December 2003 - cypherpunks-legacy

Re: "safe" Internet access
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> If you want to access the Internet in a way that doesn't reveal your > physical location (much), buy access from Metricom. They sell > Internet access via radios. A small part-15 (900Mhz) $500 radio modem This seems to be one of these devices which use the celular phone network. In Germany they are also available ("Modacom") and use the D1/D2/E-Plus networks. These networks can localize a sender in many cases with a precision of about 20-40 meters. Not the best way to keep the physical location secret... Hadmut

1 0

MEETING: Jan. 14th Bay Area Cypherpunks Meeting
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

ANNOUNCEMENT ============ This month's Bay Area Cypherpunks Meeting will be held this Saturday, January 14th, from 12 noon until 6 pm in Silicon Graphics Cafe Iris, the usual place and time. Detailed directions are at the end of this message. The topic: Demonstrations The emphasis will be on hands-on, live demonstrations of items of interest. Several speakers will demonstrate products and tools on actual machines. I encourage eating, shmoozing, and general milling-around to be finished by 12:30 at the latest, so we can start discussion of general items, updates, etc. I'd really like to get the demos started by 1 p.m., and 1:30 at the latest. We have a lot of demos planned and some special visitors in town this week, and some special events that just happened. So, as I'm the rotating chairentity this month, I'll wield the gavel ruthlessly. The RSA Data Security Inc. annual conference happened this past week, so I expect several folks will want to provide updates and news announcments, e.g., the licensing of RSAREF, status of lawsuits, new results, etc.. Short updates are good, but we just don't have the time for this meeting to formally present recaps of interesting papers. If there were any *amazing* results, they'll surely keep for a future meeting for more detailed discussion (could be a theme for a meeting). Also, Phil Zimmermann may be at the meeting (he's scheduled), so hearing from him could easily soak up a couple of hours, which we just don't have. In fairness to those who've planned demos, we'll have to try to limit all these interesting folks to the first hour or so. Maybe a few minutes more. And maybe later in the day there'll be time. We have these demos planned. * Henry Strickland (Strick) will, in his words, "be demoing Skronk (transparent above-the-kernel encryption for TCP/IP) and Kudzu (the TCL toolkit)." * Jack Repenning of SGI will demo two interfaces. In his own words, "I'm planning to demo two interfaces, actually: the Emacs one (on an Indy), and the MCIP "MacPGP Kit" plus Eudora extensions, on a Mac." * Phil Zimmermann "will demo pgp 2.9 and possibly voice pgp," according to Katy Kislitzin, who is in contact with Phil. * Katy Kislitzin will bring up the "demo smosaic" she has. (Secure Mosaic.) * Raph Levien will demonstrate "premail," his remailer-chaining tool. * Other ad hoc demos of items of interest may happen. We'll have several machines set up, so those with interesting software or hardware can perhaps do some brief, unscheduled demos. If I left anyone out, anyone who sent me e-mail saying they wanted to demo, I apologize. I went back over my mail and these were the folks I found who'd sent me e-mail. Contact me at my normal e-mail address (tcmay(a)netcom.com) as soon as possible if you want to be added. (I'll be travelling to LA on Friday, for a television interview with the BBC on crypto, and so will be unwired that day.) The emphasis is on hands-on demos, to expose folks to tools, capabilitities, possible future products. Informality is fine. NOTE TO PRESENTERS: Make arrangements to have machines you'll need there. An SGI Unix machine is permanently in the room. Other machines will have to be brought. Because of my trip to LA on Friday, I doubt I'll be bringing my PowerMac 7100AV with me, but I will have a PowerBook 170 laptop Macintosh, if all else fails. Windows and DOS demo folks should bring their machine of choice. (Atari, Cromemco, Amiga, Altair, and Exidy Sorcerer users are of course on their own.) The overhead video system is often more trouble than its worth, but it will be available for at least some of the demos. Those wishing to tie into should have either RGB outputs from their machine, or NTSC composite video. I'll bring my Hi-8 camcorder, which can tie in, and thus allow me to zoom in on whatever machines are there and display the video on the overhead screen. Dinner plans will, as usual, be made in the last chaotic moments of the meeting. ----------------------------------------------------------------------------- DIRECTIONS: Silicon Graphics, Inc. Building 5 (SGI Cafeteria) 2025 North Shoreline Boulevard Mountain View, CA >From 101 take Shoreline East. This is towards Shoreline Amphitheatre. It's also "logical east", and points more north that east. (That is, it's east with respect to 101 North, which points west near the exit.) If you're coming in on 101 South, you'll cross over the bridge. Continue on Shoreline and go past a whole bunch of other SGI buildings. Turn right onto Steirlin Court at the big red metal sculpture. There will be even more SGI buildings surrounding you--take note of the building numbers. Go almost to the end of this street. Building 5 is on the right.

3 2

Crypto functions
by L. Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- What crypto functions are considered modern and usable? The list I have right now is: RSA IDEA DES 3DES RC4 RC5 BLOWFISH MD4 MD5 (and FLAMINGO, a trivial test case, which consists of xor'ing every 8 chars with "flamingo".) Pointers to code for any other schemes will be greatly appreciated. Thanks, -- Todd - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxL+YSoZzwIn1bdtAQGmbgF+Il9/8OU3smhe+DqhKBX5a51N9H15/ElN 4ByTAiKfNjXu21HWyV29kSxEBofo5003 =j55J -----END PGP SIGNATURE-----

7 8

Re: HTTP and ID Verification
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Doc writes: > Can anyone tell me what the URL for the site that displays all > the identifying info it gets when you request it is? One option is http://www.uiuc.edu/cgi-bin/printenv - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxMAvioZzwIn1bdtAQGhxwF/VkjkXoQ/s6U85F90IqcUotmoHbCojLE9 Wmn+KPyoeIa6THpY/w3VGAV7ug5i5WZB =PkPL -----END PGP SIGNATURE-----

1 0

Re: Crypto functions
by L. Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Well, by cryptographic I mean "interesting crypto-type functions," not necessarily just reversible mappings. As far as an encryption API is concerned, hash functions are no different: a byte stream comes in, a different byte stream comes out. I ask because I'm starting to put together those GUCAPI function I was talking about before the new year and defining the initial set of functions. L. McCarthy noted that I didn't include sapphire, and I've included it in the (trivially expandable) interface definition. I'm more interested in being inclusive than in excluding cryptographicall weak functions (and I don't feel that I'm qualified at this point to make the call between what's weak and strong anyway). - - -- Todd Masco | "life without caution/ the only worth living / love for a man/ cactus(a)hks.net | love for a woman/ love for the facts/ protectless" - A Rich Cactus' Homepage - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCUAwUBLxLPixNhgovrPB7dAQEWZgP3eLGNg+X5oxIySLFaTRaZN5eHgS402S39 /6FsB2eiUhy0j7OOrd3OiMorQSJ+V/8UvyJUayUYlWBoTgC/zJn8Vry4zX0HWhRh URv5IT3l3Q/8kFCBkjRMSS/2b3ya0s2gFUJMzEYz78JNpLOwjtm59svdjydTE+z2 bboLSy+H1A== =1noA - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxMKeCoZzwIn1bdtAQHtGAGAzxBCONKibbY5cvv/7a/POL5mqRjDfQ7B c7S0z6EJMyGFsGeWJrOVlCgVum0TPrTE =Rcku -----END PGP SIGNATURE-----

2 1

Re: QUERY: S/Keyish PGP?
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- I'm catching up on old mail... In response to my query, Adam Shostack <adam(a)bwh.harvard.edu> wrote: > >| A quick question: Has anybody considered the possibility of hacking >| something into PGP's password protection to allow an S/Key like access? > > I thought of this, bounced it off a few people, none of whom >caught the flaw. When I got around to implementing it, I realized >that for it to work, your key would have to be securely stored on your >unix box without encryption. I caught that. What I was hoping for was something that would allow a key to be use for a specific purpose once and only once by a given passphrase. Ideally, this could be done on a machine that was totally insecure. I didn't catch the fundamental flaw, though. If the machine is compromised the key can always be compromised by taking an image of the previous state and replaying whatever passphrase was intercepted. Bummer. - - -- Todd Masco | "life without caution/ the only worth living / love for a man/ cactus(a)hks.net | love for a woman/ love for the facts/ protectless" - A Rich Cactus' Homepage - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxLUPBNhgovrPB7dAQEn8gP8DrC3h9Dv21JGgg4Vsz/76gnUfnTJBPD+ PPyZ2gi2dzzQOVkYsxZBHQs7kRq6ZSANNbCfM5wY1GbBagZvv2gAPMx9bESudH+l wtoFcZGH5Az85O+k6FhN/QsOjJq/PaHUbNMui1Q+QKrMqU4I/UGCJCxAVRP8/wfS 8rLKzm7TxTU= =LxUH - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxMPACoZzwIn1bdtAQH7DAF9EMimhI0J9JUN9bqaHhsz2opQXZSIQC+g D32kU3ELjC58Y4Ig3e9fLLrPoGtTub85 =Uq/c -----END PGP SIGNATURE-----

1 0

Phil Zimmerman's Legal Defense Fund
by Brian Beattie 17 Dec '03

17 Dec '03

Could somebody mail me the info on sending a contribution Phil Zimmerman's Legal fees related to the PGP issue? Brian Beattie | [From an MIT job ad] "Applicants must also have | extensive knowledge of UNIX, although they should beattie(a)csos.orst.edu | have sufficently good programming taste to not Fax (503)754-3406 | consider this an achievement."

1 0

Re: Pornography, What is it?
by root 17 Dec '03

17 Dec '03

> >> > >If this is so then everything I have read or seen misses this minor point > >completely. Every press release, speech, etc. that I see uses the term > >pornography, not obscenity. TV preachers, news anchors, newspapers, DA's, > >etc. consistently use the term pornography. The state of Oregon specificaly > >legalized pornography, not osbcenity. > >I think from a legal standpoint there is little difference between the two. > > Not so. Obscenity is a class of speech which is completely unprotected > by the First Amendment [*Note, I don't agree with this line of reasoning, > but it's what the Supremes say.] I.e. you can simply ban obscenity, > like child pornography. Pornographic material cannot be banned but > can be regulated according to 'time place and manner'. Hence the > zoning restrictions on Adult book stores. > I understand what you are saying, what I am saying is the distinction is not used in practice. The bbs operator in Cali. that was busted in Tennessee was busted for delivering PORNOGRAPHY (not obscenity) to a minor (in short a 14 year olds account being operated by a oinkdroid.) If you can 'simply' ban obscenity then why all the rucus? Simple, you can't ban it simply... or any other way for that matter. As to your zoning restrictions, they change from place to place and hence are not a hard and fast rule either. The bottem line is that the distinction fostered by legal eagles is a straw man argument, it is intended to distract from the real issue - freedom to do what you want unless you harm another or their property without their prior concent. > >From a legal perspective, the difference between pornography and > obscenity is defined by the Miller test. [This may have changed > a bit in the past few years]. This states that in order for > material to be obscene it must be: > > 1. Devoid of any artistic or literary importance. > 2. Appeal to a prurient interest. [i.e. be arousing]. > 3. Be patently offensive by contemporary community standards. > > This isn't the exact wording, but it's the general idea. > This test is a joke, if you apply it fairly then a man and his wife having anal sex would qualify as obscene in many places (which it does in some states) Also, the whole concept of community standards is unworkable. Whose community? The reason so few people get busted under the Miller test is that there really are so few idiots out there who would fall for it. > In practice, it's very hard to get anything declared obscene, > hence the desire to regulate pornography strongly within the > permitted bounds of the First Amendment. > The reason they want to regulate pornography is that it is a stepping stone to a total ban. It is based on religous grounds and the issue really has little if anything to do with Constitutional rights. > -Ekr >

1 0

FBI and BLACKNET
by Syed Yusuf 17 Dec '03

17 Dec '03

I was just visited by the a humble servant of the FBI inquireing what I knew of BLACKNET. They apparently believe it's a possible network industrial sabbatoge (read Terrorism). Although the person I spoke to was quite cordial and even bought me lunch (that's the way to win me over) I must really question the intellegence (read IQ) and intellagence (read reconnasance) of his superiors. apparently whoever sent him his lead doesn't pay attention to the net enough to know Blacknet was a hoax, and why did it take since august for them to find me? I explained to him the differece between a Cyperpunk and a hacker explained what a joke it is to be prosicuting Mr. Zimmerman and why the Government is in the wrong for trying to limit encrytion strenght. Then I demonstrated the Internet and how to e-mail the prez and FTP speaches of the Prez :) (I know I know, act stupid so they volentere as much info as possible, he let too many things slip, but still If I had his job I'd be following up things like this too) --Syed Yusuf (Cypherpunk and proud of it damnit!)

5 8

Returned mail: User unknown (fwd)
by Mark Rogaski 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - From the node of anonymous-remailer(a)shell.portal.com: : : I want to propose that a change to more of a Snow Crash society : with anarcho-capitalism as the norm is not necessarily being : _caused_ by pressures listed above, but, rather, fit a grander : historical destiny. What we are seeing and will see in the : Not necessarily to the EXTREME that Stephenson predicted, but I definitely see alot of what he said already starting to happen. Hell, look at the Burbclaves. Lil' old Indiana, PA had their first drive-by shooting a few months ago. Some of the growing gang-warefare influence is starting to spill over from Pittsburgh. Once people get a little more frightened of violence, the engineered community idea is going to explode. Now take that with private and corporate police forces and ... BINGO! Snowcrash. : Consider the possibility that the dissolution of large, : centralized federal republics is also inevitable. (The : Frissel/Sandforth Optimists have been arguing this exact point.) : The decentralizing effect of digital networks (or Webs a la Hakim Bey) is pretty self evident. One can easily extrapolate the effects of a structure like the Internet, a structure that by nature routes around any form of 'censorship' from above. - ----- Doc doc(a)phobos.lib.iup.edu aka Mark Rogaski http://www.lib.iup.edu/~rogaski/ Disclaimer: You would probably be hard-pressed to find ANYONE who agrees with me, much less my university or employer... [finger fllevta(a)oak.grove.iup.edu for PGP Public Key and Geek Code v2.1] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxMZ/R0c4/pqJauBAQH8LwP+PrvNhKJVEzmhZVcuvkNMLmGWWgyflAlh PxvR5BtJHBpE/oNqB3TVOywt9eJYeIV7L7BSboIFosEyqC4OEFS6WRTAJpWhPg8L L9CdvhaDKubnTteBEtugEtU1HB3iJ+zRucJYUVit0bBwCimcqvr/aTMab7h4Yqw9 uKJPulSTg/w= =jdlE -----END PGP SIGNATURE----- ----- Doc doc(a)phobos.lib.iup.edu aka Mark Rogaski http://www.lib.iup.edu/~rogaski/ Disclaimer: You would probably be hard-pressed to find ANYONE who agrees with me, much less my university or employer... [finger fllevta(a)oak.grove.iup.edu for PGP Public Key and Geek Code v2.1]

1 0