- cypherpunks-legacy - lists.cpunks.org

Re: Controlled nymity
by James A. Donald 16 Aug '03

16 Aug '03

-- James A. Donald: > > What we want of a payment system, is that Alice can prove > > she paid Bob, even if Bob wants to deny it, but no one else > > can prove that Alice paid Bob unless Alice takes special > > action to make it provable. Major Variola (ret) > Does it help if: Alice generates a secret key for each > payment Alice *anonymously* deposits an *encrypted* message > containing payment details into Bob's acct Only Alice can > reveal the key for a particular transaction in Bob's account, > thereby stripping anonymity but also revealing payment. For > only that transaction. Presumably Alice prepares a bunch of unblinded tokens, marks them "for Bob" and encrypts them so that only the bank can read them. Bob then gives that message to the bank, and the bank then tells Bob "yes, its a valid payment for 25 grams of gold to Bob" Since Alice knows the secrets embedded in that message, she can prove that she originated that message, so she can prove she paid Bob, but no one else can prove it. She can prove that to Bob, or to anyone, assuming the bank cooperates. Of course this means the bank knows how much money everyone is paying Bob, even if it does not know who is paying Bob. Also Alice cannot prove that the money was accompanied by the message "OK Bob, here is the twenty five grams of gold, deliver the Maltese falcon tonight." and thus cannot prove that Bob, by accepting the tokens valid for the gold, agreed to deliver the Maltese Falcon. Perhaps these two problems can be fixed. Alice encrypts a message to the bank containing the unblinded tokens. It also contains instructions 'accept this deposit only if accompanied by a number whose hash is X, and only if the message is signed with the private key corresponding to this public key 89798759754. Alice puts this encrypted message to the bank inside a a message to the Bob, which contains the instructions: "OK Bob, here is the twenty five grams of gold, deliver the Maltese falcon tonight. Here is a cheque made out to cash, for 25 grams of gold, valid if accompanied by the hash of this message, and signed with private key 1764383486*b, where b is whatever your private key is. Signed Alice." Bob delivers the cheque, (an encrypted message to the bank) and the bank validates it as correctly formed and containing valid unspent unblinded tokens, and gives him blinded tokens for 25 grams of gold. To prove that it was Bob who did indeed deposit this money, Alice reveals to the bank the message corresponding to the hash, and thus reveals that 89798759754.= B^1764383486, where B is Bob's public key, and thus, if the bank keeps a record of the exchange, proves that it was Bob who made the exchange, and that the money was from Alice, and was for the Maltese falcon. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG t9GmbLxgymh192YQzp+e8St5v1yhN1n014TZ3Fyf 4k6B1/EGsY+IBb0q+xTsr05v3am+86d6UlAzY51Cz

1 0

Royal power shift in Liechtenstein
by R. A. Hettinga 15 Aug '03

15 Aug '03

<http://news.telegraph.co.uk/core/Content/displayPrintable.jhtml?xml=/news/2…> The Telegraph Royal power shift in Liechtenstein By Kate Connolly in Berlin (Filed: 16/08/2003) Prince Hans Adam II of Liechtenstein is to hand over power to his son Alois but will retain the title of head of state. The move, announced by the crown prince yesterday, the tiny country's national holiday, came a few months after he won extended ruling powers in a bitterly fought referendum campaign . Explaining his decision at a party for the state's 33,000 inhabitants at his castle in Vaduz, Prince Hans Adam, 58, said the handover would take place at next year's national holiday. "The problems of foreign and domestic politics in which I have been involved are either solved or close to a successful solution," he said. "New problems have to be solved, and the heir to the throne has already been working on these." Prince Alois, 35, is the eldest of the Prince Hans Adam's four children. Two thirds of Liechtenstein's 17,000 voters supported the new constitution proposed by the Prince Hans Adam, giving him the right to dismiss the government, veto legislation and appoint judges. The prince, whose family has ruled the state for 300 years, already had the power to dissolve parliament and call elections. The campaign led to claims that the prince - who took over government rule from his father in 1989 - was a despot, liable to turn the Ruritanian principality into a dictatorship. But critics of the crown prince's campaign, which split Liechtenstein like few other events in its history, were ostracised. One found a disembowelled cat at his front door while another discovered a rotten pig's snout and tail nailed to his fence with the message: "Shut your mouth and sling your hook." The prince threatened to leave Liechtenstein in favour of neighbouring Austria, where he has a castle, and to sell the royal palace to the Microsoft billionaire Bill Gates if voters failed to back his proposals. Prince Alois, who has four children from his 10-year marriage to Princess Sophie of Bavaria, studied at Sandhurst in the 1990s, and has a law degree from Salzburg university. He has already demonstrated that he shares his father's stubborn streak by recently suggesting, as Prince Hans Adam has done, that Liechtenstein should leave the Council of Europe if it carries out its threat to monitor Liechtenstein's commitment to democracy in the light of the recent referendum. This year, the state, sandwiched between Switzerland and Austria and known for allegedly harbouring illicit money , offered itself for rent to multi-national companies for #320 per head per day. Prince Hans Adam allowed the use of his wine cellar and castle as part of the deal. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Viral DNS Attack, DDos Idea
by Major Variola (ret.) 15 Aug '03

15 Aug '03

Suppose malware appends a bogus entry to an infected machine's /etc/hosts (or more likely, MSwindows' \windows\blahblah\hosts file). (This constitutes a DNS attack on the appended domain name, exploiting the local hosts' name-resolution prioritization.) If the appended IP address points to the same victim (66.66.66.66) on all the virus-infected machines, and the appended (redirected) domain name is popular ("google.com" for instance) then you get a DDoS attack on the appended IP host 66.66.66.66 that grows as the viral infection spreads in the population. You also get a DDoS on the popular domain name ("google.com") you've redirected. If the victim IP address were a router just upstream of the victim domain name, its extra fun for the victim domain --not only are they unavailable on infected machines, but clients pound their upstream when they try to connect. Thoughts? Has this ever been suggested or implemented? --- In "The Wild One" bikers mount a DoS attack on a router: her name is Dorothy and she works at a plugboard. ca 1954

2 1

Re: Blackout in NYC
by Major Variola (ret) 15 Aug '03

15 Aug '03

At 07:49 AM 8/15/03 -0700, Sarad AV wrote: >There wasn't much of traffic congestion on the >manhatten roads when they showed the images on bbc. >The manhatten road network is used in examples of >deflection routing. Also roads every where should be >like that :-) Mutually perpendicular, you mean? Or congested? >In India during summer-we have around 8 hours of >power cut daily. Think of the market for UPSes, man! Or for a thermoelectric generator that runs on cowdung! >For a moment think of all the iraqi's with power >grids taken out now enjoying the 120+ farenhiet sun. A >few hours of luxury was gone and it was breaking news >in bbc. Yeah but the traditional Arab dress deals with the sun, whereas the traditional Victorian/American attire doesn't. The *real story* is how this is a symptom of the Empire Declining. For Californians, its more of a "its your turn now" feeling... IIRC New Zealand had a city w/out watts for a few days, a few years ago. .... "Flex your power" Flush Davis

1 0

Re: ATMs moving to triple DES.
by Matt Curtin 15 Aug '03

15 Aug '03

"Trei, Peter" <ptrei(a)rsasecurity.com> writes: > Finally, five full years after DES was definitively proved > to be vulnerable to brute force attack, the major ATM > networks are moving to 3DES. It was even longer than that...we passed six years ago in June. (Time flies, non?) You started it. It's all your fault. :-) -- Matt Curtin, CISSP, IAM, INTP. Keywords: Lisp, Unix, Internet, INFOSEC. Founder, Interhack Corporation +1 614 545 HACK http://web.interhack.com/ Author of /Developing Trust: Online Privacy and Security/ (Apress, 2001)

1 0

Re: Blackout in NYC
by Sarad AV 15 Aug '03

15 Aug '03

hi, There wasn't much of traffic congestion on the manhatten roads when they showed the images on bbc. The manhatten road network is used in examples of deflection routing. Also roads every where should be like that :-) In India during summer-we have around 8 hours of power cut daily. For a moment think of all the iraqi's with power grids taken out now enjoying the 120+ farenhiet sun. A few hours of luxury was gone and it was breaking news in bbc. Sarath. --- John Young <jya(a)pipeline.com> wrote: > Quiet here in New York City, thousands walking in > the streets, auto > traffic is pleasantly minimal along upper Broadway. > Traffic lights inoperative, as well as computers > except for laptops such as this. > > Telephones working. Portable radio says the outage > is due to > northeast electrical grid failing. Not terrorist > related, it is termed a "natural" outage due to > overload. > > One report said the cascading outage began at a > sub-station in > NYC, another says it started in Canada. > > Mayor Bloomberg says that power is now starting to > come back, > a bit at a time as the individual elements of the > grid are restored, > __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com

1 0

Fw: Re: Secure IDE?
by Bojan 14 Aug '03

14 Aug '03

----- cut here ----- From: "Ralf-P. Weinmann" <rpw(a)uni.de> On Wed, Jul 30, 2003 at 04:20:37PM -0400, Trei, Peter wrote: > ABIT has come out with a new motherboard, the > "IC7-MAX3" featuring something called 'Secure > IDE', which seems to involve HW crypto in the > onboard IDE controller: > > >From the marketing fluff at > http://www.abit.com.tw/abitweb/webjsp/english/news1.jsp?pDOCNO=en_0307251 > > "For MAX3, the ABIT Engineers listened > to users who were asking for information > security. SecureIDE connects to your IDE > hard disk and has a special decoder; > without a special key, your hard disk cannot > be opened by anyone. Thus hackers and > would be information thieves cannot access > your hard disk, even if they remove it from your > PC. Protect your privacy and keep anyone > from snooping into your information. Lock > down your hard disk, not with a password, > but with encryption. A password can be > cracked by software in a few hours. ABIT's > SecureIDE will keep government > supercomputers busy for weeks and will > keep the RIAA away from your Kazaa files." > > No, I have no idea what this actually means either. > I'm trying to find out. > > Peter Trei 40-bit DES in ECB mode sounds even more great. It's them Enovatech guys again. See here: http://archives.abditum.com/cypherpunks/C-punks20030519/0079.html Cheers, Ralf -- Ralf-P. Weinmann <rpw(a)uni.de> PGP fingerprint: 2048/46C772078ACB58DEF6EBF8030CBF1724 ----- cut here ----- | | ( | ) c'ya . o ( | ) \|/ Sharkey \___/ \|/ `-^-' `-^-' | | bomb cia nsa cocaine terrorist drug kill president nuclear -- Hi Echelon! :) PGP 2.6.3i 7CAD47C9: AF D0 62 B3 94 6C 2791 9C CD 87 1D 21 B0 5B 59 -- Arachne V1.70;rev.3, NON-COMMERCIAL copy, http://arachne.cz/

1 0

The Geodesic Marketspace
by R. A. Hettinga 14 Aug '03

14 Aug '03

You probably want to see the web-page, to look at the pictures. No. Not *those* pictures... :-). Cheers, RAH ------ <http://ynotnews.ynotmasters.com/issues/081403/page2.html> YNOT MASTERS : The ultimate resource for adult webmasters! This Issue: August 14, 2003 INDUSTRY TRENDS by Jason from ImageAuction The Geodesic Marketspace Nineteen ninety four seems like forever ago in Internet years, but this was the year that John Perry Barlow published his seminal work, "The Economy of Ideas" in Wired 2.03 1. That article has haunted me ever since I read it. Still considered heresy by most people, Barlow believed you couldn't contain the torrent of digitized content unleashed on the Net, nor was it even appropriate to try. "How do you sell wine without bottles?" he posed. The very nature of digital content demands a new approach. The problem lies in this limited span of time in the course of human civilization where we have contrived the concept of intellectual property and copyright 2. At a time when it was relatively difficult to manufacture copies of works of art, the idea of granting copy monopolies to the creators seemed like a natural business model, and thus was created this legal concept of "copy"right. This worked well when one could control the tangible manifestations of an idea (a book, a record, a movie) but as Thomas Jefferson eloquently stated, "an idea, once divulged cannot be exclusively possessed." 3 We are now at a crossroads where digital media, unlike its analog predecessors, exhibits more of the properties of ideas than items. "Music as a packaged-goods business is over", the chairman of Sony recently said. "What [do] you do now?", Jefferson, in his letter to Isaac McPherson Monticello, alludes indirectly to a possible solution. 4 One characteristic of an idea that Jefferson describes is "that no one possesses the less, because every other possesses the whole of it." Translated to relate to modern digital media this means that when I make a copy of a digital file, you can have a completely unadulterated copy without detrimentally affecting my copy. This essential and natural characteristic of digital media's existence is exactly what threatens the copyright model to which the entire information industry is so addicted. Jefferson continues, "an individual may exclusively possess [it] as long as he keeps it to himself." The onus is therefore upon the original creator to extract the highest possible value before releasing it. Once released, the market will continue to distribute the information in the most optimized and efficient manner. This manner was described by Peter Huber is his landmark 1987 Justice Department report on competition in the telephone industry entitled "The Geodesic Network" .5Huber was talking about the cost of phone switches and basically foretelling the packet switching architecture the Internet uses today as opposed to the hierarchical circuit switch network that phone networks operated under in the past. But, as it turns out, the term geodesic network is also an apt description for an optimized information network. Information will travel through that network with the path of least resistance. Resistance, or network friction, can appear in many forms. One famous quote dating from early in the growth of the Internet goes, "The Internet sees censorship as damage and routes around it." 6Copyright is a legal grant to impose a form of censorship and adds friction to the information network. Clear examples of geodesic networks in action can be found by looking at peer-to-peer trading systems and email communications. How many of you receive funny images or jokes from friends via email? The point is these images aren't distributed on a website by some monolithic media giant but from person to person (node to node in network parlance) more like a spreading virus. One only needs point to the success of computer viruses and the attraction of viral marketing to understand the efficiencies that a geodesic network possesses. 7 The business model that the media industry currently employs is based on an attempt to impose a false scarcity and thus make money on the friction in the network. Many people equate this perceived scarcity with value, hence the desire to have exclusive or semi-exclusive ownership. But if we look not at the value of the information passing over that network but rather the connections in that network, we get a different picture of how to generate revenue. The connections represent relationship, and the value of that relationship is based on the reputation of the nodes being connected. That reputation, in turn, is based on the differential of the exchange (where one side might be in the form of money and on the other in the form of content: pictures, music, etc). With each additional transaction the strength of that connection (relationship) increases or decreases. In simplified terms, with each positive transaction the supplier can extract an ever-higher premium from the buyer, not based on the value of the information in the new transaction but rather the value of the established relationship. This relationship can also be viewed as a form of brand identity. As an example, the New York Times is well known for its high journalistic standards. Jason Blair not withstanding, people would be willing to pay a higher premium for a story coming from the NYT as compared to say Joe's Newsletter because of the value of the established trust. The stories coming from these two news sources could be exactly the same, word for word, but the NYT can extract a premium not because of any intrinsic, underlying or scarcity value in the content but because they have brand equity and reputation. Under the most common model employed today (see diagram) in the adult entertainment industry, content generally passes from producer to broker who pays a royalty to the producer. The content then passes from broker to paysite operator who usually pays a flat licensing fee. At this point the paysite operators try to attract people (eyeballs) through affiliate programs or advertising to pay for the content usually under a subscription model. They hope that the exclusivity or semi-exclusivity of the content encourages would-be patrons to join. There are many problematic issues with this model: 1) It may take the producer months or even years of licensing fees to recuperate its investment and earn a desired profit; 2) The broker may not offer enough licensing options or the appropriate options for all cases; some websites may only want it for one site, some for 20, some for banners and some may want to give the content to affiliates; 3) The subscription model, employed by paysites, has a fundamental flaw. One month's subscription fee does not usually cover the cost the subscriber imposes on the website in terms of customer acquisition, content and bandwidth. Unlike a health spa, for instance, which can rely on a binding long-term contract, a website is at the whim of the consumer (and credit cards) to cancel their subscriptions. As anyone who has been in this business long enough knows, the average subscription length per customer has been getting steadily shorter; 4) Finally, the subscription model also fails to exact payment when users share content either through download and retransmission or through direct sharing of usernames and passwords. The geodesic distribution model that I'm proposing here relies on extracting value at each transaction as content gets pulled out by the consumer rather than trying to pull the eyeballs of the consumer to the content. Any value in the content that is not extracted at the time of purchase builds up as reputation capital and brand equity. The original producer sells his content to a group of value added resellers (VARs) for a price that the market dictates. These VARs then repackage, re-purpose, merge, sort and manipulate the content in various ways to add unique value that other VARs of the content don't. Some examples include retouching photos and removing blemishes, taking raw video footage and editing it with sound for a more professional look, or using the content in a compilation such as an e-zine. Those VARs then sell to other VARs who then take their content and use it further, creating localized versions, compiling groups of similar content, etc. Imagine, instead of just a director's cut to a movie, you had hundreds of different viewpoints each providing a slightly different take on the movie based on the particular market served. 8 At each transaction, the seller tries to maximize the value of the sale. Buyers reward quality sellers with a higher reputation, again brand equity, and tend to buy from those sellers over and over again. At some point the content is sold to consumers by an aggregator/distributor who sells it on a cost plus basis, namely the cost of acquisition, storage and transmission plus a surcharge based on their reputation or brand. This may be a subscription model but more likely is a system priced on downloads (since the costs, such as storage and transmission, are measured in bits). I'm not advocating a pay per picture system per se. Try to think outside the website box and imagine a Kazaa/Napster type network where you could search for free and get unreliable low quality results or search only reputable dealers where you are willing to pay a slight premium. The reputation may be individualized and based on your personal experience or could be community based like Ebay's feedback system. The higher price you're willing to pay per MB downloaded the higher quality results you would expect. In turn, the Aggregators you are purchasing from, wanting to keep you paying a premium, must constantly find new content to keep you returning to them. They will continue to purchase from trusted VARs with each positive transaction strengthening that trusted relationship and increasing the premium that VAR can expect to earn on the next sale. This strengthening of the reputation works its way back through the network to the original producer. Value is no longer in ! the content but in the ability to continually and consistently produce content. 1 Wired 2.03 Mar 1994 "The Economy of Ideas" - The article has been republished in other forums as "Selling Wine Without Bottles: The Economy of Mind on the Global Net" 2 The first copyright act was the British Statute of Anne 1710 3 "If nature has made any one thing less susceptible than all others of exclusive property, it is the action of the thinking power called an idea, which an individual may exclusively possess as long as he keeps it to himself; but the moment it is divulged, it forces itself into the possession of every one, and the receiver cannot dispossess himself of it. Its peculiar character, too, is that no one possesses the less, because every other possesses the whole of it. He who receives an idea from me, receives instruction himself without lessening mine; as he who lights his taper at mine, receives light without darkening me. That ideas should freely spread from one to another over the globe, for the moral and mutual instruction of man, and improvement of his condition, seems to have been peculiarly and benevolently designed by nature, when she made them, like fire, expansible over all space, without lessening their density in any point, and like the air in which we breathe, move,! and have our physical being, incapable of confinement or exclusive appropriation. Inventions then cannot, in nature, be a subject of property." - Letter to Isaac McPherson Monticello , August 13, 1813 4 Business 2.0 July 2003 "Can Sir Howard Save the Music Biz" 5http://www.phuber.com/huber/geo1/geo1.html 6 Attributed to John Gilmore 7Geodesic n. "The shortest line between two points on any mathematically defined surface." The term geodesic network is not meant to describe the shortest physical path of data over physical wires but a description of the topological properties of the information flow. In other words, I may not have physical network connections to the people in my email address book or the contacts on my ICQ list but I act like a network node when sending information to them. See also Bob Hettinga "What's a Geodesic Economy?" 8ClearPlay is a company trying to do this within the confines of the current copyright laws. It offers filters for popular Hollywood movies removing objectionable material. They do this slyly without actually making a copy of the original movie but relying on a player that skips, pauses and bleeps out objectionable material. Obviously Clearpay's definition of objectionable may be different than someone else's but then someone else could capitalize on that and create a new product to serve a slightly different market. Jason is President of EOE Inc, which has been in the adult Internet industry since 1997 creating several award winning sites such as boobscan.com and puritytest.com. EOE Inc now runs www.imageauction.com , which employs a revolutionary patent pending auction system allowing content producers and value add resellers to maximize their revenue in the new geodesic marketspace. Current projects in the works include a service for 2257.com to help custodians keep offsite backups of their records required under Title 18 Sec. 2257. Jason can be reached at support(a)imageauction.com . PREVIOUS PAGE NEXT PAGE Do you have questions or comments about this article? Post your comments here About Our Sponsors Search Site Map About Us Contact Us Link To Us Privacy Policy Work at YNOT Gold Member of RSAC . Labelled with ICRA . A Site Against Child Porn . Hosted by SexTracker . Copyright ) 2003 by YNOT Network, LP. All rights reserved. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

SCO to argue General Public Licence invalid (fwd)
by Jim Choate 14 Aug '03

14 Aug '03

I like the ed's comments at the end. http://www.theinquirer.net/?article=11031 -- ____________________________________________________________________ We are all interested in the future for that is where you and I are going to spend the rest of our lives. Criswell, "Plan 9 from Outer Space" ravage(a)ssz.com jchoate(a)open-forge.org www.ssz.com www.open-forge.org --------------------------------------------------------------------

2 1

Inferno: Fwd: [nycwireless] Wifi-Hog - Info / Talk (fwd)
by Jim Choate 14 Aug '03

14 Aug '03

---------- Forwarded message ---------- Date: Thu, 14 Aug 2003 09:50:41 -0500 Subject: Inferno: Fwd: [nycwireless] Wifi-Hog - Info / Talk Interesting... ----- Forwarded message from Jonah Brucker-Cohen <jonah(a)coin-operated.com> -----

1 0