December 2003 - cypherpunks-legacy

PGP for palmtops?
by Nate Sammons 17 Dec '03

17 Dec '03

Does PGP exist for palmtops like the HP 320LX? I would assume (possibly foolishly) that the port would be easy, as they run Windows CE. -nate

2 1

Re: Mixmaster Security Issues
by loki＠obscura.com 17 Dec '03

17 Dec '03

At 8:45 PM 8/30/95, Russell Nelson wrote: > Date: Wed, 30 Aug 1995 18:17:02 -0700 > >Can't answer all of your questions, but I'll answer the ones I can, >which will save time for someone else to answer the rest of them. > > Apart from thwarting traffic analysis attacks, how does the security > of a Mixmaster Type II remailer packet compare to that of a > PGP-chained Type I message? > >Well, on the one hand, PGP uses IDEA, which is arguably better than >triple-DES, but PGP also only uses the key length(s) of choice, which >is to say that if you use the minimum length, you have very little >security. Also, Mixmaster packets remain the same length from hop to >hop, so they are harder to track. I am not sure this is the consensus opinion. Three key triple DES uses 168 bits of key, whereas IDEA only (only?!?) uses 128. DES is also much better studied and understood. IDEA is still a young algorithm (though close to the heart of every cypherpunk). The rest of what you said looks good. Too bad I did not see it before I typed my own answer ;) ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

"Citizen-Unit Identification" a Red Herring
by tcmay＠got.net 17 Dec '03

17 Dec '03

All this paranoid talk about the dangers of thumbprints on ID cards, about driver's licenses, and about magstripes got me to thinking. So, I accessed my NLETS (National Law Enforcement Telecommunications System) and downloaded my own record: Citizen-Unit ASCII Name: "Timothy Christopher May" NLETS Actual Name: G0Yj34C1qm92H7u Known Aliases: "Klaus! von Future Prime," "Lance," "Nick Szabo" Residence: 427 Allan Lane, Corralitos, CA 95075 Driver's License: N4197484 SSN: 227-80-5823 Passport Number: H673qop90 Race: Aryan Origin: Europe Hair: Brown Eyes: Blue Weight: 210 pounds (10/94, recorded at SFO) Known associations: Anarchist Alliance, Young Students for Discordianism, Vernor Vinge Fan Club, Information Liberation Front Magazines Subscribed To: Newsweek, Playboy, The Economist, MacWeek, Anarchy Today, Liberty, FertilizerWorld, Reason, MacUser, NewtonGazette, Bay Aryan Events, Information Week Consumer Preferences: beer (+++), wine (+), cigarettes (-) Electricity Patterns: consistent with either marijuana cultivation or heavy Net usage, or both Threat level: Class 3 Security Threat I don't see what the big deal is. The NLETS record implies I'm some kind of security threat, but also correctly notes that I'm an Aryan, so I guess I'm safe. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1

Re: C2.ORG REMAILER
by Tim Scanlon 17 Dec '03

17 Dec '03

Sorry for my last empty message, it's late & i confuse the "deliver" icon with the "mail format" icon (I was attempting to change the type from NeXTmail to plain text) I don't see why an anonymous remailer can't be set up in some country with an inet connection, but with little respect for idiocy originating from other countries & in particular the US. Allot of that issue is treaty dependent and that's probably what people should look at. I like what people are doing well enough, don't get me wrong. But the vulnerability exists via co-operative law enforcment arrangments & legal venue operations. That's the stuff of treaty's. I think probably an appropriate place could be found & arranged with some effort at this point. Hell there's GOT to be some countries out there that would have little respect for the antics of the Church 'o Bucks who'd be intrested in it. Stick the database on an encrypted partition, and arrange a a two party setup on the keys & administration and it'd make them a damn bit harder to retrieve anyhow... "I'd comply, but I don't have the keys, and the keyholder is refusing contact. And NO I don't know his 'True Name' and can't find him." That'd make things a tad rough, and isn't illigal anyplace that I'm aware of. Call it "Apllied Stenography" (Sorry about the pun, but I couldn't resist it :> Tim Scanlon ________________________________________________________________ tfs(a)vampire.science.gmu.edu (NeXTmail, MIME) Tim Scanlon George Mason University (PGP key avail.) Public Affairs I speak for myself, but often claim demonic possession

1 0

Re: Remailer hating Nazis
by Ratprick Oink 17 Dec '03

17 Dec '03

Patrick Oonk stuttered and drooled: > An Anonymous Coward wrote: > > The remailer hating Nazi called Patrick Oonk wrote: > > >At least I don't hide behind a remailer. > > There's no cowardice to it, dumbass. Our founding fathers and others wrote things anonymously. I guess they're cowards? > I wrote two remailer programs, I ran several remailers, and I am working > on bugfixes for replay. Did you shut down those "several remailers" out of...cowardice? > Flaming me through a remailer is the equivalent of shouting > 'hey asshole!' and then running away. Sorry to hear you have such a low opinion of those who use anonymous remailers. Is your work on remailers an 'ego' thing, or are you a cop? > I also cannot reply to you privately, so all other members of > this mailinglist have to suffer our private flamewar. You want to "hide behind" private email? Ashamed of your beliefs and don't want them made public? When did this become a "private" flamewar, shit-for-brains? Are you under the mistaken impression that your public post to this list has drawn negative replies from only a single anonymous source? My heart, also, bleeds purple piss for the poor, fragile young cypherpunks who will suffer needlessly, perhaps being traumatized for life, by exposure to negative energy and obscene words like "dumbass." However, some of the older, more experienced members of the cypherpunks list have long ago learned to make the best of a bad situation, and amuse themselves by using their dick to press the <Delete> key. So spam me, big boy. Spam me. AnonymousCowardMonger

4 3

O.J. ObCrypto: Fuhrman's Folly Fans Fakery Fears...
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

Regardless of whether Ito allows the tapes into evidence, the public has heard a LEO matter-of-factly discussing the fabrication of evidence against US citizens. We should take advantage of this, by connecting the Fuhrman/Good Ole Boys from BFART bit, and GACK. If my private key must be escrowed with Lawn Forcement Agencies, the very real possibility exists of a Fuhrman using it to forge evidence against me. In =any= Key Escrow arrangement (including the non- government variety preferred by 4 out of 5 Cypherpunks in a recent survey) there must be a division between encryption keys and signature keys. I recommend that anyone who will be using escrowed keys generate two pairs: First, the signature key, including in the userid some kind of [sig use] identifier (we should settle on a standard abbreviation for this) follower by the encryption key. This way, when a person gets your pubkeys, they get the encryption key =last=, which gets it searched first whenever they PGP -e... something. Whatever arrangements are made for escrowing my encryption key, =nobody= gets my signature key. If I am fired, quit, become brain damaged or dead, my key can never be used by anyone to implicate me in any criminal activity. Please don't mention to anyone the fact that my signature key can be used to send me something that even the escrow agents can't read.... * --- * Monster(a)FAmend.Com *

1 0

Poisson numbers for random keyspace assignment
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

[Great statistical summary deleted] TC> * For opportunistic attacks on keys in challenges, the odds are 95% that a TC> key will be found with only twice the total effort (or time) using a TC> totally random method of picking up keyspace to search. The odds can be improved somewhat by scaling the granularity of the sweep to the size of the sweep. (Align larger chunks on large-chunk boundaries, eliminating the chance of overlap with other large chunks.) TC> * This is probably good enough. (And if one only wants to be 90% sure of TC> finding the key, even less effort is needed.) The best advantage of the random method is that it allows people to participate completely anonymously, as there is nothing to report save the Eureka!, and that can be done through a remailer anyway. When the challenge is solved, everyone can stop cracking. It is one thing to work on an academic exercise, but the =real= test is how well the resources could actually be marshalled for a =real= attack. The requirement of leaving an audit trail to participate reduces the supply of volunteers. This approach can not be challenged as unrealistic. The whole thing can be managed via Imail, which I must point out to you Totally Connected People, is the least-common denominator for participation here. You have =lots= of people out here who would like to join the Cypherpunks Brute Squad (We gotta get T-shirts for this one!) but don't have WWW access. * John was a complete D**k, until Lorena got through with him. --- * Monster(a)FAmend.Com *

2 1

Re: A glance at the future of missing child identification
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:52 PM 8/20/95, Hadmut Danisch wrote: >These transponders are already used for many year. They inject >them in pigs and cows to identify them. And some car manufacturers >put the into the ignition keys as theft protections. The subcutaneous animal things are only detectable at very short ranges. Typically, a vet (animal doctor) uses a handheld wand to pick up the signal. Useful for tracking pets, farm animals, etc. There has so far been no known uses of this on humans, at least as a matter of routine. Possibly some developers have tried injecting themselves, for the usual reasons. The car system used here in the U.S. is called "Lo-Jack," as in the opposite of "hijack." I don't see how putting the transponders in ignition keys would do much to stop theft, but maybe I'm unaware of European developments. (There are keys with chips in them, acting as electronic keys, or to make the keys harder to duplicate, but not to track the cars.) >Technology is not new. Perhaps it is already used for criminals? >Somewhere I heard that in America criminals are sentenced to stay >at home because the jails are overfilled. A sender is attached to >their leg and the police is informed if he leaves his home. Yes, these exist. Not using the same technology as the transponders used in pets and livestock, though. >Perhaps a drug dealer may be more usefull if he moves free and >has a transponder inside which he doesn't know about, that having >him in jail. Not technologically feasible at this time, but maybe in several years. Even so, it wouldn't be hard for his friends to scan him for bugs. Sure, some will argue that pseudorandom, very intermittent, frequency-agile signals could be emitted...I say it's a hard problem to escape detection by antennas a few centimeters away when the signal has to be detectable by surveillance antennas at least kilometers away, and more likely tens or hundreds of kilometers away. The infrastructure of antennas is lacking. >Here in Germany most department stores have big antennas at the >doors which are normally used to detect thefts. Perhaps these antennas >also recognize certain people. You can be sure even criminals go to >department stores, undergrounds, or bus stations. Some hidden antennas >and it's easy to be on their track. Implausible. The theft detectors are not picking up specific transponders, just the "on" or "off" state of the things attached to clothing, books, CDs, etc. (I say "things" because some of them are strips inserted in books, some are tag-like things clamped to clothing, etc.) Again, the infrastructure is lacking. The simple detectors in stores would have to be upgraded to track more sophisticated transponders. The stores would have to cooperate, etc. Implausible. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

4 3

ASSETS FORFEITURE BILL ON THE MOVE
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: (Unverified) Mime-Version: 1.0 Date: Fri, 15 Aug 1997 09:22:03 -0700 To: rah(a)shipwright.com From: Vinnie Moscaritolo <vinnie(a)vmeng.com> Subject: SSETS FORFEITURE BILL ON THE MOVE GENERAL-RKBA digest 282 ASSETS FORFEITURE BILL ON THE MOVE At press time, the U.S. House Judiciary Committee had passed H.R. 1965 -- an assets forfeiture bill. This legislation contains provisions that would allow the Clinton-Gore Administration to seize the assets of virtually any business on any pretext -- including firearms-related businesses! Even if the warrant for the original seizure is struck down, the government would then be given additional time and "discovery" to examine the business records to try and build a case to continue holding the assets (read: firearms). Virtually any business that has any substantive inventory and that is extensively regulated by the government is in danger of having its goods seized -- even for non-criminal regulatory infractions. H.R. 1965 is a Clinton-Reno scheme -- and a civil rights nightmare -- and we strongly believe it will be used as a tool against gun stores, collectors, or anyone else who has a firearms collection or inventory worth stealing. We are trying to work in Congress to get the needed changes to this legislation before it is brought to the House floor, but it may be put on a fast-track to try and dampen opposition. Call your Congressman now at 202/224-3121, and explain the problems with asset forfeiture from the gun owner's perspective, and urge him to oppose the Reno-backed asset forfeiture scheme. AND THE TALL TALES GET TALLER Hoping that going on the offensive would provide him with a good defense, President Clinton has elevated the falsehoods surrounding the Brady Act to new heights. Obviously anticipating that the Supreme Court would strike down the "mandated background check" provision of the Brady Act, the President, along with Sarah Brady, began touting their latest statistics on the Brady Act's "success." (For a complete summary of the Court's decision, see the article on this subject in the September issue of the American Guardian.) Previously, the President, Attorney General Janet Reno, and others used the inflated figure of 186,000 to note the number of felons, fugitives, and stalkers they claimed were prevented from buying a handgun under Brady. That 186,000 figure was derived from a February 1997 Bureau of Justice Statistics (BJS) report that concluded that of nine million handgun transactions nationwide, 186,000 (2%) were rejected. The President, in turn, incorrectly claimed that the BJS study showed that the Brady Act had resulted in 186,000 handgun purchase attempts by prohibited persons being denied. However, the BJS stated on the front page of its report the 186,000 was a national estimate. Recognizing that 18 states and the District of Columbia have never been subject to Brady's five-day waiting period, BJS noted only 86,000 denials occurred in the 32 "original Brady states." Even that figure is inflated, however, because 12 of those 32 states are no longer subject to Brady, having adopted instant check or other laws in the past three years. Additionally, many Brady-exempt states conduct records checks on people who purchase long guns, while Brady only applies to handguns. However, prior to the Court's ruling, Mr. Clinton upped the ante by unveiling his newest "success statistic." According to the President, apparently in the course of a few months, the number of felons denied handgun purchases under Brady miraculously skyrocketed to 250,000! Even if that claim was true, "handgun purchase denials"--warranted or not (data indicates that most denials are not)--is not the standard by which the Brady Act should be judged. Rather, the effectiveness of a law titled the "Handgun Violence Prevention Act" should be measured by how much handgun violence is prevented. And on that test, Brady is a failure, as we know our prisons aren't bursting at the seams from "felons" who violated federal law by attempting to purchase a handgun. In fact, there have still been only three individuals who've seen the inside of a prison cell for violating the Brady Act. Unfortunately, in addition to the numerous individuals who've been denied a handgun purchase under the Brady Act because they had unpaid parking tickets or had the same name as a prohibited person, the truth apparently will continue to be another casualty of this misguided law. Vinnie Moscaritolo Apple's Key Escrow Agent (for now) http://www.vmeng.com/vinnie/ PGP: 4FA3298150E404F2782501876EA2146A DSS/DH: B36343A790489C8D4E149147D57A7566C206F586 1 if by land, 2 if by sea. Paul Revere - encryption 1775 --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: CIA & Espionage
by Bill Stewart 17 Dec '03

17 Dec '03

>> >It was said that Pres. Clinton had given a speech while >> >visiting the CIA HQ in Langley/Virginia. He allegedly >> >said in this speech that obtaining industrial >> >informations has the highest priority and this were the >> >new task for the spies. Did he really say the priority was stealing information from other people, or only protecting Big American Companies from those nasty French Spy Agency persons? (Clinton being who he is, I'd expect him to say a politically correct version of the latter, whether he means the former or not, just like his predecessor.) #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

Re: O.J. ObCrypto: Fuhrman's Folly Fans Fakery Fears...
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:50 PM 8/30/95 -0500, you wrote: > In =any= Key Escrow arrangement (including the non-government variety > preferred by 4 out of 5 Cypherpunks in a recent survey) > there must be a division between encryption keys and signature keys. .... > Please don't mention to anyone the fact that my signature key can be > used to send me something that even the escrow agents can't read.... Only if you use RSA. One of the neat things about RSA, as opposed to DH or DSA/DSS, is that the same algorithm can do both signature and encryption. Once we all have our Gummint-issue Citizen-Unit SmartCards with the Web-Of-Mistrust Hierarchical Certification System, people won't be able to use the DSS feature to send you encrypted messages <fnord>Pay no attention to that man behind the subliminal channel!</fnord> but you can still use them for signatures, including checking escrow agency signatures on your privacy key. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

** Financial Freedom **
by Money＠Eaglequest.Com 17 Dec '03

17 Dec '03

/////////////////////////////////////////////////////////////////////////////// You Do not want toTrash This one !!!!! Read This Twice!!!!! Please accept my apology if this were sent to you in error! <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> You could make at least $50,000 - In less than 90 days Read the enclosed program . . . THEN READ IT AGAIN! ... <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> Dear Friend, The enclosed information is something I almost let slip through my fingers. Fortunately, sometime later I reread everything and gave some thought and study to it. My name is Christopher Erickson. Two years ago, the corporation I worked at for the past twelve years downsized and they eliminated my position. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends, and creditors more than $35,000. The economy was taking a toll on my business and I just could not seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. I truly believe it was wrong for me to be in debt like this. AT THAT MOMENT something significant happened in my life and I am writing to share my experience in hopes that this will change your life FOREVER . . . FINANCIALLY!!! In mid-December, I received this program via email. Six months before receiving this program I had been sending away for information on various business opportunities. All of the programs I received, in my opinion, were not cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk seeing if they worked or not. One claimed I had made a million dollars in one year . . . it didn't tell me I'd have to write a book to make it. But like I was saying, in December of '92 I received this program. I did not send for it, or ask for it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After reading it several times, to make sure I was reading it correctly, I could not believe my eyes. Here was a MONEY MAKING PHENOMENON. I could invest as much as I wanted to start, without putting me further in debt. After I got a pencil and paper and figured it out, I would at least get my money back. After determining that the program is LEGAL and NOT A CHAIN LETTER, I decided "WHY NOT." Initially I sent out 10,000 emails. It only cost me about $15.00 for my time on-line. The great thing about email is that I did not need any money for printing to send out the program, only the cost to fulfill my orders. I am telling you like it is, I hope it does not turn you off, but I promised myself that I would not "rip-off" anyone, no matter how much money it cost me! . In less than one week, I was starting to receive orders for REPORT #1. By January 13th, I had received 26 orders for REPORT #1. When you read the GUARANTEE in the program, you will see that "YOU MUST RECEIVE 15 TO 20 ORDERS FOR REPORT #1 WITHIN TWO WEEKS. IF YOU DO NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO!" My first step in making $50,000 in 20 to 90 days was done. By January 30th, I had received 196 orders for REPORT #2. If you go back to the GUARANTEE, "YOU MUST RECEIVE 100 OR MORE ORDERS FOR REPORT #2 WITHIN TWO WEEKS. IF NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO. ONCE YOU HAVE 100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $50,000 GOAL." Well, I had 196 orders for REPORT #2, 96 more than I needed. So I sat back and relaxed. By March 19th, of my emailing of 10,000, I received $58,000 with more coming in every day. I paid off ALL my debts and bought a much needed new car. Please take time to read the attached program. It WILL CHANGE YOUR LIFE FOREVER! Remember, it will not work if you do not try it. This program does work, but you must follow it EXACTLY! Especially the rules of not trying to place your name in a different place. It doesn't work, you'll lose out on a lot of money! REPORT #2 explains this. Always follow the guarantee, 15 to 20 orders for REPORT #1, and 100 or more orders for REPORT #2. You will make $50,000 or more in 20 to 90 days. I AM LIVING PROOF THAT IT WORKS!!! If you choose not to participate in this program, I am sorry. It really is a great opportunity with little cost or risk to you. If you choose to participate, follow the program and you will be on your way to financial security. If you are a fellow business owner and you are in financial trouble like I was, or you want to start your own business, consider this a sign. I DID! Sincerely, Christopher Erickson PS Do you have any idea what 11,700 $5 bills ($58,500) look like piled up on a kitchen table? It is AWESOME! "THREW IT AWAY" "I had received this program before. I threw it away, but later wondered if I should not have given it a try. Of course, I had no idea who to contact to get a copy, so I had to wait until I was emailed another copy of the program. Eleven months passed, then it came. I DID NOT throw this one away. I made $41,000 on the first try." Dawn W., Evansville, IN "NO FREE LUNCH" "My late father always told me, remember, Alan, there is no free lunch in life. You get out of life what you put into it.' Through trial and error and a somewhat slow frustrating start, I finally figured it out. The program works very well. I just had to find the right target group of people to email it to. So far this year, I have made over $63,000 using this program. I know my dad would have been very proud of me." Alan B., Philadelphia, PA A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM By the time you have read the enclosed information and looked over the enclosed program and reports, you should have concluded that such a program, and one that is legal, could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for ten years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it was not working. Finally, I figured it out. It was not me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I do not have to tell you what happened to the unemployment rate . . . because many of you know from first hand experience. There were more failures and bankruptcies than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who did not, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes, "THE RICH GET RICHER AND THE POOR GET POORER." The traditional methods of making money will never allow you to "move up" or "get rich," inflation will see to that. You have just received information that can give you FINANCIAL FREEDOM for the rest of your life, with "NO RISK" and "JUST A LITTLE BIT OF EFFORT." You can make more money in the next few months than you have ever imagined. I should also point out that I will not see a penny of your money, nor anyone else who has provided a testimonial for this program. I have already made more than FOUR MILLION DOLLARS! I have retired from the program after sending out more than 16,000 programs. Now I have several offices that market this and several other programs here in the US and overseas. By Spring, we wish to market the 'Internet' by a partnership with AMERICA ON LINE. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now. Remember to email a copy of this exciting program to everyone that you can think of. One of the people you send this to may send out 50,000 . . . and your name will be on every one of them! . Remember though, the more you send out, the more potential customers you will reach. So my friend, I have given you the ideas, information, materials and opportunity to become financially independent, IT IS UP TO YOU NOW! "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you calculate it, you will still make a lot of money! Definitely get back what you invested. Any doubts you have will vanish when your first orders come in. IT WORKS! Paul Johnson, Raleigh, NC HERE'S HOW THIS AMAZING PROGRAM WILL MAKE YOU $$$$$$ Let us say that you decide to start small, just to see how it goes. We will assume you and all those involved send out 2,000 programs each. Let us also assume that the mailing receives a .5% response. Using a good list, the response could be much better. Also, many people will send out hundreds of thousands of programs instead of 2,000. Nevertheless, continuing with this example, you send out only 2,000 programs. With a 5% response, that is only 10 orders for REPORT #1. Those 10 people respond by sending out 2,000 programs each for a total of 20,000. Out of those .5%, 100 people respond and order REPORT #2. Those 100 email out 2,000 programs each for a total of 200,000. The .5% response to that is 1,000 orders for REPORT #3. Those 1,000 send out 2,000 programs each for a total of 2,000,000. The .5% response to that is 10,000 orders for REPORT #4. That's 10,000 five dollar bills for you. CASH!!! Your total income in the example is $50 + $ 500 + $ 5,000 + $ 50,000 for! ! a total of $55,000!!! REMEMBER FRIEND, THIS IS ASSUMING 1,900 OUT OF 2,000 PEOPLE YOU MAIL TO WILL DO ABSOLUTELY NOTHING... AND TRASH THIS PROGRAM! DARE TO THINK FOR A MOMENT WHAT WOULD HAPPEN IF EVERYONE OR JUST œ SENT OUT 100,000 PROGRAMS INSTEAD OF ONLY 2,000. Believe me, many people will do that and more! By the way, your cost to participate is practically nothing if you follow the program as it is outlined. You obviously already have an internet connection and email is FREE!!! REPORT #3 will show you the best methods for bulk emailing and purchasing email lists. THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY. It does not require you to come into contact with people, do any hard work, and best of all, you never have to leave the house except to get your mail. If you believe that someday you will get that big break that you have been waiting for, THIS IS IT! Simply follow the instructions, and your dream will come true. This multi-level email order marketing program works perfectly... 100% EVERY TIME. Email is the sales tool of the future. Take advantage of this non-commercialized method of advertising NOW!! The longer you wait, the more people will be doing business using email. Get your piece of the pie!!! MULTI-LEVEL MARKETING (MLM) has finally gained respectability. It is being taught in the Harvard Business School, and both Stanford Research and The Wall Street Journal have stated that between 50% and 65% of all goods and services will be sold byMulti-Level methods by the mid to late 1990's. This is a Multi-Billion Dollar industry and of the 500,000 millionaires in the USA, 20% (100,000) made their fortune in the last several years in the MLM industry. Moreover, statistics show 45 people become millionaires everyday through Multi-Level Marketing. This is not a chain letter, but a perfectly legal money making opportunity. Basically, this is what we do: As with all multi-level business, we build our business by recruiting new partners and selling our products. Every state in the USA allows you to recruit new multi-level business partners, and we offer a product for EVERY dollar sent. YOUR ORDERS COME AND ARE FILLED THROUGH THE MAIL, so you are not involved in personal selling. You do it privately in your own home or office. This is the GREATEST Multi-Level Mail Order Marketing anywhere: Step (1) Order all four (4) REPORTS listed by NAME AND NUMBER. Do this by ordering the REPORT from each of the four (4) names listed on the next page. For each REPORT, send $5.00 cash and a SELF-ADDRESSED STAMPED ENVELOPE (BUSINESS SIZE # 10) to the person listed on that SPECIFIC REPORT. International orders should also include $1.00 extra for postage. It is essential that you specify the NAME and NUMBER of the REPORT requested tp the person you are ordering from. You will need ALL FOUR (4) REPORTS because you will be REPRINTING and RESELLING them. DO NOT alter the names or sequence other than what the instructions say. IMPORTANT: Always provide same day service on all orders. Step (2) Replace the name and address under REPORT #1 with your name, moving the one that was there down to REPORT #2. Drop the name and address under REPORT #2 TO REPORT #3, moving the one that was there to REPORT #4. The name and address that was under REPORT #4 is dropped from the list, and this party is no doubt on the way to the bank. When doing this make certain you type the names and addresses ACCURATELY! DO NOT MIX UP MOVING THE PRODUCT OR REPORT POSITIONS!!! Step (3) Having made the required changes in the NAME list, save it as a text (txt) file in it's own directory to be used with whatever email program you like. Again, REPORT #3 will tell you the best methods of BULK EMAILING and acquiring email lists. Step (4) Email a copy of the entire (all of this is very important) to everyone whose address you can get your hands on. Start with friends and relatives since you can encourage them to take advantage of this fabulous money-making opportunity. That's what I did. And they love me now, more than ever. Then email to anyone and everyone! Use your imagination! You can get email addresses from companies on the internet who specialize in email lists. Thes are very cheap, 100,000 addresses for around $35.00 IMPORTANT: You won't get a good response if you use an old list, so always request a FRESH, NEW LIST. You will find out where to purchase these lists when you order the four (4) REPORTS. ALWAYS PROVIDE SAME DAY SERVICE ON ALL ORDERS!!! REQUIRED REPORTS *** Order each REPORT by NUMBER and NAME*** ALWAYS SEND A SELF ADDRESSED, STAMPED ENVELOPE AND $5.00 CASH FOR EACH ORDER REQUESTING THE SPECIFIC REPORT BY NAME AND NUMBER!!! ______________________________________________________________________________ REPORT # 1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 FROM; Bawkon Development Co. P.O. Box 180654 Utica, MI 48318-0654 ______________________________________________________________________________ REPORT # 2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT # 2 FROM: Associated Business Connections P.O. Box 643 New Albany, OH 43054-0643 ______________________________________________________________________________REPORT # 3 "SOURCES FOR THE BEST MAILING LISTS" ORDER REPORT # 3 FROM: Kay James P.O. Box 33209 Denver, CO 80233-0209 ______________________________________________________________________________REPORT # 4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT # 4 FROM: Super Growth Group P.O. Box 9006 Gaithersburg, MD 20898-9006 ______________________________________________________________________________ CONCLUSION I am enjoying my fortune that I made by sending out this program. You too, will be making money in 20 to 90 days, if you follow the SIMPLE STEPS outlined in this mailing. To be financially independent is to be FREE. Free to make financial decisions as never before. Go into business, get into investments, retire or take a vacation. No longer will a lack of money hold you back. However, very few people reach financial independence, because when opportunity knocks, they choose to ignore it. It is much easier to say "NO" than "YES", and this is the question that you must answer. Will YOU ignore this amazing opportunity or will you take advantage of it? If you do nothing, you have indeed missed something and nothing will change. Please re-read this material, this is a special opportunity. If you have any questions, please feel free to write to the sender of this information. You will get a prompt and informative reply. My method is simple. I sell thousands of people a product for $5.00 that costs me pennies to produce and email. I should also point out that this program is legal and everyone who participates WILL make money. This is not a chain letter or pyramid scam. At times you have probably received chain letters, asking you to send money, on faith, but getting NOTHING in return, NO product what-so-ever! Not only are chain letters illegal, but the risk of someone breaking the chain makes them quite unattractive. You are offering a legitimate product to your people. After they purchase the product from you, they reproduce more and resell them. It's simple free enterprise. As you learned from the enclosed material, the PRODUCT is a series of four 4 FINANCIAL AND BUSINESS REPORTS. The information contained in these REPORTS will not only help you in making your participation in this program more rewarding, but will be useful to you in any other business decisions you make in the years ahead. You are also buying the rights to reprint all of the REPORTS, which will be ordered from you by those to whom you mail this program. The concise one and two page REPORTS you will be buying can easily be reproduced at a local copy center for a cost of about 5 cents a copy. Best wishes with the program and Good Luck! "IT WAS TRULY AMAZING" "Not being the gambling type, it took me several weeks to make up my mind to participate in this program. But conservative as I am, I decided that the initial investment was so little that there was no way that I could not get enough orders to at least get my money back. BOY, was I ever surprised when I found my medium sized post office box crammed with orders! I will make more money this year than any ten years of my life before." Mary Riceland, Lansing, MI TIPS FOR SUCCESS Send for your four 4 REPORTS immediately so you will have them when the orders start coming in. When you receive a order, you MUST send out the product/service to comply with US Postal and Lottery laws. Title 18 Sections 1302 and 1341 specifically state that: "A PRODUCT OR SERVICE MUST BE EXCHANGED FOR MONEY RECEIVED." WHILE YOU WAIT FOR THE REPORTS TO ARRIVE: 1. Name your new company. You can use your own name if you desire. 2. Get a post office box (preferred). 3. Edit the names and addresses on the program. You must remember, your name and address go next to REPORT # 1, and all the others move dowb\n one, with the fourth one being bumped OFF the list. 4. Obtain as many email addresses as possible to send until you receive the information on mailing list companies in REPORT #3. 5. Decide on the number of programs you intend to send out. The more you send, and the quicker you send them, the more money you will make. 6. After mailing the programs, get ready to fill the orders. 7. Copy the four 4 REPORTS so you are able to send them out as soon as you receive an order. IMPORTANT: ALWAYS PROVIDE SAME-DAY SERVICE ON ALL THE ORDERS YOU RECEIVE! 8. Make certain the letter and reports are neat and legible. YOUR GUARANTEE The check point which GUARANTEES your success is simply this: you must receive 15 to 20 orders for REPORT #1. This is a must!!! If you don't within two weeks, email out more programs until you do. Then a couple of weeks later you should receive at least 100 orders for REPORT #2, if you don't, send out more programs until you do. Once you have received 100 or more orders for REPORT #2, (take a deep breath) you can sit back and relax, because YOU COULD MAKE AT LEAST $50,000. Mathematically it is a proven guarantee. Of those who have participated in the program and reached the above GUARANTEES-ALL have reached their $50,000 goal. Also, remember, everytime your name is moved down the list you are in front of a different REPORT, so you can keep track of your program by knowing what people are ordering from you. IT'S THAT EASY, REALLY, IT IS!!! REMEMBER: "HE WHO DARES NOTHING, NEED NOT HOPE FOR ANYTHING." "INVEST A LITTLE TIME, ENERGY AND MONEY NOW OR SEARCH FOR IT FOR THE REST OF YOUR LIFE."

1 0

Re: SSL search attack
by don＠cs.byu.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- From: Jiri Baum <jirib(a)sweeney.cs.monash.edu.au> >So T.C.May is the same person as "Lance"? Hey, I wanna be Lance tooooooo. Can I be Lance? Can I? From: Jiri Baum <jirib(a)sweeney.cs.monash.edu.au> >Each client could pick a segment at random, check it and then broadcast >a NAK. Other clients would then know that the segment in question has >been done, and avoid picking it in the future. If you are worried about That opens it wide open to someone NAKing the keyspace where the key is. If we're going to involve a server, might as well do the sequential job and make it fast. From: monty.harder(a)famend.com (MONTY HARDER) TC> * For opportunistic attacks on keys in challenges, the odds are 95% that a TC> key will be found with only twice the total effort (or time) using a TC> totally random method of picking up keyspace to search. > The odds can be improved somewhat by scaling the granularity of the >sweep to the size of the sweep. (Align larger chunks on large-chunk >boundaries, eliminating the chance of overlap with other large chunks.) Some kind of step (ie, round-down) function performed on the random (I vote we call it a dart) output, with the size of the step based on the how many segments at once you want to search? Seems to me that all your doing is searching an X segment area around where the dart hit. In order to get any kind of boundry, you have to scale the allowed segment blocks, by powers of two, for example, or something, so everyone knows where the borders are. Its a nice thought but I don't see that it's necessary. If, on the other hand, sequential searchers plow through half of the keyspace while a "random crew" throws darts at the other half, everyone can participate how they wish. And if the keyserver gets deep-six'd by a Denial of Service attack (or just swamped), everyone can just switch into random mode and shotgun the keyspace. (Maybe even avoiding what's already been sequentially-searched) Don -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMEWZ6MLa+QKZS485AQGg3AMApFhrOBURkmwJQ699IkBhlZao6ynLe4pW 8eJllDAutliFdzGWA/PYHrfYsO8Dl9IOYrzFCmdNJY5urON3/IeOv5eEGqGkc/N6 3ZaKR4FIBk8jk0u6QGxi/iRfPfSa62gp =it70 -----END PGP SIGNATURE----- <don(a)cs.byu.edu> fRee cRyPTo! jOin the hUnt or BE tHe PrEY PGP key - http://bert.cs.byu.edu/~don or PubKey servers (0x994b8f39) June 7&14, 1995: 1st amendment repealed. Death threats ALWAYS pgp signed * This user insured by the Smith, Wesson, & Zimmermann insurance company *

1 0

No Subject
by Ford Prefect 17 Dec '03

17 Dec '03

perry, of course, is a dysfunctional human "cipher" himself, who couldn't be civil if he was at a tea party of grandmothers. yes, in 15 minutes he would end up screaming and mooning them all because they hadn't heard of Netscape or Chaum or something. what a prick. so he wants to lobby congress and write some code?? well perry, good for you. you just go off on your little excursion. let us know how you are doing. send some postcards to Blacknet, OK??? as for TCM and his invest-in-stocks-and-evade-taxes shtick, it's starting to bore me too. frankly I think that both TCM and PM should take a long, long vacation from the cypherpunks list and go take a cruise together. yes, help patch up that relationship that is so strained lately. it hurts us all to see two grown men fighting each other. make love, not war!!! hehehehe

3 2

Re: Remailer hating Nazis (was Re: The BIG Lie (Jesus Confesses))
by Anonymous 17 Dec '03

17 Dec '03

At 9:34 AM, The Remailer Hating Nazi Patrick Oonk wrote: >You can't read, obviously. Actually, I learned to read in Kindergarten, and can still read nicely. I just don't contradict myself. >What I said was that it's a bit lame to flame me >and call me names, without giving me the oppportunity to mail you >directly, w/o bothering the other people on this list. Funny that other cypherpunks don't try to censor me. Most just delete crap that they don't want to read. So what's your story? >You twist my words around. Bullshit I did. You speak lowly of remailer users, but you make and run remailers, or at least, you ran remailers. >By the way, where did your wig-wearing faggot founding fathers of you suddenly go ? Knee-deep in your censorous Nazi rectum with muskets, you Hitlerist bigoting bastard. >Start coding, instead of just flaming people. So in addition to being too coward to run remailers, you are also a censorous little prick, eh? Don't tell me what to do, you fascist liar. >Post-natal abortion would have been a good solution for you. At least I'm not an inspiration for birth control, like you, Patty. I'm surprised that your family didn't disown you at the first sign of a head coming out. We need less Censor-happy Nazi cowards like you on this planet.

2 1

VCRPLUS Huffman code
by MINITERS＠citadel.edu 17 Dec '03

17 Dec '03

Has anyone worked out the VCRPLUS code? The TVGuide has a litsing which can be used to set up a VCR by employing a series of numbers which encode date/timestart/timefinish/channel in a minimized sequence which I believe is a Huffman code(David Huffman-MIT MS thesis 1954) I am interested in if anyone has taken the time to figure out the algorithm? please respond to me directly so as not to clutter the list if you don't mind.

1 0

UK Guardian article on 2nd SSL breaking
by nobody＠flame.alias.net 17 Dec '03

17 Dec '03

from the "uk-pipeline": >>>>>>>>>>>>>>>>>>>> CYPHERPUNKS LEAD NETSCAPE'S NAVIGATOR ASTRAY A team of computer experts has succeeded in breaking the secure 'key' used on international versions of the World-Wide Web browser, Netscape Navigator. The key would normally have been used to secure transmission of sensitive information, such as credit card details, between a Web-surfer and a Web site, such as an on-line shopping service. However, the cypherpunks, as they are known, only cracked the 40-bit key that is used by export versions of Netscape Navigator, since US Government regulations prevent the export of software that uses stronger cryptographic techniques. "We have, quite categorically, demonstrated that 40-bit keys are too weak to use for commercial systems," said Dr. Piete Brookes, a computer officer at Cambridge University who managed the project. The code cracking took 31 hours and 47 minutes of computer time on around 300 machines strung across the internet. The team was able to crack the code because they had been provided with the transcript of a secure transmission. Such transcripts are not impossible to acquire, according to Dr. Brookes: "All you need is a tap on the line, or access to a computer in a suitable part of the network.". The 128-bit key used by American versions of Netscape Navigator is "well out of reach of any hacker groups in the forseeable future." He estimates it would take one billion, billion, billion, billion years to break. Azeem Azhar Further information can be found on the World-Wide Web at http://www.dcs.ex.ac.uk/~aba/ >>>>>>>>>>>>>>>>>>>>

1 0

Re: Remailer hating Nazis
by Anonymous 17 Dec '03

17 Dec '03

At 03:22 PM 8/15/97 +0200, The Remailer hating contradictory Nazi Cop wrote: >Some word-twisting asshole wrote: >> Sorry to hear you have such a low opinion of those who use >> anonymous remailers. Is your work on remailers an 'ego' thing, >> or are you a cop? > >I am a cop, but it boosts my ego too. HAHAHAHA!!!! Do you sodomize people with plungers since you're a cop? Kick the crap out of any potsmokers today?? I think your ego's so big it's going to give you back problems when you get older. >> So spam me, big boy. Spam me. > >Let the pros stick to that. Translated: I can't, I'm... I'm... a remailer hating coward!!! (sob sob)

1 0

Some details on RSA Secure
by baldwin 17 Dec '03

17 Dec '03

Here are my biased comments on RSA Secure. They are biased by the fact that I an a techie who works for RSA Data Security. Neatest Features: - It is integrated with the File Manager on Windows and the Finder on Mac System 7. For example, from the file manager you can double click on an encrypted Excel spread sheet and the file will automatically decrypt and launch Excel. The decryption can be automatic because the file manager hangs on to your password for a settable number of minutes. - A settable list of files can be automatically decrypted (or encrypted) on system startup (or shutdown). Technical Features: - The random number generator for file encryption keys and public keys is seeded by user keystrokes or wiggling the mouse. The GUI for this is really fun to play with, but it only comes up when you first install the software. - The user's passphrase unlocks a master key that is used to unlock the file encryption key for each file. - Tamper detection for encrypted files using an MD5 hash. - If emergency key access is turned on then the file encrypting key is also encrypted with the public key for emergency key access. That public key is usually split into 5 or more pieces and two or three of the pieces are required to perform the emergency access functions. A quick look at the file header reveals whether the escrow feature is in use. - Files encrypted with the 40 bit demo version can be read by the 80 bit commercial version, and will be automatically upgraded to 80 bit security when they are reencrypted. - Runs on DOS, Windows, Mac, and SunOS. Other ports coming soon. Coming Soon: - Password based file sharing. A simple way to protect files in transit using a secret passphrase known only to the sender and receiver. Currently, only the person who encrypted the file can decrypt it. - Self decrypting binaries. This allows you to send an encrypted file to someone who does not have RSA Secure. They execute the file, which then asks for the password and extracts the contents if the password is correct. The sender can choose to use 40 or 80 bit encryption keys in order to comply with export regulations. Request for Improvements: What else should be in a product that is aimed at the commercial laptop market? --Bob Baldwin

1 0

Re: Remailer hating Nazis
by Anonymous 17 Dec '03

17 Dec '03

The Platypus blithered this out: >Flaming via Anon reamilers is bad, not because its done via an anon >reamiler but because Flamming is mostly bad. If anything, flaming Anonymously is good, since you can say anything you damn well please without a care. It relieves stress.

3 2

Fiat Shamir Zero Knowledge Test
by trollins＠hns.com 17 Dec '03

17 Dec '03

Hello, Can someon point me to a net description of the "Fiat Shamir Zero Knowledge Test" used in the RCA DirecTV smart cards. Thanks in advance...

1 0

Re: Poisson numbers for random keyspace assignment
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:49 AM 8/31/95, MONTY HARDER wrote: > [Great statistical summary deleted] Thanks. Two other people sent me e-mail saying the odds of a keyspace chunk being left uncovered are 1/e, so this part is pretty well known. (With an expectation of "1" of course, as I noted. Interestingly, this was the same formula we used at Intel to figure out chip yields: "What's the probability that a chip will have zero defects given that m defects are the "expected" number?") I wanted to explain the derivation in more detail than just saying 1/e, especially for the more interesting cases where the keyspace gets more coverage. (Where the m = expected value is more than 1.) >TC> * For opportunistic attacks on keys in challenges, the odds are 95% that a >TC> key will be found with only twice the total effort (or time) using a >TC> totally random method of picking up keyspace to search. > > The odds can be improved somewhat by scaling the granularity of the >sweep to the size of the sweep. (Align larger chunks on large-chunk >boundaries, eliminating the chance of overlap with other large chunks.) Indeed, this is an effect to consider. That is, each searcher is (presumably) not overlapping, so the results I reported are sort of a bound on the actual numbers. At one end, with lots of searchers doing very small fractions of the total, the results are pure Poisson. At the other end, with a searcher covering most or all of the keyspace, then of course the results are those of nonrandom search. Practically speaking, with dozens or hundreds of searchers, the Poisson results produce accurate enough estimates. > The best advantage of the random method is that it allows people to >participate completely anonymously, as there is nothing to report save >the Eureka!, and that can be done through a remailer anyway. When the >challenge is solved, everyone can stop cracking. A very good point! Anonymous cracking has many advantages. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Crypto '95
by Perry E. Metzger 17 Dec '03

17 Dec '03

Anything really fun revealed at Crypto? Anything fun at the rump session? .pm

1 0

PKIX Part 3 REQUIRES SUPPORT OF KEY RECOVERY?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: blacklodge.c2.net: majordom set sender to owner-cryptography(a)c2.org using -f X-PGP-Key: <http://www1.shore.net/~sable/info/rltkey.htm> X-Sender: rodney(a)pop3.pn.com Date: Fri, 15 Aug 1997 07:39:04 -0400 To: cryptography(a)c2.net From: Rodney Thayer <rodney(a)sabletech.com> Subject: PKIX Part 3 REQUIRES SUPPORT OF KEY RECOVERY? Mime-Version: 1.0 Sender: owner-cryptography(a)c2.net (This is a note I posted on the PKIX (Public Key Infrastructure) mailing list. I would be interested in comments on this document -- the draft is <ftp://ds.internic.net/internet-drafts/draft-ietf-pkix-ipki3cmp-02.txt> >-----BEGIN PGP SIGNED MESSAGE----- > >It seems to me that PKIX Part 3, section 2.2.2.1 "Centralised scheme" >requires that a conformant implementation support the capability of >generating the private key at the CA. This means that a conformant >implementation essentially is required to implement key recovery. > >I do not think that this conforms to IETF practice and I certainly do >not want to require CA implementations to support this capability. >If for some reason someone wants to implement this I can see it being >an optional feature but I do not think it is an acceptable mandatory >requirement. > >-----BEGIN PGP SIGNATURE----- >Version: PGP for Personal Privacy 5.0 >Charset: noconv > >iQCVAwUBM/Ph38KmlvJNktGxAQGM4AP6AxwWoXMuNo13f2tHxAb85eo4eCHSfE0D >OVvEqv3LrYyctkKULPkDb3IQKwEVkrba5EEVvFytyblgROh12eftgIfndqQWQyca >LLiUXZemSS59lD+gI0TFaqayOvAGJenN3SdxJDaQ6eiY04vjoxrLZ9/aX3/lnzYC >efAB14L23Eg= >=3M+q >-----END PGP SIGNATURE----- > > > --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: Mixmaster Security Issues
by hodges＠CNMAT.CNMAT.Berkeley.EDU 17 Dec '03

17 Dec '03

Lance Cottrell writes: >Because of the message size limitations there are some advantages to >sending the mixmaster chain through some type 1 remailers first, rather >than sending a type 1 message in a Mixmaster packet. Are there any gateways that will take a (pgp-encrypted) type 1 message, with presumably some kind of headers giving onward routing information and put it into the type 2 network? Should there be such a service? I think this was discussed earlier, but Lance's statement above seems to reopen the discussion. >It is very difficult to know what fraction of the traffic I see is cover. I >generate some cover traffic my self, and I know some others do as well. >Right now a reordering pool of 5 messages results in a latency of about 30 >min. Mixmaster is no longer a small fraction of the remailer market. A >majority of all public remailers support Mixmaster. What is the total daily volume of mixmaster traffic for all the advertised mixmasters? Has anyone measure this statistic? Regards, Richard Hodges

1 0