December 2003 - cypherpunks-legacy

Re: FCPUNX:EPIC Alert 4.13 on crypto and more
by James A. Donald 17 Dec '03

17 Dec '03

At 03:12 PM 9/26/97 -0700, Declan McCullagh wrote: > Question to ponder for the weekend: if it took this kind of "compromise" > for a bill to clear the unabashedly pro-business Commerce committee, what > will it take for a bill to become law? Crypto legislation is guaranteed to be bad. We have been saying that for years, and now it has been demonstrated. Just say no to crypto legislation. > The fate of the SAFE bill is now uncertain. The original Goodlatte > language has been substantially amended by five House committees, with > contradictory results. No contradiction: There are bad amendments and there are really bad amendments, and there are menacing and totalitarian amendments. > As such, SAFE may no longer be a viable vehicle > for the reform of encryption policy that it was originally intended to > promote. Let sleeping dogs lie. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

RE: sounds just like the snitch you are [was]RE: engineering infowar disasters
by Phillip Hallam-Baker 17 Dec '03

17 Dec '03

>Phillip Hallam-Baker <hallam(a)ai.mit.edu> writes: >> Attila T Hun <attila(a)primenet.com> writes: >> >> I never promised any sabateur that I would keep any secret of theirs. I >> have worked with law enforcement and the security services for many >> years. If I catch someone damaging my property or property I am >> responsible for I call the authorities. >You know, Phill, life is not black and white. >Let's say for the sake of argument that you are admin for a system >which is based on the security of MD4. Then along comes Boesslaers >and co, and trashes it. You going to call for him to be locked up? >How about if someone then uses this new cryptanalysis to write some >code which demonstrates the weakness... do you figure they should be >locked up for demonstrating the flaw. (Note they haven't gone within >a mile of your precious systems). >How about if some cypherpunks used this code to demonstrate that they >could decrypt something which was encrypted by a webserver running on >a machine you are admin for. Should these cypherpunks also be locked >up? This is not what was proposed at all however. Demonstrating security flaws is one thing, exploiting the flaws for malice is quite another. It is the difference between Ralph Nader demonstrating that the pinto is "unsafe at any speed" and buying one for your elderly aunt who has promised you that inheritance. >I can assure you that kerckhoffs principle applies doubly to infowar >attacks, a hostile foreign government is hardly going to be cowed by >your suggestion that you will call the feds if anyone breaks anything >you've got anything to do with. I can see it now, Sadam Hussien's >hired system-crackers, his inforwar attack team, will really be >quaking in their boots, "better not trash US internet infrastructure >-- that brit Phill Hallam-Barker guy will narc us out". That is a deliberate misrepresentation of what I said. I was pointing out that *anybody* on the list who is responsible for a system is going to want a conviction if they are attacked. >> I believe that people who do bad things should go to prison. >Personally I would rather see murderers and rapists locked up than >teenage recreational crackers who go around breaking into poorly >maintained systems for the challenge, but break nothing. I believe the opposite. So would you if you had had my experience. Even if you know that the system is secure and you have the perp under 24 hour surveillence by top people you are going to worry like hell. One of the people I advised during an incident likened it to rape. I don't think this is too far fetched. There are many hackers who see their machine as an extension of the self. The anonymity of the net cuts both ways. You don't know whether its Sadam's storm troopers or teenage shit unless and until you get a collar. >I'm kind of wondering if _you_ as the security person who was >responsible for security at the site, feel no responsibility to secure >your systems. ("Oh don't worry about security, if anyone breaks in >we'll call the feds"). I'm interested in security at every level, including severe reprisals. >I would hardly describe a bit of cryptanalysis of infowar risks as the >work of `anarchist thugs'. Neither did I. Discovering weaknesses is OK. Exploiting them is NOT. >Applying said cryptanalysis to in practice take out root DNS might not >be such a friendly thing though. But hey, if someone does it, the >real people to blame are Freeh and co for hindering use of crypto >techniques to protect the infrastructure. Not in that case. DNS security is taking time to adopt because that sort of thing just does. That is an authentication problem and there has not been a problem. Heck the NSA even published the DSS. Be exact, not every security problem can be blamed on the Feds. If you arn't carefull you will end up like Kitty Kelly who when I spoke with her yesterday began with the lie that truth is not a defense in british libel law (wasn't in 1776, has been an absolute defense since 1850 or so) then mixed up Australia and Argentina. Like you have to make sure the points are accurate. >> People depend on infrastructure. Lives depend on it. >If people are depending on the internet for mission critical >information, of the sort where people will die quickly if information >isn't getting through, they need their heads examining. If they have >been advised to use the internet for this kind of information they >need to get better advice. The assumption that the Internet and the telephone system are somehow entirely disjoint when it comes to Infowar is a somewhat naive one. The fact is that the telephone system is just as prone to attack, much more likely to use security through obscurity and so on than the Internet. >> If people screw it up someone is likely to be killed. Freeh will >> have a party. Indeed its the sort of thing Nixon might have done on >> purpose to take advantage of the backlash. >Uhh... could you explain the logic there a bit please? Don't think for a moment that if Joe Cypherpunk screws up the national power grid that that means cryptography rights for all. All it means is that Freeh is going to demand and get a blank cheque to eliminate crypto to match the blank cheque to eliminate drugs. One of the strategies Nixon's plumbers used was to deliberately sabotage their own rallies so that they could claim the violence came from the anti-war movement. Don't imagine that because something makes no sense US politicians won't insist on it. They voted for prohibition, they spend $40billion on failed drug interdiction policies and they won't stop at giving Freeh $5 billion to supress crypto. The symbol of the US government should be changed to a B2 bomber, hugely expensive ($1.5 billion and counting), with no remaining strategic role (Pentagon, RAND, Air Force Chief of Staff statements), can't be used in the rain (CNN reports) and visible on Marconi-UK build radar. US congress is insisting on building 20 more despite statements from DoD they just don't want them. Phill

1 0

Pre-Encryption Surveillance
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Tue, 30 Sep 1997 15:11:43 -0400 Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Dwight Hines <Elmhines(a)AOL.COM> Subject: Pre-Encryption Surveillance To: CYBERIA-L(a)LISTSERV.AOL.COM Please note that there are now two cases in the Federal Appellate Courts (Docket #'s 2780, 2293) in the Eleventh Circuit, and one case that will soon be appealed from the Fed Dist in Tallahassee, Florida (Hines v. American Inn) that have to do with illegal electronic surveillance of computers, as well as invasion of privacy. The Federal Election Commission has been notified as well as other law enforcement agencies. The attached file gives more detail on the Tallahassee Case. There is another case that will be filed soon in a different circuit that also includes allegations of obstruction ofjustice and witness tampering. The concern with encryption has led some folks with a criminal bent to avoid the issue altogether. Others, such as supporters of the Christian Coalition, feel they can presume police powers that are restricted just to the state. It is a major mess. If you are interested in becoming an interested party and would like to be included in the certificate of corporate disclosure and interested parties, please read the attached file and contact me. Sincerely, Dwight Hines --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: We're from the government and we're here to he
by Jim Burnes 17 Dec '03

17 Dec '03

Just in case anyone has forgotten the mindset of Big Bro in the Land of the Freeh. Who knows? Maybe we could be judged insane. ------- Forwarded Message Follows ------- By WebToday Staff Writers Sunday, September 28, 1997 ROBY, ILLINOIS (Sept. 28, 1997)-- Illinois State police fired metal balls into the chest of Shirley Allen Friday, September 26, thus escalating the violence at the "Roby Ridge" Illinois government siege. Miraculously, the 51-year-old widow did not drop to the ground as did Vicky Weaver when shot through the head and killed by a federal sharp shooter while holding her infant daughter. During a 10:30 a.m. Saturday news conference in Springfield the Illinois State Police Czar Terry Gainer changed his story once again. In an apparent irrational justification of his assault squad's aggressive behavior, he made several extemporaneous disjointed statements including: "We're here to help" and "We are looking out for her best interests" and "It's our hope that she (Shirley Allen) will grow to understand that we . . . are looking out for her..." (All three quotes taken from the September 27 issue of the State Journal-Register, the dominant newspaper of record in Springfield, Illinois. Staying consistent with his continually contradictory statements Gainer claimed it was widow Allen who first fired at police. Puzzled journalists questioned how that could be since all official prior statements from Gainer and the Illinois State Police attested to the fact that Mrs. Allen had never fired on any of the police orders prior to Friday. A growing number of Mental Health observers are now comparing and contrasting the extreme tactics taken by state authorities with the rational and controlled self defense measures taken by the 51-year-old woman authorities believe may be "mentally ill." Perhaps stranger still are reports that the earlier estimate of $125,000 for the widow's estate have now grown to current appraisals in excess of a million dollars. It has also been confirmed that there are two oil wells on her large rural property. Yet unresolved is the question of who would control the estate if the court order for mental evaluation succeeds in keeping Mrs. Allen separated from her property. Questions also remain unanswered as to the intentions of Mr. Allen's out of state relatives who initiated proceedings for the court order for involuntary psychiatric commitment. The siege began Monday when Christian County Sheriff Deputies attempted to have the widow Allen involuntarily committed into a hospital for "psychiatric evaluation." Under current Illinois laws upheld by the soon retiring Governor Jim Edgar, it is remarkably simple for virtually any family member, no matter how distant, to commit someone against their will. Once papers are signed, family members are extracted from their homes and involuntarily committed. One mental health commentator coined the phrase,"Crazy until proven (by the state) otherwise." This writer asks: "Is it any wonder that anyone who is about to be "taken away" might be somewhat less than eager to comply?" According to the State Journal-Register, Illinois State Troopers fired six bags at Mrs. Allen from their shotguns, with three bags hitting her in the chest, stating that, "Normally, that's enough to knock somebody down so police can run up and arrest the person. But Allen's bulky clothing apparently absorbed some of the shock, and she quickly fired her gun in the direction of the shooting troopers." Terry Gainer told reporters in Springfield that he hoped the woman would hear his message of peace through the media, especially since he gave her the concession of turning her electricity back on last Wednesday. Gainer seems to epitomize the mind set of advocates of big (brother) government. He just doesn't get it. He's clueless as to why Mrs. Allen didn't respond positively to his "I'm from the government and I'm trying to help (commit) you" rhetoric. Furthermore he probably can't compute this unrepentant widow's gross lack of appreciation for his generous concession of turning her electricity back on. Perhaps he presumed that this "mentally ill" woman also had a bad memory. Or maybe he has forgotten the fact that it was his police who cut off her electricity in the first place-- not to mention the other minor inconveniences, not the least of which was the lobbing of a tear gas hand grenade into the window of the belwildered widow. Regarding the gassing of this resilient woman, Christian County Sheriff Dick Mahan made this astounding admission: "Mrs. Allen lessened the effects of the gas by putting petroleum jelly on her face and running water over her head." (Editor's not: Not too crazy.) Meanwhile our government continues their headlong frenzy to fan the flames of the tax-dollar eating furnace by maintaining 12 tactical team members to surround the Allen home 24 hours a day, while reinforcements are retained to keep the watchful eyes of concerned citizens virtually blindfolded. Even members of the news media have been pushed farther and farther away from the scene. Once allowed to report on the story from up to 450 feet away from the scene, now police have completely banned all news reporters within a half mile of the home, in flagrant violation of foundational First Amendment rights of free speech and freedom of the press. Predictably, members of the news media were only all too willing to comply. Staying consistent with the precedents set at Waco and Ruby Ridge, police have just succeeded in "evacuating" the last of the widow's closest neighbors. Mind you, these neighbors say there is nothing insane or dangerous about Mrs. Allen. This writer finds nothing "crazy" about Shirley Allen's amazing skills at implementing consistent common sense while under what is by most any measure would be considered to be an enormous amount of stress. That may be more than can be said about some of the actions levied by police. The State Journal-Register reported: "Friday's use of bean-bag bullets was the most direct action by law enforcement agencies since tear gas was fired into the home Monday by deputies," and went on to say, Christian County Sheriff Mahan agrees stating Mrs. Allen is "not a stupid person." So what exactly is the compelling reason Illinois authorities have that justifies their obsession to violently disrupt the peaceful existence of a widow who neighbors say is quiet, sane and not troublesome? Perhaps it is this widow's past crime record. After exhaustive background probes made into Mrs. Allen's past, authorities were finally able to unearth one token offense to which Mrs. Allen was guilty. Court archives indicated that she once ran a stop sign. If these extreme measures were being implemented in the former Soviet Union rather than in the American rural town of Roby, we may have condemned the actions of "The Evil Empire." Had this been the act of Saddam Hussein it probably would have surprised us even less. But in the United States of America, our citizenry seems to treading water not unlike the perverbial frog in the saucepan. A rogue minority within government keeps slowly turning up the heat until we boil and burst without knowing what hit us. Political spin doctors have fine tuned their craft to the point that millions of citizens are now desensitized to these escalating govenmental abuses (some say tyranny). These usurpers have succeeded in hypersensitizing the masses, addicting many to sports, O. J., or any other strategic diversion that blinds eyes and deafens ears to the cries for help from the widows and the defenseless. We simply relegate them to the government for "help." As governments gets bigger and the world get madder, all this writer can conclude is with this kind of "help" it's a good thing we don't get all the government we pay for! Top Cop Gainer seems to think otherwise. As stated publicly he maintains it's clear that "she's (Mrs. Allen) a danger" to either herself or somebody else and, "We intend to stay until we can get her the medical treatment she needs." With all due respect to Mr. Gainer, it appears he may have forgotten that the "court order" (remarkably not even a warrant) authorized the County Sheriff to bring Mrs. Allen into a hospital for evaluation. It never authorized Mr. Gainer or anyone in government to issue a medical determination prior to an examination. Zeal and good intentions aside, there are plenty of other government agencies that there to "help" widow Shirley Allen. > > > >For further information you may contact the following agencies and >organizations: > >Christian County Sheriff Richard Mahan's office: 217-824-4961 > >Illinois State Police, District 9, Springfield, Media Spokesman Mark >McDonald: 217-786-7109 > >Office of Mental Health, Dr. Steiner, Associate Director: 217-782-7555 > >Christian County Senior Citizens Center: 217-824-4263 > >State Journal-Register: > >St. John's Hospital, Springfield: 217-544-6464 > >Christian County Clerk: 217-824-4966 > >Film footage is available from CBS Affiliate WCIA Television of Illinois at >217-782-2216. > >To schedule interviews members of the news media may call: 616-924-1000. Jim Burnes Engineer, Western Security, SSDS Inc jim.burnes(a)ssds.com ---- When the world is running down Make the best of what's still around - Sting

1 0

[CFP98] "How to Choke the Net"
by Dave Del Torto 17 Dec '03

17 Dec '03

Cypherpunks, The CFP98 program committee is considering a panel (or possibly a pre-conference tutorial) for next year entitled something like "How to Choke the Net." (The provocative title is NOT intended to espouse the practice of net-choking NOR to provide hands-on techniques.) "Many have argued that the net is so decentralized that no one country or force could control it, but is that really true? Many, including religions (Scientologists) and countries (China, et alia) have tried, but is the net so decentralized that it cannot be controlled, or are there choke points at which a single entity (or cartel of entities) could exploit to shape the net for their own political purposes, despite the efforts of others. The panel will explore the current state of the decentralization of the net and its potential for exploitation in an educational-style format." Discussion topics may include host authentication, denial-of-service attacks, DNS, IPSEC, routing issues and SYN-flooding, etc. If any of you has any course materials you'd like to deliver on the topic of Internet vulnerabilities and defenses, please contact me. dave

3 2

RE: engineering infowar disasters (was Re: How the FBI/NSA forces can further twist SAFE)
by Phillip Hallam-Baker 17 Dec '03

17 Dec '03

>It really depends how the engineered "infowar disaster" is presented >in the press, ranging from say: > Dr Adam Back, a computer security researcher at Exeter > University highlighted a fundamental weakness in DNS security > which he demonstrates can be easily exploited. "This is > entirely avoidable", said Back, "the only reason that global > infrastructure is left vulnerable, is that the wire-tapping > extremists and intelligence special groups are being allowed > to jeopardise national security to protect their jobs in their > now redundant function in a post-cold war era." Unfortunately I don't think the above is true. The secure DNS specs have been circulating in a serious way for about three years. The main impediment to implementing them has been the time taken to completely rewrite the existing BIND code to make it work. Unfortunately the design of DNS does not encourage good coding parctice. The easy way to implement is to send out your request independently of processing the reply. One might possibly argue that the D-H patent has held matters up or that the FBI has generally intimidated people. I don't think this is actually the case however. Certainly Jeff Schiller, the IETF security director has not been intimidated, he has been handing out PGP to all commers for some time. An anonymous cypherpunk took down half of the internet yesterday, with an estimated loss to business of $50 million. The cypherpunk hacker terrorist issued a manifesto claiming that his motives were to highlight insecurities in the DNS. Whether his motives were pure or not, the incident does highlight the vulnerabilities in our infrastructure, something infowar researchers have been arguing. And which do you think is going to get published? Declan might possibly put the second story in rather than the first (but I would not count on it). But after his editor was finished with it it would be more like the second. >either one I can't see getting me or anyone else in trouble. Not unless you or they get caught. >They guy who wrote the SYN flood attack is none the worse for wear, it >was released in a phrack article, and I don't think there was any >secret as to who authored the software. Some of the people who doiwnloaded and used it are in big trouble though. >> I suspect I'm not the only person on the list who is responsible >> for a service that is a regular hacker target. If I catch someone I >> really don't care what the motive for the attack was. I'm going to >> look to make that person serve jail time. >Your argument seems to be that if you legislate against OS bugs, that >they will go away. That is not what I said. And in any case you probably would not be continuing the meme that reaction is useless if you knew the origin. All O/S inevitably have bugs. There is nothing that can be done about this in most cases. Many vendors simply don't give a hoot about fixing bugs. Two years ago Sun delivered a machine to me with a version of the O/S that didn't recognize the sound or video card. That was a standard package, completely current O/S and broken out of the box. Didn't strike them as the wrong approach. Nothing I could do but never buy from them again. If there is a bug in the O/S and the manufacturer is not interested in fixing it my *only* recourse may be to persecute the perpetrator of an attack. That is not my FIRST choice, but it is a choice. Also most of my systems are designed to give warning long before an attack succeeds. I don't trust the clowns who put UNIX together all that much. If there is an attack I want to know as soon as possible and respond by removing the threat as soon as possible. I'm not complacent enough to put my trust in the O/S. >I would point out that the hackers who change your web page, or >exploit OS bugs you haven't applied patches, and send you taunting >messages telling what's wrong with your setup, are probably doing you >a service. If I want such a service I will ask. I built a burgalar alarm into the system. If it goes off I assume that someone is robbing the bank. I don't care what their motives are or were, even if they are able to prove them they can tell them to the judge, I am simply not interested. If someone sets off the alarm it costs real money to react. Probably in the tens of thousands of dollars. > If you have something of real value to secure, you'd >rather know about it from a few harmless hackers, than an industrial >spy who takes the farm, and covers up his tracks so well that you >don't even notice. At present there arn't any secrets on the machine (with the exception of some heavily encrypted signature keys). In fact the purpose is to distribute information. All the logs could be obtained under FOIA in any case. The sole concern in the risk model is reputation capital. If the machine is compromised it is front page news. I want to ensure that does not happen. I am simply giving fair notice that I do not consider any attack 'friendly' and that I will react with the maximum force available to me. I have good reasons for this policy and they have nothing to do with complacency. Phill

1 0

American Journalism Review on perils of Internet ratings
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 30 Sep 1997 14:05:04 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: American Journalism Review on perils of Internet ratings ======================================================================== http://www.newslink.org/ajrjdl21.html X-Rated Ratings? The Clinton administration and the Internet industry have championed voluntary ratings for Web sites to create a ``family-friendly'' environment in cyberspace. Their campaign nearly led online news organizations to create a licensing system for Web journalism. By J.D. Lasica From AJR, October 1997 WHEN PRESIDENT CLINTON challenged the high-tech industry this summer to create a ``family-friendly Internet'' by cleaning up cyber-smut and other offensive content, newspaper editorials applauded the president's decision to forgo government regulation and let private industry police the Net. Few realized that the White House's ``parental empowerment initiative'' would plunge online news publications headlong into the thorniest thicket of free speech issues in the history of cyberspace--and lead to the news media's rejection of the president's proposal when it comes to their own Web sites. The fate of an Internet self-rating system, however, remains far from settled. And the online news media's actions in recent weeks have been riddled with more intrigue than a John Le Carr* thriller--with the final chapters still unwritten. Consider the questions the online news world took up after the president's call for an Internet ratings system: How would Web news sites rate themselves for violence, language and sexual frankness when publishing stories involving war, murder, rape, gang shootings, domestic abuse, hate crimes and teenage pregnancy? If an exception is carved out for news sites, which sites would qualify? Where do you draw the line between news and information, entertainment, propaganda and opinion? And who decides? If news sites refuse to rate themselves, will they be shut off from a growing number of parents and others who are demanding filters on their Web browsers? Finally, will the entire ratings scheme transform the Net from a global democratic village into a balkanized, regulated medium where foreign despots can easily censor any material that strays from the party line? Questions like these are now being vigorously debated by online journalists who've barely had time to catch their breath after the U.S. Supreme Court slapped down the Communications Decency Act in June. The Clinton administration has adopted the approach championed by the Internet industry, which fears another effort by Congress to clamp down on ``indecent material'' in cyberspace. At the July 16 Internet summit at the White House, the president called on such companies as Netscape, America Online and IBM to give parents the tools needed to shield children from obscenity, violence and antisocial messages on the Net. ``We need to encourage every Internet site, whether or not it has material harmful to minors, to rate its contentsÉto help ensure that our children do not end up in the red-light districts of cyberspace,'' Clinton said. The assembled captains of industry obliged. Netscape indicated it would support Internet ratings in its next browser, meaning that about 97 percent of all browsers will support Internet ratings. (Microsoft's Internet Explorer 3.0 already includes ratings as an option for parents to turn on.) The search engines Lycos, Excite and Yahoo! also fell into line, pledging to ask for ratings labels for all Web sites in their directories. [...]

1 0

Re: Remailers and ecash (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 30 Sep 1997 22:52:09 +0200 (MET DST) > Subject: Re: Remailers and ecash (fwd) > From: nobody(a)REPLAY.COM (Anonymous) > Jim Choate <ravage(a)ssz.com> wrote: > > > What besides raising hell anonymously, laundering money, and defeating > > merchant purchase traffic analysis are commercial anonymous remailers > > good for? > > Avoiding spam. Anyone who doesn't use remailers is sure to get their > mailbox full of crap. Using an anonymous remailer does nothing to reduce spam. It doesn't even make it harder for them to send it to you, they just don't know who you are; hardly a requirement for most spam that I have seen. > Employment related concerns. I know of many people on this list who > have had problems along these lines. How in the world would an anonymous remailer help me get or keep a job? Are you perhaps refering to whistleblowing? If so, being anonymous will do nothing in most cases because you have to be willing to stand up and say you saw what you saw non-anonamously in court. Otherwise the company will just claim it ain't so and that you are some chicken-shit ex-employee with a grudge, the DA will buy it too unless you reveal your identity which sort of defeats the whole point of anonymity. Now it might be useful for other forms of whistleblowing, ala Pentagon Papers, where the source is irrelevant except for idle curiosity. But considering the frequency at which this sort of stuff happens it hardly qualifies as a reason to stay in business day after day. > The rest of your comment is utterly stupid. How many people do you > know who use remailers to launder money? Zero, I'd bet. If it is a commercial remailer using ecash payments then every user is laundering money - strictly speaking. The point being that with such a system in place it becomes trivial to anonymously launder your money into ecash and then using another account turn it back into real money. The nice thing about this is that you don't loose anything in the process, unlike regular underground money laundering where you might get 60% return (if you are lucky and got a big gun). I'll leave it as an excercise to the reader as to how this can be used to avoid taxes at nearly every level. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Remailers and ecash (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Fisher Mark <FisherM(a)exch1.indy.tce.com> > Subject: Re: Remailers and ecash (fwd) > Date: Tue, 30 Sep 1997 11:49:29 -0500 > Jim Choate writes: > >What would motivate an average consumer to use an anonymous remailer? > >What besides raising hell anonymously, laundering money, and defeating > >merchant purchase traffic analysis are commercial anonymous remailers > good > >for? > Well, maybe the avenue to pursue isn't the average consumer, but the > average employee. I don't doubt that at least some companies are under > email traffic analysis by their competitors (and/or their competitor's > governments) to get a clue about future directions for their products. Well, speaking from more than a couple of years in the business, most companies don't take that sort of traffic outside their corporate firewalls. I can state unequivicaly, working for Tivoli - IBM, that were an employee to send such confidential email out they would get sacked ASAP (as they should be) and possibly face criminal and/or civil charges. Besides, it's much safer to just bribe somebody, that way some eager beaver doesn't stumble over your tap in a routine maintenance tour. > I could see where many (eventually most) companies would send email to > each other using remailers, so that only the companies involved know > that they communicated with each other. So you are proposing something like: employee emial --> anonymous remailer --> firewall --> Internet Intenet --> firewall --> anonymous remailer --> employee2 email Or, employee email --> firewall --> anonymous remailer --> firewall firewall --> employee2 email To be honest, I can't see either one providing any sort of security that would be advantagous to a business. Not only that but in the second case the remailer is owned/operated by a third party. How do I know my competitors aren't running remailers to capture my traffic? The first case would be much simpler if we simply do away with the remailers and simply send encrypted email using company distributed software and keys. > Internet email doesn't provide > the same level of privacy that snail mail, phones, and faxes do now. You consider snail mail, phones, and faxes secure? You certainly live in a different world than I do. I personaly consider none of them secure. Hell, I have all the equipment I need to intercept any and all of these forms of traffic in my workshop. For less than a thousand bucks you too can have the necessary equipment. > With the use of remailers, Internet email could provide more privacy > than snail mail, phones, or faxes. Only if we use encryption and/or remailer technology. This crypto technology is applicable to the other technologies besides email. Otherwise they are all about equivalent without it, they keep the honest man honest and thats about it. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

INFO-RUSS: New Russin Law List (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From INFO-RUSS-request(a)smarty.ece.jhu.edu Tue Sep 30 20:42:09 1997 Message-Id: <9709301725.AA13658(a)smarty.ece.jhu.edu> Errors-To: INFO-RUSS-request(a)smarty.ece.jhu.edu Sender: INFO-RUSS-request(a)smarty.ece.jhu.edu From: "Alexander V Pavlenko" <lawyer(a)openmail.irex.ru> To: <info-russ(a)smarty.ece.jhu.edu> Subject: INFO-RUSS: New Russin Law List Date: Tue, 30 Sep 1997 15:55:44 +0400 --------------------------------------------------------------------- This is INFO-RUSS broadcast (1200+ subscribers). Home page, information, and archives: http://psi.ece.jhu.edu/~kaplan/IRUSS/inforuss.html To post, or to subscribe/unsubscribe, mail to info-russ(a)smarty.ece.jhu.edu INFO-RUSS assumes no responsibility for the information/views of its users. --------------------------------------------------------------------- Announcement Russin Law List The Russian Law list is brought to you by The 21st Century Lawyers Association, (Moscow), in cooperation with The Rule of Law Foundation (Washington, DC). Our mission is to help young Russian lawyers take an active part in democratic reform in Russia, by strengthening their linkages with each other and international legal community. Although the list is primarily serving the needs of the members of the Association, it is open for anyone who is interested in law reform in Russia. To subscribe to the list, send "subscribe ruslaw" to listserv(a)rol.org. To send a message to the list, send it to ruslaw(a)rol.org. To unsubscribe, send "unsubscribe ruslaw" to listserv(a)rol.org. -- Postal address: PO Box 51, K-6 Moscow 103006, Russia Web site: http://lawyers.home.ml.org Alexander V Pavlenko lawyer(a)openmail.irex.ru ----------------------------------------------------

1 0

colocation costs: Re: Remailers and ecash (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 30 Sep 1997 16:03:22 -0700 > From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: colocation costs: Re: Remailers and ecash (fwd) > >>I'm wondering about your co-location machine, from your comments above it > >>must be sitting in a field since you don't pay rent (or was that your way of > >>saying somebody else pays the rent for you?). Is this so? Since so many of > >>your utilities and physical plant are donated I have to question the > >>accuracy and utility of your figures as well as the applicability of those > >>figures to a true commercial enterprise. > > Depending on the security, performance, and price you're looking for, > you can run your own machine on your own premises, > run your own machine in somebody else's colocation facility (either > as a favor, like anon.efga.org may be, or using a commercial ISP), > have somebody else run a dedicated machine for you (mostly ISPs), > buy a shell account on an ISP or other service provider's machine, > use a free shell account from somewhere, or use an IP-only connection. I am quite aware of what it takes, it's what I have done using SSZ since going online to the Internet full time in '92 via modem. > Sure, free colocation space is nice, It isn't nice, it's a threat to the utility and security of the remailer. > for far less than the rent you'd pay for doing the whole job yourself, > since they have economies of scale by handling multiple colocation > customers and > also handling their own servers. True, but you take a hit on security if you don't have a personal arrangement with the provider. It also means you won't be on hand when the cops come a knocking...better use CFS or something similar. This will require having some sort of contact point for times when the system gets rebooted, it's obvious you won't give the pass phrase to the operator. There are other issues involved like the utility of having a business at home and the number of legitimate deductions that can be taken. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

AT&T Paper on Digital PCS
by John Young 17 Dec '03

17 Dec '03

Thanks to Bill Stewart we offer AT&T's white paper on digital PCS which describes the system in detail and its security features: http://jya.com/digipcs.htm (70K)

1 0

USRobotics Palm Pilot and PGP
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

Hi. Is there anybody that know if there is a PGP compiled for the Palm Pilot? I looked around but didn't find anything. As I am not, despite Tim's rants ;-) , subscribed to CP, would you please reply directly to me or to the espam(a)intertrader.com mailing list. Thanks jfa -- Jean-Francois Avon, Pierrefonds(Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest of Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing. PGP encryption keys at: http://w3.citenet.net/users/jf_avon http://bs.mit.edu:8001/pks-toplev.html ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

2 1

Why?
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jim Choate wrote: >> However, it appears that part of the problem with the remailers is >> that nobody uses them. We should be making a concerted effort to do >> so, and not just for cpunk traffic. We should use them for >> everything. It won't take that many people to reduce the message >> delays substantially. It will also advertise the remailer network to >> our friends who may not yet be cypherpunks. >> >> The tools exist to do this. > >Yes, but why would I? - From "The Unbearable Lightness of Being" by Milan Kundera Part 4, Section 2: It was a program about Czech emigration, a montage of private conversations recorded with the latest bugging devices by a Czech spy who had infiltrated the emigre community and then returned in great glory to Prague. It was insignificant prattle dotted with some harsh words about the occupation regime, but here and there one emigre would call another an imbecile or a fraud. These trivial remarks were the point of the broadcast. They were meant to prove not merely that emigres had bad things to say about the Soviet Union (which neither surprised nor upset anyone in the country), but that they call one another names and make free use of dirty words. People use filthy language all day long, but when they turn on the radio and hear a well-known personality, someone they respect, saying "fuck" in every sentence, they feel somehow let down. "It all started with Prochazka," said Tomas. Jan Prochazka, a forty-year-old Czech novelist with the strength and vitality of an ox, began criticizing public affairs vociferously even before 1968. He then became one of the best-loved figures of the Prague Spring, that dizzying liberalization of Communism which ended with the Russian invasion. Shortly after the invasion the press initiated a smear campaign against him, but the more they smeared, the more people liked him. Then (in 1970, to be exact) the Czech radio broadcast a series of private talks between Prochazka and a professor friend of his which had taken place two years before (that is, in the spring of 1968). For a long time, neither of them had any idea that the professor's flat was bugged and their every step dogged. Prochazka loved to regale his friends with hyperbole and excess. Now his excesses had become a weekly radio series. The secret police, who produced and directed the show, took pains to emphasize the sequences in which Prochazka made fun of his friends - Dubcek, for instance. People slander their friends at the drop of a hat, but they were more shocked by the much-loved Prochazka than by the much-hated secret police. Tomas turned off the radio and said, "Every country has its secret police. But a secret police that broadcasts its tapes over the radio - there's something that could happen only in Prague, something absolutely without precedent!" "I know a precedent," said Tereza. "When I was fourteen, I kept a secret diary. I was terrified that someone might read it, so I kept it hidden in the attic. Mother sniffed it out. One day at dinner, while we were all hunched over our soup, she took it out of her pocket and said, 'Listen carefully now, everybody!' And after every sentence, she burst out laughing. They all laughed so hard they couldn't eat." Part 4, Section 4: She came out into Old Town Square - the stern spires of Tyn Church, the irregular rectangle of Gothic and baroque houses. Old Town Hall, which dated from the fourteenth century and had once stretched over a whole side of the square, was in ruins and had been so for twenty-seven years. Warsaw, Dresden, Berlin, Cologne, Budapest - all were horribly scarred in the last war. But their inhabitants had built them up again and painstakingly restored the old historical sections. The people of Prague had an inferiority complex with respect to these other cities. Old Town Hall was the only monuyment of note destroyed in the war, and they decided to leave it in ruins so that no Pole or Germans could accuse them of having suffered less than their share. In front of the glorious ruins, a reminder for now and eternity of the evils perpetrated by war, stood a steel-bar reviewing stand for some demonstration or other that the Communist Party had herded the people of Prague to the day before or would be herding them to the day after. Gazing at the remains of Old Town Hall, Tereza was suddenly reminded of her mother: that perverse need one has to expose one's ruins, one's ugliness, to parade one's misery, to uncover the stump of one's amputated arm and force the whole world to look at it. Everything had begun reminding her of her mother lately. Her mother's world, which she had fled ten years before, seemed to be coming back to her, surrounding her on all sides. That was why she told Tomas that morning about how her mother had read her secret diary at the dinner table to an accompaniment of guffaws. When a private talk over a bottle of wine is broadcast on the radio, what can it mean but that the world is turning into a concentration camp? Almost from childhood, Tereza had used the term to express how she felt about life with her family. A concentration camp is a world in which people live crammed together constantly, night and day. Brutality and violence are merely secondary (and not in the least indispensable) characteristics. A concentration camp is the complete obliteration of privacy. Prochazka, who was not allowed to chat with a friend over a bottle of wine in the shelter of privacy, lived (unknown to him - a fatal error on his part!) in a concentration camp. Tereza lived in the concentration camp when she lived with her mother. Almost from childhood, she knew that a concentration camp was nothing exceptional or startling but something very basic, a given into which we are born and from which we can escape only with the greatest of efforts. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNDGcUD7jyGKQlFZpAQGv1ggAg9Vmgpmai4eVBzeA0XwJSaKrnkvCJdKI KzqNNi/HUaxCMMReCR0xRLZlLz0IXfK71zCOEZib9UbuTWE84X2x2KlpcQgBRrex IoRXkT5mQ+4GSTvG6CX4ZvLYohiVO+sKXX7m8RQcOqfo1IPYwqikNMixc1Yw4U3l hO0AMxPz/gE/2beYXBNFuDRU7PIRINhHCmoOtX+xxbQDEK8d/BRUwTBhS0XnY6Ek 6e1yNsEOaGZxR9NLNo3sYaaTpAcOZCDF4WQkfywpFXcyVyHWd5HSi9Oo5r2opnvK evH9JaLE2OO7iaqEuVYay4Tv9OB6YegUNmBhp3sSmQgzrVdvtfFZiQ== =Fawj -----END PGP SIGNATURE-----

1 0

Why? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 30 Sep 1997 22:19:09 -0400 > From: Anonymous <anon(a)anon.efga.org> > Subject: Why? > Jim Choate wrote: > >> so, and not just for cpunk traffic. We should use them for > >> everything. It won't take that many people to reduce the message > >> > >> The tools exist to do this. > > > >Yes, but why would I? > - From "The Unbearable Lightness of Being" by Milan Kundera > Part 4, Section 2: > > It was a program about Czech emigration, a montage of private > conversations recorded with the latest bugging devices by a Czech spy > who had infiltrated the emigre community and then returned in great > glory to Prague. It was insignificant prattle dotted with some harsh And your premise is what? - Anonymous remailers would have resolved the Czech issue? - America is currently in the same sort of situation and the use of remailers would resolve it? - Anonymous remailers guarantee that such things won't happen in the future? - Santyana was right? Obviously the first two are gibberish. There is absolutely nothing to have prevented the Czech government (or any other) from setting up anonymous remailers acting in the role of man-in-the-middle attacks subverting any conspiracies. Now the 3rd is clearly unrealistic because the issue is the respect one human being gives another in regards to their beliefs and the expression thereof. The problem is a people problem, not technology. I personaly vote for the 4th option myself. I would like to believe that through the use of commercial anonymous remailers the concept of anonymity could become ingrained in a society. That is what would help resolve issues like the above, not the remailers themselves. My original question still stands, why would I or any other party choose to use an anonymous remailer for anything other than the original 3 items I mentioned previously. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Commercial remailer request...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Since we apparently now have at least one commercial anonymous remailer I would be interested in the gross cash flow. In short, I would like to know the general difference (plus/minus and by about how much) between the cost of the remailer operation versus the actual e-cash income in American dollars each month. It would also be nice to know the relative ratio between free and for-pay submissions. Is the remailer to be advertised, and if so where? Would it be possible to have such info say submitted to the list for the next few months? I want to put one up now that we are moving to a T1 within the next few weeks but I have to justify it financialy. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

standoff_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: Gingrich Marks Contract With America Date Next Story: Gingrich Astonished at Gore on Campaign Reform _________________________________________________________________ Saturday September 27 11:37 PM EDT Illinois Police Standoff Enters Sixth Day CHICAGO (Reuter) - A standoff between Illinois state police and a 51-year-old widow in southern Illinois entered its sixth day Saturday with negotiations continuing but no progress seen, the police said. Sgt. Flynn Hanners of the Illinois State Police said negotiators have been contacting Shirley Ann Allen every 15 to 20 minutes to try to get her out of her house in Roby, about 15 miles east of the state capital Springfield. The standoff began Monday when Christian County sheriff's deputies and a family member attempted to serve court-ordered commitment papers for a psychological exam on Allen, he said. "Our whole design behind this is to get her out of the house and get her the medical attention she needs because she obviously has some mental illness that needs to be treated," Hanners said. He added that the police have been in constant contact with Allen's family and doctors and that a psychologist who works with the state police has been at the scene. Hanners said no activity has been seen since Friday morning when Allen fired a 12-gauge shotgun at officers and negotiators after the officers had fired six 12-gauge bean bag rounds at her, striking her three times. The officers fired after Allen left the house, faced the negotiators who were in plain view and raised the shotgun "as if to fire," he said. "Three of the six rounds struck her in the chest area, the midsection, but she was not stunned," he said. The bean bag shots are designed to knock someone to the ground, but Hanners said the shots had no effect on Allen, probably because of the number of layers of clothing she was wearing. Allen also fired at the police Tuesday when two officers has gotten close to the house "trying to get a look in," Hanners said. He added that power had been cut to the house temporarily Tuesday. _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: Gingrich Marks Contract With America Date Next Story: Gingrich Astonished at Gore on Campaign Reform _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Re: Memo From Washington Gestapo Tyranny
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

Wow, Assassination politics (as Anonymous claims) made its way into the anti-terrorism manuals... igor In misc.survivalism, Anonymous wrote: > State of Washington > Washington State Patrol > General Administration Building > P.O. Box 42600 > Olympia, Washington 98504-2600 > (360) 753-6540 > >September 17, 1997 > >TO: Washington State Senators > Washington State Representatives > >FROM: Representative Karen Schmidt, Chairman [sic] > Organized Crime Advisory Board > >SUBJECT: Paper Terrorism > > >It has been brought to my attention that anti-government >organizations have been utilizing a tactic called "paper >terrorism" to effectively disable government. Commonly, public >officials are personally targeted. This widespread practice is >accomplished by overburdening our communications, business, or >judicial systems with frivolous or repetitive petitions, property >liens, and small claims court actions. > >Enclosed is a brief explanation of this process. If you feel you >are a victim of "paper terrorism," I encourage you to contact the >Washington State Patrol, Organized Crime Intelligence Unit, in >Olympia at (360) 753-3277, for assistance. > >KS:csp >Enclosure > > PAPER TERRORISM > >Introduction > >Since the early 1990's there has been a noticeable increase in >the number of people across the country who have joined and >continue to participate in the anti-government movement. These >individuals view themselves as victims of a government conspiracy >to take away their individual rights and liberties. They do not >recognize most forms of county, state, and federal government and >therefore create their own self-styled government. National >speakers in the anti-government extremists or "Patriot" movement >conduct recruitment and information seminars across Washington >State, as well as the entire country. These seminars and >recruitment meetings fuel bizarre conspiracy theories and >communicate new trends within the anti-government movement. >Paper terrorism has grown from a trend to a full scale tactic >used upon businesses, private individuals, government services >and elected officials. > > >Background > >Paper terrorism is designed to clog government services with >meaningless requests which consume time and disrupt schedules. >In the private sector paper terrorism is an attempt to extort >money, goods or services. Some examples of paper terrorism >activities: > >* Bogus liens placed upon personal property of government > officials and private individuals. > >* Frivolous lawsuits filed in state and federal courts against > businesses and government entices [sic]. > >* Drafting and passing counterfeit bank checks and other > fraudulent negotiable instruments aimed at defrauding the > financial community and businesses. > >* Common Law Courts that issue homemade subpoenas to citizens, > businesses and government officials. > >* Challenging judges in an effort to disqualify them on a > current case and to repeat their motions to disqualify these > judges from hearing future cases by referencing the prior > challenges. > >* Scheming to avoid paying state sales tax during a purchase > by declaring to be a non resident and then filing claims > with the state's risk management section if refused. > >* Disrupting the court system by persuading fellow jail > inmates to defend themselves as Patriots, thus tying up more > of the courts and prosecutors time. > >* Distributing the extremist Citizens Handbook to foster jury > nullification. > >* using the Internet to promote extremist ideas such as > "Assassination Politics" or predicting the date of death of > a law enforcement officer or government official to win a > cash price. > >* Filing bogus claims in small claims court. > >* Requesting information from courts, government agencies, > elected officials and businesses in the form of frivolous > questions in an effort to consume employee's time. > > >Tell-tale signs of Patriot extremists can often be found in their >conversation or written documents. Common indicators are >biblical passages, referring to the state as a "republic", >calling zip codes a "postal zone", refusing to acknowledge direct >questions, separating their middle and last names with a comma or >colon, placing a thumb print on a document, claiming the court >has no authority, or using the phrases: all rights reserved, >without prejudice, UCC 1-207, pro se, sui juris, united states, >Black's law. > > >Analysis and Trends > >These anti-government extremists and supporters are convinced >citizens are being systematically oppressed by an illegal, >totalitarian government. They believe the time for traditional >political reform has passed, that their freedom will only be >secured by resistance to the law and attacks against the >government in several forms. > >Members of these groups bond to one another and lose contact with >other people who hold different opinions. The isolation works to >reinforce their views, which in turn gives them new purpose. >This new purpose may take ordinary ideas to extremes, rationalize >their problems into blaming government, and cause members to >compete with each other to make stronger statements. > > >Trend and Incident Reporting > >If you become victimized by paper terrorism, contact the >Washington State Patrol Organized Crime Intelligence Unit at >(360) 753-3277, extension 121. All acts reaching a criminal >level should be referred to your local law enforcement agency or >prosecutor's office. > > >[end transcript] > --

7 6

Secure HTTP servers.
by Jim 17 Dec '03

17 Dec '03

Hi all, I just started working vfor a local ISP and they found out, i was on this list and knew a little about crypto. Anyway they seem to have the impression this would qualify me to know something. At any rate, on to the point of the mail. Could someone point me in the right direction for info on secure http servers ?? Also maybe info on which is better than the other ?? Jason

6 7

DejaVu: Cypherpunks as Philosopher Kings
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- ten months ago: on or about 961218:1123 "Timothy C. May" <tcmay(a)got.net> purported to expostulate: +_Direct action_ is what it's all about. Undermining the state through +the spread of espionage networks, through undermining faith in the tax +system, through even more direct applications of the right tools at the +right times. + +When Cypherpunks are called "terrorists," we will have done our jobs. [Tim] said this before Christmas last year as an erudite and lengthy addendum to my lengthy tome: "Cypherpunks as Philosophy Kings" that pretty well summed our generally mutually agreed "philosophy". both were and still are worth reading; anybody who does not have copies, ask. but cypherpunk terrorists are not violent; this is all about making information free and protecting privacy with technology. despite the fact the Commerce Committee effectively killed SAFE (or we think they did until Oxley tries to tack his amendment structure on an appropriations bill in a house-senate conference or "manager's mark" procedure (whatever that is)), we can not drop the due diligence, and the public must be aroused, called to battle. even if there is no action, prepare for the next fire drill. sow the seeds of dissension. seems to me we were sure the CDA was dead --except it slipped in with a manager's mark after the house voted almost unanimously the other way (402-12 or something like that). the capitol hill sleeze took a grand slam NO and reported an even worse yes, making it part of a major bill that absolutely was going to pass --and they have the gall to call that travesty democracy? Teddy Roosevelt: "It is difficult to make our material condition better by the best law, but it is easy enough to ruin it by bad laws." Tim's message for Christmas last was the prophetic call for direct action; legal action; empowerment action: Robert H. Jackson (1892-1954), U.S. Judge: "It is not the function of our Government to keep the citizen from falling into error; it is the function of the citizen to keep the Government from falling into error." CYPHERPUNKS MUST BE THE JOHNNY APPLESEED OF THE INFORMATION AGE. the sleezeball, who intends to make J Edger look like a piker at surveillance, has the gleam of unabridged power in his eyes. Louis F[reeh,uck] is charming, even disarming, as he tells a Congressional committee: "We are potentially the most dangerous agency in the country if we are not scrutinized carefully." (Jun '97) meaning the FBI will be the most powerful [feared] federal agency? really? I thought it was already, although the DEA and BATF have worked hard for the title, too. Supreme Justice Louis O. Brandeis said: "The greatest danger to liberty lurks in insidious encroachment by men of zeal, well-meaning but without understanding." and the [London] Electronic Telegraph, on Sunday's front page: Mr Freeh has won $370 million (ú230 million) of funding for 2,000 new posts, boosted the number of active agents to more than 11,000, and expanded open-ended "domestic security operations" from 100 in 1995 to more than 800. Twenty-three new FBI offices are opening abroad. and more: But none of this will contain the director's ambitions or his power. He is now believed to be eyeing two other "secret police" forces - the Drug Enforcement Agency and the Bureau of Alcohol, Tobacco and Firearms - with a long-term view to a takeover. F[reeh,uck] holds the key to the Clintons' ambitions; the Clintons cite the Roosevelts as their mentors; Hillary even communes with the long dead Eleanor. Bubba's stated goals included extending FDR's "chicken in every pot" --he's just appeasing the crowd now. Leopards do not change their spots, but Bubba has shifted to the right with public opinion; he is just like the leopard: playing with his food until sufficient presidential powers have been accumulated by the default of Congress and the people. But, the INFORMATION REVOLUTION now stands in way of the Clinton plans; the Internet can destroy the media control now exercised by the acquiescence of the five jewish media barons. In fact, it is destroying their monopoly. THE CONTROL OF INFORMATION IS THE CONTROL OF POWER. Why does F[reeh,uck] hold the key? Because his job is to sell the Congress on strangling the information revolution before it destroys truthless governments F[reeh,uck]'s masters understand and control. Franklin D. Roosevelt was inaugurated on 4 Mar 33 stating: "I am prepared under my constitutional duty to recommend the measures that a stricken nation in the midst of a stricken world may require. These measures, or such other measures as the Congress may build out of its experience and wisdom, I shall seek, within my constitutional authority, to bring to speedy adoption. But in the event that the Congress shall fall to take one of these two courses, and in the event that the national emergency is still critical, I shall not evade the clear course of duty that will then confront me. I shall ask the Congress for the one remaining instrument to meet the crisis broad Executive power to wage a war against the emergency, as great as the power that would be given to me if we were in fact invaded by a foreign foe." and, on 9 Mar 33, 5 days later, FDR extracted from an uniformed and essentially special session of Congress: "Be it enacted by the Senate and the House of Representatives of the United States of America in Congress assembled, That the Congress hereby declares that a serious emergency exists and that it is imperatively necessary speedily to put into effect remedies of uniform national application." which was based on the War Powers Act (trading with the Enemy) of 1917 which was hastily revised to include US Citizens which had been exempted. Next, FDR "franchised" the banks, "licensed" agriculture and so on. But, to render the citizens powerless and to confiscate all assets so the national state was the ultimate owner, and therefore able to pledge the people for credit to the international bankers, the fundamental monetary system changed: "Whenever in the judgment of the Secretary of the Treasury, such action is necessary to protect the currency system of the United States, the Secretary of the Treasury, in his discretion, may require any or all individuals, partnerships, associations and corporations to pay and deliver to the Treasurer of the United States any or all gold coin, gold bullion, and gold certificates owned by such individuals, partnerships, associations and corporations." which closed the loop and made every US citizen chattel as FDR pledged the good faith and credit of the United States to the international bankers --in return, an unbelievable flood of credit was available since the good faith and credit of the United States is "We the People...." but FDR sold us downstream into a debt financed economy from which there is no escape; we are still there, the debt service is destroying any permanent economy AND total collapse under the debt load is bequeathed to our children. Congress repealed FDR's rubber stamp for the "President" in 1973, but the War Powers Act remains, still modified to treat US citizens as the enemy. and the power of the "President" to make those regulations, and the automatic approval are enshrined for current and future Presidents in Title 12 USC 95(b) "The actions, regulations, rules, licenses, orders and proclamations heretofore or hereafter taken, promulgated, made, or issued by the President of the United States or the Secretary of the Treasury since March the 4th, 1933, pursuant to the authority conferred by subdivision (b) of Section 5 of the Act of October 6, 1917, as amended, are hereby approved and confirmed." The real issue is the President and the fat cat power brokers can get away with these shenanigans __as_long_as_the_people_let_them__. We are still under the Rule of Necessity. We are still in a declared state of national emergency, a state of emergency which has existed, uninterrupted, since 1933. FDR's licensing agencies were rather trivial in number; today there are thousands of them, many with their own administrative courts. FDR took away our common law when he bankrupted America, which is a national corporation under the Hague convention (courtesy of Stanton and Seward after the Civil War). Bankruptcy is a contract, and we are the bait, subject to that court, which is in effect an Admiralty court, and we are "licensed" to literally exist by FDR's Social Security Number schema. and every courtroom now flies the fringed Admiralty flag where habeas corpus is a privilege, not a right, if it exists at all. This is the importance of Louis F[reeh,uck]. He, and Janet Reno as the DOJ rubber stamp, are holding the collar for your neck. They are selling it to you little by little, or even all at once. Why Louis F[reeh,uck]? Madison Avenue style with credentials; he can sell the program. F[reeh,uck] is the front man, the schill. Machiavelli, in his "Discourses of Livy," acknowledged that great power may have to be given to the Executive if the State is to survive, but warned of great dangers in doing so. He cautioned: Nor is it sufficient if this power be conferred upon good men; for men are frail, and easily corrupted, and then in a short time, he that is absolute may easily corrupt the people." sleezeball's comments are scarfed by Congress, sleezeball's candor rocks their cradles, sleezeball shows them private morality plays about a populace running wild with crypto-anarchy, running wild to burn out the offices of central power... in other words: DEPRIVE THEM CONGRESSCRITTERS OF THEIR FREE LUNCH AND IMMUNITY. is it not odd that the more the government tries to abridge our free speech rights, the more they want to confiscate our weapons? free speech is a weapon of democracy! privacy is a weapon of democracy! cryptography is a weapon of democracy! We are not fighting with guns and explosives this time, armed insurrection against the power of the Federal government is suicidal --we are fighting for our lives and the right to live our lives with words: the ability to hear those words _before_ government censors and spin doctors render them useless lies. Bubba can not win a war of truth and information; we can/ The Marquis de Sade: Are not laws dangerous which inhibit the passions? Compare the centuries of anarchy with those of the strongest legalism in any country you like and you will see that it is only when the laws are silent that the greatest actions appear. however, anarchy is the key word that ignites even the ACLU against your cause; it even makes makes bedfellows of Pat Buchanann and the homosexual/priest/congressman from Massachusetts... pure anarchy, by definition, does not work, anyway. forget it. get the concept out of your systems as it inflames everyone and all other reason is lost in the screaming and police batons. Even Teddy Roosevelt called for the complete extermination of anarchists, to be hunted like vermin. give it up; or go to your private island and fly your rattlesnake flag. even Anguilla will not tolerate anarchists. just give us our REAL constitutional rights as Franklin, Madison, Jefferson, Adams, and friends intended; give us constitutionalists on the Supreme Court, not bleeding hearts, statists, and central power freaks. get the Feds out of cradle to grave big government and let the people determine their religion and morality. give us freedom of speech, freedom to bear arms, freedom from unreasonable searches, freedom not to incriminate ourselves, and repeal the 14th Amendment so we can have states' rights again. if our Constitution were permitted to govern as it was intended, and the states obeyed the precepts endowed to not further limit the rights of the people, America would be the home of the free, not big government, not freeloaders and the welfare state; not the leftovers of a once great nation. give us the rights Abraham Lincoln cherished lovingly: "Those who deny freedom to others deserve it not for themselves." let _them_, not me, live the downside. George Washington, in his farewell address, warned: "... change by usurpation; for through this, in one instance, may be the instrument of good, it is the customary weapon by which free governments are destroyed." cypherpunk philosopher kings: pick up your picks and shovels, get your hands dirty, and start digging in; it's going to be a long and difficult campaign and the tactics needed to expose F[reeh,uck]'s true intentions as the schill for the Clintons who are schills for the elitist leading the destruction of American democracy. The Congressional compromise love match season isn't over yet; the schmoozers and lobbyists, like so many furry rats, still wander the dark halls and tunnels looking for the last, late in the season, clandestine and obscene fuck. any whore will do. lobbyists have long reputations for selling out the interests of their paymasters; the lobbyists are so much a part of the Washington culture that they have _no_ morality or moral position --it is all about who they can claim to have influenced --what difference does it make if it is contrary to the client --the art of the deal, protect their own position and find newer, richer clients --whores! logrolling and porkbarrel voting --but never go home without a deal; used car salesmanship: get your man. I can hear the lobbyists whining now as they are called on the carpet: "aw, come on Mac, we got you a compromise from LEA demands..." never realizing that there is such an action as NO bill, they sell out half our rights blocking legislation which would never happen. they claim they got back half. what half? --some unknown half that we _never_ lost! that is why: The 10 Commandments contain 297 words. The Bill of Rights is stated in 463 words. Lincoln's Gettysburg Address contains 266 words; and: A recent federal directive to regulate the price of cabbage contains 26,911 words. (The Atlanta Journal) send the quisling Neville Chamberlains to the gas chambers! the public needs to be educated, not in crypto, but in the horrors of an oligarchy which intends to destroy the fundamental freedoms on which we stand. publish his credit records; publish his medical records --tell his neighbors about his visits from Child Protective Services... then Joe Coach Potato will figure out he needs something AFTER he figures out there are fuckors and fuckees, and he's on the short end of that stick. [pardon my French] then, and only then, will the masses understand privacy --when they have lost it. either we show the people before they lose everything to uncle, or... just dump it on the table to show everyone just how much uncle knows about _you_. Attila's thought for the day: Now, with a black jack mule you wish to harness, you walk up, look him in the eye, and hit him with a 2X4 over the left eye. If he blinks, hit him over the right eye! He'll cooperate. --so will politicians. Louis F]reeh,uck], did you really state this hoping everyone would think you are joking? "We are potentially the most dangerous agency in the country if we are not scrutinized carefully." Louis F[reeh,uck], you obviously know that telling the truth, before the truth is really the truth, disarms your opposition since they can plainly see that it is not true. there is a limit to what you can endure before you must stand to be counted --so I will loudly echo Tim's sentiment: + +When Cypherpunks are called "terrorists," we will have done our jobs. + -- "Experience keeps a dear school, but fools will learn in no other." --Benjamin Franklin ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBNDHgKr04kQrCC2kFAQHPpAQAj+ukWNVEXT+Zgf920g63wX9EZqT241dj KFqLQ9lBPZLRQydg/PMDcm8T0oI/RneVh51dep5v17IdJcPQT7MN+0CmX91k6e8m 7Wsd+cNVovzDx6dRsC8ghMDB1QBZdBWW9553FzB89RMfilTikCyqmoP6Tub+23/V QywxUxa3slA= =U4tV -----END PGP SIGNATURE-----

1 0

Encrypting Pagers is Easy! [Overview, technical tradeoffs, crypto]
by Bill Stewart 17 Dec '03

17 Dec '03

One of the articles on the White House Pager Hack quoted a government official saying that encrypting pagers would be complicated and difficult. http://jya.com/potus-hack.htm http://www.inch.com/~esoteric/pam_suggestion/formal.html In fact, it's available today from several sources: 1)Digital PCS, in TDMA, GSM1900, and CDMA, though US coverage isn't complete (as of May 97, AT&T had service in 40% of the US land area, 80% population, and the GSM1900 players are expecting wide coverage later this year (e.g. PacBell and OmniPoint), plus Sprint PCS and other players are there.) There's a white paper on AT&T's Digital PCS at http://jya.com/digipcs.html which talks somewhat about the security. Phil Karn's posted some articles in the past about on the NSA's armtwisting that kept the cellphone encryption from being strong enough for serious security, but if it's not good enough for the White House, that's somewhat their fault. 2)Motorola's extremely cool PageWriter 2000 is a ~2"x2" programmable beeper with keyboard, 160x240 screen, crypto, operating system, and infrared. http://www.mot.com/MIMS/MSPG/Products/Two-way/pagewriter/ says it uses the Flex Operating System and ReFLEX 2-way paging; the person who showed me the beta version said OS9 and GSM. I'd guess that Flex is OS9 with bells and whistles added, and that the pager's CPU is a 68000-family chip, and that either he's wrong about GSM or there's a second flavor coming out that does GSM. In any case, it's user-programmable, and Motorola has crypto support. 3)If you insist on pager service that's not part of the cellphone or beeper you were carrying already, or want wider coverage, it's still not very hard, and it can be done with or without the paging service's cooperation. 4)PCMCIA cards in your PDA can get alpha pager, CDPD, ARDIS, RadioMail, etc. A cypherpunk replied that the difficulty is the fault of US anti-crypto policy. It's also the fault of spectrum licensing policies creating a small number of players in most markets and restricting what they can do "in the public interest", which has slowed deployment of new radio technology. Making money at it may still be hard, since the government interference fragments on the market and raises costs, but that's a separate problem, and if you can piggyback on existing developments like PCS and CDPD, it's a lot easier. Technology tradeoffs -------------------- Pager-company approaches vs. end-user-based - for the former, you have to convince the pager service and hardware companies there's a market; for the latter, you don't change the service, just send encrypted data using the alpha pager protocols, and soup up your pager to decrypt it. For PCS or CDPD or other radio data systems, it's also just data. If the pager company does the encryption, it's vulnerable to wiretaps and escrow. Relays - in a user-based system, you can either have the message sender do the encryption, which means distributing your code and keys widely, or run a relay box, e.g. Web page with SSL that handles the crypto and paging, letting people who want to page you use a standard web browser. Pager technology vs. crypto horsepower - basic pagers don't have a lot of horsepower, but a general-purpose 8-bit processor chip should be able to do RC4 in near-real-time, and maybe other symmetric-key algorithms. Public-key needs more horsepower - is it too slow for a pager-sized system? Digital cellphones use plenty of CPU to handle voice and dumb crypto, in not much more space, though they do use a lot more battery. If you don't want to custom-build your own pagers, use a pager card in a PDA - the Newton's had this for a while, and has a RISC CPU, so it's fast, and there are HP DOS-based palmtops which are slower, though the new Windows CE machines are probably faster than the previous generation. There'll probably be Pilot PCMCIA versions, though that's slower, and you can use Pilot with Metricom today and use Ian's PGP tools. The upcoming Psion 5 uses a StrongArm CPU; don't know if it does PCMCIA. Crypto issues ------------- What about the crypto protocols themselves? Public-key is straightforward; if you use 1024-bit keys you can even skip the symmetric-key layer and just send 128-character messages (or longer if you want to do Baudot or 7-bit ASCII :-) If you do public-key from the end user, it's secure, but all users need to use your public key to send you messages. If you do public-key from the pager company, all messages are encrypted, but the system is vulnerable to eavesdroppers and Escrow Cops. Does the response channel for two-way paging let you send arbitrary data, e.g. a Diffie-Hellman keypart? Secret key has more choices, with varying vulnerabilities - shared secret with pager company - dumb, works fine, you'd probably have the pager company set the secret key along with the pager parameters, and of course it's an obvious target for escrow and eavesdropping. For a mass-market service, this would be the most likely approach. Alternatively, you could have the manufacturer set the keys, along with setting the pager's internal ID, though that's a major security risk for both official and unofficial escrow (or, as Eric Hughes put it, "an opportunity for simultaneous employment" :-) - user-managed relay from public-key to user's secret-key - instead of paging you, people send public-key messages to your computer (email, web page, etc.), which decrypts and re-encrypts with your secret key. For larger organizations, like the White House Communication Agency or corporate or military groups, this could be run by a shared system which knows all the group's keys. - in either of these cases, you'd probably want to use the shared secret key to exchange a random session key rather than to encrypt the message directly, to reduce known and chosen plaintext attacks. Using RC4 directly doesn't work (known plaintext -> you lose), but can you do things like send IV, and encrypt using (Secretkey,IV) as a key? Or use secretkey XOR IV? Hash(Secretkey,IV) would be better, but probably too slow, though I suppose you could do some cheap hash? traffic analysis questions - if you buy the pager service in cash, it's not very traceable - but how long will this be legal? The relay approaches let your users send you pages without knowing your pager number, which is good, but a phone tap or other eavesdropper can presumably figure out who your relay is sending the message to. Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

2 1

Re: Ecash Remailer #1
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart wrote: >At 08:25 PM 09/29/1997 -0400, Anonymous <anon(a)anon.efga.org> wrote: >>This is a test of the first modern remailer to accept ecash. Sorry for the >>inconvenience. > >Which remailer is it? anon.efga.org? Or something forwarding >through there? Maybe Ian Goldberg would be kind enough to explain? Messages sent to ecash-remailer(a)cypherpunks.ca with payment pop out at anon.efga.org. That's all I know. Personally, I would like to see the message come from the "ecash-remailer". My guess is that people who pay 25 cents will write more interesting messages. Also, it (or a remailer after it) seems to be eating subject lines, which is less than ideal. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNDHlQZaWtjSmRH/5AQGgZQf+IxxZ2Gqw28A/YtsVeqvEoI81z8+2Cznd zqWUUY15RJSqOJpLhhK5XhJriNTgA5kA6encZkl3u3HtiMzj1UK9QWsbYbgQqYGD Ue0XNE7m3R2EExu8q9+xk4Vk1dHyUMzPdBrHGUzFTzKBnfyL/InKirdtFFqZchhn pOZjd1eClDyQskXP6NUIkoc+NSybkw4yBoFgVqcqWUJInxvDRdNQq+aSGL5IZ1ew X1le5FtWviqqRAfkLPhLENRhEmn0Wgr7G6nnlDcOQbh/o8z+fcs7o3aCBmvAJCud Vct6n+FqrDvgmr9Jm0WJXb4gehOb1iE18T7sR9cmPm3FV6WOUXEZVA== =jlTZ -----END PGP SIGNATURE-----

1 0

Re: Secure HTTP servers.
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Jim wrote: > I just started working vfor a local ISP and they found out, i was on > this list and knew a little about crypto. Anyway they seem to have the > impression this would qualify me to know something. At any rate, on to > the point of the mail. Could someone point me in the right direction for > info on secure http servers ?? Also maybe info on which is better than > the other ?? Jim, Congratulations on your new job at Microsoft. For info on secure http servers, you might want to check with Netscape, for starters. Always willing to help out newbies. THE .987 LIE

1 0

Re: Windows 95 -- succinctly
by Bad BillyG 17 Dec '03

17 Dec '03

Someone attempting to have Mike Denney assassinated wrote: > Windows 95: n. > 32 bit extensions and a graphical shell for a 16 bit > patch to an 8 bit operating system originally coded > for a 4 bit microprocessor, written by a 2 bit company, > that can't stand 1 bit of competition. Anyone with information relating to the original author of the above definition is encouraged to call 1-800-HIT-MAN1, or to contact Microsoft Corporate Headquarters. Please note that the above definition is considered to be proprietary information owned by the Microsoft Corporation and any unauthorized use of the definition will be considered grounds for the offending party and everyone they know to have their web sites rated 'Non-Existent' by the InterNet Content Coalition, as described in Section 178.a, Sub. C-23, of the 'InterNet Secret Government Manifesto' of Sept. 5, 1997. Bad BillyG "Sure, I could tell you what operating system *I* use...but then I'd have to 'kill -9' you."

1 0

"I'm a programmer and I vote"
by Ernest Hua 17 Dec '03

17 Dec '03

How about a bumper sticker that says: "I'm a programmer and I vote" Check out: http://www.news.com/Perspectives/tc/tc9_29_97a.html Ern

1 0