- cypherpunks-legacy - lists.cpunks.org

Re: Key Security Question
by Toto 17 Dec '03

17 Dec '03

Z.B. wrote: > > My computer went into the shop a few days ago, and I was unable to take > my PGP keys off it before it went in. What are the security risks here? > If the repairman chooses to snoop through the files, what would he be > able to do with my key pair? Will I need to revoke the key and make a > new one, or will I be relatively safe since he doesn't have my > passphrase? If the repairman has your pubring and secring files, you can now consider them in the same light as a 'busted flush'. Chances are, he has neither the capability nor the interest in popping open your deep, dark secrets. On the other hand, if he returns your computer with a 'shit-eating grin', you may be in for a world-of-hurt. My advice would be for you to check your 'paranoia level' and, if you are a quart low, then read Phil Zimmerman's PGP documentation once again, and make your decision based on the reality of the possibilities involved. Toto

2 1

Re: Key Security Question
by Toto 17 Dec '03

17 Dec '03

Paul Foley wrote: > On Fri, 31 Jan 1997 17:51:47 -0800, Toto wrote: >> If the repairman has your pubring and secring files, you can now >> consider them in the same light as a 'busted flush'. > > The secret key is encrypted using the same IDEA algorithm that PGP > uses to encrypt your files. If you trust IDEA, your key is as safe as > your passphrase (not at all if you have no passphrase, not much if > it's easily guessable, etc.) Send me your secring file. I have a new password-buster I'd like to try out on it. > If your computer repairman has the capability to crack strong 128-bit > ciphers, I'd be rather worried :-) He doesn't have to crack the cipher, he only needs to find the password. > On the other hand, there's always the possibility of your passphrase > being on the disk, say in a swap file, somewhere. Same goes for > plaintext of any encrypted files/messages. I doubt anyone's gonna go > hunting through your swap file, "empty" sectors, etc., looking for it, > though, unless you've done something to really piss him off lately :-) Or if he's a member of the CypherPunks list, read the message, and now considers it to be a personal challenge. Toto

1 0

Re: Key Security Question
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 10:41 AM 1/31/97 -0800, Z.B. wrote: >My computer went into the shop a few days ago, and I was unable to take >my PGP keys off it before it went in. What are the security risks here? >If the repairman chooses to snoop through the files, what would he be >able to do with my key pair? Will I need to revoke the key and make a >new one, or will I be relatively safe since he doesn't have my >passphrase? Depends on how guessable your passphrase is. If you use something that would fall to a dictionary attack, then you are vulnerable. (Providing that they actually looked for your keyring and made a copy.) If you had nyms on your keyring, then those nyms can be associated with your "true name" with no passphrase required. (Unless you keep your keyring encrypted. Private Idaho supports encrypted keyrings, but little else does.) If you are really concerned about it, you could learn to do your own computer repairs. -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMvObZeQCP3v30CeZAQHwCgf+Oks1qT2Hc9pRU4jy+YU/q3WidHVhJmf2 QxjdEFeRPyX3rt+7ThCN4wnGdh7W2Ya8SYGwmgGgU7pucJ9vgC0JACU20RvRgsQk 5USpS3+Ua9QVNs/NpKGDDANlsurPMi9y12rIqrDbmPmcnW7HDfrfByLVy0HvfqKE ctJsOOz391rbjM+HiNXzMUiiWLBelVA9CrsG/UtSd243vymwD/J2dJiq3s0CMPln Tl1rSy1IVsMqNuQ65ALV9qsz6GJtK8Wu1nSk1IwR8Ge2ZSq6VCqkV/hY8+r5KPOM V0XMIblviEc87xmiJ8BMuNNJpOvhGzFZQ1TV9vwdec3pfyeV/HeHjw== =2if1 -----END PGP SIGNATURE----- --- | If you're not part of the solution, You're part of the precipitate. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

RE: Fighting the cybercensor
by jim bell 17 Dec '03

17 Dec '03

At 09:26 PM 1/30/97 -0800, Sean Roach wrote: >At 11:15 AM 1/30/97 -0800, jim bell wrote: >>What you're presented (included in its entirety below) is what I've come to >>call an "AP story problem." I've worked through many of those myself; >>their main problem is that they don't carefully describe why _each_ person >>in the "play" you've described would be motivated to do what it's claim he >>does, and why he DOES NOT do other things to fix the situation he's in. >>Remember, I'm not merely talking about the main character, but also the ones >>who are (apparently?) incidental. >> >>For just one example, you said: "conventional bodyguards could be >>included, ones with no real pay but with the fore knowledgethat they will be >>buried with the tyrant." >> >>What motivates these people? Are they hostages? If they're hostages, then >>presumably that means they're motivated to seek the death of anyone who is >>holding them. What about their relatives; don't they have any sympathy for >>those who are taken? Why don't they donate to AP to see the lead guy dead? > >As I stated in the bottom, the children would be privaledged. Who says? What if the public doesn't agree? Might it not be better to sacrifice a few children to keep other children alive? > They would >merely be told that it is a great honor. It could very well be. Assuming >that the tyrant did not die, these children would live in comparable luxery. How much would this cost? Who would pay? Where would the money come from? Is this "solution" practical for everybody, or just the top guy? >They would be at risk only if the tyrant was. By keeping the children at >hand, the parents would balk at taking action against the tyrant, not only >their own action, but also that of others. The children would merely be >there to thwart the attempts of others. Suppose that didn't work. Who would kill the kids if the tyrant died? Who would risk death himself to do this? Etc. Hint: Unfortunately, you don't seem to be pursuing the implications of what you are hypothesizing. This is typical. Go back and do what I originally suggested: Look at the motivations of EACH person in the "play" and decide why he will play along with the game. This includes not merely the people you want to focus on, but also anyone else. Jim Bell jimbell(a)pacifier.com

1 0

Re: Anyone have the complete info on CP list alternatives?
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Bryan Reece wrote: > > Igor Chudov writes: > > Bryan Reece wrote: > > > > > > It is in place. It feeds from cypherpunks(a)algebra.com. Bryan Reece > > > reece(a)taz.nceye.net runs the posting bot. taz.nceye.net is an open > > > newsserver offering several cypherpunks newsgroups. > > > > > > I am not yet sure if taz is now a part of the mainstream usenet, that > > > is, it may not be connected to the Big USENET. > > > > > > It receives some Big Usenet groups, but only for local users. > > > alt.cypherpunks is open, but there will be long delays, on the > > > order of a day, for articles there (unless someone better connected to > > > Usenet wants to feed me alt.cypherpunks.*---any volunteers?). > > > > > > > I just set up a recipe for using mail2news gateways like this: > > > > :0 c > > | formail -I "Newsgroups: alt.cypherpunks,misc.misc" | \ > > sendmail mail2news(a)anon.lcs.mit.edu mail2news(a)utopia.hacktic.nl > > > > Any objections? > > > > - Igor. > > It would be more mailing-list-like to have the list in a separate, > isolated hierarchy. That would avoid the principal problems of Usenet > (delays and email spam). It is a very good objections. I would like readers to speak up and say their word for or against forwarding the list messages to alt.cypherpunks. If a significant number of people objects (2-3 is enough) I will disable this feature. - Igor.

1 0

Re: The Science Generations, II
by drose＠azstarnet.com 17 Dec '03

17 Dec '03

My dear fellow: I suppose you missed the notion that, on the Internet, *some* folks know that you are a dog. P.S. You, Dimi, D. Thorn, Dimi, "Nurdane Oskas", Dimi, "Awaken to Me", Dimi,"World's Youngest Cypherpunk", Dimi, "Andre the Cypherpunk", Dimi, etc. etc. are to be commended if not appreciated for your efforts in ruining an amazingly good thing. See you in alt.baloney. Incidentally, do you habitually defecate (FYI, that's "to discharge feces from the bowels") in your own single-wide? (Son, that's a rhetorical question.) The very fact that you shamelessly and boneheadedly refuse to keep your head down after all of the damage that you and your lot have caused (with 1K+ lurkers "looking on") is worthy, certainly, of some serious consideration. Ia! Ia! Cthulhu Fhtagn! >drose(a)azstarnet.com wrote: >> >> With regard to chemicals, may I suggest a perusal of the PGI and PML lists >> (respectively, Pyrotechnics Guild Inc. and Pyrotechnics Mailing List)? > > Sounds like this is an on-topic post for the 'flames' list. > >Toto > > >

1 0

Re: Stop sending me your shit
by Alec 17 Dec '03

17 Dec '03

At 08:38 PM 2/18/97 +0200, you wrote: : :Get me off your list or else ..... . Get me out your fuckin list assholes. Certainly you learned on your mother's knee that you can get more of what you want from other people with kindness rather than anger and rudeness. What did she say about using foul words? Lets think about these things. You may be in for a long stay here. These folks can be downright nasty sometimes. You've got friends here. Let's be nice and keep it that way. Now what do we say?????? Alec

1 0

Drose / You're a fucking idiot!
by Toto 17 Dec '03

17 Dec '03

drose(a)azstarnet.com wrote: > To Toto, Dimi, D.Thorn, whomever, etc.: while I may appreciate being > subscribed to a million and one lists that I never knew I needed (and so > quick!--appreciate the service, dude) this address, like c-punks(a)toad.com, > is going away *real * quick, so save your keystrokes. I generally try to be fairly civil in my postings, and refrain from personal insults, but I will make an exception, here. So listen up, shit-for-brains, and I will try to explain a few concepts that you seem to be too dim-witted to understand. I am a CypherPunk. I have a <Delete> key, and I know how to use it. When my personal account is subjected to spam-attacks and unwanted subscriptions to a multitude of lists, I deal with it. I don't make baseless accusations against others based on their perceived public reputation, or my own subjective perception of their reputation capital. I am not just a CypherPunk, I am also an adult. I take responsibility for my own actions, and I keep those actions within the bounds of what I perceive to be acceptable ethics and personal integrity. If you think that I am responsible for this-or-that action in regard to yourself, then all you have to do is ask me, and I will tell you. I don't make any bones about my beliefs and views, and I don't have any problem with others opposing my beliefs and views. When I launch an attack on someone, right or wrong, it is a frontal assault, not a hidden one. When I post anonymously to the list, or send anonymous email, I do not use remailers, in order that anyone with the will and wit to do so may easily discern my pseudonyms through the headers and use of the 'trace' command. If you think that I am the source of your problems, then you are a fucking idiot. I have no idea who you are, and can only vaguely recall the content or context of your past posts to the list. As such, I would certainly have little motivation for lifting even my little pinkie against you in a conspiratorial attack on you. I would suggest that the only 'fixations' involved between you and myself are coming from your end of the electromagnetic spectrum. I would also suggest that you get your head out of your electromagnetic rectum. Toto

1 0

Any more like www.anonymizer.com ??
by Edgar W Swank 17 Dec '03

17 Dec '03

Does anyone have a list of web proxies for anonymous surfing? I already know about www.anonymizer.com, and there was a "canadianizer" that would alter text to make it more "Canadian", but that is now apparently defunct. Reason I need to know, a friend in a foreign country has to deal with a web proxy that blocks "objectionable" sites including www.anonymizer, so some alternates that might not be blocked would be welcome. Edgar W. Swank <EdgarSwank(a)Juno.com> (preferred) Edgar W. Swank <Edgar_W._Swank(a)ilanet.org> (for files/msgs >50K) Home Page: http://members.tripod.com/~EdgarS/index.html

1 0

Re: DES and RSA crypto hardware from the free world
by Dan Geer 17 Dec '03

17 Dec '03

These chips look *very* promising. Who needs Clipper, or HP's Clipper-under-another-name, when you can get triple DES from the free world at prices like this? The critical thing is to get the horse out of the barn before the door is barred. Each and every one of these sorts of vendors has to establish use and distribution on a wide basis before governments of any stripe start locking down on domestic use. There is little time and, yes, I am a paranoid who hopes thereby to survive. --dan

1 0