- cypherpunks-legacy - lists.cpunks.org

World record in password checking
by jet＠nas.nasa.gov 18 Aug '93

18 Aug '93

[forwarded for your enjoyment --eric] A NEW WORLD RECORD IN PASSWORD CHECKING HAS BEEN SET: ----------------------------------------------------- Roch Bourbonnais, a Thinking Machines Corporation engineer, has ported and optimized the CM/2 port of the UFC-crypt to a CM/5 system. The UFC-crypt (Ultra Fast Crypt) implementation on the CM/2 Connection Machine (parallel computer) is a UNIX password checking routine (crypt()) ported by Michael Glad at UNI-C. The port, that is written in CM-fortran, utilizes the CM/5 vector units and is partly programmed in cdpeac (vector unit assembly language). The package achieves 1560 encryptions/second/vector unit. This scales to 6,4 million encryptions per second on a large 1024 node machine. 800,000 - - - - - small 128 - - With this impressive performance, all combinations of 6 letters can be tried in less than an hour and all combinations of 6 lower-case letters can be tried in less than one minute. Congratulations, Jorgen Bo Madsen +-----------------------------------------------------------------------+ ! Jorgen Bo Madsen, Security Consultant ! ! UNI-C Lyngby, Danish Computing Centre for Research and Education ! ! DTH, Building 305, DK - 2800 Lyngby, ! ! Phone : +45-45-938355 ! ! Telefax: +45-45-930220 ! ! E-Mail : Jorgen.Bo.Madsen(a)uni-c.dk ! +-----------------------------------------------------------------------+ ------- End of forwarded message -------

1 0

mailing list <-> newsgroup ?
by Timothy Newsham 18 Aug '93

18 Aug '93

Hi, How many people are subscribed to this list right now? How many people have read it before and dropped off only due to bandwidth problems? This list easily generates more traffic than any of the newsgroups I read. If the number of people on this list is big why dont we set it up as a newsgroup (gatewayed to a list so that people without newsfeeds can still read it) ? Probably alot more people would read and participate. Newsgroups have the advantage that you can read them when you have the time and let them go when you dont, without hassles of joining and unjoining. The audience would probably be bigger as as well. Any counter arguments? Tim N.

3 2

Violent overthrow?
by plmoses＠unix.cc.emory.edu 18 Aug '93

18 Aug '93

This may be a semantic point, but it should be made.... David Koontz sez: "Avoiding the appearance of endorsing the violent overthrow of government is prudent policy..." Um...I think I know what you mean, but isn't it better to just say outright that violence really is not the way to reform government at all, save in truly historical, exceptional cases (American Revolution, French Revolution...) I am no code cruncher but it seems to me that the relevant "precedents" for a "Cypherpunk Revolution" would be the Russian democracy movement, where the power of ideas toppled the oppressive regime with a minimum of bloodshed, while the world watched.... The way Mr Koontz puts it is awfully ambiguous and open to be read as a *very* cynical and disingenuous kind of "waffle". Point: Violence is abhorrent to civilized conduct, undermines social cohesion, and is generally justifiable only as a defensive measure. Arent we concerned with the state of affairs today precisely because individuals no longer have a sense of these kind of boundaries? So it is important to emphasis that violence is part of the problem, and not to be sloppy and suggest (inferentially) that it could be part of the solution. IMHO.

3 3

No Subject
by koontzd＠lrcs.loral.com 18 Aug '93

18 Aug '93

>From: remailer(a)merde.dis.org (remailer bogus account) >My only hope, personally, is to fight vigorously (perhaps literally, in ^^^^^^^^^^^^^^^^^ >due course) for the maintenance of the Bill of Rights as protection >against the tyranny of _both_ the mob and the State. I personally see >the prospect of an electronic so-called democracy to be terrifying, a >mechanism whose technical subversion would be trivial for the State's >assets, say the NSA. Simple manipulation by propaganda would be even >easier. Read Orwell. Read Zamyatin. >Cypherpunks are providing the basis for long-range, (relatively) secure >communication between those activists and thinkers who may have the >power to bring down the State and restore the individual autonomy this >nation was originally devised to foster. As I understand it the Libertarian Party qualifies membership to exclude any endorsement of violent overthrow of government. While some portion of those affected by this policy may well have gone underground, I don't believe that cypherpunks as a committee of the whole are willing or ready to do so. Then again as someone pointed out yesterday, cypherpunks aren't just libertarians and/or may be unwilling to accept this sentiment. Some portion, however large of those receiving this mailing list, may not agree with this political leaning and may not consider it germaine to their participation. Avoiding the appearance of endorsing the violent overthrow of government is prudent policy for any organization.

2 1

No Subject
by Johan Helsingius 18 Aug '93

18 Aug '93

anonymous(a)extropia.wimsey.com writes: > Uu> Actually, Julf's solution isn't too bad. > > It is if your gate won't process the password header line. How many times do I have to repeat that anon.penet.fi can pick up the X-Anon lines from the message body, as long as they are the first non-empty message lines? > Uu> Maybe Julf needs to bite the bullet and start using PGP. > > That would be nice. I particularly enjoy using the PGPed remailer at > remail(a)extropia.wimsey.com, which is not only private, but reliable and > damn near grunge-proof. Unfortunately it has the disadvantage that I can't reply to your messages. Yes, I need to bite the bullet. I want to support PGP. But I have to pay my rent, too... Julf

1 0

ADICO: Privacy-Friendly Anon Auditing
by Hastings＠courier8.aero.org 18 Aug '93

18 Aug '93

Niels Ferguson sent some e-mail to me, which I managed to delete because I'm using this new MS-Mail package. But I STILL prefer it to QuickMail, mainly because it doesn't cause the system to freeze up with a stupid TSR notifier. It also is designed for Windows. But anyway ... To the question Hal Finney raised about Eric Hughes protocols, Niels also continues to have the same worries. He gave an example of a bogus depositor being compensated for interest for parking $1 million, and also thought the amount of data needed by Eric's protocol was excessive. It seems the fraud works if a depositor can be left out of the accounting. A way to insure that anyone with a signed bank statement is included might be to certify each statement by an auditor registered with the Department of Anarchy (some private association). A similar approach for digital cash might be that when you hand over an amount of gold (or whatever) to a "Notary Private," you get a receipt you can verify from an Association. Kent - <jkhastings(a)aol.com>

1 0

Physical to digital cash,
by Duncan Frissell 18 Aug '93

18 Aug '93

To: cypherpunks(a)toad.com N>Pretty exhausting for the typical service industry. Most customers N>will pick the service that's easier to sign up for, They used to think this about PCs in general but we now have a hard core of fairly sophisticated PC users that support sophisticated software/hardware. Crypto will be a niche market for a while but there are enough "motivated buyers" out there to support a large market. These buyers would include the retail pharmacutical trade, deadbeat dads, wagering, the 10 million tax non-filers and the other 10 million filers who practice tax evasion, upscale illegal aliens, the politically motivated, a portion of the financial services industry. Obviously, people won't buy until they see a "must have" application. What will be the "Visicalc" of digital anarchy? Offshore debit VISA cards linked to anonymous accounts? If I knew of an institution offering same, I could "sell" thousands of such accounts tomorrow even with an unfriendly user interface. N>Also, the issue of which parts of these schemes are *legal* N>is critical, but being completely overlooked. Any lawyers N>out there with comments on this? As long as the phyical part of the institution is in a tax haven jurisdiction, digital cash should be legal. Most haven jurisdictions allow bank accounts in the names of businesses owned by the holders of bearer shares. Those haven jurisdictions that are in what is now the European Free Trade Area (or whatever they're calling it this month) such as Austria, Gibraltar, The Channel Islands, and Isle of Man may lose their ability to offer anonymous accounts as EEC rules tighten but there are many other jurisdictions. Also, not enough work has been done in the area of non-anonymous anonymous accounts. If an account is in the name of an institution (company, etc) beneficial ownership may be just as difficult to determine as with a genuine anonymous account. A haven-based cutout which holds accounts in ordinary jurisdictions can do many usefull things. The proliferation of non-bank banks like money market funds also provide other opportunities. "No Truce with Kings" Duncan Frissell Teaching individuals the technology of liberty since 1969 - Frissell & Associates Privacy Consulting. --- WinQwk 2.0b#0

1 0

The Zen of Anonymity
by L. Detweiler 18 Aug '93

18 Aug '93

Given: Some graffiti is on the wall. Question: who is `responsible' or `liable' for graffiti? the `vandal' (or `artist')? the owner of the wall? society? What if no means exists whatsoever to identify the originator? or the owner of the wall actually *encourages* people to use it for whatever purpose? And socially beneficial uses ensue? Given: something `illegal' in country A but not in B has been written on a piece of paper. The paper now resides precisely between, exactly on the border, of A and B. Question: Who is the criminal? What is the crime? the writer for treason? the paper transporter for violating export laws? the border guards for not shooting? Again, what if the writer is unidentifiable, the transportation automatic, guarding impossible? What if there is actually a great deal of utility in the transportation of paper-scrawl across borders, for everyone involved? (Note that answers like `it behooves us all to ...prevent the spread of graffiti' or `...prevent the spread of illegal papers to borders' would be worthy of the NSA but pathetically beg the questions.) * * * IMHO, anonymous postings and email have the same legal status of graffiti or the paper on the border. No one is `responsible' or `liable' for the content of graffiti, no laws apply to the paper. Precautions can be taken to limit `offensive' or `illegal' graffiti (whatever that is!) and contrain the transport of writing on paper, but nothing can be done to completely eradicate either, save erecting the most totalitarian system the world has ever seen (a phrase coined by T.C. May, my respect). Perhaps we should have licensing laws for graffiti `vandals' or paper carriers? registers next to all the walls and streets so they can sign in? `Scrawling implement' or `communicable media' bans? Or panning cameras mounted in every 10 foot square area of space in the world? Human identification tags and tracking systems? We have this thing called `cyberspace' that has nothing to do with the laws of any country and comprises nothing but innocuous electrical or light streams coursing through wires and fibers, and trying to impose some system of `accountability' or `responsibility' or `liability' on every last element is an archaic, horrifying, but thankfully obsolete and conceptually impossible artifact from the `dark' ages. Yes, people can choose to become agitated by the *perceived* contents, but people can also choose to starve for a cause. There is no limit to the persecutions invented by the imagination of humanity. Offense is in the lie of the beholder. Libel, slander, sedition, thought crimes: what do these words mean? Whatever meaning they once had is completely dissolved upon the advent of true anonymity. Perhaps if others quiet their minds, they too will hear the sound of one hand clapping.

5 4

Re: The Zen of Anonymity
by smb＠research.att.com 18 Aug '93

18 Aug '93

>Given: Some graffiti is on the wall. >Question: who is `responsible' or `liable' for graffiti? This question already has a known answer. The author of the words is the one that is liable for them. No other parties are liable unless they had prior knowledge; this would make them conspirators. However, under certain circumstances the owner of a facility can be held liable for not removing libelous graffiti. I picked up a paper from the net some time back (/telecom-archives/sysops.libel.liability on ftp.lcs.mit.edu, ``Defamation Liability of Computerized BBS Operators & Problems of Proof'', by John R. Kahn) which discusses that point. The judgement is context-dependent -- one court noted that different standards apply to a New York subway car [sic] than to the interior of a manufacturing plant -- but the general rule is that if you know of some defamatory graffiti on your property, you're obligated to remove it.

1 0

Re: Private legal tender
by wcs＠anchor.ho.att.com 18 Aug '93

18 Aug '93

Writing anonymously, Sugarplum suggests: > Customer sends cash or money order to digital bank, along with a floppy > with an anonymous email address (via a remailer) and a public key. > The bank emails the customer encrypted digital cash corresponding to the > amount he sent in (minus any service charges). The problem with this is that the bank or clerks aren't accountable - they can pocket the snail-cash and not send the digicash "Oh, darn, the floppy's blank" or "Oh, darn, the email bounced" "Guess there's nothing I can do, what a shame" just as they could if you snailmailed cash to a conventional account. If you're sending non-accountable-by-sender cash, you need some way to get a receipt. If you're mailing a check or digicash, you have a way to repudiate the transaction or at least make a claim against them, or if you can go in to the bank in person for the transactions with cash. Bill # Bill Stewart wcs(a)anchor.ho.att.com +1-908-949-0705 Fax-4876 # AT&T Bell Labs, Room 4M-312, Crawfords Corner Rd, Holmdel, NJ 07733-3030

1 0