December 2003 - cypherpunks-legacy

Re: public accounts / PGP / passphrases
by Rich Salz 17 Dec '03

17 Dec '03

> >Could someone please elaborate on the foolishness of using PGP with a > >passphrase on a public machine (as I do) ? Am I wrong in thinking that my > >secret key is useless to an intruder until she guesses my passphrase ? The sys admin can change the kernel running on your machine. A special kernel can be built so that when a particular user is typing on a tty and the executing process is named "pgp" then all keystrokes they type are recorded into a file for the administrator to read later on. The local machine must be part of the trusted computing base. /r$

1 0

PGP Sig Proposal
by VAMAGUS＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have never posted to this list before because I am rather new to it. What bothers me is that as a Hardware Technician it is the Cypherpunks that inspired me to flagellate myself at my keyboard while invoking the deity of Borland in ANSI 'C' to compile my source code. Ok, so it never works but the idea of the Cypherpunks has made me a (limited) programmer none the less. *Not* signing messages because you are asked to flies in the face of the purpose it serves. To spread the word about PGP and, as it has done, uncover any difficulties that may still exist in the propagation and utilitization of PGP. In actuality the amount of mail that suggests the difficulty in performing PGP signing should be a call to all Cypherpunks to start coding. Instead, like a child that has been asked to play with a favorite toy, there is refusal based soley on....I won't do it because you asked me to do it. Forging signatures is a waste of resources that could be better spent finding ways to smooth the path for PGP and similar encrypting/signing implementations. If I want to be anonymous I will use CHAIN and go thru a remailer. My .sig and PGP sig say the rest. ***************************Frenchie Sends*************************** * Key ID: BEB3ED71 J.Francois PGP Key on Request* * As soon as any man says of the affairs of the state * * "What does it matter to me?" the state may be given up for lost. * * J.J.Rousseau - The Social Contract * ****************Want to know more about PGP? Ask me!**************** -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt6IjrbmxeO+s+1xAQEo8AP/e1L7c/GGHqoRMQ0OyoA0nVyMvbVo3CdP UmAqFhR4V0D4nXnK0PFZqKrkBzJDxpvCb5mJSS4F6KAnMl6Oa5aq055g/9GHEPZb RvDEiraxcJ8y6vwOfrhxyOrDxX/2/g3sHds9lekBDc71Z72FS6Ix3A1KJjI+o2hP HSx6rt+qHc8= =UOH6 -----END PGP SIGNATURE-----

1 0

RE: Re: ERIK HUGHES: EGOTISTICAL PRICK
by shawn leas 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- shawn leas writes: > > In article <199412020536.VAA08584(a)jobe.shell.portal.com>, > > <anonymous-remailer(a)shell.portal.com> wrote: > > >this is BS!!!! let's find a NEW LIST. a list is a COMMUNITY > > >PROPERTY. anyone who pulls this kind of prickery, insinuating > > >they are in the "bully pulpit", deserves > > >CYPERSPATIAL EXCOMMUNICATION for HIGH TREASON TO THE CYPHERPUNK > > >CAUSE of TOTAL AUTONOMY FOR THE INDIVIDUAL. > > I list is not 'community' property. Just like if you tryed to say that > my money was your community's property (Clinton supporters) I'd probably > cut your head off. Eric has full rights to go so far as to kick you off > if he feels fit. Or me, for that matter. Whatever, it's HIS LIST. I clipped the wrong line and made it look like I was replying to a guy who was replying to the original guy. A public apology is in order, because noone deserves to be associated with the dick who flamed Eric. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt+V1aZRyOzqm29xAQECMgP/d0BDw40DVx9LJ4+BBGAHXiIb0D1mGnK3 3HVU01f3tE0AZ6iZnsTK+jg3K22szCXo1e6QoMjyqWIWsF7H1Bj+H/iEHF5rjp9l krbBExPG88Q4qnAm5kgEVpWK0z0L7uBe8EU1ni+UaD1VXSUM8EM1hjehFzEfwRJM /ZXSDNCV8Wc= =P72R -----END PGP SIGNATURE-----

1 0

setting up an non remailer
by Thomas J. Bryce 17 Dec '03

17 Dec '03

setting up an anon remailer To those who might know the answer.... I'm running a power mac here, and I have an ethernet port and my own IP address. To do email, I telnet to my University's unix system. I was thinking, this sort of arrangement might allow me to set up an anon remailer. Does anyone know if I can do this? If the technology is available? If there is a way to do this from a macintosh, I'd like to give it a try. Of course, I would ask the sys admins if necessary for permission. (i.e., if it can come straight to my IP address then it isn't necessary I assume). Thanks Tom

2 1

Diffie, Blaze, Berman, Rivest, Bizdos
by cjl 17 Dec '03

17 Dec '03

C-punks, To those of you who are not members of the American Association for the Advancement of Science (i.e. subscribers to SCIENCE Magazine) I thought I would forward some information on their upcoming meeting in Atlanta. Enclosed is a response I received in response to a query to the address amsie95(a)aaas.org. The response was from rsmariga(a)aaas.org and I quote: You asked specifically about the "Privacy and Encryption in an Electronic Environment" session. Organized by Alex Fowler of AAAS and Caroline Whitbeck of MIT, this session is scheduled for Tuesday, February 21. There will be speakers in both the morning and the afternoon. >> Blurb in printed version I have includes the following: >> Learn about the rapid deployment of encryption technologies, their use >> in ensuring communications security, the legal and ethical >> interpretations of privacy, and the ongoing debate between government >> and non-government professionals Morning speakers Matt Blaze, AT&T Bell Labs Topic: Deciphering the Mechanics of Encryption George Trubow, John Marshall Law School Topic: Privacy Issues in an Electronic Environment Joan Winston*, U.S. Congress Office of Technology Assessment Topic: Privacy, Encryption, and Public Policy Jerry Berman*, Electronic Frontier Foundation Topic: Clinton's Clipper Chip Proposal Afternoon speakers Marc Rotenberg, Electronic Privacy Info Ctr Topic: The Responsibility of Computer Professionals Ronald Rivest, MIT Topic: Encryption and Scientific Freedom Peter Szolovits*, MIT Topic: Privacy, Encryption, and the Proposed Health Care Identifier James Bidzos, RSA Data Security Topic: Encryption and the Protection of Corporate Privacy Jeffrey Ritter: Ohio Supercomputer Ctr Topic: International Aspects of Privacy and Encryption * Invited speaker, not yet confirmed If you have any further questions, please feel free to contact us. We hope to see you in Atlanta. Robert Smariga Registrar AAAS Meetings 1333 H St, NW Washington, DC 20005 phone: (202) 326-6410 fax: (202) 289-4021 end quote. I note that I also asked for info regarding the Information Security session which I guess I have to key in :-) Information Security: Principles and Public Policy Monday pm, Feb. 20th, 1995 Organized by Joan Feigenbaum, AT&T Bell Labs To address concerns about the authenticity, integrity, and privacy of electronic information: An overview of the mathematical theory of information security, the social and legal structure in which the digital society is emerging, anad the new service and products available. Speakers: Joan Feigenbaum, AT&T Bell Labs The Mathematical Theory of Information Security Stuart Haber, Surety Technologies, Inc. Ensuring the Integrity of Digital Documents Daniel Schutzer, Citicorp Tech. Office Secure Consumer Banking over the Internet Whitfield Diffey, Sun Microsystems Rights and Responsibilities in a Digital World ObCurrentThread: I'd sign this if it were a lot easier too. But then, some Cypherpunks write genetic code. C. J. Leonard ( / "DNA is groovy" \ / - Watson & Crick <cjl(a)welchlink.welch.jhu.edu> / \ <-- major groove ( \ Finger for public key \ ) Strong-arm for secret key / <-- minor groove Thumb-screws for pass-phrase / )

1 0

No Subject
by Anonymous User 17 Dec '03

17 Dec '03

I don't know what is going on here. This list seems to have bogged down in meta-issues. I am very disappointed with Eric Hughes' recent display of feather-fluffing. He seems to fail to understand that the list has absolutely NOTHING to do with him personally. The full subscriber base could MOVE IMMEDIATELY if so inclined, and indeed the atmosphere seems to be getting a bit oppressive here. I hate to say this but it reminds me of when all the Detweiler flames were erupting a long time ago. Detweiler seemed to be especially enraged with the way that E.Hughes ran the list in a dictatorial, "iron fist" way. He failed to understand that his own role was merely that of a janitor, not a celebrity with a personality cult. Is that all the cypherpunks list is about? I tell you that this idea that "cypherpunks code" does not mean anything. "cypherpunks talk about code endlessly" but when it comes down to it, this whole list is nothing but a lot of people STROKING EACH OTHER'S EGOS while the outsiders (Phil Zimmermann, Ralph Levien) are the only ones getting anything done!!

1 0

DETWEILER IS SPOOFING US!!!
by nobody＠rahul.net 17 Dec '03

17 Dec '03

HE IS AT IT AGAIN!!! I know that the anonymous messages are obvious, but in fact I think detweiler is posting ALL KINDS OF TENTACLE GRAMS UNDER THE "MANDATORY SIGNATURE" THREAD UNDER VARIOUS ADDRESSES, mounting a flamewar of Detweilerian proportions!!! STOP POSTING UNDER THIS THREAD IMMEDIATELY!!! you are PLAYING INTO DETWEILER'S PLOY OF BRINGING CHAOS, ANARCHY AND DISUNITY TO THE CYPHERPUNK LIST!!! he is posting the messages that look "reasonable" but are really SUBTLE FLAMEBAIT. have you noticed all the unusual people posting lately??? they are DETWEILER TENTACLES!!!!

3 2

FBI INVESTIGATING BLACKNET
by nobody＠jpunix.com 17 Dec '03

17 Dec '03

A word to the wise: I can't reveal my sources but I have it on excellent authority that L.Detweiler was recently interrogated by two FBI Agents in Denver about BLACKNET. This is an investigation that has also involved contacting TIM MAY but he has so far refused to reveal this. The FBI Agent in Denver who investigated Detweiler is named JEFFERY DIEHL. The investigation is CONTINUING and is chiefly motivated by concerns about ECONOMIC ESPIONAGE, particularly ON THE INTERNET, by the FBI and other government agencies.

2 1

ERIK HUGHES: EGOTISTICAL PRICK
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

what is all this @#$%^&* about MANDATORY SIGNATURES ON THE CYPHERPUNKS LIST? who is Eric Hughes, DOROTHY DENNING??? who is going to force ME how to use cryptography??? a CYPHERPUNK??? this is BULLSHIT. eric hughes is a TRAITOR TO THE CYPHERPUNK CAUSE. it's so transparently obvious, this is nothing but a big ego ploy. "Look at me!!! I am cool!!! I have accomplished virtually nothing substantial in any cypherpunk area for a long time, all my major recent projects are failures that have gone nowhere, I don't follow my own rules of 'code, code, code', not 'blather, blather, blather', and this is one way I can stroke my ego and show off my utter brilliance in the lack of anything useful!!!" has he written one smidgeon of code to back up his ideas? NO!!! he has philosophized and pontificated about his IDEAS that he is PLANNING to put into code. frankly, I see absolutely NO EVIDENCE WHATSOEVER of the perseverence required to build a solid foundation in this noisy bozo. he flames away against the people who are REALLY doing something. what is this about "founding" the cypherpunks? no one is my leader, I am not a part of a movement that takes credit for MY hardworking accomplishments as glory for "founders". why don't someone ask him why he went to go work with Chaum a long time ago and CAME BACK. I'll give you a hint: HE DIDN'T CUT THE MUSTARD. ask him why he hasn't graduated from college!! hint: HE DIDN'T CUT THE MUSTARD. he is paralyzed by his own perfectionism straightjacket, rather than building SOMETHING that works haphazardly he builds NOTHING that works AT ALL. oh, so he built a remailer. BIG DEAL. what kind of brains does it take to call sendmail with a message? to cut off headers on a file? good lord, how many commands in SED is this? so he wrote it in PERL??? *wow*, I am *really* impressed now!!! this is BS!!!! let's find a NEW LIST. a list is a COMMUNITY PROPERTY. anyone who pulls this kind of prickery, insinuating they are in the "bully pulpit", deserves CYPERSPATIAL EXCOMMUNICATION for HIGH TREASON TO THE CYPHERPUNK CAUSE of TOTAL AUTONOMY FOR THE INDIVIDUAL.

3 2

Re: Scalability of Ecash System / Article on Internet Cash available.
by Hal 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- One thing that could be done with the on-line ecash system would be to decentralize the task of detecting double-spending. DigiCash could set up a large number of coin validation centers on the net, dispersed geographically to equalize the load. Then the merchants would do a simple hash algorithm on the electronic coin to determine which validation center to use. That center only records spent coins which have the specified hash. Since any attempt to double-spend would mean re-use of a particular coin, both instances would hash to the same validation center and so the re-use would be detected. This way if a validation center went down it would hamper but not stop electronic commerce. Other coins could perhaps be offered in payment in place of those which cannot be validated (although this would require a certain amount of trust of the shop, but perhaps not much more than is necessary already). This might address some of the scalability concerns raised with the on-line cash system. Another idea comes from the NetCash people. Here you have the customer get a payment token from the bank which is made out to the specific merchant desired and given a time-stamp, perhaps good for one day. Now the merchant can accept these, check the signature, and check its own database of tokens which it has received earlier that day. As long as the incoming token is not in the database, the merchant can accept the payment with confidence and turn the tokens in to the bank for credit later as in an off-line system. Effectively these tokens would be digital cashier's checks. The big problem with this is the difficulty of the customer getting his payment token anonymously. If the bank knows the customer who is asking for a particular "cashier's check" to be cut then it learns the customer's spending patterns, defeating his privacy. So there would have to be some communication infrastructure to allow for anonymous connections in order for this system to work. Chaum, as it happens, has written on this topic as well, with his "Mix" and "DC-Net" systems for anonymous communications. Unfortunately, these systems have scaling problems of their own and don't appear to be entirely satisfactory for this purpose. Hal Finney hfinney(a)shell.portal.com -----BEGIN PGP SIGNATURE----- Version: 2.6 iQBVAwUBLt651RnMLJtOy9MBAQEzfwIApLw5dPjil4unqa0yToT1Wm5/kczvnE/E IdXrWqhbVz32VqKw1d6QrG/I20t8RiZSG+yuBCPSOcoMi9XMRs2nnw== =EJTS -----END PGP SIGNATURE-----

1 0