From:    Jerome Greene                          Area: Public Key Encryption
To:      John Schofield                          4 Oct 94 17:00:20
Subject: Bug in PGP signatures                  UpdReq 

-----BEGIN PGP SIGNED MESSAGE-----

- -=> John Schofield wrote in a message to All<=-
Hello John,
JS> Moral:
JS> When checking a signature, do NOT trust PGP when it says the
JS> signature is good.  If PGP says a signature is bad, it is
JS> bad.  If PGP says a signature is good, *LOOK AT THE OUTPUT
JS> FILE*.  Everything in that output file is valid and signed.
JS> If there is any text that is in the clearsigned text, but
JS> NOT in the output file, you know there was an attempted
JS> forgery.
I ran PGP on the ASCII-armored zip file you posted.  I've reached the same 
conclusion.  BTW, I've signed your key from when I freq'd EZPGP from you.  If 
you want it back I'll call direct. 
        Jerome

-----BEGIN PGP SIGNATURE-----
Version: 2.6.1
Comment: F x S = K The product of freedom and security is a contant.
iQCVAwUBLpHRLXF52VfebiBFAQHeJQQAj0aJQwpmyB38PzgirK7/s6zcrToy54IF
MpnLfd/xcmwEynsC2JWkgsr1gph3TU2vPNIu4i7Y9IQ8OtnKUPth7vJ7Eq27B5MA
eJCDWH+8onHl5mls+PAEAlffe4IcfeMJzBwRWE31ZwjEermc5QoXY6bzQmh2n/dP
lqgPc1FvIw0=
=Tu64
-----END PGP SIGNATURE-----


201434369420143436942014343694201434369420143436942014343694718

From:    George Hannah                          Area: Public Key Encryption
To:      Shawn McMahon                           3 Oct 94 18:18:46
Subject: Re: Need recommendations               UpdReq 

 -=> Quoting Shawn McMahon to Dan Wilson <=-
 SM> However, it will take extraordinary measures.  Since I used SFS
 SM> instead of SecureDevice, they'll have to use a special program to do
 SM> it.  (Instead of just PKZIPping the darn thing onto multiple floppies,
 SM> as you could do if it was a SecureDevice file.  That is, if I'm
 SM> reading the SecDev docs properly.) 
 Can someone tell me who the authors of these two programs are, and
 where they are available (if shareware)? I'd like to try them out...
... I do not fear computers. I fear the lack of them. -- Isaac Asimov


201434369420143436942014343694201434369420143436942014343694718

From:    Jason Carr                             Area: Public Key Encryption
To:      Shawn K. Quinn                          4 Oct 94 18:34:12
Subject: Re: PGP Signatures                     UpdReq 

 -=> Quoting Shawn K. Quinn to jason carr <=-
 SKQ> Most users do not have access to kludge lines. I would, since I'm
 Are the lines stripped when taken from an OLR door or something?  The
 user wouldn't have to be able to see it, just the editor.
  SKQ> still not a FidoNet sysop until the RC gets his head out of his butt,
 SKQ> like to verify a message's signature if any without having to ask for
 SKQ> kludge line access. 
 SKQ> What do you guys think about _this_ idea? :-)
 That's certainly the way it should be.
 jc



201434369420143436942014343694201434369420143436942014343694718

From:    Jason Carr                             Area: Public Key Encryption
To:      Shawn K. Quinn                          4 Oct 94 19:06:02
Subject: Re: There goes more freedom!           UpdReq 

 -=> Quoting Shawn K. Quinn to Shawn McMahon <=-
 SM> I usually use Reuters for my own hoaxes; people are less likely to
 SM> have the phone number handy for checking. 
 SKQ> It was not marked as a hoax. If someone wants to make a satire, that's
 SKQ> fine. They should, however, make it obvious they are doing so. Example:
 SKQ> Add "THIS IS A SATIRE. THIS IS NOT A REAL NEWS STORY." at the top.
 SKQ> If you perpetuate hoaxes like that and admit to it on a public echo, I
 SKQ> hope you get sued.
 Nahhhh.  Satire, esp. targeted at the govt or public figures, is
 integral to protection of free speech.
 Let those too dim to catch the joke stew in their own anger and
 confusion.  :P
 Not only that but running a libelous story, while claiming the story
 was satire, could still get you extremely busted.
 jason


201434369420143436942014343694201434369420143436942014343694718

From:    Mike Haglund                           Area: Public Key Encryption
To:      Glen Todd                               5 Oct 94 10:28:42
Subject: It's a Hoax, guys!                     UpdReq 

Glen,
   The FCC regulation "news release" was a hoax, funny, but it DID
cause confusion in others when partially "quoted".  Forget you ever
saw that non-news published here and take future news with a healthy
grain of salt (or cattle-lick salt block).
                                               Mike


201434369420143436942014343694201434369420143436942014343694718