July 2018 - cypherpunks-legacy

US drafting plan to allow government access to any email or Web search
by Perry E. Metzger 06 Jul '18

06 Jul '18

Forwarded from Dave Farber's list: ________________________________________ From: Rich Kulawiec [rsk(a)gsp.org] Sent: Monday, January 14, 2008 6:41 PM To: Fergie; David Farber; Richard Forno; Lauren Weinstein Subject: US drafting plan to allow government access to any email or Web search Quoting from: http://rawstory.com/news/2007/US_drafting_plan_to_allow_government_0114.html National Intelligence Director Mike McConnell is drawing up plans for cyberspace spying that would make the current debate on warrantless wiretaps look like a "walk in the park," according to an interview published in the New Yorker's print edition today. Debate on the Foreign Intelligence Surveillance Act "will be a walk in the park compared to this," McConnell said. "this is going to be a goat rope on the Hill. My prediction is that we're going to screw around with this until something horrendous happens." The article, which profiles the 65-year-old former admiral appointed by President George W. Bush in January 2007 to oversee all of America's intelligence agencies, was not published on the New Yorker's Web site. (It can be read here in pdf). [...] The PDF link points to: http://online.wsj.com/public/resources/documents/WashWire.pdf which I'm unable to access at the moment. ---Rsk ------------------------------------------- --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Fw:Requested HolidaySpecial
by unknown＠example.com 06 Jul '18

06 Jul '18

Below is the result of your feedback form. It was submitted by () on Thursday, November 29, 2001 at 06:31:18 --------------------------------------------------------------------------- message: ****************************************** $15,000 PER MONTH AND MONEY BACK GUARANTEE ****************************************** Real Networker Leads, Real Powerful Cash --EMAIL US NOW AT extreme_biz6(a)excite.com We Are Backed By An Actual Lead Company, And Have A Holiday Bonus Extended Through Saturday. Break Even On Your Initial Investment within 10 Days And Be On Your Way To Earning $15,000 Per Month!! email us at extreme_biz6(a)excite.com Include Your Name Email And PHONE NUMBER [INCLUDE YOUR PHONE OR WE WILL NOT GET BACK TO YOU] ********************************************************************** To Be Removed From Our List Email script4removal(a)excite.com ********************************************************************** ---------------------------------------------------------------------------

1 0

Re: Brazil Parliament Votes To Allow Air Passengers To Carry Firearms?
by None 06 Jul '18

06 Jul '18

At 10:55 AM 9/17/2001 -0400, you wrote: >It is being widely reported that the Brazilian parliament has voted >234 for, 6 against to allow passengers on airplanes to carry >firearms of .38 caliber or less. Details are said to be located at ><http://www.jb.com.br/>. I've sent an info request to my Brazilian >and Portuguese speaking subscribers to Freematt's Alerts for >confirmation and additional newslinks. I'm really skeptical about this - handguns are generally banned in Brazil, so it seems really unlikely that they'd suddenly be permitted aboard airlines - a policy change that radical and that fast seems too good to be true. I searched on Yahoo's Brazilian news - see <http://br.yahoo.com/noticias/> looking for "pistola" or "revolver" and couldn't find any mention of the change, though I did find some news stories about local shootings, and about how some US residents are buying guns because of the WTC attacks. (My mother-in-law is Brazilian, so I get some exposure to Portugese, but am far from fluent.) ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor, (614) 313-5722 ICQ: 106212065 Archived at http://groups.yahoo.com/group/fa/ **************************************************************************

1 0

Re: Brazil Parliament Votes To Allow Air Passengers To Carry Firearms?
by Carlos Macedo Gomes 06 Jul '18

06 Jul '18

Hi Matt, I've read into the Jornal do Brasil site and others (O Globo [1] and Terra[2]) and don't see any mention of the new legislation. I'll check w/ family in Brazil but if you get further word and could spread the word that would be great. thanks, C.G. [1] http://www.globo.com/ [2] http://www.terra.com.br/ -- gomes(a)navigo.com Carlos Macedo Gomes _sic itur ad astra_ ### Date: Mon, 17 Sep 2001 12:11:12 -0300 (Hora padrco leste da Am. Sul) From: "Daniel Fabio Jacob Nogueira LL.M." <daniel(a)nogueira.adv.br> To: freematt(a)COIL.COM, CYBERIA-L(a)LISTSERV.AOL.COM Subject: Re: Brazil Parliament Votes To Allow Air Passengers To Carry Firearms? Organization: Jacob & Nogueira S/C I haven't heard anything like that around here. Ive searched JB and have found nothing to that respect. Furthermore, it seems a bit unBrazilian to take such a stance. Brazilian nationals do not have a Constitutional Right to bear arms ( not even for a well-regulated militia) and there has been a clear legislative movement towards restricting as much as possible the use / permission to use / purchase of firearms. Some time ago there was a bill introduced in the Brazilian Congress seeking to ban all civilian firearms, except for rural citizens rifles. Even it the news was true, it would be the fastest ever action ever from Congress. The Brazilian Congress simply is not able to legislate that fast. The only way to introduce legislation with such urgency is by Provisional Measures, which is somewhat like an Executive Order. The President passes a Provisional Measure, which has the same efficacy of law during 60 days; during that period congress must confirm or deny the Measure. If confirmed, it is converted into law. Regards Daniel Fabio Jacob Nogueira, LL.M. Brazilian Attorney ###

1 0

[Clips] "Right. What's a Cubit?" (was Re: Re: [Cocoa-students] Using various c libraries in Cocoa?)
by R.A. Hettinga 06 Jul '18

06 Jul '18

--- begin forwarded text Delivered-To: rah(a)shipwright.com Date: Sun, 17 Dec 2006 21:21:38 -0500 To: "Cocoa Bootcamp" <cocoa-students(a)mylist.net> From: "R.A. Hettinga" <rah(a)shipwright.com> Subject: "Right. What's a Cubit?" (was Re: Re: [Cocoa-students] Using various c libraries in Cocoa?) Sender: cocoa-students-bounces(a)mylist.net -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At 5:01 PM -0500 12/17/06, Jonathan wrote: >If you need specific help, fire away! Well, since you asked :-), I'm trying to do a quick-and dirty script-kiddy-crypto-wrapped-in-Cocoa version of a bearer underwriting scheme that I've been blathering on about for about the last 10 years or so. See the URL in my .sig, below for various messy details. [And, no, I can't, as yet, code my way out of a paper bag (two courses in Pascal in 1984 don't really count, trust me...), or wasn't able to, at least, until I went on the Callaway Gardens Death March week before last (I'm, um, large, with a bum knee, and someone, not me, noticed that from the dining room of the admirably-discovered new-and/or-temporary Big Nerd Ranch Bootcamp Bivouac to the second story of the no-tell-motel-esque "suite module" we were all in came to 6-plus stories of stairs, up, and back, three times a day... :-)).] My "company" itself, see .sig, below, is a partially ossified, completely dessicated, ostensibly estivating zombie -- at the moment -- so any claims to future attractions are, um, very future, shall we say. Which gives me, um, scope, to plink around with this stuff as I see fit. Which means -- at the moment -- a Chaumian blinded probably RSA (though I'm strangely attracted to elliptic curves :-), if the usual blind signature m-of-n where m and n = 2 Shamir secret-sharing double-spend protection works with those, which I think it should; note either way I'm trying to unencumber myself from the patent system as much as possible) bearer certificate representing whatever the underwriter says it is -- on behalf of the issuer, of course. In short, and quite hypothetically, send your financial asset to me by DTC or Fedwire, or equivalent, and I'll issue you a bearer certificate on the net, for a fee. :-), and anyone presenting me a bearer certificate later for the asset in question will be wired/cleared the asset through Fedwire or DTC, or equivalent for free. And, in the meantime, people can swap those bearer certificates representing their ultimate claims on their various assets, between each other, on the net, for free. :-). If it's still legal, under various once-and-future legal regimes, of course. Call it securities re-mobilization, as opposed to securities im-mobilization, which is what happened when share certificates were converted to book-entries decades ago, so guys with guns didn't have to deliver fancy pieces of paper to literal cages in operations departments in the basements of securities firms. Mostly, I'm just after transaction cost data using actual operating numbers, which you get by actually writing and running code, which nobody, except me, these days, is gonna do for free, and I'm going to be literally on a beach come April, so I've got nothing better to do... :-). The reason I want to do this on Apple hardware with Objective-C using Cocoa is because, like the proverbial dog, heh, I can, and, if it eventually works, the respective NeXT-finance and erst-BSD-cypherpunk-crypto angles should match up quite nicely, I figure. Someday, somebody, could be delivered a fully functional Macintosh workstation to either trade or underwrite these things, plug and play, and, given the (hypothetical) reduction in transaction costs, it won't matter to anyone, except me and people like me, what kind of machine it runs on, because it'll save them too much money to care, and it'll cost us too little money to set up for them :-). And, in the meantime, the whole idea is too wack-job for anyone in the business to actually care about until they actually see it work, so the only people who care is, well, me, and that's what I want to do. That's the idea, anyway. With that ASCII-tome out of the way as preamble, I present another one, half as long... At 5:01 PM -0500 12/17/06, Jonathan wrote: >If you need specific help, fire away! Okay. First. To paraphrase Noah in the old Cosby comedy bit, "Right. What's a Stub?" It seems to me from my interrogatories with Messrs Google and Wikipedia that I just bang out a .h file with all the objects and methods in it matching all the functions and ?structs? that I find in the various .c files I want to use. Then, in my .m file, I write up Objective-C code that calls the various c-bits that I need, thereby encapsulating them in objects, to, um, objectify them with. (Can you tell I've watched too much 'Squidbillies', yet?) With the judicious use of the #import statement in both files, of course. Am I close? [BTW, googling something like "#import tomcrypt.h" makes Mssrs Google and Wikipedia laugh, though there are plenty of "#include tomcrypt.h" links out there. Which makes me understandably nervous. Points to a potentially profitable market inefficiency, or absolute folly, one or the other, and I expect it to be the other, frankly.] Second, I'm pretty sure that I can just part-out (in the automobile sense) the various crypto protocols I need, since they're all split up into .c files, in their own directories, anyway, so you're right, I don't need to wrap the whole Lamn Dibrary In The Interests of Science, and all that, just yet. Eventually, I'm looking at two kinds of apps (a trading app and and underwriting app), and a maximum of four players (two traders, and one or two underwriters) all talking to each other to execute, clear, and settle a single transaction all at once, by swapping one kind of, (don't say it fast) bearer asset, for another. :-). I figure since the trading app is a kind of client, it can be a core data app, like Mail with its mail, or iTunes with its tunes, or the AddressBook with its addresses, or even Safari with its history and bookmark URL lists. I also think, for a first pass, the underwriter can be a core data app too, to keep things simple. [With some calls/transfers/etc. to a real-live central data repository for intrafirm business, and/or web-server for initial customer contact and/or "terminal" emulating scrape-ware for the book-entry clearinghouse/wire bits to handle the back end... Um... Later.] Underneath it all, I need CDSA and/or PGP, or something, to do the key management stuff. I've got access to the PGP(.com) SDK, but what's Cocoa there seems pretty limited, (or so powerful its scope eludes me :-)), and what's Carbon there is, well obscured, in the name of some well-earned profitability on their part, though the headers are all open-kimono. I think. If I knew how to read them with a straight face. For link-level stuff, I think that SSL/TLS or SSH will do, 'cause it's out there already. But since the underwriters are their own kind of "certificate authority", by definition, with their own webs of trust, etc., with their own certificate users, I'm not sure that the x.blabla hierarchy stuff is all that's necessary, and, furthermore, the exchange protocol is going to be its own kettle of fish, possibly, but hopefully not, necessitating its own protocol, port number(s), and fun and games with the IETF someday. Or not... The point is, for a 0.X level pass at this, all this stuff is laying around either in various Developer directories, or out on the net for free. Kewl. Now if I can acquire enough clues to cobble it all together and keep various people from busting out laughing at the same time. There. That's what I'm trying to do. You had to ask, didn'tcha? :-) Cheers, RAH -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.2 (Build 4075) wj8DBQFFhfrhw/EfyN/eiFoRAg7WAJ9ZGN7sEnzp6PowZPHtMM4Pexu0tgCfQ5rh 1Fu0NW+24DwvRbNrOEbk7dY= =IEjY -----END PGP SIGNATURE----- -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Cocoa-students mailing list Cocoa-students(a)mylist.net http://mylist.net/listinfo/cocoa-students --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Clips mailing list Clips(a)philodox.com http://www.philodox.com/mailman/listinfo/clips --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

"Will You Be a Terrorist?"
by anonymous＠extropia.wimsey.com 06 Jul '18

06 Jul '18

in [Check it out - Cross-posted from Fidonet:] The "Crime Bill" passed by Congress recently (truename: Violent Crime Control and Law Enforcement Act of 1994) has a frightening provision that hides a boogeyman under its superficially appealing surface: *----------* *----------* *----------* SEC. 120005. PROVIDING MATERIAL SUPPORT TO TERRORISTS. (a) Offense.--Chapter 113A of title 18, United States Code, is amended by adding the following new section: ``Sec. 2339A. Providing material support to terrorists ``(a) Definition.--In this section, `material support or resources' means currency or other financial securities, financial services, lodging, training, safehouses, false documentation or identification, communications equipment, facilities, weapons, lethal substances, explosives, personnel, transportation, and other physical assets, but does not include humanitarian assistance to persons not directly involved in such violations. ``(b) Offense.--A person who, within the United States, provides material support or resources or conceals or disguises the nature, location, source, or ownership of material support or resources, knowing or intending that they are to be used in preparation for, or in carrying out, a violation of section 32, 36, 351, 844 (f) or (i), 1114, 1116, 1203, 1361, 1363, 1751, 2280, 2281, 2331, or 2339 of this title or section 46502 of title 49, or in preparation for or carrying out the concealment of an escape from the commission of any such violation, shall be fined under this title, imprisoned not more than 10 years, or both. ``(c) Investigations.-- ``(1) In general.--Within the United States, an investigation may be initiated or continued under this section only when facts reasonably indicate that-- ``(A) in the case of an individual, the individual knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law; and ``(B) in the case of a group of individuals, the group knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law. ``(2) Activities protected by the first amendment.--An investigation may not be initiated or continued under this section based on activities protected by the First Amendment to the Constitution, including expressions of support or the provision of financial support for the nonviolent political, religious, philosophical, or ideological goals or beliefs of any person or group.''. (b) Technical Amendment.--The chapter analysis for chapter 113A of title 18, United States Code, is amended by adding the following new item: ``2339A. Providing material support to terrorists.''. *----------* *----------* *----------* In the U.S. Title 18 Code, terrorism is defined as "engaging in any act or conspiring to engage in any act intended to intimidate or coerce the civilian population or the government" or close words to that effect. What does this mean? Suppose you organize a militia and some little jot or tittle is just that much off -- and the thugs at the BATF or FBI or NatPol decide that your militia is an "armed group"? They can now seize your house, your car, your bank account and anything else even remotely connected with the maintenance or support of the militia, and make *you* prove your innocence before the Federal thugs will grudgingly return your life to you. Suppose you participate in a demonstration against abortion and just one member of the peaceful demonstration gets into a fistfight with an escort. You had given a ride to this demonstrator -- is the fistfight "terrorism" and you a collaborator in this "terrorism" to be arrested and thrown in jail and your car seized until you can prove that you did not know that the other demonstrator did intend to fight with an escort? Suppose you demonstrate against national health care and you yell that Clinton should be thrown out of office and make a threatening gesture -- will the thugs treat this as an "attempt to intimidate the government" and take your car and perhaps your home if you used it to prepare materials for the demonstration? Suppose you quote Thomas Jefferson's words about a revolution being due every twenty years -- will you be thrown into jail for that? Note that the above section does not allow anything but "NON-violent" goals. This is another direct attack upon the First Amendment and deeply disturbing in its implications when considered as part of a set of other federal statutes scattered across Title 18 criminal law. ***end of quoted section*** -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, <snip>

1 0

[fc] list of papers accepted to FC'03
by Rebecca N. Wright 06 Jul '18

06 Jul '18

Here is the list of papers accepted to Financial Cryptography '03. In addition, there will be several invited talks and panels. A preliminary program will be available shortly. For more info, see www.ifca.ai/fc03. ================================================================== Rebecca Wright phone: +1 201 216-5015 Department of Computer Science fax: +1 201 216-8249 Stevens Institute of Technology Castle Point on Hudson e-mail: rwright(a)cs.stevens-tech.edu Hoboken, NJ 07030 Web: www.cs.stevens-tech.edu/~rwright ================================================================== List of papers accepted to FC'03 -------------------------------- A Micro-Payment Scheme Encouraging Collaboration in Multi-Hop Cellular Networks Markus Jakobsson and Jean-Pierre Hubaux and Levente Buttyan Using Trust Management to Support Transferable Hash-Based Micropayments Simon N Foley Fully Private Auctions in a Constant Number of Rounds Felix Brandt Verifiable Secret Sharing for General Access Structures, with Application to Fully Distributed Proxy Signatures Javier Herranz and Germ·n S·ez Cryptanalysis of the OTM signature scheme from FC'02 Jacques Stern and Julien P. Stern Squealing Euros: Privacy Protection in RFID-Enabled Banknotes Ari Juels and Ravikanth Pappu Preventing Tracking and ''Man in the Middle'' Attacks on Bluetooth Devices Dennis Kžgler Traversing Hash Chain with Constant Computation Yaron Sella Retrofitting Fairness on the Original RSA-Based E-Cash Shouhuai Xu and Moti Yung Fault based cryptanalysis of the Advanced Encryption Standard (AES) Johannes Blmer and Jean-Pierre Seifert How Much Security is Enough to Stop a Thief? Stuart E. Schechter and Michael D. Smith Fair Off-Line e-Cash made easier Matthieu Gaud and Jacques TraorÈ Asynchronous Optimistic Fair Exchange Based on Revocable Item Holger Vogt Secure Generalized Vickrey Auction using Homomorphic Encryption Koutarou Suzuki and Makoto Yokoo Non-interactive Zero-Sharing with Applications to Private Distributed Decision Making Aggelos Kiayias and Moti Yung Timed Fair Exchange of Arbitrary Signatures Juan Garay and Carl Pomerance On the Economics of Anonymity Alessandro Acquisti and Roger Dingledine and Paul Syverson _______________________________________________ fc mailing list fc(a)ifca.ai http://mail.ifca.ai/mailman/listinfo/fc --- end forwarded text --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Fwd: [fc] list of papers accepted to FC'03
by Fearghas McKay 06 Jul '18

06 Jul '18

--- begin forwarded text

1 0

Re: spyware on Blackberries
by Perry E. Metzger 06 Jul '18

06 Jul '18

"Steven M. Bellovin" <smb(a)cs.columbia.edu> writes: > http://feeds.wired.com/~r/wired27b/~3/CFV8MEwH_rM/ > > A BlackBerry update that a United Arab Emirates service provider pushed > out to its customers contains U.S.-made spyware that would allow the > company or others to siphon and read their e-mail and text messages, > according to a researcher who examined it. > > The update was billed as a b performance enhancement patchb by the > UAE-based phone and internet service provider Etisalat, which issued > the patch for its 100,000 subscribers. > > ... An update: RIM confirms to its customers that the update was spyware pushed on them by their own carrier. http://www.engadget.com/2009/07/21/etisalat-blackberry-update-was-indeed-sp… Perry --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[e-gold-list] An interesting technology for cashlike tokens.
by James A. Donald 06 Jul '18

06 Jul '18

-- Reusable Proofs of Work by Hal Finney rpow.net Hal Finney has an interesting technology for electronic money. The intended application is electronic postage, an anti spam measure. The same technique could be used to anonymously transfer certificates of possession of gold. The method is like trusted computing in reverse. Instead of the client computer needing to prove to the server it is trustworthy, the server must prove to the client it is trustworthy. For transactions that involve substantially greater periods than email, a money based on gold is better than a money based on proofs of computational work, since the cost of mining gold changes only slowly, while the cost of doing computations diminshes rapidly, but for the intended application, a high inflation rate is not a problem. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG qaxLVMrKlZJuFzjYAxmdhu7F4wsAds1g0b9s1d2G 4fcchBYWopL00KqdJyRYp/27QCChV9H4oizZtSKGc s --- You are currently subscribed to e-gold-list as: rah(a)shipwright.com To unsubscribe send a blank email to leave-e-gold-list-507998N(a)talk.e-gold.com Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) via the web and shopping cart interfaces to help thwart keystroke loggers and common viruses. --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0