December 2003 - cypherpunks-legacy

What freedom means... [Register]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > The Register - http://www.theregister.co.uk > http://www.theregister.co.uk/981207-000006.html > IBM PC martyrs meet untimely end > Chinese smugglers of kit put to death > http://www.theregister.co.uk/981206-000003.html > Eurospook plan for Web and wireless bugs > If Enfopol 98 is genuine, the cops are getting seriously out of control [much deleted] ____________________________________________________________________ If I can put in one word what has always infuriated me in any person, any group, any movement, or any nation, it is: bullying Howard Zinn The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Building crypto archives worldwide to foil US-built Ber
by John Young 17 Dec '03

17 Dec '03

David Beroff wrote: >Wait a sec. Maybe I'm confused. I thought you were talking about >mass-mirroring the *content* of key sites, not just the URL pointers. > >I would imagine that a small committee would have to "edit" by >suggesting what should and shouldn't be included; one must realize >that if the final file is too large, people will be discouraged from mirroring. Yes, Gilmore's proposal was to mirror the contents; URLs threaten no reg-makers. Yep, mirrors of everything would be very large. We've heard already that folks would like help in knowing what to mirror if they can't do large archives, or can't easily decide which are most important. My advice so far: mirror whatever you can until better advice comes forth. Prime need: many mirrors of the strongest stuff, especially anything above 40-bits, that is anything that now requires a US export license (which appears to be where Wassenaar wildebeests and the domestic US is being stampeded). What would help is a list from experts on what are the most gov-enraging programs. We'd like to offer a few of those on jya.com, to test BXA's up-and- running crypto-enforcement program, maybe get some jail and trial pleasure, it's been too quiet on Bernstein, Junger, Karn, et al, a deliberate gov-stall, awaiting Wassenaar.

1 0

Building crypto archives worldwide to foil US-built Berlin Walls
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: toad.com: Host localhost [127.0.0.1] didn't use HELO protocol To: cryptography(a)c2.net, gnu(a)toad.com Subject: Building crypto archives worldwide to foil US-built Berlin Walls Date: Mon, 07 Dec 1998 15:23:54 -0800 From: John Gilmore <gnu(a)toad.com> Sender: owner-cryptography(a)c2.net The US Wassenaar initiative is an attempt to deny the public not only all future strong crypto developments, but all existing ones. As today's message from Denmark makes clear, the freedom-hating bureaucrats are threatening to prosecute a citizen merely for publishing PGP on his web page. Let's at least ensure that they don't eliminate *today's* strong crypto, by replicating crypto archives behind each Berlin Wall they threaten to erect. Today we depend on a small number of archives (in a small number of countries) containing source and binaries for PGP, SSH, Kerberos, cryptoMozilla, IPSEC, and many other useful crypto tools that we use daily. Let's replicate these archives in many countries. I call for volunteers in each country, at each university or crypto-aware organization, to download crypto tools while they can still be exported from where they are, and then to offer them for export from your own site and your own country as long as it's legal. (The Wassenaar agreement is not a law; each country has merely agreed to try to change its own laws, but that process has not yet started.) And if at some future moment your own government makes it illegal for you to publish these tools, after all your appeals are denied, all the pro-bono court cases rejected, and all the newspaper coverage you can get has been printed, then restrict your web site so that only your own citizens can get the tools. That'll still be better than the citizens of your country having NO access to the tools of privacy! (I suggest putting these tools on a Web site on a machine that you own, rather than on a web site where you buy space from someone else. That way there'll be nobody for the freedom-squashers to threaten except you.) I'm sure that John Young's excellent http://jya.com site will be happy to provide an index of crypto archives around the world, if people will send him notices at jya(a)pipeline.com as your sites come up. (Each archive should locally mirror this list, so that we won't depend on a single site.) Rather than having their desired effect of squelching crypto distribution, perhaps their overbold move can inspire us to increase strong crypto distribution tenfold, by making it clear to the public that if you don't keep a copy on your own hard drive, the governments of the world will be merciless in scheming to deny you access to it. And if crypto developers have to publish on books, or rely on smugglers to get crypto from country to country, then at least each country will have its distribution arrangements already ready for when the book is scanned or the smuggler arrives. John Gilmore --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

LA Times article on Wiretapping
by Alan Olsen 17 Dec '03

17 Dec '03

Here is a link to the LA Times feature story on the LAPD's use of wiretaps. An interesting read. Expect such things from the rest of the constabulary when examined. http://www.latimes.com/HOME/NEWS/STATE/t000111718.html --- | Bill Clinton - Bringing back the Sixties one Nixon at a time! | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | | | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Re: DSA for encryption
by Anonymous 17 Dec '03

17 Dec '03

On Sun, 06 Dec 1998 22:25:57 -0600, Bennett Haselton <bennett(a)peacefire.org> wrote: >I'm working on an enhancement to a Web-based program that allows you to >circumvent proxy server censorship by sending a request for a Web page to a >computer in the outside world that is not blocked by the proxy, and having >that computer re-send a copy of the banned page back to you. Good idea! >Of course, any manufacturer of Internet censorship proxy server software >could easily add ians.ml.org to their list of blocked sites (as they have >all already done with Anonymizer), so the idea would be for people to get >their friends to set up port-forwarding programs on computers that were not >blocked by the censoring proxy, and those could be set up to relay requests >between the IANS server and the computer behind the proxy server. It may not be so easy to get people to set up port-forwarding programs. These could be a target for hackers seeking to cover their tracks as they try break-ins. Also, how many people in this day of commercial ISPs are able to set up port-forwarding programs? It would seem more promising to make your web page script be simple and portable enough that even users of AOL and free webpage hosts like GeoCities would be able to install it. >I am working on a JavaScript form that could be used on the client side to >solve this problem. We would like to use DSA to encrypt the requests sent >using IANS, since I've heard DSA can be used for encryption without >royalties, unlike, for example, RSA. DSA per se is probably not your best choice - unless you already have a DSA implementation which you want to try to use. DSA is a signature algorithm, and while it is sometimes possible to use a DSA implementation to do encryption, it is not particularly convenient. What you want to do is to use the mathematical principle behind DSA, which is the difficulty of solving the discrete log problem, and use an encryption algorithm which relies on that same math problem, namely Diffie-Hellman or ElGamal encryption. If you need to use DSA, Bruce Schneier describes in his book Applied Cryptography how to get the effect of ElGamal encryption. Here is what he writes, on page 490: : ElGamal Encryption with DSA : : There have been allegations that the government likes the DSA because it is : only a digital signature algorithm and can't be used for encryption. It is, : however, possible to use the DSA function call to do ElGamal encryption. : : Assume that the DSA algorithm is implemented with a single function call: : : DSAsign (p, q, g, k, x, h, r, s) : : You supply the numbers p, q, g, k, x, and h, and the function returns the : signature parameters: r and s. : : To do ElGamal encryption of message m with public key y, choose a random : number k, and call : : DSAsign (p, p, g, k, 0, 0, r, s) : : The value of r returned is a in the ElGamal scheme. Throw s away. Then, : call : : DSAsign (p, p, y, k, 0, 0, r, s) : : Rename the value of r to be u; throw s away. Call : : DSAsign (p, p, m, 1, u, 0, r, s) : : Throw r away. The value of s returned is b in the ElGamal scheme. You now : have the ciphertext, a and b. : : Decryption is just as easy. Using secret key x, and ciphertext messages : a and b, call : : DSAsign (p, p, a, x, 0, 0, r, s) : : The value r is a^x mod p. Call that e. Then call : : DSAsign (p, p, 1, e, b, 0, r, s) : : The value s is the plaintext message, m. : : This method will not work with all implementations of DSA. Some may fix : the value sof p and q, or the lengths of some of the other parameters. : Still, if the implementation is general enough, this is a way to encrypt : using nothing more than digital signature function. If you need more information about what the various values mean, or how to create a DSA and/or ElGamal key, just ask. Really, ElGamal is simple enough that if you have access to a large-number math package, writing your own is probably easier than trying to get DSA to do it. It is unlikely that you will find a DSA implementation which allows you to specify all the needed parameters above, particularly h and k. Usually h is forgotten after key generation and not used during signature, and implementions will probably want to choose k themselves since it is a very sensitive parameter.

2 1

PUTS MONEY INTO YOUR POCKET -- BUSINESS OPPORTUNITY AD
by jill567＠copacabana.com 17 Dec '03

17 Dec '03

DEAR FELLOW ENTRPENEUR *********************** I AM GOING TO SHARE WITH YOU INFO THAT HAS BEEN KEPT SECRET FOR YEARS. I AM GOING TO SHOW YOU HOW TO BE A PART OF THE 5% WHO ALWAYS MAKE MONEY IN MLM...ALWAYS... WOULD YOU LIKE TO KNOW HOW THE "BIG BOYS' DO IT? ************************************************* WOULD YOU LIKE TO KNOW HOW YOU CAN DO THE SAME? ************************************************* Actually it's SIMPLE. These people always make money. Their methods are fool proof. What is it that they do that allows them to be so SUCCESSFUL?? Well I'll tell you. It is a method called "FUNDED PROPOSALS". Who uses these "FUNDED PROPOSALS"???? Here are just a few of the people that use this method all the time: JOHN MILTON FOGG, JOE SCHROEDER, "BIG AL", ROBERT BLACKMAN, SHIRLEY SILVA, BARBARA COLLINS AND JOE GODDA. These people have made millions using this method. They shared this SYSTEM with me and I will SHARE IT WITH YOU!! It's SIMPLE, it's EASY, it's inexpensive and it's BRAND NEW!!! ABSOLUTELY NO OBLIGATION!! ACT NOW CLICK HERE:http:mlmfounders.com/king/ SEE WHAT I AM WILLING TO SHARE. NEVER AGAIN WILL YOU FLOUNDER. THIS SYSTEM WILL ALWAYS MAKE YOU MONEY!! ACT NOW!! CLICK HERE:http://www.mlmfounders.com/king/ JOE SCHROEDER SAYS: "YOU DON'T HAVE TO GET IT RIGHT YOU JUST HAVE TO GET IT GOING". THANK YOU FOR ALLOWING ME TO SHARE THIS AMAZING SYSTEM WITH YOU. THIS MESSAGE SENT BY EMAIL KING AND ASSOCIATES ]790 BONHILL RD MISSISSAUGA, ON. 9055645091 TO BE REMOVED VISIT WWW.REMOVE-LISTDOTCOM ]

1 0

Information you need
by JCousino＠aol.com 17 Dec '03

17 Dec '03

The Sanarchist Cookbook Known as the world most forbidden information source and outlawed in many nations this book was thought to be banished from the face of the Earth. HUGE FORBIDDEN INFORMATION LIBRARY 220 pages of the massive book of Anarchy Learn the tricks of the trade written by the skilled hands of the Sanarchist. Including massive amounts of information on building home made weapons like the potato shooter to making dollar bills that can be used continuously in coke machines this book can pull you out of any jam. If you are interested in those great WWII bomb guides & handbooks this thing has them all! We are set out to distribute this book to anyone that is interested and it comes by mail(sorry we can't post it on the web because no web server will support us). We have been selling this product for almost two months now and have processed hundreds of orders. This book is great, we have had no complaints on it, and we will never have any complaints on it its so good. If this is the only product you ever order off the Internet then you have picked a good choice. Our price is low and the product is great! Send payment of $6.50 to the address below to receive your cookbook by mail. K.C. Smith 933 Birchwood Court Evansville, IN 47710 I am giving you my address and information so clearly this is not a sick scheme to take your money. I don't know about you but the last thing I wantis hundreds of people beating my car with a baseball bat wanting their cookbook. This is a great gift, I give you my word on that. Expect 3-7 Days to Receive your cookbook.

1 0

Re: What was the quid pro quo for Wassenaar countries?
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

One thing which came to me recently when I was trying to figure out what sort of gun the US held to the rest of the world's head to get them to agree to this: Could the Wassenaar outcome have been a sign of Echelon in action? Consider this: Delegates from each country have been travelling to Vienna for some months now to negotiate their countries position. During the negotiations, they'll be contacting their governments via phonecalls carried over microwave trunks, satellite links, or undersea cables to discuss the progress of the negotiations and what position they should take. Just like the negotiations which lead to the Five-Power Treaty in 1921, if one country had the ability to intercept all the other countries communications it would know how far they could be pushed, and where the most resistance was likely to come from, allowing greater amounts of "persuasion" to be concentrated on them. I can't think of a more appropriate application of Echelon (use worldwide surveillance technology to perpetuate the usefulness of worldwide surveillance technology), and it would go some way towards explaining the very peculiar agreement which was reached. Peter.

4 3

Re: Wei Dei's "b-money" protocol
by x 17 Dec '03

17 Dec '03

there must be something here that I'm missing. At the core of this protocol seems to be the establishment not of crypto anarchy but of a crypto elite. in this scheme only the processors of computing power have economic power. Now I realize that our current economic system is based on economic power being invested in a closed community of powerful elites, and is by no means egalitarian, but this looks to be like simply substituting one group of "haves" for a different group of "haves" I have to admit not being familiar with the Orthodoxy of crypto anarchy, but if the premise is a centerless self organizing system of free agents this protocol seems to miss the mark. or what is it that I am missing here? At 07:37 PM 12/5/98 GMT, you wrote: > > >Wei Dei recently announced (on cypherpunks) his "b-money, a new >protocol for monetary exchange and contract enforcement for >pseudonyms". > >Below is the text of his proposal. > >Comments to follow. > >Adam > >====================================================================== >http://www.eskimo.com/~weidai/bmoney.txt >====================================================================== > >I am fascinated by Tim May's crypto-anarchy. Unlike the communities >traditionally associated with the word "anarchy", in a crypto-anarchy the >government is not temporarily destroyed but permanently forbidden and >permanently unnecessary. It's a community where the threat of violence is >impotent because violence is impossible, and violence is impossible >because its participants cannot be linked to their true names or physical >locations. > >Until now it's not clear, even theoretically, how such a community could >operate. A community is defined by the cooperation of its participants, >and efficient cooperation requires a medium of exchange (money) and a way >to enforce contracts. Traditionally these services have been provided by >the government or government sponsored institutions and only to legal >entities. In this article I describe a protocol by which these services >can be provided to and by untraceable entities. > >I will actually describe two protocols. The first one is impractical, >because it makes heavy use of a synchronous and unjammable anonymous >broadcast channel. However it will motivate the second, more practical >protocol. In both cases I will assume the existence of an untraceable >network, where senders and receivers are identified only by digital >pseudonyms (i.e. public keys) and every messages is signed by its sender >and encrypted to its receiver. > >In the first protocol, every participant maintains a (seperate) database >of how much money belongs to each pseudonym. These accounts collectively >define the ownership of money, and how these accounts are updated is the >subject of this protocol. > >1. The creation of money. Anyone can create money by broadcasting the >solution to a previously unsolved computational problem. The only >conditions are that it must be easy to determine how much computing effort >it took to solve the problem and the solution must otherwise have no >value, either practical or intellectual. The number of monetary units >created is equal to the cost of the computing effort in terms of a >standard basket of commodities. For example if a problem takes 100 hours >to solve on the computer that solves it most economically, and it takes 3 >standard baskets to purchase 100 hours of computing time on that computer >on the open market, then upon the broadcast of the solution to that >problem everyone credits the broadcaster's account by 3 units. > >2. The transfer of money. If Alice (owner of pseudonym K_A) wishes to >transfer X units of money to Bob (owner of pseudonym K_B), she broadcasts >the message "I give X units of money to K_B" signed by K_A. Upon the >broadcast of this message, everyone debits K_A's account by X units and >credits K_B's account by X units, unless this would create a negative >balance in K_A's account in which case the message is ignored. > >3. The effecting of contracts. A valid contract must include a maximum >reparation in case of default for each participant party to it. It should >also include a party who will perform arbitration should there be a >dispute. All parties to a contract including the arbitrator must broadcast >their signatures of it before it becomes effective. Upon the broadcast of >the contract and all signatures, every participant debits the account of >each party by the amount of his maximum reparation and credits a special >account identified by a secure hash of the contract by the sum the maximum >reparations. The contract becomes effective if the debits succeed for >every party without producing a negative balance, otherwise the contract >is ignored and the accounts are rolled back. A sample contract might look >like this: > >K_A agrees to send K_B the solution to problem P before 0:0:0 1/1/2000. >K_B agrees to pay K_A 100 MU (monetary units) before 0:0:0 1/1/2000. K_C >agrees to perform arbitration in case of dispute. K_A agrees to pay a >maximum of 1000 MU in case of default. K_B agrees to pay a maximum of 200 >MU in case of default. K_C agrees to pay a maximum of 500 MU in case of >default. > >4. The conclusion of contracts. If a contract concludes without dispute, >each party broadcasts a signed message "The contract with SHA-1 hash H >concludes without reparations." or possibly "The contract with SHA-1 hash >H concludes with the following reparations: ..." Upon the broadcast of all >signatures, every participant credits the account of each party by the >amount of his maximum reparation, removes the contract account, then >credits or debits the account of each party according to the reparation >schedule if there is one. > >5. The enforcement of contracts. If the parties to a contract cannot agree >on an appropriate conclusion even with the help of the arbitrator, each >party broadcasts a suggested reparation/fine schedule and any arguments or >evidence in his favor. Each participant makes a determination as to the >actual reparations and/or fines, and modifies his accounts accordingly. > >In the second protocol, the accounts of who has how much money are kept by >a subset of the participants (called servers from now on) instead of >everyone. These servers are linked by a Usenet-style broadcast channel. >The format of transaction messages broadcasted on this channel remain the >same as in the first protocol, but the affected participants of each >transaction should verify that the message has been received and >successfully processed by a randomly selected subset of the servers. > >Since the servers must be trusted to a degree, some mechanism is needed to >keep them honest. Each server is required to deposit a certain amount of >money in a special account to be used as potential fines or rewards for >proof of misconduct. Also, each server must periodically publish and >commit to its current money creation and money ownership databases. Each >participant should verify that his own account balances are correct and >that the sum of the account balances is not greater than the total amount >of money created. This prevents the servers, even in total collusion, from >permanently and costlessly expanding the money supply. New servers can >also use the published databases to synchronize with existing servers. > >The protocol proposed in this article allows untraceable pseudonymous >entities to cooperate with each other more efficiently, by providing them >with a medium of exchange and a method of enforcing contracts. The >protocol can probably be made more efficient and secure, but I hope this >is a step toward making crypto-anarchy a practical as well as theoretical >possibility. > >====================================================================== > > >

1 0

Re: Building crypto archives worldwide to foil US-built Berlin Walls (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: Building crypto archives worldwide to foil US-built Berlin Walls (fwd) > Date: Tue, 8 Dec 1998 14:11:14 +0100 (NFT) > From: ulf(a)fitug.de (Ulf =?iso-8859-1?Q?M=F6ller?=) > According to Jim Choate: > > > And this is different from yesterday how? > > It is different in that it has been legal to distribute PGP and any > other public domain and mass market crypto software from Denmark > up to now. Ah, so the call is for folks in Denmark to post the various pieces of currently available software then, not everyone on the planet as it appears. Don't think so. He's asking that people put PGP and other available software on their websites without the current export controls. If he's not then he's not doing anything except blowing empty bugles because people are already doing what he's asking for. In that situation he's after reputation capital, personal gain. > > Are you offering to put up your monies to provide any and all legal and > > other support for any such site that participates? When is your site going > > up? > > John Gilmore's RSAREF site went up about a year ago. Your point being what? Exactly what it states above. If you don't get it to bad. RSAREF is not quite what he is asking folks to do now is it. Bottem line, Gilmore is asking folks to run out and put their livelyhood and their life at risk. What's he going to do for those who comply with his request? Let me ask you this Ulf, when is YOUR site going up? When will YOU be the first European repeater for the CDR? Your address implies you're in Denmark. What are you going to do for YOUR liberty today? Has Gilmore agreed to help fund YOUR fight of the change in your courts? Bottem line, when will you get off your butt and put your neck in the noose like many of the rest of us? The reality is that the change in Denmark's law changes the global picture very little. Now when Denmark quites letting people IMPORT PGP *and* places like the US quite letting people export it in some media (currently paper & ink) then you'll have cause to really be indignent. ____________________________________________________________________ If I can put in one word what has always infuriated me in any person, any group, any movement, or any nation, it is: bullying Howard Zinn The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1