December 2003 - cypherpunks-legacy

Re: cypherpunks and guns
by Ryan Lackey 17 Dec '03

17 Dec '03

<daemon(a)ATHENA.MIT.EDU> (Wei Dai) writes: > I don't understand why there is so much talk about guns here lately. > Unless someone comes up with a weapon that has some very unusual economic > properties, individuals cannot hope to compete with governments in the > domain of deadly force. If we have to resort to physical violence, we've > already lost! > > Think about it: if we can defend ourselves with guns, why would we need > crypto? I am fairly certain that as an irregular army soldier I could inflict a substantial amount of damage upon an occupying military. With maybe $20k in equipment and several hundred hours of training, you could make life very difficult for any luckless squad that happens your way. Multiply that by 100 million armed citizens and you see that armed civilian resistance *can* defeat an occupying army. Certainly in times of "peace" information/infrastructure warfare is much more cost effective for the guerilla -- but once they start sending armored patrols around armed with 600 surplus M-16 rifles and having [un]official rules of engagement which include sniper fire on the wives and children of citizens not convicted of any crime, burning tens of people alive for their religious beliefs, forcibly sodomizing suspects with wooden rods, and passing laws which cripple the 1st by making it a crime to read, it's perhaps worth looking at other methods of resistance. (wow, that approached Hettingan length while having little in common with his style :) Plus, I honestly believe certain people who lacked the foresight or desire to use anonymity have increased the chances of illegal unconstitutional government action against them. It'll be a lot harder to quietly kill someone and keep it out of the news if they're prepared to fight back to the extent that I gather Tim May and others are prepared. Even if being armed does nothing more than let the world know they have declared war against the constitution, it's worth it. Me, I still plan to get out before high powered riflery becomes anything other than a sport. The Seychelles are looking remarkably tempting... (I still say steel core ammo is the way to go, especially in 5.56 NATO and 7.62 Soviet. There exist plenty of vests which have rifle hardplate to stop those rounds -- even 7.62 NATO rounds. 7.62 NATO AP/API, though, is a bit tougher, buying you substantial time) Hacking on Eternity DDS, Ryan [Not actually a gun toting lunatic, nor does he play one on TV, but rather keeps them in a safe, and carries knives instead. Yay Massachusetts. I hope this does not spark a discussion of how to stop a government assault force armed with only a knife (hint: the answer is not "in parallel")] [*ObCrypto* (it's getting really hard to do this every time): AOLserver (a nice web server formerly from GNN/navisoft) punted their 128bit SSL module distribution *EVEN TO US CITIZENS* due to commerce department fuckedness. Anyone know where I could get a copy? It would really suck to have to patch the 40bit one into a 128bit version, since they do not distribute source. Sigh. But I've started to use it for insecure stuff because it's cheaper than Stronghold (read: free) and does some cool database stuff easier than apache. And (cool db stuff + free) is more important than (secure) or (secure and easily configured and supported) for this.] -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

4 4

Eureka! Thu Jan 8 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Thursday's issue of Eureka! HARD CITY Ouch! Like it's name says, this is a HARD site, or at least, *you'll* be hard after you see it! Hard City is superbly constructed and has just about every type of porn you could want, and what's more, we've arranged for all our Eureka! readers to get to try out the site totally FREE of charge! So what are you waiting for? Go see! .. http://hardcity.com/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ........... http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm ITALIANO ..... http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE . http://eureka.abc-web.com/eureka/portuguese.htm BEST SEX MOTEL Somebody is always in at the Motel and the rooms are cheap. Surf down the page to the "rooms", there you'll find a bunch of great pussy pix of all sorts. Nice nipple ring room1b! Best Sex Motel ................... http://www.sex-motel.com/ LICKITY SPLIT Oh yeah, what a superb site. You are really going to love all the photos and links you find here. Absolutely excellent! Lickity Split ............... http://207.254.20.141/lickity/ L.A. SEX "L.A. SEX has been designed for easy surfing but more impor- tant than that we have a ton of great free nude xxx pics for your pleasure! This site has no consoles..." You bet, this is a great site. Shaved, black or redheads, take your pic. L.A. Sex ...................... http://209.50.230.238/pk.htm SABRINA'S HOUSE OF HARDCORE FUN They has gathered together dozens of free pix for us. Once there you have a lot of choices. They offer a free video for us as well! Not a bad deal. Pretty juicy stuff. Facials, young women and asians. Lick it up girls! Worth the Surf! Sabrina's House ............ http://www.sexhost.net/sabrina/ FREE CONTEST! The excitement escalates! This week's competition now has just has two free 3 Month memberships to the King of "Hard- Core" left to play for. Eureka's Halarious question master awaits you. Visit Hardcoresmut and click on "Free Guided Tour" for the tour, and email us the answer (found in XXX CHAT) to this head-scratching question: "What does everyone want to get in the XXX Hardcore chat rooms?" ............... Answers to .................. mailto:contest@www.usachat.com HardCoreSmut ................... http://www.hardcoresmut.com FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ Three dicks .................... http://207.168.184.26/trip/ CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat .................. http://137.39.63.229/chat/ General/Fun Chat ........ http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!....1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline.........1-800-644-8779 FREE: Live 1-on-1 (international call only)....011-678-77416 AMATEUR SITE OF THE DAY LEATHER ROSE: A busty Bi-BBW woman who is NOT afraid to show off. She considers herself an "eclectic kinda gal with ecce- ntric tastes", and believe us, she has a lot of loving to give. Her web page is devoted to her, and fans of BBW women. Check out her site! ............................ http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY HotStories.com: Tired of all those pics? Hot Stories lets you use your imagination to is full potential. Over 100 free sex stories in 8 different categories. Our stories are worth a thousand pics! ................ http://www.hotstories.com/ DAILY MPEG AND CARTOON The internationally renowned erotic artist Raffaelli has made his award-winning videos available exclusively to Eros in Orbit and NOW to subscribers of Eureka! These high- quality video clips feature the best of Raffaelli's erotic masterpieces. Raffaelli has gained world wide recognition for his quality productions, featuring beautiful non profes- sional models captured in passionate sexual intercourse. These video clips also portray exotic single girls in auto- erotic masturbation. The color, quality and detail of these MPEGs is superb. ........ http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ....... http://www.adultstars.com/eureka/ TODAY'S FREE PIX Pic 1 ........................... http://137.39.63.229/?080 Pic 2 ........................... http://137.39.63.229/?081 Pic 3 ........................... http://137.39.63.229/?082 Pic 4 ........................... http://137.39.63.229/?083 Pic 5 ........................... http://137.39.63.229/?084 Pic 6 ........................... http://137.39.63.229/?085 Pic 7 ........................... http://137.39.63.229/?086 Pic 8 ........................... http://137.39.63.229/?087 Pic 9 ........................... http://137.39.63.229/?088 Pic 10 ........................... http://137.39.63.229/?089 PLEASE VISIT THIS EUREKA! PARTNER SITE A Babe For You - 350+ FREE Naked Babes http://www.babes4free.com 350+ FREE Quality Blonde, Teen, Lesbian, Teen Fuck, Asian, Black and Series Pics. All thumbnail selection. Plus we feature Free Pics from Free Sites. =========================================================== TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS NEWSLETTER BACK TO US. ===========================================================

1 0

Fiat's Batch RSA
by Anonymous 17 Dec '03

17 Dec '03

Batch RSA invented by Amos Fiat Described in Crypto 89 and J Cryptology 1997. RSA works as follows. The key owner chooses two secret primes p and q, and forms their product n = p*q. He then chooses a public exponent e relatively prime to p-1 and q-1. His public key is (n, e). To encrypt a message m into cyphertext c, m is raised to the power e, mod n: c = m^e mod n. To decrypt the message, the key holder calculates d as the multiplicative inverse of e mod (p-1)(q-1): d = 1/e mod (p-1)(q-1). He recovers m from m = c^d mod n. For simplicity, below we will write this as m = c^(1/e) mod n, where it is understood that the 1/e is done mod (p-1)(q-1). An RSA signature s on a message m is calculated as for a decryption: s = m^(1/e) mod n. The signature is verified by m ?=? s^e mod n. The time consuming part of an RSA decryption or signature is this exponentiation step. e can be chosen to be small, so encryption and verification is fast, but 1/e will generally be about the same size as n, so many multiplications must be done to raise a number to that power. Amos Fiat describes a method whereby multiple messages can be decrypted or signed using only one full-sized exponentiation. The "catch" is that the messages must all use different exponents with the same n. Here is a concrete example. You want to decrypt or sign two messages, M1 and M2, raising M1 to the 1/3 power and M2 to the 1/5 power. Perform the following steps: M12 = M1^5 * M2^3 I12 = M12 ^ (1/15) This is the only full-sized exponentiation needed. This gives: I12 = M1^(1/3) * M2^(1/5). This is the product of the two values that we want. Fiat uses a trick to disentangle the two values. He raises I12 to the 6th power. The number 6 is chosen so that it is a multiple of one of the two exponents, 3, and is 1 more than a multiple of the other exponent, 5: I12^6 = M1^2 * M2 * M2^(1/5) Therefore: M2^(1/5) = I12^6 / (M1^2 * M2) which is one of the values we need. Since I12 is the product of the two values we want, we can recover the other value just by dividing this into I12: M1^(1/3) = I12 / M2^(1/5) Here is another example. Suppose we want M3^(1/7) and M4^(1/11). (Note that we are using prime numbers for the exponents; the reason will be explained below.) We calculate: M34 = M3^11 * M4^7 I34 = M34 ^ (1/77) This gives us: I34 = M3^(1/7) * M4^(1/11) Again this is the product of the two values we want. As before we will raise this to a power which is 1 more than a multiple of one of the two exponents (7 and 11) and is a multiple of the other one. The smallest such power is 22. I34^22 = M3^3 * M3^(1/7) * M4^2 So we can divide to get M3^(1/7): M3^(1/7) = I34^22 / (M3^3 * M4^2) And we can divide to get the other value needed: M4^(1/11) = I34 / M3^(1/7) This illustrates how to derive two RSA roots using only one full sized exponentiation. A few small exponentiations are also needed, as well as two divisions, but these are much faster than doing the full exponentiation (raising to the 1/15 or 1/77 powers above). Fiat's idea can then be applied recursively. Note that in the examples above we had to take two full-sized exponentiation, M12 to the 1/15 power and M34 to the 1/77 power. We can combine both of these exponentiations into one just as was done above: M14 = M12^77 * M34^15 I14 = M14 ^ (1/1155) Now: I14 = M12^(1/15) * M34^(1/77) the product of the two values we want. We need an exponent which is 1 more than a multiple of 15 while being a multiple of 77, giving 615, or vice versa, giving 540. Choosing the latter since it is smaller we have: I14^540 = M12^36 * M34^7 * M34^(1/77) so: M34^(1/77) = I14^540 / (M12^36 * M34^7) and dividing gives the other factor: M12^(1/15) = I14 / M34^(1/77) These values can then be fed into the expressions above to recover M1^(1/3) and the other three values, all with only one full-sized exponentiation for the four messages. In general, finding the exponent for Ixx can be handled by the Chinese Remainder Theorem. However it requires that the two values be relatively prime. That is why the exponents used in Batch RSA must all be relatively prime, so that there is a solution to the value of the exponent for Ixx. As the number of values in the batch increases, the "small" exponents needed to recover the values increase as well. We saw above that the exponents went from 6 and 22 for the size-two batches to 540 for the size-four batch. This means that you reach a point of diminishing returns where increasing the batch size no longer provides much benefit. Fiat suggests a batch size of n/(log^2 n) messages, where n is the length of the full-sized exponentiation (e.g. 1000 for a 1000 bit modulus). This would correspond to about a 10 message batch for a 1024 bit key. Fiat describes a few situations where it may be appropriate to use different exponents for multiple RSA operations. In the case of a server issuing multiple RSA signatures it could define its public key to be (n, e1, e2, e3,...) and specify that the signature was valid for any exponent in the list. Then it could batch up signatures and use a different exponent for each one. Another case is "pure RSA" encryption, where the message itself is broken into blocks and each one is RSA encrypted. In that case the blocks could use successive exponents from the list, and the receiver could decrypt a batch of blocks using one large exponentiation. There is another case of interest to us, related to the task of searching through messages from a message pool, possibly steganographically hidden. That will be described in another message.

1 0

More on Association for Interactive Media conference
by Declan McCullagh 17 Dec '03

17 Dec '03

[This is the conference Tim was criticizing yesterday. --Declan] ---------- Forwarded message ---------- Date: Wed, 7 Jan 1998 10:49:01 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: politech(a)vorlon.mit.edu Subject: FC: More on Association for Interactive Media conference Netly articles on AIM: http://cgi.pathfinder.com/netly/editorial/0,1012,1155,00.html http://cgi.pathfinder.com/netly/editorial/0,1012,1464,00.html -Declan ---------- Forwarded message ---------- Date: Wed, 07 Jan 1998 10:24:20 -0800 From: John Gilmore <gnu(a)toad.com> To: declan(a)well.com, gnu(a)toad.com Subject: Re: FC: Association for Interactive Media conference (DC, 2/98) [for forwarding if you like] Note that AIM, the sponsors of the "WashingtonWeb" conference, are the folks who appear to be paid stooges for Network Solutions in trying to keep their ten million dollar per month monopoly on domain names. AIM's coverage of that issue has been completely false and completely biased ("The Internet is likely to break apart on October 15, 1997"; "you may lose all rights to use your trademark in your Internet address forever". See www.interactivehq.org/oic/) They've been deliberately making false statements to stir up sentiment against the evolution of domain names away from the Network Solutions monopoly. I wouldn't promote or attend their conference. There's something going on there that I don't understand -- but I do recognize slime when I see it. John Gilmore -------------------------------------------------------------------------- POLITECH -- the moderated mailing list of politics and technology To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: subscribe politech More information is at http://www.well.com/~declan/politech/ --------------------------------------------------------------------------

4 10

FCC squeezes the ham TV band
by David Miller 17 Dec '03

17 Dec '03

Wednesday January 7 10:22 AM EST FCC Reallocates Lightly Used Television Spectrum WASHINGTON (Reuters) - The Federal Communications Commission said Tuesday it had reallocated lightly used television frequencies for use by public safety services. Portions of the spectrum between 746 and 806 megahertz that had carried channels 60 to 69 will be given over to police and fire departments and other emergency services. The remainder of the spectrum will be auctioned off for commercial use. The reallocation was required by the Balanced Budget Act of 1997. The FCC had previously announced it would reallocate the lightly used spectrum in an April, 1997 plan for the transition to digital television. FCC chairman William Kennard said on Tuesday the commission would allow some users of the high channels to continue operations, however. "While recovery of unused spectrum is an integral part of the FCC plan for transition from analog to digital television, I am sensitive to the effects of spectrum recovery on Low Power TV and TV translators," Kennard said in a statement. Such broadcasters may continue operations through the transition to digital television "as long as they do not cause harmful interference to primary services," he said. ----------------------------------------------------------------------- Copyright © 1997 Reuters Limited. All rights reserved. Republication or redistribution of Reuters content is expressly prohibited without the prior written consent of Reuters. Reuters shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon

1 0

Re: Sentencing for Electronic Copyright Infringement
by Information Security 17 Dec '03

17 Dec '03

> Subject: Re: Sentencing for Electronic Copyright Infringement > From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) > Date: Wed, 07 Jan 98 08:09:32 EST > > Tim May <tcmay(a)got.net> writes: > > When the ninja narc raiders cart our computers off for analysis, I'm sure > > they can find enough violations to send us away for as many years as they > > wish. > > And if Timmy knew a bit more about cryptography than he could learn by browsing > through Bruce Schneier's book, the ninja narc raiders wouldm't be able to find > shit on any of his media. :-) Hey, Vulis, how does it feel to know all your phone lines are being monitored by the FBI? For (among other things): soliciting funds for terrorist groups incl Hamas to kill a couple, and threatening government employees... ---guy Lon T. Horiuchi was indicted for murder today. The DOJ refused to prosecute him: the state will.

1 0

Re: The Digital Society Group
by jalonz＠openworld.com 17 Dec '03

17 Dec '03

>>Without getting into too much detail, The Digital Society Group is >>constructing a pure-technology infrastructure to provide for the operation, >>governance and existence of a complete digital society within a free >>enterprise zone. >The web site doesn't explain what methods you are using to establish these >zones. Do you have a mailing list set up for discussion? The plan >sounds interesting and ideologically supportable, but I'm skeptical. Blanc, I'm trying to get more docs online ASAP to explain things. The physical free zones are very popular in the interational business world, but I as a computer type had never heard of them other than Hong Kong, etc. When a country wants to set up a free zone, they come to Openworld and its partner companies who do everything from clearing land, construction, setting up businesses, schools, hospitals, etc. One of the soon to be required components of a free zone installation is a digital infrastructure to link all of the things together. We're talking smart cards for physical structure security and personal ID, email, web hosting, net access, all kinds of stuff. Since we are building a "country" from scratch, rather than have to automate paper workflows and do document management, the governance processes are designed to be digital from the start. Thus, to provide incorporation services to its citizens, a free zone allows them to sign up via web browser, and the daily maintenance, processing and management of the corporate records is also done almost exclusively via web browser and email. Its fast, cheap, and requires far less labor than a paper-based system. Another feature is that rather than maintaining the records for the customer, the customer can log in via web browser and update their own corporate record. (similar to Internic) This reduces labor even further and reduces the cost of incorporation to around $100 per year making instant offshore incorporation accessible to the general global public for the first time. That kind of solution applied across an entire governance and communications infrastructure make for some radical things to become possible. Another concept being implemented is that each new free zone (being fully wired) can easily replicate records and data with other free zones (they will actually be required to for certain things) and thus a citizen in one free zone can access banking, etc. services (even physical access) in another. So, we see the emergence of a phsically distributed, digitally cohesive network of "corporate states". This lends to applications like data protection and hiding via distributed storage or data sharing via common dataspaces and replication. The technical methods to perform all of this work are a bit touchy. At the risk of starting endless flame wars, I was looking at Lotus Bloats for its replication and hierarchical security structure as well as easy forms to web publishing and workflow management. That got shot down at the thought of actually administrating the mess and also the costs are fairly significant. The final nail in the coffin was the encryption key escrow fiasco with the Swiss. I was also looking at NT due to the nice database-to-web interface and the fact that IIS 4 isn't too bad. But again software license costs are large and who knows if Microsoft is doing, or will do, a key escrow deal for future products? Who knows what they are doing now with NT on the OS level? You can't run around making structures which allow people around the world to move money and communicate anonymously, incorporate and have software agents be owners of property and bank accounts without someone getting very pissed off. Thus, a good solution seems to be Linux in that its cheap, Unix is good for multi-process routing, and the toolkits and components created by the Digital Society can be easily moved into the public domin in some form or another. Also, the export mess can be gotten around in one way or another. Any comments? Any better alternatives than Linux? The coding being done now is either cross-platform or prototype which will be scrapped as soon as the kinks are worked out and the real fun can begin. The Digital Society is purposefully working cheap and small to enable the tools and communities to be deployed at as close as possible to no cost for the end-user - that is the priority. Most things are being coded from scratch to ensure security and keep the costs low. Labor is cheap - when its your own. :) Jalon --------------------------------------------------------------- Jalon Q. Zimmerman, Director The Digital Society Group A division of Openworld, Inc. http://www.openworld.com/ jalonz(a)openworld.com --------------------------------------------------------------- The government is not your mommy. ---------------------------------------------------------------

1 0

Polycratic government?...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Is anyone aware of research or writings regarding polycratic political systems? Thanks. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

Tim C. May's reheated, refurbished, and regurgitated cud is completely inappropriate for the mailing lists into which it is cross-ruminated. | | | O | Tim C. May (--|--) | / \

3 2

lists
by nobody＠nsm.htp.org 17 Dec '03

17 Dec '03

Can someone tell me if the toad cypherpunk list gets *all* the cypherpuink traffic? As I understand it there are three possible subscription points -- does one subscription cover all? Thanks in advance...

2 1