- cypherpunks-legacy - lists.cpunks.org

[Clips] nym-0.2 released (fwd)
by R.A. Hettinga 30 Sep '05

30 Sep '05

--- begin forwarded text Delivered-To: clips(a)philodox.com Date: Fri, 30 Sep 2005 23:10:27 -0400 To: "Philodox Clips List" <clips(a)philodox.com> From: "R.A. Hettinga" <rah(a)shipwright.com> Subject: [Clips] nym-0.2 released (fwd) Reply-To: rah(a)philodox.com Sender: clips-bounces(a)philodox.com --- begin forwarded text Delivered-To: cryptography(a)metzdowd.com Date: Sat, 1 Oct 2005 02:18:55 +0000 (UTC) From: Jason Holt <jason(a)lunkwill.org> To: cryptography(a)metzdowd.com Subject: nym-0.2 released (fwd) Sender: owner-cryptography(a)metzdowd.com ---------- Forwarded message ---------- Date: Sat, 1 Oct 2005 02:18:43 +0000 (UTC) From: Jason Holt <jason(a)lunkwill.org> To: or-talk(a)seul.org Subject: nym-0.2 released nym-0.2 is now available at: http://www.lunkwill.org/src/nym/ My tor server is currently down, so I can't set up a public trial of this, but perhaps someone else will. This release makes the following improvements: * Tokens are now issued one-per-IP to clients via a "token" CGI script. Tokens are still blindly issued, so nobody (including the token issuer) can associate tokens with IP addresses. The list of already-served IPs could be periodically removed, allowing users to obtain new pseudonyms on a regular basis. (Abusers will then need to be re-blocked assuming they re-misbehave). * A token can be used to obtain a signature on a client certificate from a separate "CA" CGI script (potentially on a different machine). Tokens can only be "spent" to obtain one cert. Code to make a CA, client certs and have the certs signed is included. * The CA public key can be installed on a third web server (or proxy) to require that users have a valid client certificate. Servers can maintain a blacklist of misbehaving client certs. Misbehavers will then be unable to access the server until they obtain a new token and client cert (via a new IP). My proposal for using this to enable tor users to play at Wikipedia is as follows: 1. Install a token server on a public IP. The token server can optionally be provided Wikipedia's blocked-IP list and refuse to issue tokens to offending IPs. Tor users use their real IP to obtain a blinded token. 2. Install a CA as a hidden service. Tor users use their unblinded tokens to obtain a client certificate, which they install in their browser. 3. Install a wikipedia-gateway SSL web proxy (optionally also a hidden service) which checks client certs and communicates a client identifier to MediaWiki, which MediaWiki will use in place of the REMOTE_ADDR (client IP address) for connections from the proxy. When a user misbehaves, Wikipedia admins block the client identifier just as they would have blocked an offending IP address. -J --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Clips mailing list Clips(a)philodox.com http://www.philodox.com/mailman/listinfo/clips --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Small Pen-is? IQgCyG
by Jamie Sherwood 30 Sep '05

30 Sep '05

The Only Clinically Tested Penis Enlargement Pills that works.. - add 1-4 inches to your peniis - 20% thicker - 5x more enjoyable orgasm - or your monneyy back without question ask! Join millions of delighted users which has been benefited with Maxxlength3. http://maxx14.powersize.biz ifN

1 0

[jason@lunkwill.org: Re: Pseudonymity for tor: nym-0.1 (fwd)]
by Eugen Leitl 30 Sep '05

30 Sep '05

----- Forwarded message from Jason Holt <jason(a)lunkwill.org> -----

2 1

[jwales@wikia.com: Re: Abuse resistant anonymous publishing - Proposed solution to the Wikipedia issue.]
by Eugen Leitl 30 Sep '05

30 Sep '05

----- Forwarded message from Jimmy Wales <jwales(a)wikia.com> -----

1 0

[cyphrpunk@gmail.com: Re: [roy@rant-central.com: Re: [arma@mit.edu: Re: Wikipedia & Tor]]]
by Eugen Leitl 30 Sep '05

30 Sep '05

----- Forwarded message from cyphrpunk <cyphrpunk(a)gmail.com> -----

1 0

[cyphrpunk@gmail.com: Re: Hello directly from Jimbo at Wikipedia]
by Eugen Leitl 29 Sep '05

29 Sep '05

----- Forwarded message from cypherpunk <cyphrpunk(a)gmail.com> -----

4 4

[shekhar@crit.org.in: [Geowanking] Google Earth Exposes the Indian Military]
by Eugen Leitl 29 Sep '05

29 Sep '05

----- Forwarded message from Shekhar Krishnan <shekhar(a)crit.org.in> -----

2 1

[jwales@wikia.com: Re: [roy@rant-central.com: Re: [jwales@wikia.com: Re: [roy@rant-central.com: Re: [arma@mit.edu: Re: Wikipedia & Tor]]]]]
by Eugen Leitl 29 Sep '05

29 Sep '05

----- Forwarded message from Jimmy Wales <jwales(a)wikia.com> -----

3 2

RE: [dave@farber.net: [IP] Request: Check your cell phone to see if it's always transmitting your location [priv]]
by Trei, Peter 29 Sep '05

29 Sep '05

Sunder wrote: >I've been ignoring this list for a while, so sorry for the late posting. >I remember sometime in late 99, I had one of the early blackberry >pagers, the small ones that ate a single AA battery which lasted about a >week or so, and had email + a small web browser inside of it. It wasn't >the blackberry phone. Anyway, long story short, one day, said pager >crashed (it is a computer after all) and I was trying to figure out how >to reboot it, so I thought, fuck it, and removed the battery, the fucker >stayed ON! For over 15 minutes! >Gee, I wonder why anyone would design a cell phone or pager to be able >to stay on after its battery is pulled out. Yeah, yeah, it's just a >capacitor or an internal rechargeable battery, but why would you want >such a feature? There is a damn good reason. PDAs, pagers, and cellphones often hold a great deal of info the owner regards as valuable, and which they don't want to lose - phone lists, email, addresses, etc. Battery changes are a potential source of loss, since (until recently) all these devices used volatile memory. Adding a capacitor to give the user a few minutes grace to fumble with his AAs is an essential feature. Most users, for better or worse, aren't cypherpunks or terribly conscious about personal privacy, and regard preserving their data as a very high priority. All the PDAs I've dealt with (and I've written SW for a number of them) have a 'hard reset' protocol - usually pressing the power button while engaging the recessed reset button - which clears out all memory. Peter Trei

1 0

[distobj@acm.org: [FoRK] [rfugger@gmail.com: Ripple currency development begins]]
by Eugen Leitl 29 Sep '05

29 Sep '05

----- Forwarded message from Mark Baker <distobj(a)acm.org> -----

1 0