- cypherpunks-legacy - lists.cpunks.org

Remailer reply addresses
by Hal 17 Dec '03

17 Dec '03

Graham's suggestion about automatic remailer reply chains reminded me of a simpler system which I would like to see. Suppose one site, somewhere, would create new mail addresses upon request, and map them to encrypted remailer chain blocks. (These are nested remailer requests, where the outer layer is encrypted for the first remailer and tells it where to send the message, the next layer is encrypted for the 2nd remailer and tells it where to send, and so on. No remailer sees anything more than where it is sending the message and where it received it from.) A new account is created which maps, say, to a file which has one of these "anonymous return addresses" in it. Any mail incoming for that address simply gets sent to the remailer in the file, with the ARA stuck in front of it. This is not complicated software. I wrote a Bourne/Korn shell script which does the whole thing in a dozen lines. What is needed is a sendmail hack to allow mail to addresses in a specified form (say anxxxxx) to be piped to this script. I don't have a machine where I can do this. If such a site were running, then I could create an ARA block and send it to that site (via a remailer, of course). The site would make me a new address and return it via the ARA. That new address would be my pseudonym. Now, when I want to send something pseudonymously, I just stick a "Reply-To" into the outgoing headers of the message as it leaves the last remailer. The remailer-chain-creation script can easily be modified to do this. The Reply-To points at the address I got back from the pseudonym server site. With this software I could do something which cannot be done today. I could send mail to which someone could hit "r" to reply, and receive that reply, without any one person knowing my pseudonym. This is not that much to ask for! I'd say it is the bare minimum for the use of pseudonyms on the net, yet we don't have it, after all this time. And look how close we are to being able to do it. With this basic system in place, some of Graham's ideas about time-limited or use-limited pseudonyms could be applied as well. Other extensions people have suggested would have the pseudonym server hold messages in inboxes until people trigger a dump to a freshly created anonymous address. A lot of things are possible. But we should walk before we run. Right now I don't feel that we are even crawling yet. Hal

2 1

USWA
by Adam Lake 17 Dec '03

17 Dec '03

I have a thought....... Did anyone ever think of involving the USWA (no, not the United States Wrestling Association) United We Stand America in the Clipper fight? Sounds to me like this would be a mass appeal if it appeared in their newsletter. For anyone who doesn't know, this is Perot's egg hatched a few years ago. I would hope somebody on the list has a contact/is a member. Despite his weak performance in which he was GORED on CNN, I would think he would be a definite ally. adam lake(a)uenics.evansville.edu ----------------------------------------------------------------------------

2 1

Tech: Encryption and Satellites (re: GI)
by Harry Shapiro Hawk 17 Dec '03

17 Dec '03

We need to learn more about these technology and if any are based on Clipper: As reported in the April 11th issue of Electronic Media: The satellite pirates are finally getting the message... owners of satellite dishes and unauthorized decoding technology are converting to authorized equipment in droves... Key pay cable providers are now going though the second stage of moving from General Instrument's Video Cipher II (VC II) encryption system to its more secure VideoCipher Renewable Security (VCRS) system. Adopting VCRS are HBO, Cinemax, Showtime, TMC, Viewer's choice, REquest TV, Playboy channel, Spice, and Netlink. Netline offers three superstations. "There have been 30,000 to 40,000 conversion customers a month for the past for months." Meanwhile, with the digital era in mind, Primestar Partners is preparing to move its DBS (direct broadcast satellite) from Scientific-Atlanta's analog B-Mac encryption to General Instrument's DigiCipher digital compression technology, which also provides teh most recent security meansures. Primstar expects to start phasing in DigiCipher in January. "We have the ability to make changes to the security as we move forward." The French pay TV service Canal Plus International is developing its own digital system in association with broadcasters in Germany and spain. Hughes' (hi Eric), DIRECTV plans to launch next year with News Datacom Conditional Acesss and Authorization Control system... A spokesperson for New Datacom said the basis for the technology is an algorithm with an efficient proof-of-identity scheme. .... have products for both analog and digital encryption. Harry Shapiro Hawk Manager of Computer Services Warwick Baker & Fiore habs(a)uucp.warwick.com

2 1

Re: fake pgp messages
by cort 17 Dec '03

17 Dec '03

> > in the process of doing stuff to fight traffic analysis, i need to generate > > a bunch of fake pgp messages. it is possible to asciiarmor random > > bits, but this is pretty easy to spot. does anyone know a good > > way to generate a large amount of bogus pgp messages? > > What better way than to generate real pgp messages that encrypt noise files? > Just generate pseudorandom binary data of pseudorandom length (biased > toward the length of real messages), and encrypt with pgp, using the > public key of some person's key from a public server, selected at > random. If you want to be able to spend less cpu time, you could hack a > copy of pgp to simulate doing this, of course, using the symmetric key > cipher (idea) in a stream cipher mode. > Better "noise" might be _real_ words, paragraphs, etc. It occurred to me once that some of the remailer operators could bounce the cypherpunks mailing list around through their remailers to get more traffic/noise. Cort.

1 0

Code review is requested.
by kafka＠desert.hacktic.nl 17 Dec '03

17 Dec '03

In article <199404110553.AA00997@xtropia>, you write the following: AN> Cypherpunks review code! AN> AN> I have written a hack to allow pgp's random.h and random.c to be used AN> with a hardware random number generator. I have mailed this to a AN> number of U.S. cypherpunks with the request that the hack be AN> distributed widely in the U.S. test --- "In a Time/CNN poll of 1,000 Americans conducted last week by Yankelovich Partners, two-thirds said it was more important to protect the privacy of phone calls than to preserve the ability of police to conduct wiretaps. When informed about the Clipper Chip, 80% said they opposed it." - Philip Elmer-Dewitt, "Who Should Keep the Keys", TIME, Mar. 4 1994 == To get PGP, FTP /pub/unix/security/crypt/pgp23A.zip from ftp.funet.fi ==

1 0

NBC's Kaul
by Jeff Davis 17 Dec '03

17 Dec '03

Well, NBC's Alan Kaul and I had a discussion a few moments ago. Apparantly a helicopter crashed and this is old news. He has been instructed by NBC superiors to move on. The downplaying by the NSA was key. It wasn't another "Pentagon Papers" leak. He's got my unlisted number and asked if he could call from time to time to use me as an informed source, and asked to be kept on my mailing list. I guess I'll scrounge up that abitrary finger data from the AmEmbMoscow.gov deal and send that to him as an item of interest. Perhaps a CIA hand was logged on when that stuff popped up on the screen... This is not a topic for discussion. I know some of you have grown to care about me, and some rip me routinely. I am responsible and accountable for my own actions. "Those who risk nothing, are nothing, do nothing, and become nothing." By the time you rebut, that finger information will be gone. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

1 0

Re: Soldier of Fortune
by Duncan Frissell 17 Dec '03

17 Dec '03

M > M >This seems counterproductive. PGP should not be portrayed as a tool M >for those that most Americans consider antisocial. M > M >M Carling M > A quote from pgpdoc1.doc: "If privacy is outlawed, only outlaws will have privacy. Intelligence agencies have access to good cryptographic technology. So do the big arms and drug traffickers. So do defense contractors, oil companies, and other corporate giants. But ordinary people and grassroots political organizations mostly have not had access to affordable "military grade" public-key cryptographic technology. Until now." Now Phil wrote PGP in part so that "grassroots" political organizations could have strong crypto. SOF is a "grassroots political organization." It happens that some people don't like SOF. It happens that some other people think that the organizations that Phil was thinking of when he wrote PGP are unamerican communist front organizations who should be on the Attorney General's List (if we still had an Attorney General's List)(if we still had an Attorney General). Tastes differ. The point of cypherpunks is that everyone (even FBI agents) should have strong crypto if they want it. I know that Phil feels a personal sense of embarrassment at being adopted by all sorts of nut groups (including ourselves) and he has pleaded for stories of "worthy PGP use." Standards of worthiness will vary. DCF Who, as it happens, *is* a member of an organization on the Attorney General's list. --- WinQwk 2.0b#1165

2 1

cypherpunks and politics (Re: USWA)
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

At 2:21 AM 04/14/94 -0500, Adam Lake wrote: >Did anyone ever think of involving the USWA (no, not the United States >Wrestling Association) United We Stand America in the Clipper fight? >Sounds to me like this would be a mass appeal if it appeared in their >newsletter. This is something I have been meaning to write to the list for several weeks, and this post is the perfect lead in. When I joined this list, I saw thought it was going to be much different. I had assumed 1) that people on this list would have much different politics and 2) that that wouldn't really matter, 'cause everyone here is concerned with one issue, which we could all agree on. 2) seems to have partially true, sometimes. Without expounding at lengths, my reaction was to unsubscribe on short order when I saw some of the first posts flying around. I didn't, because I try to keep an open mind and do change opinions sometimes. But not everyone who is a potential crypto supporter is gonna bother, and by tying (seemingly or not- impressions count here) the issue to a particular set of other beliefs, there is a huge chance that others are going to be alienated. I know *I* don't want to be associated with libertarianism or (even worse) Perot... The point is that even if you think anyone with a viewpoint opposing yours is automatically stupid and not worth your time (and I don't think that too many of you are that bad off ;), aren't they at least worth using to further something you believe strongly in? It might do well to be careful in alienating potential allys by flip political jokes and comments. -j

2 1

re:My public key
by SGT=DARREN=S.=HARLOW%ISB%MCTSSA＠nwsfallbrook3.nwac.sea06.navy.mil 17 Dec '03

17 Dec '03

Enclosed is my public key. I am new to the list and have a lot of catching up to do. Please excuse my ignorance. Sgt Darren Harlow - Computer Security MCTSSA, Camp Pendleton, USMC Internet: harlow%isb%mctssa(a)nwsfallbrook3.nwac.sea06.navy.mil Voice: Comm: (619) 725-2970 DSN (Autovon): 365-2970 Fax: Comm: (619) 725-9512 DSN (Autovon): 365-9512 "The views expressed are my own, and always will be..." -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi2pYOoAAAEEAJ0Fdc1HDwlww3Wz8JPeQDZT2Gk/q1gh0J+4njtUC66HXngN DNyxzoGnZVcA0bbkirsCdjvvZlsP84QVgxdijzgW4pNOJKowJgrQWFftGEqJKH5b I2NxJrk0kmKt/jli5kV/wDs9Rr4PxXQjGN4B+uJOCSlyWX+fnWNyHMOkIY2tAAUR tENEYXJyZW4gSGFybG93IDxoYXJsb3claXNiJW1jdHNzYUBud3NmYWxsYnJvb2sz Lm53YWMuc2VhMDYubmF2eS5taWw+ =v34V -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Soldier of Fortune
by m＠BlueRose.com 17 Dec '03

17 Dec '03

I happen to like SOF, and I don't think most Americans have a bad opinion of it (certainly some do, but that is true of any publication). But SOF's appeal is much broader than just "mercs and wannabees" [Sandy's words], and that "mercs and wannabees" is probably the subfocus of SOF that most Americans find the least tasteful of what SOF is about. Most Americans don't think highly of mercenaries. If anyone is going write something for SOF about PGP, I hope that the article focuses on anything but "mercs and wannabees". M Carling Begin forwarded message: Date: Thu, 14 Apr 1994 12:33:04 -0400 From: Duncan Frissell <frissell(a)panix.com> To: CYPHERPUNKS(a)toad.com Subject: Re: Soldier of Fortune Sender: owner-cypherpunks(a)toad.com Precedence: bulk M > M >This seems counterproductive. PGP should not be portrayed as a tool M >for those that most Americans consider antisocial. M > M >M Carling M > A quote from pgpdoc1.doc: "If privacy is outlawed, only outlaws will have privacy. Intelligence agencies have access to good cryptographic technology. So do the big arms and drug traffickers. So do defense contractors, oil companies, and other corporate giants. But ordinary people and grassroots political organizations mostly have not had access to affordable "military grade" public-key cryptographic technology. Until now." Now Phil wrote PGP in part so that "grassroots" political organizations could have strong crypto. SOF is a "grassroots political organization." It happens that some people don't like SOF. It happens that some other people think that the organizations that Phil was thinking of when he wrote PGP are unamerican communist front organizations who should be on the Attorney General's List (if we still had an Attorney General's List)(if we still had an Attorney General). Tastes differ. The point of cypherpunks is that everyone (even FBI agents) should have strong crypto if they want it. I know that Phil feels a personal sense of embarrassment at being adopted by all sorts of nut groups (including ourselves) and he has pleaded for stories of "worthy PGP use." Standards of worthiness will vary. DCF Who, as it happens, *is* a member of an organization on the Attorney General's list. --- WinQwk 2.0b#1165

2 1