December 2003 - cypherpunks-legacy

early anonymous remailer
by Carl Ellison 17 Dec '03

17 Dec '03

I was talking with someone at NSA's NISSC today and he was talking about Hamilton's support of the gov't in the Whiskey Rebellion. To voice his support (an unpopular position at the time) he wrote an article under a pseudonym, had it published in a French paper and then re-published over here, citing the French paper. This is the earliest example of an anonymous remailer I've found yet. :-) +--------------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +---------------------------------------------- Jean Ellison (aka Mother) -+

1 0

New PA law (????)
by Tom Edwards 17 Dec '03

17 Dec '03

[Can anyone provide more information on this? I am still looking for the original source to confirm/deny this. Please pay special attention to anti-anon-mailer deals] ---------- Forwarded message ---------- This law was just passed and signed by the governor in PA. If you look at it, you'll notice that it makes it illegal to post instructions for making certain things (like phreaking boxes) and it also makes it illegal to use an anonymous remailer (conceal or assist another to conceal from any service provider). Amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, further providing for manufacture, distribution or possession of devices for theft of telecommunications services. The General Assembly of the Commonwealth of Pennsylvania hereby enacts as follows: Section 1. Sections 910 and 3926 of Title 18 of the Pennsylvania Consolidated Statutes are amended to read: § 910. Manufacture, distribution or possession of devices for theft of telecommunications services. (a) Offense defined.Any person commits an offense if he: (1) [makes or possesses any instrument, apparatus, equipment or] makes, distributes, possesses, uses or assembles an unlawful telecommunication device or modifies, alters, programs or reprograms a telecommunication device designed, adapted or which can be used: (i) for commission of a theft of [telecommunications]telecommunication service or to acquire or facilitate the acquisition of telecommunication service without the consent of the telecommunication service provider; or (ii) to conceal or to assist another to conceal from any [supplier of telecommunications] telecommunicationservice provider or from any lawful authority the existence or place of origin or of destination of any telecommunication; or (2) sells, possesses, distributes, gives or otherwise transfers to another[,] or offers, promotes or advertises for sale [any instrument, apparatus, equipment or device described in paragraph (1) of this subsection,] any: (i) unlawful telecommunication device, or plans or instructions for making or assembling the same, under circumstances evidencing an intent to use or employ such [instrument, apparatus, equipment or] unlawful telecommunication device, or to allow the same to be used or employed for a purpose described in paragraph (1) [of this subsection], or knowing or having reason to believe that the same is intended to be so used, or that the aforesaid plans or instructions are intended to be used for making or assembling such [instrument, apparatus, equipment or device.] unlawful telecommunication device; or (ii) material, including hardware, cables, tools, data, computer software or other information or equipment, knowing that the purchaser or a third person intends to use the material in the manufacture of an unlawful telecommunication device. (b) Grading.An offense under this section is a [misdemeanor of the first] felony of the third degree if the person convicted of such offense has been previously convicted of any similar crime in this or any other state or Federal jurisdiction. Otherwise it is a misdemeanor of the [second] first degree. (c) Restitution.The court may, in addition to any other sentence authorized by law, sentence a person convicted of violating this section to make restitution under section 1106 (relating to restitution for injuries to person or property) or 42 Pa.C.S. § 9721(c) (relating to sentencing generally). (d) Civil action.A telecommunication service provider aggrieved by a violation of this section may, in a civil action in any court of competent jurisdiction, obtain appropriate relief, including preliminary and other equitable or declaratory relief, compensatory and punitive damages, reasonable investigation expenses, costs of suit and attorney fees. (e) Definitions.As used in this section, the following words and phrases shall have the meanings given to them in this subsection: "Manufacture of an unlawful telecommunication device." To produce or assemble an unlawful telecommunication device or to modify, alter, program or reprogram a telecommunication device to be capable of acquiring or facilitating the acquisition of telecommunication service without the consent of the telecommunication service provider. "Telecommunication device." Any type of instrument, device, machine or equipment which is capable of transmitting or receiving telephonic, electronic or radio communications, or any part of such instrument, device, machine or equipment, or any computer circuit, computer chip, electronic mechanism or other component which is capable of facilitating the transmission or reception of telephonic, electronic or radio communications. "Telecommunication service." The meaning given to it in section 3926 (relating to theft of services). "Telecommunication service provider." The meanings given to it in section 3926 (relating to theft of service). "Unlawful telecommunication device." The meaning given to it in section 3926 (relating to theft of service). § 3926. Theft of services. (a) Acquisition of services. (1) A person is guilty of theft if he intentionally obtains services for himself or for another which he knows are available only for compensation, by deception or threat, by altering or tampering with the public utility meter or measuring device by which such services are delivered or by causing or permitting such altering or tampering, by making or maintaining any unauthorized connection, whether physically, electrically or inductively, to a distribution or transmission line, by attaching or maintaining the attachment of any unauthorized device to any cable, wire or other component of an electric, telephone or cable television system or to a television receiving set connected to a cable television system, by making or maintaining any unauthorized modification or alteration to any device installed by a cable television system, or by false token or other trick or artifice to avoid payment for the service. (1.1) A person is guilty of theft if he intentionally obtains or attempts to obtain telecommunication service by the use of an unlawful telecommunication device or without the consent of the telecommunication service provider. [(2) As used in this section, the word "service" includes, but is not limited to, labor, professional service, transportation service, the supplying of hotel accommodations, restaurant services, entertainment, cable television service, the supplying of equipment for use, and the supplying of commodities of a public utility nature such as gas, electricity, steam and water, and telephone service. The term "unauthorized" means that payment of full compensation for service has been avoided, or has been sought to be avoided, without the consent of the supplier of the service.] (3) A person is not guilty of theft of cable television service under this section who subscribes to and receives service through an authorized connection of a From owner-cypherpunks Fri Oct 13 15:22:25 1995 Return-Path: <owner-cypherpunks> Received: by toad.com id AA13987; Fri, 13 Oct 95 15:22:25 PDT Received: from ix9.ix.netcom.com by toad.com id AA13971; Fri, 13 Oct 95 15:22:11 PDT Received: from ix-pl4-18.ix.netcom.com by ix9.ix.netcom.com (8.6.12/SMI-4.1/Netcom) id PAA06683; Fri, 13 Oct 1995 15:21:53 -0700 Message-Id: <199510132221.PAA06683(a)ix9.ix.netcom.com> X-Sender: stewarts(a)popd.ix.netcom.com X-Mailer: Windows Eudora Light Version 1.5.2 Mime-Version: 1.0 Content-Type: text/plain; charset.s-ascii" Date: Fri, 13 Oct 1995 15:21:00 -0700 To: zoetrope(a)infinet.com (cYberpUnc) From: Bill Stewart <stewarts(a)ix.netcom.com> Subject: Re: applications Cc: cypherpunks(a)toad.com Sender: owner-cypherpunks(a)toad.com Precedence: bulk At 05:50 PM 10/13/95 -0400, you wrote: > I know this isnt what you guys generally talk about but I was curious. >Off the top of your head do you know of any sites where I can get kracking >apps for macs? Any information would be greatly appreciated. There are several fine tool companies on the Web who can sell you large hammers. Check with Yahoo for locations. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #--- the same person or several persons, may be aggregated in determining the grade of the offense. (d) Inferences. (1) Any person having possession of or access to the location of a public utility meter or service measuring device which has been avoided or tampered with so as to inhibit or prevent the accurate measurement of utility service and who enjoys the use of or receives the benefit from the public utility service intended to be metered or measured by the public utility meter or measuring device so avoided or tampered with may be reasonably inferred to have acted to avoid or tamper with the public utility meter or measuring device with the intent to obtain the public utility service without making full compensation therefor. (2) Any person having possession of or access to the location of the distribution or transmission lines or other facilities of a cable television system which have been tapped, altered or tampered with or to which any unauthorized connection has been made or to which any unauthorized device has been attached or any person having possession of or access to any device installed by a cable television system to which an unauthorized modification or alteration has been made, the result of which tapping, altering, tampering, connection, attachment or modification is to avoid payment for all or any part of the cable television service for which payment is normally required, and who enjoys the use of or receives the benefit from the cable television service, may be reasonably inferred to have acted to have tapped, altered, tampered with, connected or attached to or modified cable television facilities with the intent to obtain cable television service without making full compensation therefor. This inference shall not apply to the act of a subscriber to cable television service, who receives service through an authorized connection of a television receiving set at his dwelling, in making, within his dwelling, an unauthorized connection of an additional television receiving set or sets or audio system which receives only basic cable television service obtained through such authorized connection. (e) Sale or transfer of device or plan intended for acquisition or diversion.A person is guilty of a misdemeanor of the third degree if he sells, gives or otherwise transfers to others or offers, advertises or exposes for sale to others, any device, kit, plan or other instructional procedure for the making of such device or a printed circuit, under circumstances indicating his having knowledge or reason to believe that such device, kit, plan or instructional procedure is intended for use by such others for the acquisition or diversion of services as set forth in subsections (a) and (b). (f) Restitution.The court may, in addition to any other sentence authorized by law, sentence a person convicted of violating this section to make restitution under section 1106 (relating to restitution for injuries to person or property) or 42 Pa.C.S. § 9721(c) (relating to sentencing generally). (g) Civil action.A telecommunication service provider aggrieved by a violation of this section may, in a civil action in any court of competent jurisdiction, obtain appropriate relief, including preliminary and other equitable or declaratory relief, compensatory and punitive damages, reasonable investigation expenses, costs of suit and attorney fees. (h) Definitions.As used in this section, the following words and phrases shall have the meanings given to them in this subsection: "Service." Includes, but is not limited to, labor, professional service, transportation service, the supplying of hotel accommodations, restaurant services, entertainment, cable television service, the supplying of equipment for use, and the supplying of commodities of a public utility nature such as gas, electricity, steam and water, and telephone or telecommunication service. The term "unauthorized" means that payment of full compensation for service has been avoided, or has been sought to be avoided, without the consent of the supplier of the service. "Telephone service" or "telecommunication service." Includes, but is not limited to, any service provided for a charge or compensation to facilitate the origination, transmission, emission or reception of signs, signals, data, writings, images and sounds or intelligence of any nature by telephone, including cellular telephones, wire, radio, electromagnetic, photoelectronic or photooptical system. "Telecommunication service provider." A person or entity providing telecommunication service, including, but not limited to, a cellular, paging or other wireless communications company or other person or entity which, for a fee, supplies the facility, cell site, mobile telephone switching office or other equipment or telecommunication service. "Unlawful telecommunication device." Any electronic serial number, mobile identification number, personal identification number or any telecommunication device that is capable, or has been altered, modified, programmed or reprogrammed alone or in conjunction with another access device or other equipment so as to be capable, of acquiring or facilitating the acquisition of a telecommunication service without the consent of the telecommunication service provider. The term includes, but is not limited to, phones altered to obtain service without the consent of the telecommunication service provider, tumbler phones, counterfeit or clone phones, tumbler microchips, counterfeit or clone microchips, scanning receivers of wireless telecommunication service of a telecommunication service provider and other instruments capable of disguising their identity or location or of gaining access to a communications system operated by a telecommunication service provider. Section 2. This act shall take effect in 60 days.

1 0

mental cryptography
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- As we know, security is always relative to a threat model. For example, most cryptographic protocols today will not protect their users against the cloning attack I described earlier, nor more mundanely, against video surveilence of your computing space. What can you do if you ARE worried about such attacks? The answer is doing cryptography in your head. Well not quite, since many cryptographic operations are very computing intensive, and not everyone can do 1000 bit mental modular exponention in a reasonable amount of time. But if you have a piece of secure hardware that you can trust to do some of these operations for you, then all you need is a secure communications channel to this piece of hardware. There may be other ways, but I suggest that you establish a common key with your crypto server ahead of time, and then simply encrypt all your communications using a symmetric algorithm. RC4 may be a reasonable choice, since the operations are simple and easy to remember, but you need to keep track of a 255-byte state. WAKE is probably better. Although it uses a large key table, you only have to memorize it once, after which the only state that is changing is four 32-bit registers. I am sure better algorithms can be found for this purpose if mental cryptography is made explicit as a design goal. Perhaps it should be? - the Mad Scientist in the Middle -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMH7l+9IjPOsOWLIJAQEwDwP7BB6ZlEoYVoOFYtzNDcF4XpCKs71GyASC TiwCf+donWycN9SiJHApyXXbnuppGiEyAQYMBGkSLMyIwPMcE4v6CSt2DkpbPjkF XauZy4rqDNljV2pk7PldbPOHDow9wOeoSF2S/luKAoHx5aJWVQrE5SKIgwY2xWfx DYhjte2v9Jc= =88be -----END PGP SIGNATURE-----

5 8

Re: what are these people selling????
by carolann＠censored.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >So no, this is not some great conspiracy on Sun's part to >co-opt the list. You can return to your regularly scheduled >paranoid fantasies. Thank you.... DAMN!.....I thought someone was on to something here. I mean maybe we could get Microhard to do a meeting. Or the dreaded RSA or somebody. Love Always, Carol Anne -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMH75T4rpjEWs1wBlAQFM2QP9Eeh1wcbdUMRk+Z8MXX8rix2VeZt1rqnb d735C9bt0B2x0FtYjOTi6r8FPUYWV6AVYjn2z/m+RjZ71H7MoOSoyHOk+XA+biGM TAzSCPcJNvTTjAyAGs7/wC8WC0z6QudMXkitPuXW4s5ZeqX3yuEbPjlyBYwRbt3h LNTVc/BfrsI= =NgMw -----END PGP SIGNATURE----- -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

Re: what are these people selling????
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:43 PM 10/13/95, Censored Girls Anonymous wrote: >I mean maybe we could get Microhard to do a meeting. >Or the dreaded RSA or somebody. Jim Bidzos, President of RSADSI, attended our special "Clipper" meeting the weekend after Clipper was announced, in April 1993. I'm not saying this in defense of RSADSI and their patent situation, just to note that they are not "dreaded." No doubt Carol meant this tongue-in-cheek, but I think it important to remind folks that things are not so black and white as to allow demonization of such companies, at least not based on what has come out so far. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1

Re: Certificate proposal
by daw＠lagos.CS.Berkeley.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199510120147.LAA13833(a)sweeney.cs.monash.edu.au>, Jiri Baum <jirib(a)sweeney.cs.monash.edu.au> wrote: > What you are missing is that you should not say > "I want to send my credit card number to Egghead Software" > you should say > "I want to send my credit card number to 12 34 56 78 9A BC DE F0" Why does this sound so much like defining the problem away? Maybe I just don't get it... - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMH8QCSoZzwIn1bdtAQFm1QGApigaZIVNZTghR9YrzwL/1dMCdu5zGMK5 QPCEJPY2W1hTrL/znVMkcOCg/Tw5ampO =+2Co -----END PGP SIGNATURE-----

1 0

Re: Netscape beta 2.0 [NOISE]
by daw＠lagos.CS.Berkeley.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199510130224.TAA04729(a)infinity.c2.org>, sameer <sameer(a)c2.org> wrote: > Hey those shirts aren't measly! Very comfy, in my opinion :-) - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMH8RzCoZzwIn1bdtAQGRTwGAzGuG7xyQyNmF7MZZpdU+1Wtx7tjmC1an rnhYqyrNV/9XS3qLe789f8epr1/OsUE8 =cnDM -----END PGP SIGNATURE-----

1 0

Re: responce to graphic encryption replies
by jps＠monad.semcor.com 17 Dec '03

17 Dec '03

> ... The graphic file is going to have a highly correlated > structure, long runs of white space etc. This is not the case for digital imagery. For any given band, if you sample a significant portion of the image it would not be surprising to see a more or less random distribution over the range. > The statistics for such a file > would be different than the random distribution you'd get from using the > wrong key. If you decrypt with the wrong key, do you get a random distribution? Would this be the case for all wrong keys? Would the statistics change in any discernible pattern as the keys got "closer"? > Even if the graphics format is compressed, leading to a more > even distribution, ... This may give a better result. Most compressions involve a shift to the frequency domain with a quantization of the samples. You might be able to write a detector based on this discontinuity. You could also try throwing an edge detector or some other morphological recognizer at the output. It would still be cheaper than having to a man in the loop, but you're going to spend a lot of cpu time. jps -- Jack P. Starrantino (215) 674-0200 (voice) SEMCOR, Inc. (215) 443-0474 (fax) 65 West Street Road jps(a)semcor.com Suite C-100 Warminster, PA 18974

2 1

Re: applications
by Steve Bryan 17 Dec '03

17 Dec '03

At 5:50 pm 10/13/95, cYberpUnc wrote: > I know this isnt what you guys generally talk about but I was curious. >Off the top of your head do you know of any sites where I can get kracking >apps for macs? Any information would be greatly appreciated. Before looking at the address information I was going to send a one line: "Go away" reply to the question. I thought you promised to try to be less obnoxious. If you'd calm down and read the list for a while you might realize why this might not be the place to pose such questions. Why not take a look at the newsgroup alt.2600? You might find it a rather rude place to frequent and I'd certainly never send my 13 year old there (my oldest is currently 8) but I get the impression the topics you'd find there might prove more interesting than the political and/or technical discussions you'll find here. By all means enjoy yourself here but spend more time listening. +---------------------------------------------------------------------- |Steve Bryan Internet: sbryan(a)gofast.net |Sexton Software CompuServe: 76545,527 |Minneapolis, MN Fax: (612) 929-1799 |PGP key fingerprint: B4 C6 E2 A6 5F 87 57 7D E1 8C A6 9B A9 BE 96 CB +----------------------------------------------------------------------

1 0

Re: Anguilla Cypherpunks Meeting
by cman＠communities.com 17 Dec '03

17 Dec '03

[various comments about extraterritorial reach] Laws that affect the behavior of citizen-units, no matter where they go, rest on the theory of "personal jurisdiction". Note that in addition to ITAR, the various laws on money laundering, as well as the RICO statues, apply to US citizens wherever they may be. Ditto for tax laws -- one of the little gems that I learned last week was that penalties to failure to report worldwide income are going to be substantially increased. I guess they're not getting very good compliance for some reason...

1 0