December 2003 - cypherpunks-legacy

Re: Remailers Pose Risk
by Michael Peponis 17 Dec '03

17 Dec '03

> Computerworld, February 12, 1996, Front page: > "Anonymous remailers have a lot of nasty potential," said > Stephen T. Kent, chief scientist for security technology at >So do kitchen knives or automobiles. So do brain-dead journalists and "security experts". Oops, take that back, no probability involved, they are nasty problems. [..] > One snowy day last month, for example, about 25% of the > workforce at a defense contractor in Rockville, Md., went > home after they received a bogus E-mail message dismissing > them for the day. The message originated from an anonymous > remailer that allowed the user to impersonate a senior > company official. :Was that a remailer or simply forged mail? How long have people been bitching about putting digital signatures on stuff like that. If it was signed, it could of been verified if indeed it was legit or not. Irregardless of where it came from, anybody stupid enough to believe everything they read, without checking out it's validity, deserves what they get. [..] > "As in the case of smallpox, yellow fever, flu epidemics, > AIDS or malaria, it will take disasters before the public > may accept that some forms of restrictions on the > electronic freedom of speech and that privacy may be > worthwhile."FNORD! What?? like anonymous electronic media spreads the disease somehow. To the person who wrote the article, you have proved beond a shadow of a doubt that you are dense as a brick. Wrong type of virus, you mean the other kind. > Do's and don'tsAhem > Unethical or illegal uses of anonymous remailers:[..] > - To violate copyright laws ... Scientology... > - To encourage others to commit unethical or illegal > behavior Oh Boo Hoo, the moral decay of society, that is your problem shithead, not mine, some of us survive no matter what happens to the rest of you. Regards, Michael Peponis PGP Key Avalible form MIT Key Server,or via finger

1 0

Legal status of Indian Reservations and CDA
by Michael Peponis 17 Dec '03

17 Dec '03

If I remember correctly, are not American Indian reservations considered qusi-sovergin states under the law? If this is true, what would stop me from negotiating with some tribe to establish an ISP on the reservation and then placing whatever material I wanted on that site without fear of reprisals from the US goverment. After all, if they are a soveign state, decency is covered by whatever laws they have, if any, not the CDA. If this is true, the Indians get the benift of having state-of-the-art telecommunications in thier communities, plus residual job creation, and everyone else gets freedom of speech. Any comments? Regards, Michael Peponis PGP Key Avalible form MIT Key Server,or via finger

1 0

Re: Legal status of Indian Reservations and CDA
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:03 PM 2/17/96, Michael Peponis wrote: >If I remember correctly, are not American Indian reservations considered >qusi-sovergin states under the law? > >If this is true, what would stop me from negotiating with some tribe to >establish an ISP on the reservation and then placing whatever material I >wanted >on that site without fear of reprisals from the US goverment. > >After all, if they are a soveign state, decency is covered by whatever laws >they have, if any, not the CDA. > >If this is true, the Indians get the benift of having state-of-the-art >telecommunications in thier communities, plus residual job creation, and >everyone else gets freedom of speech. "Bingo." Actually, not. Despite the Indian bingo parlors, look at what is lacking in this model: brothels, money-laundering banks, hash parlors, etc. (Not that there aren't whorehouses operating semi-openly on Indian lands, as elsewhere, just that the fiction that Indian reservations are quasi-sovereign is just that, a fiction. Recall the case of Native American uses of peyote.) Of course, this fiction of sovereignty has been useful for the intelligence community when they wanted it: Wackenhut and related CIA companies used the Cabazon Band of Indians lands near Indio, California to develop products that are illegal to develop in the nominal United States...despite being less than a mile from the main freeway linking LA and Palm Springs. And I was told that certain microwave (Long Lines?) lines were deliberately routed through Indian reservations, allowing NSA-GCHQ monitoring without violating the "no domestic interception" fiction. So, it might be possible to eventually push through an exemption to the CDA that is somewhat analogous to the way some Indian reservations can have gambling facilities that are otherwise forbidden, but I expect the court battle would be a long one, and would need big money to pursue. (Gambling got pushed through for obvious financial reasons, and perhaps because of some judicious payoffs to local officials, courts, etc. Yet another convenient fiction.) --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: True random numbers
by Sandy Harris 17 Dec '03

17 Dec '03

Deranged Mutant <wlkngowl(a)unix.asb.com> wrote: >maruishi(a)netcom.com wrote: >> >> I was trying to think of a way to come up with true random numbers... >> And knowing a bit of UNIX socket TCP/IP programming I made a small [..] > >I wouldn't trust the samples taken from networked sources. Me neither, in general. A possible exception: I wonder if the checksums on Ethernet or IP packets use a reasonably strong CRC algorithm. If so, they might be a decent source of randomness in an environment where you could be sure the Black Hats couldn't see them. e.g. using only packets from your own LAN, suitably protected by firewall & good administration. >You're better >off with a kernel patch that samples from local sources directly like >disk or keyboard timing variations... such patches already exist, with >similar drivers developed for DOS and OS/2 systems as well. I'd be more inclined to hash the kernel's internal tables, e.g. process & file descriptor tables. These should vary quite a lot & if the enemy can see them, random number quality is the least of your worries. RFC 1750 is a good reference on this problem. -- Sandy Harris sharris(a)fox.nstn.ca

3 3

Privacy and Information Disclosure
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:57 PM 2/17/96, "A. Padgett Peterson P.E. Information Security" >ps Tim was correct, believe I *registered* Libertarian that year - do remember > not getting invited to vote in any primaries. Thanks for confirming/acknowledging this. The larger point, not directed at Padgett is this: people voluntarily reveal information about themselves, get themselves placed on mailing lists for like-minded people (such as this list, or the Rose Growers of Alberta list, etc.), etc., and then they complain that others are compiling data on them! The classic example is borrowing money, whether via a credit card (you did know you're borrowing, didn't you?) or for a conventional bank loan. Most people who borrow money and then repay the money _want_ this to be known to other potential lenders...this is what a "credit rating" is all about. Of course, those who borrow money and then don't repay it are anxious not to have others know about this situation! If you don't want to be on a Libertarian Party mailing list, don't register officially as an LP member. If you don't want a record with the credit card companies, don't use their credit cards. If you don't want to be a list of people who buy sexual devices, don't buy them through the mail (or use money orders, mail drops, etc.). And so on. What I can't imagine anyone on this list wanting (though apparently some percentage do want them) are laws which give the illusion of enhancing privacy by taking away the rights of others. I say "illusion" because The Ones Who Really Matter will still have the goods on you. (The Lotus CD-ROM of addresses being the canonical example of this. It was hailed as a great victory that "the Net" rallied to get Lotus to abandon plans to sell this CD-ROM to me and thee, where in actuality it just meant that the sales remained to direct marketers, law enforcement, and the like. But the Ostrich Syndrome prevailed.) --Tim May Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Remailers Pose Risk
by Deranged Mutant 17 Dec '03

17 Dec '03

Pitty the author of that article won't see replies to it on the list. > From: "Michael Peponis" <mianigand(a)unique.outlook.net> > To: cypherpunks(a)toad.com, wlkngowl(a)unix.asb.com > Date: Sat, 17 Feb 1996 18:03:09 +0000 > Subject: Re: Remailers Pose Risk [..] > Oh Boo Hoo, the moral decay of society, that is your problem shithead, not > mine, some of us survive no matter what happens to the rest of you. > Regards, > Michael Peponis > PGP Key Avalible form MIT Key Server,or via finger Rob. --- Send a blank message with the subject "send pgp-key" (not in quotes) to <WlkngOwl(a)unix.asb.com> for a copy of my PGP key.

1 0

MIT Keyserver (at pgp@pgp.mit.edu) Mostly Operational
by jis＠mit.edu 17 Dec '03

17 Dec '03

(A copy of this message has also been posted to the following newsgroups: alt.security.pgp) -----BEGIN PGP SIGNED MESSAGE----- The keyserver running at pgp(a)pgp.mit.edu is once again operational. It is using new keyserver software. The old keyserver software was a collection of perl scripts that invoked PGP to do its key management. The new server is written in "C" and does its own key management, complete with appropriate indices. Not all email commands are implemented. However "GET", "ADD" and "INDEX" (when given an argument to look for) do work. Response is immediate (plus or minus e-mail delays). The best on-line way to use the keyserver is via the World Wide Web at: http://bs.mit.edu:8001/pks-toplev.html Enjoy. -Jeff -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMSaaCcUtR20Nv5BtAQF76wQAmsuF4t43zIaNjW1lZS9fhYr/3UjIHqVT V3jMSJ5W3gsEWkHzigP2VY5tfduiC4oQJOaGaHFSSI6jkhEFTpjOvVMIe6ye/GKh pqiXNm/wBef4EFQ+NqKjPc/TW28odVGR50A5kneI/tyOjAYrFzetakOUlBeq+Qrv 1e4OamD65fo= =FyXc -----END PGP SIGNATURE-----

2 1

Re: True democracy in America.
by Deranged Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Michael Peponis wrote: > In my opinion, only the most basic of services, trash collection, road > maintenance, education (decided upon experts, not just people with opinions. > I don't claime to be an expert on history, so why should I have a say on how it > is tought, I have no expertise in that area). An off-topic quickie rant regarding "essential services" and "qualification"... I notice in the current tax-cutting climate (at least in the US) that people who resent it when garbage collectors, janitors, teachers, train conductors, etc. are making a "decent" wage because they have to pay the taxes and fees (private as well as public) for these services. They seem to view the fact that they have a college degree makes them more entitled to a reasonable standard of living than a high-school drop-out... Yet in terms of supply and demand economics, perhaps garbage collectors etc. deserve to be paid more than accountants and salesmen... This has nothing to do with cypherpunks or himalayan hackers in hot tubs, so back to the usual data trash. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSTjqCoZzwIn1bdtAQHcmwF+LJjO9Q+6GAKVPmWyfKGOiKvPfv3/9DiY qqNhHIIUL1AH6wzq1ccTUg1i+dg+MMH7 =pIUZ -----END PGP SIGNATURE-----

1 0

Indian Reservations
by Greg Kucharo 17 Dec '03

17 Dec '03

A indian reservation sure beats moving to the Turks and Caicos. Well maybe not the weather part, but anyway in recent times I believe that several local governments have challenged the indian gaming enterprises. I recall a report on NPR about a challenge in Deleware or New Hampshire by a group of townspeople that was on the edge of a reservation. The indians won the case and were allowed to continue. Because of the new wealth generated by the bingo parlors and poker tables, the various tribes have gotten lobbying power in Congress. So I think that indian reservation sovernignty has grown in recent years, and would be very intresting course to pursue. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCPAzEIa2wAAAEEALouE7MNxsG+QTOJSrMTygYWKblpI9MgOKaFA+5AICNelAw6 6Gj3B0EQr7bwLILk8EJULG+kYh/ND9Kn1EXBK+elXbwpFCLqoyEZrbHJnurhH/t6 VFEwhbN1V0e/bFOCTq8nykoJjZ/uq0mz8HouIbEt6BYWoKVSUIU/T+iDV3TVABEB AAG0DWdoa0Bzb3BoaS5jb20= =gwax -----END PGP PUBLIC KEY BLOCK-----

3 2

Indian Reservations Redux
by Greg Kucharo 17 Dec '03

17 Dec '03

Here's a bit I turned up after a Alta Vista search. http://www.wtp.net/bus-con/mimn/reservation.html A sample from this page follows; Why Indian Reservations Make Good Offshore Manufacturing Sites for Foreign and Outside Investors STATUS OF THE RESERVATION IN AMERICAN LAW The reservation can be compared to as an Export Processing Zone. It represents an autonomous region within the U.S.A.; wherein, Tribal law can stipulate the exemption from State taxes and from other laws which otherwise exist in the State. The net result being... a cost savings to the investor -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCPAzEIa2wAAAEEALouE7MNxsG+QTOJSrMTygYWKblpI9MgOKaFA+5AICNelAw6 6Gj3B0EQr7bwLILk8EJULG+kYh/ND9Kn1EXBK+elXbwpFCLqoyEZrbHJnurhH/t6 VFEwhbN1V0e/bFOCTq8nykoJjZ/uq0mz8HouIbEt6BYWoKVSUIU/T+iDV3TVABEB AAG0DWdoa0Bzb3BoaS5jb20= =gwax -----END PGP PUBLIC KEY BLOCK-----

1 0