- cypherpunks-legacy - lists.cpunks.org

Re: PGP key compromise with multiple independent encryptions of same message?
by Bill Stewart 17 Dec '03

17 Dec '03

At 01:27 AM 2/17/97 -0500, David Coe wrote: >If I were to PGP-encrypt the same exact message to a number of >different people, each copy with that person's public key, would >I be making it easy (or easier) for one (or a group) of those >recipients to compromise another recipient's private key? If you're doing it as N separate messages, you're using N separate IDEA session keys; IDEA's strong enough that's no risk, especially since they'll be using separate Initialization Vectors. If you use the multiple-recipient capability, which uses one copy of the message encrypted with one session key, and separate headers with the session key encrypted with each public key. If PGP didn't take precautions to prevent it, there are attacks on RSA which can be used when you encrypt the same message with different RSA keys. However, PGP pads the session key with different random padding for each session-key-encrypted-with-public-key header, so they're different messages, so there's no risk there either. So don't keep worrying about it; use whichever is more convenient. (But it was worth worrying about once. :-) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: Why Digital Video Disks are late to market
by azur＠netcom.com 17 Dec '03

17 Dec '03

Has anyone seen discussions on how these protection mechanisms can be circumvented? >http://techweb.cmp.com/eet/news/97/942news/encryp.html > >To summarize, the Digital Video Disk standard contains an encryption >standard for copyright and anti-piracy protection. however, "some U.S. >PC and silicon vendors have just about abandoned hope of keeping to >their revised launch schedules for DVD-enabled systems." [snip] >A solution may be in the offing within days. Some sources said late last >week that Matsushita [who owns license rights] and key U.S. computer >companies may resolve the software-licensing issues by the end of this >week. The PC industry seeks amendments to the licensing-agreement language >that would result in equivalent treatment of software- and hardware-based >CSS decryption. > >... there apparently has been some speculation among the U.S. PC community >that Matsushita may be stonewalling on the software-licensing issue so that >it can establish its hardware-based decryption solution in the marketplace. > --Steve

2 1

Belated thank you's
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

It seems somewhat trite to say thank you for the service John provided now that it is going away, when while it was here it was taken for granted. Still, I will say thank you. Perhaps in this respect it is like good health, which while it is ours is not given much though, but once lost, becomes the whole of our thoughts. The loss of John's involvement is a real loss. At the same time, I would like to think that virtual communities such as this one are robust enough to survive the type of strife that we have undergone. People being what they are, the list would have had a hard time staying static without some strong guiding focus. Given the anarchic leanings of many people on this list, John's actions have done much to test the practicality of the principles that have been spoken about here. They may also show how much work it is to follow these same principles. Still, I wonder how John will feel about the cypherpunks list as it moves beyond him. Will it grow and become widespread? Or, will it slowly die from lack of interest or time? I think he might not like either answer. A la prochain fois, James The advancement and perfection of mathematics are intimately connected with the prosperity of the State. - Napoleon I

1 0

Re: Why Digital Video Disks are late to market
by Jeremiah A Blatz 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- azur(a)netcom.com (Steve Schear) writes: > Has anyone seen discussions on how these protection mechanisms can be > circumvented? Ummm, sector copy? AFAIK, the reader/writer manfacturer is trusted to cripple any copies it makes. Of course, it's all software, so if some EVIL person were to write a driver that did not honor the "don't copy me" header, society would just come crashing down around us. Jer "standing on top of the world/ never knew how you never could/ never knew why you never could live/ innocent life that everyone did" -Wormhole -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMwsT98kz/YzIV3P5AQFzRgMA1FLUxHHCv509ucqHbysLFQZCGplZbfXj Z3J9FAicOwmMp/6G1kCATc7193ZxbgpHfhNQ7Z+SIEPaxusL5MjkrWuCvoB9Kh4s JTyspKmgBVJ+/RnIro+QeRHqFH8atowh =7SI9 -----END PGP SIGNATURE-----

1 0

Re: Constitution and a Right to Privacy
by Dale Thorn 17 Dec '03

17 Dec '03

snow wrote: > Mr. may wrote: > > At 1:22 PM -0600 2/17/97, snow wrote: > Amendment IV- > (1791) The right of the people to be secure in their persons, houses, papers, > and effects, against unreasonable searches and seizures, shall not be violated, > and no warrants shall issue, but upon probable cause, supported by oath or > affirmation, and particularly describing the place to be searched, and the > persons or things to be seized. > It seems to me that the constitution is written rather simply, at least > prior to the 14th amendment. Congress Shall Make No Law... where is the > confusion? Simple, but.... In a right to jury trial of peers, are the peers the peers of the defendant or the peers of the victim? Both the Rodney King officers and the O.J. cases were perfect examples of how, when you switch the peer groups, you reverse the decisions.

1 0

Belated thank you's
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

It seems somewhat trite to say thank you for the service John provided now that it is going away, when while it was here it was taken for granted. Still, I will say thank you. Perhaps in this respect it is like good health, which while it is ours is not given much though, but once lost, becomes the whole of our thoughts. The loss of John's involvement is a real loss. At the same time, I would like to think that virtual communities such as this one are robust enough to survive the type of strife that we have undergone. People being what they are, the list would have had a hard time staying static without some strong guiding focus. Given the anarchic leanings of many people on this list, John's actions have done much to test the practicality of the principles that have been spoken about here. They may also show how much work it is to follow these same principles. Still, I wonder how John will feel about the cypherpunks list as it moves beyond him. Will it grow and become widespread? Or, will it slowly die from lack of interest or time? I think he might not like either answer. A la prochain fois, James The advancement and perfection of mathematics are intimately connected with the prosperity of the State. - Napoleon I

1 0

Re: Cypherpunks FAQ
by Dale Thorn 17 Dec '03

17 Dec '03

Igor Chudov @ home wrote: > Toto wrote: > > The primal instinct of those with interest in 'control' is centered > > around the need for 'total' control. The history of dictators in > > general has shown more than a few who have allowed the sheep to escape > > from their pens while they were fixated on chasing down the few 'black > > sheep' that had strayed from their control. > > The CypherPunks list is a prime example of this. John and Sandy became > > so fixated on their attack on Dr. Vulis (and subsequent 'dissenters') > > that they eventually lost control of the other sheep in the fold who > > were willing to go along with a 'moderate' abrogation of their right > > to free speech by the censoring of only the 'black' sheep. > Take no offense, but why nobody thought about an obviously more likely > conclusion: that it is Dr. Vulis who was, say, hired by Detweiler to > destroy cypherpunks. I personally find the above unlikely, but at least > more likely than all other suggestions (which I think are an example > of the delusion of grandeur). Remember the movie Die Hard (#1)? Remember what the wife said about how her husband would drive people stark, raving mad? I humbly suggest by analogy that it was me, since that is my effect on a lot of people, particularly (and especially) the John and Sandy types.

1 0

Re: Any more like www.anonymizer.com ??
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Come on, Bob. Quit rubbing it in about that clear blue water, the tropical temperatures and high horsepower speakers. -attila on or about 970219:0704 Robert Hettinga <rah(a)shipwright.com> said: +At 8:29 pm -0500 on 2/18/97, ! Drive wrote: +> A proposal and prototype of a different anonymity mechanism can be found at: +> http://www.itd.nrl.navy.mil/ITD/5540/projects/onion-routing/overview.html +And, of course, you can hear about the next generation from the same +bunch, on Monday morning at FC97: + Unlinkable Serial Transactions + Paul F. Syverson (Naval Research Laboratory, Washington, DC, USA), + Stuart G. Stubblebine (AT&T Labs--Research, Murray Hill, NJ, USA), + David M. Goldschlag (Naval Research Laboratory, Washington, DC, USA) +:-). +<http://www.offshore.com.ai/fc97/> Cheers, Bob Hettinga _____________________________________________________________________ Surveilence is just another form of entertainment. ___________________________________________________________attila_____ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBMwtHW704kQrCC2kFAQF71QQAx/ai6PvbLHETVNLHQJ78XIIgkPBLflbO 4LfcHeA/m5WSq+kK8GNbSsMq+7Bcfpw+iELlPUhbU671oecayfyJj1C/Irwr2pXF dgNniD/2s0QnhDGEuHDbFtjkeIiSV70ED9+TO+osLG/fQIigV0jeIFPeh9D0Ri/z FueZ3HRx784= =Dtbl -----END PGP SIGNATURE-----

1 0

"Trial"
by Timothy C. May 17 Dec '03

17 Dec '03

At 8:02 PM +0200 2/19/97, Shark wrote: >Trial OK, that makes 18 votes for "trial," 26 votes for "no trial," and 3 people asking what the hell the vote is all about. Looks like there won't be a trial and we can move directly to the punishment. --Klaus! von Future Prime -- [This Bible excerpt awaiting review under the U.S. Communications Decency Act of 1996] And then Lot said, "I have some mighty fine young virgin daughters. Why don't you boys just come on in and fuck them right here in my house - I'll just watch!"....Later, up in the mountains, the younger daughter said: "Dad's getting old. I say we should fuck him before he's too old to fuck." So the two daughters got him drunk and screwed him all that night. Sure enough, Dad got them pregnant, and had an incestuous bastard son....Onan really hated the idea of doing his brother's wife and getting her pregnant while his brother got all the credit, so he pulled out before he came....Remember, it's not a good idea to have sex with your sister, your brother, your parents, your pet dog, or the farm animals, unless of course God tells you to. [excerpts from the Old Testament, Modern Vernacular Translation, TCM, 1996]

1 0

security breached by NaughtyRobot
by Ellen Iwasaki 17 Dec '03

17 Dec '03

HELP! Can anyone tell me what this message is that I received in my mail today? Is it real? Should I do as it suggests? I have used the Internet once to purchase some books? Was my credit card number stolen in the process? How did this happen and how will it affect me? What should I do? PLEASE ADVISE ASAP! Thank you for your help Ellen Iwasaki Kumamoto, Japan > From: eiwasaki(a)gol.com > Date: Wed, 19 Feb 97 02:27 CST > Apparently-From: eiwasaki(a)gol.com > Apparently-To: eiwasaki(a)gol.com > Reply-to: eiwasaki(a)gol.com > Registered-mail-reply-requested-by: eiwasaki(a)gol.com > Sensitivity: PERSONAL-CONFIDENTIAL > Precedence: EMERGENCY > Priority: URGENT > Comment: Authenticated sender is <eiwasaki(a)gol.com> > Organization: NaughtyRobot > Subject: security breached by NaughtyRobot > > This message was sent to you by NaughtyRobot, an Internet spider that > crawls into your server through a tiny hole in the World Wide Web. > > NaughtyRobot exploits a security bug in HTTP and has visited your host > system to collect personal, private, and sensitive information. > > It has captured your Email and physical addresses, as well as your phone > and credit card numbers. To protect yourself against the misuse of this > information, do the following: > > 1. alert your server SysOp, > 2. contact your local police, > 3. disconnect your telephone, and > 4. report your credit cards as lost. > > Act at once. Remember: only YOU can prevent DATA fires. > > This has been a public service announcement from the makers of > NaughtyRobot -- CarJacking its way onto the Information SuperHighway. >

1 0