December 2003 - cypherpunks-legacy

Re: Sliderules, Logs, and Prodigies
by Sean Roach 17 Dec '03

17 Dec '03

A quick note, I consider myself to be a nerd. This is in part "reclaiming", as I found myself uninterested in sports, as my classmates were, and found computers fun.(good reason too, considering I had access to one of those, an old TI99/4, longer than I had classmates). I didn't grow up un either log tables or slide rules, but I did learn how to do basic arithmetic on both the traditional slide rule, and a round one designed for engineers. At one time, nerds were the intellectuals, the only thing that has really changed is that now the nerds are in control, making intellectual arts a little more appealing. I'm only a 21 year old college student who is still somewhat ignorant, make that quite ignorant, about the world, but I do feel that just because it was an unpopular term to describe you, it isn't disrespectful to consider ourselves nerds. Relevance to Crypto, none. Just attempting to defend myself in the ether.

1 0

free SSL CAs?
by Sam Quigley 17 Dec '03

17 Dec '03

Are there any free Certificate Authorities for SSL? I've got a Stronghold server running, and I don't particularly want to pay Verisign/Thawte's high prices, but I do want to be able to do real SSL. I've set up my own CA, and given myself my own cert., but having the same server you're interacting with being the one that's the CA for the transaction leaves the setup open to man-in-the-middle attacks (I'd think, at least...). So, who do I turn to for a cert.? I don't need amazingly trusted or trustworthy security -- maybe just some third party whose site is unlikely to have been compromised, etc... Please respond by email: I've moved to coderpunks, and so won't see replies on cypherpunks. thanks, -sq

4 3

Re: Censorship on cypherpunks
by Greg Broiles 17 Dec '03

17 Dec '03

At 06:54 PM 11/3/96 -0500, Will French wrote: > I'm quite upset about this. Up to now I was able to tell >people that "there is at least one mailing list on the net that >functions in a completely open manner". No more. This is an easy problem to solve. Run your own list, you can set the policies. There are service providers who will set up/maintain mailing lists for you. If you can't find one, and "quite upset" means >$200/month to you, let me know, and I'll set one up for you. Mailing lists aren't exactly rocket science. Actually, I'm curious exactly how much money "quite upset" means to you. Perhaps you and the others who are also upset can buy Dmitri his own mailing list. You can even subscribe your list to the cypherpunks list, and advertise it as "total freedom cypherpunks", so that subscribers to your list get everything on cpunks, plus Vulis' helpful commentaries. The lesson to learn from this is not "all people are essentially authoritarian" but "one jerk can ruin something good for 1500+ people." Just one turd in the punchbowl, and all that. Doesn't matter if the turd has a PhD, nobody wants any punch. When one person does something which inconveniences or annoys many people (over and over, intentionally) it's unsurprising (and not even "authoritarian", in any useful sense of the word) that someone gets sick of it and tries to correct the situation. Freedom isn't just for assholes; and the name for someone who won't take care of himself (or his mailing list) isn't "friend of liberty", it's "pushover". -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

1 0

Any Info for Sen. Pressler....
by Troy M. Barnhart 17 Dec '03

17 Dec '03

If anyone has any specific bits of info on cryptography, etc... please feel free to send it to me... I live in South Dakota... Due to circumstances I occasionally see and speak w/ Senator Larry Pressler - (Committee Leader)... (btw, I am not a Pressler plant or anything...) Been talking to him w/ the Burns Bill and such... He wants less gov't. control, but does have "concerns" w/ the garbage... And, wants to balance the business and private concerns... He is open to any info from a "constituent" though... regards, barney He who joyfully marches to music in rank and file has already earned my contempt. He has been given a large brain by mistake, since for him the spinal cord would suffice. -- Mark Twain E-mail: barney(a)rapidnet.com

1 0

Press Release: Atalla Agreement with RSA
by Geoffrey C. Grabow 17 Dec '03

17 Dec '03

ATALLA INKS AGREEMENT WITH RSA DATA SECURITY INC. TO PROVIDE OPEN CRYPTO-API FOR NEW SET INTERNET PAYMENTS TOOLKIT Atalla's PayMaster Internet Security Processor (ISP) will provide enhanced SET performance and secure key management capabilities for new RSA toolkit-based applications SAN JOSE, CA -November 4, 1996- Atalla, a Tandem Company (r), today announced that it has signed an agreement with RSA Data Security Inc., to develop an open Application Programming Interface (API) that will become a key component of RSA's new SET payments toolkit. The suite of tools from RSA is being built to enable developers to deploy secure SET-capable applications quickly, with transparent access to the strongest commercial Internet security functionality. The new API developed by Atalla, will access the command set to Atalla's PayMaster Internet Security Processor (ISP) product to accelerate SET protocol performance and to manage cryptographic keys securely. The new SET Toolkit suite from RSA is designed to provide banks, cardholders, merchants and application providers with the ability to deploy secure SET- based applications without specialized cryptographic expertise. Atalla will be one of seven companies that will support the RSA SET toolkit. The other companies are Open Market Inc., NEC, Netscape, Tandem Computers Inc., Verifone and Verisign. The SET protocol specifies how cardholders, merchants, issuing banks and acquiring banks will interact to ensure secure payment processing over the Internet. SET relies on specially developed encryption technology from RSA Data Security Inc., and has been adopted by Visa and MasterCard to secure credit card transactions, authorization and settlement information over public networks such as the Internet. "The development of the SET protocol was an important milestone in securing commerce over the Internet." said Robert Gargus, president and general manager of Atalla. "We believe that the combination of new, RSA-based SET tools and the strong security functionality and high throughput provided by our Atalla PayMaster Internet Security Processor will now help transform public networks such as the Internet, into a secure, high- performance payments infrastructure that banks, merchants and cardholders will trust." "We consider integration with the Atalla PayMaster ISP a critical feature of the RSA SET developer's suite," said Jim Bidzos, president of RSA Data Security, Inc. "The Atalla PayMaster, in combination with RSA, will now allow for cost-effective, high- volume SET application servers through greatly improved performance for the underlying cryptography and strong physical protection for private keys. We believe this will overcome a major barrier to the adoption of secure electronic commerce on the Internet." Atalla's PayMaster ISP product was designed specifically to manage the cryptographic requirements specified by the SET protocol. The protocol requires multiple public key operations for each SET transaction. The Atalla PayMaster ISP product offloads these computationally-intensive tasks from server CPUs and isolates private information intended solely for merchants from private information intended solely for banks. This ensures that data cannot be altered at any point in the network, and accelerates the required SET -specified public-and-private key operations. Atalla's PayMaster ISP also provides RSA and DES-based cryptography to provide a high-performance bridge from the Internet to private networks such as the Bank Payments network. About Atalla (a Tandem Company) Atalla (a Tandem Company) brings nearly 25 years of experience securing commerce over private networks to the public networks and the Internet/Intranet arena. The company's products include industry-leading hardware-based security processors for the Internet, Intranet and the bank transfer networks, POS/POE (point-of-sale/point-of-entry) credit /debit payment terminals, customer authorization and PIN selection terminals, and secure enrollment products for banking, retailing and government applications. An estimated 70 percent of all ATM transactions in North America (estimated value: $1.4 trillion daily) are secured by Atalla's specialized security processor products. Atalla is headquartered at 2304 Zanker Road, San Jose CA 95131. Phone: (408) 435-8850. Fax (408) 435-1116. The company's website is located at www.atalla.com. Tandem, Atalla, PayMaster, and the Tandem logo are trademarks or registered trademarks of Tandem Computers Incorporated in the United States and/or other countries. All other brand names are trademarks or registered trademarks of their respective companies. G.C.G. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | Geoffrey C. Grabow | Great people talk about ideas. | | Oyster Bay, New York | Average people talk about things. | | gcg(a)pb.net | Small people talk about people. | |----------------------------------------------------------------------| | PGP 2.6.2 public key available at http://home.pb.net/~gcg | | and on a plethora of key servers around the world. | | Key ID = 0E818EC1 | | Fingerprint = A6 7B 67 D7 E9 96 37 7D E7 16 BD 5E F4 5A B2 E4 | |----------------------------------------------------------------------| | That which does not kill us, makes us stranger. - Trevor Goodchild | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)c2.org> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The winsock remailer does not accept plaintext messages. The alpha and nymrod nymservers are down due to abuse. However, you can use the cyber nymserver. The nym.alias.net server will be listed soon. See http://www.cs.berkeley.edu/~raph/n.a.n.html for details. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. Hopefully, this is fixed by now. The penet remailer is closed. Last update: Mon 4 Nov 96 6:49:04 PST remailer email address history latency uptime ----------------------------------------------------------------------- jam remailer(a)cypherpunks.ca ************ 14:34 99.99% winsock winsock(a)c2.org --.--+----- 5:02:13 99.84% squirrel mix(a)squirrel.owl.de +++---++--- 2:35:51 99.76% lead mix(a)zifi.genetics.utah.edu +++++++- ++* 37:17 99.62% extropia remail(a)miron.vip.best.com -.------.-- 10:08:19 99.60% lucifer lucifer(a)dhp.com +++++++++ + 41:39 99.31% replay remailer(a)replay.com +******+++** 7:48 99.16% balls remailer(a)huge.cajones.com ******** *** 5:25 98.82% exon remailer(a)remailer.nl.com *##* **++# # 1:51 98.59% middle middleman(a)jpunix.com + +++ - +- 1:34:45 98.17% cyber alias(a)alias.cyberpass.net +***** + * 34:08 98.12% dustbin dustman(a)athensnet.com +-++-+-- -- 1:22:20 97.96% haystack haystack(a)holy.cow.net #+****-++# 3:00 86.77% mix mixmaster(a)remail.obscura.com ++ 1:30:30 47.85% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

RE: Censorship on cypherpunks
by blanc 17 Dec '03

17 Dec '03

From: Will French .........In any case, it's an admission on John Gilmore's part that libertarianism can't work without some measure of authoritarianism; the only argument is over _just how much_ authoritarianism we need. .............................................. Well, as Ludwig von Mises [an economist] would put it, "The issue is not _some_ authoritarianism vs _no_ authoritariansim, but *whose* authoritarianism." Libertarianism is about individual authority. John Gilmore acted as the individual that he is. If he shouldn't act upon under his own authority, he being in the position that he is relative to the existence of the cpunks, then the list doesn't represent libertarian ideals. The list is not an institution representing a philosophy to which all participants must subordinate themselves. Au contraire, it represents an opportunity for the free exercise of reason and one's personal judgement. I think this has been a good example of that. (obviously the venerable and computer-knowledgeable Dr. Vulius can find ways to sneak back in and continue to play his fun games, thus evidencing _his_ .... judgement.) .. Blanc

1 0

San Diego CPunk Physical meet this Thursday
by Christian Claborne 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This Thursday!!! San Diego Area CPUNKS symposium Thursday, Nov. 7, 1996. Invitation to all Cypherpunks to join the San Diego crowd at "The Mission Cafe & Coffee Shop". We discuss cryptography and other related subjects, have the special cypherpunk dinner, and unwind after a long day at the grind stone. Don't forget to bring your public key fingerprint. If you can figure out how to get it on the back of a business card, that would be cool. If you want the suspicious crowd there to sign your key, bring two forms of ID. Michelle is going to bring her PGP fingerprint in for signature. Can you believe it? Hopefully Lance Cottrell will give us an update on Mixmaster and what's going on at San Diego's best ISP. This will probably be the last symposium of the year since December is normally quite crazzzzy. Place: The Mission Cafe & Coffee Shop 3795 Mission Bl in Mission Beach. 488-9060 Time:1800 Their Directions: 8 west to Mission Beach Ingram Exit Take west mission bay drive Go right on Mission Blvd. On the corner of San Jose and mission blvd. It is located between roller coaster and garnett. It's kind of 40s looking building... funky looking (their description, not mine) They serve stuff to eat, coffee stuff, and beer + wine stuff. See you there! New guy, bring your fingerprint. Drop me a note if you plan to attend... NOTE: My primary e-mail address has changed to use my own domain. You can reach me at "claborne(a)cyberthought.com". Permanently replace any other address that you may have for me. I am currently not subscribed to the CP list since my current internet connection is slow (I'm waiting for my ISDN connection. :) 2 -- C -- -----BEGIN PGP SIGNATURE----- Version: 4.0 Personal Edition iQEVAgUBMnz1eYP1MBWQ+9udAQEWiQf+MaNcptFKcb/VPDabtXn8cnfmGsQn3h0R mzFIiXcHzh+OG2JfaX/oKR7wXFbhTMbKX9EbnFz0/IZeRZx9EO9Q3IrXUXyzZLBg lSYKEs+cyUZc/3IIpRVXgD1PrUEjyjKkss3U9KQgsQpl8+E6vlefQkCdHpR/v7kZ T1GyE3LqP+GAmr0M52kQeLKdyW3Ev6YVr5VTaxFz2uXePdJkUXXNvAE/V+UjdZn8 4dB6Y3P/JTBzxdfF6KCcdGttoq65JEfQYBjuxi9OSSkmS4vAfy36gUjQf6oiNgJX JyvxTxn8MQ46/ggqsL0IprnwFX0S/VV+JjAMmIO4Tw8mOBFSDmGDWA== =D1nQ -----END PGP SIGNATURE----- ... __o .. -\<, Claborne(a)CYBERTHOUGHT.com ...(*)/(*)._ Providing thoughts on your computing needs. http://www.CYBERTHOUGHT.com/cyberthought/ PGP Pub Key fingerprint = 7E BF 38 3F 24 A7 D1 B0 54 44 96 AA 10 D0 5D 51 Avail on Pub Key server. PGP-encrypted e-mail welcome! Dreams. They are just a "screen saver" for the brain.

1 0

Re: Dr. Vulis
by frantz＠netcom.com 17 Dec '03

17 Dec '03

As I put on my flame resistant suit... IMHO, most of the posts about John Gilmore's action re: Dr. Vulis are seriously miss-analyzing what has happened. As far as I can tell, John instructed his Majordomo to refuse subscription requests to cypherpunks from Dr. Vulis. That is all that John has done. What John has not done is: (1) John has not censored Dr. Vulis. He is still free to speak to cypherpunks by posting in the normal manner. (2) John as not turned to the courts as some others have suggested. Turning to the courts would certainly not be the way a cryptoanarchist would handle the situation. The best paradigm I can come up with to analyze John's action is my quite imperfect understanding of communitarian theory. In essence, communitarians say that there should be a level of social control between individual rights and the forceful coercion of the state. What John has done is step forward and excommunicate Dr. Vulis. He has said to Dr. Vulis, "You are no longer a member of the cypherpunks community." I would love to hear how people feel this action fits in to the cryptoanarchy, libertarian utopias we frequently discuss. E.g. Why is it not a perfectly reasonable action for some one to take in an anarchy? ------------------------------------------------------------------------- Bill Frantz | Tired of Dole/Clinton? | Periwinkle -- Consulting (408)356-8506 | Vote 3rd party. I'm | 16345 Englewood Ave. frantz(a)netcom.com | Voting for Harry Browne | Los Gatos, CA 95032, USA

4 4

Senator Goodlatte's warning (from IEEE Software article, Nov, 1996)
by Ernest Hua 17 Dec '03

17 Dec '03

>From IEEE Software, Nov, 1996, page 103, 2nd column: "Key Decisions Likely On Encryption Exports" by Stephen Barlas In fact, should he win, Clinton may go on the offensive. Goodlatte, whose bill is the House companion (HR 3011) to the Burns bill, said the Clinton administration told him that if the computer industry does not agree to a key management infrastructure, the President will seek legislation forcing Americans to use only encryption to which the government has access. Of course, this intention (to outlaw all non-GAK/KRAP) has been the desires of FBI/CIA/NSA all along, so no big surprise. I just would hate to see Congressional leaders cave in because of the "threat" of the administration's bozos attempting to introduce more restrictive legislation. The old "if we want 5, we demand 10, and we'll get 5 in the compromise" plan is really screwy and dishonest. Ern

1 0