December 2003 - cypherpunks-legacy

opps, sorry about that last post
by Ray Cromwell 17 Dec '03

17 Dec '03

I'm not really unsubscribing, I'm moving to a new host. Sorry about the noise. -Ray

1 0

Remailers, Feb
by Bruce Baugh 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've just finished my monthly round of type I remailer testing. This test doesn't include remailers announced after I started; they'll be inclued next month. (Also coming in March will be tests of at least one other nym server.) As in January, I sent posts from my PPP account here (at Aracnet, this time, rather than Teleport) through a given remailer to an account at alpha.c2.org, then back through the remailer to me. This is, by design, a very different sort of test than remailer pinging and the like; in the number of hops and chances for things to go wrong, I think it reflects actual usage much more closely. Trip time is the interval from being posted to mail.aracnet.com to arriving in my mailbox there. All times are given in hours:minutes. Posts were made at all times of day. Unsurprisingly, those made late at night (particularly in the midnight-to-6 am range) returned most quickly. I've included the January figures for comparison persons. I remain curious about the differences and eager to find an explanation. REMAILER FAILURES AVERAGE MINIMUM MAXIMUM hfinney(a)shell.portal.com February 00 00:45 00:35 01:00 January 00 00:08 00:02 00:38 hal(a)alumni.caltech.edu February 00 00:46 00:35 01:00 January 00 00:09 00:06 00:12 homer(a)rahul.net February 00 00:50 00:37 01:08 January 00 00:06 00:03 00:14 remailer(a)utopia.hacktic.nl February 00 01:10 00:47 02:03 January 00 00:19 00:03 01:20 remailer(a)tjava.com February 00 001:47 00:26 05:26 January not tested mix(a)zifi.genetics.utah.edu February 00 01:56 00:31 03:35 January not tested remailer(a)replay.com February 00 03:00 00:51 07:45 January 01 00:31 00:13 01:14 remailer(a)mockingbird.alias.net February 00 03:29 00:56 06:35 January not tested mixmaster(a)vishnu.alias.net February 00 04:29 00:40 11:27 January 00 00:56 00:23 02:38 mix(a)remail.gondolin.org February 00 06:30 00:40 12:52 January 08 11:37 03:58 18:36 mixmaster(a)remailer.obscura.com February 00 06:53 00:55 13:25 January 00 02:36 00:23 06:55 remailer(a)extropia.wimsey.com February 00 09:15 01:35 23:50 January 08 01:46 01:19 02:13 amnesia(a)chardos.connix.com February 10 January 10 pamphlet(a)idiom.com February 10 January not tested remail(a)c2.org February 10 January 02 00:52 00:14 03:00 remailer(a)bi-node.zerberus.de February 10 January 00 07:43 00:15 19:54 Mailers reported as down with no expectation of returning: hroller(a)c2.org remailer(a)armadillo.com Mailers reported as down with some expectation of returning: remailer(a)valhalla.phoenix.net / wmono(a)spook.alias.net I'd particularly like to thank the remailer operations who (mostly in private mail) answered a number of questions of mine. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMS02wn3AXR8sjiylAQEd/gfMD4FdgFNMh69P6nd4xdcPogD26zMi5RwQ JfraMZqG75ezMq4Z5kr1v5j77vNZZ2Bka5T0mR76TqYSPDzKGturPJNY1bSd7Cbn xUdpee43uo09+QdVpR/IGPKKjxH8qUhJC4X2WvHDlfTdNRCjItIQF2gkBJPRmknJ OCnHku/bMBs7sr+7OsQyMwvfQrkxpu3Wh/LYV/+U0vEWnCzFupOHQ9nnu+JSCaUu naFYlqP6w0Ywl6qeTAvRJPgx+PfVDk4B0WZHnXFi1p9IMDaQ7FysxH1pc2mPkURR M+rwz1ElfCMoMB4JiF5Y3r1aZAf9ES2HLz1sTcueji2S/g== =O4Sc -----END PGP SIGNATURE----- -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

2 1

Re: Remailers, Feb
by Bruce Baugh 17 Dec '03

17 Dec '03

At 11:07 PM 2/22/96 -0500, Bryan Strawser <bstrawse(a)copper.ucs.indiana.edu> wrote: >The differences here are because gondolin.org had serious DNS problems >in January that caused alot of mail to be bounced. Those problems were >rectified.. hence our traffic flows now... Thank you, Bryan! This is _precisely_ the kind of info I'm interested in. >The latency differences are normal for gondolin because we are not on the >net, we get our mail via UUCP one hop away from the internet itself. >Since our polling is fairly irregular, our latency will move up and down >from month to month. Makes sense. And I don't particularly care about variability as long as I have a sense of the boundaries. Which my tests define for me. :-) -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

Re: url
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Frantz wrote: > > At 2:52 PM 2/22/96 -0500, Perry E. Metzger wrote: > >Mike McNally writes: > >> At <URL:http://www.osf.org/~loverso/javascript/track-me.html> find > >> some interesting "surveillance" applications of Javascript.[..] > >When is the patch to let you disable JavaScript inside Netscape going > >to go out? Its more than time. > > Why Perry, it's called Netscape 1.1N. :-) I think the Options menu in Netscape allows you to disable it already. I only have the 16-bit version running, which doesn't allow it to be enabled anyway. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMS1dZioZzwIn1bdtAQEYcwGAvQEDB1b3YqAiiMFaKzDRzprnfLtTnkHp 7rlxQtd4VtToqDNb4aiDwgTKlgs0tP4+ =dUzI -----END PGP SIGNATURE-----

1 0

Re: "consent of the governed"
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "Vladimir Z. Nuri" <vznuri(a)netcom.com> wrote: >I tend to define government more liberally in that it does not >merely exist to protect rights-- Since it is a man-made, created entity, on what vision of reality would you justify the existing principles of our collectivistic-oriented govt? >the 20th century saw a rise in >government that tried to be a social force. The govt consists of a few individuals. >this may have failed, >but it does point out that people want a government to do more >than merely protect their rights. By 'peoples', do you mean productive population at large or a small bunch peoples who want their wishes to come true, no matter how many .38 special bullets it costs? > in other words, the 1776 definition >of government is reasonably slightly modified. ^^^^^^^^^^ ?!?!!! Would another adjective be more appropriate? >government in its >essence is a form of organized human collaboration/cooperation imho. Yeah! With, ultimately, a *gun* under every pile of red tape, just to make you "cooperate" more easily.... >it is a nervous system for a society. Yes! And it has epilepsy! JFA -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQCVAwUBMSzkYAOWptJXIUrtAQHdbwP+Kh7tCFRExtvWxxdkVG5nyuRDr8/PgAj6 jle8Rvh2ysGMwPyZguoBb8Hz0N9xp3pPEspAUcrvB6JsDo0mQUQ8Rf/zM420Yfvk 8xP5I/+H7PhZF8MbmjoFN3pIjywBi9YFykuLSlsg5snqBBSTi9EjcCiL79WfSpng oM4XVYmTgpc= =IQZn -----END PGP SIGNATURE----- **** NEW PGP 2.6.2 KEY ********* This key is actually suspended, as of Feb, 16 1996, was never distributed, and might be subject to deletion. Sorry for the trouble my mis-management might have caused. 2048 bits Key ID:24201BA1 1996/02/13 Jean-Francois Avon <jf_avon(a)citenet.net> Key fingerprint = 23 B6 24 31 86 67 FB 35 C7 A7 AF 12 A1 61 E9 3D **** OLD KEY: DO NOT USE ANYMORE UNLESS FOR VERIFYING SIGNATURES **** 1024 bits Key ID:57214AED 1995/10/04 Jean-Francois Avon <jf_avon(a)citenet.net> Key fingerprint = 84 96 76 AE EB 7C AB 15 88 47 87 B0 18 31 74 9F

1 0

Re: TIS--Building in Big Brother for a Better Tommorrow
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:19 AM 2/23/96, P.J. Ponder wrote: >The first paragraph here bothered me. If a user (or an organization) >needs to have access to data that was encrypted by an associate ( or one >of its employees) wouldn't sound practice require that the key not be >entrusted to just one person? I don't see the need for any fancy >"key-recovery" protocol with any outside entities. We can handle this ^^^^^^^^^^^^^^^^^^ >internally in my shop. Some keys I give a copy to Alice, and down the ^^^^^^^^^^^^^^^^^^^^^^ This is my perception, too, though I haven't been in Corporate America for almost a decade. Still, I would encourage people to take this position, that "we don't need no steenking key escrow!" (to borrow again the B. Traven phrase I used yesterday) >hall Bob has some, too. If I get hit by the bus, they can get my company >related data back. We don't need any "service" or "licensee" or "trusted >third party" or any of that, thank you very much. And we don't need any >one developing OTPs for us either, and we don't need government agencies >keeping copies of any of our keys. Bravo! And we should all remember, again, that basic observation: even if "key escrow" is needed to recover *stored* files, it sure ain't needed for *communications*!! The only entity that really has a compelling need for "key escrow" for _communications_ is Big Bro himself, nto companies or individuals. Think about it. TIS is just playing the shill role for Big Brother and the Holding Company. --Tim May THE X-ON CONGRESS: INDECENT COMMENT ON AN INDECENT SUBJECT, by Steve Russell, American Reporter Correspondent....You motherfuckers in Congress have dropped over the edge of the earth this time... "the sorriest bunch of cocksuckers ever to sell out the First Amendment" or suggesting that "the only reason to run for Congress these days is to suck the lobbyists' dicks and fuck the people who sent you there," ....any more than I care for the language you shitheads have forced me to use in this essay...Let's talk about this fucking indecent language bullshit.

1 0

Re: TIS--Building in Big Brother for a Better Tommorrow
by P.J. Ponder 17 Dec '03

17 Dec '03

Steve Walker wrote to John Young: (large piece snipped; good stuff though.) + Suppose the U.S. government had never thought of placing export controls on cryptography... We would now have widespread use of encryption, both domestically and worldwide; we would be in a state of "Utopia," with widespread availability of cryptography with unlimited key lengths. But, once in this state, we will face situations where we need a file that had been encrypted by an associate who is unavailable (illness, traffic jam, or change of jobs). We will then realize that we must have some systematic way to recover our encrypted information when the keys are unavailable. When we add a user-controlled key recovery capability to our Utopia, we find ourselves in an "Ultimate Utopia," with unlimited key length cryptography, widely available through mass market applications, and user-controlled key recovery. The first paragraph here bothered me. If a user (or an organization) needs to have access to data that was encrypted by an associate ( or one of its employees) wouldn't sound practice require that the key not be entrusted to just one person? I don't see the need for any fancy "key-recovery" protocol with any outside entities. We can handle this internally in my shop. Some keys I give a copy to Alice, and down the hall Bob has some, too. If I get hit by the bus, they can get my company related data back. We don't need any "service" or "licensee" or "trusted third party" or any of that, thank you very much. And we don't need any one developing OTPs for us either, and we don't need government agencies keeping copies of any of our keys. Am I in the state of utopia already, is this what "user controlled key recovery" means? I think it's just common sense and sound management practice. If you know that your co-worker/colleague/summer intern, etc is encrypting your business related data, you should make sure you can get it back if she doesn't come back from lunch. Let her keep her own PGP passphrase, though. That's her business. -- I am now going to push a button and cause this to quantumly re-assemble in California. Really two buttons (Ctrl-X). One observes, one measures. -- send message body: "unsubscribe cypherpunks yourmailbox@domain" to: majordomo(a)toad.com to drop off the list. Don't put it in quotes, tho.

1 0

Expect A Wave of Killings of Journalists....
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:36 PM 2/22/96, John Young wrote: > 2-22-96. TWP: > > "CIA Can Waive Prohibition Against Using U.S. Clergy Abroad > for Covert Work." > > A controversial loophole permitting the CIA to recruit > American journalists as agents also allows the agency to > waive a similar 19-year-old ban on employing clerics or > missionaries. An official also disclosed that CIA > regulations prohibit recruiting employees of members of > Congress or congressional committees "without the > approval of the member" for whom they work. I watched CIA Director John Deutch (or is it Deutsch?) explain today just how the rules are being relaxed on having journalists as CIA operatives, and I could practically hear a collective "Oh, Shit!" echo from the journalistic capitals of the Second and Third Worlds. Even when journalists were reporting to the intelligence agencies, they like the convenient fiction that such practices were forbidden. Even so, a couple of journalists were tagged by the governments they were spying on and disposed of. Expect this to increase. Except now it will likely be Russian Mafiosos garrotting the "Washington Post" economics reporter in the back alleys off the Arbat. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

NSA agent arrested
by s1018954＠aix2.uottawa.ca 17 Dec '03

17 Dec '03

I just heard a very short blurb on CBC radio about a KGB mole within the NSA from the 60's (?) getting arrested by the FBI. Pretty much no details were given. Any info? (Apologies if someone else has posted this today, I'm following the list from the hks archives, which I assume have a minor delay.)

2 2

Diffie-Hellman parameters
by Eric Murray 17 Dec '03

17 Dec '03

Perhaps this is the wrong list to ask this question on, but does anyone have any pointers to where I could find good Diffie-Hellman parameters? Or source code that will generate some? -- Eric Murray ericm(a)lne.com ericm(a)motorcycle.com http://www.lne.com/ericm PGP keyid:E03F65E5 fingerprint:50 B0 A2 4C 7D 86 FC 03 92 E8 AC E6 7E 27 29 AF

1 0