December 2003 - cypherpunks-legacy

Re: Latest smartcard software
by Information Security 17 Dec '03

17 Dec '03

> From cypherpunks-errors(a)toad.com Wed Jan 21 03:38:35 1998 > > The Independent Smartcard Developer Association, the only non-vendor > controlled smartcard related industry organization, announces their latest > release of SIO/STEST. > > SIO/STEST is a developer toolkit that provides drivers for most popular > smartcard readers as well as card support for a wide range of crypto > capable smartcards. SIO/STEST provides the tools required by the > application programmer to integrate smartcards with their application. > > As always, your feedback is appreciated. Is this for a "cypherpunks" smartcard, or for hacking them? Smartcards tend to be transponders, and to want to gobble up all other cards...bad card, bad card. Excerpt from the Cryptography Manifesto enclosed. ---guy Consider it an NSA proposal to issue everyone a Universal Biometrics Card. Everyone in the world. # By John Walker -- kelvin(a)fourmilab.ch, Revision 8 -- February 28th, 1994 # # Operationally, the Universal Biometrics Card serves as the cardholder's # identification for all forms of transactions and # interactions. It can potentially replace all the # following forms of identification and credentials: # # Passport and visas # House and car keys # Driver's license and automobile registration(s) # Employee ID card # Bank credit, debit, and automatic teller cards # Health insurance card # Medical history/blood type/organ donor cards # Automobile insurance card # Telephone credit card(s) # Membership card for clubs, museums, etc. # Frequent flyer club card(s) and flight coupons # Car rental discount card(s) # Train, bus, airplane, toll road and bridge tickets # Airline flight boarding pass # Train and bus pass and subscription card # WHO immunisation certificate # Personal telephone directory # Personal telephone number # Passwords for access to computers, data services, and networks # Software subscription access keys # Cable and satellite TV subscriptions # Cellular phone and personal digital assistant personal ID # Encryption keys for secure electronic mail, phone, and FAX # Electronic signature key # # Cash # # Of course, use of the Universal Biometrics # Card will start out as voluntary... They'll say hey, you've already surrendered your biometric number during fingerprinting for driver's licenses. It will be too late. The high-tech American Leviathan will be in place.

2 1

website advertising and design
by webwerx＠hotmail.com 17 Dec '03

17 Dec '03

/////////////////////////////////////////////////////////////////////////////// This Message was Composed using Extractor Pro Bulk E- Mail Software. If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings. //////////////////////////////////////////////////////////////////////////////// WebwerX is a company dedicated to professional and personal website design as well as advertising. We cater to the small home-based business or personal homepage to the large extensive company's needs. We offer the most competive rates on the internet. Our custom graphics artists and programmers will ensure that you have the most up-to-date in web design and artwork. We offer many features such as javascript, scanned images, animated .gifs, custom backgrounds and pictures, client-side image maps, and much more. WebwerX is also dedicated to advertising its clients websites on the web. Choose from an array of advertising options from the small one-time submission to the large in-depth monthly advertising campaign. Get noticed now on the web. Don't wait until it is too late. Thank you, WebwerX email us at: webwerx(a)hotmail.com visit us at: http://www.hypermart.net/webwerxdesign

1 0

Eureka! Thu Jan 22 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Thursday's issue of Eureka! HE GIRLS! This site calls itself "The original She-Male, slut wonder- land", and it's hard not to agree. With multiple live she- male slut video feeds. Huge numbers of amazing shemale pics, extra hot stories and so much more, you'll just love this site. And what's more, we have arranged a special free trial membership for all Eureka! subscribers. So go check it out! HeGirls ... http://207.33.10.198/cgi-bin/gate1/pbm/he_0024/0 PLEASE VISIT THIS FINE EUREKA! PARTNER SITE SINFUL'S 20 FREE XXX PICS http://www.sinful.net/cgi-bin/topvlog.cgi?eureka 20 FREE HARDCORE, CUMSHOT, GROUPSEX, AND FREE ANALSEX PHOTOS UPDATED WEEKLY PLUS LINKS TO 700+ FREE ADULT PICTURE SITES. CATEGORIES INCLUDE: ASIAN, HARDCORE, SOFTCORE, BABES, AND PIC LINKS. YOU GET ALL OF THIS FOR FREE!! VISIT US NOW!! PERSIAN KITTY'S ADULT LINKS The most up to date listing of visitor friendly free links on the net. Updated twice daily so there's always something new. Don't miss the most recent feature, the Panoramic Background of the Week. A beautiful Hi-Rez image for you to download and use on your desktop. PK takes care of her visitors! Get the desktop image, it is really hot! This is a must see site. Bookmark this baby right now. We mean it! Persian Kitty's ........ http://www.persiankitty.com/pk.html SEX FROM THE CRAB NEBULA Cool site! Venture into the furthest reaches of the four Galaxies.. Each Galaxy is inhabited by voracious alien females who eat you for breakfast. Fortunately they all look like Earth's prettiest, naked, hardcore girls. There are 56 pix with thumbnails and nice graphics. You should boldly go! Sex From The Crab Nebula ...... http://207.240.121.91/Space/ OSCAR'S HARDCORE LUAU Grab your grass skirt and head for the islands because Oscar's throwing a heck of a beach party. A secret tradition dating back to the early 50s, the Hardcore Luau has finally hit the internet like a Tsunami. Oscar's got humour, style, and a lot of hardcore Hawaii honey pix. Bookmark him Danno! Oscar's Hardcore Luau ......... http://www.xstart.com/oscar/ WENDY'S SATIN DOLLS Wendy's a generous girl. See the dolls get dirty. They were fully poseable in the anal, bjs, group sex, and lesbian scenes that we saw. Go see the hot babes at play. It's a straight forward dirty site. Hot. Just how we like 'em. Wendy's Satin Doll's ............ http://www.satindolls.com/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ 20vids+Chat .. http://209.1.31.175/chat/videochat.cgi?eureka CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY ASHLEY: This raven-haired babe's initials are A.S.S. It seems she was destined to be an exhibitionist, because she loves to show off! With a bunch of FREE picture sets, this gal is easy on the eyes. ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY TabooStories.com: Nasty alert! TabooStories.com gives you the hardest, nastiest sex stories on the net, all free! We have the stories that the other sites don't dare to post! Don't say we dindn't warn you.. http://www.taboostories.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?220 Pic 2 --------------------------> http://137.39.63.229/?221 Pic 3 --------------------------> http://137.39.63.229/?222 Pic 4 --------------------------> http://137.39.63.229/?223 Pic 5 --------------------------> http://137.39.63.229/?224 Pic 6 --------------------------> http://137.39.63.229/?225 Pic 7 --------------------------> http://137.39.63.229/?226 Pic 8 --------------------------> http://137.39.63.229/?227 Pic 9 --------------------------> http://137.39.63.229/?228 Pic 10 --------------------------> http://137.39.63.229/?229 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Re: (eternity) Eternity as a secure filesystem/backup medium
by Kent Crispin 17 Dec '03

17 Dec '03

On Wed, Jan 21, 1998 at 03:04:07AM +0100, Anonymous wrote: > Bill Stewart writes: > > > >Do the math, though, for 128bit. There are traditional analyses > > >which include the amount of silicon on the earth, the number of atoms > > >in the universe, etc. The general consensus is that traditional > > >techniques are not feasible for brute forcing 128bit ciphers before > > >the heat death of the universe. > > > > Hard to say. Assuming that Quantum Cryptography doesn't allow > > finite-sized computers to do large exponentially complex calculations > > in short finite time, you're probably limited by the number of atoms > > in the available supply of planets, and Heisenberg may still get you > > if that's not a low enough limit. Moore's law isn't forever. > > A practical 128-bit key-cracker could be built with about 10000 cubic ^^^^^^^^^ > meters of silicon. (Figure one transistor per cubic micron, 1 ghz > operation, do the math...) The technology to build a computer of that > size is still a few years away, but it is theoretically possible to build ^^^^^^^^^^^^^ > a 128-bit key-cracker without using quantum computers or travelling to > other planets. "In theory, theory and practice are the same, but in practice they are different." -- Kent Crispin, PAB Chair "No reason to get excited", kent(a)songbird.com the thief he kindly spoke... PGP fingerprint: B1 8B 72 ED 55 21 5E 44 61 F4 58 0F 72 10 65 55 http://songbird.com/kent/pgp_key.html

1 0

CP Bust or Buyout?
by John Young 17 Dec '03

17 Dec '03

Not much from the West Coast since the C2-CP meet on Saturday. Were they all busted, or fragged, or has the underground mole hole at last been taken? What, C2 shanghai-ed them all, with irrefusable bucks galore to securely distribute porn, NDA$ accomplishing what TLAs couldn't.

2 1

Is cyberpass.net down?
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Considering the paucity of traffic and the cyberpass.net deferred time-outs I suspect there is a problem over there. Anyone got a clue? Danke. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Gore Commission wants to regulate the Net like broadcast
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 20 Jan 1998 13:28:24 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: politech(a)vorlon.mit.edu Subject: FC: Gore Commission wants to regulate the Net like broadcast ************* Date: Tue, 20 Jan 1998 16:20:23 -0500 From: Alan Moseley <amoseley(a)clark.net> To: declan(a)well.com Subject: the Gore Commission and digital media The Gore Commission -- the group created by Clinton to determine the future public interest obligations of digital TV broadcasters -- showed signs last week of broadening its reach to include other digital media that can deliver broadcast-like audio and video. Significantly, the group discussed the possibility of including other digital media in their recommendations after viewing a demonstration of the Internet's potential to provide audio and video. If digital TV broadcasters can be made to serve some notion of the "public interest" through government-mandated programming and restrictions on programming, is it not a short step for the government to regulate other digital content-providers? This group should be watched carefully as they discuss future regulations on digital speech. The Media Institute (http://www.mediainst.org) a First Amendment advocacy group based in Washington, has issued the following press release on this subject: --------------------- Media Institute's Public Interest Council Sees Danger in Gore Commission Suggestion Washington, Jan. 20 -- The prospect of extending government-mandated public interest obligations beyond the broadcasting industry, raised in comments by the co-chairman of the Gore Commission, illustrates both the lack of justification for and danger in these proceedings, The Media Institute's Public Interest Council said today. The Council was reacting to comments last Friday by Norman Ornstein, co-chairman of the Advisory Committee on Public Interest Obligations of Digital Television Broadcasters, at an open meeting of the group in Washington. Following a demonstration of "video streaming" Internet technology and a discussion of digital convergence, Ornstein noted that mandatory public interest obligations on broadcasters may not be sufficient. He suggested that the Advisory Committee (popularly known as the Gore Commission) might want to examine the public interest role of other digital media as well. Ornstein questioned "whether we should be making this really firm distinction, saddling broadcasters...with heavy public interest obligations, and letting others get off scot-free." Media Institute President Patrick D. Maines, speaking for the Institute's Public Interest Council, challenged that idea: "The mere mention of that possibility -- extending the 'public interest' rationale to other media -- should raise alarms for anyone who values our country's constitutional guarantees of free speech and free press. "We already have a presidential commission considering whether to recommend additional public interest obligations for broadcasters solely because they will be converting to digital technology. Mr. Ornstein's comments illustrate the ominous ease with which government might attempt to impose so-called public interest obligations on other types of digital media, such as on-line information services, DBS, cable, and perhaps even newspapers that are digitally transmitted to printing plants," Maines said. "The Gore Commission is correct to note that over-the-air television is far from the only medium serving today's consumer. That felicitous fact, however, ought to lead the Commission to recommend a lessening of the obligations on broadcasters, not an increase on broadcasters and everyone else." The recent experience of the Communications Decency Act demonstrates the government's willingness to control digital speech. The digital convergence argument could be a new rationale for further such interventions, Maines warned. Maines spoke on behalf of The Media Institute's Public Interest Council, a four-member group created recently to study the public interest question and to follow the work of the Gore Commission. Members include communications attorneys Robert Corn-Revere and J. Laurent Scharff, and constitutional scholars Robert M. O'Neil and Laurence H. Winer. Information about The Media Institute, its Public Interest Council, and the Gore Commission is available on-line at http://www.mediainst.org. -------------------------------------------------------------------------- POLITECH -- the moderated mailing list of politics and technology To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: subscribe politech More information is at http://www.well.com/~declan/politech/ --------------------------------------------------------------------------

9 10

security and hidden networks (was On the LAM--Local Area Mixes)
by Rishab Aiyer Ghosh 17 Dec '03

17 Dec '03

summary this post suggests that technically, routing through a sub-network does not necessarily increase complexity or hinder traffic analysis, as it can be treated as a virtual node. given that, LAM-type networks may not provide much protection in a politically unkind environment. i also suggest a way of rating (or classifying) secure networks based on how well they hide suspect data and routes in other traffic. as this in response to tim may's LAM post, i'll respond quoting that. Tim May <tcmay(a)got.net> writes: >A message would enter the physical site, bounce around to N machines, and >exit, perhaps going to other machines and sites, and back again, etc. (The >image was of perhaps 20 or 30 cheap PCs linked with Ethernet in a set of >apartments in Berkeley--obtaining search warrants or court orders to allow >monitoring of all 20 or 30 machines, scattered across several physical >addresses, would be "problematic.") i won't repeat my objections to a reliance on "problematic" court orders, which i've made in another post. let us simply assume, for example, that i am the NSA, and i don't need court orders, but i'm a sneaky sort so i don't want to go in with guns blazing just yet. Alice has a network, alice.net, 10.1.1.0. she has many machines on this network, some hers, some belonging to Bob. when Alice and Bob plan stink-bomb attacks on the IRS (sorry, when they, or Li-Xia and Bu-pang, write articles on human rights violations in xinjiang) to Carol and David, outside their network, they first bounce their packets around their 30 machines. i sniff all packets going into and out of the network 10.1.1.0, from the upstream provider (Alice has her whole building in a faraday cage, which is ok because she never tries to use her mobile phone indoors). so. does it matter in the least, to me, whether alice wrote her last rant from kitchen.alice.net (10.1.1.1) or garage.alice.net (10.1.1.2) or whether it was actually Bob - Bob Inc, to be safe - from 10.1.1.33? it could matter politically/legally (if i wanted to prosecute) or technically (if i want to trace traffic down, to, from or through alice's net). technically first: it doesn't really matter. i treat alice's net as a hermetically sealed virtual "node"... >-- the routing topology of the site may be an interesting area to look at. >Ideally, a "Linda"-like broadcast topology (all machines see all packets, >like messages in a bottle thrown into the "sea") could have certain ... which is all the more correct topologically if broadcast addresses (10.1.1.255) are used. so i treat alice's net as a single node, and monitor traffic as it enters and leaves that "node". just as i would monitor traffic entering and leaving a single machine, without caring much which disk drive or memory bank it passed through. with a single physical entry and exit point to the network it can be treated exactly as if it were a single node for the purposes of any traffic analysis (security/traceability). multiple physical connections might complicate it slightly, but if i'm sniffing them all, and they connect to the same set of machines (i.e. the same network), not much (if it's IP the address spaces may differ but that's a minor matter). depending on what remailer math tells us - and we really do need remailer math, as tim pointed out! - bouncing traffic around sub-nets may have little impact on security. it could remain the same; i don't see how it could become much better; it could plausibly get worse, if multiple nodes in a single subnet can eat into your random route hops resulting in concentration of traffic through fewer virtual "nodes". the only situation in which this isn't true is if the source and destination of traffic are both within the sealed network - presumably what would happen most of the time with tim's suggestion of voice/high-bandwidth stuff. now for the political/legal bit. given that i'd like to see cypherpunk technology as daring enough to be of use outside western democracies, let's look at a slightly challenging situation. you're a bunch of people, each with your own firm for added safety, in this building. now i'm not a decent american cop, worried about court orders etc. ok, i don't exactly want to shoot all of you at once. but if i am satisfied (which i could be, using technical methods) that lots of "suspicious" stuff is coming from your network, then i'll certainly come in and reeducate you all on your "errors and distortions." (sorry, just finished a week of watching andrzej wajda films at a retrospective.) oho. it's a BIG building. and i don't really suspect all of you. ok, i go have a chat with the network admin - Alice - and hold her responsible. she has great respect for the government and police and would never write such a nasty thing as "the state tortures political prisoners?" uh oh. so i tell her that for the good of the country she must let someone listen in at her machine ("you didn't keep logs? ah, that was a mistake, no?") - i'm now inside, and the sealed network shrinks. of course if i'm impatient and don't believe her innocent approach, i just use the rubber hose. the same goes for multiple physical links into the same network. can _technology_ - rather than relying on law-abiding cops, and rights-abiding laws - provide a solution? the key is the BIG building. the more non-suspicious routes there are - i.e. a route through normal, unsuspected people, typically but not necessarily outside the physically well-protected area - the harder to usefully treat a network as a virtual node. looking at 10.1.1.0 as a node may help, just 256 people there; but 10.1.0.0 is a bit big to make a coherent "node" so although a LAM may be a great way to _test_ new tech and protocols out, i'd think it a big mistake to actually deploy it, as it were, on a large scale. it wouldn't help at all in the tough spots, and it would only serve to make the easier spots tougher, strengthening the immune system of would-be tyrannical states (i.e. the nicer western democracies). in general "WAMs" would be much more helpful and secure. the other thing that helps is of course the degree of non-suspicious traffic on suspected routes. putting them together, i think you can get some measure of the utility of a protocol and topology. the ideal would a) make it technically impossible to trace the route of suspicious traffic; and b) make it politically/legally difficult to prosecute originators/destinations of suspicious traffic. it would do this by a) blurring the distinction between suspicious and "regular" routes; and b) make it difficult to distinguish suspicious from harmless traffic on those routes; c) make it difficult or impossible to block suspicious routes or intercept/monitor suspicious traffic without causing unacceptable deterioration of service for "ordinary" traffic. two ratios seem useful to me as a way of organising cryptoanarchic network protocols. suspicious routes/ordinary routes; suspicious/ordinary traffic on any route. an ideal universal DC-Net with padding to keep constant throughput would have both ratios tending towards 1 - there is only one route - broadcast - for everyone; and traffic is constant so the degree of really suspicious stuff is unknown. pure Blacknet-type systems tend towards [1,0] - there is only one route, assuming everyone uses it. but without padding, you could suspect all traffic. Pipenet tends towards [0,1] - there are many routes, and they're all pretty suspicious as it's possible for the monitor to discriminate among them. but traffic is constant, so you don't know when to suspect. regards, rishab First Monday - The Peer-Reviewed Journal on the Internet http://www.firstmonday.dk/ Munksgaard International Publishers, Copenhagen Intl & Managing Editor - Rishab Aiyer Ghosh (ghosh(a)firstmonday.dk) Mobile +91 98110 14574; Fax +91 11 2209608; Tel +91 11 2454717 A4/204 Ekta Apts., 9 Indraprastha Extn, New Delhi 110092 INDIA

1 0

SC rules 1st doesn't cover lies [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > > SUPREME COURT: GOVERNMENT AGENCIES CAN PUNISH WORKERS WHO LIE > > January 21, 1998 > Web posted at: 2:53 p.m. EST (1953 GMT) > > WASHINGTON (AP) -- Government agencies can punish employees who lie > while being investigated for employment-related misconduct, the > Supreme Court ruled unanimously Wednesday. > > The court overturned rulings in five separate cases that had barred > federal agencies from stiffening the disciplinary action taken > against wayward employees based on false statements they made when > questioned about their misconduct. > > Although the decision dealt with federal employees, its rationale > appeared to affect state and local government employees as well. > Chief Justice William H. Rehnquist wrote for the court that nothing > in the Constitution nor any federal law bars such punishment. > > "A citizen may decline to answer the question, or answer it > honestly, but he cannot with impunity knowingly and willfully answer > with a falsehood," Rehnquist said. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

3 2

Student expelled for writing hacking article, from Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Wed, 21 Jan 1998 10:49:17 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: politech(a)vorlon.mit.edu Subject: Student expelled for writing hacking article, from Netly News The "So You Want To Be A Hacker" article in question: http://cgi.pathfinder.com/netly/editorial/019821.html -Declan ****** http://cgi.pathfinder.com/netly/opinion/0,1042,1699,00.html The Netly News (http://netlynews.com/) January 21, 1998 Hacking 101 by Declan McCullagh (declan(a)well.com) The end of senior year for most high school students is a time for college decisions, vacation planning and beer-tinged teenage revelry. Not so for Justin Boucher. Today the Milwaukee, Wisconsin-area native will be expelled from Greenfield High School because of an article he wrote entitled "So You Want To Be A Hacker." Published under a pseudonym in an unofficial student newspaper, it described in colorful (and sometimes profane) language how enterprising snoops could break into the high school's computer network. The advice ranged from the glaringly obvious ("Some commonly used passwords at very stupid schools are...") to the Hacker Code of Ethics ("Never harm, alter or damage any computers"). The finer points of hacker morality and teenage toomfoolery, however, were lost on irate school officials, who expelled Boucher for one year. [...]

1 0