- cypherpunks-legacy@lists.ogf.org

Son of Digital Bit Bucket (or, Someone ate my e-mail!)
by fergp＠sytex.com 26 May '93

26 May '93

Kelly Goen: Please attempt to resend all previous unacknowledged traffic. Please excuse my use of the list for off-topic/personal purposes, but due to to some recent unexplained message dissappearances, I'm left with few options. Paul Ferguson | The future is now. Network Integrator | History will tell the tale; Centreville, Virginia USA | We must endure and struggle fergp(a)sytex.com | to shape it. Stop the Wiretap (Clipper/Capstone) Chip.

1 0

Digital Bit Bucket
by fergp＠sytex.com 26 May '93

26 May '93

On Wed, 26 May 93 09:14:50 EDT, Joe Thomas <uunet!kolanut.mitre.org!jthomas> wrote - >> Indeed, we are not speaking of the dissemination of USENet or List >> information, but rather private e-mail. > What? When did we start speaking of that? I'd be very interested in > hearing more about this. Before I say anything further, let me clarify that I am making no specific allegations directed towards anyone. There have just been some questionable occurrences of late that are very weird (read: spooky) which I find little reason to dismiss as coincidental. Vanishing e-mail (both coming and going), duplicate list posts with odd originator headers and routing info. As I said before, I'd just like a few things explained and put into their perspective context. Paul Ferguson | The future is now. Network Integrator | History will tell the tale; Centreville, Virginia USA | We must endure and struggle fergp(a)sytex.com | to shape it. Stop the Wiretap (Clipper/Capstone) Chip.

1 0

Re: Just the facts, ma'am.
by jthomas＠kolanut.mitre.org 26 May '93

26 May '93

Paul Ferguson <fergp(a)sytex.com> writes: > Okay, folks. Let's bring this into focus. > > I don't like unfounded allegations, especially when they are involving > my own communications providers, but let's let the truth be known. I'd > like to summarize to the list several trains of thought and track this > down to a reliable source. If, in fact, a UUNet operator/provider has, > indeed, stated that this has been common practice, I think that it may > behoove them to own-up to these allegations. Before I do confront the > UUNet staff, however, I must get the allegations correct, and I > therefore rely on you crypto-rebels to provide them for me. Please. > > [summary deleted] > > Thank you for your insights. I will ask UUNet, but I'm beginning to > wonder if other local comm providers practice the same deceptions. > Does anyone have any experiences with digex.com that they would like > to share? Nothing but good ones. Doug Humphrey <doug(a)access.digex.net> even posted to the list a few times as I recall. I'm still not sure I see a problem with someone providing a newsfeed to the NSA, FBI, or anyone else, though. > [some good stuff elided, but nothing relevant to the following statement:] > Indeed, we are not speaking of the dissemination of USENet or List > information, but rather private e-mail. What? When did we start speaking of that? I'd be very interested in hearing more about this. Joe

1 0

Request for proposals
by meyer 26 May '93

26 May '93

We've just released new versions of Dolphin Encrypt and Dolphin Encrypt Advanced Version, and have a few of the older manuals left over (almost the same as the new ones). If you'care to propose writing a review of this encryption software (to appear where?) and you're not obviously a government spy, then send me a message and I'll probably allow myself to be persuaded to send you a complimentary review copy (older manuals, but newest version of the software). You'll have to agree to allow your email address to be given to the other recipients of complimentary copies so that you have the opportunity to exchange email among yourselves encrypted using Dolphin Encrypt. Offer good while supplies last. Offer void whererohibited.

1 0

Funny bounce
by meyer 26 May '93

26 May '93

My previous message to cypherpunks, the one which had subject heading "AT&T" and which began: "I recently switched my long distance carrier from AT&T to another, since they bribed me to do so with an offer of $35." seemed to be posted OK (it apparently came back to me as expected) but I also got this funny bounce message: >From attmail.com!uucp(a)cactus.org Tue May 25 23:37:59 1993 >Received: by wixer (5.65/1.35) > id AA10857; Wed, 26 May 93 00:16:57 -0500 >From: attmail.com!uucp(a)cactus.org >Received: from att.att.com by cactus.org (4.1/SMI-4.1) > id AA17609; Tue, 25 May 93 23:37:59 CDT >Message-Id: <9305260437.AA17609(a)cactus.org> >Date: 25 May 93 20:30:47 GMT >To: wixer!wixer.bga.com!meyer(a)cactus.org >Report-Version: 2 >Received: by /C=US/AD=ATTMAIL;Wed May 26 04:28:34 -0000 1993 >Received: by /C=US/AD=ATTMAIL/PD=DCA;Tue May 25 20:30:47 GMT 1993 >Confirming-Mts-Message-Id: </C=US/AD=ATTMAIL;internet1460427530> >Confirming-Ua-Content-Id: <ternet1460427530> >Original-Date: Wed May 26 04:27:53 GMT 1993 >Not-Delivered-To: mhs!dca/G=bryan/S=petty/OU=dcaicc due to 01 Invalid Address Specification >Content-Type: message >Status: RO > >Message-Version: 2 >From: internet!cactus.org!wixer!wixer.bga.com!meyer/S=meyer >UA-Content-ID: <internet1460427530> >End-of-Header: >EMail-Version: 2 >Subject: AT&T >UA-Message-ID: <internet1460427530> >To: internet!cactus.org!wixer!wixer.bga.com!internet!toad.com!cypherpunks >End-of-Protocol: >Content-Type: text >Content-Length: 755 > >I recently switched my long distance carrier from AT&T to another, >since they bribed me to do so with an offer of $35. > >[Rest of message deleted - PM.] This seems odd. What's going on? Do all messages with "AT&T" in the subject line get siphoned off somewhere for review? Did this one generate a bounce message because the account of Bryan Petty, AT&T spy, wasn't receiving tonight? OK, I'm just paranoid. (Paranoia - that's your state of mind when you finally realize what's really going on.)

1 0

Re: PGP: Environment protection for UNIX
by stig＠netcom.com 26 May '93

26 May '93

On May 26, 1:07am, J. Michael Diehl wrote: > Well, I like this one. It lets you put little messages in place of argv[0]. > > #include <stdio.h> > > char buff[100]; > int esc = 27; > > void main(int argc, char *argv[]) > { > puts("Enter message.\n"); > scanf("%s", buff); > execl("/nfs/dorado/unsup/bin/ftp", buff, NULL); > } > Yeah, I like that too... 'cept if you need to pass args, it doesn't provide a covert channel. I confess to not having read my PGP manuals yet, but is there an interactive mode to PGP? If there WERE (hint), then it could be run as a subprocess of emacs or a mail program and thus be a) more convenient and b) the whole hub-bub about people snooping your environment would be a non-issue. Stig /* Jonathan Stigelman, Stig(a)netcom.com, PGP public key on request */ /* fingerprint = 32 DF B9 19 AE 28 D1 7A A3 9D 0B 1A 33 13 4D 7F */

1 0

Re: VinCrypt
by Z3KPW＠ttacs1.ttu.edu 26 May '93

26 May '93

Hey, an older version of VinCrypt has been out and freely distributable for months. It's a Video Vindicator release, so you could get it from a VV site like Demon Roach Underground BBS or the cDc ftp site (zero.cypher.com) if you wanted to take a look at an old version.

1 0

Re: VinCrypt
by peb＠PROCASE.COM 26 May '93

26 May '93

I saw their package at Fry's last weekend. It has a double DES mode too. It seems to have only manual encrypt/decrypt. The right way to do it is have a device driver do it for you (say, a Mach user level pager for a crypto disk). Data Encryption Standard or RSA Data Security Inc's standards are not secure because their basic algorithms have been given to the National Security Agency. VinCrypt's source code will not be passed around, Great spin, but not much more than spin. Paul E. Baclace peb(a)procase.com

3 2

Encrypted UNIX "talk" available
by miron＠extropia.wimsey.com 26 May '93

26 May '93

Last revised Tue May 25 21:05:50 PDT 1993. What is YTalk? ============== YTalk is a multi-user drop-in replacement for the UNIX "talk" program. I have added encryption facilities to it, including private key and PGP authentication. Features ======== - Multi user capabilities. - Drop in replacement for /usr/ucb/talk. - Diffie-Hellman exponential key exchange for session keys. - IDEA encryption in CFB mode. - Password authentication. - PGP authentication. - Logging of conversations to a file. Known bugs and misfeatures ========================== - No security the first time you use it, until the random seed file is created (around 300 keystrokes). - Some problems with the talk daemons on Ultrix and SCO-Unix. - Port to Alpha (64bit) incomplete. Availability ============ Version 2.1 Ftp: soda.berkeley.edu:/pub/cypherpunks/applications Bug reporting ============= All bugs to miron(a)extropia.wimsey.com. -- Miron Cuperman <miron(a)extropia.wimsey.com> | NeXTmail/Mime ok Unix/C++/DSP, consulting/contracting | Public key avail AMIX: MCuperman | Laissez faire, laissez passer. Le monde va de lui meme.

1 0

RSA in CMOS?
by L. Detweiler 26 May '93

26 May '93

Many people have been talking about cryptographic applications in hardware on the list. I suspect these will be largely untapped until a chip that does general-purpose RSA encryption comes along. There are many DES implementations that could be integrated with such a chip and then worked into computer cards, telephones, cryptography kits, etc. Does anyone know of the existence of an RSA chip? To the best of my knowledge they do not exist. Are there any plans for an RSA chip? The chip would ideally *not* be constrained to work with DES, or at least the DES encryption would be an option in addition to just pure RSA encryption of arbitrary data, for reasons of potential insecurity in DES and emergence of other superior algorithms (which upon appearance would not automatically make a general-purpose chip obsolete).

2 1