November 2000 - cypherpunks-legacy

CDR: Perfect HOME WORK! for You - cypherpunks -KQSR
by williams＠gund.com 07 Nov '00

07 Nov '00

Dear cypherpunks! Learn the most known Perfect Home Business System! Start Home Work! Begin Own Internet Home Business! Make REAL MONEY from Internet! Just go to any of mirrors: http://www.geocities.com/perfhomebiz/ http://www.virtue.nu/perfhomebiz/ **************************************************************** ******** This message is sent in compliance of the proposed bill: SECTION 301. Per Section 301, Paragraph (a)(2)(C) of S. 1618, further transmissions to you by the sender of this email may be stopped at no cost to you by sending a reply to to this email address with the word REMOVE in the subject line.

1 0

CDR: Coastal
by ttpmember＠mailcity.com 07 Nov '00

07 Nov '00

Dear Friend, We can show you a way to make some serious money, very quickly. You have the option of starting in this program with $0 out of pocket. Yet it pays an incredible $1,000 per sale, as well as an astounding $1,000 for everyone's first 2 sales under you to infinity! In just a few short weeks you will have people literally rolling into your down line from the cold market because our turn-key system is hands down the easiest in the world. I call it the "BIG EASY". Follow it consistently, and you will win every time. All the testing and hard work have been done for you. All you have to do is plug yourself into a system that will bring fist-full of orders! Let our "genius marketing plan" do the selling and you simply refer others to it and make $1,000 per sale! www.coastclub.8k.com Tom

1 0

CDR: Re: PipeNet protocol
by Adam Back 07 Nov '00

07 Nov '00

Wei wrote: > > However I think this scheduling algorithm would have the side effect > > of making this variant of PipeNet very vulnerable to DoS attacks. > > Any user can arbitrarily delay packet delivery for the entire > > network by ceasing to send packets. > > > > It would also seem that performance would degrade badly to > > effectively the performance of the worst ping time link. > > That is all true. I guess what you meant by "insufficient" is in terms > of performance and defense against DoS attacks, not defense against > traffic analysis. Adam Shostack made the comment about insufficiency of padding in PipeNet you're referring to. I discussed insufficiency of padding in the _freedom network_ as a traffic analysis countermeasure in email with some folks who can speak up if they wish. This is because freedom does not use the synchronous approach for performance reasons and hence some active attacks remain even if you had end-to-end padding between client and exit node. End-to-end padding in the PipeNet synchronous mix-net does appear to be sufficient to provide good security against traffic analysis, but it has the DoS vulnerability and performance problems we discussed in the last pair of posts. > There is a hope, however, that the performance and DoS problems of > PipeNet could be solved in the future through other means. The > performance issue is easier, since it just requires the underlying > network to have better reliability and guarantee of service. The DoS > problem could be solved if the underlying network is protected > against DoS. Then we can require each user to place a large deposit > on each node, which would be used to compensate everyone else for > any delay caused by that user. It seems to me that with the current internet TCP properties you would have to distinguish network congestion from DoS attempts, which is not generally possible. Even if the Quality of Service (QoS) protocols were implemented and widely deployed, people still put backhoes through cables or have catastrophic equipment failures now and then. I suppose you could have compensation or insurance from the QoS enabled service provider and use that compensation to compensate you for the loss of the anonymity network good behavior bond. > I think a protocol that has good performance, defense against DoS > attacks, and defense against traffic analysis may not exist. There > may not even be a viable protocol that trades off between these > properties. Well if we look at the problem there are three properties we desire the system to have: 1. high security (idealised resistance to traffic analysis) 2. performance (reasonable performance which doesn't degrade as the network grows) 3. DoS resistance (reasonable resistance to DoS -- DoS or network outages should be local and not take out the entire network) It seems to me that we can have at most 2 of those. PipeNet provides 1, but not 2 or 3. Freedom provides 2 and 3, but is vulnerable to some active atacks even with end-to-end link padding. The other thing we could do is move content inside the network -- much of the traffic analysis material comes from the fact the exit traffic is in the clear. For example if many web servers supported connections from the freedom cloud using freedom protocol, and nodes in the network did per hop padding using a modified PipeNet scheduling algorithm where you would try to use PipeNet scheduling, but instead of delaying, if a packet didn't arrive in time, you would send some cover instead on a hop by hop basis. Then you package this thing as an accompanying apache server and encourage lots of people to run it. Obfuscation writes: > What if you eliminated the anonymity of caller to receiver, and only > tried to achieve traffic analysis resistance. That is, a receiver > can find out who is calling him, but if the caller and receiver are > honest and desire privacy, a third party cannot find out they are > communicating. > > Does this allow for a more efficient design? Can the intermediate > switch nodes now handle delays by inserting dummy traffic, which can > only be recognized as such by the other end (caller or receiver)? That coincidentally sounds quite similar to what I described above. However it doesn't seem you gain much from the recipient knowing who the sender is, beyond the change in definition allowing you to define that the class of attacks that require compromise of the recipient moot. The main difference which appears to help is that the recipient is part of the network, and can be relied upon to run software. Adam

1 0

CDR: Re: PipeNet protocol
by obfuscation＠beta.freedom.net 06 Nov '00

06 Nov '00

What if you eliminated the anonymity of caller to receiver, and only tried to achieve traffic analysis resistance. That is, a receiver can find out who is calling him, but if the caller and receiver are honest and desire privacy, a third party cannot find out they are communicating. Does this allow for a more efficient design? Can the intermediate switch nodes now handle delays by inserting dummy traffic, which can only be recognized as such by the other end (caller or receiver)? Ob

1 0

CDR: Internet IP scan completed (> 4E9 IP's served)
by montecucchi Pier Carlo 06 Nov '00

06 Nov '00

Message text written by INTERNET:cypherpunks@EINSTEIN.ssz.com >It's on /.< What's mean? Eurymedon

3 2

CDR: The Ant and the Grasshopper
by Anonymous 06 Nov '00

06 Nov '00

CLASSIC VERSION The ant works hard in the withering heat all summer long, building his house and laying up supplies for the winter. The grasshopper thinks he's a fool and laughs, dances, and plays the summer away. Come winter, the ant is warm and well fed. The grasshopper has no food or shelter so he dies out in the cold. MODERN VERSION The ant works hard in the withering heat all summer long, building his house and laying up supplies for the winter. The grasshopper thinks he's a fool and laughs, dances, and plays the summer away. Come winter, the shivering grasshopper calls a press conference and demands to know why the ant should be allowed to be warm and well fed while others are cold and starving. CBS, NBC, and ABC show up to provide pictures of the shivering grasshopper next to a video of the ant in his comfortable home with a table filled with food. America is stunned by the sharp contrast. How can this be, that in a country of such wealth, this poor grasshopper is allowed to suffer so? Kermit the Frog appears on Oprah with the grasshopper, and everybody cries when they sing "Its Not Easy Being Green." Jesse Jackson stages a demonstration in front of the ant's house where the news stations film the group singing "We shall overcome." Jesse then has the group kneel down to pray to God for the grasshopper's sake. Al Gore exclaims in an interview with Peter Jennings that the ant has gotten rich off the back of the grasshopper, and calls for an immediate tax hike on the ant to make him pay his "fair share." Finally the EEOC drafts the "Economic Equity and Anti-Grasshopper Act," retroactive to the beginning of the summer. The ant is fined for failing to hire a proportionate number of green bugs and, having nothing left to pay his retroactive taxes, his home is confiscated by the government. Hillary gets her old law firm to represent the grasshopper in a defamation suit against the ant, and the case is tried before a panel of federal judges that Bill appointed from a list of single-parent welfare recipients. The ant loses the case. The story ends as we see the grasshopper finishing up the last bits of the ant's food while the government house he is in, which just happens to be the ant's old house, crumbles around him because he doesn't maintain it. The ant has disappeared in the snow.

8 8

CDR: Connie Chung fucks up & things are not as they seem.A good example of the tremen
by Gary Jeffers 06 Nov '00

06 Nov '00

My fellow Cypherpunks, The following is interesting. http://www.albany.net/~rwcecot/iraap/Quinn/phoenix1.htm find string: Connie Chung A good example of the tremendous degree to which the major news media organizations are called to heel is seen in the facts surrounding the two year hiatus in the professional career of CBS broadcaster Connie Chung, who had the misfortune to have ended up being paired with Dan Rather several years ago. On a live call-in TV talk show some two years ago, Ms. Chung responded with a bit too much candor to a question as to what actually gets reported publicly by the major news media, given the great number of stories and items which come from the numerous sources of "raw" information. How are the stories which get the attention of the media chosen and by whom? Connie Chung replied to the effect that it wasn't too hard to decide what stories get aired--they just checked with Washington D.C. to see what had been cleared for publication by the government. As a result of her being foolish enough to tell the truth in what was likely just a naive, probably unintentional and inadvertent slip, within no more than a few hours Ms. Chung was out of a job and remained blacklisted in the industry for a good two years, only resurfacing in 1998 with a position at ABC--sufficiently chastened, some no doubt believe, to allow her to grace the public airwaves once again. Yours Truly, Gary Jeffers BEAT STATE!!! _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

5 5

CDR: Re: PipeNet protocol
by Adam Back 06 Nov '00

06 Nov '00

Tom Vogt writes: > > This is to defend against active attacks delaying packets to observe > > the effect on the network and hence trace routes. > > I don't understand the necessity of this. if the amount of traffic is a > constant anyway, a delay would vanish at the first node. > > e.g. my upstreams provider sends out x bytes every time unit, no matter > whether or not he gets anything from me. when I stop sending, nothing in > his traffic pattern changes. You're presuming hop-by-hop padding, Wei is presuming end-to-end padding. His threat model is that some fixed set of switches is compromised: | The adversary may control a fixed subset of the nodes. Also you'll note in the scheduling description that there is nothing about switches adding or removing padding. I think Wei is implicitly considering that this is done by the caller and receiver (who open links and keep the full until they close them). Even closing links is mixed to prevent closure leaking too much: | The process of making and breaking connections must also not leak | information. This can be done by using a protocol analogous to mix-net. | Link forming/destroying requests are queued and performed in batches in a | way similar to queuing and mixing of e-mail in a mix-net. Adam

1 0

CDR: RE: Connie Chung fucks up & things are not as they seem.A good ex ample of the tremen
by Trei, Peter 06 Nov '00

06 Nov '00

Seeing as the rest of this site is talking about crop circles and UFOs, I think I can ignore this report. Peter Trei [While it's not impossible for UFO-nuts to stumble across something real, their inability to distinguish reality from fantasy indicates a lack of critical faculty. In a world where the flow of claim and counterclaim has an intensity not unlike standing underneath a waterfall, filtering is essential. This claim fails one of my first level filters. PT] > ---------- > From: Gary Jeffers[SMTP:jeffersgary@hotmail.com] > Reply To: Gary Jeffers > Sent: Sunday, November 05, 2000 1:42 AM > To: declan(a)well.com > Cc: cypherpunks(a)cyberpass.net > Subject: Re: Connie Chung fucks up & things are not as they seem.A > good example of the tremen > > > Declan McCullagh writes: > > > >Source? TV show? Date? Transcript? > > > >-Declan > > > Declan, my source is the net address listed below. At > the top of that page are a "general info" button and a > "contact us" button. Under "general info" they list > info(a)iraap.org as their email address. They also list > there their snail mail address. > > That's all I know of the source. This looks like a job > for an investgative reporter such as yourself:-) Sorry I > am not more helpful. If you can actually validate from > tv network sources that that sequel occurred, you will have a great big > can > of worms to play with :-) > -Good luck! > > > > > > >On Sat, Nov 04, 2000 at 10:20:10PM -0600, Gary Jeffers wrote: > > > My fellow Cypherpunks, The following is interesting. > > > > > > > > > http://www.albany.net/~rwcecot/iraap/Quinn/phoenix1.htm > > > > > > find string: Connie Chung > > > > > > > > > A good example of the tremendous degree to which the major news media > > > organizations are called to heel is seen in the facts surrounding the > >two > > > year hiatus in the professional career of CBS broadcaster Connie > Chung, > >who > > > had the misfortune to have ended up being paired with Dan Rather > several > > > years ago. >

2 1

CDR: Giganetstore.com Apresenta Oficina do Livro
by apoio＠giganetstore.com 06 Nov '00

06 Nov '00

<http://www.giganetstore.com/index_promocao.asp> <http://www.giganetstore.com/index.asp?produtoId=7333> Metacarne <http://www.giganetstore.com/index.asp?produtoId=7333> Manuel Pais Metacarne para além da carne é a segunda ficção de Manuel Pais. Um romance integralmente situado num mundo dominado\subordinado pelas novas tecnologias ( internet, correio electrónico, diálogos on line). Nem a própria formatação do texto escapa a esta envolvente. O livro desafia o leitor a supor que está perante um monitor ligado á net e utiliza as terminologias e códigos específicos desse meio. A história é complementada por um ABC, em jeito de glossário, que orienta e ensina os ciber-amadores. <http://www.giganetstore.com/index.asp?produtoId=7334> Virada do Avesso <http://www.giganetstore.com/index.asp?produtoId=7334> Maria João Lopo de Carvalho Vidas tecidas de pequenos instantes que nada têm de pequenos nem de instantes. Uma história de hoje, na Lisboa de hoje. Teresa, Diogo, Eduardo, Luísa, caminhos desencontrados, ou talvez paralelos, onde todos partilham com a mesma intensidade o amor ou o desamor, a alegria transbordante ou a dor verdadeira. <http://www.giganetstore.com/index.asp?produtoId=7336> Barely Legal <http://www.giganetstore.com/index.asp?produtoId=7336> Pedro Paixão Barely Legal é um álbum que reúne textos e fotografias originais de Pedro Paixão. Através destes dois meios, o autor conta diferentes histórias, mantendo os temas recorrentes da sua obra o amor, o sexo, a paixão, a beleza, a dor, a morte. Aos textos, utilizando um estilo fragmentado próprio do autor, junta-se uma sequência de 40 fotografias, na sua origem Polaroids. Todo o Livro, textos e fotos, é atravessado por uma linha fortemente sensual. <http://www.giganetstore.com/index.asp?produtoId=4303> Não Há Coincidências <http://www.giganetstore.com/index.asp?produtoId=4303> Margarida Rebelo Pinto Quando uma mulher não ama um homem, gosta de vários. Vera tem 35 anos, um caso mal resolvido com João, um namorado de circunstância chamado Tiago, e Luis, um amante mais velho com quem passa bons momentos... <http://www.giganetstore.com/index.asp?produtoId=7338> -Calor! <http://www.giganetstore.com/index.asp?produtoId=7338> Miguel Angelo Luís, jovem arquitecto, seria um Thirysomething absolutamente normal no ano 2000, se a sua vida não tivesse começado a dar voltas, lá por meados dos anos 80. Só que -Calor! deu cabo da sua história e da sua vida. Viu-se então envolvido, juntamente com outras personagens-tipo, numa viagem sem regresso a um passado não muito distante e a um futuro delirante. Á procura da consciência, Luís é apenas mais uma auto vítima dos excessos que todos nós cometemos <http://www.giganetstore.com/index.asp?produtoId=7339> Coragem, Eduardo! <http://www.giganetstore.com/index.asp?produtoId=7339> Eduardo Barroso ... Tudo felizmente acabou em bem. E apesar de naquele caso eu me ter sentido completamente inocente mas cem por cento responsável, forma as mais maravilhosas palavras que jamais algum doente ou seu familiar me podiam ter dedicado. Fique atento! Pois dentro de dias irá estar disponível para encomenda o último livro de: Margarida Rebelo Pinto " As Crónicas da Margarida " Para retirar o seu email desta mailing list deverá entrar no nosso site http://www.giganetstore.com <http://www.giganetstore.com/> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0