December 2003 - cypherpunks-legacy

alt.cypherpunks created
by Greg Broiles 17 Dec '03

17 Dec '03

According to DejaNews, Mike Duvos has also issued a newgroup for alt.cypherpunks: >Subject: cmsg newgroup alt.cypherpunks >From: mpd(a)netcom.com (Mike Duvos) >Date: 1997/02/11 >Message-Id: <mpdE5GMA8.ABH(a)netcom.com> >Sender: mpd(a)netcom12.netcom.com >Control: newgroup alt.cypherpunks >Organization: Netcom On-Line Services >Newsgroups: alt.cypherpunks > > > >alt.cypherpunks is an unmoderated newsgroup, needed as a replacement >for the high volume Cypherpunks mailing list, which is being evicted >from its longtime home at toad.com due to creative differences with >the site owner, John Gilmore. > >For your newsgroups file: > >alt.cypherpunks Technological defenses for privacy > >Some background on Cypherpunks, snipped from the mailing list welcome >message, follows... > >Cypherpunks assume privacy is a good thing and wish there were more of it. >Cypherpunks acknowledge that those who want privacy must create it for >themselves and not expect governments, corporations, or other large, >faceless organizations to grant them privacy out of beneficence. >Cypherpunks know that people have been creating their own privacy for >centuries with whispers, envelopes, closed doors, and couriers. >Cypherpunks do not seek to prevent other people from speaking about their >experiences or their opinions. > >The most important means to the defense of privacy is encryption. To >encrypt is to indicate the desire for privacy. But to encrypt with weak >cryptography is to indicate not too much desire for privacy. Cypherpunks >hope that all people desiring privacy will learn how best to defend it. > >Cypherpunks are therefore devoted to cryptography. Cypherpunks wish to >learn about it, to teach it, to implement it, and to make more of it. >Cypherpunks know that cryptographic protocols make social structures. >Cypherpunks know how to attack a system and how to defend it. Cypherpunks >know just how hard it is to make good cryptosystems. > >Cypherpunks love to practice. They love to play with public key >cryptography. They love to play with anonymous and pseudonymous mail >forwarding and delivery. They love to play with DC-nets. They love to >play with secure communications of all kinds. > >Cypherpunks write code. They know that someone has to write code to >defend privacy, and since it's their privacy, they're going to write it. >Cypherpunks publish their code so that their fellow cypherpunks may >practice and play with it. Cypherpunks realize that security is not built >in a day and are patient with incremental progress. > >Cypherpunks don't care if you don't like the software they write. >Cypherpunks know that software can't be destroyed. Cypherpunks know that >a widely dispersed system can't be shut down. > >Cypherpunks will make the networks safe for privacy. > >-- > Mike Duvos $ PGP 2.6 Public Key available $ > mpd(a)netcom.com $ via Finger. $

1 0

List-Managers list info
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"Majordomo(a)GreatCircle.COM" 4-AUG-1996 00:00:26.72 To: IN%"EALLENSMITH(a)mbcl.rutgers.edu" CC: Subj: Welcome to list-managers Welcome to the list-managers mailing list! Please save this message for future reference. Thank you. If you ever want to remove yourself from this mailing list, you can send mail to <Majordomo(a)GreatCircle.COM> with the following command in the body of your email message: unsubscribe list-managers EALLENSMITH(a)mbcl.rutgers.edu Here's the general information for the list you've subscribed to, in case you don't already have it: Description =========== This list is for discussions of issues related to managing Internet mailing lists, including (but not limited to) methods, mechanisms, techniques, policies, and software (in general; questions about specific software packages should be directed to the mailing list dedicated to that particular package). Technical questions regarding particular software packages (for instance, Majordomo, LISTPROC, ListServ, etc.) are NOT appropriate for the List-Managers mailing list. They should be directed to the mailing list dedicated to that particular package (for instance, for Majordomo, that's Majordomo-Users(a)GreatCircle.COM) Check the documentation that came with the package to find out where the support list for that package is hosted. This list is an outgrowth of the "Mailing Lists" workshop session at the USENIX System Administration Conference (LISA VI) in Long Beach, CA, on October 22, 1992. This is the undigestified version of the list. All messages sent to this list are immediately forwarded to members of the list. The digestified version of the list is List-Managers-Digest(a)GreatCircle.COM. Policies ======== You can subscribe a local redistribution list or a gateway to a local newsgroup, as long as whatever you do is local to your site. This restriction makes it much easier for me to track down mailer problems. I'm very aggressive when it comes to bounced email. If email to you starts bouncing, I'll probably drop you from the list fairly quickly; you'll have to resubscribe when you get the problem fixed, and retrieve the archives to find out what you missed. Archives ======== All messages to the list are archived. The archives are available via Majordomo using the "get" command (send "help" in the body of a message to "Majordomo(a)GreatCircle.COM" for more info), or via anonymous FTP from host FTP.GreatCircle.COM in directory "pub/list-managers/archive". The archives are broken down by year and month, and are stored in files named "list-managers.YYMM". The copy of the archive available by anonymous FTP is updated every night at 2am local time (0900 GMT in the summer, 1000 GMT in the winter). For further information, contact: Michael C. Berch Postmaster and list manager, Great Circle Associates mcb(a)greatcircle.com

1 0

Extensis CyberViewer Registration
by webmaster＠extensis.com 17 Dec '03

17 Dec '03

Dear Gringo, Thank you for registering your copy of CyberViewer with Extensis! Your CyberViewer serial number is: JME-100-001-936-690721 Please save this message for your records. Visit <http://www.extensis.com/products/CyberViewer/> for more information about CyberViewer news & updates! Thanks for using Extensis CyberViewer! Jeff Cheney Product Marketing Manager jcheney(a)extensis.com

1 0

Re: Need a good bi-directional mail-news gateway
by Robert Hettinga 17 Dec '03

17 Dec '03

At 3:18 pm -0500 2/12/97, Jonathan M. Bresler <jmb(a)frb.gov> wrote: ^^^^^^^ > your expected mail volume is 100,000+ messages a day? > > i run lists that do 200,000+ routinely. > recent peak of 350,000 messages > > does that meet your needs? Great. Let's run cypherpunks with a government subsidy. ;-). Pulling your leg, just a bit.. Cheers, Bob Hettinga "So much for a geodesic monitary system..." ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/

1 0

security
by zac speidel 17 Dec '03

17 Dec '03

does any 1 here a hacker??? Title: Skinhead Oi Oi

1 0

Re: Cypherpunks Distributed Remailer (fwd)
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"ravage(a)einstein.ssz.com" "Jim Choate" 12-FEB-1997 18:43:56.23 > From: "E. Allen Smith" <EALLENSMITH(a)ocelot.rutgers.edu> >> Umm... because you'll eventually accumulate _lots_ of addresses >> that don't work, which will slow things down tremendously in sending >> mail out? >The current subscription is between 1,000 and 2,000 I don't think that is >_lots_. All we need to do is count the number of bounces per address in >a given period, the SSZ end is trying to decide between weekly or >monthly cleanings, and then clear that address. At no point would I need >to archive the original bounce. Someone with more experience correct me if I'm wrong (I'm just starting to learn about mailing list management), but isn't saving at least the first bounce from a given address good in order to check what address is the one that's actually bouncing? Admittedly, this only applies to badly-formed bounces. The rest can just have the address noted. >> Well, loki(a)cyberpass.net has made the offer to host the entire >> list... and Lance is certainly making money at it. While this would have >> some problems in comparison with the distributed list idea (namely more of >> a choke point), it would decidedly help. >I certainly hope they get a cpunks address made available. I will certainly >subscribe cpunks@ssz so that the distributed remailer will benefit from >that input. However, one of the major realizations is that as long as one >anything is involved in the list it is capable of being shutdown at any >time with no warning. It also makes it much easier to compromise. I would >like to see servers in several countries myself. Agreed. >> >Is anyone interested in acting as a mail-to-news gateway? >Want to volunteer? Give me some idea of how much programming knowledge, time, etcetera is required, please, before I can answer. I'd be renting space on some other computer (e.g., an account on cyberpass.net) to do it in; the only higher-level programming language (i.e., beyond Applesoft Basic) that I know anything of is Perl (and I don't know that all that well); and I am somewhat busy with other stuff. In other words, it depends. -Allen

1 0

Pre-alpha Cpunx-resource FAQ comments sought
by omegam＠cmq.com 17 Dec '03

17 Dec '03

Okay folks. I have worked on this much of the day. This is a more formalized outline as well as a somewhat fleshed out version of section 1 of the FAQ I am attempting to produce. I submit this to the group for commentary and suggestions as well as pointers to the relevant info. This should be enough to give a flavor of what I am trying to do. Anything in [] needs to be located and/or verified by myself. I realize that this won't please everyone and some may not care. So be it. Those who do care, please help me make it less of a FAQ based on my subjective experience and more of a useful general reference. Here it is... -----BEGIN PGP SIGNED MESSAGE----- Cypherpunks Resources FAQ version 0.000000002 Compiled, edited & maintained by Scott Harney "Omegaman <omegam(a)cmq.com>" This document lists resources for readers interested in Cypherpunk issues and goals. The primary intention of this document is to get new readers of the group to explore the background issues that Cypherpunks attempt to address. It also includes pointers to many common cryptographic implementations and tools. Furthermore, pointers and instructions for various newsreaders and email-filters are provided to help users filter out some of the net's inevitable noise and glean the most useful information they can from this forum. This FAQ does not attempt to explictly define who the Cypherpunks are or answer questions about the philosophy. That is an exercise for the reader who utilizes the pointers within to find the answers on their own. After exploring these resources, the hope is that the reader will become a more effective and insightful contributor to alt.cypherpunks -- even if he/she is opposed to the goals of the group. This FAQ is not intended to be an exhaustive reference. A quick perusal of this FAQ should reveal the impossiblity of such a task. Rather, it is a jumping-off point. Almost all of the references below contain voluminous further references. If your mission-critical Cypherpunks site is not explicitly included, it is 99% likely to be referred to by at least one of them. This FAQ is propagated monthly to alt.cypherpunks. It can also be obtained be sending email with the subject and/or body "get cpunks faq" to omegam(a)cmq.com. As with nearly all net.publications, this document is in a constant state of contruction. When information in the FAQ is updated, I will also post a "what's new" message for those who are interested in reading additions/corrections without wading throught the entire FAQ again. - -------*********------- Author's Note/Disclaimer ---------*********--------- I maintain this FAQ solely on a voluntary basis. I am doing this because I think it is necessary. It would be contrary to the anarchic nature of the Cypherpunks to attempt to call this an official FAQ of the Cypherpunks group. Anyone who disagrees with the editing decisions and pointer selections I have made in this FAQ is free to. What this means is that you are encouraged to send comments, suggestions, corrections, new questions, and answers to me. I may or may not include them in future revisions of the FAQ. I do ask that somewhere in the subject of your mail redarding this FAQ you include the text "(CFAQ suggest)", so procmail can file such comments appropriately and I can address them in a more efficient manner. If I use your suggestion or answer to a question, I will attribute the reference to you unless you request that I do not. You are free to create your own Cypherpunks-resources FAQ if you don't like mine. - - Scott _______________________________________________________________ Omegaman <mailto:omegam@cmq.com> PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63 Send e-mail with "get key" in the "Subject:" field to get a copy of my public key _______________________________________________________________ - -------*********--------*********---------********--------*********------ Premliminary Outline Section 1 - Introduction and General Information. Q1.1 Does this newsgroup/mailing-list have a charter? Q1.2 How did the group get started? Q1.3 What do Cypherpunks want? Q1.4 What happened to the toad.com mailing list? Are there archives? Q1.5 Are there other groups besides Cypherpunks who share these goals. Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Q1.7 I'm interested, what can I do? Q1.8 What are all these terms and acronyms anyway? (A Quick n' Dirty Glossary) Section 2 - Crypto in Action Q2.1 Pointers galore to PGP resources. Q2.2 Point to Schneir's site and include biblio info on Applied Crypto Q2.2 Point to cryptlib toolkits Q2.3 RSA, of course. Q2.4 pointers to disk encryption utilities for various platforms Q2.5 pointers to Raph's remailer site and other remailer info sites. remailer software. software to make remailer usage simpler (premail, PIdaho) Q2.6 pointers to the various digital cash purveyors and to explanations of how Chaumian digital cash works. Q2.7 pointers to Apache-SSL site and info, Stronghold, Q2.8 SSH Q2.9 Pointers to sites describing how various types of crypto actually work. sci.crypt faq Q3.0 But how do I know if it's good crypto? Point to snake Oil FAQ? Schneir's essay. Use your brain. Section 3 - Crypto and the Law Q3.1 Froomkin's site obviously.. John Young's also obvious. EFF has a good archive too. Karn case, others. Q3.2 Pointers to government's current position on crypto. ie. EAR, ITAR Q3.3 Pointers past Clipper failure info. Section 4 - Who's who & (recent) History of Crypto. Q4.1 A couple of good general history sites exist. also Codebreakers bibliographical reference. Q4.2 Enigma is a common question, point to relevant sites. Q4.3 Whit Diffie--some interviews etc are available Q4.4 Bruce Schneir same Q4.5 Phil Z and PGP history and interviews. Q4.6 Jim Bizdos Q4.8 Dorothy Denning (got to include the enemy too) Q4.7 Pointers to news on breaks of ciphers Q4.8 NSA site. [Others? I'm getting sleepy, names escaping me at the moment] Section 5 - Help! I want to know more but I'm drowning in noise Q5.1 Point to filtered lists in existence Q5.2 news2mail gateways as source of list. mail filtering tools come into good use. point to a bunch of them. Q5.3 Point to kill-file info for various newsreaders and platforms. [Possibly include generic examples from own experience and list user's experience who wish to contribute. Specific names will be ommitted of course. Also score information for those interested] Q5.4 point to information on other utilities and verification-type schemes [NoCeM's] Section 6 - Personal motivations, thank-you's, etc. *********----------**********----------**********---------*********---- Section 1. Introduction and General Information Q1.1 Do the Cypherpunks have an official charter? No. Cypherpunks are anarchic in nature so the notion of an official charter is directly contrary to such ideals. The two statements below are from Original Cypherpunks (OC's) Eric Hughes and Tim May. The first was part of the original welcome message to the mailing list hosted at toad.com. The second was suggested by Tim to the original list and commented upon by the readership. Both statements are accepted by much of the readership as good indicators of what Cypherpunks are about. Eric Hughes' statement: "Cypherpunks assume privacy is a good thing and wish there were more of it. Cypherpunks acknowledge that those who want privacy must create it for themselves and not expect governments, corporations, or other large, faceless organizations to grant them privacy out of beneficence. Cypherpunks know that people have been creating their own privacy for centuries with whispers, envelopes, closed doors, and couriers. Cypherpunks do not seek to prevent other people from speaking about their experiences or their opinions. The most important means to the defense of privacy is encryption. To encrypt is to indicate the desire for privacy. But to encrypt with weak cryptography is to indicate not too much desire for privacy. Cypherpunks hope that all people desiring privacy will learn how best to defend it. Cypherpunks are therefore devoted to cryptography. Cypherpunks wish to learn about it, to teach it, to implement it, and to make more of it. Cypherpunks know that cryptographic protocols make social structures. Cypherpunks know how to attack a system and how to defend it. Cypherpunks know just how hard it is to make good cryptosystems. Cypherpunks love to practice. They love to play with public key cryptography. They love to play with anonymous and pseudonymous mail forwarding and delivery. They love to play with DC-nets. They love to play with secure communications of all kinds. Cypherpunks write code. They know that someone has to write code to defend privacy, and since it's their privacy, they're going to write it. Cypherpunks publish their code so that their fellow Cypherpunks may practice and play with it. Cypherpunks realize that security is not built in a day and are patient with incremental progress. Cypherpunks don't care if you don't like the software they write. Cypherpunks know that software can't be destroyed. Cypherpunks know that a widely dispersed system can't be shut down. Cypherpunks will make the networks safe for privacy." Tim May's statement: "Alt.cypherpunks is for the unmoderated discussion of cryptography and the political, social, and economic implications of unrestricted, strong cryptography. The Cypherpunks grpup has existed since 1992 and has been central in the debate about strong crypto, government restrictions, crypto anarchy, and in showing weaknesses of various ciphers and security products. The mailing list has had as many as 1500 subscribers, plus gateways to newsgroups and Web sites. It is expected that 'alt.cypherpunks' will be a free-wheeling forum for many viewpoints. As it is unmoderated, readers are strongly advised to learn how to use filters and other tools for making virtual anarchies manageable for their own tastes." Q1.2 How did the group get started? Needless to say, the history of such things is fuzzy at best. Eric Hughes and Tim May had some discussions which led to Eric Hughes, decision to host a meeting. Concidently, the first meeting occurred the same week PGP 2.0 was released. John Gilmore offered his site to host a mailing list, and thus Cypherpunks were born. see Q1.2, Q1.4, and Q1.6 for references containing more detail. also see: [Wired article URL] Q1.3 What do Cypherpunks want? Such a simple question with no simple, short answer. Please explore the following sites. Tim May's provacative (and large!) Cyphernomicon http://www.oberlin.edu/~brchkind/cyphernomicon/ The Berkeley Cypherpunks site is another good starting point. ftp://ftp.csua.berkeley.edu/pub/cypherpunks/Home.html Also see: http://www.offshore.com.ai/security/ - Vince Cate's Cryptorebel/Cypherpunk Page http://www.eskimo.com/~joelm/ - Joel McNamara's Electronic Privacy Page Q1.4 What happened to the toad.com mailing list? Are there archives? As with all Cypherpunks issues, there is much controversy surrounding the dissolution of the original list hosted by John Gilmore's machine @toad.com. Some say that noise devoured the list to such a point as to make it useless, driving away the "good posters". Others argue that the failed attempt at moderating the list to eliminate some of that noise was the final nail in the coffin. Whatever the reason, Gilmore told the Cypherpunks that it was time to find a new home. Running a mailing list with 1500+ subscription base and the enormous volume that the list had is not a simple task. The physical running of the list on a single machine requires enormous computational resources as well as constant human intervention. Perhaps the resultant newsgroup and distributed mailing list approach is more in line with Cypherpunk ideals. "Cypherpunks know that a widely dispersed system cannot be shut down." Archives of the original list are available to some degree at: http://infinity.nus.sg/cypherpunks/ http://weber.u.washington.edu/~phantom/cpunk/index.html Users interested in running a "node" of the distributed mailing list version of this newsgroup are encouraged to subscribe to Igor Chudov's discussion list on the subject. Send a message to majordomo(a)algebra.com with the body "subscribe cypherpunks-hosts" Q1.5 Are there other groups besides Cypherpunks who share these goals? The following organizations and sites share Cypherpunk goals to a greater or lesser extent. The EFF(Electronic Frontier Foundation) http://eff.org http://eff.org/pub/ITAR_export/HTML/hot.html & http://www.eff.org/pub/Privacy/hot.html - more specific references & extensive archival information EPIC (Electronic Privacy Information Center) http://epic.org Voter's Telecommunications Watch http://www.vtw.org Center for Democracy and Technology http://www.cdt.org The Cryptography List at C2Net is also a good resource. send a message to Majordomo(a)c2.net with the body "subscribe Cryptography" The Coderpunks list at toad.com is a technical discussion forum. Send a message to majordomo(a)toad.com with the body "subscribe coderpunks" Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Many Cypherpunks are professionals in the computer security field. Others work for companies and corporations which create and distribute products utilizing strong cryptography. Cypherpunks are also directly responsible for the creation and running of Type I and Type II(mixmaster) Cypherpunks anonymous remailers (surprising, eh?). see Q2.5 Cypherpunks have also produced software to make good crypto easier for the masses. [Get permission from PGP-front end producers to reference here] The Linux-IPSEC project is another good example. [see & subscribe ref?]. Mykotronx exposure and dumpster diving excursion. [reference?] see Q1.4(list-archive sites) Q1.7 I'm interested, what can I do? First of all READ before you post. Observe simple etiquette. Don't clutter the group with "me too" posts and questions which you can easily find the answer to yourself. Contribute signal, not noise. As of this writing, RSA, inc. is hosting a contest to crack the government standard DES 56 bit algorhythm. See [http://www.rsa.com/contest] for full details. Also see Peter Trei's site for software and info. Host a portion of the distributed mailing list. See Q1.5. Run an anonymous or pseudonymous remailer. see Q1.6 for site references and software. Use strong crypto. Encourage friends to use it as well. Increase the amount of encrypted traffic on the net. Can you code? There are plenty of projects and opportunites yet to be explored. Black Unicorn writes: "Where is highly sophisticated stego? Where are larger keys for symetric ciphers? Where is a fully functional and secure "stealth PGP"? Where are anonymous and encrypted WWW clients and hosts which permit chaining? If the crypto war is going to be lost it will be lost in the chill of development when crypto regulation is put into place. If you don't make the guns in the first place, the government has a much easier time taking them away." Q1.8 What are all these terms and acronyms anyway? Here's a quick-n-dirty glossary. GAK = Government access to keys. Government euphemisms for GAK include "key escrow" and "key recovery" (actually important for corporations, but misused in recent USG proposals) USG = United States Government ITAR = International Trade and Arms Regulations. Regulations export of arms from the US. Strong Crypto is regulated as a weapon by this document. see Q3.2 EAR = Encryption Algorhythm Regulations (a guess, look it up) Recent proposals by Clinton Administration. see Q3.2 TLA = Three Letter Acronym/Agency. Refers to USG agencies (typically involved in law enforcement) FBI, CIA, NSA, etc. NSA = National Security Agency. This highly secretive agency is responsible for the protection of USG secrecy via encryption as well as the spying on other governments by breaking encryption algorhythms. see Q4.8 DES = US Data Encryption Standard algorhythm. see Q2.9 RSA = a company and a public key algorhythm. see Q2.9 and Q2.3 net.loon/kook = a purely subjective characterization. Signal-to-Noise ratio = Signal refers to on-topic posts. Noise, the opposite. A high S/N ratio means the list is putting out a lot of signal("good posts"). Subjective, but fairly obvious. See Section 5 for pointers no how to reduce (what you think is) noise Memes = [get a good definition here] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [Rest of FAQ goes here :) This is a pre-alpha FAQ, intended only to solicit commentary and suggestions.] -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: latin1 iQCVAwUBMwJViqb3EfJTqNC9AQHigwP+IAXu+PO7aGiR/zZxz91PhnYuYvTy3jMN HzO4djcx44auPMjh6pFpmWJuYRcoxVHXCh2JO4UOR3cNYloxikwY4hGgYx8jLgN1 XORQztiCGMI/2ScVsi8tH6eJLCuZxmE7s8semel4CC8xH3H74vCiBNZD6iyyIXOG oMkSnOVFAQg= =Fdky -----END PGP SIGNATURE-----

1 0

Been good to know ya ...
by Rabid Wombat 17 Dec '03

17 Dec '03

Later, all. And thanks to John for all the work he has put in to maintaining the list. Last one to leave, turn out the lights. -r.w.

1 0

Re: anonymity and e-cash
by tcmay＠got.net 17 Dec '03

17 Dec '03

(A copy of this message has also been posted to the following newsgroups: alt.cypherpunks, talk.politics.crypto,sci.crypt) At 1:19 PM -0800 2/12/97, Lee Tien wrote (on the Cypherpunks(a)toad.com list): >The NSA's research report on e-cash says: > > "The ideal situation (from the point of view of privacy advocates) >is that neither payer nor payee should know the identity of the other. This >makes remote transactions using electronic cash totally anonymous: no one >knows where Alice spends her money and who pays her. > > "It turns out that this is too much to ask: there is no way in such >a scenario for the consumer to obtain a signed receipt. Thus we are forced >to settle for payer anonymity." > >Keeping in mind I am only a lawyer, my skim of Schneier (2d ed.) didn't >illuminate. The discussion of digital cash seemed to assume no payee >anonymity. But the immediate previous section of dining cryptographers >involved (it seemed) recipient untraceability. > >Is payee anonymity technically possible? Under what conditions? > >If so, is the issue social, e.g., as NSA notes, the lack of a signed receipt? You missed a very good talk by Ian Goldberg of UC Berkeley at the Saturday Cypherpunks meeting at Stanford, where Ian talked for more than an hour on just this issue. (He also talked for an hour on his crack of the RSA challenge using 250 workstations...this was also a good talk.) It was explicitly stated in Chaum's 1985 paper that methods existed to ensure full untraceability. Chaum has in recent years emphasized a more "surveillance friendly" system in which some of the anonymity is lost. It was the intuition of some of us that "coin changers" could solve this problem, e.g, by having intermediaries to "mix" the coins and thus break the traceability chain. Lucky Green wrote some articles along these lines, and maybe Hal Finney, too. This was a couple of years ago. The notion is similar to what Ian showed, but our arguments were not formal and robust. In August of '95, Doug Barnes released a long article on "Identity Agnostic" systems. (His article is no longer at the www.communities.com Web site, so I can't refer you to it. Maybe he'll post it again.) About a year ago Ian Goldberg considered this issue and came up with a solution which has seemingly reproduced what Chaum was thinking about (but, apparently, did not make completely clear in his papers, for whatever reasons). Ian deals with the issue of "making change" and comes up with a system in which intermediaries, which we may call "e-cashiers" and "moneychangers," can take on the role of the mint/bank. By making "negative deposits" (submitting signed withdrawal slips, effectively), these intermediaries function as moneychangers. And so the one-way anonymous features become two-way (effectively, each of the transactions contributes a "one-way anonymous" component: one-way + one-way = two-way). It is much easier to understand digital cash with the usual diagram showing the usual triangle of CUSTOMER-MERCHANT-MINT and then analyzing the flow of information, who knows what, etc. Drawing such diagrams in e-mail is beyond my patience. This system used online clearing, of course. This "disintermediates" the process, and makes for an "everyone a mint" situation, which has some of the same nice properties that an "everyone a remailer" ecology of remailers and users has. And the principle can be extended further back, to where the usual distinctions between CUSTOMER and MERCHANT vanish (as it sort of does in the real world, where the two parties are merely exchanging one item for another item), and where the role of the MINT is minimal. In fact, Ian showed, the Chaum patents on blinding are NOT USED by the Mint/Bank; only the CUSTOMER uses the blinding patents (and the MERCHANT in some cases, not in other cases). This means that "anyone a mint" does not violate any of the Chaum/Digicash patents, and "mint clients" are likely to be written by third parties. (The _customer_ is presumably on the honor system to abide by the Chaum patents...except the patents are only being licensed to banks...go figure.) (This is where, as I recall, Doug's "agnostic" system came in...it is possible his thinking was similar to Ian's...I don't have Doug's paper handy.) Ian demonstrated this on an actual system, with real live connections to mints in various countries, but with the blinding not used (as I recall). Draw your own conclusions about what this means. It was heady stuff, seeing the result many of us believed to be implicit in Chaum's 1985 paper made real. Everyone a mint. This makes the spread of fully anonymous digital cash harder to stop. Issues of the mint denying one has an account are always real ones, but not important--I think--in the real world. The untraceability of the digital coins means that a mint never knows who is testing it for reliability and "honesty," and the mint cannot set out to "screw" a particular customer by declaring his account not to exist (as the mint almost certainly does not have to know who own which accounts, as deposits can be made anonymously). I hope this helps. I plan to use this result centrally in my talk at the panel discussion on "Governmental and Social Implications of Digital Cash" at the upcoming CFP. --Tim May -- Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Spam posts from my acct.
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

Cpunks, A number of spam mails (I counted about 100 in my incoming mail) were sent to the list from my account last night. I do not take particular precautions with my password for this account as there is no sensitive mail sent through it, I recall in particular giving the password to someone to test out a machine recently and I believe they may be the culprit. Again, my appologies for the inconvenience and you have to admit that while his method may have been less than subtle his message was certainly something we can all relate to ;-) Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Re: John Gilmore the fascist cocksucker
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> Why you are doing this, Paul? > > - Igor. It would appear that someone I gave my password to the other day (I recieve no sensitive mail through this account) so they could use it to test a machine has a rather infantile sense of humour and have taken my critical posts to the list to mean that I want to spam a mailing list with dreck like this. I shall ensure the offending fool is castrated forthwith... Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Re: Excerpt on SPAM from Edupage, 11 February 1997
by Timothy C. May 17 Dec '03

17 Dec '03

At 6:21 PM +0000 2/12/97, Attila T. Hun wrote: > maybe relief is in sight; can we spell excedrin? > >on or about 970211:1433 educom(a)elanor.oit.unc.edu said: > >+COURT GRANTS COMPUSERVE INJUNCTION AGAINST JUNK E-MAIL > >+A U.S. district court in Ohio has granted CompuServe's request for a >+preliminary injunction barring Cyber Promotions Inc. from sending >+unsolicited e-mail to its subscribers while the commercial provider ... Were I a customer of CompuServe, I'd ask on what basis CompuServe was intercepting e-mail to me. In fact, a CompuServe account holder has made just this point: "I'll decide what's junk mail and what's not." Having the court system involved in deciding what mail is valid and what is not valid is not my idea of a free society. Having said this, the flaw remains that "junk mail" is "free" to the sender. This is a flaw in the ontology of e-mail, and needs to be fixed. Digital postage is one approach. I'm not holding my breath, but I sure don't want a "District Court" deciding. --Tim May Just say "No" to "Big Brother Inside" We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Extensis CyberViewer Registration
by webmaster＠extensis.com 17 Dec '03

17 Dec '03

Dear Gringo, Thank you for registering your copy of CyberViewer with Extensis! Your CyberViewer serial number is: JME-100-001-936-690721 Please save this message for your records. Visit <http://www.extensis.com/products/CyberViewer/> for more information about CyberViewer news & updates! Thanks for using Extensis CyberViewer! Jeff Cheney Product Marketing Manager jcheney(a)extensis.com

1 0

Re: Recommendation: Creation of "alt.cypherpunks"
by Firebeard 17 Dec '03

17 Dec '03

>>>>> Timothy C May writes: TCM> Since posting my comments I've just seen the proposal that tivoli TCM> may host a list. Whoa, Nellie! Who made that proposal? It certainly wasn't me! I said that I was taking steps to set up a majordomo to host a cypherpunks list. Topmost on those steps is creation of the sten.net or sten.org domain, and getting a personal, paid-for-out-of-my-own-pocket, ISDN connection. The majordomo will run off of my personal computer sitting in my apartment, not on Tivoli hardware sitting in the support lab. As I said, John forced my hand in his announcement, causing me to 'put up' before everything was in place, including the domain registration. Yes, my mail comes from sten.tivoli.com. That doesn't mean that everything I do in life is connected to Tivoli, IBM, etc. -- #include <disclaimer.h> /* Sten Drescher */ Unsolicited bulk email will be stored and handled for a US$500/KB fee. It is by caffeine alone I set my mind in motion, it is by the beans of Java that thoughts acquire speed, the hands acquire shaking, the shaking becomes a warning, it is by caffeine alone I set my mind in motion. -- Carlos Nunes-Ueno, 3/29/95

1 0

Re: Cypherpunks Distributed Remailer (fwd)
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"ravage(a)einstein.ssz.com" "Jim Choate" 12-FEB-1997 18:43:56.23 > From: "E. Allen Smith" <EALLENSMITH(a)ocelot.rutgers.edu> >> Umm... because you'll eventually accumulate _lots_ of addresses >> that don't work, which will slow things down tremendously in sending >> mail out? >The current subscription is between 1,000 and 2,000 I don't think that is >_lots_. All we need to do is count the number of bounces per address in >a given period, the SSZ end is trying to decide between weekly or >monthly cleanings, and then clear that address. At no point would I need >to archive the original bounce. Someone with more experience correct me if I'm wrong (I'm just starting to learn about mailing list management), but isn't saving at least the first bounce from a given address good in order to check what address is the one that's actually bouncing? Admittedly, this only applies to badly-formed bounces. The rest can just have the address noted. >> Well, loki(a)cyberpass.net has made the offer to host the entire >> list... and Lance is certainly making money at it. While this would have >> some problems in comparison with the distributed list idea (namely more of >> a choke point), it would decidedly help. >I certainly hope they get a cpunks address made available. I will certainly >subscribe cpunks@ssz so that the distributed remailer will benefit from >that input. However, one of the major realizations is that as long as one >anything is involved in the list it is capable of being shutdown at any >time with no warning. It also makes it much easier to compromise. I would >like to see servers in several countries myself. Agreed. >> >Is anyone interested in acting as a mail-to-news gateway? >Want to volunteer? Give me some idea of how much programming knowledge, time, etcetera is required, please, before I can answer. I'd be renting space on some other computer (e.g., an account on cyberpass.net) to do it in; the only higher-level programming language (i.e., beyond Applesoft Basic) that I know anything of is Perl (and I don't know that all that well); and I am somewhat busy with other stuff. In other words, it depends. -Allen

1 0

security
by zac speidel 17 Dec '03

17 Dec '03

does any 1 here a hacker??? --=====================_855792302==_ Content-Type: TEXT/HTML; CHARSET=us-ascii Content-ID: <Pine.SUN.3.91.970212160438.11558F(a)crl.crl.com> <BASE HREF="www.well.com/user/fritoy/sample.html"> <html> <title>Skinhead Oi Oi</title> <script>  </script> </head> <body bgcolor=#000000 text=#FFFFFF link="FF0000" vlink="8888FF" alink="FF00FF"> <script>   </script> </head> <body> <BODY BGCOLOR=000000 text="#000000" link="#0000ff" vlink="#c00c0" onload="scroller()"> <CENTER><FORM> <BR><BR><BR> <input type="button" Value="Close" onClick="if (confirm('Are you sure you want to close this window?'))window.close();else (alert('OK, this window will not close yet.'))"> </FORM></CENTER> <BR> <CENTER><P><FORM name="forma"><INPUT NAME="david" VALUE=" Speidel(a)lightspeed.net The End Is HERE!!! The world is falling apart" type="hidden" ><INPUT NAME="scroller" VALUE="" size="35"></FORM></P> </CENTER> </BODY> </html> --=====================_855792302==_--

1 0

Re: Network of majordomos
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> What was your chater? Could you Cc a copy to the list? I didn`t save it but it was something along the lines of this: Charter: alt.cypherpunks will serve as a discussion forum for the members of the cypherpunks community. The discussion group previously resided on a mailing list run at toad.com but due to a difference of opinion between the majority of active members of the list and the owner of toad.com, John Gilmore, the list must now relocate onto usenet as a temporary measure while further measures are put in place to re-establish a mailing list format. The group has approximately 1500 members and has been active online for some 5 years. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Remove My Name
by KENNETH A. LEONE 17 Dec '03

17 Dec '03

I CONTINUE TO RECEIVE MAIL. PLEASE REMOVE MY NAME FROM THE MAILING LIST. THANK YOU

1 0

Been good to know ya ...
by Rabid Wombat 17 Dec '03

17 Dec '03

Later, all. And thanks to John for all the work he has put in to maintaining the list. Last one to leave, turn out the lights. -r.w.

1 0

Pre-alpha Cpunx-resource FAQ comments sought
by omegam＠cmq.com 17 Dec '03

17 Dec '03

Okay folks. I have worked on this much of the day. This is a more formalized outline as well as a somewhat fleshed out version of section 1 of the FAQ I am attempting to produce. I submit this to the group for commentary and suggestions as well as pointers to the relevant info. This should be enough to give a flavor of what I am trying to do. Anything in [] needs to be located and/or verified by myself. I realize that this won't please everyone and some may not care. So be it. Those who do care, please help me make it less of a FAQ based on my subjective experience and more of a useful general reference. Here it is... -----BEGIN PGP SIGNED MESSAGE----- Cypherpunks Resources FAQ version 0.000000002 Compiled, edited & maintained by Scott Harney "Omegaman <omegam(a)cmq.com>" This document lists resources for readers interested in Cypherpunk issues and goals. The primary intention of this document is to get new readers of the group to explore the background issues that Cypherpunks attempt to address. It also includes pointers to many common cryptographic implementations and tools. Furthermore, pointers and instructions for various newsreaders and email-filters are provided to help users filter out some of the net's inevitable noise and glean the most useful information they can from this forum. This FAQ does not attempt to explictly define who the Cypherpunks are or answer questions about the philosophy. That is an exercise for the reader who utilizes the pointers within to find the answers on their own. After exploring these resources, the hope is that the reader will become a more effective and insightful contributor to alt.cypherpunks -- even if he/she is opposed to the goals of the group. This FAQ is not intended to be an exhaustive reference. A quick perusal of this FAQ should reveal the impossiblity of such a task. Rather, it is a jumping-off point. Almost all of the references below contain voluminous further references. If your mission-critical Cypherpunks site is not explicitly included, it is 99% likely to be referred to by at least one of them. This FAQ is propagated monthly to alt.cypherpunks. It can also be obtained be sending email with the subject and/or body "get cpunks faq" to omegam(a)cmq.com. As with nearly all net.publications, this document is in a constant state of contruction. When information in the FAQ is updated, I will also post a "what's new" message for those who are interested in reading additions/corrections without wading throught the entire FAQ again. - -------*********------- Author's Note/Disclaimer ---------*********--------- I maintain this FAQ solely on a voluntary basis. I am doing this because I think it is necessary. It would be contrary to the anarchic nature of the Cypherpunks to attempt to call this an official FAQ of the Cypherpunks group. Anyone who disagrees with the editing decisions and pointer selections I have made in this FAQ is free to. What this means is that you are encouraged to send comments, suggestions, corrections, new questions, and answers to me. I may or may not include them in future revisions of the FAQ. I do ask that somewhere in the subject of your mail redarding this FAQ you include the text "(CFAQ suggest)", so procmail can file such comments appropriately and I can address them in a more efficient manner. If I use your suggestion or answer to a question, I will attribute the reference to you unless you request that I do not. You are free to create your own Cypherpunks-resources FAQ if you don't like mine. - - Scott _______________________________________________________________ Omegaman <mailto:omegam@cmq.com> PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63 Send e-mail with "get key" in the "Subject:" field to get a copy of my public key _______________________________________________________________ - -------*********--------*********---------********--------*********------ Premliminary Outline Section 1 - Introduction and General Information. Q1.1 Does this newsgroup/mailing-list have a charter? Q1.2 How did the group get started? Q1.3 What do Cypherpunks want? Q1.4 What happened to the toad.com mailing list? Are there archives? Q1.5 Are there other groups besides Cypherpunks who share these goals. Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Q1.7 I'm interested, what can I do? Q1.8 What are all these terms and acronyms anyway? (A Quick n' Dirty Glossary) Section 2 - Crypto in Action Q2.1 Pointers galore to PGP resources. Q2.2 Point to Schneir's site and include biblio info on Applied Crypto Q2.2 Point to cryptlib toolkits Q2.3 RSA, of course. Q2.4 pointers to disk encryption utilities for various platforms Q2.5 pointers to Raph's remailer site and other remailer info sites. remailer software. software to make remailer usage simpler (premail, PIdaho) Q2.6 pointers to the various digital cash purveyors and to explanations of how Chaumian digital cash works. Q2.7 pointers to Apache-SSL site and info, Stronghold, Q2.8 SSH Q2.9 Pointers to sites describing how various types of crypto actually work. sci.crypt faq Q3.0 But how do I know if it's good crypto? Point to snake Oil FAQ? Schneir's essay. Use your brain. Section 3 - Crypto and the Law Q3.1 Froomkin's site obviously.. John Young's also obvious. EFF has a good archive too. Karn case, others. Q3.2 Pointers to government's current position on crypto. ie. EAR, ITAR Q3.3 Pointers past Clipper failure info. Section 4 - Who's who & (recent) History of Crypto. Q4.1 A couple of good general history sites exist. also Codebreakers bibliographical reference. Q4.2 Enigma is a common question, point to relevant sites. Q4.3 Whit Diffie--some interviews etc are available Q4.4 Bruce Schneir same Q4.5 Phil Z and PGP history and interviews. Q4.6 Jim Bizdos Q4.8 Dorothy Denning (got to include the enemy too) Q4.7 Pointers to news on breaks of ciphers Q4.8 NSA site. [Others? I'm getting sleepy, names escaping me at the moment] Section 5 - Help! I want to know more but I'm drowning in noise Q5.1 Point to filtered lists in existence Q5.2 news2mail gateways as source of list. mail filtering tools come into good use. point to a bunch of them. Q5.3 Point to kill-file info for various newsreaders and platforms. [Possibly include generic examples from own experience and list user's experience who wish to contribute. Specific names will be ommitted of course. Also score information for those interested] Q5.4 point to information on other utilities and verification-type schemes [NoCeM's] Section 6 - Personal motivations, thank-you's, etc. *********----------**********----------**********---------*********---- Section 1. Introduction and General Information Q1.1 Do the Cypherpunks have an official charter? No. Cypherpunks are anarchic in nature so the notion of an official charter is directly contrary to such ideals. The two statements below are from Original Cypherpunks (OC's) Eric Hughes and Tim May. The first was part of the original welcome message to the mailing list hosted at toad.com. The second was suggested by Tim to the original list and commented upon by the readership. Both statements are accepted by much of the readership as good indicators of what Cypherpunks are about. Eric Hughes' statement: "Cypherpunks assume privacy is a good thing and wish there were more of it. Cypherpunks acknowledge that those who want privacy must create it for themselves and not expect governments, corporations, or other large, faceless organizations to grant them privacy out of beneficence. Cypherpunks know that people have been creating their own privacy for centuries with whispers, envelopes, closed doors, and couriers. Cypherpunks do not seek to prevent other people from speaking about their experiences or their opinions. The most important means to the defense of privacy is encryption. To encrypt is to indicate the desire for privacy. But to encrypt with weak cryptography is to indicate not too much desire for privacy. Cypherpunks hope that all people desiring privacy will learn how best to defend it. Cypherpunks are therefore devoted to cryptography. Cypherpunks wish to learn about it, to teach it, to implement it, and to make more of it. Cypherpunks know that cryptographic protocols make social structures. Cypherpunks know how to attack a system and how to defend it. Cypherpunks know just how hard it is to make good cryptosystems. Cypherpunks love to practice. They love to play with public key cryptography. They love to play with anonymous and pseudonymous mail forwarding and delivery. They love to play with DC-nets. They love to play with secure communications of all kinds. Cypherpunks write code. They know that someone has to write code to defend privacy, and since it's their privacy, they're going to write it. Cypherpunks publish their code so that their fellow Cypherpunks may practice and play with it. Cypherpunks realize that security is not built in a day and are patient with incremental progress. Cypherpunks don't care if you don't like the software they write. Cypherpunks know that software can't be destroyed. Cypherpunks know that a widely dispersed system can't be shut down. Cypherpunks will make the networks safe for privacy." Tim May's statement: "Alt.cypherpunks is for the unmoderated discussion of cryptography and the political, social, and economic implications of unrestricted, strong cryptography. The Cypherpunks grpup has existed since 1992 and has been central in the debate about strong crypto, government restrictions, crypto anarchy, and in showing weaknesses of various ciphers and security products. The mailing list has had as many as 1500 subscribers, plus gateways to newsgroups and Web sites. It is expected that 'alt.cypherpunks' will be a free-wheeling forum for many viewpoints. As it is unmoderated, readers are strongly advised to learn how to use filters and other tools for making virtual anarchies manageable for their own tastes." Q1.2 How did the group get started? Needless to say, the history of such things is fuzzy at best. Eric Hughes and Tim May had some discussions which led to Eric Hughes, decision to host a meeting. Concidently, the first meeting occurred the same week PGP 2.0 was released. John Gilmore offered his site to host a mailing list, and thus Cypherpunks were born. see Q1.2, Q1.4, and Q1.6 for references containing more detail. also see: [Wired article URL] Q1.3 What do Cypherpunks want? Such a simple question with no simple, short answer. Please explore the following sites. Tim May's provacative (and large!) Cyphernomicon http://www.oberlin.edu/~brchkind/cyphernomicon/ The Berkeley Cypherpunks site is another good starting point. ftp://ftp.csua.berkeley.edu/pub/cypherpunks/Home.html Also see: http://www.offshore.com.ai/security/ - Vince Cate's Cryptorebel/Cypherpunk Page http://www.eskimo.com/~joelm/ - Joel McNamara's Electronic Privacy Page Q1.4 What happened to the toad.com mailing list? Are there archives? As with all Cypherpunks issues, there is much controversy surrounding the dissolution of the original list hosted by John Gilmore's machine @toad.com. Some say that noise devoured the list to such a point as to make it useless, driving away the "good posters". Others argue that the failed attempt at moderating the list to eliminate some of that noise was the final nail in the coffin. Whatever the reason, Gilmore told the Cypherpunks that it was time to find a new home. Running a mailing list with 1500+ subscription base and the enormous volume that the list had is not a simple task. The physical running of the list on a single machine requires enormous computational resources as well as constant human intervention. Perhaps the resultant newsgroup and distributed mailing list approach is more in line with Cypherpunk ideals. "Cypherpunks know that a widely dispersed system cannot be shut down." Archives of the original list are available to some degree at: http://infinity.nus.sg/cypherpunks/ http://weber.u.washington.edu/~phantom/cpunk/index.html Users interested in running a "node" of the distributed mailing list version of this newsgroup are encouraged to subscribe to Igor Chudov's discussion list on the subject. Send a message to majordomo(a)algebra.com with the body "subscribe cypherpunks-hosts" Q1.5 Are there other groups besides Cypherpunks who share these goals? The following organizations and sites share Cypherpunk goals to a greater or lesser extent. The EFF(Electronic Frontier Foundation) http://eff.org http://eff.org/pub/ITAR_export/HTML/hot.html & http://www.eff.org/pub/Privacy/hot.html - more specific references & extensive archival information EPIC (Electronic Privacy Information Center) http://epic.org Voter's Telecommunications Watch http://www.vtw.org Center for Democracy and Technology http://www.cdt.org The Cryptography List at C2Net is also a good resource. send a message to Majordomo(a)c2.net with the body "subscribe Cryptography" The Coderpunks list at toad.com is a technical discussion forum. Send a message to majordomo(a)toad.com with the body "subscribe coderpunks" Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Many Cypherpunks are professionals in the computer security field. Others work for companies and corporations which create and distribute products utilizing strong cryptography. Cypherpunks are also directly responsible for the creation and running of Type I and Type II(mixmaster) Cypherpunks anonymous remailers (surprising, eh?). see Q2.5 Cypherpunks have also produced software to make good crypto easier for the masses. [Get permission from PGP-front end producers to reference here] The Linux-IPSEC project is another good example. [see & subscribe ref?]. Mykotronx exposure and dumpster diving excursion. [reference?] see Q1.4(list-archive sites) Q1.7 I'm interested, what can I do? First of all READ before you post. Observe simple etiquette. Don't clutter the group with "me too" posts and questions which you can easily find the answer to yourself. Contribute signal, not noise. As of this writing, RSA, inc. is hosting a contest to crack the government standard DES 56 bit algorhythm. See [http://www.rsa.com/contest] for full details. Also see Peter Trei's site for software and info. Host a portion of the distributed mailing list. See Q1.5. Run an anonymous or pseudonymous remailer. see Q1.6 for site references and software. Use strong crypto. Encourage friends to use it as well. Increase the amount of encrypted traffic on the net. Can you code? There are plenty of projects and opportunites yet to be explored. Black Unicorn writes: "Where is highly sophisticated stego? Where are larger keys for symetric ciphers? Where is a fully functional and secure "stealth PGP"? Where are anonymous and encrypted WWW clients and hosts which permit chaining? If the crypto war is going to be lost it will be lost in the chill of development when crypto regulation is put into place. If you don't make the guns in the first place, the government has a much easier time taking them away." Q1.8 What are all these terms and acronyms anyway? Here's a quick-n-dirty glossary. GAK = Government access to keys. Government euphemisms for GAK include "key escrow" and "key recovery" (actually important for corporations, but misused in recent USG proposals) USG = United States Government ITAR = International Trade and Arms Regulations. Regulations export of arms from the US. Strong Crypto is regulated as a weapon by this document. see Q3.2 EAR = Encryption Algorhythm Regulations (a guess, look it up) Recent proposals by Clinton Administration. see Q3.2 TLA = Three Letter Acronym/Agency. Refers to USG agencies (typically involved in law enforcement) FBI, CIA, NSA, etc. NSA = National Security Agency. This highly secretive agency is responsible for the protection of USG secrecy via encryption as well as the spying on other governments by breaking encryption algorhythms. see Q4.8 DES = US Data Encryption Standard algorhythm. see Q2.9 RSA = a company and a public key algorhythm. see Q2.9 and Q2.3 net.loon/kook = a purely subjective characterization. Signal-to-Noise ratio = Signal refers to on-topic posts. Noise, the opposite. A high S/N ratio means the list is putting out a lot of signal("good posts"). Subjective, but fairly obvious. See Section 5 for pointers no how to reduce (what you think is) noise Memes = [get a good definition here] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [Rest of FAQ goes here :) This is a pre-alpha FAQ, intended only to solicit commentary and suggestions.] -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: latin1 iQCVAwUBMwJViqb3EfJTqNC9AQHigwP+IAXu+PO7aGiR/zZxz91PhnYuYvTy3jMN HzO4djcx44auPMjh6pFpmWJuYRcoxVHXCh2JO4UOR3cNYloxikwY4hGgYx8jLgN1 XORQztiCGMI/2ScVsi8tH6eJLCuZxmE7s8semel4CC8xH3H74vCiBNZD6iyyIXOG oMkSnOVFAQg= =Fdky -----END PGP SIGNATURE-----

1 0

Pre-alpha Cpunx-resource FAQ comments sought
by omegam＠cmq.com 17 Dec '03

17 Dec '03

Okay folks. I have worked on this much of the day. This is a more formalized outline as well as a somewhat fleshed out version of section 1 of the FAQ I am attempting to produce. I submit this to the group for commentary and suggestions as well as pointers to the relevant info. This should be enough to give a flavor of what I am trying to do. Anything in [] needs to be located and/or verified by myself. I realize that this won't please everyone and some may not care. So be it. Those who do care, please help me make it less of a FAQ based on my subjective experience and more of a useful general reference. Here it is... -----BEGIN PGP SIGNED MESSAGE----- Cypherpunks Resources FAQ version 0.000000002 Compiled, edited & maintained by Scott Harney "Omegaman <omegam(a)cmq.com>" This document lists resources for readers interested in Cypherpunk issues and goals. The primary intention of this document is to get new readers of the group to explore the background issues that Cypherpunks attempt to address. It also includes pointers to many common cryptographic implementations and tools. Furthermore, pointers and instructions for various newsreaders and email-filters are provided to help users filter out some of the net's inevitable noise and glean the most useful information they can from this forum. This FAQ does not attempt to explictly define who the Cypherpunks are or answer questions about the philosophy. That is an exercise for the reader who utilizes the pointers within to find the answers on their own. After exploring these resources, the hope is that the reader will become a more effective and insightful contributor to alt.cypherpunks -- even if he/she is opposed to the goals of the group. This FAQ is not intended to be an exhaustive reference. A quick perusal of this FAQ should reveal the impossiblity of such a task. Rather, it is a jumping-off point. Almost all of the references below contain voluminous further references. If your mission-critical Cypherpunks site is not explicitly included, it is 99% likely to be referred to by at least one of them. This FAQ is propagated monthly to alt.cypherpunks. It can also be obtained be sending email with the subject and/or body "get cpunks faq" to omegam(a)cmq.com. As with nearly all net.publications, this document is in a constant state of contruction. When information in the FAQ is updated, I will also post a "what's new" message for those who are interested in reading additions/corrections without wading throught the entire FAQ again. - -------*********------- Author's Note/Disclaimer ---------*********--------- I maintain this FAQ solely on a voluntary basis. I am doing this because I think it is necessary. It would be contrary to the anarchic nature of the Cypherpunks to attempt to call this an official FAQ of the Cypherpunks group. Anyone who disagrees with the editing decisions and pointer selections I have made in this FAQ is free to. What this means is that you are encouraged to send comments, suggestions, corrections, new questions, and answers to me. I may or may not include them in future revisions of the FAQ. I do ask that somewhere in the subject of your mail redarding this FAQ you include the text "(CFAQ suggest)", so procmail can file such comments appropriately and I can address them in a more efficient manner. If I use your suggestion or answer to a question, I will attribute the reference to you unless you request that I do not. You are free to create your own Cypherpunks-resources FAQ if you don't like mine. - - Scott _______________________________________________________________ Omegaman <mailto:omegam@cmq.com> PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63 Send e-mail with "get key" in the "Subject:" field to get a copy of my public key _______________________________________________________________ - -------*********--------*********---------********--------*********------ Premliminary Outline Section 1 - Introduction and General Information. Q1.1 Does this newsgroup/mailing-list have a charter? Q1.2 How did the group get started? Q1.3 What do Cypherpunks want? Q1.4 What happened to the toad.com mailing list? Are there archives? Q1.5 Are there other groups besides Cypherpunks who share these goals. Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Q1.7 I'm interested, what can I do? Q1.8 What are all these terms and acronyms anyway? (A Quick n' Dirty Glossary) Section 2 - Crypto in Action Q2.1 Pointers galore to PGP resources. Q2.2 Point to Schneir's site and include biblio info on Applied Crypto Q2.2 Point to cryptlib toolkits Q2.3 RSA, of course. Q2.4 pointers to disk encryption utilities for various platforms Q2.5 pointers to Raph's remailer site and other remailer info sites. remailer software. software to make remailer usage simpler (premail, PIdaho) Q2.6 pointers to the various digital cash purveyors and to explanations of how Chaumian digital cash works. Q2.7 pointers to Apache-SSL site and info, Stronghold, Q2.8 SSH Q2.9 Pointers to sites describing how various types of crypto actually work. sci.crypt faq Q3.0 But how do I know if it's good crypto? Point to snake Oil FAQ? Schneir's essay. Use your brain. Section 3 - Crypto and the Law Q3.1 Froomkin's site obviously.. John Young's also obvious. EFF has a good archive too. Karn case, others. Q3.2 Pointers to government's current position on crypto. ie. EAR, ITAR Q3.3 Pointers past Clipper failure info. Section 4 - Who's who & (recent) History of Crypto. Q4.1 A couple of good general history sites exist. also Codebreakers bibliographical reference. Q4.2 Enigma is a common question, point to relevant sites. Q4.3 Whit Diffie--some interviews etc are available Q4.4 Bruce Schneir same Q4.5 Phil Z and PGP history and interviews. Q4.6 Jim Bizdos Q4.8 Dorothy Denning (got to include the enemy too) Q4.7 Pointers to news on breaks of ciphers Q4.8 NSA site. [Others? I'm getting sleepy, names escaping me at the moment] Section 5 - Help! I want to know more but I'm drowning in noise Q5.1 Point to filtered lists in existence Q5.2 news2mail gateways as source of list. mail filtering tools come into good use. point to a bunch of them. Q5.3 Point to kill-file info for various newsreaders and platforms. [Possibly include generic examples from own experience and list user's experience who wish to contribute. Specific names will be ommitted of course. Also score information for those interested] Q5.4 point to information on other utilities and verification-type schemes [NoCeM's] Section 6 - Personal motivations, thank-you's, etc. *********----------**********----------**********---------*********---- Section 1. Introduction and General Information Q1.1 Do the Cypherpunks have an official charter? No. Cypherpunks are anarchic in nature so the notion of an official charter is directly contrary to such ideals. The two statements below are from Original Cypherpunks (OC's) Eric Hughes and Tim May. The first was part of the original welcome message to the mailing list hosted at toad.com. The second was suggested by Tim to the original list and commented upon by the readership. Both statements are accepted by much of the readership as good indicators of what Cypherpunks are about. Eric Hughes' statement: "Cypherpunks assume privacy is a good thing and wish there were more of it. Cypherpunks acknowledge that those who want privacy must create it for themselves and not expect governments, corporations, or other large, faceless organizations to grant them privacy out of beneficence. Cypherpunks know that people have been creating their own privacy for centuries with whispers, envelopes, closed doors, and couriers. Cypherpunks do not seek to prevent other people from speaking about their experiences or their opinions. The most important means to the defense of privacy is encryption. To encrypt is to indicate the desire for privacy. But to encrypt with weak cryptography is to indicate not too much desire for privacy. Cypherpunks hope that all people desiring privacy will learn how best to defend it. Cypherpunks are therefore devoted to cryptography. Cypherpunks wish to learn about it, to teach it, to implement it, and to make more of it. Cypherpunks know that cryptographic protocols make social structures. Cypherpunks know how to attack a system and how to defend it. Cypherpunks know just how hard it is to make good cryptosystems. Cypherpunks love to practice. They love to play with public key cryptography. They love to play with anonymous and pseudonymous mail forwarding and delivery. They love to play with DC-nets. They love to play with secure communications of all kinds. Cypherpunks write code. They know that someone has to write code to defend privacy, and since it's their privacy, they're going to write it. Cypherpunks publish their code so that their fellow Cypherpunks may practice and play with it. Cypherpunks realize that security is not built in a day and are patient with incremental progress. Cypherpunks don't care if you don't like the software they write. Cypherpunks know that software can't be destroyed. Cypherpunks know that a widely dispersed system can't be shut down. Cypherpunks will make the networks safe for privacy." Tim May's statement: "Alt.cypherpunks is for the unmoderated discussion of cryptography and the political, social, and economic implications of unrestricted, strong cryptography. The Cypherpunks grpup has existed since 1992 and has been central in the debate about strong crypto, government restrictions, crypto anarchy, and in showing weaknesses of various ciphers and security products. The mailing list has had as many as 1500 subscribers, plus gateways to newsgroups and Web sites. It is expected that 'alt.cypherpunks' will be a free-wheeling forum for many viewpoints. As it is unmoderated, readers are strongly advised to learn how to use filters and other tools for making virtual anarchies manageable for their own tastes." Q1.2 How did the group get started? Needless to say, the history of such things is fuzzy at best. Eric Hughes and Tim May had some discussions which led to Eric Hughes, decision to host a meeting. Concidently, the first meeting occurred the same week PGP 2.0 was released. John Gilmore offered his site to host a mailing list, and thus Cypherpunks were born. see Q1.2, Q1.4, and Q1.6 for references containing more detail. also see: [Wired article URL] Q1.3 What do Cypherpunks want? Such a simple question with no simple, short answer. Please explore the following sites. Tim May's provacative (and large!) Cyphernomicon http://www.oberlin.edu/~brchkind/cyphernomicon/ The Berkeley Cypherpunks site is another good starting point. ftp://ftp.csua.berkeley.edu/pub/cypherpunks/Home.html Also see: http://www.offshore.com.ai/security/ - Vince Cate's Cryptorebel/Cypherpunk Page http://www.eskimo.com/~joelm/ - Joel McNamara's Electronic Privacy Page Q1.4 What happened to the toad.com mailing list? Are there archives? As with all Cypherpunks issues, there is much controversy surrounding the dissolution of the original list hosted by John Gilmore's machine @toad.com. Some say that noise devoured the list to such a point as to make it useless, driving away the "good posters". Others argue that the failed attempt at moderating the list to eliminate some of that noise was the final nail in the coffin. Whatever the reason, Gilmore told the Cypherpunks that it was time to find a new home. Running a mailing list with 1500+ subscription base and the enormous volume that the list had is not a simple task. The physical running of the list on a single machine requires enormous computational resources as well as constant human intervention. Perhaps the resultant newsgroup and distributed mailing list approach is more in line with Cypherpunk ideals. "Cypherpunks know that a widely dispersed system cannot be shut down." Archives of the original list are available to some degree at: http://infinity.nus.sg/cypherpunks/ http://weber.u.washington.edu/~phantom/cpunk/index.html Users interested in running a "node" of the distributed mailing list version of this newsgroup are encouraged to subscribe to Igor Chudov's discussion list on the subject. Send a message to majordomo(a)algebra.com with the body "subscribe cypherpunks-hosts" Q1.5 Are there other groups besides Cypherpunks who share these goals? The following organizations and sites share Cypherpunk goals to a greater or lesser extent. The EFF(Electronic Frontier Foundation) http://eff.org http://eff.org/pub/ITAR_export/HTML/hot.html & http://www.eff.org/pub/Privacy/hot.html - more specific references & extensive archival information EPIC (Electronic Privacy Information Center) http://epic.org Voter's Telecommunications Watch http://www.vtw.org Center for Democracy and Technology http://www.cdt.org The Cryptography List at C2Net is also a good resource. send a message to Majordomo(a)c2.net with the body "subscribe Cryptography" The Coderpunks list at toad.com is a technical discussion forum. Send a message to majordomo(a)toad.com with the body "subscribe coderpunks" Q1.6 What have the Cypherpunks done to advance their goals other that merely talk about them? Many Cypherpunks are professionals in the computer security field. Others work for companies and corporations which create and distribute products utilizing strong cryptography. Cypherpunks are also directly responsible for the creation and running of Type I and Type II(mixmaster) Cypherpunks anonymous remailers (surprising, eh?). see Q2.5 Cypherpunks have also produced software to make good crypto easier for the masses. [Get permission from PGP-front end producers to reference here] The Linux-IPSEC project is another good example. [see & subscribe ref?]. Mykotronx exposure and dumpster diving excursion. [reference?] see Q1.4(list-archive sites) Q1.7 I'm interested, what can I do? First of all READ before you post. Observe simple etiquette. Don't clutter the group with "me too" posts and questions which you can easily find the answer to yourself. Contribute signal, not noise. As of this writing, RSA, inc. is hosting a contest to crack the government standard DES 56 bit algorhythm. See [http://www.rsa.com/contest] for full details. Also see Peter Trei's site for software and info. Host a portion of the distributed mailing list. See Q1.5. Run an anonymous or pseudonymous remailer. see Q1.6 for site references and software. Use strong crypto. Encourage friends to use it as well. Increase the amount of encrypted traffic on the net. Can you code? There are plenty of projects and opportunites yet to be explored. Black Unicorn writes: "Where is highly sophisticated stego? Where are larger keys for symetric ciphers? Where is a fully functional and secure "stealth PGP"? Where are anonymous and encrypted WWW clients and hosts which permit chaining? If the crypto war is going to be lost it will be lost in the chill of development when crypto regulation is put into place. If you don't make the guns in the first place, the government has a much easier time taking them away." Q1.8 What are all these terms and acronyms anyway? Here's a quick-n-dirty glossary. GAK = Government access to keys. Government euphemisms for GAK include "key escrow" and "key recovery" (actually important for corporations, but misused in recent USG proposals) USG = United States Government ITAR = International Trade and Arms Regulations. Regulations export of arms from the US. Strong Crypto is regulated as a weapon by this document. see Q3.2 EAR = Encryption Algorhythm Regulations (a guess, look it up) Recent proposals by Clinton Administration. see Q3.2 TLA = Three Letter Acronym/Agency. Refers to USG agencies (typically involved in law enforcement) FBI, CIA, NSA, etc. NSA = National Security Agency. This highly secretive agency is responsible for the protection of USG secrecy via encryption as well as the spying on other governments by breaking encryption algorhythms. see Q4.8 DES = US Data Encryption Standard algorhythm. see Q2.9 RSA = a company and a public key algorhythm. see Q2.9 and Q2.3 net.loon/kook = a purely subjective characterization. Signal-to-Noise ratio = Signal refers to on-topic posts. Noise, the opposite. A high S/N ratio means the list is putting out a lot of signal("good posts"). Subjective, but fairly obvious. See Section 5 for pointers no how to reduce (what you think is) noise Memes = [get a good definition here] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [Rest of FAQ goes here :) This is a pre-alpha FAQ, intended only to solicit commentary and suggestions.] -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: latin1 iQCVAwUBMwJViqb3EfJTqNC9AQHigwP+IAXu+PO7aGiR/zZxz91PhnYuYvTy3jMN HzO4djcx44auPMjh6pFpmWJuYRcoxVHXCh2JO4UOR3cNYloxikwY4hGgYx8jLgN1 XORQztiCGMI/2ScVsi8tH6eJLCuZxmE7s8semel4CC8xH3H74vCiBNZD6iyyIXOG oMkSnOVFAQg= =Fdky -----END PGP SIGNATURE-----

1 0

Remove My Name
by KENNETH A. LEONE 17 Dec '03

17 Dec '03

I CONTINUE TO RECEIVE MAIL. PLEASE REMOVE MY NAME FROM THE MAILING LIST. THANK YOU

1 0

Re: anonymity and e-cash
by janke＠unixg.ubc.ca 17 Dec '03

17 Dec '03

Lee Tien <tien(a)well.com> writes: > [...] > Is payee anonymity technically possible? Under what conditions? > [...] It's not too hard: The payee forwards a blinded, non-signed coin to the payer. The payer has the bank sign this, and then returns it to the payee who strips out the blinding factor. I think this is discussed in Schneier. Leonard

1 0

Re: John Gilmore the fascist cocksucker
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> Why you are doing this, Paul? > > - Igor. It would appear that someone I gave my password to the other day (I recieve no sensitive mail through this account) so they could use it to test a machine has a rather infantile sense of humour and have taken my critical posts to the list to mean that I want to spam a mailing list with dreck like this. I shall ensure the offending fool is castrated forthwith... Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Spam posts from my acct.
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

Cpunks, A number of spam mails (I counted about 100 in my incoming mail) were sent to the list from my account last night. I do not take particular precautions with my password for this account as there is no sensitive mail sent through it, I recall in particular giving the password to someone to test out a machine recently and I believe they may be the culprit. Again, my appologies for the inconvenience and you have to admit that while his method may have been less than subtle his message was certainly something we can all relate to ;-) Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0