- cypherpunks-legacy - lists.cpunks.org

Re: Lack of PGP signatures
by Brad Shantz 17 Dec '03

17 Dec '03

Mark M. Wrote: > > Is it because most mail programs are not PGP aware? > > I don't know of any mail programs that can use PGP (I know there are various > interfaces, sendmail wrappers, and other hacks, but I have yet to see a mailer > with an "Encrypt" or "Sign" option. Once upon a time last year or the year before, Tim May posted why he doesn't use PGP very often. And I have always stood by that same sentiment. Yes, it is a good encryption product, but it is not integrated seamlessly into other applications. Tim, feel free to whack me if you think I'm speaking for you. If, as cypherpunks, we want to spread the use of strong crypto, we need to have a better interface than what currently exists on PGP 2.6.2. I'm sure Derek and the other guys on PGPlib will make it easier to integrate into applications. Am I just blowing smoke, Mr. Atkins? PGP is a pain for encrypting or signing e-mail when you have to save your message out to a temp file, encrypt it, and load it back in to your mail package. Sure, there are things like Private Idaho, which I use on occasion. But, it is still a seperate application that just doesn't fit seamlessly into most applications. In my free time, I have been playing around with add ons for Microsoft Exchange. I've got an OLE 2.0 encryption object that embeds nicely into an Exchange message. I haven't tied it in to PGP yet, because I have been waiting for the release of PGPlib. However, that will allow at least some seamless integration. Brad Shantz TRIsource Windows Development Services

4 3

Re: AT&T bans anonymous messages
by youssefy＠ucla.edu 17 Dec '03

17 Dec '03

At 11:43 AM 6/24/96 -0500, you wrote: >AT&T WorldNet service has banned the sending of anonymous email or >posting anonymously. > Can someone please explain to me the technicalities of how they know I am sending anonymous e-mail?

1 0

COMMUNITY CONNEXION ANNOUNCES STRONGHOLD VERSION 1.2
by sameer 17 Dec '03

17 Dec '03

For Immediate Release - July 16, 1996 Contact: Sameer Parekh 510-986-8770 COMMUNITY CONNEXION ANNOUNCES STRONGHOLD VERSION 1.2 Oakland, CA - Community ConneXion, Inc., the leader in uncompromising security for the World Wide Web, today announced the release of its newest version of Stronghold: Apache-SSL for the US. Stronghold is a webserver based on the popular Apache server, which has the highest marketshare of all webservers on the Internet according to the Netcraft server survey at http://www.netcraft.com/survey/. Stronghold's marketshare has more than doubled every month since its release in January of this year. "[The competition]'s secure servers just didn't work the way we wanted them to; the interface was clunky and required firewall adjustments to run, the access control didn't work well for us, and it was just too black-boxey for us," commented Dan Kearns, of the Motorola ISG Internet Business Group. "We like the lean/mean-ness of Apache in general, and the actual useful development that goes on. We look forward to generating client certificates for our channel partners using the bundled internal certificate authority tools." "We have been working with Community ConneXion for over a year to enable our Digital IDs in their Stronghold server products," said Greg Smirin, Product Line Manager at VeriSign, Inc. "We look forward to using their new version of Stronghold to demonstrate client certification on our own website." VeriSign is the leading provider of digital authentication services and products for electronic commerce and other forms of secure communications. "Stronghold is the first widely used web server that can authenticate clients on the basis of their digital certificates," said Dr. Andrew Csinger, President of Xcert Software, Inc. "Stronghold is a natural server platform for Xcert's Sentry suite of security enhancement products. The combination of Stronghold's uncompromising security profile and Xcert's flexible certificate management and secure database technology represents great value and convenience for Internet users." Xcert and C2 have entered into a co-marketing agreement to provide easy access to the Stronghold/Sentry bundle. The Stronghold/Sentry combination puts organizations of any size in control of their own security, allowing them to cost-effectively implement secure Intranets based on public key certificates. Xcert Software, Inc. is the premier provider of security enhancement software for safe and secure commercial Internet applications. Xcert's Sentry product line is the first cross-platform, server-independent public key infrastructure implementation. A live demonstration using the Stronghold webserver has been available on the company's website since April 1996 (http://www.xcert.com) Because it is based on Apache, Stronghold can be used with the innummerable third party CGI and Apache API applications which have been developed for Apache, including perl & python integration, database connectivity, and Kerberos support. "Direct support within the server for scripting languages can produce an excellent performance improvement over standard CGI methods," said Sameer Parekh, President of Community ConneXion, Inc. Community ConneXion ships binaries for Sparc Solaris 2.5, x86 Solaris 2.5, Sparc SunOS 4.1.3_U1, DG/UX, FreeBSD 2.1, BSDI 1.1, AIX 3.2.5, IRIX 5.3, HP/UX (9 & 10), OSF/1, UnixWare, Ultrix, BSDI 2.0, and Linux (ELF & a.out). Additional platforms may be supported on request. Stronghold may be ordered and downloaded at http://www.us.apache-ssl.com/. Portions developed by the Apache Group, taken with permission from the Apache Server http://www.apache.org/. This product includes software developed by Ben Laurie for use in the Apache-SSL HTTP server project. This product includes software developed by Eric Young (eay(a)mincom.oz.au)

1 0

Re: Clinton must like terrorists...
by koontz＠netapp.com 17 Dec '03

17 Dec '03

>Clinton must like terrorists... because his most recent proposals will end >up making more of them. Maybe he is trying to foment revolution?

1 0

Re: Message pools _are_ in use today!
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:40 AM 7/3/96, David Wagner wrote: >Jim Bell brought up the really nifty point that someday soon we may be >able to receive these message pools by satellite dish-- hurray for true >broadcasting! That would provide most excellent security (unless `they' >started requiring licenses, waiting periods, ... to own a dish-- unlikely). >I can't wait. Yeah, and I should have mentioned the "PageSat" Usenet distribution model, too. (It was a really hot topic 3-4 years ago, but I've heard little of it in the past couple of years...the rise of the Web has made passive downloads of Usenet a lot less interesting.) Someone mentioned the Ku-band dishes that are used by PageSat (or whatever it is now called....). My DSS system, which is technically a Ku-band receiver, has a digital i/o connector of some sort on the back, and it is rumored that this will someday be available for PageSat-like uses. (I have a feeling this may be years off, for admin reasons if not technical reasons.) The point being that there are already _many_ ways to read NetNews almost untraceably. With more to come. (NetNews also used to be available on CD-ROM; the volume is now so high that this just isn't practical anymore. But it underscores the point that NetNews is so "distributed" that attempts to track who is reading "alt.anonymous.messages," and _particular_ messages in such a group, are nearly hopeless.) Finally, the threat model has two angles to consider: 1. The authorities want to know all those who have read a particular message--call it "ToAlice" to keep in the "Alice" and "Bob" framework. 2. The authorities already have identified a suspect, call him "Bob," and wish to know if he reading (and perhaps decrypting) messages to "Alice." As several of us have noted, #1 is tough--real tough. The authorities would have to contact 10,000 or more ISPs who have local newsfeeds and subpoena their logs of who read which newsgroups...assuming such logs are even kept (I don't know the granularity of such logs, whether any logs are kept of specific newsgroups and specific messages within newsgroups). The authorities would have to also check on the other distribution "vectors," including _subscriptions_ to NetNews newsgroups (where a newsgroup is _mailed_ to recipients...I heard this is an option for some). And PageSat, and so on. The second angle, #2, is formally equivalent to wiretapping a target. Once identified, and tapped, anything the target reads can presumably be read by the authorities. (Quibbles: I really mean a "black bag" type of surveillance, where the target's local machine has been compromised/tapped.) The bottom line is this: were I an FBI agent given the task of finding out who is reading a specific message or series of messages, e.g., the "ToAlice" encrypted messages posted in alt.anonymous.messages, I would tell my bosses it is economically impractical. --Tim May (P.S. I think this recent discussion of message pools, started by Hal and continued by this latest thread, is very important. Message pools have fewer of the kinds of "correlations" that can allow sender-recipient correlations to be made.) Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: But what about the poor?
by David Rosoff 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 09.29 PM 7/2/96 -0800, jim bell wrote: >At 10:16 PM 7/2/96 -0500, snow wrote: >>On Tue, 2 Jul 1996, jim bell wrote: >>> stated policy of the escrow agent is that the key owner MUST be informed, >>> what are the cops gonna do about it? >>> >>> Further, how are the cops going to evidence the existence of a valid >>> warrant? (As opposed to a forgery?) >> >> The judge that issues it will digitally sign it. You can check the >>signature block. > > >However, what about an UNCOOPERATIVE escrow agent? (one who insists on >signed paper, or for that matter insists that the judge himself shows up.) >Or one, at least, who sites himself in Borneo, on the top of a 4000 foot >mountain, with a 386 laptop computer and a box of floppies, and who promises >2 hour services to anybody who shows up? No email, no fax, no phone, no >light, no motor car, not a single luxury....oooops....sorry about that...not >even radio. > >Moreover, if the escrow agent is out of the country, can any domestic laws >force him to divulge keys? And anyway, you could just be a kind of escrow agent that will hold the keys for the key owner, right? You don't have to say that you will provide them to the government, right? =============================================================================== David Rosoff (nihongo o sukoshi dekiru) ----------------> drosoff(a)arc.unm.edu For PGP key 0xD37692F9, finger drosoff(a)acoma.arc.unm.edu 0xD37692F9 Key fingerprint = 25 7D AA 01 85 41 43 89 50 5A 33 76 F1 F1 99 67 Do you know who's reading your email? ---> http://www.arc.unm.edu/~drosoff/pgp/ Anonymous ok, PGP ok. If it's not PGP-signed, you know that I didn't write it. === === === === === === === === === === === === === === === === === === === === "Truth is stranger than fiction, especially when truth is being defined by the O.J. Simpson Defense Team." -Dave Barry -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMdqh6hguzHDTdpL5AQFD4gQAlm9cekEcnq26tQkwTljb+xDGc5wRQL6e D5gqXo2JpCQuLXfdYND5ROoV58T4UL43uXMfo8ziqq2mMNRY5SsNKaOWi+f4bw6c SEhMBeBIzLnd50rIzQvWfRzaVr1NBwKjlOGpmRD9H3lWsap/l2ttog4CdShWRWdv 4GMLwzh+PhE= =Y2+p -----END PGP SIGNATURE-----

1 0

Re: Lack of PGP signatures
by nowhere＠alpha.c2.org 17 Dec '03

17 Dec '03

At 09:42 PM 7/2/96 EDT, Derek Atkins <warlord(a)MIT.EDU> wrote: :Basically, I refuse to type my passphrase over the net, which signing :all my messages (this one included) would require. : :-derek Why, in heaven's name, would you have to "type your passphrase over the net" to encypher a message?

2 1

BAN DOGS..
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: vinnie(a)vmeng.com Date: Fri, 18 Sep 1998 09:34:32 -0700 Subject: BAN DOGS.. To: rah(a)shipwright.com, Tamzen Cannoy <tamzen(a)worldbenders.com> MIME-Version: 1.0 X-Priority: 3 LETTER TO BAN DOGS To the Editor Arizona Republic P.O. Box 2244 Phoenix, Arizona 85002 January 7th, 1998 Dear Editor, I am gratified to read in this morning's paper that someone has finally called attention to an urgent situation which I have known about for a long time: annually 334,000 victims of savage dog bites, most frequently children, average age 15, are taken to the nation's emergency rooms. As the article states: "That's more ER visits than injuries from skateboards, baby walkers and in-line skates combined." Total annual cost of ER dog bites: $102.4 million. Twenty or more people killed annually by dogs, almost all of them children. Because these dogs are so readily obtainable on the streets of our nation, I implore all your readers to immediately deluge their Congressmen with letters, phone calls, faxes and telegrams to support the federal "Save the Widdle Childwen Fwom the Vicious Dog-Bite Act of 1998", which would require the following: mandatory muzzles fitted with muzzle-locks to be kept at all times on all dogs, licensing and paw-printing of all dogs, fingerprinting and house-monitoring of dog owners, including mandatory, federally-monitored safe storage of dogs and an immediate 1,000% tax on all dog food. This Act is sponsored by Canine Control Incorporated, an organization dedicated to eliminating canine violence in America by the year 2000. The Act also provides for the immediate banning of all "assault dogs", the definition of which term will constantly change according to the emotions of the board of C.C.I. "Saturday Night Special" dogs, such as Chihuahuas and other cheap, easily concealed ankle-biters, will also be banned. In addition, the Act bans all sharp canine teeth, all canine teeth longer than a federally-mandated length, all spiked collars and sharp canine toenails. It also mandates that all dogs be transferred only through federally licensed dog dealers, and provides for the changing of the BATF to the Bureau of Alcohol, Tobacco, Firearms and Assault Dogs, or BATFAD. I hope that the physicians' organizations who champion total hand-gun banning will rally behind this urgent cause to save our nation's children. Anyone who opposes this type of legislation obviously hates children. We need this Act desperately - after all, if it saves only one life, it is worth it. Not to mention the $102.4 million dollars in ER charges! My husband's face was horribly mauled at the age of four by a Pit Bull; today he is the poster child for C.C.I. Now, when not being used as a drooling doorstop or for first base, he is routinely wheeled out at charity fund-raising events at which he repeatedly mumbles, "Bad dogs! Ban dogs!" We urgently need your help to get these vicious dogs off the streets now! Please help end canine violence in America! Send donations to: C.C.I., 1111 B.S. Avenue, N.W., Washington, D.C. 20004. Make the checks out to me. Tina Terry c) 1998 by Tina Terry. This letter may be reprinted in its entirety, as long as nothing in it is changed, credit is given the author, and the following is included. Author's note: The author's husband's face really was mauled at age 4 by a Pit Bull, an incident in which he almost lost an eye. He's not in a wheelchair, true, but he also doesn't blame dogs in general for his early experience and he loves and owns dogs to this day. He also has never tried to enlist the author to run around the country trying to ban all dogs. --------------289FF090CB8537C73A0A0B03-- --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

2 2

Re: CWD -- Jacking in from the "Keys to the Kingdom" Port
by declan＠well.com 17 Dec '03

17 Dec '03

Sameer's www.anonymizer.com is not blocked -- yet, at least. Some of the programs release weekly updates, so as soon as it's reported by some Net-groping pornhound, I'm sure it'll end up in there. But the blocking apps do more than just check on URLs -- which do constitute most of the databases. (I mentioned that CyberPatrol lists 4,800 web sites.) They also block by keywords. So going through a URL-redirector to "playboy.com" or "xxxpix" would fail. CyberPatrol is free for the download. Check it out! http://www.cyberpatrol.com/ -Declan >-----BEGIN PGP SIGNED MESSAGE----- > >At 12.10 AM 7/3/96 -0500, Declan McCullagh wrote: > >>CyberWire Dispatch // Copyright (c) 1996 // > >>Install the programs and Junior can't access porn. No fuss, no muss, no >>bother. "Parental empowerment" is the buzzword. Indeed, it was these >>programs that helped sway the three-judge panel in Philly to knock down >>the Communications Decency Act as unconstitutional. > >I've wondered .. could a creative child circumvent these filter programs >using a URL-redirecter, like where you see something like >http://www.one.site.com/cgi-bin/rd?http://www.porno-site.com/ >or are they not URL-based? > >=============================================================================== >David Rosoff (nihongo o sukoshi dekiru) ----------------> drosoff(a)arc.unm.edu >For PGP key 0xD37692F9, finger drosoff(a)acoma.arc.unm.edu >0xD37692F9 Key fingerprint = 25 7D AA 01 85 41 43 89 50 5A 33 76 F1 F1 99 67 >Do you know who's reading your email? ---> http://www.arc.unm.edu/~drosoff/pgp/ >Anonymous ok, PGP ok. If it's not PGP-signed, you know that I didn't write it. >=== === === === === === === === === === === === === === === === === === === === >"Truth is stranger than fiction, especially when truth is being defined by the >O.J. Simpson Defense Team." -Dave Barry > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQCVAwUBMdqkPhguzHDTdpL5AQG77QP7B6oJR9SOeJYyTP9fnad+Yn/fA/ZObaf3 >szA2m9Sytxslfd/Juu19KfTTTjncE7dHMBnq6PuyouKD5jwkTnncnXNe7R2Tgjp8 >SdVpyUUdFz++lLdBQ1WYos+eCU2QaGqsYe5+79MkHhFOk1XOhAH8zX5hG9kwuO+q >8C9/wuf6ZyU= >=NfcF >-----END PGP SIGNATURE-----

1 0

Re: The Net and Terrorism
by Deranged Mutant 17 Dec '03

17 Dec '03

On 3 Jul 96 at 7:03, jim bell wrote: > If you listen to the Feds discussing this most recent militia story, when > they're asked what was the militia's motivation, they don't want to talk > about it, and won't even speculate on more than the most unspecific, vacuous > terms. How can they? It's also not their concern WHY they (allegedly) plotted to blow up buildings, only THAT they did so. Rob. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0