- cypherpunks-legacy - lists.cpunks.org

PGP Inc PR cover-up
by Adam Back 17 Dec '03

17 Dec '03

I wonder about the sudden lull in the pgp5.5 CMR argument: have PGP Inc enforced a blanket ban on participation in list discussion of the topic by their employees? Even our anonymous PGP employees posting via remailers on cypherpunks seem to have stopped. PGP Inc seemed to me to be heavily losing the argument where ever employees have spoken on the topic. Unfortunately this doesn't seem to be translating into rejection of the CMR feature, nor of adoption of less dangerous alternatives such as forward secret transport level security, shorter lived encryption keys, and separate storage keys. Perhaps it will take an official government snoop endorsement of pgp5.5 before the danger is acknowledged; by then the damage will have been done. Meanwhile over on ietf-open-pgp: The ietf-open-pgp forum for discussion of development of the now IETF controlled OpenPGP standard seems to have undergone a coo. Cypherpunk Lutz Donnerhacke had pre-empted Rodney Thayer and PGP's Jon Callas draft which had been slow coming by producing a competing draft before them. Lutz's draft was not sympathetic with PGP Inc's CMR, and even included SHOULD features encouraging separate storage keys. John Noerenberg (appointed IETF chair) over-ruled Lutz, and wrested editing of the draft from him, and demonstrated some petty power wielding in over ruling a vote on terminology Lutz had set up -- Lutz had already said he didn't care about the outcome, and just called the vote as a quick way to resolve argument. Now we are waiting for Jon Callas to release the new draft. Wonder whether it will include CMR or not :-) Join in the battle: subscribe by sending email with body "subscribe ietf-open-pgp" to <majordomo(a)imc.org>. The list address for posting articles is <ietf-open-pgp(a)imc.org> Adam -- Now officially an EAR violation... Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

[ZOG] MARXIST COHEN WANTS 'CURTAILED FREEDOM': CALL TO ARMS WANTED
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

fyi igor Anonymous <nobody(a)REPLAY.COM> wrote: * Defense Chief Says U.S. Freedom May Have To Be Curtailed * ___________________________________________________________ * Their inward part is destruction itself. Their throat is an * open grave; they flatter with their tongue. * Psalms 5:9 * ___________________________________________________________ * * Defense secretary calls for even more preventive measures. * * Terrorism is escalating to the point that Americans soon may have to choose * between civil liberties and more intrusive means of protection. Defense * Secretary William S. Cohen says. * * The nation's defense chief told the Army Times he once considered the * chilling specter of armored vehicles surrounding civilian hotels or * government buildings to block out terrorists as strictly an overseas * phenomenon. But no longer. * * It could happen here, Cohen said he concluded after eight months of studying * threats under the Pentagon microscope. * * Free-lance terrorists with access to deadly chemical and biological bombs * are "going to change the way in which the American people view security in * our own country, he predicted in a Sept. 10 interview. * * Cohen is calling for the government to step up its efforts to penetrate * wildcard terrorist organizations. * * "It's going to require greater intelligence on our part - much greater * emphasis on intelligence gathering capability, more human intelligence, and * it's going to take more technical intelligence," he said. * * But using the U.S. military in a domestic law enforcement role would require * revisions to laws in force for more than a century, cautions Shreveport * attorney John Odom Jr. "You can't do it from the the Defense Department side * unless Congress dramatically revises the Posse Comitatus laws," said Odom, a * colonel in the U.S. Air Force Reserve and a reserve judge advocate. * * The 1878 law specifically prohibits the use of the military in domestic law * enforce- ment unless authorized by Congress or the Constitution and does not * allow for military intervention through action by the secretary of defense * or even an executive order from the president, Odom said. * * "We're trained from the first day of judge advocate school to think of Posse * Comitatus !! Odom said. "If Secretary Cohen is suggesting that the * Department of Defense be involved, it may be part of a legislative package. * But it will not happen unilaterally without a lot of folks thinking long and * hard about it." * * Cohen said terrorism would be a top priority in five new areas he plans to * focus on now that he has wrapped up his first defense budget, the * quadrennial review of the military and a new, four-year defense strategy. * * Other goals include modernizing the military, improving troops housing and * other benefits, streamlining the defense bureaucracy and shaping new * military relationships and contacts across the globe. * * * >From Staff and Wire Reports * The Times of the Ark-La-Tex * 15 September 1997 * (Submitted by Danny Cox) * * -- - Igor. The average American spends a total of six (6) months in prison.

1 0

Re: [ZOG] MARXIST COHEN WANTS 'CURTAILED FREEDOM': CALL TO ARMSWANTED
by Tim May 17 Dec '03

17 Dec '03

At 8:20 PM -0700 10/29/97, Igor Chudov @ home wrote: >* Terrorism is escalating to the point that Americans soon may have to choose >* between civil liberties and more intrusive means of protection. Defense >* Secretary William S. Cohen says. And no doubt this means GMR for all crypto. And if we say "No thanks" to the no-knock searches, the street friskings, the "Papierren, bitte??" travel restrictions, what then? Not much of a choice, eh? The spinmeisters are laying the groundwork for martial law. Just what we've been hearing about for years. Get ready. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Either Klintonkov, the congresscritters, and the directors of everyone's favorite TLAs have *COMPLETELY* lost their marbles, or the word 'constitution' is about to become very un-PC. Get your plane tickets to countries where sanity still remains (if there are any left) before international air travel is suddenly banned because of 'terrorist threats to national security'. War is Peace. Freedom is Slavery. Surveilance is Security. I'm from the government and I'm here to help you. ParanoiaMonger

1 0

Just wanted to let you know
by DaveL＠classifiedcentral.com 17 Dec '03

17 Dec '03

Hey there, For those of you that don't know, you can find the Global Advertising Inter-Network at http://www.gainads.com. Their classified ads are accessible from over 475 different member sites around the world. Check em out! Dave

1 0

Re: [ZOG] MARXIST COHEN WANTS 'CURTAILED FREEDOM': CALL TO ARMS WANTED
by Rebel Remailer 17 Dec '03

17 Dec '03

* Defense secretary calls for even more preventive measures. * * Terrorism is escalating to the point that Americans soon may have to choose * between civil liberties and more intrusive means of protection. Defense * Secretary William S. Cohen says. * * The nation's defense chief told the Army Times he once considered the * chilling specter of armored vehicles surrounding civilian hotels or * government buildings to block out terrorists as strictly an overseas * phenomenon. But no longer. Heavy shit ...and now it begins

2 1

Re: PGP 5.5 available outside US
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Lucky Green wrote: > > It seems that unknown Cypherpunks have yet again shown their disrespect of > US export laws by exporting the latest version of PGP. The Windows version > of PGP 5.5 is now available for your downloading pleasure at > ftp://ftp.replay.com/pub/crypto/incoming/PGP55.zip No it is not!

1 0

Re: Killing those who need killing (fwd)
by Mark Rogaski 17 Dec '03

17 Dec '03

An entity claiming to be wendigo wrote: >From wendigo Thu Oct 30 01:56:09 1997 Subject: Re: Killing those who need killing To: tcmay(a)got.net Date: Thu, 30 Oct 1997 01:56:09 -0500 (EST) In-Reply-To: <v03102800b07d83cd05bd(a)[207.167.93.63]> from "Tim May" at Oct 29, 97 05:25:33 pm Content-Type: text Content-Length: 773 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 An entity claiming to be Tim May wrote: : : (Personally, were I to be arrested and held on such false charges, I'd : consider it necessary to kill those who illegally held me. Preferably from : a safe distance, with a sniper rifle. But then I'm a right wing libertarian : whacko.) Right wing, left wing, friggin' wingless ... the above comment still indicates a sociopath. Mark - -- [] Mark Rogaski "That which does not kill me [] wendigo(a)pobox.com only makes me stranger." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNFgviMHFI4kt/DQOEQI3TgCdEOML5s68dD/K850lbUtfUa7LQkoAoNp0 rKwN4YjssiKHobsYQ9qqBJR+ =24To -----END PGP SIGNATURE----- -- [] Mark Rogaski "That which does not kill me [] wendigo(a)pobox.com only makes me stranger."

6 8

Request For Cash: TruthMailer services at dev.null
by TruthMailer 17 Dec '03

17 Dec '03

The TruthMailer service at dev.null has become very unpopular. So unpopular, in fact, that we are now approaching limitations in what our abuse department can handle. The great outrage this weekend and subsequent delays in spamming various mailing lists are the result of this. For our immediate needs, we could sure use some more DRUGS, ALCOHOL, and BROADS. If a million people could donate $1,000 apiece, this would be great. If one million people donate $100,000 apiece, we can buy Micro$oft. Anonymous snail mail with anonymous cash (US dollars or money order) would be appreciated. If you want to be acknowledged as a donor on our arrest sheets, we can do that too. The address to send to is: Electronic Forgery Foundation Box 281, Bienfait, Saskatchewan CANADA S0C 0M0 A thousand bucks or whatever you can afford. We'll take drug, alcohol and loose women donations, too. Contact Louis J. Freeh <toto(a)sk.sympatico.ca> if you have something to donate. It might be a sting operation, but I'm not sure; Louis will know. PCP DustMan / Home Drug Lab for Molecular Structure and Design For an anti-reality drug recipe, send me mail with subject "Hi(gh)". Append "+realitysucks" to my abusername to ensure entrapment. Decryption is too important to leave to the recipient--Louis J. Freeh O "I'm from BassMasters, and I'm here to help you." |/------o -\______|___/- | ~~~~~~~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~ | |/ <}+++< *===================================================================* To unsuscribive or scrivibe send a message of UNSCRIVE or SUBRIVE to the email address _fuck_you_morons_(a)whitehouse.gov

1 0

PGP 5.0: What were they thinking? (revisited)
by lcs Mixmaster Remailer 17 Dec '03

17 Dec '03

>On Thu, 30 Oct 1997, Anonymous wrote: > >> >> Where can I find a copy of PGP 5.0 which handles this "SHA1" hash extension, >> and the new forced incompatabilities? I'm looking for a Linux distribution. >> All I've found are Windoze versions, really old betas which break >> *everything* which calls PGP from a script or command line, and betas which >> have a lame expired timebomb in them. Source is prefered for obvious reasons. > >http://www.pgpi.com/ I went and took a look at this. They've broken the PGP functionality into several different psuedo-binaries which are just symlinks which point to the same binary. Invoking just 'pgp' gives this: >PGP is now invoked from different executables for different operations: > >pgpe Encrypt (including Encrypt/Sign) >pgps Sign >pgpv Verify/Decrypt >pgpk Key management >pgpo PGP 2.6.2 command-line simulator (not yet implemented) > >See each application's respective man page or the general PGP documentation >for more information. Now this, of course, breaks all matter of things. Some of this may be wrong, so feel free to correct it: Phil releases PGP. It rapidly becomes a standard for personal privacy and is used all over the world. Various versions come about including several international versions. Finally PGP 5.0 is released. It uses a completely new scheme, including DH keys. The Windows version purposefully excludes RSA key generation, in effect forcing people to generate DH keys. There is no UNIX version released. Weeks or months later, after incompatabilities were introduced into the system, UNIX versions begin to filter out. Instead of keeping command line compatability so scripts and programs which call PGP still work, they decide to break the functions up into several different invocations, all of which point to the same binary anyway. The README-BIN file for the "beta 11" Linux distribution says: >Rest assured, we WILL be releasing a source Unix distribution. >Unfortunately, licensing and export issues make this difficult; the >beta process for Linux will be completed on a binary basis. We >understand the difficulty this causes, and will be working to find a >solution in the future. They also take the liberty of coding in a timebomb: $ ./pgp This beta evaluation version of PGP has expired. $ pwd <censored>/pgp50b11-linux-i386/apps/pgp "lnx-b11" is the version currently handed out by http://www.pgpi.com, by the way. The "PGP 5.0 beta for Linux Intel (US version)" selection on their download page leads to a link to: ftp://ftp.ifi.uio.no/pub/pgp/5.0/usa_only/linux/PGP50-lnx-b11.tgz The current source distribution from that site is b8a. One of the README files from that reads: >Welcome to the PGP beta test program! > >Before reporting any bugs, please check the pgp(1) man page to ensure >that they are not already known. > >Bugs should be reported on the beta test web page at: > > http://beta.pgp.com/ However when one goes to http://beta.pgp.com they're confronted with a legal agreement. Of course the link to it from the front page won't work in Lynx 2.7.1 because it uses something called an "https" link, so the user has to type in the URL manually as "http://www.pgp.com/beta/license.cgi". After reading this license and agreeing to it, the user is allowed to reach the "BetaWeb" page. However the "public bug reports" link yields this: > Sorry, the bug report form is not available yet. > Please be patient as we get things ready. > > Please see the PGP BetaWeb for further information, or contact the > Beta Manager with specific questions. > > For now, please use the "Back" button in your browser to return to the > previous page. So maybe you can at least get whatever the current beta is and hope it works, right? Wrong. "PGP Personal v5.5.1 BetaHome"'s "Beta Software & ReadMe Download Button" wants a user name and password, but it's doubtful they have a UNIX distribution in there anyway considering the rest of this mess. Well, at least maybe the user can suggest a new "feature" for PGP 6 and that feature be "Release a source distribution which when installed doesn't break anything which calls PGP," right? Wrong. You have to have a username and password for that too. Well, obviously they want you to register as a "Registered PGP Beta Tester" to get this clearance. However "Beta Registration" yields: > Sorry, we are not currently accepting new beta testers. > We will be shortly, however, so please check back if you are interested. > > Please see the PGP BetaWeb for further information, or contact the >Beta Manager with specific questions. > For now, please use the "Back" button in your browser to return to the > previous page. And of course my 2.6.3i breaks on this "Hash: SHA1" stuff. So correct me if I'm wrong but the way I see it is like this: A new version of PGP was released. It was incompatable with previous versions. They release a Windows version but don't release a version which works under UNIX. Of course Windows users now start using the "latest and greatest," sending messages and keys all over the place which are completely incompatable with the version of PGP everybody else is using. They claim to be working on a UNIX version, granted, but that should have been released at the same time as the Windows version and *AFTER* there was an international version of PGP 5.0 available. Their UNIX version of PGP 5.0 also seems to be completely incompatable with anything which calls PGP from a script or program. In addition their UNIX versions are purposefully crippled so that they don't work after a certain time period, don't provide an override for this that I can see, and they insist on releasing binary-only distributions for Linux which prevents people from commenting that out. They have no method to get new up to date versions, nor do they have a method to report bugs like they say they do. Further the "PGP50-lnx-b11-6126098-1.src.rpm" contains the *BINARY* distribution, *not* the source. I've also been informed that PGP 5.0 encrypts to the CMR key without even bothering to ask and there's no way to override that short of hacking the key record. What the hell are these people thinking? Did they get into bed with Microsoft to try to get people to say "screw this" and go use Windows?

1 0