December 2003 - cypherpunks-legacy

New type2.list/pubring.mix (revisited)
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Everyone, The corrected (downed remailers deleted) type2.list/pubring.mix combination is available on jpunix.com. This list now contains only remailers that have responded to pings sent out by myself and by Raph. I'll automate this shortly to insure that the remailers on the list actually respond to traffic. Apologies to ecafe for saying it was down. It was poor eysight on my part. John Perry - perry(a)alpha.jpunix.com - PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCUAwUBMb1PQ1OTpEThrthvAQHn7gP4rHjupKUM4hWPsbFIxdXWk09KdEZLbpK3 uumHpAlApXfu7n9umOG1evxp9SRy9yUg3PvtV5pHtMGcebv8ngpQEzDekC55RCBz Rghon7Rqknte+9eRbpbqhq1e/LAzebxwJv+vRSOkYEOmiq6KWdhQ0LZyGjV1VfHA D/eWCOf2ig== =w/xe -----END PGP SIGNATURE-----

1 0

[Fwd: public key expert witness wanted]
by Gary Howland 17 Dec '03

17 Dec '03

>From sci.crypt: Subject: public key expert witness wanted From: schlafly(a)bbs.cruzio.com Date: Mon, 10 Jun 1996 05:37:34 GMT Keywords: public key expert witness wanted Newsgroups: sci.crypt,misc.int-property,talk.politics.crypto Organization: Cruzio Community Networking System, Santa Cruz, CA Reply-To: schlafly(a)bbs.cruzio.com Sender: news(a)cruzio.com (The News User) Xref: beta.nedernet.nl sci.crypt:44606 misc.int-property:17035 talk.politics.crypto:17141 My lawsuit against Public Key Partners has a trial on the scope and validity of the Stanford patents scheduled to begin in San Jose, Calif, on Sept. 3, 1996. I am looking for an expert witness. Requirements: * credentials which will impress the court. * live within driving distance of San Jose. * thorough understanding of Diffie-Hellman exponential key exchange, Hellman-Merkle trapdoor knapsack, and related public key crypto. * willing to face hostile lawyers in depositions, and testify in court. * must enjoy this sort of thing enough to do it for free. I am not looking for a mercenary hatchet man. (Contact RSADSI or Cylink if that's what you are.) Just someone to explain the inventions, and give opinions as to what can reasonably be deduced from particular disclosures. For more info on the lawsuit, and on contacting me, see http://bbs.cruzio.com/~schlafly#pkpsuit Roger Schlafly

1 0

Re: Anonymous return addresses
by Hal 17 Dec '03

17 Dec '03

From: "Robert A. Rosenberg" <hal9001(a)panix.com> > If the message is split into more than one part (to meet the message size > requirement) there is some potential leakage to each server of what message > is being requested. If User a requested 3 messages, then they MAY be > requesting all three parts of a 3 part message (or 2+1). If a record is > kept of the number of requests over time, then there can be some regression > checking based on the ID (ie: If the number of new messages for ANx in the > DB matches the number that User Y requests in the current session). I may > be in error with this thought but it looks like a possible problem. Yes, this is a good point. It might be addressed by having the later parts of a multi part message not be identified with the anon ID of the receiver, but rather with a random message label which is revealed to the receiver in the first part of the message (encrypted, of course). Then the database owner could not tell which message parts went together just by looking at the messages. Arrival times might give this away, though, if all parts of a multi-part message were sent at about the same time. > >Messages would have a finite lifetime and would expire and be removed > >from the database after a while. The authors propose breaking the > >database up into batches with a fixed number of messages, but I don't > >fully follow the reasoning behind this. I guess it reduces the load on > >the server when it does its XOR's. > > This can also affect the "attack" I speculated on above since it can "leak" > more info. Multi-part messages (or multiple messages to the same recipient) > which are retrieved in one session can be correlated between the groups > (ie: User Y asked for 5 messages [Selected from Groups 1&5] and ANx is the > one AN? that has the requested number of messages in each of the Groups > [ie: 3 from G1 and 2 from G5]). Yes, there is a tradeoff with the batch size between efficiency and privacy. The multi-part message issue does seem to make the problem potentially worse. Maybe it would be necessary for anonymous receivers to mostly receive small messages, and/or make the message granularity relatively large. Some of these kinds of volume- or correlation-based traffic analysis techniques can be countered by requesting dummy messages, ones which the receiver won't be able to read. If he asks for five messages every day from that day's batch then it doesn't leak any information about which ones are for him. Asking for a random number averaging five may work even better, if occasionally he really needs to read six. Hal

1 0

Re: Terrorism Hysteria on the Net
by Dale Drew 17 Dec '03

17 Dec '03

I think we are in violent agreement.... The item of issue, between physical and virtual terrorism attacks is the fact the government either is, or wants to give the distinct perception that they are, ill-prepared to counter for the types of potentials wide-spread Internet-based virtual attacks. And that the intelligence channels they have in place to detect possible movement of physical attacks may not fit the "Internet" model. In addition, the US legal system is ill-prepared to deal with the prosecutory issues surrounding this type of "terrorism". =============================================================== Dale Drew MCI Telecommunications Manager internetMCI Security Engineering Voice: 703/715-7058 Internet: ddrew(a)mci.net Fax: 703/715-7066 MCIMAIL: Dale_Drew/644-3335 At 11:02 PM 6/10/96 -0500, snow wrote: >On Mon, 10 Jun 1996, Dale Drew wrote: >> At 07:21 PM 6/10/96 -0500, snow wrote: >> >On Wed, 5 Jun 1996, John Young wrote: >> >> "You bring me a select group of hackers and within 90 days I'll bring this >> >> country to its knees, " says Jim Settle, retired director of the FBI's >> >> computer crime squad. >> > Give me 15 well trained soldiers(near special forces level) and I >> >can do it in less than 60 days. Without touching a computer. >> To understand where "They" think they are coming from, you have to compare >> Apples-to-Apples. The concern is the medium of choice; the Internet and it's >> high availability of anonymity, coupled with its access to large amounts of >> computer systems available via one virtual channel. > > Preaching to the choir, but once again it is a case of nothing >new. The potential for economic terrorism is not significantly larger >given the existance of the internet than it was before. This is what needs >to constantly be drummed into the technically dis-inclined, that the same >problems exists off the net that exist ON the net. > >> A well orchestrated and well researched attack by the right folk, as the thought >> process goes, could in-fact, potentially affect large amounts of critical >> computer systems within a short period of time. And while the government >> has inroads available to identify potential physical terrorists threats, >> they do not feel as prepared for the virtual ones. > > I would think that shutting down power to New York City for more >than a couple of days would pretty much throw the economy into a fit. > > I would go so far as to say that you can cause MORE havoc in the >physical arena than the virtual. > > >Petro, Christopher C. >petro(a)suba.com <prefered for any non-list stuff> >snow(a)crash.suba.com > > >

1 0

Re: Terrorism Hysteria on the Net
by vin＠shore.net 17 Dec '03

17 Dec '03

Ex-Special-Agent Settle deserves all the derision he has gotten (probably not in the right places) for his LSD-in-the-water-supply threat: >> >> "You bring me a select group of hackers and within 90 days I'll bring >> >> this country to its knees, " says Jim Settle, retired director of the >> >> FeeBee's computer crime squad. snow's jibe about doing the same with a handful of spooky special forces guys (less than 15, if he used snipers) was appropriate. I think, however, Dale Drew went too far when he denied that the demension of the Net added nothing new to the range of social or economic threat. Don't we, as a technical culture, have to acknowledge the burgening nihilism that is exemplified in both the subculture of virus (and other randomly distructive pieces of attack code,) and the larger culture that so often lauds their "creativity" and "ingenuity." Not even lumpen-Libertarianism allows the author of such pain and distruction to escape moral responsibility -- yet the popular tech culture (and the pop culture) does just that! The culture can deal with purposeful terrorism, even purposeful Net terrorism, but a whole subculture of sociopaths who -- like arsonists on a binge, or (to exaggerate slightly) the nerve gas cult in Japan -- toss out distructive code bombs to see who or what gets blown away, is indeed something new. How many wild viruses are now loose? What new corners of the networked infrastructure will be the next forum for these arsonists? Java applets? NT? The nodes of the Net itself? Is this too to be left to police suppression? Are Net Cops inevitable? Are there other forces that could be brought to bear? (Forces that could perhaps be influenced by the tone or substance of comments that originate here or in similar forums?) And isn't this threat unique to a culture which has become so dependant on the structured flow of information products and tools? The sky isn't falling; there are no bodies in the street -- so we have time... but the sense of threat could become so serious that the public would seek shelter, solice, stability. The spooks' wet-dream, the wiretapped Garrison Nation (two-way TV always on; no one allowed to whisper away from a microphone) is one answer. Of a sort. Suerte, _Vin Vin McLellan +The Privacy Guild+ <vin(a)shore.net> 53 Nichols St., Chelsea, Ma. 02150 USA Tel: (617) 884-5548 <*><*><*><*><*><*><*><*><*>

1 0

Re: lambda 2.08 (1/2) - Surveillance du contenu : l'oeil biais_
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 10 Jun 96 at 19:08, Jerome Thorel wrote: > DANS LE NUMERO --> 2.08 <-- du bulletin lambda > http://www.freenix.fr/netizen/ <snip> > - Les agents, lors des PV, ne signent plus par leur nom, mais par > des numeros d'immatriculation, a remarque la revue Chroniques Bonjour Jerome! Que signifie PV? Traduction libre par: / non-official translation by: jf_avon(a)citenet.net ... The agents, during PVs(?), are not signing with their own names anymore but with an ID number, pointed out "Chroniques" magazine... La version anglaise de ce texte a-t-elle ete envoye a cypherpunks(a)toad.com? Si non, pourriez-vous l'y envoyer. Aussi, en faire parvenir une copie anglaise a jimbell(a)pacifier.com, ca sera du plus grand interet pour lui. Salutations JFA DePompadour, Societe d'Importation Ltee; Limoges porcelain, silverware and crystal JFA Technologies, R&D consultants: physicists, technologists and engineers. PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891

1 0

USS_hit
by jya＠pipeline.com 17 Dec '03

17 Dec '03

6-11-96. FiTi: "US squares up to cyberterrorists." Until recently, the concept of "information warfare" has been widely dismissed as alarmist rhetoric and viewed as "post Cold War hysteria" generated by those with an interest in maintaining the vast US intelligence apparatus. But the potential use of computer networks to undermine public confidence, disrupt essential services, play havoc with the economy or damage military capabilities is now being taken seriously in Washington. Encryption may be just one of many battlegrounds -- others include: proposals for mandatory reporting of corporate computer intrusions and for exceptions to US laws that prohibit intelligence agencies from snooping on domestic communications; the forthcoming ruling by US courts on free speech on the Internet, in response to laws aimed at stopping distribution of pornographic material; and possible limits on information that marketers may gather and use about children who surf the Internet. Also the Clinton administration is planning a rapid-response team to take charge in the event of a cyberterrorist attack. USS_hit

1 0

Re: USS_hit
by jim bell 17 Dec '03

17 Dec '03

At 01:58 PM 6/11/96 GMT, John Young wrote: > 6-11-96. FiTi: > > "US squares up to cyberterrorists." > > Until recently, the concept of "information warfare" has > been widely dismissed as alarmist rhetoric and viewed as > "post Cold War hysteria" generated by those with an > interest in maintaining the vast US intelligence > apparatus. But the potential use of computer networks to > undermine public confidence, The government is doing an excellent job `"undermining public confidence" all by itself! >disrupt essential services, "essential" in whose opinion? > play havoc with the economy Like maybe massive deficit spending, high taxes, etc for decades? >or damage military > capabilities is now being taken seriously in Washington. How about "damage military NEEDS"? Jim Bell jimbell(a)pacifier.com

1 0

Slander of Catholic Church
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:42 PM 6/10/96, Rich Burroughs wrote: >.... Okay, how about this: it's a _religion_ that uses >deception, mind control techniques, and criminal activities to >attempt to get as much possible money from as many marks^H^H^H^H^H >worshippers as possible, and goes to extreme lengths to silence >its critics. I don't think this vicious criticism of the Catholic Church is warranted here! Many of those investigated by the Holy Office actually _were_ heretics, and the turning of bread into the holy flesh of Our Lord Jesus Christ has been verified by Vatican scientists. Further, those peasants of Latin America who give their earnings to the Church so that more jewel-encrusted crosses and goblets can be bought do not see themselves as victims of a scam. After all, the Church may get richer in this secular world as they get poorer, but the Church promises them a seat at St. Peter's dinner table in the next life. As to the Church silencing its critics...surely you are not referring to that Jew slander about the Vatican banker found hanging from Black Friar's bridge in London? Or the Protestant myth about Opus Dei and its dispensation of papal justice? The Pope can utter nothing that is false when he speaks ex cathedra. You heathens had better remember this, else you may expect an invitation from the Sacred Congregation for the Doctrine of the Faith (which some of you heretics and nonbelievers may know by its old name, the Sacred Congregation of Universal Inquisition). Millions alive today will reveal the truth before they die. --Cardinal Timothy May (Who believes all cults and religions are basically the same shuck and jive, and who thinks the "Church of Scientology" is actually a little bit less foolish that the Church of Mormon, with its "baptism of dead ancestors" into the Church, the funny underwear people have to secretly wear, etc. However, I have great respect for the practical tactics of the Mormons, and no respect for the day to day behavior of the CoS.) Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 3

Re: Kahn's "The CodeBreakers"
by Brad Shantz 17 Dec '03

17 Dec '03

Good call, Tim. That is correct. I had forgotten. > Ah, but it does have some significance. "Liberty" is published out of Port > Townsend. (More precisely, it was the last time I looked.) > And it's near Hump Tulips, Sequim, and Chimicum (sp?). Ma and Pa Kettle country. Sequim is further west along the Olympic Peninsula, and Chimacum is just south of Port Townsend towards Port Hadlock and the Hood Canal bridge. Once again, good call, Tim.

1 0