- cypherpunks-legacy - lists.cpunks.org

Re: Remailer hating Nazis (was Re: The BIG Lie (Jesus Confesses))
by Anonymous 17 Dec '03

17 Dec '03

At 12:54 PM 8/15/97 +0200, you wrote: > Strange that this claim should come from a variety of sources at >the same time the government is facing the embarassment of having to >whitwash the actions of heavily armed, camouflaged Marines who felt >so threatened by a goat-herder with a .22 rifle that they slaughtered >him with their M-16's, despite the fact that the child was an American >citizen, doing what he had every right to do, on American soil. FWIW, those murdering bastards got off the hook, because the jury believed they were "good soldiers", and I thought "Goodness must now mean how many innocents you kill while waiting to shoot a stoned Mexican carrying a bag of pot walking across the border. > The drug cartels are having such little trouble getting drugs into >the U.S. that cocaine and heroine are cheaper than a bottle of good >Scotch, yet, according to the government, they have decided that it >is necessary to perform actions which will "force" the government >to 'crack down' on border terrorism with increasing use of armed >force. Right... Hell, why not just declare martial law!? If were going to use marines as police, what next? The war on Goat-Herding Cartels!?!?!? I myself have never heard of a bunch of Heavily armed mexicans running over the border with explosives, automatic weapons, and Molotov Cocktails burning down houses, shooting marines, or blowing up buildings. >GiveMeAFuckingBreakMonger >"There is something wrong when U.S. armed forces murder American > schoolchildren on American soil, under an increasing number of > unconstitutional laws." KillThoseMurderingMarineBastardsMonger "There's something wrong when we replay prohibition and kill innocents in the process."

1 0

RSA Secure (disk encryption)
by Mike Ingle 17 Dec '03

17 Dec '03

RSA's home page (http://www.rsa.com) has a demo version of RSA Secure. This is a disk/directory encryption program that serves the same purpose as Secure Drive and SFS. According to their description, it allows you to select only certain files to be encrypted, and uses 80-bit RC4. The demo/export version is only 40 bits. It also has optional key escrow. You can choose to escrow a key by secret-sharing it and giving pieces to various people. There is a threshold system so m of n people have to cooperate to decrypt it. Mike

1 0

Re: McVeigh to die, quotes Brandeis
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Declan McCullagh wrote: > <B>By SANDY SHORE<P> > <B>Associated Press Writer<P> > DENVER (AP) - Timothy McVeigh was formally sentenced to death > today for the Oklahoma City bombing after he quoted Supreme Court Justice > Louis Brandeis that the government "teaches the whole people by its > example." And the morning news anchor on CBS tells the country, "McVeigh's statement is open to a wide variety of conflicting interpretations." (I guess he hasn't been following the news too closely.) Did anyone else on the CypherPunks list interpret McVeigh's statement to mean that the people should lie, steal, and oppress others, or am I the only one who interpreted it this way? Or perhaps he meant we should murder anyone who claims to be Jesus, as well as the men, women and children who believe in him. Been there, done that... Pontius Pilate

1 0

Re: Mixmaster Security Issues
by loki＠obscura.com 17 Dec '03

17 Dec '03

At 8:45 PM 8/30/95, Russell Nelson wrote: > Date: Wed, 30 Aug 1995 18:17:02 -0700 > >Can't answer all of your questions, but I'll answer the ones I can, >which will save time for someone else to answer the rest of them. > > Apart from thwarting traffic analysis attacks, how does the security > of a Mixmaster Type II remailer packet compare to that of a > PGP-chained Type I message? > >Well, on the one hand, PGP uses IDEA, which is arguably better than >triple-DES, but PGP also only uses the key length(s) of choice, which >is to say that if you use the minimum length, you have very little >security. Also, Mixmaster packets remain the same length from hop to >hop, so they are harder to track. I am not sure this is the consensus opinion. Three key triple DES uses 168 bits of key, whereas IDEA only (only?!?) uses 128. DES is also much better studied and understood. IDEA is still a young algorithm (though close to the heart of every cypherpunk). The rest of what you said looks good. Too bad I did not see it before I typed my own answer ;) ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Re: C2.ORG REMAILER
by Tim Scanlon 17 Dec '03

17 Dec '03

Sorry for my last empty message, it's late & i confuse the "deliver" icon with the "mail format" icon (I was attempting to change the type from NeXTmail to plain text) I don't see why an anonymous remailer can't be set up in some country with an inet connection, but with little respect for idiocy originating from other countries & in particular the US. Allot of that issue is treaty dependent and that's probably what people should look at. I like what people are doing well enough, don't get me wrong. But the vulnerability exists via co-operative law enforcment arrangments & legal venue operations. That's the stuff of treaty's. I think probably an appropriate place could be found & arranged with some effort at this point. Hell there's GOT to be some countries out there that would have little respect for the antics of the Church 'o Bucks who'd be intrested in it. Stick the database on an encrypted partition, and arrange a a two party setup on the keys & administration and it'd make them a damn bit harder to retrieve anyhow... "I'd comply, but I don't have the keys, and the keyholder is refusing contact. And NO I don't know his 'True Name' and can't find him." That'd make things a tad rough, and isn't illigal anyplace that I'm aware of. Call it "Apllied Stenography" (Sorry about the pun, but I couldn't resist it :> Tim Scanlon ________________________________________________________________ tfs(a)vampire.science.gmu.edu (NeXTmail, MIME) Tim Scanlon George Mason University (PGP key avail.) Public Affairs I speak for myself, but often claim demonic possession

1 0

O.J. ObCrypto: Fuhrman's Folly Fans Fakery Fears...
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

Regardless of whether Ito allows the tapes into evidence, the public has heard a LEO matter-of-factly discussing the fabrication of evidence against US citizens. We should take advantage of this, by connecting the Fuhrman/Good Ole Boys from BFART bit, and GACK. If my private key must be escrowed with Lawn Forcement Agencies, the very real possibility exists of a Fuhrman using it to forge evidence against me. In =any= Key Escrow arrangement (including the non- government variety preferred by 4 out of 5 Cypherpunks in a recent survey) there must be a division between encryption keys and signature keys. I recommend that anyone who will be using escrowed keys generate two pairs: First, the signature key, including in the userid some kind of [sig use] identifier (we should settle on a standard abbreviation for this) follower by the encryption key. This way, when a person gets your pubkeys, they get the encryption key =last=, which gets it searched first whenever they PGP -e... something. Whatever arrangements are made for escrowing my encryption key, =nobody= gets my signature key. If I am fired, quit, become brain damaged or dead, my key can never be used by anyone to implicate me in any criminal activity. Please don't mention to anyone the fact that my signature key can be used to send me something that even the escrow agents can't read.... * --- * Monster(a)FAmend.Com *

1 0

Poisson numbers for random keyspace assignment
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

[Great statistical summary deleted] TC> * For opportunistic attacks on keys in challenges, the odds are 95% that a TC> key will be found with only twice the total effort (or time) using a TC> totally random method of picking up keyspace to search. The odds can be improved somewhat by scaling the granularity of the sweep to the size of the sweep. (Align larger chunks on large-chunk boundaries, eliminating the chance of overlap with other large chunks.) TC> * This is probably good enough. (And if one only wants to be 90% sure of TC> finding the key, even less effort is needed.) The best advantage of the random method is that it allows people to participate completely anonymously, as there is nothing to report save the Eureka!, and that can be done through a remailer anyway. When the challenge is solved, everyone can stop cracking. It is one thing to work on an academic exercise, but the =real= test is how well the resources could actually be marshalled for a =real= attack. The requirement of leaving an audit trail to participate reduces the supply of volunteers. This approach can not be challenged as unrealistic. The whole thing can be managed via Imail, which I must point out to you Totally Connected People, is the least-common denominator for participation here. You have =lots= of people out here who would like to join the Cypherpunks Brute Squad (We gotta get T-shirts for this one!) but don't have WWW access. * John was a complete D**k, until Lorena got through with him. --- * Monster(a)FAmend.Com *

2 1

Re: CIA & Espionage
by Bill Stewart 17 Dec '03

17 Dec '03

>> >It was said that Pres. Clinton had given a speech while >> >visiting the CIA HQ in Langley/Virginia. He allegedly >> >said in this speech that obtaining industrial >> >informations has the highest priority and this were the >> >new task for the spies. Did he really say the priority was stealing information from other people, or only protecting Big American Companies from those nasty French Spy Agency persons? (Clinton being who he is, I'd expect him to say a politically correct version of the latter, whether he means the former or not, just like his predecessor.) #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

UK Guardian article on 2nd SSL breaking
by nobody＠flame.alias.net 17 Dec '03

17 Dec '03

from the "uk-pipeline": >>>>>>>>>>>>>>>>>>>> CYPHERPUNKS LEAD NETSCAPE'S NAVIGATOR ASTRAY A team of computer experts has succeeded in breaking the secure 'key' used on international versions of the World-Wide Web browser, Netscape Navigator. The key would normally have been used to secure transmission of sensitive information, such as credit card details, between a Web-surfer and a Web site, such as an on-line shopping service. However, the cypherpunks, as they are known, only cracked the 40-bit key that is used by export versions of Netscape Navigator, since US Government regulations prevent the export of software that uses stronger cryptographic techniques. "We have, quite categorically, demonstrated that 40-bit keys are too weak to use for commercial systems," said Dr. Piete Brookes, a computer officer at Cambridge University who managed the project. The code cracking took 31 hours and 47 minutes of computer time on around 300 machines strung across the internet. The team was able to crack the code because they had been provided with the transcript of a secure transmission. Such transcripts are not impossible to acquire, according to Dr. Brookes: "All you need is a tap on the line, or access to a computer in a suitable part of the network.". The 128-bit key used by American versions of Netscape Navigator is "well out of reach of any hacker groups in the forseeable future." He estimates it would take one billion, billion, billion, billion years to break. Azeem Azhar Further information can be found on the World-Wide Web at http://www.dcs.ex.ac.uk/~aba/ >>>>>>>>>>>>>>>>>>>>

1 0

Re: Remailer hating Nazis
by Ratprick Oink 17 Dec '03

17 Dec '03

Patrick Oonk stuttered and drooled: > An Anonymous Coward wrote: > > The remailer hating Nazi called Patrick Oonk wrote: > > >At least I don't hide behind a remailer. > > There's no cowardice to it, dumbass. Our founding fathers and others wrote things anonymously. I guess they're cowards? > I wrote two remailer programs, I ran several remailers, and I am working > on bugfixes for replay. Did you shut down those "several remailers" out of...cowardice? > Flaming me through a remailer is the equivalent of shouting > 'hey asshole!' and then running away. Sorry to hear you have such a low opinion of those who use anonymous remailers. Is your work on remailers an 'ego' thing, or are you a cop? > I also cannot reply to you privately, so all other members of > this mailinglist have to suffer our private flamewar. You want to "hide behind" private email? Ashamed of your beliefs and don't want them made public? When did this become a "private" flamewar, shit-for-brains? Are you under the mistaken impression that your public post to this list has drawn negative replies from only a single anonymous source? My heart, also, bleeds purple piss for the poor, fragile young cypherpunks who will suffer needlessly, perhaps being traumatized for life, by exposure to negative energy and obscene words like "dumbass." However, some of the older, more experienced members of the cypherpunks list have long ago learned to make the best of a bad situation, and amuse themselves by using their dick to press the <Delete> key. So spam me, big boy. Spam me. AnonymousCowardMonger

4 3