December 2003 - cypherpunks-legacy

Searching an email address
by nobody＠replay.com 17 Dec '03

17 Dec '03

I have been trying to find out info re: someone via his email address and didn't find anything. The server is telaver.com, e.g., name(a)telaver.com Any suggestions outside of the usual search machines?

1 0

U.S. Helped Wipe Out One of the Kurdish Factions
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:00 PM 9/16/96, jim bell wrote: >condition which is forced on the victims. In addition, you almost always >find that these starving countries have well-supplied militaries, defending >the local warlords against each other as in Somalia. Indeed, in Somalia the >incoming food was actually used to buoy up one group against another, >because access to it is controlled directly or indirectly by the factions. The reports that the U.S. spent $100 million supporting the Kurdish struggle against the central government is a related point. The $100 M went into weapons, food, etc., which the U.S.-supported side used against the Iran-supported side. Then the U.S.-supported side allied themselves with the central government, however temporarily, and is not engaging in a "mopping up operation" (translation: summary execution of all members found of the losing side, including wives and children). Our $100 million helped wipe out the "losing side" Kurds, and also strengthened the previously-poor reputation of Saddam Hussein (who just got a unanimous vote of support from the Arab League foreign ministers meeting in Cairo...this likely explains why the weekend's predicted massive raid on Baghdad was shelved...Clinton is already backpedaling, and may send Hilary/Hillary to Baghdad to help the Baghdad "Save the Children" chapter). (Note: Only this last point, about Hilary, is made up...the rest is what is actually happening.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Assassination Politics, was Kiddie porn on the Internet
by azur＠netcom.com 17 Dec '03

17 Dec '03

>>Yet another obligatory AP (Assassination Politics) reference: If a person >>is really interested in helping out "starving children" he may be able to do >>far more good by purchasing the death of the local tyrant(s), rather than >>(just) buying more food. > > >The problem is that assasination rarely leads to the installation of >a government that is any better. In most cases it gets worse. > >In the past the US excuse for supporting bloodthirsty murderers like >Pinochet, Saddam, Marcos and Noriega was that the alternative was >worse. > >In cases like Eritrea or Ethiopia the average term of office of any >given despot tends to be rather short in any case. In most cases its >a case of there being little to choose between the leaders of the >various factions and that ending the war on any terms is better >than allowing it to continue. > We've all heard these arguments, but are they true? Who says so, and how can they be certain? Jim's suggestion has never, to my knowledge, been tried on a consistant, large, scale. When all conventional alternatives have been tried and fail, what have we or the starving children got to lose? I'm sure there are qualified mercinaries available at the right price to put together wetwork operations, just look in soldier of fortune. I once had a hand in establishing a non-profit. Perhaps we can name it SPECTRE (SPecial Executive for Counter-intelligence, Terrorism, Revenge and Extortion) after Ian Flemming. Is it legal for citizens of the U.S. to engage in contract killing of foreign military, politations, etc? How about U.S. or foreign non-profits? In a related matter, I used to be an avid RC modeler. By marrying a single-board computers, DGPS (Differential GPS) and Giant Scale Remote Control technologies it now appears straightforward to produce inexpensive consumer cruise missiles capable of accurate (<10 meter radius) delivery of 10 kg. explosive, gas or biological payloads over several hundred km. for less than $10,000 each. Both reciprocating and miniature jet engines are available. Might make cheaper alternative to mercinaries. -- Steve PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Voice: 1-702-655-2877 Sacred Cow Meat Co. | Fax: 1-702-658-2673 7075 W. Gowan Road, #2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Just say NO to perscription DRUGS.

2 1

really undetectable crypto made somewhat practical
by jim＠suite.suite.com 17 Dec '03

17 Dec '03

The primary drawback to the stego scheme I described in the previous post was the ratio of stego bits per message. The scheme would only transmit an estimated 4 stego bits per message. Then it occurred to me that I can improve the ratio by basing the scheme on the hashes or words rather than the hashes of entire messages. Previous Scheme: construct a sequence of plaintext messages such that the first 4 bits of the MD5 hashes of the messages combine to produce the cyphertext of the true stego message. The sender would only need to send the plaintext messages. The recipient would calculate the MD5 hash of each plaintext message, extract the first four bits from each hash, append them together, then decrypt the result to obtain the true stego message. New Scheme: First, calculate the MD5 hash of all the words in the various dictionary files used by the password cracker program and create a database containing every word and the first 4 bits of its MD5 hash. Given such a database, it would be possible to write a program that accepts as input a block of cyphertext (the stego message, encrypted), chunks it up in to groups of 4 bits and then, for each chunk, displays the words that have hashes that start with those same four bits. The person running the program would select words that form meaningful sentences but also produce hashes that combine into the encrypted stego message. This scheme would send 4 stego bits per word. In addition to ordinary words, the database could contain names, misspelled words, abbreviations, words with alternate capitalization, slang terms, technical jargon, whatever. Fortunately, senders and receivers don't need to synchronize word databases. The recipient doesn't need to have any word database. The receiver can reconstruct the hidden encrypted message simply by calculating the MD5 hash of each word in the plaintext message, gathering up the appropriate hash bits and decrypting the result. This scheme could send more than 4 stego bits per word, but as you increase the number of stego bits per word (sbpw), you reduce the number of words that will work for a given chunk of cyphertext, making it harder to construct meaningful sentences (e.g. given a 40,000 word database, 4 sbpw yields 16 word groups with approx 2500 words per group; 8 sbpw yields 256 word groups with approx 156 words per group. 8 sbpw would probably not work well). Would this scheme work? It works in the sense that you can use it to send arbitrary encrypted messages through channels that don't allow anything but human-readable plaintext messages, but does it do so in an undetectable manner? I think so, but I don't know for sure. Jim_Miller(a)suite.com

1 0

Re: Risk v. Charity (was: RE: Workers Paradise. /Political rant).
by azur＠netcom.com 17 Dec '03

17 Dec '03

>On Mon, 16 Sep 1996 19:58:25 -0400, Black Unicorn <unicorn(a)schloss.li> wrote: > >Remember the original purpose of social security. A government fund which >was self sustaining because it only gave out what was put in and gained by >investment. Not quite. You'll remember that SS was pitched to the masses as such during the Great Depression, but its true purpose was to allow older workers to quickly retire and make room for the largely unemployed men in their prime, family raising, years. > >> A social safety net is simply a form of health and life >> insurance. Statistical arbitrage if you will. > >Yes, but not for the reasons you would cite. Social safety nets prevent >rioting by the lower classes, revolution and general civil disorder >because they appease the masses. Indeed this is a form of health and life >insureance for the middle and upper classes. No doubt. See my previous comment. > >> By spreading the risk you >> minimize the cost. Yes, some people will take advantage of the system. >> But like a virus, a robust system should be able to withstand this form >> of attack. > >This is absolutely silly. Speading the risk alone does nothing. The cost >for those who can pay is increased, and the cost for those who cannot pay >is made 0 (it already was 0 incidently). > >It is also the reason the taxpayers (and not the savings and loan >community at large) were forced to bail out the failed financial >institutions. Namely, because premiums were not tied to risk. The FDIC, >as of last year in any event, charges a flat rate fee for all financial >institutions. This is independent of any risk analysis of their >investments. i.e., a financial institution that invests in trailor parks >in Arkansas pays the same premiums for federal deposit insurance as a >institution that invests in government issued debt instruments. (There is >some ceiling for risk, but not a graduated system below the ceiling). > >The result was (is) an incentive to risky investments. If you are a >financial institution and I tell you "I will charge you $1.00 to insure >$1000.00 of low risk and low profit investments, but I will charge you a >while $1.00 to insure $1000.00 of extremely risky but highly >profitable option and currency investments" which one are you going to >choose? (Hint, you're an idiot if you pick option #1). > >The reason the insurance fund was depleted is because there was no risk >balancing built into the system. The premiums did not cover the losses. >They would have if they were risk adjusted. > Next major recession: Here we go again. >Spreading the risk, by itself, does NOT reduce cost. You must properly >PRICE risk. > >This is the distinction between insurance and welfare. Right on! >Welfare merely hands out money for those who have not bothered or cannot >afford insurance. The result is an INCREASE in cost (taxes) to those who >are coughing up the cash so that they may support. > PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Voice: 1-702-655-2877 Sacred Cow Meat Co. | Fax: 1-702-658-2673 7075 W. Gowan Road, #2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Just say NO to perscription DRUGS.

2 1

All Bets Off
by Brock N. Meeks 17 Dec '03

17 Dec '03

Just so this isn't hanging in cyberspace forever, my $5,000 bet for anyone to prove the TWA 800 flight was downed by a U.S. missile is now *off the table*. It's been two-plus weeks since I tossed out the bet and no one took me up on it, so it's now being formally withdrawn. --Brock

4 3

WinSock Remailer Now Accepting Only PGP Encrypted Messages
by Joey Grasty 17 Dec '03

17 Dec '03

Y'all: Effective immediately, the WinSock Remailer (operating at winsock(a)c2.org) will now accept only PGP encrypted messages. All incoming messages (with the exception of messages with subject headers of help, remailer-help, remailer-stats, and remailer-key) must now be encrypted with the public key for winsock(a)c2.org. All other messages will be rejected. Regards, Joey Grasty (jgrasty(a)gate.net) Jim Ray (liberty(a)gate.net) WinSock Remailer Operators -- Joey Grasty jgrasty(a)gate.net [home -- encryption, privacy, RKBA and other hopeless causes] jgrasty(a)pts.mot.com [work -- designing pagers] "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin." -- John Von Neumann PGP = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7

1 0

Re: forward secrecy in mixmaster
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:29 PM 9/12/96 +0000, paul(a)fatmans.demon.co.uk wrote: >Stewart> I think they chose a strong prime (form p = 2q+1, q prime), ... >Strong primes are no longer of any benefit for cryptographic >applications. You're probably right, for today's factoring techniques. For a key you're only planning to use for the next couple of years, you can pretty much ignore strong primes, unless you're stuck with 512-bit keys, in which case you need to glean any crumbs you can. But for a value that needs to last a long time, such as a Diffie-Hellman modulus that's going to be a default value in a standard, and which you're only going to generate once anyway, it makes sense to generate a strong prime in case factoring methods that are affected by it become popular again in the future. It also makes sense to turn loose a bunch of people using different primality tests just in case somebody gets lucky (e.g. crank the test long enough that the probability of non-primality is 10**-9 or 10**-12 instead of just 10**-6. >Implementing strong primes won`t make your code any less secure, it >will just take longer to create the keys and won`t gain you any >security, all the big boys are using elliptic curve factoring methods >now so you really have nothing to gain. Do Generalized Number Field Sieve and its friends count as elliptic curve methods? # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # You can get PGP software outside the US at ftp.ox.ac.uk/pub/crypto

1 0

The GAK Momentum is Building...
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:59 AM 9/17/96, David Lesher wrote: >Clarinet sez: > >OTTAWA, Sept. 16 (UPI) -- The federal government has chosen >Northern Telecom's data security software, Entrust { } Public-Key >Infrastructure (PKI)... for gov't use..... > >worth $7.3 million...... Add to this these items: -- the IBM GAK product -- the "Clipper IV" (or is it only Clipper III?) GAK announcement expected "soon" It seems that several of these announcements are happening at the same time, which I doubt is coincidental. As the Republican challenger (whose name escapes me at the moment :-}) is not making an issue out of this, and is not making any issues out of anything related to liberty issues as near as I can tell, Clinton and the national security establishment seem to have free rein (and reign) to deploy GAK> As Lucky pointed out, GAK now appears inevitable. There's probably still time to monkeywrench these schemes, though. A few Blaze- or Wagner/Goldberg-type hacks could undermine confidence in the Key Authority (not to be confused with the Port Authority, which I presume handles i/o port assignments). --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

Re: Spam blacklist project
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: hallam(a)ai.mit.edu, cypherpunks(a)toad.com Date: Mon Sep 16 21:57:31 1996 Phill wrote: [interesting anti-spam idea.] > Of course I don't for a moment imagine that this will > be 100% effective. Without government regulation there will > always be slimeballs who send mail to people who don't want it. Your faith in big government, despite seemingly every bit of evidence possible to the contrary, astounds me sometimes. Churches, Mosques, etc. struggle mightily for this kind of thought pattern in believers, yet it comes to you naturally, in secular life. Truly a marvel, and on _this_ list, of all places. It has kept me from killfiling you, but I must occasionally express my awe at the power of faith to literally move mountains. There is a "regulation" (law) against [murder, selling/growing reefer, selling sexual services, assault, you name it] yet you'd never deny that these behaviors still exist, would you? Somehow, though, you still seem to manage to think that spamming slimeballs will just disappear with more regulations. It's astonishing. > The advantage of this scheme is that it would mean that > the spam industry can avoid regulation pressure and they can > deflect criticism. I thought that "The Hippie of Crime" proved that spammers, if slick enough, could deflect criticism from themselves without any government help. > Meanwhile recipients of unwanted spam have > a legitimate beef. Don't we already have a legitimate beef, though? [I like your idea, BTW.] In fact, in view of Ian's recent posting, don't we already have a law, too? JMR -- "I think I'll reattach my printer to this machine." Regards, Jim Ray -- DNRC Minister of Encryption Advocacy "As govt.s grow arithmetically, corruption grows exponentially." -- Ray's Law of official corruption. Defeat the Duopoly! Stop the Browne out. Harry Browne for President. Jo Jorgensen for Vice-president. http://www.HarryBrowne96.org/ http://www.twr.com/stbo ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 I will generate a new (and bigger) PGP key-pair on election night. <mailto:liberty@gate.net> http://www.shopmiami.com/prs/jimray ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMj4FkG1lp8bpvW01AQFvzAQAlLcZV+zsFfsvGodK7uyJP2hxNgugWpwD qYV23LgwV2dU5NRb7TPbqhp9Z6R7J5YZ3DnA6QuLnvn0pKVFITIyhcq7Wn3zu4PK 5uQ3slYJof1nT3l79zDA6Xx/2pBUm4IxhYXsrw4z4jQFGWHl28rZ1JpbAWghCRcM b7JXzqaRnek= =AbJE -----END PGP SIGNATURE-----

3 2