December 2003 - cypherpunks-legacy

What's up?
by darlene＠uunet.net 17 Dec '03

17 Dec '03

Ladies & Gents. Have you found the right on-line relationship yet? We have assisted literally thousands of people like yourself find that special on-line relationship of their circuit dreams. Our program is very unique. You tell us what your interests are, and the type of person that you want to meet. From this we can match you with people of the same interests and hobbies. Our database lists thousands of members, which we can match you with. This is a lifetime membership. You can start and stop as often as you like. Some want several relationships. Others want just one real serious relationship. It is all up to you. A lot of these relationships have gone way past the keyboard. Everything is completely confidential. We let you and the other party know that we have matched you and your interests. If both agree then we exchange Screen names or E-mail address for you. Our lifetime membership is usually $69.95. Because of the overwhelming response we are glad to offer you for one week only a lifetime membership for only $29.95. Once we receive your application, Our staff will get to work on it right away. You can be in a new relationship in as little as one week. Your happiness is our first priority. We want you to tell your friends. All you need to do to get started is to fill out the application at the bottom of the screen and mail it in with a check or money order to the address below. Remember to let us know when you want us to stop sending you information on other members. Thanks ahead for your order. Screen name: or E-mail address: ___________________________ City or Area you are from: _________________________________ Hobbies: ______________________________________________ Interests: ________________________________________________ Sex MorF: ______________ Age : _____________ In your own words tell us the type of person that you would be interested in. List things such as sex, age, interests, and hobbies. The more information that you give us, the easier it will be to find a match. Remember we have thousands of members all over the world. You will need to let us know if you would care for a long distance relationship. Note: We will handle correspondence with you by E-mail, unless you say otherwise. What type of person interests you? _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ If we have any questions about your application, our staff may e-mail you with a question If you are not completely happy with-in 30 days we will refund 100% of your money! Mail information above and check or money order for $29.95 to: Delcom C/O Cyber Connections P.O. Box 916 Walnut Cove, NC. 27052 Thanks again! ----------------------- Headers -------------------------------- Received: from mrin39.mail.aol.com (mrin39.mail.aol.com [152.163.116.77]) by mrin37.mx.aol.com with SMTP; Fri, 15 Aug 1997 18:20:03 -0400 Received: from ha1.aol.net (ha1.aol.net [217.172.0.60]) by mrin39.mail.aol.com (8.8.5/8.8.5/AOL-4.0.0) with ESMTP id SAA116545; Fri, 15 Aug 1997 18:19:56 -0400 (EDT) Received: from mail.aol.net (s5.aol.com [217.182.57.5]) by ha1.aol.net (aol*NET 2.1.0) with SMTP id SAA11112; Fri, 15 Aug 1997 18:19:50 -0400 (EDT) From: Delcon(a)Aol.com Received: from Mailhost.AOL.COM by Danny365(a)Aol.com (8.8.5/8.6.5) with SMTP id QGT64522 for <Tdave(a)juno.com>; Fri, 15 Aug 1997 18:19:50 -0600 (EST) Date: Fri, 15 Aug 97 18:19:50 EST To: Tdave(a)juno.com Subject: Members(a)aol.com Message-ID: <187548889994 Hrr64973(a)AOL.com> Reply-To: Mailhost.Member(a)Aol.com X-UIDL: 58585858585858585858585858585845 Comments: Authenticated sender is <requested(a)aol.com>

1 0

GAK Hacks and Position Surveillance
by kqb＠whscad1.att.com 17 Dec '03

17 Dec '03

> GAK Hacks! > We did it for SSL, let's do it for GAK. > Demonstrate that superencryption (encrypting within a GAK wrapper) defeats > GAK. And other kinds of hacks, including releasing "damaged" (inoperative) > versions of the proposed code (when it becomes available). Tim, That's a start. Superencryption can protect the _content_ of the conversation, but it will not prevent _traffic analysis_. That is an important issue because, as I explain below, in our increasingly wired world, effective traffic analysis may become a _position_ escrow system, except that there won't even be any escrow. A GAK Hack that combines superencryption with a method to defeat traffic analysis would raise a lot more eyebrows than superencryption alone. Unfortunately, since we don't yet know what kind of LEAFs will be in the next-generation GAK proposal, I can only refer to some comments made awhile ago about Clipper-based traffic analysis: Date: Mon, 14 Mar 94 10:36:05 EST From: smb(a)research.att.com > The LEAF can be decrypted with just the family key; from what's been > disclosed so far, local law enforcement agents will be able to do that > without contacting the escrow sites. The LEAF contains the unit id of > the chip, independent of what phone number it's being used from, ... Imagine someone using a GAK/LEAF communication device while travelling throughout the day. Especially if the communications are wireless, no court order will be needed to track position during his/her journeys because a packet sniffer armed with the family key could detect any of his/her communications automatically. You may wonder "what packet sniffer could track communications like that"? Maybe I'm wrong, but isn't that what the recent Digital Telephony legislation was for? Now let's return to a recent message from tcmay(a)got.net: > The pernicious nature of the "escrow" idea, ... is that it says that > surveillance is not so bad after all, because the results of the escrow > will not be looked at except when "justified." ... Or perhaps, once a GAK system with some kind of LEAFs is in place, no justification at all will be needed to accomplish efficient and fully automated massive position surveillance. Maybe key escrow is just a red herring to distract us from position surveillance? Of course, we can assume that these LEAFs will not be as vulnerable to forging as Matt Blaze demonstrated for Clipper (Tessera?). First we had: GAK = Government Access to Keys. Perhaps now we have: GULPS = Government Unlimited License for Position Surveillance? Frankly, I wouldn't be surprised if I have overstated the threat and more technically knowledgeable minds on this list will expose the flaws in my reasoning. Please do. Kevin Q. Brown kevin.q.brown(a)att.com kqb(a)whscad1.wh.att.com

1 0

Cyphernomicon
by dsc＠swcp.com 17 Dec '03

17 Dec '03

Thanks to all who helped me get my hands on Cyphernomicon. I now can breeze through the html site at www.oberlin.edu. I guess at 2am it didn't work because either I or oberlin were too sleepy. I still cannot open an FTP port at netcom. I got a copy on my Mac by giving a lot of memory to Netscape and getting it from www.swiss.ai.mit.edu. I also got a copy from Jeff's zipped copy at ftp.goblin.punk.net, but my unzipping utility hacked out a few lines. Here is a summary of what I learned: Cyphernomicon File Size: 1,287,731 (single character newlines) FTP sites: ftp.netcom.com/pub/tc/tcmay/CP-FAQ The original. "crowded" (I couldn't open an FTP port.) ftp.goblin.punk.net/pub/docs/cypherpunk.faq.gz ftp.goblin.punk.net/pub/docs/cypherfq.zip 28.8 bps modem, newline=CR, but .zip will change to newline=CRLF About 432Kbytes. (On PPP(a)14.4 it took me 6+ minutes to get it.) "until someone posts it on a site with higher bandwidth" [the upcoming new/changed/mirrored Cypherpunk site] HTML site: http://www.oberlin.edu/~brchkind/cyphernomicon/ nice. Other http: sites: http://www.swiss.ai.mit.edu/6095/articles/cyphernomicon/CP-FAQ text. very responsive and fast (6 minutes for my 14.4 connection). http:/www.isse.gmu.edu/~pfarrell/crypto/CP-FAQ text http://www.msen.com/~lwp/Cyphernomicon.gz About 432Kbytes. Need g[un]zip utility. Clearly missing are credits and contact info. I probably won't get to the FAQ much this weekend (wife & kids expect me to do my share and bring home the bacon), but maybe in a week or two. Do I have to read the sci.crypt FAQ, too, to earn my FAQ badge? Dar (list newbie) =========================================================== Dar Scott Home phone: +1 505 299 9497 Dar Scott Consulting Voice: +1 505 299 5790 <--- 8637 Horacio Place NE Email: darscott(a)aol.com Albuquerque, NM 87111 dsc(a)swcp.com Fax: +1 505 898 6525 http://www.swcp.com/~correspo/DSC/DarScott.html My preference for attached files are in this order: AOL, Mime, Binhex4, PGP, UUencode ===========================================================

2 1

Crypto best book
by Sandromar Ferreira 17 Dec '03

17 Dec '03

What is the best book about cryptography ? Sandro.

5 5

[NOISE]Re: ECPA (Was: University logging mail to anon.penet.fi)
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <snip> > Whatever do the workings of an hypothetical "libertarian" >society have to do with the "Libertarian Party"? Certainly, it would >be nice if the latter were working towards the former, but the two are >not the same. So? (They are as close as we are going to get.) > I know of quite a few `l'ibertarians who strongly object to >the `L'ibertarian Party pledge. They were in the minority in my party, even *before* the OK City mass-murder proved why we have such a pledge (to distance ourselves from those who would initiate violence). This reply, to a reply to the ENTIRE list, would probably have been better sent privately. The reason that I first sent to the whole list was as much to encourage other posters to proofread their posts as for any libertarian political purpose. <Wishing that this thread would end> PS Interesting letter to the editor RE: Jerry Garcia in today's WSJ.<g> JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMFDPzG1lp8bpvW01AQGXRwP9Hxzigw1OCcL1L1u3jSlUvAMtzVPhDkwd 99czrw9jqSXfMhdouGNP3IwjZLXhF0AlmV+chMmMC7Z0xy/Qjznhgut8jIS7IpQN KsXLVwWLCWk0U8nN27WuHVQoImfIG2ONLUUaM36pg1GGFTdQLiJauif2ZYDL6JSJ +E1v7dmnLMc= =xrhl -----END PGP SIGNATURE----- Regards, Jim Ray "As sensitive and broad-minded humans, we must never allow ourselves to be in any way judgmental of the religious practices of other people, even when these people clearly are raving space loons." -- Dave Barry ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 James M. Ray <liberty(a)gate.net> ------------------------------------------------------------------------ Support Phil! email zldf(a)clark.net or see http://www.netresponse.com/zldf ________________________________________________________________________

1 0

Re: ON OFF-TOPIC [NOISE]
by Alan Olsen 17 Dec '03

17 Dec '03

>Is there something authoritarians want, that we don't mind them having, >for which crypto would be an enabling technology? Some of them _might_ >be interested in having better encryption for TV channels so that kids >can't watch a NotForKids channel (though many of them might rather ban >it outright) or so they can easily control whether their kids get to >watch MTV even though the V-Chip doesn't have a NoisyKidsMusic bit. >Perhaps they'd enjoy having reputation systems available, so they can >easily filter out politically incorrect material, or do a thumbs-down >on things they disapprove of, or let the Baptists and Catholics and >Anti-Baptists all have their own convenient ratings. MTV has a pretty funny parody of the V-chip concept that they have run on occasion. They are advertising that kids should get the MTV-chip which prevents parents from watching MTV while the kids are at school. Their slogan is "keep mind control at home where it belongs". (I find it interesting that they have an anti-censorship stance, yet censor many of their videos. Kind of hypocritical...) | Minister of Forced Caffinization in the DNRC | alano(a)teleport.com | |"The moral PGP Diffie taught Zimmerman unites | Disclaimer: | |all mankind free in one-key-stenography-privacy!"| Ignore the man | | -- PGP 2.6.2 key available on request -- | behind the keyboard.| | http://www.teleport.com/~alano | <fnord> |

1 0

Re: Developments in the _Junger_ suit
by Antonomasia 17 Dec '03

17 Dec '03

>> BXA are quoted as writing: >> : While the use of html links by a person might, in some applications, >> : involve an export . . . >I must admit to being very curious as to how html links can be an >export. >Is this an export? > RSA .sig >This one might be fun also, but still I can't see that it's an export: I think a mere pointer is not an export, no matter what it points to, but a link with prohibited smuggled _content_ might be: <A HREF="http://www.dcs.ex.ac.uk/~aba/print_pack"C*",split/\D+/,`echo..... although the quoting would probably take a lot of thought. Perhaps that's the kind of thing they mean ? -- ############################################################## # Antonomasia ant(a)notatla.demon.co.uk # # See http://www.notatla.demon.co.uk/ # #### !!! PGP 5.0 beta available now at ftp.replay.com !!! ####

2 1

Libertarian Party and Crypto Anarchy
by tcmay＠got.net 17 Dec '03

17 Dec '03

[I've changed the name of this thread. Somehow the title "Re: [NOISE]Re: ECPA (Was: University logging mail to anon.penet.fi)" did not quite cut it. I really wish folks would take the effort to change thread names when appropriate.] At 11:24 PM 9/8/95, Jim Ray wrote: >They were in the minority in my party, even *before* the OK City >mass-murder proved why we have such a pledge (to distance ourselves >from those who would initiate violence). As a point of reference, I usually vote Libertarian, even though it's pointless. And I'm even registered "Libertarian Party," which matters even less. (I've also changed my registration to Democratic or Republican when I wanted to influence in some tiny way their primaries...as when I switched to Democrat so as to vote for Jerry Brown, mainly because of his flat tax proposal.) But I've never signed the LP "pledge" as I dislike such blanket pledges. And I dislike the notion of pledges per se. So, I'm registered to the Libertarian Party, and usually vote Libertarian. But I am not allowed to be a dues-paying member and get their worthless newsletters, which suits me fine. (Anybody prepared to bomb a government building is not going to balk at signing such a pledge, so it does little good. Personally, I think the "pledge" is profoundly anti-libertarian, and smacks of McCarthyism.) Your mileage may vary. And I place a lot more faith in crypto activism having an effect than in the LP having an effect. Crypto and crypto anarchist ideas are already creeping into the LP belief system, as reflected in articles in "Reason" and "Liberty." And David Friedman (author of "The Machinery of Freedom," and son of Milton) gave a talk recently in L.A. entitled "Crypto Anarchy and the State." --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

AD: Webmaster Resources
by remove＠web-promotions.com 17 Dec '03

17 Dec '03

Pin Point Media, owners of Adult Patrol Age Verification System & Adult Web-Promotions are pleased to offer Free Pay Per Call Number with Pay outs as high as .90 /minute U.S. Here are our Current Services: ---------------------------------------------------- **** PHONE SEX NUMBERS **** ---------------------------------------------------- Number Type Your Payout Cost To Callers Area Available --------------------------------------------------------------------------------------------------------- 1-800 Live Gay .90 /Minute 2.49 - 3.99 /Minute U.S.A. Only 1-800 Live Female .90 /Minute 2.49 - 3.99 /Minute U.S.A. Only **** Some 1-800 specialty numbers are also available **** 011-232 Live .20 /minute Long Distance Only Globally All Pay outs are in U.S. Funds. We are also please to announce that we now offer online Statistics Tracking for your number to assure that you are always abreast on how your numbers are doing. Signup Online at: http://www.adultpatrol.com/phonesex/ Or Email: <Claudine> Claudine(a)adultpatrol.com ------------------------------------------------------------------------------------------------ **** ADULT WEBMASTER BULK EMAIL PROMOTIONS **** ------------------------------------------------------------------------------------------------ Do you have a Product or Service that caters to Webmasters of Adult Orientated Sites ? We have your promotions and visibility answers ! Our current Bulk mailing service offers a mailing to 18,000+ Adult Webmasters for only 450.00 U.S. per mailing. We also offer huge discounts for Maintenance Accounts, where as we will complete all of your bulk mailing needs for one low monthly fee. Prices depend upon size and frequency of promotions. For more information on our services, email; <Tim> admin(a)web-promotions.com or visit our information site at: http://www.web-promotions.com/services/ ----------------------------------------------------------------------------------------- **** ADULT PATROL AGE VERIFICATION SYSTEM **** ----------------------------------------------------------------------------------------- Who else pays you 7.00 Per sign up in your first 30 days and 6.00 per sign up there after with downline referral programs and only charges your clients 9.95 /year. Don't you think your clients deserve the best possible pricing ? Here is our complete Payout vs. Sign Up Fee Information: Duration of Sign up | Your Payout | Cost to your Clients ------------------------------------------------------------------------------------- *First 30 days* 1 Year Signup $ 7.00 $ 9.95 2 Year Signup $ 11.00 $ 15.95 Lifetime Signup $ 28.00 $ 39.95 *After 30 days* 1 Year Signup $ 6.00 $ 9.95 2 Year Signup $ 9.00 $ 15.95 Lifetime Signup $ 24.00 $ 39.95 Compare for yourself ! Some other Verification Systems are surviving off a name alone. All that should really matter is how much your monthly check is and we think we'll be sending you more ! Give us a try for 30 days and judge for yourself. Signup form is located at: http://www.adultpatrol.com/queries/wmsignup1.idc?vendorid=16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To be removed from future mailings just click on REPLY and SEND ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: GAK
by cman＠communities.com 17 Dec '03

17 Dec '03

> >If too much attractive stuff is available by loss of any one public key, >that key gets attacked. To compensate for this, the TIS DRC generates new >public keys periodically to give out to new (or old) customers. > >However, a government warrant which demands the DRC's private key collection >would gain quite a harvest. The economics of the situation seem to dictate that whether you have one key or N keys, it's going to be cheaper to subvert the escrow agent (you guys or whoever) than it is to brute-force even one key. Therefore I'm not clear on how using multiple keys buys you much against the most probable threat -- opponents getting physical access to keys or the subversion of personnel who have legitimate access. Of course, it's still a good policy, reducing the payoff to those too timid to try the direct approach. But I think this threat is significantly less likely than a disgruntled employee selling the DRC private keys on a real instantiation of the Blacknet model, without even being solicited. You may feel very comfortable with the personnel and procedures you have in place now, but auditing and vetting systems are notorious for scaling very, very poorly. You may feel you can vouch for the trustworthiness of everyone at TIS now, but this sort of familiarity also scales very poorly. And clearly, were this to become commercially significant, it would need to scale quite a bit. Douglas Barnes Electric Communities

2 1