December 2003 - cypherpunks-legacy

Re: PLEDGES
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Paul, You wrote: > What the hell, I'll spring for $200. It would be the needed > excuse to leave San Diego anyway. Wah whoo! This, plus some other new pledges puts us over the $1000 mark. Now all we need is some show of intestinal fortitude from Dimitri. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

Re: extortion via digital cash
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Hi, I have been reading numerous threads on digital cash, and I have some >questions I would like discussed. > >currently when someone does extortion (kiddnapping too), they have two >choices; > >1-pick up the cash personally (or via a stooge) >2-transfer the funds via bank > >Both ideas are bad, in that you stand a good chance at getting caught. > >I was wondering, what if you demanded payment via Ecash, through nym >servers, aliases, etc. From what I understand, it is just like cash, ie: no >record of transaction, but you get the added bonus of not having to meet the >other party-like a fund transfer. Once you have your 1,000,000 Ecash, you >could dump it on a disk, and close your internet account (unless you really >really trust your privacy technology). And I also think that you would have >the option to cash this into real funds at either the Mark Twain bank, or >likely somewhere in the Caymen Islands (maybe through those online gambling >houses). > >I am hoping that this will spark some discussion, and maybe slow down the >dlv, TM spam war. > >Also, I was only wondering about this for mere discussion reasons :) > >/sb Although Digicash's ecash offers anonymity to the payor it does not to the payee. The reasons have to do with the way coins are blinded. So LE could, with the bank's cooperation, easily associate the two sides of a transaction. This was intentional on Chaum's part, either for moral or practical political considerations. Its probably only a relatively minor patch to allow one ecash purse (the kidnapper's) to generate the blind token values so that another (similarly patched) purse (the vicitim's) can submit them to the mint and return the minted coins to the kidnapper (e.g., by posting on a popular Usenet group). In this scenario the only reasonable way left to track the money is via linkage (the size and timing of deposits and withdrawls in the kidnapper's account). PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Sacred Cow Meat Co. | --------------------------------------------------------------------- Counter-cultural technology development our specialty. Vote Libertarian. Just say NO to prescription DRUGS. "Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive." -- C.S. Lewis "Surveillence is ultimately just another form of media, and thus, potential entertainment." -- G. Beato

2 1

Re: Fuck Cyberpromo
by Peter Trei 17 Dec '03

17 Dec '03

> It seems to me that every time I send a message to cypherpunks, I get a 10k > message entitled "RESPONSE FROM CYBERPROMO" from "abusebot(a)savetrees.com > (Mail AutoResponder)" . >[...] > I would expect that if everyone on this list who gets one of these things > -- which I suspect is everyone who posts here lately -- turned right around > and sent it on to this wallace(a)cyberpromo.com address, those, er, > caprophageous cretins, (thanks, DCF; don't sue me for copyright violations > ;-)) would get the hint in a hurry. > > I'm starting with the one I have, and, of course, I'll also do it for the > message I get from sending *this* posting. > > Cheers, > Bob Hettinga Those of us who occasionally dip into that Slough of Despond known as news.admin.net-abuse.misc are *very* familiar with Mr. Wallace. Check out, for example, news:// 32617de2.18341458(a)news.onramp.net, where he is ignoring a court order to stop spamming. Bouncing mail back to him may be emotionally satisfying, but I suspect he filters it. He also has a skin as thick as a rhino's. Peter Trei trei(a)process.com Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

4 3

RE: PLEDGES
by Blanc Weber 17 Dec '03

17 Dec '03

From: Sandy Sandfort Wah whoo! This, plus some other new pledges puts us over the $1000 mark. Now all we need is some show of intestinal fortitude from Dimitri. ........................................................ Well, hey - if Dimitri is feeling kinda weak & puny, I'll take his place. Youall can pay my airfare & hotel charge, and I'll think of something to talk about with you guys. How about: Imaginative, Non-Crypto-Related Ways to Avoid the Government. (Uni? I'd be delighted to discuss this in person). $1000 makes for a fine party! .. Blanc

1 0

RE: Re: extortion via digital cash
by scottb＠aca.ca 17 Dec '03

17 Dec '03

---------- >From: azur >Subject: Re: extortion via digital cash >Date: Tuesday, October 15, 1996 2:18PM > <SNIP> >Although Digicash's ecash offers anonymity to the payor it does not to the >payee. The reasons have to do with the way coins are blinded. So LE >could, with the bank's cooperation, easily associate the two sides of a >transaction. This was intentional on Chaum's part, either for moral or >practical political considerations. Its probably only a relatively minor >patch to allow one ecash purse (the kidnapper's) to generate the blind >token values so that another (similarly patched) purse (the vicitim's) can >submit them to the mint and return the minted coins to the kidnapper (e.g., >by posting on a popular Usenet group). In this scenario the only >reasonable way left to track the money is via linkage (the size and timing >of deposits and withdrawls in the kidnapper's account). I would tend to think that if you held on to the money long enough, you would thwart them tracking it via linkage-especially once it becomes more commonplace to do electronic transactions on the Net. Actually, if you wait long enough, you likely will run the risk of there being a crackdown on nym servers, remailers, etc, and maybe even specialy designed cancel-bots on usenet. /sb

1 0

extortion via digital cash (fwd)
by gimonca＠skypoint.com 17 Dec '03

17 Dec '03

Forwarded message: > From: scottb(a)aca.ca > Date: Tue, 15 Oct 1996 11:44:25 -0400 > Subject: extortion via digital cash > > Both ideas are bad, in that you stand a good chance at getting caught. > > I was wondering, what if you demanded payment via Ecash, through nym > servers, aliases, etc. From what I understand, it is just like cash, ie: no > record of transaction, but you get the added bonus of not having to meet the > other party-like a fund transfer. Once you have your 1,000,000 Ecash, you > could dump it on a disk, and close your internet account (unless you really > really trust your privacy technology). And I also think that you would have > the option to cash this into real funds at either the Mark Twain bank, or > likely somewhere in the Caymen Islands (maybe through those online gambling > houses). > The Digicash product only has one-way anonymity. Their own pages are a good place to start: http://www.digicash.nl/ecash/about.html --CG

1 0

Re: Service pays users (sort of) to read commercial e-mail
by Bill Stewart 17 Dec '03

17 Dec '03

At 02:50 PM 10/14/96 -0700, Greg Broiles <gbroiles(a)netbox.com> wrote: >>From time to time we've discussed the economics of paying per-message costs >for E-mail, and/or systems where advertisers pay users to read their >messages. Someone seems to have set up a system like that. It's at ><http://www.aristotle.org>. They seem to be using voter registration as an >is-a-real-person credential. (Their idea seems to be that they'll charge Aristotle.org is run by John Aristotle Phillips. If you remember back in the 70s when a student at Princeton designed an atomic bomb as his junior physics project, that was him (he wasn't brilliant; he just needed a really good paper to bring up his low physics grades.) He's since gone into political consulting. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

Re: WOW!
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

bryce(a)digicash.com writes: > > > I already responded more times than this threat warranted > > > > I'm totally nonplused. Does anyone on the list have any idea > > what Dimitri is talking about? Has he posted a RESPONSIVE answer > > to my invitation? If so, I never saw it. > > > He responded two or three times, but I wasn't able to determine > whether he was saying "Yea" or "Nay". Perhaps he didn't believe > that your offer was serious. > > > > Does anyone have any idea why Dimitri uses the term "threat"? I > > have not threatened Dimitri and I have indicated that as my guest > > he will be under the mantle of my protection. He'll be safer here > > than he is in his own bed. > > > I believe he typo'ed "thread". > Yes - I mistyped "thread". My apologies. Once again: I already replied to this _thread_, and then I received a _threat_ of a libel lawsuit in connection with this _threat_. Sorry for the typoes and the resulting confusion. At any rate, if people are really willing to pay this sort of money to hear me speak, perhaps I should make a videotape of me giving a presentation about my Usenet cancelbot and send it to Sandy? Thanks to Bryce for the correction. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

3 2

Majordomo w/ built-in security
by Christopher Durfy 17 Dec '03

17 Dec '03

Hi guys, I'm new to the list, and it looks like a good one ;) I've got a question, and was hoping someone could point me in the right direction. Here's the situation: A large group of Doctors want to have an email list set up, but are concerned about privacy issues. Client's confidential patient info is likely to be talked about, and any interception of data would likely caused them to get sued =P Would the best way to get somehow incorporate PGP into the majordomo or smartlist (if it's possible) and either assign keys to all the doctors (or one key for ALL the doctors maybe, to cut on admin times....) Anyone ever run up against a situation like this? Any pointers, horror stories or solutions are very welcome! Thx. -Christopher Durfy, chris(a)alphawave.com

3 2

using TCP sequence numbers for stego
by Mark M. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Would using TCP sequence numbers to carry stegoed data be practical? The data would have to be removed at a lower level. This would mean kernel patches and extra system calls in UNIX. I have no idea what this would require under Windows or Mac. This seems like the ideal place to stego data because most OS's have started using random sequence numbers. Any ideas? Mark - -- finger -l for PGP key PGP encrypted mail prefered. -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQEVAwUBMmP7sSzIPc7jvyFpAQHlUQf+JwmltREsYq65f5YPOdubmr8hxAjfiOa+ zIX7VpP75qm+SgiZTxBaioN2pVzW0yCb36IqNKYuZuUww/ip8Bh/0aNnyzNguD+p jXVOLpzbfBeD33Q+NLag6N2R2PogZQT2yx2vfSwQ9zeyoZ1CYTxiKZHDq06czzAt gq3wszp0l9U1jr2xTnmprNYofYUrvWitpId41tTbyx336dmJ5lNKS1Nssu/+vCZC B9Gib+s/ayQz6BGuEDCVqr36cZY75uHYfUuMnIHnONYAsFC4qR1vNdJ/OnCXJJR2 D6Ns9POsb9NGCh0pFzGjDavpQKwIU9b/Br30vge1tKsPA30GByPJMQ== =NaaI -----END PGP SIGNATURE-----

1 0