- cypherpunks-legacy - lists.cpunks.org

Herbal Viagra 30 day trial... BJNG
by Zoe 27 May '02

27 May '02

1 0

Re: S/MIME and web of trust (was Re: NAI pulls out the DMCA stick)
by pgut001＠cs.auckland.ac.nz 27 May '02

27 May '02

Eric Murray <ericm(a)lne.com> writes: >Additionally, there is nothing that prevents one from issuing certs that can >be used to sign other certs. Sure, there are key usage bits etc but its >possible to ignore them. It should be possible to create a PGP style web of >trust using X.509 certs, given an appropriate set of cert extensions. I proposed some very simple additions to X.509 which would allow you to use the certs in the same way as PGP keys a year or two back. Unfortunately the PKIX WG chair is about as open to PGP-style additions to X.509 as some PGP people are towards S/MIME. (You can also do PGP using X.509 certs, I've been doing that for awhile just out of sheer bloody-mindedness :-). Peter.

1 0

RE: NAI pulls out the DMCA stick
by pgut001＠cs.auckland.ac.nz 27 May '02

27 May '02

Curt Smith <objectpascal(a)yahoo.com> writes: >1. How do you create a X.509 signing hierarchy? Grab whatever crypto software you feel most comfortable with that does X.509 and start cranking out certs. >2. Can you add additional algorithms (ie. Twofish)? Certs are for public-key algorithms, so Twofish would never appear in there (well, I guess you could certify a Twofish key, but I'm not sure what the point would be). >3. Is a relavent developer reference is available for X.509? You have to distinguish between the X.509 format and tools to use X.509. I assume you're after a manual for the tools, rather than RFC 3280, for the same reason that most PGP users don't start by reading RFC 2440. In that case, refer to the docs for your crypto toolkit. Peter.

1 0

RE: attack on rfc3211 mode (Re: disk encryption modes)
by Lucky Green 27 May '02

27 May '02

Peter wrote: > Yup. Actually the no-stored-IV encryption was never designed > to be a non- malleable cipher mode, the design goal was to > allow encryption-with-IV without having to explicitly store > an IV. For PWRI it has the additional nice feature of > avoiding collisions when you use a 64-bit block cipher, which > is probably going to be the case for some time to come even > with AES around. It was only after all that that I noticed > that the first pass was effectively a CBC-MAC, but it didn't > seem important enough to mention it in the RFC since it > wasn't an essential property (good thing I didn't :-). > > >With a disk mode, unlike with RFC3211 password based > encryption for CMS > >there is no place to store the structure inside the > plaintext which may > >to some extent defend against this attack. Here is a partial list of requirements that I believe apply to drive encryption cryptographic systems. I am sure that list is incomplete and may contain errors. The following is what springs to mind: 1) I do not believe that there is a fundamental need to limit the size of the ciphertext to the size of the plain text. Adding a 1% or even more space overhead for encryption is acceptable under any day-to-day scenario that I can think of. 2) The algorithm must be able to decrypt individual sectors without having to decrypt the entire contents of the drive. Nor must the algorithm leak any plaintext, even if the attacker were to have knowledge of all but one byte of the plaintext stored on the drive. 3) The encrypted partition should leak no information about the number, nature, and size of any files stored on the drive. Unless one has access to the key, the entire partition should be appear to the observer as a homogenous block of opaque encrypted data. 4) It would be nice, but is not in the least required, to be able to convert an existing unencrypted partition to an encrypted partition and back. 5) It must be possible to pass the encryption key as a parameter to mount, presumably in the form of a config file containing they key to prevent the key from showing up in ps. 6) It should be possible to both specify a raw AES key as well as a passphrase-derived SHA2 generated AES key. 7) Since the key will need to be stored in RAM for extended periods of time, the key should be protected from forensic recovery by being never being swapped to disk as well as by periodic bit-flipping. 8) Ideally, and this is definitely a feature for v2.0, each user would be able to specify a capability that will permit the listing and access of any files under that user's permissions on the encrypted file system. 9) While steganographic file systems offering multiple levels of credible distress keys are nice, I don't consider this a feature that should be included in v1.0.

1 0

수신거부4건
by giftdc 27 May '02

27 May '02

hell(a)einstein.ssz.com, cypherpunks(a)einstein.ssz.com, hangar18-general(a)open-forge.org, open-science-general(a)open-forge.org

1 0

Not Just E m a i l Addresses... Sort by SIC Code...
by md2002＠datacommarketing.com 27 May '02

27 May '02

<<< SPECIAL REVISED PRICE AS OF 5/24/2002 - HURRY QUANITIES WILL BE LIMITED >>> Attention: Are you buying from the "Information America" type companies for .10-.15 cents per record, we sell the same types of data for 1000's of records per penny! As a matter of fact several of these companies use and sell our data since did not have the skills to compile / append the newer internet fields such as web site info and e m a i l information. Please Read On... The Ultimate Traditional & Internet Marketing Tool, Introducing the "M A S T E R D I S C 2002" versions 4.00-4.10, now released its MASSIVE 11 disc set with over 145 Million database records (18-20 gigabytes of databases) for marketing to companies, people, via e m a i l, fax, phone and mailing addresses Worldwide! COMPLETE 11 DISC SET IS ALL OF THE MARKETING DATA YOU WILL NEED FOR 2002 & 2003 (Put your service or product out for the world to see!) We've been slashing prices once again to get you hooked on our leads & data products. The full disc set ver 4.00-4.10 (Contains all databases, all software titles, all demos, more then 65 million records include an e m a i l address and many, many other useful fields) including unlimited usage is yours permanently for just $799.00 for the full set or $99.00 for the single sample disc (Normally Sold For $2800.00 for the full set and $299.00 for single sample disc) if you order today! **** M A S T E R D I S C 2002 CONTENTS **** We've gone out of our way to insure that this product is the finest of its kind available. Each CD (ver.4.01 to ver.4.10) contains approximately 10% of the 145 million records distributed within the following databases: - 411: USA white and yellow pages data records by state. - DISCREETLIST: Adult web site subscribers and adult webmasters E M A I L addresses. - FORTUNE: This database contains primary contact data relating to fortune 500, fortune 1000, and millions more corporations sort able by company size and sales. - GENDERMAIL: Male and female email address lists that allow you target by gender with 97% accuracy. - MARKETMAKERS: Active online investors E M A I L addresses. Also information in reference to thousands of public companies symbols, and descriptions. - MAXDISC: Online website owners, administrators, and technical contacts for website domain name owners of the ".com", ".net", and ".org" sites. This database has information from about 25% of all registered domains with these extensions. - NEWSPAPERS: National directory of newspapers from small local papers to large metro news agencies. - PITBOSS: Avid Online casino and sports book players, and casino webmasters. - SA: South American mailing databases from more than a dozen countries. Each mailing address belongs to a Visa or MasterCard credit card holder. - SOFTWARE: This directory contains 86 software titles, some are fully functional versions and others are demo versions. Many suites of commercial e m a i l tools as well as many other useful resources will be found here to help extract, verify, manage, and deliver successful commercial e m a i l marketing campaigns. For More Information, Available Records, Pricing, CUSTOM Databases, Ordering Contact us: D a t a C o m M a r k e t i n g C o r p 1 4 4 0 C o r a l R i d g e D r. #3 3 6 C o r a l S p r i n g s, F l 3 3 0 7 1 (9 5 4) 7 5 3-2 8 4 6 voice / fax (Promo Code: 052402) For no further notice at no cost and to be disolved from all of our databases, simply "r e p l y" to this message with the word "Discontinue" in the subject line. IZ1

1 0

Regulatory arbitrage in action
by keyser-soze＠hushmail.com 27 May '02

27 May '02

Flight Schools See Downside to Crackdown By DAVID FIRESTONE with MATTHEW L. WALD The security crackdown meant to keep terrorist hijackers out of American flight schools has forced thousands of foreign students to train overseas, weakening the country's global dominance in aviation training, officials in the industry say. That shift, they warn, could ultimately mean greater risks for air travelers, because American flight schools are the main source of well-trained commercial pilots for foreign airlines. http://www.nytimes.com/2002/05/27/national/27FLIG.html Hush provide the worlds most secure, easy to use online applications - which solution is right for you? HushMail Secure Email http://www.hushmail.com/ HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/ Hush Business - security for your Business http://www.hush.com/ Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/ Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople

1 0

RE: Transparent disk encryption coming this year [was:RE: disk encryption modes]
by Lucky Green 26 May '02

26 May '02

FYI, The author of GEOM has just added the first straw man crypto provider to the FreeBSD 5.0 drive/partition manager. http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/geom/geom_aes.c?rev=1.1&co ntent-type=text/x-cvsweb-markup Yes, I know it is a modest start. But given how much interest there has been on the list in transparent drive encryption, those inclined to provide constructive feedback, ideally in the form of source code, may wish to do so. --Lucky > -----Original Message----- > From: owner-cypherpunks(a)lne.com > [mailto:owner-cypherpunks@lne.com] On Behalf Of Lucky Green > Sent: Sunday, April 28, 2002 12:37 AM > To: cypherpunks(a)lne.com > Cc: 'Peter Gutmann' > Subject: Transparent disk encryption coming this year > [was:RE: disk encryption modes] > > > I would like to direct anybody's attention who is interested > in transparent drive encryption to GEOM, which will be a > native feature of FreeBSD 5.0. > > GEOM is a project that is slated for inclusion in the release > of FreeBSD 5.0, a major upgrade to FreeBSD that has been > years in the making, due out by the end of the year. Based on > my understanding of what GEOM does, which may be imperfect, > GEOM provides a transparent middle layer between the actual > physical drives and what the OS thinks those drives are. For > example, the OS may believe it is using two UFS partitions on > the same IDE drive when in fact the actual drives used are > one hard drive formatted for Linux, one MS-DOS drive, and > some Solaris partition mounted over NFS. The OS or the > application will be completely isolated from the physical > hardware of the drives and the actual file systems on the drives. > > The benefits are compelling: you can simply add another drive > and tell your OS that one of the partitions that it is using > has just magically become much larger. Or move all the data > over to a RAID without your OS ever changing the device entry > it is talking to. As I said, totally transparent. > > I believe that GEOM will become widely adopted, just as Soft > Updates became widely adopted within months of its inclusion > in FreeBSD, because it is simply so compelling. > > Of course this magic requires various behind-the-scenes > "transformations". One of such transformations that the > author is explicitly targeting is transparent encryption. And > that's not just encryption of blocks on the file system or > via some kludgy loop back interface. If this gets implement > right, if you were to look at the physical drive, you > shouldn't even be able to tell how many files there are, or > for that matter how much data is stored on the drive. > > Currently, GEOM is being written by a single guy in Denmark. > Which sounds perhaps more crazy than it might be, because > Soft Updates, IIRC, was written by one person as well. The > guy seems real, has a grant for the project, and is an active > member of the FreeBSD team. > > If you feel comfortable with running FreeBSD-CURRENT, which > was just released as a Developer Preview 1 build, are > familiar with at least some file systems, and are interested > in seeing transparent drive encryption deployed on hundreds > of thousands of machines worldwide by the end of the year, I > would encourage you to visit > http://phk.freebsd.dk/geom/ and read the geom man page found > on the FreeBSD web site. Note that the encryption > transformation code is not yet available, though some of the > file system transformation code is. > > --Lucky

1 0

A counterpoint to NYT's Friedman: US media cowed by patriotic fever, says Dan Rather
by keyser-soze＠hushmail.com 26 May '02

26 May '02

US media cowed by patriotic fever, says CBS star <http://www.guardian.co.uk/bush/story/0,7369,717097,00.html> Network news veteran admits national mood caused him to shrink from tough questions on war in Afghanistan Matthew Engel in Washington Friday May 17, 2002 The Guardian Dan Rather, the star news anchor for the US television network CBS, said last night that "patriotism run amok" was in danger of trampling the freedom of American journalists to ask tough questions. And he admitted that he had shrunk from taking on the Bush administration over the war on terrorism. In the weeks after September 11 Rather wore a Stars and Stripes pin in his lapel during his evening news show in an apparent display of total solidarity with the American cause. However, in an interview with BBC's Newsnight, he graphically described the pressures to conform that built up after the attacks on the World Trade Centre and the Pentagon. "It is an obscene comparison - you know I am not sure I like it - but you know there was a time in South Africa that people would put flaming tyres around people's necks if they dissented. And in some ways the fear is that you will be necklaced here, you will have a flaming tyre of lack of patriotism put around your neck," he said. "Now it is that fear that keeps journalists from asking the toughest of the tough questions." Rather did not exempt himself from the criticism, and said the problem was self-censorship. "It starts with a feeling of patriotism within oneself. It carries through with a certain knowledge that the country as a whole - and for all the right reasons - felt and continues to feel this surge of patriotism within themselves. And one finds oneself saying: 'I know the right question, but you know what? This is not exactly the right time to ask it.'" Such a confession is astonishing, bearing in mind its source. Rather is almost as famous in the US as the president, though he is more secure in his tenure, far better paid and probably more pampered. Rather, 70, has held what used to be regarded as the top job in American journalism for two decades, since he was chosen to succeed the revered and avuncular Walter Cronkite as CBS News's anchorman. Traditionally, CBS was the country's No 1 news channel but has lost its status and ratings after years of budget cutbacks. The White House was to blame for its failure to provide adequate information about the war, Rather said. "There has never been an American war, small or large, in which access has been so limited as this one. "Limiting access, limiting information to cover the backsides of those who are in charge of the war, is extremely dangerous and cannot and should not be accepted. And I am sorry to say that, up to and including the moment of this interview, that overwhelmingly it has been accepted by the American people. And the current administration revels in that, they relish that, and they take refuge in that." He said his view of the patriotism differed from that of the administration. "It's unpatriotic not to stand up, look them in the eye, and ask the questions they don't want to hear - they being those who have the responsibility, the ultimate responsibility - of sending our sons and daughters, our husbands, wives, our blood, to face death. Hush provide the worlds most secure, easy to use online applications - which solution is right for you? HushMail Secure Email http://www.hushmail.com/ HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/ Hush Business - security for your Business http://www.hush.com/ Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/ Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople

1 0

100% �� 帮�� ۿ� ��ϴ� ! 281497544332222
by j_i_s_u_n＠orgio.net 26 May '02

26 May '02

1 0