- cypherpunks-legacy - lists.cpunks.org

Re: Assassination Politics 9!
by jya＠pipeline.com 17 Dec '03

17 Dec '03

On Mar 03, 1996 10:57:14, 'nobody(a)REPLAY.COM (Anonymous)' wrote: >Just because you two aren't interested, doesn't mean others aren't. >Work is actually in progress in implementing such a system. The Economist of March 2 has a cover story on state, church and private terrorism, the effectiveness and failures of each, the arguments and apologies, the savages and the victims, the lucrative concocting of imaginary enemies -- military, religious, political, personal. It's conclusions are ... well, have a read and dread how the Demon Trio of state, church and private super-righteous sub-humans will murder you and your loved ones next to fulfill their blind ambitions.

1 0

Re: Truelly Random Numbers
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 10:11 AM 3/3/96 -0500, Gary Howland wrote: >Surely the process of counting up until you get a prime means >that the chances of getting certain primes are greater than >others (eg. 17 is more likely than 19) ? In order to use this information, one would need to determine the number of primes in the vicinity of a potential prime factor. This costs more than actually checking for the factor, hence is not useful. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

cryptography
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Response to Freedom Now! program on PBS, regarding expanding use of cryptography by individuals. - ----------------------------------------------------------- Unfortunately, the NSA representative (Mr. Baker?) on today's (3/3/96) show neglected to mention that the Clinton administration called for the introduction of the Clipper chip in *all* phones, NOT just those used by the government. This may be readily verified online via the archives at the EFF (http://www.eff.org) EPIC (http://www.epic.org) and even the White House' (http://www.whitehouse.gov) own ftp-able copies of the President's speeches. Also missed was the fact that the Clipper chip would readily permit the implementation of what is called "traffic analysis" - knowing who spoke with whom, regardless of content. Traffic analysis data could readily be misinterpreted. If I were to make a dozen calls to a KKK office, traffic analysis would show such; it would *not* indicate whether the calls were in support of, or opposition to, the KKK's existence. I found 'interesting' the NSA representative's emphasis of the fact that with the introduction of the automobile, the government's response was licensing and requirements for absolute identification. Extending that response, and the extensive licensing and identification procedures used to (legally) acquire (legal) firearms, to the use of cryptography and communications: are we going to see licensed telephones? Are we going to be obliged to present a National ID card before being able to use a public pay phone? Somehow, I have trouble equating a submachine gun to a Princess phone... but then, I'm not a (probably justifiably so) paranoid government official. David K. Merriman merriman(a)arn.net -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMTks9MVrTvyYOzAZAQF+tQP/Z1WQQ5lA04Lkt1e4pDM6x/MA113+LuAQ DnKSSy50778cblcW44IimEkeWvxAQ/ee4FYtDlDvpxVgCXJc9ARUdawpZ0eFoCON 5nQ1VixVUMhmMrZYUrx1MFmacvgYDfkqXS7QEHmkrQzvZTKsjM67gs2VKCUhJm0D p54R34ooaKM= =1HPq -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> For privacy tools: http://www.geocities.com/capitolhill/1148

1 0

remailer, web site, listserve
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I and a partner are expecting to be online by the 8th of March with a commercial web server (shellback.com) As part of this presence, I am working on hacking together a program to interface with the SLMail95 (yes, it will be running on a Win95 machine :-) email server to allow operation as a remailer. Initially, I anticipate that it will be a fairly 'dumb' remailer, offering only remailing, reordering, and PGP encryption. Additional CP-style features will be added as my time to implement them permits. I am offering to maintain an initially limited archives of CP materials and a listserve host (if needed/wanted). I am also actively soliciting (via email to me personally, please, and forgive me if I don't acknowledge it) pointers and materials (files, documents, etc) to include on the site. I have the PGP files from the CP ftp site (before it got 'lost' again), but anything else is *most* welcome. We will also be offering anonymous email accounts for $5/month. Following is the PGP key for the remailer we'll be operating (remailer(a)shellback.com) I want to emphasize that the remailer will *not* keep *any* kind of logs. Bad headers, bounces, or anything else not processed on the first go-through will simply fall into the bitbucket for electron recycling. Since I'll be the postmaster/webmaster, I can say that with no small measure of confidence :-) - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzE0kfEAAAEEALf5sIOqMfEAFi3geJ6aofyaCRy1ZJt8D91QBqPPeU1X3ond BoIcEcfaMf7s3cOBaiEl7rKFMYqEpL08G7FFelQxc1WRvsR5XtTN+xFB3j0RPNON vMxju5j6anjPVb2RMnowSYqNKUWIEYd4Soa7L+ZWpaHgLSGkhb6Ex2tu6LdpAAUR tCFSZW1haWxlciA8cmVtYWlsZXJAc2hlbGxiYWNrLmNvbT6JAJUDBRAxNJK/xWtO /Jg7MBkBAfiVBACk6dDtebwemmY2+nxK+WD46a0Uj/lwpXLGzJvixdYGo4mwYG2/ LUw/23xBNxLIvPCFR8Qvt9zguyPdMWAp07I64ZlL6yv9Co3DETtTLB8wBdPce6Wx CLswIWAQ3MSLOmgVB35TzOYrYf5RzYtNKktCl3YDa9mxV4sug9xAx5uxvw== =9EvL - -----END PGP PUBLIC KEY BLOCK----- We return you now to your regularly scheduled anarchy..... Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMTkzSsVrTvyYOzAZAQGVxQP/cFSgADQRFs58aTRv9FmzVFKK5xP4Ew2T lFajc73ltr0u6qa3luCfZKUqhG93REt8KXqzj2j65i+wrSKzs10DN2N75dEfRHO9 oGm0ka82eTmY+NXLLuNn1THw0+J8EsH9itQD0H4IzEWFkqUYq/C8pEtARF8LCt3V oKN1V/E6zPs= =sfA+ -----END PGP SIGNATURE----- ------------------------------------------------------------- "Giving money and power to government is like giving whiskey and car keys to teenage boys." P. J. O'Rourke (b. 1947), U.S. journalist. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> For privacy tools: http://www.geocities.com/capitolhill/1148

1 0

Re: A brief comparison of email encryption protocols
by Bill Stewart 17 Dec '03

17 Dec '03

At 09:01 AM 2/29/96 -0800, Laurence Lundblade <lgl(a)qualcomm.com> wrote: .....CME wrote.... >>Like X.509, my certs have an Issuing-name and a Subject-name -- but >>they're both cryptographic hashes of public keys. You can take a portion >>of those hashes [e.g., low order 12 bits] and use it to index a hash table >>of certificates or keys. The cert is more general than X.509 -- that is, ...... >Isn't using a hash as the identifier replicating the key distribution >problem that PGP has or are you including some other data that can be used >to look up the cert? I think a problem occurs when you have 20 billion of >these certs (two for every person in the year 2010 or such). A simple hash >into a table isn't going to cut it because you a single database (with >replication?) isn't going to be possible. Some hierarchical lookup like >DNS is going to be needed. The look ups are needed to check for revocation. There's a name collision on the word "hash" here. Carl was using both hashes in the same sentence. A "cryptographic hash" is a strongly one-way mapping from an input string (in this case a public key) to a number. A hash table is a data structure that uses a mapping from an input string to a number to decide where to put things. An MD5 cryptographic hash function used on PGP public keys (e.g. to get the fingerprint) is 64 bits long, so there may be a few collisions if there are 2**34 keys out there; if things scale to that point, PGP 4.1.3 need to use SHA for fingerprints instead (or in addition). Carl is proposing using a hash table (indexed by a hash-table hash of the cryptographic hash) to store public keys; that's a separate problem, though of course if you want to store 20 billion keys in one place, there are better data structures than simple hash tables. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0

Re: Crypto Export Legislation?
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I took a look at the text of the bill. There was a line in it making it a crime to use crypto in a way that obstructs a federal investigation. While understandable, this is too vague... it could easily be interpreted (IMO) as any strong crypto without escrow of some kind. Anyone else feel this way about that line in the bill? - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMTorUyoZzwIn1bdtAQEWJgGA1KdA1HtbX9L0U22rBLKFouIQHQniAdA3 lvimml/i+Z/KmYSmHGqkGBwCb1hAfSxc =E2ZA -----END PGP SIGNATURE-----

1 0

Interesting Identity Hacking Experiment: www.switchboard.com
by Just Rich 17 Dec '03

17 Dec '03

http://www.switchboard.com/ is a white pages directory. Basically, it's the Database America CD-ROM on the Web. The difference is, it's writeable, and free. Pretty cool. I don't think it was wise for them to allow anyone with an email address to change anyone else's white pages entry, though. Can anyone think of a prominent politician who would be in the phone book? The freeform "more information" field is just asking to be used. Potentially interesting applications for anonymous web proxies and secure pseudonym servers. At least they don't make direct changes to the database -- I'd guess they only set a flag to look in the separate user-supplied file. I.e., I changed my entry, then hit "unregister," and all the original information returned immediately. -rich

1 0

Destroying the Internet in order to save the Internet
by tcmay＠got.net 17 Dec '03

17 Dec '03

WARNING: If you are under 18, do not read or download this message! You have been warned, and I take no further responsibility for your actions. It has become necessary under the Communications Decency Act to make this warning. Furthermore, quoted material may also contain material, so censorship of certain words and ideas may be necessary. At 11:14 PM 3/3/96, Bill Frantz wrote: >One of the private pilot magazines reported that a small plane operator >used the code (because his airplane was, in fact, being hijacked). When he >landed the airplane, it was surrounded by LEA, and in the ensuing gun >battle, everyone on the airplane died. The went on to say that the safety ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ The pilot was flying an airplane. Airplanes are often used to transport drugs. Sometimes you have to destroy the village in order to to save the village. (A lesson being used by those who realize we have to destroy free speech in order to save free speech, and to destroy the Internet in order to save the Internet. Blair House is aptly named.) --Alan Smithee

1 0

book idea: info terrorism/espionage etc.
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

hey, I understand a sequel to Puzzle Palace by Bamford and someone else is due to be published soon. is this correct? when is the due date? has anyone heard about this? I've been seeing a lot of early lead articles from other reporters, such as a GNN article awhile ago, and an assertion that the NSA is working with the GCHQ to monitor American citizens. I was just thinking what an interesting book this could be. if it doesn't cover the ideas of "information terrorism" that are hinted in e.g. Strassman's remailer paper, it seems this is a vacuum that could be filled with a very significant/interesting tome by someone. I hope Levy's cryptography book covers some of these areas too. I would like to just see one entire chapter dedicated to the way the spooks seem to be doing a "bait and switch" now that the cold war is over, with economic espionage and all that. easily an entire book could be dedicated to this subject. I've seen a lot of editorials on reforming the spook apparatus, and it seems now is the prime moment for some very influential books to come out to influence future policy ideas.

2 1

Re: Netcom and Credit Cards
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

"If someone's hacked our systems, we'd certainly like to know about it, although it's very doubtful; more likely, this just someone trying to make you nervous" - Netcom admin, 2600, Summer 1994 "Recent reports indicate that Netcom's credit file, stored online and containing information on all their customers, has been compromised" - 2600 Magazine, Autumn 1994 Netcom claim Mitnick broke in during xmas 94, when the reality is that every half decent hacker had already been there. Netcom are an INTERNET PROVIDER!!! You would expect them to know a thing or two about security. But then again, even security samurais have problems setting up firewalls :-)

1 0