- cypherpunks-legacy - lists.cpunks.org

Re: TEMPEST Jamming
by Jeff Gostin 17 Dec '03

17 Dec '03

root%pig.jjm.com%jjmhome.jjm.com(a)jjmhome.toad.com (0000-Super User(0000)) writes: >> On Sun, 3 Jul 1994, Jeff Gostin wrote: I most certainly did _NOT_. Someone followed-up to what I wrote. He wrote it. --Jeff

1 0

Pass Phrases
by Joseph Block 17 Dec '03

17 Dec '03

Maybe I'm just being a little dense about this. If I am the only person who knows what pair of texts I'm using and what permutation algorithm, and what the random number I'm going to salt the pass phrase with, and where I'm going to put the random digits, how is it insecure? Say I use the following two key phrases The Quick Brown Fox Jumps Over The Lazy Dog Oh Be A Fine Girl Kiss Me I decide my method is going to be first letter of each word of the first phrase, last letter of each word of the second phrase I get THQEBAFLJSOMTHLEDA I then throw in 1701 as follows 1701THQ1EBA7FLJ0SOM1THL1EDA7 Without knowing the phrases, method, or number, what makes this insecure? I'm not deliberately trying to be dense, I'd like to know why I shouldn't use this sort of mnemonic method to remember the pass phrase. jpb(a)gate.net

4 4

RE: ACAPULCO H.E.A.T.
by Blanc Weber 17 Dec '03

17 Dec '03

From: Sandy Sandfort Gooder News: Lots of shots of Alison Armitage in swim suits. ........................................ Oh, good. I feel safer now. Blanc

1 0

Question for PGP Gurus
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

PGP gurus, I don't follow the ins and outs of PGP very closely, and I can't find anything on this directly in my archived articles. Someone has told me that pre-MIT versions of PGP may have compromised security because "the session key is hashed solely from the plaintext." Is this true? What's the significance? Is there any weakness? Thanks, --Tim -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

3 2

Re: Pass Phrases
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 20:15 1994/07/03 -0700, Eli Brandt wrote: >> If I pick a verse of a song that makes it easy to remember. > >Aaaaaaagh! ... .. NSA must have an interesting collection of literature on line. They need high bandwidth (but not rapid) access to it. This could be the beginning of a new business if they ever turn their swords into plowshares. Conversely if anyone aspires to digitize a great deal of literature I am sure that NSA would subscribe, thus seeding a new industry. I seem to recall something about a Midwest university beginning to digitize a large body of literature.

2 1

RE: FW: A third voice re: science and spirit
by Blanc Weber 17 Dec '03

17 Dec '03

From: <nobody(a)shell.portal.com> "Ingore"? Is that anything like an "AlGore"? Is that a verb to describe the state of the country, as in "we've just been INGOREd"? ........................................ Could be, if you want it to be. But it could also be part of some shocking, nonsensical AlGoreYTHM. Blanc

1 0

Re: Detweiler clone at WSJ
by Blanc Weber 17 Dec '03

17 Dec '03

From: Dave Hart <list of things to do to make the life of moral innocents safer> There! That should protect us from all the creeps in the world. Of course, there will be a few anarchist crybabies who will call these measures fascist, and a few victims of the new openess...(etc) .......................................................... Don't laugh - they'll probably agree these are really good ideas. The author might even commend you for being so thorough and stringing them together to make such a complete package. Blanc

1 0

AOL and CPSR gopher
by Carl Ellison 17 Dec '03

17 Dec '03

I tried out America OnLine last night (free disk in the mail) and saw that they had support for gopher -- so I poked around and found the CPSR site -- and from that, the pub/cypherpunks directory. However, there was no pgp directory and no code in the cypherpunks directory. Does anyone know if this is manipulation by AOL or some side effect of gopher? (I'm new to both AOL and gopher). - Carl

1 0

Geek of the Week (fwd)
by snyderra＠dunx1.ocs.drexel.edu 17 Dec '03

17 Dec '03

OK. I do remember the earlier discussion about forwarding material to the list, but this is forwarding a pointer to data, which I hope is OK. :-) I get my talk radio files from ftp://sunsite.unc.edu/pub/talk-radio, although you may want to check the ITR FAQ for a closer location. (Th FAQ should be on rtfm.mit.edu) Bob >Date: Fri, 15 Jul 1994 04:03:15 -0400 >To: "Announcements" <announce(a)radio.com> >From: "Internet Multicasting Service" <rtfm(a)radio.com> >Org: Internet Multicasting Service >Subject: Geek of the Week >Status: RO > >The MIME-Version header has been deleted from this message to permit >interoperability with a larger number of mailers. > >------- =_aaaaaaaaaa0 >Content-Type: application/x-program-listing >Content-ID: <071594_geek_ITR.2(a)trystero.radio.com> > >Station: Internet Multicasting Service >Channel: Internet Talk Radio >Program: Geek of the Week >Content: Steve Crocker > >Carl Malamud interviews Steve Crocker, a newly elevated member of the >Internet Architecture Board and a leading contributor in efforts to >provide a security infrastructure for the Internet. Crocker discusses >PEM, Clipper, DSS, PKP, and other important security acronyms. > >Geek of the Week is made possible by the sponsors of Internet Multicasting >Service, including O'Reilly & Associates, Sun Microsystems, and Interop >Company. Additional support is provided by NASA, Cisco Systems, Harper >Collins, Persoft, Tadpole Technology, and WAIS Inc. Network connectivity >for the Internet Multicasting Service is provided by UUNET Technologies and >by MFS Datanet. > >Cassette tapes of Geek of the Week are available from O'Reilly & Associates. >Send electronic mail to audio(a)ora.com or point your WWW Viewer to the >Global Network Navigator (http://nearnet.gnn.com/gnn/gnn.html) > >ITR Program Files: > >Size Name Description >========== ====================== ======================= >14,771,098 071594_geek_01_ITR.au Steve Crocker > 071594_geek_ITR.readme (This File) > >To learn about the Internet Multicasting Service, send your electronic >mail to info(a)radio.com. > >------- =_aaaaaaaaaa0 >Content-Type: multipart/mixed; boundary="----- =_aaaaaaaaaa1" >Content-ID: <071594_geek_ITR.3(a)trystero.radio.com> > >------- =_aaaaaaaaaa1 >Content-Type: message/external-body; > access-type="anon-ftp"; > name="071594_geek_ITR.readme"; > site="$SITE"; directory="$DIRECTORY" > >Content-Type: text/plain >Content-ID: <071594_geek_ITR.4(a)trystero.radio.com> >Content-Description: Readme (This File) > >------- =_aaaaaaaaaa1 >Content-Type: message/external-body; > access-type="anon-ftp"; > name="071594_geek_01_ITR.au"; size="14771098"; > mode="image"; site="$SITE"; directory="$DIRECTORY" > >Content-Type: audio/basic >Content-ID: <071594_geek_ITR.5(a)trystero.radio.com> >Content-Description: Steve Crocker > >------- =_aaaaaaaaaa1-- > >------- =_aaaaaaaaaa0-- -- Bob Snyder N2KGO MIME, RIPEM mail accepted snyderra(a)dunx1.ocs.drexel.edu finger for RIPEM public key When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.

1 0

Handling subscription requests
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Rishab asked earlier if there isn't some way that Majordomo could automatically filter the requests that go this list instead of to the Majordom agent. Pretty unlikely, for various reasons: - The requests would be poorly formed, such as "Can anyone tell me how to subscribe?" and I can't imagine anything short of a CPU-intensive natural language processor able to deduce the actions needed. Certainly I don't want to get added again, or be sent a message, every time "Pretty Good Autosubscriber" sees the word "subscribe" in one of my messages! (Yes, I can imagine an algorithm--"if not already a subscriber and mentions subscribe, then...") - In any case, this is very far from what Majordomo now does. In fact, Majordomo is very picky about the command syntax it expects to see. - And the CPUi-intensive filtering to look for the right magic words would be unwelcome. Especially if every message to cypherpunks(a)toad.com had to be examined! (Again, I can imagine way to reduce this, such as only looking closely at nonsubscriber messages. But not in Majordomo's current feature set.) So what to do? Frnakly, I don't think it's too big a problem. Only a couple of these hit the list per week, even after the list has gotten some publicity someplace like "Wired." Here's what I try to do, when I remember. When I see one of these requests I reply and attach this message: How to Subscribe to the Cypherpunks List This message is just an informal tip sheet on how to get on and off the Cypherpunks list, sent manually by me to people who ask how they can join the list. The Cypherpunks list is managed automatically by the "Majordomo" program, which is commonly used for mailing lists. Command syntax may be familiar to you from other lists. To subscribe: * Send a message to: majordomo(a)toad.com * No subject is needed, or is used * In the *body* section, include only the following: subscribe cypherpunks * This will subscribe you with the address from which you sent the message. If you wish to subscribe with a different address, for some odd reason, send a "help cypherpunks" message instead. * Unsubscribe by sending the message: unsubscribe cypherpunks * A list of current subscribers can be gotten by sending the message "who cypherpunks" to the same address. Be forewarned--your membership on the list will be known to others. (Hal Finney and others have talked about providing secondary mailing list, which can even be encrypted.) Comments: - Write the above information down somewhere. Do not send unsubscribe messages to the main list (cypherpunks(a)toad.com) And the address "cypherpunks-request(a)toad.com" probably will not work either. Use majordomo(a)toad.com. - The list is a high volume one. Fifty messages a day is common. If you can't handle this, unsubscribe. Or read your mail several times a day and make liberal use of the "delete" function. - The list was started in 1992 and has roughly 600 subscribers. - If you are new to the list, read for a while before posting. Be especially polite by not asking "dumb" questions like "Why is Clipper a bad idea?" and "Can anybody break this code?" (It is sometimes said there are no dumb questions. I disagree.) - You will also receive a longer welcome message after your subscription has been successfully processed. - The subscriber list has gotten corrupted several times, due to disk space problems. If you receive no traffic for several hours or more, do a "who cypherpunks" to see if this has happened again. Either resubscribe in the usual way, or wait for the list to (maybe) be restored. - If you find yourself getting two copies of every message, see if you are subscribed under two different mailing addresses. (The mail headers should tell you.) Then unsubscribe the address you don't want to use. This should answer the most obvious questions. Feel free to pass this message on to folks who ask about subscribing. --Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

2 1