- cypherpunks-legacy - lists.cpunks.org

I need exportable crypto revisited.
by Darrell Perko 17 Dec '03

17 Dec '03

Greetings; Thank you all for your amazingly quick responses! However, I should have noted in my original message that this encryption is to meet a contractual point for a commercial product to be delivered soon. The product can have one and one only version to be boxed and shipped and will be sold internationally. The encryption portion will be dynamically linked, so real encryption will be available on the net just not in the box. Thanks, Darrell Perko dperko(a)efn.org

4 3

[NOISE]More meaty CDA material
by stevenw＠best.com 17 Dec '03

17 Dec '03

Forwarded: The article starts with "SAN ANTONIO, Texas -- You motherfuckers in Congress have dropped over the edge of the earth this time." and gets better. >The American Reporter, working in conjunction with other groups opposed >to the CDA, commissioned a writer to produce a special article to >celebrate Clinton's signing of the new the law. > >Steve Russell, the author, retired after 16 years as a trial judge >in Texas and is an Assistant Professor of Criminal Justice at the >University of Texas at San Antonio. > >This article was specifically and carefully designed to be completely >and utterly in breach of the CDA. If you are opposed to the CDA and >you are not offended by the "seven bad words", you'll probably find >it highly entertaining and insightful. > >OTOH, if you are easily offended and don't like bad language, JUST >DON'T READ IT. > >If you are easily offended and like to be offended and then like to >file Police Reports, please go ahead. After all it was written to >help ensure that the CDA gets challenged in the courts as soon as >possible. > >Here's the URL and don't tell me I didn't warn you: > >http://www.newshare.com/Reporter/today.html > > >-- >|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| >| Malcolm Hoar "The more I practice, the luckier I get". | >| malch(a)malch.com Gary Player. | >| http://www.malch.com/ Shpx gur PQN. | >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ------------------------------------------------------------------------- Steven Weller | "The Internet, of course, is more | than just a place to find pictures | of people having sex with dogs." stevenw(a)best.com | -- Time Magazine, 3 July 1995

1 0

Updated type2.list/pubring.mix
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Everyone, I just put up an updated type2.list/pubring.mix on vishnu.alias.net. I took armadillo out as it has not been responding to pings or to requests to the owner as to it's status. If I hear from the owner, I'll add it back. John Perry - KG5RG - perry(a)vishnu.alias.net - PGP-encrypted e-mail welcome! WWW - http://www.alias.net PGP 2.62 key for perry(a)vishnu.alias.net is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by mkpgp1.6b4, a Pine/PGP interface. iQEVAwUBMRwRFKghiWHnUu4JAQEeAwf+N+3sIloKkhVXqb2TnjpVt6UsmVyUcL6H ZkO2bck/9BsI8DBedr7hyxUni8ZUUOxN0SFZacoTbsvzOFeesYtRHNilApVq+qq/ ZaO3B2DOUyWbMMMtSRoMgjVDvzvmGmw6Z7Ayq6P1z6elWn9Jd+MqWSOjiv3qSSnu SbJmSvnT69eokrXxNSsmIQMRGxdH+r4A5i5iKN6x/9cNxl7AK55i6x10bcxEI5Yo BF2/3tsZiR664wIwrVRk2srdWfnOIAdvnsQbzJV3so57GvBfUid0JbBC96mThYHR Fs5m6PH9A7g5TXveNyylIFQZFRFyD2cq6QBGtPos0DFyAKn/6bp4aQ== =1hD1 -----END PGP SIGNATURE-----

1 0

Re: Certificates/Anonymity/Policy/True Names
by Rich Salz 17 Dec '03

17 Dec '03

I think there are many people who might be willing to use an "anon CA" should it exist: Whistleblowers, perhaps Deep Throat would have used email People writing letters to the editor who don't want to trust the editor to withhold their info People who desire anonymyity yet don't want to trust the gov't to certify their communications as authentic/forged (Unabomber, Om Shin-rkyo) Any number of writers who have used psuedonyms and now want to get paid in ecash; Mark Twain?

3 2

Re: NSA Security Manual
by Black Unicorn 17 Dec '03

17 Dec '03

Mr. Toal said : What I found interesting was that it was published in Phrack about a week ago, and nothing happened, but when Grady reposted it, suddenly phone-calls come aflying. Either this means that the NSA read Grady's posts more diligently than everyone else's, or Grady went out of his way to tell them that he'd posted it, which wouldn't surprise me... G <- This is partly up to Grady to verify, but I suspect the answer lies in the different frequency and lag time between examination of the net and examination of Phrack. Grady's probably just got noticed first.

1 0

NSA manual.
by Black Unicorn 17 Dec '03

17 Dec '03

Grady says: Actually I speculate that someone who saw my reposting helpfully phoned the NSA about the security breach. But SDO10 didn't give me that information... Grady <- Sorry for the bandwidth, this sounds more reasonable than any active scanning. -uni- (Dark)

1 0

Re: SSL Challenge #2
by Ian Goldberg 17 Dec '03

17 Dec '03

Is there a standard way we're supposed to get together to divvy up the keyspace? Not knowing of any, I'll just announce that I'm working on those keys that start with "a", from 0xafffffffff down to 0xa000000000. I seem to be getting about 200000 to 400000 keys/sec, so it should take about another 2 days (assuming the machines stay up that long...). If anyone wants to join in, feel free. Get original source from http://pauillac.inria.fr/~doligez/ssl/slave.c (Damien's code), and patch it with the diff at the bottom. Note: I don't think there's any crypto in the diff, and the rest of the sources are in France, so this should be OK with the spooks. But you never know... Compile the patched source on anything you can get, and run ./slave -t -d csclub.uwaterloo.ca 9114 The IP is 129.97.134.11 if you need it. You can add -v or -V for more verbosity, and -n num if you have num processors. - Ian "REALLY hoping I didn't screw up the code..." --- dist/slave.c Thu Aug 17 15:19:52 1995 +++ slave.c Sat Aug 19 13:54:25 1995 @@ -297,18 +297,18 @@ register int i; /* set up the block of data */ -#define x0 0xb894890e -#define x1 0x2eb90ebf - x2 = 0x00074450 + ((~stpoint << 4) & 0xff000000); -#define x4 0xa784af30 -#define x5 0x6913f879 -#define x6 0x539b2520 -#define x7 0x75ae60a0 -#define x8 0x90ebbf51 -#define x9 0xe10c2cf8 -#define x10 0x11ac18ea -#define x11 0x2114834c -#define x12 0x000080b6 +#define x0 0x9109c0fb +#define x1 0x15a61060 + x2 = 0x00368f3f + ((~stpoint << 4) & 0xff000000); +#define x4 0x7bea0730 +#define x5 0x61eb659d +#define x6 0x7441bbfa +#define x7 0x5f3a45e8 +#define x8 0x38e6d5c6 +#define x9 0xa1a88cd6 +#define x10 0xf82ecaae +#define x11 0x0296e2c8 +#define x12 0x000080a4 #define x13 0x00000000 #define x14 0x00000188 #define x15 0x00000000 @@ -506,7 +506,7 @@ int w; strcpy (progname, "worker"); - nice (40); + nice (5); while (1){ sock = open_socket (); if (sock == -1){ @@ -547,7 +547,11 @@ Verb1 ("SIGCHLD received\n"); while (1){ +#if 0 pid = wait3 ((void *) &chldstat, WNOHANG, NULL); +#else + pid = waitpid ((pid_t)-1, (void *) &chldstat, WNOHANG); +#endif if (pid <= 0) break; Verb2 ("got child: %ld\n", pid); for (i = 0; i < nproc; i++){ @@ -610,6 +614,7 @@ } } if (!ignore_ttys){ /* then look at ttys */ +#if 0 d = opendir ("/dev"); if (d == NULL) fatal ("opendir"); while (1){ @@ -629,6 +634,7 @@ } } if (errno) fatal ("readdir"); +#endif } } @@ -901,7 +907,7 @@ if (entry == NULL) fatal ("gethostbyname"); memcpy (&serverhost, entry, sizeof (serverhost)); - sanity_check (); + /* sanity_check (); */ speed_test (); init_devices (); supervisor ();

2 1

Spooks and Hackers Inc
by John Young 17 Dec '03

17 Dec '03

Eye-catching quote in the Info Week story on Internet theft: Another threat is the growing number of information brokers who use online communications to match buyers and sellers. An increasing number of these brokers -- many of whom are former government intelligence employees in the United States and Eastern Europe -- work closely with hackers dealing in illicit data. "The biggest security problem organizations face today is information brokers," says Dan White, national director of information security at Ernst & Young in Chicago. "Since the end of the Cold War there have been a lot of people trained in espionage who don't have a lot to do."

1 0

Re: REMAIL: pseudo-account remailer @andrew gains anonymous feature
by ub075＠freenet.victoria.bc.ca 17 Dec '03

17 Dec '03

> >I added an anonymous feature to my remailer. > >If you have an address of the form mg5n+eaxxx(a)andrew.cmu.edu, >anonymous mail can be sent to that address by changing it to the format: >mg5n+anxxx(a)andrew.cmu.edu >An encrypted reply address is created for the sender of the anonymous message. What happens if I already have an encrypted reply address? What happens if I already have SIX encrypted reply addresses? Which one is used? Or is *another* one created? -- Ryan Perkins - 1:340/13 | I feel that suicide jumpers see a glimpse of ub075(a)freenet.victoria.bc.ca | sanity as they throw themselves from the ledge. Ask for PGP 2.3 public key | That's why they scream all the way down. 8C5357 : 9F FF BA 93 54 D5 18 78 4B 1E DA GC E3 4E

3 4

THE ANTI-CLIPper
by Gary Jeffers 17 Dec '03

17 Dec '03

An excerpt from the THE SPOTLIGHT newspaper April 11, 1994 from its TECHNOLOGY & LIBERTY column. "TV THAT WATCHES YOU" "In a little-noticed agreement reported in Washington Technology Week Bell Atlantic, General Instruments Corporation, & the National Institute of Science & Technology(NIST) have agree to build Clipper chips into future General Instruments cable-TV boxes." "It's a landmark agreement, & the mainstream media has been virtually silent on the subject. But what does the agreement mean?" "For starters, it means your high-tech cable box of the future will have all the "privacy protection" of your Clinton Clipper telephone. It is designed to snitch on you." "For example, you'll soon be able to order merchandise through your high-tech cable TV. And the Clipper chip implanted in your cable box wil flag every purchase as yours. Maybe you contribute to church causes? Use your cable box for tithes & it could be "profiled". Do you watch pay- per-view movies? Big Brother could soon be critiquing your viewing habits." "Starting to get the picture? The Clipper chip is designed to auto- matically identify every cable TV transaction you make. It can report your favorite programs & films. It can mark your buying habits." "And since Clipper's actual capabilities are still top-secret, it could theoretically be even more sinister. It could even contain logic to encrypt signals from monitoring equipment built into your cable box, such as a miniature video camera or infrared sensor (like the cameras & sensors already built into experimental cable boxes used by the Arbitron & Nielson rating services to monitor who is in the room with the TV on)." "General Instruments Corporation (GI) has a near-monopoly on the production of home cable-TV receivers. As a result, the "quiet" Clipper agreement virtually assures that Clipper chips will be insin- uated into the cable boxes of almost 90% of American's cable sub- scribers, all of whom have GI's cable equipment." This looks like really bad news to me! Maybe the free market could help? How about "CLIPPER FREE" labels on small companies cable_TV receivers. If the company could get away with it, it might really help their sales. Maybe foreign companies could come in with Clipper-frees? They could scream trade- war if the feds tried to stop them. American companies could then claim unfair restrictions were keeping them from being competitive. An even better possibility presents itself! How about the poss- ibility of a pirate cottage industry in disabling Clipper chips. Would the TV work with a broken Clipper. How about jumping around the Clipper chip? If that doesn't work, then an anti-clipper chip that goes in parallel or in series with the Clipper or replaces it? I don't know much about electronics. There has been for years a small in- dustry in producing "pirate" cable boxes. Imagine the possibilities with the anti-chip business. Electronic hackers working their way though college by installing off-shore produced anti-Clipper chips. Also individuals making a living from this or a good moonlighting job. If the feds outlaw this - THEN EVEN BETTER! An off the books, non-taxed business employing skilled technical people & habituating the population to engaging in federally unlawful activities! I predict that in coming years, the productive general population is going to become boldly contemptful of the big state. In this atmosphere, anti-Clipper activity will be well received & popularly endorsed. We will see a booming underground electronic privacy industry. What would the new chip's name be? THE ANTI-CLIPper? THE FREEDOM CHIP? THE WACO? THE WEAVER FAMILY? THE ANARCHIST CHIP? THE EQUALIZER CHIP? THE CYPHERPUNK CHIP? THE PRIVACY CHIP? THE YOU'LL-MIND-YOUR-OWN-DAM'D-BUSINESS CHIP? THE NEUROMANCER CHIP? THE ANTI-STATE CHIP? THE REVOLT CHIP? THE CLIP CLIPPER CHIP? THE NO-FEDS CHIP? THE CLIPPER CLIPPER CHIP? Yours Truly, Gary Jeffers PUSH EM BACK! PUSH EM BACK! WWWWAAAYYYY BBAAACCCKKK! BBBEEEAAATTTT STATE!

1 0