- cypherpunks-legacy - lists.cpunks.org

Re: Secure Split
by loki＠obscura.com 17 Dec '03

17 Dec '03

I wrote a program which does secret sharing calles SecShare. It is on my home page. As my first venture into crypto programming it is a major kludge, but it does the job. -Lance ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Re: Risks of a style anonymizer?
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"wlkngowl(a)unix.asb.com" "Deranged Mutant" 17-FEB-1996 18:49:54.40 >One risk of "style anonymizers", though: if the style becomes too generic >it's just another levelling of readability. Usenet and mailing lists can >become that much more boring, if not stupidified with too many spelling >errors and grammatical abuses. Having style anonymizers that didn't create spelling problems, but just filtered them out would be a solution to the latter. The former problem can be taken care of by having many different styles that can be used. For instance, it might notice that your sentence length variation wasn't enough for a given style of writing, and prompt you to write some shorter (and/or longer) sentences - including via breaking up the ones you've written already. One would use a different style setting for each nym. -Allen

1 0

Re: A Cyberspace Independence Refutation
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"bdavis(a)thepoint.net" "Brian Davis" 17-FEB-1996 23:44:32.70 >On Sat, 17 Feb 1996, Dave Farber wrote: >> The President can not rule anything unconstitutional. He can tell justice >> not to enforce it but sometime local federal prosecutors do what they want >U.S. Attorneys serve at the pleasure of the President. U.S. Attorneys >cannot fire their Assistants -- they can only recommend such action to >the Attorney General or the Deputy Attorney General. As I understand it, what the President can do is order them not to defend its constitutionality - making it _real_ easy to remove in court. BTW, why (other than political cowardice) hasn't Clinton done so with respect to gays in the military? -Allen P.S. Since that last question is getting off the subject, feel free to do it in private email.

1 0

Sound Bites (finale)
by David K. Merriman 17 Dec '03

17 Dec '03

Many thanks to those that posted/emailed sound bites, observations, information, etc. Some were used, some weren't (did what I could with what I had :-). When asked why I was protesting the CDA the way I was, I just told them what popped into my head on the spot: "Because it's *my* Constitution, too." Dave Merriman------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> For privacy tools: http://www.geocities.com/capitolhill/1148

1 0

Re:
by Dave Emery 17 Dec '03

17 Dec '03

> > >Ettrium > > Yttrium? My lord you've caught me with my rare earths down - its Erbium not Yttrium. Sorry about that ... Dave > -------------------------------+----------------------------------------- > Sean Morgan (sean(a)lucifer.com) | Let me tell you a few bits about myself: > | CACTTGCCGGGTAACACTCCATGAAATTCTTCTCAGCC > http://www.lucifer.com/~sean/ | AGGTGTCGACGCTAGGATCAACCTTTAAGTGAACT... >

1 0

Re: An entity calling itself Kilroy was probably here (was: Web Page Authentication (was: Anti-Nazi Authentication) )
by Jiri Baum 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Bryce and Cypherpunks, #ifdef CDA In case I ever want to visit the US, here's a warning I've swiped off the top of some poetry: Leganto, se vi estas pruda Kaj na`uzas vin la amo nuda, Se indignigas vin la bolo De la temperamento suda, Se ^genas vian delikaton La grimaceto am-aluda, Pripensu bone anta`u lego: Tute ne estas mi altruda, For^jetu min, retiru vin Al via dika ^sel' testuda. Leganto! Jen la lasta voko! Tuj sekvos jam dan^gera loko! For^jetu min! Beda`urus mi, Se vin mortigus nervo-^soko! ------------------------------- Leganto! Mi avertas due! Pripensu, ^cu vi legos plue! Pilate levas mi la manojn, Se mi efikos misinflue. Neniu vin devigas legi, Anstata`u indigni^gi brue, For^jetu min, for^jetu min, Ankora`u estas ne malfrue. -- from: Peter Peneter, Sekretaj Sonetoj OK, so maybe my post is nowhere near as good as said poetry, but better safe than sorry :-) #endif Somebody wants us to think that Bryce Wilcox wrote: ... >This quotes some mail sent directly to me by (probably) an >entity calling itself "Jiri Baum". I apologize in advance >if said probable entity is offended at my broadcasting his ... No problem; being unsubscribed at the moment, could you please forward to me any replies? Thanks! ... > +---+---- Bryce > | | >+---+------ Probably an entity calling itself Jiri >| | | | >v v v v >> > > > An entity calling itself Jiri Baum >> > > > <jirib(a)sweeney.cs.monash.edu.au> probably wrote: >> > > ... >> > > >> > > Probably? Didn't I sign it? :-) ... >> I guess it depends on whether we are talking about "Jiri Baum wrote" >> (about which you'd be perfectly right) or "An entity calling itself >> Jiri Baum wrote". Witness: ... >Well now let's say that an active attacker had supplanted >your public key with his own. He is not, really, an entity >who calls himself "Jiri". I mean, sure by using a public >key which he controls and which has "Jiri" on it he is >calling himself "Jiri", but he rarely if ever actually talks >to people and says things which those people associate with >the name "Jiri". ... Hold on - yes she does! That's the point of a MITM: she wants people to associate things she says with the name "Jiri". (I'll use a female MIMT to distinguish her from the real McCoy.) The question asked by PGP when key-signing is: "Based on your own direct first-hand knowledge, are you absolutely certain that you are prepared to solemnly certify that the above public key actually belongs to the user specified by the above user ID?". There is no exception for self-signing. The MIMT controlling the public key would be prepared to solemnly certify that the key belongs to the entity called "Jiri", in other words, that she is "Jiri". ... >More significantly, he never thinks of >*himself* as "Jiri". So in this most fundamental sense he >does not "call himself Jiri". ... Well, she may not *think* of herself as "Jiri", but she is prepared to swear (solemnly certify) that she is. Isn't that "calling herself Jiri"? ... >*You* are the entity who calls yourself Jiri, and I can only >say that you "probably" wrote the above because I'm not sure >if you actually control the public key associated with your >name. ... Well, I control *a* key associated with my name (undisputed, last I checked the keyservers). There may be other persons using the name "Jiri Baum" (though I don't know of any except pre-WW2). ... >mouth and so forth? Maybe I should say "An entity who calls >itself 'Jiri Baum' and is more or less unaware of any nym >collision regarding that nym...". ... Hmm, "John Smith" is going to have trouble signing that one... many people have nym collisions they are aware of, without any malicious intent (eg son named after father). ... >Yeah, that one seems bulletproof... ... Except you don't know whether I'm aware of any nym collision. You could say "An entity who calls itself 'Jiri Baum' and claims to be more or less unaware of any nym collision regarding that nym..." but then you'll have to ask each key-holder whether or not he is aware of such a collision. ... >> True - I guess that's another use - a time-stamping service could >> sign any page that asks for it. Time to whip up yet another CGI ... >Wei Dai <weidai(a)eskimo.com> and Matthew Richardson ><matthew(a)itconsult.co.uk> have both done this. I suspect ... But I thought there were only e-mail timestampers, not web-page timestampers... (ie, a form would ask for a URL and output just a detached signature). ... >I myself use Usenet and mailing lists as a sort of poor >man's time-stamping service. If I invent an idea or some ... I suppose that'll probably work (especially if the idea is worth saving); a thing I've heard of in the traditional world is to put it in an envelope, send it to yourself registered and keep the sealed envelope; but I'm not a lawyer so I wouldn't have a clue to what extent it works... Besides, it's off-net. Please Cc any replies to me as I'm off-cypherpunks at present. ObConspiracyTheory: CoS & CDA ? ObCDA: Jes, ^caste, sen malpuro de pasio Mi vin ornamis per admira kron'... Kio okazis do en subkonscio, Ke, ne timante brilon de l'salon', Levante kapon sin anoncis io: Fripona bub' en mia pantalon'. -- ibid. (I'm *sure* that's indecent somewhere.) Hope I'm making sense, and sorry about the excessive head and tail matter... Jiri -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBMSggaRQ9DWdGOhTVAQGJdwP+IxJ3AxuNUOcDpppoKqtH3ovGeqDcupGu f6KzVxsRCxEESvwwo9s9Chg50+OqAwjHiloiLJY1CCKe1cjFU4/oZi6lBmHqCbrb Zui1caNRMYUHCNpAc6QBrDc4DmZ6y1ymg+lNjzvq2fNAQxOMPRwBZx/h3w8Jftze c7sWILGw6bI= =nGwO -----END PGP SIGNATURE-----

1 0

Internet Privacy Guaranteed ad (POTP Jr.)
by Wink Junior 17 Dec '03

17 Dec '03

This culled from comp.security.firewalls. I've edited out the blathering ad copy and just left the "technical details". Sounds like POTP Jr. to me; I'm certainly not interested in the "buy our company" schtick. -- Wink Wichita Falls, Texas February 16, 1996 For immediate Release: Internet.Privacy.Guaranteed [Long blathering sales prose elided.] If You Break our System, You've Bought our Company! Internet.Privacy.Guaranteed, IPG, today announced a new product line that guarantees privacy for 2, or privacy networks of 20,000 or more people on Internet. We back up our Guarantee with the Corporate motto, 'If You Break our System, You Have Bought our Company.' IPG Guarantees Absolute Privacy on Internet. Using the trademark CRE transform, the IPG PCX Nvelopes system translates any intelligible digitized information into utterly random gibberish. Only one other user, or more in certain instances where there is a need to know, will have the Nvelopener required to transform the random gibberish back into intelligible digitized information. CRE Transforms, trademark IPG, are the only acknowledged unbreakable method of so transforming digitized information. There are no passwords, encryption keys, or anything like that to conjure up, remember, and perhaps forget. PCX Nvelopes usage is automatic, similar to PKZIP and PKUNZIP. Easy to install, use, add to, and administer. It is Unbreakable If an individual, or any group of individuals, break the IPG Privacy System, IPG will sell them the company for $1.00, and even give them the dollar to buy it with. If you think you can, just try and you find out that it is impossible. There may be rumors that someone has broken the system, but that is not possible, it will never happen. Don't Waste your time ! How dare IPG have the unmitigated gall? When you are certain, then you are certain, and IPG is certain! Others dare not make such a brazen boast because they cannot possibly back it up, but IPG most certainly can. Every informed expert of the technology will confirm, without reservation, that the IPG system is not breakable, as many already have! There, we have thrown down that gauntlet, dare you pick it up? CRE Transforms The system uses CRE transforms, metaphorically called Nvelopes, to translate any meaningful digitized information into absolutely random gibberish. In order to convert that random gibberish back into intelligible usable form, a Nvelopener is required, and only the rightful recipient(s) has the required Nvelopener. Nvelopes and Nvelopeners Every Nvelope and Nvelopener pair is absolutely and totally unique - they bear no resemblance whatsoever to any other Nvelope - Nvelopener pair in existence, anywhere ay anytime. Every time a user wants to transmit information to another user, they utilize a new unique Nvelope. No Passwords or Keys or the Like As an added bonus, there are NO MESSY, INTRUSIVE PASSWORDS or ENCRYPTION KEYS to conjure up, remember, fool around with, and perhaps forget. None of that sort of thing to bother with at all. Nothing to get in your way of using the system. Transforms Internet from Least Private to Most Private The System, called PCX Nvelopes, for Private Communications eXchange, transforms Internet from being the least private, utterly without any privacy at all, system for conducting communications, into the most private system possible, an elegant fast system that unequivocally insures privacy. Privacy Network PCX Nvelopes serves 2 individuals who want to communicate with each other in private, as it serves equally well a corporate organization, or any other organization, privacy network, of 9 or 90,000 or more people, who want to keep customer, trade secret, strategy and plans, financial, and other confidential information privy to those with the need to know. For both in house and external usage. Guaranteed Easy to Install, Use and Upgrade Potential users beset by a paranoia that the PCX Nvelopes system must be complex, difficult to configure, laborious to install, administratively burdensome, arduous to upgrade and add users, are in for a computer cultural shock. As you will find, PCX is the exact antithesis of all of those things. It is so simple to install, use, upgrade and add users to, that it will completely blow your mind away. There is nothing to do, installation and adding users are totally load and go operations - if you can operate a computer, you can install and use PCX Nvelopes within minutes, it is absolutely duck soup to any computer literate, even marginal ones. Prices Prices are $19.96, including shipping and handling, for a full blown 12 user Demonstration system, unconditional moneyback guarantee and may be applied to your first order - the Demo system can be used by 2 people, or all the way up to 12 users in a privacy network. For $39.95, two users can set up a two user privacy system with 500 Nvelopes. A fully operational integrated multi-user system costs approximately $140.00 per user, ready to load and go, with thousands, or millions of Nvelopes and Nvelopeners. IPG also offers full turnkey leases at $15.00 per user, per network, per month, which includes all software, upgrades, administration, and unlimited Nvelopes and Nvelopeners. As a reference to its unbreakability, we refer you to an article by Paul Leyland on Internet at: http://dcs.ex.ac.uk/~aba/otp.html For more information visit our Web Site at: http://www.netprivacy.com/ipg or E-Mail at ipgsales(a)cyberstation.net, or by phone at 817-691-1081 Trademarks & Copyrights Nvelopes, Nvelopeners, CPX and CRE Transforms are trademarks of Internet.Privacy.Guaranteed, IPG. Copyrighted 1995,1996 by: Internet.Privacy.Guaranteed. All rights reserved.

9 17

Diffie-Hellman vs RSA
by Eric J. Tune 17 Dec '03

17 Dec '03

Can anyone tell me the differences between the Diffie-Hellman algorithm and the RSA algorithm? Is one cryptologically better? (DH let's you use 4096 bit keys versus 2048 bit keys for RSA in PGP 5.5). Thanks for any and all info. Eric Tune

2 1

Internet newspaper censorship in Zambia
by Declan B. McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message begins here ---------- Date: Sun, 18 Feb 1996 21:07:14 -0800 (PST) From: Declan McCullagh <declan(a)well.com> Subject: Internet newspaper censorship in Zambia To: fight-censorship+(a)andrew.cmu.edu cc: dlush(a)ingrid.misa.org.na, mbennett(a)zamnet.zm, mkakanda(a)zamnet.zm, neil(a)zamnet.zm, ftema(a)zamnet.zm, fsh95s(a)Timon.ACU.EDU, post(a)zamnet.zm Attached is disturbing information about state censorship of the physical and online editions of The Post newspaper in Zambia. If anyone reading this emails me the complete text of the banned February 5 edition of the newspaper, I'll put it on my web site. Or, send me email for an address of an anonymous FTP site where you can upload it. I promise to keep your identity confidential. (I'm already hosting a book banned by the French government: http://www.cs.cmu.edu/~declan/le-secret/) Please redistribute this message as appropriate. Best, Declan declan(a)well.com ---------- Forwarded message ---------- >ACTION ALERT UP-DATE - ZAMBIA >FEBRUARY 16, 1996 > >INTERNET EDITION OF THE POST ALSO BANNED > > >The Internet edition of The Post newspaper of February 5 - banned by >President Frederick Chiluba in terms of Section 53 of the Penal Code - has >been removed from the paper's World Wide Web (WWW) site. > >Mark Bennet of Zamnet Communications, the privately-owned Internet service >provider which hosts The Post's WWW site, says Zamnet was left with little >choice but to make the February 5 edition of The Post inaccessible on the >Internet. > >Bennet says Zamnet kept the banned version of The Post on the WWW for two >days after it was published, but was then warned by a "someone senior in >the police" that the company was liable to be raided and charged with >possession of a prohibited publication. The President's ban of edition 401 >of The Post covered "all forms" of the paper, says Bennet. > >Visit The Post's WWW site (http://www.zamnet.zm) and you will find the >February 5 edition listed in the paper's archive of back editions, but >click on the edition and the file will not open. However, following >editions of the paper - containing stories about the banning, the police >raid on The Post's offices, and subsequent arrest and charging of >Editor-in-Chief Fred M'membe, Managing Editor Bright Mwape and Special >Projects Editor Matsautso Phiri with contravening the State Security Act - >can be read. The State Security Act charges relate to a report published in >the February 5 edition of The Post revealing the government's plans to hold >a referendum on the adoption of a new constitution. > >A recent addition to the Zamnet WWW site is "Zambia Today" - stories from >the state-run news agency ZANA, which are up-dated every couple of hours. >"State House was very keen that the world didn't see The Post newspaper >alone," said Bennet. "We kept telling them that we were going to keep The >Post, but that we were happy to put up a State House page, or a page for >ZANA. We are trying to actively encourage them to be positive." > >Bennet stresses Zamnet was an independent company and would not succumb to >self-censorship as a result of political pressure. Zamnet is housed at the >University of Zambia, which has a 52 per cent share holding in the company. >Although funded by the government, the University enjoys academic autonomy, >says Bennet, "so there is no possibility of pressure (being exerted on >Zamnet) through the University". > >M'membe, Mwape and Phiri are due to appear in the High Court today to hear >whether or not their bail - granted last week Wednesday (February 7) after >initially being turned down by a magistrate - can be reviewed. If the court >decides their bail can be reviewed, the three stand a chance of returning >to jail to await trail on the charges of contravening Section 4 of the >State Security Act, which prohibits the publication of classified >information. If convicted, the journalists could be jailed for up to 25 >years. > >However, speaking on Namibian Broadcasting Corporation (NBC) news this >morning (February 16), Mwape said he was not deterred by the prospect of a >lengthy term in jail if convicted. "It is about time such a challenge was >made," said Mwape. "The freedom we are talking about will only come if we >are prepared to make sacrifices for it." > >ends > >David Lush >Media Institute of Southern Africa (MISA) >Private Bag 13386 >Windhoek, Namibia >Tel. +264 61 232975, Fax. 248016 >e-mail: dlush(a)ingrid.misa.org.na

1 0

Re: True random numbers
by Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- James M. Cobb wrote: > > > > The Centre de Recherches Mathematique is hosting a year-long > program in combinatorics and group theory in 1996-1997. The > year will be organized around a number of workshops spread > throughout the year. Thanks for the tip... [..] > If you'd like to read RFC 1750, "Randomness RecommendationsGood... [..] > References [...Lots of references, some with not much clear relation to randomness deleted...] Overdoing it a bit, aren't we? Rob - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSgJnCoZzwIn1bdtAQGjRQF/bP9RUW9899uIPBaUEJpXOjuEQ3goYroI AspHda8KpO4DfbYA6uecyCtTS15N9u8y =pzpK -----END PGP SIGNATURE-----

1 0