December 2003 - cypherpunks-legacy

Seek-and-Destroy
by declan＠well.com 17 Dec '03

17 Dec '03

Do NOT visit: http://xxx.lanl.gov/seek-and-destroy The sysadmins for xxx.lanl.gov don't like robots visiting their web site, so they've published a statement on indexing at: http://xxx.lanl.gov/RobotsBeware.html Remember, do NOT click on: http://xxx.lanl.gov/seek-and-destroy -Declan

5 4

Someone can't read
by David Lesher 17 Dec '03

17 Dec '03

> Clinton Proposes Initiatives On the Scrambling of Data {} > The insistence of the Administration on moving forward on > key-escrow technology appears to ignore the advice of a May > report by the National Research Council, which recommended > going more slowly on key escrow because the technology had > not yet been proved feasible. > > Administration officials said yesterday, however, that they > were better informed than the council's members realized. > > "We're further down the road on key-escrow technology than > the N.R.C. is familiar with," said Greg Simon, Vice > President Al Gore's chief domestic policy adviser. As I recall the NRC members in DC said, in *EXPLICITLY* rejecting the "If only you know what we know..." mantra, that if there was something the [NRC] did not know, it wasn't cuz that had not asked everyone involved. (Or words to that effect) So it appears the Admin was withholding data from the Congress.... I have here in front of me, documented proof that there are crypto-carrying members of the Cypherpunk Party... -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post reord"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"ecafe"} = "<cpunk(a)remail.ecafe.org> cpunk mix"; $remailer{"amnesia"} = "<amnesia(a)chardos.connix.com> cpunk mix pgp hash latent cut ksub"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk pgp hash latent cut ek"; $remailer{"treehole"} = "<remailer(a)mockingbird.alias.net> cpunk pgp hash latent cut ek"; $remailer{"nemesis"} = "<remailer(a)meaning.com> cpunk pgp hash latent cut"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"vegas"} = "<remailer(a)vegas.gateway.com> cpunk pgp hash latent cut"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"ncognito"} = "<ncognito(a)rigel.cyberpass.net> mix cpunk pgp hash latent"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Groups of remailers sharing a machine or operator: (c2 alpha) (flame replay) (alumni portal) Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. Note: The remailer list now includes information for the alpha nymserver. Last update: Sun 14 Jul 96 15:43:37 PDT remailer email address history latency uptime ----------------------------------------------------------------------- replay remailer(a)replay.com ****+++****+ 5:01 99.99% alumni hal(a)alumni.caltech.edu #-*##*#**##+ 2:26 99.99% jam remailer(a)cypherpunks.ca ***********+ 17:16 99.99% c2 remail(a)c2.org ++-++++++++- 57:40 99.99% mix mixmaster(a)remail.obscura.com -+++++-+++-- 2:50:34 99.98% nymrod nymrod(a)nym.jpunix.com *#######+##+ 2:21 99.98% lead mix(a)zifi.genetics.utah.edu ++++++++++++ 40:00 99.97% lucifer lucifer(a)dhp.com ++++++++-+++ 47:35 99.94% flame remailer(a)flame.alias.net -+--++++-.-- 7:31:14 99.93% amnesia amnesia(a)chardos.connix.com ----+-+----- 3:12:29 99.86% alpha alias(a)alpha.c2.org **++++*++**+ 39:15 99.76% ncognito ncognito(a)rigel.cyberpass.net _-...-+_--. 14:56:48 99.69% portal hfinney(a)shell.portal.com #- ##*#+##+ 2:08 99.46% treehole remailer(a)mockingbird.alias.net -+ + +--.- 3:43:44 98.98% vegas remailer(a)vegas.gateway.com #*+#*+* * * 1:28:29 98.17% penet anon(a)anon.penet.fi ...- -----+ 11:48:28 94.51% haystack haystack(a)holy.cow.net * #+#-+* # 4:49 91.21% nemesis remailer(a)meaning.com ********+ 20:19 76.01% extropia remail(a)miron.vip.best.com ---.---- 6:01:00 51.75% ecafe cpunk(a)remail.ecafe.org ### ## 51:33 47.17% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: "And who shall guard the guardians?"
by Bill Stewart 17 Dec '03

17 Dec '03

>On Cyperpunks recently, Tim May wrote: > >>The Latin maxim "And who shall guard the guardians?" has some relevance to >>the headlong rush into converting the U.S. into even more of a security >>state than it is now. The English-Only bill just passed in the House bans the use of non-English languages by government officials. Does Tim's sudden avoidance of the Latin mean that _he_'s the Fed?? At 02:57 PM 7/31/96 -0700, Martin Minow <minow(a)apple.com> wrote: >I would suspect that a Baysian analysis >would indicate that the risk of holding (and losing) a key is >greater than the risk of not holding (and needing) a key. Cui bono? Or, in this case, risk to _whom_? The damage from losing a key is done to the key's owner, who's a mere Subject, while the dangers of needing a key that one doesn't have are interference with the Custodians doing the jobs they want to do. Sounds like a no-brainer, from the Government's viewpoint. TRUST NO ONE!

2 2

Re: [off-topic] roving wiretaps
by Brian T Hancher 17 Dec '03

17 Dec '03

>P.S. Do police really need a search warrant to wiretap cellular phones? It is my understanding that police need a warrant to tap *cellular* phones, but not *wireless* phones. One should understand that monitoring cellular traffic is *much* more difficult than tapping a conventional phone, because as the user moves around in the service area the phone switches to different repeaters, often several times during a conversation. I am curious as to the language of the proposed law, as it is also my understanding that the government already has the (technical) means to monitor cellular traffic (but it requires a warrant, just like tapping a regular phone). Brian T. Hancher http://rio.atlantic.net/~briant briant(a)ocala.com briant(a)atlantic.net Brian.Hancher(a)lmi.fdles.state.fl.us

1 0

SECURITY WARNING - D0 N0T D0WN0AD "New Clinton Administration Ping Policy"
by Bill Stewart 17 Dec '03

17 Dec '03

WARNING! DO NOT DOWNLOAD THE E-MAIL MESSAGE LABELED "New Clinton Administration Ping Policy" IT C0NTAINS EVIDENCE 0F SECURITY VI0LATIONS IN THE HEADERS AND D0WNLOADING IT RISKS C0NTAMINATION 0F Y0UR MACHINE: > X-Authentication-Warning: server1.chromatic.com: hua owned process doing -bs > X-Authentication-Warning: server1.chromatic.com: Host hua@localhost didn't use HELO protocol > Return-Path: <cypherpunks-errors(a)toad.com> FURTHERMORE, IT IS DISTRIBUTED BY THE THE CYPHERPUNKS-ERRORS LIST, AN 0RGANIZATION KN0WN T0 HAVE BR0KEN US EXP0RT-GRADE SECURITY AND APPARENTLY LED BY THE KN0WN FEL0N ``KLAUS'' AND AN ANARCHIST W00DW0RKER BRIEFLY SUSPECTED IN THE UNAB0MBER CASE. TRUST NO ONE!

1 0

Courtesy, Clubs and Clinton
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

Excerpt from http://www.msnbc.com/news/21324.asp Clinton's golf war Teed-off clubbers grumble president plays too slow, disrupts things Congressional Country Club Secretary Tim May confirms that some members have complained about the president, but insists that "more members are delighted the president is playing at our club." _________ Is there something that Tim isn't telling us? ;-)

1 0

Re: fbi, crypto, and defcon
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

> From grafolog(a)netcom.com Fri Aug 2 11:48:53 1996 > Date: Fri, 2 Aug 1996 15:48:47 +0000 (GMT) > From: jonathon <grafolog(a)netcom.com> > X-Sender: grafolog@netcom10 > To: "Paul J. Bell" <pjb(a)ny.ubs.com> > Subject: Re: fbi, crypto, and defcon > X-No-Archive: yes > Mime-Version: 1.0 > Content-Type> : > TEXT/PLAIN> ; > charset=US-ASCII> > Content-Length: 772 > > Paul: > > On Fri, 2 Aug 1996, Paul J. Bell wrote: > > > in general, i suspect that the rip-off is going the other way. after all, > > no one forces anyone buy from microsoft, AT&T, etc., but people do steal from > > When I purchased my computers, I had to pay $150 to not have > Windows and Dos installed on them. That $150 went to Microsoft. > It seemed to me that I was being ripped off, by Microsoft. > > As far as AT&T goes, do you know how to determine what their > lowest residential rate is? Secondly, do you know how to > sign up for it? > > > xan > > jonathon > grafolog(a)netcom.com > > > > Illiterate: adj. Inability to read write or speak five > or fewer languages. > Funksioneel Ongeleerd: a. Die wat kon nee elf or meer tale > lees, skryf and gesprek. > > > as i said, i have no use for microsoft, whats more, i don't use microsoft. that said, if a person really must pay to not have their products installed, i agree that that is intorelable, and at the least calls for finding a new vendor for computers. if you really don't plan to use dos or windows, there is no reason why you should pay for them. frankly, this sounds like a real stupid move on the part of your hardware vendor. maybe you need to shop around. as for at&t, no, i don't know the lowest residential rate, but i'm sure that the rate varies depending on your long distance calling pattern. i'm sure that the rate is less for someone who rarely makes an ld call but wants to have the ability to do so when and if the need/desire arises then for someone who makes a few call per month and for another user who makes a lot of call each month. at any rate, all you need to do is to ask them for the lowest rate for your calling pattern, and if you don't like the answer, hang up and call mci, s print, etc. at least thats better than microsoft, where you don't have a lot of choice. take a quick look around the world, paying particular attention to those many countries where the telephone company was directly controlled by the government. was the service they provided really great? was it cheap? did they every provide anything new or improved? as one who has spent a lot of time in some of these countries i can answer from experience, hell no. a one time, in the late 50's i lived and worked in a certain west african country. th erule was, taht the first person in the office in the morning would take the phone off the hook, and maybe by 10:30 or 11:00 we would get a dial tone. of course, you would never hang the thing up again taht day, just pass it along to anyone else that needed to make a call. egypt and all of france was not a lot better. as late as 1983 it was a real challenge to get a phone installed or make a long distance call in france. no matter what the french say, telecommunications services still suck in france. i agree with you that a lot of companies do gouge the customer for all that they can get, and maybe AT&T is one of them, but maybe not. i have spent my entire working life providing for myself, asking and taking nothing from anyone, other than what i earned for myself. i payed for my education and for everything else that i ever had. however, once i had the money to invest, i did so, in, among others, AT&T, and since i take a chance with the money that i worked for by investing in them, i, by god, expect a return on my investment, and if AT&T can't provide it, i will dump them and take my chances elsewhere. however, whether its AT&T or someone else, if i risk my money, i expect something in return, and i can only expect that if the company (AT&T or who ever) makes a profit. profit is not a dirty word, it is what makes it all possible. AT&T did not build the worldwide network that serves us all for fun, not did they invent the transistor or UNIX, or all the other thinks that we take for granted just for the fun of it, or without risk. if you take the risk, you deserve a return on your investment. i have yet to meet a stockholder who said that they were satisfied with any given profit level and wished the company to give away goods or services rather then increase the dividends to the stockholders. the name of the game is PROFIT, its what keeps us all alive and employed. the real saving grace is in having a choice. i am not suggesting that as long as a company makes a profit that anything goes. what i am suggesting is that a company, or an individual for that matter is only obliged to see to there own well being. if an individual so chooses, they may spend their life, or any portion thereof, working for the good of someone else, or giving the results of all their labors to others, as they choose. in many ways this is a good thing and is what makes civilized life. however, i do not believe that it is ever permissable to dictate to an individual or to a company which is, after all, only the sum of it's employees and stockholders, the requirement or terms of how they will dispense the profits of their labors. if AT&T or any other company doesn't give you what you want, tell them to fuck-off, and take your business elsewhere. oh that we could so easily deal with a government that provides so little of what the people want. i think that it is rare for a company to forget who is really calling the shots, but our very own government seems to be completly unaware that they exist to serve us, not the other way around. they seem to have forgotten that the purpose of the constitution is not to define what rights are given to the people, but rather to define what powers the people give to the government. cheers, -paul

2 1

Re: Bombs & bomb threats in LA
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:33 AM 8/2/96, Conrad Walton wrote: >i'm not exactly sure what an acid bomb is, but according to my book, The >Anarchist Cookbook, that I bought in 1972 (was the internet around back >then?), there is a compound called "picric acid" that is "more powerful >than TNT, but has some disadvantages". The ARPANET (or ARPANet, or Arpanet...) was around then. (I had an account on it, circa 1973...not very useful for me.) I also got my copy of "The Anarchist Cookbook" back around then. It was in the news locally when the Santa Barbara County Sheriff's office attempted to have it removed from the local bookstores....this removed it all right, as the stacks of copies sold out as quickly as they could be received and unpacked. (As others have noted over the years, much of the advice is probably bogus and even dangerous. Not being an explosives dabbler, I wouldn't know.) If Feinswine gets her ban on bomb-making information passed, and this is upheld by the courts (doubtful), the sites will be swamped with information queries, and fooling around with bombs will become more popular amongst the teenage set that has not expressed much interest in such things the past couple of decades. The more things change, the more they remain the same. --Tim May, an I-bomb-throwing crypto anarchist Buy a section of metal water pipe 1/2 by 6 inches long, threaded on both ends. Buy two metal caps to fit. These are standard items in hardware stores. Drill a 1/16th hole in the center of the pipe. This is easy with a good drill bit. Hanson is a good brand to use. Screw a metal cap tightly on one end. Fill the pipe to within 1/2 inch of the top with black powder. Do not pack the powder. Don't even tap the bottom of the pipe to make it settle. You want the powder loose. For maximum explosive effect, you need dry, fine powder sitting loose in a very rigid container.

2 1

Re: [off-topic] roving wiretaps
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:52 AM 8/2/96, David Wagner wrote: >I don't get it. Help me out here-- how can this possibly be constitutional? > >I'm reading the Fourth Amendment to our honored Constitution of the United >States, which proclaims > > [...] > no warrants shall issue, > but upon probable cause, > supported by oath or affirmation, > and *particularly describing the place to be searched*, > and the persons or things to be seized. > >Are we just to strike out that emphasized phrase? What's going on here? >Someone tell me I'm not just having a bad nightmare. The same way the Second Amendment has been turned into a shadow of itself by creative lawyering. ("The Founders did not mean to include AR-15s and .45 Automatics as "guns," as these did not even exist in 1791. Likewise, cellular phones did not exist in 1791, so the Fourth Amendment could not possibly apply to them. Have a nice day.") --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0