December 2003 - cypherpunks-legacy

remailer network/winsock remailers
by Sam Quigley 17 Dec '03

17 Dec '03

Hi, I've been unsubscribed from the list for a while, and only recently rejopined, so this issue may well have been addressed in my absence. If not, though, here: It occurs to me that, with the invention of the winsock remailers, we have the potential to establish a very widespread and distributed network of part-time remailers. Specifically, it seems like there are a lot of users who are only connected to the internet for short periods (PPP/SLIP) or who only have full control over their machines for short periods. These computers could not normally be used to run remailers as mail would bounce when the computer/remailer software is down. If there were some sort of central registry where winsock (or other non-permanent) remailers could announce their ability/inability to bounce mail, email could be forwarded through these temporary remailers on a dynamic basis. I imagine the system would be something like this. User X, a part-time cypherpunk, turns on his PPP connection to get his internet fix. When he does, his remailer software connects to a central site and registers itself, the software (and capabilities of the software) it's using, and how many email messages (CPU time) X is willing to give up. The registry sends back a confirmation message, and adds X's computer to its list. Now, when user Y wants to use the remailer network, she sends a message through a series of remailers, one of which is the remailer network host computer. When the message gets to the host computer, the host looks at its list and bounces the message randomly to one of the winsock remailers. In this way, people who can't ordinarily run a remailer can still help out with the network, and the message becomes, ultimately, much more untraceable because (ideally) there are tons of temporary remailers that the message could have been sent to. This could expand the network by a lot... I imagine precautions would have to be taken to ensure that temp. remailers really are up and running (the host would have to ping remailer computers regularly to ensure that none went down without informing the host). It would also be good if incoming messages to the host remailer could specify how many hops it should take, whether or not it should be subject to random delays / burst sends, and other options which haven't occurred to me yet. This can't be a new idea, though. If something like this already exists, please send me a pointer. If not, I'd be willing to help develop a protocol for client / server interaction. -sq

2 1

Re: Twenty Bank Robbers -- Game theory:)
by Chris Adams 17 Dec '03

17 Dec '03

On 25 Jul 96 11:12:20 -0800, ichudov(a)algebra.com wrote: >Here's a puzzle for our game theorists. > >Twenty cypherpunks robbed a bank. They took 20 million bucks. Here's >how they plan to split the money: they stay in line, and the first guy >suggests how to split the money. Then they vote on his suggestion. If >50% or more vote for his proposal, his suggestion is adopted. > >Otherwise they kill the first robber and now it is the turn of guy #2 >to make another splitting proposal. Same voting rules apply. > >The question is, what will be the outcome? How will they split the >money, how many robbers will be dead, and so on? First, the other nineteen shoot David Sternlight. Then Perry and tcmay get shot. With the (now) absence of strong personalities to guide the conversation among the remaining 8 robbers (should have shot tcmay *before* he got his guard up) spend enough time arguing over trivialities that the police show up and catch them all. Moral: It is easier to herd cats than lead cypherpunks. // Chris Adams <adamsc(a)io-online.com> - Webpages for sale! Se habla JavaScript! // Automatically receive my resume or PGPKEY by sending email with a subject // of 'send PGPKEY' or 'send resume'. Capitalization counts so be careful!

1 0

RE: Distributed DES crack
by pjn＠nworks.com 17 Dec '03

17 Dec '03

>> half that time...and a slim chance that we will get it with the first >> try... > My figures were based on 2^55 tries, which is exactly half of 2^56. Ahhh... OK. P.J. pjn(a)nworks.com ... Open mouth, insert foot, echo internationally. ___ Blue Wave/QWK v2.20 [NR]

1 0

[Rant] Re: One of the biggest problems with freedom
by Alan Olsen 17 Dec '03

17 Dec '03

At 08:23 AM 7/25/96 -0700, anonymous-remailer(a)shell.portal.com wrote: >Example: "I don't care if the government has my keys >for encryption. I don't do anything wrong, and if it >helps FBI enforce our just laws, I am all for it. Since >anyone who tries to get keys without legal means will end >up in Leavenworth for the rest of their life, there is >no problems with people getting access to those things." <rant> I usually ask people like this why they would wind up in Levenworth for the rest of their life? Or spend any time in jail at all? Government agents are frequently found going through the records of friends and enemies. haven ANY of them gone to jail? Sometimes one or two will get a repremand of caught doing something real dirty. There seem to be few, if any, penalties for Government Agents caught with their hands in the cookie jar. (Unless it involves cash.) Like the police, Government officials tend to protect their own. If they start to open your encrypted mail, how do you know? It is not like the postal service doing it where you can see the ripped up envolopes. Ask them if they would mind postal inspectors going through all of their private letters and postal mail. (Just to make sure you are not talking about anything you shouldn't...) Or maybe watching you when you shower to make sure that you do not have any underage children in their with you. There are lots of excuses to be made for intruding into people's lives. Does not mean it is right. suggestion for the truely insane/bored: If you really want to start driving the point home, start intercepting their mail. Steam the envalopes open, read it, seal it back up and put in back. Mention small details of their private correspondence in passing. Mention that they have still not paid that bill for Soap Opera Digest. Talk about all the money they own Uncle Bob. They will soon get the point. <<DISCLAIMER: Do not try this at home! Private citizens cannot get away with this, only "Governments".>> People do not seem to think about these restrictions until they REALLY start to affect them. By then it is too late. It will "never happen to them"! (You also might want to point out that not all people accused are actually guilty. Some of the worst cases are shown to be fedrales operating off of old or bad data. The innocent citizen just happens to get caught in the path of the Fedreral Juggernaught. Most of the "average citizens" who I have met who are willing to give up their freedom are far too clueless and trusting to get the point. The Government is there to help them. (Help themselves to their money, their property, their personal information, their piece of mind, etc. etc. etc.) </rant> --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Industry and Government "Guidelines" (Is Speech Next?)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:15 PM 7/25/96, The Deviant wrote: ... >> Then, they added ITAR. And they want us to obey it. >> >> Finally, it seems, they're giving us "guidelines." Not law, Not ITAR. >> >> Next it's gonna be their their fondest desires, their preferences,and >> finally their whims. I was going to reply, but I have decided to follow the "speech guidelines" suggested by my local MiniTru authority figure. While the government does not demand that my words be cleared by them, they have made it clear that if I sign a "Good Citizen Pledge," and agree not to speak of certain things, that my problems with the government will be lessened, my export requests expedited, and my passage through Customs will be eased. --Tim May Seriously, I think there are serious "rule of law" issues arising out of these "consultations" between industry and government. Things are not spelled out, as Mindy Cohn of the Bernstein case so articulately has described, and people seeking clearcut decisions about what can and can't be exported find they get no answers. "We can't define an illegal export, but we know it if we see it." And actually not even this, as the decision often takes months or longer, or no response is ever received. (Was the ITAR violation t-shirt ever given a CJR or turned down for one? Though my personal view is that the t-shirt was a side issue, and a frivolous example, last I heard State was simply not responding one way or another.) Seems to me, and I'm sure to others, that the ITARs are a clear case of what lawyers call "overvagueness." And my joke about a "Good Citizen Pledge" is only partly a joke. The language of companies "coming to agreements" with the State Department, in exchange for expedited handling, is a dangerous trend. Carried further, it could create classes of companies and citizens, not all of whom would be treated equally under the law. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: [Rant]Re: Shell buys key escrow system from TIS
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:20 AM 7/25/96 -0400, Jim Ray wrote: >Will Rodger,<rodger(a)interramp.com> >Washington Bureau Chief of Inter@ctive Week, wrote: ><snips> >>Administration officials didn't return calls for comment, but it's clear >>that the Clinton-Gore team have their first "testbed" for trying out key >>recovery, or key escrow, proposals. > >Hmmm. A new meme, "key recovery" is lots better than "key escrow," but >I still wonder if I'm ever gonna see a journalist say, "'GAK,' or Govt. >Access to Keys for cryptography." I doubt we'll see many non-cyber-journalists saying "GAK", at least in print :-) But the name "Clipper III" seems to be catching on fairly well, which has the added benefit if connoting "yet another key-grabbing attempt after the previous two failures", which I like a lot. Key recovery is at least quasi-honest, unlike "key escrow"; I'd tend to call the Clintonista's scheme "key registration" though I've generally found that "master key system" gets the point across adequately. # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Confuse Authority!

1 0

CD Prices and Inflation
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:18 PM 7/25/96, jim bell wrote: >If what Duncan said were true, then you'd see music stores spring up which >sell ONLY the "Top-40 stock", but sell it for pre-CD vinyl prices. They'd >get all that business, and OTHER record stores would sell the obscure stuff. > That's not happening. Something not being talked about in any of the messages I've seen is the role of _inflation_. Those claiming CD prices are "too high" should consider inflation. (Caveat: I also consider CD prices "too high," in terms of what I'd _like_ to pay.) When I first started buying LPs, circa 1967, LP prices were usually around $4.88 (that figure rings a bell, no pun intended). Some discount prices were around $3.67, at a local PX (Post Exchange, a military store, usually having subsidized prices). I do recall paying $5.98 for some albums I wanted. And in those days the average working man's salary was under $10,000 a year, gold was $35-40 an ounce, a new 3-bedroom house in many areas cost $20-30K, a pound of hamburger cost less than a dollar, a copy of "Scientific American" cost either 60 or 75 cents (price increased) and a paperback book cost between 75 cents and $1.25. (These numbers are approximate, but mostly about right. Paperback books, for example, were at about 35 cents until the 60s, then moved to 50 cents, then to 60-75 cents, then hit the dollar point around 1970, the $1.95 point a few years later, then jumped to $2.95, $3.95, etc., and are now around $5.95 for most bestseller paperbacks. Again, don't quibble too much. A detailed check of paperback collections showing publishing dates and prices would pin these numbers down.) So, what do we have now? Salaries are 2-4x higher, gold is at $375 an ounce, a new 3-br house averages about $100K (and is 2x that in many places), hamburger is at $2-3/pound, "Scietific American" sells for $3.95 or $4.95, and paperback books go for $4.95. Roughly, then, everything on this list is 3-4 times more expensive than it was in the late 60s. So, those LPs I was buying for $4-5 should now cost $12-20, correcting for inflation/price rises. And yet I am able to find many CDs I want for $8.67 (Tower Records: "3 for $25" sales). And they never wear out. And they usually have 60 minutes or more music on them--at least the CDs I buy do--, compared to the paltry 35-40 minutes on most LPs of the past. I can also make flawless copies of CDs I borrow onto DATs. (A friend of mine has gone a bit far with this, borrowing thousands of CDs from libraries...he now has 3900 CDs recorded digitally.) So, while I "wish" CD prices were even lower, I'm paying a lot less in "real dollars" for more music today than I was paying 15 years ago or 30 years ago. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

RE: Noise: Re: Responding to Pre-dawn Unannounced Ninja Raids
by Bill Olson (EDP) 17 Dec '03

17 Dec '03

snow writes: > >On Wed, 24 Jul 1996, Bill Olson (EDP) wrote: >> Alan Horowitz writes: >> >Phil, >> >are you saying that you're a better businessman than Rush Limbaugh? >> >Can we see some 1040's, please? >> >> Rush Limbagh is a big fat *RICH* idiot. > > Big? yes. > Fat? I'd say so. > Rich? In relation to me, yes, and probably to you. > > Idiot? The man _got_ rich doing something he enjoys and is good at, >meanwhile you are working for the great satan. Who is the Idiot? Yes, I work for satan. But I am wealthy because of it. Nice guys finish last. My emphasis was that he was rich, not that he was an idiot. Personally, I think the guys an asshole, but I commend him for his capitolist efforts. BTW - I'm an idiot. Never said I wasn't. >

1 0

Re: Schelling Points, Rights, and Game Theory--Part II
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:28 PM 7/25/96, janke(a)unixg.ubc.ca wrote: >Hello, Tim, > >I found your essay interesting, but would like to describe a >hypothetical situation and my ideas of how your notion of Schelling >points applies to you to see if I am correctly following your ideas: > >Suppose that I live in a rural area and >I know that my neighbour beats his children because I have seen them with >bruises before and too many times just to be from household accidents. >Since I am far enough away from him, the beating does not make enough noise >to distrub me from any of my activities. I am also planning on >moving in three years, so there is little danger that I will be a >victim if the children develop into violent criminals due, in part, >to their abuse. In this case, the "least action" reasoning seems to >tell me to do nothing. I mentioned "beatings" as a specific example of where the community may decide the costs of intervention are justified. In my view, concentrating on such "extreme" cases (beatings, Christian Scientist parents, etc.) is rarely useful, especially when most "interventions" are for so much less extreme cases. >On the other hand, the state might do some sort of calculation like >the following: > >(probability the children will become violent criminals) x >(cost of dealing with violent criminals) >-(cost of taking the children from the parent) Well, I don't believe any calculus of "probability the children will become violent criminals" is useful. We don't know if watching the Power Rangers will make an 8-year-old "turn into" a criminal at age 18. And so forth. >Am I following your ideas ok? :) > Check out the Friedman URL I gave for more details. The Schelling point view is more "energy conservation common sense" than utilitarian models usually have it. Thus, all of your talk about estimating the chances that someone will become a criminal in the distant future is not something an "energy conserver" (a lazy person, basically) will worry about too much. Especially, but not solely, because there is basically no way to predict the future. I might think that my neighbor, a Christian Fundamentalist, is raising warped kids. But this is his business, so long as I have don't have to pay for them or their ideas directly. They may turn out to be Dahmerian cannibals in 10 years, but they probably won't. And, in any case, I won't lift a finger to change their home environment. (Nor would my neighbor tolerate it--and he's got a Benelli Super-90 Tactical Shotgun, a lot more firepower than I have!) This last paragraph is pretty important. A lot of people realize they can't personally intervene with their neighbors, and so they seek the power of a mob or herd to enforce some law they themselves cannot or will not. "There ought to be a law!" is the most disgusting phrase in the English language. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Netscape
by jim bell 17 Dec '03

17 Dec '03

At 05:15 PM 7/25/96 +0000, The Deviant wrote: >hOn Wed, 24 Jul 1996, jim bell wrote: >> That still doesn't make sense. >> First, there were laws. And we had to obey them. >> Then, they added ITAR. And they want us to obey it. >> Finally, it seems, they're giving us "guidelines." Not law, Not ITAR. >> Next it's gonna be their their fondest desires, their preferences,and >> finally their whims. >> What's wrong with this picture? Do I detect an ass-kissing contest? > >Yup.. thats it. And they said I was an idiot when I [Correctly] said >that Netscape wasn't activly fighting the ITAR. Agreed. Writing good crypto is certainly praiseworthy and desirable, but it does not "fight ITAR," per se. (It fights lack of crypto, which is not the same thing! Lack of crypto certainly needs to be fought, as well.) Writing the software and selling it domestically is, at best, "ITAR-neutral." Putting it on the net in the most unrestrictive way the State Department has previously approved of is also "ITAR-neutral." (Because such a method is, presumably, within the rights of anyone; we can conclude this because "the State Department said so.") A _PRO_-ITAR stance is one in which a company or person puts restrictions on his distribution of that software above and beyond what have historically been approved, particularly when prior distributions of software are still going on with those previously-approved restrictions. They may be absolutely entitled to do so, but that's still pro-ITAR. For a small and uninfluential company, the significance of doing that is minor, but for Netscape, it's crucial because it practically invites the government to set a new precedent beyond what they (the government) previously thought they might get away with. >> You should have told them that if they're "evaluating their guidelines" that >> means that NO future modifications to those guidelines is binding on you, >> since it is not part of ITAR and is CERTAINLY not part of the law. You >> should have memorialized the contact with a lawyer's letter, and promptly >> posted the new version of your software with whatever version of the >> precautions (MIT, RSA, or?) you felt most happy with. >> > >Or even better... Lets look at this version... > >lets say I get my internet service from MCI. Now lets say I put crypto on >my web page. When somebody from out of the country visits my web page, >and downloads it, who's exporting it? Them, MCI, or me? I'd say they >are, and I doubt ITAR covers this... this is one of those things thats >covered in "guidelines". ;) umm.... Smooch Smooch? Yes, if we really oppose ITAR, we should kill it by insisting that the government fully document it at every turn. Jim Bell jimbell(a)pacifier.com

1 0