December 2003 - cypherpunks-legacy

Re: WinSock Remailer Now Available By E-Mail
by loki＠infonex.com 17 Dec '03

17 Dec '03

I would be happy to distribute it from my site, along side Mixmaster. -Lance At 3:15 PM 8/13/96, Joey Grasty wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >The first alpha release of the WinSock Remailer is now available via >e-mail. Due to problems setting up user authentication on my homepage >at > > http://www.c2.net/~winsock/ > >I have decided to distribute it via e-mail until I can get user >authentication working. > >In order for you to receive the WinSock Remailer, I have to be reasonably >sure that you are a US or Canadian citizen or permanent resident. >Therefore, you will need to review a copy of the License Agreement and >fill out the required information. Then clear-sign the agreement with PGP >and mail it to me at jgrasty(a)gate.net. Don't forget to tell me where I can >find your PGP public key so that I can check the signature. No signed >license agreement, no remailer. > >In order for me to have a good feeling that you are not a foreign national, >I need to have the following information check out: > >a. Verify that your address is within the boundaries of the US or Canada. > I will do this by checking if you are in a public address database such > as "88 Million Households Phone Book". >b. Verify that your name and e-mail address is the same as in your public > key. > >This is basically the same method that Netscape is using at: > > http://wwwus.netscape.com/eng/US-Current/ > >to verify citizenship or permanent residency, but the process is not >automated. > >I don't like having to enforce clearly unconstitutional ITAR regulations, >but I'm not ready for an extended stay at Club Fed. > >- ---------------------------cut here----------------------------------- >WinSock Remailer License Agreement > >This is the license agreement between Joey Grasty and the end user >of the WinSock Remailer. > >Name of User: <your name> >Street Address: <your street address> >Town, State, Country: <town>, <state or province>, <country> >Phone Number: <your phone number> >E-mail Address: <your e-mail address> >Where to find your PGP Public Key: <instructions> > > >1. Joey Grasty grants to you a non-exclusive, non-sublicensable, >license to use this Alpha version of the WinSock Remailer (the >"Software"), in binary executable form for evaluation and trial use >purposes only. > >2. JOEY GRASTY MAKES NO REPRESENTATIONS ABOUT THE SUITABILITY OF THIS >SOFTWARE OR ABOUT ANY CONTENT OR INFORMATION MADE ACCESSIBLE BY THE >SOFTWARE, FOR ANY PURPOSE. THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT >EXPRESS OR IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY >AND FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT. THIS SOFTWARE >IS PROVIDED GRATUITOUSLY AND, ACCORDINGLY, JOEY GRASTY SHALL NOT BE LIABLE >UNDER ANY THEORY OR ANY DAMAGES SUFFERED BY YOU OR ANY USER OF THE >SOFTWARE. JOEY GRASTY DOES NOT HAVE ANY OBLIGATION TO SUPPORT THIS >SOFTWARE OR ISSUE ANY UPDATES IN THE FUTURE. > >3. While Joey Grasty intends to distribute a commercial release of the >Software, Joey Grasty reserves the right at any time not to release a >commercial release of the Software or, if released, to alter prices, >features, specifications, capabilities, functions, licensing terms, >release dates, general availability or any other characteristics of the >commercial release as he sees fit. > >4. Title, ownership rights, and intellectual property rights in and to >the Software shall remain in Joey Grasty and/or its suppliers. You agree >to abide by the copyright law and all other applicable laws of the >United States including, but not limited to, export control laws. > >5. Joey Grasty may terminate this License at any time by delivering notice >to you and you may terminate this License at any time by destroying or >erasing your copy of the Software and notifying Joey Grasty of this action >forthwith. This License is personal to you and you agree not to assign your >rights herein. This License shall be governed by and construed in accordance >with the laws of the State of Florida and, as to matters affecting copyrights, >trademarks and patents, by U.S. federal law. This License sets forth the >entire >agreement between you and Joey Grasty. > >6. Use, duplication or disclosure by the Government of any locality, state >or country, its elected officials or employees, is forbidden. > >7. You may not download or otherwise export or reexport the Software or >any underlying information or technology except in full compliance with >all United States and other applicable laws and regulations. In >particular, but without limitation, none of the Software or underlying >information or technology may be downloaded or otherwise exported or >reexported (i) into (or to a national or resident of) Cuba, Haiti, >Iraq, Libya, Yugoslavia, North Korea, Iran, or Syria or (ii) to anyone >on the US Treasury Department's list of Specially Designated Nationals >or the US Commerce Department's Table of Deny Orders. By downloading >the Software, you are agreeing to the foregoing and you are >representing and warranting that you are not located in, under control >of, or a national or resident of any such country or on any such list. > >8. JOEY GRASTY OR ITS SUPPLIERS SHALL NOT BE LIABLE FOR (a) INCIDENTAL, >CONSEQUENTIAL, SPECIAL OR INDIRECT DAMAGES OF ANY SORT, WHETHER ARISING IN >TORT, CONTRACT OR OTHERWISE, EVEN IF JOEY GRASTY HAS BEEN INFORMED OF THE >POSSIBILITY OF SUCH DAMAGES, OR (b) FOR ANY CLAIM BY ANY OTHER PARTY. THIS >LIMITATION OF LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR PERSONAL >INJURY TO THE EXTENT APPLICABLE LAW PROHIBITS SUCH LIMITATION. FURTHERMORE, >SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR >CONSEQUENTIAL DAMAGES, SO THIS LIMITATION AND EXCLUSION MAY NOT APPLY TO >YOU. > >9. HIGH RISK ACTIVITIES. The Software is not fault-tolerant and is not >designed, manufactured or intended for use or resale as on-line control >equipment in hazardous environments requiring fail-safe performance, such >as in the operation of nuclear facilities, aircraft navigation or >communication systems, air traffic control, direct life support machines, >or weapons systems, in which the failure of the Software could lead >directly to death, personal injury, or severe physical or environmental >damage ("High Risk Activities"). Joey Grasty and its suppliers specifically >disclaim any express or implied warranty of fitness for High Risk >Activities. > >Clear-sign this agreement with your PGP public key and e-mail it to >jgrasty(a)gate.net. > >- -------------------------------cut here------------------------------------ > >Thank you for your patience with this crude form of distribution. > >Regards, > > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQB1AwUBMhE2UsODO2V89BZZAQGOLAL9GU15R4N/6xIZCJGYaQ0Vlw4e7rqP06+d >YH5806om50v/+8P9OKrxBOECEHPJLirFQcITXsYMn/DkVAcTVTrz9rKfJdzToeyB >Bwr4vgpMqKw4oZnFGJa1PvUotSjTnETT >=Arts >-----END PGP SIGNATURE----- > >-- >Joey Grasty >jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] >jgrasty(a)pts.mot.com [work -- designing pagers] >"Anyone who considers arithmetical methods of producing random digits is, >of course, in a state of sin." -- John Von Neumann >PGP = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7 ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://www.obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

[SIGNAL] Microsoft's Internet Explorer
by Frank Stuart 17 Dec '03

17 Dec '03

Sorry, no rants, economic theories, or chemistry questions, but... According to C-Net Radio (http://www.cnet.com/) Microsoft will be including 128-bit SSL encryption in their Internet Explorer 3.0 for Win 95 and NT 4.0. It took a bit of digging but I finally found the Microsoft press release at "http://www.microsoft.com/corpinfo/press/1996/aug96/128SECpr.htm". | (Douglas) Hofstadter's Law: | It always takes longer than you expect, even Frank Stuart | when you take into account Hofstadter's Law.

2 1

Re: PGP...
by Bjorn E. Andersson 17 Dec '03

17 Dec '03

1 0

Re: Anguilla - A DataHaven?
by tcmay＠got.net 17 Dec '03

17 Dec '03

Vince Cate has written several things in the past couple of days about the situation in Anguilla; actually, I think we've learned more about the operation of his service in the last few days than we have in the past year or so. Some instructive points, and some worries. This message contains: * discussion of the situation Vince describes * what I surmise to be some of the behind the scenes realpolitik * the role of physical vs. cyberspace data havens Rather than respond point by point to one of Vince's messages, I'll first make a few general points, free-form: 1. As I have said, I admire what Vince has done. Evolutionary learning can't happen without experiments and tests, so his experiment is important. 2. If Vince ends up moving in a direction different from that of operating a traditional (!) data haven, I will not be very surprised. Were I in his position, I might well do the same thing. (Lots of reasons, issues....)\ 3. Vince seems to be a in a somewhat precarious position, awaiting renewal of a one-year work permit. In any country, this is a shaky basis for continuing a project. I certainly don't know what his relationship is to the local authorities, but I sure know I'd feel constrained if I were up for renewal like this. (Consider how the U.S. refuses to renew visas for "undesirables," including writers whose writings the establishment dislikes, AIDS activists, anarchists (!!!), etc.) 4. The small size of Anguilla--I surmise and feel--works against operating the kind of "data haven" many of us feel could exist. Given that data havens will have all sorts of unusual, undesirable, and subversive materials, this "small community" will probably react unfavorably to any publicity generated. (And it's in the nature of some of these customers to "advertise" themselves flamboyantly--unlike Swiss banking--so as to generate customers...this pretty much guarantees that there will be stories like "Anguilla--New Source for Neo-Nazi Material!") 5. In the U.S., there are 250 million people, extensive support networks for protecting free speech (much as we like to focus on the suppression cases), and a legal system that really does make it pretty hard for a bureaucrat or even the President to pick up a phone and have a business he doesn't like shut down. I surmise, given the size of Anguilla and the non-constitutional basis of its government, etc., that it _might_ be a lot easier for a bureaucrat or the Governor-General, or whomever, to seriously disrupt any business by a few phone calls. I don't know this for a fact, but I suspect it to be true. (The closest I've been to Anguilla is the Bahamas, and it is reported to be seriously corrupt. I can't imagine a data haven surviving there if the Ruling Families decided they didn't like it.) 6. So, what does this mean? It means, I believe, that small Carribbean islands are likely to be poor choices for data havens. The more "civilized" they are, ironically, the poorer a choice they are. (Think: pirate islands, where "anything goes," so long as the right payoffs are made.) 7. Multidimensionality. With banking havens, there is basically only a single degree of freedom to consider, at least insofar as deciding which policies to consider. That is, over a period of many decades a banking industry arises in some country (Switzerland, Austria, Lichtenstein, etc.), with bankers, vaults, protocols for deposit and withdrawal, etc. And with lots of fees to lubricate the whole system, provided payoffs to various officials and royals, etc. Contrast this with a small data haven (a new industry) in a small country, with operating margins that are razor-thin (given the pricing structure Vince announced, I doubt Taxbomber and other customers were paying enough to ensure a flow of payoffs to the Ruling Families of Anguilla and the various officials that need to look the other way). 8. That is, how will a data haven handle situations where diverse "threats" and "abominations" are traced to the haven? Bomb information, pornography, child porn, trade secrets, pyramid schemes, and so on? (Vince can of course say to each of these: "Not what I want," but he may find that such ad hoc declarations chase away most of his business...) 9. In summary, I applaud Vince's experiment. But I wouldn't call it a data haven, based on what I've seen. Maybe a tax haven, but even this I have yet to see much evidence for (Vince is not free to disclose who his customers are, of course, so we are somewhat isolated.). I will say that if the only goal is to avoid sales tax and/or income taxes, operating out of Anguilla may not be ideal. After all, suppose there's a dispute (a la Taxbomber): is one supposed to fly to Anguilla, hire local attorneys, and sue in the local courts? The tens of thousands of dollars this would cost would likely swamp any tax savings.....depends on a lot of factors, but I think you all see the point. Well, I've written enough. Vince asked me a few specific questions, so I'll briefly answer: >Tim, we would all be very happy if you were to locate a country that could >be the site of the ideal datahaven, and finance a couple cypherpunks to >setup there. It would be a big help to our cause. Could you do this? Yes and no. Yes, if a good business opportunity presented itself, with reasonable payback, good ideological basis, and without too many entanglements (e.g., having to fly to Country A to check on my investment too often). No, in that there is no "liquid market" in such investment opportunities. That is, I can't just say "Send me your plans and how much money you want." I might consider partly funding a venture by people well-known to me, but, so far, no such possibilities have presented themselves. >In the mean time, people may have to exist in cyberspace (like >www.taxbomber.com) without having a totally secure physical location. >This is not the end of the world, or really even that painful. If done >right you could be down for only an hour - just long enough for >nameservers to change. Taxbomber is now setup to do it very fast next >time, if the need ever comes. Tim, I think you have even advocated this >approach, not stressing the physical location, just the cyberspace >location. No? Yes, I agree. I actually wrote my "Crypto Anarchist Manifesto" in mid-1988, just a month or so before reading Sterling's "Islands in the Net," which was focussed on physical data havens (he may've been the one to coin the term, actually). My thinking was already heavily influenced by Vinge's "True Names," and Chaum's work on untraceable digital cash (1985) was well-known to me (for reasons I've written about elsewhere), so I tended to view data havens as not being tied to physical communities where the local potentates could revoke work permits, visas, travel permits, business licenses, etc. The Anguilla Experiment is certainly not changing this opinion. (And Stephenson's "Snow Crash." in 1992, further popularized this vision of cyberspace havens....I can't say he devised any new forms that some of us hadn't already been thinking about, but he sure did make it a more vivid vision through his evocative fiction.) What the form of these "cyberspace data havens" might take is unclear. Several pieces of technology are missing, just as they were missing four years ago when one of the early list members contacted me to tell me how easy it would be to set up a data haven with computers. (It wasn't easy then, and it ain't easy now. The pieces that are missing are the reifications of protocols we talk about a lot....mere encryption and authentication are only the starting points, and look at how hard it's been just to get _them_ deployed.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

new type2.list/pubring.mix
by John Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Everyone, There is an updated type2.list/pubring.mix combination available for the mixmaster remailer software. You can get it via WWW from www.jpunix.com or by anonymous FTP from ftp.jpunix.com. Of note is the addition of the squirrel remailer. Welcome aboard! - -- John Perry - perry(a)alpha.jpunix.com - PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMhGxS1OTpEThrthvAQERXgP9FQJK5byJ2bXPIy1jwzZSBt6qNgMRCXph rqDRijUxehiSpmis5mq3gTtH/CcA7wAqkxLfO9izE3sC4HqWCd7B5D7KLZx9VPNG kZvUfQrZjzubLtz4ly0DtEDtnbKTEFLZ1tJL1ZUnZgsKTLEmeEIsXDc6r5zaGC0F E/U+SBe2oOg= =gYJD -----END PGP SIGNATURE-----

1 0

Re- PGP
by Bjorn E. Andersson 17 Dec '03

17 Dec '03

Sorry for the noise, I did a Cc by mistake. Bjorn A.

1 0

Anguilla - commercial and mailbombing policies
by Vincent Cate 17 Dec '03

17 Dec '03

Dr.Dimitri Vulis KOTM <dlv(a)bwalk.dm.com> > > A while back, when Vince first started advertizing his site, I asked him >a few hypothetical questions, and he said roughly this: If client X posts >something to Usenet from Vince's site, and if Y dislikes X's article so >much that he mailbombs X, then Vince would pull X's plug. (I have the >exact quote saved.) I lost interest right then. I'm not surprised that >Vince acted dishonorably by pulling a client's plug with no warning for a >very flimsy reason. That question was about commercial ads, and I said "As long as I am not mailbombed I don't care about how you post.". I did *not* say I would pull the plug (full exchange below). From your other questions it looked like there was no chance of you being a customer so I did not fully explain. I have been mailbombed around a dozen times in the last year and never cut anyone off. Details below (I too have the exact quote)... Dimitri: > e) to spam usenet with commercial ads. Vince: >e) I think you would have to spam more than 100 groups to get my >system mail bombed. As long as I am not mailbombed I don't >care about how you post. First, yes, that 100 groups is off the wall. What I meant was you can send out commercial ads and I don't care at all. If you get mailbombed, that is another issue. If mailbombed then it goes toward your traffic. You get 100 MB/month of traffic with a domain name, and if you go over that amount of traffic the cost is $1/MB. If you have prepaid by check, and I don't know who you are, and your account goes below $0, I would cut you off till more money came in. Sorry for not explaining that. -- Vince ----------------------------------------------------------------------- Vincent Cate vince(a)offshore.com.ai http://www.offshore.com.ai/vince/ Offshore Information Services http://www.offshore.com.ai/

2 1

Anguilla - legal action or lack thereof
by Vincent Cate 17 Dec '03

17 Dec '03

Dr.Dimitri Vulis KOTM <dlv(a)bwalk.dm.com> > > "Greg Kucharo" <sophi(a)best.com> writes: > > While Tim may be right that nobility is lost when backing down to the > > authorities, the fact is that this game has little to do with noble > > purposes. ... > > Nor was there any activity from the authorities. There were activity from the authorities. They had copies of the article and were very concerned about it and calling around asking people who knew me about this. They have not started any legal action about this. However, my work permit is up for renewal. They would not ever have to take legal action to shut me down, just decide not to renew my work permit, and I would have to leave the island. My lawyer says it is illegal to sell fake passports in Anguilla. So defending this guy could easily have been a fight to my death as an Anguilla ISP. Not defending him means he relocates to another ISP. This is the Internet guys, relocating a domain is not such a big deal. Taxbomber is using it as a reason for publicity, but he lost no email and his web pages were not down long. Remember regulatory arbitrage. If one country does not want something, there are other countries. I am going to apply for a 3 year work permit next time (they only gave out 1 year ones till very recently - since I applied). Assuming I get this, I will be in a somewhat more secure position. -- Vince ----------------------------------------------------------------------- Vincent Cate vince(a)offshore.com.ai http://www.offshore.com.ai/vince/ Offshore Information Services http://www.offshore.com.ai/

2 1

Re: National Socio-Economic Security Need for Encryption Technology
by Bart Croughs 17 Dec '03

17 Dec '03

Joel Morgan wrote: >It seems clear that capital investment in tools will contribute to the -productivity- of workers. (Tools here meaning whatever machinery/ infrastructure is used to get work done.) Bart Croughs quotes a number of economists who seem to be saying that when capital investment leads to increased productivity (per worker) this also leads to higher wages. I'm not sure I understand -why- this should necessarily be so. It's my impression that in manufacturing industries, the more mechanized production is, the more workers will get paid. Then again, perhaps a more mechanized industry will pay more because more mechanized industries hire workers with higher skills (albeit fewer workers). It's my impression that when a company makes capital investments which increase productivity, the fruits of this increased worker productivity are shared (to some extent) with the workers. I can imagine a number of reasons why this might be done, but it's not absolutely clear to me that this would be a direct result of market forces.< Increased productivity of workers leads to higher wages for workers because of competition between employers. If a worker produces the worth of $3000 per month for his boss, and his boss is only willing to give him $2000 salary, then there are other employers who would be happy to give this man a job at a higher wage. They still profit if they give him a wage of $2100 instead of $2000. This process goes on until the salary of the worker equals his marginal productivity. Bart Croughs

1 0

Re: National Socio-Economic Security Need for Encryption Technology
by Bart Croughs 17 Dec '03

17 Dec '03

Arun Mehta wrote: >>Bart Croughs wrote: >I don't assume that the *total amount* of capital will be lowered in the US when US capital moves abroad. I assume that the amount of capital in the US will be *relatively lower*. So the wages will be *relatively* lower (lower than when the capital wouldn't have left the US), but not necessarily lower in any absolute sense. I thought this was obvious, but since Arun Mehta also misunderstood me, maybe I should have been more explicit here. > Henry Hazlitt in 'economics in one lesson' (p. 139): "The best way to raise wages, therefore, is to raise marginal labor productivity. This can be done by many methods: by an increase in capital accumulation - i.e. by an increase in the machines with which the workers are aided..." Pardon me, but I'm still confused. When Hazlitt talks about how many machines are employed, surely that's "absolute" capital, not relative. If US capital is invested abroad sensibly, such that it enriches the investors, they have more money to invest in machines at home and thereby increase local productivity (and wages). << If investors use their capital to invest abroad, this capital cannot at the same time be used to invest at home. Only after the investors decide not to invest abroad any more, they can invest it at home. But I was not talking about investors who decide to stop investing abroad and start investing at home. I was talking about investors who decide to invest abroad instead of at home, and the effect of such a decision on the wages in the US. Maybe in the future these investors will have more money, and will decide to stop investing abroad and start investing at home. But in the mean time, all the capital that's invested abroad diminishes the amount of capital invested at home, and so causes the wages at home to be less than they otherwise would have been (but not necessarily less in any absolute sense). Bart Croughs

1 0