- cypherpunks-legacy - lists.cpunks.org

Re: Fighting the cybercensor. (fwd)
by Steve Schear 17 Dec '03

17 Dec '03

>> Its worth noting that the origin of property is theft. In the case of the > > BULLSHIT. BULL FUCKING SHIT. The origin of property is labor. Claiming >that _my_ property is the result of ME stealing, and hence what I OWN belongs >to the community IS theft. I work, and as the result of that work something is >created. That something is MINE to do with as I will. If I choose to sell that >work for money, that money is mine. If I trade that money for shoes, those >shoes are mine. THere is no theft involved. Tell this to the Native Americans. --Steve

1 0

Key Security Question
by Z.B. 17 Dec '03

17 Dec '03

My computer went into the shop a few days ago, and I was unable to take my PGP keys off it before it went in. What are the security risks here? If the repairman chooses to snoop through the files, what would he be able to do with my key pair? Will I need to revoke the key and make a new one, or will I be relatively safe since he doesn't have my passphrase? Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

1 0

Re: Cats Out of Bags
by Bill Stewart 17 Dec '03

17 Dec '03

> "When I talk to other governments," [David L. Aaron] said, > "they still don't feel that the cat is out of the bag." Aaron's denying that the cat is out of the bag? He was fashionably dressed in a Lion Tamer's outfit, waving a whip, and trying to herd hundreds of small furry mammals to jump through a hoop and back into a clawed-up army duffel-bag! "Cats? Haven't seen any cats around here! Pay no attention to these,umm, Siberian Hamsters that I'm evaluating for export approval." > "Other governments were upset with the 56-bit export allowance. > They said it was going to undermine their national security." On this point, the other governments are correct. It really _is_ tougher to maintain a nation-state when your former subjects can have private conversations with each other and with other governments' former subjects...... And even 56 bits is a start. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: Cats Out of Bags
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

PJ wrote me in email: >A slight correction. The ``bernstein etc.'' cases are not about the >right to have strong crypto. There is no United States law forbidding >one from having or using crypto, hard, soft, or squishy. Those cases >challenge regulations that keep one from publishing information about >crypto including cryptographic software. Even if it were made illegal >to use hard crypto, it would still be a violation of the First >Amendment for the government to require a license before one is >allowed to publish information about crypto or anything else. I consider it a violation of free speech if the government made "hard crypto" illegal. yes, these cases are generally challenging the publishing aspects of crypto in the US, but this is not what I consider the most important constitutional ingredient in favor of crypto. crypto is essentially a kind of speech, or communication. hence restricting it would be like outlawing a certain foreign language that the government doesn't understand. in my opinion, this is the most important, root case to be made for the use of crypto in this country. publishing crypto algorithms is only a side issue compared to this, imho. so the bottom line is this: crypto regulations can be challenged under the idea that they are restricting freedom of the press, i.e. for academics to discuss algorithms, or it can be challenged under freedom of speech issues, i.e. everyone has the right to use codes for whatever purpose. currently because the regulations prohibit the "export" of crypto code, the first route is the basic challenge that makes the most sense. but I'd like to see the ITAR challenged on the second grounds as well, i.e. as a free speech issue. there's less reason when the gov't is not trying to regulate domestic crypto, but it might be a relevant angle in the export debate. BTW, I understand that there are cases being made by Karn, Junger, and Bernstein, is that correct? with Junger being the most recent? does anyone have web pages dedicated to each one of these? thanks;

1 0

Re: Denial of service attack
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Dimwit Virus K[arcinogen]OfTheMonth styles his facial hair to look more like pubic hair. \|/ @ @ -oOO-(_)-OOo- Dimwit Virus K[arcinogen]OfTheMonth

1 0

How to get MORE ORDERS for ANYTHING YOU sell!
by ubs＠mci2000.com 17 Dec '03

17 Dec '03

Hello,^Morons, Hello! As an Entrepreneur you may be interested in a LEADING marketing plan! This plan has worked for many successful entrepreneurs. For more information, please inquire at: REPLY TO: UBS(a)QualityService.com SUBJECT LINE: "Marketing Plan" This file could mean the online marketing difference between scintillating success and frustrating failure!

1 0

News: Panic! Internet is full of terrorists!
by Ernest Hua 17 Dec '03

17 Dec '03

I'm really sick and tired of this hypocritical bullshit from our executive branch. On one hand, we have FBI + CIA + NSA crying terrorists and child pornographers can get away with their crimes if networks are secured with cryptography. On the other hand, we also have presidential panels crying that our networks are vulnerable to terrorists if we don't do some serious security overhauls. What the *#@!! do they want? If you outlaw security software, then stop whining that the networks aren't secure! If you want secure networks, stop whining about the encryption "problem". Either the network is secure or it isn't. YOU CAN'T HAVE IT BOTH WAYS! Ern -------- QUOTED ARTICLE FROM: San Jose Mercury (Jan 31, 1997) PRESIDENTIAL PANEL WARNS OF CYBERATTACK THREAT Critics charge danger overstated, could lead to unwarranted intrusion on Net Published: Jan. 31, 1997 BY RORY J. O'CONNOR Mercury News Washington Bureau WASHINGTON -- The United States faces a serious risk of cyberattacks against vital computer-controlled networks, attacks that could threaten the nation's security or economy, according to a presidential commission evaluating the threat. [SNIP] -------- Ernest Hua, Software Sanitation Engineer Chromatic Research, 615 Tasman Drive, Sunnyvale, CA 94089-1707 Phone: 408 752-9375, Fax: 408 752-9301, E-Mail: hua(a)chromatic.com

1 0

pgpfingerd
by Jeremey Barrett 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- For what it's worth, I wrote a very short fingerd that fetches _only_ a user's .pgpplan file, should it exist. Else it just exits. Someone may have already done this, so be it. This was mostly for my own use, but if anyone wants the code, feel free to use it. It's available from my home page ( http://www.veriweb.com/people/jeremey/ ). After calling getpwnam() on the username supplied, it calls setuid() with the uid of the user being fingered. It ignores any finger options and attempts to parse them out. It's possible I missed some. After setuid(), it attempts to open a file called .pgpplan in the directory (pw_dir) returned by getpwnam(). If this is not a _regular_ file, it exits, i.e. no symlinks. Then it shoves the file out over stdout (this assumes it was invoked by inetd). That's it. I've only compiled it on Linux and BSDI, but it doesn't do anything very odd, so it should compile fine on other Unix platforms. - -- =-----------------------------------------------------------------------= Jeremey Barrett VeriWeb Internet Corp. Senior Software Engineer http://www.veriweb.com/ PGP Key fingerprint = 3B 42 1E D4 4B 17 0D 80 DC 59 6F 59 04 C3 83 64 =-----------------------------------------------------------------------= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMvKgyy/fy+vkqMxNAQHqKgQAqxKiAzcOUDx9ThN5D6OHwuyUE1WlCtXr EVjg0d19fhafiTGO3HwAFbk8zxtzs/YMtSJ4a5nbALQTUxVBF/749DboXU+IS37l urB7MjBb0mB7+4IDmmR/iFEJa/U/mlTWZiLZ7JOq2Y7GtuqDmGgN3Z/T+K0loQvl 7Qn1x8aHXlI= =RxZM -----END PGP SIGNATURE-----

1 0

News: Panic! Internet is full of terrorists!
by Ernest Hua 17 Dec '03

17 Dec '03

I'm really sick and tired of this hypocritical bullshit from our executive branch. On one hand, we have FBI + CIA + NSA crying terrorists and child pornographers can get away with their crimes if networks are secured with cryptography. On the other hand, we also have presidential panels crying that our networks are vulnerable to terrorists if we don't do some serious security overhauls. What the *#@!! do they want? If you outlaw security software, then stop whining that the networks aren't secure! If you want secure networks, stop whining about the encryption "problem". Either the network is secure or it isn't. YOU CAN'T HAVE IT BOTH WAYS! Ern -------- QUOTED ARTICLE FROM: San Jose Mercury (Jan 31, 1997) PRESIDENTIAL PANEL WARNS OF CYBERATTACK THREAT Critics charge danger overstated, could lead to unwarranted intrusion on Net Published: Jan. 31, 1997 BY RORY J. O'CONNOR Mercury News Washington Bureau WASHINGTON -- The United States faces a serious risk of cyberattacks against vital computer-controlled networks, attacks that could threaten the nation's security or economy, according to a presidential commission evaluating the threat. [SNIP] -------- Ernest Hua, Software Sanitation Engineer Chromatic Research, 615 Tasman Drive, Sunnyvale, CA 94089-1707 Phone: 408 752-9375, Fax: 408 752-9301, E-Mail: hua(a)chromatic.com

1 0

It can be disabled (was Re: PGPMail Log File)
by wlkngowl＠unix.asb.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 31 Jan 1997 09:27:45 -0500, you wrote: >At 02:22 AM 1/31/97 +0000, "Robert Rothenburg 'Walking-Owl'" >< WlkngOwl(a)unix.asb.comwrote: >> Is there a way to disable the \WINDOWS\PGPW_32.LOG? >> In subtle ways it's a security hole if left to accumulate over time, >> since it keeps records of which keys you encrypted messages to. >This is a damn good question. I do NOT have the "write to a log file" > option slected in the misc. tab and it STILL writes a log file. How DO >we disable this? It's disabled, with the exception of keeping when it was last run. Technically a 'security hole' but so minor I can live with it. Maybe your version (I'm using beta 11) has a problem, but mine's fine. I was just careless and didn't look closely (not something one should do with crypto...) Rob -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAgUBMvLTBQTNlSxdPy6ZAQEe4Qf7B1tIyBSZvdtg48lSZAnr4IOh9NbbrgvK RSoGF8UVGnfQWgItsiYIkA82WAqxBBMQaJuHBolkm8PTh7eb/Q3dd4Wz9BZdMp/g +aCRIM2MzfX2+SagyTw4r7L98XozfcUkhnSKcmJQDtrrq04Rlglt5Muf96jrW++p ltp4gXh4nawx75GZlGIS2XB223g5Rd9RSXAGER0gV1BtZKYt8uGkzeGL0OnsZnr+ VUgNVmXX2jeCn0essUX5WcKlSK2vATkoqv3UR1deEbP0Xdt/PTwjS/GZHrvnP5B1 zfOn7iV0CGZYXWpQAGO58HtW16vqC8wZ6lb5N7tdbBRcGX0B/cHc8A== =49OA -----END PGP SIGNATURE----- ----- "The word to kill ain't dirty | Robert Rothenburg (WlkngOwl(a)unix.asb.com) I used it in the last line | http://www.asb.com/usr/wlkngowl/ but use a short word for lovin' | Se habla PGP: Reply with the subject and dad you wind up doin' time." | 'send pgp-key' for my public key.

1 0