December 2003 - cypherpunks-legacy

Get Back To Health and Savings!
by ForInformationCall＠1-718-363-0723 17 Dec '03

17 Dec '03

********************************************************* BREAK THE CHAIN OF PAIN WITH PROCYTIN PROCYTIN: This is a unique topical anti-inflammatory that actually helps protect cells from the over-product ion of Prostaglandin Synthetase, the body's Primary Catabolic Enzyme(PCE)that is commonly associated with inflammation. Developed by a team of Medical Physicians Procytin is now available exclusively through the Voyager Group,Inc. The Difference between Pain & Comfort Thousands of people have already experienced soothing fast acting relief from pain associated with Arthritis, backache, bursitis, sports injuries, sprains and strains with Procytin. FOR MORE INFORMATION CALL: Helena @ 718-363-0723 or to order call Voyager @ 1-800-858-1428. Give my ID# 10649 ********************************************************** ********************************************************** Welcome To The Technology Network, Inc. -TECH NET- Be one of the first pioneers to take advantage of this enormous market! In the confusion associated with telephone rates, companies, and services, The Technology Network,Inc. (TECH NET) rises above the competition.How? Through a revo- lutionary technological creation, we eliminate the "phoney" rate games and slash your phone bills down to the bare bone. Introducing The TeleChron A new technology, the TeleChron is an advanced computer (the size of a video cassette) that plugs into your phone and automatically routes your call to the lowest rate avai- lable. And....it doesn't matter which carrier you use! The TeleChron is *Federally Approved through the FCC *Only Available through Us (Tech Net,Inc) *Proprietary- Fully Protected by Patent *Field Tested and Proven-Worldwide *Every single Residence and Business will want to slash their phone bills by 30 to 70% FREE DETAILS 1. 24-hr Fax-On-Demand: 415-273-6034 2. Call our24-hr Voice-on Demand:732-462-4050 3. Call Helena@ 718-363-0723. ID#500248 P.S. If you sign up to become a distributor now, your cost is only $99, not $189 as stated on the application form, from the Fax-on-Demand.

1 0

Eureka! Mon Dec 29 '97
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Monday's issue of Eureka! FRESHTEENS! Is there no end to it? Yet again we have succeeded in obtai- ning a FREE one week trial, for all Eureka! subscribers at another of the net's finest websites. Freshteens offers over 200 video feeds, hot live, sex shows, hard XXX movies, hot XXX stories, exclusive Texas Teens, and a comprehensive gay area too. You need a credit card to verify you are an adult, but will not be charged for your FREE membership. Excellent! Freshteens ........... http://www.freshteens.com/cproot/1217 EUREKA! is now available in FOUR languages. So now you can choose from one or more of these following languages! FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm THREE DAYS TO BLAST OFF! With a bottle of your favorite champagne. We have surfed all over the place to mine out some gold nuggets of porn. Enjoy! THE BABE GALLERY Go down the page about half way to the galleries. From there you have a choice of several different woman, each featuring a decent looking babe in a bunch of poses. Nice pussy shots. The Babe Gallery .......... http://www.the-babe-gallery.com/ EROTIC.COM This is a paysite. But to give you a look around they have free thumbnails. Click on asians, blondes, brunettes, teens, girl & girl, hardcore and more. Well done website. Surf it. Erotic.com .............. http://www.erotic.com/welcome.html NAAKITA'S NASTY NEIGHBORS This would be a great neighborhood to live in! This website does not mess around! You got the pix, fast. There are only a few but what they do have is great. Beaver licking babes, panty pix and slit fingering fun. Point your browser here! Naakita's Nasty Neighbors ......... http://www.ethersex.com/ MALL RATS Tis the season to hit the malls and here is one you'll like! Featuring, "In the Lingerie Department! In the Ladies Room Ladies Only! Getting something to drink..." Lots of nasty looking vixens. See the "Mallrats of the Week", it's skanky! Mall Rats ......................... http://www.mallrats.com/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ Four LIVE feeds ........... http://www.holler2.com/vidx.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Just surf in and have fun! ...... http://137.39.63.229/chat/ THE BEST PHONE SEX Live Hetero 1-on-1, 2-on-1, group, dateline...1-800-644-8779 FREE Hetero live 1-on-1 (international call)...011-678-77416 FREE Gay live 1-on-1 (international call)......011-678-75629 AMATEUR SITE OF THE DAY LICKS 'N KISSES LISA: Unique is the only word to describe this kinky amateur. Her site not only features gothic porno- graphy, but she always has pictures of her friends! She ref- ers to her photo gallery as the "tomb", do we have to say any more? Visit her! ....... http://amateurindex.com/eureka/ TODAY'S FREE PIX In the new year we will be creating a much simpler system for you to view your FREE pix. It will also offer the oppor- tunity for you to view previously published pix you may have missed. In addition you'll be able to select your favorite categories of photos such as lesbian, asian, teen(18+), group sex, and so on. We think you will simply love it! Pic 1 ...................... http://137.39.63.229/?V6aHEFIJ Pic 2 ........................... http://137.39.63.229/?106 Pic 3 ...................... http://137.39.63.229/?jlAPiKDn Pic 4 ........................... http://137.39.63.229/?107 Pic 5 ...................... http://137.39.63.229/?qR5_vP4b Pic 6 ........................... http://137.39.63.229/?108 Pic 7 ...................... http://137.39.63.229/?bmUhUnoZ Pic 8 ........................... http://137.39.63.229/?109 Pic 9 ...................... http://137.39.63.229/?XLXbktZE Pic 10 ........................... http://137.39.63.229/?110 PLEASE VISIT THIS FINE EUREKA! MEMBER SITE Playgal - No.1 in Internet Hardcore! http://www.playgal.com/playgal/banner_eureka.html Playgal presents FREE LIVE FUCKING, and over 2,000 FREE XXX MOVIES! ------------------------------------------------------------ If you would like to unsubscribe from the Eureka! Newsletter simply select reply and send us a quick reply to this email. ------------------------------------------------------------

1 0

10 Minute Bank of America Boycott
by info＠aidsactionleague.org 17 Dec '03

17 Dec '03

PLEASE TAKE 10 MINUTES! CALL 1-800-678-2632. TELL BANK OF AMERICA TO GET GOVERNOR WILSON TO DO MORE TO PREVENT AIDS. Call Bank of America and tell them to urge Governor Wilson to declare a Medical State of Emergency for AIDS in California. WHY A STATE OF EMERGENCY FOR AIDS? Because AIDS is a health issue and should be in the hands of the Health Department. WHY Bank of America? BofA spends half a million dollars a year lobbying. Bank Of America makes large contributions to Governor Wilson. When Bank of America speaks Governor Wilson listens. WHY CALL? If you call 1-800-678-2632 and spend ten minutes on the phone, it costs BofA approximately $2.50. BofA is paying for the call. WHY A TEN MINUTE BOYCOTT? If 5 to 10 thousand people call a day and they each spend 10 minuteds on the the phone---- the phone bill for BofA will be enough to convince the bank to help, to do something decent for society. WHAT TO SAY? "Hi, my name is _____________, I am a consumer. I am very concerned about the spread of the AIDS epidemic and the fact that Governor Wilson is doing nothing about it. I know that Bank of America spends a lot of money to influence representatives like Governor Wilson. I want BofA to tell Governor Wilson to do more to prevent AIDS. I want Bank Of America to do something decent for society." (one call only please.) PLEASE FORWARD THIS MESSAGE: Forward this E-mail to ten friends and have them e-mail ten friends...don't break the chain! Thank you, Marc Keyser President AIDS Action League ______________________________________________________________ Visit our web site: www.aidsactionleague.org e-mail: info(a)aidsactionleague.org /////////////////////////////////////////////////////////////////////////////// If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove". ////////////////////////////////////////////////////////////////////////////////

1 0

NY Times on history of public key crypto
by Anonymous 17 Dec '03

17 Dec '03

By PETER WAYNER T o the list of institutions that Tony Blair's Labor Party is shaking up, add the British Secret Service. Last week, the British government's eavesdropping organization known as the Government Communications Headquarters, or GCHQ, posted a document to its Web site describing its role in the discovery of public key cryptography. The set of algorithms, equations and arcane mathematics that make up public key cryptography are a crucial technology for preserving computer privacy in and making commerce possible on the Internet. Some hail its discovery as one of the most important accomplishments of 20th-century mathematics because it allows two people to set up a secure phone call without meeting beforehand. Without it, there would be no privacy in cyberspace. The move by the once dusty and secretive organization is clearly an attempt to recast its image as a pioneering leader of cyberspace. For the last 20 years, the public gave credit for the discovery to Martin Hellman, a professor at Stanford University, and two graduate students who worked with him at the time, Ralph Merkle and Whitfield Diffie. They started publishing their work in 1976. Three professors at the Massachusetts Institute of Technology at the time, Ron Rivest, Adi Shamir and Len Adleman soon followed with another similar approach known by their initials, RSA, which went on to become one of the dominant solutions used on the Internet. Before public key cryptography, anyone who wanted to use a secret code needed to arrange for both sides to have a copy of the key used to scramble the data, a problem that requires either trusted couriers or advance meetings. PKC, as it is sometimes known, erased this problem by making it possible for two people, or more properly their computers, to agree upon a key by performing some complicated mathematics. There is no publicly known way for an eavesdropper to pick up the key by listening in. T he new document details how three employees of the British government discovered the same approach several years earlier, but kept it a secret for reasons of national security. A spokesman for the British government's GCHQ, said that the document's release is part of a "pan-governmental drive for openness" pushed by the Labor party. The document describing the steps of invention taken by the spies was written by James Ellis, a mathematician and cryptographer who died less than a month ago. In it, Ellis describes how he suggested the existence of what he called "non-secret encryption" in 1970s. Ellis says that Clifford Cocks followed with a more practical solution in 1973 that was essentially the same thing as the algorithm published by Rivest, Shamir and Adleman. The paper also says that Malcolm Williamson discovered an algorithm in 1974 that was very similar to the work of Diffie and Hellman. They did not replicate the work done by Merkle and Hellman. In a telephone interview from his office in La Jolla, Calif., Malcolm Williamson said that he felt bad when others discovered the solution, but concluded, "I was working at the British government and that's just one of the restrictions you work under when you work for the government." Hellman said in a telephone interview that he agrees. "It must be really difficult for them to watch other people get the credit," he said. "But that's the agreement they made when they agreed to work in secret." He was also quick to point out that the secret branches of the government have the help of large budgets and classified knowledge. "Diffie, I and Merkle were working in a vacuum." he said. "If we had access to all of the classified literature of the previous 30 years, it would really be an advantage." For his part, Diffie said in a telephone interview from Cirencester, England, that he thinks that GCHQ never realized the deep importance of what the mathematicians discovered. He said that he met James Ellis several years ago and "within an hour of meeting me, Ellis said, 'You did much more with this than we did.'" Diffie also suggested that the history of ideas is hard to write because many people often find solutions to different problems only to later determine they've discovered the same thing. T he story keeps going farther back. Recently, Matt Blaze, a cryptographer employed at Bell Labs, got a copy of a memorandum from the desk of John F. Kennedy about the problem of securing nuclear weapons with launch codes. Steve Bellovin, a colleague of Blaze's at Bell Labs, said: "When I read this memo, I don't see anything that would require public key cryptography. But I think they're in the neighborhood. For so many things, the answer is the easy part. Asking the question is the hard part. I think this got them asking the questions." Historians of science will certainly spend time sorting out the various claims. David Kahn, the author of the best selling history The Codebreakers, said that he recently asked the National Security Agency to declassify some documents so he could write the proper history of public key cryptography. He said an NSA staff member told him, "I've spoken to the guys who did this, but they don't want to be interviewed now." This suggests that the NSA also may have discovered public-key systems or had a hand in exploring them. Kahn hopes that the NSA will follow in Britain's lead so an accurate history can be written. Jim Bidzos, the chief executive of RSA Data Security, the division of the publicly traded Security Dynamics that holds the patent on the RSA, said that the announcement in Britain will have no effect on the company's business. Patent law is based on the notion that the inventors trade knowledge about the invention in return for an exclusive license to practice it. In fact, it is an interesting question to wonder whether Britain could have changed the history of cyberspace by disclosing the invention and encouraging the development of widespread cryptographic security for the public. This may have been a wise move during the height of the cold war in the 70's when there were thousands of Soviet tanks poised on the edge of western Europe. Williamson also hastens to note that mathematical equations weren't considered patentable in Britain at the time and without a patent anyone could have used the invention. The RSA patent in the United States was one of the first and it is generally accepted to have expanded the definition. Others are pushing a similar question. In a debate on cryptography policy at the University of Maryland, Baltimore County, John Gilmore, one of the founders of the Electronic Frontier Foundation, said the NSA should be more open. While national defense is very valuable, he suggested that the need for security in cyberspace for all citizens is going to be essential in the future. In the long run, the history of the discovery of public key cryptography is certain to be written and rewritten often in the next several years as more documents emerge from secret government laboratories. The spokesman from GCHQ promises that more documents are on the way. Hellman is philosophical. "In a way, these things are like gold nuggets that God left in the forest." he said. "If I'm walking along in the forest and I stubbed my toe on it, who's to say I deserve credit for discovering it?" He is quick to point out, however, that he shared the discovery with everyone. _________________________________________________________________ Copyright 1997 The New York Times Company

1 0

An interesting atricle on "High Tech" in Wash DC
by Alan Olsen 17 Dec '03

17 Dec '03

While looking for something else on cnet.com, I found this article on technology in Washington D.C.. Think your leaders are clueless on the technology? That is because none of them use it! Take a read... http://www.cnet.com/Content/Voices/Hart/111397/index.html --- | "That'll make it hot for them!" - Guy Grand | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Andy Grove on Net Censorship
by Tim May 17 Dec '03

17 Dec '03

I just ran across this on Usenet, a quote from several months back: * C-SPAN Television, Wednesday June 5th, 1997 * * Andrew Grove, Chairman & CEO of Intel Corporation, is asked whether * bomb-making information should be censored from the Internet. * * "No. The same information is available in libraries, and we don't * censor libraries, nor should we. When I was thirteen I built a * nitroglycerin bomb. It was an incredibly stupid thing to do, * and I knew someone who had their hand blown off, but I am * adamantly against censoring such material." * * "And unlike a library, a parent can buy a program that uses keyword * monitoring to disallow Internet traffic per the parents' wishes. * Such a program is available now, and costs only $29." Very well put. Maybe Grove can be convinced that Intel should not be part of the Big Brotherish "Key Recovery Alliance." --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Africa & Anthrax - A timely model? [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > MYSTERY DISEASE IN KENYA AND SOMALIA COULD BE FORM OF ANTHRAX > > Web posted at: 3:30 p.m. EST (2030 GMT) > > NAIROBI, Kenya (AP) -- An unexplained disease that has caused scores > of Kenyans, Somalis and livestock to bleed to death this month may > be a form of anthrax, medical experts said Sunday. > > "At the moment, the evidence that we have agrees the most with an > outbreak of anthrax," said Dr. Douglas Klaucke, acting World Health > Organization representative in Kenya. > > The evidence includes symptoms -- high fever, diarrhea, intestinal > problems, vomiting blood -- that are similar to those of intestinal > anthrax, a rare manifestation of the illness that causes stomach > ulcers and inflames the intestines. > > Another sign that anthrax may be to blame is that the disease can be > contracted by eating undercooked, infected meat -- a common practice > in Somalia and Kenya, where recent flooding has marooned thousands > of people who are eating carcasses of sick animals, Klaucke said. With the recent announcement of Anthrax innoculations to be given to all US military personnel because of potential bio-war applications many questions have come up about what this means both militarily as well as for civilian targets. Such outbreaks as the above give real-world examples of the virulence of the pathogen, efficiency of medical & political responces, as well as a base lines to compare to models for disease spread. In short, such instances as above represent the 'best effort' responce that could be expected. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Netcraft Web server survey
by Steve Schear 17 Dec '03

17 Dec '03

The Web continues its staggering growth. According to the just published Netcraft Web server survey, http://www.netcraft.co.uk/Survey , the most popular servers increased in number from 1274396 in November to 1408805 in December (a compound annual rate of over 12%.) Microsoft's Microsoft-IIS was the bigest gainer both in percentage (2.83) and numbers of sites (70838), while Apache continued to easily hold the high ground gaining only a somewhat smaller 60,000 new sites. The biggest losers were Netscape, slipping almost 3% in marketshare and NCSA. C2's Apache server, while gaining a healthy 1500 new sites for the month (for an annualized rate of 18,000 unit sales), lost 0.1% in overall marketshare. Top Servers Server Nov 97 Percent Dec 97 Percent Change Apache 695283 44.74 753341 44.79 0.05 Microsoft-IIS 280917 18.08 351755 20.91 2.83 Netscape-Enterprise 82304 5.30 88616 5.27 -0.03 NCSA 68719 4.42 68097 4.05 -0.37 Stronghold 40276 2.59 41829 2.49 -0.10 --Steve

1 0

Start Making Money in '98...!!!
by 650reports＠hotmail.com 17 Dec '03

17 Dec '03

Hello, What we have to offer is a great opportunity for you to start your own business re-selling (Over 650+) good reports. You'll not only help others with useful information but just as important, you'll be helping yourself achieve your own financial goals... Are you interested in making an extra $10,000, $50,000, or $100,000 a month? YES! $100,000 a month. If you believe that someday you'll get that big break, get ready because THIS IS IT! Just imagine, no more living from paycheck to paycheck. Become FINANCIALLY INDEPENDENT. Buy your dream home. Purchase that sports car in cash. Never again worry about living in debt. "I currently make $1,350 to $1,800 a day doing this part-time. One week after I started, the checks showed up in my mailbox. I can't believe it!" - Lynette from Glendale, CA. I'm sure you've seen couples on TV, sitting on a couch, holding each other's hand & claiming to make this sort of MONEY. If all these people were lying, don't you think you would have heard about it from the Attorney General or Hard Copy? STOP thinking that no one can possibly make this kind of money!!! "I was probably the most skeptical person out there, until I saw how much my brother-in-law was making. Then I HAD to try it. The first day, I got checks that totaled $5,693. Yesterday I made $4,374." - Michael from Everette, WA $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Are you ready to change your life forever? $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ MAKE HUGE PROFITS IN THE INFORMATION AGE Selling information is one of the FASTEST and EASIEST ways to get into the mail order business. Ordinary people just like you and me are doing this and smiling all the way to the bank. It is only in this amazing business can you start out with practically NO CAPITAL and with literally NO LIMIT to your profits. I bet you know someone who would PAY YOU $5-$15 to know: HOW TO GET $1,000,000 WORTH OF LIFE INSURANCE WITH NO CASH! HOW TO STOP PAYING PROPERTY TAXES ON YOUR HOME WIPE OUT DEBTS WITHOUT BANKRUPTCY INSIDER SECRETS TO PERSONAL TAX SHELTERS HOW TO REDUCE YOUR GROCERY BILLS BY 50% TOP 10 WAYS TO MAKE MONEY ON THE INTERNET All you have to do is buy our CD-ROM which contain over 650+ how to money making reports, reprint on diskettes or paper & SELL, SELL, SELL !!! CD-ROM comes with Unlimited Reprint & Resell license. You can sell the reports individually or in sets through classified ads, personal contacts, flyers, or on the Net. Sell them HOWEVER you want and for as MUCH as you want. YOU KEEP ALL THE PROFIT. HERE'S HOW THIS AMAZING PROGRAM WILL MAKE YOU $$$$$ Let's say that you decide to start small, just to see how it goes, and you send out only 2,000 email ads a day. (You obviously already have an internet connection so e-mail advertising is FREE.) Your email would read: SPECIAL REPORT "Live in a $100,000 Home without ANY Money" Send $10 & self- addressed stamped envelope to: YOUR NAME YOUR ADDRESS YOUR CITY AND STATE Let's also say that the mailing only receives a tiny response rate of not 5% , not 1% but 0.5%. That comes out to 10 orders a day X $10.00 per order. That's $100 in additional income a day for 5 minutes of work. Imagine, that comes out to an additional $36,500 a year. Can you use an extra $36,500 a year for 5 minutes of work? BUT what would happen if you sent out 100,000 emails? At the smaller response rate of 0.35% , YOU WILL EARN $105,000.00 OF SPENDABLE CASH IN JUST ONE MONTH!Note: Some programs out there send email at 250,000 - 330,000 e-mails an HOUR with a 28.8 modem. Note: Currently there are over 90 million email accounts users & predicted to be 500 million by the year 2000. When you order from us, you get: *Our BEST-SELLING 650+ money making reports on CD-ROM. *Step-by-step proven instructions on how you can start a huge business selling information & become financially successful. *The best methods for bulk e-mailing and obtaining e-mail lists.Other money making programs sound great, they say place tiny classified ads. They forget to tell you that, you have to WRITE A BOOK. With our CD-ROM, you can begin selling, TODAY!!! E-Z ORDER FORM : Please print out this form and fill in the blanks legibly to send along with payment. I WOULD LIKE TO ORDER THE FOLLOWING: QTY TITLE _______ CD-ROM (650+ Reports with Full Reprint Rights) Advertised before for $99.00 NOW *ONLY $59.00* Name ____________________________________________________ Street Address ____________________________________________ City, State, Zip_____________________________________________ Phone Number_____________________________________________ Email Address_____________________________________________ Payment method ____ credit card ____ check ____ money order Account Number: _____________________________________ Expiration Date: _____________ Name on Card: ______________________________________ Signature: ___________________________________________ ORDER AMOUNT _______________ + $4.00 shipping/handling = _______________ TOTAL Send payment along with this completed form to: Liberty Publishing 2107 W. Commonwealth Ave. #264 Alhambra, CA 91803 Comes with a 30 DAY MONEY BACK GUARANTEE m

1 0

Some ideas (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Hi Doug, Forwarded message: > From: "Douglas R. Floyd" <dfloyd(a)ssz.com> > Subject: Some ideas > Date: Sun, 28 Dec 1997 16:18:14 -0600 (CST) > I have been pondering this: To save on bandwidth, I wonder about having > two types of OSS sites OSS? > -- a "control" site which switchboards incoming/outgoing > stuff to "data" sites. Which needs to have access to at least *all* incoming requests for data as well as a channel to other switchboard sites so they can catalog those requests and won't have to look them up more than once, after that they simply use the request as a key to a index of sources. > This would help with distributing bandwidth load, > and since "data" sites just store encrypted items, the "control" site can > be made more secure. I suspect all the traffic would need to be encrypted to get this to work well. The channels between the switchboards and the databanks also need to be encrypted in such a manner that it is transparent even to the operators what the keys are at any given time. Also, assuming the user provides a request to a switchboard, who then determines the correct server through some mechanism, contacts that databank server and requests a transmission, and finaly the databank server sends the data to the user. How do we track the various keys and verify that the user making the request is the user getting the data? Is the switchboard and databank servers simply tracking the key provided by the original request sufficient? > Another random thing is a way to build a CD-ROM jukebox that would > automatically burn a CD when data meets the requirements of "valuable", and > "offline". Then, when the data is needed again, its fished out and loaded. What you need is a pick-and-place system. It would consist of a handling mechanism, a burning mechanism, a jukebox mechanism, and a CD storage mechanism. Personaly I wouldn't want them all in one in case any one broke down the rest of the system could still keep working. Valuable to who? For how long? Who pays for the stack of CD's up front? What kind of amortization schedule are we looking at for paybacks? Since we are looking at a automated system, what does 'offline' mean when the pick-and-place goes over to the rack and pulls the CD to place in the jukebox and it is now online? How do we charge the user? > Some type of IP encapsulation using public key encryption, so machine A > that is talking to machine D would encapsulate the whole packet with machine > D's key, C's key, and B's key. Then the packet is sent to box B, which > decodes it, looks where to send it, then kicks it to C. C then looks at > it, sends it to machine D. Basically a "remailer", where each packet is > a message. > > Is this feasable at all? Yeah, mixmaster does something similar to this. The problem I have with mixmaster is that the sender has to set up the chaining and keys and such. There simply isn't a clear mechanism (as I understand mixmaster) to do this transparently. One look at the chaining file that is required is enough to explain why granny doesn't use chained mixmaster remailers. Now if we want to do it in the protocol stack then we have a problem because it isn't supported in the standard. What I would do is a little different. An example... Let's assume we have 4 remailers, A to D. The sender sends a packet to A that's header is in the clear. Once A gets it, addressed to an appropriate user to invoke the decryption process, it decrypts the body of the packet. What it assumes is there is another valid packet with unencrypted header which it passes on to B. B gets it and de-crypts it and passes it on. This happens in C and D as well. At no point does any of the processes need to do anything other than use its own key to decrypt. If that fails the packet is trashed. Since no information about its previous source was passed to D from C this failure won't propogate back up the chain, providing a measure of source security. D takes the packet, whose body is still encrypted and remails it to the next address in the header, in this example the actual destination. The issue for me is how do the remailers handle the pass-off. Here are a few of the choices: - the existing mechanism which is completely dependant on the user and their technical skill. I don't like this one, too people intensive. - the sender does it by reference to a key-server and automated chaining software. The software would ask for a sequence of available remailers from the user, go off to the key-server and get the appropriate keys, and create the nested encrypted packets. Then it only has to send them on their way. Still a tad too technical for granny I suspect. - the sender provides a source destination and a number of remailers. The software goes to the key-server, looks up the available remailers (hopefuly there are more than the number requested by the sender) and selects the appropriate number through some mechanism (PRNG is my choice). It then creates the chained packet and sends it on its way. I suspect granny could deal with this one, she knows how to count and has sonnie's email address in her mailer software. What I like about this is the key server represents a mechanism for income. It would cost say $1/month to store your key on the server and then anyone who made the request would get it. The key would automaticaly age and expire if the user didn't keep paying the fee. Further, there would be no distinction between remailers, users, or other processes as to the actual key. It would consist of a list similar to: <user_id>:<expiration_date>:<encryption_protocol>:<encryption_key> for example: ravage@ssz.com:12/30/98:PGP:3$@48@DDcq* (note that some sort of escape mechanism needs to be included so that :'s can be used in keys as well. I put the actual key last. That way I know that any : after the encryption_protocol is a part of the key.) I would have to make requests of the sort: <user_id>:<encryption_protocol> ie: ravage@ssz.com:* Where '*' would return a complete listing for that ID of all registered keys. So to use it I would send an email with the key request(s) in the body one to a line and sent it to 'key-server(a)ssz.com'. The key-server would return something like: Request: ravage@ssz.com:* Key(s): ravage@ssz.com:12/30/98:PGP:#sD81xD@)d Now there is a problem if the key is multi-part. To handle those I would put each key part on a seperate line: Key(s): ravage@ssz.com:12/30/98:Multi-Key:23$@%dSk* ravage@ssz.com:12/30/98:Multi-Key:4dseP2*! So what you would end up with is: Request: <data> Key(s): <data> Request: <data> Key(s): <data> <data> Request: <data> Key(s): <data> Hope that helps. If you use the key server idea as I am explaining it please make shure I get credit for it. As far as I am aware nobody else is using a system similar, nor has one been proposed by other parties. If you find this is an error on my part please let me know. ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0