- cypherpunks-legacy@lists.ogf.org

Phrack 43
by Paul Goggin 28 Jul '93

28 Jul '93

For those who are interested. I have added phrack-43 to my EFF archive (used to be a mirror, until ....) aql.gatech.edu /pub/eff/cud/phrack Enjoy. Paul -- R O All Comments Copyright by | Technofetisht A N Paul S. Goggin (1993) | Cypher, Cyber, Chaos V Information Broker | Ergoflux, Interzone E chaos(a)aql.gatech.edu | Carpe Diem: Stop the Clipper wiretap chip Finger account for latest _Phrack_ | Public Key: PGP and RIPEM available For anonymous communication:---> anonymus+4744(a)charcoal.com ------------------------------------------------------------------------------ Title 18 USC 2511 and 18 USC 2703 Protected -- Monitoring Absolutely Forbidden

1 0

Talking to Reporters, and Which Ones?
by tcmay＠netcom.com 28 Jul '93

28 Jul '93

Cyphercitizens, Paul Robichaux writes: > My opinion, which stands, is that we have spent an inordinate amount > of time in frivolous discussion about T-shirts. My personal opinion is > that you build esprit de corps by common effort and common > achievement, not by how you dress (although my primary experience with > that sort of team spirit comes from my time in the Marines, where > everyone wears the same kind of T-shirt :) I respect Paul's wishes. No one will force him to wear the Cypherpunks t-shirt, nor to wear the official Cypherpunks sidearm, nor to use the secret Cypherpunks handshake. (In fact, I doubt anyone will actually get around to making the t-shirts. If it happens, it'll probably just be some entrepreneur on the List, and will not come from a collective decision--which is impossible, anyway.) But I still maintain that the reason only one person has talked to the journalist mentioned has *nothing* to do with the List working on t-shirts....I mean, come on! If we drop all speculations about t-shirts--which a lot of folks seem to be having some fun at, and some stimulating ideas for publicity (which, ironically, may be *very* valuable in communicating our message to journalists and others--will we all suddenly start working on the "real" Cypherpunks projects? (What are they, by the way? No one seems to know. Probably just as well.) > Many of our illustrious contributors have talked with high-powered > journalists in the past, and I applaud that effort. Considering the > target market of Phil's article- other professional journalists- I > think spending time to answer his questions is worthwhile. Sounds fine to me. Those who want to talk to him, should. Most serious journalists, though (and here I admit to running a risk of sounding judgmental or snotty...not my intent), do enough groundwork to _seek out_ the opinions of those they have gotten interested in. The "cattle call" approach has been seen increasingly, as with the woman journalist who announced she was researching an article on "Pedophiles on the Net" and she wanted comments sent to her! Contrast this with Kelly, Levy, Markoff, Dibbell, etc., all of whom have familiarized themselves with the communities they intended to cover and then have contacted specific folks. I'm not knocking either Mr. Mulivor or Mr. Hum (if I remember his name correctly), and they may indeed be fine reporters. Certainly they should be treated politely and helped by whomever wishes to. [To pick a nit: asking readers to call long-distance to give their tips is unusual, at least from my experience. Reporters typically take great efforts to call their sources, not the other way around. But I'll concede that perhaps the three journalists mentioned so far--Mulivor, Hum, and the woman writing on pedophiles--are using the "call me" approach to generate initial contacts. They should be aware of course of possible skewing effects (not that the rest of us are not also skewed, of course :-} ).] > To me, it's more important to educate reporters in (for example) > Huntsville and Peoria to our cause than to spread the word to trendy, > likely-to-be-sympathetic-to-our-cause folks who read _Wired_, _Village > Voice_, and _Whole Earth Review._ Well here I just have to disagree completely. It's just a plain and simple fact that these sorts of magazines--"Wired" and its cousins--are having an enormous impact on folks. This is how many of our List members first learned of this List, this is how much of the crypto debate is being framed, and this is where interested readers will turn for information. (To the list I would add "Mondo 2000," "Boing Boing," "Communications of the ACM," and a few other mags and journals.) Also, the articles in "Wired" and "WER" were exceptionally long and well-written, quite likely beyond what could be conveyed in a small-town newspaper. A small-time paper could just not justify such in-depth coverage. Sound bites would be more likely. Ironically, as I said earlier, the planning for a t-shirt may actually generated some really memorable sound bites! And the wearing of such t-shirts, should anyone actually just go ahead and make them (hint! hint!) could actually be the catalyst for a local paper doing a story on these "Cypherpunks" and their provocative comments about privacy, Big Brother, and the NSA. But I digress. Reporters from Huntsville and Peoria are not to be disdained, but the List cannot be expected to educate and spoon-feed them. (Anyone who wants to, can, obviously. I've not heard of anyone refusing to talk to them, if they have contacted members of this List.) The journal Mulivor writes for is familiar to me through interviews on the C-SPAN cable t.v. show with Brian Lamb, but I haven't seen it myself. Those who want to talk to him should, by all means. > > Mulivor on the alt.whistleblower list. (Lance speculates, correctly I > > think, that Mulivor has no Net access. If true, I question that Mulivor is > > such a high-priority journalistic target anyway. Maybe he is. But I'm sure > > enough folks will talk to him. The talk of mail programs and t-shirts is > > not likely to affect this.) > > Well, Lance missed the boat here; I have had an ongoing exchange with > Phil via his e-mail account (mulivor(a)crc.monroecc.edu) which last I > heard counted as net access... By "Net access" I meant Usenet, as in the "alt.whistleblowers" and "sci.crypt" newsgroups. My comment derived from this remark by Lance Dettweiler when he posted Mr. Mulivor's call: "This posting went through a gateway so the author is probably not able to read news; reply via email." I certainly hope Mr. Mulivor is able to get Net access--not just e-mail--so he can get a better picture of what's going on before his article appears. If Mr. Mulivor lives in the D.C. area, perhaps the D.C. Cypherpunks in Northern Virginia (mostly) can meet with him, perhaps they can even invite him to attend their next meeting (I hear Boston/Cambridge is planning their meeting to coincided with the California meeting, Saturday, August 14th, so perhaps the D.C. folks will also be doing so.) Finally, I think this little debate has been useful and enjoyable (to me, at least). It helps us to focus on the issues of what we are, what's important, how to talk to journalists, and so on. Kind of like what planning to put on a t-shirt does. -Tim May --

2 1

PGP 2.3 for Amiga
by Jeremy R. Smith 28 Jul '93

28 Jul '93

I've just finished a trial run of PGP 2.3 for the Amiga and have some news to report. It is a bit buggy. Had trouble signing and encrypting with my secret key. Is 2.3 backward compatible with 2.2? I'm running an A3000T with an '040 accelerator @ 25mhz. Please let me know if any of you have experienced similar problems. Thanx in advance! Jeremy Smith jersmit(a)eis.calstate.edu -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQCNAixVlqsAAAEEAMlqS9nz+2dADwxwOglWVJk7xugtC9SMQX6rkJiv/0wkOhSB RSQcUL5bVfRKJGa4YrnHefmBZaTSvwtFmSUCSqm4yN9n258xda+niz6pJwPDaTIX 7Gr1V8Xr9/J7K3grm8H1VCXJjKTUVt+zPns5KS4K+tQZgdcPQJefZlD5h/jTAAUV tCdKZXJlbXkgU21pdGggPGplcnNtaXRAZWlzLmNhbHN0YXRlLmVkdT4= =J0/4 -----END PGP PUBLIC KEY BLOCK-----

1 0

A few more slogan ideas
by gnu 28 Jul '93

28 Jul '93

I got carried away... EFF: Restoring the Bill of Rights, bit by bit. Cypherpunks: There's safety in numbers. (back of shirt: BIG numbers.) Cryptography: There's safety in numbers. (back of shirt: BIG numbers.) Clipper: A chip off the old Constitution NSA: ``What First Amendment?'' Negative Social Advancement Necrophiliacs Screwing America Nasty Scheming Authoritarians Nocturnal Spook Authority No Secret Authorities NSA: Last bastion of thought control NSA: Making the world safe for totalitarianism NSA: Making the world safe for censorship Clipper: Making the world safe for bureacrats Clipper: The Policeman is your *Friend* (italics on Friend) The NSA supports peace, justice, and freedom. Right. Clipper: Automating no-knock searches. National Subversion Agents NSA: Naddering Nabobs of Negativism (remember Spiro?) Nobody's Support Agency No Sunshine Anymore Irrational Insecurity Reagency Negative Survival Approach Negative Social Access Negative Social Alteration Negative Social Amendment Negative Social Acculturation National Societal Adulteration National Social Ablation National Suppurating Agency Nogoodniks Smashing America Nogoodniks Screwing America No Social Advancement Naughty Scandalous Amorality Nasty, Scheming, and Artificial National Sin Agency Social Change through Technology: Cypherpunks Cypherpunks: making the world safe for anarchy Cypherpunks: making the world safe for privacy Cypherpunks: making the world safe for civil rights A picture of a Clipper chip, with headphones leading off from one of the pins. A few more words to combine in N, S, and A: Sinful, Shameful, Stealth, Shiftiness, Scheme. John

3 2

rfc822 headers include encrypt std
by lazylion＠netcom.com 27 Jul '93

27 Jul '93

I've only been on the list a few days now, and the net for only a few weeks. Plesae pardon the apology :) but could someone please explain to me why we are not putting an "Encryption: PGP <my-public-key>" line in the header of each of our messages as allowed by RFC 822 (which I was just reading for the first time today) ---Begin quote of RFC822 on Internet Message Header formats:--- 4.7.3. ENCRYPTED Sometimes, data encryption is used to increase the privacy of message contents. If the body of a message has been encrypted, to keep its contents private, the "Encrypted" field can be used to note the fact and to indicate the nature of the encryption. The first <word> parameter indicates the software used to encrypt the body, and the second, optional <word> is intended to aid the recipient in selecting the proper decryption key. This code word may be viewed as an index to a table of keys held by the recipient. ---End quote of RFC822 on Internet Message Header formats--- This would certainly solve many obvious problems. Of course, you all have seen this stuff for years and are not doing it so there must be some really interesting reason... ? Feel free to respond to me by email instead of posting to the group and if anyone else wants to know, I'll forward responses to them. If I've struck a chord, by all means let's discuss this as well as t-shirts. BTW, I'm looking forward to subscribing to alt.cypherpunks.merchandising :)

1 0

PGP Shell for the Amiga
by Jeremy R. Smith 27 Jul '93

27 Jul '93

Hi, I'm new to this forum and I was wondering if there was a front end for the Amiga version of PGP. I am currently using ver2.2 of PGP for the Amiga under OS2.04. Please let me know as this would make life a little bit easier. Thank you. Jeremy Smith jersmit(a)eis.calstate.edu -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQCNAixVlqsAAAEEAMlqS9nz+2dADwxwOglWVJk7xugtC9SMQX6rkJiv/0wkOhSB RSQcUL5bVfRKJGa4YrnHefmBZaTSvwtFmSUCSqm4yN9n258xda+niz6pJwPDaTIX 7Gr1V8Xr9/J7K3grm8H1VCXJjKTUVt+zPns5KS4K+tQZgdcPQJefZlD5h/jTAAUV tCdKZXJlbXkgU21pdGggPGplcnNtaXRAZWlzLmNhbHN0YXRlLmVkdT4= =J0/4 -----END PGP PUBLIC KEY BLOCK-----

1 0

inspired programmers needed ASAP
by L. Detweiler 27 Jul '93

27 Jul '93

Okay cypherpunks. If we want to create a `new & improved' (tm) government in cyberspace this is the most direct route: drag our current one in kicking and screaming all the way. In California there is pivotal battle underway to get government legislature data onto the internet to citizens, but powerful companies have lucrative monopolistic arrangements on this data, so the legislature has adopted a self-serving `impress us' attitude. The manner in which this current attack is carried out will help forge a plan for the federal level. Taxpayer's Assets Project is doggedly pushing a bill to free up the data at that level. If a positive demonstration and firm foothold is established at the state level then maybe this valuable knowledge and know-how could be translated to the Federal level. I sent a message to Gilmore & Pozar complaining about the imperious attitude of the legislature in getting free programming labor without even any obligations to repay the favor, and the limited time frame. Ah, but isn't that life, the citizen bears the burden twice? Pays through taxes once and has to pay dearly again to get the due goods & services? Maybe it will be different in cyberspace eh? I'm betting on it... I imagine that GUI or X Window programmers (for a nice interface) and database programmers are especially desireable here. If a cypherpunk pulled this off and it was promoted, it would be HOT press coverage. We're talking 6 o'clock soundbites. A glimmer of the momentum of a revolution! ------- Forwarded Message Date: Mon, 26 Jul 1993 18:51:10 -0500 From: farber(a)central.cis.upenn.edu (David Farber) Subject: Cal AB1624: PROGRAMMERS! START YOUR ENGINES! (sample legis data) Date: Thu, 22 Jul 93 13:42:13 -0700 From: gnu(a)cygnus.com Jim Warren has been leading a charge to get the California Legislature to provide public access to their internal law- and bill-tracking systems via the Internet. Rep. Debra Bowen has introduced Assembly Bill 1624 to accomplish this. It's kicking its way through the Legislature now, and faces its next hearing on August 18th. Part of the opposition to the bill is that the legislators don't believe that the Internet community will end up providing software for easy public access to this information, which is all in crufty formats from proprietary systems. (This would mean either that the state would have to spend money to make the data usefully accessible, or that they'd have gone through all this for nothing because the public couldn't really use the results.) The Legislature currently sells exclusive access to the data, on tape, to a company that charges big bucks per hour for online access to it. This is the kind of people that the Legislature understands, so we have to make them also understand the generous spirit of the Internet, with a demonstration. We hope, with some volunteer programming as well as volunteer politicking, to open up the process of state legislation so that ordinary citizens can track it and participate in it. Any takers? John Gilmore Electronic Frontier Foundation gnu(a)eff.org - ------- Forwarded Message From: Jim Warren <jwarren(a)well.sf.ca.us> Subject: UPDATE#19-AB1624: PROGRAMMERS! START YOUR ENGINES! (sample legis data) Date: Thu, 22 Jul 1993 10:42:07 -0700 July 20, 1993 Okay, all you programmers who volunteered to create readers, indexers, print utilities, etc., for California's legislative data -- HERE'S YOUR FIRST CHANCE. GAIN FAME AND GLORY (if not wealth :-) ! Be the FIRST to create legislative data-handling utilites and share the source-code with the world. Do it fast, and you/it can amaze and impress legislators at the Aug. 18th Senate Rules Committee hearing on AB1624. The Legislative Data Center (LDC) has provided bill-author Bowen's office with six diskettes full of sample legislative data in the various forms in which it exists internally, at the LDC and/or the Office of State Printing (OSP). They also provided documentation-files in electronic form. With some kindly Sacramento assistance, Tim Pozar now has all of these files available across the Internet in the anonymous ftp directory (file transfer protocol) on kumr.lns.com. To obtain copies of the files, use the command "ftp kumr.lns.com". Login as "anonymous" and use your mailing address as a password. Be sure to use the command "binary" to tranfer the files intact. Use the command "cd pub/ldc" to change to the proper directory. Then the command "mget *" to get all of the files. After all of the files are retrived, type the command "quit" to end the ftp session and log out of kumr.kns.com. If you have ftp problems, contact Tim: Internet: pozar(a)kumr.lns.com FidoNet: Tim Pozar @ 1:125/555 Snail: Tim Pozar, KKSF, 77 Maiden Lane, San Francisco CA 94108 POTS: +1 415 788 2022 Radio: KC6GNJ / KAE6247 According to LCD notes that accompanied the diskettes, the files include: cgml.sou - California Generic Markup Language (CGML) parser table codes.fmt - documentation of CGML (the LDC formatting language, that does *not* give the page- or line-numbers by which amendments are defined) measures.fmt - documentation of Page II (the OSP typesetting input, which is the only source of the page- and line-numbers of printed bills) *cg.ina - introduced bill, in the Assembly, coded in CGML *cg.ams - amended bill, in the Senate, coded in CGML *.cg - Constitution part, state code or uncodified statute, coded in CGML ab????.ina - bill introduced in the Assembly, coded in Page II ab????.ams - Assembly bill amended in the Senate, coded in Page II *.pg2 - Page II tables for introduced, amended, enrolled and chaptered bills *ca - committee analysis *fa - floor analysis *cf - committee vote *fv - floor vote *s - bill status *h - bill history *ve - Governor's veto message 063093.boo files apparently concern the Assembly and Senate Daily Files. If you have questions AFTER you have diligently diddled these files and become totally frustrated, send specific questions to me and I'll try to scrounge up some answers. [No guarantees, though. :-) ] Let me know if/when you think you have some code working, and we'll figure out how best to gloriously - and *timely* - flaunt it in Sacramento. :-) [Note: I will be at the Telluride Tele-Community conference and mostly offline 7/22-7/26.] - - --jim Jim Warren, columnist for MicroTimes, Government Technology & BoardWatch jwarren(a)well.sf.ca.us -or- jwarren(a)autodesk.com 345 Swett Rd., Woodside CA 94062; voice/415-851-7075; fax/415-851-2814 [organizer & Chair, First Conference on Computers, Freedom & Privacy (1991); InfoWorld founder (1978); Autodesk Board of Directors member; etc. blah blah] < just a citizen/volunteer/advocate re AB1624; no business interest therein > - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

SIMTEL 2GB FTP site seeks new home
by L. Detweiler 27 Jul '93

27 Jul '93

OK, we're the first to jump on the throats of anyone closing down a site, so here's our chance to rescue one. Maybe someone can refer this person to the right place or do the legwork in hooking up a connection. (wuarchive comes to mind) On the other hand, if it is poorly organized or replicated elsewhere or whatever, maybe it should just die with a whimper. (I would be very interested in finding out why the archive is being shut down.) ------- Forwarded Message Date: Tue, 27 Jul 1993 02:44:12 -0500 From: farber(a)central.cis.upenn.edu (David Farber) Subject: WSMR-SIMTEL20.ARMY.MIL is passing away The massive archive site WSMR-SIMTEL20.ARMY.MIL at White Sands Missile Range, New Mexico, USA, which is home to more than 2 gigabytes of files for many computer systems, including MSDOS, Unix, VMS and some mainframes, will be shut down by its operators as of September 20, 1993. Unless a new home is found for the archives, this major archive site will vanish. This is a major archive and if it is possible to save it, then it should not be allowed to just disappear. If anyone knows of a site that can house the master archives, please send a message to Keith Petersen <w8sdz(a)TACOM-EMH1.Army.Mil> Mr. Petersen is trying to find a new home for the master archives. Note that many of the older files are on CD-ROM, so it is not absolutely necessary that a site dedicate two GB of disk space, as perhaps 3/4 of this is on CDs, so the option would be to loan perhaps 4 CD slots in an optical jukebox, along with perhaps 500 meg of disk space. Please pass this message to any list that might find it of interest. Thank you. - --- Paul Robinson -- TDARCOS(a)MCIMAIL.COM ------- End of Forwarded Message

1 0

t-shirts, imagery, and Cypherpunks PR
by skyhawk＠cpac.washington.edu 27 Jul '93

27 Jul '93

> From: koontzd(a)lrcs.loral.com (David Koontz ) <koontzd/daemon> > >fnerd(a)smds.com > >For a logo... how a bout a fist holding a key? > > How about a mailed fist holding a key, with the caption > > Privacy is our Profession I like it, but it doesn't emphasize the fact that we're fighting a war here, a war against government oppression. We're fighting a guerilla war, here folks, on the future battlefield of cyberspace. And like anyone fighting a dinosaur, we've got a big jump on the enemy in that we know our way around in this new world, and they're dumb, blind, and slow. We can hit them where they're weak, use disinformation techniques to confuse them, and then fade into the mist. We can introduce false data into their computers to make them run in circles, and drop their systems completely in classic guerilla style. The people will follow us, because we've got truth and freedom on our side -- all we have to do is explain this, and we've won! The leviathan must fall, and we'll help it along its way! We must arm ourselves conventionally, also, for those dark days that may be ahead. When a monster this size falls, we have no idea how chaotic things may become. Automatic weapons, the Anarchist's Cookbook (suitably corrected, of course), and other martial pastimes will balance our technological wizardry. Hm. It's not a particularly good imitation of Tim May's classic parodies, but it'll have to do for now. Folks, we're fighting a war. A public relations war. We are not, NOT, fighting a conventional war. Violence is not something we can have associated with us. We cannot be seen as hardcore anarchists, intent on crushing the state. We cannot enter into an obvious, head-to-head conflict with our country's government, particularly law enforcement. For us to be perceived as such in the eyes of Joe Sixpack is fatal. We will be, indeed we will have BEEN, marginalized and rendered impotent and irrelevant. For us to become so engaged in conflict in *fact* is to have lost, because we have nothing like the power of our wonderful government. If we give them an excuse, they'll crush us like bugs. We can't be seen as crazed revolutionaries. We have to be more like relatively harmless specialists in the field of privacy in cyberspace, explaining that technology has the potential to cause arbitrary badness, and we've got ideas about how to do things a different, better way. We can be out on the fringe of normality, but if we're seen in the same light as [fill in your favorite trivialized group of wackos here], we're fucked. Martyrdom is sexy and romantic, but rarely useful, and almost never ideal. Do keep in mind that this entire message is my personal opinion about how to go about making the world a better place. I'm not completely psycho about it, I don't think people with different ideas are stupid or even necessarily wrong. I just think the "conflict" meme is in danger of being given too much emphasis. -- Scott Northrop <skyhawk(a)cpac.washington.edu> (206)784-2083 ObVirus: The demand for obedience is inherently evil. ObVirus2: As a juror in a Trial by Jury, you have the right, power and duty to acquit the defendant if you judge the law itself to be unjust.

2 1

DSS: `Stamp Tax'?
by L. Detweiler 27 Jul '93

27 Jul '93

Interesting comparison of NIST-PKP-DSS licensing arrangement as `stamp tax' with proceeds to `private company'. Originally in RISKS. - ------------------------------ Date: Tue, 20 Jul 93 17:05:57 -0700 From: Mark Seecof <marks(a)wimsey.latimes.com> Subject: DSS as a stamp tax Many people raised in the U.S. are unfamiliar with general stamp taxes. We know about excise taxes (e.g., liquor) with payment evidenced by stamps, and tax stamps to validate specific documents (e.g., hunting licenses). But (to my perhaps inadequate knowledge) the U.S. hasn't had a general stamp tax since the War of Independence. England had one years ago... most signatures on receipts for money or bills of sale were invalid unless scrawled across postage stamps. England still imposes stamp taxes on some business transactions, e.g., transfer of real property. NIST's proposal to "license" the DSS to PKP, forcing "the rest of us" including all who wish to transact business with the U.S. government to pay PKP every time we sign something digitally amounts to the imposition of a general stamp tax. Worse, it is a tax imposed by the government for the benefit of private persons (those who are paid by PKP). Attempts by George III's government to impose various stamp taxes on American colonists 200-odd years ago fueled revolutionary sentiment among them... ------- End of Forwarded Message

1 0