December 2003 - cypherpunks-legacy

extortion via digital cash (fwd)
by gimonca＠skypoint.com 17 Dec '03

17 Dec '03

Forwarded message: > From: scottb(a)aca.ca > Date: Tue, 15 Oct 1996 11:44:25 -0400 > Subject: extortion via digital cash > > Both ideas are bad, in that you stand a good chance at getting caught. > > I was wondering, what if you demanded payment via Ecash, through nym > servers, aliases, etc. From what I understand, it is just like cash, ie: no > record of transaction, but you get the added bonus of not having to meet the > other party-like a fund transfer. Once you have your 1,000,000 Ecash, you > could dump it on a disk, and close your internet account (unless you really > really trust your privacy technology). And I also think that you would have > the option to cash this into real funds at either the Mark Twain bank, or > likely somewhere in the Caymen Islands (maybe through those online gambling > houses). > The Digicash product only has one-way anonymity. Their own pages are a good place to start: http://www.digicash.nl/ecash/about.html --CG

1 0

Re: Service pays users (sort of) to read commercial e-mail
by Bill Stewart 17 Dec '03

17 Dec '03

At 02:50 PM 10/14/96 -0700, Greg Broiles <gbroiles(a)netbox.com> wrote: >>From time to time we've discussed the economics of paying per-message costs >for E-mail, and/or systems where advertisers pay users to read their >messages. Someone seems to have set up a system like that. It's at ><http://www.aristotle.org>. They seem to be using voter registration as an >is-a-real-person credential. (Their idea seems to be that they'll charge Aristotle.org is run by John Aristotle Phillips. If you remember back in the 70s when a student at Princeton designed an atomic bomb as his junior physics project, that was him (he wasn't brilliant; he just needed a really good paper to bring up his low physics grades.) He's since gone into political consulting. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

Re: WOW!
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

bryce(a)digicash.com writes: > > > I already responded more times than this threat warranted > > > > I'm totally nonplused. Does anyone on the list have any idea > > what Dimitri is talking about? Has he posted a RESPONSIVE answer > > to my invitation? If so, I never saw it. > > > He responded two or three times, but I wasn't able to determine > whether he was saying "Yea" or "Nay". Perhaps he didn't believe > that your offer was serious. > > > > Does anyone have any idea why Dimitri uses the term "threat"? I > > have not threatened Dimitri and I have indicated that as my guest > > he will be under the mantle of my protection. He'll be safer here > > than he is in his own bed. > > > I believe he typo'ed "thread". > Yes - I mistyped "thread". My apologies. Once again: I already replied to this _thread_, and then I received a _threat_ of a libel lawsuit in connection with this _threat_. Sorry for the typoes and the resulting confusion. At any rate, if people are really willing to pay this sort of money to hear me speak, perhaps I should make a videotape of me giving a presentation about my Usenet cancelbot and send it to Sandy? Thanks to Bryce for the correction. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

3 2

Majordomo w/ built-in security
by Christopher Durfy 17 Dec '03

17 Dec '03

Hi guys, I'm new to the list, and it looks like a good one ;) I've got a question, and was hoping someone could point me in the right direction. Here's the situation: A large group of Doctors want to have an email list set up, but are concerned about privacy issues. Client's confidential patient info is likely to be talked about, and any interception of data would likely caused them to get sued =P Would the best way to get somehow incorporate PGP into the majordomo or smartlist (if it's possible) and either assign keys to all the doctors (or one key for ALL the doctors maybe, to cut on admin times....) Anyone ever run up against a situation like this? Any pointers, horror stories or solutions are very welcome! Thx. -Christopher Durfy, chris(a)alphawave.com

3 2

using TCP sequence numbers for stego
by Mark M. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would using TCP sequence numbers to carry stegoed data be practical? The data would have to be removed at a lower level. This would mean kernel patches and extra system calls in UNIX. I have no idea what this would require under Windows or Mac. This seems like the ideal place to stego data because most OS's have started using random sequence numbers. Any ideas? Mark - -- finger -l for PGP key PGP encrypted mail prefered. -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQEVAwUBMmP7sSzIPc7jvyFpAQHlUQf+JwmltREsYq65f5YPOdubmr8hxAjfiOa+ zIX7VpP75qm+SgiZTxBaioN2pVzW0yCb36IqNKYuZuUww/ip8Bh/0aNnyzNguD+p jXVOLpzbfBeD33Q+NLag6N2R2PogZQT2yx2vfSwQ9zeyoZ1CYTxiKZHDq06czzAt gq3wszp0l9U1jr2xTnmprNYofYUrvWitpId41tTbyx336dmJ5lNKS1Nssu/+vCZC B9Gib+s/ayQz6BGuEDCVqr36cZY75uHYfUuMnIHnONYAsFC4qR1vNdJ/OnCXJJR2 D6Ns9POsb9NGCh0pFzGjDavpQKwIU9b/Br30vge1tKsPA30GByPJMQ== =NaaI -----END PGP SIGNATURE-----

1 0

Dmitri
by L.Detweiler 17 Dec '03

17 Dec '03

I just pledged $20 for Dmitri's trip and want to publicly encourage him to attend. Dmitri, I can attest the cpunks and Sandy are gracious hosts. (lately Dmitri has been sending me mail intermittently about tcm) because of the extremely wide interest and "buzz" factor of this activity, I suggest this invitation of guests with donations be made a semi-regular feature of cpunk meetings, with discussions on the list about future guests. btw, I have recently tweaked my www site slightly for anyone who is interested. oh, and btw, there was a fantastic article on crypto in last week's newsweek by Steven Levy, I don't recall seeing mention of it here. it mentioned "crypto anarchy" and the 4 horsemen of the infocalypse. a very concise yet informative and current article. | /\ |\| /~ L~ L_ /~~\ | | \_ L_ http://www.csn.net/~ldetweil/

1 0

[TIMMY MAY] Timmy May doesn't like being exposed as a liar
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

More spam from FOTM (friends of Timmy May): >Received: from miafl2-16.gate.net (miafl2-16.gate.net [199.227.2.143]) by osceola.gate.net (8.7.6/8.6.12) with SMTP id HAA187758; Wed, 16 Oct 1996 07:13:05 -0400 >Date: Wed, 16 Oct 1996 07:13:05 -0400 >Message-Id: <199610161113.HAA187758(a)osceola.gate.net> >From: Jim Ray <liberty(a)gate.net> >To: root(a)bwalk.dm.com, postmaster(a)bwalk.dm.com >X-Priority: Normal >Subject: Dr.Dimitri Vulis KOTM >X-Mailer: Pronto Secure [Ver 1.10] >X-Prontosecureinfo: T=signed, P=x-pgp > >-----BEGIN PGP SIGNED MESSAGE----- > >Mime-Version: 1.0 >Content-Type: text/plain >Content-Transfer-Encoding: 7bit > >To: root(a)bwalk.dm.com, postmaster(a)bwalk.dm.com >Date: Wed Oct 16 07:10:45 1996 >Can you folks somehow get Dr.Dimitri Vulis KOTM <dlv(a)bwalk.dm.com> to quit >sending anonymous messages to cypherpunks? I have killfiled him, but he >sends things with subject headers like "RSA" through the anonymous remailers >and it is impossible to killfile them and still get interesting anonymous >messages. > >He is evidently angry at another subscriber, Tim May, for showing the list >how much of a fool he was regarding economics in the past, but now he shows >how much of a fool he is. Below is an example, the subject was RSA, and it >could only have come from him, I assure you. [BTW, this is not a threat of >legal action on my part against you, it's just that you are lowering your >reputations by letting him continue spewing garbage, and now that even >killfiling him hasn't worked, I am trying to convince you to talk to him and >encourage him to please take his lithium regularly.] >JMR > >- -----Begin Included Message ----- > >Date: Tue, 15 Oct 1996 15:35:04 -0400 (EDT) > From: amnesia(a)chardos.connix.com (Anonymous) >To: cypherpunks(a)toad.com >Cc: > >Timmy C. Mayflower was born when his mother was on the >toilet. > > > >- ---- End of forwarded message ---- >One of the "legitimate concerns of law enforcement" seems to be >that I was born innocent until proven guilty and not the other >way around. -- me > >Defeat the Duopoly! Vote Harry & Jo http://www.HarryBrowne96.org/ >___________________________________________________________________ >PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 >I will generate a new (and bigger) PGP key-pair on election night. ><mailto:jmr@shopmiami.com> http://www.shopmiami.com/prs/jimray >___________________________________________________________________ > >-----BEGIN PGP SIGNATURE----- >Version: 2.6.2 > >iQCVAwUBMmTCum1lp8bpvW01AQHAugP/e/GTay0y778Ziy3JbWCGBb+tRxM8Q1Zi >Z3aIP97hNYYoD7QKi9yP1gS3ZRbg/9ZXJonWTi+zmZ7yUjmWndczmXJ2IAC+Rgpx >7MQmrhjU4htmiMCuawNmVLZRNZMl/+kNnX15taA8GdXTcuPXUsGN0y39oMbbqT5g >do3B4yicgrY= >=iix/ >-----END PGP SIGNATURE----- >

1 0

RSA
by amnesia＠chardos.connix.com 17 Dec '03

17 Dec '03

Timmy C. Mayflower was born when his mother was on the toilet.

1 0

SUN_syn
by John Young 17 Dec '03

17 Dec '03

CIAC Bulletin H-02 issues Sun's thumb-busting god-dam-its for SYN flooding: ============================================================================= SUN MICROSYSTEMS SECURITY BULLETIN: #00136, 9 Oct 1996 ============================================================================= BULLETIN TOPICS In this bulletin Sun discusses the TCP-based "SYN flood" denial- of-service attack. We suggest ways to tune most Solaris/SunOS systems to make them more resistant, and explain which releases and configurations stand up best. We also discuss which customers are most likely to be affected, and the degree to which firewalls and similar insulating arrangements can protect an enterprise from this attack. This Bulletin also describes the patches and other changes Sun commits to making in the future in response to the emergence of such attacks. This denial-of-service attack, which affects all operating systems which implement the TCP protocol, has previously been discussed in CERT(sm) Advisory CA-96.21, issued on 19 September 96. Attacks against several prominent service providers have been well documented in the last several weeks in Time magazine, the Wall Street Journal, and many other national and international periodicals. I. What has Happened, Who is Affected, What to Do II. Understanding the Vulnerability III. Technical Recommendations IV. Plans and Schedules APPENDICES A. Queuing Capacity Vs. Attack Rates B. How to obtain Sun security patches C. How to report or inquire about Sun security problems D. How to obtain Sun security bulletins or short status updates ----- http://jya.com/sunsyn.txt (48 kb) ftp://jya.com/pub/incoming/sunsyn.txt SUN_syn

1 0

[POINTERS] On Vulis' net background
by Douglas B. Renner 17 Dec '03

17 Dec '03

Some *very* informative background data may be found at: http://www.math.harvard.edu/~verbit/scs/cranks/from-Schlomo.html#vulis Of course the title KOTM may also have been fraudulently obtained (if USENET vote forgery bears any relevance...) see: "Fraudulent votes from bwalk.dm.com cited" in (are we surprised?) news.admin.net-abuse.misc Here's a pointer to one archive: http://www2.altavista.digital.com/cgi-bin/news?msg@3945@misc%2enews%2einter… Doug

3 4