December 2003 - cypherpunks-legacy

Re: ?-line cash
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> In-Reply-To: "Rick H. Wesson"'s message of Sat, 27 Aug 1994 19:04:21 -0700 <199408280204.TAA23729(a)ar.com> > > The last on-line cash system I tried to work up didn't > have a drop of anonymity to it, and I don't know how to blind the > bank to the transactions but keep the thing reliable and secure... > > Please look at Magic Money, which is an existing coded prototype which > uses blind signatures to represent digital banknotes. The canonical place to look for discussion of blinding is Chaum's article in CACM from maybe October 1985? Should be referenced in Schneier's bibliography. It's probably also available on chaum's web server (something-or-other.digicash.nl). Schneier also discusses the technology somewhat.

1 0

Using remailers, chained remailers?
by Gary Jeffers 17 Dec '03

17 Dec '03

Hello Cypherpunks, Could anyone give me a concise post on how to use remailers & chained remailers? Or an ftp site where I can download the info.? Thank You, Gary Jeffers

1 0

CDR Traffic & IRC
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I have obtained a Sparc ELC (4/25) w/ 24M of RAM and 200M of disk space under Solaris 1.1.2 (SunOS 4.1.4). I will be installing the gcc suite from the O'Reilly "Programming with GNU software" since this is a supported OS. I intend to set it up as a small public access irc server. I was wondering if anyone had suggestions on such hardware and what to use. The crypto relevance is that I was thinking of having a #cdr channel which would receive traffic from the regular mailing list. In other words when a user joins #cdr they could use the normal irc functions but a bot would be receiving the mailing list traffic as it arrives and sending it out. I am not proposing to send the #cdr traffic to the mailing list. It would be one way only. Though a bot function to forward mail on a per request basis might be implimented if some suitable abuse avoidance mechanism could be worked out. Any other crypto relevant suggestions on this topic welcome. ____________________________________________________________________ | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

No Subject
by David Downey 17 Dec '03

17 Dec '03

unsubscribe cryptography-politics-pgp-l ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

iterated prisoner's dilemma
by John Douceur 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >From: Hal <hfinney(a)shell.portal.com> >Date: Monday, August 29, 1994 12:03PM >Another argument sometimes advanced in favor of trustworthy escrow >agents is the "iterated prisoner's dilemma". This refers to Axelrod's >simulations of computer program agents which repeatedly interacted in >a simple "prisoner's dilemma" game which captures much of the essence >of the trust relationship (see his book "The Evolution of Cooperation"). >His results generally have consistently shown that agents which are >never the first to "cheat" in a relationship do better than those >which try to take advantage of their counterparts. . . . >Axelrod's tournaments were predicated on the implicit >assumption of an indefinite number of interactions. (This is my >recollection; I'd be interested in whether experiments have been tried >with a known fixed number of interactions, and the agents knowing how >many more there were.) It had long been recognized (pre-Axelrod) that >the prisoner's dilemma might reach a stable cooperative solution with >multiple interactions, but that this becomes unstable if the parties >know that they are reaching the end of their interaction period. Axelrod's second tournament had a variable number of interactions, precisely to defeat penultimate-interaction attacks. He added this specifically because his first tournament had a fixed and known number of interactions, and several programs took advantage of it. However, even in the first tournament, the "nice" programs did better than the "mean" programs, and Tit-for-Tat was the winner. I suppose this doesn't prove much, insofar as a Tit-for-Tat-but- Screw-Em-on-the-Last-Round program would probably have come in first had it been entered. Even so, I expect that the marginal increase in score over Tit-for-Tat would have been vanishingly small for a large number of interactions. JD -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLmJSsEGHwsdH+oN9AQGIAAQAkT6GC1xOdmCh5Zp7LU17oKRH7WAqeYoK 6FypHPqfUK688uFUAUz61MhGaMkr9ZoCcnRdsmejOGq9zQ9sW6D3SnGvTtkgGyGD zNjle57RVxG8sqkaei8kKszCyVIxZfms2RkdrmQyC/GHwAo9i/5yOszdqFotWfVJ HRe05Pfrano= =zsiI -----END PGP SIGNATURE-----

1 0

Re: Announcing Bellcore's Trusted Software Integrity (Betsi) System
by brains＠male.org 17 Dec '03

17 Dec '03

>> - provide accountability by linking the author of a program >> to a real person whose identity is verified off-line > >This is unnecessary, and I would claim undesirable. A unique anonymous > ID is just as good as a "real" one -- since you're relying upon PGP > anyway, the mapping from signature to a known identity is one-to-one. > >The only reason I can see to require this "real human" mapping is > to try to prosecute people for bugs in their code or some contamination > that seeps into their release. > >That's not an aspect of the world I want to live in. Or to warn potential virus "authors" that *their* anonymity is no longer assured - not a bad thing. Not enough to justify the rest of it, IMHO, but certainly not Evil Incarnate (not to be flinging misinterpretations or aspersions :-) Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

4 5

MIT PGP - PGP UI - VIACRYPT mime
by Gary Jeffers 17 Dec '03

17 Dec '03

Cypherpunks, Question concerning MIT PGP 6.2 & PGP 6.2 ui. If it is known that the PGP that encrypted a msg is one of these two versions, then can it be determined which of these two versions did the encrypting? Also, can it be determined that it was not VIACRYPT that did it. Note: If it can be determined that PGP 6.2 ui did it, then it might be a neat trick to change the ui version to mimic either of the other two at user command. Yours Truly, Gary Jeffers

2 1

Re: Statistics on remail message sizes
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

>In article <9408291623.AA29767(a)ah.com>, Eric Hughes <hughes(a)ah.com> wrote: >>Based on Hal's numbers, I would suggest a reasonable quantization for >>message sizes be a short set of geometrically increasing values, >>namely, 1K, 4K, 16K, 64K. In retrospect, this seems like the obvious >>quantization, and not arithmetic progressions. Live and learn. > >A brief suggestion: Code the progression, not the four values. As > time goes on (and lossy sendmails disappear), people are sending larger > and larger messages; it's easily conceivable that people could be > swapping multiMB files at some point in the not too distant future > (indeed, I do occasionally send out files that are 4-5 MB large, > uuencoded binaries and tar files). > >No point in limiting future behavior due to current usage. Except that coding only the progression and not the actual values lessens the usefulness of quantizing. We may have one group of remailers/users which uses the Hughes sequence: 1, 4, 16, 64, and another group that uses another sequence: 3, 9, 27, etc. I'm not saying we'll ever get everybody to agree, but there are times when it's better to converge on solid, actual numbers and not on the more-elegant abstract progressions. But maybe I'm misunderstanding the point here. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

2 1

Re: Announcing Bellcore's Trusted Software Integrity (Betsi) System
by David K. Merriman 17 Dec '03

17 Dec '03

> >Certainly not enough to justify the rest: Can you name one example of an > author of a package including some virus? Not someone putting one > post-production (individual signing will prevent that), but the original > author? > >It's a straw man. Well, there was that CD-ROM program of a couple months ago that professed to be from one of the drive manufacturers (but wasn't) containing some kind of Binary Nasty (tm). The mfr's finally had to post (far and wide) the fact that it was *not* their program. The program was posted using a false ID, etc. Don't know if the Bellcore system would prevent that, but it is *one* example, anyway. I'm not arguing that the Bellcore system is the answer to Life, the Universe, and Everything; just that there are some small pieces to it that have *some* perceivable merit to them. Personally, I wouldn't want anything to do with it - as you note, the costs and hazards _far_ outweigh any benefits, and there are easier and more secure ways of accomplishing the same things. Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

2 1

e$: e-cash underwriting
by John Young 17 Dec '03

17 Dec '03

Responding to msg by hughes(a)ah.com (Eric Hughes) on Sun, 28 Aug 10:9 PM >Turn fraud attempts from a security cost to a profit >center. Brilliant statement, Eric. My mouth fell open. This is the best synopsis I've seen for the conversion of our national security capitalism into democratic capitalism. It makes all the pleasurable, if demanding, digicash correspondence I've read here fall into place. John

1 0