- cypherpunks-legacy - lists.cpunks.org

Re: One BBScon presence question
by ssteele＠eff.org 17 Aug '93

17 Aug '93

Hi 'punks! Steve writes: >lift. However, while we're on the subject, I'm wondering if any >arrangements have been made to distribute anti-Clipper material at >the con. I'd be happy to distribute flyers or what-have-you, but >they'd have to reach the show by other means; I'm not willing to >carry such seditious material across the US/Canada border. > > I hope that EFF will have a presence at the show* as they did last >year, and can sow some further seeds of discontent among the >non-Internet online world, many parts of which don't seem aware of >the Clipper debacle. Any comments from the EFF folks hereabouts? EFF will be well-represented at ONE BBSCon. Mike Godwin, Cliff Figallo, Sarah Simpson (our new membership coordinator) and I will be there speaking and coordinating an EFF booth, which will boast all sorts of documentation, floppies, and, yes, you asked for it, t-shirts (new design)! We will certainly have some Clipper stuff. >* I had a great time arguing with Shari Steele and accusing her of >"dancing with the Devil" w/ reference to backing then-Senator Gore's >Data Superhighway proposal. Very libertarially-incorrect position to >take, Shari. :-) Yeah, yeah, I know. It was really strange for me to be looked at as supporting the government over individuals! Maybe we can continue the debate this year. See you in a week! :) Shari ****************************************************************************** Shari Steele Director of Legal Services Electronic Frontier Foundation 1001 G Street, NW Suite 950 East Washington, DC 20001 202/347-5400 (voice), 202/393-5509 (fax) ssteele(a)eff.org

1 0

Re: Tax Evasion and SASE.
by pat＠tstc.edu 17 Aug '93

17 Aug '93

> The example given (someone soliciting an act of questionable legality) > is a perfect application for the SASE remailer that I've been > developing. I presented it at a phys-meeting a few months back, and > have been working on coding it sporadically since then. I was thinking about this just yesterday... > The idea is that you have an address block that encodes the > information on how to get a message to you. This is like a self > addressed envelope. The envelope can specify multiple hops through > remailers, but is encrypted in layers so only the next hop is revealed > at each remailer. However, rather than rewrite an entire mailer system from scratch, might I propose that we ad an extra command to the cypherpunks remailers that would allow a person to tell the remailer NOT to throw away the the header information. This would allow a person to create an encrypted block to put at the top of their message telling the remailer to pass all header information through to the recipient. Example: :: Remailer-Command: Header-Intact :: Request-Remailing-To: pat(a)tstc.edu The user encrypts this whole block and tells the remote user to put this at the header of thier reply message. Example: == place at the top of your message text and remove this line == :: Encrypted: PGP -----BEGIN PGP MESSAGE----- Version: 2.2 hEwCKlkQ745WINUBAf0f5D1bOXX333w08UAU5jVP5WeDblGnlD7Cwx9Q0fxwZcG6 sm+8f1S4zU8AIn0j6Dfmt8i7+BOcdFfjXmscU+oXpgAAAFse+dms+6BMBntqJh56 q4DBpHq6aMTJH1AT0nolOOnAOTxtPmSpolkKFYyXVbwKk0W8q9PpmX0PDBeodoGY hi2BtkXRMTW9bzbzRLE6Q0YoOsWVOxLKx8FM2M/T =ciKz -----END PGP MESSAGE----- == place message text below this line and remove this line == In effect, a self-addressed envelope. Half of the functionality is available in the remailers currently. -- "I'm not being irrational, I just know to much." - Tim Allen -- Pat Hykkonen, N5NPL Texas State Technical College at Waco Internet: {pat,postmaster,root}(a)tstc.edu Instructional Network Services Packet: N5NPL(a)WD5KAL.#CENTX.TX.USA.NA 3801 Campus Dr. Waco, Tx 76705 Public keys available! ** 1984 + 10 ** V:(817) 867-4830 F:(817) 799-2843

1 0

Re: encrypting virus (KOH)
by s.summers1＠genie.geis.com 17 Aug '93

17 Aug '93

>> Now, if a smart compressor/encryptor wrote itself along with the files >> it was treating, and then wrote a nice README file which explained that >> files on the floppy were compressed/encrypted, would be automatically >> decompressed/decrypted, and that the treatment could, if you wished, be >> performed on your hard drives and/or other floppies by making a backup >> and then executing the following command, that would be perfectly fine. >3) the program does not do this, much like Stacker does not create >README files which explain that your disks are now compressed. This As a matter of fact, when you Stac a floppy, a README file *IS* generated, and the stacker.com tsr kindly gives you the 1-800 number you can call to order stacker if you received the disk from someone and do not have stacker now, but would like to have such a nifty utility on your hard drive... Sean

2 1

Beepers can also be used to track you down!
by gtoal＠an-teallach.com 17 Aug '93

17 Aug '93

In article <9308131915.AA12203(a)nebula.lrcs.loral.com> koontzd(a)lrcs.loral.com writes: > As far as local detection, I understand that in Britain vans go around > with sniffing gear looking for IF freqs to find unlicensed TVs. Errr... yes, and they have about 4 vans for the whole country - the rest are dummies, accompanied by high-profile advertising campaigns to scare people into paying for a licence before they're caught. G (Not folklore; fact - and I saw one of the real vans at the BBC Research Centre at Kingswood Warren when I worked there on a contract once. *Very* expensive equipment.) === Personal mail to gtoal(a)gtoal.com (I read it in the evenings) Business mail to gtoal(a)an-teallach.com (Be careful with the spelling!) Faxes to An Teallach Limited: +44 31 662 4678 Voice: +44 31 668 1550 x212

1 0

DigiCoupons & DigiCash
by Stanton McCandlish 17 Aug '93

17 Aug '93

* Digital coupons: S&H greenstamps for online services (netcom/Well/Compuserve net connection services, AMIX, NEXIS/LEXIS, Dow Jones, commercial MUDs, metered e-mail, anon services, network and computing resources, reputation ratings, etc.) Greenstamps are like frequent-flyer miles, you accumulate them with heavy patronage of some service. But greenstamps can be used to purchase a wide variety of services, not just more of the same service. Service providers and coupon vendor(s) work out arrangements for awarding and honoring greenstamps. Implemented with Chaum-style protocol to prevent forgery and assure privacy. * Digital cash: accumulating credits/debits for use of on-line services (including travel services, concert tickets, etc. purchased on-line), eventually paid for by some "real" currency: FRNs, yen, etc. Implemented with Chaum-style protocol to prevent forgery and assure privacy. * On-line markets: Internet video poker, election outcome markets, satellite track betting, etc. Investments[1] can be made & paid out by greenstamps, natch. On-line advertising. Count me in. You code-grinders come up with some way to do this stuff, and I'll be happy to implement what of it I can on NitV-BBS. Coupons [the term greenstamps is probably trademarked] could work: those of you that wish to make use of the BBS could upload (as a file or directly into the message base) these coupons and get time/download credit on the board for them, provided I have some way to spend them for something useful to me. Eventually if I can get IndraNetters into the idea, this could expand into a user-to-user thing too, perhaps even in online door games (for those not hip to BBS jargon, doors are programs run from the BBS, such as games, doors, credit-card ordering applications for commercial stuff, etc etc.) I can picture a high-stakes version of Barren Realms Elite, where the "credits" in the game are real DigiCoupons that can be spent on other boards, or at various Internetted sites, etc etc. I don't actually see much use in separating DigiCash and DigiCoupons. They both would appear to me to be almost identical in form and funtion. Whoever works on this sort of thing will hopefully work with Chaum to ensure that our DigiCash is "compatible" as it were. No sense getting such a system going only to have it eclipsed later, and all our DigiCash become worthless. * Securely private BBS's I'll pass on that one for now, my board's multi-user, open, and networked; going the crypto route would reduce my user base to about 3 people, including me! Anyway, those of you not aware of it, NitV-BBS is still stocking a certain fave crypto program of ours, legal threats be damned. I'd also encrouge any of you running BBSs or participating in them to contact mine and get in on IndraNet. Just due to a few Extropians and Cypherpunks doing this, the net has grown quite a bit, and is taking on a decidedly libertarian flavour, with many spirited debates. Sadly the CRYPTO conference is very slow, so we need more participants. More info on the net: IndraNet was founded by me, and oddly enough, a staunch republican that enjoyed arguing with me. I guess we just wanted our own entire net to argue in. He dropped out of it due to some personal things to deal with, leaving a net of one. SO, I promoted it, and within just a few month it was not only national but international, now with nodes in 4 countries and about 6 or so states. There are over 30 conferences [UseNetters will chuckle, but for a BBS-based OtherNet this is not bad; most BBSs don't have more than 30 conferences total, many much less; there's just not enough traffic on most boards to support that much chatter.] Possibly uniquely among BBS networks, there are: NO POLICY DOCS (rules) NO MODERATORS or COORDINATORS (dictators) NO CENSORSHIP It's a working, growing anarchy. There have been some problems, namely nodes that are "family" BBSs getting upset at the occasional swearing, but oh well, not much to be done for it. But all in all it appears to be working. Currently we support QWK and Fido-tech mail formats, though those who are also using some other format, such as MegaMail, PostLink, or PCRelay are encouraged to make IndraNet available via those formats as well. Some time in the not-too-distant-future, I hope to get NitV hooked up to Internet/UseNet via UUCP, and make IndraNet conferences available as Internet mailing lists and "virtual local newgroups" (i.e. set up just like local groups, but actually available to any node intending to participate, but certainly not as a public alt.whatever series of newsgroups; you know what I mean.) To get into this, and to get more info, contact me by any means suggested in the .sig below. PS NOTE: I am not currently receiving the list, just for the time being until I reconfigure elm to sort it into a separate folder, so any replies should go directly to me by some means or other. I'll be back on the list soon enough I guess. -- Stanton McCandlish * Space Migration * Networking * ChaOrder * NO GOV'T. * anton(a)hydra.unm.edu * Intelligence Increase * Nano * Crypto * NO RELIGION * FidoNet: 1:301/2 * Life Extension * Ethics * VR * Now! * NO MORE LIES! * Noise in the Void BBS * +1-505-246-8515 (24hr, 1200-14400, v32bis, N-8-1) *

1 0

[brown@psi.com: PSI, MORNING STAR TEAM UP TO PROVIDE SECURE INTERNET CONNECTIONS]
by andrew m. boardman 17 Aug '93

17 Aug '93

Haven't seen news of this here. Apologies if my mail is lagged. FYI. Return-Path: <brown(a)psi.com> Date: Mon, 16 Aug 93 16:02:09 EDT From: brown(a)psi.com (Kimberly Brown) Subject: PSI, MORNING STAR TEAM UP TO PROVIDE SECURE INTERNET CONNECTIONS FOR IMMEDIATE RELEASE PSI, MORNING STAR TEAM UP TO PROVIDE SECURE INTERNET CONNECTIONS HERNDON, VA., August 16, 1993 -- Performance Systems International, Inc. (PSI), the largest provider of corporate Internet access, today announced a service using an encryption technique that promises unparalleled security for data transmissions at an affordable cost. Combining forces with Morning Star Technologies of Columbus, Ohio, and its brand new Morning Star Express Router which includes MST's unique DES encryption facility, PSI has developed a service called SecureStream. Utilizing an Express Router at both ends of a data link, the service will encrypt data from transmission to receipt. It can be de-encrypted only by a special key possessed by the SecureStream user. PSI will offer SecureStream as an option to users of its InterFrame Standard internetwork service, the company's premier product for Frame Relay access to the Internet. The cost will be $400 per month, according to Martin Schoffstall, PSI's vice president and chief technical officer. "This price is a fraction of the cost of competing Internet service providers," said Kimberly Brown, manager of marketing communications for PSI. "By offering high-level encryption at reasonable cost, we feel SecureStream will provide medium-sized companies security in their Internet transmissions that was previously beyond their reach," Schoffstall said. He added that the product will be demonstrated at next week's INTEROP West in San Francisco. "We are pleased to offer our Express Router in conjunction with PSI's SecureStream service," said K. James Laskey, Morning Star's director of sales. "The Express Router is a high-performance, cost-effective solution for the most demanding TCP/IP networking applications. Providing encryption in the router meets the need of many Internet users to protect sensitive transmissions from interception." As a reseller, PSI offers the Express Router for $1,995, the company said. Laskey and Schoffstall noted that the Express Router is based on Morning Star's PPP (Point-to-Point Protocol) software, designed as a replacement for the Serial Line IP (SLIP) protocol. It has been adopted as an Internet standard, correcting many of the deficiencies in SLIP, including address negotiation, link level error correction and synchronous support for high speed communications. In addition, it supports Frame Relay and the Internet standard RFC-1294. PSI offers a variety of services and products to provide corporate and individual computer users with access to the Internet. In addition to leased-line services, it offers a number of dial-up services and a wireless e-mail service over the RAM Mobile Data network. # # # # All brands, products and service names mentioned are trademarks or registered service marks of their respective owners. __________________ For further information, contact Kimberly Brown at PSI at 703.904.7187 (phone), 703.904.7195 (fax) or info(a)psi.com (e-mail); K. James Laskey at Morning Star Technologies at 614.451.1883 (phone), 614.459.5054 (fax) or sales(a)morningstar.com (e-mail); or Michael Vernetti at Kaufman Public Relations at 202.333.0700 (phone), 202.337.0449 (fax) or vernetti(a)psilink.com (e-mail).

1 0

Smaller PGP source archives
by XXCLARK＠indst.indstate.edu 17 Aug '93

17 Aug '93

Anyone know of an ftp site with the latest PGP source in two smaller files, rather than one large one? No Unix account and insufficient disk space on this end at the moment. Any help appreciated.

1 0

PROTOCOL: Encrypted Open Books
by hfinney＠shell.portal.com 17 Aug '93

17 Aug '93

Eric had some good ideas in his protocol for verifying anonymous bank deposits. One thing wasn't clear to me: what if the bank creates a fake account? It would seem that the bank could explain away a sudden decrease in its asset reserves (money that the bank officers actually spent on mistresses and drugs) by creating a fake anonymous account which made a large with- drawal. The books would still balance. It wasn't clear to me in Eric's protocol whether it would be expected that the identity of accounts which made such withdrawals would be revealed. Doing so would seem to go against the purpose of the digital bank. But without that ability it would seem that fake accounts could cover up any amount of mismanagement. Hal

1 0

CRYPTO'93, anyone here going?
by miron＠extropia.wimsey.com 17 Aug '93

17 Aug '93

I will be attending CRYPTO. I was wondering if any cypherpunks will attending this conference. -- Miron Cuperman <miron(a)extropia.wimsey.com> | NeXTmail/Mime ok Unix/C++/DSP, consulting/contracting | Public key avail AMIX: MCuperman | Laissez faire, laissez passer. Le monde va de lui meme.

3 2

FBI Credit Search bill update (CPSR)
by L. Detweiler 17 Aug '93

17 Aug '93

>From the CPSR newsletter v.6 #6 Aug 12, 93 ===cut=here=== [a 2] FBI Seeks Power for Credit Search Without Warrant In early July, the Senate Intelligence Committee approved a provision that allows for FBI access to credit reports using only a letter instead of a judicial warrant in cases that they say involved national security. There is concern that this will be subject to abuse and that the necessity has not been proven. A national security letter gives the FBI the authority to obtain records without judicial approval and without providing notice to the individual that his or her records have been obtained by the Bureau. Similar FBI proposals were rejected in previous years after Congressional leaders expressed concern over the civil liberties issues raised. Although the current draft proposal is more comprehensive than those circulated in previous years, the changes and additions do not alter significantly the central character of the proposal. The Administration's 1993 proposal includes explicit limits to dissemination of obtained information within the government, penalties for violations including punitive damages, and reporting requirements. These provisions are positive changes from the legislation put forward in previous years, but they do not save the proposal from its intrinsic flaws.

1 0