- cypherpunks-legacy - lists.cpunks.org

Re: PC-Expo
by rarachel＠prism.poly.edu 17 Dec '03

17 Dec '03

This is my reply to Perry about the PCExpo Cypherpunks attack. I'd originalkly meant this as a private message, but there's enough good info/requests that I'd like >ALL< of us to read it. I hope you won't mind Perry. For those of you just tuning in, this is an idea I've had: I want some cypher punks to join in together and simply hand out disks and flyers at PC Expo which contain crypto files and articles. This will be in NYC June 28-30. My gut reaction is to try and make it for the 1st day since that's when it's busiest, and perhaps we can catch some press-attention if possible. However, this will depend on who is free and when. We don't have to register for PCExpo nor go in. In fact, it would be a bad idea to hand out these disks on Javitz's property because we haven't rented a booth there (I'd rather we spend the money on duplicating disks.) If all of us chip in $20 worth of disks, it will make a very big difference. You can get disks very cheap from MEI microcenter at 800-634-3478 or whereever. Just make sure you get 3.5" 1.44M disks... If you can't attend because you're not in NYC or not available and are a good writer, PLEASE PLEASE PLEASE write some anti-clipper anti-digital telephony articles. We need this because I don't want a copyright infringement on our hands (ie: information liberation front and newspaper articles.) As usual we can take quotes out of articles say "New York Times said Clipper is a brain dead idea" and such, but we need stuff that we can't be thrown in jail or sued for. We also need folks to contribute ideas/software to add to the disks and more importantly to review the disks... Re: Disks & $$$ Not really. Disks are pretty damn cheap these days. If you buy'em from MEI MicroCenter you can get 3.5"HD's for $0.41 cents a piece, or cheaper if you get'em in over 300. 10 disks=$4. IF every PC-Expo-punk chips in 20 disks, we should have plenty to make a neat dent in the Clipper-ignorant-crowd. The software: PGP, SecureDevice/Drive, a file viewer (sor of like list) which I've written that does some minimal mouse support, a menu system I guess, and lots of articles. I'd need someone to look at articles and kill off the ones that may cause copyright problems for this disk. I'm not putting my name on the disks, but if someone were to sniff hard, they'd catch my smell, so that's one thing I want to avoid. Basically, if you have any articles, or better yet if you'd be able to write some or get other c'punks to write some which we can distribute, it would be very cool. If you can attend PC Expo, please send email to rarachel(a)photon.poly.edu for faster processing. Oh, one more thing: I'll be making the disk duplications myself. This is so that our "spook" friends don't install viruses in our software. There is of course the question of trusting me, but I know I trust myself. :-) Perhaps the simplest thing is to include a virus scanner on the disk. Whatever... We also need someone to mass produce labels for the diskettes with a logo. NO CYPHERPUNK CRIMINAL LOGO! It's a cool logo, I have the T-shirt, but PCExpo attending yuppies will fear us more than the spooks if they see "Criminal" on the disk. I suggest "Free Security Articles And Software Demo" as the title of the disk. MAke it look like some corporation is giving out freebies. Oh,I really hate this one, but we should all be dressed professionally (ie: suits, ties, yuck!) This would hurt our credibility if we didn't.... Anyhow, nothing is organized yet, except that a few volunteers have signed up. So please, if you can contribute anything join in. After this is over, we'll have a cypherpunk diskette whch other cpunks in other citities can use to mail to the media, give out to other expos, etc.

2 1

Re: Constitution and Contract [Was: CIA & FBI]
by Black Unicorn 17 Dec '03

17 Dec '03

I've often felt that the solution to this problem is that citizenship should not be given by birth. Everyone, whether born in the US or abroad, should have to go through roughly the present process to be granted citizenship. I'm explicitly including required study of US history and taking an oath to support the Constitution. ++PLS <- So what protections does a minor have before he or she passes the "test"? Will a passport be issued to a non-citizen?

3 4

So, what are we going to do?
by PMARKS＠VAX1.UMKC.EDU 17 Dec '03

17 Dec '03

Very interesting threads going along in here. I'm a fairly new reader to the list. In fact, until I started reading WiReD, Cud, EFF, and this list, I didn't even know that I had to worry about privacy in cyberspace. RE: the folowing *************************************************************************** This is largely, however, off the topic. What is important, and a point on which I think we agree, is that the regulation of strong crypto, or in your definition, the interference in the marketplace, is unacceptable, unneeded and nothing more than a calculated attempt to maintain the status quo of usurpation of individual rights in favor of federal power and influence. Even the national security externality falls when one considers the uselessness of export regulation in the age of digital communication. *************************************************************************** It may be too late for the federal gov't to regulate cryptography. The genie is already out of the bottle. They might legislate it, even criminalize it, but private non-clipper crypto is here. I believe it is here to stay. At least, I'm not giving up _MY_ copy of PGP. As long as I've got a copy, my friends can get copies. Their friends can get copies from them. Just _HOW_ heavy-handed does the Justice Dept. plan to get? Will they come in at midnight, knocking down doors, shouting "we have a search warrant to locate illegal cryptography in your possession!" and run off with my equipment? _That_ could be quite embarrassing for crypto users like me, who are _not_ pornographers, drug dealers, or terrorrists to show up in court. What is the prosecuter going to tell the judge? "So far, we've decyphered his secret bar-b-que sauce recipie and his grandmothers instructions for making chocolate-chip cookies, but we expect to have the plaintext of his letter to his sister anytime now." What could I possibly tell the judge? "I just felt that my own data files were my own, and nobody else's, business. I just thought I was entitled to a little privacy." How would that read in the press? Could the government really afford to look that stupid? (Unless, of course, they really _are_.)

5 5

Dominating public debate (Was: Cypherpunks as lobbying/propaga
by Robert Michael Hoff 17 Dec '03

17 Dec '03

While I agree that the cypherpunk list is too fragmented and informal to pass off as a coherent lobbying group, there remains a very deep need to get information out to the "general public" (read as, "people who might have heard about something the NSA is doing, but don't quite remember what....") Lets face it. For all the successful lobbying EFF and CSPR and individuals have done, upwards of 75% of the population won't recognize the word Clipper. This needs to change, since the NSA depends on the masses to be uninformed for Clipper to become reality. Press kits and making the cypherpunk label known are steps in the right direction, but we need to go more directly to the people. And sadly, probably the most successful way to stimulate debate and educate in the United States is best demonstrated by... "Harry and Louise" You know, that annoying commercial the insurance industry ran? That Bill was concerned enough about to parody? It's time the Clipper debate got one too. Mind you, we'd keep ours factual and non-sensational, but interesting enough to catch the eye of Joe and Mary Blow at the dinner table. An interesting concept: it would be (to my knowledge) the first time a grass roots campaign went prime-time. Problem is, getting airtime over the hours our target audience is likely to be watching isn't cheap. But hey, the software industry hates this as much as cypherpunks do. Pass the hat. And for that matter, if you think you're concerned enough to read this list, chip in $20 bucks to the currently non-existant (EFF? CSPR? Cypherpunk Nonproft Foundation for Truth?) Fund for Commercials. You want to get attention? THAT'S the way you do it in the US. It's unfortunate, but if you want to stop Big Brother, you're going to have to play with the big boys by their rules: who dominates public debate wins, not who's right. And the anti-Clipper movement needs to quit the discussion-group mode and move into action. Very, very soon. Comments encouraged. Robert Hoff. -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi1cCbwAAAEEAM3mH6Wm+DjLAZHHaKAPEE6BpQpE6cCsI46HJzEekyQca18Z nnNJpVbFfs21P+nkzT02ZQ7HJ5lnQz8TGWN0LSJ8f45DSR5VElTO3MkOCrYSoZ3c WO3IxW4oxm4fWx+3ipN+KKrB/0oooT7n4u0LV0aaImIn2Uzm7I8jOOi7F8jFAAUR tCpSb2JlcnQgTS4gSG9mZiA8cmhvZmZAYmx1ZS53ZWVnLnVpb3dhLmVkdT4= =JUO8 -----END PGP PUBLIC KEY BLOCK-----

4 3

Re: PC-Expo (fwd)
by lassie!jim%lassie＠netcom.com 17 Dec '03

17 Dec '03

FORWARDED MAIL ------- From: netcomsv.netcom.com!phantom.com!bruce (Bruce Fancher) Date: 01 May 94 Originally To: prism.poly.edu!rarachel (Arsen Ray Arachelian) passes. I think handing out floppy disks is NOT a very cost efficient scheme. It makes more sense to spend the money on xeroxing flyers explaining to people what encryption is, why it's important and how they can get the tools for themselves. Very people are going to load up a program from a disk that some stranger gave them. You'll also likely get thrown out of Javitts. I think that uploading to a local BBS is a bueno idea. I downloaded all PGP and shell programs from Internet and then uploaded them to a local BBS. I then put a classified add in the local Mensa paper (monthly) and gave phone number, description and asked that if anyone downloaded the files to upload a copy to their favorite BBS. In Haydukes book "Get Even" they called this the multiplier effect. Although the add costs me nothing and they circulation is only around 900 or so issues there is a good chance the software will travel to another 25 or so boards. I am also condidering taking out an add in the Arizona Republic (circulation aloat) and offering PGP !!!!FREE!!!! to anyone that calls my friends BBS. That should make him happy and should also spread the program to thousands of non Internet users. The cost to me is about $25 but the satisfaction is imense. Hayduke is right about the multiplier effect, just like I said about faxes earlier. If all members of this group fax to their non-long-distance government representatives then we can get the word out effectivly stronger than any other group. The ol' multiplier effect on the good ol' cypherpunks group. several hundred times 6 is 1200 messages from one letter. I think this is good. -- * Spelling errors are intentional and international * Jim Nalbandian lassie!jim%lassie(a)netcom.com Tempe, Arizona, USA N7SZS(a)K7BUC.AZ.US.NA No free man shall ever be de-barred the use of arms. The strongest reason for the people to retain there right to keep and bear arms is as a last resort to protect themselves against tyranny in government. <-------- Thomas Jefferson --

1 0

Re: Random #'s via serial port dongle?
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>From: smb(a)research.att.com >To: hughes(a)ah.com (Eric Hughes) > >This has probably been discussed before, but has anyone built a little > >device that amplifies the white noise from a transistor junction, and > >converts it into serial data? > As Tim mentions, lots of people have talked about doing this, but few > actually have. Nevertheless, the device is still needed and no one > has done it. > I estimate you could sell 500 at $50 each within four months if there > were PGP support for it. And I'll give you advertising space on the > archive site. > Real random numbers should be a standard part of every computer. >Absolutely. Given a choice between a hardware encryptor -- even a >public key hardware encryptor -- and a true random number generator, >I'd unhesitatingly choose the latter. Having seen random noise sources in real digital crypto use I would give a couple of hints. A noise source is used to generate noise at a deterministic rate, either a rate at which it is consumed or the rate at which it is stored (in the case of one time pad generation). This implies two characteristics 1) that frequency distribution of noise is suitable for that rate, and 2) That the noise source is sampled or gated. The very act of converting noise to digital date is fraught with pitfalls. The noise source needs to be extremely well isolated from the rest of a system, to prevent unwanted coupling between digital transitions and the noise source (it just about always implies amplification for thresold sampling). Otherwise your noise source is not as random as could be hoped. It should also be suggested that a random noise source be tested (statistically) periodically, and should not present a single point failure that can endanger the security of communications (redundancy). All noise sources should be isolated from each other as well as from the system in which they are utilized. Intel got a COMSEC noise source module certified in the mid 80s, it would not be available to us nor be affordable. Previously the smallest available encapsulated module was the size of a Zippo lighter. I believe HP used to sell zener noise diodes, although you can reverse bias an EB junction on a transistor. Any and all parts should be screened for noise spectrum, especially disturbing would be any spectrum holes. You would be able to extrapolate a bell curve distribution, with your sampling rate(s) falling well toward the middle. Were you to use a noise source toward the outsides of the curve it would behoove you to consume more noise data over a longer period of time. NSA used to have an unclassified document on criteria for random noise sources, which got deleted in the early Reagan presidency when the U.S. started losing Perestroka. Note that as seen from CCEP chip specs and the clipper chip spec, block ciphers can be used with special data sets (including the seed) to generate a "random" initial vector (IV). The clipper chip spec shows a maximum of 650 clocks to generate and IV, including LEAF generation, while the clipper chip takes 64 clocks to execute 32 rounds of Skipjack. The LEAF should account 2 rounds (128 clocks). One could guess that statistical testing determines how many skipjack iterations to generate the IV in view of the maximum of 650 clocks. It is even possible that failing statistical tests causes a master alarm condition. Further speculation is entertaining. Were you to use noise sources for one time pads you have the problem of secure distribution.

1 0

05/03/94 Digital Telephony / Clipper House hearings
by steven cherry 17 Dec '03

17 Dec '03

Voters Telecomm Watch (VTW) Legislative Action Alert vtw-list-request(a)panix.com 5/3/94 House Clipper/Digital Telephony hearings being held HERE'S WHERE TO CALL TO VOICE YOUR OPINION ---------------------------------------------------------------------------- ============================================================================ On May 3rd there will be hearings on Digital Telephony. This is the bill proposed by the FBI which would mandate wiretapping equipment be built into all communications devices. The FBI has done little to assure the public that the scheme will not be: -prone to abuse because of a lack of safeguards, and -secure from malicious eavesdroppers And yet, without this proof, they are asking us to allow them to pass a law which would mandate building these wiretaps into every piece of communication equipment. Our privacy is too precious to be entrusted to bureaucrats who don't feel the need to answer to us. The House Science, Space, and Technology subcommittee on Technology, Environment, and Aviation will hold a hearing to address both the Clipper and Digital Telephony issues. If you see your representative below in the list, call them and tell them you oppose the Clipper chip and Digital Telephony as being a danger to your privacy. If you don't know who your representative is, or if you don't see them on the list, call in your comments to the House subcommittee at: (202) 225-8115 (voice) (202) 225-7815 (fax) [If you live in any of the states below, please try to call your Representative. Otherwise, the number above will be fine.] House Science, Space, & Technology subcommittee on Technology, Environment, and Aviation (Rep. Tim Valentine, Chairman) Dist ST Name, Address, and Party Phone Fax ==== == ======================== ============== ============== 2 NC Valentine, Tim (D) 1-202-225-4531 1-202-225-1539 2229 RHOB 4 KS Glickman, Daniel (D) 1-202-225-6216 na 2371 RHOB 12 TX Geren, Peter (D) 1-202-225-5071 1-202-225-2786 1730 LHOB 3 IN Roemer, Timothy (D) 1-202-225-3915 1-202-225-6798 415 Cannon 2 NH Swett, Richard N. (D) 1-202-225-5206 na 230 Cannon 8 NJ Klein, Herbert C. (D) 1-202-225-5751 na 1728 LHOB 15 PA McHale, Paul (D) 1-202-225-6411 1-202-225-5320 511 Cannon 36 CA Harman, Jane (D) 1-202-225-8220 na 325 Cannon 10 GA Johnson, Don (D) 1-202-225-4101 1-202-226-1466 226 Cannon 1 AZ Coppersmith, Sam* (D) 1-202-225-2635 1-202-225-2607 1607 LHOB 14 CA Eshoo, Anna G. (D) 1-202-225-8104 na 1505 LHOB 4 WA Inslee, Jay (D) 1-202-225-5816 1-202-226-1137 1431 LHOB 30 TX Johnson, Eddie Bernice (D) 1-202-225-8885 na 1721 LHOB 2 MN Minge, David (D) 1-202-225-2331 na 1508 LHOB 9 GA Deal, Nathan (D) 1-202-225-5211 1-202-225-8272 1406 LHOB 30 CA Becerra, Xavier (D) 1-202-225-6235 1-202-225-2202 1710 LHOB 9 NJ Torricelli, Robert (D) 1-202-224-5061 1-202-225-0843 2159 RHOB 15 FL Bacchus, James (D) 1-202-225-3671 1-202-225-9039 432 Cannon 5 MI Barcia, James A. (D) 1-202-225-8171 1-202-225-2168 1717 LHOB 40 CA Lewis, Jerry (R) 1-202-225-5861 1-202-225-6498 2312 RHOB 8 MD Morella, Constance (R) 1-202-225-5341 1-202-225-1389 223 Cannon 43 CA Calvert, Ken (R) 1-202-225-1986 na 1523 LHOB 7 MI Smith, Nick (R) 1-202-225-6276 na 1708 LHOB 6 MN Grams, Rod (R) 1-202-225-2271 1-202-225-9802 1713 LHOB 4 GA Linder, John (R) 1-202-225-4272 na 1605 LHOB 3 MA Blute, Peter I. (R) 1-202-225-6101 1-202-225-2217 1029 LHOB 6 MD Bartlett, Roscoe G. (R) 1-202-225-2721 na 312 Cannon 45 CA Rohrabacher, Dana (R) 1-202-225-2415 1-202-225-7067 1027 LHOB 12 NJ Zimmer, Richard A. (R) 1-202-225-5801 1-202-225-9181 228 Cannon 10 OH Hoke, Martin R. (R) 1-202-225-5871 1-202-226-0994 212 Cannon 39 CA Royce, Ed (R) 1-202-225-4111 na 1404 LHOB Faxes and phone calls tend to be brief chances at communication. Here is a sample, concise one that may give you ideas for your own. SAMPLE LETTER OR PHONE CALL The Honorable Representative ____________ I understand you will be attending the hearings on the Clipper chip and the FBI's Digital Telephony bill. I wanted to express my concern about the use of the Clipper chip in personal communications. The Clipper chip would mandate a privacy standard that is prone to significant abuse. Unlike most recent work in cryptography, the academic work surrounding the chip has been kept from the public, developed in secret. Decent cryptography exists today to protect my communications. The Clipper chip threatens my ability to use that technology. The Digital Telephony bill would mandate wiretaps be built into almost all communications equipment. Furthermore, it would arrange for "call setup" information (about who I call, and for how long) to be sent to the FBI over their networks. The potential for abuse of such a tool is great, while the ability to have it abused is even greater. Please oppose the Digital Telephony bill, as it does little to protect citizens from abuse of this technology once in the hands of computer intruders and corrupt law enforcement officials. Please oppose the Clipper chip and the Digital Telephony bill, Sincerely, __________________ ============================================================================ For more information about the VTW (Voters Telecomm Watch), write to vtw(a)panix.com. We are in no way affiliated with Panix Public Access.

1 0

Blum-Blum-Shub source?
by Urban Nilsson 17 Dec '03

17 Dec '03

Timothy C. May says: > I don't think generating random numbers is all that much of a > priority. The Blum-Blum-Shub C code is available, and I defy anyone to > break _that_ PRNG! Where is this code available? Pointers anyone? Urban Nilsson | Use 'finger' for PGP2.3a public key. d7urban(a)dtek.chalmers.se |------------------------------------- Chalmers University of Technology |A person is just as big as the things Gothenburg, Sweden |that makes him angry.

2 1

Re: CIA & FBI, a marriage made in ___?
by Blanc Weber 17 Dec '03

17 Dec '03

From: Black Unicorn " What is important, and a point on which I think we agree, is that the regulation of strong crypto, or in your definition, the interference in the marketplace, is unacceptable, unneeded and nothing more than a calculated attempt to maintain the status quo of usurpation of individual rights in favor of federal power and influence. Even the national security externality falls when one considers the uselessness of export regulation in the age of digital communication." ..................................................... Okay, last word from me on any of this, and only because it relates to the above; the quote below is from a newsletter I just recently received (Imprimis, from Hillsdale College, by Richard Duesenberg of the Monsanto Company): "While there are indications that the [Supreme] Court might be resuming some sensitivity to property (e.g., under the takings clause) the deference it gives to legislative action is still near-absolute. If a law or regulation simply stresses "urgent need" or "the public interest", the Court is sure to let it stand. The judicial review process is so biased that only the most absurd edicts are found unconstitutional. Legal scholar Bernard Siegan has noted that this bias has led to the impeding of the democratic process. If the Court refuses to review the legitimacy of economic regulation, then the government is essentially free to dominate the entire American business community and, indeed, the life of every American citizen. . . . . Even more alarming is the loss of freedom that has accompanied growing involvement in our affairs. But freedom is valueless to the government planner. He requires coercive force in order to have his way, and he regards centralized planning as far superior to the untidy, unpredictable actions and decisions of free men and women." Blanc

1 0

Re: Lobbying/Politics/etc.
by lefty＠apple.com 17 Dec '03

17 Dec '03

Jim Sewell writes: > > The term Cypherpunks is amorphous, thus subject to use and abuse > by the masses. When people like Jeff Davis and Phill Zimmermann > say "The cypherpunks are generally opposed to Clipper" it makes us > an "organization" which, like it or not, does have representatives > and agendas. No, it makes Messrs. Davis and Zimmerman guilty of overstepping their bounds by acting as though they speak on behalf of the amorphous group which makes up this mailing list. My saying that midget Lithuanian plumbers are generally opposed to the free sale of chocalate cherry cordials doesn't make it so. Mr. Zimmerman doesn't represent _me_. I question whether Mr. Davis represents even _himself_. If you want to play lobbyist, go ahead. Leave me out of it. -- Lefty (lefty(a)apple.com) C:.M:.C:., D:.O:.D:.

8 9