December 2003 - cypherpunks-legacy

Any Info for Sen. Pressler....
by Troy M. Barnhart 17 Dec '03

17 Dec '03

If anyone has any specific bits of info on cryptography, etc... please feel free to send it to me... I live in South Dakota... Due to circumstances I occasionally see and speak w/ Senator Larry Pressler - (Committee Leader)... (btw, I am not a Pressler plant or anything...) Been talking to him w/ the Burns Bill and such... He wants less gov't. control, but does have "concerns" w/ the garbage... And, wants to balance the business and private concerns... He is open to any info from a "constituent" though... regards, barney He who joyfully marches to music in rank and file has already earned my contempt. He has been given a large brain by mistake, since for him the spinal cord would suffice. -- Mark Twain E-mail: barney(a)rapidnet.com

1 0

Press Release: Atalla Agreement with RSA
by Geoffrey C. Grabow 17 Dec '03

17 Dec '03

ATALLA INKS AGREEMENT WITH RSA DATA SECURITY INC. TO PROVIDE OPEN CRYPTO-API FOR NEW SET INTERNET PAYMENTS TOOLKIT Atalla's PayMaster Internet Security Processor (ISP) will provide enhanced SET performance and secure key management capabilities for new RSA toolkit-based applications SAN JOSE, CA -November 4, 1996- Atalla, a Tandem Company (r), today announced that it has signed an agreement with RSA Data Security Inc., to develop an open Application Programming Interface (API) that will become a key component of RSA's new SET payments toolkit. The suite of tools from RSA is being built to enable developers to deploy secure SET-capable applications quickly, with transparent access to the strongest commercial Internet security functionality. The new API developed by Atalla, will access the command set to Atalla's PayMaster Internet Security Processor (ISP) product to accelerate SET protocol performance and to manage cryptographic keys securely. The new SET Toolkit suite from RSA is designed to provide banks, cardholders, merchants and application providers with the ability to deploy secure SET- based applications without specialized cryptographic expertise. Atalla will be one of seven companies that will support the RSA SET toolkit. The other companies are Open Market Inc., NEC, Netscape, Tandem Computers Inc., Verifone and Verisign. The SET protocol specifies how cardholders, merchants, issuing banks and acquiring banks will interact to ensure secure payment processing over the Internet. SET relies on specially developed encryption technology from RSA Data Security Inc., and has been adopted by Visa and MasterCard to secure credit card transactions, authorization and settlement information over public networks such as the Internet. "The development of the SET protocol was an important milestone in securing commerce over the Internet." said Robert Gargus, president and general manager of Atalla. "We believe that the combination of new, RSA-based SET tools and the strong security functionality and high throughput provided by our Atalla PayMaster Internet Security Processor will now help transform public networks such as the Internet, into a secure, high- performance payments infrastructure that banks, merchants and cardholders will trust." "We consider integration with the Atalla PayMaster ISP a critical feature of the RSA SET developer's suite," said Jim Bidzos, president of RSA Data Security, Inc. "The Atalla PayMaster, in combination with RSA, will now allow for cost-effective, high- volume SET application servers through greatly improved performance for the underlying cryptography and strong physical protection for private keys. We believe this will overcome a major barrier to the adoption of secure electronic commerce on the Internet." Atalla's PayMaster ISP product was designed specifically to manage the cryptographic requirements specified by the SET protocol. The protocol requires multiple public key operations for each SET transaction. The Atalla PayMaster ISP product offloads these computationally-intensive tasks from server CPUs and isolates private information intended solely for merchants from private information intended solely for banks. This ensures that data cannot be altered at any point in the network, and accelerates the required SET -specified public-and-private key operations. Atalla's PayMaster ISP also provides RSA and DES-based cryptography to provide a high-performance bridge from the Internet to private networks such as the Bank Payments network. About Atalla (a Tandem Company) Atalla (a Tandem Company) brings nearly 25 years of experience securing commerce over private networks to the public networks and the Internet/Intranet arena. The company's products include industry-leading hardware-based security processors for the Internet, Intranet and the bank transfer networks, POS/POE (point-of-sale/point-of-entry) credit /debit payment terminals, customer authorization and PIN selection terminals, and secure enrollment products for banking, retailing and government applications. An estimated 70 percent of all ATM transactions in North America (estimated value: $1.4 trillion daily) are secured by Atalla's specialized security processor products. Atalla is headquartered at 2304 Zanker Road, San Jose CA 95131. Phone: (408) 435-8850. Fax (408) 435-1116. The company's website is located at www.atalla.com. Tandem, Atalla, PayMaster, and the Tandem logo are trademarks or registered trademarks of Tandem Computers Incorporated in the United States and/or other countries. All other brand names are trademarks or registered trademarks of their respective companies. G.C.G. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | Geoffrey C. Grabow | Great people talk about ideas. | | Oyster Bay, New York | Average people talk about things. | | gcg(a)pb.net | Small people talk about people. | |----------------------------------------------------------------------| | PGP 2.6.2 public key available at http://home.pb.net/~gcg | | and on a plethora of key servers around the world. | | Key ID = 0E818EC1 | | Fingerprint = A6 7B 67 D7 E9 96 37 7D E7 16 BD 5E F4 5A B2 E4 | |----------------------------------------------------------------------| | That which does not kill us, makes us stranger. - Trevor Goodchild | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)c2.org> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The winsock remailer does not accept plaintext messages. The alpha and nymrod nymservers are down due to abuse. However, you can use the cyber nymserver. The nym.alias.net server will be listed soon. See http://www.cs.berkeley.edu/~raph/n.a.n.html for details. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. Hopefully, this is fixed by now. The penet remailer is closed. Last update: Mon 4 Nov 96 6:49:04 PST remailer email address history latency uptime ----------------------------------------------------------------------- jam remailer(a)cypherpunks.ca ************ 14:34 99.99% winsock winsock(a)c2.org --.--+----- 5:02:13 99.84% squirrel mix(a)squirrel.owl.de +++---++--- 2:35:51 99.76% lead mix(a)zifi.genetics.utah.edu +++++++- ++* 37:17 99.62% extropia remail(a)miron.vip.best.com -.------.-- 10:08:19 99.60% lucifer lucifer(a)dhp.com +++++++++ + 41:39 99.31% replay remailer(a)replay.com +******+++** 7:48 99.16% balls remailer(a)huge.cajones.com ******** *** 5:25 98.82% exon remailer(a)remailer.nl.com *##* **++# # 1:51 98.59% middle middleman(a)jpunix.com + +++ - +- 1:34:45 98.17% cyber alias(a)alias.cyberpass.net +***** + * 34:08 98.12% dustbin dustman(a)athensnet.com +-++-+-- -- 1:22:20 97.96% haystack haystack(a)holy.cow.net #+****-++# 3:00 86.77% mix mixmaster(a)remail.obscura.com ++ 1:30:30 47.85% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

RE: Censorship on cypherpunks
by blanc 17 Dec '03

17 Dec '03

From: Will French .........In any case, it's an admission on John Gilmore's part that libertarianism can't work without some measure of authoritarianism; the only argument is over _just how much_ authoritarianism we need. .............................................. Well, as Ludwig von Mises [an economist] would put it, "The issue is not _some_ authoritarianism vs _no_ authoritariansim, but *whose* authoritarianism." Libertarianism is about individual authority. John Gilmore acted as the individual that he is. If he shouldn't act upon under his own authority, he being in the position that he is relative to the existence of the cpunks, then the list doesn't represent libertarian ideals. The list is not an institution representing a philosophy to which all participants must subordinate themselves. Au contraire, it represents an opportunity for the free exercise of reason and one's personal judgement. I think this has been a good example of that. (obviously the venerable and computer-knowledgeable Dr. Vulius can find ways to sneak back in and continue to play his fun games, thus evidencing _his_ .... judgement.) .. Blanc

1 0

San Diego CPunk Physical meet this Thursday
by Christian Claborne 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This Thursday!!! San Diego Area CPUNKS symposium Thursday, Nov. 7, 1996. Invitation to all Cypherpunks to join the San Diego crowd at "The Mission Cafe & Coffee Shop". We discuss cryptography and other related subjects, have the special cypherpunk dinner, and unwind after a long day at the grind stone. Don't forget to bring your public key fingerprint. If you can figure out how to get it on the back of a business card, that would be cool. If you want the suspicious crowd there to sign your key, bring two forms of ID. Michelle is going to bring her PGP fingerprint in for signature. Can you believe it? Hopefully Lance Cottrell will give us an update on Mixmaster and what's going on at San Diego's best ISP. This will probably be the last symposium of the year since December is normally quite crazzzzy. Place: The Mission Cafe & Coffee Shop 3795 Mission Bl in Mission Beach. 488-9060 Time:1800 Their Directions: 8 west to Mission Beach Ingram Exit Take west mission bay drive Go right on Mission Blvd. On the corner of San Jose and mission blvd. It is located between roller coaster and garnett. It's kind of 40s looking building... funky looking (their description, not mine) They serve stuff to eat, coffee stuff, and beer + wine stuff. See you there! New guy, bring your fingerprint. Drop me a note if you plan to attend... NOTE: My primary e-mail address has changed to use my own domain. You can reach me at "claborne(a)cyberthought.com". Permanently replace any other address that you may have for me. I am currently not subscribed to the CP list since my current internet connection is slow (I'm waiting for my ISDN connection. :) 2 -- C -- -----BEGIN PGP SIGNATURE----- Version: 4.0 Personal Edition iQEVAgUBMnz1eYP1MBWQ+9udAQEWiQf+MaNcptFKcb/VPDabtXn8cnfmGsQn3h0R mzFIiXcHzh+OG2JfaX/oKR7wXFbhTMbKX9EbnFz0/IZeRZx9EO9Q3IrXUXyzZLBg lSYKEs+cyUZc/3IIpRVXgD1PrUEjyjKkss3U9KQgsQpl8+E6vlefQkCdHpR/v7kZ T1GyE3LqP+GAmr0M52kQeLKdyW3Ev6YVr5VTaxFz2uXePdJkUXXNvAE/V+UjdZn8 4dB6Y3P/JTBzxdfF6KCcdGttoq65JEfQYBjuxi9OSSkmS4vAfy36gUjQf6oiNgJX JyvxTxn8MQ46/ggqsL0IprnwFX0S/VV+JjAMmIO4Tw8mOBFSDmGDWA== =D1nQ -----END PGP SIGNATURE----- ... __o .. -\<, Claborne(a)CYBERTHOUGHT.com ...(*)/(*)._ Providing thoughts on your computing needs. http://www.CYBERTHOUGHT.com/cyberthought/ PGP Pub Key fingerprint = 7E BF 38 3F 24 A7 D1 B0 54 44 96 AA 10 D0 5D 51 Avail on Pub Key server. PGP-encrypted e-mail welcome! Dreams. They are just a "screen saver" for the brain.

1 0

Re: Dr. Vulis
by frantz＠netcom.com 17 Dec '03

17 Dec '03

As I put on my flame resistant suit... IMHO, most of the posts about John Gilmore's action re: Dr. Vulis are seriously miss-analyzing what has happened. As far as I can tell, John instructed his Majordomo to refuse subscription requests to cypherpunks from Dr. Vulis. That is all that John has done. What John has not done is: (1) John has not censored Dr. Vulis. He is still free to speak to cypherpunks by posting in the normal manner. (2) John as not turned to the courts as some others have suggested. Turning to the courts would certainly not be the way a cryptoanarchist would handle the situation. The best paradigm I can come up with to analyze John's action is my quite imperfect understanding of communitarian theory. In essence, communitarians say that there should be a level of social control between individual rights and the forceful coercion of the state. What John has done is step forward and excommunicate Dr. Vulis. He has said to Dr. Vulis, "You are no longer a member of the cypherpunks community." I would love to hear how people feel this action fits in to the cryptoanarchy, libertarian utopias we frequently discuss. E.g. Why is it not a perfectly reasonable action for some one to take in an anarchy? ------------------------------------------------------------------------- Bill Frantz | Tired of Dole/Clinton? | Periwinkle -- Consulting (408)356-8506 | Vote 3rd party. I'm | 16345 Englewood Ave. frantz(a)netcom.com | Voting for Harry Browne | Los Gatos, CA 95032, USA

4 4

Senator Goodlatte's warning (from IEEE Software article, Nov, 1996)
by Ernest Hua 17 Dec '03

17 Dec '03

>From IEEE Software, Nov, 1996, page 103, 2nd column: "Key Decisions Likely On Encryption Exports" by Stephen Barlas In fact, should he win, Clinton may go on the offensive. Goodlatte, whose bill is the House companion (HR 3011) to the Burns bill, said the Clinton administration told him that if the computer industry does not agree to a key management infrastructure, the President will seek legislation forcing Americans to use only encryption to which the government has access. Of course, this intention (to outlaw all non-GAK/KRAP) has been the desires of FBI/CIA/NSA all along, so no big surprise. I just would hate to see Congressional leaders cave in because of the "threat" of the administration's bozos attempting to introduce more restrictive legislation. The old "if we want 5, we demand 10, and we'll get 5 in the compromise" plan is really screwy and dishonest. Ern

1 0

Re: anonymous oddsman
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

>What I do is the following: I go to the Ladbroke's and offer to pay the >gamblers not $6, but $6.01 if Dole wins. Being somewhat rational, these >traders gamblers see a better deal than Ladbroke's offers, and >give me their $1 bills. This is very simple. >I take their $1 bills and run to "William Hill", where I take another >side of the bet. > In particular, I buy $6.01 / $10.00 bets for each dollar that I receive. > The remaining money $1(1-6.01/10) I simply take to my bank. Ah. If you can exploit\\\\\\\ provide arbitrage services for these folks, go ahead. You'd probably need to offer them $7-8 to deal with the difference in reputation between you and Ladbroke's, but assuming you can get customers and nobody breaks your legs, you do win. One reason the market isn't more efficient is that it's only being played once, and the odds are pretty lopsided, since Dole really has no chance. What's more interesting is that Ladbroke's aren't doing this themselves - if they're not. In a repeated game, or a closer one, the odds would probably tend to be the same at both houses. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

[NOISE] Censorship of Dr. Vulius
by Joe Robinson 17 Dec '03

17 Dec '03

I regret that after lurking for so long my first post is related to this.... Sandy Sandfort <sandfort(a)crl.com> wrote: > > The short answer is, No. More specifically, we constantly have > a stream of new readers sampling Cypherpunks. Some are > technically sophisticated; some are not. In either case, new > readers do not have the historical perspective not to fall for > Dimitri's big lies. Nor do they have any way of know what an > abberation his sort of behavior is on this list. "So this is > what Cypherpunks are like," would be a sad, but understandable > misinterpretation of what we're all about. What John did was > appropriate. While it is true that Cypherpunks IS a much sampled list, it's my opinion that the distribution in the level of education among subscribers is rather skewed. I therefore believe that the "average" subscriber to this list would be intelligent and competent enough to form their own conclusions regarding the validity of the opinions expressed by anyone. I like to believe that the labels I assign to groups are based on a representative sampling of the given population, not by the sampling a select few. It's again my opinion that if others can't do that, and <cliche>judge books by their covers</cliche>, it's their loss. and Greg Broiles <gbroiles(a)netbox.com> mentioned: > [relevant, well thought-out stuff snipped] > >Given that John Gilmore is the source of the oft-repeated "The net sees >censorship as damage and routes around it" quote, it strikes me as unlikely >that he took the steps he did without some reflection on their meaning, >consequences, and chances of success. I'm sure that the decision wasn't made hastily or lightly. It doesn't change anything though - the damage is done. If even one person doubts the credibility or integrity of either John or the list, then Dr. Vulius has won. and finally, Declan McGullagh <declan(a)eff.org> said: > >With the right to speak freely comes the right to decline to speak. John, >as the owner of the computer maintaining the cypherpunks list, has the >right to decline to speak and to kick off a user who violates the >covenant of the mailing list. > >The kicked-off user has the right to start his own mailing list with >different standards. If he likes, he can establish the rules as a type of >contract to which participants must agree. And observers can criticize >either or both of them. > >Is this censorship, double standards, and hypocrisy? I think not. The problem lies in determining who defines the protocols and punishments, especially on a list such as this. For someone who espouses freedom of speech to arbitrarily censor someone is indeed hypocritical. I'm not defending Dr. Vulius - for some time now, he and a number of others have been filtered into my Humour mailbox. I'm just spewing off about having the _choice_ to ignore him or not, as _I_ see fit, you know - "... and then they came for me, and there was no one left to speak out." JR

3 3

Re: Censorship on cypherpunks
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Mon Nov 04 17:04:13 1996 Mark wrote: > It's only authoritarianism if the government is involved. Clearly, the > government isn't involved in this matter. Indeed. IMNSHO, a self-governing property-owner (John) saw that the value of a piece of his property was being reduced by a person (Vulis, KOTM) camping there. He asked that person (many times, and no-doubt in a far more tolerant way than _any_ government has ever in history behaved with any rulebreaker) to "please use the latrine instead of the stream." The person not only refused, he said "you'll have to make me." The property owner made him. Most of the other campers, even those who (like me) choose to (and are able to) filter stream water before drinking it, breathed a sigh of relief. John's action had about as much to do with "censorship" as AFDC has to do with "charity" or "compassion." The growing misuse of the word "censorship," especially here, is another symptom of the annoying educational work that Libertarians need to do, constantly, to fight the ever-encroaching Newspeak of those who do not believe in individual property rights, like the one (exclusion) that John exercised, only after much provocation. If you don't like it, tough shit. Go "buy your own campground" and start your own list, just like Perry is. But please don't mislabel John's action "Libertarian censorship." JMR One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me Defeat the Duopoly! Vote Harry & Jo http://www.HarryBrowne96.org/ ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 I will generate a new (and bigger) PGP key-pair on election night. jmr(a)shopmiami.com ____________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMn5oYW1lp8bpvW01AQF6ewP/U8DZc3FXuKgRQXF+mwWhVkimauwEXQYm p/Rd2u2sYvPMuQD3QMaN+WQCgkpOu0mLlt6TU0n+VJpVYkg82rSHDFyoez71bwvv jPEXZoJ7dVNnBUpy8b0z+NPSyRzVCPlRaFmaJE1Yba6wV01PMkMHf5ouobUps4L0 7cFlrfBGQaw= =J5FK -----END PGP SIGNATURE-----

1 0