December 2003 - cypherpunks-legacy

Mailing List
by kevin＠beach.com 17 Dec '03

17 Dec '03

Please put me on your mailing list. Thanks Sincerely, Kevin T. Smith, President TeleSource A Division of SonRise Corp. (408) 247-4782 voice (408) 247-1070 fax ksmith(a)beach.com *************************************NeXTMail Preferred***********************************

1 0

ID card from hell
by Brad Dolan 17 Dec '03

17 Dec '03

Yeah, I know it's not about crypto but it sure is about privacy ... 1984 COMES ONE DECADE LATE July 12, 1994 On CBS News tonight, the lead story announced a government plan to require all of us to carry a national identity card. This card will contain your picture, a fingerprint, your social security number, and other "electronically encoded" information. You will be required to present this card to obtain employment or "receive government services." CA Governor Pete Wilson and Sen. Alan Simpson were featured explaining how this was a really great idea, necessary to "stop illegal immigration." Prediction If Americans accept this, as I expect they will, we will see the following: Cops doing card-scan roadblocks, ostensibly to find drunks and immigrants. A requirement to present your card and have a computer record kept after every financial transaction over, say, $100. A requirement to present your card to get medical care. Adoption of these cards as drivers' licenses. Just a magnetic / electronic data entry to indicate if you are authorized to drive. Same thing for professional licenses. Card-scan to buy guns or ammunition - if you are allowed to buy them at all. Card-scan to buy potentially subversive tools, chemicals, books. Card-scan on entry to or exit from the U.S. Instant database check to see if you are authorized to enter or leave the U.S. Card-scan on entry to or exit from "special" areas: an extra little security check before you enter places the government is taking an extra interest in. Mandatory presentation of card to get access to an internet- attached computer account. Card-scan at your kids' school. Linked databases of parents and kids, to correlate child support payments, vaccination histories, academic performance, truancy, antisocial attitudes, you name it. I could go on, but why bother? As an exercise for the reader: The federal government currently is encouraging states to revoke drivers licenses and professional licenses of "bad" people who use drugs, drive drunk, don't pay child support, etc. What will happen to you in the future if you displease the state? Brad bdolan(a)well.sf.ca.us

1 0

SPA & FBI after Pornographic traitors
by Brad Dolan 17 Dec '03

17 Dec '03

Sandy asked.... Associated Press reports today: Officials at one the nation's three nuclear weapons laboratories discovered their computers were used to store pornography, the Los Angeles Times reported Tuesday. Computers at the Lawrence Livermore National Laboratory contained more than 1,000 pornographic images, said Chuck Cole, deputy associate director of computing at the lab. [...] The computers were shut down after an investigation uncovered software piracy on the Internet, a network of thousands of computer networks originally designed to connect computers at universities and government research labs. It is now used by millions of people. "We are currently tracking over 1,600 pirate sites on the Internet in a joint investigation with the FBI," said Peter Beruk of the Software Publishers Association, which represents major software manufacturers. "It is a very serious and costly problem." [...] ----------------------------------------------------------------- Some people might consider the second paragraph a nonsequitur to the first. However, if one doesn't think too clearly about things, one might get the general message that we need Daddy to help protect us from the pornographers and pirates lurking out there on that internet thing. Brad bdolan(a)well.sf.ca.us

1 0

Re: NATIONAL SECURITY PORN RISK
by Blanc Weber 17 Dec '03

17 Dec '03

-- Excerpt -- One computer expert, who requested anonymity, said there might be more to the incident than meets the eye. The expert suggested that the hard-core pornography may be a cover for an ultra-sophisticated espionage program, in which a "sniffer" program combs through other Livermore computers, encodes the passwords and accounts it finds, and then hides them within the pornographic images, perhaps to be downloaded by foreign agents. -- End excerpt -- Maybe this is all just an excuse to examine the evidence (1,000 GIFs). Blanc

1 0

RE: "True Names," chat with Vinge, and Cypherpunks
by Blanc Weber 17 Dec '03

17 Dec '03

From: Timothy C. May Sorry if this message seems too personal, but I felt the urge to "share." ............................................ Oh, that's okay - I wasn't doing anything, anyway. Blanc

1 0

Encrypted, Chained Reply Blocks
by nobody＠ds1.wu-wien.ac.at 17 Dec '03

17 Dec '03

I noticed a message posted here, anonymously, with an "encrypted reply block" (ERB) attached to the end of it. Instructions were given that to reply to the message, the block was to be pasted at the very beginning of the reply, which was then to be sent to a certain remailer. The block started with the usual "::", followed by and "Encrypted: PGP" line typically used with chained remailers. While I don't know the specifics of that particular ERB, would it be possible to chain a REPLY through several remailers, such that the body of the reply was sent along in the clear through each link of the chain, but the final destination address was only visible to the operator of the final link in the chain? This would require that after the "Encrypted: PGP" block, any appended plaintext would also be sent along by each remailer and not discarded. Which remailers allow that? Hypothetically, it would seem that one could take an "empty message", using the "CHAIN" utility to chain the "message" through remailers A,B,C,D, encrypting it at each step, placing the resulting block in the message body with instructions that the resultant block must precede any replies, which must then be sent to remailer "A". Alternatively, instead of an empty message, a single, unique, identifying line could be used as the message. This would allow a person to generate multiple ERBs and know which one had been used for any given reply. One weakness I can see in such a scheme is that traffic analysis would be a bit easier, since the plaintext of the reply would be visible at each step. Also, there would be a potential for "hand tracing" the reply to its destination, assuming each remailer operator cooperated, by sending a personal message to operator "A", with the ERB attached, asking him/her to decrypt the next link destination, then forward the message to the operator of the next link with a similar request, and so on, requesting that the last operator in the link report the ultimate recipient's email address to the requestor. This would potentially be easier than tracing a message the other direction, since by the time the message arrived, information necessary to trace it backwards might have been already deleted at one or more of the chained remailer sites. Any thoughts or suggestions? Are there any further obvious weaknesses in this scheme that I may have missed?

1 0

Pseudonymous ID cards?
by analyst＠Onramp.NET 17 Dec '03

17 Dec '03

On the bright side, at least the Clinton administration is trying to stir up interest in privacy issues amongst the general public. Between the administration's support of Clipper, National ID cards, National Health cards and Digital Telephony (have they supported this yet?), there should start to be a lot of public interest in these issues. Personally, rather than _just_ naysay everything that is being proposed (which I will do, strongly), I would like more concrete recommendations and proposals to make on the positive side that use technologies like digital signatures and reputations to *protect* privacy while still allowing many of the familiar sorts of social/economic interactions that we take for granted. Perhaps we can pull an Aikido maneuver on this sudden gov power grab (ok,ok, pretty far-fetched). But, short of tracking down the Scientific American article from a couple of years ago and re-reading it (and I'm sure it's out of date), I'm not really sure what we can do with pseudonymous reputations and whatnot given the current state-of-the-art. So, I'd like suggestions, comments about alternative ways of establishing digital IDs, insurance cards, credit cards, etc. that protect privacy instead of divulge it, while still providing some of the societal controls that we have come to expect (e.g. that drunk drivers will be deprived of a license to drive). Do we have alternative suggestions to make in this dark hour so that we can actually win back some of our privacy? Can these sorts of technologies be implemented in a way that is understandable by the average citizen-unit? -- Benjamin McLemore analyst@onramp,net PS I wonder what exactly Justice and/or the spooks have on Clinton that's so effective? Or are he and Gore actually as stupid as they act?

1 0

cypherpunks email list help?
by Gerald.R.Martinez＠att.com 17 Dec '03

17 Dec '03

Anyone know the phone number of the cypherpunks list owner? I have tried for weeks to remove my duplicate email address entries from the list - probably placed there as a result of the email list scroggings of late... so far I have not gotten any response from: majordomo(a)toad.com (reply indicates request forwarded to cypherpunks-approval(a)toad.com) hughes(a)toad.com hughes(a)ah.com Any advice would be appreciated... thank you. -- gerald.r.martinez(a)att.com / grmartinez(a)attmail.att.com / att!drmail!grm @ AT&T GBCS Bell Labs, Denver (303) 538-1338 @ WWW: http://info.dr.att.com/hypertext/people/grm.html & life is a cabernet ...o&o )))

1 0

Re: NATIONAL SECURITY PORN RISK
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

> "Computer at Nuclear Lab Used for Access to Porn" >[ snip ] >-- Excerpt -- >One computer expert, who requested anonymity, said there might be more >to the incident than meets the eye. The expert suggested that the hard-core >pornography may be a cover for an ultra-sophisticated espionage program, >in which a "sniffer" program combs through other Livermore computers, >encodes the passwords and accounts it finds, and then hides them within >the pornographic images, perhaps to be downloaded by foreign agents. >-- End excerpt -- > > It's a Steganography reference. This sets off my warning bells -- >why would they explicitly mention the Stego technique, unless possibly it >was used in the porn ring there? Granted, Stego makes good journalism >fodder ("Hide your encrypted nuclear bomb plans in porn GIFs from the >Internet!"), but it's definitely not as sexy [sic] as "Taxpayer-funded >computers used in secret porn ring!" Anybody know exactly what was going >on at LLL? We can't get papers easily up here. :( > >-------------------------------------------------------------------------- >Michael Brandt Handler <grendel(a)netaxs.com> >Philadelphia, PA <mh7p+(a)andrew.cmu.edu> >Currently at CMU, Pittsburgh, PA PGP v2.6 public key on request >Boycott Canter & Siegel <<NSA>> 1984: We're Behind Schedule I think that the Steganography is just an excuse to close down the place. It _could_ happen, therefore we should defend against it. Of course, every spy knows that blending in is the most important trick. It would be better to hide the information in something bland. On the other hand, a gif-station is one of the few types of ftp sites that attract enough attention to drown out the one transfer from the spies.

1 0

Re:"True Names," chat with Vinge, and Cypherpunks
by analyst＠Onramp.NET 17 Dec '03

17 Dec '03

Any newer Vinge estimates of arrival time for the Singularity? I saw an article a while back by Vinge and I think he was estimating 2013-2030 timeframe. I've been thinking of starting a Singularity Watch type Web-page/email list, as I am often struck by technological newsbits that seem enough out-of-the-ordinary and potentially status quo shattering that they seem to indicate some sort of potential for breakthrough. Some recent examples: *human genome project *quantum mechanical teleportation *high energy ion bombardment of nuclei in Germany yields something besides quarks, gluons in protons (potential challenge to QCD, is this our photoelectric effect finally?) *quantum computing *etc Despite the romantic appeal of the idea, though, I think it is a bit farther off than Vinge imagines--maybe 2050. -- Benjamin McLemore analyst(a)onramp.net

2 1