December 2003 - cypherpunks-legacy

Education needed, but what specifics?
by Seth Morris 17 Dec '03

17 Dec '03

I think we all agree that the public needs education on crypto and crypto politics. What specific issues need to be addressed? For some time now, I have been kicking around ideas for games related to crypto, and I have decided that it may be an excellent education/propoganda tool. What I'm thinking of is a BBS door that incorporates encryption ideas (probably without using any actual excryption, to make sysops more comfortable with it -- I'm co-sysop of a local BBS and my "real" sysop refuses to allow crypto software on it, for the same reason he's reluctant to house an adult area, no matter how much he personally would like both (although, admittedly, he's primarily interested in the adult area)). Originally I had thought of a game where encryption was used to transmit messages to units (a space-war-game, perhaps?), and capturing and decrypting your opponents messages was paramount. Ultimately, as your "cryptotech level" increased, you'd get stronger cyphers and develope public-key tech, etc., but this seemed pretty limited in its educational potential and pretty derivative of existing games. My current idea is something more based on the net. Players take the role of corporations pet punks, or freelancers, and use encryption to cover their butts while following traffic analysis trails of opponents (digital) money, setting up services for profit (and perhaps to follow the traffic opponents pass through them... leading to more encryption, etc), leading to ratings services and digital reputations, leading to denial-of-service attacks, etc. This could get exciting to play, and would lead to a cypherpunks-agreeable position in the game, perhaps facilitating "market penetration" of EFF, CPSR, and other cypherpunks-friendly literature. Perhaps the game should make frequent mention of PGP, RSA, Chaum and other sources in the literature (a door with a bibliography!)? What do y'all think of the idea? I think gaming is a wonderful way to spread ideas, and have been looking for a way to use it for some time. What elements of cypherpunks' philosophy and methods should/could be incorporated? I think emphasising the cyBerpunk-like aspects of the game (spoofing to get information, copyiong mail logs to follow message traffic, etc) would make the game more popular, and while it might hurt the game's reputation as a propoganda tool (wow-- a game that's a manual on attacking services on the net... how is that good for people?), it should increase the player's awareness of the _need_ for signatures, reputations, untraceablility, etc. Besides, who wouldn't want to infiltrate Denning Associates Corporation and Stern & Light Pharmaceuticals to funnel money and information to Mayday Publishing or somesuch? Seth Morris (seth.morris(a)launchpad.unc.edu) PS- I'm still having problems with PGP Tools 1.0c. The ptd.exe locks in fifo_destroy when trying to find a private key on the ring. Any suggestions? My first applet to test the library (an MD5 hasher for files on the command line) works fine, though.

2 1

Re: Education needed, but what specifics?
by Seth Morris 17 Dec '03

17 Dec '03

> Seth Morris writes : > > > > For some time now, I have been kicking around ideas for games related to > > crypto, and I have decided that it may be an excellent education/propoganda > > tool. > > Interesting.. Interesting.. > > > > > Perhaps the game should make frequent mention of PGP, RSA, Chaum and > > other sources in the literature (a door with a bibliography!)? > > Getting better... > > > > Whoa... is this thing supposed to be a *game*, or a training school for > net.guerilla.warfare? I may be a minority of one, but I'm not going to Point well made, and I did allude to the possibility that some would see it as that (although I think I was unclear about specifics, I had nothing actually _training_ like in mind certainly!). This is to be a game, primary emphasis on fun. I find that I learn best when I'm having fun, and my experience with rpg's and wargames has been that I think about the implications and inspirations for the games I play. (Has anyone else read the story about the USG using games to manipulate the voters? Where they make a voting game to increase turnout in a manner similar to Monopoly's supposed influence on people during the depression?) > risk *anything* by trying to hack mail systems, trace their logs, or > spoof. Quite frankly, I can't be bothered - apart from a sort of 'James > Bond' thrill, that sort of thing has no appeal whatsoever. Hopefully, I'm > just missing the point here, but I wonder how smart it is to advocate > 'hacking net services' in a game that is supposed to introduce people to Understyood, and agreed. All simulation, not like reality. I haven't ever commited such silliness myself (part of why I'm asking for ideas), and I see no reason for anyone else to. > strong crypto. Although it might not be very thrilling, my hope is that > Mom and Pop Citizen will one day use PGP (or <insert-favorite-crypto-here>) > on their routine e-mail - they may never know or care about telnetting to > port Q-47, and I don't think that matters much. Be careful with the game; > don't overemphasize the cloak-and-dagger to the point that Average Citizen > gets spooked off strong crypto. I'm hoping that the game would emphasize that anyone could _need_ strong crypto, and anonymity, and digital cash, etc. Also that understanding your network makes you and everyone else safer. > Don't take this as flame-bait, please; this just posting just hit me at > the right time to provoke a philosophical outburst. While it is fun for > the cypherpunks to skulk around and spoof each other, we must not lose > sight of a large segment of our intended audience - namely, those people > who might hop on the strong crypto bandwagon so long as the 'skullduggery' > factor does not get too high. I think there is a large market for crypto > services that is completely detached from the 'full blown' cypherpunk > agenda of anonymity, remailers, untraceability, etc. Have you played the game "Neuromancer" based on Wm Gibson's novel? My thought all the while reading the book was that it's make a better game than novel, and I was right. The game focuses on finding and infiltrating systems on the net with emphasis on tracking financial transactions and reaching secure(?) meeting places with other net underworld figures. The game was immensely popular, and could have used more "puzzle-like" elements, more data presented to the player, and an interactive option. That is more like what I'm proposing. The players I know of BBS door games in Tucson, Arizona (where I'm located physically), would like to see more control than would make the game "friendly." Understanding that their sysadmin can follow the sendmail logs might encourage users to use crypto on their mail, and use remailers (even non-anonymous remailers, just designed to take the tracking away from their own sysadmin and put it with one they have CHOSEN to trust). I know a lolt of sysops, and you'd be surprised how much email is read. Also, if more people are thinking about didgital cash, anonymity, encryption, and the lack of proivacy they have (and how public their lives may become if governments/corporations/"unfriendlies" of all types were the ones controlling information entirely vis a vis clipper, storuies of sysops reading mail, stories of corporations reading mail, stories of operators listening in on phone calls, ...), the more solutions will emerge, and the more prepared the people already using computers to exchange ideas will be when confronted with the options that take away privacy as opposed to those which enhance it. Perhaps I should send you a plan of what I'm thinking? Storyboards? I do **NOT** want to be seen as suggetsing/writing a manual on net.warfare, but the cyberpunk novels are already pretty closeto to what I'm thinking of and without presenting real dangers, I don't know how to suggest people use real solutions. Any suggestions are greatly appreciated. (Glad I didn't mention the proto idea of having users use hunter-killer viruses... that'd get me in trouble!) I appreciate criticism. Disagreement isn't flamage. Indignation isn't necessarily ad hominem. Please help me prepare a concept that won't cause these reactions in the non cypherpunks-friendly communities. Ideally, the abstract for the gam,e shouldn't raise too many eyebrows in comp.virus, talk.politics.crypto, or anywhere else. It certainly should be something sysops would be willing to use. Seth Morris (Seth.Morris(a)LaUNChpad.unc.edu)

1 0

Re: Disinformation (or the Truth?) About Clipper
by geoffw＠nexsys.net 17 Dec '03

17 Dec '03

> Phil Karn says: > > >The idea of a disinformation campaign to oppose Clipper really bothers me. > > >Isn't the true about Clipper damning enough? Lying about Clipper seems like > > > > I agree completely. Telling the truth is all that's necessary. You know, I'm a person that rarely lies, I don't lie to aquaintances let alone friends, but in this regard I think I have to side with Tim. We don't have the time or money to flood the media with the truth, this thing has to be STOPPED by any means necessary, The truth will surface one way or the other, It will surface when it is too late and we are all in jail for using illegal crypto, or it will surface when Clipper is finally derailed and the nation/industrialized world is free to be able to have the truth known. "THINK, It ain't illegal... yet." - George Clinton

2 1

Re: Disinformation
by smb＠research.att.com 17 Dec '03

17 Dec '03

How will the development of the Clipper hamper the info-supe-hi? And what is the info-super-hiway anyway, eh? I'll leave out the buzzwords -- but Clipper will definitely hamper the deployment of good networks. Encryption is a vital tool for network management and authentication, even apart from privacy considerations. But Clipper is of necessity hardware-only, which means that most current platforms will never support it, and few future ones will actually have it, whether they're capable of it or not. And on many important boxes -- routers, for example -- just leaving room for Clipper on the boards will be expensive. We have the following dilemma: DES isn't exportable, Clipper isn't suitable, and lots of foreign governments won't allow it in anyway, I suspect. How is one supposed to do authentication on a global Internet? --Steve Bellovin

1 0

Bet it's not encrypted...
by Alan (Miburi-san) Wexelblat 17 Dec '03

17 Dec '03

[The following was snipped from EDUPAGE, the online summary service. Anyone have access to more information? --AW] AND OPTICAL FINGERPRINTS. The National Registry uses an optical scanning technology to create and compare digital maps of the finger surface. The map can be converted to a modified bar code for inclusion on a wallet ID card. The information can also be encoded on circuitry inside a credit or debit card. (Tampa Tribune 2/20/94 B&F1)

2 1

Re: Mac encryption
by Ron Davis 17 Dec '03

17 Dec '03

>> What is everyones opinion of the best encryption software forthe Mac? >> Frederic Halper >> fhalper(a)pilot.njin.net > >MacPGP, available by anonymous ftp from the soda.berkeley.edu site, is >the only one I know of using public key methods, and hence the only >one of real interest to Cypherpunks. I find this to be a strange statement. Do we have no interest in non-public key methods? Seems the Cypherpunks should have an interest in all forms of crypto. Most users don't currently use public key becuase they just want to keep thier boss from sitting down at thier computer and reading the resumes they wrote for other companies. This can be accomplished with symetrical crypto just as well, if not faster than PGP. >Commerical products (like the various "Kent Marsh" products) are >mostly DES-or-weaker and are oriented toward local file protection. >(MacPGP will do that, too, of course). Cryptomatic does come with Triple DES which is still a very strong method. Unfortunatly MacPGP's biggest draw back is that its interface is poor and it is hard to use. There is also MacRIPEM which is written by Raymond Lau, author of Stuffit, and is much easier to use, but weaker than PGP (but legal). > >About six or seven years ago I bought "Sentinel," from SuperMac, and >used it a few times. The problems were obvious: lack of other users >(so my friends couldn't receive or send), and the symmetric cipher >nature (we had to share keys for a message). Public key systems based >on PGP have solved both problems (though problems of convenience >remain). > Can't stop without mentioning that my company make a product called Citadel which does DES encryption. ___________________________________________________________________________ "I want to know God's thoughts...the rest are details." -- Albert Einstein _________________________________________ Ron Davis rondavis(a)datawatch.com Datawatch, Research Triangle Park, NC (919)549-0711

3 3

Re: Mac encryption
by dmandl＠lehman.com 17 Dec '03

17 Dec '03

> From: Ron Davis <rondavis(a)datawatch.com> > > >> What is everyones opinion of the best encryption software forthe Mac? > >> Frederic Halper > >> fhalper(a)pilot.njin.net > > > >MacPGP, available by anonymous ftp from the soda.berkeley.edu site, is > >the only one I know of using public key methods, and hence the only > >one of real interest to Cypherpunks. > > I find this to be a strange statement. Do we have no interest > in non-public key methods? Seems the Cypherpunks should have > an interest in all forms of crypto. Most users don't currently > use public key becuase they just want to keep thier boss from > sitting down at thier computer and reading the resumes they wrote > for other companies. This can be accomplished with symetrical > crypto just as well, if not faster than PGP. Cypherpunks do have an interest in all forms of crypto, but there are very good reasons why public key is more desirable than symmetric for "our purposes." This is at the very root of the crypto revolution and the cypherpunk ethos. Have you done the basic reading? (That's a serious question, not sarcasm.) PGP _does_ symmetric crypto. > >Commerical products (like the various "Kent Marsh" products) are > >mostly DES-or-weaker and are oriented toward local file protection. > >(MacPGP will do that, too, of course). > > Cryptomatic does come with Triple DES which is still a very > strong method. And MacPGP comes with IDEA, which is at least as strong (as far as we know). And of course, it does all the public-key encryption and key-management as well. A pretty incredible package, considering its size and cost. > Unfortunatly MacPGP's biggest draw back is that its interface > is poor and it is hard to use. I disagree. > Can't stop without mentioning that my company make a product > called Citadel which does DES encryption. Hmmm... --Dave.

1 0

Another Brick in the Wall (fwd)
by Mike Godwin 17 Dec '03

17 Dec '03

Forwarded message:

1 0

Re: Mac encryption
by Ron Davis 17 Dec '03

17 Dec '03

>Cypherpunks do have an interest in all forms of crypto, but there are >very good reasons why public key is more desirable than symmetric for "our >purposes." This is at the very root of the crypto revolution and the >cypherpunk ethos. Have you done the basic reading? (That's a serious >question, not sarcasm.) Depends on what the required reading list for this group is. I thought that our purposes were to promote the privacy of individuals through the use of cryptography. This can be done in the contexts I talked about with symmetric as well as PK crypto. Maybe I have the wrong idea about "our purposes", please correct me if I'm wrong. >PGP _does_ symmetric crypto. >And MacPGP comes with IDEA, which is at least as strong (as far as we know). Rumor has it that Kent Marsh is working on an IDEA module for thier products as well. >And of course, it does all the public-key encryption and key-management as >well. A pretty incredible package, considering its size and cost. You're right its free. If something is free you can't really complain about it. If it does anything its a bargan. > >> Unfortunatly MacPGP's biggest draw back is that its interface >> is poor and it is hard to use. > >I disagree. I can live with disagreement. Of course hopefully you would admit that Cryptomactics ability to select a file in the finder, pull down a menu and Boom encrypted file is easier than PGP's methods. ___________________________________________________________________________ "I want to know God's thoughts...the rest are details." -- Albert Einstein _________________________________________ Ron Davis rondavis(a)datawatch.com Datawatch, Research Triangle Park, NC (919)549-0711

1 0

http:--cnnfn.com-hotstories-washun-wires-9707-24-fcc_wg-
by Jim Choate 17 Dec '03

17 Dec '03

Help for your desk so that it is no longer flooded with calls with the new HP Vectra PCs. [INLINE] Washington Unwrapped graphic New FCC chief to be named Kennard expected to get post, but choice has irritated Sen. Hollings July 24, 1997: 6:49 p.m. ET [LINK] [INLINE] Hundt sees book in future - June 2, 1997 FCC Chairman steps down - May 27, 1997 [INLINE] Federal Communications Commission Infoseek search __________ ____ ____ WASHINGTON (CNNfn) - President Clinton has settled on William Kennard to be his choice to become the next chairman of the Federal Communications Commission, well-placed Administration officials tell CNN. [INLINE] Kennard, the FCC's current general counsel, would succeed Reed Hundt, if confirmed by the Senate. [INLINE] The sources say the president could make the announcement as early as Friday, though the official announcement could slip a bit. [INLINE] Kennard was favored for the job by Vice President Al Gore, the White House official who makes most of the final decisions regarding FCC appointments, because of Gore's long time work on telecommunications issues. But another telecommunications policy maker in Washington is furious at the White House for the Kennard selection. [INLINE] Sen. Ernest Hollings, the ranking Democrat on the Senate Commerce Committee, had pushed his former chief of staff on the committee, Ralph Everett, for the job. Everett, the first African American to ever serve as chief of staff to any Senate committee, had the endorsement of 16 Senators and was considered a leading candidate for the job. [INLINE] Not only is Hollings angry that his candidate didn't get the nod, but sources say he is also miffed about how the White House handled the process of making the final decision. White House Chief of Staff Erskine Bowles called Hollings, Senate sources say, "to apologize for how this was handled." [INLINE] One source close to Hollings told CNN Financial News, "Don't expect quick work in the Senate on this nominee." [INLINE] The president also is expected to nominate Justice Department attorney Michael Powell to fill a Republican vacancy on the five-member FCC, according to the sources. [INLINE] And Gloria Tristani, a phone regulator from New Mexico, is expected to be Clinton's choice to fill a Democratic seat. [INLINE] Those two nominations, however, aren't expected to be announced at the same time as the Kennard pick. Clinton already had nominated Kennard for the FCC. But the president has yet to name his choice for chairman of the agency following Hundt's announcement in May that he planned to leave. [INLINE] Clinton already has nominated Harold Furchtgott-Roth, chief economist for the House Commerce Committee, to fill a second Republican vacancy. The FCC oversees the phone, broadcast, wireless, satellite and cable-television industries. Link to top home | washington unwrapped | hot stories | contents | search | stock quotes | help Copyright © 1997 Cable News Network, Inc. ALL RIGHTS RESERVED.

1 0