- cypherpunks-legacy - lists.cpunks.org

Eternity Uncensorable?
by Mark Grant 17 Dec '03

17 Dec '03

Seems to me there's a fundamental flaw with the current Eternity server; as I understand it the messages are identified by a subject which is the SHA of their URL, so all that a government need do to censor a particular site is to scan for those messages and issue cancels. Sure, your site and those upstream may not accept such messages, but potentially they can still wipe out a large fraction of the system or at least force users to change their eternity URLs on a regular basis. It also doesn't provide true security, since when someone sets up an illegal site the gubment can find the messages on Usenet, decrypt them, and then threaten the remailer operator who posted them. I understand that this is just an alpha release, but I don't see any obvious way to fix these problems with a Usenet-based system. Mark

9 18

Re: Modern Journalism (was: All about Bernstein)
by steven ryan 17 Dec '03

17 Dec '03

I want to puhhff you up -- SNL? >We need to "Just say No!" to journalists asking for "more personal details" >to spice up their stories... >I no longer read the many puff pieces on Phil Zimmermann, for example, as >they all are seemingly in the same format: huge closeup photos of Phil's... You may not want to read those stories any more because you know all the details. But a puffed up cover story on Phil Z in People magazine would be one of the best things that could happen. Some actresses feel that any publicity is better than no publicity and they may be right. Given that we are not going to get many in depth technical articles in the mainstream press, puff pieces are better than nothing. In the last month on two different occasions I have been in casual conversations at work when the subject of PGP and cryptography came up based on articles in the local media. I was able to answer the questions and explain in detail the benefits of PGP and as well give out a disk loaded with the program for them to try. If the puff pieces weren't read by these people the subject would not have come up and I wouldn't have been likely to have had the opportunity to get these people interested in using PGP. Given that the average person still knows nothing of cypherpunk technology and issues and probably wouldn't mind if it was all outlawed in the name of national security, anything that keeps the topic in the public's eye is good. Steven Ryan sryan(a)reading.com

2 1

SSL trouble
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

DD> In conclusion, I think random searching is the way to go. It's even better DD> than Monty's pre-allocation with quad-coverage. Here's a thought: How about the best of both worlds. Keep the double-coverage, bidirectional sweep, and allocate only one "team". The client software will take the pre-allocated segment, and then go random for the rest of the run. * GHOTI = FISH? touGH: GH = F wOmen: O = I dicTIonary: TI=SH. I love English! --- * Monster(a)FAmend.Com *

1 0

Applied crypto, security guru needed, from Coopers & Lybrand
by Declan McCullagh 17 Dec '03

17 Dec '03

[From a CMU computer science department mailing list. --Declan] ---------- Forwarded message ---------- >From: Dahl Gerberick <Dahl.Gerberick(a)us.coopers.com> > >Hi, > >I recently took a senior level position with Coopers & Lybrand in Boston. >As such it has come to my attention that they are looking for someone with >the following background. > >I do not expect that you will know where I can find such a person right >now, but if you keep this message handy you might think of me if that >person should come along in the near future. > >If you should find someone who meets these requirements please get back to >me, or have them contact me directly. > > Dahl Gerberick > 617-478-9936 (Office) > 617-478-5900 (Fax) > 617-784-2701 (Home) > gerberick(a)acm.org > >Thanks >Dahl - - > >PS: Feel free to redistribute this message as you see fit. > > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - >- - - - - - - - - - - - - - - - - - - - - > > 1. Minimum 5- 10 years experience in applied cryptography > > 2. Ability to design and implement security applications that utilize > encryption technology > > 3. Extensive knowledge of X.509 standards for digital certificates > > 4. Detailed knowledge of all prevailing algorithms, DES, IDEA, RSA, > Elliptic curve, etc. > > 5. Algorithm development background not necessary > > 6. Intimate knowledge of all national standards for cryptographic > implementations such as ANSI X.9 working group standards > > 7. Intimate knowledge of all commercially available encryption > products from vendors such as Entrust, Verisign, Cylink, IBM, > GTE, etc. > > 8. Knowledge of legal implications of electronic commerce such > as ABA Digital Signature standard > > 9. Security consulting background a plus > > 10. Technical skill in TCP/IP, UNIX, internetworking technology > > > >

1 0

RE: 25,000,000 People
by mail＠sendmailco.com 17 Dec '03

17 Dec '03

Would you be interested in... * Sending out Bulk Email FREE for 30 Days? * Receiving 25 MILLION Email Addresses FREE of charge? * Sending out Bulk Email using your CURRENT Internet Account, without EVER having to worry about it being canceled? * Sending out a FREE Bulk Email Advertisement for your Business or Web Page to over 250,000 people per day? * Posting a FREE Ad for your business to over 25,000 Newsgroups in under three hours? To find out how to do all of this and more for FREE, email our autoresponder at: send(a)nim.com You MUST Place the word "FREE" in the Subject Line so our autoresponder mailbot can send you this FREE Information! To be removed from our mailing list, email our autoremover at: remove(a)nim.com You MUST Place the word "REMOVE" in the Subject Line so our autoremover mailbot can remove you from our mailing list.

1 0

Greetings
by dr261＠cleveland.Freenet.Edu 17 Dec '03

17 Dec '03

Greetings, everyone. I just discovered this list a few days ago and have been monitoring since then. It's pretty interesting. I'd like to get involved. I'm very interested in cryptography and mathematics, but I have very little cryptographic experience. (hm. Is there a Cypherpunks FAQ?) From the conversation that's going on, I am led to beleive that Cypherpunks is setting up a distributed system to break some cryptographic system or factor a large number. I would expect that a constant net connection would be a requirement to participate in such an interesting event. In any case, I have a 486DX-50 running Linux and I'm interested and curious and willing to learn and help in any way I can. -- ================================================================= Tobin Fricke, Alias Light Ray dr261(a)cleveland.freenet.edu TobinTech Engineering KE6WHF Amateur Radio The Digital Forest BBS (714) 586-6142, 28800bps

2 1

Re: non-censorous spam control (was Re: Spam is Information?)
by Mark Grant 17 Dec '03

17 Dec '03

On Thu, 31 Jul 1997, Jeff Barber wrote: > Network bandwidth used for the purpose of email transport, > even with increased spamming factored in, is simply too low to justify > charging much for it. It will still be *way* cheaper than surface mail. Yep; which is why it's a bad idea. We don't need net postage to pay the ISP, we need net postage to pay *me* to read the spam. Making them pay $0.0001 to send a message will have little impact, but making them pay me $1 to read it certainly will (i.e. my filters could block all potential spam unless it includes a dollar of ecash). I have no problem with spammers subsidising my Net access, I just object to having to pay for their crap. > So unless the percentage of people who delete it instantly, sight-unseen, > is higher than I suspect or new tools make it easy to filter out all > spam, it's going to remain economically advantageous for the spammers > to target broadly. I've seen one spam in the last two weeks. The other 100k or so was blocked by my filters; I'm almost starting to miss it. When you actually sit down and analyse the spam most of it has so many obvious 'spam-tags' that you can easily work out a set of rules to catch them. The only disadvantage is that on a couple of occasions it's caught mail from friends when they sent it through a site which appends advertising rather than from their normal address. Mark

1 0

nym server development mailing list
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

------- Forwarded Message To: Remailer-Operators(a)c2.org From: Bryan Strawser <feanor(a)anduin.gondolin.org> Subject: Nym Server Development.... Date: Fri, 11 Aug 1995 21:04:22 -0500 (EST) John Fleming, along with a bit of support help from myself, is developing a nym server that he is intending to release to the public once we are satisfied with the performance and the state of the code. At this point and time, John has pushed the code to the point where we have am experimental nym server operating that is being constantly refined and features added. Along the same lines, I am presently working on solid documentation for when the nymserver is ready for public use, and for the later public release of the code. John created a mailing list for those interesting in contributing to the development of his nymserver and as a forum for discussion of nymserver related issues. So far, there have been few folks subscribed, and no answer from those that are presently subscribed to the list. I find this rather disappointing. This is your chance to get involved in developing this server. There has been alot of interest expressed in nymservers on this list previously, as well from other folks that presnetly use the type I and II remailers that are running today. Just like the other types of anonymity out there, a nymserver has many viable reasons for existance. The lack of publically available code for such a server, as there is for remailers, should motivate us to get behind John and his efforts. To subscribe to the nymserver development & discussion forum, send a message to majordomo(a)sephiroth.org with the line "subscribe nyms <your name>" in the body of the message. Questions about the nymserver should be directed to that list so that all can be involved in the development. Thanks for your input, Bryan - -- Bryan Strawser, Gondolin Technologies, Bloomington, IN USA Remember Waco feanor(a)gondolin.org Live free or die ------- End of Forwarded Message

1 0

Mixmaster Questions
by Q Mixmaster Remailer 17 Dec '03

17 Dec '03

Is there an automated way I can keep my PUBRING.MIX and TYPE2.LIST files updated automatically? (I'd prefer to be able to "finger" them from somewhere and redirect the results into a file.) Also, does anyone do a periodic "ping" of Mixmaster remailers to make sure they're up and running? I only run Mixmaster as a client, and not as a remailer, and I'd like a way to make sure I don't send a message to the bitbucket by accidentally chaining it through a "dead" remailer. Also, what is the latest version of Mixmaster? Thanks.

1 0

Sierra On-Line Authentication Key
by NCSA HTTPd 17 Dec '03

17 Dec '03

Welcome cypherpunks to SierraWeb. We are pleased to present you with the key to our magical kingdom in the form of a verification key. Your Sierra Web verification key is... humane-tomato Be sure and make a note of it! The next time you log in and are prompted for it, type in your verification key. Remember, your verification key is not your password. Your password is the word you chose when registering. Use the following URL to verify your membership: http://www.sierra.com/authenticate.html

1 0