- cypherpunks-legacy - lists.cpunks.org

Seek-and-Destroy
by declan＠well.com 17 Dec '03

17 Dec '03

Do NOT visit: http://xxx.lanl.gov/seek-and-destroy The sysadmins for xxx.lanl.gov don't like robots visiting their web site, so they've published a statement on indexing at: http://xxx.lanl.gov/RobotsBeware.html Remember, do NOT click on: http://xxx.lanl.gov/seek-and-destroy -Declan

5 4

Global Government Access to Keys (GGAK)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:37 AM 7/15/96, Bill Frantz wrote: >At 2:05 PM 7/13/96 +0000, Deranged Mutant wrote: >>Or what if some terrorist was using keys escrowed in a country that >>sponsered terrorist acts? > >Deranged Mutant is absolutely right. There are about 150 (or so) >governments in the world. When people talk about making keys available to >government (or law enforcement), always ask, "Which governments can access >these keys?" If I were a non-French corporation, I would feel distinctly >nervous if the answer included France. (There are a number of other >countries where the security services have also been suspected of engaging >in industrial espionage.) There are some interesting "public relations" stunts we can use to undermine support for the concept of GAK: * Announce in corporate press releases (for some Cypherpunkish company?) that "As per the laws of the Libyan Arab Jamahiriya, we have provided Col. Qaddaffi's Office of People's Security with our encryption keys for all communications passing into, out of, or over Libyan soil." (This would likely horrify the U.S. security establishment, were it to be actually true. But it is of course essentially symmetrical with the fear those in Germany, India, Iraq, etc. would have if told to deposit copies of their keys with the U.S. National Security Agency or any other "trusted third party" mandated.) (I can't resist another aside. Sorry. In addition to the abuse of the English language with using "escrow" in this warped sense, we now have "trusted third party" used in a warped sense. "We're not saying _you_ trust them, we're saying the NSA trusts them.") * "The U.S. has designated J. P. Morgan and Company as a Designated Trusted Authority for the deposit of encryption keys for Jewish persons wishing to communicate in primarily Islamic countries." (Making the point that any international key escrow scheme which complies with various nation's laws must collide with American values about such things. In many Arab countries, Jews are restricted in various ways. Do we want the government of the U.S. participating in such restrictions? And what about the Arab boycott? It may be in decline now, but not with all countries.) * "The United States Office of Communications Security has turned over to the government of Singapore a list of all persons suspected of circumventing Singaporan law regarding encryption." (ObNazi Reference: One can imagine how a GAK program would've worked during the Third Reich. Not only would communications have been read, regardless of the supposed legal protections, but GAK would have been used to compile contact lists of people to be rounded up. Sort of the way the U.S. government violated the laws about the U.S. Census to illegally use census records to locate "Japs" for assignment to concentration camps.) And so forth, concentrating on the essentially intractable problem of how to "escrow" keys with foreign governments imimical to Western values. (The crypto literature, esp. the Proceedings of the Crypto Conference, circa the mid-80s, refers to this as the "rogue government" problem, esp. with regard to the issuance of false "is-a-person" credentials. That is, suppose a Global Identification Infrastructure (GII) is implemented, consistent with Global Government Access to Keys (GGAK). What about some countries, whether they be the Free Republic of Libertaria or the Libyan Arab Jamahiriya, who either refuse to play along or who subvert the system with false information? What if the United States itself issues false identities to its secret agents, its informants, and its 60,000+ people in the so-called Witness Security program?) There are other aspects of GAK which also collide with basic values. For example, consider several classes of communications we consider "privileged": -- attorney-client discussions, in person or over phone lines. -- doctor-patient discussions -- psychiatrist--patient discussions -- priest--penitent confessions Are the computer communications (likely in the future to increase, even if not common now) of these groups to be GAKked? Even with "safeguards," the priest--penitent relationship will be forever compromised, with neither side knowing whether some secret policemen is listening. These are not new issues; we talked about them several years ago. But now that GAK is being discussed again.... --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

DCSB: Betting on the Future
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: rah(a)tiac.net Mime-Version: 1.0 Date: Mon, 15 Jul 1996 11:26:33 -0400 To: dcsb(a)ai.mit.edu From: Robert Hettinga <rah(a)shipwright.com> Subject: DCSB: Betting on the Future Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Robert Hettinga <rah(a)shipwright.com> -----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston Presents Duane Hewitt Idea Futures "Betting on the Future" Tuesday, August 6, 1996 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Duane says: > I am a Molecular Biologist by trade but I am fascinated by all aspects of > science and technology and especially their long term ramifications. I am > completing my Master's Degree thesis as well as working full time at the > University of Massachusetts at Amherst. I have some part time work > maintaining Web pages and I have been involved with the Idea Futures Web > site from the very beginning. I also am currently working on a hypertext > reference on the biology of aging. Many of these interest can be accessed > from my home page at http://www.lucifer.com/~duane > > I will introduce the concept of Idea Futures which is a market in which > the odds of future events are set by betting. It is designed to reward > those who can accurately forecast future outcomes. It has been recognized > by the Austrian Broadcast System, and the Point Survey and mentioned in > _Wired_. I will discuss the implications of such a market as well as some > of the history behind it. I will also propose how a similar market could > be used to construct a market based voting system. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, August 6, 1996 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have dress code: jackets and ties for men, and "appropriate business attire" for women. We need to receive a company check, or money order, (or if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, August 3, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Planned speakers for the following few months are: September Tatsuo Tanaka Some Economics of Digital Cash October Philippe LeRoux Stock Exchanges and the Web We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, rah(a)shipwright.com . For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMepi6vgyLN8bw6ZVAQFsOwP/UuOoWa0LUEyY4dmQ21KIR4GwhB6PurSa L97eVsbVOigP+TVPFJX7RKqYhCxIL8gDUnSRimGnATmhLo5wdE0UXvgakeGaD5s+ vKPfhuaG9/MnuZvWFbBEZOrTTKqVE8bfoU2yiw6xTvhyQY0lDA2BSO8vjip28nOA 0Wkuh1VUBhY= =/5+9 -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from this list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/

1 0

random numbers reverse-engineering
by Jüri Kaljundi 17 Dec '03

17 Dec '03

Is there somewhere where I could find more information on finding out RNG algorithms or reverse-engineering RNG's, once you have some quantity of random numbers generated by some RNG? For example a local bank is giving each customer a list with 600 one-time passwords (6-digit decimal numbers), and I believe they use the account number as (one of the) seeds for the RNG. Is there some program that I could use, together with the numbers and possible seed, to try to break the RNG? Jüri Kaljundi AS Stallion jk(a)stallion.ee

1 0

Oh my God...
by Jim Thompson 17 Dec '03

17 Dec '03

Forgive me if this has been covered on cypherpunks. I hang out on coderpunks, and this is far too political for that list. Please keep me Cc'd on any discussion on this topic. If true, RSA is dirty, SDI is dirty, Robertson Stevens is dirty, and Ron Brown, Jim Bizdos, Al Gore, John Huang and Sanford Robertson are going to jail. http://www.worldnetdaily.com/smith/980915.comcs.html Jim Thompson / Smallworks, Inc. / jim(a)smallworks.com 512 338 0619 phone / 512 338 0625 fax C++ is like jamming a helicopter inside a Miata and expecting some sort of improvement. -- Drew Olbrich

2 1

Re: How I Would Ban Strong Crypto in the U.S.
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:58 AM 7/15/96 -0400, Raph Levien wrote: >4. Thus, the best leverage for the TLAs to win is to guide the >development of a key management infrastructure with the following >property: if you don't register your key, you can't play. I believe that >this is the true meaning of the word "voluntary:" you're free to make >the choice not to participate. > >5. This is _important_. If you can't get the keys for your >correspondents, you can't use encryption. If they build a key management >infrastructure that actually works, people will use it. The obvious counter is to use the key management infrastructure for authentication, but use a technique like Diffie-Hellman to decide on a session key. I see two problems with this approach: (1) It still allows traffic analysis. (2) It will be difficult to implement for one-way transmissions (e.g. email). A more complex structure would overcome (2) above. Use you GAK key to sign your PGP key. Post your PGP key on the MIT server (or successors), and people who want non-GAKed communication with you would use your PGP key, with the benefit of government approved authentication. I still think this whole GAK thing is going to fail on the, "Which government?" question. I don't see either multi-nationals or their governments wanting to share their secrets with each other, and I don't see how to set up universal GAK to prevent that form of industrial espionage. Also, the key which decodes the GAKed data is just too valuable and too easy to steal. ------------------------------------------------------------------------- Bill Frantz | The Internet may fairly be | Periwinkle -- Consulting (408)356-8506 | regarded as a never-ending | 16345 Englewood Ave. frantz(a)netcom.com | worldwide conversation. | Los Gatos, CA 95032, USA

1 0

Re: Markoff on Clipper III
by Duncan Frissell 17 Dec '03

17 Dec '03

At 10:20 AM 7/15/96 -0700, David Sternlight wrote: >At 3:50 AM -0700 7/15/96, Duncan Frissell wrote: >>At 09:35 PM 7/14/96 -0700, David Sternlight wrote: >> >>>Did you miss the part in the Constitution about "provide for the common >>>defence" >> >>That's a meaningless part of the Preamble. > >Anyone who thinks substantive parts of the Preamble are "meaningless" is >deserving only of contumely. Perhaps you should review your high school >civics course--you did have one of those, yes? > >David > Welcome to the list. Yes my high school Civics class was good. So were my law school Con Law courses. Yes, David I would say you practice "contumely" -- Rudeness or contempt arising from arrogance; insolence. But then so do I. I'll say again, the Preamble speaks of the reasons the drafters of the Constitution had for writing the thing, it does not set forth any powers of the federal government. Goals not means. GAK is a means not a goal. DCF

2 2

d.Comm: Your Login Information
by hotlists＠d-comm.com 17 Dec '03

17 Dec '03

Thank you for logging into d.Comm. At d.Comm we believe a key part of any successful product, magazine or other, is a comprehensive knowledge of the market; in our case our readers. The information you provide us with not only helps us to fine-tune the magazine, but also enables you to manage your information content, through the hotlist section. We therefore wish to thank you once again for helping us to keep d.Comm dynamic. When your World Wide Web browser prompts you for a login and password use the following: Login: cypherpunks Passwd: 107084 URL: http://www.d-comm.com/ (note: your login is case-sensitive) You may end up back at the login when you try to enter a section of d.Comm that you attempted to enter before you received your username. If this happens, please click the reload button on your Web browser. If you have trouble and need some help, please send mail to: hotlists(a)d-comm.com Note: If you wish to change your allotted password, Password management is available at : http://www.d-comm.com/s-bin/hl_passwd If for any reason you encounter any problems, please do not hesitate to contact us. ---------------------------------------------------------------------------- Eddie Hold Editor d.Comm & Communicate The Economist Group http://www.d-comm.com/

2 1

Re: brokers as middlemen
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:48 PM 7/15/96, L. Detweiler wrote: >this reminds me of something else. the stock exchange as it now stands >is not the paradigm of true capitalism as some would have others >believe. in fact I see it as the paradigm of what might be called >"middleman capitalism", a version of capitalism that is rapidly >diminishing and disappearing in the onslaught of the information age. > >essentially, in the new version of capitalism, middlemen who do not >*add*value* to the delivery of a product are going to be increasingly >cut out of the loop. I am not saying *all* middlemen will be cut out, >but many that now exist will be. I agree with Vlad/Larry's points, and this is in one of the other recommendations for the NASDAQ, that it be even further electronic-mediated, with more information made available on bid/ask spreads. The rise of discount brokers, who provide essentially no advice to customers, is part of this "disintermediation." Ditto for electronic trading systems, such as Accu-Trade. >in my opinion, the *stock*broker* as his job is now defined is in many >ways the classic middleman that does not necessarily add value to the >information that flows through his hands. if he is just an agent for >carrying out the demands of clients, then I'd say that this role is >going to disappear as markets become more automated, or rather capital >moves toward stock exchanges that diminish this overhead. however, there >are many brokers that add far many more services than mere >blind investor response, such as analyzing company profitability, >forecasting, etc-- these are adding value imho. Agreed, and this is already happening. >I think the end result of the information age is going to be something >that could be regarded as the ultimate capitalist market-- something >that eliminates all "unnecessary" middlemen. I suspect the stock exchanges >of the future will *not* be regulated because they *cannot* be. it >will be a matter of buyers and sellers choosing the systems that >best suit them regardless of what governments feel is appropriate, fair, >or whatever. I emphatically agree! There is little need for regulation in this new environment, and "reputations matter." And regulation is becoming problematic. (To cite one example. Some are calling for registration and regulation of "investment advice," which is largely unregulated in the U.S. today. That is, I can self-publish a newsletter, "Tim's Stock Picks," and the First Amendment says this can't be restricted (Caveat: But I can't sell "Tim's Legal Advice," "Tim's Earthquake Safety Advice," or "Tim's Medical Advice" to clients...go figure). Some want investment newsletter writers "held accountable." Great, so I'll move my newsletter to Anguilla or Monaco. What do they do then? Stop U.S. subscribers from getting them? Set up postal stings, where illegal investment or medical advice is treated as illegal child porn from Denmark? Use key escrow to monitor received Net traffic?) >its interesting how the restrictions on stock buying and selling are >becoming quite orwellian in the way they are designed to limit >mere information transfer in many cases, it seems. TCM has written >about this far better than I could in previous posts. ("inside trading" >restrictions). Again, I agree. I won't quote anymore of Vlad/Larry's piece, as I agree with it all. (Vznuri should probably "reclaim" his Detweiler personna, so that such good messages as these accrue to his True Name's reputation.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

It's Nobody's Business!
by Whtsametau＠aol.com 17 Dec '03

17 Dec '03

I see things haven't changed much around here. [BIG GRIN!] Stan, bass/vocals Nobody's Business members.aol.com/StanSqncrs/nobiz.html

1 0