December 2003 - cypherpunks-legacy

Re: In pursuit of the perfect frisbie (was NSA flying disk...)
by Ed Carp (ecarp＠netcom.com) 17 Dec '03

17 Dec '03

> To: cman(a)communities.com (Douglas Barnes) > Cc: cypherpunks(a)toad.com, turner(a)TeleCheck.com > Subject: In pursuit of the perfect frisbie (was NSA flying disk...) > Date: Mon, 11 Dec 95 14:33:26 -0600 > From: turner(a)TeleCheck.com > I spoke with Mr. Cisco for several minutes, but he stated that the > NSA would not be at any trade shows in the Southern United States > any time soon. He did state that they would be in Salt Lake, sometime > in the near future. Did he mention a specific data and place? I still have friends in SLC... :)

1 0

Crypto-opponent senator to run for president?
by Declan McCullagh 17 Dec '03

17 Dec '03

[Sen. McCain, chair of Senate Commerce, is dancing around the idea of running for president. Folks who are interested in privacy may remember that he was more than slightly involved in the McCain-Kerrey bill. His committee approved it, which derailed pro-crypto legislation in the Senate. Not only that, he seems to be holding onto the bill (not reporting it) to prevent any other committees from improving it. Judiciary in particular would like to consider it. Note they wouldn't make it a //good// bill, just not quite as bad. --Declan] *************** 19 MCCAIN: PRESIDENTIAL AMBITIONS? Washington Times' Hallow notes that "the first words" out of Sen. John McCain's (R-AZ) mouth at a 9/19 luncheon with political reporters "alluded to his running for higher office." Noting that he had "slimmed down," McCain joked: "Anyone who wants to be emperor has to do that, and I'd much prefer that than president." McCain "acknowledged" that "he is positioning himself ideologically somewhere between" NC Sen. Jesse Helms and ex-MA Gov. Bill Weld (9/19). McCain responded to Hallow's story during C-SPAN's "Washington Journal": "I was asked if I was considering running for President of the United States and I said exactly what I've been saying for a long time now, exactly that. I said I will examine the option in 1998. ... I don't have a PAC, I don't have a committee, I don't have an organization. I don't have any of the accouterments that go to a presidential campaign and I don't intend to have one unless I decide to run" (9/19). USA Today's Lawrence profiles McCain. Does he think about running for president? "Nightly," he jokes. McCain "says the one-word description of his candidacy is 'impractical.' He reels off complications," from his Senate race, late start and opposition to ethanol subsidies to his support for MFN for China; "from the risque past he knows would arise in a national campaign to his sense that Americans do not long for 'something different than the standard politician'" (9/19).

1 0

Re: Third generation privacy
by Ed Carp (ecarp＠netcom.com) 17 Dec '03

17 Dec '03

> Date: Mon, 11 Dec 1995 15:50:23 -0500 > To: cypherpunks(a)toad.com > Subject: Third generation privacy > From: tallpaul(a)pipeline.com (tallpaul) > On Dec 11, 1995 13:07:22, '"Ed Carp (ecarp(a)netcom.com)" > <khijol!netcom.com!ecarp>' wrote: > > >Another, not-so-obvious reason to encrypt stuff, especially stuff > >that goes out over the net, is that folks can suck your email off the > >net and gather all sorts of useful information. This has all kinds > >of annoying implications, especially for people who gather > >demographics and other data for constructing email lists for sale. > > > >-- short ed > > Another related issue is what I'll call "third generation" privacy. This > exists when I want privacy not for myself or even the person with whom I'm > communicating but to protect the privacy of innocent third parties. E.g.: > > Grandpa is getting senile and I'm communicating with a second family member > > on how we should handle the problem; > > My friend Jane was just raped and I'm communicating with a mutual friend > about how we can help her. > > The anti-freedom forces have tried to define the parameters of the debate > inside the boundaries of the "four horsemen." We need to understand that we > > do not have to remain within those false boundaries and, in fact, it is > very good not to. I run a sexual abuse survivor server, in which issues like these arise almost daily. Anonymity and privacy are very important issues for these folks - for some of them, their survival depends on it (whether or not this is a provable issue is irrelevent). I try, as best as I can, to provide an environment that encourages trust and openness by discouraging cheating - but the fact remains that people's trust in the server and the services it provides is a function of people's trust in *me*. It would be, as Doyle might say, "simplicity itself" to violate people's privacy by reading their email, or watching their screen as they type, and I'd like to *not* have that ability, but the fact remains, I do. I wish it weren't so - people should be able to have a place to go whereby their anonymity and privacy can be guaranteed, without having to trust the operator at all. Zero-knowedge protocols can help, I suspect, but the fact remains that they have to trust *me* at some point in the process, much as people have to trust the folks running First Virtual and the other people doing the digicash thing. I think that Pegasus with PGP will go a long way towards helping. If someone is just using the server to store encrypted email and route end-to-end encrypted packets, then I'm "out of the loop" so to speak, and can concentrate on providing a common carrier service iostead of having the risk associated with being a publisher. Most of these folks who use my server are pretty "computer illiterate" - the fact that some of them can even log in and send email is a miracle - no slight intended. The point is, they need a *simple* solution to that privacy problem. By the way, there's a well-known anonymous server whose operator does *not* have the same viewpoint, and considers himself a publisher, but doesn't recognize the inherent associated risks. To him, people are using his system, and so he has the right to "see what goes through his system." To me, this places both himself and the people who use his server at grave risk. He is setting himself up for a massive court fight, and they are setting themselves up to having their privacy being violated. I'd rather not take the risk, myself, but I suppose he has nothing better to spend his money on than lawyers.

1 0

No Subject
by David Klur 17 Dec '03

17 Dec '03

Is the Cafe e-cash system different than Mondex? If so, how? Also, does anyone know when the Mondex trial will start in Delaware? -----BEGIN PBP SIGNATURE----- Version: 1.0.0, Copyright 1995, Pretty Bad Privacy David Klur dklur(a)dttus.com I am who I am because I say so. So there. -----END PBP SIGNATURE-------

1 0

From Me.
by 25160516＠07109.com 17 Dec '03

17 Dec '03

$)C Me: "Do you own a personal computer?" You: Yes. Me: "Running Windows ver 3.xx or 95?" You: Sure:. Why? Me: "Wanna' make $10,000 cash in the next 60 to 90 days?" You: Who wouldn't? Me: "Without leaving home?" } You: Really? What's it about? Me: "I own a software program that explains the business? Do you want to download a FREE evaluation copy?" You: Are you going to tell me what it's about? Me: "That's not the way I work. The answers are in the software. Do you want to download it?" You: Looks like I've got nothing to lose. OK! Where is it ? Me: "Just click here: ----> http://207.213.38.77/megaresource/ or if by chance you are unable to download it, just call 714-280-0996 and I will email it to you and if that won't work; I will mail it to you on disk." You: Ok. Works for me. To learn about promoting your product, service or income opportunity with email marketing, please call 714-280-0996. If you are not interested in home business opportunities, you can be removed from my mailing list by sending an email to removemega(a)usa.net No subject line or message is necessary, simply send it and you will be automatically removed from my mailing list.

1 0

Pornographic stories
by A&SUser 17 Dec '03

17 Dec '03

Hey, I'm Molly, and I know I sent you a bit of mail a couple of days ago. I'm not sure how you do your Pornographic server, so I'll just ask again. I know I would be VERY gratful if you could send me any XXX stories, I love to read them. I could reward you over the net somehow I'm sure. my adress is mphillips(a)cctr.umkc.edu Thanks....I'll be waiting.

1 0

Swiss Bank Accounts Secrecy Lifted
by Martin Minow 17 Dec '03

17 Dec '03

Summarizing an article on the Svenska Dagbladed web page: Swiss bank accounts are no longer good for hiding illegal money. The Swiss government has, for the first time, paid money smuggled out by a former dictator to the country's current government. The Swiss government returned about $2 million that was hidden in a Swiss bank account by Moussa Traore, former dictator of Mali. Processes are currently underway regarding Zaire's former dicator Sese Seko Mobuto and Phillipine dictator Ferdinand Marcos, and several others. Martin Minow minow(a)apple.com

1 0

Re: Questions for Mark Twain Banks
by Mark Twain Ecash Support 17 Dec '03

17 Dec '03

At 02:37 AM 12/11/95 -0600, Sean Donelan wrote: >The St. Louis Internet Users Group is doing a meeting on digital cash >on Monday, Dec. 11. Since Mark Twain Banks is located in St. Louis, >they've been invited to send a few speakers on the topic. It is probably going to be me... --Lucky Green --Mark Twain Bank Ecash Support Ecash. The secure Internet payment system that protects your privacy. <http://www.marktwain.com/ecash.html>

1 0

Re: NSA rigs Crypto machines according to Balto Sun
by pcw＠access.digex.net 17 Dec '03

17 Dec '03

At 11:14 AM 12/11/95, hallam(a)w3.org wrote: >>So, is this what happened at Crypto AG? Is this what happened at >>Netscape? We may never no for certain, but there is a final >>warning for the folks at Netscape that is buried the Sun's >>article about Crypto AG: > >No it is nothing like what happened at Netscape which was a common or >garden cock up. It was simply the result of miscommunication between >two groups of people being the original and new security team. Taher >et al thought that the random number seed was OK because they discovered >a design document describing it. Unfortunately the code had not been >written to implement that design. > > Phill Thanks for the deeper insight. Sure it was probably a mistake. But someone made the decision to write code that didn't conform to that design document. That person was probably saying, "Random number generator. Cool. I can use the standard C library." or whatever. But that person could have been saying, "Hey, if I slip this in then I'll be able to snag the session keys with impunity." We'll never know for sure. -Peter

1 0

Re: The Elevator Problem
by David E. Smith 17 Dec '03

17 Dec '03

At 05:29 PM 12/11/95 -0500, it was written: >[...] >> but since the contents of the key were never >> touched on DIRECTLY, no eavesdfropper could determine the key, > >No, the integrity of the system really depends upon the quantum properties >of light. Among other things, Heisenberg's Uncertainty Principle makes it >impossible for Eve to "eavesdrop" on the photons without affecting them >measurably. > Disregarding the "quantum properties of light" issue, if Eve can listen in on every communication between Alice and Bob about their keys, then doesn't she have enough information to reconstruct the key herself? The way I understand the system, in order for Alice to have Bob's key (and vice versa) they each have to transmit a considerable amount of data about their keys. Even if those data are in the form of "twenty questions," neither knows anything about the other's key at the start. Is there something painfully obvious that I'm missing? >In this situation Eve can read the email traffic without modifying it, so the >game is up. Exactly. Dave ----- David E. Smith, c/o Southeast Missouri State University 1210 Towers South, Cape Girardeau MO USA 63701-4745, +1(573)339-3814 PGP ID 0x92732139, homepage http://www.midwest.net/scribers/dsmith/ Quote: "And if we change, well, I'll love you anyway" - Alice In Chains Dec15-Jan15: (618)244-3340/2209 Perkins, Mt Vernon IL 62864

2 1