December 2003 - cypherpunks-legacy

Turn yourself in!
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

The alt.tasteless crowd is currently discussing the CDA, with some predictable results, and some not so predictable... If you wish to participate in mass civil disobedience, follow these instructions: Send a message CC'd to your local media's net address and to justice.usdoj.gov (Department of Justice) which contains something to the effect of, "I wish to turn myself in for the crime of distributing offensive material via the Internet and as evidence, provide the following:" Attach some sort of uuencoded data to your message as "evidence". Make sure that every possible media outlet hears loud and clear that you want every last case prosecuted.

2 1

Re: [noise] Re: Charter of PDX Cpunk meetings
by jim bell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 07:18 AM 2/4/96 -0800, bernardo(a)alpha.c2.org wrote: >jim bell wrote: > >>> I think an explanation for this is due. Jim is going to move his complaints >>> here instead of dealing with them with me no matter what I do... >> >> Alan Olsen is correct, here. > >This is childish and pointless. Please shut up or take it to email. Odd that you would say this, even more odd that you would post it to the Cypherpunks list. The only reason I am posting this is that you appear to be taking a remarkably similar position to Alan Olsen. > >> But he (the anonymous poster): >> 1. FLamed me on this national list, similarly to the way Alan Olsen later did. > >FWIW, this is an _international_ list with a lot of people who are >just not interested in your petty bickering. If you want to argue >about this, please do it in private. Then why didn't you send me the email directly, and NOT copy the list. Somehow, it appears you have a double standard. The only reason I'm responding to you now, ON CYPHERPUNKS, is that you appear to be hypocritically asking me to "keep it off the list" at the same time to failed to do the same yourself. Sounds like a double-standard. Your behavior is remarkably remeniscent of Alan Olsen himself. > If Alan posts responses to the >list, that's his problem. You don't _have_ to answer in public. It's been pointed out to me that because Alan flamed me in public, anonymously, on Cypherpunks, I am entitled to have it known what he did. >> 2. Failed to be willing to sustain the debate in a more appropriate list, >> even under a stable nym. > >You have something against anonymity? In this case, perhaps this list >is not the best place to be. I think you're deliberately pretending to misunderstand. I have nothing against anonymity. While a "newbie," I was under the impression that the term "stable nym" (my usage) refers to an anonymous alias that is untraceable. In fact, it was _I_ who suggested that this anonymous flamer (now apparently self-admittedly identified as Alan Olsen himself) adopt a stable nym and debate me on some other area more appropriate for the subject. While I do feel there is CP relevance to the digital cash/good encryption/network applications of "Assassination Politics," I didn't want to force this on what I would like to think of as a "not particularly political" list. (Recent topics have battered the distinction, I realize. I don't want to make it "worse," however.) >> that I had been flamed by that anonymous poster. The fact that he was >> anonymous says it all. The fact that he has not returned says it all. The > >The fact that he was anonymous says nothing whatsoever. So what if >you received some email agreeing that you'd been flamed? The point is, some people seem to agree that what this anonymous flamer did was against "nettiquette," or at least against CP typical behavior. Had he made his criticisms with a stable nym and been willing to sustain a serious debate (possibly on another area) that would have signalled that he was believeable and serious. He was not, however. >> the fact that I am relatively new here. I have no intention of inflicting >> an unwelcome discussion of "Assassination Politics" on the list, and > >Actually, and Perry may disagree here, but I'd have no objection to a >discussion of "Assassination Politics", or any other nutty political >theories, as long as we can stick to reasonably mature discussion and >not flames and petty ego boosting. "..other nutty political theories"? Harummmph! Well, I guess you got your "not so subtle" dig in, there. I'd like to see a bit more widespread approval of such a discussion before actively starting it, anyway, especially by some of the "old-timers" here. (Sadly, as I newbie, I don't really even know who the "old timers" are!) But recently, there's been too much traffic anyway! >> suffered any longterm loss of reputation of his own. I, on the other hand, >> use my REAL NAME. > >Whoopie! A True Name! Big deal. I care not one jot whether or not >you use your REAL NAME. I have no way of knowing if it is, in fact, >your real name. Should it make a difference? Not necessarily. As I pointed out before, I'm happy to debate a stable nym (a term I learned only a few weeks ago, BTW). But completely anonymous flames from a person who cuts and runs does not improve the S/N ratio of this or any other list. >No one is going to "suffer any longterm loss of reputation" by >disagreeing with you, or anyone else, whether or not they use a nym >(or anonymity). I didn't want anybody to even be able to use the excuse of "I feared for my life debating with that vile purveyor of that wacky idea, 'Assassination Politics.' " I invited him to use a stable nym. >> Only a fool would have taken an anonymous flamer seriously under those >> circumstances. > >An anonymous post is no less valid for being anonymous. You may be surprised that I absolutely agree. However, the post was not merely "anonymous" but flaming, and the poster didn't stick around. In other words, its anonymity didn't do it in, the motivation of the poster did, however. > The only >advantage of a stable nym, whether or not it's a True Name, is the >ability to gain (or lose) reputation through the content of its >posts. Perhaps a nym with some reputation is taken more seriously >than an anonymous poster, but so is an unknown nym. Neither you nor >Alan has any reputation to speak of (to me, at least), so an anonymous >post has no less. But on the other hand, a flaming "debate" on CP doesn't help any of YOU guys, the other readers of CP. >>> Jim ignored that request and I removed him from the list. >> >> Read: "Alan Olsen exercised his authority in his own personal fiefdom, the >> "PDX Cypherpunks list." > >Are you saying he doesn't have that right? If it's his list, he can >do whatever the hell he likes with it. No, I merely translated "Olsen-speak" into language most of the rest of us could understand. He had that right. On the other hand, the exercise of this right displays Olsen's behavior for all to see. I wanted there to be no doubt on the national list what Alan Olsen was doing. >> On the contrary, I have no interest in dealing with this sleazy character in >> email. He was the one who chose a national list to do his flaming and >> baiting, and I think he deserves full "credit." > >In other words, you are not interested in resolving any problem you >have with Alan, you just to make a lot of noise in public in an >attempt to "embarrass" him. Go play on some other list where this >kind of thing is appreciated. > >>> The following is the last I will say publically on the matter. >> >> You're going to take your bat and ball and "go thwait home!" You hear your >> mommy calling, Alan. > >This list periodically devolves into this childishness. I'm glad Alan >is not going to say any more. I am, too. > I award Alan 20 Reputation Points for >being mature enough to walk away (delayed long enough to see whether >he does) As long as the record reflects his misbehavior, I am satisfied as well. Jim Bell jimbell(a)pacifier.com -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMRVpWfqHVDBboB2dAQEzVgQAgIjr4L3tYYgoIAe+H25y8b/Z+mIRq+xz HaTNntpFyBmIO3hGFLYNW90QurXd0sFHgRQJ0ohN103buI1j1NkqX1O7seKv3FaG 0png19/IkbrssZ7QwXUJU5tVuRY9h6eGi7pt2Rdj/OpkL3neyqKmYu3UmmOHZtMa j2R/pWwdCwE= =WXd4 -----END PGP SIGNATURE-----

1 0

Re: Jamming and privacy problem
by Phil Agre 17 Dec '03

17 Dec '03

The emissions tracking proposal might have another sort of relevance to cryptography. Assuming (it's a big assumption, but entertain it for a moment) that we agree that some type of automatic enforcement mechanism for emissions-based repairs were a good thing, how could it be built without identifying any individuals to the authorities? What I find so utterly over-the-top about the ARB proposal is that it is capable of maintaining records on everybody everywhere, whether they are violating any laws or not. Of course they'll promise to protect privacy, and they may even promise not to capture any records for people whose emissions fault codes come up clean (though they say nothing about this in the RFP). But such assurances would be nonsense, since once the system is in place a simple software change would cause the system to revert back to the total-surveillance functionality described in the RFP. The key, then, is designing systems so that simple software changes under the control of the authorities can turn them into instruments of oppression. This design consideration is hard to even formulate accurately in the context of traditional system design methodologies, which assume that everything in sight comes with identifiers and that *the* way for a system to relate to something is to represent it in terms of those identifiers. Digital cash and other such schemes are so profound precisely because they break with this underlying assumption, forcing systems to think thoughts like "this person (whoever s/he may be) has paid $1 to travel on this road", "this person (whoever s/he may be) is eligible for an upgrade to first class", "this person (whoever s/he may be) is obeying emissions laws", and so on. Philosophers and linguists call these "indexical" (or, more precisely, "deictic") because they identify an individual contextually without appealing to a name or other universal identifier. Phil

1 0

Fair Credit Reporting Act and Privacy Act
by Frank Willoughby 17 Dec '03

17 Dec '03

FWIW, while the goal of the cypherpunks in helping to promote secure private communications by making encryption publicly available on a worldwide scale, definitely helps socially backward countries which have dictators (communist or otherwise), it misses its mark somewhat in the USA. Personally, I think that in the USA, this is treating the symptom, but not the disease. Probably the easiest way of ensuring that personal information isn't wantonly distributed by credit agencies or (anyone else) is to update our Privacy Act - which is ridiculously out-of-date and badly in need of being re-written. It is also hampered by its apparent lack of teeth. My personal recommendation would be a law like Germany's BDSG. The BDSG (BundesDatenSchutzGesetz which translates to: Federal Information/Data Protection Law (aka Privacy Act). Even better would be a law like the one in Austria (which I understand has the world's strictest privacy act. (Hooray for the Austrians). 8^) If the Privacy Act were rewritten to be as strict as the BDSG, businesses would have a (mandatory) legal requirement to: o Ensure that personal data is stored properly (by encrypting it, etc) o Ensure that personal data is not distributed o Ensure that databases are *not* being maintained which describe the characteristics of individuals (buying habits, income, property ownership, etc) wantonly propagated by marketing (direct mail, telemarketing, etc) companies. (Note that credit bureaus still have a function, but they would be (forced to be) responsible for ensuring that compliance with the Privacy Act would be maintained. This could result in better safeguards being implemented by the credit bureaus.) resulting in the following by-products: o the promotion of the use & implementation of encryption - including the possibility of ITAR being reduced or eliminated for the export of encryption products o reduced propagation of personal information o reduced amount of junk mail that winds its way to our mailboxes each day 8^) o reduced amounts of tele-marketing 8^) If pressure were brought to bear on the law-makers to rewrite the Privacy Act to give it qualities like the BDSG, etc, then this would significantly help achieve the cypherpunks' goal of promoting secure private communications. (I realize this isn't the only goal of the c'punks, but its a start). As the changes would be made within "the system" as opposed to outside of it, there would be virtually no hassle from the government. IOW, changing the Privacy Act will probably solve a variety of problems while achieving the c'punks goal of secure personal communications. Food for thought. Best Regards, Frank <standard disclaimer> The opinions expressed above are of the author and may not necessarily be representative of Fortified Networks Inc. Fortified Networks Inc. - Management & Information Security Consulting Phone: (317) 573-0800 - http://www.fortified.com/fortified Home of the Free Internet Firewall Evaluation Checklist

1 0

RE: Protecting the innocent on the nets
by A. Padgett Peterson, P.E. Information Security 17 Dec '03

17 Dec '03

David rote: >If so, then using the dictionary as the key seems bad---the >compression dictionary is not designed to obscure the data, but to aid >in compression. The dictionary might well be easy to guess. For >example, some compression schemes use a Huffman coding on their >dictionary. If so, one can guess that short pointers into the >dictionary correspond to common plaintext strings. Using such a >dictionary as an encryption system is security through obscurity. Oh Heavens to Betsy, I was not trying to describe *crypto*, that might be regulated. Was describing a mechanism to comply with the new Scudderite laws concerning protecting the innocent from nasty sights. Figure it this way: can duplicate CD-Roms for a quarter. If a subscription costs $19.95/yr then who is going to bother with cloning it ? "controlled circulation" magazines would save postage. Web pages could be posted with nothing but pointers (don't tell me you have never sat waiting for a little red bar to reach the end) and assurance that only a specified audience could look at the pretty pictures (which compress the best of all 8*). Further, if the intent is to satisfy a law then would this not be a "good faith" attempt to do so ? Zippy's friends have decided what is not safe to be on the net in the clear but they have not said what it takes to protect the innocent while allowing consenting adults their freedom to communicate. If I want good crypto I just use PGP (and the Enclyptor makes it real easy). This is something completely different. Warmly, Padgett

1 0

Re: free speech and the government
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:25 PM 2/4/96 +0000, Stephan Mohr wrote: >Actually, I am glad that the whole story started over some neo-nazi stuff >and not a recipe to easily make a very potent poison. For some strange reason, people believe it is difficult to find information on such things. I picked up my copy of _Poisons and Poisoners_ by C. J. S. Thompson at Barnes and Noble in the discount section for $9.98. Books on the topic can also be picked up in bookstores catering to Murder Mystery fans. (Some excelent descriptions of esoteric poisons can be derived from these books.) "Forbidden" information is hard to forbid with the existance of the printing press. Electronic networks make the information even more available. Are you suggesting that we burn all the books with "dangerous" information? And who's definition of "danger" do we take? Yours? Mine? The National Council of Churches? Crypto relevence: Some people regard the ability to hide "dangerous" information to be as "dangerous" as the information hidden. Freedom of Speech includes the right to choose who can listen to that speech. Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ Is the operating system half NT or half full?

1 0

No Subject
by karl.ike＠sihope.com 17 Dec '03

17 Dec '03

Attila: I'm not in the business of running or hiding. I'm just an average, everyday working guy that doesn't like credit reporting agencies, what they stand for or what they do for money. I didn't say that I was going to do this. I just had the idea! I don't have the knowledge or the money to spend. That doesn't mean that there is someone out there that would jump at the idea. I just don't like the idea that these assholes know more about me than my mother and sell my private and personal information to anyone for big bucks. My credit is fine, just ask my banker or better yet, my mom. I am assumming that you know far more people on the internet since I have only been on for a month and have done three e-mail. I'm just suggesting to get the idea out and someone will take the ball and run. Yes, they will be a hunted man, but not a US citizen. Someone out there with a laptop and a cellular, living on a cruise ship, just may enjoy the idea. Just me, Karl

1 0

Re: Encryption and Backups
by Robert A. Rosenberg 17 Dec '03

17 Dec '03

At 20:33 2/4/96, John Pettitt wrote: >On Sun, 4 Feb 1996, Alan Olsen wrote: > >> Something that I have not seen addressed is the need for strong encryption >> in backup software. >> >> Most backup software has an "encryption" option, but I have seen few that >> have anything resembling strong encryption. Furthermore, I have seen no >> real push for strong encryption for backups at all. >> ... >> Might be an idea for a product there... (And you can bet law enforcement >> would throw a hissy fit about its existence.) >> >CP Backup (part of PC Tools for Central Point aka Symantec) has DES. As to >how good the implementation is: I have no idea. Retrospect (a Mac Tape/Floppy Backup Utility) also has an Encryption Option I think.

1 0

RE: [NOISE] Futplex makes the news!
by A. Padgett Peterson, P.E. Information Security 17 Dec '03

17 Dec '03

OK, I give up. Took off the head phones connected to the TO, went downstairs, set the V-15 Type II on the Dual 1019 to 7/8 gm. Patched to the Pioneer 1500TD amp feeding front AR-5's and rear AR-2ax's, cranked to "pain" and spun some vinyl. "Freedom's just anotha' word foa nothin' left to lose." - Janis Joplin & Full Tilt Boogie Band, Columbia PC 32168 (first one I found in the pile - believe the original was on a album with her standing spraddlelegged with the big grin - is here *somewhere*. Credit on th record was K. Kristofferson and F. Foster. (Had to go downstairs, contrary to popular belief, everything is not in my den 8*). warmly, Padgett

1 0

Songs, Janis, Left to Lose, and Salinas
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:57 AM 2/5/96, "A. Padgett Peterson, P.E. Information Security" <PADGETT@hobbe wrote: >OK, I give up. Took off the head phones connected to the TO, went downstairs, >set the V-15 Type II on the Dual 1019 to 7/8 gm. Patched to the Pioneer 1500TD >amp feeding front AR-5's and rear AR-2ax's, cranked to "pain" and spun some >vinyl. You might want to explain to the GenXers what "vinyl" is. >"Freedom's just anotha' word foa nothin' left to lose." - Janis Joplin & >Full Tilt Boogie Band, Columbia PC 32168 (first one I found in the pile - >believe the original was on a album with her standing spraddlelegged with >the big grin - is here *somewhere*. Credit on th record was K. Kristofferson >and F. Foster. (Had to go downstairs, contrary to popular belief, everything >is not in my den 8*). Speaking of this song, I live "near Salinas." --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Indecent Trash
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 10 Jan 96 at 10:42, t byfield wrote: > At 10:26 PM 1/9/96, Alexander 'Sasha' Chislenko wrote: > > >- Landfills: They are probably the richest source of detailed > > historical information that is not obtainable from any > > other source and can be used to reconstruct the detailed > > history of society, economy, technology and any single > > person with incredible detail. > I ain't holding my breath until someone develops a search > engine for Fresh Kills. I can see it now... about the time that Grandson of Altavista finally yields a URL for Jimmy Hoffa's body in some dump somewhere the government will have figured out that it's so much simpler to catalog the stuff on the way IN, when all the artifacts are fresh and unmixed. While we're all watching what the government does to intercept packets, they will be routing *trash* packets through mysterious "garbage routers." As the stink grows stronger, someone will conceive of anonymous trash forwarders. They will accept unidentified trash, no questions asked, anonymize it with random DNA and fingerprint whorls, and sneak it into public trash receptacles. DNA generators will enable the mischievous to plant fabricated indications that Hillary did indeed have something going with Vince, the late Khomeini (hey, hard is hard, right?) as well as legions of four-footed friends, confirming the suspicions of multitudes. As the piles of trash-based data grow, some Senator from Nebraska will sound the alarm that kids are too easily exposed to the indecent signs of private behavior retrievable on the Net and will propose draconian measures to hold everyone responsible for their contributions to the city landfill. Public receptacles will be closed. Trash will only be collected from registered Identifed Surplus Providers (ISP's). $250,000 fine for disposing of a condom in a dump accessible from the Internet... 10 years in prison for carelessly tossing those nasty Polaroids in the kitchen compactor. The trash of the world will have to be made safe for kids to view. Everything will be a lot easier to trace and control if the garbage input is fully identified. Barcodes on trash bags might do for starters. Access to the garbage system might have to be restricted to those 18 and over. Trash collectors could be made responsible for content, drafting them without pay into the ranks of the trash police. People could be encouraged to report suspicious trash, and trash-related activities like neighbors sneaking out at night to place an innocent-looking compactor bag down the block with someone else's trash. For their own protection, youngsters might be required to retain all their garbage until age 18 and then, in a solemn ceremony worthy of the true significance of coming of age, pitch it all (duly anonymized to prevent abuse of minor indiscretions) from their new position as lawful participants in the world garbage system, friends and well-wishers trying to applaud and hold their noses at the same time (try it -- if you're not careful you can break your own nose, but hey, that'll work, too!). Who knows? Maybe Heinlein's advocacy of keeping kids in a barrel and feeding them through a hole until age 18 will enjoy resurgence among the compulsively protective while the Web meanwhile will provide real time underground data on Heinlein's rpm rate. Protecting the trash of youth will, however, give rise to the hiding of adult trash among that of the underaged. The government will have to root out offenders and "impute" suspicious trash to the parents. Those with no visible source of trash will of course be suspect, and will have to emit innocent trash to cover themselves. This will give rise to the practice of "trash laundering," in which agents convert nasty trash to innocuous trash that may then be tossed into any monitored, controlled channels with no repercussions. Trash laundering will become a grave offense to the accompaniment of government and Ad Council PSA's and free brochures from Pueblo, Colorado. Blatant offenders who have fled to foreign climes will be kidnapped, some will be tortured, because the War Against Filth will be a moral commitment of the national body. Foreign governments headed by suspected trash traffickers will be toppled in quickie invasions, their leaders brought back in chains to disappear into federal dungeons. Public debate will center on the legalities and rationalizations of using the military in policing domestic trash, while agencies such as the FBI cry for more budget to fight the scourge that threatens the decency of the nation's repositories. Control of trash will spread inevitably to control of liquid wastes, whereupon a terrible discovery will be made: Everyone, but everyone, emits unspeakable bodily products. At that point the government will have no choice but to reluctantly declare everyone an outlaw and execute the populace. It's all as logical as what happens when you introduce division by zero way down at the bottom of the complex equation where it isn't so noticeable. We Jurgar Din (that will have to suffice: I do not yet live in a free country) +"The battle, Sir, is not to the strong alone. It is to the+ +vigilant, the active, the brave. Besides, Sir, we have no + +election. If we were base enough to desire it, it is now + +too late to retire from the contest." -Patrick Henry 1775 + -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBMPS/PEjw99YhtpnhAQH1UQH5AdXBd7AvG6xT7x/cTXf5W1cAUXzoJ+GB N0/SPrdoJnbUSN5LkJDwoVwA/eiL6/LVN9CjtmQwmydyBysM7M/7Xw== =q+CF -----END PGP SIGNATURE-----

1 0

Re: verification of randomness
by jim bell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 03:57 AM 2/5/96 +0100, Andreas Bogk wrote: >I've built a random number generator based on the noise of a Zener >diode. Now I'd like to verify it's correct operation. I'd be very >grateful if someone could point me to existing software for randomness >tests or additional tests not mentioned in Knuth. >I'll make the design of the generator available as soon as I've >verified it's operation. >Andreas Excellent! Sounds like a worthwhile project. If you have an email mailing list, put me on it please. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMRWRnvqHVDBboB2dAQFgWwQAlgxpZ1Bx21HRU39ikFUKBFoewtfjVzcD zwOjkf5IXyITNV1IZmwmbIyzVmu1ndWr4NHhZZhxD9jCyzC6qFqvED/7Zye4vUdV XkcTDIBqqa334Awm7dsDMwvC2GKhHbCLIcZSI7gXBf/5C3V42EKdvi18Bqn9cs5M vJ0OnN93iBY= =MmWv -----END PGP SIGNATURE-----

1 0

No Subject
by karl.ike＠sihope.com 17 Dec '03

17 Dec '03

It is impossible to get changes in the Fair Credit Reporting Act in the traditional way. Credit reporting agencies have far too much personal information that is passed out with incrediable ease at the consumers expense. I have a suggestion! Today, with TRW, Equifax and TransUnion's vast network, it is easy to obtain anyone's credit report from various sources. Do you think if someone, outside of the USA, obtained the credit reports on half, maybe all, of the US Senators, congressmen, judges, etc, and published them in their entirity, on the internet, from outside the US, would get their attention? Then there would be changes, overnight, protecting the right of privacy! Let them become the victim of credit reporting agencies once and shit will happen overnight. If someone who is not a US citizen does this from outside the US, I don't think that they can be held accountable under US law? I am new to the internet and don't have a clue how to do it, but someone out there does and probably has a friend in Bankok that will help him. Put the word out!

2 1

[local] Minneapolis CP get-together
by Kevin L Prigge 17 Dec '03

17 Dec '03

Who: Minneapolis Cypherpunks What: Local get-together & key signing party When: Saturday, Feb 10th @ approx 5pm -> ??? Where: Applebees (3200 W Lake St) I'll be facilitating a key signing, send your public key to me before hand to get on the list. If you have any questions or need directions, let me know.

1 0

Intro from a list reader
by Christopher Drake 17 Dec '03

17 Dec '03

Hello, My name is Christopher Drake, I own the company NetSafe. We manufacture and sell one product - NetSafe - which prevents one small but universally unadressed, serious problem in computer security: We prevent passwords (etc) from being stolen with Key Press Password recorders (KPPRs). My interest in this list is to stay up-to-date with the industry. You may recently have heard of the First Virtual announcement re: credit card number theft via automated means: our software specifically prevents this. Full details can be found at http://pobox.com/~netsafe Interested parties from the recent cypherpunks meeting might like to note my public key: after the discussion I finally did it :-) NetSafe. PO Box 298, North Sydney 2060, Australia. (24hrs) Tel:+61 2 9966 1995 WWW: http://pobox.com/~netsafe E-Mail: NetSafe(a)pobox.com Fax: (02) 9957 1991 NetSafe provides inexpensive military certified security software to protect against key-press password recorders, trojan horses, viruses, etc. Antitamper antitraceing antidissasembly protection is also included. >>>>>>>>> Passwords should be protected in a manner that is consistent <<<<<<<<< >>>>>>>>> with the damage that could be caused by their compromise. <<<<<<<<< -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.i mQCNAjD/mQAAAAEEAP/////NetSafe+PGP+key////We+provide+inexpensive AntiFraud/theft+etc+Security+Software5tGfKREuINIWsQqsLNS+uAneN9M SuMu37f+NU/U2djtxE/b9h4bJ4wb8h3QkBiuTAS1QjpxpxryQzZ10zzGQe8VAAUR tChDaHJpc3RvcGhlciBOLiBEcmFrZSA8TmV0U2FmZUBQb2JveC5jb20+ =SGC/ -----END PGP PUBLIC KEY BLOCK-----

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/premail/premail-0.33a.tar.gz For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub reord"; $remailer{"hacktic"} = "<remailer(a)utopia.hacktic.nl> cpunk mix pgp hash latent cut post ek"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post reord"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk pgp hash filter"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"ford"} = "<remailer(a)bi-node.zerberus.de> cpunk pgp hash ksub ek"; $remailer{"hroller"} = "<hroller(a)c2.org> cpunk pgp hash latent ek"; $remailer{"vishnu"} = "<mixmaster(a)vishnu.alias.net> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"robo"} = "<robo(a)c2.org> cpunk hash mix"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"spook"} = "<remailer(a)valhalla.phoenix.net> cpunk mix pgp hash latent cut ek reord"; $remailer{"rmadillo"} = "<remailer(a)armadillo.com> mix cpunk pgp hash latent cut ek"; $remailer{"ecafe"} = "<cpunk(a)remail.ecafe.org> cpunk mix"; $remailer{"wmono"} = "<wmono(a)valhalla.phoenix.net> cpunk mix pgp. hash latent cut"; $remailer{"shinobi"} = "<remailer(a)shinobi.alias.net> cpunk mix hash latent cut ek reord"; $remailer{"amnesia"} = "<amnesia(a)chardos.connix.com> cpunk mix pgp hash latent cut ek ksub"; $remailer{"gondolin"} = "<mix(a)remail.gondolin.org> cpunk mix pgp hash latent cut ek reord"; $remailer{"tjava"} = "<remailer(a)tjava.com> cpunk mix pgp hash latent cut"; $remailer{"pamphlet"} = "<pamphlet(a)idiom.com> cpunk pgp hash latent cut ?"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'gondonym'} = '<alias(a)nym.gondolin.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.alias.net> alpha pgp'; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Groups of remailers sharing a machine or operator: (c2 robo hroller alpha) (gondolin gondonym) (flame hacktic replay) (alumni portal) (vishnu spook wmono) Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. Note: The remailer list now includes information for the alpha nymserver. Last update: Mon 5 Feb 96 6:47:36 PST remailer email address history latency uptime ----------------------------------------------------------------------- ford remailer(a)bi-node.zerberus.de +--+++++..-+ 8:06:08 99.94% portal hfinney(a)shell.portal.com *#+*######## :42 99.94% alumni hal(a)alumni.caltech.edu +-+#+ ---*## 27:01 99.81% pamphlet pamphlet(a)idiom.com +++++++ ++++ 44:57 99.80% alpha alias(a)alpha.c2.org ***** ***-** 18:20 99.72% hroller hroller(a)c2.org ###### ##-## 12:23 99.63% mix mixmaster(a)remail.obscura.com ++-+- -----+ 1:25:43 99.56% gondolin mix(a)remail.gondolin.org ---- 7:30:27 99.47% flame remailer(a)flame.alias.net --+++ + -++- 1:17:58 99.41% ecafe cpunk(a)remail.ecafe.org ##*## + ##*# 1:46 99.41% c2 remail(a)c2.org ***** *** ** 23:58 99.29% nymrod nymrod(a)nym.alias.net ***+*** *** 7:40 99.18% gondonym alias(a)nym.gondolin.org *-- 4:42:54 98.55% shinobi remailer(a)shinobi.alias.net #### # *#-# 33:56 98.34% extropia remail(a)extropia.wimsey.com _.__.-.--- 21:13:22 97.85% vishnu mixmaster(a)vishnu.alias.net +*+****--+ 37:03 96.15% penet anon(a)anon.penet.fi __.-__ _ . 44:43:59 92.95% rahul homer(a)rahul.net ** ## ****## 4:49 99.66% hacktic remailer(a)utopia.hacktic.nl ** + **** 8:01 89.57% replay remailer(a)replay.com *- +**** 6:41 80.79% tjava remailer(a)tjava.com *##### 2:46 32.29% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

"Can't we all just get along?"
by Pot＠networking.stanford.edu 17 Dec '03

17 Dec '03

This is not FLAMEpunks.

2 1

Re: Jim Bell - Murderous Terrorist
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 07:06 PM 2/4/96 -0800, jdoe-0007(a)alpha.c2.org wrote: >Jim Bell has advocated nothing less than paid death squads using crypto as a >means to hide payment to these murderous terrorists. Terrorists are people who create terror by random murder, by killing the innocent: Clearly this is the exact opposite of what Jim Bell advocates. The word terrorist was originally applied primarily to government organizations of terror, most notably the french revolution. You seem to be using the word "terror" to mean "Non government use of force" So by your definition, George Washington was a terrorist, whereas the Stalin and the French Revolutionary tribunal were not terrorists. By your definition of terrorist, there are plenty of advocates of "terrorism" on this mailing list. > If you can find a conspirator > of murder as " highly intelligent, knowledgeable, and overall nice person" then > you also are in need of immediate mental health intervention. or possibly you need to comprehend the difference between governmental decrees and morality. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Marshall McLuhan and encryption...
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

> Nick's a big shot at Wired magazine. So it should be no surprise > to learn that Wired attacked cypherpunks in its 01 96 issue. In > a fake interview with "Wired's patron saint," Marshall McLuhan is > made to say (p 130): > > Concerns about privacy and anonymity are outdated. Cypherpunks > think they are rebels with a cause, but they are really senti- > mentalists. Well, maybe McL. would have spit such nonsense, very characteristical of him. "The media is the message" is among the biggests con jobs performed on humanity. It's like having a guy dying form thirst and telling him: "The pipe is the beverage"... One fine example of the destruction of reason. If a PGP encrypted message was sent to Mr.McLuhan, could he see if it is a "there is a contract on you..." or "happy new year" or "I love you..." To any Cypherpunks, the media *IS NOT* the message! Dear Wired peoples and Mr. McLuhan: get lost! > The era of politics based on private identities, anonymous indi- > viduals, and independent citizens began with the French Revolution > and Napoleon's armies...and ended with Hitler.... The cypherpunks > are still marching to the same martial music. He is partially right. With Renaissance, came the idea that Reason and human mind were powerfull and that knowledge, because man's only survival tool is reason, is a value to pursue. But french revolution did not convey theses ideas, neither did Napoleon. And Hitler definitely not. All of the three were, ultimately, collectivists or looters. Therefore, the author of the text is guilty of setting up straw man and of context blanking. JFA Reality Is. Existence exists. Words have a precise meaning. $

1 0

Re: C2 and the Worst Case
by an359557＠anon.penet.fi 17 Dec '03

17 Dec '03

>Are you saying that when someone with an anonymous mailbox on c2.org >retrieves his/her mail via a POP3 connection, no log is made of >the originating IP address? It's even worse than that. The IP address/hostname that connects to c2 shows up when you finger that user on c2! Sameer, can you please change that? An anonymous user don't wanna leave a trail as obvious as an IP address. --****ATTENTION****--****ATTENTION****--****ATTENTION****--***ATTENTION*** Your e-mail reply to this message WILL be *automatically* ANONYMIZED. Please, report inappropriate use to abuse(a)anon.penet.fi For information (incl. non-anon reply) write to help(a)anon.penet.fi If you have any problems, address them to admin(a)anon.penet.fi

2 1

Telecoms Bill
by Mark Grant, M.A. (Oxon) 17 Dec '03

17 Dec '03

Well, if "cypherpunks write code", is there any code we should be writing in response to this? Mark

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

<<"In other words it was stvation/devastation city">> It was lot worse than that on the Japanese-imperialits occupied islands of the Pacific when the Nisei troops choosenot to surrender and instead, mad last-ditch charges against AMerican lines - which killed not a small number of Americans. And of course, there were the suicide bombers. Submarine operations don't cost zero lives, either. In fact, just plain old regular military logistics - keeping the boys mobilized and in place ina theatre of operations - don't cost zero lives, even if there are _no_ hostilities. And while all the starvation and devastation was going on in Japanese cities, the Japanese troops were torturing and murdering Allied POWs, and Asian civilains in all the Japanese-occupied teritories. Those people deserved liberation, too. I think you give your game away when you complain about how we were being unfair to Comrade Stalin. As far as Pax Americana goes, the Japanese just _volunteered_ to_increase_ the payments they make to support the American garrison in Japan. The non-Okinawans want us in their country. I guess they know that the alternative is a Red Chinese garrison. And lots of other Asians are afraid of the same alternative - or of Japanese garrisons in their homeland. THey've "been there, done that". Alan Horowitz alanh(a)norfolk.infi.net

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

On Sun, 4 Feb 1996 Pot(a)networking.stanford.edu wrote: > This is not FLAMEpunks. > WHAT??? --and miss all the fun? __________________________________________________________________________ go not unto usenet for advice, for the inhabitants thereof will say: yes, and no, and maybe, and I don't know, and fuck-off. _________________________________________________________________ attila__ To be a ruler of men, you need at least 12 inches.... There is no safety this side of the grave. Never was; never will be.

1 0

fcpunx subscribe
by Wendy Fu 17 Dec '03

17 Dec '03

Wendy Fu, Network Manager St. John's University School of Law 8000 Utopia Parkway, Jamaica, NY 11439 E-Mail Address: wfu(a)sjulaw.stjohns.edu Phone: (718)990-1666

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

>> INFORMATION IS INSECURE THE MOMENT YOU TOUCH A KEY. > >> This does not mean that Internet commerce is dead. Any scheme that is >> not based on self-identifying one-way financial instruments such as >> credit cards will be essentially unaffected by this problem. Moreover, >> even credit cards may be made safe on the Internet using one of two >> approaches: secure hardware add-ons and the First Virtual approach. etc. My name for this kind of software: Terminate and Stay Clueless ------------------------------------------------------------------------- Steven Weller | "The Internet, of course, is more | than just a place to find pictures | of people having sex with dogs." stevenw(a)best.com | -- Time Magazine, 3 July 1995

1 0