December 2003 - cypherpunks-legacy

Re: McCarthy, etc.
by an4609＠anon.penet.fi 17 Dec '03

17 Dec '03

>[examples of McCarthy, Watergate, Kennedy] >It seems to me that all are examples of how evasion, stonewalling, and >counterattacks on Truth-seeking probes, by high-ranking officials >seeking to promote unsavory or criminal personal `agendas' and their >own respectability at all costs, led to monstrous consequences that >demolished public trust in their most delicate and hallowed >institutions for decades. Truly black consequences. I fail to see your point in this: was there any pseudospoofing in the above scenarios? Anybody lie about their own identity? Your argument is a non-sequitur. For example, I could expound about the crimes of Ivan the Terrible and then conclude pseudospoofing is bad. However, this doesn't make any sense. Even so, just because somebody "pseudospoofs" doesn't mean they are out to promote their own criminal agenda. Your arguments are always hypothetical: if somebody pseudospoofs then blah blah blah. Why don't you call for the ban of automobiles because innocent people are killed in accidents? ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

2 1

"True Identities"
by Matthew J Ghio 17 Dec '03

17 Dec '03

I find it particularily interesting that on the internet (in contrast to almost every other net in existance), people have this strange fettish for worrying about anonymnity and "true names". My question is why? People on other nets never give the using of a handle or nym a second thought. (By other nets I mean Fidonet, WWIVnet, TEAMnet, C-Link, Oggnet, fvnet etc) A name is just a way of identifying a paritcular person. I don't see why people are so opposed to the use of nyms like Wonderer or Black Unicorn because those don't fit your image of what a name should be. These names identify the senders in a manner that is adequate to the discussion on Cypherpunks. Would it be any better if these people used names like Mike or John or something? Would it really make any relevant difference to the discussion on cypherpunks?

2 1

FWD: Publisher wimps out (PGP pulled from Ziffnet)
by anonymous＠phoenix.Princeton.EDU 17 Dec '03

17 Dec '03

> >Date: Fri, 19 Nov 1993 17:47:09 -0600 (UTC -06:00) >From: "Frank A. Kaul".<FKAUL(a)kuhub.cc.ukans.edu> >Subject: PGP pulled from Ziffnet >To: libernet(a)Dartmouth.EDU > >A couple of weeks ago I downloaded PGP from Ziffnet due to the >justice department crackdown. I visited their software libraries >today and was greeted with the following notice! > >> >> Pretty Good Privacy (PGPRIV.ZIP) Removed >> ---------------------------------------- >> We must extend our apologies to those of you who read the CompuServe >> Magazine article on Data Encryption and tried to find PGPRIV.ZIP here >> in our library. Due to the controversial nature of Phil Zimmerman's >> Pretty Good Privacy program and the fact that several legal questions >> surrounding this program have remained unanswered, we have removed it >> from our library. We are investigating the legal issues concerning its >> distribution, and it will remain unavailable until further notice. >> >> Again, we apologize for the inconvenience. >> > >Talk about a chilling effect. > >Frank A. Kaul >fkaul(a)oread.cc.ukans.edu

1 0

Re: All our eggs in one basket?
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

Alan (Gesture Man) Wexelblat writes: > Today we use paper cash and paper forms. I go to the bank to > make a withdrawal, I fill out a paper form requesting > money. They take the form, fail to give me cash, claim that > I have been given cash. What recourse do I have? (Several > is the answer, but the point is that it's not a problem new > to digicash.) > > Today I order from a supplier. I send a paper form of > payment (P.O., check, paper copy of my CC #, etc.). They > cash such form and do not send me goods (or claim that they > did and they were lost in transit). What recourse do I > have? (Again, several. Again the point is that digicash > does not seem to be introducing new problems; rather it's > giving us new forms of old ones.) > I agree these problems are not new to digicash, but if we can design a digicash system that eliminates these problems, then we should. I don't know if it has been designed yet, or even if it's possible, but I would like to see a digicash system that does not force the user or the merchant to trust the bank. The merchant and user should be able to use an arbitrator to solve any dispute that may arrise. (assuming it gets that far) I don't feel it is good enough to trust in a reputation mechanism to prevent banks (or anyone) from cheating. We shoud try to do better. Actually, disputes may arrise without any cheating involved. Hardware and software failures may create situations that appear to be attempts to cheat. (I don't know this as a fact. Just my gut feel.) The less trust required, the easier it will be for all parties to settle disputes. (another gut feel) Jim_Miller(a)suite.com

1 0

(fwd) Re: Prosody Release Cancelled Under "NSA" Pressure
by kelly＠netcom.com 17 Dec '03

17 Dec '03

Organization: NETCOM On-line Communication Services (408 241-9760 guest) Xref: netcom.com sci.crypt:19346 talk.politics.crypto:1241 Path: netcom.com!csus.edu!csulb.edu!library.ucla.edu!europa.eng.gtefsd.com!howland.reston.ans.net!spool.mu.edu!nigel.msen.com!yale.edu!cmcl2!mcclb0!huff From: huff(a)mcclb0.med.nyu.edu (Edward J. Huff) Newsgroups: sci.crypt,talk.politics.crypto Subject: Re: Prosody Release Cancelled Under "NSA" Pressure Followup-To: talk.politics.crypto Date: 13 Nov 93 04:25:15 EST Organization: NYU Medical Center, New York, NY 10016, USA Lines: 43 Distribution: world Message-ID: <1993Nov13.042515.1@mcclb0> References: <931112.49291.KEITHWRITERS(a)delphi.com> NNTP-Posting-Host: mcclb0.med.nyu.edu Followups to talk.politics.crypto In article <931112.49291.KEITHWRITERS(a)delphi.com>, KEITHWRITERS(a)delphi.com writes: Technosys Press Release For More Information, Contact: Keith Boyle, marketing director keithwriters(a)delphi.com limetwig(a)mindvox.phantom.com For Release 10:47 AMEST November 12, 1993 Mirrorshades & Prosody Release Cancelled The scheduled release of Technosys' text composition program Mirrorshades and text revision/encryption program Prosody has been cancelled because of pressure from a governmental group claiming to be the National Security Administration (NSA) wishing to prevent the release of Prosody as an encryption program. The "NSA" has expressed concern over the encryption method used by Prosody. They feel that it may be using an encryption technology similar enough to another method of natural language encryption that Prosody might be able to be used to break that coding method. Therefore, they would like Technosys to hand over all existing copies of the software, technical & development notes, and software related to Prosody (i.e. Mirrorshades) for their research. Since the next step, if Technosys were to refuse, would be the seizure of all of the above materials by search warrant and criminal charges, Technosys has chosen to consent to their request and will cancel the release of these programs. However, THE MAN can't seize what's in our brain cells... (Technosys is looking for good information law representation. Anyone interested?) -=-=-=-=-=-=-=--=-=-=-=--=-=-=-=-=30-=-=-=-=-=-=-=-=-=-=---=-==-=--=-=-=-=-

1 0

Re: (fwd) Re: Prosody Release Cancelled Under "NSA" Pressure
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

I thought the "Prosody cancellation" post was a hoax. Anyone know anything more about it? Jim_Miller(a)suite.com

1 0

Re: Key Servers
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

> `wherever there is trust, there is betrayal.' Therefore, reducing your dependency on trust will reduce the opportunities for betrayal. Jim_Miller(a)suite.com

1 0

C-source for diffie-hellman?
by Sameer 17 Dec '03

17 Dec '03

I was just talking with a friend, and I think it would be pretty good for medium-level security on irc to hack up something do that /dcc does diffie-hellman key exchange, and maybe triple-des or something. Is there some available C-source which would help? (I guess I should get the Schneier book.. But urgh! $50 on a "starving-student" budget is quite a bit.)

3 2

Re: "True Identities"
by lex＠mindvox.phantom.com 17 Dec '03

17 Dec '03

mg5n+(a)andrew.cmu.edu (Matthew J Ghio) Writes: >> >> I find it particularily interesting that on the internet (in contrast to >> almost every other net in existance), people have this strange fettish >> for worrying about anonymnity and "true names". My question is why? >> People on other nets never give the using of a handle or nym a second >> thought. (By other nets I mean Fidonet, WWIVnet, TEAMnet, C-Link, >> Oggnet, fvnet etc) A name is just a way of identifying a paritcular >> person. I don't see why people are so opposed to the use of nyms like >> Wonderer or Black Unicorn because those don't fit your image of what a >> name should be. These names identify the senders in a manner that is >> adequate to the discussion on Cypherpunks. Would it be any better if >> these people used names like Mike or John or something? Would it really >> make any relevant difference to the discussion on cypherpunks? >> Douglas Barnes Writes: > >I think the problem stems from the way most people initially got access >through the Internet, which was through fairly conservative affiliations >such as the military, government or academia; I've seen relatively few >military, government or academic environments that encouraged or allowed >people to go by "Black Unicorn". > >Increasingly, however, people are using the Internet for solely personal >reasons, independent of such affiliations. (Which is how Fidnonet, WWIVnet, >etc. have always been.) Now, no big surprise, we have Black Unicorn, >Wanderer, etc. I think it's a great testimoney to the rapidly increasing >diviersity of the net. (Although CERTAIN PEOPLE I'm sure will tell me that >such alleged diversity is only a PERVERTED SHAM and the number of REAL >people on the net is RAPIDLY DROPPING.) > I agree, background is the key. This whole conversation about Nyms, pseudospoofing, etc. is interesting. >From DAY ONE of me using a computer/modem/BBS/EMAIL in 1983 all I ever knew was to use a handle/pseudonym. On the underground BBS systems, using a real name or even a real-sounding name (even if it was a handle) would cause a good deal of suspicion and would make getting verified for full access difficult. I am constantly amazed how people routinely use their real names in conversations over the internet. I don't judge them however, I don't think they are stupid either, its just DIFFERENT than the way I am used to operating. The complete opposite viewpoint seems to be prevalent among those who have been using the internet for years -- before the general public started to overrun it. Those people have been accustomed to communicating with people who seemed to be real, at least they had real sounding names. Now an increasing number of pseudo-entities are appearing on the Internet. Some are disturbed by this. To me, its more like "what took so long". With irresponsible people sending mail bombs, using personal information from 'finger' to harass people they don't agree with, etc. it isn't hard to see why some people have reservations about various anonymous or pseudo- anonymous entities. The problem lies in the fact that creating a new identity on the internet either by creating additional user accounts or through the use of anonymous remailers is so easily accomplished that the concept of trust and reputation has been eroded. This is different from my background whereas reputation was essentially EVERYTHING and the creation of a new identity that allowed one to use desirable systems/services (ie, 'elite' systems) took long periods of time. The benefit of this type of social structure was that it naturally kept abuse, deception, and harassment to a minimum. I am not sure what my ultimate point is (as you may have surmised by now) other than there are inherent differences in each Internet user's background just as there are cultural differences among races in real life. There unfortunately will always be some prejudice against those who are different. Isn't a lot of energy saved simply by basing judgement on what others SAY and DO rather than what they LOOK LIKE or in this case, what their 'name' or 'nym' is? Lex

1 0

EFF's Kapor on Political Philosophy
by L. Detweiler 17 Dec '03

17 Dec '03

Mr. Kapor's words of wisdom. I will not comment except to say that I don't think he has accurately characterized the Cypherpunk position. ===cut=here=== Date: Sat, 20 Nov 1993 11:46:50 -0500 From: mkapor(a)kei.com (Mitchell Kapor) Rich Karlgaard <0005096930(a)mcimail.com> wisely observes: > ...the range of >political opinion in the U.S. is not always spread >along a single axis of left to right. I believe >there is another axis ascendant. It is >authoritarian/libertarian. > Try this exercise. Draw a left-to-right >line across a page. Then draw a vertical line from >top to bottom, labeling it Authoritarian on top, >Libertarian on bottom. You have just created a >grid with four quadrants. I have tried to illustrate his point. My deficiencies as a graphic artist are equaled only by the impoverished of ASCII as a graphical medium. Karlgaard's two axes: -----------authoritarian------------ | ^ | | | | |<----left------|------ right----> | | | | | v | -----------libertarian-------------- I want to substitute "anti-authoritarian" for "libertarian", as follows: ----------- authoritarian---------- | ^ | | | | |<----left------|------ right----> | | | | | v | -----------anti-authoritarian------- Doing this permits distinguishing two varieties of anti-authoritarian, the decentralist and the libertarian. -------------------------------------- | | | | | | |-------------------------------------| | decentralist | libertarian | | | | --------------------------------------- In my terminology Libertarian is used to refer more specifically to the right quadrant of the anti-authoritarian position. The left side of the anti-authoritarian space I have chosen to call decentralist. As Rich indicates, on some issues, like NAFTA and, I might add, the Clipper Chip, the opposing sides are divided, not on liberal-conservative political lines, but on the horizontal axis. I would claim that the lower half of the political space simply be called anti-authoritarian and that it is divided into two quadrants: on the left, the decentralist, and on the right, the libertarian. You can see how this works on Clipper chip and other privacy issues related to encryption. EFF chairs a coalition of 60 organizations, from the American Petroleum Institute to the ACLU, which opposes government control of encryption. You have cypherpunks and corporate interests aligned on this issue, because they all want decentralization of control over encryption technology. On issues where the goal is to remove government-imposed barriers, like privacy, there is easy agreement between left-leaning decentralists and right-leaning libertarians. The coherence of EFF's Board resides in the libertarian-decentralist commonality of interest which is more important than conventional divisions of left-right politics. On the other hand, the sometimes fractious nature of the public interest community, of which EFF is part, can be seen to in splits along the same horizontal axis. EFF supports private sector ownership and operation of the National Information Infrastructure,, Many other public interest organizations share the same general goals of openness for the NII as EFF but prefer approaches lying above the horizontal midline, e.g., through direct government ownership or operation of the NII. Infrastructure is a trickier issue than privacy. All anti-authoritarians would agree that a government-built NII is the wrong approach. However, there seems to be more willingness among many on the net who think of themselves as libertarians to leave it entirely to private industry to build the NII, where government abandons any role, even as referee. If we wound up with an NII controlled by an oligopoly of enormous corporate interests which resulted in centralized control over content, it would be a bad thing. If independent content providers can't easily get on the network, it would be a huge catastrophe. It seems to me that, in principle, corporate authoritarianism is as dangerous as government authoritarianism, and this is an issue which may separate left-quadrant and right-quadrant anti-authoritarians. A libertarian would argue that if government got out of the way, e.g., deregulated telecommunications and let everybody compete, it would be sufficient to achieve the right kind of NII. Personally, I think that's naive. A more considered libertarian view would be that either the market will produce the desired result by itself OR IT WON'T, but there is nothing anybody can do to alter the outcome. Thus government should stay out of it, and the public interest community should go home. To me, this is both fatalistic and simplistic. A decentralist would say that deregulation alone is not necessarily going to be sufficient to produce a decentralized NII. It might be and it might not. But if it is not, we do not need to be fatalists about it. We have the opportunity to try to influence the outcome both by working at the level of raising consciousness and through the possibility legislation which ratifies some sort of hard-fought compromise that achieves certain goals (e.g. for new common carriage or new universal service). This embodies the EFF approach. We may all get lucky in the sense that the architecture of consumer broadband networks winds up following a model which is more, rather than less, like the Internet in its openness and decentralization. This appears to be the general direction Bell Atlantic is taking. However, while their system is open (in terms of common carriage or system architecture), it is heavily asymmetrical with a big downstream pipe and a small upstream pipe, at least for the foreseeable future. If the TCI merger goes through, and if they are able to rationalize two different networks, business models, and corporate cultures, what obtains for BA will hold for TCI too. There are some mighty big ifs here, and in any event Bell Atlantic/TCI only serves 25% of the country. Other carriers, who have a different business model which does not emphasize revenue from transport a la Bell Atlantic, but revenue from content, may choose to go with closed, channelized systems. We have to see what other cable companies and telcos actually offer. Increasingly I am going to focus my efforts on understanding the likely architectural deployments of the carriers and how close they come to EFF's model of an open platform. The pragmatic question which faces us as we fill in the picture with details will be what, if anything, can be done, to nudge the system into providing alternatives which are closer to open platforms. All in all, I'd prefer to try to catalyze any necessary changes in mindset of carriers in order to secure voluntary moves. But as a pragmatist I believe that government action, or certainly the threat of it, may be useful or, in the worst case, necessary, to achieve the desired end. Further, since the whole process is already highly politicized, I think involvement to prevent bad governmental solutions from being imposed and screwing things up is clearly necessary. Thus politics is inevitably involved to carry out a an anti-authoritarian mission. At least in my view. ................................................................... Mitchell Kapor, Chairman <mkapor(a)kei.com> Electronic Frontier Foundation *** Join EFF!!! Send mail to membership(a)eff.org for information ***

1 0