- cypherpunks-legacy - lists.cpunks.org

Re: The thread that would not die. (Mandating signatures)
by owner-cypherpunks＠hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <9412021551.AA04657(a)snark.imsi.com>, Perry E. Metzger <perry(a)imsi.com> wrote: > >John Schofield says: >> It is silly to talk of someone "owning" the list. The list is a >> community. The only possible owners are the people in the community. If we >> all left, Eric would still have control over the list--but the list would be >> worthless. > >It is silly to talk of someone "owning" a restaurant. The restaurant >is a community. The only possible owners are the people in the >community. If the patrons all left, Chef Joey would still have control >over the restaurant -- but the restaurant would be worthless. You continue to confuse (deliberately?) a community with the place it meets. "List" is being used in two senses -- and you continue to interpret it only as the instance of majordomo on toad.com. That's a worthless interpretation as nobody disputes that Eric controls that agent. As far as I'm concerned, if a message has gone out to every address on the "cypherpunks" list, I don't give a shit whether or not it went through toad.com first: it went to cypherpunks. - -- Todd Masco | "Roam home to a dome, Where Georgian and Gothic once stood cactus(a)hks.net | Now chemical bonds alone guard our blond(e)s, cactus(a)bb.com | And even the plumbing looks good." - B Fuller -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBFAwUBLt9v/CoZzwIn1bdtAQFY6gGA0EVd9/2BIoe5ORzfPePZxxoA7WJs/jkm PEMkdRGJNpih+x6xLOnlv2+BoBTdEXgj =Qrv2 -----END PGP SIGNATURE----- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address belonging to the signature and forwarded.]

2 1

Re: Paper available on new cipher
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Hooray!!! Kudos to Matt for actually posting something outside of the tiresome "Eric Hughes is a lame-o" thread!!! (Which, by the way, I agree with Tim that it is a sign of health on the list. I would also like to say that I'm not going to post my opinion.) I intend to read and comment accordingly on the MacGuffin document. It's refreshing to see someone coding crypto. -- Brad <---- Begin Included Message ----> Bruce Schneier and I have been designing a block cipher, called "MacGuffin", based on a new variant of the standard Feistel (S-P) network structure. We are presenting a paper describing the cipher, entitled "The MacGuffin Block Cipher Algorithm", at the Leuven crypto algorithms workshop later this month. Here's the abstract: <stuff deleted> A forthcoming paper will discuss the characteristics GUFN structure in more detail. Comments and analysis greatly appreciated. -matt <---- End Included Message ----> >>>>>>>>>>>>>>>>INTERNETWORKING THE DESKTOP<<<<<<<<<<<<<<<<<< Brad Shantz bshantz(a)spry.com Senior Software Engineer Main #: (206)-447-0300 SPRY Inc. Direct #: (206)-442-8251 316 Occidental Ave FAX #: (206)-442-9008 2nd Floor Seattle, WA 98104 WWW URL: http://WWW.SPRY.COM ------------------------------------------------------------- >>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

1 0

Re: NNTP archives
by Todd Masco 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Michael Froomkin writes: > I would like to use it to read c'punks in netscape. what do I put in > the box which says NTTP news reader? just putting the machine name seems > to produce no result... Not knowing netscape, I couldn't tell you. The newsgroup name should probably be in there, tho: it's hks.lists.cypherpunks on nntp.hks.net. The URL might be something like "nntp://nntp.hks.net/hks/lists/cypherpunks" or "nntp://nntp.hks.net/hks.lists.cypherpunks", but I'm just guessing. - -- Todd Masco | "If we don't make utter fools of ourselves from time to time, cactus(a)hks.net | we grow smug - that is, we do not grow at all." - T. Peters Cactus' Homepage - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLysYkSoZzwIn1bdtAQGEXgF/QzfXQmikP3AGwXBjJaUPPXPDpmy8dlVM NDcjQbtG125EIoBXGLa9GR6dfrp4HhBy =fGHU -----END PGP SIGNATURE-----

2 1

First Virtual?
by Mark Terka 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > From: "Paul Dinnissen" <paul(a)digicash.com> > > > The more I deal with Digicash, the better First Virtual looks. My > > technical preference is for using Brands or Chaum cash; at present, > > though, there aren't any shipping Brands servers, and the Digicash > > folks don't seem to be able to get all their socks in one bag. > > We feel somewhat troubled by these comments. > > As well you should. > > The facts of the matter is that First Virtual currently provides a net > benefit by moving real value (e.g. dollars) around, and Digicash does > not. Until the Digicash system can move real value, there is no > reason to use it. Ok, where do we E-Mail First Virtual to get some info to begin trying the concept out? Is there an automatic help file that can be sent or can we access it via ftp or WWW somehow? -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt9F5K+YbMzawbu5AQFo7AQAkzL2TId0Dqhqt8xnOjqgSnp8zXBFHBc0 Up356NwADzE/8/xnQlEMSMUAGjLLvnBE83KT8ko7H7RWc7HDieNxED6gtrmTO+uq HFcXi9hZMUywri4gG9vGWLQDa9bhpc5NEISQtzZCmPnbI4k+NtXnNRLDlPUvgxv8 BX+QK/trLnA= =RAiJ -----END PGP SIGNATURE----- -------------------------------------------------------------------------- Mark Terka | werewolf(a)io.org | public key (werewolf) by Toronto,Canada | dg507(a)cleveland.freenet.edu | public key server or request ---------------------------------------------------------------------------

1 0

Re: ECO_do
by owner-cypherpunks＠hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <Pine.SOL.3.91.941202132305.8537A-100000(a)welchlink.welch.jhu.edu>, cjl <cjl(a)welchlink.welch.jhu.edu> wrote: >From the messages appearing on the list it would seem that >responding to messages sent via Masco's auto-signer needs to be done >carefully, apparently the less-than-less diligent will just respond to the >From: address instead of to the automagical response demon at >jya(a)pipeline.com No longer. I removed this last night, since MUAs don't agree on what they do with "Reply-To:". (The behavior I was trying to encourage is that of following up only to the list. Netcom lossage notwithstanding, I hate being CC'd on things that I'll see anyway.) - -- Todd Masco | "Roam home to a dome, Where Georgian and Gothic once stood cactus(a)hks.net | Now chemical bonds alone guard our blond(e)s, cactus(a)bb.com | And even the plumbing looks good." - B Fuller -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBFAwUBLt91wioZzwIn1bdtAQE2CgF9Ex2jZda0xWQmUTd/I6S6H4CoE2ONRIf3 aifw1/ILoDc1QiBkExsW+YwCD8i7dXry =tiNs -----END PGP SIGNATURE----- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address belonging to the signature and forwarded.]

1 0

Re: ECO_do
by cjl 17 Dec '03

17 Dec '03

>From the messages appearing on the list it would seem that responding to messages sent via Masco's auto-signer needs to be done carefully, apparently the less-than-less diligent will just respond to the From: address instead of to the automagical response demon at jya(a)pipeline.com I would hate to see the valuable service provided by jya become a source of noise. In an ideal world everyone would be more careful about responding to the right address, but this is a far from ideal world. An appropriately Cypherpumpkin solution is left as an excercise to the reader. C. J. Leonard ( / "DNA is groovy" \ / - Watson & Crick <cjl(a)welchlink.welch.jhu.edu> / \ <-- major groove ( \ Finger for public key \ ) Strong-arm for secret key / <-- minor groove Thumb-screws for pass-phrase / )

1 0

Digicash trial
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Geoffrey Faivre-Malloy <vikram!geoffrey(a)crl.com> > DigiCash trial? Tell me more! I got my account a couple of weeks ago, I just downloaded the software. (I'm a buyer, though I was hoping to sell too.) Recent 'shops' include HotWired. I suspect one of the problems is that the software is not 'licensed for use in the US' possibly for patent reasons? It says this clearly in the pre-download license agreement. The trial gives you 100 dummy units of currency, which you can use to 'buy' from 'shops'. > Now THAT sounds cool! :) Wonder how long it will be before someone uses > PGP in a phone :) How much processing power would it take to do that on > the fly anyway? Actually not too much - PGP can process fast enough on a 486 as it is. > > Now what _I_ want is some way to integrate PGP with Netscape... > What's Netscape? The 'new improved' commercial version of Mosaic, by those who left to form a company. The freeware version of Netscape is probably the best WWW browser for a number of platforms right now. Of course, PGP wouldn't be integrated with Netscape as such, but into a local Web page - I'm looking at Web pages as simple interfaces to various ordinary, not necessarily 'netted' tasks. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." rishab(a)arbornet.org Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0

Term Emulators (was Re: public accounts / PGP / passphrases)
by JEFF LICQUIA (CEI) 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > From: Adam Shostack <adam(a)bwh.harvard.edu> > Derek wrote: > > | It would be nice to integrate PGP into terminal emulators, too, like > | kermit or seyon or red ryder or whatever, so that you could easily use > | PGP locally to sign/encrypt things on the remote end. Wishful > | thinking, I guess... > > I think terminal emulators are the wrong layer for PGP > integration. PGP support is needed in document editors and viewers, > rather than in network layers. I think you misunderstood. I took Derek as saying that 'modem programs' (as in the Procomm/Crosstalk kind) should have PGP integration. If these truly provided a full-featured network, then yes, the focus would need to be on the local editors/viewers we'd all use. As it is, these programs only provide a narrow window into a far-off environment, with varying degrees of security. As a positive proposal, I noticed Greg Broiles's posts with the scripts and came up with an idea. Would it be possibly a step forward to write similar scripts to allow for local agency? I envision two stages here: 1. Scripts on the remote end substituting for your editor that actually run your editor, then ask (once you're done with the plaintext) whether you'd like to process the message locally. If so, it would send the file via sz, wait for a Enter: press, then rz the file back, substituting the rz'd file for the original. You'd still have to mess with files on the local end, though. 2. Local control of the term emulator to automate the local agency part of the transaction. > With direct ip connectivity becoming commonplace, we're seeing > PGP integrated into mail & news tools, which is a great thing. (There > is also a use for encrypting networks, but I think it is different > from the use for PGP, which is a document oriented system.) True. However, the plight of the poor user who must use dial-up to connect is still one where all the agency must happen on the other end of the wire. I don't think these are going to go away any time soon, and by the time they do, we'll probably all have moved on to some new GeeWhizBang system developed commercially (my guess is it'll come out about a year after the RSA patent expires... :-) and integrated via OLE4 into our Windows 5.2 messaging systems (whoops! sorry, Tim, I meant via AppleMindMeld into our System 9.3 messaging systems :-). -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLt+VqDER5KvPRd0NAQG2JQQAk3dLJW+eoHxqJZbE8Ofcf/oNg7zOgrAJ zjpKwmM6PNFMsvsiI84jBkENHBhaItIMtuPCh+RCR6lS7JVaoAIlLOJ3e+5Kb8uM B9nrZ9BMzro275wjC1Ubmh2+hLtSVRVU0lqoGi7JiEv/fSWdlBCXdLqztiVsMvn5 fMBPqQY07o8= =InPY -----END PGP SIGNATURE-----

1 0

Re: Brands excluded from digicash beta
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

PAP wrote: >I just want, in a short message, let you know that there exist some >satisfied ecash testers (the system itself and the support when we >set-up our digishop and our plain customers cyberwallets). > The only thing I could eventually complain about is that I even received >a second (unsollicited) account Id and password to retrieve ecash >software because of a bug in the requests management :-) I have been a beta tester since the days of the very first Ecash clients which would freeze my computer when run ;-) I am very impressed with the latest clients. They work flawlessly. The only thing missing is off-line transfer capability. Since the current beta has a (dimmed) button for this, I don't think we will have to wait much longer. -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

1 0

Re: He's the Big Kahuna
by lmccarth＠ducie.cs.umass.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Tim May writes: > Eric Hughes wrote: > > Someone else wrote: > > > I'd feel just about as strange (I hope) if people were saying "Look, > > > Tim's the boss. He's the Big Kahuna. If you don't like his policies on > > > his list, leave." > > "This is one _tasty_ burger" > Something to do with the metric system? Security through obscurity. - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLt+fJ2f7YYibNzjpAQEWRAP/d0dYaMQf0R4XZZRuIwW8kzqZj8p/27XA +TDupyHkn2Bpu/02JziAccWbRVLyA8XgVwN69Su1TBrqhRTEI8cQZG7jC/WJ4HHl iYV50CnKyoz3d5peAowI14BD6x7EnJkR70TomnyEsxQhK60E1VDpZDrxV2EsGqNI n9PQpw6SCPg= =woV8 - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBFAwUBLt+gXyoZzwIn1bdtAQFQMwF/YbIgSqTwy1c2dGhbGPvZD226C1jgPDfU 6RSkqzK1nRujQfC8CMuaOlHW9/HjC3S9 =Wb4P -----END PGP SIGNATURE----- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address belonging to the signature and forwarded.]

1 0