- cypherpunks-legacy - lists.cpunks.org

Re: Something of Interest
by John Young 17 Dec '03

17 Dec '03

JM provided IRS Inpsector message Number 5, which is earlier than the four I posted a while ago: Return-Path: <owner-pdg(a)ifi.uio.no> Date: Thu, 17 Jul 1997 12:25:26 -0400 From: IRS Inspection <irsnwpr(a)net.insp.irs.gov> Message-Id: <199707171625.MAA02707(a)net.insp.irs.gov> Starting with these 5 we'll put the full message headers we get at: http://jya.com/irs-header.txt And post here the brief version. JM also provided Treasury's mail echangers: >Checking DNS for MX records for net.insp.irs.gov >indicate (as shown below) three mail exchangers: > >QUESTIONS: > net.insp.irs.gov, type = MX, class = IN > >ANSWERS: > > -> net.insp.irs.gov > MX preference = 20, mail exchanger = tcs-gateway1.treas.gov > ttl = 86400 (1 day) > > -> net.insp.irs.gov > MX preference = 30, mail exchanger = gotcha.treas.gov > ttl = 86400 (1 day) > > -> net.insp.irs.gov > MX preference = 10, mail exchanger = tcs-gateway2.treas.gov > ttl = 86400 (1 day)

1 0

CREDIT CARD PRIVACY
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Jim Hart wrote: Most customers want more privacy, but when you think about it, there is not a whole hell of a lot they can do about it right now. If they want to get the status and flexibility of a credit card, they need to give up their privacy.... At this point Duncan Frissel will regail us with some wonderful scheme, understandable only to lawyers, that can be used to get credit cards under aliases, perfectly legal if you use a doubly nested corporate structure going through Aruba and the Caymans,...I won't comment on why most consumers have neglected that option.... Well, I imagine that is because he doesn't have a clue what he is talking about. In our upcoming Privacy Seminar, Duncan and I will discuss trivially simple ways to do just the thing Mr. Hart tells us can't be done. And, as Duncan says, "it'll be as legal as church on Sunday." Tune in to the Privacy Channel, Jim, you might actually learn something. The Privacy Seminar will start approximately 1 September. An announcement giving instructions on how to sign up will be made sometime this week. Stay tuned. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ m ka;sld fas;dlkf a;sdkflkj as;dlf jasd;lkfj

1 0

Re: Creating privacy crises: Society hacking
by rah＠shipwright.com 17 Dec '03

17 Dec '03

At 12:54 PM 8/22/94 -0400, wcs(a)anchor.ho.att.com (bill.stewart) said, >Mailing that information to everybody in Oregon would be expensive. >On the other hand, mailing it to everyone in the Oregon legislature, >the governor, the DMV honchos, and maybe a few other high honchos >could be interesting, and might not cost that much..... Hey! Representative Democracy! What a concept.... Cheers, Bob ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0

Re: In Search of Genuine DigiCash
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

> >I don't think any of us on this list is yet ready to present a plan to >real bankers. Eric Hughes has told me he agrees. Real bankers may be well ahead of everyone on this list. I'm told that Citibank has some very intriguing work pending at the patent office. It's for digital cash. -Peter Wayner

1 0

pgp -c,no initialization vector, possible bug, pgp 26ui
by 0x7CF5048D＠nowhere 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In pgp 2.6 UI When pgp is called with the -c switch, the routine idea_encryptfile in crypto.c is called from main in pgp.c. > status = idea_encryptfile( workfile, tempf, attempt_compression); >int idea_encryptfile(char *infile, char *outfile, > boolean attempt_compression) >{ > FILE *f; /* input file */ > FILE *g; /* output file */ > byte ideakey[16]; > struct hashedpw *hpw; Note that idea key is a 16 bytes. Now idea_encryptfile calls squish_and_idea_file in crypto.c with this 16 byte key. > /* Now compress the plaintext and encrypt it with IDEA... */ > squish_and_idea_file( ideakey, f, g, attempt_compression ); Now squish_and_idea_file calls idea_file in the module crypto.c with the same 16 byte key. >static int squish_and_idea_file(byte *ideakey, FILE *f, FILE *g, > boolean attempt_compression) >{

2 1

Transcript
by fhalper＠pilot.njin.net 17 Dec '03

17 Dec '03

Is there or will there be a transcript of the recent debate that Zimmerman was part of? Thanks, Reuben Halper

1 0

Re: Voluntary Governments? (Not)
by Blanc Weber 17 Dec '03

17 Dec '03

<delete if this subject does not give you heart-thumping thrills> From: Elton Wildermuth It's not the case that any use of force defines a government. It _is_ the case that only government pretends to be the sole arbiter of who may use force, and how much they may use. ...................................................................... There must exist cause which would inspire the use of force by an individual, and there should exist just cause for the use of it by a government as well. Realistically there should be a recognition of when it might be logical to resort to violence against another human, whether as an individual or as a group. Only a government pretends to be the sole arbiter of who may use force; of course, everyone is supposed to have agreed on what justifies the use of it, but this is interpreted to mean that individuals themselves are not considered wise enough to make that decision at home alone. So they're back to a defense-less state against potentially overwhelming odds. Blanc

1 0

Adam Smiths Money World
by Brian D Williams 17 Dec '03

17 Dec '03

'Punksters, For those who missed it, the PBS show "Adam Smiths Money World" was on privacy in the information age. It spent alot of time demonstrating what was available on you if you knew where to look. It also profiled a company called "Kroll and Associates" that does big business doing Blacknet type dossiers on people and corporations. They apparently were able to trace more than 6 billion dollars of So-damm-Insanes secret bank accounts. This company supposedly does U.S. 50 mil a year in business. They also talked about the possibility of "reputation" companies reresenting your privacy interests. The big point was that privacy is drastically decreasing, and that privacy protection was a big growth industry. The unrestrained capitalism approach to the whole thing was very refreshing. Brian Williams Extropian Cypherpatriot "Cryptocosmology: Sufficently advanced communication is indistinguishable from noise." --Steve Witham "Have you ever had your phones tapped by the government? YOU WILL and the company that'll bring it to you.... AT&T" --James Speth

1 0

RE; creating privacy crises
by Brian D Williams 17 Dec '03

17 Dec '03

Want to launch a privacy crisis? Try anonymously posting a few adoption records! I've always thought this was an interesting area, information about the real you being kept from you. I won't start a diagression flame fest by going on about "adoption horror stories" ( Hmmm, interesting book idea there!) Brian Williams Extropian Cypherpatriot "Cryptocosmology: Sufficently advanced communication is indistinguishable from noise." --Steve Witham "Have you ever had your phones tapped by the government? YOU WILL and the company that'll bring it to you.... AT&T" --James Speth

1 0

Cracking passwords and picking locks
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

cactus(a)bibliob.slip.netcom.com (L. Todd Masco): >>Data crime - 'cracking', 'phreaking' etc usually reflect a total lack of >>responsibility on the part of _administrators_. "Officer, I left my wallet >>on the kerb 10 minutes ago, and now it's gone!" > >This sounds like typical kiddie-cracker garbage. It's more like, "Officer, > I didn't know that master locks could be picked with the greatest of ease: > arrest that man who picked it and took my wallet." >[encryption is more complex than master locks etc] I suppose it's obvious that I was not talking about the present, but future information society, a world where digital signatures and encryption are as familiar as combination locks and safes are today. I think it would be reasonable to assume a fair degree of knowledge on security on the part of system administrators - if by that time it's not widely known that plaintext or simple protection (un-shadowed passwords etc) can, like master locks, be 'picked with ease,' then all our efforts towards greater awareness of privacy and security would have failed. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0