December 2003 - cypherpunks-legacy

Re: Announcing - The DigitaLiberty Forum
by dmandl＠bear.com 17 Dec '03

17 Dec '03

> From: <root(a)phantom.com> You're infringing on hundreds of people's liberty by mailbombing dozens of inappropriate mailing lists with this junk (I got _two_ copies, and I'm only subbed to one of those lists). I might almost be intrigued if there were a shred of a concrete proposal of some kind in here, but of course there isn't: it's just the usual vague Libertarian pipe dreams. But any time I see a manifesto this long-winded, jargon-filled, and devoid of tangible ideas, that's exactly what I expect. My favorite quote: > launch other programs, and begin our virtual migration from the > swamp of coerced collectivism. Best of all, there will be no need to > physically move to 'Galt's Gulch' or escape to a floating 'Freedonia'. We > can all participate in this exodus without hastily quitting our jobs or > disrupting our lives. Whew, _that's_ a relief! When I achieve complete liberty I certainly don't want it to make me quit me job or disrupt my life in any way! --Dave.

1 0

BACKING E$
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Sun, 4 Dec 1994, Jim McCoy wrote: MC|IAs far as a real system goes, you will never see on running on a machine |in the US in the near future; in addition to the regulatory BS involved in |making magic money useful you would run into all kinds of wonderful |gambling laws and regulation. Which is why the digital money with the most chance of succeeding will be cyber-marks, -francs or -pounds, not cyber-dollars. Work with the currency of a country with fewer regulatory agencies. The chances of being allowed to stay in business increase directly as the number of government witchhunters decrease. Personal note here: in the past, I have been involved in several anti- govt ventures, always with a view to altering the status quo in favor of freedom fighters and kindred spirits. Some are still going strong, others have been victims of harrassment and even in some cases raids.. Of the unsucccesful ventures - the ones that were closed down by Big Brother Sam - the true reason has always been that we were too smart and getting away with whatever we were doing at the time. So instead, govt found some bogus charge to shut us down with. (In one of the cases they bombed us with orchestrated tax audits, one after another. Later, we were hit with Willful Failure to File something new they called an Environmental Impact Report; this was in a case of knocking down a storage shed! If you think this is "BS", get the last case: On TV, we had an associate promise a free bonus gift to the first 100 callers to a promotion. Upon shipping, we decided to give away the free bonus to *all* callers, a few thousand all told. This amounted to felonies of fraud, mail fraud and enough to put our associate away for up to 10. Of the succesful ventures, all have had one thing in common: they have been headquartered abroad. Our people there have had both Scotland Yard and Dutch police look over the operations, always on the request of the Americans. We have even had an Inland Revenue investigation, requested by the IRS. In all cases, the govt went away empty handed and as good friends - agents even apologized for the inconvenience. Their word to their U.S. colleagues: "We will not shut down someone who is not doing anything illegal. We may not agree with their political aims, but this in itself is insufficient basis for prosecution." ObCrypto: Anarcho-capitalists take note here, 1. In the U.S., the totality of federal regulations now comes to 202 volumes numbering 131,803 pages. "They" can *always* find something in there to shut you down with. Their aim is to seize what you have and put you out of business because you are not giving in to their demands. 2. Abroad, regulations are oftentimes of the common sense variety. If you are a crook, you can and will be shut down. But if - like me - you are honest, hardworking and just happen to not agree with U.S. policies of oppression, then you will be free to run your affairs as you see fit. 3. If the operator of a succesful digital cash currency achieves for his money more than play-money status, he will be intimidated into providing traceability. Sorry: there is no way he can insulate himself even with prior legal briefs and a team of top lawyers. I have been through it personally. We even had a bank in the seventies. If the bureaucrats target you, they *will* get you. Sure, you can fight. You won't win. Conclusion: I only see 'untouchable' digital cash of having integrity and a decent rate of survival if based abroad. Personal experience tells me that it should be pegged to the pound sterling. A futuristic twist with more widespread appeal to non-Europeans would be to peg it to the ECU although marketing could be tough this side of the common currency (year 2000?). If pegged to the ecu, HQ should still be in London. Have James Capel or some such handle the escrow account to guarantee real-money backing and -conversion. Individual accounts can be located anywhere and should stay out of mainland U.K. Sorry for the length of this post. Early choices now could mean the difference between future success and the alternative: headaches + the eventual inevitable caving in. "Capt'n Bob" Am still looking for a pseudonymous address. Suggestions welcome.

1 0

Book Review pointer...
by michael shiplett 17 Dec '03

17 Dec '03

sci.crypt contains a book review of _The Hobbyist's Guide to COMINT Collection and Analysis_, written and published by Tom Roach. Sounds like it may be interest to some folks here. michael

1 0

Re: Good times virus thing-a-ma-bobber
by Just call me Flame-bait 17 Dec '03

17 Dec '03

Jon Care (iijon(a)iiit.swan.ac.uk) is believed to have said: >Was this a real message, or is someone having us on? I mean, come on, who >seriously describes themselves as "MacGuru" AND puts in their anonymous >email address as well :) > >Not very anonymous now is it? I'm sorry, I didn't know that I wasn't allowed to have fun _and_ be on this list. The MacGuru was picked up here on campus, and since I rarley send mail off campus, I usually forget to turn it off. As far as having the anon address in my sig, L. McCarthy <lmccarth(a)ducie.cs.umass.edu> said: >I think the idea is that email sent to an anXXXXX(a)anon.penet.fi address will >be anonymized by the penet server, so you can establish a conversation >channel with MacGuru here without setting up a reply block through some >remailers. In some newsgroups where anonymous posting is common, listing of >several "anonymous" email addresses in .sigs is also common. I did this for the exact same reason. If someone wants to mail me anonymously, they have the option to just mail my anon account. What's so wrong with that?? >The message itself reeks of the typical chain letter-- oh please send >this to absolutely everyone you know with email! It'll help them lots! > >Yeah, whatever. Someone (I'm not sure who) brought up the point that the file could actually be an ANSI bomb. It seems to me that for the IBM and clone users on the 'net, this could be something that they would want to watch out for. Now we all know that it wasn't real (and many of you just "knew" it wasn't), it doesn't matter, does it? -=-=-=- Adam J. Gerstein MacGuru to the stars Available at: GERSTEIN(a)SCSU.CTSTATEU.EDU MACGEEK(a)SCSU.CTSTATEU.EDU A GERSTEIN(a)AOL.COM MACGEEK(a)eWorld.com an41389(a)anon.penet.fi (for anonymity) -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

1 0

Re: (Fwd) Read this, Virus info!!
by Andrew Lowenstern 17 Dec '03

17 Dec '03

Michael K. Sanders writes: > Has anyone actually seen this 'Good Times' thing? I highly doubt > it. And seriously, an e-mail virus? Get real. and Ian Farquhar writes: > And pigs fly too. Laugh if you want, but this has been possible for years under NeXTSTEP. With it's Display PostScript system and rich text mail reader, it's easy to send a PostScript trojan horse via e-mail. As soon as the message is read, the Mail app tries to display the text and any images inside, which is probably what it should do. However, because EPS images are really just PostScript code, you can do write a PostScript program that does all sorts of nasty things, which includes reading and writing files, stick an EPS header on it, and drop it into a mail message. The recipient's mail reader will cheerfully run the received EPS image through the PS interpreter... All of the EPS trojan horses I have seen do cute, but harmless, things like melt your screen, make windows fly around, rearrange your dock, or display animation before returning things to normal, but they could just as easily erase your home directory or just about anything else. After this major security hole became public knowledge, NeXT provided for 'secure' postscript contexts (safe-DPS if you will) where some of the nastier postscript operators were disabled. Anyway, it's more than possible, even when the designers didn't originally bargain for any type of 'enabled mail.' And with the proliferation of Display PostScript based X servers and MIME mail tools, and other more advanced mail systems on other platforms, we will probably see much more of this type of thing. andrew

3 2

re: GUCAPI
by p.v.mcmahon.rea0803＠oasis.icl.co.uk 17 Dec '03

17 Dec '03

A few comments on GUCAPI postings follow. 1. It has been suggested that GSS-API is appropriate for layering over PGP security functions, but this is incorrect, as GSS-API is inappropriate for store-and-forward applications (and associated security mechanisms), and hence isn't suitable for all applications which have security requirements. 2. The application level interfaces for messaging applications must include object protection semantics. One proposal being considered for this is available by ftp as draft-ietf-cat-iop-gss-00.txt from ds.internic.net in /internet-drafts. There is a BOF on this today at the IETF which other CP IETF correspondent(s) may want to report on. 3. A distinction can and should be made between the higher level interfaces which combine information protection and authentication, and the lower level interfaces to cryptographic transforms and key exchanges which aren't bundled with any trust model or certification infrastructure. 4. The lower level cryptographic interfaces (CAPIs) are the subject of numerous proposals. A few of these were listed in the note I sent to the list yesterday about the recent NIST meeting. One proposal being developed by major vendors (IBM, HP, Sun etc) and to be trialled in practical implementations is available from X/Open, together with an associated email discussion list. Mail me if you want to be part of the review process, or just track developments in this area. (This is intended to be a net standard and an industry standard :-). - pvm

2 1

PGP 2.6.2
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

I`m looking for an ftp site for pgp 2.6.2 or greater outside of the us. Ive tried ftp.dsi.unimi.it but they only have 2.6.1. Any IDEA? (joke) T

2 1

2048 bit key generation with 2.6.2
by jltocher＠CCGATE.HAC.COM 17 Dec '03

17 Dec '03

I changed my system date (Ho! Ho! Ho!) in order to test the generation of 2048 bit keys. Key view shows the key as having 2047 bits. Can someone tell me what's goin' on? Please reply by E-Mail; I'm currently not on the list because of the volume. Regards, John ______________________________________________________________________________ John L. Tocher THE CITY-a bounded infinity. A labyrinth where JLTocher(a)CCgate.HAC.com you are never lost. Your private map where every PGP Fingerprint: block bears exactly the same number. Even if you CE 72 1A 11 07 47 35 35 lose your way, you cannot go wrong. --Kobo Abe 9A C1 DE EA 64 21 BC 94 "The Ruined Map" ============================================================================== To get my PGP key send mail with subject "Get Key" ==============================================================================

1 0

Warning about a message I may have sent
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

I may have accidentally sent a message to the list that I was intending to send just to myself, from my offline mailer Eudora (as opposed to elm, which I'm now on). As usual during any time Netcom is crowded, it is apparently not accepting connections from toad.com, and so I am not seeing traffic sent to the list (No, I don't need any of you to offer to send it to me...it'll arrive when toad retries the connection some hours from now and Netcom deigns to accept it. A run-of-the--mill mistaken message would not be an issue, but this a BIGGIE, a 43K file of a paper I just completed that I was planning to offer as an attachment to a mail message. So, I was testing the whole thing. But I may've typed in the list name instead of mine. Oh well. If it arrives, it's the text only version of a paper submitted to the "Imagina 95" conference to be held in February in Monte Carlo. I guess random posts to the list are the Monte Carlo method in action. --Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. Cypherpunks list: majordomo(a)toad.com with body message of only: subscribe cypherpunks. FAQ available at ftp.netcom.com in pub/tcmay

1 0

Re: Warning about a message I may have sent
by dmandl＠bear.com 17 Dec '03

17 Dec '03

> From: <tcmay(a)netcom.com> > > I may have accidentally sent a message to the list that I was > intending to send just to myself, from my offline mailer Eudora (as > opposed to elm, which I'm now on). [...] > If it arrives, it's the text only version of a paper submitted to the > "Imagina 95" conference to be held in February in Monte Carlo. Sorry, Tim, but if it's not digitally signed by you with a valid key, that baby's up for grabs. Monte Carlo here I come... --Dave.

1 0