December 2003 - cypherpunks-legacy

[NOISE] The State will wither away?
by Anonymous.ReMailer＠f21.n216.z1.fidonet.org 17 Dec '03

17 Dec '03

Dale Worley (worley(a)world.std.com) >It has become fashionable these days to say "The government can't suppress ><whatever>", usually with the smug implication that the speaker is getting >away with <whatever>, and thus is more studly than the government. However, >these people are almost always wrong. The correct statement is "The >government isn't willing to expend the effort to suppress <whatever>." >Anyone who wishes to disprove this is invited to sell heroin in Singapore. Hey Duncan Frisell! Any kind words for this guy AFA risk assessment? ================================================= This message has been forwarded by an anonymous remailer. It is not from where it appears. For more information, send a message to HELP at 1:216/21. --- ReMail RML00.03

1 0

SEMPER
by Joel McNamara 17 Dec '03

17 Dec '03

And now for something completely different, a Euro-centric plan for Net digital commerce. Haven't had a chance to look at the URL yet, but obviously crypto-relevant... Joel ---------- Development of Electronic Marketplace: EUROPEAN COMMISSION FUNDS FIRST OPEN SOLUTION FOR SECURE COMMERCE OVER THE INTERNET PRESS RELEASE Zürich, November 2nd, 1995: Backed by the European Commission, a consortium of 20 partners from European industry and academia has embarked on a research project to develop the fundamentals for secure electronic commerce. The goal of the 9-million ECU (approx. 14 million CHF) project, SEMPER (Secure Electronic Marketplace for Europe), is to provide the first open and comprehensive solutions for secure commerce over the Internet and other public information networks. A wide range of businesses are rapidly moving to explore the huge potential of networked information systems, especially with the Internet-based WWW (World-wide Web). The Internet, which already connects more than 3 million computers and a substantially larger number of users, is growing at a breathtaking pace with thousands of newcomers every day. Although the Internet has its roots in academia and is still dominated by free-of-charge information, dramatic changes are expected in the near future. For instance, the WWW will be used for a wide variety of electronic commerce such as on- line trade or delivery of advanced multimedia information services. The evolution of broadband networks and "information highways" will intensify this trend. The need for secure transactions in this new business environment, which involves networks available to the general public, has triggered a number of related efforts. These initial developments are based almost exclusively in the US and most of them are limited to proprietary, or otherwise closed solutions, involving only electronic payment issues. In contrast, SEMPER is directed towards a comprehensive solution for secure electronic commerce, considering legal, commercial, social, and technical requirements as well as different options for an electronic marketplace. Consistent with its broader goals, the SEMPER project will be managed by an interdisciplinary team of experts from the academic, industrial and general business environment in Europe. The team includes representatives of the social sciences, finance, retail, publishing, as well as in information and telecommunication technology. The first of the three one-year phases will address a coherent security model and a generic, open security architecture for the electronic marketplace. This architecture will be independent of specific hardware, software, or network architectures. The most fundamental electronic commerce services, such as secure offering, order, payment and information delivery, will also be integrated in the first phase. Subsequent phases will concentrate on more advanced services. These will include fair exchange of documents, credentials, advanced document processing, notary services and multimedia-specific security services, such as protection of intellectual property rights. Multi-party security and protection of user's privacy will receive prime attention. SEMPER will use and integrate existing architectures, tools, and services where appropriate. Early trials will be provided for WWW, and subsequent tests performed on ATM-based broadband networks to demonstrate the broad applicability of SEMPER's architecture and services. The SEMPER project is part of the Advanced Communication Technologies and Services (ACTS) research program established by the European Commission Directorate General XIII for 1994-1998. ACTS is the follow-on program for Research on Advanced Communications in Europe (RACE) 1987- 1994. The project will establish a Special Interest Group for Secure Electronic Commerce (SIGSEC) which will make results available to all interested parties, including standardisation bodies, and will co-ordinate related projects, in particular those funded by the European Commission. IBM's Zurich Research Laboratory will provide the technical leadership for the SEMPER project, and IBM France will act as co-ordinator. The other members of the consortium are Cryptomathic (DK), DigiCash (NL), EUROCOM EXPERTISE (GR), Europay International (B), FOGRA Forschungsgesellschaft Druck (D), GMD - German National Research Center for Information Technology (D), IBM European Networking Center (D), INTRACOM (GR), KPN Research (NL), Otto-Versand (D), r3 security engineering (CH), SEPT (F), Stichting Mathematisch Centrum / CWI (NL), University of Freiburg (D), University of Hildesheim (D). Banksys (B), Banque Generale du Luxembourg (L) and Telekurs (CH) are associated with SEMPER. For more information please contact Matthias Schunter Philippe Delaoutre Universitaet Hildesheim IBM France Mail: schunter(a)rz.uni-hildesheim.de Mail: FRIBMSPK(a)IBM.COM Tel. + 49 5121 883 788 Tel. + 33 1 49 05 61 12 Fax + 49 5121 883 732 Fax + 33 1 47 68 40 33 or see <http://semper.darmstadt.gmd.de/~semper> or <http://www.zurich.ibm.com/Technology/Security/extern/semper/>.

1 0

Re: POTP Security
by jgrubs＠left.webcasters.com 17 Dec '03

17 Dec '03

Path: left!jgrubs From: jgrubs(a)left.webcasters.com (Jim Grubs (W8GRT)) Newsgroups: alt.security.pgp Subject: Re: POTP Security Message-ID: <4uigeD3w165w(a)left.webcasters.com> Date: Sun, 12 Nov 95 09:17:02 EST References: <70LDeD1w165w(a)left.webcasters.com> Reply-To: jgrubs(a)left.webcasters.com (Jim Grubs (W8GRT)) Organization: WebCasters(tm) jgrubs(a)left.webcasters.com (Jim Grubs (W8GRT)) writes: > > What level of security does this cute, little puppy provide??? > Summary of e-mail responses >--> POOR TO NONE. Thanks, everyone. -- WebCasters(tm) James C. Grubs jgrubs(a)webcasters.com 6817 Maplewood Avenue Tel.: 419-882-2697 Sylvania, OH 43560 Fax: 419-885-2814 Internet consulting, HTML programming, Information brokering http:://www.webcasters.com/webcasters/

1 0

(no subject)
by Jaana Segerberg 17 Dec '03

17 Dec '03

[Prev][Next][Index] Pornography Server ---------------------------------------------------------------------------- * To: Cypherpunks Mailing List <cypherpunks(a)toad.com> * Subject: Pornography Server * From: "Robert A. Hayden" <hayden(a)krypton.mankato.msus.edu> * Date: Sun, 13 Feb 1994 12:23:28 -0600 (CST) ---------------------------------------------------------------------------- In response to the posting about setting up a pornography server (Sorry, I'm afraid I deleted the specific message so I cannot remember who you was :-). That is certainly a way for people to get and use PGP and to get used the remailers. It would get a lot of heavy use as well. Now, if there was a way to batch mailings (so that if, say, six people ordered one item, it would be sent as one letter to all six instead of six different letters, with precedence set to bulk), that would help even more. Now, there are also some practical considerations as well. What materials do you archive? If you put up pictures (gif or jpeg), you will be talking about tremendous amounts of traffic. Once they are uuencoded, even with compression, they can be huge. If you limit yourself to things such as stories and the like, you will have less traffic, but also less use. There is also the legal side of distributing pornography. Interstate transfer is naughty and with Al Gore's Information-Superhighway Patrol, it will raise some very political issues (but, by using a decent blind system, for all the patrol knows, the distributor might be in the recipient's state). Also, and this is really just an interface issue, scripts should be developed that will automate the retrieval process (ie, build and submit the mail message). These would be similiar to the hop.mail or anon.mail scripts, but would be custom to the pornography server. For example: It begins with an input for the file to be retrieved. It will continue prompting for that until the person enters a null (or 'q' or something) It will then list (at least) one dozen remailers, and they can select one (or take a default, and randomize it. Or perhaps randomize it through >1 remailer, although that decreases response time.). They will then have to PGP sign their mail message (so that the ordering software can verify the person placing the order. This is to cut down mail-spoofing to mail-bomb an enemy with porn.) Encrypt it for the appropriate parties Send it on its way. The server can either reply immediately with the appropriate files, or it can batch everything up for processing during low-traffic times (I personally like the first, but dont' really care that much). The mail is then PGP encrypted back to the recipient (by getting the key from a key server, or by having the orderee register their key before hand, with the latter probably being easier, although it does leave a paper trail that can be examined) and sent out with precedence set to 'bulk' so that other stuff is more important on the mail links. It should all be fairly accomplishable with a series of perl and sh scripts on either end. The real question is what to offer. I'll talk more about this from an organizational stand-point if anyone is interested. I'm afriad that I'm really not that good a programmer (even of simple shells) as my field of expertise is in management and other administrative stuff (but obviously not spelling :-) ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> In the United States, they \/ Finger for PGP 2.3a Public Key <=> first came for us in Colorado... -=-=-=-=-=-=-=- (GEEK CODE 1.0.1) GAT d- -p+(---) c++(++++) l++ u++ e+/* m++(*)@ s-/++ n-(---) h+(*) f+ g+ w++ t++ r++ y+(*) ---------------------------------------------------------------------------- * Prev: Re: A possible solution * Next: Pornography Server * Index: Cypherpunks

1 0

Re: ACLU Cyber-Liberties Update: Nov. 8, 1995
by James A. Donald 17 Dec '03

17 Dec '03

At 05:15 PM 11/8/95 -0500, ACLUNATL(a)aol.com wrote: > According to the government's own statistics, 1,800 innocent conversations > are intercepted each and every time a wiretap or other form of electronic > surveillance is placed. This seems curiously inefficient, even for government work. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

"conspiracypunks"
by nobody＠valhalla.phoenix.net 17 Dec '03

17 Dec '03

May have been silenced, but the Slick criminality story continues apace, and it's fitting that the most Nixonian president since Tricky himself should have a "Deep Throat," no matter how some of you feel about Orlin, who is, BTW, doing thejob the media claims to be responsible for. [Don't Flame C2]

1 0

Re: Timed-release crypto and information economics
by shields＠tembel.org 17 Dec '03

17 Dec '03

In article <199511091852.NAA01172(a)bioanalytical.com>, Beavis B. Thoopit <beavis(a)bioanalytical.com> wrote: > initialize buffer to '12#fjKL3_*(ASDdj1ll3_13 asdfasd-1-3!#!23' > do forever /* actually until the plaintext spews out */ > sleep 1 unit > for each element in the buffer > buffer[ element ] = magictransform( buffer[ element ] ) But the "sleep one unit" part is vulnerable, unless (a) the whole device is physically armored, which is probably not easier than armoring a memory chip; or (b) the process -- the whole device, not just a clock -- is based on some basic principle of physics that has time in the equation. -- Shields.

1 0

Re: Market Value of Web Pages
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Thu, 9 Nov 1995, Timothy C. May wrote: > At 6:51 PM 11/9/95, Bill Frantz wrote: > > >BTW - I don't think we should be talking about a penny/page cost because it > >is way too high for the current market. For example, my copy of Applied > >Cryptography V2 cost about $.067/page AND came with the media to keep it > >"forever". My (used) copy of Snow Crash cost closer to a penny/page and > >also came with the media. I would think that somewhere between 1/100 to > >1/10 of a penny/page is closer to the current market value of the page > >content. > > With all due respect to Bill--his mention of agorics tells me he knows > something about computational ecologies and markets--, there is no > reasonable way to say what price is "closer to the current market value of > the page content," except by what the market will bear! > > Yes, a paperback novel is a penny a page or so. But a 5-page consultant's > report that sells for $2000 has a "market value" to someone of $400 a page. > You can all think of all kinds of other examples. Actually, Tim, there are many examples we each could think of. As an example, I'm presently preparing an unsolicited Security Review report for a Fortune 500 company. It's *priced* if you will in the mid five figure range per page (and that includes the title page, the appendices, and the pages which say on them, "this page left intentionally blank"). (It's the short report ... the one which references RFC's rather than including them. The report that includes RFC's is priced significantly lower when measured by weight ... i.e. cost/page metering.) But the report's information value is truly *worth* a factor many, many hundreds of times what the invoice rate bears or what the cost per page would indicate. For me, my current report is in fact a loss leader. Since my report IS unsolicited, I really don't even have any real expectation that the invoice will be approved for payment. My invoice is not submitted on that basis. I realize that I might not even receive re-imbursement for my out-of-pocket expenses. The beneficiary might well think that the information is only worth the value of a promotional mug or of a promo T-shirt, or maybe even worthless. Alternatively, the company might offer a complementary copy of their product or even just info-freeload as Netscape did with those Berkeley hombre stud-muffins, some time ago. But the information within my unsolicited report is hopefully utilized none the less, no matter what financial consideration is extended, because the information is _actually_ priceless, even though the recipient might consider that information to have only a nominal or "no, or little compensable value". Information is interesting that way. Because information is/was provided to them "freely" most firms will not (generally) see any value in the information at all. They happily become information free-loaders. It's paradoxical and ironic in an information age. The huge bill I send out is, literally, the reality check. No honest person would expect to take a dress home from a shop without paying, but a lot of normally honest folk don't give a thought to taking an armload of free information. Which I guess is an interesting segueway into a basic briefing on "information value" theory. But that part will have to hold for a bit ... once I collect my thoughts on how information philistines and information connoisseurs have differing value judgments. The implications might surprise people. Alice de 'nonymous ... ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1

YOU_luz
by John Young 17 Dec '03

17 Dec '03

A gruel of high-tech privacy ghoulisms: Nov 4 Economist on burgeoning health services by "outsiders" like defense firms in which lucrative data banks on patients' rotting carcasses are abuilding for resale. Nov 9 W$J on a conference tut-tutting data banking of citizens' repulsive life styles. Nov 9 Financial Times on British Gov smarmily smart "transaction cards" banking citizens' pathetic fears. YOU_luz (19 kb)

1 0

Re: "Industry Group Rebuffs U.S. on Encryption"
by James A. Donald 17 Dec '03

17 Dec '03

At 09:04 PM 11/12/95 -0500, Duncan Frissell wrote: > There were no nation states or cops prior to 1600. > It is perfectly possible that there will be no nation > states or cops at some point in the future. To be strictly correct, there were no cops in the english speaking world from the time of the saxon invasions to the nineteenth century. There were however the functional equivalent of cops at some places, and some times -- mostly in societies that collapsed or sank into utter tyranny. One can reasonably argue that the persians and scythians etc were nation states, and that sometimes nation states existed during the dark ages and medieval period, but until fairly recently, most of what we now call western civilization regarded what we would now call a nation state as a rare, curious, and pathological aberration. I expect that we will soon once again regard them as pathological, and I hope that we will be able to regard them as rare. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0