- cypherpunks-legacy - lists.cpunks.org

Anonymous Repository
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

To solve anonymous replys heres a little scenario. Alice wants something from bob (crypto?) but dosent want bob to know (or any others (NSA?)) to know. 1) Alice sends a request to bob via and anon-remailer chain. 2) In the request she specifiys that bob is to put a special code in the message and send it to anon-repostiory(a)nowhere.com 3) Bob sends the info + the special code, for whatever reason. (Payment recieved?) 4) Alice sends a message to anon-repostiory(a)nowhere.com saying to copy bobs message (using special code) to a new secret special code (here code represents a file name) - This message could/should be encrypted and the repository should delete it after the copy is made. 5) At some indetermined time in the future alice ftp`s or sends a mail message to anon-repostiory(a)nowhere.com and retrives bobs message. This should defeat traffic analysis but will do nothing if the repository is compromised! But the same goes for anon-remailers. There are huge blanks in this, so does anyone want to comment? T

1 0

THROUGH THE LOOKING GLASS
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Tim May wrote: ... I don't want to see my local cops have all of their actions videotaped and reviewed for quite another reason--I don't want a "mechanization" of the enforcement process! Won't happen. First, cops are already required to enforce some stupid laws; the mechanism used is "quotas." Second, the vast number of laws makes total enforcement impossible. Third, the cops aren't pulling a fast one when they use their discretion to cut someone loose. I've even seem them do it on the TV show "COPS." That discretion is clearly within their powers. It's the "let's-whack-the-hippie" sort of discretion that is denied them. ... I have some good opinions of the California Highway Patrol ... even a cop-disliking skeptic like me can be convinced that some good is done is by them, and that not all cops are bad.... I agree; and Mussolini did make the trains run on time . . . My proposal is not anti-cop; it's anti- *bad* cop. Good cops *benefit* from protective surveillance; and *all* cops benefit from having their exact location known when the feces impacts the turbine. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

uSuRa anonymous remailer [update]
by Alex de Joode 17 Dec '03

17 Dec '03

I have registerd the domain-name replay.COM at InterNic. XS4all has installed some sort of MX-handling for my account, usura(a)xs4all.nl, so my new address wil be usura(a)replay.com. The remailer that is operated from that account is now also reachable at the replay.com address. The usura(a)xs4all.nl remains valid. Raph Levien has updated the address in his automated pinger; here is the updated PGPkey for the usura(a)replay.COM remailer: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 Comment: Replay and Company Limited. mQCNAi4wTh8AAAEEAMb9gl6NlZHy4FdjADel4d+C+Th7+inTOV4mEsKk+N/QfJAj BN6YPnJ9bm+Ch19FrR1KeTwrpluP6J+GdJrMkVSosvIqBPpSRgOs7nvMhnn3Tnrn uUFZVDYslQ1wRZvFbTpCEW8TzgVhGy6HMznxEC4ttnOq8pFRFUpL3asf+toVAAUR tCt1U3VSYSBhbm9ueW1vdXMgcmVtYWlsZXIgPHVzdXJhQHJlcGxheS5DT00+iQCV AgUQLu0YykpL3asf+toVAQGqhAQAuAnqzqRc5MzYGHmzBVjvUxnEuHiwju4EZmIO OZ5wbxd62gNDV7Nj+M3yj5pnSuwLBL/AOjxLEGRQ49HwvCOLy0wtJWulsg71Pi+y sPkUrP9uq7Aa381Rkwcrcje73WGvFcv89LGtcZlvuiqeNatubbvEgeC9VWb5ovEq jZFLvEI= =snZE -----END PGP PUBLIC KEY BLOCK----- EnJoY. -- Exit! Stage Left. <URL:mailto:usura@replay.com> Alex de Joode <URL:http://www.xs4all.nl/~usura>

1 0

Re: Real-time surveillance of the police
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

Tim wrote: >(The longer-than-I'd-planned section above is meant to show that even >a cop-disliking skeptic like me can be convinced that some good is >done is by them, and that not all cops are bad. Perhaps my on-day >exposure co-opted me the way certain folks in D.C. got co-opted?) Yup! -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

1 0

Standard Packet size.
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I am about to release Mixmaster as a beta test. Before I do, I would like some input on what size message packet to standardize on. Each message includes twenty 1k headers, and a block with the message text. Right now I have the text block size set to 4k. That seems small, but I am worried about mail systems choking on big messages. Messages over the minimum size are sent separately (through the same chain), and only recombined by the last remailer in the chain. Previous remailers do not know that the message parts are associated. This is quite secure, but not as good as a single packet, so the fewer messages that get split up, the better. Mixmaster compresses the contents of the text block. So, any thoughts on what size the text block should be? BTW Mixmaster still only runs on Sun. Several people are working on porting it to linux. Help with porting to PC and Mac would be appreciated. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLu1Ml1Vkk3dax7hlAQHWfAP+Kj2LyWBySVHfI0QTBBhEvF3b+ru/hywm kALdnXWUkbcSgRHQAMdSpwYza44M7Tc6sX++kDASSjwWyV80cTPHqFEPFmoEcbRV 1BPJB7SAkhwHGpRB5e0daLe0LAuS9KRHbTQcN//n0pUrbqMS2sVJCrDQ7kwrFC8L 3QEzCjWHsAQ= =Dc4G -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

L.A. cpunx meeting
by Agorist003＠aol.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Yep, still hosting the weekly L.A. Cypherpunks gathering at the: California Coffee House 4455 Overland Avenue Culver City, CA 90230 (310) 559-8868 Defend Your Privacy! from: "Big Brother" Government and "Dark Side" Hackers - ---------------- L.A. Cypherpunks Help create an "Infotopia," don't support an "Automatic Gestapo." Fight the Clipper "Snitch Chip." Drop in any time between 12 & 5PM Saturdays (excluding holidays). Let's plot and conspire, or at least exchange PGP key fingerprints. Tune Out (media lies), Turn Off (freeway), and Drop In (for coffee). Share information and sell stuff if you wish. I'm trying to get political types to show up, in addition to us computer geekazoids. Show up and get the latest brochure! I'll be there this Saturday, but not the 24th and possibly not in early January (I did say "excluding holidays"). But don't let that stop you unless the coffee house is closed. Kent - jkh(a)story.com (not yet) or agorist003(a)aol.com -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLuzgeA4ciVn87Ra9AQHHtQP/dTcF9HG+eB6RLqv9F0Q1/aTfRBMIC0i7 8S5/LxUlv9JiKEOqtLuN7cYMLaEKnVUJbrJU8EH2IJH4VecUk+nDCiMOLC6cNIKj FAGJl6CXDRbaA18Ibuye8u1kNpZckxfOBDhlYCArBHiCvRN3hfqHQzgnMpom1Zba 4Gq+nu7c3Zk= =E2Hr -----END PGP SIGNATURE-----

1 0

Re: HTTP security
by ekr＠eit.COM 17 Dec '03

17 Dec '03

I sent a slightly less polished version of this to Perry, and then realized he'd cc'ed Cypherpunks.. but it was gone by then... Perry Metzger sez: >Eric Rescorla says: >> In the email world, you don't necessarily have any sort of prior >> relationship with the person you're communicating with and that public >> key cryptography is relatively cheap. (When it takes minutes to >> ship mail across the net, who's going to notice a second or two >> of signature verification?) However, in the case of the Web, >> things are very different. >Since one can sign pages just once (they are written once and read >often) and one can pick one's signature algorithm to speed up >verifications relative to the signatures (using small exponents is the >usual trick fo this), I'm not sure its that big a problem. You are of course correct. I should have chosen the example of encryption, where you can't preenhance. >I'd like these algorithms to support the serving of signed pages from >hosts that do not know the keys that the pages have been signed with >-- offline signature schemes like the one I just described will >support that nicely. Yes. Conveniently, we've anticipated this requirement. The content type of an SHTTP message can be set to indicate that the enhanced content is actually an enhanced document rather than an enhanced HTTP request/reply. So, you just cons up some headers and drop in the presigned page... But this is a very good point. I'm glad I'm not the only person who thinks this is an important requirement. Details on this can be found in the current SHTTP spec (Section 2.3.3) <http://www.commerce.net/information/standards/drafts/shttp.txt> -Ekr

1 0

Re: Clarification of my remarks about Netscape
by marca＠mcom.com 17 Dec '03

17 Dec '03

In article <9412121811.AA55359(a)amanda.dial.intercon.com>, amanda(a)intercon.com (Amanda Walker) wrote: > > As for the IETF standards process, we are pushing the > > document into the RFC process. > > Precisely. Rather than working with others in the industry and research > communities, you are trying to push your proposal into the standards track. Amanda, we're not trying to push anything into the standards track. We're publishing SSL as an informational RFC, and we have separately submitted SSL as a proposal to the W3O working group on security (in parallel with SHTTP and a handful of other proposals). Nothing is being pushed into the standards track. We are trying to work with others in the industry and research communities, via the above actions, by publishing SSL on our server, by participating in this forum and others, etc., and we are generally succeeding, judging from the overall high level of feedback we're getting from people genuinely interesting in discussing the issues. Marc -- Marc Andreessen Netscape Communications Corp. Mountain View, CA marca(a)mcom.com

1 0

Re: Clarification of my remarks about Netscape
by marca＠mcom.com 17 Dec '03

17 Dec '03

In article <199412130318.TAA00912(a)largo.remailer.net>, eric(a)remailer.net (Eric Hughes) wrote: > From: "Kipp E.B. Hickman" <kipp(a)warp.mcom.com> > > If this hadn't been made clear already, then hopefully this will: > > Our intention is to support any development effort attempting > to implement an SSL conformant implementation. We will work with > you to repair the spec as needed to eliminate any errors or > ommisions, and help you test your implementation to ensure that > it interoperates with ours. > > It's clear to me. "We're going to use some security, as long as it's > called SSL and our authorship is on the document." No, he didn't say that -- you're jumping to conclusions based on a statement he's making on a separate topic. We're going to support security mechanisms as they are required and accepted by the market -- functionality, protocols, formats, etc. -- whether or not they are called SSL and whether or not our authorship is on the document. Marc -- Marc Andreessen Netscape Communications Corp. Mountain View, CA marca(a)mcom.com

1 0

THREAD X: subject y
by ddt＠lsd.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "And Now, For Something Completely Different" I wish all subject fields in msg headers had two parts: 1. the THREAD begin referred to. 2. the SUBJECT of that particular msg. That way, I might be able to follow some of these discussions better. Sure, I can hear you saying it right now: "Jeeze, Dave, dontchaknow MIME can do that?" Sure, but we all know that's beside the Real Issue. We on this list once, looong ago, experimented with META: prefixes to do this, but no one here (or anywhere, to be fair) seems disciplined enough to stick to this. I don't have any proposal anymore. I gave up on trying to fix the world a long time ago. I just struggle along with everyone else and occasionally whine a bit to my Congressperson. No that's a lie: I'm MAD as hell and I'm not gonna take it anymore! Yeah! That's it! dave _________________________________________________________________________ "You can put your shoes in the oven, but that don't make 'em biscuits." -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLu04r6HBOF9KrwDlAQEZ/wP/WSrC5jbPDgfwAEjrMwqY2EB6aIJ9E15+ mx2M1nH+UHFlHkes+MuYzmOeDtxQYeYq6dz/mnSycP/gpUdCZI/WibteShQNdzL3 jccSed/5T7CL0aX+1qThajoB/BRB0cBU+L6kaWdZJyCV0I88xw2OdYG9Gkhsp0sp 1NGLfYAaQOI= =b53r -----END PGP SIGNATURE-----

1 0