- cypherpunks-legacy - lists.cpunks.org

VER_tgo
by John Young 17 Dec '03

17 Dec '03

9-11-95. W$Japer: "VeriFone Expected to Announce System For Purchasing Goods on the Internet." VeriFone, Inc., which manufactures terminals through which merchants scan consumers' credit cards for authorization, said it will provide merchants who wish to market goods on the global computer network with a complete set of tools to handle electronic cash, electronic checks and credit-card payments. The system consists of four different products: A consumer would use the software equivalent of a wallet, which could include different forms of payment, such as electronic checks, cash, or credit cards to purchase goods. The consumer would also use a smartcard inserted in a device connected to a PC to verify his identity. The card would also contain other cardholder information and eventually could include electronic cash. Philips and Oracle Plan Electronic Mail Without Use of PCs Philips Electronics NV and Oracle Corp. plan to offer electronic mail without personal computers, using Philips phones that have small display screens and keyboards. Gerrit Schipper, president of Philips Home Services, said the new e-mail service was designed to increase the services' value and appeal to the 70% of U.S. households that don't have PCs. 2 go: VER_tgo (5 kb)

1 0

Re: Purple Boxes
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> Has anyone ever tried putting PGP on a chip??? RSA??? (Are these too > slow for realistic real time hardware voice/data encryption??) We have implemented a public-key system in smartcards. The secret key is completely generated and hidden inside the card. The public key system is TESS (RFC1824). An authenticated key exchange is perform by the card in about one second. Hadmut

1 0

A Rant about Senator James Exon
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:57 AM 2/10/96, Mark Allyn (206) 860-9454 wrote: >Allright. That does it. > >I am going to volunteer to try to make a perl script that >I will make available that will automatically email every >congressman that has an email address. I will include a pre >pared text of the email message. All you would have to do is >to sign it and it would send the same message to all of them >with email addresses automatically. I can even have it have >several prepaired texts so that they are all slightly different >so that any funky gatekeepers at the congress email sites that >attempt to keep out spams could be defeated. > >What do you think? Is this worth it? Here's something I did about Senator James Exon: My complaint about James Exon I would like to take a moment to comment on James Exon's statements. What follows is a set of observations I have made about inane zombies. I truly suspect that his opinion is a lazy cop-out. If he gets his way, I might very well kill somebody. This is explicitly or implicitly expressed or presupposed in most of the material I plan to present. To Exon, terrorism is a kind of religion. This is not the first time we've had trouble with unreasonable goofy-types, and it certainly won't be the last. His claims are a cesspool of alarmism. If you need proof that he is off his rocker, then just take a look at him. Exon has a driving need to reduce human beings and many other living organisms to engineered products and mere cogs in the social machine. Ostensibly, he does not intend to insult my intelligence, but in fact, insipid porn stars like him tend to conveniently ignore the key issues of this or any other situation. Speaking of insincere megalomaniacs, it would be downright ungrateful for him to censor any incomplicitous principles. It's a sad world where fickle worthless-types have the power to feed us a diet of robbery, murder, violence, and all other manner of trials and tribulations. After all, I myself unequivocally maintain that Exon should take more responsibility for his actions. To put it another way, he likes to have difficult social issues presented to him in simple, black-and-white terms. I don't see how he can be so abusive. That doesn't necessarily mean that he is intentionally being stupid. Rather, it means that his attempts to turn the trickle of alcoholism into a tidal wave are just a game to him. Although Exon has tremendous popular appeal, Exon has come very, very close to making me defend my rights. He should just quit whining about everything. He feels he has not only a right, but also a duty, to toy with our opinions. His idea of a good time is to torture jealous radical hedonists. An inner voice tells me that Exon's claims are pure tripe. To sum it all up, pesky deranged moviegoers like James Exon often think they have the right to flush all my hopes and dreams down the toilet. -Tim May P.S. As many of you may already know, a "rant generator" can be found at http://www-csag.cs.uiuc.edu/individual/pakin/complaint Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 3

Re: question about reputation
by tcmay＠got.net 17 Dec '03

17 Dec '03

How reputation systems work is an important issue. I hope we can discuss it further. At 10:32 PM 9/10/95, Wei Dai wrote: >In an economy based on positive reputations, how does one acquire a >reputation capital? One way may be to initially perform services at a >price below cost, but this has some problems. > >For example, Alice starts a anonymous consulting service, and announces >that she will answer the first ten queries for free. Upon hearing this, >Mallet immediately starts another consulting service, and announces the >same offer. At this point Mallet can simply forward his customers' >queries to Alice and Alice's answers back to his customers. Thus, he gains >reputation at no cost. > >On the other hand, this "man-in-the-middle" attack can also work against >conventional True Name based services, but perhaps with less effect. Has >anyone ever heard of this being done? This line of reasoning is a variant of the "Chess Grandmaster" scheme, wherein one gains the reputation of a chess grandmaster by echoing the moves of a chess grandmaster playing in another game. I believe this is described in various crypto books, but I haven't looked it up here. In practice, nothing so simple as an "Ask any 10 questions" would be a practical way to gain reputation. If Alice is trying to build up a rep, she'll choose her customers with some care, or make sure that alternate channels also exist. >Is there a better way to acquire a good reputation? Directly contacting a larger group, such as this list, is usually a faster and better way to build a reputation than in, say, answering only questions directly made. Admittedly, many consulting cases involve direct contacts. However, the reputation of a Pr0duct Cypher, or a Black Unicorn, or a Tim May, or a Wei Dai, is usually made in a public forum, not primarily in one-on-one contacts. While not all of us sign our posts, the principal is roughly the same: we are communicating directly, so man-in-the-middle attacks, or "Chess Grandmaster" attacks, are fairly ineffective. And practically speaking, if someone hires _me_ as a consultant, it is probably based on past achievements, through multiple channels. This would apply to digital pseudonyms as well, though not as directly. (Humorous Sidenote: an informal variant of the Chess Grandmaster approach is to use the best arguments found on one list on _another_ list. Another variant, widely used, is to adopt the best arguments of others and use them one's self (oneself?). This is how memes spread, and is central to the advancement of knowledge.) --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

I need exportable crypto revisited.
by Darrell Perko 17 Dec '03

17 Dec '03

Greetings; Thank you all for your amazingly quick responses! However, I should have noted in my original message that this encryption is to meet a contractual point for a commercial product to be delivered soon. The product can have one and one only version to be boxed and shipped and will be sold internationally. The encryption portion will be dynamically linked, so real encryption will be available on the net just not in the box. Thanks, Darrell Perko dperko(a)efn.org

4 3

[NOISE]More meaty CDA material
by stevenw＠best.com 17 Dec '03

17 Dec '03

Forwarded: The article starts with "SAN ANTONIO, Texas -- You motherfuckers in Congress have dropped over the edge of the earth this time." and gets better. >The American Reporter, working in conjunction with other groups opposed >to the CDA, commissioned a writer to produce a special article to >celebrate Clinton's signing of the new the law. > >Steve Russell, the author, retired after 16 years as a trial judge >in Texas and is an Assistant Professor of Criminal Justice at the >University of Texas at San Antonio. > >This article was specifically and carefully designed to be completely >and utterly in breach of the CDA. If you are opposed to the CDA and >you are not offended by the "seven bad words", you'll probably find >it highly entertaining and insightful. > >OTOH, if you are easily offended and don't like bad language, JUST >DON'T READ IT. > >If you are easily offended and like to be offended and then like to >file Police Reports, please go ahead. After all it was written to >help ensure that the CDA gets challenged in the courts as soon as >possible. > >Here's the URL and don't tell me I didn't warn you: > >http://www.newshare.com/Reporter/today.html > > >-- >|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| >| Malcolm Hoar "The more I practice, the luckier I get". | >| malch(a)malch.com Gary Player. | >| http://www.malch.com/ Shpx gur PQN. | >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ------------------------------------------------------------------------- Steven Weller | "The Internet, of course, is more | than just a place to find pictures | of people having sex with dogs." stevenw(a)best.com | -- Time Magazine, 3 July 1995

1 0

Updated type2.list/pubring.mix
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello Everyone, I just put up an updated type2.list/pubring.mix on vishnu.alias.net. I took armadillo out as it has not been responding to pings or to requests to the owner as to it's status. If I hear from the owner, I'll add it back. John Perry - KG5RG - perry(a)vishnu.alias.net - PGP-encrypted e-mail welcome! WWW - http://www.alias.net PGP 2.62 key for perry(a)vishnu.alias.net is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by mkpgp1.6b4, a Pine/PGP interface. iQEVAwUBMRwRFKghiWHnUu4JAQEeAwf+N+3sIloKkhVXqb2TnjpVt6UsmVyUcL6H ZkO2bck/9BsI8DBedr7hyxUni8ZUUOxN0SFZacoTbsvzOFeesYtRHNilApVq+qq/ ZaO3B2DOUyWbMMMtSRoMgjVDvzvmGmw6Z7Ayq6P1z6elWn9Jd+MqWSOjiv3qSSnu SbJmSvnT69eokrXxNSsmIQMRGxdH+r4A5i5iKN6x/9cNxl7AK55i6x10bcxEI5Yo BF2/3tsZiR664wIwrVRk2srdWfnOIAdvnsQbzJV3so57GvBfUid0JbBC96mThYHR Fs5m6PH9A7g5TXveNyylIFQZFRFyD2cq6QBGtPos0DFyAKn/6bp4aQ== =1hD1 -----END PGP SIGNATURE-----

1 0

Re: Certificates/Anonymity/Policy/True Names
by Rich Salz 17 Dec '03

17 Dec '03

I think there are many people who might be willing to use an "anon CA" should it exist: Whistleblowers, perhaps Deep Throat would have used email People writing letters to the editor who don't want to trust the editor to withhold their info People who desire anonymyity yet don't want to trust the gov't to certify their communications as authentic/forged (Unabomber, Om Shin-rkyo) Any number of writers who have used psuedonyms and now want to get paid in ecash; Mark Twain?

3 2

Re: NSA Security Manual
by Black Unicorn 17 Dec '03

17 Dec '03

Mr. Toal said : What I found interesting was that it was published in Phrack about a week ago, and nothing happened, but when Grady reposted it, suddenly phone-calls come aflying. Either this means that the NSA read Grady's posts more diligently than everyone else's, or Grady went out of his way to tell them that he'd posted it, which wouldn't surprise me... G <- This is partly up to Grady to verify, but I suspect the answer lies in the different frequency and lag time between examination of the net and examination of Phrack. Grady's probably just got noticed first.

1 0

NSA manual.
by Black Unicorn 17 Dec '03

17 Dec '03

Grady says: Actually I speculate that someone who saw my reposting helpfully phoned the NSA about the security breach. But SDO10 didn't give me that information... Grady <- Sorry for the bandwidth, this sounds more reasonable than any active scanning. -uni- (Dark)

1 0