- cypherpunks-legacy - lists.cpunks.org

No Subject
by Freedom Remailer 17 Dec '03

17 Dec '03

> Newsgroups: alt.privacy.anon-server > From: shamrock(a)netcom.com (Lucky Green) > Subject: The subtle danger of using Mixmaster > Message-ID: <shamrock-2409951151310001(a)192.0.2.1> > Sender: shamrock(a)netcom19.netcom.com > Organization: NETCOM On-line Communication Services (408 261-4700 guest) > X-Newsreader: Yet Another NewsWatcher 2.0 > Date: Sun, 24 Sep 1995 19:51:30 GMT > Lines: 19 > > There are about twenty Mixmaster remailers. Reason to celebrate? Hardly. > Though we have more remailers than ever, I doubt that the twenty or so > Mixmasters are operated my more than six or seven people. I would not be > surprised to find out that some folks are running several Mixmasters on > the _same_ machine, using different IP addresses. > > While the enthusiasm for increasing the number of remailers is > understandable, the operation of more than one Mixmaster by the same > person is downright dangerous, because it reduces the effective lenght of > the remailer chain. The message that you sent through five remailers may > have only been handled by two operators. When you thought that five people > had to colaborate to trace your email, only two are in fact required to do > so. > > Comments? > > -- > -- Lucky Green <mailto:shamrock@netcom.com> > PGP encrypted mail preferred. >

1 0

WARNING - Major Investigation May Involve You
by 43809380＠msn.com 17 Dec '03

17 Dec '03

ARE YOU BEING INVESTIGATED???? Learn the Internet tools that are used to investigate you, your friends, neighbors, enemies, Employees or anyone else! My huge report "SNOOPING THE INTERNET" of Internet sites will give you... * Thousands of Internet locations to look up people, credit, Social security, current or past employment, Driving records, medical information, addresses, phone numbers, Maps to city locations... Every day the media (television, radio, and newspapers) are full of stories about PERSONAL INFORMATION being used, traded, and sold over the Internet... usually without your permission or knowledge. With my report I show you HOW IT'S DONE!!! It's amazing.. Locate a debtor that is hiding, or get help in finding hidden assets. * Find that old romantic interest. * Find e-mail, telephone or address information on just about anyone! Unlisted phone numbers can often be found through some of these sites!! Perhaps you're working on a family "tree" or history. The Internet turns what once was years of work into hours of DISCOVERY & INFORMATION. Check birth, death, adoption or social security records. MILITARY Check service records of Army, Navy, Air Force or Marine Corps. Find out who's been telling the truth and who's been lying. Perhaps you can uncover the next lying politician!!! FELLOW EMPLOYEES; * Find out if your fellow employee was jailed on sex charges, or has other "skeletons" in the closet!! PERFORM BACKGROUD CHECKS; Check credit, driving or criminal records, Verify income or educational claims, Find out Military history and discipline, previous political affiliations, etc. YOUR KID'S FRIENDS; Find out the background of your children's friends & dates. WHATS THE LAW? STOP GUESSING!! * Look up laws, direct from law libraries around the world. Is that new business plan legal?? NEW JOB? NEW TOWN? NEW LIFE? Employment ads from around the world can be found on the Internet. Get a new job and disappear! The Internet can tell you just about ANYTHING, if you know WHERE to look. BONUS REPORT!!!! Check your credit report and use the Internet to force credit bureaus to remove derogatory information. My special BONUS REPORT included as part of the "SNOOPING THE INTERNET" collection reveals all sorts of credit tricks, legal and for "information purposes only" some of the ILLEGAL tricks. Research YOURSELF first! What you find will scare you. If you believe that the information that is compiled on you should be as easily available to you as it is to those who compile it, then. . . You want to order the SNOOPING THE INTERNET report I've put together. This huge report is WHERE YOU START! Once you locate these FREE private, college and government web sites, you'll find even MORE links to information search engines! YOU CAN FIND OUT ANYTHING ABOUT ANYBODY ANY TIME using the Internet!!!! 1) WE TAKE: AMERICAN EXPRESS <> VISA <> MASTERCARD TYPE OF CARD AMX/VISA/MC??____________________ NAME ON CREDIT CARD___________________________ CREDIT CARD #___________________________________ BILLING ADDRESS ________________________________ CITY_____________________________________________ STATE________________ZIP________________________ PHONE INCLUDE AREA CODE______________________ WE WILL BILL 39.95 to your account SALES TAX (2.90) added to CA residents >>> Send $39.95 ($42.85 in CA) cash, check or money order to: >>> CASINO CHICO >>> Background Investigations Division >>> 305 Nord Ave. >>> P.O. Box 4191 >>> Chico, CA 95927-4191 2) Send the same above requested credit card information to above address. 3) Fax the same above credit card information to 916-895-8470 4) Call phone # 916-876-4285. This is a 24 hour phone number to place a CREDIT CARD order. I will RUSH back to you SAME DAY my "SNOOPING THE INTERNET" report! Log on to the Internet and in moments you will fully understand... What information is available -- and exact Internet site to get there! 2nd BONUS!!!! Along with the report we will send a 3 1/2" disk with sites already "HOT LINKED". No need to type in those addresses. Simply click on the URL address and "PRESTO" you are at the web site!!! Personal ads, logs of personal e-mail, mention of individuals anywhere on the Internet are "your for the taking" with this report. Lists of resources to find even more information (private Investigation companies, etc..) Order surveillance equipment (if legal in your state) Send anonymous e-mail Research companies Research technology Locate military records FIND INFORMATION ON CRIMINALS Find Wanted fugitives - perhaps even a close associate! ABSOLUTE SATISIFACTION GUARANTEED: Your satisfaction is 100% guaranteed, just return the material For a full refund within 30 days if you aren't 100% satisfied. Copyright 1997 All Rights Reserved R Jon Scott Hall Publications. THIS IS NOT A FRANK MULLEN / CYBER PRODUCTS / SPYMASTER PUBLICATION

1 0

Re: unSAFE won't pass?
by Vin McLellan 17 Dec '03

17 Dec '03

Will Rodger <rodger(a)worldnet.att.net> declared: >It may make for good copy, but I think it's just fantasy to think the >administration or their opponents, for that matter, will get what >they want this year. Let them swarm. Who cares. > >At earliest, August of 1998 before anything passes - and even that is >highly optimistic. Will: Could you please explain the logic, numbers, and procedural limitations of congressional action that lead you to this conclusion? Why not now? Why not between now and August '98? Why the deadline/target-date of August '98? Suerte, _Vin "Cryptography is like literacy in the Dark Ages. Infinitely potent, for good and ill... yet basically an intellectual construct, an idea, which by its nature will resist efforts to restrict it to bureaucrats and others who deem only themselves worthy of such Privilege." _ A thinking man's Creed for Crypto/ vbm. * Vin McLellan + The Privacy Guild + <vin(a)shore.net> * 53 Nichols St., Chelsea, MA 02150 USA <617> 884-5548

1 0

Re: Crypto APIs
by James A. Donald 17 Dec '03

17 Dec '03

At 04:29 PM 10/2/95 -0400, Matt Blaze wrote: > It seems best to encourage the realistic > side of NSA as much as possible... Why? Surely the realists are more dangerous than the nuts. > [...] > > In other > words, the parts of the military that are concerned with actually > securing communications want exactly what we want, and are just > starting to realize it. This does not necessarily protect our right to cryptography, any more than it protects our right to full auto guns. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

is this a bug of Netscape
by John Cheng 17 Dec '03

17 Dec '03

If you go to http://c.gp.cs.cmu.edu:5103/prog/webster, you will get a input textbox and two buttons, leave textbox blank and push Look Up Definition button, you will get a GPF? I am using Netscape V1.2N for windows. Sorry if you have knew it. J

1 0

Oct 14 mtg - focus on java
by mrm＠netcom.com 17 Dec '03

17 Dec '03

Hi - The Oct 14 cypherpunks meeting will be focussing on Java topics. I'm putting together an agenda, and finalizing the meeting location. It looks like we'll have someone from the Java group at Sun to talk about what the current Java security policy is, and about Java and HotJava security mechanisms. Doug Barnes and Amanda Chou will talk about JCrypt, which is a set of Java wrappers for existing C encryption routines. If you'd like to talk at the Oct 14 meeting, please send me email with a description of your project, and I'll schedule you in. I'll send out mail early next week with the agenda, and letting you know where the meeting will be held. I'm trying to get a large conference room at one of the Sun facilities. Marianne mrm(a)netcom.com mrm(a)eng.sun.com

1 0

Re: Rethinking the utility of netnews "cancel" control messages
by Rich Salz 17 Dec '03

17 Dec '03

Sigh. >Replacing cancel with setaside makes Usenet architecture useful for >many business semantics/requirements. That's not something I'm willing to Sigh. useLESS for many ...

1 0

GC Tech GlobeID pilot
by rah＠shipwright.com 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: pays(a)edelweb.fr Mime-Version: 1.0 Date: Fri, 6 Oct 1995 00:46:46 +0100 To: Amir Herzberg <amir(a)watson.ibm.com> From: pays(a)gctech.edelweb.fr (Paul-Andre Pays) Subject: GC Tech GlobeID pilot Cc: e-payment(a)cc.bellcore.com, ietf-payments(a)cc.bellcore.com, www-buyinfo(a)allegra.att.com As it seems everyone is broadcasting URL about electronic payment systems, let me propose http://globeid.gctech.fr/cgi-gid/welcome?Language=English which does no lead to a specification but the Globe Online, Globe ID pilot setup By GC Tech. Sorry only a few pages are available in english by now. English and some other languages wil be available within a few weeks Sorry again, but because real content is and will be available we commited to deliver only a few hundreds Web Wallets for this pilot. You can still use the web form to apply for one... -- PAP _________________________________________________________________________ PAP: paul-andre.pays(a)gctech.edelWeb.fr tel: +33 1 34 52 00 88 fax: +33 1 34 52 25 26 GC Tech "The Globe Online and Globe ID Technology Company" http://www.globeonline.fr/ http://www.gctech.fr/ --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Re: Simple Hardware RNG Idea
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 8:20 PM 10/5/95, Simon Spero wrote: >On Thu, 5 Oct 1995, Norman Hardy wrote: .... >> You presumably use the oddness of the count for your random bit in some >> predetermined time interval. External radiation can change, but not bias >> the parity. If the counter saturates, the counter may be biased towards one > >Hmmm. But isn't this method slightly biased? If the probability of N >events < the probability of N+1 events, wouldn't you need a large number >of events per bit to make the bias insignificant? .... What you really need is entropy (information). I propose concatenating several counts and sending them thru MD5. The counts are distributed the same way but are independent so that the entropy of the concatenation is the sum of the entropies. Each count has a Poisson distribution. That tells you how many bits of entropy there are in the input to the MD5. Take that many bits, rounded down, as your random bits. If there are an average of x bits in a time interval then the probability that the count will be exactly K is (x^K/(K!))exp(-x). That is the Poisson distribution. The entropy is then: - sum[i=0 to infinity] (x^K/(K!))exp(-x)log( (x^K/(K!))exp(-x)) = - sum[i=0 to infinity] (x^K/(K!))exp(-x)(log(x^K/(K!)) - x) = - sum[i=0 to infinity] (x^K/(K!))exp(-x)(K*log(x) - log(K!) - x) Here is a klutzy Scheme program to evaluate these: (define (sum g)(letrec ((ss (lambda (n) (if (= n 0) (g 0) (+ (g n) (ss (- n 1))))))) (ss 30))) (define (log2 x)(/ (log x)(log 2))) (define (fact n)(if (= n 0) 1 (* n (fact (- n 1))))) (define (p x k) (* (/ (expt x k)(fact k))(exp (- x)))) (define (en n)(sum (lambda(x) (let ((c (p x n))) (if (= c 0) 0 (* c (log2 c))))))) (en 1) => 2.07 (en 3) => 2.92 (en 10) => 3.73 (en 15) => 4.0 I.e. if 1 count is expected on average there are two bits of entropy in the count (supprising!) and if the count averages 10 then there are 3.7 bits worth. It goes up as the log. Before you bet your enterprise on this scheme consider that the math was done at 03:30 AM.

1 0

Re: subjective names and MITM
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:24 PM 10/5/95 -0400, Adam Shostack <adam(a)homeport.org> wrote: > The key does indeed have a high likelihood of being unique, >but dealing with 1024 bit identifiers could strain database systems, >especially when 100 well chosen bits would be than enough. If everybody in the world has a 1024-bit key, that's 750 GB; that's not bad at all by the time everybody in the world would have one, and you could do MD5s in about 100 GB, which is a little more convenient. Today, for 750 GB, you'd probably have tape in your system, or optical jukebox. But not everybody has one; on the other hand, I suppose individuals in well-heeled countries might end up with dozens of their own. On the other hand, the number of 1024-bit primes is something like 2^1023/log(2^1024) (if I remember right), or roughly 2^1013. The probability of two independent uniformly distributed primes matching is about 2^1023/2^32, which is still an astoundingly mindbogglingly LARGE number. If you've got 1024 bits of entropy in your input process, there will not _be_ any matches. (If people insist on using sources of randomness like clocks or user names, the chances are a lot higher....) Now, for 128-bit hashes, whether it's MD5 or just the near-bottom 128 key bits, by the time you get 2^64 of them together, you've got a 50% chance of a match. Not a problem, since you'll not likely need that many, even for the 2^33 people in the world. Still not a problem. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0