- cypherpunks-legacy - lists.cpunks.org

Re: PGP Security
by jim bell 17 Dec '03

17 Dec '03

At 07:16 PM 3/20/97 -0600, Igor Chudov @ home wrote: >Mark M. wrote: >> >> Speaking as "XXXXXXXXX" (or, at least, one of the "XXXXXXXXXs"), I did receive >> the following message which originated from "TruthMonger." Shortly after I >> received the message, anon.nymserver.com closed down all of its free, >> anonymous accounts due to "abuse." >> > >This is mostly addressed to jimbell: jim, it is now obvious that >the remailer network is as weak as a 5 year old child. It cannot >possibly withstand even mildest forms of "abuse". > >Due to this fact, I question the viability of your assassination >politics idea as it does not seem possible to safely operate an >assassination bot. I don't doubt that remailers need to be strengthened to support a "classic AP" system. However, complicating (or, perhaps, simplifying; depending on your point of view...) the issue is the fact that an AP-type system is going to be inherently self-protecting: Even if I wasn't inclined to donate to see the death of anybody else, I'd want to protect the underlying system to ensure its continued existence. I (and some others) are convinced that an AP-system would totally eliminate the series of tyrannies that governments have been throughout history. That, if true, is a _very_ valuable accomplishment to most of us, one for which we'd be wise to pay to achieve. And generally, where there is a demand, a free market supplies that desire with a product. Jim Bell jimbell(a)pacifier.com

1 0

Re: UK govt. to ban PGP (was Re: UK TTP Paper)
by John Young 17 Dec '03

17 Dec '03

>: In Grey's words, ``All over Europe, the lights are going out'' >: >: Ross There does appear to be a coordinated global action to issue policies on TTP, GAK and the like at this time. OECD is due to shortly release its crypto policy, as is the USG according to BXA. The FBI issued its wiretap payment plan yesterday. Herson publically admitted the EU-FBI wiretap pact. All are apparently guided by The Wassenaar Arrangement amongst two dozen or so countries to act in concert, and to go public with dual-use controls in unison. So, Clint Brooks' comment at CFP about a new policy coming out for stronger crypto is a surely a harbinger of global GAK, in the guise of TTP or Key Recovery, as was speculated here, and as Rensch's statement to the House yesterday affirms. It's a policy sure to appeal to nationalists and chauvinists: strong protection for a nation's interest and commerce with GAK; without it no protection from predatory (rogue) nations (and criminals). But, as the Crypto AG engineer asked, "Who will protect us from NSA?" And its predatory clients and contractors, the Germans and French and others are asking, now that they are suffering the unilateral spying of their highest tech "friends."

3 2

Re: "why privacy" revisit
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:jonathan@gaw.net to Harka <=- In> when i talk to people like the Direct Marketer's Assn., they honestly In> don't understand what the fuss is about. Their attitude is, quite In> literally, "What's the harm being done here?" In> what do you think the community interested in privacy protection can In> do to best illustrate to the general public the "harm" in the In> collection of personal information? Information warfare. Collect information about DMA people, using their own weapons against them. Then post it somewhere on the Internet via remailers and cc themselves, Reuters and the New York Times... Ciao Harka ___ Blue Wave/386 v2.30 [NR] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMzSWbzltEBIEF0MBAQFOzQf/SmUYerwG8oIDVe+PucyAybBAYpMBl+JT eDl21Bs0jVa2+UXm8zDKQVDIkz004bTgpyX6vzockZ8cTUkW1UJJucjUfAXln1yB HmdR9Go5mdurGbXf4QSN47nbfPc5V5sq8h7Ok2frFRqKLBejPSuEdP2pZo0OUPQD bf0lE3l5lgTKlYqOzHt7NqHNAlcx3l0FOpflF+RR5DbLllBrIP7XYodMLMv+NR3T V0oEk0woReL4+/O8iQ1oZuQ3MHNXkwCqR8w2wXnlou9ysfS58nTXgoNyFYKouGlN Kc1bV2/G6mrG8PziTd3MsTL4TjdcmkdphZWVouo1LrEuhd3J5B4dBw== =rbtn -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

Gilmore is sabotaging the lists again
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

I cc:'d this to cypherpunks(a)cyberpass.com; one week later is bounced ]Subject: Returned mail: Cannot send message for 1 week ] ] ----- Transcript of session follows ----- ]While talking to www.cyberpass.com: ]>>> MAIL From:<dlv(a)bwalk.dm.com> ]<<< 451 queuename: Cannot create "qfIAA10925" in "/usr/spool/mqueue" (euid=35): Disc quota exceeded ] ] ----- Unsent message follows ----- ]To: kszczypi(a)tele.pw.edu.pl (Krzysztof Szczypiorski) ]Cc: cypherpunks(a)cyberpass.com ]Subject: The mysterious disappearance of 1400 subscribers and gateways ]From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) ]Comments: All power to the ZOG! ]Message-Id: <152L4D39w165w(a)bwalk.dm.com> ]Date: Sat, 15 Mar 97 09:01:23 EST ]In-Reply-To: <199703151216.NAA01640(a)titan.tele.pw.edu.pl> ]Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. ] ][cc:'d to c-punks who were wondering what happened to the 1400 lurkers ] ] ]kszczypi(a)tele.pw.edu.pl (Krzysztof Szczypiorski) writes: ] ]> Hi, I remember that you ara one of the most active people on cypherpunks ]> list. I've got the simple question: what the current status of cypherpunks ]> list is? Is the list moderated? The last posting that I've received is dated ]> on Feb 20... It was a couple of weeks ago.... :(( ] ]Cypherpunks is currently an unmoderated distributed list. You can send the ]command 'subscribe cypherpunks' to one of several sites: ] majordomo(a)algebra.com ] majordomo(a)ssz.com ] majordomo(a)cyberpass.com ] ]You can send submissions to cypherpunks@ any of these sites. ] ]If someone (Dale?) has saved the output from several 'who's over the last ]few months, it might be a good idea to e-mail them once and to tell them ]this. Apparently the new subscription instructions never made it to those ]who remained only on the moderated list. ] ]Wseho Nalepshego.

2 1

Re: BXA on Crypto Plans
by Peter Trei 17 Dec '03

17 Dec '03

> Date: Fri, 21 Mar 1997 08:42:22 -0500 > To: cypherpunks(a)toad.com > From: John Young <jya(a)pipeline.com> > Subject: BXA on Crypto Plans > Reply-to: John Young <jya(a)pipeline.com> > Excerpt of BXA head William Reinsch statement on Goodlatte's > SAFEncryption Bill HR 695 on March 20, 1997: > > [...] > To that end, > we will shortly submit legislation intended to do the following: > > Expressly confirm the freedom of domestic users to choose any > type or strength of encryption. > > Explicitly state that participation in the key management > infrastructure is voluntary. > I think we should ponder the validity of the underlying assumption here - that there will be *one* PKI system, and (speculating here) (i) the government sets what it's requirements are, and (ii) they will include compromising one's private keys. > > Offers, on a voluntary basis, firms that are in the business > of providing public cryptography keys the opportunity to > obtain government recognition, allowing them to market the > trustworthiness implied by government approval. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ This is a joke, right? Peter Trei trei(a)process.com Disclaimer: I do not represent my employer.

1 0

Re: Security of SSL proxies
by Peter Trei 17 Dec '03

17 Dec '03

pgut001(a)cs.auckland.ac.nz (Peter Gutmann) writes: > A number of vendors are now selling SSL proxies which implement secure > tunnelling for web browsers using a non-crippled SSL implementation running on > the client machine. Has anyone considered the total security level provided > by one of these systems? I can see three problems with this approach: > > 1. The security stops a few feet short of the browser, making a MITM attack > possible (see below). > > 2. Security and authentication is handled by the proxy and not the browser. > This means that the browser (and browser user) never get to see the usual > indicators that their connection is secure (or "secure" for non-US users). > > 3. If you use a proxy like this to protect traffic for an entire company, the > proxy provides the same type of target as a GAK key center: An attack which > compromises this compromises security for the entire company. [problems with this approach deleted] > Peter. I'm a little confused by your use of the term 'SSL proxy'. Netscape defined an extension to HTTP to allow SSL traffic through a firewall: the encrypted request is prepended (in clear) with the actual destination IP address and port. The firewall proxy then opens a TCP/IP channel to the actual destination/port, and blindly relays packets between the actual destination and the browser until one side or the other shuts down the link. The proxy does no encryption or decryption - in fact, it requires no crypto code at all. (BTW: this what setting the 'security proxy' field in Netscape is all about). The scheme has some drawbacks - there is no provision for chaining proxies. - the server can't determine the source browser's IP - it only sees the proxy's IP address. This makes it more difficult to filter requests based on source ID. - the proxy has no idea of the actual URL requested - proxies which want to filter or log requests based on URL can't do so. Or are you talking about something entirely different? Peter Trei (yes, I've implemented the above) trei(a)process.com

2 1

[PGP-USERS] JFYI: Austria goes offline
by Alec 17 Dec '03

17 Dec '03

>X-Sender: helmberg(a)mailhost.via.at >Date: Mon, 24 Mar 1997 16:07:03 +0100 >To: <pgp-users(a)rivertown.net> >From: Florian Helmberger <helmberg(a)via.at> >Subject: [PGP-USERS] JFYI: Austria goes offline > >-----BEGIN PGP SIGNED MESSAGE----- > >I thought this might be of interest for some of you guys... > >More info about this action is accessable at <http://www.internet.at>. > >*** > ==================== > Austria goes Offline > ==================== > > On Tuesday, 25.3.1997, Austria's ISPs are going to shutdown all their > Internet services from 16:00 to 18:00 MET. The reason for this unique > action is the recent seize of all computer equipment of a Viennese ISP > by the police as pieces of evidence. This official act was triggered by > a denunciation versus persons unknown regarding child pornography dating > 10.3.1996 (! one year ago !). > > Confiscation of equipment after more than one year doesn't seem to be > appropriate for securing evidence. The current legal status doesn't > clearly define the position of an ISP and doesn't specify general > guidelines for the responsibility of content of the Internet. With the > general shutdown Austria's ISPs are demonstrating the only mode of > operation which is evidently conforming to current law. > > Apart from the existing willingness for co-operation Austria's ISPs are, > at the same time, offering practical support for the legal authority > like free Internet access and training for their staff. > > From: "Christian Panigl, ACOnet/UniVie" >*** > >Best wishes, >Florian > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.3i >Charset: cp850 > >iQB1AwUBMzaYlHA6iYwSpSQNAQG5KgMAjeCROiykp0KxRhwBEtjrHgeK4wHqrTry >v1racUrPbqkIW1B9yLvc8yzkJ4v0+r1Bd7a2OBRbvcxm9TgtS8MzMy+vPumTgL7v >0kj3Qkt8NDYrU3nIHmrcriSlkZ8G7W7T >=Nk8a >-----END PGP SIGNATURE----- > >___________________________________________________________________________ >Florian Helmberger http://home.pages.de/~helmberg >------------------------------[Quote of the day]--------------------------- >"I am a marvellous housekeeper. Every time I leave a man, I keep his > house." > -- Zsa Zsa Gabor

1 0

Announce: list-abuse mailing list
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Mon, 24 Mar 1997 15:12:13 +7 From: "John Buckman" <jbuckman(a)shelby.com> Subject: Announce: list-abuse mailing list To: listmom-talk(a)skyweyr.com Precedence: Bulk Sender: "ListMom-Talk Discussion List" <listmom-talk(a)skyweyr.com> Reply-To: "ListMom-Talk Discussion List" <listmom-talk(a)skyweyr.com> On the list-managers list, I suggested that a mailing list discussing how to prevent mailing list abuse might be useful. Based on the strongly positive feedback I received about the idea, I've gone ahead and created a "list-abuse" mailing list. I apologize to members of "list-managers" who have already received this announcement. General instructions about joining "List-Abuse" are available at: http://clio.lyris.net/list-abuse/ Alternatively, you can send email to: join-list-abuse(a)clio.lyris.net About LIST-ABUSE: LIST-ABUSE is an Internet discussion group working to stop abuses of Internet mailing lists. In particular, we aim to stop mail bombs, spoofed-subscribers, denial of service attacks, and other forms of "Mailing List Terrorism". Mailing list administrators, authors of mailing list software, and others interested in mailing list abuse are welcome to join. John John Buckman <jbuckman(a)shelby.com> Shelby Group Ltd., http://www.shelby.com/ Developers of Lyris Email List Server --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

2 1

BXA InfoSys Meeting
by John Young 17 Dec '03

17 Dec '03

Federal Register: March 25, 1997: Bureau of Export Administration Information Systems Technical Advisory Committee; Notice of Partially Closed Meeting A meeting of the Information Systems Technical Advisory Committee will be held April 15 & 16, Room 1617M-2, in the Herbert C. Hoover Building, 14th Street between Constitution and Pennsylvania Avenues, N.W., Washington, D.C. This Committee advises the Office of the Assistant Secretary for Export Administration with respect to technical questions that affect the level of export controls applicable to information systems equipment and technology. April 15 Closed Session 9:00 a.m.-5:00 p.m. 1. Discussion of matters properly classified under Executive Order 12958, dealing with U.S. export control programs and strategic criteria related thereto. April 16 General Session 9:00 a.m.-12:00p.m. 2. Opening remarks by the Chairman. 3. Update on implementation of the Wassenaar Arrangement. 4. Presentation on Hewlett-Packard Company key-recovery products for the International Cryptographic Framework. 5. Comments or presentations by the public. Closed Session 1:00 p.m.-4:00 p.m. 6. Discussion of matters properly classified under Executive Order 12958, dealing with U.S. export control programs and strategic criteria related thereto. The General Session of the meeting is open to the public and a limited number of seats will be available. To the extent time permits, members of the public may present oral statements to the Committee. Written statements may be submitted at any time before or after the meeting. However, to facilitate distribution of public presentation materials to the Committee members, the Committee suggests that public presentation materials or comments be forwarded at least one week before the meeting to the address listed below: Ms. Lee Ann Carpenter, OAS/EA MS: 3886C, Bureau of Export Administration, U.S. Department of Commerce, Washington, D.C. 20230. ----- Note: EO 12958 covers classified national security information: http://jya.com/eo12958.txt (100K)

1 0

New Hampshire INTERNET SIG Meeting, Tuesday, April 1, 1997
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text To: nh-isig(a)bcs1.ziplink.net, isig(a)signet.org, talk(a)web-net.org, discuss(a)tarnhelm.blu.org, dubie(a)tnpubs.enet.dec.com, scryberdave <ltcdave(a)scryber.com> Subject: New Hampshire INTERNET SIG Meeting, Tuesday, April 1, 1997 Mime-Version: 1.0 Date: Tue, 25 Mar 97 09:55:47 -0500 From: "Jerry Feldman" <gaf(a)zk3.dec.com> X-Mts: smtp Sender: owner-isig(a)signet.org Precedence: bulk Reply-To: isig(a)signet.org When: Tuesday April 1, 1997 7PM Where: Nashua, NH Public Library, 2 Court St, Nashua, NH. Topic: Robert Hettinga, founding moderator of the Digital Commerce Society of Boston. The NH INTERNET SIG (Special Interest Group) welcomes you to its monthly meeting, the first Tuesday of every month. The next meeting will be on April 1st and will focus on the technology and social consequences of digital commerce and financial cryptography. Mr. Hettinga is also general chair of Financial Cryptography 1997, the world's first conference on Financial Cryptography. However, financial cryptography, the technology which underlies digital commerce in its most secure form, will have much more profound implications than merely the simplification of sales and distribution. It permits us to make anonymous *cash* transactions for everything from a billion-dollar foriegn exchange trade to, probably, the switching of internet packets themselves. If this promise is kept, it could change the fundamentals of our entire society. Please check out Mr. Hettinga's web site:http://www.vmeng.com/rah/ This meeting promises to be fun and informative for both the technical and non-technical computer users. For more information contact Ken Adams at (603) 598-1823 eMail: director(a)nh-isig.org For more information contact Jerry Feldman <gaf(a)signet.org>, NH-ISIG meeting coordinator.. Mailing list: nh-isig(a)bcs1.ziplink.net WWW: http://www.nh-isig.org NOTE: Empire.net is currently moving the web site to a new server. Please bear with us while the work is in progress. I have posted a more complete description and speaker bio at:http://www.gis.net/~gaf/hettinga.html Directions to the Nashua Public Library (Plenty of free parking after 5PM): >From south of Nashua: Take Route 3 North to Nashua. Take exit 5E, Route 111 East (Kinsley St., There is a Howard Johnson's Motel at the exit). Follow 111 East (Kinsley St.) to the fourth set of lights and Main St. North. Turn left onto Main St. and at the third set of lights turn right onto Temple St. Take Temple St. to 2nd left onto Cottage Avenue (Behind Indian Head Plaza) into Library's metered parking lot. (Meters in force 9AM to 5PM only). >From North of Nashua: Take the Everett Turnpike (Rte. 3) to Exit 7-E, 101A (Amherst St.) Follow 101A to major intersection and turn right onto Main St. Follow Main St. and turn left at the second set of lights onto Temple St. Take Temple St. to 2nd left onto Cottage Avenue (Behind Indian Head Plaza) into Library's metered parking lot. (Meters in force 9AM to 5PM only). -- +-------------------------------------------------------------+ Jerry Feldman gaf(a)SigNet.org New Hampshire Internet SIG Meeting Coordinator +-------------------------------------------------------------+ -- To unsubscribe from this list, send mail to majordomo(a)bcs1.ziplink.net with the following text in the *body* (*not* the subject line) of the letter: unsubscribe isig --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

1 0