December 2003 - cypherpunks-legacy

Orlando Key Signing
by jpb＠miamisci.org 17 Dec '03

17 Dec '03

I recently moved to Orlando, FL and I would like to know if there are any cypherpunks in this area interested in getting together for a key signing. Joseph Block <jpb(a)miamisci.org> "We can't be so fixated on our desire to preserve the rights of ordinary Americans ..." -- Bill Clinton (USA TODAY, 11 March 1993, page 2A) No man's life, liberty or property are safe while the legislature is in session. 2048bit-Fingerprint: F8 A2 A5 15 56 42 9B 16 3F BD 57 0F 8A ED E3 21

1 0

Cybercrime & Privacy Issues AOL FBI discussion
by Alan Olsen 17 Dec '03

17 Dec '03

This will be of some interest to the people on this list... >From: freematt(a)coil.com (Matthew Gaylor) >Subject: Cybercrime & Privacy Issues AOL FBI discussion > >If you have an AOL account you may wish to join the below online discussion. > >Cybercrime & Privacy Issues > >On Wednesday evening, January 24, 1996 at 9pm EST in the Globe Auditorium >of America Online (AOL), Mobile Office Productions will be hosting a candid >interactive discussion with the FBI's Jim Kallstrom, who is working to >shape procedures regarding computer privacy issues and cybercrime. > >This topic is of vital importance to all of us and we urge you to join us on >January 24th at 9pm EST in the Globe Auditorium with your comments, questions >and experiences. > >************** E-Mail: freematt(a)coil.com ************ >Matthew Gaylor >1933 E.Dublin-Granville Rd., # 176 >Columbus, OH 43229 > >I maintain the Electronic Frontier Foundations' Online Activism Resource >List FAQ. An ACTION/EFF FAQ. Please send me sources of privacy/free-speech >civil-liberties advocacy and general online activism tool/resources. Please >send your hardcopy materials to my snail address. > >Available on the web at: http://www.eff.org/pub/Activism/activ_resource.faq >And archived at: ftp.eff.org, /pub/Activism/activ_resource.faq > >######################TANSTAAFL >"We can foresee a time when...the only people at liberty will be prison guards >who will then have to lock up one another. When only one remains, he will be >called the 'Supreme Guard; and that will be the ideal society in which >problems of opposition, the headache of all twentieth century governments, >will be settled once and for all." Albert Camus > > > Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "Is the operating system half NT or half full?"

2 1

Re: Article on E-money
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

> Hi- > > I'm a journalist writing an article for an on-line > magazine about emoney.Seeing your site on the web... > Hi, I have no Web site of my own. You probably saw my E-Money FAQ on someone else's site and thought I was the site manager. That's ok, you're not the first to make that mistake. > I was hoping I might ask you a few very general questions > about the future on emoney as you see it. My article is > called a "futureview" article, meaning it makes some > guesses at what changes people can expect because of new > technology. > I'll be happy to answer your questions as best I can. > -How will the adoption of e-money or e-cash change the > workplace? Will some kinds of businesses or practices > prosper while others fail? > > -How will emoney or ecash change people's daily lives at > home? (More home shopping?) > > -If you had to guess, what do you think the future of emoney > will be? > > -Are there any words of hope/caution you'd like people to > know? > > Thanks in adviance for any help you can give. If you have > more questions about myself or the artcle, feel free to > call or write me. > > Mary Leontovich xxx/xxx-xxxx email: maryl(a)efn.org > Rather than answer each question individually, I'll just ramble on about e-money for a bit and hopefully I'll convey some interesting opinions. The first thing to recognize is that there are two arenas to consider when discussing e-money; the on-line arena and the "about town" arena. I'll first discuss the "about town" arena. It will take a decade or more, but eventually e-money purchases will be as common as credit card purchases. People will carry e-money cards right along side their credit cards. Rather than handing over a few dollar bills, people will insert e-money cards into readers. ATM machines will provide an option to charge up e-money cards. Credit card systems and e-money system will co-exist, and in fact you will be able to easily transfer value between credit cards and e-money cards. It is quite likely that the major credit card companies will issue multi-purpose super-cards(tm) that can act as either credit or e-money cards, reducing the number of cards people carry. Paper money will never go away completely (unless government stops backing paper money), but there are a variety of reasons most people will switch from using paper money to using e-money cards: 1) The card can easily keep a record of all a person's e-money purchases. The record can be up-loaded into popular PC-based money management software. 2) The card can hold "change" and well as "large bills". No need to carry around a pocketful of coins. 3) The money in the card can't be spent unless the proper PIN number (or thumb print, etc) is provided. Paper money can be spent by any thief. Some e-money cards may allow you get reimbursed for lost or stolen e-money. Others may only be able to "void" the lost money. 4) Some e-money system may allow you to make back-up copies of your e-money, in case the card gets damaged. 5) Paper money wears out, gets torn, etc. 6) Paper money, even in moderate quantities, is bulky. 7) Paper money has to be counted, and people must wait around while change is tallied up. Mistakes could be made. E-money cards will be relatively fool-proof and will work as fast or faster than current credit cards. And now the online arena... People will be able to purchase inexpensive devices that can be connected to their PC to transfer e-money from card to computer, and vice versa. This device may become a pseudo-standard peripheral, much like a sound card is today. People will be able to purchase items securely over the Internet using either credit card numbers or e-money. A good question to ask might be "If people can make secure credit card purchases over the Internet, why would they use e-money over the Internet?" There are a variety of reasons people might use e-money rather that credit cards online: 1) The item may cost only a few pennies, or less. Not enough to warrant using a credit card. 2) The vender may not accept credit cards. 3) You may not wish to give the vender your credit card number until you have established that the vender is trustworthy. 4) You may wish to pay in "cash" rather than add to your credit card balance. 5) You may wish to avoid revealing your "about town" identity to the vendor. Why might a vender accept e-money, but not credit cards? Well, it costs money to accept credit cards. It will probably cost less money to accept e-money. Very small companies that exist only on-line may not want to pay the expense to hook up to the credit card infrastructure. Cheap e-money will lower the barriers to entry for online business. Huge numbers of very small players will come online. The meaning of the term online "business" will change as it becomes easy and economical for individuals to charge very small amounts for data or services. When something become cheap and easy (ala World Wide Web), it will become very popular. When it is also a way to make money, it will become common-place. Most everyone with a PC will find a way to make a little money on the side by selling something online. Maybe people will sell idle CPU time or unused disk space on their home PCs to people using future Java-like distributed applications. All this new economic activity will of course be taxed. That is, if government has any say in the matter. And you can be sure government will do its best to have a say. From reading my E-money FAQ you know there are two possible kinds of e-money systems: identified and anonymous. For both tax reasons and law enforcement reasons, governments will do their best to insure that anonymous e-money systems fail in the marketplace. Perhaps by outright banning them, or by subsidizing identified e-money systems, or by not insuring bank accounts that accept anonymous e-money, or by mandating accounting or identification systems that preclude the use of anonymous e-money. I'm sure there are other tactics government could use. Should people care? What's so bad about identified e-money? What's so good about anonymous e-money? Most people don't seem terribly upset about the personal information they reveal by using credit cards so it is reasonable to assume most people will not be upset about the personal information they reveal by using identified e-money. I predict that anonymous e-money systems will not fare well in the marketplace for the following reasons: 1) Government pressure against anonymous e-money. 2) Identified e-money systems are easier to build. 3) Certain technologies necessary for anonymous e-money are patented. E-money system builders will tend to roll their own identified e-money systems, rather than pay fees or royalties to the patent holders. 4) The financial risks associated with anonymous e-money are more complex and harder to evaluate than the financial risks associated with identified e-money. The conservative money will tend to back systems with the lower perceived risk, even if the risks associated with anonymous e-money are manageable. 5) Identified e-money systems can provide the same external features and conveniences as anonymous e-money systems and will most likely become widely deployed sooner than anonymous e-money systems. Once people become accustomed to identified e-money systems, it is unlikely they will push for a change to anonymous e-money systems. It is hard for me to explain the reasons why anonymous e-money is preferred over identified e-money. The reasons fall into the "Do you trust government, or not" category. "Do you want the government to know about every penny you spend?" These sort of concerns are easily dismissed as alarmist. After all, say many people, if the government gets out of hand we can just vote in different law makers. That's how democracy works. Well, I don't believe it would be that easy. Imagine how hard it would be to get rid of social security cards. The information conveyed via identified e-money is directly useful to tax agencies and law enforcement. The information has other governmental and commercial uses, too. As with social security numbers, the infrastructure that utilizes identified e-money information will become larger the longer the systems are in use. After a time, it will take a ideological revolution to convince government and business it must do without such detailed personal information. And revolutions, ideological or otherwise, are never painless. I hope I'm wrong and identified e-money is nothing to worry about. And maybe big government can be trusted. :-) Jim_Miller(a)suite.com P.S. I CC'ed this reply to the cypherpunks mailing list. You might get additional replies from people on that list. ____________________________________________________________________ The Internet is a land bridge for memes ____________________________________________________________________

1 0

A Modest Proposal: Fattening up the Proles
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:57 AM 1/17/96, tallpaul wrote: >-- >tallpaul > >"To understand the probable outcome of the Libertarian vision, see any >cyberpunk B movie wherein thousands of diseased, desparate and starving >families sit around on ratty old couches on the streets watching television >while rich megalomaniacs appropriate their body parts for their personal >physical immortality." > R. U. Sirius > _The Real Cyberpunk Fakebook_ The absurdity of this point is obvious to anyone with a brain. Why would we want the donors to be "diseased" and "starving"? It is imperative that donors be healthy and non-anorexic (we used to use the phrase "fattened up," but this is no longer au courant). To keep the proles reasonably healthy, the plutocrats are encouraging the current wave of exercise videos, ThighMasters, Buns of Steel, etc. And lots of beer, as the Kobe beef quakers have shown. Other than this, R. U. has it about right, I think. (Ironically, I brought up the new book, "The Winner Take All Society," at the last Cypherpunks meeting. No time to discuss it here, but it confirms my strong belief that we are heading for a economy in which a shrinking fraction of workers have really valuable things to contribute, and a growing fraction of the population does not. I had not recalled the authors, but Strick had a battery-powered laptop and Metricom wireless modem, and ran an Alta Vista search from where he was sitting: ROBERT FRANK & PHILIP COOK, The Winner-Take-All Society, New York: The Free Press.) This may shock some of the newcomers here, who haven't heard this, or who haven't deduced it from our posts, but many of us are elitists. Or, more precisely, we are for people looking out for Number One, with the expectation that many other people simply won't make it. Think of it as evolution in action. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: A weakness in PGP signatures, and a suggested solution (long)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: ckey2(a)eng.ua.edu (Christopher R. Key) >First of all, if the recipient is a newsgroup, why would that particular information need to be part of the signed information? If you post to a newsgroup a message that is only signed (as opposed to encrypted also), then you are obviously not worried about who reads it. The signature is only a method of proving that the important text (message) is unchanged and intact, and that the person who it is supposed to be from is the same who signed it. -------------- How about proving that you _weren't_ spamming? I.e., an enemy spots a message on a newsgroup from you with a signature, then duplicates it with header modifications on 500 newsgroups including news.admin.net-abuse.misc (to add insult to injury). Sorry if a bunch of other people have pointed this out by the time my message gets to toad.com, but... -Allen

1 0

remarkable recent stories
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

I haven't seen much dialogue on some key things that have popped up recently of high relevance to this list; forgive me if these are covered in threads (inappropriately named?): 1. GNN had an article in which Madsen (puzzle palace coauthor I believe) stated that the NSA was trying to restrict anonymity by working behind the scenes with Lotus, Microsoft, etc. major meat for TCM's "NSA visits" compendium assuming he's still working on it. also, it sounds like the most direct evidence that the NSA is working against anonymity in cyberspace, something that really surprises me. 2. the same article had Madsen stating that the NSA is vacuuming down Internet traffic. he gave the likely entry points that they are doing this. this is one of the first major credible insistences I've seen that the NSA is doing this. (there are of course a bazillion urban legends that the NSA does this). Madsen claimed that some private companies were getting contracts for the work. hmmmmmmm, possibility of some cyphersabotage here, like what went on with mycotronix? (sp?) 3. the absolute biggest blockbuster of them all: the NSA supposedly did a study about how crypto regulations affect US competitiveness in the international marketplace and *concluded* they were damaging it. (surprise!!) the Commerce Dept. has recommended *easing* export regulations. this is very notable for several reasons: - The NSA would probably not release the study unless they were hinting at a new policy decision. they do a bazillion studies surely but none of them see the light of the public day. why would they release *this* one? - the commerce dept is probably heavily influenced by the NSA-- i.e. I doubt that they would come out with a favorable recommendation for crypto unless the NSA approved. however, on the other hand, in the articles there was a caveat that "if the military and spy agencies allow it". not sure what was meant by that. - what I wonder is if the same NSA study was more comprehensive and tried to look at the overall implications of current or altered crypto export policy. i.e., did they try to address the question, "what would really happen to overall US situation if crypto were unregulated? would it mean better business? more or less crime?" etc. I have said this before, but everyone seems to *assume* that unrestricted crypto necessarily releases the 4 horsemen of the infocalypse, but what if an actual *study* was done, that potentially *contradicts* this idea? there are many examples of new technology being introduced that has an effect far different than that anticipated by the masses or the conventional wisdom, and often much more benign than expected. - what this all suggests to me is a possible major policy/political switch inside the NSA in which possibly someone who is more in favor of code making than code breaking is gaining the reigns. its tough to guess based on the NSA's entrails, but recent events are some pretty odiferous entrails, I'd be interested to here what others think.

3 2

Ooops
by Johnathan Corgan 17 Dec '03

17 Dec '03

Some rather, uh... uncreative bash scripting resulted in my trashing beyond reasonable repair all my inbox mail for the last half a day or so. Looks like there were a few posts from some list members--please resend any important mail. Thanks. -- Johnathan M. Corgan jcorgan(a)aeinet.com http://www.aeinet.com/jcorgan.htm

1 0

RE: FW: Net Control is Thought Control
by blanc 17 Dec '03

17 Dec '03

From: Vladimir Z. Nuri "how can you be so sure that the cypherpunks lists is really what you think it is?" 'Cause I'm real, real smart. "a bunch of people from around the country independently interested in crypto?" "An effete corp of impudent snobs who fancy themselves intellectuals." (Spiro Agnew) "an agent provacteur, or agent saboteur, could create a vastly different perception regardless of the input of other people." It's true there are juveniles who occasionally disturb the list, but I expect that most members have a real interest in the subjects discussed and wish to bring out pithy points of truth & wisdom for all to behold, taking full credit for their contribution to the general atmosphere of learned intelligence. People have to grow up from childhood, Nuri-logical, and even then it's possible to be mistaken & to be misled. But there is no substitute for work, for the work of thought, which is the only means any human being has to solve the problems of living as a conscious, sensitive being. The only way to deal with all of the problems you mentioned is to continue to work to solve them in the way which will be most satisfactory to moral creatures. .. Blanc

1 0

RE: Spiderspace
by Kurt Buff (Volt Comp) 17 Dec '03

17 Dec '03

I think Tim was referring to someone gleaning your private key, which would be a Disastrous Thing (tm). If that's not what he was referring to, I still think it's a possiblity. Kurt ---------- From: Martin Diehl[SMTP:mdiehl@dttus.com] Sent: Tuesday, January 16, 1996 13:59 To: cypherpunks(a)toad.com Subject: Re: Spiderspace On 1/16/96 12:35 PM, tcmay(a)got.net (Timothy C. May) at Internet-USA wrote: > I've been thinking a lot about the problems and opportunities that are > coming up as more and more "spiders" (Web searchers, crawlers) are > indexing directories and files on systems they can find. [snip] > Sure enough, a search of "Cyberia-l" in Alta Vista showed all sorts of > hits, including what appeared to be several _private archives_ of parts > of the traffic. (By "private" I mean in the sense that they were > someone's personal archives, and not necessarily complete or even > semi-officially sanctioned.) [snip] > I've started to look for things like PGP files laying around buried in > subdirectories. I can imagine attacks based on this. [snip] > Fourth...left to your imagination. > --Tim May > We got computers, we're tapping phone lines, we know that that ain't > allowed. > ---------:---------:---------:---------:---------:---------:---------:---- > Timothy C. May | Crypto Anarchy: encryption, digital money, > tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero > W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, > Higher Power: 2^756839 - 1 | black markets, collapse of governments. > "National borders aren't even speed bumps on the information superhighway." I gather that it would be a Bad Thing (TM) to have someone get both the encrypted and clear text forms of your message (from either you or from the recipient) Maybe regularly changing your encryption keys is a Good Thing (TM) Martin G. Diehl

1 0

Re: [NOISE] Re: Eggs at Customs (fwd)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"llurch(a)networking.stanford.edu" "Rich Graves" 16-JAN-1996 00:12:29.92 >Morality has nothing to do with it. It's the speed of the evolution. If you walk across the straits, the system has the time to react and restore a dynamic equilibrium. If you immediately release a new species with no natural predators, the system is shattered, and it might not survive. This is not to say that ecosystems and societies are static -- they evolve constantly, displaying unpredictable punctuated equilibrium (Steven J. Gould was right, Edmund Burke and Karl Marx were wrong). ------------- A few things from the biological point of view (and I _will_ try to bring in a bit of cypherpunks relevance). First, if the ecosystem were as unstable as the Greens in the 1960's and later kept predicting (Silent Spring and all that), it would have collapsed already. Look at how many species we've taken out already. Second, almost all ecosystems that are that vulnerable (to extinction of a keystone species or to import of something that starts eating) are small ones that don't really matter in the long run. For one thing, the more biodiversity _within_ an ecosystem exists, the more likely it is that something from outside (or something removed from within) will have a control (or a replacement). In other words, there are fewer and fewer true keystone species as the internal biodiversity of an ecosystem goes up. ------------- [...] >Cute cuddly seals and frieldly dolphins and teddy bears get "sympathy" among mainstrean "environmentalists," and the Sierra Club and World Wildlife Federation calendars raise a lot of money, but it's the plants and bugs and bacteria that are really important. Elephants and blue whales look big and important to us, but they're really inconsequential in the larger scheme of biodiversity. They could go extinct and the planet doesn't really care. But kill the blue-green algae and the trees, and we're all dead. ------------- The algae? Sure, they're important... they're also thoroughly likely to not be affected significantly. One, they've got so many things acting on them in the first place. Two, there is quite a bit of diversity within the algal group. What takes out one strain (I have always had my doubts about "species" with mitotically reproducing organisms) is unlikely to take out the rest... and they mutate quickly enough to give rise to more strains pretty rapidly when one "niche" is freed up. The trees, on the other hand, are in the classification of "nice to look at but not really neccessary," like the elephants. They're a great carbon _sink_, but they don't really do that much CO2 recycling. And even if they were... we can replant trees very quickly. It's the rain forests and the old growth forests that are hard to replace as such. Cypherpunks relevance? Well, digital cash and encrypted messaging make it a lot easier to do the type of deals you're talking about... they also make it harder for people to place irrelevant prerequisites (like "not from rain forest land") on their purchases. So far, most of the anti-cypherpunks arguments have come from the conservative side. Be prepared for some from the liberal environmentalists (as well as the liberal socialists who want to keep lots of tax dollars flowing). -Allen

1 0