December 2003 - cypherpunks-legacy

SF South Bay: So WhoWhere wants to meet with people interested in online privacy and security...
by Rich Graves 17 Dec '03

17 Dec '03

The people who run www.whowhere.com (a knockoff on the excellent www.four11.com, with a database partly based on a script they wrote to extract addresses from okra.ucr.edu) want to discuss how they can serve the Internet community better while protecting privacy. I suggested "shut down your site and become cloistered monks," but they didn't find that consistent with their business plan. So they suggested we do lunch early next week. Either Monday or Tuesday would work, and we'd be meeting in downtown Palo Alto. Anybody else interested in coming? For a good demonstration of why WhoWhere? is not necessarily the greatest thing since spice racks, look up "Louis Freeh," "Fuck You," "Asshole," "System Privileged User," and "Stephen Hawking." I keep telling them that they'd better remove this last, but they don't consider it a priority. -rich http://www-leland.stanford.edu/~llurch/ P.S. Yes, I just resubscribed. I just love you too much to stay away. P.P.S. If anyone wants to carpool from the Palo Alto vicinity to Joe & Cindy's beach volleyball shindig this Sunday with an alleged FUCKING STATIST CAPITALIST SOCIALIST NAZI J*W ANARCHIST, send me a note.

3 2

Known Arms Traffickers
by Vincent Cate 17 Dec '03

17 Dec '03

I have added a checkbox to my arms-trafficker page so that if you want to be added to a list of "Known Arms Traffickers" you can be. The URL is: http://online.offshore.com.ai/arms-trafficker/ The page that says: "Click here to become an International Arms Trafficker" -- Vince

1 0

Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats")
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: "Perry E. Metzger" <perry(a)piermont.com> >It certainly makes me feel more comfortable. The problem I have is >that I expect that increasingly pages will arise for which information >can only be extracted with the use of Java. Some flunky from some desk >will will come up and scream "what do you mean I can't get a copy of >Foo Corporation's merger press release because we won't run some >program! Thats bullshit! Do you know how much money the risk arb desk >pulls in, you twit! This must never happen again! Fix it immediately!" Might I suggest setting up another computer with Java enabled, and _without_ the critical applications? Somehow, I think they can afford an extra computer for each desk - it wouldn't have to be a high-capability one. That would also cure having to have Netscape and other high-network-access programs on the same computers as the critical applications. (Of course, some of the critical applications may also need to access the Internet... but they probably wouldn't need http capability.) Of course, feel free to tell me that I don't know what I'm talking about. -Allen

5 4

No Subject
by Ecafe Mixmaster Remailer 17 Dec '03

17 Dec '03

> From: Brian D Williams <talon57(a)well.com> > Date: Thu, 2 May 1996 11:16:35 -0700 > > >From cypherpunks-errors(a)toad.com Tue Apr 30 23:58:28 1996 > >Date: Wed, 1 May 1996 00:52:03 -0500 (CDT) > >From: snow <snow(a)smoke.suba.com> > >To: "Perry E. Metzger" <perry(a)piermont.com> > >cc: "L. Detweiler" <vznuri(a)netcom.com>, cypherpunks(a)toad.com > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > >Subject: Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats") > >MIME-Version: 1.0 > >Content-Type: TEXT/PLAIN; charset=US-ASCII > >Sender: owner-cypherpunks(a)toad.com > >Precedence: bulk > > Game, set, match...... No, probably done intentionally. Note the lower-case snow...

2 1

Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats")
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:03 AM 5/3/96 -0400, Perry E. Metzger wrote: >... The problem I have is >that I expect that increasingly pages will arise for which information >can only be extracted with the use of Java. Some flunky from some desk >will will come up and scream "what do you mean I can't get a copy of >Foo Corporation's merger press release because we won't run some >program! Thats bullshit! Do you know how much money the risk arb desk >pulls in, you twit! This must never happen again! Fix it immediately!" Unfortunately the market decided that function and price were more important than security. (I know, I spent 10 years developing and trying to sell an OS with strong security features.) The only thing I can suggest to you is, spend the bucks, desk real estate, confusion etc. and have two machines; a secure/reliable one and an insecure/unreliable one. Make sure OS manufacturers like Apple and Microsoft know that you want to be able to disable the build in Java they have announced. You may be able to develop a way of transferring the clipboard between the machines so the dancing Java displayed economic numbers can be easily and safely transferred to the secure machine's analysis program. Regards - Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

2 1

Re: Sen. Patrick Leahy's PGP key now avail.
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:36 PM 5/2/96, Will Rodger wrote: >Wanna write the good Senator on the occasion of his newest bill? His pub >key's out there. (URL is http://bs.mit.edu:8001/pks-commands.html#submit/ >) Why does anyone need his public key to communicate with Senator Leahy? If it's for sender-anonymity, this does not do it, though other tools (remailers) do. Unless the information is "secret," why bother? It adds extra time at his office's end (you don't think Leahy types in his password to PGP do you?), and it accomplishes little. >From a personal viewpoint, I'm glad my key is no longer very accessible. I used to get PGP-encrypted messages which had no earthly reason to be encrypted, except that people apparently wanted to practice their PGP skills. (For those who sent me items that had a reason to be encrypted, you know who you are and you know this comment does not apply to you.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

5 4

An interesting front end for the replay remailer
by Rich Graves 17 Dec '03

17 Dec '03

These folks' politics don't make much sense to me (but I gather that they really, really don't like Jehova's Witnesses); it's their setting up an "alternative" front end for the replay remailer that caught my interest. http://www.nano.no/~telemark/anon.html One could say that this makes a case for PGP-signing web pages, but on the other hand, the remailers don't and shouldn't care about content, so who cares if someone "misappropriates" a remailer. What are they "taking" anyway? -rich

1 0

WhoWhere is a Fucked-Up Operation
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:29 PM 5/3/96, Patrick May wrote: >Rich Graves writes: > > For a good demonstration of why WhoWhere? is not necessarily the greatest > > thing since spice racks, look up "Louis Freeh," "Fuck You," "Asshole," > > "System Privileged User," and "Stephen Hawking." I keep telling them that > > they'd better remove this last, but they don't consider it a priority. > > If you want further evidence of their technical skills, look up >my name. I'm responsible for the corp(a)spe.com account. WhoWhere has >therefore decided that I am responsible for every "corp" account in >their database and has attached my name to each and every one. I >informed them of this several weeks ago but they are evidently not >interested in cleaning up their service. > > Being both socially and technically challenged, perhaps they want >your Fucking Statist input on obtaining a government grant for a >clue-free business. I agree with my namesake that WhoWhere is one incredibly fucked-up operation. I tried to add an entry for myself, and my entry has (after several days) not made it. (I tried to be truthful, including such things as "felon" for what I do...perhasp their Thought Police considered my entry a joke, suggesting that they must be applying their own judgment to entries.) I then figured that some of their "automatically generated" entries for "Timothy C. May" needed correction. Not suprisingly, the system asked for a password, so I was unable to correct their defective entries for me. Fuck em. Then burn the body. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: The Decense Project
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"rjc(a)clark.net" "Ray Cromwell" 10-FEB-1996 23:32:12.32 >The first piece of the Decense software is designed to provide "penet" like >double-blind anonymous transactions for the http protocol. It is written >as a cgi-bin script which provides a seamless mapping between anonymous >ids and remote web servers. Servers running Decense can be chained like >anonymous remailers to increase site level security. [...] >http://<decense.server.host>/<cgi-bin-dir>/decense/<anonid>/<relative url> I had one idea that you might want to keep in mind. Most web robots (e.g., Altavista's) try to avoid cgi scripts. Since I would assume that one would wish these to be indexed (information being available doesn't do much good if nobody can find it), this could be a problem. Setting up as to fool the web robots (especially making sure that the Decense urls aren't in the site's robots.txt file) into thinking this is a normal page with an appropriate link would appear to be a good idea. Now, of course the site running Decense would probably not like too much traffic (the reason for most sites not running anonymizing proxies, which should be combined with Decense), I would suggest that the system be set up to receive ecash from the web sites linked (or from the user, although that would remove the web robot access unless you could verify that it was a known indexing robot.) The MarkTwain pickiness on merchants may be a problem on this, depending on what links are available. One idea on getting around this would be to go through the European bank offering ecash; I don't know if their setup is compatible with the MarkTwain ecash, however. Lucky Green? Indeed, setting this up in a European country with good anti-censorship laws would be preferable in any event; the Scandinavian countries might work well. The greater tolerance for some such material in Europe is why I would think that the European bank might be more flexible. (I would be curious if a U.S. business could get a merchant agreement with the European bank; Lucky Green?). -Allen

1 0

Re: PGP API & PGP 3.0
by mccoy＠communities.com 17 Dec '03

17 Dec '03

Derek Atkins (warlord(a)mit.edu) writes: > The PGP Library is currently under development. I have a draft API > document, but it is not complete (I still need to finish documenting > the key management functions). I'd like to get it to a state where I > can "publically" release it soon -- then again I've been saying that > for a while. Yeah... I was thinking a few months ago that it would be fun to set up an idea-futures claim regarding which would appear in a usable fashion first (if ever): PGP 3.0 and it's library or the GNU Hurd... jim

1 0