- cypherpunks-legacy - lists.cpunks.org

Re: GAK, GAP, GAY
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:49 AM 9/19/96, Rabid Wombat wrote: >Don't get me wrong - I'm not disagreeing with you about how grim your >points are. I just wanted to point out that information "could" be >released to researchers without identifying the patient - researchers are >generally interested in statistical data, such as the incidence of cancer >per zip code, etc., which doesn't require your name to be released. Zip >codes are sufficiently populated that this probably is of no danger to >privacy. Fine, if they can convince me that of this, I may consent to letting them in on my secrets. I surmise that asking permission of patients is not part of the plan, though. Secondly--and this is actually a crypto-related point (!)--it does not take much "blinded information" to figure out the correlations between patients and data. It obviously depends on the amount of information, but it's possible. (Recall similar arguments about the census data being sold to direct marketers: even with blinding of names, correlation was trivial in many cases. This caused even more people to simply state the number of (putative) living beings at their address and to "respectfully decline" to answer the detailed questions about racial makeup ("Mein Censusfuhrer, ich bin Aryan!"), income levels, diseases,insurance, employer, number of televisions, etc.) >OTOH, the potential for mis-use of such records is high, and allowing >access to a huge number of commercial sites, and their employees, >certainly opens a lot of holes. It will be a zoo. Tens of thousands of people will have access to one's records, and there will be no pretense that the system has even Clipper-like levels of protection. A psychotherapist acquaintance of mine is so worried about _existing_ lapses in patient-therapist confidentiality (basically, insurance companies are demanding detailed summaries of diagnoses and treatments, and demanding that he give them reports before they will pay...further evidence that those seeking treatment ought to pay cash and not have insurance companies in the loop on this sort of thing) that he has become and advocate of using PGP. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

cfs users group dead?
by zinc 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- hi, is the cfs-users(a)big.att.com list dead? i haven't seen anything for some time and mail i sent just bounced with a bad error. actually, i just got another one. two-for-one bounces if you mail through the cfs-users list! thanks for any info, - -patrick finerty - -- "Those that give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -- Benjamin Franklin (1773) finger for PGP key zifi runs LINUX 2.0.20 -=-=-=WEB=-=-=-> http://zifi.genetics.utah.edu -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMkDLdE3Qo/lG0AH5AQEOxAP+ONckRPOAstOQDroZQcSg+p4nP/OoctNw fRV+0FvUcUmjaJLe8ziGGSFJK36gnrWTCrfHsoF1BhRoMIoLEuHoRKNiPgrO88HN FWlWUUJ5Chj84jkLPstHIVAeOPS8RF71okvaWtarqXS6BCFgOByu7PD52VAMD/P4 aE9V2CAjNq8= =DG+6 -----END PGP SIGNATURE-----

2 1

Re: Fear of Flying -- from HotWired
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 2:51 PM 9/18/96 -0400, Black Unicorn wrote: >On Wed, 18 Sep 1996, Bill Frantz wrote: > >> At 1:21 AM 9/18/96 -0400, Black Unicorn wrote: >> >> On Thu, 12 Sep 1996 12:03:18 -0700, Bill Frantz wrote: >> >> >Gee, biotech has come a long way. Now I can download the Anthrax DNA >> >> >sequence from the net and insert it in some carrier bacteria and start >> >> >making Anthrax bacteria. Neat! >> > >> >Culturing and growing anthrax is painfully simple. No DNA required. >> >> Sorry Unicorn, you missed my point. (1) You need DNA to grow bacteria. >> You can get the DNA two ways. (A) You get a sample of the beast, or (B) >> You get a DNA sequence and then regenerate the DNA. (I don't think B is >> technically feasable yet.) (2) You can't send samples of the beast thru >> the net. > >I think your point was that the net was not responsible for the >proliferation of Anthrax development data. (Am I wrong?) My point was that you need more than just information (but see below). You also need some materials that may be hard to get. Being totally ignorant in the anthrax growing area, I have no idea where I would get my starter bacteria. (Presumably any net-info would tell me. I haven't looked.) At 12:34 PM 9/18/96 -0800, Jim McCoy wrote: >Yes, B is possible. At the moment the devices only work for relatively >small sequences but this is improving and the current generation should be >able to handle a constructing a bacteria sequence pretty well... Ergo >you _can_ send samples of the beast through the net (or at least genetic >clones.) Oh well, if not this year, then next people will be able to down load any virus/bacteria they want. Come the millennium, it will be plants, with mice and rats to follow. Black Unicorn wrote: >My point was that in the eyes of the "leaders" all that is required to >make the net responsible for the proliferation is for the process to be >describeable in a simple one or two page set of instructions (such as >Anthrax is). I have no problem with your point. Mine was intended as sarcasm. ------------------------------------------------------------------------- Bill Frantz | "Cave softly, cave safely, | Periwinkle -- Consulting (408)356-8506 | and cave with duct tape." | 16345 Englewood Ave. frantz(a)netcom.com | - Marianne Russo | Los Gatos, CA 95032, USA

2 2

Banking over the net
by craigw＠dg.ce.com.au 17 Dec '03

17 Dec '03

For some time several Australian Banks have been interested in setting up online banking via the web. Currently the Commonwealth Bank does have online banking, but on non-internetworked servers. This requires an encrypted password. Currently this involves logging into the bank server directly transfering the password, at which case the user has access to their accounts. The unfortunate details are that the instructions for the account are not sent encrypted. Apart from the initial password, all data is sent plain text. There is likely to be implemented an inital web trial of this service in December this year. Hopefully the security will be upgraded a little. Where this is not likely is that the likely canditate for encryption over the net is going to be 40bit netscape (as what bank wants to go against the wishes of the US gov). The banks feel secure in that they are providing a 128bit secured password to the customer via mail. This seems to be the end of the security. While the average member of the public blindly trusts the banks to keep them safe, and untill there is a user friendly means of encrypting data (that the US government supports), I can see alot of room for fraud. ,'~``. \|/ ,'``~. (-o=o-) (@ @) ,(-o=o-), +--.oooO--(_)--Ooo-----oOO-(_)-OOo-------oooO--(_)--Oooo.------+ | | | Soon, we may all be staring at our computers, wondering | | whether they're staring back. | | | | [Network Admin For WPA Business Products. aka doshai >;-) ] | | .oooO http://pip.com.au/~doshai/ Oooo. | | ( ) Oooo. .oooO ( ) | +-----\ (----( )-------oooO-Oooo--------( )--- ) /---------+ \_) ) / \ ( (_/ (_/ \_) Key fingerprint = 2D F4 54 BB B4 EA F1 E7 B6 DE 48 92 FC 8D FF 49 Send a message with the subject "send pgp-key" for a copy of my key. (if I want to give it to you)

1 0

No Subject
by attila 17 Dec '03

17 Dec '03

Mike Farrell, actor and longtime opponent of the death penalty: "We don't rape rapists, we don't burn arsonists, why should we kill killers?" well, come to thing of it, why don't we let a bull rape a rapist? or burn an arsonist at the stake? seems fair to me. maybe even sell tickets to pay for the cost. -- one of the few things we all share: the utter, corrosive contempt for our elected officials. -- Politicians are like diapers. They both need changing regularly, and for the same reason.

2 1

Stinger Specs
by Black Unicorn 17 Dec '03

17 Dec '03

Stinger (AIM-92) (Jane's #: 6604.331) 152 x 7-14 cm (l x d - span) Weight: 18 kg Warhead: HE Propulsion: Solid Range: 2-4 km Guidance: IR Exact effective range / altitude is not listed in the quick guide I have on my desk. I will pull it out of a larger volume when I have time. -- I hate lightning - finger for public key - Vote Monarchist unicorn(a)schloss.li

1 0

Cypherpunk Enquirer [NOISE]
by Mixmaster 17 Dec '03

17 Dec '03

THE CYPHERPUNK ENQUIRER "Encyphering minds want to know." The EFF announced an agreement with the Clinton administration that will "guarantee Americans rights to privacy and anonymity on the Internet for the forseeable future". The agreement, which includes unspecified concessions by the President on matters of encryption, privacy, and the export of encryption programs, is to be signed today in the White House Rose Garden. An EFF official, who wished to remain anonymous, chortled, "We got basically what we wanted, and all we had to do was give up Czechoslovakia." Cellular One today announced the signing of noted Cypherpunk Tim May as their official Internet spokesperson. Mr. May will be filming a series of commercials featuring himself in a hot tub calling a variety of 1-900 numbers on a cellular phone, while a voice-over by Cellular One executives extoles their recently announced 'Geek Plan', featuring free calls during computer hacker's normal waking hours of 7pm to 7am, with all calls to pizza parlors for delivery half-price for the first year. The commercials, the first to be filmed entirely in the 'quick-time' format, should be appearing on commercial web pages within the month. The Cypherpunk Academy of Codes and Cyphers has announced the first official offshoot of the Cypherpunks list. The Junior Auxillary, anchored by the new mailing list cyphertots(a)juno.com, will give budding hackers the chance to get out of the house and hear famous Cypherpunks like Bill Stewart and Robert Hettinga lecture on topics such as "The Port 25 Hack - Fact or Fiction", "Hacking the Transmitter on Your Ankle Bracelet", and "SPAM - Cypherbabes are Impressed by a REALLY BIG One." To join, send a message with the body "subscribe cyphertots" to majordomo(a)cybercrime.fbi.gov. (note to juno.com - we don't do personals) In related news, John Young will be tutoring Dr. Dimitri Vulis in English as a Second Language. Scientists flocked to toad.com recently in response to the first authenticated sighting of a Perrygram in months. The Perrygram, only recently thought extinct, was spotted on the cypherpunks mailing list after an absence of several months. Specialists speculate that it may have detected the recent list increase in its favorite food - pure, unadulterated bullshit. The Reputation Capital markets remained in a deep slump after the recent closings of alpha.c2.org and anon.penet. Analysists estimate the loss in over 1 billion in reputation capital, with the effect spilling over to the rest of the market. Since the loss of anon.penet, Black Unicorn is down 12 5/8, Atilla down 4 3/4 to 8 1/2, Jim Ray is down 10, and Tim May, as usual, is being investigated by the Blacknet Securities and Exchange Commission for his timely shorting of Lucky Green. Novell President Joe Marengi announced today that Novell would begin bundling Microsoft's Internet Explorer with Novell Netware in the third quarter. In return, Microsoft announced plans to release his 8 year old daughter Suzanne unharmed. Next in the Enquirer: HIDE THE KIDS! FIRE UP SURFWATCH! Sandy Sandfort's latest party - WE HAVE MPEGS!

3 2

unsubscribe
by flatline＠direct.ca 17 Dec '03

17 Dec '03

unsubscribe

1 0

The periodic caveat about Timmy May
by nobody＠flame.alias.net 17 Dec '03

17 Dec '03

Timmy May habitually digs into his cesspool of a mind for his mailing list fertilizer.

3 2

GAK, GAP, GAY
by tcmay＠got.net 17 Dec '03

17 Dec '03

GAK -- Government Access to Keys GAP -- Government Access to Patients GAY -- Government Access to You At 3:03 PM 9/18/96, Lucky Green wrote: >On Wed, 18 Sep 1996, Jim Ray wrote: >> I agree, and hope so. "Key Recovery," while not as Orwellian-sounding as >> "GAK," is a step on the path to honesty WRT the English language, though >> it's important to continually point out, as Tim did in his post, that >> *access* -- rather than just recovery -- is obviously what Mr. Freeh wants. >> >> I'd count this likely change in terminology as a "cypherpunk victory," >> albeit a very small and certainly a very hard-fought one. > >Nope. It is a Cypherpunk loss. The use of the term "key recovery" for GAK >now fully obfuscates the distinction between accessing a >backup copy by the legitimate owner (or his estate, employer, etc.) and >GAK. Many PKIs will support the former type of key recovery. And for good >reasons. Thanks to the brainwashers using the same term for GAK, it will >now become impossible to tell from a basic description of a PKI if it >supports GAK or not. Furthermore, those who oppose the latter type of key Further, merely _asking_ your Designated Key Recovery Authority what its release policies are will of course place your name on the SPL (Suspicious Persons List). The FAA is an agency which will have nearly unlimited access to communications, under the Safe Skies and Anti-Child-Hurting Act. (Think about it--Clinton already signed a couple of Presidential Decision Directives and Congress passed various anti-terrorism acts which already give the Feds authority to wiretap and surveil more widely than before, at least legally. The Foreign Intelligence Surveillance Act (or court) allows widespread surveillance of suspected foreign agents, without any notification of local courts or of the surveillance target. Won't these many provisions allowing wide surveillance already be used almost instantaneously to force PKIs to disclose keys of all those on the SPL? "If it saves just one child.") On a related note, I read an article yesterday about the proposed new Health Data Base, with all encounters with any medical institution or any health care provider of any sort being cross-linked and cross-referenced. The privacy concerns are supposedly handled by having "security tickets" for various hospital officials, researchers (!!), insurance companies, and law enforcement. (I put the "!!" next to the "researchers" because I don't recall releasing my medical and dietary history to any so-called "researchers." While I have no doubt that many "data miners" would like access to such national data bases, and that some potentially valuable information could be gleaned, I didn't release this information for Joe Gradstudent, Ph.D. candidate to sift through.) [Here are some more details: "Mission: one-stop medical records," Robert S. Boyd, San Jose Mercury News, 1996-09-17, p. 1. "Virtually unnoticed by the public, health-care experts are preparing to create an electronic "Master Patient Index," covering every American's medical records from cradle to grave...."We can't eliminate privacy concerns, but we can minimize them," said Richard Rubin, president of the Foundation for Health Care Quality in Seattle at a planning conference here last week....David Kilman, a computer expert at New Mexico's Los Alamos National Laboratory, where the idea for the master index was born....Only people with a 'security ticket'--such as doctors, insurers, scientific researchers or police with a proper warrant--are supposed to be able to see the clinical details....Kathy Ganz, director of the New Mexico Health Policy Commission, said, "Rights to privacy are genuine concerns, but they will need to be balanced against notions of common good.""] Pretty chilling, eh? As we all know, once such medical, dietary, and genetic data bases are established, the likelihood of privacy-invading use is near unity. If the NLETS data base can be routinely accessed (it's how I got Thomas Pynchon's home address, but that's another story), imagine who will hack this data base! The tabloids will love it, as they gain access to "medical records of the stars." Hackers will suck down as much as they can and then sell the records. And such data bases will be tied to True Names, of course, thus allowing the "freezing out" of anyone who is not a True Name, who has fallen behind in child support payments, who is late on his income taxes, and so on. It doesn't matter if cash is still allowed if one cannot interact with any health care person without a proper citizen-unit data base entry. They've got you tracked even if you pay in gold dust. (Putting on my Duncan cap--not to be confused with dunce cap--I wonder what will happen the first time someone dies because a hospital wouldn't treat someone without a proper citizen-unit health care card?) P.S. I fully understand that some doctors will treat patients for cash, without reporting to The Authorities, just as some doctors will treat gunshot wounds without the mandatory reporting of same to the police. This does not mean such doctors will be easy to find. The System, if allowed to win, will win. P.P.S. Many of the things we talk about on the list are being made possible--the good and the bad--by computerization. Obviously. Burnham's "Age of Privacy" (or maybe it was "The Age of Surveillance"--my copy is not handy) made this point many years ago. We are taking the mechanization and systematization procedures the Germans used so efficiently in the 1930s and modernizing them, with every movement and every transactions tracked and recorded in data bases. Now more than ever we need "credentials without identity" and digital cash. Chaum's article about "Transaction Systems to Make Big Brother Obsolete" is now more urgent than ever. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

6 6