- cypherpunks-legacy - lists.cpunks.org

Re: (Fwd) Gov't run anon servers
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:43 PM 3/5/96, Andrew Loewenstern wrote: (my mention of secure "remailer boxes" elided) >While a solution like that would be optimal, even just a version of >Mixmaster that can use a secure RSA card would do wonders for security. The >secret key is protected in the card and can't be stolen, even by root, >without physically stealing the card. As long as the most of the remailers >in your chain don't have compromised secret keys, it probably won't matter >too much if the individual ops can examine the messages flowing through their >remailer. > >The cards are getting cheaper and can be bought off the shelf (for now). >The hardest part of retrofitting existing remailer software would probably be >extracting the data from the remailer packet and formatting it properly for >the card to do encryption operations on it (and back). I just wrote and sent off to the list some thoughts on using cheap PC hardware to do the crypto and remailer functions, thus taking the onus off the networked box to do the same. The idea of a _card_ is a good one, and one we did in fact kick around a couple of years ago. Recall the days of the "Hardcard"? A Winchester mounted on a card that plugged into a PC slot (this was back in the days when slots for cards were sometimes much more available than spare drive bay slots). A crypto card is an elegant approach, but may be less hacker-available than a really cheap PC. (And in my more paranoid moments, I imagine taking a nice, steel-cased cheapo PC and welding it shut...won't stop someone from seizing it and cutting it open, but you'd probably know if it happened...or, a return to sealing wax and seal rings! A low-tech solution to physical security, but something that may still be useful as an option.) --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Mail loop?
by rah＠shipwright.com 17 Dec '03

17 Dec '03

It looks to me like the mailing list got subscribed to itself again. I saw the intro message go by... Cheers, Bob ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Valentine Suprise
by celeste＠seeme.net 17 Dec '03

17 Dec '03

Me and my friends are so lonely!! I wish that you would come and see me. With Valentines day coming I don't want to be alone. I will do anything to make you happy, if you want me to I'll even invite a friend over to join us. Just PLEASE don't let me be alone! I'll be awaiting for you every night. I'll be at: http://www.cyber-fantasy.com/

1 0

return.C -- performance tracking tool (fwd)
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

I have been using this program for a while and decided to share it with the other readers. It is written in C++. /*********************************************************************** This program calculates the total portfolio return. It may be used to find out an individual's stock picking performance and compare it to some benchmark. Right now it compiles under Unix, but I would expect it to work under DOS and Win32 console interface. To compile it, type gcc -lm -lg++ -o return return.C This program was written because I was not satisfied with the existing portfolio tracking websites due to their extremely limited and incorrect functionality. It works by treating your investments as a "mutual fund". It tracks the number of "shares" held. It means that additional cash infusions, withdrawals, stock splits, sales of securities do not affect the per share value. This is done so that the changing size of the portfolio would not skew the estimate of the true performance of the stock picker. However, dividends, fees and recorded capital appreciation do affect the per share value. Short sales are allowed by specifying a negative stock amount. I strongly suggest that investors regularly record stock prices into their transaction files (using the VAL operator) to monitor how they are doing. USAGE: portfolio-return transaction-file-name TICKER=price TICKER=price ... EXAMPLE portfolio-return MYSTOCKS.TXT MSFT=130 T=65.56 It reads a text file that contains the record of transactions, and prices, and requests to print out the portfolio value. # This is a typical file used to calculate total return. # This file contains comments, marked by "#" characters, # and transaction info. # # Transaction info consists of records of the following form: # # INV Amount -- tells how much was invested in Category # PUR Ticker numshares share_price -- stock purchase info # SAL Ticker numshares share_price -- stock sale # DIV Ticker Amount -- how much dividend was received # WDR Amount -- cash withdrawal # VAL Ticker Amount -- Value per share # SPL Ticker new_to_old -- stock split # FEE amount -- various fees (like margin loan # interest, commission etc) # (negative FEE means incoming cash, from e.g interest on the cash held # by the broker) # PRN Comment -- Print portfolio with Comment # Happy investing. Copyright (c) Igor Chudov 1997. ichudov(a)algebra.com http://www.algebra.com/~ichudov GNU Copyright applies. There is NO WARRANTY WHATSOEVER. By using this program you agree to indemnify and hold it author harmless from any liabilities resulting in connection with your use of the program. You are allowed to copy this program freely provided that the copyright notice remains intact. */ #include <stdio.h> #include <iostream.h> #include <string.h> #include <stdlib.h> #include <ctype.h> #define Money double #define StockTicker char * #define Date int class Stock { public: Stock( const StockTicker theTicker, int theQuantity = 0, Money theValue = 0.0 ) : Ticker( strdup( theTicker ) ), Quantity( theQuantity ), Value( theValue ) { // nothing } ~Stock( void ) { delete[] Ticker; } void Purchase( int theQuantity ) { Quantity += theQuantity; } int GetQuantity( void ) const { return Quantity; }; void SetValue( Money theValue ) { Value = theValue; } Money GetValue( void ) const { return Value; } const StockTicker GetTicker( void ) const { return Ticker; } void Split( Money factor ) { Quantity *= factor, Value /= factor; } private: Money Value; StockTicker Ticker; int Quantity; }; typedef Stock * PStock; class Portfolio { public: Portfolio( void ); ~Portfolio( void ); // What can happen to the portfolios: // Add cash to the portfolio void Invest( Money Cash ); // Purchase (or sell (even short) if Quantity is negative) void Purchase( const StockTicker Ticker, int Quantity, Money Value ); // Dividend received, 1 success, 0 failure int Dividend( const StockTicker Ticker, Money DividendPerShare ); // Split, factor is new # of shares to old # of shares, 1 success, 0 failure int Split( const StockTicker Ticker, Money factor ); // Withdrawal void Withdraw( Money Amount ); // Fee -- margin interest, commission etc void Fee( Money amount ); // Change in Stock valuation int Valuation( StockTicker Ticker, Money theValue ); ///////////////////////////// // Equity = Cash + StockValue Money Equity( void ) const; Money EquityPerShare( void ) const { return Equity()/NumShares; } int GetNumShares( void ) const { return NumShares; } void Print( ostream & os, const char * comment = 0 ); protected: void Revaluate( void ); int FindStock( const StockTicker Ticker ); private: Stock ** Stocks; int NumberStocks; int MaxNumberStocks; Money Return; Money LastDate; Money Cash; Money NumShares; }; Portfolio::Portfolio( void ) : NumberStocks( 0 ), MaxNumberStocks( 100 ), Cash( 0.0 ), NumShares( 0 ), Return( 0.0 ), LastDate( 0 ) { Stocks = new PStock[ MaxNumberStocks ]; } Portfolio::~Portfolio( void ) { delete[] Stocks; } void Portfolio::Invest( Money theCash ) { //cout << "investing " << theCash << endl; if( NumShares != 0 ) { NumShares += theCash/EquityPerShare(); Cash += theCash; } else { Cash = theCash; NumShares = Cash; } } void Portfolio::Withdraw( Money Amount ) { Invest( -Amount ); } void Portfolio::Fee( Money Amount ) { Cash -= Amount; } int Portfolio::FindStock( const StockTicker Ticker ) { for( int i = 0; i < NumberStocks; i++ ) if( !strcmp( Ticker, Stocks[i]->GetTicker() ) ) { return i; break; } return -1; } void Portfolio::Purchase( const StockTicker Ticker, int Quantity, Money Value ) { int found = FindStock( Ticker ); if( found == -1 ) // need to add a stock { if( NumberStocks == MaxNumberStocks ) // need to resize { Stock ** NewStocks = new PStock[ MaxNumberStocks * 2 ]; memcpy( NewStocks, Stocks, sizeof( Stock ) * MaxNumberStocks ); delete[] Stocks; Stocks = NewStocks; MaxNumberStocks *= 2; } found = NumberStocks++; Stocks[found] = new Stock( Ticker, Quantity, Value ); } else { Stocks[found]->Purchase( Quantity ); Stocks[found]->SetValue( Value ); } Cash -= Quantity * Value; } int Portfolio::Dividend( const StockTicker Ticker, Money DividendPerShare ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; Cash += DividendPerShare * Stocks[found]->GetQuantity(); } int Portfolio::Split( const StockTicker Ticker, Money Factor ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; Stocks[found]->Split( Factor ); } int Portfolio::Valuation( StockTicker Ticker, Money theValue ) { int found = FindStock( Ticker ); if( found == -1 ) return 0; // failure Stocks[found]->SetValue( theValue ); return 1; // success } Money Portfolio::Equity( void ) const { Money e = Cash; for( int i =0; i < NumberStocks; i++ ) e += Stocks[i]->GetQuantity() * Stocks[i]->GetValue(); return e ; } void Portfolio::Print( ostream & os, const char * comment ) { os << endl << "Portfolio: " << (comment ? comment : "" ) << endl; for( int i = 0; i < NumberStocks; i++ ) os << Stocks[i]->GetTicker() << " " << Stocks[i]->GetQuantity() << " " << Stocks[i]->GetValue() << ", Total = " << Stocks[i]->GetValue() * Stocks[i]->GetQuantity() << endl; os << "Cash: " << Cash << endl; cout << "Equity = " << Equity() << endl; cout << "Number of Shares = " << GetNumShares() << endl; cout << "Share Value = " << EquityPerShare() << endl; } void ReadHistory( Portfolio & portfolio, FILE * f ) { while( !feof( f ) ) { char buf[2048]; buf[0] = 0; fgets( buf, sizeof( buf ), f ); //cout << buf; char * p = strchr( buf, '#' ); if( p != 0 ) *p = 0; // Comment # for( p = buf; *p; p++ ) *p = toupper( *p ); if( !strncmp( buf, "INV", 3 ) ) { //cout << "investing" << endl; float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Invest( amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "WDR", 3 ) ) { float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Invest( -amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "PUR", 3 ) ) { float price; int numshares; char ticker[2048]; if( sscanf( buf+4, "%s %d %f", &ticker, &numshares, &price ) == 3 ) portfolio.Purchase( ticker, numshares, price ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "FEE", 3 ) ) { float amount; if( sscanf( buf+4, "%f", &amount ) == 1 ) portfolio.Fee( amount ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "SAL", 3 ) ) { float price; int numshares; char ticker[2048]; if( sscanf( buf+4, "%s %d %f", &ticker, &numshares, &price ) == 3 ) portfolio.Purchase( ticker, -numshares, price ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "DIV", 3 ) ) { float div; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &div ) == 2 ) portfolio.Dividend( ticker, div ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "VAL", 3 ) ) { float val; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &val ) == 2 ) portfolio.Valuation( ticker, val ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "SPL", 3 ) ) { float factor; char ticker[2048]; if( sscanf( buf+4, "%s %f", &ticker, &factor ) == 2 ) portfolio.Split( ticker, factor ); else fprintf( stderr, "Invalid transaction: %s\n", buf ); } else if( !strncmp( buf, "PRN", 3 ) ) { portfolio.Print( cout, buf + 4 ); } } } int main( int argc, char *argv[] ) { Portfolio portfolio; FILE * input; if( argc >= 2 ) { if( (input = fopen( argv[1], "r" )) == 0 ) { fprintf( stderr, "Can't open %s.\n" "Usage: %s activity-file TICK=val TICK1=val ...\n", argv[1], argv[0] ); exit( 1 ); } } else { input = stdin; } ReadHistory( portfolio, input ); for( argc--; argc > 1; argc-- ) // process arguments of form "TICKER=value" { char buf[ 2048 ]; strcpy( buf, argv[argc] ); for( char * p = buf; *p; p++ ) *p = toupper( *p ); char * pvalue = strchr( buf, '=' ); if( pvalue == 0 ) { cerr << "Wrong argument: " << argv[argc] << ". Must be of form TICKER=value" << endl; continue; } *pvalue++=0; float value; if( sscanf( pvalue, "%f", &value ) != 1 ) { cerr << "Wrong argument: " << argv[argc] << ". Must be of form TICKER=value" << endl; continue; } if( !portfolio.Valuation( buf, value ) ) { cerr << "Ticker " << buf << " not found in the portfolio!" << endl; } } portfolio.Print( cout, "Final Result" ); printf( "\n\n" "Copyright (C) Igor Chudov, ichudov(a)algebra.com,\n" " http://www.algebra.com/~ichudov\n\n" "No warranty is provided with this free program. GNU Copyright applies.\n" ); }

3 4

DDJ Crypto CD has arrived!
by Peter Trei 17 Dec '03

17 Dec '03

Well, it's finally here. Frankly, I'm a little disapointed with the presentation. It's based around a program called Hyper Reader, from Intergaid. This seems a bit out of date - the copyright runs from 1987-1994. While this may have been driven by a desire to support Win 3.1 without extra software, an HTML based approach would have been my preference. I've encountered a few minor bugs in the few minutes I've played with it; not all of the buttons work properly, and the color maps go to hell when the program's window is not selected. While the book data is stored in some proprietary format with an *.hw4 extension, chapters can be easily exported to flat text files. They can also be exported in WP format, but diagrams don't seem to come out (at least when I export them to MS Word) - figures seem to be scanned bitmaps from the books. Here's the copyright data, which lists the books present: >Applied Cryptography, Cryptographic Protocols, and Computer Security >Models by Richard Demillo. Copyright 1983, American Mathematical >Society. All rights reserved. >Applied Cryptography: Protocols, Algorithms, and Source Code in C, >Second Edition, by Bruce Schneier. Copyright 1995, John Wiley & Sons, >Inc. All rights reserved. >Contemporary Cryptology: The Science of Information Integrity, edited >by Gustavus J. Simmons, Copyright 1992, IEEE. All rights reserved. No >part of this book may be reproduced or transmitted in any form or by >any means, electronic or mechanical, including photocopying, recording >or by any information storage and retrieval system, without permission >in writing from the IEEE. >Cryptography and Data Security by Dorothy Denning. Copyright 1982, >Addison-Wesley Publishing Co., Inc. All rights reserved. No part of >this book may be reproduced or transmitted in any form or by any means, >electronic or mechanical, including photocopying, recording, or by any >information storage and retrieval system, without permission in writing >from Addison-Wesley Longman, Inc. Use of this licensed CD-ROM version >is subject to the terms of the individual, noncommercial license >granted the purchaser of this CD-ROM version. >Cryptography: A New Dimension in Computer Data Security, by Carl Meyer. >Copyright 1982, John Wiley &Sons. All rights reserved. >Cryptography: Theory and Practice, by Douglas Stinson., Copyright 1995, >CRC Press. All rights reserved. >Handbook of Applied Cryptography, by Paul C. Van Oorschot, Scott A. >Vanstone, and Alfred Menezes. Copyright 1996, CRC Press. All rights >reserved. >Military Cryptanalysis, Volume I, by William Friedman, Aegean Park >Press. All rights reserved > Military Cryptanalysis, Volumes II, by William Friedman, Aegean Park >Press. All rights reserved. >Military Cryptanalysis, Volumes III, by William Friedman, Aegean Park >Press. All rights reserved. >Military Cryptanalysis, Volumes IV, by William Friedman, Aegean Park >Press. All rights reserved. >"RSA Laboratories FAQ on Cryptography," "RSA Laboratories Technical >Reports," "RSA Laboratories Security Bulletins," and "CrytoBytes >Newsletter" Copyright 1997 RSA Data Security, Inc. All rights >reserved. For those wondering: Applied Cryptography includes the source code appendix. I have not checked if it has the 5th printing corrections. Peter Trei ptrei(a)securitydynamics.com

3 2

Re: Bombings, Surveillance, and Free Societies
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

At 12:51 PM 3/4/96, Timothy C. May wrote: > Personally, while I feel sorry for the dead in Israel, I think anyone who > moves to a small desert state surrounded on all sides by Arabs who want > their land back is asking for trouble. I argue that the invading of countries, bombing of cities, starving of towns, burning of villages, hijacking of ships, and murdering torturing, beating and kidnapping of Arabs to be "asking for trouble." > Being an atheist, I treat all religious mystics as suspect. When a bunch of > people leave London and Chicago and Paris to live in the desert, surrounded > by sworn enemies with nuclear capabilities, I think whatever happens to > them is...."unsurprising." I disagree with you here; the only side with nuclear capabilities is Israel. We cannot keep having this mixture of Jews and Arabs. We have to stop the blurring. There has to be a separation, not just a technical closure. We have to decide on separation as a philosophy." - Yitzhak Rabin

1 0

Anonymous Web Browsing
by A. Padgett Peterson P.E. Information Security 17 Dec '03

17 Dec '03

Realy two questions - will treat each in order > I have followed the ongoing discussion on PGP security, remailers >and the like. I am wondering if the current trend with interactive Web >browsing, Java, etc, is not going to create a privacy problem every bit as >significant as insecure e-mail. As these "applets" become more >sophisticated are we not going to have to face up to the issue of dynamic >links to web sites that gather a lot of info from your computer as you >interact with it? It is possible to design a "prophylactic" environment that would control the interaction between your web browser and the PC. As was determined with FV's keystroke monitor, it only worked because nothing prevented it, not because nothing could prevent it. Such links can be prevented from gathering information but I suspect it would be more creative to feed it information that you would like others to believe. > My question is this: Would it be possible to create a web site that >would function along the same lines as remailers do? Something that would >allow a person to browse anonymously. This is a different question. By nature, web transactions are interactive which means that both sides must know how to reach each other. You could set up a limited proxy and load it with the preferred information but I suspect it would be easier to just send $20 and a requested username/password to a local provider for a PPP account. Would not be "anonymous" but if done carefully, the provider would not have to know who was using the account. In the case of my local provider, no proof of my identity was ever required and the entire set-up was done over the telephone (and I was not at home at the time). Did not try to hide my identity but could have. Warmly, Padgett

1 0

Re: (Fwd) Gov't run anon servers
by tallpaul＠pipeline.com 17 Dec '03

17 Dec '03

On Mar 04, 1996 15:11:43, 'tcmay(a)got.net (Timothy C. May)' wrote: > >At a Cypherpunks meeting a couple of years ago we spent some time >brainstorming this. It seemed plausible that a small outfit could make such >"remailer boxes" and sell them cheaply. (Hardware prices have plunged even >further.) > I had written on similar things over the past few months, on the "$20 Mixmaster" post. New hardware drives with replaceable media in the 100+ Mb range has developed. The Syquest 135 Mb drive, featured in the latest issue of _PC Mag_ can, with the parallel port version, reportedly boot. This means one can have the drive that weighs about two pounds and a $20 disk, place another OS on the disk, and have a very portable remailer system. I viewed the whole thing as more geared to the amateur market, whereby jr. high school students and the like could set up their own remailers, known only to a "small circle of friends." T.C. May's theory of the commercial "mom and pop" version is just as valid. One major way to "increase the noise level" is to greatly increase the number of remailer, especially small ones that may come and go based on little more than word of mouth advertising. Imagine two scenarios. In scenario one, the are two or three large xerox stores in a city. All advertise in the yellow pages and are known throughout the city as the place you go to have your xeroxing done. They all do a tremendous volumn of business. In scenario two, there are an enormous number of small stores with xerox machines, large numbers of home offices with the machines, and large numbers of people with word-of-mouth knowledge of friends with machines to use. What society is easier to crackdown on? --tallpaul PS: A week or two ago, someone posted a notice of anon remailers under Windows that was in alpha test and due in beta in about a month. Same thing. Same benefit.

1 0

Re: Valentine Suprise
by William R. Butler 17 Dec '03

17 Dec '03

FUCK-OFF!!!!!!!!!!!!!!!! ************************ ----Original Message Follows---- From: celeste(a)seeme.net Date: Mon, 23 Feb 1998 17:57:41 -0800 (PST) To: <cypherpunks(a)toad.com> Subject: Valentine Suprise Reply-To: celeste(a)seeme.com Me and my friends are so lonely!! I wish that you would come and see me. With Valentines day coming I don't want to be alone. I will do anything to make you happy, if you want me to I'll even invite a friend over to join us. Just PLEASE don't let me be alone! I'll be awaiting for you every night. I'll be at: http://www.cyber-fantasy.com/ ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Re: Duress
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 11:38 AM 3/4/96 +1000, Greg Rose wrote: > At 2:49 PM 3/3/96 -0500, Dr. Dimitri Vulis wrote: > One of the private pilot magazines reported that a small plane operator > used the code (because his airplane was, in fact, being hijacked). When he > landed the airplane, it was surrounded by LEA, and in the ensuing gun > battle, everyone on the airplane died. The went on to say that the safety > of the passengers and airplane are the pilot's primary responsibility and > that pilots should consider this incident when deciding to use the code. > >Actually, that is an urban legend which grew out >of a real incident. What actually happened was >that they thought the private pilot couldn't >really have been hijacked, so when he landed *he* >was arrested for creating a public nuisance or >something. It wasn't till later, when they found >the shotgun-toting druggie, that they believed >him... > >Greg Travis was the pilot's name, I imagine >AltaVista might find his original posting. My posting, not Dr. Dimitri Vulis'. I certainly don't remember your version as the one I personally read. The magazine could have been wrong, but I don't think my memory of the article is far enough off for them to be the same incident BTW - I think the magazine was "Flying". Regards - Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0