December 2003 - cypherpunks-legacy

Data Havens..A consumer perspective
by Censored Girls Anonymous 17 Dec '03

17 Dec '03

1. You have what I want or need. 2. In order for me to let you store it, I will give it to you anyway you wish to get it. 3. I will let you do anything to the data you wish, so long as I get it back intact. 4. It is no concern (only idle curiosity maybe) where the data is parked. 5. I would expect to pay money for the safekeeping of my data. 6. I would expect the longer you hold the data, the more it will cost. 7. The only thing I am counting on is the data's timely retrieval. 8. Welcome to the world of data "coatchecking". Why make it more complex than this? >From the moment the data leaves their hands, until I return it, they have no right, nor I no obligation, to divulge anything about it. For they already would know, it would take a few minutes to retrieve it. For whether it's encrypted to the nth degree, or parked in a plain brown wrapper in a massive unix box somewhere, as long as I the haven manager, return the data in a safe, timely, uncorrupted manner, I've done my duty. Love Always, Carol Anne Registered<BETSI>BEllcore Trusted Software Integrity system programmer *********************************************************************** Carol Anne Braddock "Give me your Tired, your Poor, your old PC's..." The TS NET REVOKED PGP KEY NO.0C91594D carolb(a)spring.com carolann(a)mm.com ************************************************************************ COMING SOON TO AN INTERNET NEWSGROUP NEAR YOU...............CENSORED.COM

5 7

Re: QUERY: S/Keyish PGP?
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- I'm catching up on old mail... In response to my query, Adam Shostack <adam(a)bwh.harvard.edu> wrote: > >| A quick question: Has anybody considered the possibility of hacking >| something into PGP's password protection to allow an S/Key like access? > > I thought of this, bounced it off a few people, none of whom >caught the flaw. When I got around to implementing it, I realized >that for it to work, your key would have to be securely stored on your >unix box without encryption. I caught that. What I was hoping for was something that would allow a key to be use for a specific purpose once and only once by a given passphrase. Ideally, this could be done on a machine that was totally insecure. I didn't catch the fundamental flaw, though. If the machine is compromised the key can always be compromised by taking an image of the previous state and replaying whatever passphrase was intercepted. Bummer. - - -- Todd Masco | "life without caution/ the only worth living / love for a man/ cactus(a)hks.net | love for a woman/ love for the facts/ protectless" - A Rich Cactus' Homepage - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxLUPBNhgovrPB7dAQEn8gP8DrC3h9Dv21JGgg4Vsz/76gnUfnTJBPD+ PPyZ2gi2dzzQOVkYsxZBHQs7kRq6ZSANNbCfM5wY1GbBagZvv2gAPMx9bESudH+l wtoFcZGH5Az85O+k6FhN/QsOjJq/PaHUbNMui1Q+QKrMqU4I/UGCJCxAVRP8/wfS 8rLKzm7TxTU= =LxUH - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxMPACoZzwIn1bdtAQH7DAF9EMimhI0J9JUN9bqaHhsz2opQXZSIQC+g D32kU3ELjC58Y4Ig3e9fLLrPoGtTub85 =Uq/c -----END PGP SIGNATURE-----

1 0

Phil Zimmerman's Legal Defense Fund
by Brian Beattie 17 Dec '03

17 Dec '03

Could somebody mail me the info on sending a contribution Phil Zimmerman's Legal fees related to the PGP issue? Brian Beattie | [From an MIT job ad] "Applicants must also have | extensive knowledge of UNIX, although they should beattie(a)csos.orst.edu | have sufficently good programming taste to not Fax (503)754-3406 | consider this an achievement."

1 0

Re: Pornography, What is it?
by root 17 Dec '03

17 Dec '03

> >> > >If this is so then everything I have read or seen misses this minor point > >completely. Every press release, speech, etc. that I see uses the term > >pornography, not obscenity. TV preachers, news anchors, newspapers, DA's, > >etc. consistently use the term pornography. The state of Oregon specificaly > >legalized pornography, not osbcenity. > >I think from a legal standpoint there is little difference between the two. > > Not so. Obscenity is a class of speech which is completely unprotected > by the First Amendment [*Note, I don't agree with this line of reasoning, > but it's what the Supremes say.] I.e. you can simply ban obscenity, > like child pornography. Pornographic material cannot be banned but > can be regulated according to 'time place and manner'. Hence the > zoning restrictions on Adult book stores. > I understand what you are saying, what I am saying is the distinction is not used in practice. The bbs operator in Cali. that was busted in Tennessee was busted for delivering PORNOGRAPHY (not obscenity) to a minor (in short a 14 year olds account being operated by a oinkdroid.) If you can 'simply' ban obscenity then why all the rucus? Simple, you can't ban it simply... or any other way for that matter. As to your zoning restrictions, they change from place to place and hence are not a hard and fast rule either. The bottem line is that the distinction fostered by legal eagles is a straw man argument, it is intended to distract from the real issue - freedom to do what you want unless you harm another or their property without their prior concent. > >From a legal perspective, the difference between pornography and > obscenity is defined by the Miller test. [This may have changed > a bit in the past few years]. This states that in order for > material to be obscene it must be: > > 1. Devoid of any artistic or literary importance. > 2. Appeal to a prurient interest. [i.e. be arousing]. > 3. Be patently offensive by contemporary community standards. > > This isn't the exact wording, but it's the general idea. > This test is a joke, if you apply it fairly then a man and his wife having anal sex would qualify as obscene in many places (which it does in some states) Also, the whole concept of community standards is unworkable. Whose community? The reason so few people get busted under the Miller test is that there really are so few idiots out there who would fall for it. > In practice, it's very hard to get anything declared obscene, > hence the desire to regulate pornography strongly within the > permitted bounds of the First Amendment. > The reason they want to regulate pornography is that it is a stepping stone to a total ban. It is based on religous grounds and the issue really has little if anything to do with Constitutional rights. > -Ekr >

1 0

Returned mail: User unknown (fwd)
by Mark Rogaski 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - From the node of anonymous-remailer(a)shell.portal.com: : : I want to propose that a change to more of a Snow Crash society : with anarcho-capitalism as the norm is not necessarily being : _caused_ by pressures listed above, but, rather, fit a grander : historical destiny. What we are seeing and will see in the : Not necessarily to the EXTREME that Stephenson predicted, but I definitely see alot of what he said already starting to happen. Hell, look at the Burbclaves. Lil' old Indiana, PA had their first drive-by shooting a few months ago. Some of the growing gang-warefare influence is starting to spill over from Pittsburgh. Once people get a little more frightened of violence, the engineered community idea is going to explode. Now take that with private and corporate police forces and ... BINGO! Snowcrash. : Consider the possibility that the dissolution of large, : centralized federal republics is also inevitable. (The : Frissel/Sandforth Optimists have been arguing this exact point.) : The decentralizing effect of digital networks (or Webs a la Hakim Bey) is pretty self evident. One can easily extrapolate the effects of a structure like the Internet, a structure that by nature routes around any form of 'censorship' from above. - ----- Doc doc(a)phobos.lib.iup.edu aka Mark Rogaski http://www.lib.iup.edu/~rogaski/ Disclaimer: You would probably be hard-pressed to find ANYONE who agrees with me, much less my university or employer... [finger fllevta(a)oak.grove.iup.edu for PGP Public Key and Geek Code v2.1] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLxMZ/R0c4/pqJauBAQH8LwP+PrvNhKJVEzmhZVcuvkNMLmGWWgyflAlh PxvR5BtJHBpE/oNqB3TVOywt9eJYeIV7L7BSboIFosEyqC4OEFS6WRTAJpWhPg8L L9CdvhaDKubnTteBEtugEtU1HB3iJ+zRucJYUVit0bBwCimcqvr/aTMab7h4Yqw9 uKJPulSTg/w= =jdlE -----END PGP SIGNATURE----- ----- Doc doc(a)phobos.lib.iup.edu aka Mark Rogaski http://www.lib.iup.edu/~rogaski/ Disclaimer: You would probably be hard-pressed to find ANYONE who agrees with me, much less my university or employer... [finger fllevta(a)oak.grove.iup.edu for PGP Public Key and Geek Code v2.1]

1 0

Keep Out Electronic Availability Announcement
by John.Schofield＠sprawl.expressnet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Keep Out The Journal of Electronic Privacy January 10, 1995 ** Keep Out Volume 1, Number 2 now available electronically ** ** Keep Out Volume 2, Number 1 coming soon ** ** FREE sample issues available ** I am pleased to announce the electronic availability of Volume 1, Number 2 of Keep Out, the Journal of Electronic Privacy. To receive a copy, simply send e-mail to keep-out-current(a)expressnet.org. The subject and body of the message do not matter. You will receive an ASCII-text copy of the issue in reply to your message. You can also do a Fidonet file request to 1:102/903 and request VOL1-NO2.TXT, or call the Sprawl BBS at +1-818-342-5127 and download it. Volume 1, Number 2 had stories on the Pretty Good Privacy (PGP) signature bug, a how-to story on anonymous remailers, an interview with remailer operator Erich von Hollander, and of course, a continuation of our PGP beginners' series with an introduction to digital signatures and the web of trust. While Keep Out is primarily a paper magazine, the text of each issue is released electronically to make sure the information is disseminated widely. This information is too important to limit it to those who can afford a subscription. I am sending this message instead of posting the full text of Keep Out because the electronic edition contains the same commercial advertisements that the paper version does. It would be inappropriate to post it here. To encourage people to subscribe, and to ensure that Keep Out remains solvent, the electronic edition is released roughly one month after the paper version. It seems to be the lot of new magazines to have deadline troubles. Keep Out has unfortunately been no exception. The second issue of Keep Out was released quite late. To bring the magazine's date of issue back in touch with reality, the next issue (Volume 2, Number 1) will be dated March/April, and will be released in paper form on February 27. For that issue, we are working on a review of steganography software (programs for hiding data in sound and picture files), an in-depth report on Tempest technology (which allows an eavesdropper to view your computer screen from a distance without using wires), a story telling the current state of the government's Clipper (wiretap) Chip initiative, and a continuation of our PGP for beginners' series. To receive a free, sample issue of Keep Out, with no strings attached, simply send your postal address to one of the addresses below. You will receive a copy of the next issue when it is mailed out. Keep Out's mailing list is completely confidential. No information about you will be released for any reason, except for court orders, of course. Subscriptions to Keep Out are $15 a year for six issues in the U.S. and Canada, $27 elsewhere. Back issues of the first two issues (Volume 1, Numbers 1 and 2) are available at $7 each inside the U.S. and Canada, $9 elsewhere. U.S. funds only, please. Unfortunately, we can not accept credit cards, but checks and money orders payable to "Keep Out" are welcome. _______________ Contact Methods Voice: +1-818-345-8640 Fax/BBS: +1-818-342-5127 Internet: keep.out(a)sprawl.expressnet.org Fidonet: "Keep Out" at 1:102/903.0 Snail Mail: Keep Out P.O. Box 571312 Tarzana, CA 91357-1312 USA -----BEGIN PGP SIGNATURE----- Version: 2.7 Comment: Call 818-345-8640 voice for info on Keep Out magazine. iQCVAwUBLxL5+Wj9fvT+ukJdAQEeMgP8DG/x1JtkES7yEXyW67xOXiC/GPSn29ru eeBgjp7Otqc4HVH46fJBe14zoSAfkgVuQUesOxtsVBUAVT6MS/SICr/i+Wrig6lS k2LbokBD9GIihRVDG20XSkqfo3Uw7GBevFEJClCR7T5+rglnbVP8j+bXhumXBtAv y8wU0yYwaD8= =jZNP -----END PGP SIGNATURE----- ... "Happiness is a warm puppy," said the anaconda. --- Blue Wave/RA v2.12 -- |Fidonet: John Schofield 11:310/12 |Internet: John.Schofield(a)sprawl.expressnet.org | | Standard disclaimer: The views of this user are strictly his own.

1 0

Jay Leno
by cheap_anonymous＠crl.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Tonight on the Tonight Show with Jay Leno, Leno said: "...why is O.J. writing a book? If he's so eager to tell his experiences, whisper it to Connie Chung." Thought it might be mildly humerous for those of us who read Tim's message about Connie. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLxNjBioZzwIn1bdtAQGEzQF/XkfPjWrW2kbgpYLB6Gf1EiNXEJTwKW1l mtuAnfhbSHsXPDIvv4IzGoAof2qlsd2v =66P/ -----END PGP SIGNATURE-----

1 0

Re: Thoughts on Data Havens
by pstemari＠erinet.com 17 Dec '03

17 Dec '03

At 01:30 AM 1/10/95, jpb(a)gate.net wrote: > ... Post a new PGP key and encrypted address block weekly to alt.data.havens, >alt.2600, or a stegoed picture to alt.binaries.pictures.whatever. If you >are limiting usership, perhaps an autoencrypting majordomo list. ... Still, messages intended for the DH could be identified by the publically known mailer address. Some sort of protocol where each message to the remailer results in a new and different encrypted send-to block being returned to the sender would seem to be required. Avoiding traffic analysis on these messages would require you to place a new and different encrypted reply-to on each message chunk. > ... It would also be a good idea to only allow DH >commands to be executed if the encrypted (mandatory) control message arrived >from another remailer account ... I was assuming this--on the basis that the DH would not want its location know to the presumeably large number of clients. --Paul J. Ste. Marie pstemari(a)well.sf.ca.us, pstemari(a)erinet.com

1 0

Suggestion for remailer operators.
by nelson＠crynwr.com 17 Dec '03

17 Dec '03

If you want to run a remailer fairly safely, insist that all outgoing mail be encrypted, and put an X bytes/day limit on destinations other than other remailers. Why? Because that way you can't use it to post to Usenet (other than to annoy people a little with unreadable postings), and you can't use it to mailbomb someone, and if the recipient doesn't decrypt the message, there will be no possible offending content. -- -russ <nelson(a)crynwr.com> http://www.crynwr.com/crynwr/nelson.html Crynwr Software | Crynwr Software sells packet driver support | ask4 PGP key 11 Grant St. | +1 315 268 1925 (9201 FAX) | What is thee doing about it? Potsdam, NY 13676 | What part of "Congress shall make no law" eludes Congress?

1 0

Odd bits, minutinae...
by Philippe Nave 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would *I* abstract an internal communique for a bunch of net.riffraff? Surely not - you must know me better than that... [...stuff...] Search done for Message: <<< BELL LABS NEWS >>> - ---------------- >>> ENCRYPTION -- This week, Bell Labs reported development of the AT&T Information Vending Encryption System (IVES), a security system that protects commercial information services -- such as video on demand, home shopping and banking -- and electronic news and alerting services. Using chips designed by Bell Labs and VLSI Technologies, IVES works on various networks including the Internet, cable TV networks and direct satellite broadcasting. The first application of IVES is in set-top cable television boxes being built by AT&T for Cablevision Systems Corp., the nation's fifth-largest cable service provider. By employing secure cryptographic addressing, IVES will assure that only paying customers receive enhanced pay-per-view and video-on-demand services. "There have been effective attacks on most, if not all, video encryption systems, despite highly sophisticated countermeasures," said Dr. David Maher, chief scientist for AT&T Secure Communications Systems. "Hackers are dedicated and can be well funded. Incentives are rising rapidly." [...stuff...] Dedicated? Definitely. Well-funded? Hmmm. This item is something for your acronym-scan parsers; will IVES become interesting? (If not IVES, what of CURRIER? Whoa- it was a joke, officer - CURRIER and IVES, get it? Oh, shit.) Search done for Message: <<< BELL LABS IN THE NEWS >>> - ---------------- >>> DNA -- In a bold experiment that provokes investigators to reconsider what a computer is, a researcher has used the genetic material DNA as a sort of personal computer. The experiment's designer, Dr. Leonard Adleman, translated a difficult math problem into the language of molecular biology and solved it by carrying out a reaction in one-fiftieth of a teaspoon of solution in a test tube. Adleman, of the Univ. of Southern California in Los Angeles, used DNA to solve a problem that involved finding the shortest path linking seven cities. Molecular computers, Adleman said, are fast and efficient, and they have unheard-of storage capacities. He said molecular computers can perform more than a trillion operations per second, which makes them 1,000 times as fast as the fastest supercomputer. And they can store information in a trillionth of the space ordinary computers require. "It's a very intriguing idea," said Ron Graham, of the Bell Labs Information Sciences Division at Murray Hill. "It's more than just cute. It makes you think in a different direction." (from the Denver Post, Nov. 22, '94) [...stuff...] Hmmm. Have you ever been spied on by your own metabolism? ..... YOU WILL. Then again. maybe not. FYI. -Philippe -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLxN0uQvlW1K2YdE1AQHMGAQAu5S0T9xUPsdY8SfB0k43bE2BNL5pb1OE FAg7qjbJ1ugZw0EPDrGFBH7sjq2GHBhyXwgBrlL5j2oAVnnGL2+3QtrcyxIEsrXA 42ME+1JaOQo5+pclCjOrxF00MDoqGdw7hMLexGyawOs7zp+RGDrhPUkMG7ennpky 8QEfrFh8yYU= =pI4l -----END PGP SIGNATURE----- -- ........................................................................ Philippe D. Nave, Jr. | Strong Crypto: Don't leave $HOME without it! nave(a)abacus.dr.att.com | Denver, Colorado USA | PGP public key: by arrangement.

2 1