August 1993 - cypherpunks-legacy

Smaller PGP source archives
by XXCLARK＠indst.indstate.edu 17 Aug '93

17 Aug '93

Anyone know of an ftp site with the latest PGP source in two smaller files, rather than one large one? No Unix account and insufficient disk space on this end at the moment. Any help appreciated.

1 0

PROTOCOL: Encrypted Open Books
by hfinney＠shell.portal.com 17 Aug '93

17 Aug '93

Eric had some good ideas in his protocol for verifying anonymous bank deposits. One thing wasn't clear to me: what if the bank creates a fake account? It would seem that the bank could explain away a sudden decrease in its asset reserves (money that the bank officers actually spent on mistresses and drugs) by creating a fake anonymous account which made a large with- drawal. The books would still balance. It wasn't clear to me in Eric's protocol whether it would be expected that the identity of accounts which made such withdrawals would be revealed. Doing so would seem to go against the purpose of the digital bank. But without that ability it would seem that fake accounts could cover up any amount of mismanagement. Hal

1 0

CRYPTO'93, anyone here going?
by miron＠extropia.wimsey.com 17 Aug '93

17 Aug '93

I will be attending CRYPTO. I was wondering if any cypherpunks will attending this conference. -- Miron Cuperman <miron(a)extropia.wimsey.com> | NeXTmail/Mime ok Unix/C++/DSP, consulting/contracting | Public key avail AMIX: MCuperman | Laissez faire, laissez passer. Le monde va de lui meme.

3 2

FBI Credit Search bill update (CPSR)
by L. Detweiler 17 Aug '93

17 Aug '93

>From the CPSR newsletter v.6 #6 Aug 12, 93 ===cut=here=== [a 2] FBI Seeks Power for Credit Search Without Warrant In early July, the Senate Intelligence Committee approved a provision that allows for FBI access to credit reports using only a letter instead of a judicial warrant in cases that they say involved national security. There is concern that this will be subject to abuse and that the necessity has not been proven. A national security letter gives the FBI the authority to obtain records without judicial approval and without providing notice to the individual that his or her records have been obtained by the Bureau. Similar FBI proposals were rejected in previous years after Congressional leaders expressed concern over the civil liberties issues raised. Although the current draft proposal is more comprehensive than those circulated in previous years, the changes and additions do not alter significantly the central character of the proposal. The Administration's 1993 proposal includes explicit limits to dissemination of obtained information within the government, penalties for violations including punitive damages, and reporting requirements. These provisions are positive changes from the legislation put forward in previous years, but they do not save the proposal from its intrinsic flaws.

1 0

PGP 2.3a
by fergp＠sytex.com 17 Aug '93

17 Aug '93

Uh, just a quick and dirty request: I have a few net.friends who want a copy of this latest version. Where is a quick and reliable anon FTP site (no kidding).... I don't care to upgrade, but I certainly won'y stand in the way ... Paul Ferguson | "Government, even in its best state, Network Integrator | is but a necessary evil; in its worst Centreville, Virginia USA | state, an intolerable one." fergp(a)sytex.com | - Thomas Paine, Common Sense Type bits/keyID Date User ID pub 1024/1CC04D 1993/03/15 Paul Ferguson <fergp(a)sytex.com> Key fingerprint = EE D2 93 7D 04 6D C6 05 AC 36 AD 9D 8E 4F 41 58

2 1

nevot README (by popular request)
by Graham Toal 17 Aug '93

17 Aug '93

NEVOT - A network voice terminal (BETA RELEASE 1.3 03/25/93) (c) Henning Schulzrinne ============================================================= NOTE: The .nevotinit files from versions prior to 1.3 are incompatible with the current command language and should be deleted. DESCRIPTION: The network voice terminal (NEVOT) allows audio-capable workstations to participate in audio conferences across local and wide area networks. Features: - real-time protocols: - NVP (network voice protocol), as used by 'vat' (LBL) and VT (isi) - 'vat' native packet format and session protocol - RTP draft - versions for: - Sun SPARCstation (SunOS 4.1.x and Solaris 5.x) - SGI Indigo (4D Series) and - Personal DECstations [as soon as we can get the DEC audio library to work] - GUIs: - XView - Tk [in progress] - curses - dumb terminal - fully controllable by Tcl-based command language - can serve as gateway for protocol and encoding translation - network transport protocols: - TCP - unicast/multicast UDP - ST-II [currently inoperative] - several independent concurrent conferences, each with different encoding and compression - DES-based voice encryption (U.S. only) - audio encodings: - 64 kb/s (mu-law PCM) - 32 kb/s G.721 ADPCM (Sun only) - 32 kb/s Intel DVI - 24 kb/s G.723 APDCM (Sun only) - 13 kb/s GSM - 4.8 kb/s LPC codec - each site can use different audio encodings - playback and recording of AIFC and .snd audio files - extensive statistics and tracing facilities - arbitrary voice packet length, which may differ for each site - lost packet and silence substitution - setable audio buffer occupancy - configurable adjustment mechanisms for playout delay, VU meter, silence detector and automatic gain control - redefinable session identifier string with variable substitution DOCUMENTATION: A compressed PostScript file describing Nevot is available for anonymous ftp from gaia.cs.umass.edu, as file ~ftp/pub/nevot.ps.Z. INSTALLATION: The sources are available by anonymous ftp from gaia.cs.umass.edu, as file ~ftp/pub/nevot/nevot.tar.Z (compressed tar file). The platform- specific external libraries are contained in the directory pub/nevot/lib.$ARCH. These typically change rarely. ARCH can be either dec, sgi, or sun4. Precompiled binaries are available as well: nevot/bin.$ARCH/nevot.tar.Z For the precompiled binaries, you also need to retrieve the initialization file ~ftp/pub/nevot/nevotinit and rename it to .nevotinit in the directory from which you plan to start Nevot. Unpack the compressed tar files, then execute the shell script compile You may have to adjust parameters within the shell script to your local needs, e.g., the compiler name. You also have to install the tcl library (version 6.7 or later), either the binary version as mentioned above, or from sources to be found in sprite.berkeley.edu:tcl. In order to use the UDP multicast and/or ST-II facilities, you have to install the appropriate kernel modifications. Due to export restrictions, the DES encryption code is available only by e-mail from the author. If you do have the DES code, change the value of the symbol DES in the Makefiles to 1. To enable on-line help for the OpenWindows version, the environment variable HELPPATH should be set to include the source directory where the .info files are located (here, assumed to be /usr/local/nevot/xview): setenv HELPPATH ${HELPPATH}:/usr/local/nevot/xview OPERATION WITH SD: ------------------ sd is a session directory written by Van Jacobson, LBL, available for anonymous ftp at ftp.ee.lbl.gov. The nevot/sd directory contains a replacement for the sd start_audio procedure, which you can insert into your ~/.sd.tcl startup file. Make sure that the directory containing the Nevot binary is in your path. Use at your own risk (i.e., don't blame VJ if it doesn't work...). DIFFICULTIES: ------------- If you experience difficulties, check the problems.tex file in the doc directory. BUG REPORTS: This is a beta release. Please send all bug reports and suggestions to the author at hgschulz(a)cs.umass.edu. New releases will be announced through the rem-conf mailing list (to join the list, send a request to rem-conf-request(a)es.net) I would appreciate if you could let me know how you are using the software. [A version for the Personal DECstation and DECstations with the DEC audio hardware is currently under development.] COPYRIGHT: All sources and documentation (except those listed in the acknowledgements or otherwise identified) are (c) Henning Schulzrinne 1992, University of Massachusetts and AT&T Bell Laboratories. Do not redistribute this software, or integrate with other software, without preserving the copyright notice. All changes have to be clearly marked. You may modify the code as long as you provide me with a copy. ACKNOWLEDGEMENTS: The DES encryption module was developed by Steve Kent and John Linn of BBN Communications Corporation, Cambridge, MA and provided by Karen Seo of BBN. The audio library incorporating G.721 and G.723 audio compression was provided by Daniel Steinberg of Sun Microsystems. It may at some point be integrated into the regular Sun OS. The Intel/DVI ADPCM codec was slightly modified from sources by Jack Kansen (CWI) and is copyrighted 1992 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands (used by permission). The ST-II API and kernel support was developed by Charlie Lynn at BBN. The ST-II API (\C{st2_api.h}) is copyrighted (c) 1991 by BBN Systems and Technologies, a division of Bolt Beranek and Newman, Inc. and used by permission. The UDP multicast kernel support was written by Steve Deering, Xerox Parc. Charlie Lynn (BBN) was helpful with some of the fine points of the ST-II API. The Tcl interpreter was developed by John Osterhout, University of California at Berkeley. The sources are copyright University of California and used by permission. Advice on porting \nevot\ to the Silicon Graphics platform and numerous bug fixes were provided by Andrew Cherenson (SGI). Michael Halle (MIT) figured out how to get Xview applications to display fonts at the design sizes. The VU meter is based on discussions with Gints Klimanis (SGI). The audio mixing (mix.c) and checksum code (checksum.c) was taken from the ISI voice terminal (VT), copyright June 1991 by the University of Southern California, by permission. The silence detector and the ST-II code are modified versions of the respective parts of VT. The \vat\ session and audio protocol were implemented based on descriptions provided by Van Jacobsen. The I/O flags interpreter (flags.c) is a modified version of software contributed to Berkeley by Chris Torek. Copyright (c) 1990 by the Regents of the University of California; used by permission.

1 0

Inslaw info (bitte)
by fergp＠sytex.com 17 Aug '93

17 Aug '93

-----BEGIN PGP SIGNED MESSAGE----- On Mon, 16 Aug 93 11:06:28 PDT, Greg Broiles <uunet!ideath.goldenbear.com!greg> wrote - > Eric Hughes says he's uninterested in making the Inslaw files > available on soda, so I'll be happy to mail copies of them to > interested parties. Send any info you have to me at either: <fergp(a)sytex.com> or <ferguson(a)fiber.sprintlink.net> Danke. -----BEGIN PGP SIGNATURE----- Version: 2.2 iQCVAgUBLHARI5RLcZSdHMBNAQGs1gQAplGq1DnDIvK4auaDKK6HA1uwxPV/Hf1c Z5btYCIQAvkDviLhAVMuzzTB0SymmIvyubnFy7luEVUKJfrNSeGdx3bWUm0icB63 82mgcZBEYZQnDRv9f76Y20qdeZ/R89Nm/BUNx1mFhzjzQGbmlOVlkYdkJdhvRNXi PlpGZpFuzuk= =aMAi -----END PGP SIGNATURE----- Paul Ferguson | "Government, even in its best state, Network Integrator | is but a necessary evil; in its worst Centreville, Virginia USA | state, an intolerable one." fergp(a)sytex.com | - Thomas Paine, Common Sense Type bits/keyID Date User ID pub 1024/1CC04D 1993/03/15 Paul Ferguson <fergp(a)sytex.com> Key fingerprint = EE D2 93 7D 04 6D C6 05 AC 36 AD 9D 8E 4F 41 58

1 0

Solicitation of Tax Evasion--An Example
by tcmay＠netcom.com 17 Aug '93

17 Aug '93

What could anonymous systems be used for? Besides allowing anonymity in posting embarrassing or otherwise "questionable" messages, is there any _commercial_ use? These are questions I hear a lot. Yes, there are commercial uses. Here's a case that just came wafting across the Net: a woman who wants to evade taxes--she states this explicitly--by bartering her labor for some software. (I have no problem with this, being against taxes and all, and knowing that various kinds of untaxable barter exchanges are going on everywhere.) Here's her post (no names have been changed, as she posted publicly): Newsgroups: misc.forsale.computers.mac From: vanous(a)mdd.comm.mot.com (Brendan K. Vanous) Subject: BARTER: graphic design for s/w Message-ID: <1993Aug14.040010.141(a)mdd.comm.mot.com> Summary: would like to barter services for Mac software Date: Sat, 14 Aug 1993 04:00:10 GMT POSTING FROM MY HUSBAND'S ACCOUNT (mine's temporarily inaccessable): Hi. I'm a freelance forms/graphics designer who would like to expand her software library in an inexpensive (& non-taxable :-) manner. Therefore, I would like to propose the following: I will trade any of my design services (business forms, business cards, illustrations, manual formatting, brochures, newsletters, any sort of desktop publishing task that can be performed on a Mac ...) for an equivalent amount of Mac software (got an extra copy of PageMaker 4.1 lying around that you don't need?) All software must be original, with documentation and letter of transferral. NO PIRATED COPIES, PLEASE! If interested, please reply to cyphrkt(a)eskimo.com and I'll reply to you as soon as I possibly can (probably another 1 or 2 days before I get my account back up and running), or contact me at (206) 778-3362 by voice. Thanks! - Cindy Vanous ................. Chances are no IRS types are watching the Net for such solicitations--and the act of making such an offer is probably not itself illegal. The IRS would have to investigate, call an audit, prove taxes were evaded, etc. The existence of her solicitation might or might not be considered. But in an era in which every Usenet utterance is recorde in perpetuity and is available on CD-ROMs for browsing and compilation of databases and dossiers (you all *do* know this, don't you? Don't bother applying for certain jobs if you posted too many times, or even once, to "alt.sex.perversion.whatever"). Furthermore, anyone _reading_ this kind of post can, for example, call an anonymous (semi-anonymous?) tip line run by the IRS. Last I heard, tipsters can get 25% of any taxes collected as the result of their good citizenship. So, what can anonymity of the sort we discuss do here? After all, if she's anonymous, how can a tranaction ever be consummated? (I'll leave aside purely electronic transactions, which could in principle be done fully anonymously, using a combination of "pools" (the "digital democracy walls" I have cited before) and anonymous remailers.) If Cindy were to use an anonymous remailer to post her offer, and then offer a public key that could be used by anyone who wished to respond to her offer, a response could then be posted in the same group. Something like this: "Alice" (really Cindy): "Want to trade consulting for a used Macintosh. If you are interested, use this public key to respond: 3$1k8dRW4..." Bob (really Jack) sees this, decides to offer a deal, encrypts it with her public key (a one-time public key, used just for this deal), and used anonymous remailers to post it in place she is sure to see it (the same newsgroup, for example, or in one of Miron Cuperman's "pools," or in "alt.w.a.s.t.e," etc.). Bob also includes a public key she can use to communicate with him. If they like the general deal, they can then agree (using only their encrypted channel, readable only to themselves, even though they have never met and have no idea who the other is or where they live) on the next step. In a purely electronic transaction, this process can continue digitally and fully securely. If physical goods or money need to change hands, they can agree to meet, to use phones, etc. The risk to Cindy is still there--Bob (Jack) could of course be a government agent, etc.--but at least she is no longer broadcasting her intentions for all Usenet readers, present and future, to potentially see. And no future readers, such as government computer programs set to scan all postings for evidence of such illegalities, can retroactively detect and compromise her. (If no actual physical contact is needed--such as for software sales and consulting--then of course the contact can in principle remain fully anonymous. Even the transfer of physical goods can be done with moderately good security against tracing...smugglers, drug dealers, and hijackers do it all the time. "Fences," they are called. And so on.) This is just one example of how "the little people" can benefit from the schemes we are exploring. Understand that I have no illusions that our friend Cindy will soon be using such methods...but maybe in 5 years. -Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. Note: I put time and money into writing this posting. I hope you enjoy it. -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. Note: I put time and money into writing this posting. I hope you enjoy it.

4 5

ADICO: Anarchist FDIC
by Kent Hastings 17 Aug '93

17 Aug '93

ADICO: Anarchist FDIC#000# When someone objects to free banking (in gold, for example) on the grounds that unregulated banks will have fractional reserves and have no incentive to stay honest, perhaps describing an Anarchist Deposit Insurance COmpany (ADICO) will ease their fears. A new or relatively obscure offshore bank would gain the trust of potential depositors by agreeing to cooperate with surprise inspections of their gold supply. Depositors would pay a small premium to cover loss from bank failures due to theft or fraud. Cryptographic protocols would need to be developed to allow the ADICO to see a verified total amount on deposit, without revealing anything about any particular depositor. The total should match the physical amount of gold in storage, assuming 100% reserves. Does anybody know of work on this, or think it is worth researching? Kent - <jkhastings(a)aol.com> #000#

4 4

Inslaw files
by greg＠ideath.goldenbear.com 17 Aug '93

17 Aug '93

Eric Hughes says he's uninterested in making the Inslaw files available on soda, so I'll be happy to mail copies of them to interested parties. -- Greg Broiles greg(a)goldenbear.com Golden Bear Computer Consulting +1 503 342 7982 Box 12005 Eugene OR 97440 BBS: +1 503 687 7764

1 0