- cypherpunks-legacy - lists.cpunks.org

Re: Oh No! Nazis on the Nets
by freeman＠MasPar.COM 17 Dec '03

17 Dec '03

> What kind of state is this, where you can drive a car with 16 years, > marry with 18 years and drink your first beer with 21 years? It probably has to do with the perceived dangers of errors in judgement concerning the various activities, and I agree with your skepticism... The age for marriage should be set much higher. -- Jay Freeman ;-)

1 0

Magic money not working bigendian
by qwerty-remailer＠netcom.com 17 Dec '03

17 Dec '03

I have not been able to get Magic Money to work right in big-endian mode using pgptl10c.zip and mgmny10d.zip. It does not work with either -DHIGHFIRST or -DHIGHFIRST plus -DHIGH_KLUDGE. The key generation seems to go OK, but then when I "mint" a coins.dat file with 6 coins in the server and try reading it in the client, all coins after the first are said to have bad signature. I have tried it with both 512 and 1024 bit keys and both fail. The previous version of magicmny.zip worked OK.

4 3

re. Denning's Clipper defense (15.48)
by Carl Ellison 17 Dec '03

17 Dec '03

Prof. Denning has issued a defense of the Clipper proposal (which she advocated in a CACM article long before the initiative was announced). Her specifics are easy enough to refute and I'm sure others will do so. However, she closes with an idea so radical that it shocked me. Her idea that we citizens need a security clearance in order to enter the debate over whether or not we should give up a right we've had for all time (to make, use, disseminate, ..., our own strong cryptography, interfering with the government's ability to spy on us) is so radically off base that the technical debate pales by comparison. My grade school social studies teacher is doubtless spinning in her grave. On this point, I would like to hear from newly freed members of the Eastern block. - Carl Ellison

1 0

Re: Firewall USA to Firewall China
by daw＠dawn7.CS.Berkeley.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199602130139.RAA11162(a)mage.qualcomm.com>, Peter Monta <pmonta(a)qualcomm.com> wrote: > > [ Jim Clark, "Firewall China" ] > > > > A: A lot of people think that's not possible. It's difficult to enforce, > > but it's certainly possible. A corporation has a so-called fire wall -- a > > single point of entry into the corporate net. You can have a country > > that has a single point of entry into its "country net." It's doable. All > > you need, though, is one breach of security, and there's a leak. > > > > A fire wall is a filter -- it filters and doesn't let certain people come in. > > You can only come in if you have the right permission. So you could > > easily set that up so that it would filter out your objectionable > > material. > > He seems to be confusing network security with the propagation of content. > A firewall is going to have a lot more trouble filtering dangerous > thoughts than UDP port 1234, unless there are humans in the loop. Hmm, I'd argue that firewall technology would indeed let China filter out many "subversive" thoughts on the Internet. The firewall is not going to be able to stop the two-rogue problem: two technically knowledgeable rogue agents, one on each side of the firewall, *will* succeed in communicating dangerous thoughts if they try hard enough. But that's not so important to solve perfectly, in practice. No, in reality, China could set up a few simple application proxies and only allow world -> China traffic on a few closely controlled ports, such as http, smtp, nntp, ftp, etc. The proxies could * filter out "naughty" and "seditious" sites (e.g. www.playboy.com) * filter out email, news, etc. which has traversed a "known dangerous site" (e.g. a remailer or ftp.hacktic.nl), * daily update their lists of subversive sites (e.g. by reading Raph's remailer list), * filter out indecent newsgroups, * do simple keyword searches (e.g. fuck, revolution, protest, crypto), and/or * do simple content analysis (e.g. maybe filter out .gifs, to stop nude pics). This would hose 93% of the subversive stuff on the 'net. "Social solutions" (read: men with guns) can eliminate the last 7%. And so it goes. Sure, someone in the "free world" (e.g. not China or the USA) could run a remailer / http-proxy at a new site each day, enabling someone knowledgeable in China to find dangerous material. But the fact remains that this requires technical knowledge and the willingness to go to the trouble of actively accessing the remailer site. Again, someone in the China could run a remailer / reposter / http-proxy themselves inside the firewall; that's where the "social solutions" come in. Kick down the door (see, jackboots are good for something after all!), beat up the children, and you can kiss that remailer goodbye. Technically, you're right in saying that you can't filter all the content perfectly; it's the classic covert channel problem. But practically, the Chinese gov't can probably wreak havoc with 'net freedom in China. - -- Dave Wagner Fuck the CDA. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSEPwyoZzwIn1bdtAQEFDAF9GXWLz9beaciHbY3mo3Reaom7K5IK0k2I pVz5NrHqa80eDtC8Rr0w/kSzkKtq4GCL =k93A -----END PGP SIGNATURE-----

4 3

Port Watson
by Greg - Kucharo 17 Dec '03

17 Dec '03

Anyone who is intrested in T.A.Z should also check out a short story from the Science Fiction anthology Semiotext SF,"Visit Port Watson".It's wierd how much the story resembles T.A.Z.The mythical Port Watson is located on the real islandof Sonsorol in the South China Sea,about 400 miles from The Philippines.The Portis a free enclave,a enclave with no laws of any kind.The inhabitants of the island recieve dividends from a bank who has only virtual money.Each citizen recieves and equal share of the dividends which is calculated by computer based on money made by investors.The Bankers are "libertarian computer hacks and anarcho-capitilists".Sounds like CypherPunk Nation to me.Here's the bibiliography info; Semiotext(E) SF Copyright 1989 Autonomedia,New York.Ed.Peter Lamborn Wilson andRudy Rucker.

1 0

Re: Can GAK be made "not interoperable" with PGP?
by Duncan Frissell 17 Dec '03

17 Dec '03

At 10:26 AM 9/13/95 -0700, Timothy C. May wrote: >But is this even possible, to make a GAK system "not interoperable" with, >say, PGP? > >Unless the GAK system has some sort of entropy analyzer, and can recognize >high-entropy sources which it presumes to be encrypted data (*), one can of >course PGP-encrypt a text file and then GAK the resulting file. I took it to mean that they were saying that an approved program on one end of a communication exchange could not exchange encrypted messages or established an encrypted session of some kind with an un approved program on the other end. Not trying to outlaw superencryption (PGP on both ends using a GAKed channel) but GAK on one end working with an unapproved system on the other end. A ringer GAK-work-alike that would defeat the intent of GAK. I don't know if the government can prevent that with a software-only system or indeed if half a secure system can be made completely secure. DCF "Markets and open systems beat governments and closed systems."

1 0

message pools revisited - CORRECTION
by jim＠bilbo.suite.com 17 Dec '03

17 Dec '03

I realized only after posting that "routing" messages through a remailer that is a member of the message pool you belong to is a risk. Keep in mind that I'm still speaking within the context of "all remailers and message pool servers are colluding". Jim_Miller(a)suite.com

1 0

Re: CDA Yes Votes; Collection
by Kevin S. Van Horn 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- tallpaul(a)pipeline.com (tallpaul) wrote: > >Isn't it the libertarian types on the list who are into mass killings of >civilians with nukes and the "socialist statists" who tend to oppose it? No. Tim May is the first person I've ever encountered who calls himself a libertarian and yet thinks dropping the Bomb on Hiroshima and Nagasaki was justified. I think that, from a consistent libertarian perspective, using the Bomb was equivalent to taking out a Mafia chieftain by napalming the neighborhood in which he lived. Perhaps the bad guy being targetted was a killer who deserved to die, but that doesn't justify snuffing his neighbors. Kevin S. Van Horn vanhorn(a)excite.com - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMST1ESoZzwIn1bdtAQFCegGAyCaAyaqlvc9RH5spAgrCDdmDJZkZdLTP S3xc/wODYWYfEiSPv0v5FPIMCZ7k2lj/ =0HrG -----END PGP SIGNATURE-----

1 0

Re: Stego-empty hard drives... (fwd)
by Albert P. Franco, II 17 Dec '03

17 Dec '03

> Don't most memory scans do a keyscan anyway? looking for an ESC to >bypass the scan? So have it also check for something else to bring up >your special routine. It should pass all but the most detailed signature >analysis. > Also most BIOS'es scan for the <DEL> key (or other combinations) in order to jump to the BIOS config screens. From here you have two options: 1) add a second possible jump directly to hidden configuration for the HD, or 2) within the Bios configuration menu add a scanner for a key sequence to enable the blacked out HD sectors. I can't imagine that anyone that wasn't already sure that you were playing tricks with the HD would be able to detect either of these on a normal startup. Again I think the key is that it would vastly expensive and very time consuming for customs services to make more than a cursory check. More and more people are carrying notebooks with them on trips and just like most bag searching has ended due to very fast, but not perfect, technology, notebook scanning is limited by the very important public factor--the people waiting in line behind you will tend to get very anxious. :) If on the other hand you are a "real" suspect then you best bet is not to carry a PC into these countries. These techniques (all of the ones mentioned in this thread) may even have a decent life-span if the ones that want to get you are locals (ie. street cops), but as has been pointed out before they don't have to know what's on your HD to place you under psychiatric evaluation, etc. I think perhaps a tougher question is, "Is there a way, without resorting to bloodshed, to regain control of our private property and private lives?" That's not a troll! I know that there are a lot people on this list with their assault rifles at the ready, that are convinced that only armed resistance will work. But. I think that's the "easy" way out. (How) can it be done another way? Especially, given the fact that so much progress has already been made by the very Anti-American US Government and others. How do we get back our civil rights that have been so eroded over the past 40 years? Is it too late? Are people in general so comfortable that liberty isn't important anymore? Why is it that almost every state has a system for introducing legislation at the popular level (referendum) but we don't have that freedom at the fed level. I wonder what the feds would do if we the sheeple could put propositions on the federal budget. Imagine...Prop PGP: no export control on crypto or work performed by US citizens living abroad; Prop 666: strict public oversight on CIA/NSA/FBI wiretapping and surveillance activities; add your favorite proposition here... eor.. Al Franco, II I can't sign this with crypto because the bastards might use it to try to "prove" that I have illegally exported software (that can be freely obtained in places outside the US).

2 1

ANNOUNCE: Bay Area Cypherpunks, Sat. Sept. 12, 12-6, KPMG Mountain View
by Bill Stewart 17 Dec '03

17 Dec '03

The Septembre Bay Area Cypherpunks Meeting will be Saturday from 12-6, at KPMG, 500 E. Middlefield Rd., Mountain View, with the organized part beginning at 1:00. IPSEC - Hugh Daniel will talk about the latest IPSEC Free/SWAN work Crypto 98 - Various people will talk about what they saw at the conference. Dinner after the meeting will be at some restaurant on Castro St. Mtn.View. Directions: KPMG is a relatively-unmarked building at the corner of Middlefield Rd. and Ellis St. in Mountain View, surrounded by Netscape. The lobby entrance is on the Ellis St. side. The Ellis exit on 101 is between 85 and 237. http://www.mapblast.com/mapblast/blast.hm?CMD=MAP&GC=X%3A-122.05265%7CY%3A3… Probable speaker for October - Sue Bardakos from Entrust ----------- Mailing list administrivia - this announcement has been sent to cypherpunks(a)algebra.com cypherpunks-announce(a)toad.com coderpunks(a)toad.com cryptography(a)c2.net If you want to get off one of the lists, send mail to listname-request(a)machine.domain (probably majordomo!) for the listserver that sent you the mail. ----------- Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

2 1