn Llewyellyn <ceridwyn(a)wolfenet.com> writes: > I need an algorithm/protocol that is capable of encrypting numerous > files with separate keys, but there also needs to be a master key > that will be able to decrypt all of them. Is there such a system > that is relatively secure? I'd prefer the system to be as secure > as possible, but in this application, security is secondary to > functionality. You can get the basic functionality you require by using a regular hybrid PKE system (pubkey encrypts symmetric session key) and encrypting the session key with the public key of a "master key" as well. For example, assuming a user A and a master key C you just have the program A uses to encrypt files operate in a manner similar to that used by PGP and other public-key encryption systems [pubkeyA(sessionkey),IDEA(sessionkey,data)] except in addition to the pubkeyA(sessionkey) which encrypts the random key used to encrypt the actual data you add a masterpubkeyC(sessionkey) section to the beginning of the file as well. The resulting data packet is [pubkeyA(sessionkey),masterpubkeyC(sessionkey),IDEA(sessionkey, data)] This system is as secure as the public-key system used for encryption and would actually be fairly easy to hack in to PGP, although the modified PGP messages which contain the master key information would not be usable by regular PGP. jim

1 0

Re: THE WORLD IS SCREWD UP
by Remo Pini 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Wed Aug 07 08:16:48 1996 > THIS WORLD IS SREWED UP i hate my life so mue hobbeys makeing time pipe > bommbs so what is this all about huh what the fuck "anti terrisiom bill" > damn sad ok so what does this mean FREE COUNTRY hahahaha i laugh when i > hear that term there is no free country and we never have a wright to > privesy u know man this sux so much....... oh and to the government u > can kiss my ass And here I was thinking my English sucks! By the way, keyboard do have keys like ".,;:". :-) - --------< fate favors the prepared mind >-------- Remo Pini rp(a)rpini.com PGP: http://www.rpini.com/remopini/rpcrypto.html - ------< words are what reality is made of >------ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMgg01BFhy5sz+bTpAQFz9ggArJOn4g8i/xREcEAjYXAO5oB+Jt6wUox1 dMh9GYpoYiYkb2qzpvQ9kK7JRMbehZRqhsltPQ7ydn1hNs/v+O+M4MG6I0FoIJg4 mmpEY7DDfLmqyPUAgEFq07re3pGraeteLFdSTlDvjxiBNw2+0K1EjQWHVVgxT/2p CKeKW8/v/dSA68TFVFcBlYKbNYZREUeEhTLhFLmuXXXkJcC3orrO0ODaENT7MWUz o1uCPq0v+XM+WMhNji5dIkVN6/SJQ0QT1MjocCmOFuMAa/UW8lwX2BPqBvI3K1ao EOb8hHDut+yMExRI2X6rtC3u8lgvm/8i58BBc1IncuI1Oxgn1ivmDw== =hwr+ -----END PGP SIGNATURE-----

1 0

The Solution: 20 Beautiful women
by Mark Neely 17 Dec '03

17 Dec '03

Fellow Cypherpunks, Maths was never my strong point, but this response (from my statistician g/f) sounds convincing...but then, maybe I'm biased :) -----8<------- According to your friendly neighbourhood statistician (ie me) the answer can be deterined as follows: Suppose we have 20 beautiful women and we call them W1, W2 through to W20. For any given women, say Wi where 1<=i<=20, we have only two choices, choosing her or rejecting her. Knowing that she's beautiful anyway, we assume that: Probability(Choosing Wi)=Probability(Rejecting Wi)=0.5 Now, let Wn where 1<=n<=20 be the most beautiful woman, then the probability of getting the most beautiful woman is: Probability(Getting Wn) =Probability(Rejecting W1) * Probability(Rejecting W2) * Probability(Rejecting W3) * ... * Probability(Rejecting Wn-1) * Probability(Choosing Wn) =(0.5)^(n-1) * (0.5) =(0.5)^n Now we know that the value for a fraction raised to any of the valid values of n (defined above to be 1<=n<=20) can be maximised by minimising the power to which the fraction is raised. So we take the minimum possible value of n, namely n=1. Thus Probability(Getting Wn)=(0.5)^n=0.5. This gives us the highest chance of choosing the most beautiful woman. This could have been done more intuitively and less rigorously by considering the fact that when we multiply any fraction by another fraction, it always becomes a smaller fraction (and hence our probability is reduced). So you can see there is a moral in this story, can you not? I pat myself on the head. I am extremely brilliant. She who is most luscious ___ Mark Neely - accessnt(a)ozemail.com.au Lawyer, Internet Consultant, Professional Cynic Author: Australian Beginner's Guide to the Internet (2nd Ed.) Australian Business Guide to the Internet Internet Guide for Teachers, Students & Parents WWW: http://www.ozemail.com.au/~accessnt

1 0

Re: Fixes to loop.c et al. for DES,IDEA,stego now done
by Julian Assange 17 Dec '03

17 Dec '03

> > -----BEGIN PGP SIGNED MESSAGE----- > > > > This directory contains patches to the Linux kernel to enable encryption and > > steganography of filesystems. Encryption allows you to have a scrambled > > partition or file that, with the proper pass phrase, you can mount, just > > like a normal filesystem. Steganography allows you to hide a filesystem in > > the low bits of, say, an audio file. You can even combine these two to hide > > a scrambled filesystem in the low bits of an audio file (see the example, > > below). > > > > With the addition of stego, this arrangment seems to be rather similar to > CFS. So the question on my mind, is can the loop device(s) be Since when has CFS had any steganography features? -- "Of all tyrannies a tyranny sincerely exercised for the good of its victims may be the most oppressive. It may be better to live under robber barons than under omnipotent moral busybodies, The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated; but those who torment us for own good will torment us without end, for they do so with the approval of their own conscience." - C.S. Lewis, _God in the Dock_ +---------------------+--------------------+----------------------------------+ |Julian Assange RSO | PO Box 2031 BARKER | Secret Analytic Guy Union | |proff(a)suburbia.net | VIC 3122 AUSTRALIA | finger for PGP key hash ID = | |proff(a)gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 | +---------------------+--------------------+----------------------------------+

1 0

Re: Freeh slimes again: Digital Telephony costs $2 billion now ...
by Bill Stewart 17 Dec '03

17 Dec '03

>>> Louis Freeh is now asking the Congress for $2 billion to fund >>> Digital Telephony. Yes, that is FOUR TIMES what he said it >How many crimes, approximately, are going to be solved or prevented by the >expenditure of this $2 billion dollars? One hundred? A thousand? I haven't been able to find the reference, but a month or two ago there was an article on the net or in a newspaper about the targets of wiretapping - how many wiretaps were for drugs, gambling, tax evasion, and of course terrorism. The number of wiretaps for bombs and guns was something low like 80 in the last 5-10 years - about 1/10%. (Did anybody else see this article??) On the other hand, the recent articles in the press about increasing bomb-related crimes in the US; it's up to about 3000/year from 2000 in 5 yrs. So maybe 1/10% of the bombing investigations have even used wiretapping. So why is Louis Freeh ranting up and down about the need to ban encryption because he needs wiretapping to catch terrorists? At least he could be honest and rant about the need to stop the hordes of drug dealers and escalate the War On Gambling. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> Defuse Authority!

2 1

PGP public key servers are useful! [noise?]
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Mon Aug 05 16:43:42 1996 Over the last couple of weeks, I've noticed a lot of subscribers who PGP clearsign their messages, but who haven't uploaded their keys to any of the public keyservers. Those keys are most useful when they're available to people who might want to use them, so I'm asking those of you who haven't sent them to a keyserver to do so. (The quick version: paste your key in cleartext into a letter, sent to pgp-public-keys(a)pgp.mit.edu with the subject: ADD. If you don't have it in cleartext, do pgp -kxa and follow the prompts.) TIA, dave - ---- David E. Smith POB 324 Cape Girardeau MO USA 63702 dsmith(a)prairienet.org http://www.prairienet.org/~dsmith send mail of 'send pgp-key' subject for my PGP public key "Heard a lot of talk about this Jesus, a man of love, a man of strength; but what a man was two thousand years ago means nothing at all to me today ... " -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Automagically signed with Pronto Secure for Windows. iQEVAwUBMgZrGzVTwUKWHSsJAQGRtwf/TPjleUXsqf2GcEsutZNnyYD82bYM2ZT/ NQm0BeUTcNdU+jA/2z5aiy+FRozcL6EeIDPULtCGeMvDYu95vBOjnimIxMjng9J6 mIpFIQzXUN4ZDdE7m1khbn8Vdk/V0kehQL318LzB484SQILWNYvTNrj/cDq6CdKW RMyyOH3+5VH1xRZJjFYvTsKnCszmtZIIvrjOt9+nX/j02bWnZRV7IGbOFjSrCL6p r1TZG/TnU60YGz/TaUhp5OCj0bFlkFQlg+NmcwR9j4rlIza9ujBSuGIcflMRWTG3 ighrCC9cpL1v/qJkHXKy67xdvIZWlq7UiyqTRUEBg7rwjSBca0YgZQ== =rDtm -----END PGP SIGNATURE-----

4 3

Re: Stealth cookies
by jfricker＠vertexgroup.com 17 Dec '03

17 Dec '03

At 12:10 AM 8/6/96 -0700, you wrote: >John F. Fricker wrote: >> Solution? >> >> 1) Don't put your name in the netscape configuration (d'oh) > > No, no, no. Netscape navigator does not reveal your name or >put it into cookies. The only way to get your name or other >personal information about you into a cookie is for you to type >it into a web site, and have that site send you back a cookie. > > The only time we reveal your name is in e-mail headers, and >when doing anonymous FTP when you have manually disabled the default >of sending 'mozilla@' as the anon ftp password. > > --Jeff > Oh I was just being paranoid I guess. There used to be JavaScript that would automatically send email from a page. something like <html> <body onLoad="document.mailme.submit()"> <form method=post name="mailme" action="mailto:john@vertexgroup.com?subject=user address"> <input type=hidden name="userAddress" value="done"> </form> </body> </html> But even if that still works it would be a good trick to associate it with a cookie.

2 1