December 2003 - cypherpunks-legacy

Re: payee anonymity
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:35 PM 10/31/95, Hal wrote: >Another way payees could be anonymous would be to immediately spend their >received coins, and do so anonymously. This works for the online ecash >system. They simply pass the coins on without first exchanging them at >the bank. There would have to be something they wanted to buy that they ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >could receive anonymously, though. > Such as other coins? (Since I hate cryptic one-liners, I'll elaborate. There seem to be enough "degrees of freedom" involved in exchange of digital coins such that payee and payer anonymity is achievable. "Coin mixes" using "shell game" methods seem adequate. One puts N coins in, gets back N coins, spot checks the validity of some of the coins by redeeming them, and everyone is happy. Fraud is contained to manageable proportions.) --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

RE: This PROMISes to be odius
by nobody＠c2.org 17 Dec '03

17 Dec '03

>PR 10/18 0809 ORACLE INTRODUCES SOFTWARE TOOL FOR LAW ENFORCEMENT Oracle should shange it's corporate motto to: "Oracle, bringing Big Brother to life" or something similar. The problem with this sort of software is that it is virtually made to be abused. It is very, very obvious that the profit motive and the reassurances of LEO's have totaly blinded any shred of ethics the corporation might have once entertained. My reaction to this is simple. In the 70's, it was acceptible reasoning for computer professionals to not work in certain sectors of the industry because they didn't want to be a part of the "military industrial complex". The 90's version of that is simply not to buy products from vendors who engage in unacceptible practices. Oracle clearly falls in this latter catagory. I had been looking very strongly at specifying a DB made by one of Oracles competition due to experience with it's nightmarish installation procedures, but this pretty much clinches the deal where nothing else would. The funny thing here is that since this is just a current sale, and since there's allready plenty of technical reasons to look at competing products, I'd bet even money that over a relativly short amount of time I can offset ALL of the sales for this odious LEO product alone. I would encourage others to do the same.

1 0

Nautullus Voice Encryption
by Karl Marx 17 Dec '03

17 Dec '03

Hi! I don't know if any of you have heard of the voice encryption program called Nautullus, but the full version was supposedly released sometime ago. Can someone please point me to a site where it is available ? Thanks....

1 0

RE: (cpx) Digicash tagged with payee?
by ljo＠ausys.se 17 Dec '03

17 Dec '03

Hal Finney <hfinney(a)shell.portal.com> writes: >I have heard it claimed that when you make a payment with Digicash ecash, >the identity of the payee is encoded or embedded into the cash somehow. >This is an anti-theft measure (among other things, perhaps). The bank >checks that the embedded identity in deposited cash matches the account >name which is doing the deposit. Where have you heard that? Everything I've heard from DigiCash seems to indicate that no such "payee encoding" is performed. >My question is, how could this be done? How can the payor, at payment >time, without communicating with the bank, embed a payee name >irreversibly into the cash so that a thief cannot strip it out and >replace it with his own name? It is possible though with other (teoretical) protocols, such as Chaum, Fiat and Naor's off-line cash scheme (briefly described in Schneirer's book 'Applied Cryptography') and especially the (off-line) cash system, developed by Stefan Brands. In these systems, when Alice spends a coin at Bob's shop she has to respond to a random challenge, sent to her by Bob. This random challenge could possibly be a hash of Bob's identity and some other values. My impression though is that this is not a feature of the current implementation of ecash. >Off-list there has been some discussion about the role of certificates in >ecash, and in cash systems in general. It would be interesting to know >if this anti-theft provision of Digicash is actually provided by means of >a certificate. It is conceivable to think of the above mentioned methods in that way, yes /Lars Johansson ljo(a)ausys.se

1 0

Cryto article in SJ Mercenary
by Simon Spero 17 Dec '03

17 Dec '03

There's a full page equivalent article on encyption in today's San Jose Mercury News (12E-11E). The article concentrates on public key cryptography, and mixes some good stuff with some silly mistakes. The first page has about 4/5th of the article devoted to a big diagram showing how someone using public key encryption to cover a whole message, and sent it over the internet to someone in Argentina. All this without a mention of using symmetric cyphers, and without even mentioning ITAR. Another 1/8th of this page is given over to a bunch of cypher text that supposedly encodes the address of "Mr Cosmic Kumquat, SSl Trusters etc.." This address looks kind of familiar... but they seem to imply that the cyphertext is the output of an RSA encrpytion, not RC4. They then go on to discuss factoring, and explain the difference between the strength of algorithms in theory, and how Netscape became vulnerable due to "beginners mistakes" in the implementation, and how security is best assured by open disclosure, not security through obscurity. Simon ---- (defun modexpt (x y n) "computes (x^y) mod n" (cond ((= y 0) 1) ((= y 1) (mod x n)) ((evenp y) (mod (expt (modexpt x (/ y 2) n) 2) n)) (t (mod (* x (modexpt x (1- y) n)) n))))

2 1

RE: CJR RETURNED TO SENDER
by jsw＠netscape.com 17 Dec '03

17 Dec '03

From: Jeff Weinstein <jsw(a)netscape.com> Subject: Re: CJR returned to sender Date: Mon, 30 Oct 1995 22:16:18 -0800 Organization: Netscape Communications Corporation Timothy C. May wrote: > > At 4:43 PM 10/26/95, Jeff Weinstein wrote: > > > The ITARs are currently keeping us(Netscape) from distributing > >our US-only products to people within the United States. We have > >asked for clarification from the government about network distribution, > >such as how much verification of location and citizenship of the > >recipient we must do, and have yet to receive a response. That > >makes it more than just an export issue, at least for us. > > And I agree that this is a much more important issue than whether a t-shirt > can get an OK for export or not. > > If the CJR for the t-shirt is ultimately granted, what useful information > will be derived, or what implications for Netscape's question will be > discovered? > > If the CJR for the t-shirt is ultimately denied, ditto? It will force the bureaucrats to make a decision, which will be the subject to much public scrutiny. Hopefully it will generate a stir in the press and inform many more people of the problems of the current system. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.

1 0

Perfect Forward Secrecy - is it worth it?
by Simon Spero 17 Dec '03

17 Dec '03

Quick survey; how important is perfect forward secrecy to you? I've asked three people locally so far and gotten four different answers, so in the spirit of spreading divisiveness where'er I go, I'll try and get a few more opinions here :-) In general, schemes offering PFS require a extra PK-op, and an extra round-trip when compared to non-PFS schemes. This cost is incurred once per "session", but can add on the order of seconds to startup times. Should key-management schemes where PK is available always provide PFS, allow PFS, or not provide PFS? The amount of code needed to implement each choice point is similar, if you're using something like BSAFE. Simon --- (defun modexpt (x y n) "computes (x^y) mod n" (cond ((= y 0) 1) ((= y 1) (mod x n)) ((evenp y) (mod (expt (modexpt x (/ y 2) n) 2) n)) (t (mod (* x (modexpt x (1- y) n)) n))))

2 1

Re: /dev/random for FreeBSD [was: Re: /dev/random for Linux]
by Mark Murray 17 Dec '03

17 Dec '03

> How about SetGID? We were going for 660 root.kmem. > > Bad idea; anyone who can run PGP could then get instant access to kmem Fooey. Of course. Scratch that plan. > cd /tmp > ln -s /dev/kmem foo > pgp -e tytso foo > rm foo > pgp foo.pgp Eeeeek! > ? "Gut feel" suggests to me that large ammounts of "predicted" input might > be worse than the normal sort of system noise you have been using. > > But keep in mind that what we're doing is XOR'ing the input data into > the pool. (Actually, it's a bit more complicated than that. The input > is XOR'ed in with a CRC-like function, generated by taking an > irreducible polynomial in GF(2**128). But for the purposes of this > argument, you can think of it as XOR.) So since you don't know what the > input state of the pool is, you won't know what the output state of the > pool. I chatted with a colleague at work, and he helped bend my mind right. I had the mistaken notion that adding lots of data would "overflow" and "dilute" the entropy to an attackable state. > Is this millisecond accuracy quantifiable in terms of bits of entropy? > if so, the ethernet is surely safe? > > Well, no. If you're only using as your timing the 100Hz clock, the > adversary will have a better timebase than you do. So you may be adding > zero or even no bits of entropy which can't be deduced by the adversary. In a 386 or a 486 (under FreeBSD at least) there is a 1Mhz clock available. How would _this_ be? On the Pentium there is the <whatsit?> register which will give the board's oscillator (or 90 MHz) I believe. > This is even worse in the PGP keyboard timing case, since the adversary > almost certainly can find a better time resolution to measure your > incoming packets when compared to the timing resolution that most > programs have. Far too many Unix systems only make a 100Hz clock > available to the user mode, even if you have a better quality high > resolution timing device in the kernel (for example, the Pentium cycle > counting register). Ah yes - _that_ register. :-) What then is a body to do? Preserve all _verifiable_ randomness like gold? Dish it out under some quota? A denial of service attack would be forever { cat /dev/random > /dev/null } Severely limiting most decent folk's chance at getting PGP to work. Right now I am considering making a piece of cheap hardware to deliver noise to a digital input. (Electronics is a stagnant hobby of mine) Interested? I may knock up a prototype in a month or so... > The problem is that in order to do this requires making assumptions > about what the capabilities of your adversary are. Not only does this > change over time, but certain adversaries (like the NSA) make it their > business to conceal their capabilities, for precisely this reason. Can they predict thermal noise in a cheap transistor? ]:-> > So I like to be conservative and use limits which are imposed by the > laws of physics, as opposed to the current level of technology. Hence, > if the packet arrival time can be observed by an outsider, you are at > real risk in using the network interrupts as a source of entropy. > Perhaps it requires buidling a very complicated model of how your Unix > scheduler works, and how much time it takes to process network packets, > etc. ---- but I have to assume that an adversary can very precisely > model that, if they were to work hard enough at it. This is a strong argument for some form of specialised noise source. I have read of methods of getting this from turbulent air flow in a hard drive (an RFC, I believe). > People may disagree as to whether or not this is possible, but it's not > prevented by the laws of physics; merely by how much effort someone > might need to put in to be able to model a particular operating system's > networking code. In any case, that's why I don't like depending on > network interrupts. Your paranoia level may vary. If I was running Fort Knox, I'd probably use Radioactive decay... (From my experience working at a cyclotron facility - these SOB's are _*RANDOM*_) M -- Mark Murray 46 Harvey Rd, Claremont, Cape Town 7700, South Africa +27 21 61-3768 GMT+0200 Finger mark(a)grumble.grondar.za for PGP key

4 3

InfoWar
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The Wall Street Journal, October 31, 1995, p. B1. It's Time You Became A Manager of Change, The Consultants Say [Excerpts] Rapid innovation and product introduction require a nimbleness lacking in many corporate bureaucracies. "There's an intrinsic need to improve your effectiveness at managing change -- whatever form it takes," says David Nadler, chairman of the New York-based Delta Consulting Group. Change-management boosters are also telling managers to learn about "knowledge management" as a means of achieving their new goals. Knowledge management attempts to make fuller use of internal information networks. The consulting units of Arthur Andersen, Ernst & Young and Price Waterhouse are peddling systems to collect, store and distribute knowledge. Andersen designates "knowledge managers" who monitor traffic through its Lotus Notes e-mail software and store valuable information on a CD- ROM. The disk contains 16,000 pages on everything from performance measurements to employee motivation. One problem with the system: "It's so difficult to tie knowledge-management systems to bottom-line improvement," says C. Jack Grayson Jr., whose American Productivity and Quality Center co-sponsored a knowledge-management symposium with Arthur Andersen. "That just feeds suspicions that it's just another fad." It's also difficult to get employees to contribute to the information pool [fearful their jobs may vanish after overt knowledge-transfer, hence, the appeal to managers for systems that covertly siphon knowledge and record grounds for dismissal]. ------ WSJ, October 24, 1995, p. A24. Privacy Laws Are Lax On New Technology, Federal Agency Says Washington -- Inconsistent privacy laws let companies sell sensitive information about consumers who use new communications technologies, the Clinton administration warned. In a report, the Commerce Department's National Telecommunications and Information Administration called on communications companies to tell customers if they plan to sell information about what they watch or whom they call, and to make it easy for customers to squelch the disclosure of sensitive information. Federal regulations allow people to ask their phone company to keep information confidential, but the rule generally doesn't apply to small phone companies or wireless phones, according to the report. Laws that prevent video stores from disclosing what movies customers watch don't apply to pay-per-view services by satellite-television providers. And while a 1986 law prevents on-line computer services from snooping into electronic mail, it doesn't prevent the services from selling information about who e-mailed whom, and what the topic was, the report noted. The Commerce Department stopped short of calling for legislation to close the gaps. But "if industry doesn't do it, consumers will demand that the government do it," predicted Larry Irving, assistant commerce secretary for communications and information. Industry representatives played down the privacy loopholes. Ronald Plesser, a Washington attorney who represents online services and direct marketing firms, said, "I know of no example of anybody trafficking in e-mail descriptions." A spokeswoman for Hughes Electronics Corp.'s DirecTV said, "We do not release names of customers that ordered movies. -----

1 0

Re: FCPUNX:Macintosh [and perhaps other OS] Security Alert (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

========================================================================== + ^ + | Ray Arachelian | Amerika: The land of the Freeh. | _ |> \|/ |sunder(a)dorsai.org| Where day by day, yet another | \ | <--+-->| | Constitutional right vanishes. | \| /|\ | Just Say | | <|\ + v + | "No" to the NSA!| Jail the censor, not the author!| <| n ========================================================================== ---------- Forwarded message ---------- Date: Sat, 28 Oct 1995 11:12:00 -0400 From: Sal Denaro <Sal(a)panix.com> To: Ray Arachelian <sunder(a)amanda.dorsai.org> Subject: Re: FCPUNX:Macintosh [and perhaps other OS] Security Alert (fwd) > ---------- Forwarded message ---------- > Date: Sun, 15 Oct 1995 01:05:06 -0400 > From: Lucky Green <shamrock(a)netcom.com> > To: cypherpunks(a)toad.com > Subject: Macintosh [and perhaps other OS] Security Alert > > -----BEGIN PGP SIGNED MESSAGE----- > > A number of months ago, I discovered that various Macintosh "unused > diskspace" wipe utilities (Norton, Burn) fail to wipe the unused > slackspace at the end of the last block allocated to a file. This leaves > NumberOfFiles*512Bytes/2 = several kB of recoverable data on your average > drive. > I can verify that this is a cross-platform bug. The Dos/win3.1 and Win95 versions all have the same flaw. -- Salvatore Denaro sal(a)panix.com Spinning dreams with angel wings Yes, I use PGP torn blue jeans/a foolish grin

1 0