- cypherpunks-legacy - lists.cpunks.org

Hiding Encrypted Messages
by thug＠phantom.com 11 Mar '93

11 Mar '93

I think it would be quite easy to hide encrypted text in music/sound or graphics files. In order to do it with sampled music/sound: 1. Use a SoundBlaster-type card to sample a given amount of music from a radio/tape/cd/whatever using 8-bit samples at some low sampling rate like 11,000 samples/second. This would give you a lot of music for the space used. 2. Then take an encrypted PGP file and dispurse it bit-by-bit into the LSB (least-significant-bit) of each sample. This wouldn't distort the sound sample to any extent noticable by the human ear. Thus each byte of PGP file would be dispursed into 8 bytes of sound file. Thus if you wanted to send a 20k PGP file, you would have to put it into a 160k music file. If you're ever forced to explain what that file contains (unlikely, since you can always take the Fifth Ammendment) you can just play it on your computer and have the NSA/SS/FBI/Whatever listen to James Brown go "Hyeeeah... I feel good!" +---------------+ +-------------------------------------------------+ | ***** ___\!/_ * * * * | Murdering Thug | * __/_ /|\ * * * * * | | * / \ * * * * * | thug(a)phantom.com | * | | * * * * | | * \____/ * * * * | | ***** * * * | +---------------+ +-------------------------------------------------+

2 1

PGP Tutorial Gone.
by nobody＠pmantis.berkeley.edu 11 Mar '93

11 Mar '93

soda.berkeley.edu is supposed to have several files reguarding pgp. The problem is that this site is refusing connections. Could we get an alternative site?

2 1

Re: Hidden encrypted messages
by Alexander Chislenko 11 Mar '93

11 Mar '93

What about encoding a message by chnging spacing between the words? It is surely not the most compact method, but one might be able to transmit a pretty long message hidden in the text of "Alice in Wonderland" that would still be neatly formatted and *word-to-word* indistinguishable from the original. Alex.

1 0

FWEE!: Markoff/NYT/VoiceCrypt
by internaut＠aol.com 11 Mar '93

11 Mar '93

Thanks to everyone who sent John Markoff's name, email address and/or past life animal. I'll let all of you know what transpires when I buzz him about the VoiceCrypt article and get some info for the Whistleblower Project. BTW, Pretty amazing day at CFP today (especially the session on Censorship on the 'net): watch this cyberspace for details next week... Not-Entirely-Unrelated note: to all of you who have asked for a FTP-able version of MacPGP, I will provide that this Sunday (the life of a CFP volunteer!). Hope you can all keep your pants on until then. :) It's worth the wait. dave "It's not the voting that makes Democracy, it's the counting." - T. Stoppard

1 0

F-117A Nighthawk post--Conclusions of Experiment
by tcmay＠netcom.com 11 Mar '93

11 Mar '93

J. Michael Diehl guesses the truth: >Lets assume that the poster was a "good-guy," as opposed to just a prankster. > >Then he has pointed out a serious flaw in the WB system. He has demonstrated >the ability for a person to obtain (bonefied) classified information and >broadcast it worldwide, with out any fear of being caught or censored. I >support anonymity, but I wonder about how it will be "regulated" to keep this >from happening for real. > >Comments? Well, I _hope_ I am a good guy, at least by the standards of this list. I posted the F-117A "revelations" about the Stealth fighter, through a series of 6 or 7 remailers (which I first tested, as I like to do, by pinging them all) in order to examine the reactions of the list to what "whistleblowing" acts are very likely to look like. The reactions have been interesting. Some of you got angry, some even practically foamed at the mouth, calling me a "treasonous fool." Fair enough, as I hoped to see this kind of range of opinions. Some points: 1. Nothing in the posting, as some of you observed, was controversial or classified. I took an article from the book, "Stealth Technology: The Art of Black Magic," J. Jones, Aero Books, 1989, and scanned it and OCRed it. A few "probably"s and "could be"s were deleted, and minor other changes were made (e.g., I converted approximate numbers to precise--though of course wrong--numbers). The speculations about supersonic capability were in the original--I can't say how plausible they are. Likewise, the stuff about "changing color" was also in the original (I was trained as physicist--would I make something like that up?). 2. Ironically, the "Discovery Channel" ran an hour-long program, "Nighthawk: Secrets of the Stealth," which was many times more revealing than my post. "Aviation Week and Space Technology," also known as "Aviation Leak and Spy Technology," has also carried far more detailed information over the years. 3. As both Joe Thomas and J. Michael Diehl pointed out, I was "testing" the nascent "whistleblower" system. I decided it would be interesting to guage the reaction of the list to what might at first glance look like classified information being posted--something we can surely expect to see if the "whistleblower" group really gets going. (That, and deliberate misinformation to discredit the group, flames to drown out the actual whistleblowing, illegal or grossly offensive material to try to get the group taken off the Net, etc.) If you folks really want to set such a thing up, better be prepared for all kinds of weird stuff. Of course, the posting of "classified" documents--ersatz though this one may have been (in the sense of not being classified!)--can happen even without the "whistleblower" connotations...any anonymous remailer will work, naturally. But a whistleblower list (which I support, by the way) is going to attract all kinds of strange postings, once publicity is gotten (as it must, else what's the point?). 4. On the appropriateness of defense information as "whistleblower" material, consider these facts: The most serious cases of whistleblowing in the last few years have been on *defense* issues--coast over-runs, weapons systems that failed to work or were unsafe, bribes to DoD or company officials, and so on. This is the fodder for "60 Minutes" and "20/20," who've all run pieces on defective weapons systems, the Bradley Fighting Vehicle, the Apache Helicopter, the "DIVAD" gun, and so on. (Would my article have been any less offensive to some of the censorious among you if I'd fabricated stuff about the Nighthawk not meeting design goals, not being safe to fly, costing too much, etc.? I suspect not.) 5. In most cases, the DoD has tried to limit the scrutiny on such systems by invoking "national security" as a cloak. This, even though the Soviets already had the info--generally far in advance and in much greater detail. The invocation of national security has generally resulted in Americans being ignorant of malfeasance and chicanery. The whole idea of the whistleblowing list is to allow anonymous, untraceable postings of controversial material like this! Much of what is posted will by necessity contain material that someone thinks should not be released to the public. Q.E.D. (or haven't folks thought this one out?). (So if you whistleblower advocates out there are going to get cold feet when seemingly sensitive materials is sent out, you'd better just quit right now!) 6. Paul Robichaux and Dave Deltorto have opined that posts like this should *not* be posted (and tell me how they'll ever be stopped in the real world?), as they invite the attention of the NSA and other TLAs (Three Letter Acronyms). This seems overly paranoid for even this list, given the megabytes of solid info published by Av Leak and other technical mags. If some defense stuff is going to get us shut down, we'd better stop now. (Actually, the problems with the whistleblower's list or group are sufficiently clear that I'd recommend that nobody be _formally_ affiliated with it. If it just "appears," somehow, probably in the alt heierchy, then people can post to it through anonymous remailers.) 7. Speaking of which, a whistleblowers group will likely face attack on several fronts, depending on whose ox is gored. There may in fact be deliberate postings of truly classified material just to cause the group to be shut down (or to cause Internet sites not to carry it, etc.). Some child porn posted anonymously may get nearly any group pulled. Ditto for Holocause revisionism, racist jokes, extortion demands, etc. Consider my little experiment a very benign little "innoculation," a hint of what to expect. 8. Again, I feel we should all be _using_ anonymous remailers to test, or probe, these various ideas we have. Better that we try out a few ideas related to "whistleblowing" in the safety of our own group before launching it out into the world. Of course, now that I've exposed myself as the originator, this may make you all skeptical of posts from "Anonymous" or "Nobody." And you _should_ be skeptical! That's an important part of the whole process. And don't assume everything from "Anonymous" is from me! Cheers, -"Anonymous" aka, Tim May, Cypherpunk, Crypto Anarchist, and Gadfly -- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: MailSafe and PGP available.

2 1

Re: FWEE!: F-117A post considered harmful
by Tony Kidson 11 Mar '93

11 Mar '93

In message <9303091453.AA11794(a)lambda.msfc.nasa.gov.msfc.nasa.gov> you write: > [ disclaimer: I don't work on classified projects anymore. My experience > as an aircraft mechanic is with helicopters. I read a lot. ] > > I believe that the recent anonymous "whistle" purporting to reveal > information about the F-117A aircraft: > thing. Disclosing classified information, however- > especially when it's not relevant to revealing fraud, > waste, or abuse- is probably not a good way to keep > the whisteblower group safe from the Three-Letter Gang. > Perhaps that was the idea??? Tony +-----------------+-------------------------------+--------------------------+ | Tony Kidson | ** PGP 2.1 Key by request ** | Voice +44 81 466 5127 | | Morgan Towers, | The Cat has had to move now | E-Mail(in order) | | Morgan Road, | as I've had to take the top | tony(a)morgan.demon.co.uk | | Bromley, | off of the machine. | tny(a)cix.compulink.co.uk | | England BR1 3QE |Honda ST1100 -=<*>=- DoD# 0801 | 100024.301(a)compuserve.com| +-----------------+-------------------------------+--------------------------+

1 0

Hidden encrypted messages
by derek＠cs.wisc.edu 11 Mar '93

11 Mar '93

If true encryption is ever outlawed in the U.S., I wonder if it's possible to have an encryption technique that preserves plausible deniability. That is, if seemingly innocuous messages could contain encrypted messages (for example, first-letter-of-words strung together). In such a case, I'd think that it would be difficult to prove that said message contained a hidden message unless the decryption key was available (the embedded encrypted message wouldn't look suspicious, even if an onlooker knew where to look). Is this a common idea in cryptographic circles? derek

4 3

MEET: San Diego Trip in my future
by Derek Atkins 10 Mar '93

10 Mar '93

-----BEGIN PGP SIGNED MESSAGE----- Hi. I am going to be in the San Diego area for the weekend of March 20th. I don't know where I'm going to be staying, and I don't know the San Diego area at all. (I do know that I will be near the beach ;-) However I'd like to meet people, if they have time to get together. If you have time and want to meet some time that weekend, please send me a piece of mail and let me know. OBTW -- what are the good 2m and 70cm repeaters out there? ;-) - -derek PGP 2 key available upon request on the key-server: pgp-public-keys(a)toxicwaste.mit.edu - -- Derek Atkins, MIT '93, Electrical Engineering and Computer Science Secretary, MIT Student Information Processing Board (SIPB) MIT Media Laboratory, Speech Research Group warlord(a)MIT.EDU PP-ASEL N1NWH -----BEGIN PGP SIGNATURE----- Version: 2.2 iQBuAgUBK559fDh0K1zBsGrxAQFCeQLFGYxSChJPELdBQoutkMYa55OuxJP3e9wW PTEsrn6U1sC5p6SnyC7Al9mb38vBtmoSLnT88udMwgsbE0dJ0P//lRm4MZUVJINn 83yy3ouSyKLSk/pq2YN6Bcg= =6M90 -----END PGP SIGNATURE-----

1 0

FWEE!: F-117A post considered harmful
by robichau＠lambda.msfc.nasa.gov 10 Mar '93

10 Mar '93

[ disclaimer: I don't work on classified projects anymore. My experience as an aircraft mechanic is with helicopters. I read a lot. ] I believe that the recent anonymous "whistle" purporting to reveal information about the F-117A aircraft: a) didn't reveal any "real" information, and in fact contained several factual errors. For example, the Tacit Rainbow program has been cancelled for some time. Flight characteristics of the F-117A are very similar to the A-7, which is markedly subsonic. b) created the appearance of distributing classified information. Whistleblowing on fraud/waste/abuse is one thing. Disclosing classified information, however- especially when it's not relevant to revealing fraud, waste, or abuse- is probably not a good way to keep the whisteblower group safe from the Three-Letter Gang. c) created the appearance that the whistleblowers group is for posting anything too "sensitive" for normal, attributed posting. I didn't think it was; from reading this list, I thought it was for blowing the whistle- not blowing smoke. Perhaps a charter for alt.whistleblowers was posted, and I missed it. If not, I submit that we should try to develop one. Regards, -Paul -- Paul Robichaux, KD4JZG | May explode if disposed of improperly. Mission Software Development Div. | I'm not white- I'm Euro-American. New Technology, Inc. | RIPEM key on request.

2 1

March 1993 Communications of ACM Denning on Encryption
by richard_mezirka＠askinc.ask.com 10 Mar '93

10 Mar '93

I've just read with considerable distress the Dorothy Denning article in my March 1993, Communications of the ACM and all the follow up discussions supporting or refuting her positions. I can not in any way support the further erosion of the rights I believe I have to personal privacy and protection from the abuses of government. I'm contacting the EFF as a concerned member and the ACM Risk forum... are there more actions we can and should take? Professor Denning does not convince me of the benevolence of the government nor the necessity for private enterprise to foster government programs (such as building in wire tap support or reducing the effort of government agencies to invade private messages or interactions amongst citizens). A precidential extension might have the auto makers building in governors into all vehicles such that they can't exceed the national speed limit to support traffic law enforcement (the crooks couldn't have faster cars than the cops). I'd suggest cypherpunks get and read the article if they haven't already done so (it covers both wire tap and , as a not too subtle tag on, encryption availability). I'd also suggest we direct our responses to those who can derail this or similar legislation with the EFF and ACM as two likely candidates and congress folks as additional ones. My personal professional dilemma is how can I raise consciousness of the quiet majority who will not immediately be impacted... like my retired parents who fear computers like the flu and still have a strong belief that the government protects their rights rather than restricts them. Their response to Steve Jackson's tiff with the treasury department and law enforcement was along the lines that if he had nothing to hide the government wouldn't have bothered him. Still watching quietly, worried, and now letting others know... Rich

2 1