December 2003 - cypherpunks-legacy

New ID technique: warning of things to come
by lstanton＠lehman.com 17 Dec '03

17 Dec '03

This is a little off-topic, but it does apply to authentication... I have been abroad for the past few weeks. In the course of my travels, I was given some data about a new program that the US Dept. of State/Customs and Immigration people are moving into limited testing at JFK and LAX. They want to implement a "fast, positive identification system to speed processing of entrants to the United States by use of biometric data." The system works by use of a handprint scanner, and a smart card. Participants would go through an initial hand scan, and then be issued a smartcard. Upon subsequent entries to the US, instead of going through the normal passport check, you would place your hand on a scanner and insert your card in the slot. The system would then positively identify you, and clear you for entry. I have no details about the format/security of the card data, and the INS guy I spoke to made no statements about privacy, security or other uses of their ID database. If this takes off, the risks of it spreading to a national ID card, or to the 'healthcare card' are obvious. Linn H. Stanton <stanton(a)acm.org> The above opinions are exclusively my own. If anyone else wants them, they can buy them from me. Easy terms can be arranged. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQBNAitK8+EAAAECALzK83DH79m7DLKBmZA2h9U33fBE80EwT4xRY05K7WRfxpO3 BmhPVBmes9h97odVZ0RxAFvinOl4wZGOb8pDclMABRG0IUxpbm4gSC4gU3RhbnRv biA8c3RhbnRvbkBhY20ub3JnPrQnTGlubiBILiBTdGFudG9uIDxsc3RhbnRvbkBz aGVhcnNvbi5jb20+ =oCru -----END PGP PUBLIC KEY BLOCK-----

1 0

Remailers
by Matthew J Ghio 17 Dec '03

17 Dec '03

For all the newbies who keep asking for info on the remailers, the address is: mg5n+remailers(a)andrew.cmu.edu You can get an anonymous address from mg5n+getid(a)andrew.cmu.edu Each time you request an anon address, you get a different one. You can get as many as you like. The addresses don't expire, however, so maybe it's not the ideal 'one-shot' system, but it allows replies without connecting you to your 'real name/address' or to any of your other posts/nyms.

1 0

RE: Pseudonyms and Reputations
by Blanc Weber 17 Dec '03

17 Dec '03

From: hfinney "One possibility is a digital reputation system. Presently people and nyms develop informal reputations in the minds of their readers. This could be formalized by allowing readers to create endorsements of various types for those who have worthwhile things to say. " Could I really allow myself to be so prejudiced by what a number of others have determined is (or is not) a worthwhile contributor to a list? My interest in reading a message has first to do with the subject of attention, then second the one who has something to say. There are many types of commentary which someone could introduce at any time; sometimes in humor or sarcasm, sometimes with great insight, more or less successfully. I think whoever attends to messages on a list should consider their motives - whether they just want company, a sounding board, or whether they want to read about a particular subject of interest. The opportunity to interact with others in abstract conversation is also the opportunity to develop and refine the ability to communicate, to improve upon the formulation of a thought and express it with greater ability. I might not like the style or manner of what someone has said in the past, yet accept what they have to say some other time. But this would be my own judgement at work, not a conclusion derived from the aggregate opinion of others. I myself wouldn't pay excessive attention to a reputation system, outside of its entertainment value. Blanc

1 0

Re: Pseudonyms and Reputations
by Blanc Weber 17 Dec '03

17 Dec '03

>From tmp: "what do you think, cpunks, should you have the right to ignore people regardless of the pseudonyms they use?" How could a person prevent someone from ignoring another? on the net? "i ask if it is possible to construct a system that protects anonymity but at the same time allows someone to filter all pseudonyms associated with another person." Code it, and they will come. " ideally we can develop moral codes where our algorithms fail us. " Ideally, you would be able to enforce these moral codes. Ideally, they would reflect not only what is possible in reality, but what is truly desireable. Blanc

1 0

Survey
by Adam Lake 17 Dec '03

17 Dec '03

I am thinking of composing an essay for my WC203 course. I was wondering if anyone who has a second could send me a message with their cumulative GPA. If you have already graduated, what was your GPA? If you have never attended school, lucky you. Please send it with the subject: GPA. Thanks. lake(a)uenics.evansville.edu ---------------------------------------------------------------------------- Remember the last time you called her, she forgets Pray to her, she will remember that she will remember that ----------------------------------------------------------------------------

1 0

ftp distribution of strong crypto in the USA.
by exabyte!smtplink!mikej＠uunet.UU.NET 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Here is how to set up an ITAR compliant (I think) ftp site that you can place crypto files up for distribution within the USA and Canada. The exact details will vary depending on your Internet service provider. I think the method is sound, because it is pretty much what rsa.com does, and they have lots of lawyers to figure this stuff out. You should take a look at their site and make sure that the README file you put up is close to what they have. 1. Send a message to support(a)netcom.com to ask them to set up an ftp area for you (read the faq on it, first). 2. Create an alias in your home directory to point to the ftp directory (something like ln -s ~ftp/name ftp) 3. Create a directory in your ftp directory called (exactly) I_will_not_export. Set its permissions with chmod 711 I_will_not_export. 4. Create a directory under I_will_not_export called crypto_xxxxxxx, and set its permissions to 755 (chmod 755 crypto_xxxxxxx). Under that directory, place files and/or directories for USA consumption only. 5. Set the base ftp directory permissions to 755 cd cd ftp chmod 755 . 6. Get the files gate and newdir from my ftp directory and copy them to your base ftp directory. 7. Set the permissions on the above files to allow execution chmod 700 gate newdir 8. Copy crypto_dir from my ftp directory to your home directory and set its permissions to allow execution. cd cp ~ftp/mpj/crypto_dir . chmod 700 crypto_dir 9. Add the command crypto_dir to your .login script with an editor tool. 10. Copy my README file to your base ftp directory, and edit to taste, but make sure the line with the crypto directory name is unedited. Set the README file permissions to allow reading by the world (chmod 644 README). Make sure the legal requirements to ftp are clear to the average jury. 11. Set up .message files with appropriate messages for your directories. The crypto directory name should be changed and README updated every time you log in. Any questions? ___________________________________________________________ |\ /| | | | | \/ |o| | Michael Paul Johnson Colorado Catacombs BBS 303-938-9654 | | | | / _ | mpj(a)csn.org ftp csn.org \mpj\README.MPJ for access info.| | |||/ /_\ | aka mpjohnso(a)nyx.cs.du.edu mikej(a)exabyte.com | | |||\ ( | m.p.johnson(a)ieee.org CIS 71331,2332 VPGP key by finger | | ||| \ \_/ |___________________________________________________________| -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLaQveT9nBjyFM+vFAQHU8QP+M2VGQmw5Vj6zF9i7pc+15wiwDsmdKqZj LNXOiOQFKP51LYd+WxilU01lcLAKjqFhuCcG4iB4GCXM/4Lz3tdBRG5SB7k3BrBz BpsOi8kjlQKsTlbR8aI8S9TbeGABB5DKvVwtxr8767Wrt6LjoQnWowSeV0q9B+Kr +aM96+RaBEE= =bTs8 -----END PGP SIGNATURE-----

1 0

1984 NSA T-Shirt Available!
by jdblair＠nextsrv.cas.muohio.EDU 17 Dec '03

17 Dec '03

I've come up with a design for the 1984 NSA t-shirt idea which I am finally happy with. To check it out, fire up Mosaic and jump to: http://phoenix.aps.muohio.edu/users/jdblair/t-shirt.html The design is approximately: 1984 +---+ |eye| +---+ "We're Behind Schedule" National Security Agency The text is EuroStyle, a very imposing, modern looking sans serif font. The eye will be printed in a coarse grained half-tone, which should silk-screen pretty well. The back is the Cyber Rights Now! Logo from Wired Magazine. I think it will look best in white ink on a dark color shirt, like black, dark blue, maroon, or dark green. I like black best, but that's just me. I will check with the t-shirt printers about flexibility with colors. I figure I'll be asking $15 for the shirt, same as the Cypherpunk Criminal shirt. I welcome comments, criticisms, suggestions. If anybody knows the name, and preferably, address, of the guy from the NSA who inspired the design at CFP, could you pass it my way? I've forgotten his name. I would like to thank him, and send him one free of charge. If you don't have access to a mosaic client, e-mail me and I'll mail you a uuencoded gif. later, -john. -------------------------------------------------------------------------- John Blair: <jdblair(a)nextsrv.cas.muohio.edu> voice: (513) 529-4877 PGP public key available upon request. KILL YOUR Privacy in the information age is a right, not a privilage. TELEVISION Information = Power = Control. Fight the centralization of information.

1 0

Baltimore 2600 meeting, DC meetings, cpunx meetings
by Stanton McCandlish 17 Dec '03

17 Dec '03

These kind of meetings (DC 2600 meeting at Pentagon City Mall, 1st Fri. of every month in the food court, about 5-7pm or so) might be good places for local cypherpunks gatherings as well. I'm sure there are a lot of other such meetings, but the DC and Baltimore ones are the ones I know of. Forwarded message: From: an77310(a)anon.penet.fi (Desert Eagle) Date: Sat, 2 Apr 1994 10:24:07 UTC Subject: Baltimore 2600 Meeting in May First Baltimore 2600 Meeting!!!!! When: Friday May 6, 1994 7:00PM Where: Baltimore Inner Harbor, Harborplace Food Court, Second Floor by the large newsstand Any questions, mail me! Hope to see all of you there! Desert Eagle ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi. -- Stanton McCandlish * mech(a)eff.org * Electronic Frontier Found. OnlineActivist "In a Time/CNN poll of 1,000 Americans conducted last week by Yankelovich Partners, two-thirds said it was more important to protect the privacy of phone calls than to preserve the ability of police to conduct wiretaps. When informed about the Clipper Chip, 80% said they opposed it." - Philip Elmer-Dewitt, "Who Should Keep the Keys", TIME, Mar. 14 1994

1 0

CORRECTION! Baltimore 2600
by Stanton McCandlish 17 Dec '03

17 Dec '03

Oops Forwarded message: From: an77310(a)anon.penet.fi (Desert Eagle) Date: Sat, 2 Apr 1994 10:48:09 UTC Subject: CORRRECTION! Baltimore 2600 Baltimore 2600 Correction!!!!!! time will be 6:00 PM EST not 7:00 Desert Eagle ________ end ___________ -- Stanton McCandlish * mech(a)eff.org * Electronic Frontier Found. OnlineActivist "In a Time/CNN poll of 1,000 Americans conducted last week by Yankelovich Partners, two-thirds said it was more important to protect the privacy of phone calls than to preserve the ability of police to conduct wiretaps. When informed about the Clipper Chip, 80% said they opposed it." - Philip Elmer-Dewitt, "Who Should Keep the Keys", TIME, Mar. 14 1994

1 0

Xmosaic to pgp key server
by whitaker＠dpair.csd.sgi.com 17 Dec '03

17 Dec '03

Thanks, Warlord. Those of you who use xmosaic, add this URL to your hotlist: http://martigny.ai.mit.edu/~bal/pks-commands.html This is a PGP keyserver in Zurich. Happy trails. -- Russell Earl Whitaker whitaker(a)sgi.com Silicon Graphics Inc. Technical Assistance Center, Mountain View CA ================================================================ #include <std_disclaimer.h>

2 2