December 2003 - cypherpunks-legacy

Re: (eternity) God's Own Backup Medium
by Ryan Lackey 17 Dec '03

17 Dec '03

Dan Fabulich: > I must be insane, because this seems simple to me. Don't listen. It's simple conceptually, just some of the technical details are multi-axis tradeoffs which need to be made explicit. > > Presume that the goal is a secure anonymous storage/retrieval system, paid > for with e$. Armed with a persistent naming system for each document, we > set up e$ protocols to pay for storage of a (possibly encrypted) document > OR to pay for retrieval of a particular named document. I broadcast that I > want up to ten people to store my XMB document and that I'm prepared to pay > $Y/mo. to each participant. My document is then secure for as long as I'm > prepared to pay for it. It is anonymous to the extent that information can > be transferred anonymously between me and the other willing participants; > it is therefore a remailer problem, not an Eternity problem. It's an Eternity problem if you want your eternity system to have better performance than the remailers have. What you really need is a multi-level security infrastructure, where someone (the owner of the data, the individual intermediate server operators, etc.) can choose the level of security they will provide to meet certain Quality of Service levels. Yes, for a lot of the data you're handling, remailers are a good model. However, steganographically-protected streams hidden inside other streams work better for certain things. Perhaps quantum channels work better for other things. Perhaps hand-carried optical tapes are best for others. The system should have a way of handling these formats in a suitably abstract way. > Alternately, if a document is in high demand, someone might offer money to > anyone who can provide a particular document given by name. Any willing > sellers could then exchange information/e$ via e-mail. (One might even > imagine data-traders who would seek out valuable information at a bargain > and sell them to others at market value.) Again, the mechanism is only > anonymous to the extent that e-mail is secure. Which helps both security and performance. A very good mechanism. > > Note that the system is profitable to all of its participants no matter > WHAT the broadcast mechanism is. The more automation, the more profitable. > The more participants, the more profitable. The more information online, > the more profitable. Yes. That's why I'm including market-based techniques in Eternity DDS -- I think market-based arguments are as powerful as statistical ones -- perhaps not as powerful as mathematical/cryptographic proof, but close. > The missing link here, of course, is anonymous e$. Despite the success of > the remailers, I've never been convinced that they're not vulnerable to > traffic analysis. (Possibly this is why no one has ever bothered to shut > them down?) > And even if we COULD set up automated daemons to monitor the broadcasts and > negotiate trades, there's still no good way to distribute money over the net. I know with high confidence there will be a deployed quality anonymous e$ system in 1998. > > At any rate, keeping the system independent of its broadcast medium (which > can be done pretty easily by just making sure that the program communicates > in [encrypted] plaintext,) should make the system autocatalytic... At that > point, just let it run, get as many people running it as possible and let > the market take over. Yes. Both Eternity-USENET and Eternity DDS are only secure once they grow to a certain size. Market pressure is (I think) the best way of getting a system to scale to that size. (Eternity-USENET is vulnerable to technical Denial of Service attacks with the current small number of indexing servers, even if it is protected from legal issues. I think illegal or extralegal attacks are as dangerous as the legal ones) -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

7 7

Re: Crypto Kong penetration.
by James A. Donald 17 Dec '03

17 Dec '03

-- At 05:31 PM 1/15/98 +0000, Steve Mynott wrote: > Ummm why reinvent the PGP wheel Well I am not "reinventing the wheel". Crypto Kong implements a different identity model. It does not suppose that there are "true names". This leads to substantially easier identity management (largely by abolishing identity management) As a necessary consequence of this, if you happen to be communicating with two different Bob Jones, Crypto Kong does not attempt to discover which one is the one true Bob Jones and which is the evil man in the middle Bob Jones. It merely keeps them distinct by applying different labels to them. Secondly, PGP simply is not being adopted by the masses. Of course right now, two weeks after release, Crypto Kong is not being adopted by the masses either, but with very little identity management, it is far easier for the masses to use. If you try and shove that identity stuff onto people they will not do it. Too much like hard work. They will happily let the government licensed authorities do it for them. The PGP model clearly has not flown yet, and it is not going to fly. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG mMObRqZXvGz3OkHZyNWBCEGt5ZpZtUG5Y19i3tsX 4SfFX2/pUCYwhAm6n1u5xBLG/xL9LYsSZcznxXI8S --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we are. True law derives from this right, not from the arbitrary power of the state. http://www.jim.com/jamesd/

5 5

BUG Bounty...
by Peter Wayner 17 Dec '03

17 Dec '03

My publisher is reprinting _Digital Copyright Protection_, a book that describes how to use encryption and steganography to control digital data. I get to fix any problems that are out there. To encourage people who may have spotted errors, I'm offering a bounty of $20 to the first person who reports an error subject to the following limitations: * The errors must be technical. I appreciate anyone who wants to correct my grammar, but I think that these types of errors are too hard to pin down. We could spend more time arguing than solving them. * I reserve the right to aggregate errors and determine the right way to split them up. This isn't a loophole, it's just a way to prevent someone from noting a pattern and asking to be paid for each separate occurance. For instance, imagine that someone notes that I forgot to put a page number on a blank page at the front of the book. Is every page number after that wrong? I promise I won't use this as a loophole. * I reserve the right to make arbitrary judgements about the "first" person to submit a claim. This is to prevent a club of people from finding an error and reporting it in synchrony. I may choose to pay each person the $20 reward, choose one I feel is most deserving, or even split the reward n ways. It's up to me. I'll probably choose the first one unless there are extenuating circumstances. Thanks to everyone who takes part in this project. Let me know if you have any questions. In the past, I've found that few people reported the errors and I'm hoping that $20 will be enough of an inducement. Perhaps there are no errors there? This is the best way to prove a negative. Thanks again, Peter Wayner

1 0

(eternity) Mailing List Archives
by Ryan Lackey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've put the archives of the Eternity Mailing List (eternity(a)internexus.net) up on http://sof.mit.edu/eternity/mail-archive/ The mailing list is host to discussion of the theoretical issues behind Eternity service, Blacknet, Adam Back's Eternity USENET implementation, and my forthcoming Eternity DDS implementation. (7 articles got lost from the archive while I was setting it up. I sent them to itself as "missing articles 86-92". I'll restore their original headers at some point.) - -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNL5mBqwefxtEUY69AQFZrAgAhJA1xWUTf4nPKvT17U9tBnrPt2EwP9Hv dx3QruMmZqodAES7ot6h0YQN6Wi/Chw8RosjCqRXZq+zkayUBVX376gTF4i0+Vpf MocwfB8plXTmjfBahcfjb+WxeEuGEefw3BGCGKpYM/y5uZ925GJsq/+R6MeA2FjQ t+RWcqeMbSRAz4T3s8ThPQtr9dIi3dJgh4gEq9aAD+0cH4lOZFAsc3NA8YMWHptR M++ZvHYCLvwm5mb01bNJ9w8BGzU7dVFzxmJfxhZqb+0DJvK++8uQeflSUmILP9uf yXc+O+pYjuW2ho9ozzSlcbbSEPWdyAO03Qaty8bLdxy0DeaFmTWyoQ== =US5o -----END PGP SIGNATURE-----

2 1

Re: Crypto Kong penetration.
by James A. Donald 17 Dec '03

17 Dec '03

-- On Thu, 15 Jan 1998, James A. Donald wrote: >> If you try and shove that identity stuff onto people they >> will not do it. Too much like hard work. They will >> happily let the government licensed authorities do it for >> them. The PGP model clearly has not flown yet, and it is >> not going to fly. At 02:16 PM 1/15/98 -0500, Ray Arachelian wrote: > IMHO, this is pure grade A bullshit. If you included PGP > in MsMail, and Eudora and pine and elm from the get go, > everyone would use it. Proven false by experiment: Observe what happened with Verisign and MIME. The cost is not signing your stuff. The cost is setting up a key and publishing it, and getting other peoples keys and verifying them. Integration with Eudora makes it trivial to sign and to decrypt, *after* you have created and uploaded a key, and downloaded and verified other peoples keys, which is not trivial. People would rather the kindly benevolent government did that hard stuff for them. Verisign/MIME is *already* integrated into everyone's mailers, and they are not using it because Verisign key management is too hard, and Verisign key management is arguably more user friendly than PGP key management, though clearly less user friendly than Crypto Kong's (lack of) key management. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG s/7IS+OXDf+elZBg6ff+1Sq4aO4aoy9DRhH58rhP 4HFsRTnHTjnMnwGwjenI4jPJsM/0cy02LwoJAtbQ8 --------------------------------------------------------------------- We have the right to defend ourselves and our property, because of the kind of animals that we are. True law derives from this right, not from the arbitrary power of the state. http://www.jim.com/jamesd/

1 0

Eureka! Fri Jan 16 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Friday's issue of Eureka! PLAYGAL This is truly a breathtaking site. Well-designed and easy to use with excellent content. The tour alone has hotter porn than many other 'free' sites - go see it now. It's explicit, comprehensive and top quality. There are 2,000 video feeds online, free live fucking with sound, 10,000 erotic stories, 1,000s of top quality pix, adult and arcade games, real ama- teur competitions and much more. Click now and be astounded! Playgal .... http://www.playgal.com/playgal/banner_abc1.html PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Persian Kitty's Adult Links http://www.persiankitty.com/pk.html The #1 most visted adult links site on the Web. Persian Kitty's is now in it's 3rd year! Updated twice each day. Plus the Purrfect Pose and the Desktop Image of the Week! PLUMPERLAND Fat chicks with big hooters and pretty faces. Interesting mix here. Some dressed like police and bent over showing us their goods. There are also some links here to other big girl websites if you are so inclined. Big girls need loving too! ...................... http://www.ioservices.net/plump/ BIGKNOCKERS It's a tit zone and a half! It's udder maddness! The boobs are big and the babes look good. This is a great site with hardly no distracting graphics. Just a real easy thumbnail area with lots of free pix. This is a must surf for anyone who love breasts. I gotta go I'm getting thirsty for milk! Bigknockers ....... http://www.bigknockers.com/free/free.htm TITS OF THE WEEK OK, this is a paysite, but at the door they have three great sets of hooters free for you to enjoy viewing. These alone are worth the modem hop. If you have seen one you have not seen them all. Take a look at her nipples! Cruise by and see! ............................... http://www.towview.com/ OLDER BROADS WITH HORNY BODS Hey, you will be older someday. Here is a chance to get a peek at the future. These ladies have guts to stand up and be seen! Some are not too bad. A few will scare you out of your computer chair and leave you running in the street! Older Broads ........ http://lisanne.com/obroads/ladies1.htm FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here ... http://www.netscape.com/download/ The hardcore channels .. http://www.EroticPleasures.net/xxx/ CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat .................. http://137.39.63.229/chat/ General/Fun Chat ........ http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!....1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline.........1-800-644-8779 FREE: Live 1-on-1 (international call only)....011-678-77416 AMATEUR SITE OF THE DAY TAYLOR: Hugz & Hooters is her calling card. Not only does she have huge tits, but is one of the sweetest girls around. Her site is chalk full of pictures, including girl/girl and three girl lesbian pictures. She also posts true life erotic stories! ............................ http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY XXXStories.com: The largest free erotic story site on the net. Over 400 hot sex stories on such topics as wife sluts, virgins, group sex and more...... http://www.xxxstories.com/ DAILY CARTOON ........... http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! .... http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ........... http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ....... http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ....... http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ..... http://eureka.abc-web.com/eureka/francais.htm ITALIANO ..... http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE . http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 ........................... http://137.39.63.229/?160 Pic 2 ........................... http://137.39.63.229/?161 Pic 3 ........................... http://137.39.63.229/?162 Pic 4 ........................... http://137.39.63.229/?163 Pic 5 ........................... http://137.39.63.229/?164 Pic 6 ........................... http://137.39.63.229/?165 Pic 7 ........................... http://137.39.63.229/?166 Pic 8 ........................... http://137.39.63.229/?167 Pic 9 ........................... http://137.39.63.229/?168 Pic 10 ........................... http://137.39.63.229/?169 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Talk Is Cheap.....AND Fun!
by freecalls4u＠28399.com 17 Dec '03

17 Dec '03

NO 900 #.....NO Credit Cards Just Pick Up The Phone & CALL! Talk to our SEXY & HOT, young girls! They will talk about ANYTHING! 24 Hours A Day! NO Charge For The Girl's Services! You pay for the long distance charges (as little as .30 cents a minute) Economy Plan: Call us as a group and split the charges! SHY....... Then call and just listen. You'll be amazed at some of the wild fantasies! Why pay for expensive 900 numbers, when you can talk to our hot and sexy babes for as little as .30 cents per minute. This is a LIMITED TIME OFFER to introduce our girls and our GREAT new service. Don't delay, call today! 011-592-1773 (24 hrs.) You MUST be 21 years old to participate.

1 0

E (the java extension, not MDMA)
by Ryan Lackey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- After someone mentioned "E", Electric Communities (http://www.communities.com/) enhancement to the Java security model/language/etc., I checked it out It looks useful for a distributed agents based system (which is what I'm shooting for...the long-awaited goals mailing will either get sent today or tomorrow, depending on if I fall asleep immediately after sending this). I don't think anyone will argue that it's inherently bad. However, I'm interested in knowing what people think about using a vaguely proprietary product (albeit from a company with lots of cool people) in a piece of software like a reference Eternity implementation. I personally would prefer to stick to something as standard as possible, but E has a lot of features I'd want to use, and would end up re-implementing on my own. (I think if you had a JVM interface to eternity such that an object, its currency, where it should send its results, etc. in a standard form (the standard eternity agent encapsulation) were encapsulated, you could build a lot of Eternity out of interacting agents inside another Eternity implemention, inside ... up to inside a traditional network. (more on this idea later)) So, this is very rambling -- I mostly wonder how people feel about using a fairly non-standard language extension in something like Eternity. Ryan [ObDentistry: Wisdom teeth *really* suck. I want drugs.] - -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNL6JcKwefxtEUY69AQGs0Qf/TubvdreDInDvT89R8UGHd1TohudBCwYE KWq66zhULQh0YAdn2ZoL4rT9lhxWJ/QE0el8sLxmp9CgjwnMi8l7uA8eKB3RSi0s l6zgx96PJYLvAtI+S7gYcLAKf9RvHH5TzyWpT/WoiePb4Wd8YI0Z3DthdEdd4xMs gKqmyOO6JpX+SPXF89shN33j1LXfFmvq10XWlCW15XLyyA72WwoWbKQHu40uliAd rsM+CRacNN7K3Gc9OV4IWORnmIciZbJ1EZbO8kyZU3YlYvOB+QyZpnaYvFuzyLtS Iyud5WaVVRM7mGn9FS9WwSaxqxMrRRv25FutM9muHmAIufaxnMVeQA== =GQr/ -----END PGP SIGNATURE-----

1 0

Presidential advisor on the "problem of encryption"
by Declan McCullagh 17 Dec '03

17 Dec '03

Presidential advisor Jim Steinberg spoke across the street from my office this afternoon at the Mayflower Hotel, addressing the European Institute. He said: ...we will pay a price if the United States and the EU cannot work together effectively to address the problem of encryption in a way that allows our cutting-edge industries to thrive, our citizens to have security in their communications, while at the same time protecting common public security interests. Translation: the government gets a backdoor to your encrypted files. Read on for more. (BTW, Steinberg is deputy assistant to the president for national security affairs. Also Deputy National Security Council Advisor and formerly the director of the State Department Policy Planning Staff.) Background: http://cgi.pathfinder.com/netly/afternoon/0,1012,1626,00.html http://cgi.pathfinder.com/netly/opinion/0,1042,1385,00.html -Declan "We also need to find better ways to harness our efforts to counter the kinds of new crimes looming ahead in the next century. We have made considerable progress through the Summit of the Eight, taking new steps to increase airline security, to protect our infrastructures, to fight cyber-crime and, most important, to promote nuclear safety. We are encouraged that Prime Minister Blair has identified cooperative law enforcement as a major topic for the Birmingham Summit this May. We have been somewhat disappointed that Europe has not strengthened its cooperation with us on the vital third pillar. I am particularly concerned about the lack of enthusiastic support for the U.S.-sponsored international Law Academy in Budapest. Full integration in the Euro-Atlantic community means that all of our police forces must have the confidence to work together against transnational threats. It is vital that the emerging democracies enjoy the rule of law during their transition period, and we will pay a price if the United States and the EU cannot work together effectively to address the problem of encryption in a way that allows our cutting-edge industries to thrive, our citizens to have security in their communications, while at the same time protecting common public security interests. "But the gravest and most immediate challenge before us is to find more common ground between the United States and Europe in dealing with states that threaten our common interests. We have started to fall into a troubling pattern of good cop/bad cop. This pattern, whereby Europe provides the carrot, and the United States is left holding the stick, is unhealthy for both sides, and only benefits our common adversaries. While we all believe that dialogue and engagement are the preferred course, dialogue should not be an excuse for inaction when countries like Iraq fail to live up to Security Council resolutions, and other nations import weapons of mass destruction and export terror. This divergence compromises the effectiveness of our shared efforts." -------------------------------------------------------------------------- POLITECH -- the moderated mailing list of politics and technology To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: subscribe politech More information is at http://www.well.com/~declan/politech/ --------------------------------------------------------------------------

1 0

Add me to the mailing list
by mws＠conch.net 17 Dec '03

17 Dec '03

mws(a)conch.net

1 0