- cypherpunks-legacy - lists.cpunks.org

PGPcompose (pgpc) 2.0 *just* finished.
by nate＠VIS.ColoState.EDU 12 Sep '93

12 Sep '93

-----BEGIN PGP SIGNED MESSAGE----- PGPcompose 2.0 is available for ftp from 129.82.156.104 (the macintosh in my dorm room... ;-) in /pub/pgpc it's all of 11K, so don't sweat the bandwidth! PGPcompose 2.0 has the following features: -can send mail through anon.penet.fi -keeps your anon.penet.fi password in a PGP'd file in your home directory -mails through 15 of the cypherpunks remailers (unlimited remailings, actually, but there's only 15 servers in it now (tell me of more!)) -can encrypt and sign mail -pumps output directly to sendmail (once you find out where sendmail is... read the README for more info) -will keep you fron doing stupid things, like mailing though anon.penet.fi and then through the remailers, or signing a message and then sending it through the remailers or through anon.penet.fi, etc... If you use it, send me some email. I would like to expand it's abilities, but I'm lazy... and tired. - -nate nate(a)vis.colostate.edu -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLJLs4NTgi1fmrpxlAQEm+wP5AXyo6iBre/iffpMoDrwGLHbLgqwqeCUa Dn1bI3AeYqj6kwyI7BdkZ4JFTgU6o6mPldDHHwtO1VNi+P/Hnkku+H+xa9YhmxDN b5MouM7By7mEEpgWJS9Bu2+aYXdKa9ZxB6YuI4khBxSJID07mPUer2g35swiRayw y+A2KB537/o= =HhPi -----END PGP SIGNATURE-----

1 0

warez
by Timothy Newsham 12 Sep '93

12 Sep '93

> > Some recent "warez" posts from alt.security.... Why was this posted to the cypherpunks list? What is the point? [..post deleted..]

1 0

Re: EC isn't great for privacy either...
by George A. Gleason 12 Sep '93

12 Sep '93

Right, "most people accept" the need for Big Brother to snoop..... In the UK, during the 1970s, the govt routinely tapped the phones of labor union organisers and members of opposing political parties. This got out in a series of articles in _New Statesman_. Presumably it was easy for dissident telephone engineers to detect evidence of the taps, because the exchanges were electromechanical in those days & taps were hard-wired. Nowadays, it's all System X or other digital, no evidence to detect, no dissident engineers popping out of the woodwork.... There are plenty of other examples of politically-motivated tapping; opposition political parties ought to be making much hay over this right now. During Nazi occupation, Dutch telephone engineers were particularly adept at creating non-tappable direct-dial long distance routes for special use by the resistance. After the war was over, they unveiled it for public use as direct distance dialing. Anyway, if any of these veterans are around, they would probably have interesting things to say about the current issues... -gg

1 0

fwds from RISKs
by L. Detweiler 12 Sep '93

12 Sep '93

- Clinton administration eases Cold war era controls on export of supercomputers to Soviet bloc countries - mainstream article on digital signatures in The Sciences - European secure phone & network advertisement there's a pointer to Islands in the Net by B. Sterling for `offshore data havens' and some other notes there, not included. points: - remember that DEC machine that was taken off the net because of problems with the state department restricting computer access to `foreign nationals'? will anything like this ever happen again? - public comprehension of digital signatures is definitely a necessary stepping stone to digital cash in the collective psyche. A positive sign. - secure phones: was the EC policy recently quoted here affected by this? anyone in Europe threatened by that proposal should look into this. ===cut=here=== RISKS-FORUM Digest 15.03 Date: 27 Aug 93 15:05:53 EDT From: "Mich Kabay / JINBU Corp." <75300.3232(a)compuserve.com> Subject: Technology export curbs >From Washington Post newswire 08/27 U.S. Acts to Ease Export Controls On Computers; Industry Officials Say Proposed Standard Falls Far Short of Need By Peter Behr, Washington Post Staff Writer "The Clinton administration moved yesterday to ease Cold War-era controls on exports of high-powered U.S. computers to the former Soviet Bloc and other countries, fulfilling a campaign promise President Clinton made to the Silicon Valley executives who supported him last year." The article continues with comments on the lost sales caused by Cold War restrictions on computer exports. The new Commerce Decision rules allow export of microprocessors rated at 67 Mops (million operations per second), a big boost from the previous limit of 12 Mops. However, multiprocessor units are still on the forbidden list. Sales to the former Soviet Union are still subject to approval by COCOM, the Coordinating Committe for Multilateral Export Controls. Apparently some members of COCOM--Germany, in particular--are trying to link relaxation of computer export restrictions with relaxation of telecommunications gear. *** It will be interesting to see if the long-standing assumption that export restrictions prevent the distribution of technology to the interdicted nations. My reading of the DES-restriction debacle is that export controls on high tech are a farce. The U.S. restrictions hurt U.S. manufacturers and are a boon for everyone else. Michel E. Kabay, Ph.D., Director of Education, National Computer Security Assn RISKS-FORUM Digest 15.02 Date: 03 Sep 93 07:52:52 EDT From: "Mich Kabay / JINBU Corp." <75300.3232(a)compuserve.com> Subject: Electronic documents A recent article deals with several RISKS of depending on electronic documents: Hayes, B. (1993). The electronic palimpsest; Digital documents for all occasions: erasable, correctable, reproducible, forgeable. _The Sciences_ (NY Academy of Sciences) 33(5):10.(Sept/Oct 1993) I enjoyed reading Brian Hayes article in the new issue of this fine magazine. It is not only informative and up to date, but also elegant, amusing and beautifully illustrated with various paintings. Summary follows: "As a writing instrument, the computer is not su much a better pencil as a better eraser." You can eliminate all traces of your early versions at the stroke of a key. This easy erasability leads to difficulties of authentication. How can one prove who wrote an electronic document? Digitized signatures make the problem worse, since anyone can scan a real signature and then print in on any document. However, digital signatures are a good method of authentication. The public key cryptosystem allows you to encrypt a document with your private (secret) key; only the corresponding public key decrypts the message. The encrypted version is as big as the original, though: a nuisance. A refinement, the digital signature, encrypts a digest of only 160 bits and provides the same confidence of authentication. Another problem is forgery. If we pay the rent with an electronic cheque, what stops a crook from using copy after copy of the same cheque? We will need unique serial numbers on electronic cheques. What about proving _when_ a document was created? Here we have to rely on a time-stamping service. Scientists at BELLCORE have invented the time-stamp equivalent of the digital signature. You submit a digest of the document that needs to be time-stamped to a trusted time-stamping computer; it generates a cryptographically-sound certificate which includes the time of receipt. To prevent fraud at the time-stamping computer (where someone might change the system clock long enough to produce fake time-stamps for a specific crime), every certificate is merged mathematically with all the others issued during the same weekly period. The summary time-stamp is then published in _The New York Times_. The legal system will have to adapt to the increasing use of electronic documents. Historians will also have more trouble piecing together the creative process if only the final version is published or physically available. And what about the rapid changes in computing technology and storage devices? Who will be able to read today's diskettes a hundred years from now? Or even ten? Archivists must think about these issues. <<end of summary>> Michel E. Kabay, Ph.D., Director of Education, National Computer Security Assn RISKS-FORUM Digest 15.04 Date: Thu, 9 Sep 1993 18:10:41 +0100 From: Brian.Randell(a)newcastle.ac.uk Subject: EuroDigital The attached article about a new digital phone service, about to be launched in the UK, is from the Monday, Sept 6, 1993, issue of The Independent. Also in this issue was a two page advertisement for the new service - the text of this is also attached. My understanding is that the new equipment produces emissions that have characteristics that were not considered when the regulations and guidelines (under which existing devices such as hearing aids were designed) were laid down. If this is right, then the statement by the providers of the new service that the problems are the responsibility of the manufacturers of such devices would seem to be highly questionable. I await with interest RISKs readers' reactions to the article (and the advertisement). Brian Randell, Dept. of Computing Science, University of Newcastle, Newcastle upon Tyne, NE1 7RU, UK Brian.Randell(a)newcastle.ac.uk PHONE = +44 91 222 7923 [...] (Advt.) LIBERTE' The Freedom to make a call in total security We have given you freedom. We have created a secure tomorrow for businessmen and travellers both here and in Europe. New frontiers beckon. Vodafone proudly announces EuroDigital. The most advanced and most secure mobile phone network. So sophisticated that it can even be used to make and receive calls in Europe in total security. EuroDigital represents a revolution in mobile phone technology. A superior digital system that provides a top quality service. A quality that doesn't falter, that doesn't break up. Line rental is 21.50 per month. UK call charges 25p per minute peak, 10p off peak. Only Vodafone can offer this. Liberate yourself. Enjoy freedom of speech and security. Rise above the rest. Call free, 0500 123 123 and ask for more information. All prices are recommended and are exclusive of V.A.T. VODAFONE EuroDigital

2 1

warez
by remail＠tamsun.tamu.edu 12 Sep '93

12 Sep '93

Some recent "warez" posts from alt.security.... Newsgroups: alt.security Path: netcom.com!netcomsv!decwrl!olivea!sgigate!sgi!wdl1!mail!klaus From: klaus(a)lds.loral.com (Christopher Klaus) Subject: software piracy lists (correction) Message-ID: <1993Aug16.201509.24808(a)lds.loral.com> Organization: Loral Data Systems Date: Mon, 16 Aug 1993 20:15:09 GMT Lines: 41 Okay, I got some email flaming me for making accusations about these 'warez' lists. Apparently, not all the sites in the lists contained actual warez due to the list being outdated and as the list said it contained some sites that were beneficial to software pirates but didnt contain any warez. I guess if someone wants to stress that because some of the sites werent infact a warez site, that the lists I published werent actual warez lists. Thats fine. So next time, Ill say this list MAY contain sites that support warez, but these are not actual warez lists. I hope that helps someone. If you are the one complaining about not going through the list and emailing each of the sites about the possibility of a warez site, write a script for me. :) I am not going to work overtime to track down the evils of the net. I dont have time to check 400 sites if they are valid for warez. Apparently quite a few sites must have had actual warez, otherwise Anti-track and other pirates would not have been irate about such lists if it didn't contain any 'warez sites'. I find it ironic that many of the admins complained the lists were outdated and useless (maybe they have access to better lists than me) while the pirates complained it was one of the best lists ever produced. In publishing those lists, my point was that there is an organized crime on Internet that maybe some admins should be aware of. I do not believe by publishing those lists that much piracy has been crushed on Internet. As far as the guys saying how insecure fsp and ftp is because it is so easy for an admin to look at network statistics and notice the large amounts of traffic for software piracy, I find it funny those so much pirating is done without admins ever noticing. And it usually gets noticed because of lack of hard drive space, not amount of network traffic. And when 200 users are using some LAN, I really doubt you would notice an enmormous jump in network traffic anyways, due to people ftp'ing all the time as it is. Not to mention it would be rather hard to find out what kind of network traffic is going through all the ports, without violating the privacy of the users. -- Christopher Klaus klaus(a)mail.lds.loral.com cklaus(a)hotsun.nersc.gov Newsgroups: alt.security Path: netcom.com!csus.edu!decwrl!decwrl!olivea!charnel!rat!usc!sdd.hp.com!nigel.msen.com!yale.edu!yale!mintaka.lcs.mit.edu!coup From: coup(a)gnu.ai.mit.edu (Christopher Klaus) Subject: warez list2 Message-ID: <1993Aug11.200800.20903(a)mintaka.lcs.mit.edu> Sender: news(a)mintaka.lcs.mit.edu Organization: Free Software Foundation Date: Wed, 11 Aug 1993 20:08:00 GMT Lines: 247 Here's another list found in some /tmp of warez dood sites.. Please Inform me if U have sites/info not on this list And Any Updates To: an874(a)anon.penet.fi (irc: semi) (Please use same format in msg as I use on list so it s easy to update.) So If there is not you anonymous mail address on this list get one and tell it to me.. Also I allways love to receive sites info and also I like to get info about realiable users as well as "antipirates". Soon I start working with WarBot and #site in irc but I tell 'bout that later -semi FSP:**Address***********Port****Extra****************************************** FSP: 128.113.75.10 6611 FSP: 128.153.16.175 7777 FSP: 128.174.240.63 21 Vampyr Central magnus.cs.uiuc.edu FSP: 128.174.80.13 900 FSP: 128.178.79.121 6969 Corvin FSP: 128.183.8.31 21 FSP: 128.192.7.51 21 ada.stat.uga.edu FSP: 128.2.206.138 30 seismo.soar.cs.cmu.edu FSP: 128.252.135.4 21 wuarchive.wustl.edu FSP: 128.3.252.177 9030 Lankhmar Extension FSP: 128.32.155.3 9999 FSP: 128.55.128.90 11111 FSP: 128.95.48.32 2468 byron.u.washington.edu FSP: 128.96.32.20 21 flash.bellcore.com FSP: 129.10.50.137 2121 vlsi37.coe.northeastern.edu FSP: 129.125.6.206 6669 shapley.astro.rug.nl cray/amiga FSP: 129.186.10.20 5200 naf1.zool.iastate.edu Was on 42 FSP: 129.186.123.140 1992 pv7b8c.vincent.iastate.edu FSP: 129.186.141.241 1992 marge.ecss.iastate.edu FSP: 129.186.141.242 1992 marge.ecss.iastate.edu FSP: 129.186.4.31 2992 pv041f.vincent.iastate.edu FSP: 129.186.8.27 6969 The Ninth Level FSP: 129.215.64.60 7000 FSP: 129.240.21.38 8080 FSP: 129.79.1.15 3000 FSP: 130.179.25.31 6611 newton.amath.umanitoba.ca Slow IBM FSP: 130.225.51.19 11111 FSP: 130.49.4.17 21 Good IBM FSP: 130.84.144.190 7373 FSP: 131.151.1.57 4321 cetus.cc.umr.edu FSP: 131.155.2.49 6669 and on 1200 FSP: 131.170.24.42 6669 yallara.cs.rmit.oz.au FSP: 131.174.224.37 6669 FSP: 131.215.131.148 21 FSP: 131.215.131.148 21 mosaic.cs.caltech.edu FSP: 131.215.131.97 21 ipsc2.caltech.edu and on 5200 \? FSP: 131.229.64.1 2112 Shifty FSP: 132.205.9.100 2711 FSP: 132.235.1.242 21 brandx.cs.ohiou.edu FSP: 132.254.90.4 4444 IBM part closed FSP: 134.148.96.105 21 pleiades.newcastle.edu.au FSP: 134.154.1.10 1756 Aladdin FSP: 134.225.11.1 5190 FSP: 134.225.11.1 5431 FSP: 134.225.11.1 5432 FSP: 134.225.11.1 7351 FSP: 134.225.11.1 8814 FSP: 134.225.4.2 4389 swsscsc2.rdg.ac.uk FSP: 134.225.5.1 4321 scsscsc1.rdg.ac.uk FSP: 134.29.41.1 1121 hobbes.ESCI.StCloud.MSUS.EDU FSP: 134.48.17.13 666 Jims Site FSP: 134.68.6.2 2911 Ethome FSP: 134.68.6.2 3911 FSP: 134.68.7.60 911 FSP: 134.68.7.90 911 FSP: 137.122.6.17 2001 The Bat Cave FSP: 138.23.106.203 6666 FSP: 140.114.26.90 199 Good IBM FSP: 140.114.78.214 21 sunc14.cs.nthu.edu.tw Good IBM FSP: 141.215.69.5 21 FSP: 143.53.240.1 6996 muser.brad.ac.uk FSP: 146.232.108.2 4999 Amiga FSP: 146.232.128.2 6969 cs.sun.ac.za FSP: 150.203.43.50 3333 mehta.anu.edu.au FSP: 150.203.5.31 4455 caesar.anu.edu.au FSP: 152.17.30.2 2766 Slow one FSP: 158.38.60.202 3000 FSP: 158.39.30.24 21 hannibal.hsn.no FSP: 18.172.1.2 21 tsx-11.mit.edu FSP: 192.131.107.5 8564 bart.meiko.com FSP: 192.48.98.1 6669 poly.polytechnique.fr FSP: 192.70.34.205 6678 eurecom5.cica.fr FSP: 192.76.134.1 11111 mcshh.Hanse.de FSP: 192.76.144.75 2001 ftp.germany.EU.net FSP: 192.87.1.150 9999 The Adventure Pit FSP: 193.78.33.42 7549 FTP:**Address*******************Type****Directory************************** FTP: 128.193.124.2 Warez /pub/submit/"..." FTP: 128.36.13.1 DEAD /pub/haskell/library/incoming/" " FTP: 129.43.1.11 Warez /pub/incoming/. unreadable FTP: 129.6.32.54 Warez /upload/".. " FTP: 141.138.2.2 DEAD /pub/uploads/for.gross/".. " FTP: 141.212.32.53 DEAD /pub/../". unreadable"/.bi.n FTP: 147.26.103.14 DEAD /pub/incoming FTP: 179.259.37.10 DEAD /warez/". ,"/pc FTP: 36.10.0.4 Warez /pub/... (e) FTP: Sun.soe.clarkson.edu DEAD /pub/incoming/"..."/.f FTP: W20-575-67.mit.edu Warez /pub/".. " (Dos6.0, Os2 Site) FTP: a.cs.uiuc.edu DEAD /tmp/reddy/papers/".. "/.bin FTP: apollo.di.unipi.ti DEAD /pub/".. "/.bin FTP: athena.erc.msstate.edu DEAD /pub/seger/".. " FTP: athena.erc.msstate.edu DEAD /pup/off-theses-ps/".. "/.bin FTP: aun.uninett.no DEAD /gopherfiles/tmp/gftpC+/"..." FTP: cs.ep.utexas.edu DEAD /pub/reports/xfer/incoming FTP: cs.tut.fi DEAD /pub/tut/testing/confocal/.bin/.zip FTP: delphi.cs.ucla.edu /incoming/" "/". bin" FTP: dix.gps.caltech.edu /pub/... FTP: doppler.ncsc.org /pub/siggraph/uploads/... FTP: elof.iit.edu /.NeXT/... FTP: elof.iit.edu DEAD /pub/drum/incoming/".. "/b.i.n FTP: emil.ma.utexas.edu /gif/.../ FTP: emil.ma.utexas.edu /incoming/.../ FTP: faui80.informatik.uni-erlangen.de /pub/asl/".. " FTP: faui80.informatik.uni-erlangen.de /pub/asl/.. FTP: faui80.informatik.uni-erlangen.de /pub/scheme/yorku/new/... FTP: fcs280s.ncifcrf.gov Warez /pub/incoming/". unreadable" FTP: fourcroy.chem.wayne.edu SCOUnix /pub/unix/sco FTP: fourcroy.chem.wayne.edu Warez /pub/incoming/".message "/.bin FTP: ftp.brad.ac.uk WAREZ /incoming/msdos/".. " FTP: ftp.cayman.com DEAD /pub/users/john/ibmpc FTP: ftp.cs.umn.edu GIF /users/grante/incoming/... FTP: ftp.psi.com DEAD /tmp/".. "/". unreadable"/..f FTP: ftp.uu.net /library FTP: ftp.uu.net /published/usenix/faces FTP: gatekeeper.dec.com /.2/micro/sysv-386/uportlaCk FTP: geom.umn.edu Warez /incoming/". unreadable"/ (visual c++) FTP: guardian.cs.psu.edu /pub/mosis/ugrain/... FTP: gumby.cc.wmich.edu DEAD /pub/incoming/". unreadable"/". "/ FTP: hub.cs.jmu.edu DEAD /incoming/".. "/". unreadable" FTP: huron.scd.ucar.edu Warez /weather/CO_ski.obs/... FTP: hydra.helsinki.fi Warez /incoming/". unreadable" FTP: j.cc.purdue.edu /pub/deTex/.../ FTP: kanaha.idbsu.edu /incoming/... FTP: kanaha.idbsu.edu /pub/NOBS/flip/... FTP: lamont.ldgo.columbia.edu /nceer/data/".. " FTP: lamont.ldgo.columbia.edu /nceer/data/... FTP: louie.udel.edu /incoming/.../ FTP: mango.rsmas.miami.edu DEAD /incoming/.../.../ibm/.zip FTP: math.princeton.edu Warez /pub/deTex/".. " FTP: math.utexas.edu /incoming/djgpp/... FTP: math.utexas.edu /pub/mp_arc/... FTP: math.utexas.edu /pub/mp_arc/abstracts/... FTP: math.utexas.edu /pub/mp_arc/doc/... FTP: math.utexas.edu /pub/mp_arc/papers/... FTP: math.utexas.edu Warez /incoming/".. " FTP: math.utexas.edu Warez /incoming/klaus/haken3/... FTP: mcnc.mcnc.org /pub/4kk/... FTP: ncar.ucar.edu /pc/virus/".. " FTP: nexus.yorku.ca /pub/scheme/new/... FTP: nic.stolaf.edu /pub/sci/... FTP: nic.stolaf.edu /pub/tmp/... FTP: omnigate.clarkson.edu DEAD /pub/gw/dump/.../.f FTP: osceola.cs.ucf.edu DEAD /amar/.../I/f FTP: park.bu.edu DEAD /pub/incoming/" "/.b.in FTP: park.bu.edu DEAD /pub/incoming/dt.bak/.b.in FTP: phoenix.oulu.fi /pub/incoming/"misc.zip "/"... " FTP: phoenix.oulu.fi DEAD /pub/incoming/"misc.zip " FTP: picard.uakron.edu /NetInfo/NeXT/" "/".. "/ FTP: potemkin.cs.pdx.edu Warez /pub/ileaf/incoming/".. " FTP: psuvax1.cs.psu.edu /pub/mosis/ugrain/... FTP: quayle.mu.wvnet.edu DEAD /pub/pc/uploads/.../.zip (no anon.) FTP: rascal.ics.utexas.edu /misc/... FTP: rascal.ics.utexas.edu /misc/av/safety-folder/... FTP: rascal.ics.utexas.edu /misc/mac/... FTP: raven.alaska.edu Warez /pub/".. " FTP: sachiko.acc.stolaf.edu /pub/tmp/... FTP: sesqui.net /pub/incomming/".. " FTP: sifon.cc.mcgill.ca DEAD /pub/in.coming/_..___/__________ FTP: solar.stanford.edu DEAD /pub/"..."/.f FTP: solbourne.solbourne.com /pub/uploads/for.gross/incoming/... FTP: sonata.cc.purdue.edu /pub/next/submissions/multi-media FTP: sonate.cc.purdue.edu Warez /pub/next/multi-media^A FTP: sperm.ocean.washington.edu /pub/matter/" "/" " FTP: sperm.ocean.washington.edu DEAD /pub/matter/" " FTP: sun.soe.clarkson.edu /pub/incoming/... FTP: sun.soe.clarkson.edu /pub/src/flex/.." " FTP: sunbcd.weizmann.ac.il DEAD /pub/incoming/".. " FTP: suntan.tandem.com /pub/... FTP: thor.cs.wayne.edu DEAD /pub/.warez FTP: transit.ai.mit.edu /incoming/... FTP: uhunix2.uhcc.hawaii.edu /mirrors/gnu FTP: unmvax.cs.unm.edu /pub/jensen/.bin/.zip FTP: uvaarpa.virginia.edu /public_access/aa/.find/". " FTP: venera.isi.edu /pub/wuu/tmp/".. " FTP: wlv.iipo.gtegsc.com /pub/... FTP: zaphod.lanl.gov /pub/clim/incoming/ USER:**Irc Nick*********Email********************************************** USER:+ (not in irc) an31(a)anon.penet.fi USER:+ Amp (No Email) USER:+ Ap0ll0 an19159(a)anon.penet.fi USER:+ Bin ap.9416(a)cupid.sai.com USER:+ BloodSlop csc226117(a)husky1.stmarys.ca USER:+ BosStone an19426(a)anon.penet.fi USER:+ DDay (Not Yet) USER:+ Darion an18877(a)anon.penet.fi USER:+ Dekion an18796(a)anon.penet.fi USER:+ Eddie (Not Yet) USER:+ Fidelio an19045(a)anon.penet.fi USER:+ Flognat an14231(a)anon.penet.fi USER:+ GreenDay an18894(a)anon.penet.fi USER:+ Ignotus an17295(a)anon.penet.fi USER:+ JizMak (Not Yet) USER:+ MasNinja (Not Yet) USER:+ PurpCon (Not Yet) USER:+ Q_Silver an19169(a)anon.penet.fi USER:+ RalfiBoy an19218(a)anon.penet.fi USER:+ RedOne (Not Yet) USER:+ Robinn (Not Yet) USER:+ S-Lord an19288(a)anon.penet.fi USER:+ Slick (Not Yet) USER:+ Snarf snarf(a)oulubox.tolsun.oulu.fi USER:+ Sp0t (Not Yet) USER:+ TBoard an19155(a)anon.penet.fi USER:+ TI_Master an15612(a)anon.penet.fi USER:+ TWC an19455(a)anon.penet.fi USER:+ TWicked an19576(a)anon.penet.fi USER:+ Zip (Not Yet) USER:+ semi an874(a)anon.penet.fi XTRA:*Id**User*Description**************************************************** XTRA: + - User is Real (Pirate) XTRA: - - User Is Antipirate *BEWARE* XTRA: ? - Unknow user ps. If U have idea how to make this list look better or any idea at all about this "thing" just send me mail.. I just love to receive mail ;) Pss. If Someone wants his name on this list and also want to receive this my list regualy every time it get chanced, PLEASE don't tell me that in irc, just send me e-mail with: irc nick, anonymous mail address and real mail address. (and if U would tell in same message that where U get this list, you will be in my list very soon). Newsgroups: alt.security Path: netcom.com!csus.edu!decwrl!decwrl!olivea!charnel!rat!usc!sdd.hp.com!nigel.msen.com!yale.edu!yale!mintaka.lcs.mit.edu!coup From: coup(a)gnu.ai.mit.edu (Christopher Klaus) Subject: warez list Message-ID: <1993Aug11.200142.20536(a)mintaka.lcs.mit.edu> Sender: news(a)mintaka.lcs.mit.edu Organization: Free Software Foundation Date: Wed, 11 Aug 1993 20:01:42 GMT Lines: 259 Hello. I happened to look at /tmp in some major ftp site and found some interesting files. Anyways, I know CERT has sent out a advisory already on FTP abuse. But they didnt really address the FSP sites either. I dont know much about the IBM scene nor care, but I figure maybe some of the admins would like to investigate this list and maybe clean up their sites if they are on it and it hasnt been cleaned up. Maybe the SPA can get involved if someone so desires. Here's the list. __/__/__/__/__/ __/ __/ __/ __/ __/ __/__/ __/__/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/__/ __/__/__/ __/__/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/ __/__/ __/__/ The Little Tikes Software Co proudly presents the most comprehensive and complete Warez Information available on the Internet Last revision: 930721 =========== WARNING!!!! =========== THIS LIST SHOULD BE KEPT AMONG SITE OPERATORS ONLY!!! If you wish to make a more public version of this file, be sure to remove all information about site operators, IRC bots & servers. Please direct any update information or comments to Tikes and send flames to 127.0.0.1 ---- NOTE ---- >From now on, you'll have to request me the list, I won't automatically dcc it to U when it is updated... Information =========== This file contains many sections: FTP Sites List of all sites that has been or are warez active FSP Sites List of all sites that has been or are warez active Legal Sites List of usefull sites... other than warez IRC Alternate servers used primarly for Warez "hiding" IRC Robots IRC robots Operators List of all has been or actually involved in warez FTP Sites ========= Notes: C)losed, P)password changed, D)irectory changed ?) Status unknown anonymous/@ indicates "normal", lamer, dumb anonymous login user/pass@ indicates a normal user login account... anonymous/[ip] indicates only specific ip's can connnect anonymous/[nick] indicates only nick@ip can connect (developed by Tikes for is modified/enhanced FTP server) C anonymouys/(a)thyme.lcs.mit.edu 18.26.0.115 930717 /pub/jrd/". "/binary ------------------------------------------------------------------------------- C anonymous/@ 36.10.0.4 930715 Empty ------------------------------------------------------------------------------- C anonymous/[nick]@henry 128.95.42.28 Lawn 930609 ------------------------------------------------------------------------------- C daniel/herschel(a)rayleigh.ee.washington.edu 128.95.31.245 Ano/Pengo 930712 Gateway 2000 "/rayleigh/home/daniel/.. / /.w" ------------------------------------------------------------------------------- C anonymous/(a)geom.umn.edu 128.101.25.35 930715 incoming/".. "/.b.in ------------------------------------------------------------------------------- C alien/delete1(a)salmon.micro.umn.edu 128.101.193.121 930715 SunOS 4.1 Warez ------------------------------------------------------------------------------- C anonymous/(a)math.princeton.edu 128.112.128.157 930715 /pub/fycfung/baezpapers/". . ."/.bin ------------------------------------------------------------------------------- C anonymous/(a)bruno.cs.colorado.edu 128.138.243.151 930715 /pub/cs/doc/.NextTrash/"^L"/progs ------------------------------------------------------------------------------- P dhb/stratton(a)leach.cs.rit.edu 129.21.41.7 930715 ------------------------------------------------------------------------------- C anonymous/[nick]@ 129.22.64.1 Rocks 921330 ------------------------------------------------------------------------------- C anonymous/[nick]@ 129.22.64.6 Rocks 930609 ------------------------------------------------------------------------------- anonymous/(a)ub.es (arrima) 130.206.15.53 an16480(a)ub.es 930721 /incoming/".bin. " ------------------------------------------------------------------------------- P m90-scj/lingonris@trisse 130.241.220.2 Leinad 930330 ------------------------------------------------------------------------------- P m92-axb/ljulklapp@trisse 130.241.220.2 Leinad 930318 NetWare v3.11 /tcs/swap ------------------------------------------------------------------------------- softsite/quandry@vtan 131.104.136.26 930720 IBM OS/2 TCP/IP FTP ../[IBM|AMIGA|DOCS|NEW] ------------------------------------------------------------------------------- C anonymous/[ip](a)mirage.unipv.it 131.175.45.34 Clint 930420 Private /incoming/" "/is ------------------------------------------------------------------------------- anonymous/[ip](a)roxette.mty.itesm.mx 131.178.15.100 NetShadow 930721 Empty... setting things up, don't ask for access ------------------------------------------------------------------------------- C anonymous/[nick](a)tdsb-s.mais.hydro.qc.ca 131.195.163.5 TheCamel 930715 ./private ------------------------------------------------------------------------------- anonymous/[nick](a)tdsb-s.mais.hydro.qc.ca 131.195.163.5 Tikes 930718 On invitation only, don't ask ./private Site operators only, validate nick@host, so don't bother trying to log ------------------------------------------------------------------------------- C anonymous/(a)hobiecat.pcmp.caltech.edu 131.215.131.167 930715 pub/dropoff/tar.Z/".. "/.bin ------------------------------------------------------------------------------- ftp/warez@gena 132.68.64.49 Gena/Freezer 930721 This site will close soon ./[incoming,warez] Replaced by 132.74.3.50 ------------------------------------------------------------------------------- proba/epson@ 132.74.3.50 Gena/Freezer 930721 ./warez ------------------------------------------------------------------------------- C anonymous/(a)plains.nodak.edu 134.129.111.64 930721 No space! /pub/tandy/incoming/".. "/.b.in Permission denied in dir /pub/tandy/incoming ------------------------------------------------------------------------------- anonymous/(a)fsa.cpsc.ucalgary.ca 136.159.2.1 930721 pub/sschurch/[.b...in,.r...eq] ------------------------------------------------------------------------------- C slucas/richmond(a)powhatan.cc.cnc.edu 137.155.10.10 930712 ". " ------------------------------------------------------------------------------- P c880148/kurilin(a)asterix.fi.upm.es 138.100.8.6 930330 Slow link... ------------------------------------------------------------------------------- C wizard/hhhew@ 140.113.215.192 930330 ------------------------------------------------------------------------------- C ftp/ylin@ 140.114.26.90 marfada9 930330 /pub ------------------------------------------------------------------------------- C ftp/maolong4@cobra 140.114.76.203 babuu 930609 ------------------------------------------------------------------------------- P Ether/amadeus@ 140.117.73.1 930719 ------------------------------------------------------------------------------- P abc/trantor(a)cca.pue.udlap.mx 140.148.3.18 930712 ------------------------------------------------------------------------------- P adela/avatar!(a)goren.u.washington.edu 140.142.63.1 Ano/Pengo 930709 /". "/". " ------------------------------------------------------------------------------- georgias/fuk!it(a)honeydew.cc.wwu.edu 140.160.240.29 A-Flat/blazer 930721 ".^t./^t^l.^l^t"/.real ------------------------------------------------------------------------------- ? anonymous/@ 141.201.1.16 930720 Always connection time-out... pub/local/peter/upload/.bin ------------------------------------------------------------------------------- C ftp/(a)apache.telebit.com 143.191.3.1 930712 /tmp/".. "/.bin ------------------------------------------------------------------------------- Scum/sux2bu@ 152.94.21.8[15] Croc 930720 Running on a PC, often down... Biggest site! ------------------------------------------------------------------------------- C stress/waterloo(a)unix1.mrih.no 158.38.66.44 berol 930527 Closed while Berol is in the army... Heard some1 else is supposed to take the flame... ------------------------------------------------------------------------------- C zip/merlin@uropax 192.109.39.2 930718 Empty tmp/[unknown dir] ------------------------------------------------------------------------------- anonymous/(a)netcom4.netcom.com 192.100.81.107 930721 Still empty... asking 4 uploads! /pub/tal/.warez Loggin message says everything is logged... be carefull... README message says it's run by sysadmin... Would sure like to know who run this site! ------------------------------------------------------------------------------- FSP SITES ========= ? Mirage 132.68.48.173 3000 Outrun 930712 ------------------------------------------------------------------------------- ? NetShadow 131.178.15.100 5555 NetShadow 930712 Registration required ------------------------------------------------------------------------------- Legal Sites =========== ? vendor/microsoft@ 137.39.1.9 930712 Host unreachable ------------------------------------------------------------------------------- IRC Servers =========== C mecca.epri.com 144.58.65.48 7777 930712 ------------------------------------------------------------------------------- C picard.cc.umanitoba.ca 130.179.25.28 7777 930712 ------------------------------------------------------------------------------- ? roxette.mty.itesm.mx 131.178.15.100 7777 NetShadow 930720 ------------------------------------------------------------------------------- IRC Robots ========== WarezCat TommydCat 930718 [de]op/ban/kick/invite/dcc... mirror fsp site titan.ucc.umass.edu 2112 ------------------------------------------------------------------------------- C Shadow Elminster 930720 Initializing... not ready for use Due to the way Elminster is actying in #warez... he won't be "trusted" anymore (mass deop/mass kick/lame acting etc...) ------------------------------------------------------------------------------- Operators ========= A-Flat Ano Babuu Blazer Clint Croc Freezer Gena Lawn Leinad marfada9 NetShadow Outrun Pengo Rocks TheCamel Tikes TommydCat ---- thats it. Newsgroups: alt.security Path: netcom.com!netcomsv!decwrl!concert!news-feed-1.peachnet.edu!umn.edu!gold1.tc.umn.edu!werm0004 From: werm0004(a)gold1.tc.umn.edu (Angela M Wermager-1) Subject: Pirate FSP Sites Message-ID: <CBu2Mu.32s(a)news.cis.umn.edu> Sender: news(a)news.cis.umn.edu (Usenet News Administration) Nntp-Posting-Host: gold1.tc.umn.edu Organization: University of Minnesota Date: Mon, 16 Aug 1993 03:47:58 GMT Lines: 58 The following is a list of pirate FSP sites that I found in a user's account. I'm tired of having good bandwidth wasted by these software pirates. Would the appropriate agencies please take action against these scumbags? 180.212.61.199 31960 222.140.22.199 29351 112.251.164.94 30509 178.46.139.97 29452 122.94.93.72 11147 115.70.211.71 25732 135.85.44.229 16748 208.53.116.129 6858 163.189.180.38 3968 220.38.200.43 18558 208.7.218.73 23081 215.56.205.245 16858 186.252.0.138 7897 150.87.225.114 25469 116.82.74.146 19782 163.156.183.73 9784 202.28.148.90 12403 163.75.35.150 2098 103.110.27.119 30571 159.126.64.33 14246 169.163.3.17 8828 108.160.185.177 25120 248.175.119.118 8108 155.166.204.122 30757 191.24.223.240 31054 158.249.125.72 3576 180.85.59.93 31163 227.182.122.244 24240 135.41.109.38 5353 130.38.161.96 26739 200.32.35.177 27379 154.115.43.187 4720 250.155.87.134 20768 129.6.188.140 31107 152.52.224.120 11424 109.117.244.14 2852 181.72.235.229 22946 238.200.217.234 17017 135.27.77.38 6735 214.48.7.180 28877 211.119.138.107 30907 237.226.117.171 1081 194.185.133.12 10177 237.146.147.156 1673 223.28.192.163 15270 132.5.71.19 22793 203.154.231.9 5531 174.48.89.148 6950 119.0.50.44 5948 162.224.220.95 22302 185.243.66.69 15931 104.173.5.70 30427

1 0

RC2/RC4 were uninfluenced by NSA, says Ron Rivest
by gnu 12 Sep '93

12 Sep '93

I claimed that RC2 and RC4 were derived in a process that involved NSA asking that it be weakened in various ways. This was a deduction based on some apparently false information of mine. Ron has set me straight. Please forget what I told you about RC2 and RC4...mea culpa. John ------- Forwarded Message From: rivest(a)theory.lcs.mit.edu (Ron Rivest) Date: Fri, 10 Sep 93 16:52:35 EDT Message-Id: <199309102052.AA02268(a)swan.lcs.mit.edu> To: gnu(a)toad.com Subject: Crack DES in 3.5 hours for only $1,500,000! Hi John -- Glad to see you're high-lighting Wiener's work; I think it is very important that people see it... Re RC2 and RC4: NSA had absolutely no influence on the design of either algorithm; they are entirely of my own creation. I'll take the credit for their strengths, or the blame for their faults. Please take the trouble to correct any misimpressions you may have given people. (I don't know who you sent your mail to...) I have no information on what sort of brute-force attack machines NSA has in its basement, but it is certainly the case that, as I said before, nothing in either design was affected by NSA or its capabilities. These algorithms are designed to be very good algorithms, but with a variable key-size, so that you could try to get out of NSA the biggest key size you could for export. I really don't like your spreading false information about my work, and wish you would take the simple step of talking to me first; I'll be happy to talk to you. (Feel free to repost this, in its entirety...) Cheers, Ron Rivest ------- End of Forwarded Message

1 0

Re: Spooks reading the list
by doug＠netcom5.netcom.com 12 Sep '93

12 Sep '93

Liam David Gray <lg2g+(a)andrew.cmu.edu> said: >Nobody, when I read the original post I assumed the "we" you're talking >about was 'we, the Cypherpunks.' I.e., if NSA were truly Evil Incarnate >Central, the Cypherpunks would be fighting "a Valiant War ["We Are Fated >to Lose"]". Righto. If you're going to be paranoid, you may as well read more carefully. The message in question was unambiguous; there were no Freudian slips in it. Like I said recently, the NSA wouldn't be doing their job if they weren't following an obvious list like this. But you can trust them not to be completely moronic. Information gatherers are likely to be complete lurkers, and if they go for agent provocateurs, they'll likely be selected and trained well enough to avoid IQ 80 slipups. I've known NSA employees and contractors in the past and present. Nothing regarding ultra secret work, else I'm sure I'd never have known about it, nor gotten involved, etc. But still, it's just another government agency, with a big budget, fingers in many pies, and with perhaps a higher than average individual and collective intelligence (no pun intended) from what I've seen. The NSA even goes to some open technical conferences; sometimes they even host one (on more mundane computer matters, of course). There's every reason to think that they're merely watching the situation to see what happens. I doubt if they've even seen reason to put other agencies like the FBI on alert. But if anything, if you want to be paranoid, be paranoid about folks like the FBI and SS and Justice Department. They'd be the ones to move in for the kill, you know, if anyone thought there was reason to do so. If you *must* be paranoid, just assume *I'm* from the NSA. I'll even claim to speak for them. (I'm fairly sure I won't be contradicted. ;-) Ok, here goes: "play nice, kids." There, a pronouncement from the heart of Evil Incarnate Central. :-) Doug

1 0

Proper context?
by ferguson＠fiber.sprintlink.net 12 Sep '93

12 Sep '93

On Sat, 11 Sep 93 14:15:46 -0700, <uunet!soda.berkeley.edu!nobody> wrote - > In fact, there is at least one NSA agent on this list. Whether > he/she is on our side or not, who knows? This message, a defense of > the NSA, was posted here not long ago. I don't know if anyone else > noticed this at the time, but take a look: > > *From: IN%"remail(a)tamsun.tamu.edu" 28-AUG-1993 06:02:47.29 > *To: IN%"cypherpunks(a)toad.com" > *CC: > *Subj: NSA & the Crypto-Zionist Myth of "Public Key"! > *>I'm rather surprised that the most significant piece of evidence > *>in favor of the "NSA has cracked PGP" theory is that no one's put > *>a bullet through Phil Zimmerman's head. > * > *Excuse me, but I'm getting tired of this silly paranoia. NSA > *is not Evil Incarnate Central, and we are not fighting a Valiant War > == > > We? WE! Do you suppose that was a Freudian slip, or did he mean to > say it like that? Whoever he is, he works for the NSA. Did anyone else > notice this at the time? I went back through my archives and read this message; actually the context in which it was written could be construed that "we" is either party (NSA or Cypherpunks). After re- reading the remainder of his (or her) post, I think he's right for the most part. Messages containing hype (like yours, that I told myself I wasn't going to respond to) consist of much more paranoia than substance. Paul Ferguson | privacy \'pri-va-see\ n, pl, -cies; Mindbank Consulting Group | 1: the quality or state of being apart Fairfax, Virginia USA | from others 2: secrecy fergp(a)sytex.com | ferguson(a)icp.net | Privacy -- Use it or lose it.

1 0

Spooks reading the list
by nobody＠soda.berkeley.edu 12 Sep '93

12 Sep '93

pmetzger(a)lehman.com writes: >Its entirely possible that there are FBI agents on this list -- I >proceed on that assumption every day. Its also possible that there are >agents provocateur. However, I fully assure you that many of us are >legitimate anarchists of long standing, most of us being of the >capitalist anarchist persuasion. > >I'll fully agree that arguing for anarchy with the general public >won't work at the current time -- and I agree that our image is >like EFF and CPSR. I for one don't see any reason to hide my politics, >although I try not to make an issue of it. > >Perry In fact, there is at least one NSA agent on this list. Whether he/she is on our side or not, who knows? This message, a defense of the NSA, was posted here not long ago. I don't know if anyone else noticed this at the time, but take a look: *From: IN%"remail(a)tamsun.tamu.edu" 28-AUG-1993 06:02:47.29 *To: IN%"cypherpunks(a)toad.com" *CC: *Subj: NSA & the Crypto-Zionist Myth of "Public Key"! *>I'm rather surprised that the most significant piece of evidence in favor of *>the "NSA has cracked PGP" theory is that no one's put a bullet through Phil *>Zimmerman's head. * *Excuse me, but I'm getting tired of this silly paranoia. NSA *is not Evil Incarnate Central, and we are not fighting a Valiant War == We? WE! Do you suppose that was a Freudian slip, or did he mean to say it like that? Whoever he is, he works for the NSA. Did anyone else notice this at the time? So, tell us. Have they cracked PGP? *We Are Fated to Lose. The NSA are a bunch of Americans who went *to school & college with the rest of us, and share our communities *with us. Most of them joined NSA to fight totalitarian Communism, and *most of them are sympathetic with values most Americans share when they *bother to think about them, like freedom, privacy, etc. Sure, NSA has *been caught up in the Cold War habits of secrecy, bureaucracy, and *an ingrained habit to control information. It's also almost surely *caught up in the same kind of bureaucratic incompetence we see *in the rest of the U.S. Federal government (most of the DoD, the space *programs, the BATF, the FBI, etc.) Does a $40+ crypto-voice-chip with *an obvious trap door look like Malicious Plot to Destroy All Strong *Crypto and Take Over The World, or does it look like an *a half-competent, half-hearted attempt to retain Cold War era *capabilities they had gotten used to? * *NSA is going through the same crisis of goals as the rest of *the Cold War establishment. Their mission, if they have any left at *all, has changed radically, and they know it. While it *may be "in the best interest of NSA" to maintain control over *NSA employees are also Americans, community members, family *members, etc. They don't typically go around murdering hackers *they don't like. Nor would that accomplish anything for them -- *RSA was published internationally long ago, and PGP is now *scattered at sites all over the world, with new versions being *hacked on in nearly a dozen countries. * *The biggest problem I've encountered talking to various *people about implementing encryption is that they think *cypherpunks are a bunch of paranoid nuts, so only paranoids *would want to do things like use digital cash for their *semi-legal barter schemes. Your expression of surprise that *the NSA hasn't offed Phil Zimmerman just confirms their suspicions. *How can I convince them that cryptography is not just for paranoids? *The rest of us are concerned about things like protecting and *enhancing our privacy and freedom, and there's nothing silly *or paranoid about that. * *But now that you mention it -- Shamir does operate out of Tel *Aviv. Obviously he built RSA with a hole in it, and NSA is the *main arm of the Crypto-Zionist conspiracy of Jewish Planetary Hegemony! *And he didn't publish "Differential Cryptanalysis of the DES" until *non-Zionist bankers got ahold of DES. It's all clear now! * *> I think that, personally, the public-key stuff's gotta have some sort *> of a hole in it that nobody's thought of yet outside of spook central. * *I think your head has to have some sort of a hole in it. Perhaps the *NSA's work? >From the sound of this, the NSA is just a little bit testy! What's the matter, spook biz gone to hell in the post-cold-war era? We must be winning... :-)

2 1

offshore data havens, from RISKs
by L. Detweiler 11 Sep '93

11 Sep '93

OK, here's an *excellent* opportunity to get some cypherpunk exposure on RISKS. Amazingly, we haven't really been seen there before. I move that T.C. May or some other prominent cypherpunk write a letter representative of group interest and ideas on the subject. But anyone who feels they have something to say on the subject should pass on a letter to increase our chances of `getting published'. I would, but offshore data havens are not my niche. Everyone, *don't* argue about the specifics of the letter on the list -- we will never get it sent that way -- but suggestions are OK). then, in a segue (that's the *correct* spelling, Mr. P. `segway' Ferguson :) In the letter, consider talking about the Cypherpunks media exposure in NYT, Village Voice, Whole Earth, etc. However, if the c'punk mailing list is advertised, be *sure* to point out that its up to ~30 messages a day -- I think this helps alleviate spurious newcomers. I would recommend that the more anarchic aspects of the issue of Data Havens be glossed over, such as tax evasion, and just emphasize the non-threatening aspects such as digital cash, etc. so as not to startle all the fuddy duddies. I'm sure they will figure out the implications without any help from us. We do *not* want to come off as a cyberspatial terrorist organization (however close we may actually be :) Definitely, include a pointer to Chaum. Strike while the iron is hot! this is a mainstream opportunity for increased press exposure and attention to the cypherpunk cause. You'll notice the person inquiring is a reporter. chances are the articles he is referring to were cypherpunk-based. I wonder. Also, he *may* be writing an article and purposely not mentioning to avoid competition. ===cut=here== Date: Sun, 5 Sep 93 16:00:59 PDT From: John_R_Bruni(a)cup.portal.com Subject: Offshore Data Havens As a reader of RISKS who combines his vocation, journalism, with his avocation, computers, I'm writing in with a request. In the course of working on an assignment for one of the TV networks, I came across references to "offshore data havens." These are data networks, alleged to be in the formative process, which will glean data by means fair and foul from the world's legitimate data bases. The implication is that formerly confidential information, be it about individuals, corporations or governments, would seep across networks. The information would then be available, at a price, to anyone who wanted it. My questions are: * Are "offshore data havens" actually being formed, and if so, where? * What are the inherent problems that come to mind? Don't be afraid to state the obvious; television audiences aren't experts in this area. I'd love to see this become a topic for discussion on RISKS, but would also appreciate (with thanks in advance) any responses sent to me directly. john_bruni(a)cup.portal.com ------- End of Forwarded Message

2 1