Interesting. Unless some clever at jobs were involved, this was likely not
written by Ian or Ben. I can vouch that Ian was not near a computer at the
time the second message (with the complete signature) was posted, and Ben
was somewhere over the Atlantic in an airplane, unlikely to be reading his
mail. Lance has probably been too busy with Anonymizer 2.0 to be a good
choice, and I also suspect that Pr0duct Cypher is the same as one of the
people in that list. I'll put my money on the author being one of the last
three people in that list.




                                                                                       
                                                            
                      Adam Back                                                        
                                                            
                      <adam@cypherspace        To:       Anonymous User 
<[EMAIL PROTECTED]>                                           
                      .org>                    cc:       [EMAIL PROTECTED], 
[EMAIL PROTECTED], Adam Back <[EMAIL PROTECTED]>                
                      Sent by:                 Subject:  Re: Signing as one member of 
a set of keys                                                
                      owner-cypherpunks                                                
                                                            
                      @lne.com                                                         
                                                            
                                                                                       
                                                            
                                                                                       
                                                            
                      08/09/2002 12:11                                                 
                                                            
                      PM                                                               
                                                            
                                                                                       
                                                            
                                                                                       
                                                            



Very nice.

Nice plausible set of candidate authors also:

pub  1022/5AC7B865 1992/12/01  [EMAIL PROTECTED]
pub  1024/2B48F6F5 1996/04/10  Ian Goldberg <[EMAIL PROTECTED]>
pub  1024/97558A1D 1994/01/10  Pr0duct Cypher <alt.security.pgp>
pub  1024/2719AF35 1995/05/13  Ben Laurie <[EMAIL PROTECTED]>
pub  1024/58214C37 1992/09/08  Hal Finney <[EMAIL PROTECTED]>
pub  1024/C8002BD1 1997/03/04  Eric Young <[EMAIL PROTECTED]>
pub  1024/FBBB8AB1 1994/05/07  Colin Plumb <[EMAIL PROTECTED]>

Wonder if we can figure out who is most likely author based on coding
style from such a small set.

It has (8 char) TABs but other wise BSD indentation style (BSD
normally 4 spaces).  Also someone who likes triply indirected pointers
***blah in there.  Has local variables inside even *if code blocks*
eg, inside main() (most people avoid that, preferring to declare
variables at the top of a function, and historically I think some
older gcc / gdb couldn't debug those variables if I recall).  Very
funky use of goto in getpgppkt, hmmm.  Somewhat concise coding and
variable names.

Off the cuff guess based on coding without looking at samples of code
to remind, probably Colin or Ian.

Of course (Lance Cottrell/Ian Goldberg/Pr0duct Cypher/Ben Laurie/Hal
Finney/Eric Young/Colin Plumb) possibly deviated or mimicked one of
their coding styles.  Kind of interesting to see a true nym in there
also.

Also the Cc -- Coderpunks lives?  I think the Cc coderpunks might be a
clue also, I think some of these people would know it died.  I think
that points more at Colin.

Other potential avenue might be implementation mistake leading to
failure of the scheme to robustly make undecidable which of the set is
the true author, given alpha code.

Adam

On Fri, Aug 09, 2002 at 03:52:56AM +0000, Anonymous User wrote:
> This program can be used by anonymous contributors to release partial
> information about their identity - they can show that they are someone
> from a list of PGP key holders, without revealing which member of the
> list they are.  Maybe it can help in the recent controvery over the
> identity of anonymous posters.  It's a fairly low-level program that
> should be wrapped in a nicer UI.  I'll send a couple of perl scripts
> later that make it easier to use.

Reply via email to