- cypherpunks-legacy - lists.cpunks.org

Re: Is 1024-bit PGP key enough?
by Anonymous User 17 Dec '03

17 Dec '03

> But the original author also needs to step back and understand his > security needs. In particular, if you're trying to protect your > information against an enemy who is willing to spend $10B to get it, > they'll have a lot of options other than hiding in a back room with some > cracking equipment. Would you be willing to sell them the information > you're trying to protect for (say) 10% of that $10B? Would your partner? > Your wife? The idea is simple. Since it is easy to increase the size of the pgp key -- certainly easier than improving my wife -- it is not uneconomical to be a little overly paranoid over the size of my key. All it costs me is a couple of seconds of CPU time!

1 0

South Florida Cypherpunks Meeting
by Joey Grasty 17 Dec '03

17 Dec '03

Y'all: The South Florida Cypherpunks will meet at Hops Grill & Bar in Boynton Beach, FL on Saturday, August 17 at 2:00 PM. As always, our meeting place is at a microbrewery, and this one has some very fine brews. In addition, the Cypherpunks Brewmaster, Jim Ray, is brewing up a special "summer dark" brew for the meeting. We will enjoy his swill^H^H^H^H^Hfine beer at my house following the meeting.* I'll post directions to Hops as we get closer to the meeting time and put a map on my web page at: http://www.c2.net/~winsock/ Please send me a note if you plan to attend so that I can alert the NSA^H^H^Hrestaurant on how many will attend. Send me your key and fingerprint for keysigning if it hasn't been signed by any subversives^H^H^H^H^H^H^H^H^Hcypherpunks before. * All joking aside, Jim is a very fine brewmaster. I just wish he'd spend a few bucks and ferment in something other than 2 liter coke bottles that explode in someone's truck... Regards, -- Joey Grasty jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] jgrasty(a)pts.mot.com [work -- designing pagers] "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin." -- John Von Neumann PGP = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7

1 0

Re: The "Secure" version of Netscape for Linux is *NOT*
by Alan Olsen 17 Dec '03

17 Dec '03

At 05:25 PM 8/1/96 -0700, Tom Weinstein wrote: >Alan Olsen wrote: >> >> I just installed the "secure" version of Netscape off of the "US Only" >> download site. >> >> Seems that it is actualy the international version and not the 128 bit >> version. > >What makes you think you got the export version? > >Here's one way to find out. If you look in the Security Preferences >panel under the Options menu, there are two "Configure" buttons for >configuring what ciphers are enabled for SSL 2 and SSL 3. The domestic >version supports a greater variety of options, including triple DES. I connected to my site running Stronghold 1.3b1. Only got 40 bit encryption. I then connected to Netscape's Store site. Only got 40 bit encryption. I checked the info box (or about box, I don't remember which) for the connection and it claimed to be running the "exportable" version. (The Win95 version connects properly to both sites with no tweaking needed.) I will double check, but neither site would connect with 128 bits straight out of the tar file. --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Southern Cracker Beer Bombs in Trucks
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:16 PM 8/1/96, Joey Grasty wrote: >* All joking aside, Jim is a very fine brewmaster. I just wish >he'd spend a few bucks and ferment in something other than 2 liter >coke bottles that explode in someone's truck... "Explode"? Is this one of those southern cracker beer bombs? Let's see...circumstantially, we've got: - a southerner - a truck - an explosion I'd say that if Jim is either overweight or has ever fired a gun, we've got an arrest before dawn. But we've got to hurry--NBC wants Katie Couric present at the bust. --Louis Freeh Buy a section of metal water pipe 1/2 by 6 inches long, threaded on both ends. Buy two metal caps to fit. These are standard items in hardware stores. Drill a 1/16th hole in the center of the pipe. This is easy with a good drill bit. Hanson is a good brand to use. Screw a metal cap tightly on one end. Fill the pipe to within 1/2 inch of the top with black powder. Do not pack the powder. Don't even tap the bottom of the pipe to make it settle. You want the powder loose. For maximum explosive effect, you need dry, fine powder sitting loose in a very rigid container.

1 0

Re: Southern Cracker Beer Bombs in Trucks
by jim bell 17 Dec '03

17 Dec '03

At 09:23 PM 8/1/96 -0700, Timothy C. May wrote: >Buy a section of metal water pipe 1/2 by 6 inches long, threaded on both >ends. Buy two metal caps to fit. These are standard items in hardware >stores. Drill a 1/16th hole in the center of the pipe. This is easy with a >good drill bit. Hanson is a good brand to use. Screw a metal cap tightly >on one end. Fill the pipe to within 1/2 inch of the top with black powder. >Do not pack >the powder. Don't even tap the bottom of the pipe to make it settle. You want >the powder loose. For maximum explosive effect, you need dry, fine powder >sitting loose in a very rigid container. For "safety" purposes (at least for the builder!) I would add that the threads on the pipe should be covered with a generous quantity of vaseline, grease, wax, or other similar material. Otherwise, the final tighten-up might cause an explosion if granules of powder get stuck in the threads and ignite due to friction. Evidence reduction tips: Discard drill bit used to make hole in pipe. Carefully avoid leaving any drill shavings in work area. Completely use/discard any extra powder/fuse not used in the bomb. (Chemical analysis will reveal similarity...) When tightening the pipe/cap, shield the work with a thick layer of folded-up paper towel or other material, so your Vice-Grips (or other such wrench, or vice) don't leave "tool marks" on the pipe. (Discard, by burning, such paper after use.) Jim Bell jimbell(a)pacifier.com

1 0

A funny thing happend to my data on the way to the bank
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- The Prime Minister's Social Security Number Prime Minister Binyamin Netanyahu's US Social Security Number is 172-42-6111, according to the Boston Consulting Group in Massachusetts, which employed Netanyahu for about one-year during 1979-80.=20 The number indicated by the marketing firm contradicts information contained in a credit report by the US federally-regulated Transunion Company, pulled from company files during the first days of July. According to that report, Netanyahu and an American named John J. Sullivan both used Social Security number 020-36-4537. Questions were raised in the reports as to whether Netanyahu had attempted to create a false identity or had used a number which was not his. Publication of the credit report findings, and later reports indicating that Netanyahu's name had suddenly been deleted from Transunion's files, raised additional questions about possible computer break-ins into the company's records. Netanyahu aides have repeatedly claimed that the prime minister does not remember his number. In order to untangle Netanyahu from the issue, aides three weeks ago, asked US officials to provide his number. According to the Prime Minister's Office, that request has yet to be answered. (Jerusalem Post e-mail Edition..7/31.. heather(a)jpost.co.il) =20

2 1

Re: The "Secure" version of Netscape for Linux is *NOT*
by Alan Olsen 17 Dec '03

17 Dec '03

At 08:31 PM 8/1/96 -0700, Alan Olsen wrote: >At 05:25 PM 8/1/96 -0700, Tom Weinstein wrote: >>Alan Olsen wrote: >>> >>> I just installed the "secure" version of Netscape off of the "US Only" >>> download site. >>> >>> Seems that it is actualy the international version and not the 128 bit >>> version. >> >>What makes you think you got the export version? >> >>Here's one way to find out. If you look in the Security Preferences >>panel under the Options menu, there are two "Configure" buttons for >>configuring what ciphers are enabled for SSL 2 and SSL 3. The domestic >>version supports a greater variety of options, including triple DES. > >I connected to my site running Stronghold 1.3b1. Only got 40 bit >encryption. I then connected to Netscape's Store site. Only got 40 bit >encryption. I checked the info box (or about box, I don't remember which) >for the connection and it claimed to be running the "exportable" version. >(The Win95 version connects properly to both sites with no tweaking needed.) > >I will double check, but neither site would connect with 128 bits straight >out of the tar file. My apologies to everyone involved! I fucked up! There was a period of time between when I downloaded and when I installed. The version I installed was not the one I installed from the secure site. (I had thought I had not downloaded the 3.0b5 version for Linux, except for the secure version. It seems that I had downloaded it when the first version of 3.0b5 came out, not the 3.0b5a version...) Sorry again! --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Re: Is 1024-bit PGP key enough?
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:16 PM 8/1/96 -0400, "Geoffrey C. Grabow" <gcg(a)pb.net> wrote: >Also, remember that although the PGP key is 1024 bits, it generates a much >smaller IDEA key with 56 bits (I think... anyone?). The 56 bit key is >vunerable to that $1 mil mystery machine that the NSA may or may not have. The PGP RSA keysize is user-selectable. The IDEA key is not 56 bits (that's DES) - it's 128 bits, and remember that you currently need to use brute force keysearch on it, unlike RSA keys which have to be much longer because they have special forms and can be cracked by prime-number searching, which is a much faster process that doesn't have to try anything near to every 1024-bit number. As somebody else pointed out, the 128-bit IDEA key is about as strong as a 3000-bit RSA key - though that was before the latest factoring algorithm was demonstrated to work so well, which means that it's probably about as strong as a 4-5000-bit RSA key. > | That which does not kill us, makes us stranger. - Trevor Goodchild | :-) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # Dispel Authority!

1 0

Re: Internal Passports (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 1 Aug 1996 18:53:57 -0700 (MST) > From: drose(a)AZStarNet.com (David M. Rose) > Subject: Re: Internal Passports > > OK. But I sure would like to have an automatic weapon for > self/home/"national" defense w/o going through a tremendous amount of B.S. > (as Israelis are excused from). I believe that you Texans and we Arizonans > have the privilege; in "urban" states, where the need truly is, good luck. We have to go through the same BS that you do to get automatic weapons. > Also, I don't know what your experience in the Middle East is. Me, I worked > in Iran and exited just before the Jan. '79 "revolution". Menace & murder. > You *really* have no idea. Hint: I'm alive. > > If you still (I don't know your age) think that humans are all the same, but > we juss gots diffrunt colors 'n' cultures, I *strongly* recommend an > extended period of travel to the third world. I do and I have. Jim Choate

1 0

Re: fbi, crypto, and defcon
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:50 AM 8/2/96 EDT, Paul J. Bell wrote: >i, for one, and perhaps others on the list as well, would be interested in hearing >what you mean when you say, "At&t, Microsoft, etc) who are ripping people off on a >daily basis". I don't know about Microsoft but certainly AT&T long benefitted from local telephone monopolies that resulted in increased prices and slower innovation than would otherwise have been delivered. Even today, long distance carriers are licensed and there are substantial regulatory barriers to entry. International calls still are made under the control of an international cartel of governments that keep prices way above competitive levels. This benefits AT&T and the rest. Since it costs 2 cents a minute to *produce* a call to London from New York the 45 cents to $1 a minute charged represent an excessive price protected by the government regulated cartel status of telecoms even in the Age of Deregulation. AT&T should get honest work as should the others. Maybe when I get a 10 (25?) mbps cable connection to the nets, I'll start offering my neighbors net connections and LD phone service. I could make a pretty penny even savagely cutting the telco's markup. Lots of challenges ther but doable. DCF

1 0