- cypherpunks-legacy - lists.cpunks.org

Re: The Remailer Crisis
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 4:49 PM 01/19/95, Jeff Licquia wrote: >persuade someone offsite with control over a domain name (for example, >"remailer.net" :-) to give you a mail alias on their domain, this would take >a bit more effort to track than your typical "remailer.uiuc.edu" type >domain. This would make it less likely that the university would hear >complaints, also, since most complainers would be more likely to complain to >"postmaster(a)remailer.net" than "postmaster(a)uiuc.edu" if your machine was >called "anon(a)anarchy.remailer.net" instead of "anon%anarchy.uucp(a)uiuc.edu" >or "anon(a)anarchy.uiuc.edu". I was thinking of this same thing. I'm hopefully going to have a unix box on the net in my college dorm room soon, but I'm a bit hesitant to run a remailer on it. I'm a bit scared to ask whether it would be allowed, on the "it's better to get forgiveness then permission" line of thought. But I'd rather avoid the potential of having to get forgiveness either. If my site had a "machine.remailer.net" address, there would be many benefits. For one, I don't have to worry about some administrator coming accross a list of anon remailers (in a Time magazine scare-tactic article, eek!), and noticing that one of them appears to be operating from some student's dorm room, and secondly, as Jeff says, people who complain are just going to complain to admin(a)remailer.net. They aren't going to take the time to try to figure out that my IP address is really in oberlin.edu, and complain to postmaster(a)oberlin.edu. So administration@oberlin would never even realize I was running a remailer, and since they haven't yet made any indication that that would be against the rules, I would be in a good position. Maybe it's time for Eric to figure out what he's going to do with remailer.net.

3 2

Re: The Remailer Crisis
by Johnathan Corgan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Well, let's do the math. Since the remailer has to be connected at all >times, of course, this implies $162 a month in connect charges, over >and above the other charges. Or $187 a month including the line >charge. Or $2244 a year. > >This makes a "cheap Linux box" almost a moot point. This is a lot more >than I'm willing to pay to run a remailer. > >(I can imagine workarounds that involve connecting at regular >intervals to pick up mail....assuming it "accumulates" somewhere (?), >but the goal of a remailer "on the Net" is what I'm after.) Well, yes, this is true. My point was that reliable, fast, easy to use bandwidth on the order of 128 Kbps is available now in some areas for relatively cheap rates. _With the condition_ that continuous access is not necessary to run a remailer (as I had outlined), this could prove to be a good jumping off ground for some remailer operators. Sheesh, I could start my own on my home ethernet if I were so inclined. The solution to the access fee problem is, of course, sharing that fee with other payees. Your example of putting boxes directly on TLG's network is a good example of this. >I agree that it's something to look at. We don't disagree here; we are solving two different problems it appears. == Johnathan Corgan "Violence is the last refuge of the incompetent." jcorgan(a)scruznet.com -Isaac Asimov -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLx8uG01Diok8GKihAQHClwP/fVWl/GWM9lWArj4qP4orDV9ZGJWqaCEj LJYVSekzetdxIn2iBfTcCLCSwYKqTsJgCKha8tqxM9H5Zq2hVUYat9TlGKBZwpfr b/Vy+N3K1o/+E3NnWxcsJPLaeJfkom1sIJZiZkXKrqUM2v7v2l8MERub7uYG/EIl 5LhaDwdg9ig= =Acce -----END PGP SIGNATURE-----

1 0

cpla mailing list revived
by jpp＠markv.com 17 Dec '03

17 Dec '03

The quietness of the cpla list was brought to my attention recently. I have improved the list software, changed the list address into a real internet style mailing list. You should now be able to be join and depart the cpla mailing list automatically. Who knows, this might even prompt a physical get-together. I will be adding the members of the old list to the new list, so expect to get another copy of the welcome message if you were on the cpla list a while ago. Here is a copy of the welcome message, FYI. Welcome to the Cypherpunks LA <cpla(a)markv.com> mailing list. Like every moderator of every new list, I hope this will be mostly signal and very little noise. I don't envision this as a general discussion list -- that's what the main list is for. This list is for: Coordinating physical meetings of Cypherpunks in the Los Angeles area: Location, time, equipment, arranging rides, etc. Suggesting topics to cover at the meetings. Coordinating other local group activities. Announcements of relevant talks, seminars and other such goodies in the Los Angeles area and environs. *Concise* pointers to other local groups, mailing lists, and sources of information that might be of interest to local Cypherpunks. Whatever everyone seems to use it for. This list is NOT for: Reposting the "important" messages from the main list or any other mailing list or newsgroup. (If someone wants to run a "distilled" Cypherpunks list, fine. This isn't it!) Preaching to the converted. No ranting! (If you want to rant, do it on the main list. Everyone else seems to...) Rehashing the same topics that are going on the main list. This list is now managed by a simple minded program. Send a message with a blank body and the subject 'subscribe' to be added to the list. The subject 'unsubscribe' will remove you from the list. Any suggestions for how to improve this intro are welcome. Any suggestions for a *local* FAQ are also welcome. Direct your sugestions to me at jpp(a)markv.com. PGP/ViaCrypt mail gladly accepted. This information is also available at ftp://ftp.markv.com/pub/jpp/cp-la-hi.txt j' <jpp(a)markv.com>

1 0

"Smart Roads" for toll collection and traffic logging
by northrop＠netcom.com 17 Dec '03

17 Dec '03

Here in Seattle there is a proposal to turn a couple of traffic chokepoints into toll roads. Because a toll plaza would back things up even worse, I'm guessing they'll look to an automated system that will let you pay without leaving your car. This is established tech -- a nifty article about it showed up in _Electronic Design_ last month. The downside is that it'll not be designed with privacy in mind at all, and will eventually have this pesky database of who went by the toll booth and when. We all know that old databases never die, they just get put on tape and stuffed in a box, to wait for someone with a curious streak to come by. This is a well-established problem with naiive designs of automated toll plazas, and I am looking for examples of things that could be done with this database by someone with ill intent, or could be done with the toll system itself if it got to be more widespread. - Obviously, if your car is talking to the road all the time, speeding tickets are a gimme. - You might be targeted for "further investigation" if you happen to drive by the wrong part of town. Gotta step up the heat on that war on drugs, ya know. I can come up with all sorts of ways to detect people from committing crimes (and don't really need those examples -- folks might think I *want* a Big Brother Highway!), but I'm curious what peoples' fears are about what this could mean to innocent folks, Joe Sixpack and his pals. There is a meeting in a few days where public comment on the toll road idea is being solicited, and I want to have some really compelling horror stories with which to capture peoples' imaginations about what a Big Brother Highway could mean. I want to scare people, but I want to scare 'em with something believable. If there's an archive that mentions anything like this, please point it out in private mail. I'll summarize what I get to the list, and also make that document available on the web, if anything interesting comes up. Thanks! Scott -- Scott Northrop (206)559-9878 northrop(a)netcom.com, northrop(a)mccaw.com Those who use arms well cultivate the Way and keep the rules. Thus they can govern in such a way as to prevail over the corrupt. -- Sun Tzu, The Art of War, Book IV

2 1

Netscape, RC4, key exchange?
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- grendel(a)netaxs.com wrote: > aba(a)atlas.ex.ac.uk wrote: > > I have code to generate the RSA key pairs and modulus, what I am > > looking for is code to factorise a number using one of the better > > algorithms (quadratic sieve, etc.). > > It's been established that the encryption in Netscape is 40 bit >RC4, not 40 bit RSA, [...] Ok, so Netscape (the exported version only?) uses 40bit RC4 for encryption, but what about key exchange? RC4 is a stream cypher so both the receiver and sender need to know the key. Does anybody know what method Netscape uses to exchange keys DH, RSA, other? and what key sizes? Adam -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUALx+TkSnIuJ1VakpnAQEuBQP/TAiX81goT8r3KnvFh3WCm6TvzjUNAaEl G8NI5ELom8CWgIYp1uli+V+s0nRgZCKfZAvfeQrG97p2blSK0tOsZyV3E6cYKgXo yGcGUJZ8UdvBL0A93LJcU4LZEUITcC9/3HS09QD2oZBGzSettHk3nwKMmEer65OU QLsrRildnuw= =3vQF -----END PGP SIGNATURE-----

1 0

Crypto Anarchy/Libertarians in WSJ
by frissell＠panix.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Today's WSJ Front Page Left Column Less Is More Libertarian Impulses Show Growing Appeal Among the Disaffected When the Government Fails Many Voters are Asking: Who Needs it Anyway? Mixed Blessing to the GOP "Mr. Frezza...doesn't just want to cut government: He questions the very need for most of it. He figures that in a world in which computer wizards are close to creating their own private, encrypted digital cash system for making transactions without any government involvement, the need for centralized authority is shrivling." DCF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLx/FiIVO4r4sgSPhAQEhmgP/dxCXAPS6iu/Zb9P7AuC6D8aDg94vZABs VjlXXXXWjkHedveIjQ9qdU8xELblzZiMlu35SKKygLvsD2a8bNXiC2FxBnA/H716 Dj4UHksctV3wJSZuwq6z8/fZds0Dg5GJLYbAUrbdInp/tM7TMrAhUVLFVkVpzhzk 25aXzmIiv5U= =4FOR -----END PGP SIGNATURE----- ************************************************************************* ATMs, Contracting Out, Digital Switching, Downsizing, EDI, Fax, Fedex, Home Workers, Internet, Just In Time, Leasing, Mail Receiving, Phone Cards, Quants, Securitization, Temping, Voice Mail.

1 0

AT&T IVES chip
by xpat＠vm1.spcs.umn.edu 17 Dec '03

17 Dec '03

Interpretive Summary From PC Week: "Security Chip, interface aim to assist Electronic Commerce" AT&T IVES (Information Vending Encryption System) chip will encrypt data, video on demand, banking, etc. The IVES chip will be use in AT&T cable-TV-boxes this year. It is available to OEM's for Internet data security applications. IVES uses algorithms licensed from RSA. No mention of any dreaded built-in peephole. --------------------------------------------------------------------- P M Dierking |

2 1

Crypto Anarchy/Libertarians in WSJ
by John Young 17 Dec '03

17 Dec '03

On Fri, 20 Jan 1995 frissell(a)panix.com (Duncan Frissell) said: Duncan aptly points to the WSJ article, lots of c'punk topics mentioned. For email copy send blank message with subject: LIB_yep Meanwhile, here's a taste: Mr. Willis says the libertarian concept has particular appeal to people in the computer industry. "We have more members in one computer company in Seattle than in some whole counties, and that company is Microsoft," he says. Indeed, when Mr. Frezza, the Philadelphia computer consultant, last month launched a computer network of like- minded thinkers called DigitaLiberty, he was so overwhelmed with responses, especially from college students, that he had to temporarily shut down the group's electronic mailbox. One member of DigitaLiberty is Bruce Fancher, a 23-year-old who in the late 1980s earned brief notoriety as a hacker who broke into computer systems, though he was never charged with a crime. He is president of a computer communications company called Phantom Access Technologies Inc. "Being involved in computers or the Internet, you inevitably move toward being a libertarian," he says. "It is basically possible to keep all of your secrets from prying eyes, particularly the prying eyes of the federal government."

1 0

IBM Contra Beltway
by John Young 17 Dec '03

17 Dec '03

Duncan or others may give a more elegant report on the Clipper debate here in NYC last night. My pleasant surprise was to see the IBM rep, William Whitehurst, far outpace the inside the beltway types, EFF's Daniel Weitzer, the White House's Michael Nelson, FBI's Kallstrom and ex-NSA Stewart Baker, as well as the local urbane handsome attorney-mathematician moderator, Albert Wells, who baby-talked the suits through the arcana. Mr. Whitehurst showed more intelligence about crypto -- domestically, politically, economically and politically -- than any of the others. No flash, no preening, just hard-nosed reports on what's happening, and what's not, due to USG cupidity, with the international spread of the heinous munition. He said industry is impatiently waiting for the USG to cooperate or get the fuck out of the way. Well, not quite, but close. The others seemed entranced by the domestic political morass. Kallstrom recited the oft-riden horse-threats, some miscreant clapped, and he said, "child pornographer". All laughed or winced or stared in pin-stripped disbelief at the disrespect shown. Mr. Weitzer recited that the crypto genie is out of the bottle. Kallstrom said over my dead body or something like that, glowering at the crowd. The dapper man in front of me pulled up his sock to show his ankle holster. Protecting the nation's chief protector against high-criminals. I ran out before getting plugged "accidently".

1 0

Re: The Remailer Crisis
by frissell＠panix.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 01:14 AM 1/19/95 -0800, Timothy C. May wrote: >* I favor separating the "account that remails" from the "owner of the >site," as I have argued in vain in the past. (Example: a willing site >gives out or sells many accounts...each is legally separate, and each >must be legally challenged. My longer posts dealt with this.) I offer to pay for and operate a remailer account on any system that will have me. Do we have the software yet to run a remailer out of an account? >It's time to get cracking on this crisis. The Cable companies may come to our rescue. Even old fuddy-duddy Cablevision is going to be offering connections this year. If those connections are characterised merely as physical connections, that could offer legal protections. My contrib for now will be to draft an all purpose response letter to respond to civilian and official complaints concerning remailer abuse. DCF - -- You know, Private Idaho brings PGP signing within about 10 keystrokes in any Windows mailer. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLx6vUYVO4r4sgSPhAQFjzgP/ZVAonNBsZpMCg/tlWohvC7ratGTZWtCz /WXC+Z1PAKhigdz8VhWhkPXLj/jYba1LUMBI9giNP6T9TSxMw6jjzgvs44tw4LF4 X0pF/lv9OS7GKcPw//4FyB1FKgfwpJA+mHr8gqlLrxREXv3qpHfKRuu/ecg5urmS jwiSSKsjZhU= =Aoq4 -----END PGP SIGNATURE-----

6 6