- cypherpunks-legacy@lists.ogf.org

"hacker" publications
by Brad Huntting 07 Apr '93

07 Apr '93

> PHRACK or 2600? Does anyone have a phone number and/or address for these or any other "hackers" publications? I've pretty much had it with the "legit" computer security information sources (CERT et al). Between the censorship and the untimely notification they are next to worthless for keeping abreast of computer and network security issues. thanx in advance, brad huntting(a)glarp.com P.S. I cant read Dutch (yet).

2 1

please remove me
by bmullane＠ultrix.ramapo.edu 07 Apr '93

07 Apr '93

please remove me from the mailing list i wish that i had the time to try to keep up with the list, but i dont i may rejoin at some time in the future thanks, Brian

1 0

Re: PHRACK: Article from PHRACK 42 on encryption
by Douglas Mason 07 Apr '93

07 Apr '93

> >> Exposing factual errors and flaws in reasoning is left as an exercise > >> for the reader. > >The flaws are big enough to drive a bakery truck through. Its trash. > maybe you should do a better writeup and publish it in PHRACK or 2600? I agree. Anyone can sit and say "Oh, that article is a piece of crap", but these same people never put their "money where their mouth is" and write an article of their own. I've written for both Phrack and 2600 and it sure as hell isn't hard to get something submitted. If you think you can do better by all means write an article and send it in. If trash is being published, why not try to correct it? If you have any problems with where to send it, I'll gladly forward you the address. Otherwise, shut the hell up. If you don't like your goverment, vote. If you don't like something that is published, write something yourself. It's not some type of elite club of writers, both publications welcome people of all walks to submit. --Doug --- Douglas Mason douglas(a)approach.com Network Administration CompuServe: 76646,3367 Approach Software Corporation +01 415.306.7890

1 0

Re: PGP help and comments.
by karn＠qualcomm.com 06 Apr '93

06 Apr '93

At 01:58 AM 4/4/93, Jim McCoy wrote: >J. Michael Diehl <mdiehl(a)triton.unm.edu> writes: >> >> I would like to use pgp on the mainframes, but don't want to store my secret >> key on their disks. >This is even more dangerous than storing it on the disks of a multi-user >machine. I agree 100%. Security packages like PGP are meaningful only when you have your own personal machine to run it on. Indeed, it would be nice if PGP could somehow tell when it is being run over a network, and severely warn the user when he is about to type something secret (like a passphrase). I don't know of any clean way to do it, though. Phil

1 0

Re: PHRACK: Article from PHRACK 42 on encryption
by Peter Shipley 06 Apr '93

06 Apr '93

>> Exposing factual errors and flaws in reasoning is left as an exercise >> for the reader. >> > >The flaws are big enough to drive a bakery truck through. Its trash. maybe you should do a better writeup and publish it in PHRACK or 2600?

1 0

PGP and problems therewith.
by Scott Northrop 06 Apr '93

06 Apr '93

I was under the impression that there was a newsgroup for discussion of how to use PGP. I most certainly don't mind talk about how to most effectively use PGP (PC-based decryption of files on your unsecure unix box, for example), and I don't have much room for criticism given the nil that I've contributed to this forum. But please, in the name of all that's holy, could the How To Use PGP Q&A go somewhere else? Please? Scott PS - Did the list get the message by sand(a)u.washington.edu about the correct place to put hidden data in a JPEG image? Our mail reflector burped, and we didn't get that week... :( (Mail, please, don't reply to the list.)

1 0

WB: public kiosks
by Marc.Ringuette＠GS80.SP.CS.CMU.EDU 06 Apr '93

06 Apr '93

Public kiosks are OK as a simple and moderately effective technique for assuring anonymity, and they're ideal for a security-naive person who is unable to verify the security of a more complex system. But for my own use, I am much more confident in the security guarantee given by encryption on a portable computer and anonymizing using Chaum-style remailers... -- Marc Ringuette (mnr(a)cs.cmu.edu)

1 0

PGP error.
by J. Michael Diehl 06 Apr '93

06 Apr '93

When I use the following command line in a batch file, I get a Compression/ decompression error. No files are created. The contents of the batch file is: pgp -es %1 %2 Diehl Where %1 is the name of the file to send, and %2 is the other person's name. What am I doing wrong, or is ther a problem with my pgp? Thanx in advance. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQA9Aiu/jVAAAAEBgM2F5mSlCA+KRd6TXIrqmPfiiAEytwSttZs7Yua939GMu2mP JL+5Qpi/ZKqF2nAJAwAFEbQsSi4gTWljaGFlbCBEaWVobCwgMSwgPG1kaWVobEB0 cml0b24udW5tLmVkdT4= =lyvx -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Re: PGP help and comments.
by stig＠transam.ece.cmu.edu 06 Apr '93

06 Apr '93

In message <9304040758.AA07164(a)tigger.cc.utexas.edu> you write: > >This is even more dangerous than storing it on the disks of a multi-user >machine. Unless you are running in a kerberos environment it is trivial to >snoop your upload off the network, and even without that weakness you are >exposing yourself to the same problem that the docs mention (it is really >pretty easy to scan someone's terminal input) only you are giving them the >key outright instead of only giving them the passphrase to your key. > Yeah.... So if your key can be snooped off the net, so can your cleartext. To decript online, then, is akin to using only weak encription...which indicates only the desire for limited privacy. But if even if you do decript online, you're still protected from file snooping. What's needed is PGP decription built into your terminal program. stig

1 0

Re: WB: public kiosks
by George A. Gleason 06 Apr '93

06 Apr '93

Re public kiosks; recall that Community Memory started the idea of coin-operated kiosks years ago; and presumably still has terminals located around town. The technology is quite simple apparently. Could be genralised pretty easily. The terminals are connected to their servers via off-premise extension circuits, which allow keeping the lines open fulltime at no per-minute charge. Then you drop coins in order to respond to stuff. This of course requires a server in evrey local exchange area where you want terminals, but that should be no problem in most places. -gg

2 1