December 2003 - cypherpunks-legacy

confidential report
by 34er5dd＠ameritech.net 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This is an ad. To be removed from *this* mailing list, please email to mhr(a)magaygy.maga.co.id Thank you and good luck in all you do. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Revealing the secrets which have been made others so fabulously wealthy. OFFSHORE SPECIAL REPORT #5599 * UNFAIR & DISCRIMINATORY Divorce Settlements are Obsolete in This Report! * RUTHLESS Creditors Will CRINGE If They Know You Have Read This Report! * Lawyers May GO BROKE By You Reading This Report! * HEARTLESS Tax Agencies See RED When They Read This Report! * SNEAKY Politicians Use The Information In This Report Everyday! * Your GREEDY Banker Does Not Want You To Read This Report! * This Report is BLACK BALLED By Most Government Agencies! * BACK STABBING Relatives HATE This Report! CHANCE FOR THE LITTLE GUY TO GET RICH! (And The Rich To Get Even Richer!) It's true! There's very little time left for the little guy to get rich in the U.S. and many other countries. Strict rules and regulations that have been adopted by the U.S. government making it hard to start and run a business - own a home - raise a family - and just get ahead. Banks and lending institutions will only loan money if you have it to begin with. You know the saying "It takes money to make money". Well the little guy can barely pay their everyday living expenses much less find money to make money! The people in the U.S. that have money are definitely MAKING MONEY! But you will be surprised how they are doing it this day and age. THE RICH ARE GOING OFFSHORE! The Rich get richer by applying the most powerful wealth-building secrets known today. Many of these millionaires are building their empires Offshore (outside their home countries) while doing business inside their countries - using legal tax shelters to protect what they have earned. New tax laws have forced many of the rich offshore where they can legally do business without the tax liabilities. The Key Is Borrowing Money Then Making It Work By Leveraging It! The Ability to acquire money by borrowing then leveraging what you have borrowed is the key to wealth building and we are going to teach you how you can do the same even if you have little or no money to start. THE WEALTH SECRET! America's super wealthy have all used the same wealth building strategy to get where they are today as they have for decades. Use someone else's money to become rich - it's very simple - you know it - I know it. But the problem is how do we convince someone to let YOU borrow the money so YOU can make it work as the rich do? THE OFFSHORE SPECIAL REPORT #5599! In this report you will have everything you need to get started - started on your way to joining the elite - the 2% to 5% of U.S. citizens - the RICH... Here's The Highlight Of What Report #5599 Offers... <> How the RICH & POLITICIANS get even richer using trusts and how you can do the same! <> Incorporate Offshore -- Completely private & away from your government's regulation! <> Your own secret offshore mailing address -- No one will know your real address! <> Offshore private checking accounts -- Deposit money & pay your bills from offshore - no paper trails! <> Offshore Tax Havens -- Legally delay or eliminate taxes -No one knows - not even your government! <> Offshore IBC's and Trusts -- Asset protection from creditors & your government! <> High yield offshore investments opportunities -- Find out how the rich make from 1% to 4% a week on their money - offshore & tax free - you can do the same! <> Money making opportunities -- Secrecy is a thriving industry! This report also tells you additional information about how the rich borrow money using Roll Over Programs and Tax FREE Self-Liquidating Loan concept and never repay one penny! These Self-Liquidating Loans are done offshore. This is just one more technique the rich use -- USING SOMEONE ELSE'S MONEY TO MAKE MONEY for themselves. You will have the opportunity to do the same! WHO NEEDS THIS REPORT? <> People who have a J.O.B. and have "more month than money" - (JOB = just over broke!) <> People who are self-employed - Paying that SELF EMPLOYMENT TAX and are prime candidates for LAW SUITS from every direction! <> People who are sick and tired of frivolous law suits - Did you know that in the U.S. there are 2.67 lawyers for every 1,000 people? These lawyers are HUNGRY and need to sue someone for any reason to survive! <> Professional people such as doctors, technicians, architects, stock brokers, accountants, and YES even lawyers! - You know those people in the HIGHER THAN AVERAGE tax brackets! <> People who are getting married or are married and plan on living happily ever after - Now back to reality - the U.S. has a divorce rate that exceeds 60% every year! <> Partners who want to make sure their partnership is a true 50-50 deal now and in future. <> People who live in a country that has strict rules and regulations limiting where and how they can run their business and manage their money. <> People who want to retire but can not afford to because of lack of income or the rules put upon them from their government - restricting them from receiving a decent income. <> People who are HIGH audit risks or have been audited by their government' dictatorial tax agency - You know GUILTY UNTIL PROVEN INNOCENT! <> People who are paying their government 40% to 60% in taxes and are sick and tired of doing so! <> People who are close to bankruptcy and need to find solution as soon as possible - 20% to 40% of the people in the United States are a paycheck away from bankruptcy - Yes those people! <> People who want to make sure their children receive 100% of their inheritance without the government stealing it away! <> People who want to keep their business and personal affairs PRIVATE - Hard to do this day and age with all the computers! <> People who have the dream of financial independence and want to make thousands a week running their own home based business! <> People who want to get a FRESH start in life. <> Anyone that has a desire to get ahead and the fortitude to make it big and join the 2% to 5% - the RICH! THE RICH NEED THIS REPORT ALSO! But what is really surprising is the people with money need this report! Even the chosen few that have a few dollars and are frustrated with the return on their investments. They need this report to find out how they can make 1% to 4% on their money every week - 40 weeks out of the year. It's being done right now - 40 times in a year by a chosen few! If you're not getting those types of return, even if you have only a few thousands to invest, you need this report to find out how! Plus find out how the rich have been amassing fortunes receiving those type of returns for decades and most of the time tax FREE!!! But Wait -- Soon You Will Be Among The Chosen Few! All it takes to receive the Offshore Special Report Number 5599 is $50.00 U.S. -- that's it! You probably spent that on a movie or a night on the town. $50 US to find out how you can beat the system, how you can join the rich - start making what only a few are making - now that is not really asking too much is it? FREE BONUS #1 Make 1000% Selling This Report! When you order the Offshore Special Report Number 5599 you will receive a Certificate Of Registration allowing you FULL REPRINT RIGHTS to duplicate the report and sell it to whoever and wherever you wish! You keep ALL OF THE MONEY. PAY US NOTHING! The Offshore Special Report #5599 will explain how you can do it. SPECIAL OFFER!! --------------------------------------------------------------------------- Those who order the report by January 16, 1998 are eligible to receive FREE BONUS #2, #3, #4 and #5 below. -------------------------------------------------------------------------- FREE BONUS #2 Self-Liquidating Loan Report YES... It's possible to borrow thousands and never repay one penny! This remarkable system is explained in the manual and there are no credit checks, cosigners or employment verifications. After reviewing this report you could put your own Self-Liquidating Loan together in matter of days -- right in your home town -- for any reason or idea! A "Self-Liquidating" loan is a financial arrangement in which the elements of "Arbitrage", "Compensating Balance" and "Advanced-Point Funding" are utilized. To explain each of these three topics would take pages, but to sum it up it means money that is "borrowed" NEVER has to be repaid! I MEAN NEVER! Since the lender (the Bank) deducts a "Compensating Balance" from the proceeds of your loan at the end of the term, the loan is "ROLLED OVER" or PAID OFF by the "Compensating Balance" funds withheld when the loan is made. This way, you never have to worry about making any loan payments. EVER! Now you can see why this is so remarkable! Truly unique! FREE BONUS #3 "How To Make Sure You Make Money From A Web Site" Things often overlook by most new comers. Avoid those mistake if you want to make money from your web site. FREE BONUS #4 The "Guerilla Guide to Bulk E-Mail": This exclusive report tells it like it really is! Bulk E-Mail is the most powerful method of marketing ever... but also the most controversial! What other method of marketing provides you with the means to reach millions of potential customers for pennies? There is more to it than most would have you believe... and there is more to it than sending thousands of people your sales letter and waitng for the money to roll in. You can make money with "Bulk E-Mail. FREE BONUS #5 The "Insiders" Guide To Search Engine Secrets: Forget "refreshing" pages, colored keywords and Search Engine spamming! Those outdated methods were used in the beginning... they don't work today. We know of one report currently being sold for $29.95 that states the above as a way to achieve a "Top 10 Listing" with the major Search Engines... Hogwash!! This "Insiders" guide will show you exactly how to achieve a top listing using this new technology. Once again all of this is yours for only $50 plus $5 S&H... So order now! Complete the following form and mail it with your payment today and take advantage of the FREE BONUSES! ________________CUT HERE _________________ _____Yes, I am ordering within the allotted time period. I understand I will receive ALL the FREE bonuses *) _____ I order after January 16, 1998. I understand I have full reprint rights and can sell the report #5599 KEEPING ALL THE MONEY. *) We will check the post mark out. Payment method: For those who live in the countries listed below**) please send the money using Postal Service. Other countries please send International Money Order (no personal checks please). *** Make Money Orders payable to Mahirudin Masri *** Mail to: Tromol Pos 105 Yogyakarta 55002 Indonesia First and last name: _____________________________________ Address: _____________________________________________ City: ____________________State:______ZIP/postal code: __________ Country: ___________________________ E-mail address: ______________________________________ Date: _______________________________ Code: tiga03 (do not remove this) ________________CUT HERE _________________ **) Austria, Brasil, Brunei D, Germany, Japan, Malaysia, Netherland, Philippine, Singapore, South Korea, Taiwan, Thailand, U.S.A.

1 0

Win Property! (just like Spitfire Grill!) Win a 16-ROOM MOTEL on the OREGON COAST! --or-- Win a Tavern/Town in Austin, OREGON (see below)
by westcomm＠teleport.com 17 Dec '03

17 Dec '03

The Contests of the Century Remember SpitFire Grill? Well, David Persha, owner of House on the Hill Motel in Oceanside, Oregon, is giving away his 16-room motel in a very unique contest! Each guest room has a wonderful view of the ocean, and 8 rooms feature full kitchens. There is also a large conference room, as well as other quality amenities! The motel sits on over 45,000 square feet of land, with the main building's having been constructed in 1990. The motel is a turnkey operation in beautiful shape, with an approximate Market Value of $1.5 Million according to an appraisal performed 4 years ago. Mr. Persha is 71 years old and is looking for new blood to take over his motel! The contest conforms fully to all national,international, and Oregon law, thereby making it open to anybody in the world over 18 years of age. The Motel WILL BE yours debt-free if you submit a valid entry and the winning 250 word essay, which will be judged for originality and wit, inspiration, creativity, expression of thought, human interest, and "the conveyance of a genuine desire to run a motel on the (Oregon) coast." For complete rules and and entry form, please send $10 to cover the cost of handling to Contest Guidelines, West Coast Communications, P.O. Box 7434 Salem, OR 97303. For quickest response please include email address. DEADLINE FOR COMPLETED ENTRIES IS FEBRUARY 20. 1998, so ACT NOW! Please make checks payable to West Coast Communications. West Coast Communications P.O. Box 7434 Salem, OR 97303 ------------------------------------------------------------------------ !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! SEE BELOW FOR SPECIAL RATE on BOTH contests! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ------------------------------------------------------------------------ "WIN-A-TOWN" IN AUSTIN, OREGON!! Another great contest! Like SpitFire Grill and Persha's Motel Contest (above), Leonard West is giving away his tavern in Austin, Oregon! Eastern Oregon . . . closely knit families, neighbors down the road. . . a great place to raise a family! And, "WIN-a-TOWN!" (The Austin House, 225 miles east of Portland, Oregon, consists of a tavern, restaurant, grocery store, post office, garage and gas pumps.) This is the REAL WEST. So ruggedly picturesque, that a Marlboro ad was shot nearby. The property WILL BE yours if you submit the winning 250 word essay, whichwill be judged for appreciation of the establishment and its charms, "plus a willingness to honor its. . .traditions." For complete rules and and entry form, please send $10 to cover the cost of postage to West Coast Communications, P.O. Box 7434 Salem, OR 97303. you may send questions and comments to mailto: westcomm(a)teleport.com for a very short time. We are changing servers on January 10, so address will change. For quickest response please include email address. ------------------------------------------------------------------------ !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! IF YOU WOULD LIKE INFORMATION ABOUT **both** CONTESTS, THE TOTAL CHARGE IS ONLY 15.00! PLEASE SEND CHECK FOR 15.00 for information about ENTRY, RULES, and DEADLINES FOR BOTH CONTESTS! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ------------------------------------------------------------------------ GGGG OOO OOO DDDD LL UU UU CCCC K K !! GG OO OO OO OO DD DD LL UU UU CC K K !! GG GGG OO OO OO OO DD DD LL UU UU CC K K !! GGGG OOO OOO DDDD LLLLL UUU CCCC K K !! West Coast Communications does not own property which is involved in these contests. West Coast Communications is not a judge in these contests, nor are we responsible in any way for the contents of, or the contest rules.

1 0

Re: More on the DES II contest.
by Thomas Womack 17 Dec '03

17 Dec '03

>My greatest fear with DES II is that if d.n finds the key >early in the search, they may decide to sit on it until >just before the 540 hour deadline. If they are the only >group with a credible chance of finding the key (as far as >I know, this is the case), then their payback is maximized >by by this tactic, since the time limits for the June >contest are determined by the speed with which the key is >found in January. But the question is one of how fast the key-search can be made, not of when the key would be found - and I though the d.n website displayed a figure for keys-per-second. That it takes the network not very long to find the DES key 0x0809182395f8ee isn't a very interesting piece of data; the keys-per-second figure is more useful. Tom

1 0

Re: Eternity Services
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 1/11/98 6:35 PM, David Miller (dm0(a)avana.net) passed this wisdom: >There is one thing that comes to mind that was just a topic covered >on this list and that is the use of cellular/wireless/RF/ham for >connections to said machines. > >Obviously, this would make seizure more difficult (and perhaps >increase the likelyhood of prior warning, if for example, cellular >service was suddenly cut off). > >I am currently studying some parallels between the established FCC >tolerance of ham radio self-regulation vis-a-vis anonymous >remailers. I haven't yetdrawn up my opinions, as they are still >being formed. I think that this might be one avenue to look down as >there is obviously a type of legal precident in what is >allowed/tolerated under obvious FCC jursidiction, whereas the >jurisdiction over IP is obviously still ambiguous. On the surface there would appear to be some parallels worth thinking upon with regard to ham/FCC. but the ham radio community for the most part qualifies under the category of 'sheeple'. Separate out the hotheads and idiots and you have a handful of forward thinkers who want to try to push the envelope held back by the vast majority of reactionaries. Even when the forward thinkers want to push the envelope within the rules, not even asking for relaxed or waived rules, they react with 'this is not the way we have always done it.' The FCC and the Washington establishment is well aware of this and that is why they more or less leave hams alone to regulate their own quiet little tea party. I cannot see the FCC looking kindly on the use by hams or establishment of a Citizen's Radio Data Service (as has been proposed several times through the years) to establish a secured delibrately obscured data network. As far as hams are concerned they are limited, right off the bat, by regulations prohibiting use of 'codes or encipherment whose purpose is to obscure the meaning of the message(data).' The ham self-regulation may be a precedent, but I don't think it would provide any leverage on this matter. Of course, there is always steganograpy ... one man's GIF is another mans data. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNLokrj7r4fUXwraZAQFbWAf9GtQyI1PSRO8H4Iyb5Wp4xrWzMKbZuIHx rdQtM3wEjL0l64u5gCFb082GDZWYJcj0wcehaLMn9BOp8QrooiGv9XstHqlHNYjL /0dLTS4CT/qKkUl/68yqjB5i1KbDip1cO74dCcBVt/8G1S3IcjAGYP1V3nJtxwJ6 GlLjel9qQW4zzvnBOtQiD7HzU6V2FK5lIMa87zfuNvcREdlfyHG1L169sSq5CZEU XT7HGxrXsmfnolgFPMqVrcIYlccc+m6vx6MmPY8XIM7vU1ybDk9wDC75Eg2aSZVw 5fQn6CogpnootVHczSog3xg3RDZkgmm0xhArbBdBNjopxScEUvIjFg== =m+3f -----END PGP SIGNATURE----- Brian B. Riley --> http://members.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn." -Alvin Toffler

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord ?"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"cracker"} = "<remailer(a)anon.efga.org> cpunk mix remix pgp hash ksub esub latent cut ek reord post"; $remailer{'redneck'} = '<config(a)anon.efga.org> newnym pgp'; $remailer{"bureau42"} = "<remailer(a)bureau42.ml.org> cpunk mix pgp ksub hash latent cut ek"; $remailer{"neva"} = "<remailer(a)neva.org> cpunk pgp pgponly hash cut ksub ?"; $remailer{"lcs"} = "<mix(a)anon.lcs.mit.edu> mix"; $remailer{"medusa"} = "<medusa(a)weasel.owl.de> mix middle" $remailer{"McCain"} = "<mccain(a)notatla.demon.co.uk> mix middle"; $remailer{"valdeez"} = "<valdeez(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"arrid"} = "<arrid(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"hera"} = "<goddesshera(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"htuttle"} = "<h_tuttle(a)rigel.cyberpass.net> cpunk pgp hash latent cut post ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix reno winsock) (weasel squirrel medusa) (cracker redneck) (nym lcs) (valdeez arrid hera) This remailer list is somewhat phooey. Go check out http://www.publius.net/rlist.html for a good one. Last update: Thu 23 Oct 97 15:48:06 PDT remailer email address history latency uptime ----------------------------------------------------------------------- hera goddesshera(a)juno.com ------------ 5:03:45 99.86% nym config(a)nym.alias.net +*#**#**### :34 95.82% redneck config(a)anon.efga.org #*##*+#**** 2:00 95.44% mix mixmaster(a)remail.obscura.com +++ ++++++* 19:18 95.27% squirrel mix(a)squirrel.owl.de -- ---+--- 2:34:19 95.16% cyber alias(a)alias.cyberpass.net *++***+ ++ 11:26 95.11% replay remailer(a)replay.com **** *** 10:06 94.93% arrid arrid(a)juno.com ----.------ 8:50:34 94.41% bureau42 remailer(a)bureau42.ml.org --------- 3:38:29 93.53% cracker remailer(a)anon.efga.org + +*+*+*+ 16:32 92.80% jam remailer(a)cypherpunks.ca + +*-++++ 24:14 92.79% winsock winsock(a)rigel.cyberpass.net -..-..---- 9:59:18 92.22% neva remailer(a)neva.org ------****+ 1:03:02 90.39% valdeez valdeez(a)juno.com 4:58:22 -36.97% reno middleman(a)cyberpass.net 1:01:28 -2.65% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Service denial attacks on Eternity
by Ross Anderson 17 Dec '03

17 Dec '03

Tim May wrote: > It is also likely in the extreme that a working Eternity service will > quickly be hit with attackers of various sorts who want to test the limits > of the service, or who want such services shut down. Exactly. When I first talked about Eternity, which was at either the 1994 or 1995 protocols workshop, I was walking back to my seat when Bob Morris (then at the NSA) said, from behind his hand in a stage whisper, `Kiddyporn!' Adam Back added: > the spooks / feds have a history of posting their own child porn if > none is available to seize Indeed, and a decade or so ago there was a scandal when it turned out that the spooks were using the Kincora Boys' Home in Belfast as a pedo brothel in order to entrap various local politicians. For them to say now that they need key escrow to suppress Kiddyporn is a bit rich! However the main threat is the court order - Anton Pillar or whatever - and the best weapon against court orders is anonymity. If they don't know your address they can't serve you the order or arrest you for contempt. Tom Womack: > I can imagine *use* of the service becoming a felony I mentioned in the paper that Mossad might deny Eternity service to the Muslim world by posting something rude about the Prophet Mohammed. One must of course create a lawful excuse for people to have Eternity software mounted on their system. Maybe in addition to the `public' Eternity service we should have many corporate or even private services, many of which have escrow capabilities and are thus clearly law-abiding and accountable :-) There are many other possibilities. One topic that oozes into my consciousness from time to time is that one might integrate covert communications and storage with an anti-spam mail program - maybe a natural way forward if Adam hides Eternity traffic in spam! Tim again: > Great idea, but where are the customers? Some 90% of security research effort is on confidentiality, 9% on authenticity and 1% on availability. Corporate infosec expenditures are exactly the other way round, and tools to enable disaster recovery databases to be spread holographically over a company's PCs could save a fortune compared with the cost of some current arrangements. If a few of these backup resources have hidden directories that mount the public Eternity service, then who can tell? At the Info Hiding Workshop at Portland in April, I will present a new idea which may facilitate such implementations of Eternity. This is the Steganographic File System - designed to provide you with any file whose name and password you know. If you don't know this combination, then you can't even tell that the file is there. We do not need to make any assumptions about tamper resistance; it can be done using suitable mathematics. (This is joint work with Roger Needham and Adi Shamir.) Ross PS: we need a better word for `eternityspace', and Bell Labs have already trademarked `Inferno'. So what - Nirvana? Valhalla?

1 0

Eureka! Tue Jan 13 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Tuesday's issue of Eureka! PINKBITS Voted the #1 Teen (18+) site on the web, this is one pay site you don't want to miss out on! Here's just one quote from a satisfied member: "This site delivers awesome value. I have been a member of 3 other sites, and this is the best by far. It has the best pics, more live video, younger girls and more hardcore cumshots than the other sites put tog- ether". And we have negotiated a special FREE trial member- ship for Eureka subscribers, so don't take our word, go see! PinkBits .. http://207.33.10.198/cgi-bin/gate1/pbm/pb_0024/0 GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ........... http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm ITALIANO ..... http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE . http://eureka.abc-web.com/eureka/portuguese.htm PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Young JAPANESE CUM QUEEN! http://www.cutelove.com/ Cum to see HOW JAPANESE WOMEN FUCK! Free Teen Fuck Pics!!! NUMBNUTS For some reason you are asked to enter a name when you go to this site. Enter one and then way down at the bottom of the page you will see a link to enter. Another window will open. Then click on the freepics link. Finally your in! Here you will find a ton of great images of all sorts. This is one place you have to see. One of the very few great free sites! Numbnuts .......................... http://www.numbnuts.com/ MASSIVE HARDCORE There are lots of pictures at this site. There are some hot images here! Close ups of screwing, fingering, sex toys and all sorts of exciting positions. You have got to see this! Massive Hardcore ...... http://massive.hardcoresites.com/pk/ MOTHER RUSSIA Now this is a great website. No messing around with a bunch of distracting graphics. Quick loading thumbnail images of a good looking woman. If you like small tits check it out! Mother Russia ........... http://anthrax.hyperlinx.net/~god/ LIZ'S HONEY'S AND HUNKS About mid way down the page click the honey link. There are some ladies in here that will really light your fire. This one brunette looks like a goddess! Super nice tits and bush! Liz's Honey's .................. http://www.xconnex.net/liz/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ College teens ...... http://207.240.169.122/teens/start.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat .................. http://137.39.63.229/chat/ General/Fun Chat ........ http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!....1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline.........1-800-644-8779 FREE: Live 1-on-1 (international call only)....011-678-77416 AMATEUR SITE OF THE DAY ADIA: This fine Nubian princess loves to show her body off. Her name means, a gift from God, and believe us she is quite a package wait till you get to see her unwraped. With her enchanting eyes, and perfect breasts you will quickly fall in love! ............................ http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY Amateur Women Stories: AmateurWomen.com brings you totally hot true sex stories and real pics of hot amatuer models. See and read what these hot honeys do in private! .......... ............................... http://www.amateurwomen.com/ DAILY CARTOON ........... http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! .... http://www.xxxadultstars.com/eureka/ TODAY'S FREE PIX Pic 1 ........................... http://137.39.63.229/?130 Pic 2 ........................... http://137.39.63.229/?131 Pic 3 ........................... http://137.39.63.229/?132 Pic 4 ........................... http://137.39.63.229/?133 Pic 5 ........................... http://137.39.63.229/?134 Pic 6 ........................... http://137.39.63.229/?135 Pic 7 ........................... http://137.39.63.229/?136 Pic 8 ........................... http://137.39.63.229/?137 Pic 9 ........................... http://137.39.63.229/?138 Pic 10 ........................... http://137.39.63.229/?139 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Clinton in Texas last Friday (1/9/98, 6 pm CST)
by Declan McCullagh 17 Dec '03

17 Dec '03

[...] And I want you to see your dreams and your life against a larger landscape of America's dream and America's life. We already have one foot in the 21st century, and it's a time that will be very, very different from the immediate past. How will it be different? Well, you know and you see and you feel it here in Texas. First of all, there will be the phenomenon of globalization - people and products and ideas and information will move rapidly across national borders - both the borders that touch us like Texas and Mexico, and the borders that are beyond the oceans that require us to fly or to communicate in cyberspace. Secondly, there is a phenomenal revolution in information and science and technology. Not only can children in Houston communicate with children in Australia on the Internet, or go into libraries in Europe to do research, but the very mysteries of the human gene are being unraveled now in ways that offer breathtaking possibilities, to preserve the quality and the length of human life, to fight back disease, and to bring people together at a higher level of humanity than we've ever known. That's all very encouraging. [...]

1 0

College freshmen political interest at a nadir [CNN] (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From owner-austin-cpunks(a)ssz.com Mon Jan 12 13:31:10 1998 From: Jim Choate <ravage(a)ssz.com> Message-Id: <199801121930.NAA22376(a)einstein.ssz.com> Subject: College freshmen political interest at a nadir [CNN] To: cypherunks(a)ssz.com Date: Mon, 12 Jan 1998 13:30:47 -0600 (CST) Cc: austin-cpunks(a)ssz.com (Austin Cypherpunks) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 2144 Sender: owner-austin-cpunks(a)ssz.com Precedence: bulk Reply-To: austin-cpunks(a)ssz.com Forwarded message: > POLITICAL INTEREST AMONG COLLEGE FRESHMEN AT NEW LOW > > Graphic January 12, 1998 > Web posted at: 1:37 p.m. EST (1837 GMT) > > WASHINGTON (AP) -- It is not easy peddling politics on a college > campus nowadays. Even talking about the issues is a turnoff, > according to a nationwide survey of freshmen. > > An annual study by the University of California, Los Angeles, for > the Washington-based American Council on Education found a record > low number of college freshmen showing much interest in politics. > > Just 27 percent of the nation's 1.6 million freshmen believed that > keeping up with political affairs is a very important life goal, > less than half the percentage recorded in 1966. Just 14 percent said > they frequently discussed politics, down from 30 percent in 1968. [text deleted] ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Economic spies increase US activity [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > ECONOMIC SPIES INCREASE ACTIVITY IN U.S. > > Economics Graphic January 12, 1998 > Web posted at: 11:38 a.m. EST (1638 GMT) > > LOS ANGELES (Reuters) -- Governments of at least 23 countries > including Germany, Russia, China, France and Israel have stepped up > their economic espionage against U.S.-based companies, the Los > Angeles Times, quoting the FBI, reported Monday. > > The newspaper said a new survey conducted by the American Society > for Industrial Security estimated that intellectual property losses > from foreign and domestic espionage may have exceeded $300 billion > in 1997 alone. > > More than 1,100 documented incidents of economic espionage and 550 > suspected incidents that could not be fully documented were reported > last year by major companies in a survey conducted by the society, > The Los Angeles Times said. It said it had obtained results of the > survey which was scheduled to be released Wednesday. > > A 1996 Economic Espionage Act makes theft of proprietary economic > information in the United States a felony punishable by a $10 > million fine and 15-year prison sentence. [text deleted] ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Attn: Jeremy Day - your nameserver isn't working...
by Jim Choate 17 Dec '03

17 Dec '03

I received traffic from a 'Jeremy Day' in the process of attempting a reply I find his nameserver is not responding. Forwarded message: > From jeremy(a)servers.toh Mon Jan 12 13:52:35 1998 > Date: Mon, 12 Jan 1998 19:20:46 +0000 ( ) > From: Jeremy Day <jeremy(a)servers.toh> > To: ravage(a)ssz.com > Subject: Re: A further thought on free markets & anarchy... > Message-ID: <Pine.LNX.3.95.980112190746.17818A-100000(a)fnord.servers.toh> > MIME-Version: 1.0 > Content-Type: TEXT/PLAIN; charset=US-ASCII As to the specific issue that Jeremy raised in his note. I have no interest in carrying on a private discussion on this topic. If you would like to re-submit your post to the CDR I will respond to the points raised publicly. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Zions Bancorp to offer Digital Certificates
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Mon, 12 Jan 1998 10:47:01 -0800 (PST) From: William Knowles <erehwon(a)dis.org> To: DCSB <dcsb(a)ai.mit.edu> cc: DC-Stuff <dc-stuff(a)dis.org> Subject: Zions Bancorp to offer Digital Certificates Organization: Home for retired social engineers & unrepented cryptophreaks MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: William Knowles <erehwon(a)dis.org> [Techweb 1.12.98] Zions Bancorp, a $9 billion regional bank in Salt Lake City, this week will become the first financial institution to offer a service that lets organizations use digital certificates to secure internal and business-to-business communications. Digital certificates, which electronically confirm a user's identity, are generated and managed by certificate authorities. Companies can set up authorities themselves or use authorities created by third parties. Although certificate-authority services are available from technology vendors [such as GTE, IBM, and VeriSign, Zions said customers will feel more comfortable letting a bank manage their digital certificates. "Banks in the paper world already do this. They write letters of credit," said Michelle Jolicoeur, director of government implementations at Digital Signature Trust, the Zions unit that will offer the service. "Our business is trust." Digital Signature Trust has conducted pilots of its service with Utah's Department of Commerce, the Church of Jesus Christ of Latter Day Saints, and internal departments for about a year. The service uses digital certificate software from several vendors, including Certco, Entrust, GTE, VeriSign, and Xcert. Separately, Certco and Entrust will unveil new features to their certificate-authority offerings at the RSA Data Security conference in San Francisco this week. Oppenheimer Funds, which plans to implement digital certificates by midyear to bolster IT security, is investigating whether to operate its own certificate authority or to outsource. "A bank is generally going to be a more stable company," said Jim Patterson, an Oppenheimer technology vice president in Englewood, Colo. "But on the other hand, do I want a bank that I currently don't have a relationship with to know so much about me?" Still, Patterson said digital certificates will be important in business-to-business commerce and communications. "With digital certificates, I can start getting or sending requests to perform business functions over any medium I want, including the public Internet," he said. Pricing for the Digital Signature Trust service will be subscription-based and will depend on the customer's applications and number of certificates. == The information standard is more draconian than the gold standard, because the government has lost control of the marketplace. -- Walter Wriston == http://www.dis.org/erehwon/ For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

autonomous agents
by Adam Back 17 Dec '03

17 Dec '03

A canonical way to do implement things like remailers, eternity servers etc. is to build a distributed computation system to allow autonomous agents to be distributed across the internet. Create a market for CPU resources, bandwidth and disk-space so that the agent can pay it's way. Charge per CPU/hour, Mbit comms at given data rates and Mbyte/year storage, base it on Java as a portable network based language with code distribution support. Then let people fire off what ever they like, so long as they are paying. In this environment an eternity variant, or remailers, or anything else becomes a collection of autonomous agents which must fund their own distribution. The autonomous agents could send back profits to their creators, or use the profits to self propagate. Someone who thought up a good application, and got the economics right for their bot's buy and sell algorithms might become rich, even. I had considered that a generic perl execution system charging for resources would be useful for remailers a few years back. Java seems pretty good for this purpose also, being another portable network aware language. >From what Ryan has said his design uses markets for resources also. The question is though would you let a bot of this sort loose on your system? For agents to be able to achieve anything useful, the Java sandbox model has to be relaxed to allow the agent to make network connections to other than the machine the code was served from. Java has support for this in that signed applications are allowed to make external network connections. The problem is the flexibility would allow an autonomous agent to pay it's way in say breaking into a series of machines, and sending back obtained documents via remailer to the operator. A well funded attacker could cause lots of problems for operators. However the system as a whole is nice for our `creating lawful excuses' drive, because there are many applications which could make good use of the distributed computation system: filmatic quality image rendering computations, scientific computations, code breaking efforts, distributed web server applications. The liability questions are interesting also. If the participant in the CPU resource market is not expected to be able to vet all source code he runs, this gives the would be eternity operator a chance to distribute his risk. If the system becomes widely used, this helps protect it from attack. Adam

2 1

autonomous agents (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 12 Jan 1998 19:25:53 GMT > From: Adam Back <aba(a)dcs.ex.ac.uk> > Subject: autonomous agents > A canonical way to do implement things like remailers, eternity > servers etc. is to build a distributed computation system to allow > autonomous agents to be distributed across the internet. Create a > market for CPU resources, bandwidth and disk-space so that the agent > can pay it's way. Charge per CPU/hour, Mbit comms at given data rates > and Mbyte/year storage, base it on Java as a portable network based > language with code distribution support. Then let people fire off > what ever they like, so long as they are paying. Has anyone done any work that you are aware of under the Plan 9 os? With it's fundamental seperation of i/o, process, and file servers along with it's inherent bidding/scheduling mechanism it seems to me that a lot of this work has already been done. In addition there are programs that allow Linux boxes to participate as Plan 9 compliant file servers. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

3 2

Talk of Banning Research into Human Cloning
by Tim May 17 Dec '03

17 Dec '03

This has some tangential list relevance in that it involves the Brave New World, so to speak, of the government deciding what research is legal and what is not. Clinton is asking Congress to ban research into human cloning. Importantly, this is not a proposal to cut federal funding of such efforts, as this would be unexceptionable (except to certain obscurantists). That is, the NSF or HHS or NIH or whatever is free to not fund all sorts of research projects. (Obviously many of us would cut nearly all such funding.) No, Clinton is asking for Congress to *ban* such research, regardless of where the funding came from. "Clone a cell, go to jail." "Clinton's proposal would make illegal any attempt to create a human being using the so-called somatic cell nuclear transfer technology that produced Dolly the sheep, in which an adult cell was fused with an egg. " Though I'm not a constitutional expert, this would seem to me to be a violation of various rights. A First Amendment right to speak and publish as one wishes for one, a Fourth Amendment right against search and seizure and to be secure in one's papers, and probably more general rights that have long-held that government agents cannot tell people what books they may read, what thinking they may do, and whom they may asssociate with (if the Civil Rights Act is viewed as the unconstitutional anomaly it is). Only a very few types of research are banned. And these are all ostensibly "national security" areas. Namely, chemical and biological warfare research, heavily regulated (private companies can do such research, but only with government approval, supervision, and generally _for_ the government). And nuclear weapons research (probably as part of the Atomic Energy Act). (If anyone can think of other "bans on research," besides weapons areas, let me know.) But a ban on cloning research would not be a matter of "national security," only of ethics and religious beliefs. Whatever the arguments for banning unapproved research into CBW and nuclear weapons, banning cloning research is an entirely different set of issues. Will Congress pass such a ban? Unknown. (They didn't pass the last such ban Clinton asked for.) Will the Supreme Court hear the case if such a ban is passed and then challenged? Unknown. Any implications for crypto? If Congress can successfully make certain types of science illegal, felonizing the search for truth, why not a ban on certain types of mathematics research? --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 3

Talk of Banning Research into Human Cloning (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 12 Jan 1998 12:32:18 -0800 > From: Tim May <tcmay(a)got.net> > Subject: Talk of Banning Research into Human Cloning > (If anyone can think of other "bans on research," besides weapons areas, > let me know.) Class 1 drugs. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Sun to fight MS w/ new workstations [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > New Unix workstations, lower pricing seen as bulwark against Microsoft > NT > > January 12, 1998: 1:11 p.m. ET > > Java goes to set-top boxes - Jan. 9, 1998 > > Sun cross-pollinates Intel - Dec. 16, 1998 > > More related sites... PALO ALTO, Calif.(Reuters) - Sun Microsystems > Inc. will launch a new line of workstations Tuesday, aiming to > challenge its rivals and blunt the spread into markets for > high-powered desktop computers used by engineers of PCs using > Microsoft Corp.'s Windows NT. > [INLINE] The new workstations are the result of a two-year effort by > Sun to design products that greatly reduce the cost of the computers > used by power-hungry engineers, while still providing the blistering > performance they demand. > [INLINE] "This is really big. We think we can create an alternative to > [PCs running] NT," Ed Zander, president of Sun Microsystems Computer > Co., the company's largest division, said in an interview with Reuters > ahead of the announcement. [text deleted] ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: Congratulations!
by nobody＠nsm.htp.org 17 Dec '03

17 Dec '03

>To: Anonymous <anon(a)anon.efga.org> >cc: cypherpunks(a)toad.com, abuse(a)MCI.Com, >hostmaster(a)cyber-dyne.com Ha, ha, ha! who CC'd the "Congratulations" thread to those addresses?? <LOL> (would they know how to smurf d00d?) This list gets fucking better!

2 1

USPS loosing business to email [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > U.S. POSTAL SERVICE LOSING BUSINESS TO COMPUTERS > > e-mail vs. snail mail January 12, 1998 > Web posted at: 3:25 p.m. EST (2025 GMT) > > NEW YORK (CNN) -- The U.S. Postal Service is facing stiff > competition from computers, according to an article in the January > 19 issue of Time Magazine. > > Electronic mail could replace 25 percent of conventional mail, or > "snail mail," by the year 2000, the article said. > > The Postal Service lags behind Federal Express and United Parcel > Service in shipping packages. The latter already moves 80 percent of > the country's packages, according to the article. [text deleted] ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

DCSB: Michael Baum; PKI and the Commercial CA
by Robert Hettinga 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston Presents Michael S. Baum VeriSign, Inc. PKI Requirements from a Commercial CA's Perspective Tuesday, February 3, 1997 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Requirements for the provision of commercial certification products and services are under consideration by many companies. Similarly, efforts to regulate certification authorities (CAs) and public key infrastructure (PKI) are proliferating by many domestic and foreign governments. Underlying many of these efforts is the intention to assess and assure quality and trustworthiness, and yet the nature, scope and regime to accomplish these goals remain elusive or at least have been balkanized. This presentation will consider CA and PKI requirements from the experiences and perspective of a commercial CA. It will survey current approaches to ascertaining quality and performance as well as their limitations. It will then propose a path forward. Many of these issues are present real challenges to both the CAs and the user community. A lively dialog is welcomed. Michael S. Baum is Vice President of Practices and External Affairs, VeriSign, Inc. His responsibilities include developing practices and controls under which VeriSign conducts its public Digital ID and private label certificate operations. Mr. Baum is the Chair of the Information Security Committee, and Council Member of the Section of Science and Technology, of the American Bar Association. He is Chairman of the International Chamber of Commerce (ICC) ETERMS Working Party and a Vice Chairman of the ICC's Electronic Commerce Project, a delegate to the United Nations Commission on International Trade Law on behalf of the ICC. He is a member of various digital signature legislative advisory committees. Mr. Baum is co-author (with Warwick Ford) of Secure Electronic Commerce (Prentice Hall, 1997), author of Federal Certification Authority Liability and Policy - Law and Policy of Certificate-Based Public Key and Digital Signatures (NIST, 1994), co-author of Electronic Contracting, Publishing and EDI Law (Wiley Law Publications, 1991), and contributing author to EDI and the Law (Blenheim Online, 1989), and the author of diverse information security publications including the first American articles on EDI law. He was honored as an EDI Pioneer in 1993 (EDI Forum) and was the Recipient of the National Notary Association's 1995 Achievement Award. He is a member of the Massachusetts Bar. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, February 3, 1997, from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, on One Federal Street. The price for lunch is $32.50. This price includes lunch, room rental, various A/V hardware, and the speaker's lunch. ;-). The Harvard Club *does* have dress code: jackets and ties for men (and no sneakers or jeans), and "appropriate business attire" (whatever that means), for women. Fair warning: since we purchase these luncheons in advance, we will be unable to refund the price of your lunch if the Club finds you in violation of the dress code. We will attempt to record this meeting for sale on CD/R, and to put it on the web in RealAudio format, at some future date. We need to receive a company check, or money order, (or, if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, January 31st, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston", in the amount of $32.50. Please include your e-mail address, so that we can send you a confirmation If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Upcoming speakers for DCSB are: March Joseph Reagle "Social Protocols": Meta-data and Negotiation in Digital Commerce April Adam Shostack Digital Commerce Security: Beyond Firewalls May Jeremey Barrett Digital Bearer Certificate Protocols We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, <mailto: rah(a)shipwright.com>. For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to <mailto: majordomo(a)ai.mit.edu> . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to <mailto: majordomo(a)ai.mit.edu> . We look forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.5.3 iQEVAwUBNLutasUCGwxmWcHhAQGiBwf6A7rhL5aztElh5nDDLgGU7vjBdXuryH+x OKnzXLE5364SLIr5KoRIfjRU0WB07jtB8bKeaE9DeiZbSC5i6QODmzK3cBfljVUx Ju5pBKeTwcvVtDXzcBjB9swL2TvNtv77x7dQLitZmziMjgX2tUR1yPhdbRnsJ0kl 8kBuWl681sh3oPEq4fGXTVDcP/vx31riZkZHhVcFHG/vyfR4eUznKe0lq1L1babb mwro6uPZ0W5Sy6F9rllqdPVbXGTh6LxlGwWbcBf9oO8+D+HAZAtjNm80WhtpN8aF Kbd115jJgkxdUlBeU44gib1r2ViV0rvNBI6sW/jwyUzYGQYhnyDJpg== =2cOQ -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Feds to Idaho: Kiss Our Butts
by Eric Cordian 17 Dec '03

17 Dec '03

The manslaughter case against Ruby Ridge shooter Lon Horiuchi was effectively neutered today when a federal judge acquiesed to demands by Justice Department lawyers and moved the case out of Idaho's jurisdiction and into federal court. This means that Horiuchi will be tried in federal court in front of a federal jury on state manslaughter charges, and not in front of a jury from Idaho's Boundary County, where the shooting took place. This ruling, by U.S. District Judge Edward Lodge, came just six days after Boundary County Magistrate Quentin Harden ordered Horiuchi to stand trial. State manslaughter charges had been filed against Horiuchi for the death of Vicki Weaver in August. The Justice Department, which has denied that Horiuchi did anything wrong, provided the lawyers who argued that any case in which federal agents are acting in their official capacity may be transferred and tried in federal court, in front of a federal jury. The trial is scheduled to begin March 10. Horiochi has continued to work for the FBI since the charges were filed. -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

3 2

Trial jurisdiction options
by Jim Choate 17 Dec '03

17 Dec '03

ARTICLE III. Section 2. The judicial Power shall extend to all Cases, in Law and Equity, arising under this Constitution, the Laws of the United States, and Treaties made, or which shall be made, under their Authority; -- to all Cases affecting Ambassadors, other public Ministers and Consuls; -- to all Cases of admiralty and maritime Jurisdiction; -- to Controversies between two or more States; -- between a State and Citizens of another State; -- between Citizens of different States; -- between Citizens of the same State claiming Lands under Grants of different States; -- and between a State, or the Citizens thereof, and foreign States, Citizens or Subjects. In all Cases, affecting Ambassadors, other public Ministers and Consuls, and those in which a State shall be Party, the supreme Court shall have original Jurisdiction. In all other Cases before mentioned, the supreme Court shall have appellate Jurisdiction, both as to Law and Fact, with such Exceptions, and under such Regulations as the Congress shall make. The Trial of all Crimes, except in Cases of Impeachment, shall be by Jury; and such Trial shall be held in the State where the said Crimes shall have been committed; but when not committed within any State, the Trial shall be at such Place or Places as the Congress may by Law have directed. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: rant on the morality of confidentiality
by Blanc 17 Dec '03

17 Dec '03

Mad Vlad wants to know: >something most anarchists here will deny is the existence of something >that could be called *immoral science*. is there such a thing? ............................................................ No. There are, however, immoral scientists. One way to skew the interpretations of what you write, besides bringing up the subject of morality, is to describe things in ways which do not correspond to their actual manner of existence: "science" does not exist without those individuals who have set themselves to pursue it. They should bear the blame if they practice it immorally. You again have brought up several issues which can be examined separately and do not necessarily coexist: . being a scientist . pretending to be scientific . choosing to pursue science . being smart enough to pursue scientific research . being successful in the scientific pursuit of truths . giving a damn about the consequences of the effects of research as it affects humanity or other living things (as when it is imposed upon them) . responsibility in science . responsibility in science as practiced by mendicants of the State . the regulation of responsibility per se . the regulation of the methods of science . the support of irresponsible scientific methods, by slaves of the State . anarchist cypherpunkery I become exceedingly uncomfortable at the realization that I have to buy an astronomy magazine from the store, paying yet again for info, in order to find out some of what they're doing at NASA. To think that a responsible citizen like myself must go out searching for the info themselves, using whatever resources they can find or pay for, in order to become informed! There are all sorts of things that government employees do not "share" with those who pay the bills. There is a book in Objectivist literature which presents the idea of "context dropping", which is, that in order for some people to function as if things were normal and that what they're doing is consistent with moral principles, they must drop a part of their information out of sight, out of thought, so that their actions appear logically related and make sense - they eliminate elements from the given context, crucial essentials which make the difference in its character. People like these might practice secrecy in keeping information from others, but equally significant, they also hide things from themselves. So that's one thing which would explain some scientist's lack of moral principles in the pursuit of science. Then it must be explained why so many people aren't complaining about it. Are they insensitive to their mistreatment, sitting ducks for opportunists? Or maybe these taxpayers are equally immoral, thinking only about promised benefits, forgetting about the disadvantage of losing control over the quality of their life? It's possible for some people to override the boundaries of decency, even if they're otherwise smart enough to pursue science. But what would you expect cryptographers to do about it? .. Blanc

4 7

Federal govt. & Science - Const. limits
by Jim Choate 17 Dec '03

17 Dec '03

Congress has *no* authority to ban *any* scientific research. In fact they are specificaly enjoined to *promote* it. Section 8. The Congress shall have Power... [text deleted] To promote the Progress of Science and useful Arts, by securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries; [remainder deleted] ARTICLE IX. The enumeration of the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people. ARTICLE X. The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: local vs remote eternity servers (Re: (eternity) Traffic Analysis)
by Adam Back 17 Dec '03

17 Dec '03

Thomas Womack <thomas.womack(a)merton.oxford.ac.uk> writes: > >Thomas Womack <thomas.womack(a)merton.oxford.ac.uk> writes: > >> I can imagine *use* of > >> the service becoming a felony; you're therefore committing a felony > >> merely by connecting to http://www.eternity.to, and acquiring > >> evidence for that is a trivial matter of logging connections from a > >> given user. > > > >One solution is to run eternity on a web server with SSL turned on, > >and which serves lots of other data too. > > It's not completely clear that such an object would exist; in legal terms, > it would seem to be the same as a large and well-respected department store > which happens to possess and tolerate a fence for stolen property. That is, > it's an object which handles stolen property and can be shouted at loudly, > legally, and with very large sticks. Yes, but merely being seen going into this department store is you hope not grounds for prosecution. ie The flow of the discussion being that you said "you're therefore committing a felony by connecting to www.eternity.to" .. my reply being that if we can arrange that there are any number of reasons for connecting to www.eternity.to, any of which are protected by an SSL connection, that this lessens the risks of being seen connecting to said server. We can easily arrange this by offering interesting free services. Certainly turning on SSL does not protect the server operator. There server operator in your analogy was the department store owner. But we were discussing the client (the shopper)'s risks. > >The general problem with the remote server approach is that you have > >to trust the server. You could alternatively use a local eternity > >server, which is easy to do if you have a local unix machine. > > The operating system is immaterial here! Ah, not if you are talking about my eternity prototype, because it only works on the unix platform. Same for Ryan at present I think. The overloading of "eternity service" is not helping here. My point was that talking about my eternity prototype using USENET as a distribution medium, where the `eternity server' is just a convenient way to present an apparently persistent view of transient USENET articles, using a local eternity server reduces the risk of traffic analysis attack. Now all you are doing is reading news. If you already have a full USENET feed, you have no new externally observable traffic. This process would be better termed a `local eternity proxy', in that it would effectively be acting as a local web proxy process, where the eternity virtual web pages were being fetched from a local news spool by the local web proxy. > >Ideally you would like a local news feed also, so that your local > >eternity servers NNTP traffic or file system accesses to read news are > >not available to the attacker. > > That nearly makes sense - but 'running a news feed including the eternal.* > groups' can be phrased such that any sane jury takes it as 'using/running an > eternity server'. Cross-post, and / or post to random newsgroups, threshold secret split your posts so that only N of M are required to reconstruct. If you get shouted at for SPAM, steganographically encode the eternity traffic. Pornographic images in alt.binaries.* would be suitable because there are lots of those already. Because this is a publically readable message an attacker (such as Ryan's system admin he mentioned at MIT) might recognize the message based on successful stego decoding, and purge it from the news feed. We can counter this move by encrypting the original posting, and posting the decryption key a day or two later to ensure we get the full feed before anti-eternity crusaders get to work purging the eternity traffic masquerading as images. USENET carries all sorts of materials which could potentially get you in trouble. I don't know what your news feed is like, but the one at Exeter last time I looked had a healthy selection of dodgy gifs in alt.binaries.* > >Depending on your available resources, you can either operate from a > >local news feed (people are less likely to be prosecuted for the > >contents of a normal full newsfeed IMO), or have SSL access to a > >remote ISPs NNTP server. > > I suspect that, had anyone the least intention of arresting certain of my > acquaintances on a trumped-up charge, they could persuade a jury that a > 'normal' full newsfeed is sanitised, and that a newsfeed containing *warez* > or *erotica* is clearly an Evil Perversion of the Natural Law. We can't do much about the idiotic juries, and corrupt judicial systems ... `they'd indict a ham sandwich if I told them to' -- some US judge. You're probably right too. But I think we need to keep a sense of proportion about opening ourselves to having technical actions misconstrued to a clueless jury: there are easier ways to frame someone once they have decided they don't like you. To truly retain plausible deniability you need to maintain excellent plausible deniability, you have to be squeaky clean: you need to appear to be a model citizen, to not post politically incorrect opinions to non-government approved fora, etc. You must be below the radar belt, you must be essentially invisible to the government, the spooks dossier on you must read Mr Average and be entirely wholesome. Then you must have one or more alter-egos, for your real interests. > >> How can you defend against the felonisation of 'operating an Eternity > >> Server'? > > > >Operate closed eternity servers for small group only, or a local > >server for yourself or local users only. > > But wasn't the point of the eternity service that it was massively > distributed; if you're running a server for a small group consisting of > forty-nine hackers and the deputy director of the NSA going incognito, > you'll suddenly discover that all your servers have been seized, and that > men with intimidating glasses want to ask you a number of searching > questions. The surest way is to run the eternity server for yourself only. The distribution medium is massively distributed, as the distribution medium is USENET. USENET is a broadcast medium. Possibly the most secure way to create one way anonymous communications is to broadcast the messages. Tim May's BlackNet uses this approach. Eternity is doing the same thing. Adam

1 0