December 2003 - cypherpunks-legacy

Re: CyberCash just did it!
by peng-chiew low 17 Dec '03

17 Dec '03

Markus Guehrs wrote: > Is anybody aware of the fact that CyberCashs credit card payment system > (http://www.cybercash.com) is an almost 1:1 SET implementation. Since > this system is now working and SET is still a draft I assume the SET > authors got/took/copied many ideas from CyberCashs genius software > system. Out of curiousity I visited their site and I read the part of the security section which I've pasted below. Is it true? After all that I've read about the export issue and here Cybercash tells me they have got permission to export strong crypto? Please note that I am not someone who is familiar with the strength of crypto algo and any response to this post would be most helpful to a newbie in this business. Thanks. Quote from Cybercash's web page : http://www.cybercash.com/cybercash/wp/bankwp.html#security " CyberCash transactions are protected by a powerful and sophisticated system of encryption, combining DES private-key and RSA public-key encryption technologies. In fact, CyberCash's 768-bit RSA key encryption capability is unique in that it is the most powerful encryption technology currently licensed by the United States government for export. CyberCash also has been approved by the government for 1024-bit RSA key encryption, and will be providing that technology by the end of 1996. "

1 0

FW: "Scannist" arrested
by jim bell 17 Dec '03

17 Dec '03

If there is any residual doubt as to why I'm proposing an "extreme" solution to government, "Assassination Politics," I think the following is just another good reason to do so. I contend that people like that cop and the judge would be FAR more careful in how they do their job if they were aware they might be angering well over a half a million hams. This kind of abuse will happen as long as there is no mechanism to prevent it. > ---------- >From: owner-scan-l >To: Multiple recipients of list SCAN-L >Subject: "Scannist" arrested >Date: Sunday, May 26, 1996 1:47PM > >Two sad things: > >1) Cops in some parts of Kentucky can't tell a scanner >when they see one (or don't see one, in this case), and > >2) the radio in question IS INCPABLE OF BEING MODIFIED TO >RECEIVE OUT OF BAND!!!! Sheesh. > >Peter > >Excerpted from: > >The ARRL Letter >Electronic Update >May 24, 1996 > ><...> > > >TEEN HAM ARRESTED ON SCANNER CHARGES > >Greg Godsey, KF4BDY, a 16-year-old ham from Hopkinsville, Kentucky, was >arrested May 11 by local police who charged him with carrying a scanner that >could receive police radio frequencies. His Radio Shack HTX-202 2-meter >transceiver was confiscated. At a court appearance May 14, he was bound over >for trial on June 4. The judge reportedly didn't hear any arguments >concerning whether the law was broken, possibly because the arresting >officer wasn't present. > >According to reports, Greg, the ARES EC for Christian County, Kentucky, and >a ham since last summer, was detained by Hopkinsville Police. The officer >indicated that when he arrived, Greg "was talking on a radio that is capable >of receiving police frequencies. I verified this by keying my radio, which >broke the squelch on [Greg's] radio." > >Greg denies the charges and says his radio has not been modified and cannot >receive or transmit outside of the 2-meter band. He has sought advice from >the ARRL in resolving the matter. ARRL Regulatory Information Branch >Supervisor Norman Bliss, WA1CCQ, says the Kentucky law exempts equipment >possessed by a licensed Amateur Radio operator that is capable of receiving >police frequencies. > ><...> > >=========================================================== >Material from The ARRL Letter may be reproduced in whole or in part, in any >form, including photoreproduction and electronic databanks, provided that >credit is given to The ARRL Letter and The American Radio Relay League. > > >To subscribe to the email distribution list for the ARRL Letter, send >a message to listserv(a)netcom.com with the body (subject is ignored) > >subscribe letter-list > >To unsubscribe, > >unsubscribe letter-list > > Jim Bell jimbell(a)pacifier.com

1 0

Re: The Anti-Briefing...
by L. Jean Camp 17 Dec '03

17 Dec '03

Excerpts from espam: 24-May-96 Re: The Anti-Briefing... by e$pam(a)intertrader.com > We can all think of repressive steps which undeniably will save the lives > of some children, babies, old people, mothers, etc. > > Banning alcohol, banning smoking, banning sex outside of marriage.... > I would like to point out that these things will almost certainly not save the lives of mothers and babies and were sure as fuck not intented to protect women & children. Clue in, in places where all sex outside marraige is illegal being a victim of rape is a crime. It is rapist protection. The banning of alcohol was used to remove children from the homes of 'unfit' immigrant families. It was about 'culture wars' & racial purity. Drug test are proposed to refuse people benefits (sorry your mom's a pothead kid -- so now your going to be HOMELESS!) Then when this kind of propaganda works, women end up fighting idiots who buy _into_ the idea that _we_ caused the problem and thereby preventing more effective action. You do not need to vomit DoD crap about children. You aren't helping anyone but the DoD. Get a half a clue -- if they wanted to protect children they could support funds for housing, food, and health care for families. Five kids a day die from violence from the hands of their parents. The infant mortality rate in DC is twice what it is in Havana. I'm sure those kids are really happy that they do not have to worry about cryptography or seeing naked people on the Internet. Yeah, these are the important issue today for America's children -- NOT. I hope that you do not seriously buy that crap about prohibition of crypto (or porn or pot, etc) being about "protecting children." All that line does is separate otherwise effective advocates of freedom - - if you're bitching about women & children you're not fighting the NSA and it will keep you from working effectively with anyone in the categories >old people, mothers, etc.. and other not entirely trivial political groups. Jean

1 0

Re: Remailers & liability
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"gbroiles(a)netbox.com" "Greg Broiles" 26-MAY-1996 19:38:38.36 >For what it's worth, I'm still planning to run a remailer again when I get >settled down somewhere. (I don't think remailers do much good where the >operator isn't root, so I'm not bothering with trying to run one on someone >else's system.) My debt/asset ratio is bad enough from all of this school >that I don't have much for anyone to levy against. Ha, ha. Anyone want some >rapidly obsolescing computer and law books? :( Why, precisely, do you think that remailers don't do much good where the operator isn't root? The possibility of the sysop looking at the mail & getting the private key, the increased susceptibility to cracking of non-root accounts, possible sysop non-cooperation in an honest manner (as opposed to the first one), or what? Thanks, -Allen

1 0

Czarevna Tatjana Mixmaster Remailer
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"nobody(a)replay.com" 26-MAY-1996 20:19:44.63 >Questions or comments should be directed to tatjana(a)mindport.net. Might I ask why you didn't mail from this address? -Allen

1 0

Re: Quickremail v1.0b
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"markm(a)voicenet.com" "Mark M." 27-MAY-1996 12:57:44.84 >On Sun, 26 May 1996, Lance Cottrell wrote: >> Which remailers does it install? >Mixmaster, and it gives a choice of either installing the Freedom remailer or >the remailer code written by Matt Ghio. It also has support for reorder >scripts, but I haven't debugged that part yet. What are the major differences between the various Mixmaster remailer codes, especially in terms of the logistics of running a remailer? I'm particularly interested in aspects related to A. running one by someone not particularly familiar with UNIX (e.g., me) and B. a remailer accepting/sending mail only from/to a limited list of addresses (e.g., only other remailers). Thanks, -Allen P.S. I'm planning on starting up a remailer, probably on Lance's machine (to take advantage of his expertise) sometime this summer. I do want to get PGP for the VAX before then, and the MIT site doesn't appear to have this code.

1 0

Re: CyberCash just did it!
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"pclow(a)pc.jaring.my" "peng-chiew low" 27-MAY-1996 13:41:16.44 >Out of curiousity I visited their site and I read the part of the security >section which I've pasted below. Is it true? After all that I've read about >the export issue and here Cybercash tells me they have got permission to >export strong crypto? Please note that I am not someone who is familiar with >the strength of crypto algo and any response to this post would be most >helpful to a newbie in this business. Thanks. While I am also uncertain as to how strong the crypto they're using is, I would guess that this passes under the banking exemption... I would suspect that there is some lack of full anonymnity in the method, because otherwise the US government wouldn't have given export permission even with that exemption. -Allen

1 0

Re: holographic remailing & key escrow
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

At 03:20 PM 5/26/96 -0700, Wei Dai wrote: >This software already exists. Take a look at Disperse/Collect at >http://www.eskimo.com/~weidai. Disperse splits a file into n base64 >encoded pieces where any k of them can be used to reconstruct the >original. Collect will search through arbitrary collection of files (for >example the entire news spool) for these pieces and automatically >reconstruct everything that it finds. Could something akin to this be a practicle method or test for Blaze's "Key Escrow without Escrow Agents"? The main thing lacking is a secure method to get it out to the different escrow servers... (One could just encrypt each chunk of the message/key in a server's public key... Servers would read that newsgroup and pull down and escrow the chunks that they recognize.) _______________________ Regards, When we ask advice, we are usually looking for an accomplice. -Marquis de la Grange Joseph Reagle http://farnsworth.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

Re: CyberCash just did it!
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

At 12:08 AM 5/28/96 +0700, peng-chiew low wrote: According to below, it looks like the session keys are single-DES, and they are swapped using RSA... I'd think people would rather try cracking the DES without bothering with the RSA -- be it 768 or 1024... (If the session key is weak, it doesn't much matter what you send it in...) >http://www.cybercash.com/cybercash/wp/bankwp.html#security > > " CyberCash transactions are protected by a powerful and sophisticated > system of encryption, combining DES private-key and RSA public-key > encryption technologies. In fact, CyberCash's 768-bit RSA key encryption > capability is unique in that it is the most powerful encryption technology > currently licensed by the United States government for export. CyberCash > also has been approved by the government for 1024-bit RSA key encryption, > and will be providing that technology by the end of 1996. " _______________________ Regards, When we ask advice, we are usually looking for an accomplice. -Marquis de la Grange Joseph Reagle http://farnsworth.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

Noise, was The Anti-Briefing...
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 04:08 PM 5/27/96 -0400, L. Jean Camp wrote: > Five kids a day die from violence from the hands of their parents. Not so: I believe this figure is "parent or guardian". Nearly all kids are killed by stepfathers, and some by step mothers. Murders of children by their natural parents are extraordinarily rare. A stepfather or stepmother has even more incentive, and considerably more opportunity, to murder her spouses children than she has to murder her spouses lover. > The > infant mortality rate in DC is twice what it is in Havana. Nobody, least of all Castro, knows what the infant mortality rate in Cuba is, since in Cuba, truth is a crime. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0