- cypherpunks-legacy - lists.cpunks.org

Re: Husband/Wife jailed for saying Clinton Sucks
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:36 PM 8/20/96, Scottauge(a)aol.com wrote: >Rush Limbaugh reports: > >That a husband and wife are being jailed for yelling to Clinton "You Suck". > >The Secret Service states additional words (yet un-uttered to the rest of us) >were mentioned that they deemed threatening. > >Ahhh, good to live in a free country.... Ironically, at a recent Clinton rally the "person of poundage" comedienne Rosie O'Donnell led a "Dole Sucks!" cheer. (This was reported in the news because it apparently was an embarassment to the Clintons.) A double standard? Or is the crime the insulting of the monarch? --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

RE: Canada Imprisons People For Human Rights Activity
by Alan Olsen 17 Dec '03

17 Dec '03

At 12:02 PM 8/21/96 EST, jbugden(a)smtplink.alis.ca wrote: >Nota: Quebec recently held a referendum on seperation from Canada. >Just talk about secession of a state in the U.S., and you'll quickly see which >country makes political ideas illegal. It did not seem to stop the secessionist movement in Alaska (at least when I was there). But then that was before the Feds started taking a more active role in Alaskan politics... (Especially with their involvement to get pot recriminalized back during the Reagan administration.) You expect the state to allow challenges to its authority? And lose its omnipotent status? "It takes a Village to raise a child." - Number 2 --- | "Remember: You can't have BSDM without BSD. - alan(a)ctrl-alt-del.com "| |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

Re: Canada Imprisons People For Human Rights Activity
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:33 PM 8/21/96, Igor Chudov @ home wrote: >jbugden(a)smtplink.alis.ca wrote: >> Nota: Quebec recently held a referendum on seperation from Canada.=20 >> Just talk about secession of a state in the U.S., and you'll quickly see wh= >> ich >> country makes political ideas illegal. >> > >OK, so what would happen if I organized a party with the proclaimed goal >of secession of Oklahoma from the United States? > > - Igor. Almost certainly nothing. I believe there is an active secessionist movement in Alaska, and nothing has happened to them. (This does not mean they would ever be allowed to succeed in seceeding, of course.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 3

Lesson 2 in cracking (cryptoanalysis 001)
by Scottauge＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-08-21 03:14:57 EDT, you write: > Okay wise guy. I'm going to give you a 14300 character string that > starts out Big deal. >How are you going to tell *what* I was talking about? I guarantee with >any message of practical length (i.e. not " ckosuuy") will have multiple >possibilities, particularly when you take things like mispellings, Mispelling are an acknowledge means of screwing up the algorithms I gave you. However, they are usually close to the original spelling. In addition, once most of the cipher has been dealt with, these fall into place quite nicely anyhow. >software artifacts ("----- BEGIN PGP --------" "X-Received ..." etc.) and So tell me what the difference is between a bunch of messages with th, st, ya da ya da and messages with instances of say 27 27 27 27 27 obviously the dashes from your pgp insert. If anything, you've added more ammunition against your self. Think expanded pattern matching if you can something like pa*tern... >deliberate attempts to throw you off. That's why it's unbreakable - by >anyone! Including the user, after all, you show a transformation by setting all vowels to the front, then a transformation into numbers, a shuffle by number order, then a transformation back into letters. During decryption: How do you place the vowels into the correct position? How do you place the numbers into the previous order before ascending sort them? You are a , lets see a good name I was once placed with, a TROLL. The first pot was not to insult you more so than to inform others of attacks. This post can be considered a personal attack, you TROLL.

1 0

RISKS: Microsoft Explorer security hole
by stevenw＠best.com 17 Dec '03

17 Dec '03

---------------------------------------------------------------------- Date: Wed, 21 Aug 1996 13:12:59 -0400 From: felten(a)CS.Princeton.EDU (Ed Felten) Subject: Internet Explorer Security Problem We have discovered a security flaw in the current version (3.0) of Microsoft's Internet Explorer browser running under Windows 95. An attacker could exploit the flaw to run any DOS command on the machine of an Explorer user who visits the attacker's page. For example, the attacker could read, modify, or delete the victim's files, or insert a virus or backdoor entrance into the victim's machine. We have verified our discovery by creating a Web page that deletes a file on the machine of any Explorer user who visits the page. The core of the attack is a technique for delivering a document to the victim's browser while bypassing the security checks that would normally be applied to the document. If the document is, for example, a Microsoft Word template, it could contain a macro that executes any DOS command. Normally, before Explorer downloads a dangerous file like a Word document, it displays a dialog box warning that the file might contain a virus or other dangerous content, and asking the user whether to abort the download or to proceed with the download anyway. This gives the user a chance to avoid the risk of a malicious document. However, our technique allows an attacker to deliver a document without triggering the dialog box. Microsoft has been notified and they are working on fixing the problem. Until a remedy is widely available, we will not disclose further details about the flaw. For more information, contact Ed Felten at felten(a)cs.princeton.edu or 609-258-5906. Dirk Balfanz and Ed Felten Dept. of Computer Science, Princeton University http://www.cs.princeton.edu/sip/ ------------------------------ ------------------------------------------------------------------------- Steven Weller | Technology (n): | | A substitute for adulthood. stevenw(a)best.com | Popular with middle-aged men.

1 0

WinSock Remailer Update
by Joey Grasty 17 Dec '03

17 Dec '03

Y'all: I've done some additional testing of the WinSock Remailer with Windows 95. In short, the remailer does not decrypt messages properly in Windows 95. Therefore, it should not be used with that operating system. If you sent messages this evening, then some or all of these may have been lost during testing with Win95. I suspect that the same problems would be present with Windows NT, and indeed, one user reports a similar problem. Don't expect a fix for 95 or NT soon, as I'm a relative neophyte with these operating systems. In fact, I just installed Win95* yesterday. So, please be patient. I will have another alpha release of the remailer next week. Please stay tuned. As always, my homepage is: http://www.c2.net/~winsock/ * What possessed M$ into turning Windows 95 into a Macintosh like interface, I'll never know... (Yes, I have been hiding under a rock for the past two years, why do you ask?) Regards, -- Joey Grasty jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] jgrasty(a)pts.mot.com [work -- designing pagers] "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin." -- John Von Neumann PGP = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7

1 0

Re: Bernstein hearing: The Press Release
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:10 AM 9/23/96, Brian Davis wrote: ... >There isn't such a clause. The allowed restrictions were developed in >case law. > >Constitutional literalists take note: the First Amendment says nothing >about what the executive branch or the states can do .... Which is why President Jefferson was able to say: "While the Constitution says "Congress shall make no law...," I am hereby outlawing all discussion of the following subjects:.... And I have had it with the Catholics and Jews in this country. While Congress has no power to make laws respecting the establishment of religion or the exercise thereof, I am under no such restrictions. Therefore, I am ordering the immediate arrest and summary execution of all Papists and Jews...." Seriously, does not the Constitution and Bill of Rights define what states may do? And Presidents? The Executive is under various restrictions, and cannot behave unconstitutionally. After all, if Alabama, for example, reinstituted slavery, would not the 14th Amendment trump this? If California were to, say, ban speech critical of women's or homosexual's rights, would not the First Amendment trump this attempt? --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 3

Re: Please do not post off-topic flames to the list.
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

Unfortunately, you've probably all received something that started out like this: >> You are being gently flamed because. Sorry about that. I've been gone for the last few days and found out that one of my incoming mail filters was somewhat flawed. Instead of sending that generic response only to the esteemed Dr. Vulis it was sending it to any message with his address *in the header*. It also replied to any cc:ed addresses. Ooops... Also, there is no need to speculate about any ulterior motives. It was entirely a setup glitch. There's an important reminder here: don't make setup changes at 2 am and then disappear for 4 days! Again, sorry to the list about this. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # cadams(a)acucobol.com | V.M. (619)515-4894 "I have never been able to figure out why anyone would want to play games on a computer in any case when the whole system is a game. Word processing, spreadsheets, telecoms -- it's all a game. And they pay you to play it." -- Duncan Frissell

1 0

(Another) WSJ article
by dmandl＠panix.com 17 Dec '03

17 Dec '03

Netscape Software for Cruising Internet Is Found to Have Another Security Flaw Another security flaw that has long plagued the Internet has been found in software by Netscape Communications Corp. and others, raising concerns for the privacy and safety of information on the global computer network. The flaw in Netscape's popular Navigator software, which helps users cruise the multimedia portion of the Internet known as the World Wide Web, is the third defect in the software discovered by the "Cypherpunks" discussion group in little over a month. [end of excerpt--it's a long article] The article quotes William Cheswick and Rich Lethin, and mentions the cypherpunks several times. --Dave. -- Dave Mandl dmandl(a)panix.com http://wfmu.org/~davem

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/premail/premail-0.33.tar.gz For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub reord"; $remailer{"hacktic"} = "<remailer(a)utopia.hacktic.nl> cpunk mix pgp hash latent cut post ek"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post ek reord"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk pgp hash filter"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"syrinx"} = "<syrinx(a)c2.org> cpunk pgp hash cut reord mix post"; $remailer{"ford"} = "<remailer(a)bi-node.zerberus.de> cpunk pgp hash ksub"; $remailer{"hroller"} = "<hroller(a)c2.org> cpunk pgp hash mix cut ek"; $remailer{"vishnu"} = "<mixmaster(a)vishnu.alias.net> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"crown"} = "<mixmaster(a)kether.alias.net> cpunk pgp hash latent cut mix ek reord"; $remailer{"robo"} = "<robo(a)c2.org> cpunk hash mix"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"spook"} = "<remailer(a)spook.alias.net> cpunk mix pgp hash latent cut ek reord"; $remailer{"gondolin"} = "<mixmaster(a)gondolin.org> cpunk mix hash latent cut ek ksub reord"; $remailer{"rmadillo"} = "<remailer(a)armadillo.com> mix cpunk pgp hash latent cut"; $remailer{"ncognito"} = "<ncognito(a)gate.net> cpunk"; $remailer{"precip"} = "<mixmaster(a)mix.precipice.com> cpunk mix pgp hash latent cut ek reord"; $remailer{"ecafe"} = "<remail(a)ecafe.org> cpunk"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. News: the remailer list has been rewritten, and the new version is live! It should be more accurate, reliable, and faster than before. Penet is back up! Enjoy. remailer email address history latency uptime ----------------------------------------------------------------------- robo robo(a)c2.org ##*#####+### 1:51 99.99% hroller hroller(a)c2.org ########+### 1:47 99.99% syrinx syrinx(a)c2.org -+++--+--+-+ 51:38 99.98% ford remailer(a)bi-node.zerberus.de +*--*++**+*# 16:30 99.98% mix mixmaster(a)remail.obscura.com ._..-+.-++- 4:38:15 99.98% crown mixmaster(a)kether.alias.net --++------++ 1:51:07 99.97% alumni hal(a)alumni.caltech.edu *+##+*-*##*# 6:32 99.97% gondolin mixmaster(a)gondolin.org --_.-+---+** 3:26:27 99.96% hacktic remailer(a)utopia.hacktic.nl ++****+***** 9:35 99.95% ecafe remail(a)ecafe.org *--** 35:01 99.95% bsu-cs nowhere(a)bsu-cs.bsu.edu **#+*# #*#+# 7:02 99.83% replay remailer(a)replay.com ++***- +**+* 10:10 99.75% flame remailer(a)flame.alias.net ++**++ ***** 25:42 99.74% extropia remail(a)extropia.wimsey.com ----.-.-.-- 12:36:15 99.63% rmadillo remailer(a)armadillo.com +++ + ++ ++ 51:06 99.29% spook remailer(a)spook.alias.net ----------- 2:55:48 99.14% portal hfinney(a)shell.portal.com #+####-## # 5:37 98.89% ideath remailer(a)ideath.goldenbear.com ---+__.-.- 12:16:28 98.18% penet anon(a)anon.penet.fi * + - - ++ 3:46:46 94.95% c2 remail(a)c2.org *+ * +- +++ 49:41 94.46% vishnu mixmaster(a)vishnu.alias.net +++-+++ *+* 23:25 93.99% rahul homer(a)rahul.net *#+#*****#*# 1:21 99.99% ncognito ncognito(a)gate.net ++ 6:59 9.32% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0