December 2003 - cypherpunks-legacy

Re: New anon mailer idea?
by gtoal＠gtoal.com 17 Dec '03

17 Dec '03

Following up my own post, because I'm rather pleased with it and have had some more ideas... :-) : I want to mail fred@somesite anonymously. I know fred@somesite's : public key. I encrypt my message for fred, then send it to a : remailer address with instructions to pass it on to fred. For a little : eavesdropping security, I include an anonymous pgp key of mine : in the mail to fred so that he can reply to me without the remailer : operators reading his mail. You can choose your favourite syntax : for how I ask the remailer to send this mail to fred - I don't care : what it is. : The remailer then encrypts *my reply mail address* with the remailers own : key, and inserts this as a header in the mail which only it can read. : It attaches a little message to this header saying 'when you reply to : this message, be sure to include this opaque header I'm giving : you here...' : The recipient gets the mail, decodes it, reads it, and replies. : (Maybe encrypted with an anonymous public key I included in the : mail, maybe in cleartext - doesn't matter for the scheme) When : he replies, he included the small encrypted block that the remailer : gave him at the top of his message, as he was asked to do by the : remailer. : The reply goes to the anonymous remailer. The anonymous remailer : decrypts the header block that it searches the mail for, and : extracts my email address from it again. The remailer then passes : the mail back to me - this time including an encrypted block with : the fred@somesite's address in it. (Or some other address if : fred replied from another account; or perhaps I mailed a mail : to news gateway - well, my encrypted address will still work : even if a dozen people reply to the news article by mailing : via the remailer, and now I *don't* know who the encrypted : sender is) : In this way, once a conversation has been established, replies : can keep going backwards and forwards without much fancy protocol : at all - all you ever do is remember not to delete the encrypted : block that the remailer keeps inserting at the top of your mail. I've thought of another thing that cypherpunks like that this scheme can do: return postage. Where the remailer encrypts the reply address and puts it in the body of the destination mail, so that the adressee can reply, I'd been assuming a public key system like pgp, just because that's what we're used to. But in fact the encryption is entirely private to the remailer and might as well be secret key like DES. So instead of having a single master key, let's use a key that's generated for each message. So, the remailer encrypts the return block with a secret DES key, and includes something like the MD5 hash of the DES key in cleartext so that it can find the correct DES key when the reply comes back. (Hmmm. doesn't have to be the md5 hash - could even be the filename that stores the key - yeah, that works better...) Anyway, we now have a way of doing postage. Let's say that the outgoing message was to a mail2news gateway, and the sender asked for a limit of 10 replies. Then as each reply comes in, the reply count stored in the file that holds the DES key is decremented to 0, and when it hits 0 the file is deleted. Unless the remailer operator made illicit backups, that return address can *never* be used again - it may be out there on the net in an encrypted version, but *no-one* can now decrypt it. More likely you'd use this feature to guarantee single-shot replies. Similarly, the same thing can be applied to timed-expiry keys - the file storing the DES key can be removed after a certain time has elapsed. If you post a message on some timely event, you arrange that only answers posted in the next 48 hours will be delivered - anything that arrives too late is bounced by the remailer. I can see *lots* of uses for this feature :-) One nice use of this is to foil traffic analysis - if you send off something to someone with a reply address and force an immediate reply, they don't have time to get stuff in place to watch all the feed sites and follow a message through the net if they later want to trace who you are by sending you lots of mail (a technique I realised would work against Julf's mailer) - as soon as one of the remailer-chain's keys has expired (and been deleted), that part of the routing is permanently broken. Couple this implementation of postage-limitation with the Magic-money stuff for payment and I think we have quite a nice extension of the cypherpunk mailing ethos. I wonder if it could be hacked in to the existing remailers? Anyone interested? G

1 0

Cyber PsyOps (Re: Shot)
by Jeff Davis 17 Dec '03

17 Dec '03

From: Blanc Weber <blancw(a)microsoft.com> Date: Mon, 11 Apr 94 20:17:28 PDT >included "Life, liberty, Pursuit of Happiness", and what do you suppose >George thought about that? > >Some questions I would ask in regard to this warfare business: >What sort of a win would you be aiming for, which served the purposes >of rational discussion poorly? For how long would you be expecting to live in the company of those whom you drove to irrationality? And how >would you go about the business of returning everything back to a Psychological Warfare is the only way to compete with the NSA on this issue. This is how they are manipulating the Clinton Administration, and the population with propagandic undue infuluence. Power is only aquired by the fact that the population gives the NSA power via credibility. They are the NSA, ergo, they must know what they are talking about. The Clinton Administration has been similarly duped. Second question. Of the consensual normalities of society, Fredrich Perls said, "You can choose to participate in the collective psychosis, or dare to be yourself, and possibly be crucified." I'm in the business of raising the population's awareness, as is EFF. Perls also said, "Awareness of itself, is curative." Provisions for the survival of tribal anarchy- a pure democracy- were written into the Constitution by Thomas Jefferson, if one is to give weight to progressive theory. An aware, informed, and actively participating population is my aim, not "driven to irrationality" as Blanc state above. The internet, in its present state is a belevolent anarchy, with guidlines of courtesy extended to the new participants by the older experienced participants.Some of us are experienced and quite comfortable functioning in an anarchic environment. As the hordes come, we are already preparing the way for them. Kapor talked about the public outcry that would be percipitated by shutting down the internet. We've talked about strength in numbers. We can trust the innate herd instinct of humankind to self regulate and organize itself with in this new paradigm of confluence. Psychological Warfare is duofold. It harrases the enemy, and hopefully wins the hearts and minds of the population. I suggest Blanc not throw the baby out with the bath water. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

2 1

Help: Can I get a current Cypherpunks gateway site list here?
by johns＠macadam.mpce.mq.edu.au 17 Dec '03

17 Dec '03

I have been sent a somewhat dated file, listing Cypherpunks remailer sites, and mail-to-news gateways; can I get sent a current list, please? (It is the gateway list that I'm particularly after.) In case this is an automated a/c: I did not get the list please send list Thanks, ################## internet: johns(a)macadam.mpce.mq.edu.au ###################

1 0

Re: Cyber PsyOps
by Jeff Davis 17 Dec '03

17 Dec '03

Black Unicorn sez.. >What you seem to be looking for is change NOW. >THIS SECOND. If this is your time table, I hope you like bloodshed. Change is happening now. This is not something an individual can instigate, it just happens in predictible cycles. I'm just spitting in the ocean with my $0.02. I am committed to the letter and the spirit of the Constitution of the United States of America. Maybe Marbury v. Madison (1803) was a fuck up. Reversing that decision is a plank of the Libertarian platform. The Constitution has provided amending provisions, and we can always rectify the errors of shortsightedness. Article XXI Section 1. The eighteenth article of amendment to the Constitution of the United States is hereby repealed. I opperate under the ASSUMTION that anything I release publicly, (email post cards included), is available to the intelligence community. Here's a little personal Hx for you and cypherpunks. I find it rather Pynchonesque. Between a high school friend of mine, Peter Anthony Zellner, and I, we have 3 Social Security #'s. Two of them are consecutive and are mine. The US Navy spent a years worth of investigation, (NIS), to find out why Pete's SS# didn't work. He was given an "N" designation for Navy until they got it straightened out. My mother has testified under oath in a court of law she signed my elistment papers when I was 17. When I was 18, my draft classification was 1-H. On 18 February 1983, an Air Force Lt Col stopped by my place in Denver on his way to a conference at Keystone that became SDI. I refused a mission and was cashiered on the spot. End of story. I can offer circumstantial evidence and personal corraboration that the above is true. FOIA is useless. I always draw a blank- (which is indicative of an active file). In the Fall of 1984, at the bequest of Robert Bragg, Petty Officer 1st Class, NIS ran a check on me. The reason is because FTS clearances are "Q" clearances, and I gave Bragg the proper cue. Bragg informed me that NIS considered me questionble. There are a lot of very bright people doing some important work on this list that is far beyond my technical expertise. I don't have to write it, however, just learn how to use it. I offer mainly social philosophy and social activism.In consideration of this, I have no intentions of disscussing the above any further. One may believe it, or disbelieve it. I don't care. If one tends toward disbelief, I'm sure the above will be used in an attempt to discredit me. If my personality and activism is disruptive to cypherpunks, I can always shut up and just read the damn thing. I have no intention of becoming involved in a Detweilerian flame war. Especially with Black Unicorn. I'm trained to determine potential harm of a classified leak. I can tell by Unicorn's response that he is informed to an extent, yet has a limited paradigm of intelligence access by which he/she makes his/her judgements. Carry on cypherpunks. If rebuttal to my statements cloggs the group, I will do all I can to minimize it. I can always sit here and read the damn thing. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

2 1

Cyber PsyOps
by Jeff Davis 17 Dec '03

17 Dec '03

Having read Black Unicorn, Thank you. Would you please critique my _Paradigms_of_Revolution? I am prone to action on instinct. I'm still thinking about your questions relative to function. For one thing, I suggest that everyone have a refferance with the Constitution with in arms reach of their terminals. Its despicalbly under read by law enforcement types, and may give us an edge up somewhere down the road. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

1 0

RE: Shot 'Round the World
by greg＠ideath.goldenbear.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Blanc Weber writes: > From: Greg Broiles > "... we don't need to demonstrate good behavior to convince it/them > that we deserve or can be trusted......" > ". . . to bolster their flagging confidence, they need a good kick in > the teeth." > "There is no rational argument that can force the non-trusting to trust." > ". . . the point may be to create a state of irrationality, not a > particular rational conclusion." > . What you would be aiming for here, apparently, is neither their > psychology nor their intellect. But actually if you are not intending > to communicate at all, then all of things which I mentioned are > irrelevant. I would leave you to your own devices. The only message I think is worth communicating is "We're doing our own thing. You will not be able to stop us because of [ .. reasons ..] so don't bother trying. Have a nice day." and I'm inclined to think even that is unnecessary. Terrorism and psychological warfare could be considered a form of communication; it is, after all, intended to create or maintain a particular understanding on the part of others; but it is not communication in the same way that a letter is. I don't know anything at all about what Jeff is up to, so he'll have to speak for his own (actual) motives and purposes; I was hoping to point out that what he's up to can seem more useful when it's not considered in the context of a rational discourse within polite society. > "Perhaps this discourse about "images" isn't useful, and it's time to > talk about capabilities." > . What image do you get of the engagement of your capabilities under > normal circumstances vs under a totalitarian regime? I've got no idea what you mean by "normal circumstances"; if your point is that totalitarianism sucks, I agree. I could chatter on about how I think things ought to be, but I don't imagine most folks give a damn. I believe we have a right to work towards a social/political structure (or lack thereof) where our capabilities are fruitfully and fully engaged, whether or not bureacrats and dictators find that convenient. (Of course, they may have already found the state where *their* capabilities are best engaged .. :) > What sort of picture is created in your mind by the statements about > human nature, "endowed ...with inalienable rights", among which are > included "Life, liberty, Pursuit of Happiness", and what do you suppose > George thought about that? Uhh .. a right to privacy (and to the use of strong crypto) whether or not that makes other people nervous or damages their fragile confidence? > Some questions I would ask in regard to this warfare business: > What sort of a win would you be aiming for, which served the purposes > of rational discussion poorly? For how long would you be expecting to > live in the company of those whom you drove to irrationality? And how > would you go about the business of returning everything back to a > viable, liveable state, supposing you achieved victory? The usual pattern is destabilization, then a power grab by whatever group is correctly positioned - either revolutionaries or the local military. Lather. Rinse. Repeat. Personally, I'm inclined vis-a-vis the NSA and TLA's in general to let sleeping dogs lie, at least for the moment. Other folks (Grady, Jeff) see opportunities differently; I encourage folks who think leverage and timing is on their side to take advantage of opportunities as they occur. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLapGn33YhjZY3fMNAQHmZAP7BscprSqPUr4cIW+nxRv1z/Ym8l2qcF0N Wav2xXK8R2D7ZlYb1fwTw+6Q85Z8fjh/8RXaWkfJzBLvcAj9dxIE+fYc8+USfAfV SfCev9f8QcZ9hYNzkoU4CiwmAftGsZzpoEFVl/N9jjd+YEAbO6ChI5UeBY6+/yeu Q5hVFg6fap0= =y8mJ -----END PGP SIGNATURE-----

1 0

Re: Clipper Chips in video descramblers
by Harry Shapiro Hawk 17 Dec '03

17 Dec '03

David Koontz: @ Recently someone posted reference to GI (General Instruments) getting @ authority to use Clipper chips in descramblers. One wonders about @ motivation on their part. ITAR already exempts the use of crypto @ in video descramblers where the crypto cannot be used for other purposes. @ So, what is their motivation? As I have long predicted, clipper has a likely chance of going into every cable converter/set-top box. That's 65 million homes and that would make clipper the defacto encrypt/decrypt system in the world. Cable systems need strong cypto to prevent not only theft of their services but to product the transactional data of their customers. (e.g, to hide what you are ordering on pay per view, your credit card numbers, etc,) and when they offer voice services they will also need to encrypt your voice.... This is really big brother in your living room, your bedroom, and if you have a TV there, you bathroom..... kitchen, den, workstop and ..... well you get the point. Harry Shapiro Hawk Manager of Computer Services Warwick Baker & Fiore habs(a)uucp.warwick.com

1 0

Cyber PsyOps & Media
by Jeff Davis 17 Dec '03

17 Dec '03

I just got off the phone with David Wilson with the Chronicle of Higher Education. Sarah Simpson confirmed my membership in EFF to him, and said I'd better talk to him myself. I told him the document was posted to Usenet, I just accelerated the news of its leak. I told him it was my statement that a wake up call was needed to the American public. They need to take the initiative themselves to attain internet access by their own means. I told him in my opinion it was authentic and I told him why. I assured him that if the document contained classified information I would not have blasted it all over the globe. I told him I had no idea of the origin of the leak. He asked for a copy of my essay, _Paradigms_of_ Revolution_ and I sent it to him. That is a complete report. If it isn't in the above paragraph, I didn't tell him. Are we all clear? Thought so. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

2 1

remailer@soda ?
by Matthew J Ghio 17 Dec '03

17 Dec '03

Is the remailer(a)soda.berkeley.edu down? I tried to use it, but it doesn't seem to be remailing. :(

1 0

alias in phone book
by Adam Lake 17 Dec '03

17 Dec '03

I have recently been participating in a thread concerning anonymity and pseudonymity on the Internet. Somebody was complaining about trying to find somebody and they were logged in with an uncorrelatable alias. (Fishman = Don Johnson????) The person was asking for a rule that everyone log in with an alias that DIRECTLY correlated them with their "real world" (relative term) pseudo. Yuch!!!!! What I was wondering was if any of you law hacks out there new anything about the following comment regarding phone books A professor of communications has brought up the fact that it is illegal to use a pseudo in the white pages of the phone book. Is this the case? Help!!!! lake(a)uenics.evansville.edu ---------------------------------------------------------------------------- Remember the last time you called her, she forgets Pray to her, she will remember that she will remember that ----------------------------------------------------------------------------

5 5