December 2003 - cypherpunks-legacy

Re: the "unsubscrive" meme keeps on going.
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:28 PM 4/4/96, bryce(a)digicash.com wrote: >> unsubscrive * Peter.Posch(a)koeln.netsurf.de > > >I suspect that this meme propagates (especially among >non-native-English-speakers) via the list itself. Peter >Posch probably saw one of the previous "unsubscrives" and is >hoping it will work for him. Perhaps the ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ A good insight. Reminds me of the "cargo cults." (If you don't know the story, here's a brief version: Pacific Islanders saw Americans bringing riches and technological gew-gaws to their islands in WWII. Then they left, leaving cargo crates and whatnot behind. The Islanders believed if they fashioned radio headsets out of coconuts and radios out of old logs that they could bring the Great Birds from the Sky back. (*) This has since gotten currency--through anthropologists, Ayn Rand, Richard Feynman, and others--as a short-hand description for people engaging in magical thinking that the _trappings_ of something will sympathetically bring on the real thing. Some might say Java is a cargo cult...hmmmhhh, Java is a Pacific island....hmmmhhh.) (* Note: In this age of hypersensitivity, sometimes called political correctness, there are likely to be lurkers who suddenly jump up at this characterization of "native peoples" and decry my characterization of them as "savages" (even though I have not used this word nor this attitude toward them). And some will claim that if more American learned Bahasa Indonesia there would not be this cultural imperialism that is repressing all people of color. Hey, I don't repress no coloreds!) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: .sig followup
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:32 PM 4/4/96, Rich Graves wrote: > >CDAmeisters as an "invasion," but I really don't buy this stuff about >Cyberspace (a word only Barlow can say with a straight face) being a new ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >"place." It's just a communications medium, no more and no less real than >anything else. I think it would be better to stress that the online *is* This is not true. I use the word "cyberspace" with a straight face. It has long seemed perfectly descriptive to me. This doesn't mean I buy Barlow's "let's just declare independence" schtick. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Why pay???
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:44 PM 4/4/96, kreidl(a)newrock.com wrote: >> >>Thanks for your interest in Cypherpunks Lite. >> >>I provide a moderated version of the Cypherpunks list called >>"Cypherpunks Lite". A one year subscription costs US$20 and is >Why would I pay if I can get it for free this way?????? You are of course free not to subscribe. A solution I think 98% of us would subscribe to, so to speak. Personally, I take the full Cypherpunks feed. Others may take Eric Blossom's for-a-fee filtered list, still others may take the variously-priced filtered lists by others. As it should be. (Goldwater and Heinlein got it slightly wrong when they said "There ain't no such as a free lunch." While true in many ways, TANSTAAFL ignorest the great willingness of people to donate time, effort, articles, etc. In fact, I've put many thousands of hours into the Cypherpunks list, for which I've received not a single centime of compensation. And I have no problem with this, provided it remains voluntary.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: Fascinating troll with forged newgroups
by Bill Stewart 17 Dec '03

17 Dec '03

At 03:00 AM 4/4/96 -0800, you wrote: >Looks like the Nazis forged newgroup messages for rec.fag-bashing, >rec.org.kkk, and 100 RFD'd groups in order to get their little messages >across. > >How entertaining. What a marvelous new form of net.vandalism they've >discovered. Or is this not new? Oh, no, this sort of thing is not new. It happened more before the Great Renaming, but it's not new. The other possibility is it's troll trying to make it _look_ like the Nazis did it.

1 0

Re:Why pay???
by mccoy＠communities.com 17 Dec '03

17 Dec '03

At 3:44 PM 4/4/96, kreidl(a)newrock.com is rumored to have typed: > [...regarding CPLite subscriptions...] > > Why would I pay if I can get it for free this way?????? Because then useless noise (such as the message you posted) would automagically get filtered out. Some people do not have the time to filter the noise from signal on mailing lists and this service caters to their needs. jim

1 0

Re:
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:52 PM 4/4/96, AndrÈ Gil wrote: > unsubscrive * agil.home(a)mail.telepac.pt > unsubscrive * agil.home(a)mail.telepac.pt > unsubscrive * agil.home(a)mail.telepac.pt What the hell is going on? We seem to be under attack by foreigners. --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed

3 2

HANDS UP!
by etoy＠hijack.org 17 Dec '03

17 Dec '03

HI THERE! THIS IS etoy! "the digital hijack" is NOW running ! the internet-underground has decided: it is definitely time to blast SOUND and ACTION into the net !!! our software-agents have invaded the main searchservers... ++++for more information check out : http://www.hijack.org/++++++++++ or get kidnapped live --> go to infoseek (netsearch-button on your browser) and search for: UNDERGROUND - CENSORSHIP - DISCO - XTC - CLINTON - PORSCHE - CRACK - KRAFTWERK - ELVIS - TERROR - PENTHOUSE - SEGA - MONDRIAN - SEXPISTOLS - FIREARMS - TARANTINO - DJ - STONES - NETWORKS - BASE - CRIME - WAR - BUSINESS - WOMEN - NET - SOCIETY - ART - CASTRO - PARADISE - ATHLETICS - PULP - CYBER - YELLO - PETSHOPBOYS - REM - HUSTLER - BITCH - GUEVARA - SEVESO - MELODYMAKER - PORNO - GABBER - ROLLERBLADES - REBEL - OASIS - COMMUNICATIONS - PLAYBOY - BELGIUM - ORB - AND MANY MORE... these keywords will all appear on the TOP 10 - LIST. take the link to hijack.org to get the hijack-experience like millions of bored internet-users... download the hijackers-sound, get the best pictures and help us free our friend KEVIN D. MITNICK, THE SUPERHACKER (charged for electronic-terrorism, maximum sentence: 460 years prison) ! we would be very happy to welcome you on our site. spread this new internet-lifestyle to your friends and to internet-freaks + surfers ! this is a underground art-project not a bastard-business mail. our grab robot "etoy.IVANA" got your email-address by cruising the net. for the hijack-crew etoy MARTIN KUBLI email mailme(a)etoy.com fax ++41 1 363 35 57 _______________________________________________________________________ http://www.hijack.org/ for highres-pictures: ftp.etoy.com /press etoy: leaving reality behind...abusing technology...flashing the net

1 0

Re: The Law Loft: Surviving the Biometric I.D. Card
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: Rich Graves <llurch(a)networking.stanford.edu> >The replacement of income tax with sales and real estate taxes -- despite >the fact that such a move would be incredibly regressive -- would be a >very good thing for freedom. Agreed (re:freedom) ... but why are you claiming that real estate taxes are regressive? Unless there's some nonsense like Louisiana's homestead exemption (own your own home, get 100,000 subtracted off of the value for property tax purposes... which is just as biased against apartment-dwellers and renters as the morgage interest deduction), real estate taxes should be even or "progressive" in their distribution of the tax burden. -Allen

1 0

Re: Why pay???
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:14 AM 4/5/96, Charles Bell wrote: >The fact that you choose not to charge for your time does not make your >time worthless. The value your voluntary efforts add should be assigned >due compensation even if you choose to waive it. I didn't say my time is "worthless." But the term "worthless" (and "worth" and "value" and suchlike) are not defined in absolute terms, only in market terms. Commodities, including labor, are valued by what others will exchange for them. The notion that my efforts "should be assigned due compensation" is a flawed view of how markets determine prices and wages. There is no "assignment" absent a market. (On the other hand, I certainly will not object if Charles calls together his like-minded friends, evaluates my postings over the past several years, and "assigns due compensation." Hey, it won't cost me anything. But somehow I doubt I'll see any of this due compensation that Charles and Company assign to me.) This gets into economic issues, so I'll drop it here. I just wanted to correct this misapprehension that I was claiming my time is "worthless." >The failure to take such contributions into account is one of the most >serious flaws in all current economic paradigms. I think this will become >more apparent in decades to come, as old concepts of `work' and `jobs' >obsolesce. All the more reason to get beyond our current system, where governments set minimum wages, impose salary freezes, sue companies for charging too much (or too little) for products, and interfere in economic transactions in many other ways. With strong cryptography, at least the purely crypto-anarchic transactions will be this way. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Article on PGP Viacrypt
by A5113643667＠attpls.net 17 Dec '03

17 Dec '03

Dear Cypherpunks, ---------------- Received: by attpls.net with Magicmail;3 Apr 96 09:19:59 UT Date: 5 Apr 96 02:14:38 UT Sender: owner-cypherpunks(a)toad.com (owner-cypherpunks) From: owner-cypherpunks(a)toad.com (owner-cypherpunks) Subject: Re: Article on PGP Viacrypt To: walter(a)cithe302.cithep.caltech.edu (Chris Walter) cc: cypherpunks(a)toad.com (Cypherpunks) Message-Id: <199604030451.UAA06038(a)slack.lne.com> In-Reply-To: <<WALTER.96Apr2124421(a)cithe302.cithep.caltech.edu> from "Chris Walter" at Apr 2, 96 08:44:20 pm> X-X-AUTHENTICATION-WARNING: toad.com: majordom set sender to owner-cypherpunks using -f I would have to agree that if businesses are to use PGP that "good" key escrow MUST be provided. Peace ..Tom Chris Walter writes: > > Hi Folks, > > There is an interesting article by Simon Garfinkle in this > morning's(Apr 2nd) electronic version of the San Jose Mercury news. > Its on the index page so I don't think you need an account to read > it. > > The article deals with the new key management features and extensions > in Viacrypt and how PRZ is upset since it allows employers to read > their employees messages. I read it this morning. The gist is that this new evil PGP lets your employer SPY ON EVERYTHING YOU DO! And was written in about that tone. I was disappointed by the article. I don't know if Simson is deluded about the use of Viacrypt PGP, or the article got hacked up by by ignorant/malicious editors, or my understanding of Viacrypt PGP is competely wrong. I thought the purpose to putting key escrow (that's real escrow not GAK) into PGP was to allow its use for business purposes. Often in business use you're not too concerned with keeping secrets from your employer or fellow employees, but do want to keep those secrets within the company. And there is a real concern that you might encrypt company-secret stuff and then fall off your motorcycle and get run over by a truck, leaving your securely-encrypted company secrets suddenly inaccessable to the company... Key escrow, with the keys held by the company, is designed to prevent this problem. The article failed to mention that you're not prevented from using a non-escrow PGP for personal secrets (could Viacrypt PGP prevent you from using PGP 2.6.2? I don't think so) and made it sound like Viacrypt PGP is designed to allow nosy employers to spy on employees encrypted email. I guess it would, if the employers were that nosy and the employees dumb enough to use company-provided escrowed PGP to send personal secrets. But that theory's about as credible as the Clipper chip proponents's "dumb crooks" theory where crooks would want encrypted phones but be dumb enough to forget that the Government held the keys... Simson's the one main-line journalist who writes about internet and computer issues that I still think has a clue, and has written a pretty good book about PGP, so I'd be suprised if he got this so wrong. On the other hand, I haven't used this new Viacrypt PGP and I'm going on what I think that escrowed PGP is really good for. Maybe my feeling about that have blinded me to reality. Or, most likely, the editor(s) hacked the story up either out of ignorance or to present a viewpoint that they had already decided they want to present, truth be damned. If I wanted to present a conspiracy theory about the government wanting to discourage use of PGP for businesses, this would be the place to do it. If PGP gains a foothold in the businessplace it'll be nearly impossible to eradicate, given the fact that (big) business essentially runs the country. Key escrow will make PGP a lot more usefull to businesses, increasing its use. I'm sure you can fill in the rest of the theory. > http://www.sjmercury.com/business/priv401.htm > -- Eric Murray ericm(a)lne.com ericm(a)motorcycle.com http://www.lne.com/ericm PGP keyid:E03F65E5 fingerprint:50 B0 A2 4C 7D 86 FC 03 92 E8 AC E6 7E 27 29 AF --- NOTICE: This message originally included graphics and/or sounds which can only be received by AT&T PersonaLink(sm) subscribers. You received only the text portion(s) of the message. Please contact the sender for information that was deleted. To learn how to send and receive graphics, voice and text messages via AT&T PersonaLink Services, call 1-800-936-LINK. ----------------

1 0

Re: Video retraces as a source of entropy...
by Deranged Mutant 17 Dec '03

17 Dec '03

On 4 Apr 96 at 5:58, Laszlo Vecsey wrote: [..] > > In pseudo-C: > > > > int retrace(void) { // test for video retrace > > #ifdef __MSDOS__ > > return (port[0x3da] & 8); // Some VGA, maybe EGA cards > > #else > > // your OS here > > #endif > > } > > [..] > > x = 0; > > while (!retrace()) x++; > As far as I know, while(retrace()) will loop until vertical retrace > begins, and then you call while(!retrace()) and that will loop until > vertical retrace is over. (Or it may be the other way around). Sloppy pseudo-C code. The code I've been experimenting with waits until it's no longer in a vertical retrace (if one is still active since the last sample) and then collects the sample when the next vertical retrace occurs. [..] > What if the screen is filled with different colors, or shapes. On some > monitors you can actually see the size of the screen changing, warping out > a little.. maybe the time for retrace will be different when painting > screens with different data. I haven't done a lot of tests yet.... and even then, it's probably very system specific. Rob. --- Send a blank message with the subject "send pgp-key" to <WlkngOwl(a)unix.asb.com> for a copy of my PGP key.

1 0

Re: Why pay???
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 7:14 PM 4/4/96 -0800, Charles Bell wrote: >On Thu, 4 Apr 1996, Timothy C. May wrote: > >> >> (Goldwater and Heinlein got it slightly wrong when they said "There ain't >> no such as a free lunch." While true in many ways, TANSTAAFL ignorest the >> great willingness of people to donate time, effort, articles, etc. In fact, >> I've put many thousands of hours into the Cypherpunks list, for which I've >> received not a single centime of compensation. And I have no problem with >> this, provided it remains voluntary.) >> > >The fact that you choose not to charge for your time does not make your >time worthless. The value your voluntary efforts add should be assigned >due compensation even if you choose to waive it. > >The failure to take such contributions into account is one of the most >serious flaws in all current economic paradigms. I think this will become >more apparent in decades to come, as old concepts of `work' and `jobs' >obsolesce. IMHO, another failure is that not all compensation can be expressed in money. Feeling good about making a contribution is an example. Another is the "guaranteed" place in heaven for the suicide bomber. ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re:
by Rich Burroughs 17 Dec '03

17 Dec '03

At 08:37 PM 4/4/96 -0800, you wrote: >At 11:52 PM 4/4/96, AndrÈ Gil wrote: >> unsubscrive * agil.home(a)mail.telepac.pt [snip] >What the hell is going on? We seem to be under attack by foreigners. > >--Tim It's hard to understand. I can't velieve it. >Voycott "Vig Vrother Inside" software! >We got computers, we're tapping phone lines, we know that that ain't allowed Rich ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb See my Blue Ribbon Page at http://www.teleport.com/~richieb/blueribbon New EF zine "cause for alarm" - http://www.teleport.com/~richieb/cause

1 0

Re: "Contempt" charges likely to increase
by Hal 17 Dec '03

17 Dec '03

I think Tim has hit the nail right on the head with this one. I have been quite appalled to read the various analyses on the net (URLs not handy, but they have been posted here before I think) which conclude that compelled disclosure of a cryptographic pass phrase would probably be OK despite the Fifth Amendment. This seems to be an area where there is widespread agreement based on recent precedent. In the past, when crypto was not widely used, the issue didn't really come up very often. If a criminal chose to write incriminating information diary or financial ledger, and it could be found in a search, then it was used as evidence against him. At one time not even this was accepted but it has been this way for many decades. But crypto, if it becomes widely and routinely used, raises the bizarre spectacle of criminals commonly being forced to produce information which will then be used against them! Imagine if they'd found a file by OJ on his computer, encrypted, which he refused to decrypt. The judge could actually jail him for contempt until he revealed the password. This could become a routine occurance in many kinds of crimes which rely on private records as evidence. Currently, I don't think the subpoena power is widely used in criminal cases. Rather, the prosecution relies on search warrants and the element of surprise to prevent the destruction of incriminating records. I think there is recognition that in practice subpoenas would not be effective, that the records would not be produced, even if contempt charges were the result. If so, then probably the tactic will not be that effective in forcing people to reveal cryptographic keys. Maybe if the jails start filling up with defendants who refuse to go along with such order, judges will decide that effective secrecy of records is now the new status quo. The law will then once again extend the Fifth Amendment privileges to personal papers. Hal

2 1

Re: Fascinating troll with forged newgroups
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Bill Stewart wrote: >At 03:00 AM 4/4/96 -0800, you wrote: >>Looks like the Nazis forged newgroup messages for rec.fag-bashing, >>rec.org.kkk, and 100 RFD'd groups in order to get their little messages >>across. >> >>How entertaining. What a marvelous new form of net.vandalism they've >>discovered. Or is this not new? > >Oh, no, this sort of thing is not new. It happened more before the >Great Renaming, but it's not new. The other possibility is it's troll >trying to make it _look_ like the Nazis did it. The latter is most likely the truth given that Bnai Brith and the ADL and the Simon Wiesenthal centre all have plenty to gain financially by claiming that the internet is full of neo-nazis.

1 0

Re: More visprint stuff
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

>An alternative would be to supply a distinct name for each octet. Hashes >could >be displayed and verified something like: > >Frog Lizard Snake Tyranosaur >Cat Hat Rat Chair >Star Moon Sun Earth >Lincoln Washington Clinton Kennedy > >Ideally, there would be minimal confusion in the set of images/objects/names >(to avoid the "is that a Tyranosaur or a Lizard?" type questions.) Why not create a list of of syllables (256 would work nicely) designed in such a way that when combined together at random, they would always form a pronounceable (but otherwise nonsense) word pair? These words would be guaranteed to be as unique as the fingerprint, fairly easy to remember, and a perfect icebreaker at parties. (Imagine the reaction you would get if you sidled up to someone and tried "SOBgoFALpinHOGmiDOwop PORtudeINfoGLOPsabRIvar" as a pickup line.) The challenge to this approach, of course, is to come up with 256 reasonably distinct syllables. Jonathan Wienke P.S. AOL's send mail software is a wothless piece of ****. P.P.S. These "unsubrscive" pea-brains all need one of those Louis Freeh-style leather belts with their names embossed on the back in BIG letters...

1 0

Re: "Contempt" charges likely to increase
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:26 PM 4/5/96, Bill Frantz wrote: >At 11:57 AM 4/5/96 -0800, Timothy C. May wrote: > >>If the secrets or assets _cannot_ be retrieved--a scenario which is >>possible, if the protocol is so written (clauses for court action)--then >>contempt charges are meaningless and would not stand, IMNALO. > >The Black Unicorn indicates that if the reason the secrets _cannot_ be >retrieved is because they are in a jurisdiction which refuses to reveal >them when the owner is under compulsion, the owner can still be punished >for contempt (A contractual situation). Far be it from me to question the legal advice BU/Uni/Dirsec provides, but I think all contempt charges have a kind of eventual expiration. That is, after some number of months or years have passed and it becomes apparent the incarcerated person simply will not or cannot comply, release is ordered. It has happened in most cases of reporters, and it happened with Rebecca Morgan (who never did tell the court where her daughter was, though it later came out that her daughter was probably in Australia with grandparents). Jail term for contempt of court has certain resemblances to trial by ordeal: if after some period of time of ordeal one has not talked, the ordeal is over. If the court is shown that the protocol makes it impossible for the person to retrieve the material, especially that there are no ways to circumvent the contract, then the court may still jail the person for a while "just to make sure" that there is no means of circumventing it. If and when it becomes apparent to even the most skeptical that the material has been lost, or is unretrievable, then I think the contempt jailing must end. When nothing is served by furhter jailing, except punishment, then the reason for the contempt action is ended. Or so it seems to me, from what I've osmosed about the law. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Wired didn't like this one....
by rah＠shipwright.com 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: rah(a)shipwright.com (Robert Hettinga) Mime-Version: 1.0 From: rah(a)shipwright.com (Robert Hettinga) Date: Thu, 4 Apr 1996 21:21:19 -0500 Precedence: Bulk To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: Wired didn't like this one.... -----BEGIN PGP SIGNED MESSAGE----- ...but I like it. Said it was a little too "fast paced". (For WIRED???) I'm starting over on another, so you guys might as well see this one... It *was* supposed to go into their Idees Fortes (Or, as my brother Mike in Albuqerque says, in his best Jose Jimenez, "Stron' Gideas") section. Now something else is, once I write it. Feh! It's 800 words. Exactly. Cheers, Bob Hettinga ------------------------ Geodesic Capital? Robert Hettinga I've just finished a bit of anonymous consulting on the net for an anonymous client, being paid, of course, in anonymous digital ecash(tm). I could just store it, offsite even, anonymously. But, I'm saving it for that special retirement habitat in the Belt ("Gerry's Habitats, Inc.: Pie in the sky, Nano-Built(tm) *before* you die!"). I have to *invest* it somewhere. I buy a page of mutual fund reccomendations from a LipperBot(tm). In my case, I just want to buy a broad market index, say, the (ahem) Hettinga Million(tm), and shop around for the fund server which approximates closest the HM's price over time. I link to the server, and buy anonymous bearer certificates for that server's HM fund. Later, when I cash in my certificates, I have enough appreciated capital to buy the custom Bernal sphere of my dreams. Of course, if my tolerence for risk is higher, I could buy shares from a fund manager (bot or otherwise, no way to tell with anonymous cash markets) with a hot hand for picking stocks. OK. Say I don't actually *save* money. I'm someone who borrows money for very short term "assets" like resturaunt meals, and pays the incurred debt off over the long term at some userous interest rate. How do I do this? I issue a personal digital bearer bond for the amount of the transaction. All I need is someone to underwrite the risk. Fortunately, I always have an efficient real-time market to auction it into, one that always knows my payment reputation, thanks to all those money-bots in the ubiquitous network. Voila'! Bring on the chateaubriand for one, waiter, and don't spare the bearnaise, all this thinking about money's made me hungry. What we're talking about here is nothing new, of course. We've had trade ever since we've had artifacts. The ancient "red-paint" culture was just a trading network which ran around the north Atlantic from New England to as far as Ireland. So much for the "New" World. The oldest surviving Babylonian money is a piece of clay saying "three cows" wrapped in a clay "envelope" saying something like "three cows, payable on demand, so say I, (signed) Joe Nebbuchenazzar". This happened shortly after writing was invented, which was actually invented for *accounting*. Mechanical signatures like chops and seals have been around since. Digital signatures and bearer certificates are just a new implementation of some *very* old stuff. Ornate paper certificates, representing shares in companies, or actual stuff, was physically traded for other ornate paper certificates (cash), or actual stuff, at places like the famous buttonwood tree on Wall Street. Pretty soon people didn't have to be there to trade. We built fast industrial communications (staged horsemen or coaches, then ships or trains, then telegraphy, then telephony) but we still had slow switches (people), so we had to build all the communication/organization/market hierarchies we know and love today. In addition, the power of the state (another industrial communication heirarchy) provides a sizable argumentum ad bacculum for people who repudiate trades. If you don't pay, I throw you in jail. Like every thing else, Moore's law changes that. Proportionately, semiconductor switches get more and more cheaper than lines, so the telephone network is no longer a hierarchy. Nodding to Buckminster Fuller, Peter Huber called it the "Geodesic Network", the title of the 1986 government report he wrote describing it. Ironic. I'm here saying this in a magazine founded by deciples of Stwart Brand, himself a one-time Fullerite. All threads lead to Bucky. When you combine a geodesic network with strong cryptography, you get a geodesic economy, which needs geodesic capital. Just change the size of players in either equity or debt scenario, and you're looking at what any large business organization does today. The only thing you're missing is how to deal with non-repudiation. If the state can't tax transactions or financial assets because strong crypto makes them all invisible, states can't exist, much less "bacculize" very well. The solution is the same it ever was: reputation. J. Pierpont Morgan said, when hauled before Congress one afternoon, "Character, sir. I wouldn't buy anything from a man with no character, even if he offered me all the bonds in Christendom." In a geodesic economy, reputation is abstracted to keys, not people. Geodesic capital scales up to bigger stuff than we can do now. A chaotic hoarde of autonomous money-bots swarms on the minutia of the necessary financial complexity. It also scales *down* as processor prices fall. Real time, MicroMint(tm) cash-on-the-router-head auctions for packet switching, anyone? -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMWR/ovgyLN8bw6ZVAQHCkQP7BPmSNibfRQLeZETvRkUVGJdPB0WOYrTM yU33wwqDPBEcwfYLgX4oBcAfHv/Kfvr1vH4bBTioEVyanVDtJLt9KL/62kn+Ot+/ BLDdBM6Km1R/xRD9xnvQd5Kyz2INQCmNU7ZJk3BQpK484V74aW6We155fH2ovjr3 TgQ6mYMe7rs= =GVNA -----END PGP SIGNATURE----- -------------------------------------------------- The e$ lists are brought to you by: Making Commerce Convenient (tm) - Oki Advanced Products - Marlboro, MA Value-Checker(tm) smart card reader= http://www.oki.com/products/vc.html Where people, networks and money come together: Consult Hyperion http://www.hyperion.co.uk info(a)hyperion.co.uk See your name here. Be a charter sponsor for e$pam, e$, and Ne$ws! See http://thumper.vmeng.com/pub/rah/ or e-mail rah(a)shipwright.com for details... ------------------------------------------------- --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

RIC_odj
by John Young 17 Dec '03

17 Dec '03

4-5-96. TWP: "At the Justice Dept., Big Government Keeps Getting Bigger" In the tug-of-war over downsizing the government, Republicans and Democrats still willingly take out the checkbook when crime is the issue. Over the past 16 years, a time in which both parties have controlled Congress, Justice's budget has grown by nearly 600 percent and its work force has expanded from about 55,000 employees to 94,000. Justice is only one part of this phenomenal crime- fighting growth. Where the federal government once relied mostly on the FBI, the federal buildup is creating several large police agencies. More than 41,000 criminal investigators now work for 32 federal agencies. "It has grown like Topsy," says former AG Griffin B. Bell. "What I worry about is that people with a badge many times can't manage power." Senior members of Congress with oversight responsibility for DoJ say they are considering ways to consolidate the government's law enforcement agencies under a more centralized command. Among the models under review are the JCS, which aerosols DoD hogstench, and the DCI, who perfumes spy pew. RIC_odj

1 0

Was Cohen the first?
by Michael Wilson 17 Dec '03

17 Dec '03

I ran across the following article, and it set me to wondering--did Dr. Cohen actually publish on 'computer viruses' before anybody else? He continues to use it as the bedrock of his reputation capital, so if this pre-dates his 'seminal' article, please let me know. Included message: For Liz Bass or Reg Gale Discovery 9:31 AM Friday, April 5, 1996 By Lou Dolinar This is still my favorite computer story. I'm not saying it was the first piece ever written about computer viruses, but I won't say that it isn't. I still have the original, dated April 16, 1985. In some ways I wish I hadn't written it, because it was posted and reposted on bulltetin boards all over the U.S., and seems to have subsequently inspired a whole generation of virus writers. Note to kids: back then, most computers didn't have hard disks, and started up from floppies, hence floppy based viruses were a big deal. As usual, The Hacker wasn't paying for his midnight phone call; he had stolen the line from one of the long distance phone services. What's up? I asked. The 17-year-old snickered. Doom was ahead for all Apple II owners. "Don't engage in casual disk-copying with strangers," he said. "You might catch an operating-system virus." Now the hacker has a pretty hefty national rep in the computer underground, so when he talks about this crazy stuff, it's worth listening. I've seen whole collections of pirated games software bearing his nom de hack, and his black-bag jobs on mainframes would curl your hair. In case you're not familiar with software piracy, manufacturers build protection schemes into their programs to prevent people from making illegal copies and siphoning their profits. Dedicated pirates like my friend spend hours, sometimes days, cracking these schemes then release them, illegally, free, to the public over a network of electronic bulletin boards that can be reached with a phone, a computer and a modem. The Hacker always imprinted his name, electronically, on the game that he cracked ("Cracked by The Hacker, July 4, 1978"). And therein lies this tale. A couple of years back, he recalled, some teenagers in the Milwaukee area stole his stolen programs and released them under their own names. Why bother, you ask? Because the hacker whose name the stolen program bears receives the "credit" for having cracked the piracy protected program and, thus, is viewed with some degree of appreciation by similarly larcenous wizards in the computer underground. The Hacker was outraged and plotted a diabolical revenge: A wizard of code, he constructed ted what he calls an "operating system virus" for the Apple II computer. The operating system, you may know, loads into the computer before the program and controls the functions of the computer. The Hacker modified the operating system erase whatever disks were in the computer after they had been used 25 times. Not only that, but the "virus" would attache itself to any other discs that were loaded during the particular session of computer use. Thus,k if you played a "virus" carrying pirated game, and then went on to use your $495 word processor and $795 data-base program, these too would be infected and would cash after their 25th use--and in the meantime, they would be spreading the "virus." Like any disease, then, Killer-DOS, as The Hacker dubbed it, has a latency period, which allowed it to spread to other "victims" He inserted it into a recently cracked games program, put it on an electronic bulletin board frequented by the Minneapolis crowd, and sat back to watch the fun. A couple of months later, whole libraries of disks were begin wiped out as the "disease" spread. Now Killer-DOS is common knowledge in the underground, it it wasn't the reason The Hacker called. It seems he had, in a frenzy of anti-social behavior, created a particularly virulent form of Killer-DOS that didn't crash until it had been loaded 150 times---with a longer latency period, the potential number of victims rises geometrically. But conscience prevailed. The Hacker decided not to release the bug. Then, however, just like the Andromeda Strain, the bug got loose anyway--the Killer-DOS disk got mixed in with "healthy" programs, disks that he has been handing out for the last couple of years and are now all over the country. So if you find a worm in your Apple, don't say you haven't been warned.

3 2

NSA Oil
by cpunk＠remail.ecafe.org 17 Dec '03

17 Dec '03

NYT, 5 April, 1996 Pentagon Spy Agency Bares Some Dusty Secret Papers By Tim Weiner Washington, April 4 -- The National Security Agency, the Pentagon spy service that eavesdrops on global communications, said today that it had declassified more than 1.3 million pages of secret documents, some from before World War I. All the declassified material is more than 50 years old, older than the agency itself, and represents a tiny fragment of the billions of pages of Government documents that have been kept secret on the grounds that their release would damage national security. Agency officials were at a loss to explain why these documents, now at the National Archives, had remained secret for so long. Among the documents declassified today is a January 1919 memorandum from CoL A. W. Bloor of the Army, a commander in the American Expeditionary Force in France, explaining the origin of the "code talkers," American Indian soldiers who spoke in their native tongues to confound enemy code breakers in World War I and World War II. Their languages were largely unwritten and largely unstudied by foreigners, and so constituted an instant code translatable only by the speakers. "The German was a past master at the art of 'Listening In,' " on radio transmissions, the memorandum says. "It was therefore necessary to code every message of importance and coding and decoding took valuable time." Then, Colonel Bloor wrote, he remembered that he had a company of Indians in his regiment who among them spoke 26 languages or dialects, and that "there was hardly a chance in a million" that the Germans could translate them. David Hatch, the National Security Agency's historian, said Choctaws, Navajos, Comanches, Winnebagos, Pawnees, Kiowas and Cherokees served as code talkers. In World War II, he said, the Marine Corps used more than 400 Navajos as communicators in the Pacific campaign. That story has been popularized by Hollywood films, documentaries and books. Mr. Hatch said he could not explain why the documents stayed secret for so long. The agency's archives run into the billions of pages, and the agency, loath to disclose anything concerning codes, has only begun to consider declassifying documents in the past four years. "We have so many pages and we've only been at it for a few years," Mr. Hatch said. "The interesting thing to me is that this is coming out. What was known only to insiders is now becoming known to historians and outsiders." ----- WSJ, 5 April, 1996 Secret Cables of '43 And the Hiss Case May I offer a distinction that may clarify a point in Eric Breindel's March 14 editorial-page piece "New Evidence in the Hiss Case?" The matter deals with the newly released Soviet cables dated from 1943 to the early Cold War, and intercepted and solved by the National Security Agency and its predecessors in a project called Venona. As Mr. Breindel states, "The single most interesting document in the new Venona batch is a March 30,1945, Washington-to-Moscow report on an agent whose cover name was 'Ales.' The cable was decrypted on Aug. 8, 1969, and the NSA glossary ... explains that 'Ales' is 'probably Alger Hiss.' " A distinction must be made between the test of the cables and the identification of the individuals mentioned in the text only by code name. The cables were cryptanalyzed. The internal cross-checks in this work make the likelihood of their being incorrectly solved all but zero. This means that the code names are almost certainly right. But the determination that a particular code name represents a particular individual did not come from cryptanalysis. It came from FBI field investigations. I have no reason to question their accuracy, but they stand on a different basis than codebreaking. This is why NSA qualified the Ales=Hiss identification with a "probably." David Kahn, Great Neck, N.Y. (Mr. Kahn was scholar in residence at the National Security Agency in 1995.) -----

1 0

RC4 improvement idea
by Jack Mott 17 Dec '03

17 Dec '03

I got a paper from the cryptography technical report server "http://www.itribe.net/CTRS/" about a weak class of RC4 keys. The report said that with some keys, it was possible to predict what some parts of the State-Box would be. I was thinking of a way to fix this, and had this idea: do some sort of hashing function with the key that derives a number between 55 and 500 or something like that, then scrabmle the S-box that many times. In this way, the chances that the State-Box will have any correlation becomes extremely small. I think it is 1/125 to begin with anyway, so this would make it around 1/(125*NumPasses). And since the exact number of passes is a function of the key, the cracker won't know how many times it went through. I tried this out and having 1000s of passes doesn't effect the randomness of the state-box in any negative way, possibly it makes it more random? If anyone has any thoughts I'd love to hear them. -- thecrow(a)iconn.net "It can't rain all the time"

1 0

Re: Blue Water spooks
by nyap＠mailhub.garban.com 17 Dec '03

17 Dec '03

> Have the Chinese turned their thought towards cryptography, > or cryptanalysis yet? If so, I suspect the answer is > yes, If not, then the answer is a definate No. > > The Chinese Intelligence Service traditionally has > not looked outward, preferring to ply its trade domestically. > That said, the earliest extant text on espionage is Chinese. In addition, (if I remember correctly from _The Puzzle Palace_), a person who was heavily initially involved in the formation of NSA also helped establishing the Chinese Intelligence Service. Also from the same book, in the US has set up, with Chinese approval, a sigint shop within China. This was done to sigint the Russians. With the tensions between the US and China now, I'm not sure whether they closed shop or not.

1 0

"Contempt" charges likely to increase
by tcmay＠got.net 17 Dec '03

17 Dec '03

I almost titled this thread "'Contempt' charges likely to increase in popularity," but I felt the "popularity" would draw comment. By "popularity" I mean amongst judges and law enforcement. Many of the proposals here and in related discussions of offshore asset protection posit the following situations: * Alice places a copy of her key, or secret-shared parts of her key, in a location not reachable by subpoena. (This might be via strong crypto, a la mixes and pools, or just in a jurisdiction which historically and typically does not honor U.S. subpoenas.) * Alice deposits some fraction of her assets in accounts in jurisdictions which are friendly to such purposes. (Either "tax havens" or "asset protection havens," such as are described in various books and seminars.) * Alice receives information from a witness or source in a criminal case. She declines to say who this source is. Depending on the "shield laws" (about which I'm no expert), she may be held in contempt unless she reveals this information. (Side Note: I don't believe the law should make the distinction it has made between, say, Alice B. Toklas, Reporter for the "Washington Post," and Tim May, reporter for the "Cypherpunks" list; the law seems to create a distinction between "the press" and the rest of us. On what basis?) * Alice places her child in the hands of someone known only to her, e.g., to prevent the child from being given visitation rights by a spouse. (This last example is of a real one, based on the Rebecca Morgan case. The other examples are real, too, though not necessarily associated with a particular case.) In these cases, Alice has a secret of some sort and says "nyah nyah nyah" to those seeking the secret. With strong crypto, such situations are likely to become more common. The courts know that Alice can in fact retrieve the secrets, the funds, the child...and the courts know that only a "contempt of court" decree will serve as the lever to pry out this retrieval. What about the Fifth Amendment? Scholars are addressing this issue of compelled disclosure of cryptographic keys. Note, of course, that diaries, business records, papers, and, indeed, the entire contents of a putative crime scene are accessible to crime investigators and the legal system. (Whether giving up a key constitutes "testifying against one's self" or not is undecided, so far as I know. My own inclination is that it will be decided to be no different than the key to a locked diary--by itself, it is not self-incrimination.) That the key is _stored_ someplace else (the escrow agent, either in the country or outside the country) makes the "cannot be compelled to testify against one's self" interpretation even more of a reach, in my non-lawyer opinion. So, I see a rise in the use of "contempt" charges. Contempt charges have a kind of time limit, in practice, and there is a common interpretation that a person may be jailed on contempt charges so long as there is likelihood that she will eventually reveal the information sought. (Reporters have been jailed for more than six months, and I recall that Rebecca Morgan was jailed for a couple of years for refusing to tell the court the whereabouts of her daughter...) In short, "If you can retrieve the information or assets we order you to, and don't, then you'll be held in contempt of court until you do." If the secrets or assets _cannot_ be retrieved--a scenario which is possible, if the protocol is so written (clauses for court action)--then contempt charges are meaningless and would not stand, IMNALO. Legal students out there might find that specializing in this area of law brings in more clients in the coming decades. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

rc4 weak keys fix?
by Jack Mott 17 Dec '03

17 Dec '03

I got a paper from the cryptography technical report server "http://www.itribe.net/CTRS/" about a weak class of RC4 keys. The report said that with some keys, it was possible to predict what some parts of the State-Box would be. I was thinking of a way to fix this, and had this idea: do some sort of hashing function with the key that derives a number between 55 and 500 or something like that, then scrabmle the S-box that many times. In this way, the chances that the State-Box will have any correlation becomes extremely small. I think it is 1/125 to begin with anyway, so this would make it around 1/(125*NumPasses). And since the exact number of passes is a function of the key, the cracker won't know how many times it went through. I tried this out and having 1000s of passes doesn't effect the randomness of the state-box in any negative way, possibly it makes it more random? If anyone has any thoughts I'd love to hear them. -- thecrow(a)iconn.net "It can't rain all the time"

1 0

Re: unsubscrive * Peter.Posch@koeln.netsurf.de
by David Loysen 17 Dec '03

17 Dec '03

At 02:33 PM 4/4/96 -0500, you wrote: >On Thu, 4 Apr 1996, Peter N. Posch wrote: > >> unsubscrive * Peter.Posch(a)koeln.netsurf.de > >Why don't we just patch Majordomo to recognize "unsubscrive", >"unsuscribe", "unscribe," and "take me off this fucking list" as all being >equal to "unsubscribe"? > If these people had sent their messages to majordomo that would work.

1 0

Re: "Contempt" charges likely to increase
by Duncan Frissell 17 Dec '03

17 Dec '03

At 11:57 AM 4/5/96 -0800, Timothy C. May wrote: >So, I see a rise in the use of "contempt" charges. Contempt charges have a >kind of time limit, in practice, and there is a common interpretation that >a person may be jailed on contempt charges so long as there is likelihood >that she will eventually reveal the information sought. (Reporters have >been jailed for more than six months, and I recall that Rebecca Morgan was >jailed for a couple of years for refusing to tell the court the whereabouts >of her daughter...) Hence the proper approach which is to constantly demonstrate your contempt for the court. Daily (hourly) phone calls, faxes, email, physical letters going on in boring detail all the reasons that you have for never purging yourself of the contempt. Logically, that should shorten your imprisonment but in practice... Obviously offshore key escrow facilities should have provisions similar to those in Foreign Asset Protection Trusts (FAPS). For example (from a recent non-fiction work on FAPTs written by one of the greatest minds of his generation): ******************* Duress Provisions The trust document should also contain language that basically says, "The Trustees should not obey any instructions that anyone else gives them under the orders of any court that has no jurisdiction over them." You see, a foreign-based trust is not under the jurisdiction of a court in any other country. A court can only order people to do things if it has them under its physical control. For example, a German court cannot send the police to Bermuda or to the Channel Islands to force your trust's trustees to transfer trust assets to the court for payment to creditors. What creditors in a German court will try to do in such cases is to find someone in their jurisdiction who has some powers over the trust. They then order this person to direct the Trustees to cough up the trust assets. A duress clause frees the Trustees from any obligation to obey instructions caused by orders from a German court. It is a powerful method of protecting your trust from the asset grabbers. But, you may ask, "What if a persistent creditor manages through some miracle to get an order against the trustees from a court in the foreign jurisdiction where the trust is located? That's easy. You include "flight provisions" in your trust. Flight Provisions You know that German courts or those of any other country will have no jurisdiction over your offshore trust assets. But what do you do if a really dedicated creditor tries to pursue your trust in the courts of the trust's home jurisdiction. Flight provisions take care of this situation. These provisions will require that the location (situs) of either the trust or the trust assets (or both) be changed automatically, in the event that creditors move against your trust in its home location. So even if they do manage to get a court order against your trust, the trust will have been moved to another jurisdiction. Your creditors will have to start all over again. It is important to realize that having a "flight" clause in your trust is no guarantee that the trust will successfully escape. The trust and its assets must be moved in time. It is possible that the trustees will fail to act in time and your trust may be frozen in its foreign jurisdiction. These provisions do add an additional layer of protection, however. If you do run into financial problems, you may move your trust in advance of need -- before any lawsuits are filed. You can also protect yourself further if your investments are physically located in a third jurisdiction -- neither in your country of residence nor in the trust jurisdiction. Trustee Switching Provisions In addition to moving the trust itself, you may also want or need to change Trustees. Trustee switching provisions give power to both the Trustee and the Trust Protector to remove Trustees and name new Trustees. For example, if Trustees in one country come under court order to relinquish the trust's assets, those Trustees can be removed and replaced with new Trustees, who are not affected by the court order. ********************** DCF

1 0

MPI10.ZIP RELEASED
by dave.hodgins＠westonia.com 17 Dec '03

17 Dec '03

ÛßßßßßßßßÛ Original From: DAVE HODGINS Û CARBON Û To: ALL Û COPY Û Date/Number: 04/05/96 - Not Yet Posted ÛÜÜÜÜÜÜÜÜÛ On: WESTONIA - 2513 - Public-Key Encryption and Distribution Echo ----------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- I've written an interface for dos based mail programs and pgp. The interface provides menu selection for various pgp functions likely to be used when writing email, and selection of keys to be used, from a list of the keys in your keyring. The program is similar in function to John Schofield's ez-pgp. The program has been tested under win95, and dos 6.22. I'm uploading the file to the westonia bbs, and will email a copy to anyone who requests it. Regards, Dave Hodgins. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMWWnkIs+asmeZwNpAQGyEwf/YGWfkuWVcEzISpnin3z24WJyqzq0e48B VZihLsKsdJ+BL+VNvBoejvpIxEZM2dq2VyycrKFks7TK8HSjUlcCiv4prSGUQqsB K1PKdJPpUyT6f1EHdHz3UllBeIGjR8mjgmGRV86ezUC+Y2lHmWvqlWT1YlHPwIwp 1LnQL9aIzFkz1WaFvzC9O19dzKqT+FMIMS2QtVarHCcbWlmWYwgRuPihNngciXKs tKChLjeh88/DlItGm8dhu2iPoGzb4LpPDBuUrJZB5hPxaBJjdgugiNE/CY+Z9Fhj E02Ji2ZraFrXi6nOCCNnIq97PHf/aZlDn9CrSZyOLBkO2hx7WXdUnQ== =8osk -----END PGP SIGNATURE----- cc: ALL in 5711 on WESTONIA CYPHERPUNKS(a)TOAD.COM in 0001 on WESTONIA --- þ RM 1.31 0820 þ Internet:Dave.Hodgins@Westonia.com Rime->1347 Fido 1:250/636

1 0

[OFF-TOPIC] Re: Fwd: Anonymous code name allocated.
by Peter Trei 17 Dec '03

17 Dec '03

> From: JonWienke(a)aol.com [I know this is off-topic for coderpunks, but some of the discussion is happening here] > [The following has been censored to protect the guilty.] > > >Subj: Anonymous code name allocated. > >Date: 96-04-02 23:37:10 EST > >From: daemon(a)anon.penet.fi (System Daemon) > >To: jonwienke(a)aol.com > > > >You have sent a message using the anon.penet.fi anonymous forwarding > service. > >You have been allocated the code name anXXXXXX. > >You can be reached anonymously using the address > >anXXXXXX(a)anon.penet.fi. > > > >If you want to use a nickname, please send a message to > >nick(a)anon.penet.fi, with a Subject: field containing your nickname. > > > >For instructions, send a message to help(a)anon.penet.fi. > > I tried sending a test message to the address indicated, and received it back > a day later, so sending email to this address does reach me. The funny part > is that I have never (to my knowledge) had any communication with > anon.penet.fi prior to receiving this email. > > Questions: > 1. How do I use this to SEND messages anonymously? Having an email address > with no obvious link to my identity is cool, but I would like to be able to > send as well as receive. I sent email to help(a)anon.penet.fi, but have > received no response yet. > > 2. Why was I chosen for this? How did anon.penet.fi find out my email > address? Is the NSA trying to lull me into a false sense of security in the > hope that I will use this account to violate ITAR? > > 3. Has anyone else on this list received unsolicited remailer accounts? > > Jonathan Wienke > --------------------- > Forwarded message: > From: daemon(a)anon.penet.fi (System Daemon) > To: jonwienke(a)aol.com > Date: 96-04-02 23:37:10 EST > > You have sent a message using the anon.penet.fi anonymous forwarding service. > You have been allocated the code name an573530. > You can be reached anonymously using the address > an573530(a)anon.penet.fi. > > If you want to use a nickname, please send a message to > nick(a)anon.penet.fi, with a Subject: field containing your nickname. > > For instructions, send a message to help(a)anon.penet.fi. While I'm not up on all of the wrinkles, I've seen this reported as an attack on the penet anonymous mail forwarder and news poster. An attacker forges email in your name, requesting an anon-id. The server creates one, and sends the report both to you, and to the attacker's address. If you try posting thru the penet server, the post gets anonymized using the anon-id the attacker created. The attacker can now link the anonymized post to your True Name. If you ever intend to use the penet anon server, you should write to the server administrator, requesting to have the id the attacker created deleted, and the create a new one, with password protection. (I don't use penet, so I don't know the details). Peter Trei ptrei(a)acm.org

1 0

unsubscrive
by robalo 17 Dec '03

17 Dec '03

unsubscrive * robalo(a)elogica.com.br unsubscrive * robalo(a)elogica.com.br unsubscrive * robalo(a)elogica.com.br

1 0

PICS required by law
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

What was I saying a while back about mandatory PICS through liability? As I recall, various people such as TCMay were saying that it wouldn't happen. Looks like I need to get out that article against PICS that I was working on and rewrite it a bit. I would remind people that PICS allows parents (or whoever else is holding the reins, such as an ISP - or the Chinese firewall) to filter on such content as material (including scientific studies) stating that a given illegal drug is not as harmful as some would claim, any idea futures market - even a simulated one, on homosexual content separately from heterosexual, and against criticisms of religions (such as Scientology). To their credit, the ACLU (in the CDA court case) has stated that they will not put a PICS rating on their web site, even if it contains "indecent" or allegedly "harmful to minors" material. I agree strongly with their position. -Allen Computer underground Digest Wed Mar 27, 1996 Volume 8 : Issue 25 ISSN 1004-042X [...] Date: Thu, 14 Mar 1996 11:47:33 -0800 From: telstar(a)WIRED.COM(--Todd Lappin-->) Subject: File 1--CONGRESS: Online Parental Control Act of 1996 [...] Maintains the Communications Act of 1934's legal defenses against liability for people who choose to give parents technology that: 1) blocks or restricts access to online materials deemed obscene or harmful to minors, and 2) restricts access to such materials through adult access codes or credit card numbers; Adds two new defenses: 1) the use of labeling or segregating systems to restrict access to online materials, such as systems developed using the standards designed by the Platform for Internet Content Selection project (PICS), and 2) the use of other systems that serve the same function of the other defenses if they are as reasonable, effective, and appropriate as blocking, adult access code, and labeling technologies; and Protects providers or users of interactive computer services, information content providers, and access software providers from civil or criminal liability under state law for making available to minors materials that are indecent or harmful to minors if they take actions to qualify for the defenses mentioned above. [...] PICS is a cross-industry working group assembled under the auspices of MIT's World Wide Web Consortium to develop an easy-to-use content labeling and selection platform that empowers people worldwide to selectively control online content they receive through personal computers. The Recreational Software Advisory Council recently announced that it will soon implement a detailed voluntary ratings system, using PICS standards, that will let computer users filter out varying degrees of sex, violence, nudity, and foul language. Companies and groups supporting PICS include Apple, America Online, AT&T, the Center for Democracy and Technology, CompuServe, IBM, France Telecom, Prodigy, Providence Systems/Parental Guidance, Surf Watch Software, and Time Warner Pathfinder.

2 1

myths of software "standards" (long)
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

this is an essay on some ideas that have been swimming around in my head about "software standards" and the various pervasive myths associated with them, unleashed on this motley crowd for your viewing pleasure or distaste. there is tremendous amount of angst and anguish spent on software standards by designers. I'm going to try to point out some of the ways that software standards are fundamentally different from hardware standards and the implications this has for their use. with a hardware standard, we are talking about "atom configurations". if a given computer is manufactured in a given way, there are zillions of standards that are implicit in the design. there is a standard in the way that cards interface to the bus, in the ways that chips fit in sockets, in screw sizes, component sizes (such as the power supply), etc. obviously it is virtually impossible to refit a component that does not adhere to some "physical configuration standard". if the power supply does not have the right footprint, good luck filing down the edges to the point that it fits. <g> another point to make about physical components is that it is possible to "own" them. in our system, we are even allowed ownership of the abstract standards used to design their atomic configurations; we call these things "patents". however, notice that software standards are sometimes thought of in the same way as hardware standards. I want to make a point about how fundamentally different they really are. == software standards ultimately govern the "configuration of bits". to borrow Negroponte's lovely distinction, bits are far different than atoms. foremost of the difference is what might be called the fundamental "malleability" or "fluidity" of bits in contrast to atoms. atoms are expensive to move around and to manipulate. bits can be moved around and manipulated at such an infinitesmal cost as to be almost free. here is the chief myth that I want to address, and I'm going to borrow web concepts here especially, because the public is misapplying the concepts of hardware and software standards especially in this area. now suppose that Netscape comes up with their own unique HTML "extensions" which they have done. if you want to think of this "standard" in the old paradigm of atoms that are expensive to move around etc., then what netscape has done is pretty outrageous. one might assert, as the press and public tend to do, that Netscape is trying to "own" the standard and "impose" it on the rest of the world, so that they can "control" it. but what is this "imposition"? if they were saying that particular hardware components had to be designed in their way, indeed this would be an onerous and suspicious demand. it would be reminiscent of industry outrages like IBM's "microchannel" architecture. but the fundamental distinction here is that Netscape is *not* designing a standard that refers to atoms, but one that refers to bits. and standards that refer to bits have fundamentally different properties. first of all, if they are good standards, then it should be easy to manipulate the bits between the different standards, and the cost of doing so should be close to negligible. we are only talking about straightforward algorithms easily implemented by even 1st year CS students, typically. when you think about it, the concept that a company can "own" a software standard in the way that hardware configurations are "owned" is pretty obtuse and incongruous. because bits are so readily converted and manipulated, it actually becomes the case that companies that create bit standards are almost doing a public service in devising orderly systems of bit arrangements not previously established. if bits are interchangeable, then the key is to get them into an orderly form first, and then just twiddle them into the format that you want. == all this sounds a bit vague and nebulous but is extremely significant. it demonstrates how radically different the information revolution is from the industrial revolution. in the information realm, "interchangeable parts" takes on a whole new meaning. all that is necessary is that the bits be in some standard form to start, and then they can easily be transformed into some other form. a very important point to make is this: what becomes more valuable with bits i s *not* that everyone pick and agree on *the*same*standard*. this is applying "atom" type prejudice to a new problem. if everyone wants to have compatible hardware, then indeed we need to have the kinds of standards I described. but software (bit) standards work differently. you only want to have *any* kind of a standard that is well designed. you want standards that are not necessarily *universal* as with atoms, but instead are *orderly*. if they are *orderly* or "well designed", then it should be easy to convert any "bit configuration" standard to any other standard on the fly with algorithms. there is tremendous ranting and raving in the Web world about how the HTML standard is fragmenting because of Netscape etc., and there is so much angst about trying to devise a *single* cohesive, unified standard that "everyone" follows. people talk as if Netscape is trying to "hijack" the standard, when in my opinion they are performing a valuable public service of trying to hammer the bits into useful form. everything they have proposed could not be handled by the earlier standards-- and if it could have been, chances are they would have used that standard. a unified standard in software realms is a total fantasy to achieve, and in my opinion the dramatically wrong & specious goal. == instead, I taking into account the above ideas, what we need are a *variety* of different standards, all of them in themselves cohesive and fully functional, which can be *translated* readily between each other. the key goal is not *unified* standards that try to entail "everything", but instead collections of complementary standards that are in themselves nice unified "pieces" of the whole. (somewhat like original Unix design philosophy). the various image formats such as DVI, postscript, TIFF, etc. is an example of this. they all are decent standards for what they attempt to standardize, and it is silly to lament that there isn't a single image standard-- it misses the point. (one tricky thing with bit standards is the goal of trying to go "backward" in converting a very complex format into a simpler format. trying to have text-based web browsers with all the complex images and formatting out there is an example of this.) in other words, some people seem to imagine that in the future some massive HTML language is going to be devised that all browsers support. many web design discussions seem to implicitly talk as if this is the goal. instead what I imagine is that many different substandards will be devised, and will *continue* to be devised-- the point when there is a global, unified "web formatting language" will *never* come and this is an illusionary, impossible, and *unnecessary* goal. what we need are browsers that are extremely flexible and can support on-the-fly translation between different formats, and which try to support the capability that at any time in the future, someone may come up with a new language that could drive browser formatting and display characteristics. the idea of having different layers over the network, such as "conversion servers" which might convert between all the more common formats and requests, is another interesting idea to pursue. netscape 2.0 "plugins" are a first step in this direction. imho, the web of the future is going to have not one but a *zillion* different languages describing all of the data that is out there. the goal should not be unification under a single standard, but of ease of conversion between existing standards that are modular and complete in themselves. in this view, the complementing (not competition) of different formatting languages is glorious and to be encouraged, not something to be dreaded, avoided, and stamped out. the diversity and "complementarity" is the key to the power. == I've been making all my points relative to the Web, but I think the ideas apply equally well to *computer*languages*. there are all kinds of silly holy wars fought over about what are the *best* computer languages, and everyone that designs a new language seems to be implicitly trying to incorporate the features of every other language in existence and then some, i.e. a new "unified" or "complete" or "ultimate" language (I recall a long flamewar out in the newsgroups between Stallman, espousing Lisp, and Wall Perl fanatics). to me this is all ridiculous, because in the future the goal will be the ability to *convert* between languages in automated ways, such that the same problem can be automatically reformulated in another form to gain its particular idiosyncrasies. imho, new computer languages are going to be invented as long as human beings exist-- because what they really are is a "component library". for example, C is very low level but fast-- why can't I just convert my Perl code directly into C whenever I want to? or vice versa? in fact that is exactly what a compiler does, and I am suggesting that the compilers of the future will allow conversions between all kinds of languages, not merely a high level language to machine code. in this sense the idea of fighting over different languages as "ultimate" is ridiculous as the religious wars over who is the "one true god"!! all algorithms are in principle interchangeable, and I believe this theoretical concept will be increasingly applied directly in the future. == anyway, this is my contribution-of-the-moment in trying to dispel some of the "standards myths" that are extremely persistent out there esp. in regard to Web software and language extensions.

2 3

Spinners and compression functions
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

Since there has been a lot of discussion about spinners derived from various things (idle loops, video retrace, etc.) used as entropy sources, here is yet another idea. Run the spinner output through a PKZip type compression function, and then seed a PRNG with the output from that. This would provide a means of gauging the amount of entropy that has been fed into the PRNG, (count the bytes output from the compression function) which will allow the program to disallow any output from the PRNG until a sufficient amount of entropy has been fed into it. Even if there are correlations in the spinner data, (I know, that is obvious) by the time it has gone through the compression function and the PRNG, it should be cryptographically useful, especially if entropy from multiple sources (keyboard & mouse events, disk access times, network access times, etc.) is used to seed the same PRNG. Jonathan Wienke Political Rant: Re: e$ Signorage >And there I was thinking it was the right for Greenspan to sleep with any >unmarried woman on the eve of her wedding... Actually, that's "prima nocte" (Latin for 'bimbo eruptions" [:)] ) and the principal beneficiary is our beloved President...

2 1

Re: Was Cohen the first?
by tcmay＠got.net 17 Dec '03

17 Dec '03

Little CP relevance, except as re: a former (maybe current, but no longer actively participating) list member, so I'll be brief. At 4:24 PM 4/5/96, Michael Wilson wrote: >I ran across the following article, and it set me to wondering--did >Dr. Cohen actually publish on 'computer viruses' before anybody else? >He continues to use it as the bedrock of his reputation capital, so if >this pre-dates his 'seminal' article, please let me know. > >Included message: >For Liz Bass or Reg Gale >Discovery >9:31 AM Friday, April 5, 1996 >By Lou Dolinar > > This is still my favorite computer story. I'm not saying it was the first >piece ever written about computer viruses, but I won't say that it isn't. I >still have the original, dated April 16, 1985. In some ways I wish I hadn't ... Much work was done in the 70s on "worms," which are related to viruses. John Shoch (spelling may be wrong) at Xerox PARC developed a "worm" which propagated from machine to machine, circa 1974 (give or take a year). John Brunner immortalized this in "The Shockwave Rider," his 1975 novel in which uber-hacker Nickie Halflinger uses worms to disable Big Brother's panopticon network. Having said this, Fred Cohen deserves credit for seriously studying properties of replicating programs, including viruses. (And I believe he coined the term virus, and also showed how it differs from a worm.) I will make no particular claims about how _much_ credit he deserves, as this seems petty. Nearly all discoveries have precursors, of course. The work on worms clearly was a precursor. Also, general biological work on replicating patterns was already going on, and Richard Dawkins' "The Selfish Gene" had been published in the 1970s (and I believe the work on replicating information patterns--memes--was important). His views should be taken on their merits, not on whether or not he was the first to study viruses or replicating programs in general. As it happens, I find much of what Fred Cohen writes to be tedious and repetitive, but not because he has gotten "too much" credit for his early work. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: "Contempt" charges likely to increase
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:57 AM 4/5/96 -0800, Timothy C. May wrote: >If the secrets or assets _cannot_ be retrieved--a scenario which is >possible, if the protocol is so written (clauses for court action)--then >contempt charges are meaningless and would not stand, IMNALO. The Black Unicorn indicates that if the reason the secrets _cannot_ be retrieved is because they are in a jurisdiction which refuses to reveal them when the owner is under compulsion, the owner can still be punished for contempt (A contractual situation). I don't know what would happen if they _cannot_ be retrieved for technical reasons. If a communication key was aggreeded to be DH exchange and then discarded, I would think this would be analogous to asking for a document that was destroyed (before the subpoena) as part of a policy of destroying obsolete documents. ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: e$ Signorage
by John Young 17 Dec '03

17 Dec '03

Perry is closest to Webster's Third New International Dictionary: ----- seigniorage or seignorage also seigneurage [ME seigneurage, fr. MF, right of the lord, esp. to coin money, fr. seigneur + age] 1: a government revenue derived from the manufacture of coins that is calculated in the U.S. as the difference between the monetary and the bullion value of the silver contained in silver coins disregarding any alloy metal, all the metals contained in minor coins (as teh nickel and the cent), or the silver bullion that is held as backing for silver certificates -- compare brassage. 2 archaic: Dominion, Power. ----- brassage 1: a charge made to an individual under a system of free coinage for the minting of any gold or silver he may bring to the mint and usu. calculated to cover various costs -- compare seigniorage. ----- Still, Jim Gleick seems to be citing a special extension of this general definition, wherein government capitalizes on its money-coining power to reap any ancillary benefit, such as the float on money transactions. Is it not likely that there are other seigniorages of running the public till, as Kawika Gaguio suggests, or even such as pleasurably performed a la droit du seigneur cited by Simon? Another definition of seigniorage is that of any means to generate benefits for the lord. Along that line, I wonder if governments might not apply brassage to E-money.

1 0

Re: unsubscrive
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:21 PM 4/5/96, robalo wrote: >unsubscrive * robalo(a)elogica.com.br > unsubscrive * robalo(a)elogica.com.br > unsubscrive * robalo(a)elogica.com.br Maybe these dweebs are posting from an alternate universe? A universe in which not even messages explaining that "unsubscrive," "unsuscribe," "undescribe," "unscribe," and "unimbibe" are not valid alternate spellings of "unsubscribe." I've copied my short explanation of how to subscribe and unsubcribe too many times to do it again; and it is clear that these folks are either doing this out of spite, are not reading any of the messages we send them, or think it funny. This may kill off the Cypherpunks list even where Detweiler's massive rants failed. (Now that Detweiler's cabin in Montana has been raided, and one of his tentacles carried off, who will fill his shoes? Vlad the VZNuri is well on his way to matching Detweiler's volume, if not his obsessiveness.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

coderpunks questions
by Jack Mott 17 Dec '03

17 Dec '03

I am really into programming and the math involved in crypto, and could care less about the politics. I assume that coderpunks are more into that sort of thing. I have heard they are invitation only. How can I get an invite? -- thecrow(a)iconn.net "It can't rain all the time"

1 0

Re: So, what crypto legislation (if any) is necessary?
by jim bell 17 Dec '03

17 Dec '03

At 12:37 PM 4/5/96 -0800, sameer(a)c2.org wrote: >> Where I differ with Mr. Bell is that he seems to think the ISPs of the >> world are going to rise and unite to quash the oppressive hand of big >> government at their own expense in order to satisify some sense of >> personal ethics or customer goodwill. >> > > I urge Mr. Bell to start a business of his own with that >model, and see how much fun he has. (Or, worded differently, how long >it takes for him to go bankrupt. Perhaps we can setup betting >pools. That could be fun.) By now, you've probably seen my comment to Unicorn, that ISP's could easily pool their resources, in a form of insurance, to guarantee that any test case will be fully litigated to ensure that a bad precedent isn't set. What if it cost a million dollars? That's only about 5 cents per American Internet user. You were saying about "going bankrupt"? Jim Bell jimbell(a)pacifier.com

2 1

Re: So, what crypto legislation (if any) is necessary?
by jim bell 17 Dec '03

17 Dec '03

At 02:06 PM 4/5/96 -0500, Black Unicorn wrote: >On Fri, 5 Apr 1996 sameer(a)c2.org wrote: > >> What's the point here, or is Unicorn just having fun >> lambasting Jim Bell? >> >> My basic attitude, running an internet privacy provider, is if >> Mr. Govt. wants my data, and gives me a court order (subpoena, >> "compelled discovery", whatever), then I'll give it to 'em. >> If my customers that they were looking for had any brains at >> all, a court order, compelled discover, whatever, will not help >> Mr. Govt. That's the cornerstone of my security model. >> >> Or am I confused about what you are talking about here. > >Yours seems to be about the most aggressive policy a ISP provider can >take and expect to remain in business. This is a classic defeatist attitude, the one that Unicorn specializes in. He wants us to believe that there is literally NOTHING that anyone can possibly do to solve the "government problem." I contend that had he talked to Phillip Zimmermann in 1990 or so, he would have told Zimmermann that "It's illegal to write an encryption program using RSA, because it's patented! You'll never get away with it!" But history records that Zimmermann _did_, and he "got away with it." What I'm advocating is that people do what Zimmermann did: Write programs that will extend the usages of encryption to thwart attempts to retrieve data by its owners, whether or not the data is on the owner's system. >That is, resist by what legal means are available, but ultimately depend >on the user to secure his or her own data. Notice that Unicorn never gives useful specific suggestions about which "legal means are available." >Where I differ with Mr. Bell is that he seems to think the ISPs of the >world are going to rise and unite to quash the oppressive hand of big >government at their own expense in order to satisify some sense of >personal ethics or customer goodwill. Cumulatively, they could do exactly this. Spread among most ISP's, the cost per ISP could be quite low. Augmented with my AsPol idea, the costs would be even lower. What was that quote? "A box of shells is cheaper than an appeal." Jim Bell jimbell(a)pacifier.com

2 1

Re: RC4 improvement idea
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 12:01 PM 4/5/96 -0500, Jack Mott wrote: >I got a paper from the cryptography technical report server >"http://www.itribe.net/CTRS/" about a weak class of RC4 keys. The >report said that with some keys, it was possible to predict what some >parts of the State-Box would be. The report was bogus: For one key in 256, you can tell what eight bits of the state box are. For one key in 64000 you can tell what sixteen bits of the state box are, and so on and so forth. Such keys are not weak. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

Re: Using crypt()
by Bill Stewart 17 Dec '03

17 Dec '03

At 01:47 PM 4/4/96 -0400, Eric Eden <erice(a)internic.net> wrote: >I'm testing a encryption program that includes use of crypt(). Out of curiousity, why use crypt() instead of, say, MD5, which is stronger and allows arbitrarily long passphrase input? You could add a crypt()-like salt to it as well, if that helps. And just as crypt() lets you distinguish between input and output based on length and character set, if you use MD5, you know the output is 128 bits, rendered either as raw bits or 32 hexes depending on your program environment. With crypt(), for users who don't remember their passwords, you can run crack to try and recover them. This doesn't work, of course, if your stored "encrypted password" is really an unencrypted non-13-byte string which wouldn't ever be the output of crypt(). MD5, on the other hand, allows enough passphrase space that a brute force search would take much longer.

1 0

No Subject
by James Gleick 17 Dec '03

17 Dec '03

Perry E. Metzger wrote: > >James Gleick writes: >> >> Seigniorage is actually the Government's interest income on all the >> currency in circulation. > >Seignorage is neither of these things. It is the difference between >the cost of producing a currency token (like a quarter or a dollar >bill) and the face value of the token. In essense, its the profit >margin on printing or minting money. You're giving a definition straight from a dictionary--an old one. Welcome to the modern world. >> It's not obvious, but it's true, that the Fed collects the "float" >> on dollar bills you carry in your pocket, > >Oh, really? From whom? First I've heard of this. Then you're learning something new. >Now, it is indeed true that the Fed holds large numbers of government >bonds and theoretically earns interest on them, and that banks in a >free banking system do indeed loan out the money that backs their >notes. However, the fed has no mechanism to earn interest on dollar >bills, nor, in fact, does it need to. On the contrary. The Federal Reserve holds Government securities corresponding to the dollar value of currency in circulation. It earns interest income on this amount, and returns this income to the Treasury. This is called seigniorage. It amounts this year to something over $20 billion. This is a very real issue. To the extent that electronic money replaces currency (reduces the amount in circulation), it will cost the Treasury seigniorage--and the Government is acutely aware of this. Whether the beneficiaries are consumers, banks, or other issuers of digital cash will depend on the system. -- James Gleick gleick(a)around.com http://www.around.com

3 2

Re: pgp keys
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:55 AM 4/4/96 -0500, Jack P. Starrantino jpps(a)voicenet.com wrote: >Is there a reliable method for obtaining the pgp public key for an >arbitrary email address? [....] to obtain keys I do not have. Reliable? No; not everybody follows The One True KeyDistribution Method, or even follows one-or-more of the popular electronic approaches, and not all keys that are distributed electronically are on the Internet, though some of them may be on intranets or fido or uucp nets. There's also the problem that the results are not unique. If you look at the MIT keyserver, http://www-swiss.ai.mit.edu/~bal/pks-toplev.html, in the cluttered "Bill Stewart" namespace, you'll find several Bill Stewarts, and you'll find many people have multiple keys for each email address, especially after they've been in the servers a few years. >I've caught some of the discussion on key servers, and noted some >people's use of their signature, plan, or home page to distribute their >keys. Are some combination of these suitable today? There's a collection of keyservers that stay in sync with each other, including the ones at pgp.mit.edu. bal's http interface is a popular way to access them, though there are others communications methods as well. Some other people use finger; finger's really just a telnet to port 79 while sending a requested name and holding the connection up to wait for replies, but not everybody uses that either, and many host systems don't serve finger. My work PGP address is available on my company's internal phone-book web, and printed on my business cards, though I have now put it on MIT's server. >Is there a parseable convention in use for extracting keys from mail/finger/html? Sure - the standard ASCII form that PGP extracts keys in is parseable by PGP. (You have to be careful, when obtaining keys by mail/finger/html, that if you get multiple keys, you do something appropriate, like split them up first.) Unfortunately, Real PGP likes to ask you interactively if you want to add the keys it found to a keyring, or whatever, but you could just feed it some "Y"s on stdin to keep it happy. The new PGP 3.0 stuff will have libraries so it's much easier to build clean routines to do this rather than interact. >My goal is to make encryption the default behavior on outgoing mail. I >am not concerned about local security. Good luck! You'll probably have to prompt the user at least for disambiguation, and possibly for methods for finding keys as well.

2 1

Re: So, what crypto legislation (if any) is necessary?
by jim bell 17 Dec '03

17 Dec '03

At 03:49 AM 4/5/96 -0500, Black Unicorn wrote: >On Thu, 4 Apr 1996, jim bell wrote: >> I really don't think you're giving me enough credit. I am fully aware that >> in the past, the organizations on which wire-tap-type subpoenas were served >> (primarily AT+T, "The phone company") were very cooperative with the police >> and probably "never" challenged the subpoena. There is the law, and there is >> the usual reaction to that law, and I expect that much of Unicorn's position >> is based on a (false) assumption that this reaction will necessarily >> continue unchanged. > >Now, if this is your postion, let's see some support. You do the research. Until 1968, Federal wiretaps were illegal, by the Federal communications Act of 1934. >From Encyclopedia Brittanica, 1970, vol 23 page 592: "The modern federal law of wiretapping begins with the case of Olmstead v. U.S., 277 U.S. 438 (1928). A majority of the Supreme Court, over vigorous dissent, held that a defendant's rights against unreasonable search and siezure, protected by the Fourth Amendment of the U.S. Constitution, were not denied by the tapping of his telephone wires by federal police officials. In denying constitutional protection to the privacy of telephonic communicatiosn, the Olmstead decision in effect delegated to Congress the responsibility for defining what restrains, if any, are to be imposed on wiretapping activiity. In 1934, Congress enacted section 605 of the Federaol Communications ACt, whcih provides, in part: "no person not being authorized by the sender shall intercept any communication and divulte...the contents..of such intercepted communication to any person." Brittanica continued: "It is clear that federal police officers continue to engage in wiretapping despite the statute. The position of the Department of Justice has been that section 605 does not forbid wiretapping per se, but only interception _and_ divulgence. Moreover, it is assered, communication of the contents of an intercepted message by one federal police officer to another is not 'divulgence' within the meaning of the act. This interpretation has never received definitive judicial approval. Since the late 1930's numerous unsuccessful attempts have been made to amend the provisions of section 605, usually with the purpose of broadening various law-enforcement uses of wiretapping." [end of Brittanica quote] Needless to say, I find these excuses and distinctions silly and self-serving. If Congress really had the power to increase the usage of wiretapping and numerous times chose not to do it, it is reasonable to assume that no legitimate interpretation of the Act of 1934 could allow police wiretapping to occur. It is reasonable to assume that most wiretaps, when they were done, were assisted by the local phone company (usually AT+T). In other words, AT+T assisted the government in illegal actions. What happened in 1968 was that Congress, recognizing this situation, decided to "compromise": They declared those wiretaps legal, if a warrant was obtained, and and a sop to the cops they allowed that evidence into court. But them's the details. The fundamental point is that if AT+T would engage in illegal activity to benefit the cops or Feds, they would certainly go less far to give the government what it wants, whether or not that was illegal. Clearly this was (and is) a non-arm's length relationship. And notice that there was apparently no way for the police to force AT+T to do those wiretaps, before 1968. They couldn't use them, so they couldn't insist on them. You'll have to explain why AT+T did what they did even though they were apparently not obligated to act, and there was NOTHING the Feds could have done (legally, anyway!) to force them to. >Compelled discovery orders work because they are backed with the >very credible threat of financial and custodial sanctions. Obstruction, >or conspiracy is a crime, and in the case of the FBI, a federal crime of >some magnitude. As usual, you misrepresent the situation. You're setting up a straw man. "Appeals" are not "obstruction." >While some ISP's may indeed feel they are able to resist the whims and >enforcement powers of the United States, they are likely to be offshore, >small, and viewing themselves as out of the reach of U.S. jurisdiction. You continue to build that straw man. And I notice that you said "whims"? What did you mean by this? Are you suggesting that there is something wrong or illegal with "resisting the whims" of the government if that government has no legal basis for compelling cooperation with those "whims"? I think it's interesting that with each paragraph you set little traps for yourself, and fall into them so embarrassingly. >With the scope of U.S. jurisdiction for compelled discovery, however, >I think that most ISP's will find themselves in for significant surprises. There you tried to knock him down. >Mr. Bell somehow assumes that smaller ISP's will be less vulnerable. I >believe this in error. Smaller ISP's won't even have the financial >wherewithall to fight a compelled discovery order properly, much less >actualy prevail in court Think "insurance companies." Insurance companies exist to pool risk. At some point, "subpoena insurance" will be recognized as being a valuable thing, because it will allow even the smallest ISP the full legal assistance necessary. A side-benefit of such assistance is that the government won't be able to "defendant shop" and try to set up a comfy precedent, because even the smallest ISP will be able to fight back as if it were large. This is important to all other ISP's, obviously. That's why they'll happily pool their resources. >where it is firmly estlablished that compelled >discovery orders will be enforced and enforced with vigor, and that >judicial review will be a waste of time. Continuing to knock down that straw man, I see! >It is worth bearing in mind that subpoenas are not the only tool that >authorities can use to affect compliance. In many cases authorities >simply seize the equipment and hold it for the statuatory period before >which they are required to file charges in. The Ripco BBS in Chicago, >victim of the Sun Devil raids, is a prime example. In that case the >equipment was seized (via sealed warrant which later proved to authorize >seizure of "computer or other electronic equipment of any nature." and in >actuality resulted in the seizure of everything from disks to printers >to telephones), and held for five years before finally being returned. >Clearly it was obsolete by this time. No charges have been filed. What I repeatedly find amazing about Unicorn's commentary is that he lists actions and behaviors of government that most of the rest of us find disgusting or egregious, and then he seems to take the position that it is impossible to prevail in court against those actions. Even if that limited opinion were true, to the extent it's true that merely goes to show why we can't expect justice from courts, and why we're going to have to set up a system to ensure that these egregious actions get punished. >While I'm sure Mr. Bell would sacrifice hardware, freedom, cash, (though >I'm sure he would insist on representing himself), and time to fight the >tyrany of the FBI, I don't see every ISP suddenly turning into a Montana >freemen armed standoff with the authorities, which is what it would >practically take to resist such warrants and exercise of authority, even >by preemptive or malicious encryption or disposal of data. Actually, it only takes one to set a precedent hostile to the government. >> Besides, that phone company had a monopoly, so it wasn't possible for >> citizens to shop around for a phoneco that was known to make it hard for >> police. But that's changing, and that's my point. Now and in the future, >> it's going to be harder and harder for the police to get a >> bend-over-backwards level of cooperation, and in fact phonecos (and >> especially ISP's) might reasonably want to build up a reputation that they >> will defend a customer's security in court long before a wiretap is >> installed. > >In practice many ISP's or phone co's will not have the opportunity to >defend the matter in court without their services and equipment being >forcibly seized preemptively. Oh, really? Do you realize what you've just admitted? You're your own worst enemy. Let me quote you something you said below: >There are ways to resist compelled discovery. These are not they. Sounds like a big contradiction, right? You can't even keep your story straight! Your loyalty to the truth is nil. Yet another trap you set for yourself. >> Imaginative phonecos will find ways to inform the target >> legally, including naming the target as a non-hostile defendant in a court >> challenge to that wiretap, and noticing that target since he's now a party >> to a court action that must be noticed under civil procedure rules. > >So the ISP sues their client to notify them of the wiretap? Or the ISP >sues the FBI and then draws the client into the suit? I'm not sure what >you mean here. Your cluelessness is legendary. Go talk to a real lawyer and he might tell you that occasionally, entities must be brought into lawsuits if their interests are at stake and their participation is necessary to decide an existing case. It happens all the time. In this kind of case, a challenge to the wiretap inherently involves the interests of the person to be tapped, and thus his participation is logical. Not that the cops would LIKE it, but that doesn't necessarily mean that it won't happen anyway. >In any event it's a totally meaningless point as ongoing >investigations could easily be blinded and the ISP or telco charged with >willful obstruction Naming the target as a non-hostile defendant is not illegal. Noticing him under civil procedure rules is not illegal. Etc. or conspiracy to destroy material evidence to a >crime, accessory after the fact in effect. You keep harping on this "destroy material evidence" kick. Is that the best you can do? I said NOTHING about "destroying evidence." (regular readers will notice that this is a pattern that Unicorn displays; typical straw-man behavior! His "destroying evidence" tirades are old.) > >> In short, there is a drastic difference between blind obeisance and >> enthusiastic hostility, even if you exclude actions by the ISP or phoneco >> that would rise to the level of some crime. > >What you have described is a crime. Your "clever" lawsuit isn't going to >fool any judge, or anyone else. There is a big difference between "not fooling the judge" and becoming a crime. As I pointed out before, these are exactly the kinds of issues that have "never" been enthusiastically challenged by an ISP or telco. Your assumption that such challenges will never happen, or will fail is touching. >> My point in the first paragraph that I am quoted in above is >> that many of the challenges that have never been made against wiretap >> subpoenas, due to a closer-than-arms-length relationship between the phoneco >> and the government, _will_ be challenged. > >This argument relies heavily on the absence of other persuasion to comply >with wiretaps, which, as I have demonstrated, exist in abundance. Thus the >thing falls in upon itself. The error you just made is to confuse the issue of adjudication and enforcement. All you just said was that, once the final decision is made, it can be enforced. I don't think it's necessary for me to challenge that claim, for the purposes of my point. My point is that challenges to subpoenas can and do occur, WHEN THE PERSON OR CORPORATION NAMED _wants_ to do them, and up until now that organization regularly failed to do so. >> will be challenged on (among other things) the basis of >> the fact that this precedent was formulated during an era when essentially >> all telecommunications was monopolized and regulated, and there is no reason >> to believe that a previous telecom monopoly would have been diligent at >> protecting the rights of their captive customers against the interest of the >> government at that time. > >You're claiming that a court is going to distinguish the case where a >small ISP/telco refuses to comply with a compelled discovery order from a >case where a large telco typically complies with a discovery on the basis >that the large company complies only under compulsion or in self interest? > >This amounts to "A obeys the law because he wants to. B doesn't want to >obey the law, therefore B need not." Further "straw-man" behavior. You just misrepresented the issue. I'll re-write it: "A obeys not only the law without question, but also agrees with all requests even if they are beyond the legal scope of the subpoena, and generously helps the cops, challenging nothing. B challenges everything, and uses 'every trick in the book' to eliminate or minimize his obligations under the law" There, that's better. >> I think we need to start challenging all the previously-assumed issues that >> have been interpretated to benefit the government. If my ISP has agreed, >> for instance, to send me daily certifications that he hasn't received any >> "official" inquiries about my account, and one day he receives such an >> inquiry and is forced to install some sort of a tap, it is hard for me to >> imagine what kind of legal precedent would allow (and, even, REQUIRE) him to >> continue to send false certifications when the alternative, simply failing >> to send any certifications whatever, is also "legal." > >As I have tried to explain to Mr. Bell before, the days of legal >formalism are over. Substance over form prevails today. What, exactly, does this mean? Are you saying, "The Constitution is dead"? Are you implicitly acknowledging here that my points are, or at least, WERE valid under a previous interpretation of the Constitution? What, exactly, happened to change this? Who passed which law to change it? >The substance >of this transaction is to inform the client that an investigation is >ongoing. This is a major no-no, whatever Mr. Bell thinks he knows. "major no-no"? It sure is interesting how Unicorn uses thes high-falutin legal terms like "major no-no" to describe the intricacies of subpoena law. I'm going to have to look in Black's to figure out the legal implications of "major no-no." >> (and, in fact, may be >> required under my contract with him, should he be obligated to do a tap or >> know one exists.) > >As I explained before, contracts are void to the extent they are >illegal. Unicorn proves, once again, that a little knowledge is a dangerous thing. But I don't think that FAILING to send a particular certification (that the ISP isn't under subpoena) constitutes an "illegal" contract. The fulfillment of that term is not legally required, absent a contract, and likewise it is not generally prohibited if it is part of a contract. It looks like the government has no basis to object to either sending that certification or failing to. And you also misrepresented things: it is more accurate to use the term "unenforceable" rather than "void". "Unenforceable" (assuming, for a moment, that this was a correct interpretation; it isn't, however) might simply indicate that the client can't sue his ISP for lack of fidelity to that particular term of the contract. But that's somewhat misleading, because this assumes that the ISP _doesn't_ want to comply with the terms of his contract. It is irrelevant that a contract is argued to be "unenforceable" if the parties to the contract _want_ to comply with it anyway. And if the ISP _wants_ to comply, and compliance merely involves FAILING to send a certification, and not sending that certification is not otherwise prohibited by pre-existing law, then I think it's obvious that the ISP is entitled to fail to send the certification. In a government-centric philosophy enthusiastically promoted by Unicorn, government is the only enforcer. In the real, digital world of the future, digital reputations will enforce behavior. A practice by an ISP to tolerate subpoenas without legal challenge will become well-known, and that ISP will shrink to oblivion unless he changes his policies. >Mr. Bell's response? "Well, then we'll kill him and enforce >the contract that way." Given the repeated admissions you make that the government can and does engage in outrageous behavior, I'd say that extra-legal enforcement is clearly warranted. >> The fact that I'd likely interpret his failure to send those >> messages as meaning that my access is tapped is not within his control, and >> if he's unwilling to screw me I find it hard to believe that he can't act on >> this fact even if those actions have an indirect effect of alerting me. > >Your use of the word "indirect" is stretching the bounds of the >imagination. A judge, unless sleeping through argument, would see >through this like glass. Again, doesn't make it illegal. There is no reason to assume that the government will always get whatever it wants. (remember the "whim" reference you made above? I'm _still_ laughing about it!) Challenging it on what it wants should be standard procedure. >> These are the kinds of issues that have either rarely or never been >> challenged in court, simply because the organization(s) that would normally >> do those challenges was in the hip pocket of government. It's going to be a >> brave new world very soon. > >Incorrect. They have been challenged time and time again in the context >of compelled discovery. Time and time again compelled discovery has been >required, TRO's forbidding the destruction of documents and other >evidence issued, search warrants and seizure effected in place of subpoena. For a different class of people and corporations, yes. Not ISP's, and as far as I know, telephone companies have never pushed the envelope. If you have any specific contrary examples, show me. >The telco in past has not complied with such orders because of some grand >government conspiracy, You statement is wildly in error. AT+T clearly did phone taps for the government prior to 1968 PRECISELY due to "some grant conspiracy": It certainly didn't do them because AT+T was _legally_obligated_ to. >although I realized Mr. Bell finds such things >immensely sexy. It has complied because its officers faced criminal and >financial sanctions for non-compliance. Which is an interesting statement, given the fact that I pointed out that in the period of 1930-1968, the phone company assisted with ILLEGAL wiretaps. Are you suggesting that during that time frame, they actually violated the law under threat of "criminal and financial sanctions for non-compliance"? What kind of government threatens people with "criminal and financial sanctions" for NOT assisting it with illegality? Yikes! Somehow I think your morality is about as warped as it comes. Yet another trap you set for yourself, and you jumped right in. > >There are ways to resist compelled discovery. These are not they. What you haven't explained or demonstrated is how ISPs could become more agressive in their defenses. This failure is typical of you: Your bag of tricks is empty _unless_you_are_paid_. Jim Bell jimbell(a)pacifier.com

2 1

Peeking at Your PC
by John Young 17 Dec '03

17 Dec '03

The New York Times, April 6, 1996, p. 23. Peeking at Your P.C. [Op-Ed] By Simson L. Garfinkel Cambridge, Mass. As more Americans use electronic mail, buy products over the Internet and keep their most personal records on desktop computers, there is increasing demand for cryptography software that can insure the privacy of personal electronic communication. This technology already exists, but the Government, through export-control regulations, effectively bars citizens from using it. The Government classifies encryption software as munitions, because foreign countries can use such programs to hide their communications during times of war. To prevent this, American companies are largely prohibited from selling to foreign customers any programs that include strong coding features. Unfortunately, that has stifled the domestic market. Encryption-software developers find it too expensive to create two versions of their programs -- one with strong cryptography for domestic use and one with cryptography that is weak enough for export. So in the United States, developers sell only the weaker cryptography software. Last month, a bipartisan group of lawmakers introduced "The Encrypted Communications Privacy Act of 1996" to combat this problem. But while this measure would increase the availability of good cryptography at home, it would limit our freedoms in other ways. The act would legalize the export of any mass-market software if similar technology is already available overseas. This would put an end to the futility of forbidding such exports at a time when cryptography technology is increasingly available around the globe -- in libraries and on the Internet. Indeed, the Software Publishers Association says that the main result of the export regulations simply has been to shift the overseas marketing of military-grade cryp tography to foreign companies. So although the new bill would still prohibit American companies from exporting innovative programs, it would at least allow them to compete with foreign companies on an equal footing. However, the Clinton Administration and others oppose this minor change, because they are worried that criminals and terrorists could use the export liberalization to their own advantage. Because of this opposition, the bill throws a bone to the antiprivacy forces. While lifting export controls, it criminalizes some uses of cryptography for the first time in our nation's history. It would be illegal, for instance, to use encryption that interferes with a felony investigation. But the language of the bill is so broad that these restrictions could apply to a reporter's encrypted computer files. The bill also creates legal rules for "key holders" -- organizations that would be given copies of an individual's decryption key, or codebreaker. This means that an individual's encoded messages or documents could be decoded, under a court order, without his or her knowledge. Although the use of key holders would be voluntary under the bill, that could easily change and the system could become mandatory. There is some hope for avoiding all this. Senator Conrad Burns, Republican of Montana, plans to introduce a narrower bill that focuses simply on liberalizing exports of encryption technology. The software industry and civil libertarians are already supporting this approach -- one that is good not just for American business but also for our right to privacy. Simson L. Garfinkel is the author of the book "PGP: Pretty Good Privacy." [End]

1 0

RNG_DEVICE Environment Variable?
by Deranged Mutant 17 Dec '03

17 Dec '03

Considering a couple of RNG hardware manufacturers use different names for device interfaces, perhaps it would be 'convenient' to have apps look for the environment variable RNG_DEVICE which gives the name of whatever device is used (rnadom$, random, rand, even lpt2...) or even a special file that is mixed periodically by a cron job (noiz.c?). The assumption is that reads from that device would return "truly random" bytes (not from a pseudo-RNG), either from specialized hardware or a system-noise sampler such as noise.sys (DOS) or random.c (Linux, FreeBSD). How software would handle not getting enough bytes is another matter, perhaps left configurable to the app. Rob. --- Send a blank message with the subject "send pgp-key" to <WlkngOwl(a)unix.asb.com> for a copy of my PGP key.

1 0

FWD: On digital cash and geodesic economies
by Alexander 'Sasha' Chislenko 17 Dec '03

17 Dec '03

Haven's seen anything on Bionomics list for a month. Is the list silent, or is it just me. I hope you will find the following article relevant to bionomics. --- begin forwarded text From: rah(a)shipwright.com (Robert Hettinga) Date: Thu, 4 Apr 1996 21:21:19 -0500 To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: Wired didn't like this one.... -----BEGIN PGP SIGNED MESSAGE----- ...but I like it. Said it was a little too "fast paced". (For WIRED???) I'm starting over on another, so you guys might as well see this one... It *was* supposed to go into their Idees Fortes (Or, as my brother Mike in Albuqerque says, in his best Jose Jimenez, "Stron' Gideas") section. Now something else is, once I write it. Feh! It's 800 words. Exactly. Cheers, Bob Hettinga ------------------------ Geodesic Capital? Robert Hettinga I've just finished a bit of anonymous consulting on the net for an anonymous client, being paid, of course, in anonymous digital ecash(tm). I could just store it, offsite even, anonymously. But, I'm saving it for that special retirement habitat in the Belt ("Gerry's Habitats, Inc.: Pie in the sky, Nano-Built(tm) *before* you die!"). I have to *invest* it somewhere. I buy a page of mutual fund reccomendations from a LipperBot(tm). In my case, I just want to buy a broad market index, say, the (ahem) Hettinga Million(tm), and shop around for the fund server which approximates closest the HM's price over time. I link to the server, and buy anonymous bearer certificates for that server's HM fund. Later, when I cash in my certificates, I have enough appreciated capital to buy the custom Bernal sphere of my dreams. Of course, if my tolerence for risk is higher, I could buy shares from a fund manager (bot or otherwise, no way to tell with anonymous cash markets) with a hot hand for picking stocks. OK. Say I don't actually *save* money. I'm someone who borrows money for very short term "assets" like resturaunt meals, and pays the incurred debt off over the long term at some userous interest rate. How do I do this? I issue a personal digital bearer bond for the amount of the transaction. All I need is someone to underwrite the risk. Fortunately, I always have an efficient real-time market to auction it into, one that always knows my payment reputation, thanks to all those money-bots in the ubiquitous network. Voila'! Bring on the chateaubriand for one, waiter, and don't spare the bearnaise, all this thinking about money's made me hungry. What we're talking about here is nothing new, of course. We've had trade ever since we've had artifacts. The ancient "red-paint" culture was just a trading network which ran around the north Atlantic from New England to as far as Ireland. So much for the "New" World. The oldest surviving Babylonian money is a piece of clay saying "three cows" wrapped in a clay "envelope" saying something like "three cows, payable on demand, so say I, (signed) Joe Nebbuchenazzar". This happened shortly after writing was invented, which was actually invented for *accounting*. Mechanical signatures like chops and seals have been around since. Digital signatures and bearer certificates are just a new implementation of some *very* old stuff. Ornate paper certificates, representing shares in companies, or actual stuff, was physically traded for other ornate paper certificates (cash), or actual stuff, at places like the famous buttonwood tree on Wall Street. Pretty soon people didn't have to be there to trade. We built fast industrial communications (staged horsemen or coaches, then ships or trains, then telegraphy, then telephony) but we still had slow switches (people), so we had to build all the communication/organization/market hierarchies we know and love today. In addition, the power of the state (another industrial communication heirarchy) provides a sizable argumentum ad bacculum for people who repudiate trades. If you don't pay, I throw you in jail. Like every thing else, Moore's law changes that. Proportionately, semiconductor switches get more and more cheaper than lines, so the telephone network is no longer a hierarchy. Nodding to Buckminster Fuller, Peter Huber called it the "Geodesic Network", the title of the 1986 government report he wrote describing it. Ironic. I'm here saying this in a magazine founded by deciples of Stwart Brand, himself a one-time Fullerite. All threads lead to Bucky. When you combine a geodesic network with strong cryptography, you get a geodesic economy, which needs geodesic capital. Just change the size of players in either equity or debt scenario, and you're looking at what any large business organization does today. The only thing you're missing is how to deal with non-repudiation. If the state can't tax transactions or financial assets because strong crypto makes them all invisible, states can't exist, much less "bacculize" very well. The solution is the same it ever was: reputation. J. Pierpont Morgan said, when hauled before Congress one afternoon, "Character, sir. I wouldn't buy anything from a man with no character, even if he offered me all the bonds in Christendom." In a geodesic economy, reputation is abstracted to keys, not people. Geodesic capital scales up to bigger stuff than we can do now. A chaotic hoarde of autonomous money-bots swarms on the minutia of the necessary financial complexity. It also scales *down* as processor prices fall. Real time, MicroMint(tm) cash-on-the-router-head auctions for packet switching, anyone? -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMWR/ovgyLN8bw6ZVAQHCkQP7BPmSNibfRQLeZETvRkUVGJdPB0WOYrTM yU33wwqDPBEcwfYLgX4oBcAfHv/Kfvr1vH4bBTioEVyanVDtJLt9KL/62kn+Ot+/ BLDdBM6Km1R/xRD9xnvQd5Kyz2INQCmNU7ZJk3BQpK484V74aW6We155fH2ovjr3 TgQ6mYMe7rs= =GVNA -----END PGP SIGNATURE----- -------------------------------------------------- The e$ lists are brought to you by: Making Commerce Convenient (tm) - Oki Advanced Products - Marlboro, MA Value-Checker(tm) smart card reader= http://www.oki.com/products/vc.html Where people, networks and money come together: Consult Hyperion http://www.hyperion.co.uk info(a)hyperion.co.uk See your name here. Be a charter sponsor for e$pam, e$, and Ne$ws! See http://thumper.vmeng.com/pub/rah/ or e-mail rah(a)shipwright.com for details... ------------------------------------------------- --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Re: Spinners and compression functions
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-04-06 11:26:26 EST, Perry Metzger sez: >Actually, it doesn't. The entropy present from a reasonable source >like keyclick timings is much much lower than the output of pkzip is >going to suggest to you. I am not saying that the output of the compression function has 8 bits of entropy per byte, but rather that it will have a more consistent entropy level per byte than the input to the function. (Especially in the case of idle loop timings, where the entropy fluctuates considerably, depending on what the computer is doing.) If you want to be conservative, you can assume the output of the compression function has only 1 bit (or even less, if you are really paranoid) of entropy per byte, and adjust your seeding requirements accordingly. Jonathan Wienke

1 0

Re: FWD: On digital cash and geodesic economies
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:09 PM 4/6/96, Alexander 'Sasha' Chislenko wrote: >Haven's seen anything on Bionomics list for a month. >Is the list silent, or is it just me. > >I hope you will find the following article relevant to bionomics. But, Sasha, this is the Cypherpunks list... Seriously, several years ago I started hearing the hype and hoopla about "Bionomics." Following the book, the conference. Then the seminars, the training packages, and perhaps even the cult. The book didn't seem to say anything new, except that markets and various other systems share some emergent commonalities. What made me think of it as a cult is when the groupies joined, the staff was hired, and the publicity campaign began. "The Bionomics Institute"? But who am I to question EST^H^H^Hbionomics? Personally, I have accepted Eric Drexler as my personal savior in the Churh of the Assembler Multitude. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0