- cypherpunks-legacy - lists.cpunks.org

Attn: BlackNet.
by an49149＠anon.penet.fi 17 Dec '03

17 Dec '03

-----BEGIN PGP MESSAGE----- Version: 2.2 hIwCHO5QWqKhlGkBBACXLS6twtV8fsrSfa4HTrWwMCFAdhMzBR81G93ZbwG3yFV6 93WkQJMitzpT9fOxEZV8bHl3VvHAqvIv0MvQJIs+pbo2I0GskXeHWJLYOf1ritMM 8Wc6/U8FA8oe9O7RfN9fyRdipRtpAcWBsXTr2aA/lxWRThAS8dpqcfv5JN7t66YA AALtRPjG7ID8ZdrBVt8uDMUlNkEpaHyCIFG0ptdf2Q3wFOKVCrEKBDkPDW1GSYQl dAWyjCls/354X1RsP4Y+szG3B2PkT0QptXLIVBTS8SG6sn31PMNYBDyGWQvlI/mK 6VBX6/gioiDFCNGD0J/8Ig2Sbv60XxQ00DmxnNc+4uvYj7QGFBRxCYI2cX3xr9XL WxR1UvfBszM91xLNcpBE7n9onfJrmf6rsGkGlzD2gFIJDorsnY9hk6cEmj8831M0 jRUneOhMQH7Z19LGxfmv9E7Lg+pyGVJ2XWlSJVJhAwEjFuLpGM6p5vpLLEEULdsS k45wqpnIUoBEMFoTb4IyMt/Om/ZrnxH+I6zruMURCBqUTNyA32l56PRHXoHdu+0s k/4BY3y1obQMNy9PWEj5G3pSXcMeXlU3ZC4RhBApPU/VPAxMsQ5kxIspHmrLSihl EwIHoKbFCax7Maxa2LGSVkXawdS4Y68LXb8zpWM0XEoc4YzQUDo4TGVqVpexAVVQ TUklzPDjKxRyLvB8fVG+2ewTeorLG3tTlnzjcyvPtcx7/iPtggQ0uJMS5XLlOoM2 vzryYVf/D+davG0zmZI8ldlimFcpNGxKPZvWLGG0UQhDtNn27OBNfwfC4kaLwSIl 7PTDYzicDTrvtqLy/YlkJLsG/lAstrfAQ3znzc+bVHwoniZBUs3wAzbpuq2iuXyi qvcNAC7q7AqGWrU/M/XUrCr6UulxpNWFM8ta98AtoCwHQ3LtvyqPpoZJJ9syLDhq aWr2kbYM9AVZ01RdBDMuZ6Ly19rXcl8+OmXMUoEc9yYSyxBHtLS3+JkLIAwkU9lo ktdmj3QQvhaAgUBjzkad+uirk5I+x99Q+3xoG9izFfb8r6mglVgA4hOgt25bnSDb JarYlqYK0qTutg8NV+dwU4q98vdPHmlLs4EW+1zbaD6RZrXJKrODcpN1MzhbSrN0 lMxTho7XjOUHykvoab/JxSykogwZWcDWGER+/5Xo1tA= =FMfy -----END PGP MESSAGE----- ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

The Republic of Desire (anonymous organ
by kone＠courier1.sha.cornell.edu 17 Dec '03

17 Dec '03

< A < / \ < B - C < / \ < D G < / \ / \ < E - F H - I < Another problem in this set up is: What if "B" is caught and put in jail/killed? How are "D" and company (including "J, K, L" and on) going to stay in touch? Some one posted that useing a "I am caught" key might help cover the trail. I think it would cut down on the uptree pateren but might not pass on info downtree. Would a side to side contact help? A / \ B - C / \ D G / \ / \ E - F - H - I How would one keep the cross over safe? An "in case of loss of contact, use PGP Key xxx?" Ideas? Will

1 0

HELP: EFF BBS Project needs your support!
by Stanton McCandlish 17 Dec '03

17 Dec '03

Please pardon the wide cross-posting (some of which are actually mailing lists), but all of these newsgroups involve issues with which EFF deals, and we hope the readers of these groups will support EFF's BBS project. EFF needs to set up a bulletin board system, to be called "Outpost - EFF Online", to help spread the word to people in the BBS community, most of whom do not have access to the resources of the net, on: cryptography privacy activism civil liberities online networking national information infrastructure open platform principles censorship laws that affect computer users ITAR restrictions telco/cable mergers internet access many-to-many communication virtual communities cyberspace digital telephony bbs seizures online resources and more... WHAT WE NEED: We need donations of funds and equipment. We already have BBS software (Digital Dynamics has donated their Synchronet BBS package), but still need a platform to run it on, including basic PC system, modems, tape backup, monitor, hard drive, etc. If you'd like to contribute to this project, please contact mech(a)eff.org (Stanton McCandlish, EFF Online Activist/SysOp, 202-347-5400 voice, 202-393-5509 fax, EFF - 1001 G St. NW, Ste. 950 E, Wash. DC 20001) All donations are tax deductable, and any donations of funds or hardware worth $40 or more will get the contributor a one-year membership in EFF. All contributors will be listed in a "thank you" note in an upcoming Effector Online (EFF's electronic newsletter), and permanently on the BBS itself. Great advertising! Thanks for reading, and thanks for your assistance!

1 0

Improved DH system.
by loki＠nately.UCSD.EDU 17 Dec '03

17 Dec '03

I have been told that there is a new improved version of DH key exchange, which is authenticated. Could someone give me the reference, and/or tell me what it is all about?........ Diffie?? I was not clear on what it is that I am working on. We are trying to build a cheep secure phone for the masses (read brainless). We are looking for black box brainless operation. I will provide more info about the project on request. ---------------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.3 key available by finger or server. "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Re: value of privacy?
by baumbach＠atmel.com 17 Dec '03

17 Dec '03

> example, it doesn't _hurt_ me to get targeted junk mail, but I find it > unsettling that direct marketers know enough about me to send the 'right' > mail. I see it this way; 'they' make decisions about me and initiate a > relationship with me without my knowledge or consent. The relationship is > artificial and uneven; 'they' know more about me than I know about 'them'. An idea that I have never used, but was suggested to me by my father, goes like this: RING RING me: Hello ??: Mr. Peter Baumbach, I am calling from ICK inc. to offer you .. me: Excuse me, but I am busy right now. Could you give me your name and home phone number, and I will call you back later? ??: Huh? I can't give you my home number, that's private. me: But you know my name and number. This hardly seems fair.

1 0

Re: ALERT: FBI's Wiretap Bill is Back!
by Brock N. Meeks 17 Dec '03

17 Dec '03

Geez, Stanton, if you're going to rip off my story, you might want to give me some credit... or isn't EFF's self-proclaimed "Online Activist and Sysop" into proper journalistic practices of attributing where he gets his information. Just to clear things up, Stanton's message is a poorly rewritten copy of an article I wrote for _Communications Daily_ that ran on Dec. 9. The comments by FBI agent Barry Smith and Ken Raymond were made to me during one-on-one interviews, not open press conferences. There's no way you could have these quotes or this information Stanton unless you first read my story. Next time try giving credit where it's due... Or steal your information from someone not on the Net. Brock Meeks Reporter Communications Daily

1 0

Re: Improved DH system.
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Unfortunately, you can't really do a brainless black box phone with security that's much better than Diffie-Hellman (The "send half the key at a time" variant is somewhat better, but still can be tampered with.) The problem is that to do better security, you need some way to authenticate the Diffie-Hellman exchange. One way is to have a display on the phone which shows the data received, and read it to the other person (which is secure, but not brainless). Another way is to use digital signatures such as RSA on the Diffie-Hellman key parts, which requires some mechanism for users to create keys and distribute them securely, also non-brainless. One way to do this would be to use a central key-distribution server, perhaps based on phone serial number or telephone number or whatever, but that requires a lot of complexity, extra phone calls, etc.; this compromises a certain amount of security, though if it's implemented well enough to be non-spoofable, the major risks are the insecurity that comes from registration and the ability of people who compromise the keyserver (i.e. the government or keyserver-operator) to send incorrect public keys to wiretap victims allowing man-in-the-middle attacks. Another way that's not quite brainless would be to have public keys generated in the phone for signatures, and allow users who want to to exchange keys; you could build some relative of an automatic web of trust if you put enough memory in the phones, but then you'd have to provide memory management etc. which is distinctly not in the brainless category. Bill

1 0

Re: Improved DH system.
by loki＠nately.UCSD.EDU 17 Dec '03

17 Dec '03

Well, you seem to have summerised our thoughts on the matter exactly. We are thinking about sticking a bunch of memory in the phone and keeping track of the last ,say 100, phones called and the public keys that they used. One could use the readback to certify the keys. Some sort of KCA could also be invoked. We are designing the system for easy upgrade and modification. Lance

1 0

USENET on a tape, and future privacy
by nate＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I was just thinking. My roommate mentioned that he saw an ad for a service available in europe. They send you an 8mm tape evey week that has all the USENET traffic on it. I was thinking that a large corporation thinking of hiring me (or you, you just never know!) could pay some service to scrounge up all the USENET posting you have made for the last, say, 10 years, and run them through a filter to get a feel for the nature of the posts (assuming you were too prolific to have the job-hunters read _al_ of your posts). This really scared me, so I think I will start making more frequent use of the remailers in the future. Just my $0.02 (revalued to $15.00 with recent inflation) - -nate - -- +-----------------------------------------------------------------------+ | Nate Sammons nate(a)VIS.ColoState.Edu (303) 491-1578 | | Colorado State University -- Computer Visualization Laboratory | +-----------------------------------------------------------------------+

1 0

One Time Pads $5000|Cheap
by Harry Shapiro 17 Dec '03

17 Dec '03

The cost of write once CD-ROM drives (CD-R) drives is really going down in price. You should be able to get a complete set-up for less than $5000. I would think you could use the CD-R drive to create a bunch of one time pads. Any thought? /HAWK -- Harry S. Hawk habs(a)extropy.org Electronic Communications Officer, Extropy Institute Inc. The Extropians Mailing List, Since 1991 EXTROPY -- A measure of intelligence, information, energy, vitality, experience, diversity, opportunity, and growth. EXTROPIANISM -- The philosophy that seeks to increase extropy.

1 0