December 2003 - cypherpunks-legacy

RSA and me...
by gt＠kdn0.attnet.or.jp 17 Dec '03

17 Dec '03

'Lo. Is the "RSA in 3 lines of Perl" a munition (under ITAR)? What if I got it as a tatoo? _______________ - 2[b]||!2[b], what's the question? It's a tautology! - PGP key now available on finer keyservers everywhere.

3 2

Small question about the list
by MatriX Spider 17 Dec '03

17 Dec '03

Hi, I've been around the Cypherpunk list for a couple of month now and it don't correspond exactly to what I've expect. I would be realy happy if someone could tell me the adress to remove my name from the distribution list. Could anyone send me the procedure on how to remove my name of the list ? Thanks for your time and for your help, MatriX.

2 1

Hello from the Brotherhood
by Darkened-Node 17 Dec '03

17 Dec '03

Hello to everyone from the Brotherhood of Darkness Fellow Cypherpunks: Please visit our site at: http://www.ilf.net/brotherhood/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Darkened-Node Executive Member -THE- -BROTHERHOOD- -OF DARKNESS- Comments or Questions? Darkened-Node(a)Geocities.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Black markets vs. cryptoanarchy
by Mike Ingle 17 Dec '03

17 Dec '03

Cryptoanarchy will have arrived when you can openly _advertise_ these services and still stay in business indefinitely. Most of the things we talk about - even Jim Bell's assassination market - already exist, but they cannot be advertised. You have to go looking for them, at some risk to both buyer and seller. If the seller is visible enough for you to find him, he is visible enough to get caught. For example, there is plenty of 'pirate' material on the net, but it tends to go away as soon as the addresses become well-known. Cryptoanarchy will be here when you can advertise yourself as a distributor of pirate software (or anything else you want to sell), do business with a publicly known contact address, and still not get caught. 'Black markets' exist due to the inability to do this. Currently the techniques of anonymity are limited to two: indirection for source anonymity and broadcast for recipient anonymity. We are more or less where crypto was before the invention of public key. You can gain security by spreading risk among multiple parties (key distributors for crypto, or remailers for anonymity) but you can't 'make your own anonymity' like you can make your own security with public key crypto. A theoretical discovery is needed particularly in the area of recipient anonymity. Good sender anonymity and weak recipient anonymity leads to 'hit and run' behavior such as spamming email and newsgroups, but not to anonymous markets. Mike > >Crypto-anarchy benefits the poor more than the rich. The underlings > >of society are going to love it. > > In fact, they basically already practice it. Not with computers, of course, > but in terms of not reporting cash income, not reporting tips, engaging in > barter work with others, and gambling in various non-sanctioned markets. > > (Numbers games and sports betting are huge markets. Interestingly, such > markets also validate much of what we say about "reputations." After all, > when was the last time you heard about a bookie being sued in court for not > paying up? And private justice is administered, as welshers are disposed of > directly, without a long, expensive trial. Nearly everything in "crypto > anarchy" has direct parallels in "underworld and black markets." Some say > they are really the same thing. Perhaps.) > > --Tim May

9 12

Timmy
by L.Detweiler 17 Dec '03

17 Dec '03

just heard an interesting rumor that Timmy has been blacklisted from working anywhere here in Colorado as a dangerous anarchist and/or lunatic revolutionary. but perhaps he can still work in Silicon Valley if anyone there is willing to hire a debauched millionaire playboy. the standards are different where no one wants to live, I guess. (hmmmm, catch that recent cool article on CO in National Geographic?) besides, everyone here in CO would prefer all the anarchists stay in CA anyway so they can all be taken care of in one fell swoop with the next "big one".. did I feel a little "trembling" over there or is it just the standard cpunk cowardice? (hehehe) | /\ |\| /~ L~ L_ /~~\ | | \_ L_ http://www.csn.net/~ldetweil/

4 3

Re: Timmy
by .echo 17 Dec '03

17 Dec '03

>From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. >Comments: Dole/Kemp '96! You can remove Dole/Kemp from your email headers, since the election is past. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= .echo echo68916(a)delphi.com

1 0

Re: Black Unicorn exposed?
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 8:30 PM 11/9/1996, Robert Hettinga wrote: >At 12:45 pm -0500 11/9/96, Peter Hendrickson wrote: >> We are hardly operating in a hostile environment. Yet, somebody >> who has apparently gone to some effort to have an anonymous >> identity has been exposed. The implications of this are worth >> considering. > Nope. Sorry, Pete. Hope you didn't throw out your sholder, swinging for the > fences like that. ;-). Phew! While this news leaves me looking foolish, I am relieved. Now for my real question: Does the One True Cypherpunk really have a black unicorn on his coat of arms? Peter Hendrickson ph(a)netcom.com

1 0

Re: Pseudo-law on the list and libel (fwd)
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 11:21 AM 11/9/1996, Jim Choate wrote: > The real issue here is that folks on the net want the protection of the 1st > Amendment but they don't want the responsibility that goes along with it. > This list qualifies as a press. As a result it has a responsibility relating > to what it distributes. I don't find the word "responsibility" in the First Amendment. You and the courts may decide John has a responsibility to let other people use his computer, but the source of this idea is not the First Amendment. Peter Hendrickson ph(a)netcom.com

1 0

allow me to state the obvious....
by SUCRUM22_at_INDY-ADP＠smtp-gw.cv62.navy.mil 17 Dec '03

17 Dec '03

i am your average joe who uses the computer for work and e-mail and the occasional jaunt into the internet. going along reading this whole crypto-anarchy thing makes me want to cry. the whole point of cryptography is getting info from my eyes to yours. period. you can say that "illegal" information passes along the internet, but hello people - illegalities have been going on since long before the invention of the computer (or even the notion of cryptography - if i may stop to point out the obvious). the only reason _i_ use encrypted stuff is because i don't want my nosy sysadmin reading my mail. its that simple. think about it. how many times is your e-mail handed off? when sent it naturally follows the most convenient path to its destination, and even anonymous re-mailers (can) keep a hard copy of the messages that cross their connections with the original address included. you can go off into spoofing address and so on, but your average joe may (or may not) have the time or knowledge (much less the motivation) to do that. keep that in mind before you go saying that crypto is a good/bad thing. ---------------------- SUCRUM22(a)cv62.navy.mil ----------------------- a calculated risk based on the possible consequence of an action is better than a haphazard one based on poor judgment or ignorance --------------------------------------------------------------------- Don't confuse my views with those of the DoD or the United States Navy

5 4

Re: Why is cryptoanarchy irreversible?
by ph＠netcom.com 17 Dec '03

17 Dec '03

At 3:30 AM 11/9/1996, Adam Back wrote: >Peter Hendrickson <ph(a)netcom.com> writes: >> Where will you keep your secret key? Remember, when they go through >> your house they bring 20 young graduates from MIT who are just dying >> to show how clever they are and save the world at the same time. > Keep your secret key in your head. I think this is hard to do in practice. I have tried. >>> This is the essence of steganography and the nature of signal and >>> noise are fundemental principles of information theory. >> >> The concept of noise is not all that well defined, however. There >> is no way to look at a signal and say "this is all noise." >> Sometimes physical theories may lead you to believe that it is all >> noise. That is fine for many applications, but when becomes less >> convinced of things if the consequences are severe. > Your plausible deniability has to get quite low before it will stand > up as "proof" in court. (This goes under 3.1 or 3.2 of my outline, which you may not have received yet.) My idea is that the lack of noise is used as evidence to get a search warrant. The search warrant is used to get the evidence to put you away forever. (This goes under 3.3 of the outline.) The severe penalties and significant chance of capture will keep the number of cryptoanarchists low. > Your real challenge is keeping your stego programs safe. Boot > strapping a stegoed encrypted file system while leaving no stego code > lying around isn't that easy. Excellent point, especially since you don't have an encrypted virtual disk. Can anybody resolve this? >>>> If you are not doing it by hand, you own terrorist software and will pay >>>> the price. >>> Ah yes, terrorist programs like cat and perl and operating systems like >>> Linux which contain a loopback filesystem that I can hook a perl >>> interpreter into at compile-time (which is enough for me to rewrite the >>> program from scratch each time if necessary, unless things like math >>> libraries are also outlawed on computers :) I think that the crypto >>> concentration camps are going to be very crowded places. >> Can you elaborate on this? I am curious to know exactly what you are going >> to keep in your head and what goes on the disk. Please post the Perl >> code that you would type in from scratch every time. > My specialty :-) > rc4 in C: > #define S,t=s[i],s[i]=s[j],s[j]=t /* rc4 key <file */ > unsigned char s[256],i,j,t;main(c,v)char**v;{++v;while > (s[++i]=i);while(j+=s[i]+(*v)[i%strlen(*v)]S,++i);for( > j=0;c=~getchar();putchar(~c^s[t+=s[i]]))j+=s[++i]S;} > rc4 in perl: > #!/usr/local/bin/perl -0777-- -export-a-crypto-system-sig -RC4-3-lines-PERL > @k=unpack('C*',pack('H*',shift));for(@t=@s=0..255){$y=($k[$_%@k]+$s[$x=$_ > ]+$y)%256;&S}$x=$y=0;for(unpack('C*',<>)){$x++;$y=($s[$x%=256]+$y)%256; > &S;print pack(C,$_^=$s[($s[$x]+$s[$y])%256])}sub S{@s[$x,$y]=@s[$y,$x]} (Under 3.3) I would have a hard time memorizing these programs. This pretty much guarantees that the number of cryptoanarchists will be small. (I am deeply envious of your legal right to post this code, however. Now, why was it that we broke away from the Mother Country?) I would like to see a longer exposition of your approach. Given a hostile environment, how would I operate a small anonymous perl coding service using your techniques? Don't forget to tell me how I get paid and when I get to spend my "ill-gotten" gains and how nobody will notice that I am doing it. Peter Hendrickson ph(a)netcom.com

2 1