- cypherpunks-legacy - lists.cpunks.org

Re: How can you protect a remailer's keys?
by Chris Adams 17 Dec '03

17 Dec '03

>> The best solution I could come up with (and was willing to write and use) >> is to specify the passphrase on the command line argument to the compiler >A far better solution would be to have a long-running daemon hold the >secret key. The mixmaster client could talk to the key daemon through >a unix-domain socket with the permission bits set such that only the >mixmaster user can connect. Each time the machine is rebooted, the >operator must start the daemon and give it a passphrase. >Second, if your machine is seized or someone gains unauthorized >physical access to it, the easiest way to get a root shell is by >rebooting single-user. However, if the only cleartext copy of a key >is in memory rather than in the filesystem, once the machine is >rebooted the secret key is lost. How about adding an "Oh s___" feature that would dump the key? You could even tie it to a login attempt (i.e. be sneaky and rename the actual root account to something else. Possibly hack the login client to return "root" as the username, etc, etc to complete the illusion if they are using TEMPEST. Then set it so that a root login makes the daemon dump the password) This would have possibilities, too, if you made it react to a) certain files in certain directories, b) certain signals or c) certain network messages. This would allow you to put in an innocous clear signal. Set it to a temp file created when editing your remailer's configuration (or userlist). Make it so that you have to conciously DISABLE security or it dumps the password. Have an innocent program terminate it. Be able to cancel it by sending an email (or using telnet) - this would be great if you had a trusted friend. Also, with some modification, you could set it to react to an external stimulus - say a panic button? or a card lock? You could even have fun putting all your sensitive stuff on an external hard drive and rigging your panic button to a) stop the remailer and b) activate the thermite charge on the external drive. // This was typed on a Warped PC by an equally warped Chris Adams <adamsc(a)io-online.com> // The Enigman Group - We do Web Pages! // Opinions expressed are not necessarily my own, much less another's. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: forged addresses
by Chris Adams 17 Dec '03

17 Dec '03

On 29 May 1996 19:38:16 pdt, nobody(a)nowher.com wrote: >Hi, I'm not sure if there was ever a thread on this, but I was wondering if >anyone can determine your real email address, if you were to fake it to your >email client. > >I hope that this doesn't offend anyone, since this is a high traffic list, but >I was wondering if this would work. To try it out, I setup my client to think >I was someone else, and sent myself an email. I could only figure out what >ISP it came from. > >What I would like to know is, can any of the experts on this list determine my >address from the header of this post?? I didn't receive anything except your nobody@... address. >again, if this is something that I shouldn't have done, just let me know, and >it won't happen again. > Hmmm... I'm going to have to play around with this. I can get outbound email access through my school district's mailserver simply by filling in the appropriate fields in netscape (we have a WAN hooked up to a T1). It would seem to me that this would be rather secure for several reasons, if for no other than that NO logging is made... In a large district, like mine (probably 10-15 thousand potential users), I doubt they would have the resources to track any of the 100 or so Internet machines on my campus alone, even if they could tell it came from here. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: INteresting tidbit
by Chris Adams 17 Dec '03

17 Dec '03

>On the Encryption note, and I swear not along the lines of the 'DOJ' >and 'FBI Snooping' Big-Brother events, I heard another story recently. > ># begin story > >A person working on the MBONE project did an unannounced experiment >across the internet using Triple-DES for MBONE, and the very next day, >'ATF' agents knocked on his door and warned him against exporting >munitions. The experimentor was shaken by the fact that agents >approached him so quickly after the experiment. > ># end story > >Extrapolations of fact: > 1. Internet traffic is monitored. > 2. The ability to snoop for encrypted traffic is present > 3. The ability to identify encryption levels is present > (How else can they differentiate DES-1 from DES-3?) > 4. The ability to crack DES-1 in near real-time mode is present. > (See above). First, this has been loosely confirmed for ages. Someone was mentioning that FBI offices supposedly have software that (on a 486) can crack a DES-1 key in under an hour. Multiply * modern high capacity computers = problem. However, this does not nessesarily follow from #3. First off, you could probably tell the encryption used from a file format; the software on the other end has to know what it's getting. Secondly, you could probably tell quite a lot about what was used by some intense analysis. Finally, if their software cannot read it and analysis suggested it was more than DES-1 then they might go after someone w/o being able to read the document in question. > 5. If above=true, then Feds dropping the Zimmerman PGP case probably > also points to it also being crackable in a similar manner. Not necessarily. This freemen issue shows that the FBI is getting gunshy about bad publicity, which they were getting. > 6. Using encryption only flags traffic for capture and decryption, > using strong encryption makes you all that more interesting. Sounds like the old argument for encrypting everything... >Sorry, couldn't resist. I'll try not to start a threads about >electro-plasma propulsion craft at Area 51, metallic-ceramic skin >and pulse-jets on the Aurora spy plane, heat-imaging video cameras >on satellites and planes that can watch you through your houses' roof, >etc. :) What??? Now you're going to tell us X-Files is just a TV show? <g> This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: Idea 'bout banning the internet
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "jwilk(a)iglou.com" <jwilk(a)iglou.com> >Date: Mon, 03 Jun 96 20:36:49 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Idea 'bout banning the internet > On 3 Jun 1996 19:48:48 pdt, jwilk(a)iglou.com wrote: >What if in the future a country banned the internet and all things that had >to deal with it (ie- telnet, irc). It would be the "underground" thing. >Just a thought, it would really suck! As I think about it it is impossible >or is it???? Hell the usa cant even ban porn let alone the whole thing. They >could ban it like they did fizzies. Hey there making a comeback did you here >now they have nutrasweet in them. If you know what fizzies are than your >pretty kewl. I'm only 13 and love then they are the drink of the future!!!! > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >Blake "Pokey" Wehlage Gaa- 3.69 ><jwilk(a)iglou.com> Record- 2-4-4 >Age- 13 Final Standings- 2nd Place (Beat in Championship) > >President & Founder: > >Revolution Software "I have the fastest glove in the east!" >Profanity Software "Hackers never stop hacking they just get caught" >VSoft > >My life- Rarely eat or sleep, Hack til' 7:00a, goto school, play goalie >til' 8:00p, hack til' 7:00a >Hank Aaron- d:-)!-< Pope- +<:-) Santa Claus- *<:-) The Unabrower |:-) > >Current Girlfriend(s)- Lindsey Wilcox, Laura Schubring > >Personal Quote- Mr Plow, thats my name, that name aguin is Mr. Plow >-Homer Simpson >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > You know, even counting the header, your signature is longer than the message... BTW, I doubt most of us care about your current love life or soccer standings. We won't even mention Homer Simpson... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: DBS, Privacy, Money Laundering nonsense.
by Robert Hettinga 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 11:57 PM -0500 on 11/13/98, Black Unicorn wrote: > If only we could be rid of this pesky cash would could eliminate organized > crime forever. Reminds me of something Vinnie Moscaritolo, my alter ego and Samoan attorney, once said. "'If we could just pass a few more laws' we could all be criminals." Nonetheless, I think that DBS will be much more about economics than privacy or even law. The contrapositive of Unicorn's excellent rant is that the market for money "laundering" and financial privacy is a rediculuously small fraction of the market for economic efficiency. That digital bearer settlement gives us more or less perfect financial privacy if done under certain conditions is much more a happy accident than anything else, just like the cheapest way to do a transaction prior to blind signatures and hash collisions was with book-entry transactions instead of paper bearer certificates. I suppose it *might* turn out that you really *can* do an instantaneously executing, clearing, and settling on-line realtime book-entry transaction, for everything from pico- to quadridollars, and it would be cheaper, both macroeconomically and microeconomically, than a digital bearer one, but I just don't think it's possible at all. And, of course, we wouldn't have coach fare to Cleveland without a bunch of "fanatics" out there, prattling away about slipping the surly bounds of earth, the joy of flight, and all that... ;-). Thank god for the "fanatics", I say, but let's make sure we pay attention to Bill Bradley's adage that it's bad luck to be behind at the end of the game. Whatever is cheapest while still remaining a functional bearer protocol wins, in other words. And, in my book, "functional" means "functionally anonymous". It's just cheaper that way. Having a plane that actually flies is way cheaper than one which just goes fast down the runway, or even one which scoots along nicely off the ground, but only in ground effect. Cheers, Bob Hettinga -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.5.5 iQEVAwUBNk0f7cUCGwxmWcHhAQErBQgAhaFscqaknL0EMnsiKMWYgoHntw88JE2Z 11K8/oyoG/dX8eus5Wqnh05eVY8JWGQ9Fu3C2uXPZbZCa5wh7tjrmIcWOTDgx8kC Sz11IJJLdcWrdTPw7a1sf/WwhyG4f7NVlyVGNqMVuGrBjImsC5TtG2yU39DVME08 ZR3bVdn6egcCDpve+E7RQ0LYWDHxitxYV3RIaCG/wj9zp5JrMPTAvIgbT+J62T8s bYUNJyf7XQnkcT5275VLAzFYy+3KBRuyp9k6uIhBaBGKBNRUw/wBwTB8NoBMPcd8 AT3276SNz1oBA+Z/R0JPRBrRkAfio2o3DFIXoC5NY49ikpBuyOEQHg== =R0aY -----END PGP SIGNATURE----- ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

INFO: Discuss crypto with Sen. Burns online the night before hearings!
by Voters Telecommunications Watch 17 Dec '03

17 Dec '03

============================================================================= ____ _ _ _ / ___|_ __ _ _ _ __ | |_ ___ | \ | | _____ _____ | | | '__| | | | '_ \| __/ _ \ _____| \| |/ _ \ \ /\ / / __| | |___| | | |_| | |_) | || (_) |_____| |\ | __/\ V V /\__ \ \____|_| \__, | .__/ \__\___/ |_| \_|\___| \_/\_/ |___/ |___/|_| CRYPTO HEARINGS (S.1726) SET FOR 6/12/96 IN WASHINGTON D.C. MEET AND SPEAK TO SENATOR BURNS ON HOTWIRED THE NIGHT BEFORE! SEN. CONRAD BURNS (R-MT) SCHEDULED FOR HOTWIRED CHAT 6/11/96 10-11PM EST Date: June 7, 1996 URL:http://www.crypto.com/ crypto-news(a)panix.com If you redistribute this, please do so in its entirety, with the banner intact. ----------------------------------------------------------------------------- Table of Contents News Press Release on Hearings How to receive crypto-news Press contacts ----------------------------------------------------------------------------- NEWS In what is becoming the newest way for Congress to read the net.community's opinion on issues, Senator Conrad Burns will be on HotWired on June 11th @ 10pm EST to discuss the encryption issue with all attendees. The next day, Senator Burns will be coordinating a day of hearings on the encryption issues with industry luminaries. Never before has the public had this much access to legislators without geographical proximity. Cheaper than teleconferencing, and more direct and unfiltered than the traditional press, online chats allow the public to directly question and hear the answers of Congress. Have a question about encryption policy that you've never been able to find out from the government? Come to the HotWired chat and ask Senator Burns to be your advocate, to press the witnesses and the White House on these issues. The online chat is on June 11 at 10pm EST, the night before the hearings HotWired's WiredSide chat is at (http://www.hotwired.com/wiredside) Information on Senator Burns' legislation is available at http://www.crypto.com ----------------------------------------------------------------------------- PRESS RELEASE ON HEARINGS Senator Conrad Burns (R-Mont.) WEB SITE http://www.senate.gov/~burns/ For immediate release: Contact: Matt Raymond Thursday, June 6, 1996 (202) 224-8150 Randall Popelka (202) 224-6137 First Pro-CODE Hearing Slated Burns' Subcommittee to Hear High-Profile Executives, Witnesses WASHINGTON, D.C. _ Montana Senator Conrad Burns today announced the first of two Senate hearings on S. 1726, the Promotion of Commerce Online in the Digital Era Act of 1996, or "Pro-CODE." The hearing will take place in the Commerce Subcommittee on Science, Technology and Space, of which Burns is chairman. The hearing is scheduled Wednesday, June 12, at 9:30 a.m. in room 253 of the Russell Senate Office Building. Scheduled to testify are: Michael Zisman, president and CEO of Lotus; Jim Barksdale, president and CEO of Netscape Communications; Jim Bidzos, president and CEO of RSA Data Security; Tim Krauskopf, V.P. and co-founder of Spyglass Inc.; Kenneth Dam, chairman of the National Research Council; Douglas J. McGowan, director of the SmartCard Alliance for Hewlett-Packard; Computer Systems Policy Project representative (invited); Joe Holmes, chief technology officer for EDS; Joel S. Lisker, senior V.P. for security and risk management at MasterCard; Danne Buchanan, president of Zion's Data Services Company; Jack Valenti, executive director of the Motion Picture Association of America; Aharon Friedman, chairman, founder and chief technical officer of Digital Secured Networks Technology Inc.; Steve Case, president and CEO of America Online (invited); and Robert Bigomy, senior V.P. and director of strategic marketing, government and space technology group, for Motorola. Burns said the focus of the hearing is on commerce and business issues. He said a second hearing, which will focus on privacy, law enforcement and national security issues, is scheduled in his subcommittee on June 26. The bipartisan Pro-CODE bill would ease export restrictions on computer security, or "encryption," for software and hardware. It would also prohibit mandatory systems in which users or companies would have to place a code-breaking "key" in the hands of a third party. # # # ----------------------------------------------------------------------------- HOW TO RECEIVE CRYPTO-NEWS To subscribe to crypto-news, sign up from our WWW page (http://www.crypto.com) or send mail to majordomo(a)panix.com with "subscribe crypto-news" in the body of the message. ----------------------------------------------------------------------------- PRESS CONTACT INFORMATION Press inquiries on Crypto-News should be directed to Shabbir J. Safdar (VTW) at +1.718.596.2851 or shabbir(a)vtw.org Jonah Seiger (CDT) at +1.202.637.9800 or jseiger(a)cdt.org ----------------------------------------------------------------------------- End crypto-news =============================================================================

1 0

Re: E-Data Systems ~ patent #4,528,643
by Yanni 17 Dec '03

17 Dec '03

> I think this has made the rounds here, already. > > If it hasn't, any comments? > > Cheers, > Bob Hettinga yea, we got a couple of them from those guys... whatever... how can you claim a patent on that stuff? geeezzz... -jon Jon (no h) S. Stevens yanni(a)clearink.com ClearInk WebMagus http://www.clearink.com/ finger pgp(a)sparc.clearink.com for pgp pub key What I just wrote is beta. Please report all bugs directly to me.

1 0

I swear I am not making this up. (rec.music.white-power)
by ezundel＠alpha.c2.org 17 Dec '03

17 Dec '03

From: bb748(a)FreeNet.Carleton.CA (Milton Kleim) Newsgroups: news.groups,alt.skinheads,alt.politics.nationalism.white, alt.politics.white-power Subject: Statement Regarding rec.music.white-power Date: 6 Jun 1996 23:10:41 GMT Organization: The National Capital FreeNet Lines: 48 Sender: bb748(a)freenet3.carleton.ca (Milton Kleim) Message-ID: <4p7ohh$mq2(a)freenet-news.carleton.ca> NNTP-Posting-Host: freenet3.carleton.ca Now that the results for our newsgroup proposal have been issued, we wish to make a statement concerning our objectives. Three objectives were sought in the rec.music.white-power project: #1: Generate mainstream media publicity for the Aryan Resistance Movement and disseminate the Holy Cause of the 14 Words -- "We must secure the existence of our People and a future for White children." #2: Encourage revelation of Enemy activists' identities to facilitate counter-espionage and prevent many instances of "anti-racist" activism against the 14 Words. #3: Create a newsgroup for discussion and promotion of Aryan music. On objective one, we succeeded beyond all expectations. No informed North American is not now unaware of our existence on the Internet. National Public Radio, _USA Today_, the _St. Paul Pioneer Press_, and Minnesota Public Radio, to name a few media organs, gave us priceless free publicity for our ideas and our Holy Cause. On objective two, we also succeeded well. We now have a comprehensive list of Enemy agents who are active on the Net. Aryan Corps Counter- intelligence is now undertaking a classification and cataloguing project which will make our counter-espionage efforts much more effective. On objective three, we obviously failed, but this was expected. Nonethe- less, benefit has been gained from this defeat. The Aryan Corps succeeded in organizing hundreds of Aryan Resistance Movement activists toward a constructive goal, increasing the "esprit de corps" of our ranks. We would like to thank all individuals who, for whatever reason, voted in the affirmative for our group. A special thanks is extended to Mr. Michael Handler, our vote-taker, for his herculean efforts to process the massive results for our proposal. We wish him well. -- Milton John Kleim, Jr., Proponent, rec.music.white-power; Chief Organi- zer, Aryan Corps -- White Wolf (RH), Deputy Organizer, Aryan Corps And on behalf of the entire Aryan Corps Network.

1 0

Thank you for the Archives 100 messages
by qut4.qut＠netcom.com 17 Dec '03

17 Dec '03

Apologies, but rich has deleted me from his mailboxes, and for a few days now, somebody has placed a global cancel bot on me. I'm gonna have plenty of fun figuring this out. Kwow any good sniffers? I agree the list should be public usenet: A mail gate-way to a usenet group that ALSO permits unmoderated posts. This would be a nice way to combine a strict moderated mail-list, with a standard netnews group.

2 1

Banking's Physical Security
by Sean T Carnes 17 Dec '03

17 Dec '03

We all know that banks are very highly protected as far as their money goes but how safe are there computers? I live very close to a computer database collecting company that collects the data related to many banks in the area. It is all done through land lines and is not very well protected. They aren't very careful about who or what they let into the building also. If someone were to cut the lines the banks in the area would be out for days and they wouldn't have a means to do interbank transactions outside of the immediate area. Has anyone else seen this in there area or heard of it. Wouldn't it be a better idea to do the transactions by satellite.

2 1