- cypherpunks-legacy - lists.cpunks.org

Fukkin Elite!
by ice＠win.bright.net 17 Dec '03

17 Dec '03

Check out our Homepage, We're THe ElITE! We'll Top your asses by Far, If you want to be Elite come to us. We're Here to help you become the Elite! If you think you can Top I.C.E. Then Prove It AssHoleZ! Homepage:www.geocities.com/~pentiumru/icehtml.htm We Are THE BEST!! So Check us OUT!

2 1

Diffie-Hellman Mayonnaise
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Tim Mayonnaise is just a poor excuse for an unschooled, retarded thug. ___ <*,*> Tim Mayonnaise [`-'] ' - '

1 0

[CRYPTO] E-Cash
by nobody＠replay.com 17 Dec '03

17 Dec '03

Tim C[reep] May uses an Adolf Hitler action figure as a dildo. ____ \ _/__ Tim C[reep] May \\ / \/

1 0

No Subject
by pfarrell＠cybercash.com 17 Dec '03

17 Dec '03

1 0

The Sword of Damocles
by Timothy C. May 17 Dec '03

17 Dec '03

The recent discussion of the dangers of PICS--especially the dangers that a widely-deployed PICS system might encourage/enable governments to mandate PICS ratings in various ways--is just one of several "swords of Damocles" we have talked about for several years. By a "sword of Damocles" I mean any technology or system which, if deployed, could present an almost overwhelming temptation for governments or special interest groups to direct in directions most of us would find highly objectionable and even dangerous. (I use the metaphor of this sword of Damocles--the king of some place placed Damocles under a sword suspended by the thinnest of threads, to remind Damocles of who had the power--because no other metaphor seems to fit as well. Another metaphor is that of the danger of any technology which could become oppressive by the "flip of a switch." For example, if key recovery becomes widespread, with limited numbers of recovery centers, then governments could quite easily use administrative or executive orders to limit the options available for choosing such centers, or the licensing requirements for such centers...by the "stroke of a pen" ("flip of a a switch," or "flag day" in computerese), the voluntary system becomes much less voluntary. At the most extreme level, nearly all of us would object mightily to any system in which cyanide release systems were installed in our homes, no matter the assurances that the cyanide would only be released if proper legal orders were gotten!)) Some of the debates over crypto policy have involved people who don't see what the concern is about future actions, who basically trust the government to keep a system voluntary when it was promised to be voluntary. (David Sternlight comes to mind...from 1993 onward several of us just could not convince him that the Clipper danger lay in the potential for key escrow eventually being mandated...he just kept focussing on the "voluntary" aspects of Clipper sales, and thought our criticism of Clipper as an attempt to interfere with "free markets." Nonsense of course, but because of the "sword of Damocles" concerns, not the particular situation at some present instant.) To make this issue clearer, I'll just list several sorts of examples. Not all are the same, but the themes are similar. 1. An implantable ID device is developed for humans, along the lines of the "Pet I.D." chips which are already gaining wide acceptance. (And which we've discussed several times on this list. See archives or use Alta Vista, etc.) While such a "voluntary" system is "unexceptionable" to most civil libertarians, in the sense that libertarians do not object to the non-aggressive choices of others to do with their bodies as they please, there are clearly some "sword of Damocles" concerns. For example, a widely-used system of implants could be mandated first for schoolchildren (gotta stop those kidnappings), then for released criminals (part of parole), then for deadbeat dads (don't want them to flee), then for other classes. This is of course a serious issue, despite some marginalization in the press as being primarily a concern of the religious Right and their fixation on "the mark of the Beast." 2. Key Escrow, a la Clipper, the latest Key Recovery plans, etc. Even if announced as "voluntary," as of course Clipper was, our concern was largely with the "sword of Damocles" aspects, that the government appeared to be interested in driving out non-escrow alternatives and widely-deploying a nominally voluntary system which could, at the stroke of a pen, become mandatory. The various issues surrounding key escrow have been so well-covered I won't repeat points here. This is just a classical sword of Damocles issue. 3. Government regulation in general. Anytime the government gains the power to regulate some product class or industry, there is this sword of Damocles effect. A recent example is the area of _vitamins_, with the vitamin and health food store industry vigorously fighting proposals that the Food and Drug Administration (FDA) step in to the "vitamin anarchy" arena and place restrictions on vitamins, advertising, licensing, etc. The sword of Damocles comes from the very real possibility that initially quite "reasonable" limits will "open the door" for later, more draconian actions. (Whew, I've mixed a couple of metaphors with a couple of classical Greek allusions. Sorry.) 4. Gun control. Gun _registration_ is almost the canonical sword of Damocles, in terms of what gun rights folks fear the most. They know that once the locations and quantities of guns are known, it is a much simpler matter for some later government to order such guns turned in to be melted down. It happened in the 1930s in Germany, it happened in other countries more recently, and it is even happening with the U.S. military "disarming the civilians" in places like Somalia, Bosnia, Zaire, and any other place the U.S. military is sent in as a "peacekeeper." (Note: In Somalia, the U.S. disarmed the "soft targets:: simple farmers who had rifles they'd had in their families for generations. This had the tragic effect of making these very farmers then easier prey for jeeploads of looters and Somali "soldiers," who often followed the U.S. "pacification" squads and looted the homes and farms of the now-disarmed villagers! Some tradition for the U.S. to uphold, eh? No "right to keep and bear arms" for the peasants we are supposedly there to help.) Whatever one thinks of guns and gun rights, clearly this is a good example of why registration is fought by so many people, even if "assurances" are given that the registration has nothing to do with confiscation. (Right.) 5. "Voluntary self-ratings." The PICS discussion, and earlier discussions of "voluntary self-ratings" of CDs, videos, and other entertainment, brings up these same issues of Damoclean swords. Could a nominally voluntary ratings system be mandated by the courts, or by Congress? Depending on the outcome of the CDA case, I think so. If the Supreme Court upholds the CDA, it could be argued that anyone who fails to voluntarily self-label his speech faces sanctions if anyone finds his speech in violation of community standards, blah blah. (If one's speech is "non-explicit," as, say, this post of mine is here, then of course it almost certainly would not have to be self-rated...unless I said "Fuck," in which case I'd better consult the various PICS ratings and pick one to protect me to the maximum extent...I consider this scenario probable if the CDA is upheld and a major step away from "free speech" and "cabeat emptor" and a step toward wide self-suppression of controversial speech.) So, these are various examples of "swords of Damocles." That is, systems or technologies which are so potentially dangerous to deploy--in the sense that governments, do-gooders, and lawyers are so tempted to make them mandatory or to use coercion to drive out alternatives--that we should try to anticipate the Damoclean dangers of such technologies and work to head off such futures. Cypherpunks don't trust governments which say "Trust us" or "We're here to help." Governments, like that king in the myth, can cut that threat holding up that sword with little effort. "The Position Escrow System is voluntary. Citizen-units who wish to wear the Localizer (tm) are encouraged to do so, This has been shown to help the police in deterring kidnappings and is helping rescue units find lost hikers and skiers. Those citizen-units who wish not to cooperate in such efforts are free at this time to be rogues, but rogue-units will of course be treated with more suspicion and the failure to wear a Localizer (tm) may of course, as the Supreme Court ruled in 2003, be considered probable cause for a search. And since there are now twice as many laws as there were in 1996, most citizen-units are choosing not to be rogue-units." --Citizen-Unit Timothy C. May ID: 7734%-sd123227-666 Location at 19:09 UCT: 37 02 30 N / 121 48 45 W Just say "No" to "Big Brother Inside" We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

FW: **VIRUS ALERT***
by andis＠taa.com 17 Dec '03

17 Dec '03

>Return-Path: <cdoss(a)taa.com> >Received: from cdoss.taa.com ([204.140.196.68]) by taa.com > (post.office MTA v1.7.1.1 ID# 0-11167) with SMTP id AAA62; > Tue, 10 Dec 1996 11:48:10 -0800 >X-Sender: cdoss(a)204.140.196.66 >X-Mailer: Windows Eudora Version 1.4.4 >Mime-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Date: Tue, 10 Dec 1996 11:48:11 -0500 >To: andis(a)taa.com >From: cdoss(a)taa.com (Carl Doss) >Subject: FW: **VIRUS ALERT*** >Cc: bill.burbank(a)taa.com >Message-ID: <19961210194810338.AAA62(a)cdoss.taa.com> > >>Return-Path: <Tom.Fillmore(a)Grubb-Ellis.com> >>Received: from mail.grubb-ellis.com ([206.171.46.58]) by taa.com >> (post.office MTA v1.7.1.1 ID# 0-11167) with SMTP id AAA97 >> for <cdoss(a)taa.com>; Tue, 10 Dec 1996 10:09:28 -0800 >>Received: by mail.grubb-ellis.com with SMTP (Microsoft Exchange Server >Internet Mail Connector Version 4.0.993.5) >> id <01BBE682.370D0E00(a)mail.grubb-ellis.com>; Tue, 10 Dec 1996 10:09:22 -0800 >>Message-ID: ><c=US%a=_%p=Grubb-Ellis%l=PNW/CORPORATE/00027F83(a)mail.grubb-ellis.com> >>From: "Fillmore, Tom" <Tom.Fillmore(a)Grubb-Ellis.com> >>To: "'Carl Doss (NEW)'" <cdoss(a)taa.com> >>Subject: FW: **VIRUS ALERT*** >>Date: Tue, 10 Dec 1996 09:56:21 -0800 >>Return-Receipt-To: <Tom.Fillmore(a)Grubb-Ellis.com> >>X-Mailer: Microsoft Exchange Server Internet Mail Connector Version 4.0.993.5 >>Encoding: 69 TEXT >> >>Danger, Will Robinson!!! >> >>>---------- >>>From: Paul.Goldenberg(a)cwi.cablew.com >>>To: Frye, Doug; INTERNET-us2b7ak6 (052); INTERNET-shellyka (052); >>>INTERNET-ORDNGaol (052); INTERNET-metracom (052); INTERNET-mdobiepf (052); >>>INTERNET-KAGSEFao (052); INTERNET-HVoldtof (052); INTERNET-HAGERMAN (052); >>>INTERNET-goldnson (052); INTERNET-georgebr (052); INTERNET-dmenkenw (052); >>>INTERNET-ChrisShr (052); INTERNET-BSledzva (052); INTERNET-bnorwood (052); >>>INTERNET-AGolden9 (052); INTERNET-8442po5n (052); INTERNET-498038OV (052) >>>Subject: FW: **VIRUS ALERT*** >>>Date: Tuesday, December 10, 1996 1:20AM >>> >>> >>> >>>**********VIRUS ALERT********** >>> >>>VERY IMPORTANT INFORMATION, PLEASE >>>READ! >>> >>>There is a computer virus that is being sent across the Internet. Ifyou >>>receive an email message with the subject line "Deeyenda", DO NOT >>>read the message, DELETE it immediately! DO NOT OPEN !!! >>> >>>Some miscreant is sending email under the title "Deeyenda" nationwide,if >>>you get anything like this DON'T DOWNLOAD THE FILE! It has a virus that >>>rewrites your hard drive, obliterates anything on it. Please be careful >>>and forward this e-mail to anyone you care about. >>> >>>Please read the message below. >>> >>>FCC WARNING!!!!! -----DEEYENDA PLAGUES INTERNET >>> >>>The Internet community has again been plagued by another computer >>>virus. This message is being spread throughout the >>>Internet, including USENET posting, EMAIL, and other Internet >>>activities. The reason for all >>>the attention is because of the nature of this virus and the >>>potential security risk it makes. >>> >>>Instead of a destructive Trojan virus (like most viruses!), this >>>virus, referred to as Deeyenda Maddick, performs a comprehensive >>>search on your computer, looking for valuable >>>information, such as email and login passwords, credit cards, >>>personal info., etc. >>> >>>The Deeyenda virus also has the capability to stay memory resident >>>while running a host of applications and operation systems, such >>>as Windows 3.11 and Windows 95. What this means to Internet users is >>>that when a login and password are send to the server, this virus >>>can copy this information and SEND IT OUT TO AN UNKNOWN ADDRESS >>>(varies). >>> >>>The reason for this warning is because the Deeyenda virus is >>>virtually undetectable. Once attacked, your computer will be >>>unsecure. Although it can attack any O/S, this virus is most likely >>>to attack those users viewing Java enhanced Web Pages >>>(Netscape 2.0+ and Microsoft >>>Internet Explorer 3.0+ which are running under Windows 95). >>> >>>Researchers at Princeton University have found this virus on a >>>number of World Wide Web pages and fear its spread. >>> >>>Please pass this on, for we must alert the general public of the >>>security risks. >>> >>> >>> >>> >> > >

1 0

RE: Java DES breaker?
by Mullen Patrick 17 Dec '03

17 Dec '03

A few small bugs in this idea, at least for the masses -- 1) This would only appeal to people who have unlimited usage 2) ...and don't care about not having their phone available (I know they're asleep at the time) 3) ...and don't have an ISP that will kick them off when a timeout period expires. ...But if you implement it in a way where the user can hang up the phone and leave the browser on with the applet running, that would probably work. It would be easier to use than downloading executable code and a keyspace manually... PM _______________________________________________________________________________ From: Ray Arachelian on Tue, Dec 10, 1996 15:57 Subject: Java DES breaker? To: cypherpunks(a)toad.com Here's a thought, While Java isn't a workhorse performance wise, it's very simple for anyone with a half decent browser to use java applets. Writing an implementation of DES in Java should be fairly easy, however it will run slow on most browsers. This performance drop will make it far easier for Joe Webuser to easily help break DES for us. Previous efforts at breaking DES and RSA have done quite well, but the number of people involved can be greatly increased if you tell someone just go to this page and leave your browser on overnight, every night. The applets would get a key range from the server, process them, and return a yeah or nay back for however far they manage to process before the user returns in the morning. With JIT's (Just In Time Compilers) and the sheer numbers of users that this can attract, the efforts at breaking weaker cyphers can be increased. =====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "If you're gonna die, die with your|./|\. ..\|/..|sunder(a)sundernet.com|boots on; If you're gonna try, just |/\|/\ <--*-->| ------------------ |stick around; Gonna cry? Just move along|\/|\/ ../|\..| "A toast to Odin, |you're gonna die, you're gonna die!" |.\|/. .+.v.+.|God of screwdrivers"| --Iron Maiden "Die With Your Boots on"|..... ======================== http://www.sundernet.com ========================= ------------------ RFC822 Header Follows ------------------ Received: by mail.ndhm.gtegsc.com with SMTP;10 Dec 1996 15:57:37 -0400 Received: from toad.com by delphi.ndhm.gtegsc.com with SMTP; Tue, 10 Dec 1996 20:57:29 GMT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id IAA21427 for cypherpunks-outgoing; Tue, 10 Dec 1996 08:23:56 -0800 (PST) Received: from beast.brainlink.com (sunder(a)beast.brainlink.com [206.127.58.17]) by toad.com (8.7.5/8.7.3) with ESMTP id IAA21422 for <cypherpunks(a)toad.com>; Tue, 10 Dec 1996 08:23:53 -0800 (PST) Received: (from sunder@localhost) by beast.brainlink.com (8.8.2/8.6.12) id LAA01432; Tue, 10 Dec 1996 11:26:19 -0500 (EST) Date: Tue, 10 Dec 1996 11:26:19 -0500 (EST) From: Ray Arachelian <sunder(a)brainlink.com> To: cypherpunks(a)toad.com Subject: Java DES breaker? Message-ID: <Pine.SUN.3.91.961210112058.1282A-100000(a)beast.brainlink.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cypherpunks(a)toad.com Precedence: bulk

2 1

The product formerly known as VGP
by Mark Rosen 17 Dec '03

17 Dec '03

I am just announcing that I am changing the name of my program, Very Good Privacy (distinct from Pretty Good Privacy) in response to a complaint from PGP, Inc. It was cool, though, because I got an e-mail message from Phil, which is akin to talking with God. Just to quell the trademark questions some people might have, a trademark violation is defined as something where there is a possibility of confusion with another product; as made obvious by the hundreds (literally) of messages I have received asking about the features of this new version of PGP (which it is not). I have not changed the name of the product on the web page, and will just post a notice of clarification until I think of a new name. Does anyone have any ideas? Thanks. The product formerly known as VGP can be downloaded at: http://www.geocities.com/SiliconValley/Pines/2690 If you have any questions, please e-mail vgp(a)cryogen.com

5 4

Re: Redlining
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

At 9:04 AM 12/10/1996, Black Unicorn wrote: >On Tue, 10 Dec 1996, Huge Cajones Remailer wrote: >> I believe that ten, or a hundred, or a thousand people should be able >> to pool their money and lend it to whomever they please for whatever >> reason they like. >> >> That, essentially, is what a bank is. I do not believe the government >> should dictate which people you, or your bank, are allowed to lend to. > >Create a bank where the identity of the customers are unknown and you >solve the redlining problem. I can imagine a bank whose depositors are not known. I can also imagine a bank which itself operates anonymously. How would people borrow money against real estate and remain anonymous? It seems to me that the borrower cannot do so if the real estate will act as collateral. Also, how would an anonymous bank foreclose on a mortgage? Red Rackham

3 2

Re: cypher-PUNKS...
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: dlv(a)bwalk.dm.com, cypherpunks(a)toad.com Date: Tue Dec 10 17:03:21 1996 Dimitri hath written... (and the killfiles sang...) > > That charge is every bit as foundless as the charges that you are > > responsible for the "A Daily Warning Regarding Tim May" posts > > of a while back, or the current round of remailed messages featuring > > the sickeningly cutesy ASCII graphics at the bottom. > Tim must have been a heinous baby... I would call this a non sequitur, but I can honestly say that I have no idea what the hell that sentence is supposed to mean. > The real identities of people who use the "anonymous" remails to send > out "homophobic" or otherwise "politically incorrect" materials are > frequently disclosed on the "remailer-operators" mailing list. For > example: > > ]To: remailer-operators(a)c2.net > ]Someone who proports to be from ******************* is sending out a > ]huge spam/mailbomb right now. I suggest you sourceblock the prick > ]now. How did you translate "huge spam" into "homophobic"? Are you using the Windows translation of the Russian character set, or what? You are obviously seeing something that just ain't there. dave - ----- David E. Smith, P O Box 324, Cape Girardeau MO USA 63702 dsmith(a)prairienet.org http://www.prairienet.org/~dsmith send mail with subject of "send pgp-key" for my PGP public key "Remember: King Kong died for your sins" - Principia Discordia -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMq3sRnEZTZHwCEpFAQF7GAf+JvaozDbAgY+kXv2dhi8Z43i1XusRzRzK gvJmWF5gafgdxWyBiBxjuEYNdca24jreIVWG8YbSSauvl2xt4al/jzhGLoOcBAC1 7KwydcwaEn3p1vkRmp4rwT8gxQ/Nb68z1NYZzktBxl3/Evo2kgUCkVG6xpAUBixA LKKtMAmiZlqqiTYmB/Se+RMBPjhgiGsuAosca7S/Ia3m2f7mBmyKAB7khcbgHUJ8 ARr9zfj4+pykt9z0W6SCPlxMoXNzu1ozmmHIojDVMBSAY26reGNWkLclLSrOCzyU pktVLlVMyL95TKjXomByCuNC9Dp23wHmCBKQufNRQN70c87eIbh09A== =L6ZG -----END PGP SIGNATURE-----

1 0