December 2003 - cypherpunks-legacy

Cuban Security Conference
by Ross Anderson 17 Dec '03

17 Dec '03

Mr Guevara of the Cuban embassy in London asked me to post this announcement. Pass it on. CALL FOR PAPERS INFORMATICS 96 International Conference Center Pabexpo, Havana, Cuba March 4-9, 1996 INCLUDING 3rd Ibero-American Seminar on Protection against Computer Viruses and Security of Information Technologies * Antivirus and protection software * Security of information technologies, including - diagnostic and security plans - risk analysis, contingency and recovery plans - technical aspects: identification and authentication, cryptography, security models - security organisation and management, security policy, information sorting, training of users and authentication - security evaluation - integration of security systems - audit trail * Experience Chairman of the organising committee: Jose Bidot Pelaez, Chairman, National Committee for Data Protection AND 1st International Seminar on Information Audit * Information audit in business and financial management * Information audit and current technology * Tools for information audit * Controls and risks in information systems * Information audit for information systems Chairman of the organising committee: Fransisco Deiros, President, Information Audit Group, National Committee of Informatics Papers should be sent to the convention secretariat: Lic. Nancy Batard Najarro INFORMATICS 96 Executive Secretary Palacio de las Convenciones Apartado 16046, La Habana, Cuba Tel: +537 33-1466 / 20-6850 Fax: +537 33-1657 / 33-1708 Email: infor96(a)cenisi.cu

1 0

Re: Important Digital Cash Question...
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>What's the right name to use for the Banker? I've been using "Nick", >after Nick Leeson; any other suggestions? How about "Pip", J. Pierpont Morgan's childhood nickname. OK, OK, I'll sit down now... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/premail/premail-0.33a.tar.gz For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub reord"; $remailer{"hacktic"} = "<remailer(a)utopia.hacktic.nl> cpunk mix pgp hash latent cut post ek"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post ek reord"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk pgp hash filter"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"syrinx"} = "<syrinx(a)c2.org> cpunk pgp hash cut reord mix post"; $remailer{"ford"} = "<remailer(a)bi-node.zerberus.de> cpunk pgp hash ksub"; $remailer{"hroller"} = "<hroller(a)c2.org> cpunk pgp hash mix cut ek"; $remailer{"vishnu"} = "<mixmaster(a)vishnu.alias.net> cpunk mix pgp. hash latent cut ek ksub reord"; $remailer{"robo"} = "<robo(a)c2.org> cpunk hash mix"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"spook"} = "<remailer(a)valhalla.phoenix.net> cpunk mix pgp hash latent cut ek reord"; $remailer{"rmadillo"} = "<remailer(a)armadillo.com> mix cpunk pgp hash latent cut"; $remailer{"ncognito"} = "<ncognito(a)gate.net> cpunk"; $remailer{"precip"} = "<mixmaster(a)mix.precipice.com> cpunk mix pgp hash latent cut ek reord"; $remailer{"ecafe"} = "<remail(a)ecafe.org> cpunk mix"; $remailer{"wmono"} = "<wmono(a)valhalla.phoenix.net> cpunk mix pgp. hash latent cut ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. remailer email address history latency uptime ----------------------------------------------------------------------- ideath remailer(a)ideath.goldenbear.com -.-.-.---.- 7:12:57 99.97% hacktic remailer(a)utopia.hacktic.nl ************ 9:03 99.95% rmadillo remailer(a)armadillo.com ++++++++++++ 42:02 99.93% ecafe remail(a)ecafe.org **####+*##*# 1:37 99.93% wmono wmono(a)valhalla.phoenix.net ************ 13:17 99.91% penet anon(a)anon.penet.fi ---------+++ 2:58:18 99.74% robo robo(a)c2.org ###--*# 25:08 99.71% spook remailer(a)valhalla.phoenix.net ******** *+* 16:41 99.69% replay remailer(a)replay.com *****+* * ** 6:34 99.52% mix mixmaster(a)remail.obscura.com ---- -- --- 1:44:59 99.46% c2 remail(a)c2.org + +++-- * 53:17 98.82% syrinx syrinx(a)c2.org - _ ____ .+ 55:55:41 97.38% bsu-cs nowhere(a)bsu-cs.bsu.edu *** # #-+# 24:49 97.23% flame remailer(a)flame.alias.net * **+* 24:32 92.21% vishnu mixmaster(a)vishnu.alias.net * +*** 10:39 90.65% rahul homer(a)rahul.net ***#*+ +#*** 2:53 99.79% alumni hal(a)alumni.caltech.edu +++#**-*+# 7:27 86.61% portal hfinney(a)shell.portal.com **##*#-### 5:38 86.60% ford remailer(a)bi-node.zerberus.de ____.-- 38:06:00 86.33% extropia remail(a)extropia.wimsey.com - . - - 5:24:35 63.83% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: Digicash will not fly (not)
by Michael J Gebis 17 Dec '03

17 Dec '03

> >While Chaum is a brilliant cryptographer, he is an incompetent businessman > >He has demonstrated this in numerous ways. > >The latest being "Cash" where the bank skims off 4% to 10% every time. > >No one is going to use digicash under these kinds of terms and > >conditions. > Doesn't just about everyone do precisely this when they pay sales tax? > Every time a buck arrives or departs a hand one pays a tax yet the > system (you and I)continues accepting these terms albeit painfully. Theoretically, when I pay sales tax I get something in return (better roads, nicer schools, improved NSA wiretaping, and other government services.) With digicash, you're paying for the use of the money itself. What sort of charges do Visa/Mastercard impose upon merchants? I thought it was 3%; if so, I would suspect that this is the level of "off-the-top" skim that the market will sustain, and DigiCash should probably use a similar rate. -- Mike Gebis gebis(a)ecn.purdue.edu Corporate Operating Systems Still Suck

2 1

Re: Digicash will not fly (not)
by Dave Farber 17 Dec '03

17 Dec '03

> >What sort of charges do Visa/Mastercard impose upon merchants? I >thought it was 3%; if so, I would suspect that this is the level of >"off-the-top" skim that the market will sustain, and DigiCash should >probably use a similar rate. > >-- >Mike Gebis gebis(a)ecn.purdue.edu Corporate Operating Systems Still Suck > Pricing is usally set so it includes the 3%. Cash prices are usually by agreement the same as credit card. Will Digicash be an extra %age or will the credit card agreements be changed Else it is 3% plus digicash for those goods that offer the credit card option

1 0

Re: Cuban Security Conference
by Bill Stewart 17 Dec '03

17 Dec '03

> International Conference Center > Pabexpo, Havana, Cuba > March 4-9, 1996 > 3rd Ibero-American Seminar on Protection against > Computer Viruses and Security of Information Technologies I wonder if they'd be receptive to talks on private communications, digicash, tax avoidance through digital technology, anarchy and collapse of government power, etc. :-) (Maybe they would; Cuba's got to do something to get their economy out of the post-Soviet-subsidy doldrums, and with the US preventing free trade in sugar for them, maybe allowing capitalism will be their only choice...) For any Yankees interested in going, you generally need to be a journalist of some sort to avoid the Trading With The Enemy Act restrictions, but in cyberspace, that's easily arranged. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

3 2

Re: Pinkerton Risk Assessment & "Security 2000"
by Joel McNamara 17 Dec '03

17 Dec '03

For even more, free information of this type, see the Counter-Terrorism page: http://www.interlog.com/~vabiro/ An interesting collection of links and data... Joel

1 0

I-D ACTION:draft-eastlake-cybercash-v08-01.txt
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

---------- X-Sun-Data-Type: text X-Sun-Data-Description: text X-Sun-Data-Name: text X-Sun-Charset: us-ascii X-Sun-Content-Lines: 70 A Revised Internet-Draft is available from the on-line Internet-Drafts directories. Title : CyberCash Credit Card Protocol Version 0.8 Author(s) : D. Eastlake, B. Boesch, S. Crocker, M. Yesil Filename : draft-eastlake-cybercash-v08-01.txt Pages : 55 Date : 10/27/1995 CyberCash is developing a general payments system for use over the Internet. The structure and communications protocols of version 0.8 are described. This version includes credit card payments only. Additional capabilities are planned for future versions. This document covers only the current CyberCash system which is one of the few operational systems in the rapidly evolving area of Internet payments. CyberCash is committed to the further development of its system and to cooperation with the Internet Engineering Task Force and other standards organizations. Internet-Drafts are available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-eastlake-cybercash-v08-01.txt". A URL for the Internet-Draft is: ftp://ds.internic.net/internet-drafts/draft-eastlake-cybercash-v08-01.txt Internet-Drafts directories are located at: o Africa Address: ftp.is.co.za (196.4.160.8) o Europe Address: nic.nordu.net (192.36.148.17) Address: ftp.nis.garr.it (192.12.192.10) o Pacific Rim Address: munnari.oz.au (128.250.1.21) o US East Coast Address: ds.internic.net (198.49.45.10) o US West Coast Address: ftp.isi.edu (128.9.0.32) Internet-Drafts are also available by mail. Send a message to: mailserv(a)ds.internic.net. In the body type: "FILE /internet-drafts/draft-eastlake-cybercash-v08-01.txt". NOTE: The mail server at ds.internic.net can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e., documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. For questions, please mail to Internet-Drafts(a)cnri.reston.va.us. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ----- End Included Message ----- ---------- X-Sun-Data-Type: Multipart X-Sun-Charset: us-ascii X-Sun-Content-Lines: 24 Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv(a)ds.internic.net" Content-Type: text/plain Content-ID: <19951027135555.I-D(a)CNRI.Reston.VA.US> ENCODING mime FILE /internet-drafts/draft-eastlake-cybercash-v08-01.txt --OtherAccess Content-Type: Message/External-body; name="draft-eastlake-cybercash-v08-01.txt"; site="ds.internic.net"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <19951027135555.I-D(a)CNRI.Reston.VA.US> --OtherAccess-- _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: Important Digital Cash Question...
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>I think that the bankers name should be Ethel however. > > Phill Wait, wait! I have another one. I call digital cash bankers "underwriters", because they're basically underwriting digital certificates, like an underwriter in the capital markets does. So, we need a "U" name... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

3 2

DOD_com
by John Young 17 Dec '03

17 Dec '03

10-30-95. Wash Rag: "Pentagon Plans More Espionage. Business Fronts Abroad Would Expand Efforts Of a Unified Service." The Defense Department has merged its separate covert intelligence operations and plans to expand its espionage abroad, starting with establishment of phony businesses overseas as cover, and has formed the Defense HUMINT (Human Intelligence) Service, or DHS. Under the fiscal 1996 intelligence authorization bill, the DHS has been given a trial period of three years to carry on commercial activities "to provide cover security to intelligence collection activities undertaken abroad." The authority "to provide bona fide commercial cover," was so that DHS's covert operatives could "withstand detailed investigation by hostile foreign intelligence services as well as domestic scrutiny." ... scandal of the Army's Yellow Fruit op ... CIA case officers are working with DHS on the cover companies abroad; cooperation is needed because in recent years military spies overseas inadvertently had set up relations with foreigners known to be double agents. Sen. Bob Kerrey called on CIA Director John M. Deutch to "develop his human collectors, planning 10 or more years in advance for their peak usefulness," a reference to placing them abroad under deep cover for use in future crises. DOD_com (8 kb)

1 0