- cypherpunks-legacy - lists.cpunks.org

Re: FidoNet Remailer
by jgrubs＠left.webcasters.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- RobL <robl(a)on-ramp.ior.com> writes: > At 04:34 PM 10/20/95 -0400, Jim Cannell wrote: > > > >=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > > > >-----BEGIN PGP SIGNED MESSAGE----- > > > >I have been a long time lurker on this list, as well as having a long time > >interest in crypto. Most of my activity in this area has been on FidoNet > >rather than the internet. Due to the control phreak nature of much of > >FidoNet, I've spent a lot of time and effort in an attempt to just simply > >route around the bastards. I created the SecureMail system, which is a > >network of FidoNet nodes that agree to route any and all traffic without > >monitoring or censorship. Within SecureMail, encrypted traffic is not > >only permitted, it is encouraged. > > > At the end of the month, I will be putting my BBS back online with new > software which is more Fido friendly than what I had been using.. I would be The Fido remailer appears to be drawing some interest. Fidonet is often criticized (by me among many, many others) for being dull, provincial, and dominated by power phreaks. However, the Fidonet connectivity protocols have much to be admired from the 'punks perspective. Internet has great speed and bandwidth, but network routing is "hardwired." Fidonet is frequently slow and narrowband, but routing is much more flexible. The so-called "nodelist" contains the node number (the equivalent of IP number), various technical parameters, and the dial-up telephone number and availibility schedule at which e-mail/data calls can be accepted. Since the access number of every site in the network is known, you can send e-mail directly to the destination site if you wish not to use standard, fixed routing. This, plus call forwarding and laptops at pre-arranged temporary locations, means Freeh's wiretap problem is now the need to monitor every call at every ESS. Hence, his curious request for huge wiretap capacity. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: LIBERTY!! Use it or lose it!! iQCVAwUBMIvDZt74r4kaz3mVAQG74wP/XhD/g9jE/sNcP5dQWskd95yJSPgJgXac Z42Aj1QfR1fchG4v1A2iuUsaKDma3MU/whn4gqMxJPVjeat6D7wvzU0DzSj7eeSk mAjVZNnZcmGcXiTy4ueTBcdttgi0JV2g0djijOvKCGx48fMIUy8zWK9vPFe7kpkb hDzcqlpD5Xw= =ObiT -----END PGP SIGNATURE----- -- WebCasters(tm) James C. Grubs jgrubs(a)webcasters.com 6817 Maplewood Avenue Tel.: 419-882-2697 Sylvania, Oh 43560 Fax: 419-885-2814 Internet consulting, HTML programming, Information brokering

1 0

Re: Don't Kill the Messenger--A New Slant on Remailers
by Rev. Mark Grant 17 Dec '03

17 Dec '03

On Fri, 20 Oct 1995, Rev. Mark Grant wrote: > I suspect that I could easily hack this into Mixmaster in a day or two, Ok, I have an initial version that works on single-packet messages (there seems to be a lot of code duplication for multi-packet messages), and ought to have it finished off and tested by the end of the week. I doubt I'll be able to set up such a remailer, but I'll release a patch for 2.0.2 and hopefully Lance can incorporate it into the next release as a compile-time option. Mark

1 0

Saudi Arabia?
by mixmaster＠obscura.com 17 Dec '03

17 Dec '03

Does anyone know what restrictions there might be on the use of crypto (pgp) in Saudi Arabia?

1 0

COMMUNITY CONNEXION TO OFFER REWARD FOR REVEALING HOLES IN ECASH
by sameer 17 Dec '03

17 Dec '03

For Immediate Release Contact: Sameer Parekh sameer(a)c2.org 510-601-9777 (pager: 510-321-1014) COMMUNITY CONNEXION TO OFFER REWARD FOR REVEALING HOLES IN ECASH October 23, 1995 - Community ConneXion, an internet privacy provider in Berkeley, California, announced the extension of its existing "Hack" contests to the electronic cash system announced today by Digicash bv and Mark Twain Bank. "The ecash deployment an important step towards making internet commerce more than just a curiosity," said Sameer Parekh, President of Community ConneXion. The contest is meant, as with the other "Hack" promotions being run by Community ConneXion, to encourage the examination of the security of the ecash system so as to reveal holes before they are exploited by a criminal element. Community ConneXion hopes that the inquiry being done into the security of these products results in a secure infrastructure for the new paradigms provided by internet commerce. "All internet commerce systems thus far released have been based in old, out-of-date, insecure technology, such as credit cards. DigiCash is the first revolutionary system which can change the way we do business," said Parekh. "If the move to internet commerce does not radically improve the way people do business, then we have not taken full advantage of the potential inherent in the technology." Details regarding the Hack DigiCash promotion are available on Community ConneXion's webserver at http://www.c2.org/hackecash/. Contest submissions should be sent to hackecash(a)c2.org. Community ConneXion is the premier internet privacy ISP. They offer anonymous accounts, remailers, and psuedonym servers, in addition to the standard ISP fare of webspace and dialup IP access. Information is available from http://www.c2.org/ or from sending email to info(a)c2.org. Ecash, DigiCash, Cyberbucks, and Mark Twain Bank are trademarks of their respective owners. This promotion is not affiliated with DigiCash bv nor Mark Twain Bank.

1 0

ANNOUNCEMENT: Digest Version Changes Hosts
by Alan B. Clegg 17 Dec '03

17 Dec '03

The digest version [cypherpunks-d] of the cypherpunks mailing list has been moved to a faster host. Previously it was under the care of majordomo(a)gateway.com, but it has been moved to the care and feeding of majordomo(a)hidden-foes.gateway.com. The new machine has a big more disk, a bit more processor, and is on the fast end of a T1 [the other was at my home on the good 'ole shared 28.8k SLIP]. ANYWAY----> If you were subscribed to the digest version already, you are still there. If you would LIKE to subscribe to the digest version, just send e-mail to 'majordomo(a)hidden-foes.gateway.com' with the line 'subscribe cypherpunks-d' in the BODY. The digest is created every 40k [or about 2-3 times/day it seems]. Please let me know directly if there are any problems with this new system. BTW, the first issue after moving to the new system will be Volume 2, Issue 1. Thanks, -abc

1 0

Mandatory ID in California?
by Ian Goldberg 17 Dec '03

17 Dec '03

>From "The Daily Californian", Wed., 25 October, 1995, page 3: <snip> "Police were called to the scene by an officer who passed Burton and smelled marijuana smoke, Phelps said. The officer believed it was coming from Burton's cigarette. "The officer issued a citation to Burton for smoking marijuana and requested to see identification. Burton refused to show identification and argued that smoking marijuana is legal in Berkeley, Phelps said. "The officer, in accordance with police policy, arrested Burton for refusing to properly identify himself." <snip> That last sentence seemed ominous to me... - Ian

1 0

Info: Elementrix POTP
by Dana W. Albrecht 17 Dec '03

17 Dec '03

Forwarded from sci.crypt: In article <45t9oh$6vd(a)newsbf02.news.aol.com>, whmurray(a)aol.com (WHMurray) writes: > In article <45qkp5$8rh(a)netaxs.com>, grendel(a)netaxs.com (Michael Handler) > writes: > > >It > >looked somewhat like a stream cipher that generates its key by measuring > >packet lag over TCP/IP. General consensus was that any key determined > >from public information wasn't secure. > > It uses a new symmetric message key for each message. The key for message > n is a function of that for message n-1 modulated by the content of > message n-1. However, it operates at the message layer, not the TCP/IP > layer. In a given population, everyone in the population can begin with > the same key. As messages are exchanged between any two parties in the > population, they end up with a key which is unique to them. The system is > synchronous. If any traffic between two parties is lost, they must > re-synch; keys between each of the parties and other parties will not be > affected. > > The idea is novel and useful. It will be resistant against most > attackers. It is much less resistant to attacks by nation states that > could have a record of all traffic among all parties. Of course it is not > an OTP nor is it more secure than other modern systems. If anything, it > is a little less so, at least against those who have all of the traffic > and to the extent that more than two parties start with the same initial > key. Of course, its strength is to permit all members of the population > to begin with the same key while ensuring that members of the population > are safe from each other. It also ensures that compromise of the initial > key is not sufficient to read traffic. One must have all the intervening > traffic. Thus, if one comes to the party late, learning the initial key > will not enable one to read current traffic. > > >OTOH, I saw a press-release on Cypherpunks a week or two back that > >claimed Whitfield Diffie and David Kahn had both examined the algorithm > >under NDA, and both were blown away by it. OTOOH, I don't know how much > >Diffie and Kahn know about TCP/IP. > > Diffie knows enough; Kahn less. However, both are geniuses and know what > they need to know. As to their being "blown away," I tend to doubt it. > The idea is useful but not revolutionary. > > >We'll know for sure when they release the details of the spec. And, if > >they go to the logical conclusion of all this secrecy and they *don't* > >release the spec, it won't be worth a bucket of warm snake oil. > > If they have applied for a patent and if the effectiveness of the scheme > does not rely upon secrecy of the scheme, then of course there is no > reason for secrecy. They sent me an evaluation copy of the program and > have been fairly open in discussing it. (No one has suggested an NDA or > even that there were any secrets involved.) While for security I would > rather have Lotus Notes or Secure Exchange, for ease of administration > this program has advantages. > > The product is interesting and less bogus than your meters might lead you > to believe. Few of us would like to have our products evaluated strictly > on the basis of press releases and reports. > > I believe that the scheme infringes patents of which I am aware. > > >

1 0

Internet Security Review
by Doug Hughes 17 Dec '03

17 Dec '03

Just got a copy via mail today. Boy, Dorothy Denning seriously dings Tim May in this issue. Interesting reading to know what the other side is up to nonetheless. She uses some reasoning that will be compelling to many. Doug Hughes Engineering Network Services doug(a)eng.auburn.edu Auburn University

1 0

(Fwd) DIGITAL CASH IN AN ELECTRONIC WORLD -Reply
by Kawika Daguio 17 Dec '03

17 Dec '03

Sir, I am still lurking on the Information Railroad(TM) I am still trying to preserve privacy while maintaining accountability for all parties. Technical solutions are insufficient, no matter how innovative. My greatest problem today is the lack of sophistication of decisionmakers. Very few people understand the technology, economics, and politics of electronic commerce. Keeping governments from making the wrong decisions is difficult. Keeping bankers from doing the same is even more difficult. Most of the discussion occurs between bank marketing and R&D types. Compliance, operations, security, risk management, and legal counsel units within banks are often uninformed about the efforts of the technology delivery groups. It is also difficult to offer financial services to the new world. It is not easy to "know your customer," evaluate risks, and price the risks when you cannot verify their identity or reach them easily. Bankers prefer orderly environments to anarchy. So do governments. ****Extremely Personal Observation***** So do I. I like privacy, I do not need true anonymity nor do I wish to engage in significant interaction or be exposed to anonymous persons. IF SOMEONE WEARING A HOOD OR A MASK COMES TO MY DOOR THEY WILL BE AUTOMATICALLY VIEWED AS AN IMMEDIATE THREAT. I may classify non-anonymous persons as threats after evaluating available information. Banks and governments will similarly look askance at those who wish to wear masks when engaging in commerce. Respectfully, Kawika Daguio THE ABOVE ARE MY PERSONAL OBSERVATIONS NO ONE IN SHOULD ATTRIBUTE THE SENTIMENTS EXPRESSED TO THE ASSOCIATION OR OUR MEMBERS. >>> Timothy C. May <tcmay(a)got.net> 10/22/95, 11:19pm >>> I saw this on the Cyberia list. Those of you near Washington, D.C. may find this worth attending. By the way, one of the speakers, Kawika Daguio, was once on this list (and may still be, though I haven't seen posts from him in a while). --Tim May >Date: Sun, 22 Oct 1995 17:04:32 -0400 >Errors-To: thardy(a)mail.wm.edu >Reply-To: cyberia-l(a)warthog.cc.wm.edu >Originator: cyberia-l(a)listserv.cc.wm.edu >Sender: cyberia-l(a)warthog.cc.wm.edu >Precedence: bulk >From: "Cleveland Thornton" <thornton(a)legalbits.com> >To: Multiple recipients of list <cyberia-l(a)warthog.cc.wm.edu> >Subject: (Fwd) DIGITAL CASH IN AN ELECTRONIC WORLD >X-Listserver-Version: 6.0 -- UNIX ListServer by Anastasios Kotsikonas > > >For those in the Washington, DC area, you may find the following >meeting of interest, > > > >------- Forwarded Message Follows ------- >Date: Sat, 21 Oct 1995 21:54:36 -0400 (EDT) >From: Andrew Grosso <agrosso(a)access.digex.net> >To: Cleveland Thornton <cthornto> >Subject: Please Post > > THE FUTURE OF MONEY: > DIGITAL CASH IN AN ELECTRONIC WORLD > > The evolution of money has now completed >a one hundred eighty degree turn from the point >where our economy began: from a barter marketplace; >to paper currency; and, today, to pure information >exchanged globally over telecommunications lines. >Money is digital, and can be created, utilized, >and transmitted by individuals and companies, as >well as by governments. > > On Thursday, November 2, at noon, the >Computer Crime Subcommittee of the ABA will host >a luncheon program which will examine the birth >and promise of digital cash. The speakers repre- >sent all three of the important organizations >participating in this venture: designers, bankers, >and governments: >

1 0

Internet Security Review
by Connie Sadler 17 Dec '03

17 Dec '03

Subject: Internet Security Review Date: Mon, 23 Oct 1995 15:20:23 PST A1-type: DOCUMENT Importance: normal >Just got a copy via mail today. Boy, Dorothy Denning seriously dings >Tim May in this issue. Interesting reading to know what the other side >is up to nonetheless. She uses some reasoning that will be compelling to >many. >Doug Hughes Engineering Network Services >doug(a)eng.auburn.edu Auburn University Doug, Could you possibly expand on this a little bit? I don't usually see this publication. Thanks! Connie

1 0