December 2003 - cypherpunks-legacy

FW: Anonymous Remailers
by Roger J. Jones 17 Dec '03

17 Dec '03

-----Original Message----- From: Tim May [SMTP:tcmay@got.net] Sent: Wednesday, May 14, 1997 11:52 AM To: Roger J. Jones; 'cypherpunks(a)toad.com' Subject: Re: Anonymous Remailers At 5:17 AM -0800 5/14/97, Roger J. Jones wrote: >Why is it that some who are very concerned about their personal privacy >utilize anonymous remailers that: > >1) Log all of their mail messages? With chained, multiply-encrypted messages, logs are ineffective unless all of the links in the chain collude to trace messages. While this is certainly possible, it seems unlikely. >2) Are in many cases reputed to be run by foreign intelligence services? This allegation was made by some clueless Washington think tank authors. They provided no evidence, only innuendo, and they were unwilling or unable to provide any further comments when queried by several Cypherpunks. I suggest that just because you chose to characterize the sources as "clueless Washington think tank authors" does not (as they say in Star Trek - The Next Generation) "make it so". The "allegation" that foreign governments actively participate in actions to violate personal privacy ("borrowing" laptops from traveling businesspeople, taping phones, etc.) are all documented in various places. Of course, they could all the result of a single psyop with excellent results. But I doubt it. And given that many or even most of the remailer operators are members of the various related Cypherpunks or Remailers Operators lists, and are known to various of us, the notion that most (or even many) remailers are run by intelligence agencies is absurd. >Do they really trust the owner of the remailer? (Unless of course, it is >their remailer?) I seem to be missing something. I don't recognize your name on this list. Fine, as we always like to see new subscribers. But I surmise you just haven't spent enough time yet reading and thinking about these issues. You may surmise what you choose. In fact, that is the essence of free discourse. Of course, knowing is far better than surmising. If you care to suggest a reading list please feel free to mail it to me direct. And yes, I am new to this most charming and entertaining list. Thank you for the welcome Welcome to the Cypherpunks list. * Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: The War is Underway
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- \At 10:44 AM 5/10/97 -0800, Tim May wrote: >This is the "race to the fork in the road" I have long talked about. The >future will be pulled between two attractors, with essentially no middle >ground >At one side lies a surveillance state >At the other side lies crypto anarchy Except that their branch of the "fork" is illusory. It depends on public support and physical powers they lack. The reason that I'm a technoptimist is *not* because I think that modern technology is an all-powerful mechanism which has shattered the control capabilities of the coercive state apparatus. The really beautiful thing is that today's technology is merely piling onto a pre-existing trend which favored individual choice. Things were already trending towards markets and self government long before crypto and the Internet hit the front pages. Even mainframe computers helped. If you look at the graphs, you'll see that computers started forcing institutional downsizing as early as the late '60s in the U.S. and Britain. Mechanical technology and the wealth it produced was sufficient to get things going. Since the Second World War, people have been getting wealthier and hence more powerful. First here in America and later spreading throughout the worlds like a health-giving virus. Remember, it's not just technology. If I can move and trade in a very efficient market, I have a lot more power than someone with my same level of wealth in a primitive society with limited capabilities. Cheap radios (the first micro technology product) and jet engines helped push things along as much as anything. The slow development of market institutions which, today, give individuals the power to buy, sell, and lease almost any good or service eventually reached a critical point as well. Rich people are *much* harder to push around than poor people. (If you push them too much, they just leave.) So factories produced wealth which produced power which automatically increased individual choice. You will note that the 60's happened, for example. As time went on, markets spread, tyranny contracted and people became harder and harder to control (for good or ill). Pile crypto and the Net onto this trend, and you get an accelerated beneficial movement towards enhanced personal choice. Obviously, "the generation that was born into bondage in Egypt cannot enter the Promised Land." They have to die off before the changes can become obvious to all. The Net can help in this by changing our cultural and social environment so much that it allows us to, in the words of yet another Timothy, "Metaprogram the human biocomputer." I must say, however, that I find it hard to believe that other people can't see the amazing progress that we've made in the last decade. The utter destruction of totalitarian communism, the transformation of Latin America from 26 dictatorships and 1 democracy a few years ago to 26 (more or less) democracies and 1 dictatorship today, the liberation of the Forex markets, the ideological dominance of market liberalism, the Death of the PTT communications monopolies, the deregulation of transportation, the lowering of trade barriers, etc. Note that last month, Mongolia became the first country since the dawn of the nation state to abolish all tarrifs and quotas. Now if you can just get to it, you can trade freely. The control capabilities of the government depend on the attitude of the people. If they support the government or are intimidated by it, they will obey. Today, support for most OECD governments is at historic lows. Cynicism about government policies is widespread. And the simple ignoring of rules and regs is "out of control." DCF "You don't have to be nice to nation states you meet on the way up if you're not coming back down." -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBM3os3YVO4r4sgSPhAQHTRgQAvXFT8D+v2rpRe1d6bev87ODWCm4Pr1HS 0akwfOIBdGcCIWzRVRywTe1uBkMlnP2rXg819q+LLMkLK2J0Oma0zCPbCOqG8OSd aChGNuLq1106YjRPGXsbpKOBugbpW5AgLXUlUXtwjMBJzoZ9GNRCQDJlGCHuO0Q3 gDVw2CRSW6A= =33tc -----END PGP SIGNATURE-----

1 0

Problems at PGP?
by Steve 17 Dec '03

17 Dec '03

Hot Off The Press http://www.news.com/News/Item/0,4,10660,00.html Pretty Good Privacy CEO quits By Dawn Yoshitake May 14, 1997, 11:30 a.m. PT Security software firm Pretty Good Privacy announced today that its chief executive and president has resigned as the company mature from its start-up status. Thomas Steding, CEO, president, and a PGP founder, will now become a company adviser. The CEO position will be phased out, the company said. "This was a decision by the board and the executive staff. It seemed the right time," spokesman Mike Nelson said. "We're moving out of a start-up mode and into pursuit of the corporate marketplace. This was a minor adjustment to the staff." Nelson added that Steding will continue to advise the company on team-building and moving its operations quickly. Phillip Dunkelberger, former vice president of sales, will now become president and be responsible for the company's daily operations. Dunkelberger will also become a board member. Jonathan Seybold, a PGP founder, has been named chairman of the company. Nelson said the company is on target with its product development and sales and profitability targets, and will review where it stands financially and with its product lineup before setting a future course for an initial public offering. PGP, which has been in operation for a year, is scheduled to begin open beta testing for its Personal Privacy version 5.0 tomorrow. The commercial version is slated to be released later this month. Meanwhile, the crypto company has initiated a few acquisitions. One of its most recent was the March buyout of Zoomit, a directory technology that combines private intranets, pubic extranets, and the Internet. -- A picture tells a thousand words. Stego -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/IT/S d--() s+: a-- C++++(++)$ ULS+++@ P++@ L+(++)$ E- W+(+++)$ N++$ !o K-? w++(+++)$ !O+>++ !M !V PS+(+++)@ PE(++)@ Y++$ PGP@ t+@ 5++@ X++>$ R+++>$ tv+@ b+@ DI+++>$ D+++@>$ G@ e++@>++++ h r* y+ ------END GEEK CODE BLOCK------

1 0

RSA v. PGP Complaint Correction
by John Young 17 Dec '03

17 Dec '03

Due to a transmittal error the latter half of the RSA v. PGP complaint was omitted from our offering this morning. The full complaint is now available at: http://jya.com/rsavpgp.txt (21K)

1 0

RSA v. PGP Complaint
by John Young 17 Dec '03

17 Dec '03

Thanks to Vin McLelland we offer the text of the complaint of RSA v. PGP: http://jya.com/rsavpgp.txt

2 1

DoJ on Bombmaking Info
by John Young 17 Dec '03

17 Dec '03

We offer: "Report on the Availability of Bombmaking Information, the Extent to Which Its Dissemination Is Controlled by Federal Law, and the Extent to Which Such Dissemination May Be Subject to Regulation Consistent with the First Amendment to the United States Constitution Prepared by the United States Department of Justice As Required by Section 709(a) of the Antiterrorism and Effective Death Penalty Act of 1996. Submitted to the United States House of Representatives and the United States Senate April 1997" ----- http://jya.com/abi.htm (193K) This relates to the proposed "Feinstein Amendment" of the AEPDA. It covers in detail what kind of speech is permissable now and what language for the amendment should be to close gaps. A fine distinction is traced between "teaching" the use of terrorist and mass destruction weapons and "advocating" them. Or something like that -- I am a jailhouse laugher.

1 0

Re: The War is Underway (fwd)
by Lucky Green 17 Dec '03

17 Dec '03

At 01:22 PM 5/11/97 -0400, Black Unicorn wrote: >As I recall, 3des ( DESk1 -> DESk2^-1 -> DESk3 ) has an effective >keylength of 112 bits. Less than IDEA. Schneier discusses this. Unfortunately, Schneier doesn't do a very good job at discussing the strength of 3DES. This probably is to be expected, since there is no fixed effective keylength of 3DES and a more detailed discussion would likely exceed the format of Applied Cryptography. The work factor of breaking 3DES depends on the number of known plaintexts. At best, the effective keylength is 112 bits. At worst (this is an unlikely, perhaps unrealistic worst) the effective keylength is ~90 bits. Contrast this with DESX, which has been proven to be twice as hard as DES, therefore having an effective keylength of 112 bits. >It costs little today to develop a cipher with larger keyspace. (DES with >independent subkeys already exists and has a basic keyspace of 768 bits. >A meet in the middle attack reduces keyspace to 2^384. Schneier discusses >the cipher briefly). If users are willing to deal with large keys (I >certainly am) then software designers are restraining a more secure >implementation. It costs lots to develop a cipher with a larger keyspace that has a known, or reasonably assumed, work factor of higher than 112 bits. Again, it takes years to cryptanalyze a new cipher. It isn't software designers that are restraining more secure implementations. The software designers don't have any better algorithms to work with because the theorists haven't agreed on anything better yet. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred "I do believe that where there is a choice only between cowardice and violence, I would advise violence." Mahatma Gandhi

2 1

DES challenge news (fwd)
by 3umoelle＠informatik.uni-hamburg.de 17 Dec '03

17 Dec '03

Distributed key cracking efforts have been discussed in detail on cypherpunks and coderpunks for quite some time. A Swedish group trying to solve RSADSI's DES challenge chose to ignore the results. Here is what they got (from RISKS 19.14): >Date: Mon, 12 May 1997 17:56:54 +0200 (MET DST) >From: Thomas Koenig <ig25(a)mvmap66.ciw.uni-karlsruhe.de> >Subject: DES challenge news You may remember RISKS-19.09, in which I discussed the risks in a network-wide attack on the RSA DES challenge: The Swedish group at http://www.des.sollentuna.se/ didn't give out its source, so the client could, in fact, do anything, such as crack a master EC-card key. The reason given was client integrity. Well, a month after this, the promised source code release has not happened. Instead, it appears that somebody disassembled part of the client, made a version that reported fake "done" blocks, and then sent these to the servers. Moral? Don't ever think that nobody can read compiled code. Don't try to run a cooperative effort like this in a closed development model. Thomas Koenig, Thomas.Koenig(a)ciw.uni-karlsruhe.de, ig25(a)dkauni2.bitnet. ------------------------------

1 0

Information request
by DataET Research 17 Dec '03

17 Dec '03

Hi, If you are interested in having a high-quality, but extensively inexpensive, Web site designed for you, your résumé, or your company, visit http://www.dataet.com or contact info(a)dataet.com immediately, and request for additional information and/or a free cost and time estimation. Thanks for your time. We hope to hear from you soon. Regards, DataET Research Data Engineering Technologies info(a)dataet.com http://www.dataet.com

3 2

Rwanda and "anarchy"
by Rich Graves 17 Dec '03

17 Dec '03

Kent Crispin wrote: > On Tue, May 13, 1997 at 08:21:13PM -0800, Tim May wrote: > > At 6:34 PM -0800 5/13/97, Kent Crispin wrote: > > > > >First of all, it neglects to consider that governments may have > > >prevented more murders than they caused. This is unknowable, since > > >we don't have any worthwhile control cases. (I suppose we > > >might examine a state of anarchic chaos (eg Rawanda) and compare the > > >percentage of murders...but such cases are symptoms of other human > > >ills, and cannot be used as a meaningful comparison, I believe.) > > > > Rwanda (or Ruwanda, or...) is a _very_ poor example to pick, as this was > > not any kind of anarchy such as any of us have ever advocated. Rather, > > Rwanda was a near-textbook example of one tribal faction (Hutus or > > Tutsis) coming to power and inititiating a pogrom against the rival > > faction (Tutsis or Hutus). > > > > Calling this an "anarchy" is comparable to calling the pogrom by the > > Third Reich against Jews, gypsies, cripples, and others an example of > > anarchy. > > Nonsense. > > "anarchy n. the absence of government or control, resulting in > lawlessness. 2. disorder, confusion" -- Oxford American Dictionary > > Which part of that would you say didn't apply to Rwanda? I would say "none." Tim is essentially correct. Ironically, we know he's correct thanks to the United Nations and Judge Goldstein's International Criminal Tribunal, which Tim would oppose. (The answer to bad government is more government?) Jean-Marie Higiro was Rwanda's Minister of Telecommunications. He saw the radio turn into a tool of totalitarian propaganda. The killings were encouraged and organized by the government. He was there. Lindsey Hilsum was the only English-speaking reporter in Rwanda when the killings started. She described the situation as "anarchy" because she did not understand the language or the political situation. She later retracted that story, and spent several more months in Rwanda and Burundi documenting what really happened. She eventually testified before the ICT on what she saw. I think she's a really cool person. Raymond Bonner joined Lindsey in Rwanda later. You might recognize his name -- he's the guy who was fired by the New York Times because the Reagan Administration didn't like his reporting on human rights violations in El Salvador. Gilles Peress is a French photojournalist who documented the genocide in Rwanda both for himself and for the ICT. I met these folks and browsed the relevant documentation, recordings, and photos on April 11th. I believe them when they say it was planned. Blaming it on "evil government," though, is ludicrous. There was quite a lot more going on. If you want to look at anarchic chaos, try, maybe, Albania, or Los Angeles after the Rodney King verdict. But even in those cases, the violence had specific targets for specific reasons. It wasn't unstructured anarchy, and it didn't last long. For all the press, there were few deaths in either case. > In fact, the correlation between anarchy and war is very strong, for > obvious reasons. Perhaps that is why most intelligent people don't > consider anarchy a desirable state of affairs. There is no such thing as anarchy, and there never will be. -rich http://www.stanford.edu/~llurch/

2 1