December 2003 - cypherpunks-legacy

[Bay Area] Meet the Ecash developers today
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

The folks from DigiCash are demonstrating Ecash, smartcard payment systems, and other goodies at the Cardtech West exhibition in the Santa Clara convention center. Today, Thursday, is the last day of the show, so get on out there. The show will be open from 10 am through 3 pm. No, Chaum himself won't be there. -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. "The very atmosphere of firearms anywhere and everywhere restrains evil interference - they deserve a place of honor with all that's good." <George Washington>

1 0

Re: Hazards of encouraging forged dig sigs
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "L. McCarthy" wrote: >Now that Eric has made it abundantly clear he envisions syntactic but not >semantic checks of sigs, I am opposed to the proposition. I foresee a >situation in which a large portion of the list traffic uses forged or >meaningless signing-server-appended dig sigs. Perhaps, though I doubt it. I still think that "incentivising" (I just love this word) the use of crypto on this list will lead to better tools and therefore to more people in the world at large using crypto. Since that is what we all want, can't we at least give it a try? There is nothing to lose and everything to gain. - -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred. "The very atmosphere of firearms anywhere and everywhere restrains evil interference - they deserve a place of honor with all that's good." <George Washington> -----BEGIN PGP SIGNATURE----- Version: 2.6ui iQCVAgUBLt1xxASQkem38rwFAQGELwP+Ms7eKLCysRTLeLITah2aoGYo1cvrkoNh XMfv6E7qdLIrwoQaFgaREtFFp3RkTP6lPmzJePgvC4Rkl+SBIKM8eFxgOa3scJ9t QaEE5D5Rz9zZpD3D13thRQnshk9PdIc8LDv6FoEvfDGXtChEyiXWVUiRTRRJob1b LZmyV7Hed0Y= =Uo3r -----END PGP SIGNATURE-----

1 0

Effects of Marking/Delaying Nonsigned Posts
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

At 12:34 AM 11/30/94, Eric Hughes wrote: >Does a mark or a delay constitute an "effective bar" from >participation on this list? I think not, although I'm entertaining >arguments. I don't think marking or delaying constitutes an effective bar from the list. I do think that marks are redundant (as Tim said, it is pretty obvious who signs and who doesn't), and that delays will degrade the quality of discussion on the list (time lag for only some has a way fragmenting discussion, as anyone with a sometimes-slow link can attest). Degrading the list value, I would think, not your intended goal and would punish the rest of the list members for a non-signer's sins, so to speak. This, of course, depends on the lag - 5 minutes won't matter, but why bother? 1 day would (IMHO) kill quite a bit of discussion. Somewhere in between (the 2-4 hours you mentioned in one post) could head either way. If you are set on this idea, may I echo someone else's suggestion of an autoresponder to annoy those posting without signing? Doesn't impact the list, we all still know who is not signing, and the culprit gets to delete a message informing them of where to find the latest version of PGP. >Eric -j

2 1

Re: Authentication at toad.com: WTF?
by The new cypherpunks signature checking agent 17 Dec '03

17 Dec '03

The below message was found to have a valid signature from "JEFF LICQUIA (CEI) " JLICQUIA(a)mhc.uiuc.edu. -----BEGIN PGP SIGNED MESSAGE----- I trust that this will illustrate my point a little more effectively. It's being sent to cypherpunks as well for informational purpose: to spoof to the entire list would require a slight amount more sophistication. -- Todd -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLtzwSTER5KvPRd0NAQEHBwQAmM9Gk7q6Ieh/QAw+2ardAgMrhUJWLVpG FByPwJGhm/OIvya6Bx+A1en9Asdlkjaso819A/jaAOOISDcalAL77YhaIk7f9s+a ShsZ8asdIU8hfGhY7u8JK94HhhSDY7Sk93KjjkPosj8Hjkhk+asdJ87l/aDHjDj1 FssfdkqoFJw= =nziF -----END PGP SIGNATURE-----

1 0

Re: Authentication at toad.com: WTF?
by Mark Grant 17 Dec '03

17 Dec '03

On Wed, 30 Nov 1994, The new cypherpunks signature checking agent wrote: > The below message was found to have a valid signature from "JEFF LICQUIA (CEI) > " JLICQUIA(a)mhc.uiuc.edu. If you're going to do this, I'd much prefer that you put this in the header or in a Comment: field in the PGP block. My mail program automatically verifies all signed messages (except those that get trashed by MIME-mailers), but if it's got cack like this at the top of the message then it (deliberately) displays the whole thing and doesn't verify the signature. This is in some respects a bug in my program, however I've been unable to come up with a sensible method of dealing with messages when only part of them is signed. Mark

1 0

Security Services
by Ian Farquhar 17 Dec '03

17 Dec '03

>From The Australian, Tue 29th November: Secret Service Files Lost in Blaze, by Cameron Steward (Foreign Affairs Writer) "Hundreds of top-secret documents relevant to the Federal Government's inquiry into the Australian Secret Intelligence Service were destroyed by a fire that swept through the ASIS headquarters in Canberra at the weekend." "The fire has erased highly sensitive ASIS files and archives that detailed the activities and operations of the troubled spy agency over the past decade." "The blaze is a big blow to the Government's inquiry into accountability and management of ASIS because it destroyed many of the records needed to adequately assess the organisation's performance." "But despite the suspicious timing of the accident, the Government does not believe it was arson and says that the blaze appears to have been sparked by an electrical fault." "'I can confirm that the fire broke out at 2am on Saturday morning on the fourth floor of the Department of Foreign Affairs and Trade Building,' a DFAT spokeswoman said." "'The damage appears to have been fairly extensive and is believed to have been caused by an electrical fault.'" "Sources yesterday said the area damaged by the blzae was far greater than was originally revealed by the authorities, with the initial damage estimate of about $200,000 ballooning to at least $1 million." "The fourth floor of the DFAT building has housed ASIS for years." "One intelligence source said last night that it was 'highly coincidental' for ASIS to experience such a fire in the midst of a Government inquiry into its operations." "It was rumored yesterday that the fire also destroyed thousands of files that the service was alleged to have kept on Australian citizens." "Two former ASIS officers alleged in March that the organisation illegally held files on thousands of Australian citizens, despite the fact that it is not part of its role involving gaining foreign intelligence." "The former agents also claimed ASIS has bribed politicans in Malaysia and had helped British Intelligence obtain confidential information that harmed Australia's interests." (Small note here which was not in the article: the ASIS jargon for MI6 is 'head office'. Many of the officers were trained by MI6.) "The allegations by the former officers prompted the Government to conduct an inquiry into the control and accountability of the organisation." "The inquiry, headed by former NSW Supreme Court judge Mr Gordon Samuels, is also examining the 'protection of ASIS intelligence sources and methods' as well as the 'resolution of grievances and complaints relating to ASIS." "The inquiry has been in progress for several months. It is still taking evidence and is due to report to the Government early in the New Year." This article was transcribed without permission from the paper, for the purposes of research and study as defined in the "fair use" provisions of the Copyright act. ------- Yet another depressing but compelling reminder that our privacy has as many enemies within the Government as without. BTW, this was the same TLA which I mentioned some weeks ago in connection with the bungled raid on the Sheraton Wentworth Hotel. Ian. #include <std.disclaimer>

2 2

Keyserver at kub.nl
by werewolf＠io.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Anyone know if this server is down? I didn't see it in the most recent edition of the FAQ and it hasn'r responded to requests lately. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt0UDK+YbMzawbu5AQGl+AQAvyVjB8CVZDHjYlroylWbDXoVs0nmrpZE j7YwsJJipmixysH/Mv9UTbJuGIE9/zaRlTtlXqyUzuIPiKR25JtleskL51Q4Avia nul18SGBp/Sn4pQEOyF42NTXNnvsHs5BDV7UEkcDarj2pesST2jiT/N4F4CNPnl1 kKJzQENkJbo= =17Ze -----END PGP SIGNATURE-----

1 0

Re: We are ALL guests (except Eric)
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

>L. Todd Masco writes >> On at least 3 of those lists, a list maintainer tried to take >> some arbitrary unilateral action and had to later back down because >> nobody was willing to put up with such shit. > >Same thing happened when Coca Cola tried to change their formula: > >Should we therefore conclude that Coke does not own coke? If my and my friends don't like coke, we can't copy their secret formula and sell something in a red can with a white curve down the side and "Coca-cola" written on it in cursive lettering. We'll be in court in about four minutes. If me and my friends don't like the cypherpunks list, we can start our own list called "cypherpunks." We can even get the list of subscribers from toad (it's public information), and subscribe them all to our list, although they might not appreciate it so much. Or, if we really had a problem with the signature-requirement, we could start up our own list and actually subscribe our list to cypherpunks, and cypherpunks to our list. Everyone on our list would get all cypherpunks mail, and as well as mail sent to our list specifically. And cypherpunks would get our list. So if you didn't want to sign, you could join our RebelCypherpunks list which would be identical to cypherpunks except you could contribute to it without signing, and others on our list would get your posts. If you did want to sign, joining our list would be identical to joining cypherpunks, since all mail from our list gets forwarded to cypherpunks anyhow. "Ownership" of a mailing list isn't a simple thing. The exact instance of majordomo running on toad and administered by Eric is not "the cypherpunks list."

2 1

Re: Authentication at toad.com: WTF?
by JEFF LICQUIA (CEI) 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > From: Mark Grant <mark(a)unicorn.com> > On Wed, 30 Nov 1994, The new cypherpunks signature checking agent wrote: > > > The below message was found to have a valid signature from "JEFF LICQUIA (CEI) > > " JLICQUIA(a)mhc.uiuc.edu. > > If you're going to do this, I'd much prefer that you put this in the > header or in a Comment: field in the PGP block. My mail program > automatically verifies all signed messages (except those that get trashed > by MIME-mailers), but if it's got cack like this at the top of the message > then it (deliberately) displays the whole thing and doesn't verify the > signature. > > This is in some respects a bug in my program, however I've been unable to > come up with a sensible method of dealing with messages when only part of > them is signed. Uh... don't think your program would have done much good with that sig anyway. 'Twas a spoof by L. Todd Masco to drive home a point (and a well-done spoof, I might add!) Out of curiosity, exactly what is your program? What platform does it run on? It might be interesting as a good solution to the auto-reply proposal, especially if it can be made cross-platform. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt0BVjER5KvPRd0NAQFoXQP/dptB3u2JtxQAiDjxrzGixeWxup3bAgN5 KQ4MyX48nOMgnmLhxrXObbhtJvbMzQuqcafdKzMhsBVx0PbtW1c1LJcpcR1hn2gp EJ/Feyo+tRCWKpnlgDN6YUvfBLo0PrC8Dsyct+ze25dZYbgKDxWAvH0Vj0Be6OJ3 2KH1i2JUXfg= =DzXy -----END PGP SIGNATURE-----

1 0

New cypherpunks motto...
by mccoy＠io.com 17 Dec '03

17 Dec '03

Cypherpunks don't write code, they just bitch and moan about actually using it... jim

1 0