- cypherpunks-legacy - lists.cpunks.org

SAV_eit
by John Young 17 Dec '03

17 Dec '03

12-16-96. NYP: "Global Debate Over Treaties On Copyright" Given the overwhelming domestic objections to most of the treaty proposals, the obvious questions are: Who does support them? And why is the United States pushing so hard for them in Geneva? In fact, the main beneficiaries of the new copyright rules are the highest-stake copyright holders: rich, politically powerful entertainment and media conglomerates, which fear that pirated material will destroy the lucrative international market for products that can be digitally copied and distributed globally. In the digital world, computer software companies are already effectively using various data encryption technologies to protect their products for distribution over the network. And if progress to date is any indication, these technologies will become even more sophisticated and effective over time. ----- SAV_eit

2 1

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 16 Dec 96 6:49:25 PST remailer email address history latency uptime ----------------------------------------------------------------------- jam remailer(a)cypherpunks.ca ************ 14:59 99.98% lead mix(a)zifi.genetics.utah.edu -++-+++*++++ 41:38 99.98% cyber alias(a)alias.cyberpass.net +*+******+** 32:02 99.96% lucifer lucifer(a)dhp.com ++++++++++++ 34:51 99.93% middle middleman(a)jpunix.com ------+----+ 2:57:46 99.90% reno middleman(a)cyberpass.net ------------ 2:57:37 99.88% haystack haystack(a)holy.cow.net *#**+ *-++* 11:55 99.58% exon remailer(a)remailer.nl.com +########* * 2:36 99.51% replay remailer(a)replay.com -- -+**+*+- 32:21 99.43% squirrel mix(a)squirrel.owl.de ++++ ++++++ 1:18:02 99.22% weasel config(a)weasel.owl.de ++-+-++++ + 1:19:04 99.08% winsock winsock(a)rigel.cyberpass.net ------ -..- 7:21:13 98.40% dustbin dustman(a)athensnet.com -+++++ ++ .+ 3:00:38 98.13% balls remailer(a)huge.cajones.com #****+****** 27:28 93.99% mix mixmaster(a)remail.obscura.com -._.-.-++* 8:44:55 92.01% nym config(a)nym.alias.net #*###+#*#+ 2:53 84.35% extropia remail(a)miron.vip.best.com . --__.. 25:50:51 79.18% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

RE: !! Point 'n Crypt -- Win95 Privacy for Everyone !!
by Peter Trei 17 Dec '03

17 Dec '03

> From: Walt Armour <walt(a)blarg.net> > To: "'Matthew Ghio'" <ghio(a)myriad.alias.net> > Cc: "cypherpunks(a)toad.com" <cypherpunks(a)toad.com> > Subject: RE: !! Point 'n Crypt -- Win95 Privacy for Everyone !! > Date: Fri, 13 Dec 1996 22:30:23 -0800 > There is no arguing that 40 bits is strong security. I agree with that. [...] > As for security, the current release of PnC is primarily targetting > privacy, not security. They are two very similar but different approaches. > 40 bits is sufficient to encrypt files and keep them away from friends, > family and coworkers (unless you work at the NSA). The point of Point 'n > Crypt is to attempt to make encryption technology easily useable and > widespread. If anything you have is of such a nature that 40 bits isn't > enough protection then by all means don't use PnC (at least not this > version :). [...] > later, > walt Would you mind telling us just how you expand the 40 key to the 56 bits needed for DES? (Security through obscurity has a bad rep on this list). For many methods of doing so, 40bit DES is NOT secure against a motivated individual's attack. Peter Trei trei(a)process.com

1 0

Hard to Tax Scenario
by Hal Finney 17 Dec '03

17 Dec '03

Robin Hanson, inventor of the Idea Futures prediction market, is a very creative and thoughtful writer who has posted to this list occasionally. He says he sent the message below to the CP list over the weekend, but I didn't see it. I am including it (in bits and pieces) in its entirety for the benefit of others who may also have missed it. Robin Hanson, <hanson(a)hss.caltech.edu>, writes: > Hi. The volume here is too high for me to subscribe regularly, but I > subscribed recently so I could ask the following question: > > How well thought out is the notion that widespread crypto could > allow a large fraction (>30%?) of the economy to avoid taxation? > > I've heard this speculation many times, and just saw it in print in, > in David Friedman's article in the summer '96 issue of Social > Philosophy and Policy. But I have trouble imagining how it could > work. For those who don't know, by the way, David Friedman is the son of Nobel prize winning economist Milton Friedman. Both father and son have libertarian leanings, and David in particular has tackled some of the hardest problems which would be faced by an anarchic society. > Imagine Ann is a doctor who wants to ply her trade without taxation. > Patients go a local high res medical net booth, which Ann runs from > long distance using several real time digital mixes. To do this, Ann > spends most of each day in her expensive home VR room. So we are imagining a future scenario in which medicine is commonly if not universally practiced via these remote means? Or do we have two classes of doctor, the anonymous virtual ones and the identified ones that you go and see in person? I ask because at least some of the difficulties Ann faces seem due to her virtual practice. > Patients pay Ann in untraceable cash, which she uses to pay for > groceries and other net services. Her cover story about why she > spends so much time in her home VR room, and how she pays for > groceries, is that she is a receptionist for some sham company. The need for a cover story raises the question of from whom Ann has to keep her secrets. In a society where (we will stipulate) 30% avoid taxation, the moral significance of not paying taxes will be different than it is today. We had some interesting posts in an earlier discussion on this list describing the situation in Italy, where apparently tax avoidance is raised to a higher degree than in the U.S. It sounded like it has the approximate moral status that speeding does here, a minor infraction which almost everyone does some if not all of the time. In some sub-cultures no doubt the tax avoidance rate would be even higher. In such a society Ann may not have to care that much about keeping her secrets, as long as she doesn't have too high a profile at tax time. > Ann has many collegues which she does business with regularly, > including equipment suppliers, a pharmacist, a nurse practitioner, > emergency substitutes, and various specialists. Ann has never met any > of these people in person, and they all show each other fake faces, > voices, and even rythms of walking and speaking. Ann's social life > outside VR is entirely divorced from her work life. Well, that last part is true for me already; I telecommute to a company 300 miles away and have no social life with my co-workers. For that matter my wife and I have practiced cocooning for several years, and I haven't had a close friend from work since the early 1980's. Being married makes this easier, of course. The other part of this scenario, where Ann interacts with her co-workers via fake faces, does seem disturbing. I could imagine, though, that this might be common in such a culture. Maybe everyone pretties themselves up when on the videophone. If there is widespread understanding that most faces are at least somewhat false, then perhaps going all the way to a completely faked up face would seem more acceptable. But to someone from my generation it will be hard to accept. > To convince patients to trust her, Ann gets bonded by a certification > service. To obtain this certification, Ann must be careful to not > refer to any people who know her "true name", such as her teachers at > the physical school she physically attended. And Ann must somehow > assure the certification service that she will not resell the > certification, allowing others to pretend that they are her. It is possible that we might see a more performance-based certification rather than a recommendation based one. My wife is a physical therapist, and she had to pass a licensure exam given by the state which qualifies her to practice. In an earlier message to me Robin pointed out the crucial role played by recommendations in hiring decisions. Certainly I would be much more likely to hire someone who listed his previous jobs and for whom I could get good recommendations by his earlier supervisors than an applicant who insisted that this information was confidential. Robin also suggested that there could be a selection effect, so that the doctors from good schools with good grades would use these advantages to maximize their income, and so the only anonymous ones would be the ones who didn't have these qualifications. This could lead to a situation where most anonymous service providers were assumed to be inferior to regular ones, so they would get less money even if they were actually just as good. (I apologize to Robin if I missed the point of his earlier discussion or am presenting it incorrectly.) Even with such disadvantages, a doctor like Ann might accept a lower fee at first while she builds up her reputation as an anonymous doctor with talent and ability. After a few years she could hope to have overcome the stigma which (we will suppose) anonymous doctors face and display some strong recommendations based on her successes. In the long run this could be a winning strategy due to the tax savings. (I haven't given the problem of reselling certificates enough thought to discuss it in any detail. There have been some discussions of "is a person" credentials which could apply, but that opens up a big can of worms.) > If Ann ever slips up, revealing her true name to a virtual associate, > failing to convince a physical associate of her sham employment, > or if anyone ever breaks through her realtime digital mixes, Ann > is open to expensive blackmail, she may have to start over with a > new virtual persona, and may have to go to jail for a long time. This is an interesting problem which I haven't seen discussed before in this form. In Vinge's original "True Names" people were afraid of harrassment and physical threats if their identity were discovered, but Robin's example of the danger of being exposed as a tax evader could be very bad as well. If there is this much tax avoidance, we might assume that tax rates are high, and penalties for tax evasion are high as well. On the other hand, if tax evasion is nearly universally practiced, perhaps there are strong cultural pressures against turning someone in. There is also the question of how good the technology is for anonymous communication. At best it would appear to require a widespread infra- structure, and if this is used largely for tax evasion it is hard to see how it could survive. So I think this would be a very significant issue to be faced by the prospective 'nym. > It seems to me that Ann is paying a high price for an ability to > avoid taxation, and at current tax rates it is hard for me to believe > that she wouldn't just rather pay the taxes. What am I missing? > > Robin D. Hanson hanson(a)hss.caltech.edu http://hss.caltech.edu/~hanson/ It is hard to judge how high the various prices are that she pays. The socialization aspect may not be important if she has friends outside work. The risks of being caught will depend on factors we don't know, like the technology and legal system. Rather than assuming that tax rates are the same, it might be more plausible to assume they have gone up in order to keep revenues stable. Another problem which Robin didn't mention is the issue of insurance payments. It is hard to see how Ann's patients can get reimbursed for their expenses if we assume that Ann is in effect a "black market" doctor. This problem may be somewhat specific to the medical scenario, but I suspect that many other professions are going to have trouble switching to a cash basis. Anyone whose customers are businesses, for example, will face the problem that the businesses' books will need to show that an expense is justified in order to deduct it. This will be a major problem for the "anonymous firm" we have discussed occasionally. One difficulty I find with this scenario is its science fictional nature. It is hard for me to consider details about the life of a doctor who works via VR. Also, if we are already in a situation where 30% of people are avoiding taxes there will certainly have been major changes in society, but I don't know what they will be. This makes it hard for me to focus on the issues specific to Ann's anonymity. However I do like Robin's choice of a concrete and vivid example like this. Hal

3 2

Germany to regulate the Web.
by Peter Trei 17 Dec '03

17 Dec '03

Forwarded from the www-security list. Germany seems to want to: 1. Require blocking of German-verboten material. 2. Mandate content labling (PICS?) 3. Ban 'cookies'. 4. Require Digital Signatures on all net traffic. -pt ------- Forwarded Message Follows ------- Date: Sun, 15 Dec 1996 23:48:32 -0800 To: www-security(a)ns2.rutgers.edu Subject: Germany bans cookies! (and a whole lot more) From: nobody(a)cypherpunks.ca (John Anonymous MacDonald, a remailer node) web servers within Germany anyway... as of August 97... see below Germany Passes Sweeping Cyberspace Law The German government approved a bill Wednesday aimed at regulating the Internet and protecting user privacy while banning smut, pro-Nazi content and online fraud. The so-called "multimedia law" essentially extends current German laws to the dominion of cyberspace, placing responsibility for suspect content on suppliers, but without clearly defining whether a supplier could also be construed to make a carrier -- such as an online service like CompuServe or AOL Bertelsmann Online -- also liable. The law is scheduled to take effect in August 1997, prior to the 1998 deregulation of the European telecommunications market. Under the law, online services could be held responsible for illegal material if they have the technology to block transmission of such content, and after notification, still disseminate the objectionable content. The law also calls for content to be tagged electronically if unsuitable for minors to ensure it could be filtered out --similar to the V-chip television initiative in the U.S. The law would also prohibit "cookies" -- tiny programs that trace a user's path through the Net, recording what they visit, examine and purchase. Instead, the law would require that services give users the opportunity to use a site or service anonymously. The German law also puts into place the idea of so called "digital signatures" -- a string of coded information which would clearly identify the origin of messages, files and images shipped via the Net. Such signatures would use a central authority to prevent fraudulent commercial transactions on the computer network by matching a publicly accessible data string with a confidential string of numbers, also called a key. www.mediacentral.com/Magazines/MediaDaily/Archive/1996121207.html/634827

1 0

[QUERY]Point-n-Crypt URL (???)
by Mullen Patrick 17 Dec '03

17 Dec '03

To avoid flame wars, I know "...40-bit DES is not secure." I'm just interested in the interface, etc. Unfortunately, I lost the URL of where to DL a demo. Could someone please forward me this information? Thanks! PM

1 0

Re: Gov't Clarifes Position-Surprise!
by Harondel J. Sibble 17 Dec '03

17 Dec '03

On 16 Dec 96 at 0:26, pgp-fone(a)rivertown.net wrote: > Expect some form of cooperation with EC governments if this stuff goes > through. The recent posting to cypherpunks about the "radikal" raid in the > Netherlands is probably a good foreshadowing of this. If you have not seen the > article, and want to, I will be happy to remail it. > > > Tim Scanlon > Tim, please send me the article when you have a moment, thanks! > Cheers Harondel J. Sibble (aka The Juice-Meister) homepage >> http://ourworld.compuserve.com/homepages/Harondel_Sibble/ email >> sibble(a)infomatch.com or 75301.157(a)compuserve.com PGP public key >> finger sibble(a)infomatch.com

1 0

Van Eck articles, reply..
by AaronH4321＠aol.com 17 Dec '03

17 Dec '03

I went to the library and found an article on Van Eck. I posted it at my site. It was a little long to e-mail. Check it out at: http://members.aol.com/aaronh4321/vaneck.html If anyone has more current information please e-mail me. Aaron....

1 0

No Subject
by Casey Iverson 17 Dec '03

17 Dec '03

1 0

U.S.S. Liberty
by mixmaster＠remail.obscura.com 17 Dec '03

17 Dec '03

Tim C. May is another loser who pays for got.net because he lacks the mental capacity to gain net access as a perk of either employment or academic achievment. o)__ (_ _`\ Tim C. May z/z\__)

1 0