December 2003 - cypherpunks-legacy

K. Mitnick
by L. Detweiler 17 Dec '03

17 Dec '03

Thanks for all the info on K.Mitnick, the `dark side hacker'. Some have mailed me saying he changed his name and is living, got a job in security consulting or something like that (!), and is living in `2.5 kids land' Another few questions. I heard that the judge barred him from using a modem for life, or something like that. What was the sentence? How is it being enforced? Also, I assume that Mr. Mitnick changed his name legally (hee, hee). Anyway, I would like to email him, if anyone knows his address.

1 0

Black Market in Russia
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

The MacNeil-Lehrer Newshour, a PBS television show (for you non-U.S. residents), has a good report tonight on the black market in Russia. Mostly an emphasis on the "shuttle traders" who take chartered flights down to Dubai and stock up on massive amounts of stuff to sell back in Moscow. (An inefficient system, compared to the systems of shippping and mega-malls we have, but encouraging to see.) The traders then pay off customs inspectors, etc. Apparently Russians are doing better than official stats would indicate, similar to the way Italians are much wealthier than tax stats would suggest. I was heartened to see this report. All Cypherpunks, of course, are encouraged to see thriving black markets (or markets of color, to be politically correct about it). --Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Key Servers
by L. Detweiler 17 Dec '03

17 Dec '03

I wonder if anyone would want to start a PGP key server dedicated only to *real* identities. Obviously, there is no such demand with the current ones. And please don't start with the `that would be impossible' arguments. A key server that had the official policy `if you register here, on your honor your legal name is what you give, under penalty of public exposure if you are caught' would be enough for me.

8 17

pseudospoofing, copyrights, and ECPA
by L. Detweiler 17 Dec '03

17 Dec '03

Some losers are still assaulting me with claims that I failed to respect His Royal Eminence's privacy by revealing his mailbomb to the list, saying I was not polite or courteous. Please, hypocrites, go away. Where does this bizarre philosophy originate? Where do you guys get your `ethics', anyway? At least have the decency to codify them, sign your names to them, and stick them on an FTP site if you are going to spout this bizarre depravity. Next: Mr. Zions, while one of the `protect the mailbombers privacy' advocates, brought up some interesting points. Does the ECPA (the law regulating communications privacy) or the copyright laws apply to material that was written under a *pseudonymous* identity? I would consider this a grey area. A court test would be extremely fascinating. What if work was redistributed if printed under imaginary identities? the whole aspect of both of the laws involves *ownership* and *identity*. If ECPA or copyright laws are interpreted to protect pseudonymous identities, I propose they be amended and revised to afford no protection. (Legitimate variations like pseudonymity and anonymity should be protected in any case.) One man's opinion. Feel free to stone me some more. Have you figured out who my personal friends are yet? Have you found any nifty blackmail on me? I can't wait for the next sordid perversion.

1 0

pseudopools
by L. Detweiler 17 Dec '03

17 Dec '03

One application of pseudospoofing, a particularly insideous and treacherous form, would be to create a `pool' of different accounts. Everyone in the group can negotiate with each other `behind the scenes' when to post from different accounts. This would be even more difficult to detect than regular pseudospoofing (and, IMHO, even that much more of a perversion) because all traces of consistency of identity are subverted and lost.

1 0

Re: Key Servers
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

L. Detweiler writes: > I wonder if anyone would want to start a PGP key server > dedicated only to *real* identities. Obviously, there > is no such demand with the current ones. > > And please don't start with the `that would be > impossible' arguments. A key server that had the > official policy `if you register here, on your honor your > legal name is what you give, under penalty of public > exposure if you are caught' would be enough for me. > It's not PGP, but RSA, Inc. and others (Internet Policy Registration Authority) are already setting up a system for registering pubilc-keys that are "proven" to belong to actual humans. You can read about it in RSA's newletter available at their ftp site (rsa.com) The newsletter is called "Ciphertext - The RSA newsletter". Of course, their system for "proving" the identity of a human is not perfect. If you can obtain some fake IDs, you can defeat their public-key registration system. This is probably true for any non-biometric identification system. Jim_Miller(a)suite.com

1 0

cypherpunk archives?
by an12070＠anon.penet.fi 17 Dec '03

17 Dec '03

I'm looking for an official cypherpunk document on `pseudospoofing' -- I looked all over soda.berkeley.edu:/pub/cypherpunks, but couldn't find one anywhere. Does anyone have one, preferrably written or endorsed by E.Hughes or T.C.May? Also, any messages they have posted on the subject sought. I have some stuff, but they seem extremely reluctant to talk about it publicly. ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

True Name Keyservers
by Mike Ingle 17 Dec '03

17 Dec '03

>"ld231782(a)longs.lance.colostate.edu" "L. Detweiler" wrote: >Subject: Key Servers >I wonder if anyone would want to start a PGP key server dedicated only >to *real* identities. Obviously, there is no such demand with the current >ones. >And please don't start with the `that would be impossible' arguments. A >key server that had the official policy `if you register here, on your >honor your legal name is what you give, under penalty of public >exposure if you are caught' would be enough for me. That might be somewhat effective if there was a way to expose the person's True Name if they were caught using a nym. If the only thing to be exposed was the falsity of the nym, the person could just create a new nym, with no penalty for lying except a bit of inconvenience. Another approach would be to have some people who certify keys as being True Name keys, using special signer keys which are labeled "True Name certifier key" or something similar. These certifiers would be risking their own credibility if they were tricked, so they would have a motive to be careful. If this was a for-profit undertaking (i.e. "send me ten bucks and a copy of your birth certificate, driver's license, and a third form of ID") then it could be fairly effective. Any of you capitalists out there...? Somewhere I read about "is-a-person" certificates, which, if I remember correctly, allow you to prove your identity is unique without giving out your True Name. How do these work? Is this a blind signature of your key? Whatever is done involving True Names, nyms should have a right to exist as well. --- MikeIngle(a)delphi.com

2 1

EDM--Encyclopedic Dictionary of Mathematics
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

I've gotten a few requests already for info on the book I mentioned. I usually avoid giving ISBN numbers for folks to order a book sight unseen--if they're going to spend $50-70 for a book, they at least ought to flip through it in person and see if they really want it. (Sidenote: Must be the electronic age...often when I mention a paper on something, I get notes asking me where it's available online! I admire these Net-dwellers (no relation to Detweiler!), but the fact is that most of the good stuff is only in print. The reasons are many.) Anyway, here's the EDM info: > > > ObCrytp Note: Just got the English translation in paperback of the > > > Japanese-published "Encyclopedic Dictionary of Mathematics," a large > > > 2-volume set with detailed articles on many branches of math. If the > > > math talked about in crypto is sometimes obscure to you, check this > > > out. The cost is $59, a real bargain these days. > MIT Press, ISBN 0-262-59020-4 (paperback), "Encyclopedic Dictionary of > Mathematics," Second Edition, edited by Kiyosi Ito, 1993. For $59, a real bargain. But if you don't have a fairly good crypto library (Schneier, especially, and perhaps Denning, Salomaa, Brassard, Simmons, etc.), then you'd probably do better to get some of them first. --Tim -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. Note: I put time and money into writing this posting. I hope you enjoy it.

1 0

Info on L.Detweiler
by Graham Toal 17 Dec '03

17 Dec '03

In article <9311151727.AA17924(a)illuminati.IO.COM> cman(a)io.com "Douglas Barnes" writes: > Here's some info folks might appreciate (all numbers area code > 303, unless otherwise noted): Oh for christ's sake, knock it off! If the poor bastard really is going through a paranoid phase (and I'll bet there more of us on this list who've been there than would care to admit it) this is just the sort of thing to push him over the edge. If you can't ignore him, install procmail and put him in your killfile. If you escalate this into a petty netwar, just think how hard it's going to be for him when he finally starts to get over it. Would _you_ want to be in that position? I suppose someone posting from a site called 'Illuminati' thinks this is all very funny. I don't. Neither would you if you were above the age of 14. G -- Personal mail to gtoal(a)gtoal.com (I read it in the evenings) Business mail to gtoal(a)an-teallach.com (Be careful with the spelling!) Faxes to An Teallach Limited: +44 31 662 4678 Voice: +44 31 668 1550 x212

3 2