- cypherpunks-legacy - lists.cpunks.org

Re: Status of Cypherpunks list sites?
by Antonomasia 17 Dec '03

17 Dec '03

TCMay wrote: > Not too long ago I was subscribed to the "cypherpunks(a)algebra.com" address, > and the list stopped flowing to me for a day or so. I resubbed under > "cypherpunks(a)cyberpass.net." I noticed that Igor Chudov said he was taking > a hiatus from the Net and lists, so I wondered if this meant his support > for his site was either being dropped or might be subject to more frequent > outages. I re-subscribed to the algebra list when I returned from HIP97 and in fact got onto the ssz list. Seems like Igor diverted the subscription. Comments, Igor ? > And shouldn't we all be making a more serious effort to drop the use of the > "cypherpunks(a)toad.com" address, as John said some months back that he would > support forwarding stuff for a while, but not necessarily forever. As it > is, it just adds another hop and another potential weak link. Yes. -- ############################################################## # Antonomasia ant(a)notatla.demon.co.uk # # See http://www.notatla.demon.co.uk/ # #### !!! PGP 5.0 beta available now at ftp.replay.com !!! ####

2 1

Re: Cyphernomicon, and a section on Escrow and Reputations
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:13 AM 9/2/95, Dar Scott wrote: >After several tries I was not able to get this. Has anyone made it >available in an alternate location? > >Dar >(list newbie) > >=========================================================== >Dar Scott Home phone: +1 505 299 9497 > >Dar Scott Consulting Voice: +1 505 299 5790 <--- >8637 Horacio Place NE Email: darscott(a)aol.com >Albuquerque, NM 87111 dsc(a)swcp.com > Fax: +1 505 898 6525 >http://www.swcp.com/~correspo/DSC/DarScott.html Help me out here, Dar... You list a Web site in your sig, so presumably you have the right tools to browse the Web. And I listed two Web sites that have the Cyphernomicon. What am I missing? Browsing the Web versions, especially the HTMLized version by Rochkind at http://www.oberlin.edu/~brchkind/cyphernomicon/ is a much better way to read it than by downloading the text version. Nevertheless, if someone wants to copy the CP-FAQ file to their ftp site, I have no real objections at this time. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

No Subject
by dsc＠swcp.com 17 Dec '03

17 Dec '03

Timothy May wrote concerning Cyphernomicon, >You list a Web site in your sig, so presumably you have the right tools to >browse the Web. And I listed two Web sites that have the Cyphernomicon. > >What am I missing? Thanks for the advice. Here are the two missing pieces. The first is financial, but might be really psychological. I buy PPP service locally and it is hard for me to casually browse with the meter runing in the corner of the screen even at less than a penny a minute. (And any document that mentions David Friedman probably needs study and that takes more time.) The second is that even at the wee hours of the morning I kept getting refusals from www.oberlin.edu and I couldn't get past the table of contents. I had hoped to collect these as I browse 'em to avoid delays (14.4), hicups and online time in later reading. (I didn't even try the large html--I suspect my browsers will gag on it.) The third of the two reasons is some vague notion of taking it to lunch or of anotating the file or the hard copy. In case it wasn't clear--I couldn't get a peep out of netcom. My plan is to try oberlin again and if that bogs down, try getting the copy at the location mentioned by Lou Poppler--or any other location mentioned this weekend. Or respond to advice on the best times to try netcom. I appologize for the implicit assumption in my question about alternate sites that people had your permission to copy the file to their ftp sites and am pleased that you explicitly gave that blessing in your recent mail. Thanks, Dar (list newbie) =========================================================== Dar Scott Home phone: +1 505 299 9497 Dar Scott Consulting Voice: +1 505 299 5790 <--- 8637 Horacio Place NE Email: darscott(a)aol.com Albuquerque, NM 87111 dsc(a)swcp.com Fax: +1 505 898 6525 http://www.swcp.com/~correspo/DSC/DarScott.html My preference for attached files are in this order: AOL, Mime, Binhex4, PGP, UUencode ===========================================================

1 0

Cyphernomicon for ftp
by Jeff Simmons 17 Dec '03

17 Dec '03

I remember the trouble I had finding a text copy of the Cyphernomicon ... So until someone posts it on a site with higher bandwidth, it's available at: ftp.goblin.punk.net/pub/docs/cypherpunk.faq.gz or cypherfq.zip We're talking 400K+ over a 28.8 modem, so don't expect much in the way of speed ... -- Jeff Simmons jsimmons(a)goblin.punk.net

1 0

INFOTECH WEEKLY - August 18, 1997
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: nickkean.ihug.co.nz: p46-chch2.chch.ihug.co.nz [207.214.13.46] didn't use HELO protocol Date: Wed, 20 Aug 1997 13:02:50 -0400 From: Blair Anderson <"Blair Anderson"@nickkean.ihug.co.nz> Organization: Techno Junk and Grey Matter [http://www.isdn.now.co.nz] MIME-Version: 1.0 To: dcsb(a)ai.mit.edu Subject: INFOTECH WEEKLY - August 18, 1997 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Blair Anderson <"Blair Anderson"@nickkean.ihug.co.nz> Summary Report on New Zealand encryption export restrictions under Wassanar/COCOM international agreements... http://www.infotech.co.nz/spreports/asaint.html -- Blair Anderson mailto:blair@technologist.com "get a piece of the click" Electronic Commerce, Encryption and Electronic Rights Management Techno Junk and Grey Matter mailto:Benefit@isdn.now.co.nz Corporate Technology Consultants 50 Wainoni Road, Christchurch, New Zealand phone ++ 64 3 3894065 fax ++ 64 3 3894065 Web Page(s): http://www.isdn.now.co.nz/INDEX.HTM -------- Caught in the Net for 25 years ----------- For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: MIT distributing PGPfone -Reply
by terrell＠sam.neosoft.com 17 Dec '03

17 Dec '03

>PGPfone was out of the U.S. less than 3 hours after first appearing >publically at the MIT site. > >As I noted in a previous message, MIT takes various steps to ostensibly >protect against export, but there is clearly no practical means of stopping >export once the software has been received by someone. > >I got my copy of PGPfone 16 hours after its public release, via an >anonymous person who posted it on the Cypherpunks list through an anonymous >remailer. Of course that list is distributed to more than 20 foreign >countries, so "export" happened that way, as well as by other means. > >--Tim May > As tim May's .sig should say: "National borders are not even speed bumps on the information highway." Buford C. Terrell 1303 San Jacinto Street Professor of Law Houston, TX 77002 South Texas College of Law voice (713)646-1857 terrell(a)sam.neosoft.com fax (713)646-1766

1 0

Re: PGPfone over Appletalk
by Hal 17 Dec '03

17 Dec '03

From: "Rev. Mark Grant" <mark(a)unicorn.com> > Can someone tell me how to run PGPfone over Appletalk ? The > documentation says that support has been added for this release, and > there's a preferences box to check to use it, but there's no information > I can find in the documentation on how to initiate a call over > Appletalk.. it just says to enter a telephone number to dial. If I > press 'Connect' without entering anything it hangs up the Mac. > > How do I tell it which machine I want to connect to ? I changed the preferences box setting, but then I exited and restarted the program so that it came up in "appletalk" mode. This is probably the step you are missing. I did this on two different machines, and then when I clicked connect it no longer tried to open the modem, instead it put up a dialog box allowing me to click on the machine running the other PGPfone. I did that and it connected OK. There is a nice audio simulation of an old-fashioned telephone bell ringing. Unfortunately my appletalk "network" consists solely of my power mac and an old 68030 mac laptop, the latter apparently being underpowered for PGPfone. The voice quality changed occasionally as the software adaptively tried different coders, and the powermac instance of the program finally printed a message saying that the list of coders had been exhausted. Hal

1 0

Unclear on Bell / Re: The Real Bell Issue / Re: Bell, etc
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > One lesson, or reminder, I take from the Bell matter is this: > > Avoid doing stupid and petty things like using multiple Social Security > numbers, evading taxes, and releasing stink bombs into government (or > other) offices. > > (These are things Bell has pled on, as I recall the transcripts, so > there's little doubt about them. And had he pled not guilty and gone to > trial, apparently the evidence would've convicted him on most of the > charges. Perhaps this is why he pled.) I am unclear on something. Did the government imprison without bail a citizen who evaded taxes and made a government office smell bad, or did the government allow a terrorist who was actively plotting to overthrow the government to plead guilty to inconsequential charges? If I get arrested for plotting to Nuke D.C., should I hire Bell's lawyer and try to get it reduced to jaywalking? Or should I avoid jaywalking to prevent getting arrested for plotting to Nuke D.C.? ???Monger

1 0

Re: O.J. ObCrypto: Fuhrman's Folly Fans Fakery Fears...
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

BS> For the problem that started this discussion, though, there's no good solution. BS> Since the Bad Guys _can_ encrypt a message to you with your signature key, BS> and send it to you by anonymous remailer, they can plant a reason to suspect BS> that you may have evidence encrypted with that key. You've got it backwards. The problem that I originally posited was a corrupt key escrow agent using my signature key to forge a document. The fact that my signature pubkey could be used to encrypt messages to me is not particularly relevant. My employer could set up filters to keep me from recieving email on company time that is not encrypted to a key that the corporate escrow authority has in its possession. NBD. My concern here is with the NGACK situation. Companies have valid reasons to want escrow for their own purposes. I'm just warning people not to accept a signature key being escrowed by =anyone=. When you create a key to be escrowed, make sure the userid includes something like [Not Valid For Signatures]. * Pro Choice on Abortion. * No choice on Education. * Huh? --- * Monster(a)FAmend.Com *

1 0

Cyphernomicon, and a section on Escrow and Reputations
by tcmay＠got.net 17 Dec '03

17 Dec '03

I've been asked by two people in e-mail what the "Cyphernomicon" I referred to in a recent message is. It's been a while since I mentioned it, so I'll give some details. In late 1993 I foolishly committed to doing a "Cypherpunks FAQ," as several earlier attempts had gone nowhere. And since the most frequently asked question of all is always "Where's the FAQ?," followed closely by "How come there isn't a FAQ?," the need was there. (As it turns out, the people most in need of a FAQ seldom read FAQs, but this is another story.) I finished my first release, a megabyte-sized file done in MORE, a powerful outline processor (which enabled me to maintain notes, make cross-references, and generally manage such a huge writing project). I released it last year, and put it in my anonymous ftp account at ftp.netcom.com, in the directory /pub/tc/tcmay, as the file CP-FAQ. Netcom is often very crowded, though. I know of a couple of alternative places. A very nice job of HTMLizing it was done by Jonathan Rochkind, a Cypherpunk, and is located at the URL http://www.oberlin.edu/~brchkind/cyphernomicon/ Another URL, which is just one large file, is http://www.swiss.ai.mit.edu/6095/articles/cyphernomicon/CP-FAQ The recent thread about the dangers of anonymity and the role of escrow agents as possible fixes is a good excuse to include one of my sub-sub-subsections, to also illustrate the structure and expected contents. Enjoy it. But, please, don't nag me with suggestions that I should do, or should have done, the thing in HTML, or using your favorite tool set. --Tim May Crypto Anarchy: Escrow Agents and Reputations 16.24.1. Escrow Agents as a way to deal with contract renegging - On-line clearing has the possible danger implicit in all trades that Alice will hand over the money, Bob will verify that it has cleared into hisaccount (in older terms, Bob would await word that his Swiss bank account has just been credited), and then Bob will fail to complete his end of the bargain. If the transaction is truly anonymous, over computer lines, then of course Bob just hangs up his modem and the connection is broken. This situation is as old as time, and has always involved protcols in which trust, repeat business, etc., are factors. Or escrow agents. - Long before the "key escrow" of Clipper, true escrow was planned. Escrow as in escrow agents. Or bonding agents. - Alice and Bob want to conduct a transaction. Neither trusts the other; indeed, they are unknown to each other. In steps "Esther's Escrow Service." She is _also utraceable_, but has established a digitally-signed presence and a good reputation for fairness. Her business is in being an escrow agent, like a bonding agency, not in "burning" either party. (The math of this is interesting: as long as the profits to be gained from any small set of transactions is less than her "reputation capital," it is in her interest to forego the profits from burning and be honest. It is also possible to arrange that Esther cannot profit from burning either Alice or Bob or both of them, e.g., by suitably encrypting the escrowed stuff.) - Alice can put her part of the transaction into escrow with Esther, Bob can do the same, and then Esther can release the items to the parties when conditions are met, when both parties agree, when adjudication of some sort occurs, etc. (There a dozen issues here, of course, about how disputes are settled, about how parties satisfy themselves that Esther has the items she says she has, etc.) 16.24.2. Use of escrow services as a substute for government + as in underworld deals, international deals, etc. - "Machinery of Freedom" (Friedman), "The Enterprise of Law" (Benson) - "It is important to note in any case that the use of third- party escrow as a substitute for Government regulation was a feature of the Northern European semi-anarchies of Iceland and Ireland that have informed modern libertarian thought." [Duncan Frissell, 1994-08-30] 16.24.3. Several people have raised the issue of someone in an anonymous transaction simply taking the money and not performing the service (or the flip side). This is where _intermediaries_ come into the picture, just as in the real worl (bonds, escrow agents, etc.). 16.24.4. Alice and Bob wish to conduct an anonymous transaction; each is unknown to the other (no physical knowledge, no pseudonym reputation knowledge). These "mutually suspicious agents," in 1960s- and 70s-era computer science lingo, must arrange methods to conduct business while not trusting the other. 16.24.5. Various cryptographic protocols have been developed for such things as "bit commitment" (useful in playing poker over the phone, for example). I don't know of progress made at the granularity of anonymous transactions, though. (Though the cryptographic protocol building blocks at lower levels--such as bit commitment and blobs--will presumably be used eventually at higher levels, in markets.) 16.24.6. I believe there is evidence we can shorten the cycle by borrowing noncryptographic protocols (heresy to purists!) and adapting them. Reputations, for example. And escrow agents (a form of reputation, in that the "value" of a bonding entity or escrow agent lies in reputation capital). 16.24.7. if a single escrow agent is suspected of being untrustworthy (in a reputation capital sense), then can use _multiple_ escrows - with various protocols, caveat emptor - n-out-of-m voting schemes, where n escrow agents out of m are required to complete a transaction - hard to compromise them all, especially if they have no idea whether they are being "legitimately bribed" or merely pinged by a reputation-rating service - Hunch: the work of Chaum, Bos, and the Pfaltzmanns on DC- nets may be direcly applicable here...issues of collusion, sets of colluders, detection of collusion, etc. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1