- cypherpunks-legacy - lists.cpunks.org

Re: tor and p2p
by Mike Perry 06 Jul '18

06 Jul '18

Thus spake Robert Hogan (robert(a)roberthogan.net) > > There's lots of work left before Tor is in a position for most users > > to be servers. > > > > http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#EverybodyAServer > > > > Hope that helps, > > --Roger > > My hosting provider blackholed my mail for a 24 hour period so I've had to > read all the replies on the archive. > > Thanks for the links and input, though I did get one or two responses which > misinterpreted me as suggesting the current tor network be used for anon p2p. > Perish the thought! Yeah, I'm going to say that I2P is much better suited to this than Tor, especially when you're talking about creating a new network anyway. For as much bashing as poor jrandom takes on this list and the wiki, I think he deserves a bit of praise for the fabulous job of software engineering he has done with I2P. The code is clean, flexible, and elegant bordering on sexy. It also exports Java Socket compatible interfaces that Java apps can readily use to be ported over (and there are python and I think C bindings as well). This has enabled the pretty straight-forward port of the Phex gnutella client, the Azureus plugin, and a native I2P bittorrent client I2PSnark. Not to mention the vast bulk of I2P performance tuning and development effort is focused on making their hidden service-like features work well, where as Tor only devotes minimal effort to this component, focusing instead on relaying to the external Internet. Plus I2P has configurable path lengths built into the GUI allowing you to sacrifice anonymity in certain applications to boost performance (either as a client or server). However, as was pointed out by enigma, any P2P mix network is going to suffer a lot more at the lack of residential upstream than normal P2P. In fact, if you use the standard pathlen of 3, any hidden service-style system is going to only have 1/6 of the total bandwidth a normal P2P system would have :( (I fear that this residential limit will likely continue to the point where the ratio is only sufficient to get ACKS back for the downstream channel... Doesn't anyone ever have to email/upload large files to work or email vids to friends? Maybe there will eventually be demand for this not to take aeons...) > One final dumb question. The torify-ing wiki says: > > "BitTorrent is already using a mechanism similiar to Tor to communicate with > other peers. " > > Is this referring to DHT? Is it really that similar? Yes, this is absolutely correct... In the degenerate case where there is only 1 tor network per torrent, and you were sufficiently inebriated enough to handwave cells into the same abstract concept as file segments, they are the same! Oh, and also sometimes bittorrent encrypts traffic. Plus they both use the Internets to communicate between peers! So really there is no difference. (Who wrote this garbage? ;) -- Mike Perry Mad Computer Scientist fscked.org evil labs ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[drone-list] Defense Science Board urges greater autonomy for unmanned systems
by Gregory Foster 06 Jul '18

06 Jul '18

Secrecy News (Sep 6) - "Greater Autonomy for Unmanned Military Systems Urged" (cited in full) [1]http://www.fas.org/blog/secrecy/2012/09/dsb_autonomy.html The Department of Defense should focus on increasing the autonomy of drones and other unmanned military systems, a new report from the Defense Science Board said. DoD should "more aggressively use autonomy in military missions," the Board report said, because currently "autonomy technology is being underutilized." See [2]"The Role of Autonomy in DoD Systems," Defense Science Board, dated July 2012 and released last week. "Autonomy" in this context does not mean "computers making independent decisions and taking uncontrolled action." The Board is not calling for the immediate development of [3]Skynet at this time. Rather, autonomy refers to the automation of a particular function within programmed limits. "It should be made clear that all autonomous systems are supervised by human operators at some level," the [4]report stressed. Increased autonomy for unmanned military systems "can enable humans to delegate those tasks that are more effectively done by computer... thus freeing humans to focus on more complex decision making." "However, the true value of these systems is not to provide a direct human replacement, but rather to extend and complement human capability by providing potentially unlimited persistent capabilities, reducing human exposure to life threatening tasks, and with proper design, reducing the high cognitive load currently placed on operators/supervisors." But all of that is easier said than done. "Current designs of autonomous systems, and current design methods for increasing autonomy, can create brittle platforms" that are subject to irreversible error. There are also "new failure paths associated with more autonomous platforms, which has been seen in friendly fire fatalities.... This brittleness, which is resident in many current designs, has severely retarded the potential benefits that could be obtained by using advances in autonomy." The Defense Science Board [5]report discusses the institutional challenges confronting a move toward increasing autonomy, including the obstacles posed by proprietary software. It offers an extended discussion of conflict scenarios in which the enemy employs its own autonomous systems against U.S. forces. The authors describe China's "alarming" investment in unmanned systems, and encourage particular attention to the relatively neglected topic of the vulnerability of unmanned systems. The [6]report includes some intriguing citations, such as a volume on [7]"Governing Lethal Behavior in Autonomous Robots," and presents numerous incidental observations of interest. For example: "Big data has evolved as a major problem at the National Geospatial Intelligence Agency (NGA). Over 25 million minutes of full motion video are stored at NGA." But new sensors will produce "exponentially more data" than full motion video, and will overwhelm current analytical capabilities. "Today nineteen analysts are required per UAV orbit [i.e. per 24 hour operational cycle]. With the advent of Gorgon Stare, ARGUS, and other Broad Area Sensors, up to 2,000 analysts will be required per orbit." The government "can't hire enough analysts or buy enough equipment to close these gaps." HT [8]@saftergood, gf -- Gregory Foster || [9]gfoster(a)entersection.org @gregoryfoster <> [10]http://entersection.com/ References 1. http://www.fas.org/blog/secrecy/2012/09/dsb_autonomy.html 2. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 3. http://en.wikipedia.org/wiki/Skynet_%28Terminator%29 4. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 5. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 6. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 7. http://books.google.com/books?id=rIsJ_QXDdEUC&printsec=frontcover#v=onepage… 8. http://twitter.com/saftergood 9. mailto:gfoster@entersection.org 10. http://entersection.com/ _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Obituary - Gary Howland - 197? - 2002
by Ian Grigg 06 Jul '18

06 Jul '18

Obituary - Gary Howland - 197? - 2002 I first met Gary in 1990. I was the team leader for a big telecoms project and he was one of the 1000 CVs that crossed my desk that summer. Of those 1000, I interviewed about 50, and we ended up with a technical team of 20. Most were contractors from the huge pool of British labour, but from my jaundiced view, only 4 on our team rated as contractors. Gary was one of those 4. He was only just out of college, the polytechnic at Brighton. But his CV included all that splattering of Unix acronyms that made you feel that here was a kindred spirit, one who learnt in spite of the academic environment. We shared that time together, the vast tense year at ICL where we all made too much money and lived like there was no impending recession. Hard coding, hard driving; Gary in his girlfriend's 924 was as fast as I was, at track day with the Porsche club, in my 928. He was fast with the code, too, when a fire could be lighted under him. He once replaced a 3 month project in 3 days. For the most part he was slow and careful, thoughtful, complete and perenially late. But when a deadline hit, he could fly. He was the only person I could trust the sys admin role to, and he was the lowest paid contractor in the building. Fast forward to 1995. I'd had my Spanish adventure, Gary had done his contracting stint in Germany, where he met his long term girlfriend, Inka. He'd hooked up with a new outfit in Amsterdam, some crazy guys doing money on the net, called DigiCash. Gary fed me the papers and fed me the story. Using cryptography, David Chaum had invented a way to solve the privacy problem so that coins could be simulated on the net. As I sat in finance classes in London, I realised that bonds were just a more broad definition of money. We agreed that there was more to this than the guys at DigiCash had thought about, so we agreed to try out our hand at the finance area. Gary was one of the first true financial cryptographers. He intuitively knew that DigiCash would fail. Not because of their software, which was good, but because their business was misdirected. He also knew that the bearer idea wouldn't survive. Not because it wasn't beautiful - it was the most extraordinary discovery in the last decade - but because it didn't solve the bank robbery problem. He was a superlative cryptoplumber, but he understood intimately how the real action was in determining the business requirements without being blinded by the science. Our early plans, hatched over email, assumed we could license DigiCash's software, but that was scotched pretty quickly. So, Gary took on the task of designing a payment system for our venture. It wasn't easy. We had to address the bank robbery problem, and we had to retain the privacy. Those goals were eventually to coalesce as contradictions, and the way he walked the line became known as SOX. I believe SOX is Gary's legacy to the world. It is capabilities for the Internet. It is strong crypto, and it is private. It is extensible, it is flexible, and reliable. I mean, reliable in a deterministic way: we can guarantee correct results over SOX transactions that can only be imagined in other protocols. It technically dominated the bearer model, in a way that only a few could grasp. It was also a computer science solution, a value that only came to be fully appreciated when we found how trivial it was to add David Chaum's bearer tokens to SOX. Gary, Mike and I, built the SOX protocol into Ricardo, a complete payment system that operated as the settlement and transfer layers for financial trading. We ran bonds, trading them at night so that all our bond holders around the world had a chance to access the market. At 9.15 pm every night, Gary's 100MHz desktop blared out the theme song for the James Bond movies, to announce the start of trading; his workstation was also our one and only Issuance server, as well as the Exchange. While they were at it, they wrote Cryptix. Gary did the Perl code for all our needs, and supervised Mike on the first version of the Java native interfaces, all to Gary's design and core library in C. When we published Cryptix as complete open source crypto for Java and Perl, it was the first and only crypto available for Java, then, an emerging language. Our decision to put out the Java cryptography libraries, later rewritten by Gary to be pure Java, set the scene for all Java crypto. It was critical in forcing Sun to write a crypto API that was relatively open, even though they were under tremendous pressure from the US government. In a silent, secret and private war, Gary fought against the behemoth known to us all as "the TLAs" in their bid to control the worldwide flow of information over our Internet. When the Clinton administration capitulated in early 2000, it was because of Gary Howland and other fellow spirits - the authors of Crypto++, SSLeay, and all of the Cryptix programmers to follow in his footsteps. Their committment to always keep the art of cryptography an accessible, open tool for the people survives Gary. We will always publish free crypto as long as we remain free programmers, and a free people. Like so many of the dotcom dreams to come, our trading adventure ran out of cash, and we took pause. We split, we both went back to contracting, and we paid off our debts. He and Inka lived for a while on the island of Anguilla. There, the Financial Cryptography conference had employed him in '97 and '98 to teach the art of payment systems at "boot camp". Gary worked with Vince Cate's SAXAS for a while, and when I caught up with him over a Grolsch in an Amsterdam bar, we laughed as he told me how he had spent most of the time trying to inject SOX ideas into SAXAS. We had great visions of Anguilla being the financial cryptography centre of the universe; at one stage, there were over 10 people working there on various projects, but, like many things, the dream faded as the field failed to take off, and frustration with the local bureaucracy scared too many people away. Gary died last week of a heroin overdose in a friend's London appartment. He'd been on it for a long time, but was well used to keeping the secret. I only learnt of his affliction well after we had split up. I often wondered whether I'd change my mind about drugs when someone close was killed. Maybe I'd go rabid and insist on all those bastards being killed or incarcerated without trial, as seemed to be the response of others. Maybe I'd sign on for a term of service with the War on Drugs. (These days, it would be Homeland Defence, licensed to hack.) On reflection, I can only say that Gary's death underscores futility of the War on Drugs. The developments in Europe, Australia, and now some states in the US, as country after country seeks to decriminalise drugs, remain our only hope of a civilised response to the health problem that is addiction. If Gary had lived in a society that hadn't forced the dirty secret on him, he might have got the support and community that would have helped him. I don't know that I could have done anything there, but maybe someone else could have. Financial cryptographers don't die, they just cease to be atomic. Wherever he is, Gary would have laughed to know that his work will be the subject of scrutiny by the TLAs, once again. This time, from the other side; in the same week that Gary died, we filed all forms imaginable - four boxes-worth carried by hand in through the doors of the SEC headquarters in Washington, D.C. - to start a new financial system in the USA. Using Gary's SOX, of course. -- iang --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

California Supreme court prohibits recording Californians
by Ethan Ackerman 06 Jul '18

06 Jul '18

without their consent - regardless of where you are. Greetings Dave, Many people, especially reporters, are familiar with state laws prohibiting phone conversations from being recorded without the consent of one or both parties to the call. Some states, and federal law, require only 1 party to consent, other states require both or all parties to consent. California is one such 'all-party' consent state. (Think Linda Tripp recording Monica Lewinsky talking about her boss, or the floridian couple recording Newt Gingrich coordinating his ethics probe with John Boehner, as past examples of this distinction.) Well today, the California Supreme Court found that Georgia-based employees of the Solomon Smith Barney brokerage who were taping California customers with out notice or consent violated California laws, even if they might have been complying with Georgia's '1 party' consernt laws. While the court refused to fine the brokers, finding their reliance on Georgia law reasonable, it did enjoin them from taping Californians in the future. Case is here: http://www.courtinfo.ca.gov/opinions/documents/S124739.PDF This decision will likely have a large impact on investigative reporting, and has definite impacts on other areas of privacy and consumer protection law as well. -Ethan ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] California Supreme court prohibits recording Californians without their consent - regardless of where you are.
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

<nettime> moderate conclusions drawn from squire young's letter [WAS:Re: free speech and financialisation]
by Erich M. 06 Jul '18

06 Jul '18

On 11/25/2011 06:02 PM, John Young wrote: > "Free speech" has come to mean to protect your wallet for > that enterpise has been "financialized" by media, academia > and NGOs -- and whistleblowers, not to overlook > documentary makers and once honorable alt media. > > Assange is a courageous and creative person, don't smirk > at the journo-formulaic cheap shot, but from the beginning > he has put fund-raising first on the WL agenda, exaggerated > WL uniqueness, overstated (with coy understatement) > its influence, and misrepresents WL's inept security. > My early critique of those fatal flaws is still valid 'tis true, methinks, companero John et al. By the end of the "crypto wars" [end of the nineties] an Australian website sported by far the best up to date overview of [changing] crypto laws worldwide. Site was run by a newbie named Julian Assange, funds: apparently none. EPIC then had already tapped Soros & c funding and produced the best in depth insight into global crypto laws - but yet mostly on dead trees: booklets, books, brochures. Within months more of historical value. During the Wassenaar and the iCrypto campaigns 1998 that marked the end of the "crypto wars" in EU [except for the Brits] the Australians played a significant role there. Afterwards? One would meet Julian now and then at the ccc congresses. Another gifted and rebellious hacker amongst [hopefully] more, preferrably astray. Guy like companero Jaromil here on the list. When they came up with the WL concept you could understand the basic flaw at a glance: That was in scaling, as always. - If WL became somewhat moderately successful, possible growth should be very slow, because funds would be only trickling in, if even so. Best outcome would be a "cryptome2" with a different geographical focus and leaking program. Good enough, though. - if WL really would take off, they'd need money: editors _skilled_ in publishing leaked doqs. Pretty rare species, indeed. Even for good money. - After a somewhat unspectacular and therefore regular starting phase - WL took of. Cash poured in. I have a rough idea about how much during that phase. Unprecedented for that project but far from spectacular. Compared to the fundings of some [honoric] US civil liberties orgs: real starvation rate limited to a year. Future unknown. - WL could neither cope with the growth in editing requirements - so they had to take to journalist prominence around the world. High level talks to the chief editors' offices where yesterdays news are sold on dead trees. This was the beginning of the end. - And then the cash flow was shut down. All at sudden. - All WLs main financing lines were under control of the US. The primary fallback channel based in Germany, where General von Clausewitz might have sighed and turned around in his grave. A German bank account. Blocked by all US and major international online payment systems. - The only option WL had left was to release truly massive fireworks finally. All ammunition left at once. V2 style. Spare random and neglible targets were hit. Now all is up to the courts in The UK, Sweden and the US. Bradley Manning and Julian Assange [not mentioned the other harrassed crew] face "wild west winds" driving "pestilence-stricken multitudes". Press coverage is fading slowly to level0. The more fading the more the guys are in danger who had the guts to risk loosing their asses: First of all Manning, second Assange. We need not worry much about Daniel Domscheit-Berg. He was last seen here this week in Vienna touring the wisecrack & higher level panels. ;) If the only main media news topic worldwide - the economic meltdown - persists for a while, both of them are doomed. Nobody will care. They There is such a crowd of worldwide communicators on this list enjoying access to all kinds of media other than silly fuqbook kampaigns due for a praecox breakdown. Analysis is good. Assistance is better under circumstances given. Erich -- cu Erich M. NEW PGP KEY 0xEA7DC174 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xACC6A796EA7DC174 --... ...-- -.. . . .-. .. -.-. .... --- . ...-- . -- -... # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: http://mx.kein.org/mailman/listinfo/nettime-l # archive: http://www.nettime.org contact: nettime(a)kein.org ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Tor and HTTPS graphic
by grarpamp 06 Jul '18

06 Jul '18

> Thanks to Mark Klein, we know that the NSA wiretaps in the US are > passive in nature, not active. We know that *back then* *one* of their possible tap systems was passive. All thanks due of course. > But who knows what they do [...] ... today, to whoever. > I don't think The Man can correlate millions of simultaneous web > page views and expect to have certainty over who is viewing what > at all times. At some point, you simply run out of differentiating > bits to extract from size and timing information to properly > segment the userbase. It's now possible to do well timed rx/tx at 10Gb line rate on a single commodity system (FreeBSD, Linux)... http://www.ntop.org/products/nprobe/ http://info.iet.unipi.it/~luigi/netmap/ http://www.ntop.org/products/pf_ring/ http://www.ntop.org/blog/ http://en.wikipedia.org/wiki/Precision_Time_Protocol _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Obituary - Gary Howland - 197? - 2002
by Ian Grigg 06 Jul '18

06 Jul '18

Obituary - Gary Howland - 197? - 2002 I first met Gary in 1990. I was the team leader for a big telecoms project and he was one of the 1000 CVs that crossed my desk that summer. Of those 1000, I interviewed about 50, and we ended up with a technical team of 20. Most were contractors from the huge pool of British labour, but from my jaundiced view, only 4 on our team rated as contractors. Gary was one of those 4. He was only just out of college, the polytechnic at Brighton. But his CV included all that splattering of Unix acronyms that made you feel that here was a kindred spirit, one who learnt in spite of the academic environment. We shared that time together, the vast tense year at ICL where we all made too much money and lived like there was no impending recession. Hard coding, hard driving; Gary in his girlfriend's 924 was as fast as I was, at track day with the Porsche club, in my 928. He was fast with the code, too, when a fire could be lighted under him. He once replaced a 3 month project in 3 days. For the most part he was slow and careful, thoughtful, complete and perenially late. But when a deadline hit, he could fly. He was the only person I could trust the sys admin role to, and he was the lowest paid contractor in the building. Fast forward to 1995. I'd had my Spanish adventure, Gary had done his contracting stint in Germany, where he met his long term girlfriend, Inka. He'd hooked up with a new outfit in Amsterdam, some crazy guys doing money on the net, called DigiCash. Gary fed me the papers and fed me the story. Using cryptography, David Chaum had invented a way to solve the privacy problem so that coins could be simulated on the net. As I sat in finance classes in London, I realised that bonds were just a more broad definition of money. We agreed that there was more to this than the guys at DigiCash had thought about, so we agreed to try out our hand at the finance area. Gary was one of the first true financial cryptographers. He intuitively knew that DigiCash would fail. Not because of their software, which was good, but because their business was misdirected. He also knew that the bearer idea wouldn't survive. Not because it wasn't beautiful - it was the most extraordinary discovery in the last decade - but because it didn't solve the bank robbery problem. He was a superlative cryptoplumber, but he understood intimately how the real action was in determining the business requirements without being blinded by the science. Our early plans, hatched over email, assumed we could license DigiCash's software, but that was scotched pretty quickly. So, Gary took on the task of designing a payment system for our venture. It wasn't easy. We had to address the bank robbery problem, and we had to retain the privacy. Those goals were eventually to coalesce as contradictions, and the way he walked the line became known as SOX. I believe SOX is Gary's legacy to the world. It is capabilities for the Internet. It is strong crypto, and it is private. It is extensible, it is flexible, and reliable. I mean, reliable in a deterministic way: we can guarantee correct results over SOX transactions that can only be imagined in other protocols. It technically dominated the bearer model, in a way that only a few could grasp. It was also a computer science solution, a value that only came to be fully appreciated when we found how trivial it was to add David Chaum's bearer tokens to SOX. Gary, Mike and I, built the SOX protocol into Ricardo, a complete payment system that operated as the settlement and transfer layers for financial trading. We ran bonds, trading them at night so that all our bond holders around the world had a chance to access the market. At 9.15 pm every night, Gary's 100MHz desktop blared out the theme song for the James Bond movies, to announce the start of trading; his workstation was also our one and only Issuance server, as well as the Exchange. While they were at it, they wrote Cryptix. Gary did the Perl code for all our needs, and supervised Mike on the first version of the Java native interfaces, all to Gary's design and core library in C. When we published Cryptix as complete open source crypto for Java and Perl, it was the first and only crypto available for Java, then, an emerging language. Our decision to put out the Java cryptography libraries, later rewritten by Gary to be pure Java, set the scene for all Java crypto. It was critical in forcing Sun to write a crypto API that was relatively open, even though they were under tremendous pressure from the US government. In a silent, secret and private war, Gary fought against the behemoth known to us all as "the TLAs" in their bid to control the worldwide flow of information over our Internet. When the Clinton administration capitulated in early 2000, it was because of Gary Howland and other fellow spirits - the authors of Crypto++, SSLeay, and all of the Cryptix programmers to follow in his footsteps. Their committment to always keep the art of cryptography an accessible, open tool for the people survives Gary. We will always publish free crypto as long as we remain free programmers, and a free people. Like so many of the dotcom dreams to come, our trading adventure ran out of cash, and we took pause. We split, we both went back to contracting, and we paid off our debts. He and Inka lived for a while on the island of Anguilla. There, the Financial Cryptography conference had employed him in '97 and '98 to teach the art of payment systems at "boot camp". Gary worked with Vince Cate's SAXAS for a while, and when I caught up with him over a Grolsch in an Amsterdam bar, we laughed as he told me how he had spent most of the time trying to inject SOX ideas into SAXAS. We had great visions of Anguilla being the financial cryptography centre of the universe; at one stage, there were over 10 people working there on various projects, but, like many things, the dream faded as the field failed to take off, and frustration with the local bureaucracy scared too many people away. Gary died last week of a heroin overdose in a friend's London appartment. He'd been on it for a long time, but was well used to keeping the secret. I only learnt of his affliction well after we had split up. I often wondered whether I'd change my mind about drugs when someone close was killed. Maybe I'd go rabid and insist on all those bastards being killed or incarcerated without trial, as seemed to be the response of others. Maybe I'd sign on for a term of service with the War on Drugs. (These days, it would be Homeland Defence, licensed to hack.) On reflection, I can only say that Gary's death underscores futility of the War on Drugs. The developments in Europe, Australia, and now some states in the US, as country after country seeks to decriminalise drugs, remain our only hope of a civilised response to the health problem that is addiction. If Gary had lived in a society that hadn't forced the dirty secret on him, he might have got the support and community that would have helped him. I don't know that I could have done anything there, but maybe someone else could have. Financial cryptographers don't die, they just cease to be atomic. Wherever he is, Gary would have laughed to know that his work will be the subject of scrutiny by the TLAs, once again. This time, from the other side; in the same week that Gary died, we filed all forms imaginable - four boxes-worth carried by hand in through the doors of the SEC headquarters in Washington, D.C. - to start a new financial system in the USA. Using Gary's SOX, of course. -- iang --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Lucrative update
by Patrick 06 Jul '18

06 Jul '18

Lucrative release 4 is out. I know many people are used to seeing releases numbered like "0.000001", "0.000002", "2.0.3.0.14.657" etc. but release numbering systems are essentially arbitrary in nature so don't get excited as Lucrative goes toward version 50+. This release is a fairly minor one, but included some changes such as the client name that I wanted to get out as soon as possible. There is also a new development weblog at http://lucrative.thirdhost.com/weblog/. I went through an install with someone over IRC last night and made a blog entry summarizing the install notes. I recommend reading the notes before attempting an install. I am glad to help with an install, drop me a note at patrick(a)lfcgate.com if you have trouble. Some documentation on the various entities in the Lucrative system is now available on the website, http://lucrative.thirdhost.com/documentation.php but more is needed and coming. If Lucrative is interesting to you, please consider helping in any way you can: Feedback Installation reports Suggestions Comments Criticism Feature requests Source code patches Donations Are all very much welcomed. And criticism is more useful to me than praise. My sincere thanks to everyone who has participated so far by installing, testing, providing feedback, spreading the word, and donating. And finally I just received word from SourceForge that the project registration for Lucrative has been approved. Regards, Patrick -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> mQGiBD5ECKcRBADUvjXHwLtxIyS4AyjBs/dFtN6rdeP18Fhzh1hD5fJwkFevqY9Z I1ASROTh6eXYF7pU5sEvbcPshHyTB41ZtTqZvQvpwWN0fUzOuutuI0mtC5UPp9Rz j47SdWLdEXNHjwnHDCYSyqtqZu8GujGRQybR0eP3NIh/NwbSDUKdgz7IjwCg//Jo UtjP3zUFobm/0UYA+CJ5krED/091x9Js0gwNwvjbzM8DqO+r8qNz0kXI13FkrPRk QNd37lxt6m2m8HZD1WYM2wKwtMzHSwJcWzaDZ/tNc+ppYjzpw0EQCh9FqjGs8Vau guF6PA1M8lJTCcLKaL4e7ynic+PAw5Xa/tdOYgFCG+eLMU5RLvzRCYoOLIjgMJLJ yG98BACAMlDmFVYgC/UKvzZmHfZ5CtCKd8sPfCXrYLu5NeFRE0LR6D6zjzmhi1xX okfreR5o3T/y78VBM98js+m2/+7Z0AElqydeW/RnV1zqwDGjDr9z2MgARf3yLAbs n3BU8Fz61RwvHy6cRkT+2dR2f69QQUSpkupvLwZIGX/iwm4uKLQdUGF0cmljayA8 cGF0cmlja0BsZmNnYXRlLmNvbT6JAE4EEBECAA4FAj5ECKcECwMCAQIZAQAKCRBb mvb9yuOVfaA2AKDAu5tDj9F2KI8cJMrKKkQRAcUyxACg6/bei7lUJH+E5igJqGRx SjKrRA65BA0EPkQIpxAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoL rOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3uEF2rthccUdhQ yiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjG zB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2wXPEgxEmK0Ng w+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfzpEDp19J3tkIt AjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8IF3KiutapQvMF 6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgMg71l6RfUodNQ +PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V+bv9kV7HAarT W56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0PfIizHHxbLY72 88kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEpQBgRjXyEpwpy 1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6q6Jew1XrPdYX AAICD/wKwtF7Y4NKBe8PQ6jDbjWziiTv9Ac/EnRTJDQEoqgLa2LyE+6Ahw/VPGvp mfxkD2MKxC9E7kYVmasn6sHnSpvAv3e7O1Bqbo/qLzzCcJQ5VCurZ+elRM1GZ4Oc fM19FPKutb0/JFEv0nrqS4BGkF7WFBbu5dKYl/GIO7Co1mAerFIb719dOwMPVEIz OT08u8uB9jyR8gEElf+CVuNfOUkrUGg4HS4SbmTTrCSz3/8n5PkquSuAyjCB/dwM ZsZwA0/TTR8sDYlmlf9xPj5PGpGnV9OUwfig6eE0eWtRFeasmz0uiX+yp45ABtNh 6EXP/PFaBgXi9omXXjeeFYfpDvmfA6izvTIQfXTV6V9ZWrBfXarM+GQ+6guXWVbd 9fXvmCr982LkzuKQrK1OpRXBMUapXL+tOy/LYzz91InqKKhgPNGa12fvotZ4LzlM iqoM+Hpz5L9B5We1Ph0lD6RBVXDCqd+P8extnY/7AaDy7tC0UghaAaUuEZXJQPIc oQ3QGbpjM0nGe/VZN5EZhljau0NNENFaU56cOpvOhcO04gLGNNc2NS+rIpTMsaHh o1CG90c5zZZJuUbyx0mIHriNQXDgEwunSZPQorKK9KSppyyjeuOyi5F/mBBPXeyT weLhLqLvAr9se/+Z3aQvMADJi8zUZtGggLTw+N9R5XSwtSh2R4kARgQYEQIABgUC PkQIpwAKCRBbmvb9yuOVfWayAKC+mBhHdn1XZ5uH0RocAyJ32hx2kgCePyhB+IqM TjWLDLarQxcPYhbkFi4= =nx1M -----END PGP PUBLIC KEY BLOCK----- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0