December 2003 - cypherpunks-legacy

The ITARs [support your CRYPT-IN rights!]
by a2＠ah.com 17 Dec '03

17 Dec '03

> Jim Miller says: > > Section #120.9 of the ITAR defines "Defense Service" as: > > > > (1) The furnishing of assistance (including training) to foreign > > persons, whether in the United States or abroad in the design, > > development, engineering, manufacture, production, assembly, testing, > > repair, maintenance, modification, operation, demilitarization, > > destruction, processing, or use of defense articles; or > > (2) The furnishing to foreign persons of any technical data > > controlled under this subchapter (see #120.10), whether in the United > > States or abroad. > Perry E. Metzger responds: > This is sick. According to this, I cannot teach foreigners about > cryptography in the U.S. -- even about the open literature. This is a > grotesque denial of my first amendment rights. > > I wonder if I should hold an open enrollment cryptography class for > the sake of civil disobediance. > > > This is exactly the sort of issue the Cypherpunks were formed to address. CALL TO ACTION: I suggest that those of us who are able to do so immediately lay plans to offer such courses. These courses should only contain open information, and they be specifically advertised to foriegn nationals living in the US. To the extent possible we should coordinate these courses, perhaps to content, certainly to date and notification of the interested authorities. The should happen in every corner of the land. The time for the CRYPT-INs has come! [No one who supports with the government's right to suppress publically available information should participate.] -a2

1 0

secure rlogin?
by Ed Carp 17 Dec '03

17 Dec '03

In the licensing agreement that comes with RIPEM, there is mention of a secure rlogin using D-H key exchange. Does anyone know if this is publically available? Thanks! Ed Carp, N7EKG/VE3 ecarp(a)netcom.com 519/824-3307 Finger ecarp(a)netcom.com for PGP 2.3a public key an88744(a)anon.penet.fi If you want magic, let go of your armor. Magic is so much stronger than steel! -- Richard Bach, "The Bridge Across Forever"

1 0

DigiCash can use whatever currencies are valued
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

As Perry and Eric and others have noted, schemes for digital cash are primarily a transaction mechanism, and not a new currency unto themselves. Transfers, accounts, payments, all the usual stuff. However, the strong crypto used allows more flexibility in bypassing normal currency rules and can allow users to mutually agree on whatever currency they wish. (This is in large part already possible, for some folks, in the international markets, the Eurodollar markets, etc. It's one of the things that keeps countries in line. Duncan Frissell and others have elaborated on this market mechanism.) Just as in Havana, the U.S. dollar is the de facto hard currency unit, so too could future digicash transactions be based on the Latvian luble, the Qatarese marq, or the Cyberian cyphertaler. Or on a market basket of such currencies. Or on uranium futures. Whatever the parties to a transaction agree on. (Obviously the usual Cypherpunkish issues of market forces, trust, reputation, escrow, etc., enter in here. How the dollar comes to have a "value" that is worth, say, 5 pounds of bananas to some merchant, while the officially supported Cuban peso is worth, say, half a banana peel, is a complicated and "emergent" thing. It's complicated, but was understandable to Saddam's ancestors in the markets of Babylon thousands of years ago. Enough said.) The prospects for breaking open these financial markets even further is breathtaking. Of course, it won't be easy. More than some casual programming will be needed. I don't expect folks on this list to pull this off all by themselves. Some may. --Tim May .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Re: Well users loose for now
by William Rodham Wisner 17 Dec '03

17 Dec '03

On May 4, 8:37am, Hugh Daniel wrote: > The Well has two IP feeds into the internet, due to > political/biz_profit/sysadmin problems the two feeds do NOT back each > other up, and the one that can be seen from toad.com has been down for > a few days, thus blocking your email. This is not quite accurate. The WELL has one IP feed into the Internet, through BARRNET. The WELL also has a private T1 line to a TLG customer, and traffic between the WELL and TLG is routed through this link. No packets to the rest of the Internet are sent through TLG. At least, that was the case. I just updated our routing tables to send TLG traffic through BARRNET like everything else, since that TLG link is down right now.

1 0

one time pad plus
by Brian D Williams 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- While I'm waiting for IP (internet politics) to re-establish the link between the WELL and toad.com, I thought I'd pass along an idea for a product I call "One Time Pad Plus." Basically it would work like this; Thelma is looking to pass a message to Louise, so she XOR's plaintext file A against random byte file B producing ciphertext file C. Now since Thelma works for an unethical company that like to read it's employee's E-mail, she's in need of some "plausible deniability." Enter "One Time Pad Plus." Thelma now XOR's ciphertext file C with "Safetext" file D (any typically company approved useless memo) producing "pseudorandom" file E. She now copies random file B to disc and sends it to Louise via secure sneakernet. Then she performs a military grade wipe on A and B. Now she can send ciphertext file C via company E-mail. If her message is intercepted, she has deniability, she can claim she has read of hackers, cypherpunks, and other evils equipped with packet sniffers, and being concerned about security is using encryption. She can then produce "random" file E and decrypt ciphertext file C which will yield not A but D the company approved useless memo. She is commended for her forsight and gets a handsome bonus (yeah right!) Questions? Comments? Criticism? Replies to private E-mail till I'm back Online. Brian Williams Extropian Cypherpatriot "Cryptocosmology: Sufficently advanced comunication is indistinguishable from noise." --Steve Witham "Have you ever had your phones tapped by the government? YOU WILL and the company that'll bring it to you.... AT&T" --James Speth -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLcf60dCcBnAsu2t1AQG4jwQAihPVSYiOIdepnyC5bxnFGTEaTeUQCagU E+IaW6dmMy9pamXmpTp17yu7+f9K7fL5uiSg/U08mN/rau6o6D86AoVxnzCV/byl IODUL35MBaXil5yVktReu3Vj8o+HNpYWQSBC0Ji9f14YQ4Da5t79kCmg/EFBZhmN 2SK+wYVBu80= =GORp -----END PGP SIGNATURE-----

2 1

he's back!!
by Brian D Williams 17 Dec '03

17 Dec '03

They seem to have fixed the problem, I just got a load of mail! Brian Williams

1 0

Re: Valid MacPGP??
by Black Unicorn 17 Dec '03

17 Dec '03

On Wed, 4 May 1994, Harry S. Hawk wrote: > Is MagPGP signed? > > If so how do I check and/or where do I look? > > Next question: Who has signed it? > > /hawk > And I am trying to distribute MACPGP copies (on DOS disks). What is the best version of MACPGP to hand out. (Give me the full MAC name.) Thanks DCF <- Mr. Hawk: Which version do you have? Mr. Frissell: The most recent version is MacPGP2.3.hqx.cpt Do NOT distribute MacPGP2.3 V1.1 as the source code is not "out there." I will be happy to send you a copy if you like. -uni- (Dark)

3 2

Re: Valid MacPGP??
by habs＠warwick.com 17 Dec '03

17 Dec '03

> > Distribute "MacPGP 2.3 (1.0.5)" > > There is a 'newer' one out (1.1?), from someone in Germany, but the > source has not been made available (!). Is is signed and if so my who? If not how do we know it isn't cracked?? /hawk

1 0

RE: My skepticism/promises WAS Re: Mien Beinkpff
by Bill Garland 17 Dec '03

17 Dec '03

Subj: My skepticism/promises WAS Re: Mien Beinkpff From: whitaker(a)dpair.csd.sgi.com (Russell Whitaker) Discussing what >>On May 4, 8:04am, Bill Garland wrote: > >> So what else is on the homework list? >> >> 2. Read Schneier. Heavy into the technical cryptography stuff, to >> be sure, but definitely required reading. Many time units. >> >> 2. b. Do the Errata list. >> > >This last subtask is very important. I remember seeing the first set of >errata, and hearing reports of Bruce's (understandable) dismay at the >publisher's cavalier treatment of the typography of mathematical formulae. > >I've only recently gotten a round tuit myself, having perused the first section >of a housemate's copy, and am convinced I need my own. I'll have my own Friday >afternoon (Stacey's sells it locally), and am wondering if the most recent set >of errata are still available from Bruce. I was on a distribution from Bruce >for these, and am wondering if the mailing list still exists. I seem to remember getting a second Errata List posted here. ... >> 5. Get a Netcom account? Is this possible for a Canadian? I'd >> still have to telnet from some supplier here. I'll go for my >> own service with my own satellite dish. Investors, anyone? >> Ripe market! Send for Prospect-Us. > >Netcom? Only if you're a masochist. If you try dialing in, that is. Or doing >anything involving finger daemons. Or... I guess I don't know much about the _actual_ Netcom... it's just that so many people have addresses at netcom.com. Perpaps I was misusing it as a generic commercial account provider. >> But, isn't Unix full of security holes? When I set up my own >> Netcom company, won't I be hacked? Ray? HELP? Oh yes, I've >> got to get into Pr0duct Cypher's product. What's a firewall? >> > >Um, your own "Netcom company"? Netcom is certainly not the best business model >for an Internet service provider. Look at the load problems! Their pricing >model is very, very poor. You get what you pay for. I have 2 accounts on >Netcom (one business, one personal). Dialing into Netcom is useless, so all my >mail to those accounts is .forward'd to elsewhere. Thanks for this feedback. And this: >If you're seriously contemplating a Netcom-like service, ignore the whiners >("But your service costs too much!") and implement a rational pricing model, >rather than an all-you-can-eat-for-one-low-price dialup policy. ==== >> There's gold in them thar hills ... >> > >I don't know who you are, but it certainly makes it very difficult for anyone >to give you the benefit of the doubt when you publicly admit such a cavalier >attitude toward your own finances. Read what you've written above, and ask >yourself if it inspires confidence. You are certainly correct here. Cavalier, eh! Without wanting to get into this too far as to get off topic and into areas better left alone, this is just me trying to cure a very long case of bad attitude (self transformation into a dynamic optimist, as it were...) and not having succeeded yet. I am cavalier about it because it is public knowledge, even though I don't have to go spreading it around myself - but if the truth were known, I have benefitted from the experience. I think also I must have had a case of the "don't care's" when I injected just a little too much personal stuff into this effort. Folks have been asking for action, and where my personal style has not yet matured enough to be 100% totally professional all the time... I sometimes open my mouth too far, whereby I insert not only my foot, but the whole damn leg as well... >You say, "Fuck 'em... I'm going to do it anyway..." Well, OK. But talk like >that, while a fine display of your Cajones, doesn't inspire me. Perhaps this is a culture thing... >> And please, Tim, We Really Do Need The FAQ. ... >> >I, too, value Tim's postings. Yes, and if I sounded too cavalier in using Tim's name in my harangue, sorry - although I was replying to his post. I'm sure he will let me know if I said anything to offend him. > At the Extro-1 conference this last weekend, in >a discussion on "The Extropians Virtual Community", it was noted (not a new >point) that good posts never draw the responses that objectionable posts do. > Herein lie very large and serious issues of incentive engineering, which will >not be solved anytime soon. Well, never say never. I have seen threads I started (which were't objectionable) go on for weeks long past any input from myself. But, I guess it is true most of the time. I really wish I could have attended Extro 1. ..... snip ..... >If you want this - or anything (desirability aside) - you're going to have to >*convince* the rest of us - part of your potential market - why we should want >it too. Agreed. Absolutely. The single harangue we are discussing now was not this convincing that you and everyone needs. It was not meant to be. It was part dreaming part actual planning part just announcing some goals part training and part just thinking into the keyboard. Part of a Just Do It motivation that seems to have crept into my somewhat defective b-class module cpu-brain (possibly damaged) thing here behind these eyeballs. Having gone out on this limb, however, there remains this task I have set myself to explain all this...which will not be completed before I get some sleep. >> before I can do that, well, you know...homework... >> >> Still, if you want to get the ball rolling, send me $10 and I'll >> deposit it in trust, sticking my own reputation on the line ... > >Who are you? Seriously. Do you have a reputation? With whom? Is this >reputation salable? Well, I guess if I did, it's gone now... Oh well. Not meaning to be flip - you are right, My reputation has definitely taken some well deserved hits, and I don't consider it saleable. In deference to those who dislike smileys, and because I prefer it that way, I have tried to give up using them. >> Actually, I don't know if there are any legal implications to >> that, because my private company Macronic Systems, Inc. is incorporated >> specifically NOT as a bank, because different rules apply to a bank, > >You don't know, yet you make a solicitation of funds? Well, I suppose it really was a solicitation, if taken word for word. I may be a fool in many ways, but I really did have tongue in cheek here. Sorry if I misled or if my lingering depression coloured the tone of my voice - I for one refuse to go seek out prozac, for reasons I won't get into. >Oh, yes: different rules >*do* apply to banks. You really do need to read into North American banking >law. Correct. >> but my INFO_Banque is not incorporated anywhere. It is a virtual >> entity of mine that nobody can get at just yet. > >Do the authorities know where you sleep? This "virtual entity" is *you*. Are >you judgement proof? Well, yes, I think. At least I am well on the way to becoming so... >"Virtual" is such a fashionable buzzword these days. > What do you mean by it? No. Skip that one. I didn't say '"virtual entity"', I said 'virtual entity', using the word virtual in it's normal, non-buzzword meaning. It is not real, yet. It is a set of ideas. Now, I know that ideas are real, but this is too much to quibble over when there is so much else to do... ... >Well, I guess I've answered at least part of my own question... they *do* know >where you sleep. Yeah. I did worry about that, but They Already Know Anyway. I actually thought about encrypting the entire message and only sending it to Customers, because I really should allow some paranoia back into my life...but nobody would have bought it! And wouldn't you know it, just after posting, I got the detweiller mail bomb and the message from Tim updating newbies on that perversion. When Cypherpunks get Extropian/Hawk/Ray code, tmp will be ::exclude'able. >> Yes, this is fine. But we are talking anonymous money, untraceable >> transactions, cryptoanarchy, stuff like that. We know about cheques. >> (I wish you yanks could get your spelling right!) >> > >That's Yanques to you, bub. Sure t'ing, by. Whatever you wants. >> Agreed - of course. We've got to beat VISA/MC/AMEX/Travellers Cheques >> in transaction costs, > >Have fun trying. Do you mean "cost to credit company" or "cost to end user"? I mean in the game of making money, making this workable, profitable, doable. Costs to Customers. Delivering products and services of value to them. >> HEx is now dormant and will be for a little while yet. >> I am expecting to be able to find a place from which to run it >> real soon now. > >The playing field seems to have shifted ... > >Just *which* business do you plan to focus on? Which one is the one you are >chartered as a corporate entity to pursue? If I were a potential investor, I >wouldn't put my money onto a raft of promises. I have had ths very valid criticism before, and I thank you. I am not actually seeking investment capital here through anything I may have said with tongue in cheek. And if a $10 cheque _does_ arrive in the snail, I will do what I said, which is deposit it in trust and honour the fact that it does not belong to me. Of if it looks like the horizons are too far away - Tim says 10 to 20 years? - I will return it. >I'm not trying to squelch your enthusiasm, Whew! > but it's damned difficult for a >smart and energetic polymath (you sound like one; many of us are) to viscerally >accept the necessity of narrow specification and ruthless pursuit of a single >goal. You need to do one thing very well, and see if it flies. Otherwise, you >will accrete a reputation as a dabbler. What can I say - of course ! Focusing on narrow ruthless pursuits has been one of the ongoing problems I have with a sometimes overactive sometimes lethargic b-class module cpu-brain (possibly damaged). This concept of polymath - are you referring to something from a John Brunner novel of many years ago? Is this a word for which I need more clarification ? ... >> run, I may even repay with digital cash royalties. > >Royalties which will buy me how much petrol? Probably some fraction of some small number of litres for each digital dollar you are paid. Or whatever the going rate is. > How many pairs of trousers? How >many copies of the *Economist* or *Playboy*? How many scoops of Baskin >Robbins? Ditto. Actually, the idea of using Girl Guide cookies as exchange medium sounded neat. I order them once a year from my girls, so those of you with INFO_Banque digital cash you want redeemed, get me your order of cookies by, say, the end of January, and you'll have your cookies in April. $2.50 Canadian per box, converted to US dollars. But then again, my girls are soon to be women, so I'll have to switch to bottles of Barleygreen or something. >It has to be cash with backing. Calling it something cool doesn't convince. > There need to be fundamentals in place. Agreed, of course. The plan is to have my digital dollars, if and when etc etc, backed by good ole yanqui dollars. >> Other uses include digital timestamping - when I can get a >> machine and ups and raid box and backup site and security and >> all that other stuff I want - I will start offering services >> like this. What with all the other ambitions I have mentioned >> here in this Mein Beinkpff message/posting, I could easily spend >> a few hundred grand getting this together - if I didn't have >> a full-time job to do to feed my family, etc etc.... > >You've said this a number of times. Are you simply expressing your belief that >you'll never really do anything? No. I do not have this belief, despite whatever attitude I may have projected by thinking out loud. Just some practical realities. >Then why post at all? Why not! Action, jackson. >Do you have that low >an opinion of your own abilities? Do something. Don't complain. Your life is >your own. I will be impressed when you *do* something. First it is noted that I have too high an opinion of myself in that I have claimed many things I want to do and see happen and accomplish along my new-found-land, and now I have too low an opinion of myself because I cannot go out and spend the investment capital I don't have to do what needs to be done to prevent some things from recurring that I ought not to have allowed occur in the first place... Well, perhaps I am a confused individual. I well recognize the fact that I am a scatterbrain and that I mix and match my ideas with those I discover from others, but I am an integrated scatterbrain. B-class probe modules are self-repairing. >> yourself, and soon there will be 700 Cypherpunks and 300 Extropians >> and all 4 IMP-Interest people all having anonymous remailers and mixes >> operating, so any sub-chain of eight INFO_Banque Protocol banks >> will virtually HAVE to be reliable for our commerce... > >You make some interesting assumptions here. Why? Why should all of the people >you list above do these things? They won't, of course. Some might, assuming some of those interesting assumptions, for example that some ber of Cypherpunks and or Extropians and or other people in the world want thave digital cash available on the Internet and trustable chaumian mixes and anonymous transactions and so on. >> account. Maybe it will at first turn out to be merely digital >> cheques, but maybe if Perry lets me in on his secrets and some >> of the stuff he has learned from these six-figure guys at >> Citibank who are out trying to figure out how to capture this >> market, well maybe then we can get somewhere... >Are you willing to pay Perry large amounts of money for consulting? He *might* >consider it, if it's cash up front. (Right, Perry?) Well, yes. Willing and able are not the same. Of course I wouldn't expect someone as astute and knowledgeable as he to simply give away this valuable knowledge. I expect Perry himself is one of these six-figure guys he has warned us about. And he has hinted once in a while that he is working on new business. He is much more adept than most people (read me) at keeping his mouth shut when it really should be kept shut, and is, as far as I can tell, one who knows the difference. Not to mention... >I suggest you simply dive in and start learning basic economics. Start with >Hazlitt's *Economics in One Lesson*, Bastiat's *Economic Sophisms*, anything by >Hayek, Mises, and David (the younger) Friedman, for starters. Don't expect >someone like Perry to open up to you with "revealed knowledge" which will make >it all clear for you. If you're as serious about your Homework as you keep >repeating, learn the fundamentals of how the world works. Yes, this is what it is all about, eh. >You will then have at least some of the tools to acquire more tools. >> But please, sir, can we have more? Please write about Protocol. >> Soon. Like, forget the line-by-line response you were going to >> make to _this_ message... heh heh. (Opps, I almost said ... >> no, I can't repeat it...) And finally, >One of Tim's many graces is that he rarely makes a practice of the line-by-line >response. I know that. He is probably rolling his eyes upwards and groaning at this entire response. He has straightened out some goofy ideas I have harangued about in the past, and, again, not wishing to put words into the mouth of someone who is so eloquent by himself, he has expressed the same skepticism of my scatterbrained overambitious non-focused ideas before. But I have got some of the homework done, and more is in progress. > I wish I could say the same of myself. I also wish I could say the same of yourself - oops, sorry...heh heh, of course I meant my self. >Russell Earl Whitaker whitaker(a)sgi.com >Silicon Graphics Inc. >Technical Assistance Center / Centre D'Assistance Technique Thanks for your feedback and help. I know.... But, friends, I am smiling. I may even draft a new version of the Cypherpunks Quick Code on my next break. There was an interuption in our feed around about that time - I don't really know if it ever got through. And regarding my overambitious, somewhat bubbly stuff about all the miracles my INFO_Banque will accomplish and my other businesses will achieve - I refuse to put limits on what I can do. I've been there and done that and it didn't work. Focus, sure, but limits? That would be non-EC! You want action, so hang on a minute. Meanwhile another few dozen messages have come in...Perhaps I should retire now before sleep deprivation starts a perversion... and keep asbestos pajamas on when I get up. /----------------------------------------------------------------------\ | I am an Extropian. | Macronic Systems, Inc. offers Ideas for Sale ! | | BEST: DO_IT_SO ! | Go for it : Pledge a Digital US Dollar now. | | CryptoAnarchist. | Send PGP key for more information. | | Cypherpunk. | Get in on the ground floor. Invest Now. Trust me! | | Owner : MSInc., |---------------------------------------------------| | HEx, INFO_Banque | Day Job : Bill Garland = bill(a)kean.ucs.mun.ca | \__________________________________o o_________________________________/

1 0

Re: The Value of Money
by f_griffith＠ccsvax.sfasu.edu 17 Dec '03

17 Dec '03

> >I understand this much: there is some gold and other actual metal >located in a vault, sitting there as a symbolic standard of wealth, >worth, value. Everyone stakes a claim to it, and they exchange that >claim to others in substitution for something else (dog, rifle, gas in >the car, baby-sitting). >Blanc > Actually, there is no connection between the gold and our money. I.e. you cannot take US $ to Fort Knox (or any other government location) and get gold for it. This is why some posters have referred to "fiat money" - the $ is money because the government says it is. Reynolds

2 1